refactor(db): migrate staff and app actions from Prisma facade to Drizzle

Co-authored-by: Cursor <[email protected]>

src/lib/services/abuse-guard.ts

@@ -1,4 +1,4 @@
-import { prisma } from "@/lib/prisma";
+import { db, WebsiteIpBlacklist } from "@/lib/db";
 import { ddosDetected } from "@/lib/services/alert";
 import { siteSettings } from "@/lib/services/site-settings";
 
@@ -54,9 +54,9 @@ export async function isIpBlacklisted(ip: string): Promise<boolean> {
 	const now = Date.now();
 	if (now - blacklistLoadedAt >= BLACKLIST_TTL) {
 		try {
-			const rows = await prisma.websiteIpBlacklist.findMany({
-				select: { ipAddress: true },
-			});
+			const rows = await db
+				.select({ ipAddress: WebsiteIpBlacklist.ipAddress })
+				.from(WebsiteIpBlacklist);
 			blacklist = new Set(rows.map((r) => r.ipAddress));
 			blacklistLoadedAt = now;
 		} catch {
@@ -91,8 +91,10 @@ export async function recordRequest(ip: string): Promise<void> {
 		recentlyBlocked.add(ip);
 		setTimeout(() => recentlyBlocked.delete(ip), 60_000);
 		try {
-			await prisma.websiteIpBlacklist.create({
-				data: { ipAddress: ip, createdAt: new Date(), updatedAt: new Date() },
+			await db.insert(WebsiteIpBlacklist).values({
+				ipAddress: ip,
+				createdAt: new Date(),
+				updatedAt: new Date(),
 			});
 			blacklistLoadedAt = 0;
 			await ddosDetected(ip, b.count);