/** * Server-side validation for entity data * This provides a final safety layer before database writes */ export interface ValidationResult { valid: boolean; errors: string[]; } /** * Validate entity data before database write */ export function validateEntityData(entityType: string, data: any): ValidationResult { const errors: string[] = []; // Common validations for all entities if (!data.name || data.name.trim().length === 0) { errors.push('Name is required'); } if (!data.slug || data.slug.trim().length === 0) { errors.push('Slug is required'); } if (data.slug && !/^[a-z0-9-]+$/.test(data.slug)) { errors.push('Slug must contain only lowercase letters, numbers, and hyphens'); } if (data.name && data.name.length > 200) { errors.push('Name must be less than 200 characters'); } if (data.description && data.description.length > 2000) { errors.push('Description must be less than 2000 characters'); } if (data.website_url && data.website_url !== '' && !data.website_url.startsWith('http')) { errors.push('Website URL must start with http:// or https://'); } if (data.email && data.email !== '' && !data.email.includes('@')) { errors.push('Invalid email format'); } // Entity-specific validations switch (entityType) { case 'park': if (!data.park_type) errors.push('Park type is required'); if (!data.status) errors.push('Status is required'); if (data.opening_date && data.closing_date) { const opening = new Date(data.opening_date); const closing = new Date(data.closing_date); if (closing < opening) { errors.push('Closing date must be after opening date'); } } break; case 'ride': if (!data.category) errors.push('Category is required'); if (!data.status) errors.push('Status is required'); if (data.max_speed_kmh && (data.max_speed_kmh < 0 || data.max_speed_kmh > 300)) { errors.push('Max speed must be between 0 and 300 km/h'); } if (data.max_height_meters && (data.max_height_meters < 0 || data.max_height_meters > 200)) { errors.push('Max height must be between 0 and 200 meters'); } if (data.drop_height_meters && (data.drop_height_meters < 0 || data.drop_height_meters > 200)) { errors.push('Drop height must be between 0 and 200 meters'); } if (data.height_requirement && (data.height_requirement < 0 || data.height_requirement > 300)) { errors.push('Height requirement must be between 0 and 300 cm'); } break; case 'manufacturer': case 'designer': case 'operator': case 'property_owner': if (!data.company_type) errors.push('Company type is required'); if (data.founded_year) { const year = parseInt(data.founded_year); const currentYear = new Date().getFullYear(); if (year < 1800 || year > currentYear) { errors.push(`Founded year must be between 1800 and ${currentYear}`); } } break; case 'ride_model': if (!data.category) errors.push('Category is required'); if (!data.ride_type) errors.push('Ride type is required'); break; case 'photo': if (!data.cloudflare_image_id) errors.push('Image ID is required'); if (!data.entity_type) errors.push('Entity type is required'); if (!data.entity_id) errors.push('Entity ID is required'); if (data.caption && data.caption.length > 500) { errors.push('Caption must be less than 500 characters'); } break; } return { valid: errors.length === 0, errors }; }