/**
 * GET /api/admin/support/tickets/:id (support.read): the ticket and its thread (inbound mail as text) plus the staff
 * directory for the assignee picker; `can.school` shows "Approve as school" (§16). `?html=<messageId>` returns that
 * inbound message's stored HTML instead, which the desk shows only inside a sandboxed, network-less iframe.
 */
export const GET = adminRoute("support.read", async (request, ctx, { params }: Context) => {
  const id = ticketIdParam((await params).id);
  const html = new URL(request.url).searchParams.get("html");
  if (html !== null) {
    if (!/^msg_[A-Za-z0-9_-]{18}$/.test(html)) throw invalid("Unknown message.");
    return adminJson({ html: await htmlOf(id, html) });
  }
  const [thread, staff] = await Promise.all([getThread(ctx, id), staffDirectory()]);
  return adminJson({ ...thread, staff, can: ticketPermissions(ctx.admin.role) });
});