admin: Superforms + Zod validation, three-address-defaults schema, profiles toast fix

- Add Superforms + Zod 4 for all admin form validation
- Replace address isDefault with three separate boolean defaults (Mailing, Billing, Shipping)
- Update profiles page with three-checkbox address form and toast improvements
- Convert all admin page server actions to pass request directly to crud
- Export superFormErrorsToFieldErrors helper for profiles server actions
- Regenerate Prisma client for new schema fields

src/routes/(protected)/admin/profiles/+page.server.ts

@@ -1,8 +1,16 @@
 import type { PageServerLoad } from './$types';
 import { getModelConfig } from '$lib/svelte-admin/registry';
-import { loadRecords, upsertRecord, deleteRecord } from '$lib/svelte-admin/crud';
+import {
+	loadRecords,
+	upsertRecord,
+	deleteRecord,
+	superFormErrorsToFieldErrors
+} from '$lib/svelte-admin/crud';
 import { prisma } from '$lib/db';
 import { error } from '@sveltejs/kit';
+import { superValidate } from 'sveltekit-superforms';
+import { zod4 } from 'sveltekit-superforms/adapters';
+import * as Schemas from '$lib/svelte-admin/schemas';
 
 const config = getModelConfig('profiles')!;
 
@@ -12,67 +20,73 @@ export const load: PageServerLoad = async ({ locals }) => {
 
 export const actions = {
 	upsert: async ({ request, locals }) => {
-		const formData = await request.formData();
-		return upsertRecord(formData, config, locals);
+		return upsertRecord(request, config, locals);
 	},
 	delete: async ({ request, locals }) => {
-		const formData = await request.formData();
-		return deleteRecord(formData, config, locals);
+		return deleteRecord(request, config, locals);
 	},
 	upsertAddress: async ({ request, locals }) => {
 		if (!locals.user) throw error(401, 'Unauthorized');
 
-		const formData = await request.formData();
-		const id = formData.get('id')?.toString();
-		const profileId = formData.get('profileId')?.toString();
+		const form = await superValidate(request, zod4(Schemas.Address));
+		if (!form.valid) {
+			const { error: addrError, fieldErrors } = superFormErrorsToFieldErrors(
+				form.errors as Record<string, unknown>
+			);
+			return { success: false, addressError: addrError, addressFieldErrors: fieldErrors };
+		}
+
+		const { profileId, isDefaultMailing, isDefaultBilling, isDefaultShipping, ...addressData } =
+			form.data;
+
 		if (!profileId) {
 			return { success: false, addressError: 'Missing profile ID' };
 		}
 
-		const type = formData.get('type')?.toString() || 'Mailing';
-		const street = formData.get('street')?.toString() || '';
-		const city = formData.get('city')?.toString() || '';
-		const state = formData.get('state')?.toString() || '';
-		const postalCode = formData.get('postalCode')?.toString() || '';
-		const country = formData.get('country')?.toString() || '';
-		const isDefault = formData.get('isDefault') === 'on';
-
-		if (!street || !city || !state || !postalCode || !country) {
-			return {
-				success: false,
-				addressError: 'All address fields are required'
-			};
-		}
-
-		if (isDefault) {
+		// Unique-default enforcement: clear defaults of same type before setting
+		if (isDefaultMailing) {
 			await prisma.address.updateMany({
-				where: { profileId, type, isDefault: true },
-				data: { isDefault: false }
+				where: { profileId, isDefaultMailing: true },
+				data: { isDefaultMailing: false }
+			});
+		}
+		if (isDefaultBilling) {
+			await prisma.address.updateMany({
+				where: { profileId, isDefaultBilling: true },
+				data: { isDefaultBilling: false }
+			});
+		}
+		if (isDefaultShipping) {
+			await prisma.address.updateMany({
+				where: { profileId, isDefaultShipping: true },
+				data: { isDefaultShipping: false }
 			});
 		}
 
-		if (id) {
-			const updated = await prisma.address.update({
-				where: { id },
-				data: { type, street, city, state, postalCode, country, isDefault }
-			});
-			return { success: true, address: updated };
-		}
+		const payload = {
+			...addressData,
+			profileId,
+			isDefaultMailing,
+			isDefaultBilling,
+			isDefaultShipping
+		};
 
-		const created = await prisma.address.create({
-			data: { profileId, type, street, city, state, postalCode, country, isDefault }
-		});
+		const created = await prisma.address.create({ data: payload });
 		return { success: true, address: created };
 	},
 	updateUser: async ({ request, locals }) => {
 		if (!locals.user) throw error(401, 'Unauthorized');
 
