moderate 1.0.0.beta1 → 1.0.0

data/config/locales/en.yml

@@ -0,0 +1,200 @@
+# moderate's default English copy. Override any key in your app's own
+# config/locales: Rails loads an engine's locale files BEFORE the host's, so
+# your translation always wins.
+en:
+  # The error `moderates :field, mode: :block` (and `validates :field, moderate: true`)
+  # adds to a rejected field. Override it per model and attribute the usual
+  # Active Record way (activerecord.errors.models.<model>.attributes.<field>.objectionable_content).
+  errors:
+    messages:
+      objectionable_content: "contains language that isn't allowed"
+      # A :block attachment whose direct upload hasn't finished: nothing enters unverified.
+      upload_not_finished: "hasn't finished uploading yet"
+  moderate:
+    # Flash messages of the Moderate::Moderation controller concern.
+    moderation:
+      resolved: "Report resolved."
+      dismissed: "Report dismissed."
+      flag_resolved: "Flag actioned."
+      flag_dismissed: "Flag dismissed."
+      upheld: "Appeal upheld."
+      rejected: "Appeal rejected."
+    # Refusals and validation messages (the inline defaults in the code are English).
+    errors:
+      anonymous_notice_child_safety_only: "anonymous notices are only allowed for offences against minors"
+      appeal_already_closed: "This appeal has already been decided."
+      appeal_report_must_be_closed: "decision can only be appealed after it is made"
+      appeal_window_expired: "the appeal window for this decision has closed"
+      cannot_block_self: "You can't block yourself"
+      invalid_reported_field: "is not a reportable field"
+      invalid_subject_url: "must be a valid http(s) URL"
+      missing_subject_url: "is required"
+      not_reportable_by_reporter: "isn't something you can report"
+      nothing_removed: "Nothing was removed: %{content} has nothing removable there (already removed, deleted, or not removable). Resolve without removing content, or dismiss."
+      report_already_closed: "This report has already been resolved."
+      reporter_cannot_report_self: "You can't report yourself"
+      resolve_needs_action: "Resolving a report restricts something: remove the content, ban the account, or both. To close it without a restriction, dismiss it."
+    appeals:
+      reported_field: "Content"
+
+    # Human labels for reported / flagged fields — what the moderation queue,
+    # the statement of reasons and the appeal page print instead of the column
+    # name. Resolution (Moderate.reportable_field_label):
+    #
+    #   1. `has_reportable_content :body, labels: { body: "…" }` on the model
+    #   2. moderate.reportable_fields.<model i18n_key>.<field>   e.g. chats/message.body
+    #   3. moderate.reportable_fields.<field>                    the generic ones below
+    #   4. field.humanize
+    #
+    # The generic set is deliberately small and avoids names that are also common
+    # MODEL names (message, comment, photo…): model-scoped and generic keys share
+    # this namespace, so a host's `comment: { body: … }` block would otherwise
+    # replace a generic `comment:` label.
+    reportable_fields:
+      body: "Text"
+      title: "Title"
+      description: "Description"
+      name: "Name"
+      display_name: "Display name"
+      username: "Username"
+      bio: "Bio"
+      avatar: "Profile photo"
+      photos: "Photos"
+      images: "Images"
+      attachments: "Attachments"
+      files: "Files"
+
+    # Labels for the gem's own value lists, read by Moderate.taxonomy_label(kind,
+    # value) and Moderate::Report.category_options (and, for legal_reasons,
+    # content_types and member_states, by the public notice form). The stored values
+    # never change; only what people read does.
