feat : big update

app/api/commission/tickets/[id]/title/route.ts

@@ -0,0 +1,25 @@
+import { eq } from "drizzle-orm";
+import * as z from "zod";
+import { getDb } from "@/db";
+import { commissionTickets } from "@/db/schema";
+import { requireAdmin } from "@/lib/auth/server";
+import { notifyCommission } from "@/lib/commission/server";
+import { errorResponse, HttpError, readJson, requireSameOrigin } from "@/lib/security/http";
+
+const inputSchema = z.object({ title: z.string().trim().max(80) });
+
+export async function PATCH(request: Request, context: RouteContext<"/api/commission/tickets/[id]/title">) {
+  try {
+    requireSameOrigin(request);
+    await requireAdmin();
+    const { id } = await context.params;
+    const parsed = inputSchema.safeParse(await readJson(request, 512));
+    if (!parsed.success) throw new HttpError(400, "invalid-ticket-title");
+    const title = parsed.data.title.replace(/\s+/gu, " ") || null;
+    const [ticket] = await getDb().update(commissionTickets).set({ title, updatedAt: new Date() })
+      .where(eq(commissionTickets.id, id)).returning({ title: commissionTickets.title, userId: commissionTickets.userId });
+    if (!ticket) throw new HttpError(404, "ticket-not-found");
+    await notifyCommission(id, ticket.userId);
+    return Response.json({ title: ticket.title });
+  } catch (cause) { return errorResponse(cause); }
+}