happy2 0.0.5 → 0.0.11

package/packages/happy2-server/dist/modules/moderation/impl/reportSelection.d.ts

@@ -0,0 +1,269 @@
+export declare const reportSelection: {
+    id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    reported_by_user_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "reported_by_user_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    target_user_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "target_user_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    chat_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "chat_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    message_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "message_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    file_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "file_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    reason: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "reason";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    details: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "details";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    status: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "status";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    assigned_to_user_id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "assigned_to_user_id";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    resolution: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "resolution";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    created_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "created_at";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    updated_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "updated_at";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+    resolved_at: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+        name: "resolved_at";
+        tableName: "moderation_reports";
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+    }, {}, {
+        length: number | undefined;
+    }>;
+};
+//# sourceMappingURL=reportSelection.d.ts.map

package/packages/happy2-server/dist/modules/moderation/impl/reportSelection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportSelection.d.ts","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/reportSelection.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,eAAe;IACxB,EAAE;;;;;;;;;;;;;;;;;;;IACF,mBAAmB;;;;;;;;;;;;;;;;;;;IACnB,cAAc;;;;;;;;;;;;;;;;;;;IACd,OAAO;;;;;;;;;;;;;;;;;;;IACP,UAAU;;;;;;;;;;;;;;;;;;;IACV,OAAO;;;;;;;;;;;;;;;;;;;IACP,MAAM;;;;;;;;;;;;;;;;;;;IACN,OAAO;;;;;;;;;;;;;;;;;;;IACP,MAAM;;;;;;;;;;;;;;;;;;;IACN,mBAAmB;;;;;;;;;;;;;;;;;;;IACnB,UAAU;;;;;;;;;;;;;;;;;;;IACV,UAAU;;;;;;;;;;;;;;;;;;;IACV,UAAU;;;;;;;;;;;;;;;;;;;IACV,WAAW;;;;;;;;;;;;;;;;;;;CACd,CAAC"}

package/packages/happy2-server/dist/modules/moderation/impl/reportSelection.js

@@ -0,0 +1,18 @@
+import { moderationReports } from "../../schema.js";
+export const reportSelection = {
+    id: moderationReports.id,
+    reported_by_user_id: moderationReports.reportedByUserId,
+    target_user_id: moderationReports.targetUserId,
+    chat_id: moderationReports.chatId,
+    message_id: moderationReports.messageId,
+    file_id: moderationReports.fileId,
+    reason: moderationReports.reason,
+    details: moderationReports.details,
+    status: moderationReports.status,
+    assigned_to_user_id: moderationReports.assignedToUserId,
+    resolution: moderationReports.resolution,
+    created_at: moderationReports.createdAt,
+    updated_at: moderationReports.updatedAt,
+    resolved_at: moderationReports.resolvedAt,
+};
+//# sourceMappingURL=reportSelection.js.map

package/packages/happy2-server/dist/modules/moderation/impl/reportSelection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reportSelection.js","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/reportSelection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,EAAE,EAAE,iBAAiB,CAAC,EAAE;IACxB,mBAAmB,EAAE,iBAAiB,CAAC,gBAAgB;IACvD,cAAc,EAAE,iBAAiB,CAAC,YAAY;IAC9C,OAAO,EAAE,iBAAiB,CAAC,MAAM;IACjC,UAAU,EAAE,iBAAiB,CAAC,SAAS;IACvC,OAAO,EAAE,iBAAiB,CAAC,MAAM;IACjC,MAAM,EAAE,iBAAiB,CAAC,MAAM;IAChC,OAAO,EAAE,iBAAiB,CAAC,OAAO;IAClC,MAAM,EAAE,iBAAiB,CAAC,MAAM;IAChC,mBAAmB,EAAE,iBAAiB,CAAC,gBAAgB;IACvD,UAAU,EAAE,iBAAiB,CAAC,UAAU;IACxC,UAAU,EAAE,iBAAiB,CAAC,SAAS;IACvC,UAAU,EAAE,iBAAiB,CAAC,SAAS;IACvC,WAAW,EAAE,iBAAiB,CAAC,UAAU;CAC5C,CAAC"}

package/packages/happy2-server/dist/modules/moderation/impl/requireReportTargetAccess.d.ts

