chore(forms): remove unused vee-validate; formalize ref+validators+Zod as canonical pattern

Strict-regex sweep of apps/app/src/ confirms zero VeeValidate usage:
no `from 'vee-validate'` imports, no <Field|Form|ErrorMessage>,
no defineRule(), no useForm(). The 15 prior fuzzy matches were
false positives where /useForm/ matched useFormDraft/useFormSteps/
useFormSchemas/useFormFailures.

Changes:
- Remove `vee-validate` and `@vee-validate/zod` from apps/app/package.json
- Regenerate pnpm-lock.yaml (no other deps shifted)
- CLAUDE.md "Forms": replace VeeValidate prescription with the actual
  ref + @core/utils/validators + Zod-payload-schema pattern that the
  codebase already uses everywhere
- VUEXY_COMPONENTS.md: correct the stale "Registration uses VeeValidate"
  claim (the page actually uses useFormDraft + validators); update the
  "Form validation" reference row
- BACKLOG.md: close VEE-001 with the audit trail

All 319 existing tests still pass; vue-tsc clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-09 03:21:49 +02:00
parent 3616b06206
commit 5c53dcd2e4
5 changed files with 43 additions and 39 deletions

View File

@@ -2016,8 +2016,9 @@ RFC-FORM-BUILDER-UI implementatie begint. Argumenten:
hoge-prioriteit endpoints (`/auth/me`, form-builder list-endpoints, identity-match endpoints).
Verdere composable-uitrol gebeurt organisch als features worden geraakt of toegevoegd.
**Out of scope:** form-input validatie (al via VeeValidate + Zod), WebSocket-validatie
(separaat, COMM-01), publieke API-contracten voor third parties (separaat, DIFF-03).
**Out of scope:** form-input validatie (via `@core/utils/validators` + Zod
payload schemas — see CLAUDE.md "Forms"), WebSocket-validatie (separaat,
COMM-01), publieke API-contracten voor third parties (separaat, DIFF-03).
**Open beslissingen:** codegen toolchain (Scramble-pipeline vs hand-rolled), validation
failure-mode (hard fail vs soft fail per env), per-route opt-out, boundary placement
@@ -2284,3 +2285,21 @@ opgezet.
**Refs:** `apps/app/index.html`, `deploy/nginx/csp-spa.conf`,
`tests/Feature/Security/CspConnectsToObservabilityTest.php`,
RFC-WS-7-OBSERVABILITY.md §3.3, ARCH-OBSERVABILITY.md §7 + §10.4.
### VEE-001 — VeeValidate removed from stack ✅ Resolved
**Status:** Closed in `feat/timetable-session-4` follow-up.
`vee-validate` and `@vee-validate/zod` shipped in `apps/app/package.json`
since Vuexy onboarding but were never imported anywhere in the SPA. A
strict regex sweep (`from 'vee-validate'`, `<Field>`, `<Form>`,
`<ErrorMessage>`, `defineRule(`, `useForm(<args>)`) returned **zero
hits** across `apps/app/src/`. Earlier fuzzy matches were false
positives from `useForm` colliding with Crewli's own `useFormDraft` /
`useFormSteps` / `useFormSchemas` / `useFormFailures` composables.
Removed both packages from `apps/app/package.json`, regenerated
`pnpm-lock.yaml`. Canonical form pattern formalized in `CLAUDE.md`
"Forms" + `dev-docs/VUEXY_COMPONENTS.md` "Form validation" row.
**Refs:** Session 4 follow-up Step 1; `apps/app/src/components/timetable/AddPerformanceDialog.vue` and `apps/app/src/components/sections/CreateShiftDialog.vue` as canonical references.