refactor(actions): split classes.ts into a folder (slice 3)

908-line lib/actions/classes.ts → lib/actions/classes/{definitions,sessions, signups,instructor}.ts ('use server') + _guard.ts (requirePermission/Gate) + _forms.ts (findSpaceForm/hasFormSubmission) + a plain index.ts barrel. All 14 actions preserved verbatim; lib/actions/index.ts unchanged. Helpers stay internal (not re-exported). tsc 0, tests green. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-08-04 06:01:02 -07:00
parent e205ce54c0
commit dbaae4851b
8 changed files with 963 additions and 908 deletions
@@ -0,0 +1,35 @@
+import { createClient } from '@/lib/supabase/server'
+import {
+  requireMember,
+  type Member,
+  type ServerSupabase,
+} from '@/lib/auth-helpers'
+
+export type Gate =
+  | { ok: true; supabase: ServerSupabase; member: Member }
+  | { ok: false; error: string }
+
+export async function requirePermission(
+  perm: 'classes.manage' | 'classes.instruct',
+): Promise<Gate> {
+  const supabase = await createClient()
+  const auth = await requireMember(supabase)
+  if (!auth.ok) return { ok: false, error: auth.error }
+  const { member } = auth
+  const { data: allowed, error } = await supabase.rpc('user_has_permission', {
+    uid: member.user_id as string,
+    sid: member.space_id,
+    perm,
+  })
+  if (error) return { ok: false, error: error.message }
+  if (!allowed) {
+    return {
+      ok: false,
+      error:
+        perm === 'classes.manage'
+          ? 'You do not have permission to manage classes'
+          : 'You do not have permission to run classes',
+    }
+  }
+  return { ok: true, supabase, member }
+}