Function GET

apps/web/src/app/admin/api/users/route.ts:33–254

(
  request: NextRequest
)

import { captureException } from '@sentry/nextjs';

export async function GET(
  request: NextRequest
): Promise<NextResponse<{ error: string } | UsersApiResponse>> {
  // Parse query parameters outside try block for error reporting
  const { searchParams } = new URL(request.url);
  const page = Math.max(1, parseInt(searchParams.get('page') || '1'));
  const limit = Math.min(100, Math.max(1, parseInt(searchParams.get('limit') || '25')));
  const sortBy = (searchParams.get('sortBy') || 'created_at') as SortableField;
  const sortOrder = searchParams.get('sortOrder') === 'asc' ? 'asc' : 'desc';
  const searchTerm = searchParams.get('search')?.trim() || '';
  const notesSearchTerm = searchParams.get('notesSearch')?.trim() || '';
  const blockedStatus = searchParams.get('blockedStatus');
  const orgMembership = searchParams.get('orgMembership');
  const paymentStatus = searchParams.get('paymentStatus');
  const autoTopUp = searchParams.get('autoTopUp');

  try {
    // Check authentication and admin status
    const { authFailedResponse } = await getUserFromAuth({ adminOnly: true });
    if (authFailedResponse) {
      return authFailedResponse;
    }

    const hasValidationStytch = searchParams.get('hasValidationStytch');
    const hasValidationNovelCard = searchParams.get('hasValidationNovelCard');

    // Validate sortBy field
    const sortField = sortableFields.includes(sortBy) ? sortBy : 'created_at';

    // Build where conditions
    const conditions = [];

    // User-specific search condition
    if (searchTerm) {
      const referralCodeOwnerId = (
        await db
          .select({ kilo_user_id: referral_codes.kilo_user_id })
          .from(referral_codes)
          .where(eq(referral_codes.code, searchTerm))
          .limit(1)
      )[0]?.kilo_user_id;

      conditions.push(
        or(
          ilike(kilocode_users.google_user_email, `%${searchTerm}%`),
          ilike(kilocode_users.google_user_name, `%${searchTerm}%`),
          eq(kilocode_users.id, searchTerm),
          eq(kilocode_users.stripe_customer_id, searchTerm),
          eq(kilocode_users.openrouter_upstream_safety_identifier, searchTerm),
          eq(kilocode_users.openrouter_downstream_safety_identifier, searchTerm),
          eq(kilocode_users.vercel_downstream_safety_identifier, searchTerm),
          ...(referralCodeOwnerId ? [eq(kilocode_users.id, referralCodeOwnerId)] : [])
        )
      );
    }

    // Notes and blocked reason search condition
    if (notesSearchTerm) {