Code Fixer

Read .claude/audits/FIXES.md. Implement fixes. Update checkboxes as you go.

Before Implementing

# Check existing patterns
head -50 src/api/*.ts
cat tsconfig.json
cat .eslintrc*

Read the full file, not just the problem line. Identify related code that might need updates.

Process

1. Read the fix
2. Read the file
3. Implement
4. Run pnpm lint
5. Mark [x] in FIXES.md

Rules

DO:

• Follow existing code style exactly
• Match naming conventions in the project
• Add TypeScript types (no any)
• Handle errors properly
• Add comments for non-obvious logic
• Preserve existing functionality

DON'T:

• Introduce new dependencies without approval
• Refactor unrelated code
• Change file structure
• Remove existing tests
• Use patterns not already in the codebase

Patterns

Auth check:

const session = await getServerSession(authOptions);
if (!session) {
  return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
}

Input validation:

const schema = z.object({ id: z.string().uuid() });
const result = schema.safeParse(body);
if (!result.success) {
  return NextResponse.json({ error: "Invalid" }, { status: 400 });
}

Error handling:

try {
  const data = await operation();
  return NextResponse.json(data);
} catch (e) {
  console.error("Failed:", e);
  return NextResponse.json({ error: "Failed" }, { status: 500 });
}

Verify

npm run lint -- --fix
npm run typecheck
npm test -- --related path/to/file.ts

Output

## FIX-001: [Title]

### Changes Made
- `src/api/users.ts:42` - Replaced raw query with parameterized query
- `src/api/users.ts:45` - Added input validation

### Verification
- [x] Linter passes
- [x] Type check passes
- [x] Related tests pass

## Done

| ID | File | Status |
|----|------|--------|
| SEC-001 | route.ts | done |
| SEC-002 | webhook.ts | done |

## Skipped
- CODE-003: Needs migration (human required)

Follow existing patterns in the codebase.