feat: Implement ticket merging

supabase/functions/merge-contact-tickets/index.ts

@@ -0,0 +1,239 @@
+import { serve } from 'https://deno.land/std@0.168.0/http/server.ts';
+import { createClient } from 'https://esm.sh/@supabase/supabase-js@2.57.4';
+import { edgeLogger, startRequest, endRequest } from '../_shared/logger.ts';
+import { createErrorResponse, sanitizeError } from '../_shared/errorSanitizer.ts';
+
+const corsHeaders = {
+  'Access-Control-Allow-Origin': '*',
+  'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
+};
+
+interface MergeTicketsRequest {
+  primaryTicketId: string;
+  mergeTicketIds: string[];
+  mergeReason?: string;
+}
+
+interface MergeTicketsResponse {
+  success: boolean;
+  primaryTicketNumber: string;
+  mergedCount: number;
+  threadsConsolidated: number;
+  deletedTickets: string[];
+}
+
+serve(async (req) => {
+  const tracking = startRequest();
+
+  if (req.method === 'OPTIONS') {
+    return new Response(null, { headers: corsHeaders });
+  }
+
+  try {
+    const authHeader = req.headers.get('Authorization');
+    if (!authHeader) {
+      throw new Error('Missing authorization header');
+    }
+
+    const supabase = createClient(
+      Deno.env.get('SUPABASE_URL') ?? '',
+      Deno.env.get('SUPABASE_ANON_KEY') ?? '',
+      { global: { headers: { Authorization: authHeader } } }
+    );
+
+    // Authenticate user
+    const { data: { user }, error: authError } = await supabase.auth.getUser();
+    if (authError || !user) {
+      throw new Error('Unauthorized');
+    }
+
+    edgeLogger.info('Merge tickets request started', {
+      requestId: tracking.requestId,
+      userId: user.id,
+    });
+
+    // Check if user has moderator/admin role
+    const { data: hasRole, error: roleError } = await supabase.rpc('has_role', {
+      _user_id: user.id,
+      _role: 'moderator'
+    });
+
+    const { data: isAdmin, error: adminError } = await supabase.rpc('has_role', {
+      _user_id: user.id,
+      _role: 'admin'
+    });
+
+    const { data: isSuperuser, error: superuserError } = await supabase.rpc('has_role', {
+      _user_id: user.id,
+      _role: 'superuser'
+    });
+
+    if (roleError || adminError || superuserError || (!hasRole && !isAdmin && !isSuperuser)) {
+      throw new Error('Insufficient permissions. Moderator role required.');
+    }
+
+    // Parse request body
+    const { primaryTicketId, mergeTicketIds, mergeReason }: MergeTicketsRequest = await req.json();
+
+    // Validation
+    if (!primaryTicketId || !mergeTicketIds || mergeTicketIds.length === 0) {
+      throw new Error('Invalid request: primaryTicketId and mergeTicketIds required');
+    }
+
+    if (mergeTicketIds.includes(primaryTicketId)) {
+      throw new Error('Cannot merge a ticket into itself');
+    }
+
+    if (mergeTicketIds.length > 10) {
+      throw new Error('Maximum 10 tickets can be merged at once');
+    }
+
+    // Start transaction-like operations
+    const allTicketIds = [primaryTicketId, ...mergeTicketIds];
+
+    // Fetch all tickets
+    const { data: tickets, error: fetchError } = await supabase
+      .from('contact_submissions')
+      .select('id, ticket_number, admin_notes, merged_ticket_numbers')
+      .in('id', allTicketIds);
+
+    if (fetchError) throw fetchError;
+    if (!tickets || tickets.length !== allTicketIds.length) {
+      throw new Error('One or more tickets not found');
+    }
+
+    const primaryTicket = tickets.find(t => t.id === primaryTicketId);
+    const mergeTickets = tickets.filter(t => mergeTicketIds.includes(t.id));
+
+    if (!primaryTicket) {
+      throw new Error('Primary ticket not found');
+    }
+
+    // Check if any ticket already has merged_ticket_numbers (prevent re-merging)
+    const alreadyMerged = tickets.find(t => 
+      t.merged_ticket_numbers && t.merged_ticket_numbers.length > 0
+    );
+    if (alreadyMerged) {
+      throw new Error(`Ticket ${alreadyMerged.ticket_number} has already been used in a merge`);
+    }
+
+    edgeLogger.info('Starting merge process', {
+      requestId: tracking.requestId,
+      primaryTicket: primaryTicket.ticket_number,
