Phase 3, part 1 (`docs/design.md`, "Next"): cases and notifications. File blocks, API tokens and two-factor sign-in come as separate PRs.
**Cases**
- One queue (Console → Cases) for everything someone has to decide. Each case has:
- a thread of notes, where internal notes are visible only to those deciding
- an assignee (moderators assign cases to moderators)
- a decision, Resolve or Decline, with a written resolution that the person who opened it sees
- **Reports:** anyone signed in can report a product or catalog from its page (the API also takes rooms and people).
- Limits: 10 an hour, one open report per person and thing, and you can't report yourself.
- Reports about a product go to the teams of the catalogs hosting it, as well as to moderators.
- Only the reporter and moderators know who reported. The audit entry for a report isn't tagged with what it's about, so a product's creator can't find out from their audit log either.
- **Rating reviews:** a creator lowering a rating from adult to general now opens a review instead of being refused. The rest of the edit still saves. Resolving the review lowers the rating, recorded in the product's history.
- **Removal requests:** a catalog's team can ask moderators to remove a product it hosts, everywhere. Resolving it removes the product.
- **Deletion requests:** a catalog's owner asks for deletion from the catalog's console page, and a moderator decides, as agreed. Resolving it marks the catalog `deleted`: its key stops working, nothing is available from it, and its changes feed says so.
- **Appeals:**
- From the audit log, the person an action affected can appeal it, once: their product removed, delisted or edited by someone else; their catalog suspended or rejected; a ban from a catalog or a declined request to join.
- Another moderator decides. An admin may decide an appeal of their own action, and the audit log flags it.
- Resolving records the decision; the moderator then undoes the action where it's done. For that, there's now a Restore for removed products (Console → Products, for moderators); the design mentioned one, but it was never built.
- The console shows a "Cases" tab, and a to-do with the number of open cases the person could decide.
**Notifications**
- A bell in the header with the unread count, and a notifications page with "Mark all as read".
- Each is also sent to the person's proxies over the realtime connection (`{"type": "notification"}`), so the client can show them later.
- They cover:
- a moderator edited or locked your product, or undid a change (with the reason)
- your product was removed or restored
- your case was decided
- someone replied on your case
- a catalog decided your membership
**Also changed**
- A product's creator and moderators can now see it when it's adult, even without an adult account. Before, a creator who made their own product adult couldn't open its page any more, and neither could moderators. Getting and wearing adult products still need an adult account.
**Not done yet** (in `docs/console.md`): email notifications (the hub sends no email yet), canned reasons, private moderator notes on people and products, and second approval for the most destructive actions.
**Migration** `0012_cases`: the `moderation_case`, `case_note` and `notification` tables. (`case` is a reserved word in SQL, hence the table's name.)
**Checks**
- 51 API tests pass. The 7 in the new `cases.test.ts` cover:
- who sees and decides each kind of case, and that the reporter stays private
- rate limits and duplicate reports
- the thread and internal notes, and assigning
- what deciding each kind of case does
- appeals by the person affected only, decided by another moderator
- restoring a removed product
- the notifications
- Type checks pass.
- On a local hub I went through every flow with the website's own forms: report from a product page; the catalog owner's note and decision; assigning, an internal note and a decision as admin; removal by a moderator, the creator's appeal from the audit log, the admin's decision and Restore; a creator's rating review and the decision lowering the rating; a deletion request and its decline; the notifications, the bell's count, and Mark all as read.
- Fixed along the way:
- The catalog's team could see who reported.
- A missing Resolve/Decline choice was treated as Decline; now it's refused.
- The Unassign button sent the typed name instead of nothing.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Phase 3, part 1 (`docs/design.md`, "Next"): cases and notifications. File blocks, API tokens and two-factor sign-in come as separate PRs.
**Cases**
- One queue (Console → Cases) for everything someone has to decide. Each case has:
- a thread of notes, where internal notes are visible only to those deciding
- an assignee (moderators assign cases to moderators)
- a decision, Resolve or Decline, with a written resolution that the person who opened it sees
- **Reports:** anyone signed in can report a product or catalog from its page (the API also takes rooms and people).
- Limits: 10 an hour, one open report per person and thing, and you can't report yourself.
- Reports about a product go to the teams of the catalogs hosting it, as well as to moderators.
- Only the reporter and moderators know who reported. The audit entry for a report isn't tagged with what it's about, so a product's creator can't find out from their audit log either.
- **Rating reviews:** a creator lowering a rating from adult to general now opens a review instead of being refused. The rest of the edit still saves. Resolving the review lowers the rating, recorded in the product's history.