@@ -0,0 +1,13 @@
+import { type DrizzleTransaction } from "../../drizzle.js";
+/**
+ * Validates every supplied report target, requiring existing users, visible chats and messages, matching chat/message pairs, and accessible live files.
+ * Performing all target checks inside report creation prevents moderation records from becoming an oracle for private messages, grants, or attachments.
+ */
+export declare function requireReportTargetAccess(tx: DrizzleTransaction, input: {
+    actorUserId: string;
+    targetUserId?: string;
+    chatId?: string;
+    messageId?: string;
+    fileId?: string;
+}): Promise<void>;
+//# sourceMappingURL=requireReportTargetAccess.d.ts.map

package/packages/happy2-server/dist/modules/moderation/impl/requireReportTargetAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireReportTargetAccess.d.ts","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/requireReportTargetAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAc3D;;;GAGG;AACH,wBAAsB,yBAAyB,CAC3C,EAAE,EAAE,kBAAkB,EACtB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,GACF,OAAO,CAAC,IAAI,CAAC,CAsFf"}

package/packages/happy2-server/dist/modules/moderation/impl/requireReportTargetAccess.js

@@ -0,0 +1,56 @@
+import {} from "../../drizzle.js";
+import { OperationsError } from "../../operations/types.js";
+import { and, eq, gt, isNull, or, sql } from "drizzle-orm";
+import { chatMembers, chats, fileAccessGrants, files, messageAttachments, messages, } from "../../schema.js";
+import { dataExportCanAccessChat } from "../../data-export/dataExportCanAccessChat.js";
+import { dataExportRequireExistingUser } from "../../data-export/dataExportRequireExistingUser.js";
+/**
+ * Validates every supplied report target, requiring existing users, visible chats and messages, matching chat/message pairs, and accessible live files.
+ * Performing all target checks inside report creation prevents moderation records from becoming an oracle for private messages, grants, or attachments.
+ */
+export async function requireReportTargetAccess(tx, input) {
+    if (input.targetUserId)
+        await dataExportRequireExistingUser(tx, input.targetUserId);
+    if (input.chatId && !(await dataExportCanAccessChat(tx, input.actorUserId, input.chatId)))
+        throw new OperationsError("not_found", "Chat was not found");
+    if (input.messageId) {
+        const [message] = await tx
+            .select({
+            chatId: messages.chatId,
+        })
+            .from(messages)
+            .where(eq(messages.id, input.messageId))
+            .limit(1);
+        if (!message || !(await dataExportCanAccessChat(tx, input.actorUserId, message.chatId)))
+            throw new OperationsError("not_found", "Message was not found");
+        if (input.chatId && input.chatId !== message.chatId)
+            throw new OperationsError("invalid", "messageId does not belong to chatId");
+    }
+    if (input.fileId) {
+        const grants = tx
+            .select({
+            found: sql `1`,
+        })
+            .from(fileAccessGrants)
+            .where(and(eq(fileAccessGrants.fileId, files.id), or(and(eq(fileAccessGrants.principalType, "user"), eq(fileAccessGrants.principalId, input.actorUserId)), eq(fileAccessGrants.principalType, "server"), and(eq(fileAccessGrants.principalType, "chat"), sql `exists (select 1 from chats c left join chat_members cm on cm.chat_id = c.id and cm.user_id = ${input.actorUserId} and cm.left_at is null where c.id = ${fileAccessGrants.principalId} and c.deleted_at is null and (c.visibility = 'public' or cm.user_id is not null))`)), or(isNull(fileAccessGrants.expiresAt), gt(fileAccessGrants.expiresAt, sql `CURRENT_TIMESTAMP`))));
+        const attachments = tx
+            .select({
+            found: sql `1`,
+        })
+            .from(messageAttachments)
+            .innerJoin(messages, eq(messages.id, messageAttachments.messageId))
+            .innerJoin(chats, eq(chats.id, messages.chatId))
+            .leftJoin(chatMembers, and(eq(chatMembers.chatId, chats.id), eq(chatMembers.userId, input.actorUserId), isNull(chatMembers.leftAt)))
+            .where(and(eq(messageAttachments.fileId, files.id), isNull(messages.deletedAt), isNull(chats.deletedAt), or(eq(chats.visibility, "public"), sql `${chatMembers.userId} IS NOT NULL`)));
+        const [accessible] = await tx
+            .select({
+            id: files.id,
+        })
+            .from(files)
+            .where(and(eq(files.id, input.fileId), isNull(files.deletedAt), or(eq(files.isPublic, 1), eq(files.uploadedByUserId, input.actorUserId), sql `exists ${grants}`, sql `exists ${attachments}`)))
+            .limit(1);
+        if (!accessible)
+            throw new OperationsError("not_found", "File was not found");
+    }
+}
+//# sourceMappingURL=requireReportTargetAccess.js.map

