Harden authentication, tenant isolation and security boundaries

src/actions/absences.ts

@@ -2,6 +2,7 @@
 
 import { revalidatePath } from "next/cache";
 import { AbsenceReason, UserRole } from "@prisma/client";
+import { dateOnlySchema } from "@/lib/date-schema";
 import { z } from "zod";
 
 import { requireKitaSession, requireRole } from "@/lib/auth-utils";
@@ -9,14 +10,14 @@ import { prisma } from "@/lib/prisma";
 
 const reportAbsenceSchema = z.object({
   childId: z.string().min(1),
-  startDate: z.string().min(1),
-  endDate: z.string().min(1),
+  startDate: dateOnlySchema,
+  endDate: dateOnlySchema,
   reason: z.nativeEnum(AbsenceReason),
   note: z.string().trim().max(500).optional(),
 });
 
 const dailyAbsenceSchema = z.object({
-  date: z.string().min(1),
+  date: dateOnlySchema,
 });
 
 export type DailyAbsenceDto = {