@allbluecn/admin-app 0.3.2 → 0.3.3

package/src/server/serverFns/admin-billing.ts

@@ -17,7 +17,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 import { z } from 'zod'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import { requireAdmin } from '@/server/auth-helpers'
 
 const listSubscriptionsInput = z.object({
@@ -31,11 +31,17 @@ const listSubscriptionsInput = z.object({
 export const listAllSubscriptionsFn = createServerFn({ method: 'GET' })
   .validator(listSubscriptionsInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     await requireAdmin()
 
     const where: any = {}
     if (data.search) {
-      where.OR = [{ workspace: { name: { contains: data.search } } }]
+      // 修复：Subscription 无 workspace 关系（OSS schema 订阅挂在 userId 上），
+      // 检索走 user name/email；原 `workspace.name contains` 会 PrismaClientValidationError
+      where.OR = [
+        { user: { name: { contains: data.search } } },
+        { user: { email: { contains: data.search } } },
+      ]
     }
     if (data.plan) {
       where.planId = data.plan
@@ -44,32 +50,76 @@ export const listAllSubscriptionsFn = createServerFn({ method: 'GET' })
       where.status = data.status
     }
 
-    const [items, total] = await Promise.all([
+    // DB-05：include 全行（含 provider 凭据 id 等）改白名单 select。
+    // 响应 shape 保持消费方键位不变：workspace.name 由 user 映射、seats 由
+    // plan.maxSeats + addonSeats 计算（schema 注释的实际上限口径）。
+    const [subs, total] = await Promise.all([
       prisma.subscription.findMany({
         where,
-        include: { plan: true, workspace: true },
         orderBy: { createdAt: 'desc' },
         skip: (data.page - 1) * data.pageSize,
         take: data.pageSize,
+        select: {
+          id: true,
+          status: true,
+          addonSeats: true,
+          currentPeriodEnd: true,
+          plan: { select: { name: true, maxSeats: true } },
+          user: { select: { name: true, email: true } },
+        },
       }),
       prisma.subscription.count({ where }),
     ])
 
+    const items = subs.map((s) => ({
+      id: s.id,
+      workspace: { name: s.user?.name ?? s.user?.email ?? null },
+      plan: { name: s.plan?.name ?? null },
+      status: s.status,
+      seats: (s.plan?.maxSeats ?? 0) + s.addonSeats,
+      currentPeriodEnd: s.currentPeriodEnd,
+    }))
+
     return { items, total, page: data.page, pageSize: data.pageSize }
   })
 
 export const getSubscriptionDetailFn = createServerFn({ method: 'GET' })
   .validator(z.object({ subscriptionId: z.string() }))
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     await requireAdmin()
-    return prisma.subscription.findUnique({
+    const detail = await prisma.subscription.findUnique({
       where: { id: data.subscriptionId },
-      include: {
-        plan: true,
-        workspace: true,
-        invoices: { orderBy: { createdAt: 'desc' } },
+      select: {
+        id: true,
+        status: true,
+        addonSeats: true,
+        currentPeriodStart: true,
+        currentPeriodEnd: true,
+        providerSubscriptionId: true,
+        plan: { select: { id: true, name: true, displayName: true, maxSeats: true } },
+        user: { select: { id: true, name: true, email: true } },
+        invoices: {
+          orderBy: { createdAt: 'desc' },
+          select: {
+            id: true,
+            status: true,
+            currency: true,
+            amountDue: true,
+            periodStart: true,
+            periodEnd: true,
+            createdAt: true,
+          },
+        },
       },
     })
+    if (!detail) return null
+    // 同 listAllSubscriptionsFn：workspace/seats 由 user/plan+addonSeats 映射，键位不变
+    return {
+      ...detail,
+      workspace: { name: detail.user?.name ?? detail.user?.email ?? null },
+      seats: (detail.plan?.maxSeats ?? 0) + detail.addonSeats,
+    }
   })
 
