fix: harden platform form and response boundaries

frontend/platform_admin/src/api/resource-form.ts

@@ -1,17 +1,27 @@
 import type { ResourceField } from './resources';
 
 export type ResourceFormValue = string | number | boolean | undefined;
+export type ResourceFormMode = 'create' | 'edit';
 
 export function isMissingField(value: ResourceFormValue | null): boolean {
   return value === '' || value === null || value === undefined;
 }
 
+export function isResourceFieldRequired(
+  field: ResourceField,
+  mode: ResourceFormMode,
+): boolean {
+  return Boolean(field.required && !(mode === 'edit' && field.type === 'password'));
+}
+
 export function buildResourcePayload(
   fields: ResourceField[],
   form: Record<string, ResourceFormValue>,
+  mode: ResourceFormMode = 'create',
 ): Record<string, unknown> {
   const payload: Record<string, unknown> = {};
   for (const field of fields) {
+    if (mode === 'edit' && field.type === 'password') continue;
     const value = form[field.key];
     if (isMissingField(value)) {
       if (!field.required) continue;
@@ -30,9 +40,19 @@ export function buildResourcePayload(
         payload[field.key] = value === true || value === 'true';
         break;
       case 'json':
-        payload[field.key] =
-          typeof value === 'string' ? JSON.parse(value) : value;
+        if (typeof value !== 'string')
+          throw new Error(`${field.label}必须是有效 JSON`);
+        JSON.parse(value);
+        payload[field.key] = value;
         break;
+      case 'date':
+      case 'datetime': {
+        const date = new Date(String(value));
+        if (Number.isNaN(date.getTime()))
+          throw new Error(`${field.label}必须是有效日期`);
+        payload[field.key] = date.toISOString();
+        break;
+      }
       default:
         payload[field.key] = value;
     }