+    categories:
+      harassment: "Harassment"
+      hate: "Hate"
+      threats: "Threats"
+      sexual_content: "Sexual content"
+      spam: "Spam"
+      fraud: "Fraud"
+      unsafe_behavior: "Unsafe behavior"
+      illegal_content: "Illegal content"
+      privacy: "Privacy"
+      child_safety: "Child safety"
+      other: "Other"
+      hate_abuse_harassment: "Hate, abuse or harassment"
+      violent_speech: "Violent speech"
+      graphic_violent_media: "Graphic or violent media"
+      illegal_regulated_behaviors: "Illegal or regulated behavior"
+      impersonation: "Impersonation"
+      adult_sexual_content: "Adult sexual content"
+      private_non_consensual_content: "Private or non-consensual content"
+      suicide_self_harm: "Suicide or self-harm"
+      terrorism_violent_extremism: "Terrorism or violent extremism"
+      scam_fraud: "Scam or fraud"
+
+    # The EU statement-of-reasons categories (DSA Art. 17 / the Transparency Database).
+    legal_reasons:
+      animal_welfare: "Animal welfare"
+      consumer_information: "Consumer information infringements"
+      cyber_violence: "Cyber violence"
+      data_protection_privacy: "Data protection and privacy violations"
+      illegal_or_harmful_speech: "Illegal or harmful speech"
+      civic_elections: "Negative effects on civic discourse or elections"
+      non_consensual_behavior: "Non-consensual behavior"
+      pornography_sexualized_content: "Pornography or sexualized content"
+      protection_of_minors: "Protection of minors"
+      public_security: "Risk for public security"
+      scams_fraud: "Scams and fraud"
+      scope_of_platform_service: "Scope of platform service"
+      self_harm: "Self-harm"
+      unsafe_illegal_products: "Unsafe or illegal products"
+      violence: "Violence"
+      intellectual_property: "Intellectual property infringements"
+      other: "Other"
+
+    member_states:
+      AT: "Austria"
+      BE: "Belgium"
+      BG: "Bulgaria"
+      CY: "Cyprus"
+      CZ: "Czechia"
+      DE: "Germany"
+      DK: "Denmark"
+      EE: "Estonia"
+      ES: "Spain"
+      FI: "Finland"
+      FR: "France"
+      GR: "Greece"
+      HR: "Croatia"
+      HU: "Hungary"
+      IE: "Ireland"
+      IT: "Italy"
+      LT: "Lithuania"
+      LU: "Luxembourg"
+      LV: "Latvia"
+      MT: "Malta"
+      NL: "Netherlands"
+      PL: "Poland"
+      PT: "Portugal"
+      RO: "Romania"
+      SE: "Sweden"
+      SI: "Slovenia"
+      SK: "Slovakia"
+      EU: "The whole EU"
+
+    content_types:
+      user_profile: "User profile"
+      profile_avatar: "Profile photo"
+      listing: "Listing"
+      message: "Message"
+      conversation: "Conversation"
+      group: "Group"
+      other: "Other"
+
+    resolution_bases:
+      terms: "Terms of service"
+      law: "The law"
+      law_and_terms: "The law and the terms of service"
+      insufficient_information: "Insufficient information"
+      no_violation: "No violation"
+
+    decisions:
+      no_restriction: "No restriction"
+      no_action: "No action"
+      content_removed: "Content removed"
+      account_suspended: "Account suspended"
+      other_restriction: "Other restriction"
+
+    intake_kinds:
+      community: "In-app report"
+      dsa: "Legal notice"
+
+    statuses:
+      report:
+        open: "Open"
+        actioned: "Actioned"
+        dismissed: "Dismissed"
+      flag:
+        pending: "Awaiting review"
+        actioned: "Actioned"
+        dismissed: "Dismissed"
+      appeal:
+        open: "Open"
+        upheld: "Upheld"
+        rejected: "Rejected"
+
+    flag_sources:
+      text_filter: "Text filter"
+      image_filter: "Image filter"
+      external_classifier: "External classifier"
+      manual: "Filed by hand"
+      wordlist: "Word list"
+
+    flag_modes:
+      flag: "Published, queued for review"
+      block: "Blocked"
+
+    appeal_sources:
+      notifier: "The notifier"
+      affected_user: "The affected person"
+      admin: "An administrator"
+      other: "Other"

data/config/locales/es.yml

@@ -0,0 +1,177 @@
+# moderate's default Spanish copy. See en.yml for how these keys resolve and
+# how to override them from your app.
