/**
 * GET /api/admin/accounts/:sub (accounts.read, ADMIN.md §8): the profile (full email and name), sign-in events when
 * the pool records them, the deletion hold, Handwrite Cloud counts, 30 days of usage and the Voices plan/credits.
 * Writes one `account.view` audit entry per session and account per 15 minutes (no reason needed for the detail).
 *
 * PATCH (name / email changes, accounts.update with step-up) is added to this same file by package 7 (account-actions).
 */
export const GET = adminRoute("accounts.read", async (_request, ctx, { params }: Context) => {
  const { sub } = await params;
  if (!isSub(sub)) throw notFound("Account");
  const detail = await accountDetail(sub);
  if (!detail) throw notFound("Account");
  await recordAccountView(ctx, detail.profile.sub);
  return adminJson(detail);
});