mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-08-11 09:42:15 +03:00
Extract the "omr_" + 40 hex supporter-key regex out of the POST /api/radar/settings Zod schema into a pure, client-safe helper (src/lib/radar/supporterKey.ts) so the format rule lives in exactly one place and the upcoming activation-screen input can reuse it for a UX-only pre-check. Server-side Zod validation stays authoritative. Adds regression coverage: both directions of the format check, a combined opt-in+supporterKey POST persisting both fields with the key always masked (never raw) in either the POST or GET response body, and a flag-off inertia case for the same combined payload shape.