Fix rooms list crash and rebuild CMS settings UI.

Rooms queried the wrong Prisma model and a non-existent owner relation. Settings now use grouped managed fields plus a searchable advanced key/value panel.

Co-authored-by: Cursor <[email protected]>

src/actions/admin-settings.ts

@@ -1,11 +1,46 @@
 "use server";
 
 import { revalidatePath } from "next/cache";
+import { z } from "zod";
+import { MANAGED_SETTING_KEYS } from "@/app/admin/settings/cms-settings-config";
 import { requirePermissionRateLimited } from "@/lib/admin/guard";
+import { actionOk, adminAction } from "@/lib/foundation/action";
 import { PERMS } from "@/lib/permissions";
 import { prisma } from "@/lib/prisma";
 import { siteSettings } from "@/lib/services/site-settings";
 
+const managedKeySet = new Set(MANAGED_SETTING_KEYS);
+
+const saveManagedSchema = z.object({
+	settings: z.record(z.string(), z.string()),
+});
+
+export const saveManagedSettings = adminAction(
+	{
+		permission: PERMS.SETTINGS_EDIT,
+		schema: saveManagedSchema,
+		rateLimitKey: "admin-settings-save",
+		rateLimitMax: 30,
+	},
+	async (ctx) => {
+		const entries = Object.entries(ctx.data.settings).filter(([key]) =>
+			managedKeySet.has(key),
+		);
+		await Promise.all(
+			entries.map(([key, value]) =>
+				prisma.websiteSetting.upsert({
+					where: { key },
+					update: { value },
+					create: { key, value },
+				}),
+			),
+		);
+		siteSettings.reload();
+		revalidatePath("/admin/settings");
+		return actionOk({ saved: entries.length });
+	},
+);
+
 export async function updateSetting(formData: FormData): Promise<void> {
 	await requirePermissionRateLimited(PERMS.SETTINGS_EDIT);
 	const key = String(formData.get("key") ?? "")