servicedesk/src/app/Events/TicketMessagePosted.php

<?php

namespace App\Events;

use Illuminate\Broadcasting\Channel;
use Illuminate\Broadcasting\InteractsWithSockets;
use Illuminate\Broadcasting\PrivateChannel;
use Illuminate\Contracts\Broadcasting\ShouldBroadcastNow;
use Illuminate\Foundation\Events\Dispatchable;

/**
 * Fired on ticket.{id} whenever a new message (public reply, internal note,
 * or API message) is posted — drives the live message thread ("live chat")
 * for both operator and client views of the same ticket.
 *
 * The payload deliberately never carries the message body, only metadata —
 * both public and internal messages broadcast on the same per-ticket
 * channel, and a client subscriber must never be able to read an internal
 * note's content from the socket frame itself. Each side's Livewire
 * component only ever re-queries whatever its own already-authorized
 * computed property returns (the client's never touches internalMessages()
 * regardless of which event arrived), so this is safe by construction.
 */
class TicketMessagePosted implements ShouldBroadcastNow
{
    use Dispatchable, InteractsWithSockets;

    public function __construct(
        public int $ticketId,
        public int $messageId,
        public bool $internal,
        public ?int $actorId,
    ) {}

    /**
     * @return array<int, Channel>
     */
    public function broadcastOn(): array
    {
        return [new PrivateChannel('ticket.'.$this->ticketId)];
    }

    public function broadcastWith(): array
    {
        return [
            'ticketId' => $this->ticketId,
            'messageId' => $this->messageId,
            'internal' => $this->internal,
            'actorId' => $this->actorId,
        ];
    }
}