Wrap first-user admin check in transaction to prevent race condition

Co-authored-by: xCyanGrizzly <53275238+xCyanGrizzly@users.noreply.github.com>

src/app/(auth)/register/actions.ts

@@ -22,24 +22,26 @@ export async function registerUser(input: unknown): Promise<ActionResult<{ id: s
   const hashedPassword = await bcrypt.hash(parsed.data.password, 10);
 
   // First user to register becomes ADMIN (self-hosted owner)
-  const userCount = await prisma.user.count();
+  const user = await prisma.$transaction(async (tx) => {
-  const role = userCount === 0 ? "ADMIN" : "USER";
+    const userCount = await tx.user.count();
+    const role = userCount === 0 ? "ADMIN" : "USER";
 
-  const user = await prisma.user.create({
+    return tx.user.create({
-    data: {
+      data: {
-      name: parsed.data.name,
+        name: parsed.data.name,
-      email: parsed.data.email,
+        email: parsed.data.email,
-      hashedPassword,
+        hashedPassword,
-      role,
+        role,
-      settings: {
+        settings: {
-        create: {
+          create: {
-          lowStockThreshold: 10,
+            lowStockThreshold: 10,
-          currency: "USD",
+            currency: "USD",
-          theme: "dark",
+            theme: "dark",
-          units: "metric",
+            units: "metric",
+          },
         },
       },
-    },
+    });
   });
 
   return { success: true, data: { id: user.id } };