slot/next-app/apps/web/src/lib/admin-write.ts

// Helpers shared by simple list+delete admin pages.
import { legacySql } from '@slot/db/legacy';
import { getCurrentSiteUser } from '@/lib/page-data';
import { redirect } from 'next/navigation';
import { revalidatePath } from 'next/cache';

export async function requireAdmin() {
  const u = await getCurrentSiteUser();
  if (!u || (u.level ?? 0) < 10) redirect('/');
  return u;
}

export async function deleteByPk(table: string, pkCol: string, pkVal: string | number, revalidate?: string) {
  await requireAdmin();
  if (!/^[a-z0-9_.]+$/i.test(table) || !/^[a-z0-9_]+$/i.test(pkCol)) return;
  await legacySql`DELETE FROM ${legacySql.unsafe(table)} WHERE ${legacySql.unsafe(pkCol)} = ${pkVal as any}`.catch(() => {});
  if (revalidate) revalidatePath(revalidate);
}