Phase 3, part 2 (`docs/design.md`, "Next"): file blocks. Moderators block a file network-wide by its sha256, so a removed product can't come back under another name or catalog.
**Blocking**
- A file's page (Console → Blocks → a file) shows whether it's blocked and the products using it, so a moderator sees what a block removes before confirming ("Block and remove 2 products").
- Moderators reach it from a product's files (each has a Block link for them) or by pasting a sha256 into the Blocks tab, which also lists blocked files.
- Blocking a file:
- removes every product with a revision using it. Each removal is audited as `product.remove` with the file, so creators are notified and can appeal it as before.
- puts a `{type: "block", sha256}` change in the changes feed of every catalog hosting it, meaning: delete it whatever uses it. (t5de-catalog doesn't read the feed yet.)
- refuses uploads with it from then on (409 `blocked`). Each attempt is audited as `file.blocked_upload` with the person and catalog, so moderators see who tried.
- Unblocking lets the file in again. The products it removed stay removed until a moderator restores them, one by one.
- Who: `product:remove` hub-wide (moderators and admins). The Blocks tab shows only for them.
**API**: `GET /api/v1/blocks`, and `GET`/`PUT`/`DELETE /api/v1/blocks/:sha256` (`docs/products.md`).
**Migration** `0013_file_blocks`: the `file_block` table, and a GIN index on revisions' file lists, so finding the products using a file doesn't scan every revision.
**Checks**
- 53 API tests pass. The new `blocks.test.ts` covers:
- who may block
- the preview of what a block removes
- removal of every product using the file, across catalogs and creators
- the changes feed, notifications and appeals
- refused uploads and their audit entry
- unblocking, and restoring a removed product afterwards
- Type checks pass.
- On a local hub, through the website's own forms:
- the Block link on a product's files, for moderators only
- the Blocks tab, for moderators only (404 for the creator)
- the file's page, then blocking: the product is gone, its creator notified and offered Appeal
- a re-upload through the catalog API: refused, and audited
- unblocking, then Restore
- Fixed along the way: an empty reason gave a generic "Some of that isn't right"; it now says "Give a reason."
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Phase 3, part 2 (`docs/design.md`, "Next"): file blocks. Moderators block a file network-wide by its sha256, so a removed product can't come back under another name or catalog.
**Blocking**
- A file's page (Console → Blocks → a file) shows whether it's blocked and the products using it, so a moderator sees what a block removes before confirming ("Block and remove 2 products").
- Moderators reach it from a product's files (each has a Block link for them) or by pasting a sha256 into the Blocks tab, which also lists blocked files.
- Blocking a file:
- removes every product with a revision using it. Each removal is audited as `product.remove` with the file, so creators are notified and can appeal it as before.
- puts a `{type: "block", sha256}` change in the changes feed of every catalog hosting it, meaning: delete it whatever uses it. (t5de-catalog doesn't read the feed yet.)
- refuses uploads with it from then on (409 `blocked`). Each attempt is audited as `file.blocked_upload` with the person and catalog, so moderators see who tried.
- Unblocking lets the file in again. The products it removed stay removed until a moderator restores them, one by one.
- Who: `product:remove` hub-wide (moderators and admins). The Blocks tab shows only for them.
**API**: `GET /api/v1/blocks`, and `GET`/`PUT`/`DELETE /api/v1/blocks/:sha256` (`docs/products.md`).
**Migration** `0013_file_blocks`: the `file_block` table, and a GIN index on revisions' file lists, so finding the products using a file doesn't scan every revision.
**Checks**
- 53 API tests pass. The new `blocks.test.ts` covers:
- who may block
- the preview of what a block removes
- removal of every product using the file, across catalogs and creators
- the changes feed, notifications and appeals
- refused uploads and their audit entry
- unblocking, and restoring a removed product afterwards
- Type checks pass.
- On a local hub, through the website's own forms:
- the Block link on a product's files, for moderators only
- the Blocks tab, for moderators only (404 for the creator)
- the file's page, then blocking: the product is gone, its creator notified and offered Appeal
- a re-upload through the catalog API: refused, and audited
- unblocking, then Restore
- Fixed along the way: an empty reason gave a generic "Some of that isn't right"; it now says "Give a reason."
