EpicNext-Cms/src/actions/tickets.ts

"use server";

import { PERMS } from "@/lib/permissions";
import { prisma } from "@/lib/prisma";
import { adminAction, authAction } from "@/lib/safe-action";
import { ActionError, actionOk } from "@/lib/safe-action-shared";
import { logAudit } from "@/lib/services/audit";
import { notify } from "@/lib/services/webhook";
import {
  assignTicketSchema,
  createTicketSchema,
  replyTicketSchema,
  updateTicketPrioritySchema,
  updateTicketStatusSchema,
} from "@/lib/validators/ticket";

// ── User actions (authenticated, no admin perms needed) ──────────────

export const createTicket = authAction({ schema: createTicketSchema }, async (ctx) => {
  const ticket = await prisma.websiteTicket.create({
    data: {
      subject: ctx.data.subject,
      category: ctx.data.category,
      creatorId: ctx.session.user.id,
    },
  });

  // Create the first message
  await prisma.websiteTicketMessage.create({
    data: {
      ticketId: ticket.id,
      userId: ctx.session.user.id,
      message: ctx.data.message,
      isStaff: 0,
    },
  });

  notify({
    action: "ticket_create",
    actor: ctx.session.user.username,
    target: `#${ticket.id} - ${ticket.subject}`,
    details: `Category: ${ticket.category}`,
  });

  return actionOk({ id: ticket.id });
});

export const userReplyTicket = authAction({ schema: replyTicketSchema }, async (ctx) => {
  const ticket = await prisma.websiteTicket.findUnique({
    where: { id: ctx.data.ticketId },
  });

  if (!ticket) throw new ActionError("Ticket not found");
  if (ticket.creatorId !== ctx.session.user.id) throw new ActionError("Unauthorized");
  if (ticket.status === "closed") throw new ActionError("Ticket is closed");

  await prisma.websiteTicketMessage.create({
    data: {
      ticketId: ctx.data.ticketId,
      userId: ctx.session.user.id,
      message: ctx.data.message,
      isStaff: 0,
    },
  });

  // If ticket was in "waiting" (waiting for user), move back to open
  if (ticket.status === "waiting") {
    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data: { status: "open" },
    });
  }

  return actionOk();
});

export const closeTicketByUser = authAction(
  { schema: replyTicketSchema.pick({ ticketId: true }) },
  async (ctx) => {
    const ticket = await prisma.websiteTicket.findUnique({
      where: { id: ctx.data.ticketId },
    });

    if (!ticket) throw new ActionError("Ticket not found");
    if (ticket.creatorId !== ctx.session.user.id) throw new ActionError("Unauthorized");
    if (ticket.status === "closed") throw new ActionError("Ticket is already closed");

    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data: { status: "closed", closedAt: new Date() },
    });

    return actionOk();
  },
);

// ── Admin actions ────────────────────────────────────────────────────

export const adminReplyTicket = adminAction(
  { permission: PERMS.TICKETS_EDIT, schema: replyTicketSchema },
  async (ctx) => {
    const ticket = await prisma.websiteTicket.findUnique({
      where: { id: ctx.data.ticketId },
    });

    if (!ticket) throw new ActionError("Ticket not found");

    await prisma.websiteTicketMessage.create({
      data: {
        ticketId: ctx.data.ticketId,
        userId: ctx.session.user.id,
        message: ctx.data.message,
        isStaff: 1,
      },
    });

    // Auto-assign if not assigned yet
    const updates: Record<string, unknown> = { status: "waiting" };
    if (!ticket.assigneeId) {
      updates.assigneeId = ctx.session.user.id;
    }

    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data: updates,
    });

    logAudit({
      userId: ctx.session.user.id,
      action: "ticket_reply",
      target: "WebsiteTicket",
      targetId: ctx.data.ticketId,
    });

    return actionOk();
  },
);

export const updateTicketStatus = adminAction(
  { permission: PERMS.TICKETS_EDIT, schema: updateTicketStatusSchema },
  async (ctx) => {
    const ticket = await prisma.websiteTicket.findUnique({
      where: { id: ctx.data.ticketId },
    });

    if (!ticket) throw new ActionError("Ticket not found");

    const data: Record<string, unknown> = { status: ctx.data.status };
    if (ctx.data.status === "closed") {
      data.closedAt = new Date();
    }
    if (ctx.data.status === "in_progress" && !ticket.assigneeId) {
      data.assigneeId = ctx.session.user.id;
    }

    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data,
    });

    logAudit({
      userId: ctx.session.user.id,
      action: "ticket_status_change",
      target: "WebsiteTicket",
      targetId: ctx.data.ticketId,
      before: { status: ticket.status },
      after: { status: ctx.data.status },
    });

    return actionOk();
  },
);

export const assignTicket = adminAction(
  { permission: PERMS.TICKETS_EDIT, schema: assignTicketSchema },
  async (ctx) => {
    const ticket = await prisma.websiteTicket.findUnique({
      where: { id: ctx.data.ticketId },
    });

    if (!ticket) throw new ActionError("Ticket not found");

    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data: {
        assigneeId: ctx.data.assigneeId,
        status: ctx.data.assigneeId ? "in_progress" : "open",
      },
    });

    logAudit({
      userId: ctx.session.user.id,
      action: "ticket_assign",
      target: "WebsiteTicket",
      targetId: ctx.data.ticketId,
      before: { assigneeId: ticket.assigneeId },
      after: { assigneeId: ctx.data.assigneeId },
    });

    return actionOk();
  },
);

export const updateTicketPriority = adminAction(
  { permission: PERMS.TICKETS_EDIT, schema: updateTicketPrioritySchema },
  async (ctx) => {
    const ticket = await prisma.websiteTicket.findUnique({
      where: { id: ctx.data.ticketId },
    });

    if (!ticket) throw new ActionError("Ticket not found");

    await prisma.websiteTicket.update({
      where: { id: ctx.data.ticketId },
      data: { priority: ctx.data.priority },
    });

    logAudit({
      userId: ctx.session.user.id,
      action: "ticket_priority_change",
      target: "WebsiteTicket",
      targetId: ctx.data.ticketId,
      before: { priority: ticket.priority },
      after: { priority: ctx.data.priority },
    });

    return actionOk();
  },
);