mirror of
https://github.com/mauriceboe/TREK.git
synced 2026-10-18 21:16:47 +00:00
jubnl
c27fc99220
ReservationsController's 4 grandfathered @Body() params now validate through the global ZodValidationPipe (createZodDto over the existing @trek/shared schemas); their allow-list entries are removed (the boot gate rejects stale entries). The bespoke 400 bodies (Title is required / positions must be an array / user_ids must be an array) become the pipe's field envelope, and non-numeric traveler ids now 400 instead of being silently dropped. reservationPositionsRequestSchema is loosened to the real wire contract: day_plan_position is optional (the legacy route never validated position items and an absent value binds NULL) — pinned by RESV-006. AccommodationsController stays grandfathered until the dayService migration.