Files
platforms/.superpowers/sdd/2026-07-27-platform-admin-full-audit/task-6-report.md

1.6 KiB

Task 6 report

RED baseline

pnpm audit:platform initially exited with code 1. The audit reported missing API declarations, route entries, and view files for the resource contract catalogue.

Implementation

  • Added src/api/resources.ts as the single front-end catalogue for all 46 backend resource contracts, including path, title, mode, page kind, and fields.
  • Added route modules and declarative list/tree pages for each resource.
  • Added reusable read-only and tree pages; read-only definitions do not render create, edit, status, or archive controls.
  • Updated the shared CRUD page with server-side keyword filters, identity-based details, typed form data, archive confirmation, and API error messages.
  • Removed platform UI use of internal numeric identifiers in favour of identity and parent_identity.

Verification

  • pnpm type:check — pass
  • pnpm audit:platform — pass
  • pnpm build — pass

Notes

The tree page consumes parent_identity; the corresponding menu API must expose that identity relation rather than an internal numeric parent key.

Fix round 1

  • Replaced inferred front-end paths with an explicit 46-path catalogue: it includes the dashboard endpoint, adds /ec/ec_order_item, and removes the non-list safety disposal action from the menu catalogue.
  • Corrected the safety, e-commerce, staff, and user API paths to match the registered backend routes exactly.
  • Added audit assertions for exact path/mode/page-kind contracts, separate read-only UI surfaces, identifier leakage, and tree semantics.
  • Detail drawers now filter id and *_id fields before rendering.