feat(cms): improve catalog, editorial recovery and operations

src/lib/services/audit.test.ts

@@ -187,3 +187,24 @@ describe("getAuditLogs", () => {
 		expect(result.rows[0].username).toBe("User #99");
 	});
 });
+
+describe("audit response privacy", () => {
+	it("does not serialize legacy snapshot secrets to the client", async () => {
+		selectRows.mockResolvedValue([
+			{
+				id: 1,
+				userId: 1,
+				diff: null,
+				before: null,
+				after: '{"name":"Alice","password":"secret-value"}',
+			},
+		]);
+		selectCount.mockResolvedValue([{ value: 1 }]);
+		selectUsers.mockResolvedValue([]);
+		const result = await getAuditLogs();
+		expect(JSON.stringify(result.rows)).not.toContain("secret-value");
+		expect(result.rows[0].before).toBeNull();
+		expect(result.rows[0].after).toBeNull();
+		expect(result.rows[0].diff).toContain("Alice");
+	});
+});