Stage 1.5: categories, enrollment expiry, access log, bulk grant, user page

src/app/admin/courses/[courseId]/actions.ts

@@ -8,6 +8,7 @@ import { revalidatePath } from "next/cache";
 async function requireAdmin() {
   const session = await auth.api.getSession({ headers: await headers() });
   if (!session || session.user.role !== "admin") throw new Error("Forbidden");
+  return session;
 }
 
 // ── Modules ──────────────────────────────────────────────────────────────────
@@ -45,20 +46,45 @@ export async function reorderModules(courseId: string, orderedIds: string[]) {
 
 // ── Enrollment ───────────────────────────────────────────────────────────────
 
-export async function grantAccess(courseId: string, userId: string) {
-  await requireAdmin();
+export async function grantAccess(
+  courseId: string,
+  userId: string,
+  expiresAt?: string | null,
+  note?: string
+) {
+  const session = await requireAdmin();
   await prisma.courseEnrollment.upsert({
     where: { userId_courseId: { userId, courseId } },
-    update: {},
-    create: { userId, courseId },
+    update: { expiresAt: expiresAt ? new Date(expiresAt) : null },
+    create: { userId, courseId, expiresAt: expiresAt ? new Date(expiresAt) : null },
+  });
+  await prisma.accessLog.create({
+    data: {
+      courseId,
+      userId,
+      action: "granted",
+      method: "manual",
+      grantedById: session.user.id,
+      note: note || null,
+    },
   });
   revalidatePath(`/admin/courses/${courseId}`);
 }
 
-export async function revokeAccess(courseId: string, userId: string) {
-  await requireAdmin();
+export async function revokeAccess(courseId: string, userId: string, note?: string) {
+  const session = await requireAdmin();
   await prisma.courseEnrollment.delete({
     where: { userId_courseId: { userId, courseId } },
   });
+  await prisma.accessLog.create({
+    data: {
+      courseId,
+      userId,
+      action: "revoked",
+      method: "manual",
+      grantedById: session.user.id,
+      note: note || null,
+    },
+  });
   revalidatePath(`/admin/courses/${courseId}`);
 }