- **Removal requests:** a catalog's team can ask moderators to remove a product it hosts, everywhere. Resolving it removes the product.
- **Deletion requests:** a catalog's owner asks for deletion from the catalog's console page, and a moderator decides, as agreed. Resolving it marks the catalog `deleted`: its key stops working, nothing is available from it, and its changes feed says so.
- **Appeals:**
- From the audit log, the person an action affected can appeal it, once: their product removed, delisted or edited by someone else; their catalog suspended or rejected; a ban from a catalog or a declined request to join.
- Another moderator decides. An admin may decide an appeal of their own action, and the audit log flags it.
- Resolving records the decision; the moderator then undoes the action where it's done. For that, there's now a Restore for removed products (Console → Products, for moderators); the design mentioned one, but it was never built.
- The console shows a "Cases" tab, and a to-do with the number of open cases the person could decide.
**Notifications**
- A bell in the header with the unread count, and a notifications page with "Mark all as read".
- Each is also sent to the person's proxies over the realtime connection (`{"type": "notification"}`), so the client can show them later.
- They cover:
- a moderator edited or locked your product, or undid a change (with the reason)
- your product was removed or restored
- your case was decided
- someone replied on your case
- a catalog decided your membership
**Also changed**
- A product's creator and moderators can now see it when it's adult, even without an adult account. Before, a creator who made their own product adult couldn't open its page any more, and neither could moderators. Getting and wearing adult products still need an adult account.
**Not done yet** (in `docs/console.md`): email notifications (the hub sends no email yet), canned reasons, private moderator notes on people and products, and second approval for the most destructive actions.
**Migration** `0012_cases`: the `moderation_case`, `case_note` and `notification` tables. (`case` is a reserved word in SQL, hence the table's name.)
**Checks**
- 51 API tests pass. The 7 in the new `cases.test.ts` cover:
- who sees and decides each kind of case, and that the reporter stays private
- rate limits and duplicate reports
- the thread and internal notes, and assigning
- what deciding each kind of case does
- appeals by the person affected only, decided by another moderator
- restoring a removed product
- the notifications
- Type checks pass.
- On a local hub I went through every flow with the website's own forms: report from a product page; the catalog owner's note and decision; assigning, an internal note and a decision as admin; removal by a moderator, the creator's appeal from the audit log, the admin's decision and Restore; a creator's rating review and the decision lowering the rating; a deletion request and its decline; the notifications, the bell's count, and Mark all as read.
- Fixed along the way:
- The catalog's team could see who reported.
- A missing Resolve/Decline choice was treated as Decline; now it's refused.
- The Unassign button sent the typed name instead of nothing.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: dhkatz <[email protected]>
169 lines
5.8 KiB
TypeScript
169 lines
5.8 KiB
TypeScript
"use server";
|
|
import { revalidatePath } from "next/cache";
|
|
import { redirect } from "next/navigation";
|
|
import { api, ApiError, unwrap } from "@/lib/api";
|
|
import { attempt, field, type ActionState } from "@/lib/actions";
|
|
|
|
const done = (id: string) => {
|
|
revalidatePath(`/products/${id}`);
|
|
revalidatePath("/library");
|
|
};
|
|
|
|
/** The person's library and a product: get it, remove it, stay on a revision or follow the latest. */
|
|
export async function libraryAction(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
return attempt(async () => {
|
|
const lib = api.library({ id });
|
|
switch (field(form, "intent")) {
|
|
case "get":
|
|
unwrap(await lib.put());
|
|
break;
|
|
case "remove":
|
|
unwrap(await lib.delete());
|
|
break;
|
|
case "stay":
|
|
unwrap(await lib.patch({ stayOn: Number(field(form, "revision")) }));
|
|
break;
|
|
case "follow":
|
|
unwrap(await lib.patch({ stayOn: null }));
|
|
break;
|
|
}
|
|
done(id);
|
|
});
|
|
}
|
|
|
|
/** Its creator deletes the product. */
|
|
export async function deleteProduct(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
const state = await attempt(async () => {
