"use server";

export async function updateSubmission(id: string, data: Data) {
  const user = await requireAdmin();  // Throws if unauthorized

  await supabaseAdmin
    .from("form_submissions")
    .update(data)
    .eq("id", id);

  await logAudit(user.id, "submission.updated", { id });

  return { success: true };
}

type ActionResult<T> =
  | { success: true; data: T }
  | { success: false; error: string };

export async function createForm(data: FormData): Promise<ActionResult<Form>> {
  try {
    const user = await requireAdmin();
    const form = await insertForm(data);
    return { success: true, data: form };
  } catch (error) {
    return { success: false, error: error.message };
  }
}

import { revalidatePath } from "next/cache";

export async function publishForm(id: string) {
  await updateFormStatus(id, "published");
  revalidatePath(`/forms/${id}`);
  revalidatePath("/forms");
}