 export const listAllInvoicesFn = createServerFn({ method: 'GET' })
@@ -77,18 +127,63 @@ export const listAllInvoicesFn = createServerFn({ method: 'GET' })
     z.object({
       page: z.number().default(1),
       pageSize: z.number().default(20),
+      // DB-02：补 where 参数化（status 过滤；UI 暂无筛选器，默认不过滤——
+      // 账单审计要求全量分页可见，避免默认隐藏历史发票）
+      status: z.string().optional(),
     }),
   )
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     await requireAdmin()
-    const [items, total] = await Promise.all([
+    const where: any = {}
+    if (data.status) {
+      where.status = data.status
+    }
+    // DB-05：白名单 select；workspace.name 由 subscription.user 映射（键位不变）
+    const [rows, total] = await Promise.all([
       prisma.invoice.findMany({
+        where,
         orderBy: { createdAt: 'desc' },
-        include: { subscription: { include: { workspace: true, plan: true } } },
         skip: (data.page - 1) * data.pageSize,
         take: data.pageSize,
+        select: {
+          id: true,
+          status: true,
+          currency: true,
+          amountDue: true,
+          amountPaid: true,
+          periodStart: true,
+          periodEnd: true,
+          createdAt: true,
+          subscription: {
+            select: {
+              id: true,
+              plan: { select: { name: true } },
+              user: { select: { name: true, email: true } },
+            },
+          },
+        },
       }),
-      prisma.invoice.count(),
+      prisma.invoice.count({ where }),
     ])
+    const items = rows.map((inv) => ({
+      id: inv.id,
+      status: inv.status,
+      currency: inv.currency,
+      amountDue: inv.amountDue,
+      periodStart: inv.periodStart,
+      periodEnd: inv.periodEnd,
+      createdAt: inv.createdAt,
+      subscription: inv.subscription
+        ? {
+            id: inv.subscription.id,
+            workspace: {
+              name:
+                inv.subscription.user?.name ?? inv.subscription.user?.email ?? null,
+            },
+            plan: { name: inv.subscription.plan?.name ?? null },
+          }
+        : null,
+    }))
     return { items, total, page: data.page, pageSize: data.pageSize }
   })

package/src/server/serverFns/ai-memory/list-users.ts

@@ -18,13 +18,14 @@
 // apps/admin/src/server/serverFns/ai-memory/list-users.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import { requireAdmin } from "../../auth-helpers"
 
 /** 列出可查询的用户（admin 按 userId 查记忆事实的前置选择） */
 export const listMemoryUsersFn = createServerFn({ method: "GET" })
   .validator(z.object({}))
   .handler(async () => {
+    const prisma = await getPrisma()
     await requireAdmin()
     const users = await prisma.user.findMany({
       orderBy: [{ username: "asc" }],

package/src/server/serverFns/ai-prompts/activate.ts

@@ -18,7 +18,7 @@
 // apps/admin/src/server/serverFns/ai-prompts/activate.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import { requireAdmin } from "../../auth-helpers"
 
 const activateSchema = z.object({
@@ -30,6 +30,7 @@ const activateSchema = z.object({
 export const activatePromptTemplateFn = createServerFn({ method: "POST" })
   .validator(activateSchema)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const session = await requireAdmin()
     const updatedBy = session.user?.id ?? null
     const existing = await prisma.systemPromptTemplate.findUnique({

package/src/server/serverFns/ai-prompts/get.ts

@@ -18,13 +18,13 @@
 // apps/admin/src/server/serverFns/ai-prompts/get.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import type {
   SystemPromptSectionDTO,
   SystemPromptTemplateDTO,
 } from "@allbluecn/kernel"
 import { requireAdmin } from "../../auth-helpers"
-import { backfillMissingPromptTemplates } from "./prompt-defaults"
+import { backfillMissingPromptTemplates } from "@/server/ai-prompts/prompt-defaults"
 
 const getInput = z.object({ key: z.string() })
 
@@ -40,6 +40,7 @@ export interface PromptVersionSummary {
 export const getPromptTemplateFn = createServerFn({ method: "GET" })
   .validator(getInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     await requireAdmin()
     await backfillMissingPromptTemplates()
     const template = await prisma.systemPromptTemplate.findUnique({

package/src/server/serverFns/ai-prompts/list.ts

@@ -18,15 +18,16 @@
 // apps/admin/src/server/serverFns/ai-prompts/list.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import { requireAdmin } from "../../auth-helpers"
-import { backfillMissingPromptTemplates } from "./prompt-defaults"
+import { backfillMissingPromptTemplates } from "@/server/ai-prompts/prompt-defaults"
 
