mirror of
https://github.com/cpvalente/ontime.git
synced 2026-08-04 15:08:01 +00:00
Claude
972a246bb6
Adds Zod as the validation library for apps/server (in place of express-validator), scoped here to a low-risk slice rather than a full migration: - MCP tool-call arguments (apps/server/src/api-mcp) are now validated end to end. Every tool's inputSchema is generated from its Zod schema via z.toJSONSchema() instead of hand-maintained JSON Schema literals, and every handler now parses its arguments before use — previously every handler did an unchecked `args as SomeType` cast with no runtime validation at all. - A new validate.ts middleware (validateBody/validateParams) replaces the express-validator chokepoint for two reference routers, session and url-presets, demonstrating the pattern the remaining ~11 routers will follow in later PRs. - An oxlint no-restricted-imports guardrail keeps zod importable only from apps/server, so it can never leak into the apps/client bundle. The bulk of the REST router migration (automation, rundown, and the rest of api-data) is intentionally left for follow-up PRs to keep this change reviewable.
15 lines
464 B
TypeScript
15 lines
464 B
TypeScript
import { z } from 'zod';
|
|
|
|
import { validateBody } from '../validation-utils/validate.js';
|
|
|
|
const generateUrlSchema = z.object({
|
|
baseUrl: z.string().trim().min(1),
|
|
path: z.string().trim().min(1),
|
|
authenticate: z.boolean(),
|
|
lockConfig: z.boolean(),
|
|
lockNav: z.boolean(),
|
|
preset: z.string().trim().min(1).optional(),
|
|
});
|
|
export type GenerateUrlInput = z.infer<typeof generateUrlSchema>;
|
|
export const validateGenerateUrl = validateBody(generateUrlSchema);
|