-		const formData = await request.formData();
-		const userId = formData.get('id')?.toString();
-		const email = formData.get('email')?.toString();
-		const name = formData.get('name')?.toString();
+		const form = await superValidate(request, zod4(Schemas.UserUpdate));
+		if (!form.valid) {
+			const { error: userErr, fieldErrors } = superFormErrorsToFieldErrors(
+				form.errors as Record<string, unknown>
+			);
+			return { success: false, userError: userErr, userFieldErrors: fieldErrors };
+		}
 
-		if (!userId) {
+		const { id, email, name } = form.data;
+		if (!id) {
 			return { success: false, userError: 'Missing user ID' };
 		}
 
@@ -83,7 +97,7 @@ export const actions = {
 			return { success: false, userError: 'No fields to update' };
 		}
 
-		await prisma.user.update({ where: { id: userId }, data });
+		await prisma.user.update({ where: { id }, data });
 		return { success: true };
 	}
 };

src/routes/(protected)/admin/profiles/+page.svelte

@@ -30,8 +30,9 @@
 		state: '',
 		postalCode: '',
 		country: '',
-		type: 'Mailing',
-		isDefault: 'false'
+		isDefaultMailing: 'false',
+		isDefaultBilling: 'false',
+		isDefaultShipping: 'false'
 	});
 
 	let userEmail = $state('');
@@ -44,11 +45,9 @@
 			} else if ((form as any).userError) {
 				userError = (form as any).userError;
 			} else if (form.success) {
-				toastMessage = (form as any).addressError
-					? 'Address saved'
-					: 'Saved successfully';
 				toastType = 'success';
 				if ((form as any).address) {
+					toastMessage = 'Address saved';
 					const addr = (form as any).address as Record<string, unknown>;
 					if (editingRecord) {
 						const addrs = (editingRecord.addresses as Record<string, unknown>[]) ?? [];
@@ -59,7 +58,8 @@
 					}
 					addressFormOpen = false;
 					addressError = '';
-				} else if (!(form as any).addressError && !(form as any).userError) {
+				} else {
+					toastMessage = 'Saved successfully';
 					closeModal();
 				}
 			} else if (!(form as any).addressError && !(form as any).userError) {
@@ -86,8 +86,8 @@
 		userFormOpen = false;
 		addressError = '';
 		userError = '';
-		userEmail = (record.user as Record<string, unknown>)?.email as string ?? '';
-		userName = (record.user as Record<string, unknown>)?.name as string ?? '';
+		userEmail = ((record.user as Record<string, unknown>)?.email as string) ?? '';
+		userName = ((record.user as Record<string, unknown>)?.name as string) ?? '';
 		modalOpen = true;
 	}
 
@@ -162,11 +162,16 @@
 				</button>
 			</div>
 			<p class="mb-1 text-sm text-gray-600 dark:text-gray-400">
-				{user?.name as string ?? ''} ({user?.email as string ?? ''})
+				{(user?.name as string) ?? ''} ({(user?.email as string) ?? ''})
 			</p>
 
 			{#if userFormOpen}
-				<form method="POST" action="?/updateUser" use:enhance class="mt-3 rounded border border-gray-200 p-3 dark:border-gray-700">
+				<form
+					method="POST"
+					action="?/updateUser"
+					use:enhance
+					class="mt-3 rounded border border-gray-200 p-3 dark:border-gray-700"
+				>
 					<input type="hidden" name="id" value={String(user?.id ?? '')} />
 					{#if userError}
 						<div class="mb-2 border border-red-300 bg-red-50 px-3 py-1.5 text-sm text-red-700">
@@ -175,7 +180,10 @@
 					{/if}
 					<div class="flex flex-col gap-2">
 						<div>
-							<label for="user-name" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="user-name"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								Name
 							</label>
 							<input
@@ -187,7 +195,10 @@
 							/>
 						</div>
 						<div>
-							<label for="user-email" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="user-email"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								Email
 							</label>
 							<input
@@ -227,7 +238,12 @@
 			</div>
 