+es:
+  errors:
+    messages:
+      objectionable_content: "contiene lenguaje no permitido"
+      upload_not_finished: "aún no ha terminado de subirse"
+  moderate:
+    # Flash messages of the Moderate::Moderation controller concern.
+    moderation:
+      resolved: "Denuncia gestionada."
+      dismissed: "Denuncia descartada."
+      flag_resolved: "Marca gestionada."
+      flag_dismissed: "Marca descartada."
+      upheld: "Recurso estimado."
+      rejected: "Recurso desestimado."
+    # Refusals and validation messages (the inline defaults in the code are English).
+    errors:
+      anonymous_notice_child_safety_only: "solo se admiten avisos anónimos sobre delitos contra menores"
+      appeal_already_closed: "Este recurso ya está decidido."
+      appeal_report_must_be_closed: "una decisión solo puede recurrirse una vez tomada"
+      appeal_window_expired: "el plazo para recurrir esta decisión ha terminado"
+      cannot_block_self: "No puedes bloquearte a ti mismo"
+      invalid_reported_field: "no es un campo que se pueda denunciar"
+      invalid_subject_url: "debe ser una URL http(s) válida"
+      missing_subject_url: "es obligatoria"
+      not_reportable_by_reporter: "no es algo que puedas denunciar"
+      nothing_removed: "No se ha retirado nada: %{content} no tiene nada que retirar (ya retirado, eliminado o no retirable). Resuelve sin retirar contenido, o descarta la denuncia."
+      report_already_closed: "Esta denuncia ya está resuelta."
+      reporter_cannot_report_self: "No puedes denunciarte a ti mismo"
+      resolve_needs_action: "Resolver una denuncia impone una restricción: retira el contenido, suspende la cuenta o ambas. Para cerrarla sin restricción, descártala."
+    appeals:
+      reported_field: "Contenido"
+
+    reportable_fields:
+      body: "Texto"
+      title: "Título"
+      description: "Descripción"
+      name: "Nombre"
+      display_name: "Nombre visible"
+      username: "Nombre de usuario"
+      bio: "Biografía"
+      avatar: "Foto de perfil"
+      photos: "Fotos"
+      images: "Imágenes"
+      attachments: "Archivos adjuntos"
+      files: "Archivos"
+
+    categories:
+      harassment: "Acoso"
+      hate: "Odio"
+      threats: "Amenazas"
+      sexual_content: "Contenido sexual"
+      spam: "Spam"
+      fraud: "Fraude"
+      unsafe_behavior: "Conducta insegura"
+      illegal_content: "Contenido ilegal"
+      privacy: "Privacidad"
+      child_safety: "Seguridad infantil"
+      other: "Otro"
+      hate_abuse_harassment: "Odio, abuso o acoso"
+      violent_speech: "Discurso violento"
+      graphic_violent_media: "Contenido gráfico o violento"
+      illegal_regulated_behaviors: "Conductas ilegales o reguladas"
+      impersonation: "Suplantación"
+      adult_sexual_content: "Contenido sexual adulto"
+      private_non_consensual_content: "Contenido privado o no consentido"
+      suicide_self_harm: "Suicidio o autolesiones"
+      terrorism_violent_extremism: "Terrorismo o extremismo violento"
+      scam_fraud: "Estafa o fraude"
+
+    legal_reasons:
+      animal_welfare: "Bienestar animal"
+      consumer_information: "Infracciones de información al consumidor"
+      cyber_violence: "Ciberviolencia"
+      data_protection_privacy: "Protección de datos y privacidad"
+      illegal_or_harmful_speech: "Discurso ilegal o dañino"
+      civic_elections: "Efectos negativos en el discurso cívico o las elecciones"
+      non_consensual_behavior: "Conducta no consentida"
