feat: cases (reports, rating reviews, removal and deletion requests, appeals) and notifications

Cases are one queue for what someone has to decide, each with a thread (internal notes for those deciding), an
assignee and a decision. Reports about a product go to the teams of the catalogs hosting it and to moderators, and
only the reporter and moderators know who reported. A creator lowering a rating opens a rating review; a catalog's
owner asking to delete it opens a deletion request; a catalog's team can ask for a product's removal everywhere; the
person an action affected can appeal it once, decided by another moderator (an admin may decide their own, flagged).
Resolving carries the case out: the rating is lowered, the product removed, the catalog deleted.

Notifications reach people on the website (a bell with the unread count) and their proxies (realtime): moderators'
edits to their products, removals and restores, decisions and replies on their cases, membership decisions.

Also: moderators can restore a removed product, and a product's creator and moderators can see it when it's adult
without an adult account (getting and wearing it still need one).

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/products/actions.ts

@@ -56,6 +56,18 @@ export async function removeProduct(_: ActionState, form: FormData): Promise<Act
   redirect("/products");
 }
 
+/** Moderation restores a removed product. */
+export async function restoreProduct(_: ActionState, form: FormData): Promise<ActionState> {
+  const id = field(form, "id");
+  return attempt(async () => {
+    unwrap(await api.products({ id }).unremove.post({ reason: field(form, "reason") }));
+    done(id);
+    revalidatePath("/products");
+    revalidatePath("/console/products");
+    return "Restored.";
+  });
+}
+
 export async function retract(_: ActionState, form: FormData): Promise<ActionState> {
   const id = field(form, "id");
   return attempt(async () => {
@@ -71,7 +83,7 @@ export async function saveProduct(_: ActionState, form: FormData): Promise<Actio
   const rating = field(form, "rating");
   const listed = field(form, "listed");
   return attempt(async () => {
-    const { fields } = unwrap(
+    const { fields, review } = unwrap(
       await api.products({ id }).patch({
         ...(has("name") ? { name: field(form, "name") } : {}),
         ...(has("description") ? { description: String(form.get("description") ?? "") } : {}),
@@ -92,6 +104,7 @@ export async function saveProduct(_: ActionState, form: FormData): Promise<Actio
     done(id);
     revalidatePath("/products");
     revalidatePath(`/products/${id}/edit`);
+    if (review) return `${fields.length ? "Saved. " : ""}Moderators will review lowering the rating (case #${review}).`;
     return fields.length ? "Saved." : "Nothing changed.";
   });
 }