Deleting products: by their creators, and removal by moderation

A creator deletes a product: it's no longer listed and nobody new can get it, while people who have it
keep it (its page, files and library entries stay, and rooms keep showing it), as old revisions stay
available. Moderation removes one everywhere, with a reason: its page and files answer 410, and it
leaves libraries and rooms. Both are on the product's page and in the audit log.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/api/src/decorations.ts

@@ -2,7 +2,7 @@
 // kept here because IMVU only keeps the room without them. The routes are in app.ts; the notice to proxies in the
 // room is realtime.ts's decorated().
 import { createHash } from "node:crypto";
-import { and, eq, inArray, ne, sql, schema, type Database, type DecorationItem } from "@t5de/db";
+import { and, eq, inArray, isNull, ne, sql, schema, type Database, type DecorationItem } from "@t5de/db";
 import { hostedBase } from "./realtime";
 
 const { roomDecoration, product, productRevision, imvuLink } = schema;
@@ -55,6 +55,7 @@ export class Decorations {
         and(
           inArray(product.id, ids),
           ne(product.latest, 0),
+          isNull(product.removedAt),
           adult ? undefined : eq(product.rating, "general"),
           sql`exists (select 1 from ${productRevision} where ${productRevision.productId} = ${product.id} and not ${productRevision.retracted})`,
         ),
@@ -93,7 +94,7 @@ export class Decorations {
       const known = await this.db
         .select({ id: product.id })
         .from(product)
-        .where(and(inArray(product.id, ids), ne(product.latest, 0)));
+        .where(and(inArray(product.id, ids), ne(product.latest, 0), isNull(product.removedAt)));
       if (known.length !== ids.length) throw new DecorationError(400, "unknown_product", "Some of those products don't exist.");
     }
     if (contents.length === 0) {