"use server"; import { z } from "zod"; import { PERMS } from "@/lib/permissions"; import { prisma } from "@/lib/prisma"; import { adminAction } from "@/lib/safe-action"; import { ActionError, actionOk } from "@/lib/safe-action-shared"; import { logAudit } from "@/lib/services/audit"; const bannerSchema = z.object({ title: z.string().min(1).max(255), subtitle: z.string().max(500).optional().default(""), image: z.string().max(500), link: z.string().max(500).optional().default(""), color: z.string().max(20).optional().default(""), isActive: z.coerce.number().int().min(0).max(1).default(1), sortOrder: z.coerce.number().int().min(0).default(0), startDate: z.string().max(50).nullable().optional(), endDate: z.string().max(50).nullable().optional(), }); export const createBanner = adminAction( { permission: PERMS.BANNERS_EDIT, schema: bannerSchema }, async (ctx) => { const banner = await prisma.websiteBanner.create({ data: ctx.data }); logAudit({ userId: ctx.session.user.id, action: "banner_create", target: "WebsiteBanner", targetId: banner.id, after: { title: banner.title }, }); return actionOk({ id: banner.id }); }, ); const updateBannerInput = bannerSchema .partial() .extend({ id: z.coerce.number().int().positive() }); export const updateBanner = adminAction( { permission: PERMS.BANNERS_EDIT, schema: updateBannerInput }, async (ctx) => { const { id, ...data } = ctx.data; const existing = await prisma.websiteBanner.findUnique({ where: { id } }); if (!existing) throw new ActionError("Banner not found"); await prisma.websiteBanner.update({ where: { id }, data }); logAudit({ userId: ctx.session.user.id, action: "banner_update", target: "WebsiteBanner", targetId: id, }); return actionOk({ id }); }, ); const deleteBannerInput = z.object({ id: z.coerce.number().int().positive() }); export const deleteBanner = adminAction( { permission: PERMS.BANNERS_EDIT, schema: deleteBannerInput }, async (ctx) => { await prisma.websiteBanner.delete({ where: { id: ctx.data.id } }); logAudit({ userId: ctx.session.user.id, action: "banner_delete", target: "WebsiteBanner", targetId: ctx.data.id, }); return actionOk(); }, );