Products: images need https addresses; lowering a rating waits for review; library shows creators

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/api/src/products.ts

@@ -271,16 +271,9 @@ export class Products {
     }
     if (input.rating !== undefined) {
       if (input.rating === "adult") set.rating = "adult";
-      else if (input.rating === "general" && p.rating === "adult") {
-        // Lowering is reviewed first (design.md); refused for now unless every revision is general.
-        const [adultRev] = await this.db
-          .select({ n: productRevision.number })
-          .from(productRevision)
-          .where(and(eq(productRevision.productId, id), eq(productRevision.rating, "adult")))
-          .limit(1);
-        if (adultRev) throw new ProductError(400, "invalid", "A product with adult revisions stays adult.");
-        set.rating = "general";
-      }
+      else if (input.rating === "general" && p.rating === "adult")
+        // Lowering is reviewed by moderators first (design.md); until that exists, it's refused.
+        throw new ProductError(400, "review_needed", "Lowering a rating needs a moderator's review.");
     }
     const [updated] = await this.db.update(product).set(set).where(eq(product.id, id)).returning();
     return updated!;
@@ -301,9 +294,10 @@ export class Products {
 
   async library(personId: string) {
     return this.db
-      .select({ product, stayOn: library.stayOn, addedAt: library.addedAt })
+      .select({ product, stayOn: library.stayOn, addedAt: library.addedAt, creator: user.displayUsername })
       .from(library)
       .innerJoin(product, eq(product.id, library.productId))
+      .innerJoin(user, eq(user.id, product.creatorId))
       .where(eq(library.userId, personId))
       .orderBy(desc(library.addedAt));
   }