feat: add admin content module actions

src/actions/banners.ts

@@ -0,0 +1,70 @@
+'use server'
+
+import { z } from 'zod'
+import { PERMS } from '@/lib/permissions'
+import { prisma } from '@/lib/prisma'
+import { adminAction } from '@/lib/safe-action'
+import { ActionError, actionOk } from '@/lib/safe-action-shared'
+import { logAudit } from '@/lib/services/audit'
+
+const bannerSchema = z.object({
+  title: z.string().min(1).max(255),
+  subtitle: z.string().max(500).optional().default(''),
+  image: z.string().max(500),
+  link: z.string().max(500).optional().default(''),
+  color: z.string().max(20).optional().default(''),
+  isActive: z.coerce.number().int().min(0).max(1).default(1),
+  sortOrder: z.coerce.number().int().min(0).default(0),
+  startDate: z.string().max(50).nullable().optional(),
+  endDate: z.string().max(50).nullable().optional(),
+})
+
+export const createBanner = adminAction(
+  { permission: PERMS.BANNERS_EDIT, schema: bannerSchema },
+  async (ctx) => {
+    const banner = await prisma.websiteBanner.create({ data: ctx.data })
+    logAudit({
+      userId: ctx.session.user.id,
+      action: 'banner_create',
+      target: 'WebsiteBanner',
+      targetId: banner.id,
+      after: { title: banner.title },
+    })
+    return actionOk({ id: banner.id })
+  },
+)
+
+const updateBannerInput = bannerSchema.partial().extend({ id: z.coerce.number().int().positive() })
+
+export const updateBanner = adminAction(
+  { permission: PERMS.BANNERS_EDIT, schema: updateBannerInput },
+  async (ctx) => {
+    const { id, ...data } = ctx.data
+    const existing = await prisma.websiteBanner.findUnique({ where: { id } })
+    if (!existing) throw new ActionError('Banner not found')
+    await prisma.websiteBanner.update({ where: { id }, data })
+    logAudit({
+      userId: ctx.session.user.id,
+      action: 'banner_update',
+      target: 'WebsiteBanner',
+      targetId: id,
+    })
+    return actionOk({ id })
+  },
+)
+
+const deleteBannerInput = z.object({ id: z.coerce.number().int().positive() })
+
+export const deleteBanner = adminAction(
+  { permission: PERMS.BANNERS_EDIT, schema: deleteBannerInput },
+  async (ctx) => {
+    await prisma.websiteBanner.delete({ where: { id: ctx.data.id } })
+    logAudit({
+      userId: ctx.session.user.id,
+      action: 'banner_delete',
+      target: 'WebsiteBanner',
+      targetId: ctx.data.id,
+    })
+    return actionOk()
+  },
+)