refactor(db): typed query helpers, shared test FormData helper

Replace raw db.execute tuple casts with queryRows/rowsFrom/execResult/
affectedRows helpers from lib/db, drop redundant mysql2 casts on typed
query builders, and centralize per-test fakeForm into test/fake-form.
Update db mocks in tests so helpers resolve against mocked execute.

src/actions/admin-ip.test.ts

@@ -2,6 +2,7 @@
 import { revalidatePath } from "next/cache";
 import { beforeEach, describe, expect, it, vi } from "vitest";
 import { requirePermission } from "@/lib/admin/guard";
+import { fakeForm } from "@/test/fake-form";
 import {
 	addBlacklist,
 	addWhitelist,
@@ -30,10 +31,6 @@ vi.mock("@/lib/db", () => ({
 vi.mock("next/cache", () => ({ revalidatePath: vi.fn() }));
 
 const staff = { id: 1, rank: 7, username: "admin" };
-const fakeForm = (data: Record<string, string>) => ({
-	get: (key: string) => data[key] ?? null,
-});
-
 beforeEach(() => {
 	vi.clearAllMocks();
 	vi.mocked(requirePermission).mockResolvedValue(staff as never);
@@ -43,9 +40,7 @@ beforeEach(() => {
 
 describe("addWhitelist", () => {
 	it("creates whitelist entry", async () => {
-		await addWhitelist(
-			fakeForm({ ipAddress: "192.168.1.1" }) as unknown as FormData,
-		);
+		await addWhitelist(fakeForm({ ipAddress: "192.168.1.1" }) as FormData);
 		expect(insertValues).toHaveBeenCalledWith({
 			ipAddress: "192.168.1.1",
 			asn: null,
@@ -55,23 +50,21 @@ describe("addWhitelist", () => {
 	});
 
 	it("returns early when ip is empty", async () => {
-		await addWhitelist(fakeForm({ ipAddress: "" }) as unknown as FormData);
+		await addWhitelist(fakeForm({ ipAddress: "" }) as FormData);
 		expect(insertValues).not.toHaveBeenCalled();
 	});
 });
 
 describe("deleteWhitelist", () => {
 	it("deletes whitelist entry", async () => {
-		await deleteWhitelist(fakeForm({ id: "42" }) as unknown as FormData);
+		await deleteWhitelist(fakeForm({ id: "42" }) as FormData);
 		expect(deleteWhere).toHaveBeenCalled();
 	});
 });
 
 describe("addBlacklist", () => {
 	it("creates blacklist entry", async () => {
-		await addBlacklist(
-			fakeForm({ ipAddress: "203.0.113.1" }) as unknown as FormData,
-		);
+		await addBlacklist(fakeForm({ ipAddress: "203.0.113.1" }) as FormData);
 		expect(insertValues).toHaveBeenCalledWith({
 			ipAddress: "203.0.113.1",
 			asn: null,
@@ -82,7 +75,7 @@ describe("addBlacklist", () => {
 
 describe("deleteBlacklist", () => {
 	it("deletes blacklist entry", async () => {
-		await deleteBlacklist(fakeForm({ id: "99" }) as unknown as FormData);
+		await deleteBlacklist(fakeForm({ id: "99" }) as FormData);
 		expect(deleteWhere).toHaveBeenCalled();
 	});
 });