Validate shocks POST inputs and default priceShift server-side

[Copilot]

When priceShift was omitted by the client, it passed undefined directly into the SQL insert, causing a NOT NULL constraint violation and a 500. type and description were also unvalidated, silently inserting nulls or garbage.

Changes

• Input validation — type and description must be non-empty strings; returns 400 with a descriptive message if either fails
• priceShift default — falls back to 10 server-side when the client omits it or sends a non-finite value (NaN, Infinity)

if (typeof type !== 'string' || type.trim().length === 0) {
  return NextResponse.json({ error: 'type is required and must be a non-empty string' }, { status: 400 });
}
if (typeof description !== 'string' || description.trim().length === 0) {
  return NextResponse.json({ error: 'description is required and must be a non-empty string' }, { status: 400 });
}

const shift = typeof priceShift === 'number' && isFinite(priceShift) ? priceShift : 10;

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
live-game	Error		Mar 10, 2026 5:32am