chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

Audit-marathon close: 14 waves + W10 QA + reconcile. Perf fix (analytics 9 s -> 2-3 s), Zod multi-issue rollout (41 routes), Withings parked-state automation, mobile-UI WCAG 2.5.5 close, QoL i18n + offline banner + account delete, security PII drop + replay-injection scan. Migration 0075 required. Tests 4815 -> 5076.

src/app/api/feedback/__tests__/route.test.ts

@@ -103,3 +103,53 @@ describe("POST /api/feedback bug-report toggle gate", () => {
     expect(prisma.feedback.create).toHaveBeenCalledTimes(1);
   });
 });
+
+describe("POST /api/feedback — 422 multi-issue (v1.4.43 W6)", () => {
+  it("surfaces TWO simultaneous validation errors", async () => {
+    vi.mocked(prisma.appSettings.findUnique).mockResolvedValue({
+      bugReportEnabled: true,
+    } as never);
+    // subject too short + description too short.
+    const res = await POST(
+      jsonRequest({
+        category: "BUG",
+        subject: "x",
+        description: "short",
+      }) as never,
+    );
+    expect(res.status).toBe(422);
+    const body = (await res.json()) as {
+      data: null;
+      error: string;
+      details: {
+        issues: Array<{ path: string; code: string; message: string }>;
+      };
+    };
+    expect(body.data).toBeNull();
+    expect(body.error).toBe("Validation failed");
+    expect(body.details.issues.length).toBeGreaterThanOrEqual(2);
+    for (const issue of body.details.issues) {
+      expect(Object.keys(issue).sort()).toEqual(["code", "message", "path"]);
+    }
+  });
+
+  it("surfaces THREE simultaneous validation errors", async () => {
+    vi.mocked(prisma.appSettings.findUnique).mockResolvedValue({
+      bugReportEnabled: true,
+    } as never);
+    // bad subject + bad description + bad screenshot.
+    const res = await POST(
+      jsonRequest({
+        category: "BUG",
+        subject: "x",
+        description: "short",
+        screenshot: "not-a-data-url",
+      }) as never,
+    );
+    expect(res.status).toBe(422);
+    const body = (await res.json()) as {
+      details: { issues: Array<unknown> };
+    };
+    expect(body.details.issues.length).toBeGreaterThanOrEqual(3);
+  });
+});

src/app/api/feedback/route.ts

@@ -9,6 +9,7 @@ import { apiHandler, requireAuth } from "@/lib/api-handler";
 import {
   apiError,
   apiSuccess,
+  returnAllZodIssues,
   safeJson,
   getClientIp,
 } from "@/lib/api-response";
@@ -45,7 +46,8 @@ export const POST = apiHandler(async (request: NextRequest) => {
 
   const parsed = createFeedbackSchema.safeParse(body);
   if (!parsed.success) {
-    return apiError(parsed.error.issues[0].message, 422);
+    // v1.4.43 W6 — multi-issue 422.
+    return returnAllZodIssues(parsed.error, 422);
   }
 
   const feedback = await prisma.feedback.create({