Runtime validation for request bodies (Zod)

                  import { z } from 'zod';
import type { RequestHandler } from 'express';

export function validateBody<T extends z.ZodTypeAny>(schema: T): RequestHandler {
  return (req, res, next) => {
    const parsed = schema.safeParse(req.body);
    if (!parsed.success) {
      return res.status(400).json({
        error: 'VALIDATION_ERROR',
        issues: parsed.error.issues.map(i => ({ path: i.path.join('.'), message: i.message }))
      });
    }
    req.body = parsed.data;
    next();
  };
}

export const CreateProjectSchema = z.object({
  name: z.string().min(2).max(80),
  visibility: z.enum(['private', 'team', 'public']).default('private')
});