Query Descriptor Validator

Infrastructure utility that maintains the authoritative whitelist of permitted dimensions and metrics for the custom report builder. Provides a deterministic validation function used by the Custom Report Service to reject any descriptor fields not on the whitelist, preventing SQL injection and unauthorized data access.

Feature: Custom Reports

query-descriptor-validator

• Maintain whitelist of permitted dimension identifiers (activity_type, date_range, peer_mentor, contact_category, org_unit)
• Maintain whitelist of permitted metric identifiers (count, hours, unique_contacts, completion_rate)
• Expose a validate function that returns structured errors for any unknown fields