package/packages/happy2-server/dist/modules/moderation/impl/requireReportTargetAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requireReportTargetAccess.js","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/requireReportTargetAccess.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EACH,WAAW,EACX,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,kBAAkB,EAClB,QAAQ,GACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,EAAsB,EACtB,KAMC;IAED,IAAI,KAAK,CAAC,YAAY;QAAE,MAAM,6BAA6B,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACpF,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrF,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAClB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC;YACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;SAC1B,CAAC;aACD,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,uBAAuB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnF,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAC/C,MAAM,IAAI,eAAe,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,EAAE;aACZ,MAAM,CAAC;YACJ,KAAK,EAAE,GAAG,CAAA,GAAG;SAChB,CAAC;aACD,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CACF,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EACrC,EAAE,CACE,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC1C,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CACtD,EACD,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,QAAQ,CAAC,EAC5C,GAAG,CACC,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC1C,GAAG,CAAA,iGAAiG,KAAK,CAAC,WAAW,wCAAwC,gBAAgB,CAAC,WAAW,oFAAoF,CAChR,CACJ,EACD,EAAE,CACE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAClC,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,CAAA,mBAAmB,CAAC,CACzD,CACJ,CACJ,CAAC;QACN,MAAM,WAAW,GAAG,EAAE;aACjB,MAAM,CAAC;YACJ,KAAK,EAAE,GAAG,CAAA,GAAG;SAChB,CAAC;aACD,IAAI,CAAC,kBAAkB,CAAC;aACxB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;aAClE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC/C,QAAQ,CACL,WAAW,EACX,GAAG,CACC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAC7B,CACJ;aACA,KAAK,CACF,GAAG,CACC,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,EACvC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAA,GAAG,WAAW,CAAC,MAAM,cAAc,CAAC,CAC7E,CACJ,CAAC;QACN,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC;YACJ,EAAE,EAAE,KAAK,CAAC,EAAE;SACf,CAAC;aACD,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAC1B,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CACE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,EACrB,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,CAAC,EAC7C,GAAG,CAAA,UAAU,MAAM,EAAE,EACrB,GAAG,CAAA,UAAU,WAAW,EAAE,CAC7B,CACJ,CACJ;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAClF,CAAC;AACL,CAAC"}

package/packages/happy2-server/dist/modules/moderation/impl/revokeBanInTransaction.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleTransaction } from "../../drizzle.js";
+import { type OperationsSyncHint } from "../../operations/types.js";
+/**
+ * Ends the selected accountBans record and restores accounts only when the target has no other effective ban.
+ * The surrounding moderation transaction keeps credential authority synchronized with the action, notification, and audit records that explain the reversal.
+ */
+export declare function revokeBanInTransaction(tx: DrizzleTransaction, actorUserId: string, targetUserId: string, reason?: string): Promise<OperationsSyncHint>;
+//# sourceMappingURL=revokeBanInTransaction.d.ts.map

package/packages/happy2-server/dist/modules/moderation/impl/revokeBanInTransaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"revokeBanInTransaction.d.ts","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/revokeBanInTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAQrF;;;GAGG;AACH,wBAAsB,sBAAsB,CACxC,EAAE,EAAE,kBAAkB,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,CAAC,CAqB7B"}

package/packages/happy2-server/dist/modules/moderation/impl/revokeBanInTransaction.js

