Reapply "Add missing admin action files and navigation links"

This reverts commit 4d515bc400.

src/actions/draw-badge.ts

@@ -6,6 +6,7 @@ import { auth } from "@/lib/auth";
 import { prisma } from "@/lib/prisma";
 import { rcon } from "@/lib/services/rcon";
 import { siteSettings } from "@/lib/services/site-settings";
+import type { Prisma } from "@/generated/prisma/client";
 
 /**
  * Buy a published community-drawn badge for the SIGNED-IN user. Faithful to
@@ -78,41 +79,34 @@ export async function buyBadge(formData: FormData): Promise<void> {
         if (!buyer || buyer.credits < price) {
           outcome = "credits";
         } else {
-          // Deduct first, then grant. sendCurrency falls back to a direct DB
-          // write when RCON is offline; a negative amount is not supported, so
-          // the debit is an atomic credits decrement and the credit (grant) is
-          // the badge itself.
+          // Atomically deduct credits and persist the badge so a failure
+          // between the two operations cannot orphan the user.
           if (price > 0) {
-            await prisma.user.update({
-              where: { id: userId },
-              data: { credits: { decrement: price } },
+            await prisma.$transaction(async (tx: Prisma.TransactionClient) => {
+              await tx.user.update({
+                where: { id: userId },
+                data: { credits: { decrement: price } },
+              });
+
+              const existing = await tx.usersBadges.findFirst({
+                where: { userId, badgeCode: code },
+                select: { id: true },
+              });
+              if (!existing) {
+                const max = await tx.usersBadges.aggregate({
+                  where: { userId },
+                  _max: { slotId: true },
+                });
+                const slotId = (max._max.slotId ?? 0) + 1;
+                await tx.usersBadges.create({
+                  data: { userId, slotId, badgeCode: code },
+                });
+              }
             });
           }
 
           // Grant the badge live so it appears immediately for online users.
-          await rcon.giveBadge(userId, code);
-
-          // Persist it so it survives a relog / offline grant. users_badges has
-          // no unique (user_id, badge_code) constraint, so guard duplicates and
-          // compute the next free slot ourselves (mirrors admin giveBadge).
-          try {
-            const existing = await prisma.usersBadges.findFirst({
-              where: { userId, badgeCode: code },
-              select: { id: true },
-            });
-            if (!existing) {
-              const max = await prisma.usersBadges.aggregate({
-                where: { userId },
-                _max: { slotId: true },
-              });
-              const slotId = (max._max.slotId ?? 0) + 1;
-              await prisma.usersBadges.create({
-                data: { userId, slotId, badgeCode: code },
-              });
-            }
-          } catch {
-            // Best-effort: the RCON grant already succeeded for online users.
-          }
+          await rcon.giveBadge(userId, code).catch(() => {});
 
           outcome = "bought";
           boughtCode = code;