jubnl 9650ad4597 feat(server): adopt zod DTOs for the trip-invite body contracts ...

New tripInviteLinkCreateRequestSchema in @trek/shared (single source of
truth), a createZodDto wrapper on the controller's raw @Body(), and the
TripInviteLinkController.create entry dropped from the body-contract
allow-list (the boot ratchet enforces it).

expires_in_days accepts number | digits-only string | null | absent — the
string branch is digits-only so garbage like "7abc" is a 400 instead of
silently parseInt-ing to 7; the empty string (blank form input, meaning no
expiry) stays accepted. The e2e registers ZodValidationPipe and pins both
the bounded-expiry and 400 paths.

2026-07-26 18:21:18 +02:00

..

trip-invite.schema.spec.ts

feat(server): adopt zod DTOs for the trip-invite body contracts

2026-07-26 18:21:18 +02:00

trip-invite.schema.ts

feat(server): adopt zod DTOs for the trip-invite body contracts

2026-07-26 18:21:18 +02:00