@@ -0,0 +1,34 @@
+import {} from "../../drizzle.js";
+import { OperationsError } from "../../operations/types.js";
+import { accountBans, accounts } from "../../schema.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { accountTargetDb } from "./accountTargetDb.js";
+import { syncUserMutation } from "./syncUserMutation.js";
+/**
+ * Ends the selected accountBans record and restores accounts only when the target has no other effective ban.
+ * The surrounding moderation transaction keeps credential authority synchronized with the action, notification, and audit records that explain the reversal.
+ */
+export async function revokeBanInTransaction(tx, actorUserId, targetUserId, reason) {
+    const target = await accountTargetDb(tx, targetUserId);
+    if (!target.bannedAt)
+        throw new OperationsError("conflict", "User does not have an active ban");
+    await tx
+        .update(accountBans)
+        .set({
+        revokedAt: sql `CURRENT_TIMESTAMP`,
+        revokedByUserId: actorUserId,
+        revokeReason: reason ?? null,
+    })
+        .where(and(eq(accountBans.accountId, target.accountId), isNull(accountBans.revokedAt)));
+    await tx
+        .update(accounts)
+        .set({
+        bannedAt: null,
+        banExpiresAt: null,
+        banReason: null,
+        bannedByUserId: null,
+    })
+        .where(eq(accounts.id, target.accountId));
+    return syncUserMutation(tx, actorUserId, target.userId, "user.unbanned");
+}
+//# sourceMappingURL=revokeBanInTransaction.js.map

package/packages/happy2-server/dist/modules/moderation/impl/revokeBanInTransaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revokeBanInTransaction.js","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/revokeBanInTransaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAA2B,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,EAAsB,EACtB,WAAmB,EACnB,YAAoB,EACpB,MAAe;IAEf,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;IAChG,MAAM,EAAE;SACH,MAAM,CAAC,WAAW,CAAC;SACnB,GAAG,CAAC;QACD,SAAS,EAAE,GAAG,CAAA,mBAAmB;QACjC,eAAe,EAAE,WAAW;QAC5B,YAAY,EAAE,MAAM,IAAI,IAAI;KAC/B,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,EAAE;SACH,MAAM,CAAC,QAAQ,CAAC;SAChB,GAAG,CAAC;QACD,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,IAAI;KACvB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,OAAO,gBAAgB,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC7E,CAAC"}

package/packages/happy2-server/dist/modules/moderation/impl/syncUserMutation.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleTransaction } from "../../drizzle.js";
+import { type OperationsSyncHint } from "../../operations/types.js";
+/**
+ * Advances the target users sync sequence and inserts the corresponding targeted syncEvents notification for an operations change.
+ * Requiring the moderation transaction prevents product identity state from changing without a reconciliation hint for affected clients.
+ */
+export declare function syncUserMutation(tx: DrizzleTransaction, actorUserId: string | undefined, targetUserId: string, kind: string): Promise<OperationsSyncHint>;
+//# sourceMappingURL=syncUserMutation.d.ts.map

package/packages/happy2-server/dist/modules/moderation/impl/syncUserMutation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncUserMutation.d.ts","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/syncUserMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAKpE;;;GAGG;AACH,wBAAsB,gBAAgB,CAClC,EAAE,EAAE,kBAAkB,EACtB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,CAAC,CAoB7B"}

