fix: embedding migration, worker error handling, path traversal security, response mismatches (unread-count, plugins, manifests), frontend type safety

frontend/src/api/users.ts

@@ -6,18 +6,46 @@ import { useQuery, useMutation, useQueryClient } from '@tanstack/react-query';
 import { apiGet, apiPost, apiPatch, apiDelete } from './client';
 import { PaginatedResponse } from './types';
 
+// ── Types matching backend schemas ──
+
+export interface UserResponse {
+  id: string;
+  email: string;
+  name: string;
+  role: string;
+  role_id: string | null;
+  is_active: boolean;
+  tenant_id: string;
+}
+
+export interface UserCreate {
+  email: string;
+  name: string;
+  password: string;
+  role?: string;
+  role_id?: string | null;
+  is_active?: boolean;
+}
+
+export interface UserUpdate {
+  name?: string;
+  role?: string;
+  role_id?: string | null;
+  is_active?: boolean;
+}
+
 export function useUsers(page = 1, pageSize = 25) {
   return useQuery({
     queryKey: ['users', page, pageSize],
     queryFn: () =>
-      apiGet<PaginatedResponse<any>>(`/users?page=${page}&page_size=${pageSize}`),
+      apiGet<PaginatedResponse<UserResponse>>(`/users?page=${page}&page_size=${pageSize}`),
   });
 }
 
 export function useUser(id?: string) {
   return useQuery({
     queryKey: ['users', id],
-    queryFn: () => apiGet<any>(`/users/${id}`),
+    queryFn: () => apiGet<UserResponse>(`/users/${id}`),
     enabled: !!id,
   });
 }
@@ -25,7 +53,7 @@ export function useUser(id?: string) {
 export function useCreateUser() {
   const queryClient = useQueryClient();
   return useMutation({
-    mutationFn: (data: any) => apiPost('/users', data),
+    mutationFn: (data: UserCreate) => apiPost('/users', data),
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ['users'] });
     },
@@ -35,7 +63,7 @@ export function useCreateUser() {
 export function useUpdateUser() {
   const queryClient = useQueryClient();
   return useMutation({
-    mutationFn: ({ id, data }: { id: string; data: any }) =>
+    mutationFn: ({ id, data }: { id: string; data: UserUpdate }) =>
       apiPatch(`/users/${id}`, data),
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ['users'] });