 /** 列出提示词模板（列表页只取轻量字段，详情经 get 加载） */
 export const listPromptTemplatesFn = createServerFn({ method: "GET" })
   .validator(z.object({}))
   .handler(
   async () => {
+    const prisma = await getPrisma()
     await requireAdmin()
     await backfillMissingPromptTemplates()
     const templates = await prisma.systemPromptTemplate.findMany({

package/src/server/serverFns/ai-prompts/rollback.ts

@@ -18,7 +18,8 @@
 // apps/admin/src/server/serverFns/ai-prompts/rollback.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma, Prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import type { Prisma } from "@allbluecn/database"
 import type {
   PromptVariableDefDTO,
   SystemPromptSectionDTO,
@@ -39,6 +40,7 @@ function toJson(value: unknown): Prisma.InputJsonValue {
 export const rollbackPromptTemplateFn = createServerFn({ method: "POST" })
   .validator(rollbackSchema)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const session = await requireAdmin()
     const updatedBy = session.user?.id ?? null
     return prisma.$transaction(async (tx) => {

package/src/server/serverFns/ai-prompts/save.ts

@@ -18,11 +18,12 @@
 // apps/admin/src/server/serverFns/ai-prompts/save.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma, Prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import type { Prisma } from "@allbluecn/database"
 import { requireAdmin } from "../../auth-helpers"
 import { promptSectionSchema, promptVariableSchema } from "./prompt-schemas"
-import { getPromptDefinition } from "@allbluecn/web-app/ai-gateway/prompts/definitions"
-import { BACKFILL_SNAPSHOT_NOTE } from "./prompt-defaults"
+import { getPromptDefinition } from "@allbluecn/kernel"
+import { BACKFILL_SNAPSHOT_NOTE } from "@/server/ai-prompts/prompt-defaults"
 
 const saveSchema = z.object({
   key: z.string(),
@@ -42,6 +43,7 @@ function toJson(value: unknown): Prisma.InputJsonValue {
 export const savePromptTemplateFn = createServerFn({ method: "POST" })
   .validator(saveSchema)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const session = await requireAdmin()
     const updatedBy = session.user?.id ?? null
     return prisma.$transaction(async (tx) => {

package/src/server/serverFns/ai-provider/create.ts

@@ -18,11 +18,12 @@
 // apps/admin/src/server/serverFns/ai-provider/create.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import {
   ADAPTER_KIND_VALUES,
   PROVIDER_CATEGORY_VALUES,
 } from "@allbluecn/kernel"
+import { requireAdmin } from "@/server/auth-helpers"
 
 const modelSchema = z.object({
   id: z.string().min(1),
@@ -62,6 +63,8 @@ const createInput = z.object({
 export const createAiProviderAdminFn = createServerFn({ method: "POST" })
   .validator(createInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const exists = await prisma.aiProvider.findUnique({
       where: { providerId: data.providerId },
     })

package/src/server/serverFns/ai-provider/delete.ts

@@ -18,11 +18,14 @@
 // apps/admin/src/server/serverFns/ai-provider/delete.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
+import { requireAdmin } from "@/server/auth-helpers"
 
 export const deleteAiProviderAdminFn = createServerFn({ method: "POST" })
   .validator(z.object({ id: z.string() }))
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const provider = await prisma.aiProvider.findUnique({
       where: { id: data.id },
       select: { providerId: true },

package/src/server/serverFns/ai-provider/get.ts

@@ -18,12 +18,15 @@
 // apps/admin/src/server/serverFns/ai-provider/get.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import type { AiProviderMeta } from "@allbluecn/kernel"
+import { requireAdmin } from "@/server/auth-helpers"
 
 export const getAiProviderAdminFn = createServerFn({ method: "GET" })
   .validator(z.object({ id: z.string() }))
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const p = await prisma.aiProvider.findUnique({ where: { id: data.id } })
     if (!p) throw new Error("未找到服务商")
     return {

package/src/server/serverFns/ai-provider/list.ts

@@ -18,8 +18,9 @@
 // apps/admin/src/server/serverFns/ai-provider/list.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import type { AiProviderRow } from "@allbluecn/kernel"
+import { requireAdmin } from "@/server/auth-helpers"
 
 const listInput = z.object({
   search: z.string().optional(),
@@ -31,6 +32,8 @@ const listInput = z.object({
 export const listAiProvidersAdminFn = createServerFn({ method: "GET" })
   .validator(listInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const where: {
       OR?: Array<Record<string, unknown>>
       enabled?: boolean
@@ -46,9 +49,33 @@ export const listAiProvidersAdminFn = createServerFn({ method: "GET" })
     if (data.enabled !== undefined) where.enabled = data.enabled
     if (data.category) where.category = data.category
 