+      pornography_sexualized_content: "Pornografía o contenido sexualizado"
+      protection_of_minors: "Protección de menores"
+      public_security: "Riesgo para la seguridad pública"
+      scams_fraud: "Estafas y fraude"
+      scope_of_platform_service: "Ámbito del servicio de plataforma"
+      self_harm: "Autolesiones"
+      unsafe_illegal_products: "Productos inseguros o ilegales"
+      violence: "Violencia"
+      intellectual_property: "Propiedad intelectual"
+      other: "Otro"
+
+    member_states:
+      AT: "Austria"
+      BE: "Bélgica"
+      BG: "Bulgaria"
+      CY: "Chipre"
+      CZ: "Chequia"
+      DE: "Alemania"
+      DK: "Dinamarca"
+      EE: "Estonia"
+      ES: "España"
+      FI: "Finlandia"
+      FR: "Francia"
+      GR: "Grecia"
+      HR: "Croacia"
+      HU: "Hungría"
+      IE: "Irlanda"
+      IT: "Italia"
+      LT: "Lituania"
+      LU: "Luxemburgo"
+      LV: "Letonia"
+      MT: "Malta"
+      NL: "Países Bajos"
+      PL: "Polonia"
+      PT: "Portugal"
+      RO: "Rumanía"
+      SE: "Suecia"
+      SI: "Eslovenia"
+      SK: "Eslovaquia"
+      EU: "Toda la UE"
+
+    content_types:
+      user_profile: "Perfil de usuario"
+      profile_avatar: "Foto de perfil"
+      listing: "Anuncio"
+      message: "Mensaje"
+      conversation: "Conversación"
+      group: "Grupo"
+      other: "Otro"
+
+    resolution_bases:
+      terms: "Condiciones del servicio"
+      law: "La ley"
+      law_and_terms: "La ley y las condiciones del servicio"
+      insufficient_information: "Información insuficiente"
+      no_violation: "Sin infracción"
+
+    decisions:
+      no_restriction: "Sin restricción"
+      no_action: "Sin medidas"
+      content_removed: "Contenido retirado"
+      account_suspended: "Cuenta suspendida"
+      other_restriction: "Otra restricción"
+
+    intake_kinds:
+      community: "Denuncia en la app"
+      dsa: "Aviso legal"
+
+    statuses:
+      report:
+        open: "Abierta"
+        actioned: "Gestionada"
+        dismissed: "Descartada"
+      flag:
+        pending: "Pendiente de revisión"
+        actioned: "Gestionada"
+        dismissed: "Descartada"
+      appeal:
+        open: "Abierto"
+        upheld: "Estimado"
+        rejected: "Desestimado"
+
+    flag_sources:
+      text_filter: "Filtro de texto"
+      image_filter: "Filtro de imagen"
+      external_classifier: "Clasificador externo"
+      manual: "Marcado a mano"
+      wordlist: "Lista de palabras"
+
+    flag_modes:
+      flag: "Publicado, en revisión"
+      block: "Bloqueado"
+
+    appeal_sources:
+      notifier: "Quien lo notificó"
+      affected_user: "La persona afectada"
+      admin: "Un administrador"
+      other: "Otro"

data/context7.json

@@ -0,0 +1,4 @@
+{
+  "url": "https://context7.com/rameerez/moderate",
+  "public_key": "pk_HibNJE5rTFvy1txHHXUot"
+}

data/db/migrate/20261018200000_add_pending_key_to_moderate_flags.rb

@@ -0,0 +1,139 @@
+# frozen_string_literal: true
+
+# 1.0.0.beta4: at most one PENDING flag per content and field, enforced by the
+# database. `pending_key` ("<flaggable_type>/<flaggable_id>/<field>") is set while a
+# flag is pending and NULL once it is closed (Moderate::Flag keeps it in sync on every
+# save); a UNIQUE index on it lets only one pending flag per content + field exist,
+# and NULLs never collide (PostgreSQL, MySQL and SQLite alike). Flag.flag! and
+# Flag.flag_for_review! insert and, on the collision, return the flag already waiting.