package/packages/happy2-server/dist/modules/moderation/impl/syncUserMutation.js

@@ -0,0 +1,31 @@
+import {} from "../../drizzle.js";
+import {} from "../../operations/types.js";
+import { eq } from "drizzle-orm";
+import { syncEvents, users } from "../../schema.js";
+import { syncSequenceNextWithTimestamp } from "../../sync/syncSequenceNextWithTimestamp.js";
+/**
+ * Advances the target users sync sequence and inserts the corresponding targeted syncEvents notification for an operations change.
+ * Requiring the moderation transaction prevents product identity state from changing without a reconciliation hint for affected clients.
+ */
+export async function syncUserMutation(tx, actorUserId, targetUserId, kind) {
+    const sequence = await syncSequenceNextWithTimestamp(tx);
+    await tx
+        .update(users)
+        .set({
+        syncSequence: sequence,
+    })
+        .where(eq(users.id, targetUserId));
+    await tx.insert(syncEvents).values({
+        sequence,
+        kind,
+        entityId: targetUserId,
+        actorUserId,
+        targetUserId,
+    });
+    return {
+        sequence: String(sequence),
+        chats: [],
+        areas: ["users"],
+    };
+}
+//# sourceMappingURL=syncUserMutation.js.map

package/packages/happy2-server/dist/modules/moderation/impl/syncUserMutation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncUserMutation.js","sourceRoot":"","sources":["../../../../sources/modules/moderation/impl/syncUserMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAA2B,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,EAAsB,EACtB,WAA+B,EAC/B,YAAoB,EACpB,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE;SACH,MAAM,CAAC,KAAK,CAAC;SACb,GAAG,CAAC;QACD,YAAY,EAAE,QAAQ;KACzB,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACvC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;QAC/B,QAAQ;QACR,IAAI;QACJ,QAAQ,EAAE,YAAY;QACtB,WAAW;QACX,YAAY;KACf,CAAC,CAAC;IACH,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,CAAC,OAAO,CAAC;KACnB,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/moderation/moderationActionRevoke.d.ts

@@ -0,0 +1,17 @@
+import { type AuditContext } from "../operations/auditContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type ModerationAction, type OperationsSyncHint } from "../operations/types.js";
+/**
+ * Revokes a reversible moderationActions restriction, applies its inverse durable effect, and notifies the affected user.
+ * Administrator checks, reversal, audit history, and notification share one outcome so the record never says revoked while enforcement remains active.
+ */
+export declare function moderationActionRevoke(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    actionId: string;
+    reason?: string;
+    context?: AuditContext;
+}): Promise<{
+    action: ModerationAction;
+    sync: OperationsSyncHint;
+}>;
+//# sourceMappingURL=moderationActionRevoke.d.ts.map

package/packages/happy2-server/dist/modules/moderation/moderationActionRevoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderationActionRevoke.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/moderationActionRevoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EACH,KAAK,gBAAgB,EAErB,KAAK,kBAAkB,EAC1B,MAAM,wBAAwB,CAAC;AAYhC;;;GAGG;AACH,wBAAsB,sBAAsB,CACxC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;CAC1B,GACF,OAAO,CAAC;IACP,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,kBAAkB,CAAC;CAC5B,CAAC,CA4CD"}