+    // DB-05：白名单 select——消费方 AiProviderRow 映射用到全部列，显式列出防
+    // 未来新增敏感列被整行外泄
     const providers = await prisma.aiProvider.findMany({
       where,
       orderBy: [{ sortOrder: "asc" }, { createdAt: "asc" }],
+      select: {
+        id: true,
+        providerId: true,
+        displayName: true,
+        brandName: true,
+        description: true,
+        category: true,
+        adapterKind: true,
+        defaultBaseUrl: true,
+        keyUrl: true,
+        docsUrl: true,
+        keyPlaceholder: true,
+        iconSlug: true,
+        brandColor: true,
+        badge: true,
+        isLocal: true,
+        enabled: true,
+        models: true,
+        sortOrder: true,
+        createdAt: true,
+        updatedAt: true,
+      },
     })
 
     const providerIds = providers.map((p) => p.providerId)

package/src/server/serverFns/ai-provider/seed-from-seed.ts

@@ -18,13 +18,14 @@
 // apps/admin/src/server/serverFns/ai-provider/seed-from-seed.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import { SEED_AI_PROVIDERS } from "@allbluecn/kernel"
 import { requireAdmin } from "../../auth-helpers"
 
 export const seedFromSeedFn = createServerFn({ method: "POST" })
   .validator(z.object({}))
   .handler(async () => {
+    const prisma = await getPrisma()
     await requireAdmin()
     const created: string[] = []
     const skipped: string[] = []

package/src/server/serverFns/ai-provider/update.ts

@@ -18,11 +18,12 @@
 // apps/admin/src/server/serverFns/ai-provider/update.ts
 import { createServerFn } from "@tanstack/react-start"
 import { z } from "zod"
-import { prisma } from "@allbluecn/database"
+import { getPrisma } from "@allbluecn/database/get-prisma"
 import {
   ADAPTER_KIND_VALUES,
   PROVIDER_CATEGORY_VALUES,
 } from "@allbluecn/kernel"
+import { requireAdmin } from "@/server/auth-helpers"
 
 const modelSchema = z.object({
   id: z.string().min(1),
@@ -55,6 +56,8 @@ const updateInput = z.object({
 export const updateAiProviderAdminFn = createServerFn({ method: "POST" })
   .validator(updateInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const { id, ...rest } = data
     const update: Record<string, unknown> = {}
     for (const [k, v] of Object.entries(rest)) {

package/src/server/serverFns/anyhub/market.ts

@@ -17,7 +17,8 @@
 
 import { createServerFn } from '@tanstack/react-start'
 import { z } from 'zod'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
+import { requireAdmin } from '@/server/auth-helpers'
 
 const listInput = z.object({
   page: z.number().default(1),
@@ -29,6 +30,8 @@ const listInput = z.object({
 export const listMarketAppsFn = createServerFn({ method: 'GET' })
   .validator(listInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const { page, pageSize, search, category } = data
     const where: any = {}
     if (search) where.name = { contains: search, mode: 'insensitive' }
@@ -52,6 +55,8 @@ const updateInput = z.object({
 export const updateMarketAppFn = createServerFn({ method: 'POST' })
   .validator(updateInput)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     const { id, ...update } = data
     return prisma.anyHubMarketApp.update({ where: { id }, data: update })
   })
@@ -59,6 +64,8 @@ export const updateMarketAppFn = createServerFn({ method: 'POST' })
 export const deleteMarketAppFn = createServerFn({ method: 'POST' })
   .validator(z.object({ id: z.string() }))
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
+    await requireAdmin()
     await prisma.anyHubMarketApp.delete({ where: { id: data.id } })
     return { success: true }
   })

package/src/server/serverFns/audit.ts

@@ -17,7 +17,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 import { z } from 'zod'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import { requireAdmin } from '@/server/auth-helpers'
 import { requireFeature } from '@/server/entitlements'
 
