add delegation validation schemas

Joi schemas for delegation CRUD (GET, POST, PUT, DELETE) and updated
index exports. Bump to 0.8.10.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

Author: burning-bush-dev

CHANGELOG.md

@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
+### [0.8.10] - 2026-04-12
+
+- delegation: add validation schemas for GET, POST, PUT, DELETE (#22)
+
 ### [0.8.9] - 2026-03-29
 
 - group: GET can return one group or array

index.js

@@ -1,3 +1,4 @@
+import * as delegation from './lib/delegation.js'
 import * as group from './lib/group.js'
 import * as nameserver from './lib/nameserver.js'
 import * as permission from './lib/permission.js'
@@ -6,9 +7,10 @@ import * as user from './lib/user.js'
 import * as zone from './lib/zone.js'
 import * as zone_record from './lib/zone_record.js'
 
-export { group, nameserver, permission, session, user, zone, zone_record }
+export { delegation, group, nameserver, permission, session, user, zone, zone_record }
 
 export default {
+  delegation,
   group,
   nameserver,
   permission,

lib/delegation.js

@@ -0,0 +1,75 @@
+import Joi from 'joi'
+
+import * as shared from './shared.js'
+
+const objectType = Joi.string().valid('ZONE', 'ZONERECORD', 'NAMESERVER', 'GROUP')
+
+const permBool = Joi.boolean().default(true)
+
+const delegationPerms = {
+  perm_write: permBool,
+  perm_delete: permBool,
+  perm_delegate: permBool,
+  zone_perm_add_records: permBool,
+  zone_perm_delete_records: permBool,
+}
+
+const delegationObj = Joi.object({
+  nt_group_id: shared.uint32,
+  nt_object_id: shared.uint32,
+  nt_object_type: objectType,
+  group_name: Joi.string().allow('', null),
+  delegated_by_id: shared.uint32.allow(null),
+  delegated_by_name: Joi.string().allow('', null),
+
+  delegate_write: Joi.number().integer().min(0).max(1),
+  delegate_delete: Joi.number().integer().min(0).max(1),
+  delegate_delegate: Joi.number().integer().min(0).max(1),
+  delegate_add_records: Joi.number().integer().min(0).max(1),
+  delegate_delete_records: Joi.number().integer().min(0).max(1),
+
+  // zone fields from JOIN (when type=ZONE)
+  nt_zone_id: shared.uint32,
+  zone: Joi.string().allow('', null),
+  description: Joi.string().allow('', null),
+
+  // zone record fields from JOIN (when type=ZONERECORD)
+  nt_zone_record_id: shared.uint32,
+}).unknown(true)
+
+export const POST = Joi.object({
+  gid: shared.uint32.required(),
+  oid: shared.uint32.required(),
+  type: objectType.required(),
+  delegated_by_id: shared.uint32,
+  delegated_by_name: Joi.string().max(50),
+  ...delegationPerms,
+})
+
+export const GET_req = Joi.object({
+  gid: shared.uint32,
+  oid: shared.uint32,
+  type: objectType,
+})
+
+export const GET_res = Joi.object({
+  delegation: Joi.array().items(delegationObj),
+  meta: shared.meta,
+})
+
+export const PUT = Joi.object({
+  gid: shared.uint32.required(),
+  oid: shared.uint32.required(),
+  type: objectType.required(),
+  perm_write: Joi.boolean(),
+  perm_delete: Joi.boolean(),
+  perm_delegate: Joi.boolean(),
+  zone_perm_add_records: Joi.boolean(),
+  zone_perm_delete_records: Joi.boolean(),
+})
+
+export const DELETE = Joi.object({
+  gid: shared.uint32.required(),
+  oid: shared.uint32.required(),
+  type: objectType.required(),
+})

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nictool/validate",
-  "version": "0.8.9",
+  "version": "0.8.10",
   "description": "NicTool Object Validation",
   "type": "module",
   "files": [