From 33783d8712753cb09aa134e243a163b6fc9b5a53 Mon Sep 17 00:00:00 2001 From: Michilis Date: Sat, 3 Oct 2026 05:20:20 +0000 Subject: [PATCH] Assert partner and member route params in finance handlers. Same hono 4.13 param widening as the previous fix; tsc only reported the first bad argument per call, so these two were hidden behind it. Co-Authored-By: Claude Opus 5.5 --- backend/src/routes/eventFinance.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/src/routes/eventFinance.ts b/backend/src/routes/eventFinance.ts index 0565ab8..854fc45 100644 --- a/backend/src/routes/eventFinance.ts +++ b/backend/src/routes/eventFinance.ts @@ -597,7 +597,7 @@ financeRouter.delete('/:id/partners/:partnerId', requireEventPermission('edit_ex const eventId = c.req.param('id')!; const closed = await assertOpen(c, eventId); if (closed) return closed; - const existing = await loadPartner(eventId, c.req.param('partnerId')); + const existing = await loadPartner(eventId, c.req.param('partnerId')!); if (!existing) return c.json({ error: 'Partner not found' }, 404); const fronted = await dbGet( (db as any).select({ id: (eventExpenses as any).id }).from(eventExpenses).where(eq((eventExpenses as any).paidByPartnerId, existing.id)) @@ -922,7 +922,7 @@ financeRouter.put('/:id/members/:memberId', requireEventPermission('manage_team' financeRouter.delete('/:id/members/:memberId', requireEventPermission('manage_team'), async (c) => { const eventId = c.req.param('id')!; - const existing = await loadMember(eventId, c.req.param('memberId')); + const existing = await loadMember(eventId, c.req.param('memberId')!); if (!existing) return c.json({ error: 'Member not found' }, 404); const user = currentUser(c); const target = await loadUser(existing.userId); -- 2.54.0