import { eq } from "drizzle-orm";
import * as z from "zod";
import { getDb } from "@/db";
import { commissionTickets } from "@/db/schema";
import { requireAdmin } from "@/lib/auth/server";
import { notifyCommission } from "@/lib/commission/server";
import { errorResponse, HttpError, readJson, requireSameOrigin } from "@/lib/security/http";

const inputSchema = z.object({ title: z.string().trim().max(80) });

export async function PATCH(request: Request, context: RouteContext<"/api/commission/tickets/[id]/title">) {
  try {
    requireSameOrigin(request);
    await requireAdmin();
    const { id } = await context.params;
    const parsed = inputSchema.safeParse(await readJson(request, 512));
    if (!parsed.success) throw new HttpError(400, "invalid-ticket-title");
    const title = parsed.data.title.replace(/\s+/gu, " ") || null;
    const [ticket] = await getDb().update(commissionTickets).set({ title, updatedAt: new Date() })
      .where(eq(commissionTickets.id, id)).returning({ title: commissionTickets.title, userId: commissionTickets.userId });
    if (!ticket) throw new HttpError(404, "ticket-not-found");
    await notifyCommission(id, ticket.userId);
    return Response.json({ title: ticket.title });
  } catch (cause) { return errorResponse(cause); }
}