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: dhkatz <[email protected]>
106 lines
4.3 KiB
TypeScript
106 lines
4.3 KiB
TypeScript
import Link from "next/link";
|
|
import { ActionForm, SubmitButton } from "@/components/forms";
|
|
import { DateTime } from "@/components/time";
|
|
import { Input } from "@/components/ui/input";
|
|
import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from "@/components/ui/table";
|
|
import type { AuditEntry } from "@/lib/api";
|
|
import { appeal } from "./cases/actions";
|
|
|
|
const tagLinks: Record<string, (id: string) => string> = {
|
|
catalog: (id) => `/console/catalogs/${id}`,
|
|
product: (id) => `/products/${id}`,
|
|
room: (id) => `/rooms/${id}/edit`,
|
|
};
|
|
|
|
/** Audit entries: when, who, what, which resources (linked), and the details. */
|
|
export function AuditTable({ entries, empty = "Nothing yet." }: { entries: AuditEntry[]; empty?: string }) {
|
|
if (entries.length === 0) return <p className="text-sm text-muted-foreground">{empty}</p>;
|
|
return (
|
|
<Table>
|
|
<TableHeader>
|
|
<TableRow>
|
|
<TableHead>When</TableHead>
|
|
<TableHead>Who</TableHead>
|
|
<TableHead>What</TableHead>
|
|
<TableHead>About</TableHead>
|
|
<TableHead>Detail</TableHead>
|
|
</TableRow>
|
|
</TableHeader>
|
|
<TableBody>
|
|
{entries.map((e) => (
|
|
<TableRow key={e.id}>
|
|
<TableCell className="text-muted-foreground">
|
|
<DateTime iso={e.at} />
|
|
</TableCell>
|
|
<TableCell>
|
|
{e.actor ? (
|
|
<Link href={`/console/audit?actor=${encodeURIComponent(e.actor)}`} className="underline-offset-4 hover:underline">
|
|
{e.actor}
|
|
</Link>
|
|
) : (
|
|
<span className="text-muted-foreground">hub</span>
|
|
)}
|
|
</TableCell>
|
|
<TableCell className="font-mono text-xs">{e.action}</TableCell>
|
|
<TableCell className="space-x-2 text-sm">
|
|
{Object.entries(e.tags as Record<string, string | undefined>).map(([kind, id]) => {
|
|
if (!id) return null;
|
|
const name = (e.tagNames as Record<string, string>)[id] ?? id;
|
|
const href = tagLinks[kind]?.(id);
|
|
return (
|
|
<span key={kind}>
|
|
<span className="text-muted-foreground">{kind} </span>
|
|
{href ? (
|
|
<Link href={href} className="underline-offset-4 hover:underline">
|
|
{name}
|
|
</Link>
|
|
) : (
|
|
name
|
|
)}
|
|
</span>
|
|
);
|
|
})}
|
|
{Object.keys(e.tags).length === 0 &&
|
|
(e.action.startsWith("file.") && /^[0-9a-f]{64}$/.test(e.target) ? (
|
|
<Link href={`/console/blocks/${e.target}`} className="font-mono text-xs underline-offset-4 hover:underline">
|
|
file {e.target.slice(0, 12)}…
|
|
</Link>
|
|
) : (
|
|
e.target
|
|
))}
|
|
</TableCell>
|
|
<TableCell className="text-xs whitespace-normal text-muted-foreground">
|
|
{detailText(e.detail)}
|
|
{e.appealable && (
|
|
<details className="mt-1">
|
|
<summary className="cursor-pointer text-foreground underline-offset-4 hover:underline">Appeal</summary>
|
|
<ActionForm action={appeal} fields={{ audit: e.id }} className="mt-2">
|
|
<div className="flex gap-2">
|
|
<Input name="reason" required maxLength={2000} placeholder="Why it should be undone" aria-label="Why" className="h-8 min-w-48" />
|
|
<SubmitButton size="sm" variant="outline" pendingLabel="Sending…">
|
|
Send
|
|
</SubmitButton>
|
|
</div>
|
|
</ActionForm>
|
|
</details>
|
|
)}
|
|
</TableCell>
|
|
</TableRow>
|
|
))}
|
|
</TableBody>
|
|
</Table>
|
|
);
|
|
}
|
|
|
|
function detailText(detail: unknown): string {
|
|
return Object.entries((detail ?? {}) as Record<string, unknown>)
|
|
.map(([k, v]) => {
|
|
if (k === "changed" && v && typeof v === "object")
|
|
return Object.entries(v as Record<string, { from: unknown; to: unknown }>)
|
|
.map(([f, c]) => `${f}: ${String(c?.from)} → ${String(c?.to)}`)
|
|
.join(", ");
|
|
return `${k}: ${typeof v === "string" ? v : JSON.stringify(v)}`;
|
|
})
|
|
.join(", ");
|
|
}
|