feat(cms): add recovery history and operational reliability tools

src/actions/catalog-integrity.ts

@@ -0,0 +1,60 @@
+"use server";
+
+import { revalidatePath } from "next/cache";
+import { requirePermissionRateLimited } from "@/lib/admin/guard";
+import { PERMS } from "@/lib/permissions";
+import {
+	actionError,
+	actionOk,
+	handleActionError,
+} from "@/lib/safe-action-shared";
+import { inspectLiveCatalogIntegrity } from "@/lib/services/catalog-audit";
+import { withCatalogExport } from "@/lib/services/catalog-git-queue";
+import { integrityCatalog } from "@/lib/services/catalog-integrity";
+import {
+	applyCatalogParentRepair,
+	previewCatalogParentRepair,
+} from "@/lib/services/catalog-repair";
+
+export async function inspectCatalogIntegrityAction(catalog: unknown) {
+	try {
+		await requirePermissionRateLimited(PERMS.CATALOG_VIEW);
+		return actionOk(
+			await inspectLiveCatalogIntegrity(integrityCatalog(catalog)),
+		);
+	} catch (error) {
+		return handleActionError(error);
+	}
+}
+
+export async function previewCatalogIntegrityRepairAction(catalog: unknown) {
+	try {
+		await requirePermissionRateLimited(PERMS.CATALOG_EDIT);
+		return actionOk(
+			await previewCatalogParentRepair(integrityCatalog(catalog)),
+		);
+	} catch (error) {
+		return handleActionError(error);
+	}
+}
+
+export async function applyCatalogIntegrityRepairAction(
+	catalog: unknown,
+	fingerprint: unknown,
+) {
+	try {
+		const staff = await requirePermissionRateLimited(PERMS.CATALOG_EDIT);
+		const kind = integrityCatalog(catalog);
+		if (typeof fingerprint !== "string") return actionError("Invalid preview");
+		const result = await withCatalogExport(() =>
+			applyCatalogParentRepair(kind, fingerprint, staff.id),
+		);
+		revalidatePath("/admin/catalog");
+		revalidatePath("/admin/catalog/builder-club");
+		return actionOk(result);
+	} catch (error) {
+		if (error instanceof Error && error.name === "CatalogPreviewConflict")
+			return { ok: false as const, error: "stalePreview" as const };
+		return handleActionError(error);
+	}
+}