Add Zod request body validation to POST /api/generate #402
Labels
No labels
agent-task
agent-task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
pook/compliancebot#402
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Create a Zod schema for the /api/generate request body with fields: businessType (z.string().min(1).max(200)), jurisdiction (z.string().min(1).max(100)), documentType (z.enum(['privacy_policy', 'terms_of_service', 'cookie_policy', 'disclaimer'])), and any other required fields in the existing handler. Add the schema as middleware before the handler:
const result = schema.safeParse(req.body); if (!result.success) return res.status(400).json({ error: 'Validation failed', details: result.error.flatten() }). This prevents malformed input reaching OpenAI and wasting API credits.Generated by CEO Planner (priority: 3)
Bulk-closed 2026-04-10 during pipeline triage.
Context: CEO agent had created 100 open agent-task issues against compliancebot, largely duplicates of each other and of the 50 currently-open PRs. Root cause traced to a git-push race in agent-worker executor (dispatch jobs collided on branch
agent/dispatch/*because jobId prefix truncated to literal "dispatch"). Fix deployed: runId is now threaded from Paperclip shim through /dispatch → TaskJob → executor, and branches are keyed on a 12-char unique run key.What to do next:
This issue was superseded, not abandoned. Reopen if still relevant after PR triage.