+#
+# THE ONE MIGRATION THAT CREATES pending_key, in every app. A fresh install gets it
+# from `bin/rails generate moderate:install`, copied right after create_moderate_tables
+# (as "<number>_add_pending_key_to_moderate_flags.moderate.rb"); an app upgrading from
+# beta3 gets it through the engine, which adds the gem's db/migrate to the app's
+# migration paths unless the app holds copies. Safe to run twice.
+#
+# The key compares as bytes: on MySQL the column is utf8mb4_bin, because the default
+# collation ignores case and would make "Post/1/body" and "POST/1/body" one key
+# (PostgreSQL and SQLite compare bytes already). utf8mb4_bin still ignores TRAILING
+# spaces (PAD SPACE); Moderate::Flag strips `field`, so keys it builds never differ by
+# them.
+#
+# Backfill: each content + field's NEWEST pending flag takes the key; older duplicate
+# pending flags (possible before this release) stay pending without one. The keys are
+# checked by the database before any is written, grouped under the column's own
+# collation: keys it would treat as one though they differ as strings (legacy rows
+# whose field has trailing spaces, on MySQL) stop the migration, naming the flags.
+#
+# `down` drops the index and the column: this migration is the only thing that creates
+# them, so rolling it back leaves create_moderate_tables' schema exactly as it was.
+class AddPendingKeyToModerateFlags < ActiveRecord::Migration[7.1]
+  INDEX = "index_moderate_flags_on_pending_key"
+  BINARY_COLLATION = "utf8mb4_bin"
+  CHECK_TABLE = "moderate_pending_key_check"
+
+  # The tables as they are, not the app's model: a migration must not depend on code.
+  class Flag < ActiveRecord::Base
+    self.table_name = "moderate_flags"
+  end
+
+  def up
+    return unless table_exists?(:moderate_flags)
+
+    if column_exists?(:moderate_flags, :pending_key)
+      require_binary_comparison
+    else
+      add_column :moderate_flags, :pending_key, :string, **pending_key_options
+    end
+    backfill_pending_keys
+    return if index_exists?(:moderate_flags, :pending_key, name: INDEX)
+
+    add_index :moderate_flags, :pending_key, unique: true, name: INDEX
+  end
+
+  def down
+    return unless table_exists?(:moderate_flags)
+
+    remove_index :moderate_flags, name: INDEX if index_exists?(:moderate_flags, :pending_key, name: INDEX)
+    remove_column :moderate_flags, :pending_key if column_exists?(:moderate_flags, :pending_key)
+  end
+
+  private
+
+  # MySQL under either of Rails' adapters: mysql2, or Trilogy.
+  def mysql?
+    connection.adapter_name.downcase.match?(/mysql|trilogy/)
+  end
+
+  def pending_key_options
+    mysql? ? { collation: BINARY_COLLATION } : {}
+  end
+
+  # Only this migration creates the column, binary. One that isn't was made some other
+  # way: say so, rather than altering it here.
+  def require_binary_comparison
+    return unless mysql?
+
+    collation = connection.columns(:moderate_flags).find { |c| c.name == "pending_key" }.collation
+    return if collation == BINARY_COLLATION
+
+    raise ActiveRecord::MigrationError, <<~MESSAGE.squish
+      moderate_flags.pending_key compares with #{collation.inspect}, which ignores case, so
+      flags on content types that differ only by case would share one key. Make it
+      binary, then run the migration again: ALTER TABLE moderate_flags MODIFY pending_key
+      VARCHAR(255) COLLATE #{BINARY_COLLATION} NULL
+    MESSAGE
+  end
+
+  def backfill_pending_keys
+    Flag.reset_column_information
+    chosen = newest_pending_without_key
+    refuse_keys_the_database_would_merge(chosen)
+    chosen.each { |id, key| Flag.where(id: id).update_all(pending_key: key) }
+  end
+
+  # { flag id => key } for each content + field's newest pending flag without a key,
+  # unless a flag already holds that exact key.