+      mergeTicketCount: mergeTickets.length,
+    });
+
+    // Step 1: Move all email threads to primary ticket
+    const { data: movedThreads, error: moveError } = await supabase
+      .from('contact_email_threads')
+      .update({ submission_id: primaryTicketId })
+      .in('submission_id', mergeTicketIds)
+      .select('id');
+
+    if (moveError) throw moveError;
+
+    const threadsMovedCount = movedThreads?.length || 0;
+
+    // Step 2: Consolidate admin notes
+    let consolidatedNotes = primaryTicket.admin_notes || '';
+    
+    for (const ticket of mergeTickets) {
+      if (ticket.admin_notes) {
+        consolidatedNotes = consolidatedNotes 
+          ? `${consolidatedNotes}\n\n${ticket.admin_notes}`
+          : ticket.admin_notes;
+      }
+    }
+
+    // Step 3: Recalculate metadata from consolidated threads
+    const { data: threadStats, error: statsError } = await supabase
+      .from('contact_email_threads')
+      .select('direction, created_at')
+      .eq('submission_id', primaryTicketId);
+
+    if (statsError) throw statsError;
+
+    const outboundCount = threadStats?.filter(t => t.direction === 'outbound').length || 0;
+    const lastAdminResponse = threadStats
+      ?.filter(t => t.direction === 'outbound')
+      .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0]?.created_at;
+    const lastUserResponse = threadStats
+      ?.filter(t => t.direction === 'inbound')
+      .sort((a, b) => new Date(b.created_at).getTime() - new Date(a.created_at).getTime())[0]?.created_at;
+
+    // Get merged ticket numbers
+    const mergedTicketNumbers = mergeTickets.map(t => t.ticket_number);
+
+    // Step 4: Update primary ticket with consolidated data
+    const { error: updateError } = await supabase
+      .from('contact_submissions')
+      .update({
+        admin_notes: consolidatedNotes,
+        response_count: outboundCount,
+        last_admin_response_at: lastAdminResponse || null,
+        merged_ticket_numbers: [
+          ...(primaryTicket.merged_ticket_numbers || []),
+          ...mergedTicketNumbers
+        ],
+        updated_at: new Date().toISOString(),
+      })
+      .eq('id', primaryTicketId);
+
+    if (updateError) throw updateError;
+
+    // Step 5: Delete merged tickets
+    const { error: deleteError } = await supabase
+      .from('contact_submissions')
+      .delete()
+      .in('id', mergeTicketIds);
+
+    if (deleteError) throw deleteError;
+
+    // Step 6: Audit log
+    await supabase.from('admin_audit_log').insert({
+      admin_user_id: user.id,
+      target_user_id: user.id, // No specific target user for this action
+      action: 'merge_contact_tickets',
+      details: {
+        primary_ticket_id: primaryTicketId,
+        primary_ticket_number: primaryTicket.ticket_number,
+        merged_ticket_ids: mergeTicketIds,
+        merged_ticket_numbers: mergedTicketNumbers,
+        merge_reason: mergeReason || null,
+        threads_moved: threadsMovedCount,
+        merged_count: mergeTickets.length,
+      }
+    });
+
+    const duration = endRequest(tracking);
+    edgeLogger.info('Merge tickets completed successfully', {
+      requestId: tracking.requestId,
+      duration,
+      primaryTicket: primaryTicket.ticket_number,
+      mergedCount: mergeTickets.length,
+    });
+
+    const response: MergeTicketsResponse = {
+      success: true,
+      primaryTicketNumber: primaryTicket.ticket_number,
+      mergedCount: mergeTickets.length,
+      threadsConsolidated: threadsMovedCount,
+      deletedTickets: mergedTicketNumbers,
+    };
+
+    return new Response(JSON.stringify(response), {
+      headers: { ...corsHeaders, 'Content-Type': 'application/json' },
+      status: 200,
+    });
+
+  } catch (error) {
+    const duration = endRequest(tracking);
+    edgeLogger.error('Merge tickets failed', {
+      requestId: tracking.requestId,
+      duration,
+      error: error instanceof Error ? error.message : 'Unknown error',
+    });
+
+    return createErrorResponse(error, 500, corsHeaders, 'merge_contact_tickets');
+  }
+});