Initial commit - Route Commerce platform

src/actions/admin/audit.ts

@@ -0,0 +1,64 @@
+"use server";
+
+import { createClient as createServiceClient } from "@supabase/supabase-js";
+
+function getServiceClient() {
+  const roleKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+  if (!roleKey) throw new Error("SUPABASE_SERVICE_ROLE_KEY is not set");
+  return createServiceClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    roleKey,
+  );
+}
+
+type AdminActionPayload = {
+  action_type: "create" | "update" | "delete";
+  admin_id?: string;
+  admin_email?: string;
+  affected_user_id?: string;
+  brand_id?: string;
+  details?: Record<string, unknown>;
+};
+
+type UserActivityPayload = {
+  user_id: string;
+  activity_type: "login" | "logout" | "password_change" | "profile_update" | "email_change";
+  details?: Record<string, unknown>;
+  ip_address?: string;
+  user_agent?: string;
+};
+
+export async function logAdminAction(payload: AdminActionPayload): Promise<void> {
+  try {
+    const service = getServiceClient();
+    await service.rpc("log_admin_action", {
+      p_payload: {
+        action_type: payload.action_type,
+        admin_id: payload.admin_id ?? null,
+        admin_email: payload.admin_email ?? null,
+        affected_user_id: payload.affected_user_id ?? null,
+        brand_id: payload.brand_id ?? null,
+        details: payload.details ?? {},
+      },
+    });
+  } catch (e) {
+    // logging failed silently
+  }
+}
+
+export async function logUserActivity(payload: UserActivityPayload): Promise<void> {
+  try {
+    const service = getServiceClient();
+    await service.rpc("log_user_activity", {
+      p_payload: {
+        user_id: payload.user_id,
+        activity_type: payload.activity_type,
+        details: payload.details ?? {},
+        ip_address: payload.ip_address ?? null,
+        user_agent: payload.user_agent ?? null,
+      },
+    });
+  } catch (e) {
+    // logging failed silently
+  }
+}