List Users

List users, optionally searched and paged (admin).

q matches email, first name or last name, case-insensitively. total counts the matches before paging, so a client can page without guessing where the list ends.

limit is unbounded by default, deliberately. This route carries two eager loads and returns every account on the instance, which is why the admin surface plan says not to build a screen on it — but bounding it by default is not free: the status board's admin check (tools/status-smoke) GETs this route with no parameters and asserts every ADMIN_USERS entry is present, and the ordering is by email, so a default page would drop admins off the end and fail a production monitor for a reason nobody would connect to this change. New callers pass a limit; the old contract is unchanged.