"use server";

import { revalidatePath } from "next/cache";
import { z } from "zod";
import { auth } from "@/lib/auth";
import { prisma } from "@/lib/prisma";
import { moderateOrThrow } from "@/lib/services/moderation";
import { clientIp, rateLimit } from "@/lib/rate-limit";

const shoutSchema = z.object({
  message: z.string().min(1, "Message is required").max(255),
});

/**
 * Post a radio shout.
 *
 * The AUTHOR (userId) is re-read from the session via auth() and is never
 * trusted from the submitted FormData, so a crafted form cannot impersonate
 * another account. radio_shouts.user_id is an UNSIGNED BIGINT, so the Int
 * session id is widened to BigInt for the insert.
 */
export async function postShout(formData: FormData): Promise<void> {
  const session = await auth();
  const userId = Number(session?.user?.id);
  if (!Number.isInteger(userId) || userId <= 0) return;

  await clientIp();
  if (!(await rateLimit(`shout:${userId}`, 5, 30_000)).ok) return;

  const raw = {
    message: String(formData.get("message") ?? "").trim().slice(0, 255),
  };

  const parsed = shoutSchema.safeParse(raw);
  if (!parsed.success) return;

  const { message } = parsed.data;

  // Moderation check
  try {
    await moderateOrThrow(message);
  } catch {
    return;
  }

  const now = new Date();
  try {
    await prisma.radioShouts.create({
      data: {
        userId: BigInt(userId),
        message,
        createdAt: now,
        updatedAt: now,
      },
    });
  } catch {
    // DB unavailable — fail soft; nothing to persist.
    return;
  }

  revalidatePath("/radio/shouts");
}