 			{#if addressFormOpen}
-				<form method="POST" action="?/upsertAddress" use:enhance class="mb-3 rounded border border-gray-200 p-3 dark:border-gray-700">
+				<form
+					method="POST"
+					action="?/upsertAddress"
+					use:enhance
+					class="mb-3 rounded border border-gray-200 p-3 dark:border-gray-700"
+				>
 					<input type="hidden" name="profileId" value={String(editingRecord.id)} />
 					{#if addressError}
 						<div class="mb-2 border border-red-300 bg-red-50 px-3 py-1.5 text-sm text-red-700">
@@ -236,21 +252,10 @@
 					{/if}
 					<div class="grid grid-cols-2 gap-2">
 						<div>
-							<label for="addr-type" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
-								Type
-							</label>
-							<select
-								id="addr-type"
-								name="type"
-								class="w-full border border-gray-300 px-2 py-1 text-sm dark:border-gray-600 dark:bg-gray-800 dark:text-gray-100"
+							<label
+								for="addr-street"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
 							>
-								<option value="Mailing">Mailing</option>
-								<option value="Billing">Billing</option>
-								<option value="Shipping">Shipping</option>
-							</select>
-						</div>
-						<div>
-							<label for="addr-street" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
 								Street
 							</label>
 							<input
@@ -262,7 +267,10 @@
 							/>
 						</div>
 						<div>
-							<label for="addr-city" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="addr-city"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								City
 							</label>
 							<input
@@ -274,7 +282,10 @@
 							/>
 						</div>
 						<div>
-							<label for="addr-state" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="addr-state"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								State
 							</label>
 							<input
@@ -286,7 +297,10 @@
 							/>
 						</div>
 						<div>
-							<label for="addr-postal" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="addr-postal"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								Postal Code
 							</label>
 							<input
@@ -298,7 +312,10 @@
 							/>
 						</div>
 						<div>
-							<label for="addr-country" class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400">
+							<label
+								for="addr-country"
+								class="mb-0.5 block text-xs font-medium text-gray-600 dark:text-gray-400"
+							>
 								Country
 							</label>
 							<input
@@ -310,10 +327,20 @@
 							/>
 						</div>
 					</div>
-					<label class="mt-2 flex items-center gap-2 text-xs text-gray-600 dark:text-gray-400">
-						<input type="checkbox" name="isDefault" class="h-3.5 w-3.5" />
-						Set as default for this type
-					</label>
+					<div class="mt-2 flex flex-wrap gap-4">
+						<label class="flex items-center gap-1.5 text-xs text-gray-600 dark:text-gray-400">
+							<input type="checkbox" name="isDefaultMailing" class="h-3.5 w-3.5" />
+							Default Mailing
+						</label>
+						<label class="flex items-center gap-1.5 text-xs text-gray-600 dark:text-gray-400">
+							<input type="checkbox" name="isDefaultBilling" class="h-3.5 w-3.5" />
+							Default Billing
+						</label>
+						<label class="flex items-center gap-1.5 text-xs text-gray-600 dark:text-gray-400">
+							<input type="checkbox" name="isDefaultShipping" class="h-3.5 w-3.5" />
+							Default Shipping
+						</label>
+					</div>
 					<div class="mt-2 flex justify-end">
 						<button
 							type="submit"
@@ -329,25 +356,30 @@
 				<table class="w-full text-sm">
 					<thead>
 						<tr class="border-b border-gray-200 dark:border-gray-700">
-							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Type</th>
-							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Street</th>
+							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Street</th
+							>
 							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">City</th>
 							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">State</th>
 							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Zip</th>
-							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Country</th>
-							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase">Default</th>
+							<th class="px-2 py-1 text-left text-xs font-medium text-gray-500 uppercase"
+								>Country</th
+							>
+							<th class="px-2 py-1 text-center text-xs font-medium text-gray-500 uppercase">M</th>
+							<th class="px-2 py-1 text-center text-xs font-medium text-gray-500 uppercase">B</th>
+							<th class="px-2 py-1 text-center text-xs font-medium text-gray-500 uppercase">S</th>
 						</tr>
 					</thead>
 					<tbody>
 						{#each addresses as addr}
 							<tr class="border-b border-gray-100 dark:border-gray-800">
-								<td class="px-2 py-1 text-xs">{addr.type as string}</td>
 								<td class="px-2 py-1">{addr.street as string}</td>
 								<td class="px-2 py-1">{addr.city as string}</td>
 								<td class="px-2 py-1">{addr.state as string}</td>
 								<td class="px-2 py-1">{addr.postalCode as string}</td>
 								<td class="px-2 py-1">{addr.country as string}</td>
-								<td class="px-2 py-1">{addr.isDefault ? 'Yes' : ''}</td>
+								<td class="px-2 py-1 text-center text-xs">{addr.isDefaultMailing ? '✓' : ''}</td>
+								<td class="px-2 py-1 text-center text-xs">{addr.isDefaultBilling ? '✓' : ''}</td>
+								<td class="px-2 py-1 text-center text-xs">{addr.isDefaultShipping ? '✓' : ''}</td>
 							</tr>
 						{/each}
 					</tbody>