@@ -34,6 +34,7 @@ const querySchema = z.object({
 export const queryAuditLogsFn = createServerFn({ method: 'GET' })
   .validator(querySchema)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     await requireAdmin()
     await requireFeature(undefined, 'audit')
     const where: any = {
@@ -50,6 +51,18 @@ export const queryAuditLogsFn = createServerFn({ method: 'GET' })
         orderBy: { createdAt: 'desc' },
         skip: (data.page - 1) * data.pageSize,
         take: data.pageSize,
+        // DB-05：metadata Json 载荷列表页不渲染，白名单排除
+        select: {
+          id: true,
+          workspaceId: true,
+          userId: true,
+          action: true,
+          resourceType: true,
+          resourceId: true,
+          ip: true,
+          userAgent: true,
+          createdAt: true,
+        },
       }),
       prisma.auditLog.count({ where }),
     ])

package/src/server/serverFns/auth/setup.ts

@@ -17,7 +17,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 import { z } from 'zod'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import bcrypt from 'bcryptjs'
 import { getRandomConfig, presetBgColors } from '@/components/settings/avatar/avatar-config'
 
@@ -28,6 +28,7 @@ function pickBgColor(seed: string) {
 }
 
 export const checkAdminExistsFn = createServerFn({ method: 'GET' }).handler(async () => {
+  const prisma = await getPrisma()
   const count = await prisma.user.count({
     where: { role: { in: ['ADMIN', 'SUPER_ADMIN'] } },
   })
@@ -43,6 +44,7 @@ const setupSchema = z.object({
 export const setupAdminFn = createServerFn({ method: 'POST' })
   .validator(setupSchema)
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const count = await prisma.user.count({
       where: { role: 'SUPER_ADMIN' },
     })

package/src/server/serverFns/compliance.ts

@@ -18,14 +18,23 @@
 import { createServerFn } from '@tanstack/react-start'
 import { getRequest } from '@tanstack/react-start/server'
 import { z } from 'zod'
-import { prisma } from '@allbluecn/database'
+import { getPrisma } from '@allbluecn/database/get-prisma'
 import { getProService } from '@/server/pro-services'
 import { requireAdmin } from '@/server/auth-helpers'
 import { requireFeature } from '@/server/entitlements'
 
 export const listComplianceExportsFn = createServerFn({ method: 'GET' })
-  .validator(z.object({ page: z.number().default(1), pageSize: z.number().default(20) }))
+  .validator(
+    z.object({
+      page: z.number().default(1),
+      pageSize: z.number().default(20),
+      // DB-02：where 参数化（status 过滤）；UI 暂无筛选器，默认不过滤——
+      // 合规任务列表含已过期项的状态呈现，默认隐藏会破坏审计可见性
+      status: z.string().optional(),
+    }),
+  )
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const request = getRequest()
     await requireAdmin()
     await requireFeature(request, 'compliance')
@@ -33,13 +42,31 @@ export const listComplianceExportsFn = createServerFn({ method: 'GET' })
     if (compliance) {
       return compliance.listJobs({ page: data.page, pageSize: data.pageSize })
     }
+    const where: any = {}
+    if (data.status) {
+      where.status = data.status
+    }
+    // DB-05：content（导出负载，可极大）与 downloadUrl/completedAt 列表页不消费，
+    // 白名单排除；下载走 /api/compliance-download/:id，不需要 downloadUrl
     const [items, total] = await Promise.all([
       prisma.complianceExport.findMany({
+        where,
         orderBy: { createdAt: 'desc' },
         skip: (data.page - 1) * data.pageSize,
         take: data.pageSize,
+        select: {
+          id: true,
+          type: true,
+          scope: true,
+          targetId: true,
+          status: true,
+          expiresAt: true,
+          error: true,
+          requestedBy: true,
+          createdAt: true,
+        },
       }),
-      prisma.complianceExport.count(),
+      prisma.complianceExport.count({ where }),
     ])
     return { items, total }
   })
@@ -54,6 +81,7 @@ export const createComplianceExportFn = createServerFn({ method: 'POST' })
     }),
   )
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const request = getRequest()
     await requireAdmin()
     await requireFeature(request, 'compliance')
@@ -70,6 +98,7 @@ export const createComplianceExportFn = createServerFn({ method: 'POST' })
 export const executeComplianceJobFn = createServerFn({ method: 'POST' })
   .validator(z.object({ jobId: z.string() }))
   .handler(async ({ data }) => {
+    const prisma = await getPrisma()
     const request = getRequest()
     await requireAdmin()
     await requireFeature(request, 'compliance')