package/packages/happy2-server/dist/modules/moderation/moderationActionRevoke.js

@@ -0,0 +1,59 @@
+import {} from "../operations/auditContext.js";
+import { withTransaction } from "../drizzle.js";
+import { OperationsError, } from "../operations/types.js";
+import { and, eq, isNull, sql } from "drizzle-orm";
+import { mergeContext } from "./impl/mergeContext.js";
+import { moderationActions } from "../schema.js";
+import { auditAppend } from "../operations/auditAppend.js";
+import { createModerationNotification } from "./impl/createModerationNotification.js";
+import { moderationActionDb } from "./impl/moderationActionDb.js";
+import { userRequireOperationsAdmin } from "../operations/userRequireOperationsAdmin.js";
+/**
+ * Revokes a reversible moderationActions restriction, applies its inverse durable effect, and notifies the affected user.
+ * Administrator checks, reversal, audit history, and notification share one outcome so the record never says revoked while enforcement remains active.
+ */
+export async function moderationActionRevoke(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequireOperationsAdmin(tx, input.actorUserId);
+        const before = await moderationActionDb(tx, input.actionId);
+        if (before.revokedAt)
+            throw new OperationsError("conflict", "Moderation action is already revoked");
+        if (before.action !== "restrict")
+            throw new OperationsError("conflict", "Only restrictions can be revoked");
+        if (!before.targetUserId)
+            throw new Error("Restriction is missing its target user");
+        await tx
+            .update(moderationActions)
+            .set({
+            revokedAt: sql `CURRENT_TIMESTAMP`,
+        })
+            .where(and(eq(moderationActions.id, input.actionId), isNull(moderationActions.revokedAt)));
+        const sync = await createModerationNotification(tx, {
+            actorUserId: input.actorUserId,
+            targetUserId: before.targetUserId,
+            chatId: before.chatId,
+            actionId: input.actionId,
+            reportId: before.reportId,
+            action: "restrict_revoked",
+            reason: input.reason,
+        });
+        const action = await moderationActionDb(tx, input.actionId);
+        await auditAppend(tx, {
+            actorUserId: input.actorUserId,
+            action: "moderation.action_revoked",
+            targetType: "moderation_action",
+            targetId: input.actionId,
+            chatId: before.chatId,
+            before,
+            after: action,
+            context: mergeContext(input.context, {
+                reason: input.reason,
+            }),
+        });
+        return {
+            action,
+            sync,
+        };
+    });
+}
+//# sourceMappingURL=moderationActionRevoke.js.map

package/packages/happy2-server/dist/modules/moderation/moderationActionRevoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderationActionRevoke.js","sourceRoot":"","sources":["../../../sources/modules/moderation/moderationActionRevoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAEH,eAAe,GAElB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAEzF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,KAKC;IAKD,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,0BAA0B,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,SAAS;YAChB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpF,MAAM,EAAE;aACH,MAAM,CAAC,iBAAiB,CAAC;aACzB,GAAG,CAAC;YACD,SAAS,EAAE,GAAG,CAAA,mBAAmB;SACpC,CAAC;aACD,KAAK,CACF,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAAC,EAAE,EAAE;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,MAAM,WAAW,CAAC,EAAE,EAAE;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,mBAAmB;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM;YACN,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE;gBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;aACvB,CAAC;SACL,CAAC,CAAC;QACH,OAAO;YACH,MAAM;YACN,IAAI;SACP,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/moderation/moderationActionTake.d.ts

@@ -0,0 +1,22 @@
+import { type AuditContext } from "../operations/auditContext.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type ModerationAction, type ModerationActionKind, type ModerationReport, type OperationsSyncHint } from "../operations/types.js";
+/**
+ * Resolves a moderationReports item into one moderationActions decision and applies the selected warning, restriction, ban, message removal, file removal, or user deletion.
+ * The transaction makes enforcement, report status, audit evidence, and recipient notification one reviewable administrator decision.
+ */
+export declare function moderationActionTake(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    reportId: string;
+    action: ModerationActionKind;
+    automationRunId?: string;
+    reason?: string;
+    expiresAt?: string;
+    metadata?: Record<string, unknown>;
+    context?: AuditContext;
+}): Promise<{
+    report: ModerationReport;
+    action: ModerationAction;
+    sync?: OperationsSyncHint;
+}>;
+//# sourceMappingURL=moderationActionTake.d.ts.map

package/packages/happy2-server/dist/modules/moderation/moderationActionTake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moderationActionTake.d.ts","sourceRoot":"","sources":["../../../sources/modules/moderation/moderationActionTake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EACH,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAErB,KAAK,kBAAkB,EAC1B,MAAM,wBAAwB,CAAC;AAsBhC;;;GAGG;AACH,wBAAsB,oBAAoB,CACtC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,YAAY,CAAC;CAC1B,GACF,OAAO,CAAC;IACP,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC,CAmID"}