feat(admin): drizzle trade-lock + RCON sync and photo local purge

Co-authored-by: Cursor <[email protected]>

src/actions/admin-photos.ts

@@ -1,9 +1,11 @@
 "use server";
 
+import { eq, inArray } from "drizzle-orm";
 import { revalidatePath } from "next/cache";
 import { requirePermission } from "@/lib/admin/guard";
+import { tryRemoveLocalPhotoFile } from "@/lib/admin/photo-files";
+import { CameraWeb, db } from "@/lib/db";
 import { PERMS } from "@/lib/permissions";
-import { prisma } from "@/lib/prisma";
 import { logStaffActivity } from "@/lib/services/staff-activity";
 
 export async function deletePhoto(formData: FormData): Promise<void> {
@@ -11,8 +13,15 @@ export async function deletePhoto(formData: FormData): Promise<void> {
 	const id = Number(formData.get("id"));
 	if (!(id > 0)) return;
 
-	try {
-		await prisma.cameraWeb.delete({ where: { id } });
+	const [row] = await db
+		.select({ id: CameraWeb.id, url: CameraWeb.url })
+		.from(CameraWeb)
+		.where(eq(CameraWeb.id, id))
+		.limit(1);
+
+	if (row) {
+		await db.delete(CameraWeb).where(eq(CameraWeb.id, id));
+		await tryRemoveLocalPhotoFile(row.url);
 		await logStaffActivity({
 			staffId: staff.id,
 			action: "photo_delete",
@@ -20,11 +29,10 @@ export async function deletePhoto(formData: FormData): Promise<void> {
 			targetType: "camera_web",
 			targetId: id,
 		});
-	} catch {
-		// Record may have already been removed; ignore.
 	}
 
 	revalidatePath("/admin/photos");
+	revalidatePath("/photos");
 }
 
 export async function bulkDeletePhotos(formData: FormData): Promise<void> {
@@ -36,14 +44,27 @@ export async function bulkDeletePhotos(formData: FormData): Promise<void> {
 		.filter((n) => Number.isFinite(n) && n > 0);
 	if (ids.length === 0) return;
 
-	const result = await prisma.cameraWeb.deleteMany({
-		where: { id: { in: ids } },
-	});
-	await logStaffActivity({
-		staffId: staff.id,
-		action: "photo_bulk_delete",
-		description: `Deleted ${result.count} camera photo(s)`,
-		targetType: "camera_web",
-	});
+	const rows = await db
+		.select({ id: CameraWeb.id, url: CameraWeb.url })
+		.from(CameraWeb)
+		.where(inArray(CameraWeb.id, ids));
+
+	if (rows.length > 0) {
+		await db.delete(CameraWeb).where(
+			inArray(
+				CameraWeb.id,
+				rows.map((r) => r.id),
+			),
+		);
+		await Promise.all(rows.map((r) => tryRemoveLocalPhotoFile(r.url)));
+		await logStaffActivity({
+			staffId: staff.id,
+			action: "photo_bulk_delete",
+			description: `Deleted ${rows.length} camera photo(s)`,
+			targetType: "camera_web",
+		});
+	}
+
 	revalidatePath("/admin/photos");
+	revalidatePath("/photos");
 }