Moheeb ZaraandClaude Opus 4.8
510187a58d
The ops UI created/updated/deleted area_leads directly from the browser (the delete had no admin gate or space scope). Add createAreaLead/updateAreaLead/ deleteAreaLead (admin-gated, space-scoped, validated, audited) and wire the modal + delete handler to them, dropping the direct browser writes. The distinct area_code-keyed upsertAreaLead interface is left untouched. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
43 lines
1.5 KiB
TypeScript
43 lines
1.5 KiB
TypeScript
import { z } from 'zod'
|
|
|
|
// A grant subject is a built-in role or a custom-role slug.
|
|
const roleSubject = z.string().min(1).max(50).regex(/^[a-z0-9][a-z0-9_:-]{0,49}$/, 'Invalid role')
|
|
|
|
export const setRolePermissionsSchema = z.object({
|
|
subject: roleSubject,
|
|
permissions: z.array(z.string().min(1).max(60)).max(64),
|
|
})
|
|
|
|
export const opsEntityTypeSchema = z.enum(['secret', 'kb', 'process', 'area_lead'])
|
|
|
|
// The UI sends the full desired role list for one item; the server replaces.
|
|
// An empty list means "fall back to the item's existing visibility rule".
|
|
export const setOpsAclSchema = z.object({
|
|
entity_type: opsEntityTypeSchema,
|
|
entity_id: z.string().uuid('Invalid entity ID'),
|
|
roles: z.array(z.string().min(1).max(64)).max(64),
|
|
})
|
|
|
|
export const createAreaLeadRoleSchema = z.object({
|
|
area_code: z.string().min(1).max(60).regex(/^[a-z0-9][a-z0-9_-]{0,59}$/, 'Invalid area code'),
|
|
name: z.string().min(1).max(100),
|
|
color: z.string().max(20).optional().nullable(),
|
|
})
|
|
|
|
export const assignAreaLeadSchema = z.object({
|
|
area_lead_role_id: z.string().uuid('Invalid role ID'),
|
|
member_id: z.string().uuid('Invalid member ID'),
|
|
})
|
|
|
|
// The ops-managed area-lead roster (area_name-keyed, distinct from the
|
|
// area_code-keyed upsertAreaLead role interface above).
|
|
export const createAreaLeadSchema = z.object({
|
|
area_name: z.string().min(1).max(100),
|
|
lead_handle: z.string().min(1).max(100),
|
|
description: z.string().max(2000).optional().nullable(),
|
|
})
|
|
|
|
export const updateAreaLeadSchema = createAreaLeadSchema.extend({
|
|
id: z.string().uuid('Invalid area lead ID'),
|
|
})
|