Files
platforms/.superpowers/sdd/2026-07-27-platform-admin-full-audit/task-6-report.md

31 lines
1.6 KiB
Markdown

# Task 6 report
## RED baseline
`pnpm audit:platform` initially exited with code 1. The audit reported missing API declarations, route entries, and view files for the resource contract catalogue.
## Implementation
- Added `src/api/resources.ts` as the single front-end catalogue for all 46 backend resource contracts, including path, title, mode, page kind, and fields.
- Added route modules and declarative list/tree pages for each resource.
- Added reusable read-only and tree pages; read-only definitions do not render create, edit, status, or archive controls.
- Updated the shared CRUD page with server-side keyword filters, identity-based details, typed form data, archive confirmation, and API error messages.
- Removed platform UI use of internal numeric identifiers in favour of `identity` and `parent_identity`.
## Verification
- `pnpm type:check` — pass
- `pnpm audit:platform` — pass
- `pnpm build` — pass
## Notes
The tree page consumes `parent_identity`; the corresponding menu API must expose that identity relation rather than an internal numeric parent key.
## Fix round 1
- Replaced inferred front-end paths with an explicit 46-path catalogue: it includes the dashboard endpoint, adds `/ec/ec_order_item`, and removes the non-list safety disposal action from the menu catalogue.
- Corrected the safety, e-commerce, staff, and user API paths to match the registered backend routes exactly.
- Added audit assertions for exact path/mode/page-kind contracts, separate read-only UI surfaces, identifier leakage, and tree semantics.
- Detail drawers now filter `id` and `*_id` fields before rendering.