Major Enhancement: NestJS Migration + CASL Authorization + Error Handling

Complete rewrite from Express to NestJS with enterprise-grade features:

## Backend Improvements
- Migrated from Express to NestJS 11.0.1 with TypeScript
- Implemented Prisma ORM 7.3.0 for type-safe database access
- Added CASL authorization system replacing role-based guards
- Created global exception filters with structured logging
- Implemented Auth0 JWT authentication with Passport.js
- Added vehicle management with conflict detection
- Enhanced event scheduling with driver/vehicle assignment
- Comprehensive error handling and logging

## Frontend Improvements
- Upgraded to React 19.2.0 with Vite 7.2.4
- Implemented CASL-based permission system
- Added AbilityContext for declarative permissions
- Created ErrorHandler utility for consistent error messages
- Enhanced API client with request/response logging
- Added War Room (Command Center) dashboard
- Created VIP Schedule view with complete itineraries
- Implemented Vehicle Management UI
- Added mock data generators for testing (288 events across 20 VIPs)

## New Features
- Vehicle fleet management (types, capacity, status tracking)
- Complete 3-day Jamboree schedule generation
- Individual VIP schedule pages with PDF export (planned)
- Real-time War Room dashboard with auto-refresh
- Permission-based navigation filtering
- First user auto-approval as administrator

## Documentation
- Created CASL_AUTHORIZATION.md (comprehensive guide)
- Created ERROR_HANDLING.md (error handling patterns)
- Updated CLAUDE.md with new architecture
- Added migration guides and best practices

## Technical Debt Resolved
- Removed custom authentication in favor of Auth0
- Replaced role checks with CASL abilities
- Standardized error responses across API
- Implemented proper TypeScript typing
- Added comprehensive logging

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

backend-old-20260125/dist/middleware/simpleValidation.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validate = exports.schemas = void 0;
+const zod_1 = require("zod");
+// Simplified validation schemas - removed unnecessary complexity
+exports.schemas = {
+    // VIP schemas
+    createVip: zod_1.z.object({
+        name: zod_1.z.string().min(1).max(100),
+        organization: zod_1.z.string().max(100).optional(),
+        department: zod_1.z.enum(['Office of Development', 'Admin']).default('Office of Development'),
+        transportMode: zod_1.z.enum(['flight', 'self-driving']).default('flight'),
+        flights: zod_1.z.array(zod_1.z.object({
+            flightNumber: zod_1.z.string(),
+            airline: zod_1.z.string().optional(),
+            scheduledArrival: zod_1.z.string(),
+            scheduledDeparture: zod_1.z.string().optional()
+        })).optional(),
+        expectedArrival: zod_1.z.string().optional(),
+        needsAirportPickup: zod_1.z.boolean().default(true),
+        needsVenueTransport: zod_1.z.boolean().default(true),
+        notes: zod_1.z.string().max(500).optional()
+    }),
+    updateVip: zod_1.z.object({
+        name: zod_1.z.string().min(1).max(100).optional(),
+        organization: zod_1.z.string().max(100).optional(),
+        department: zod_1.z.enum(['Office of Development', 'Admin']).optional(),
+        transportMode: zod_1.z.enum(['flight', 'self-driving']).optional(),
+        flights: zod_1.z.array(zod_1.z.object({
+            flightNumber: zod_1.z.string(),
+            airline: zod_1.z.string().optional(),
+            scheduledArrival: zod_1.z.string(),
+            scheduledDeparture: zod_1.z.string().optional()
+        })).optional(),
+        expectedArrival: zod_1.z.string().optional(),
+        needsAirportPickup: zod_1.z.boolean().optional(),
+        needsVenueTransport: zod_1.z.boolean().optional(),
+        notes: zod_1.z.string().max(500).optional()
+    }),
+    // Driver schemas
+    createDriver: zod_1.z.object({
+        name: zod_1.z.string().min(1).max(100),
+        email: zod_1.z.string().email().optional(),
+        phone: zod_1.z.string(),
+        vehicleInfo: zod_1.z.string().max(200).optional(),
+        status: zod_1.z.enum(['available', 'assigned', 'unavailable']).default('available')
+    }),
+    updateDriver: zod_1.z.object({
+        name: zod_1.z.string().min(1).max(100).optional(),
+        email: zod_1.z.string().email().optional(),
+        phone: zod_1.z.string().optional(),
+        vehicleInfo: zod_1.z.string().max(200).optional(),
+        status: zod_1.z.enum(['available', 'assigned', 'unavailable']).optional()
+    }),
+    // Schedule schemas
+    createScheduleEvent: zod_1.z.object({
+        driverId: zod_1.z.string().optional(),
+        eventTime: zod_1.z.string(),
+        eventType: zod_1.z.enum(['pickup', 'dropoff', 'custom']),
+        location: zod_1.z.string().min(1).max(200),
+        notes: zod_1.z.string().max(500).optional()
+    }),
+    updateScheduleEvent: zod_1.z.object({
+        driverId: zod_1.z.string().optional(),
+        eventTime: zod_1.z.string().optional(),
+        eventType: zod_1.z.enum(['pickup', 'dropoff', 'custom']).optional(),
+        location: zod_1.z.string().min(1).max(200).optional(),
+        notes: zod_1.z.string().max(500).optional(),
+        status: zod_1.z.enum(['scheduled', 'in_progress', 'completed', 'cancelled']).optional()
+    })
+};
+// Single validation middleware
+const validate = (schema) => {
+    return async (req, res, next) => {
+        try {
+            req.body = await schema.parseAsync(req.body);
+            next();
+        }
+        catch (error) {
+            if (error instanceof zod_1.z.ZodError) {
+                const message = error.errors
+                    .map(err => `${err.path.join('.')}: ${err.message}`)
+                    .join(', ');
+                return res.status(400).json({ error: message });
+            }
+            next(error);
+        }
+    };
+};
+exports.validate = validate;
+//# sourceMappingURL=simpleValidation.js.map