+  def newest_pending_without_key
+    newest = {}
+    Flag.where(status: "pending", pending_key: nil).select(:id, :flaggable_type, :flaggable_id, :field, :created_at)
+      .find_each do |flag|
+      key = "#{flag.flaggable_type}/#{flag.flaggable_id}/#{flag.field}"
+      newest[key] = flag if newest[key].nil? || flag.created_at > newest[key].created_at
+    end
+    taken = Flag.where.not(pending_key: nil).pluck(:pending_key).to_set
+    newest.except(*taken).to_h { |key, flag| [flag.id, key] }
+  end
+
+  # The keys to write and the keys already written, in a temporary table whose key
+  # column compares exactly as pending_key does; any key the database groups twice
+  # would make the index (or a backfill UPDATE) fail, so stop first and name them.
+  # Plain SQL: Rails' schema lookups don't all see temporary tables (PostgreSQL's pg_temp).
+  def refuse_keys_the_database_would_merge(chosen)
+    create_table CHECK_TABLE, temporary: true, id: false do |t|
+      t.bigint :flag_id, null: false
+      t.string :pending_key, null: false, **pending_key_options
+    end
+    table = quote_table_name(CHECK_TABLE)
+    rows = chosen.to_a + Flag.where.not(pending_key: nil).pluck(:id, :pending_key)
+    rows.each_slice(500) do |slice|
+      values = slice.map { |id, key| "(#{Integer(id)}, #{quote(key)})" }.join(", ")
+      execute "INSERT INTO #{table} (flag_id, pending_key) VALUES #{values}"
+    end
+
+    merged = select_values("SELECT pending_key FROM #{table} GROUP BY pending_key HAVING COUNT(*) > 1")
+    return if merged.empty?
+
+    listed = merged.map do |key|
+      ids = select_values("SELECT flag_id FROM #{table} WHERE pending_key = #{quote(key)} ORDER BY flag_id")
+      "#{key.inspect} (flags #{ids.map { |id| Integer(id) }.join(", ")})"
+    end
+    raise ActiveRecord::MigrationError, <<~MESSAGE.squish
+      moderate_flags has pending flags whose pending_key the unique index would treat as
+      one: #{listed.join("; ")}. Close all but one of each (dismiss them, or fix a field
+      with stray spaces), then run the migration again.
+    MESSAGE
+  ensure
+    drop_table CHECK_TABLE, temporary: true, if_exists: true
+  end
+end

data/db/migrate/20261018210000_add_retention_and_classifications_to_moderate_tables.rb

@@ -0,0 +1,103 @@
+# frozen_string_literal: true
+
+# 1.0.0: what retention, the appeal window and attachment classification need.
+#
+#   moderate_reports.redacted_at   when Moderate.purge removed the report's personal
+#   moderate_flags.redacted_at     data (nil: never). The purge selects on this, never
+#   moderate_appeals.redacted_at   on the content, so a message that literally reads
+#                                  "[redacted]" is still purged.
+#   moderate_reports.held_until    a legal hold (Moderate.hold): until then the purge
+#                                  leaves the report, its appeals and the flags on its
+#                                  content alone.
+#   moderate_reports.covered_by_report_id
+#                                  the decision that removed this report's content while
+#                                  it was pending (stamped by that decision, under the
+#                                  content's lock); only such a report is closed as
+#                                  "already removed by" it.
+#   moderate_classifications       one row per record, field and set of attached
+#                                  files: who is classifying it (a claim) and when it
+#                                  was classified (Moderate::Attachments). Ids, a
+#                                  digest of blob ids and timestamps; no content.
