import { hasRole } from "@/lib/rbac";

this logic already exists in lib/rbac.ts, you can use the hasRole function

Can remove this and replace with hasRole (will make the comment below again)

replace this with if (!hasRole(user.role, "AMBASSADOR")) {

So delete the isAmbassadorOrHigher function entirely and import hasRole (I made these comments above)

Also move this hasRole conditional check above the findUnique function above

add const role = session?.user?.role;

The rols is already in the session token set by auth.ts so you do not need to query the DB for it on every request. Can use session?.user?.role directly and only query the DB for the user id (which is needed for createdByUserID in POST)

make this if (!email || !role) {

can remove role: true

Please add try/catch here.. it would look something like this:

  try {
    const events = await prisma.event.findMany({
      orderBy: { startAt: "asc" },
    });
    return NextResponse.json(events);
  } catch (err) {
    console.error("GET /api/admin/events:", err);
    return NextResponse.json({ error: "Failed to fetch events" }, { status: 500 });
  }

(Also have to do it for POST below.. ill leave comment)

Add try/catch like above.. something like this:

 try {
    const created = await prisma.event.create({
      data: {
        title: body.title,
        description: body.description ?? null,
        startAt,
        endAt,
        location: body.location ?? null,
        link: body.link ?? null,
        createdByUserId: gate.user.id,
      },
    });
    return NextResponse.json(created, { status: 201 });
  } catch (err) {
    console.error("POST /api/admin/events:", err);
    return NextResponse.json({ error: "Failed to create event" }, { status: 500 });
  }
}