|
|
unwrap(await api.products({ id }).delete());
|
|
done(id);
|
|
revalidatePath("/products");
|
|
});
|
|
if (state?.error) return state;
|
|
redirect(`/products/${id}`);
|
|
}
|
|
|
|
/** Moderation removes the product. */
|
|
export async function removeProduct(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
const state = await attempt(async () => {
|
|
unwrap(await api.products({ id }).remove.post({ reason: field(form, "reason") }));
|
|
done(id);
|
|
revalidatePath("/products");
|
|
});
|
|
if (state?.error) return state;
|
|
redirect("/products");
|
|
}
|
|
|
|
/** Moderation restores a removed product. */
|
|
export async function restoreProduct(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
return attempt(async () => {
|
|
unwrap(await api.products({ id }).unremove.post({ reason: field(form, "reason") }));
|
|
done(id);
|
|
revalidatePath("/products");
|
|
revalidatePath("/console/products");
|
|
return "Restored.";
|
|
});
|
|
}
|
|
|
|
export async function retract(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
return attempt(async () => {
|
|
unwrap(await api.products({ id }).revisions({ n: Number(field(form, "revision")) }).retract.post());
|
|
done(id);
|
|
});
|
|
}
|
|
|
|
/** Saves a product's info. Fields left out of the form (locked ones are disabled) aren't changed. */
|
|
export async function saveProduct(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
const has = (name: string) => form.has(name);
|
|
const rating = field(form, "rating");
|
|
const listed = field(form, "listed");
|
|
return attempt(async () => {
|
|
const { fields, review } = unwrap(
|
|
await api.products({ id }).patch({
|
|
...(has("name") ? { name: field(form, "name") } : {}),
|
|
...(has("description") ? { description: String(form.get("description") ?? "") } : {}),
|
|
...(rating === "adult" || rating === "general" ? { rating } : {}),
|
|
...(has("tags")
|
|
? {
|
|
tags: field(form, "tags")
|
|
.split(",")
|
|
.map((t) => t.trim())
|
|
.filter(Boolean),
|
|
}
|
|
: {}),
|
|
...(listed === "yes" || listed === "no" ? { listed: listed === "yes" } : {}),
|
|
...(has("category") ? { category: Number(field(form, "category")) || null } : {}),
|
|
...(field(form, "reason") ? { reason: field(form, "reason") } : {}),
|
|
}),
|
|
);
|
|
done(id);
|
|
revalidatePath("/products");
|
|
revalidatePath(`/products/${id}/edit`);
|
|
if (review) return `${fields.length ? "Saved. " : ""}Moderators will review lowering the rating (case #${review}).`;
|
|
return fields.length ? "Saved." : "Nothing changed.";
|
|
});
|
|
}
|
|
|
|
export async function publishProduct(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
const state = await attempt(async () => {
|
|
unwrap(await api.products({ id }).publish.post());
|
|
done(id);
|
|
revalidatePath("/products");
|
|
revalidatePath("/console/products");
|
|
});
|
|
if (state?.error) return state;
|
|
redirect(`/products/${id}`);
|
|
}
|
|
|
|
/** Moderators lock fields: the checked ones are locked, the rest unlocked. */
|
|
export async function saveLocks(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
const fields = form
|
|
.getAll("locked")
|
|
.filter((v): v is "name" | "description" | "rating" | "tags" | "listed" | "category" =>
|
|
["name", "description", "rating", "tags", "listed", "category"].includes(String(v)),
|
|
);
|
|
return attempt(async () => {
|
|
unwrap(await api.products({ id }).locks.put({ fields, reason: field(form, "reason") }));
|
|
done(id);
|
|
revalidatePath(`/products/${id}/edit`);
|
|
return "Locks saved.";
|
|
});
|
|
}
|
|
|
|
/** Puts back what a history entry changed. */
|
|
export async function revertInfo(_: ActionState, form: FormData): Promise<ActionState> {
|
|
const id = field(form, "id");
|
|
return attempt(async () => {
|
|
const reason = field(form, "reason");
|
|
unwrap(
|
|
await api
|
|
.products({ id })
|
|
.history({ entry: Number(field(form, "entry")) })
|
|
.revert.post(reason ? { reason } : {}),
|
|
);
|
|
done(id);
|
|
revalidatePath(`/products/${id}/edit`);
|
|
return "Undone.";
|
|
});
|
|
}
|
|
|
|
/** An upload token and the catalog's upload address, for the browser to send the file there itself. */
|
|
export async function startUpload(
|
|
catalog: string,
|
|
product?: string,
|
|
): Promise<{ token: string; url: string } | { error: string }> {
|
|
try {
|
|
return unwrap(await api.products.upload.post({ catalog, ...(product ? { product } : {}) }));
|
|
} catch (e) {
|
|
if (e instanceof ApiError) return { error: e.message };
|
|
throw e;
|
|
}
|
|
}
|