+#
+# The one migration that creates all of this, in a fresh app as in an upgraded one:
+# `rails generate moderate:install` copies it after create_moderate_tables (which
+# leaves it out), an app holding copies gets it with `bin/rails
+# moderate:install:migrations`, and an app installed without copies gets it through
+# the engine, which adds the gem's db/migrate to its paths. Its `down` drops only what
+# it created. Guarded, so a second run is a no-op. No backfill: nothing was redacted,
+# held or claimed before 1.0.
+class AddRetentionAndClassificationsToModerateTables < ActiveRecord::Migration[8.0]
+  COLUMNS = {
+    moderate_reports: %i[redacted_at held_until],
+    moderate_flags: %i[redacted_at],
+    moderate_appeals: %i[redacted_at]
+  }.freeze
+  HOLD_INDEX = "index_moderate_reports_on_held_until"
+  COVERED_INDEX = "index_moderate_reports_on_covered_by_report_id"
+  CLASSIFICATION_INDEX = "index_moderate_classifications_on_record_field_digest"
+
+  def up
+    COLUMNS.each do |table, columns|
+      next unless table_exists?(table)
+
+      columns.each { |column| add_column table, column, :datetime unless column_exists?(table, column) }
+    end
+    if table_exists?(:moderate_reports) && !index_exists?(:moderate_reports, :held_until, name: HOLD_INDEX)
+      add_index :moderate_reports, :held_until, name: HOLD_INDEX
+    end
+    add_covered_by if table_exists?(:moderate_reports)
+
+    create_classifications unless table_exists?(:moderate_classifications)
+  end
+
+  def down
+    drop_table :moderate_classifications if table_exists?(:moderate_classifications)
+    if table_exists?(:moderate_reports) && column_exists?(:moderate_reports, :covered_by_report_id)
+      remove_index :moderate_reports, name: COVERED_INDEX if index_exists?(:moderate_reports, :covered_by_report_id, name: COVERED_INDEX)
+      remove_column :moderate_reports, :covered_by_report_id
+    end
+    if table_exists?(:moderate_reports) && index_exists?(:moderate_reports, :held_until, name: HOLD_INDEX)
+      remove_index :moderate_reports, name: HOLD_INDEX
+    end
+
+    COLUMNS.each do |table, columns|
+      next unless table_exists?(table)
+
+      columns.each { |column| remove_column table, column if column_exists?(table, column) }
+    end
+  end
+
+  private
+
+  def add_covered_by
+    _primary_key_type, foreign_key_type = key_types
+    add_column :moderate_reports, :covered_by_report_id, foreign_key_type unless column_exists?(:moderate_reports, :covered_by_report_id)
+    return if index_exists?(:moderate_reports, :covered_by_report_id, name: COVERED_INDEX)
+
+    add_index :moderate_reports, :covered_by_report_id, name: COVERED_INDEX
+  end
+
+  def create_classifications
+    primary_key_type, foreign_key_type = key_types
+    create_table :moderate_classifications, id: primary_key_type do |t|
+      t.references :record, polymorphic: true, type: foreign_key_type, null: false, index: false
+      t.string :field, null: false
+      t.string :digest, null: false
+      t.string :claimed_by
+      t.datetime :claimed_at
+      t.datetime :classified_at
+      t.string :adapter
+      t.boolean :flagged
+      t.timestamps
+    end
+    add_index :moderate_classifications, %i[record_type record_id field digest], unique: true, name: CLASSIFICATION_INDEX
+    add_index :moderate_classifications, :classified_at, name: "index_moderate_classifications_on_classified_at"
+  end
+
+  # The app's primary-key type, as the install generator reads it (uuid or bigint).
+  def key_types
+    config = Rails.configuration.generators
+    setting = config.options[config.orm][:primary_key_type]
+    [setting || :primary_key, setting || :bigint]
+  end
+end