refactor(db): migrate staff and app actions from Prisma facade to Drizzle

Co-authored-by: Cursor <[email protected]>

src/lib/services/abuse-guard.test.ts

@@ -1,12 +1,20 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
 
-const findMany = vi.hoisted(() => vi.fn());
-const create = vi.hoisted(() => vi.fn());
+const selectFrom = vi.hoisted(() => vi.fn());
+const insertValues = vi.hoisted(() => vi.fn());
 const getBool = vi.hoisted(() => vi.fn());
 const get = vi.hoisted(() => vi.fn());
 
-vi.mock("@/lib/prisma", () => ({
-	prisma: { websiteIpBlacklist: { findMany, create } },
+vi.mock("@/lib/db", () => ({
+	db: {
+		select: () => ({
+			from: () => Promise.resolve(selectFrom()),
+		}),
+		insert: () => ({
+			values: (data: unknown) => insertValues(data),
+		}),
+	},
+	WebsiteIpBlacklist: { ipAddress: "WebsiteIpBlacklist.ipAddress" },
 }));
 
 vi.mock("@/lib/services/alert", () => ({
@@ -26,23 +34,23 @@ describe("isIpBlacklisted", () => {
 		expect(await isIpBlacklisted("127.0.0.1")).toBe(false);
 		expect(await isIpBlacklisted("192.168.1.1")).toBe(false);
 		expect(await isIpBlacklisted("10.0.0.1")).toBe(false);
-		expect(findMany).not.toHaveBeenCalled();
+		expect(selectFrom).not.toHaveBeenCalled();
 	});
 
 	it("loads, caches, and correctly checks multiple IPs", async () => {
-		findMany.mockResolvedValue([{ ipAddress: "1.2.3.4" }]);
+		selectFrom.mockResolvedValue([{ ipAddress: "1.2.3.4" }]);
 
 		expect(await isIpBlacklisted("1.2.3.4")).toBe(true);
 		expect(await isIpBlacklisted("1.2.3.4")).toBe(true);
 		expect(await isIpBlacklisted("5.6.7.8")).toBe(false);
-		expect(findMany).toHaveBeenCalledTimes(1);
+		expect(selectFrom).toHaveBeenCalledTimes(1);
 
-		findMany.mockResolvedValue([]);
+		selectFrom.mockResolvedValue([]);
 		expect(await isIpBlacklisted("1.2.3.4")).toBe(true);
 	});
 
 	it("handles DB error gracefully (uses stale cache)", async () => {
-		findMany.mockRejectedValue(new Error("DB error"));
+		selectFrom.mockRejectedValue(new Error("DB error"));
 		expect(await isIpBlacklisted("1.2.3.4")).toBe(true);
 		expect(await isIpBlacklisted("9.9.9.9")).toBe(false);
 	});
@@ -52,7 +60,7 @@ describe("recordRequest", () => {
 	beforeEach(() => {
 		getBool.mockReset();
 		get.mockReset();
-		create.mockReset();
+		insertValues.mockReset();
 	});
 
 	it("ignores private IPs", async () => {
@@ -72,17 +80,15 @@ describe("recordRequest", () => {
 			if (_key === "abuse_guard_threshold") return "3";
 			return fallback;
 		});
-		create.mockResolvedValue({});
+		insertValues.mockResolvedValue({});
 
 		await recordRequest("1.2.3.4");
 		await recordRequest("1.2.3.4");
-		expect(create).not.toHaveBeenCalled();
+		expect(insertValues).not.toHaveBeenCalled();
 
 		await recordRequest("1.2.3.4");
-		expect(create).toHaveBeenCalledWith(
-			expect.objectContaining({
-				data: expect.objectContaining({ ipAddress: "1.2.3.4" }),
-			}),
+		expect(insertValues).toHaveBeenCalledWith(
+			expect.objectContaining({ ipAddress: "1.2.3.4" }),
 		);
 	});
 });