+460

assets/styles.css

reviewed

··· 1970 1970 } 1971 1971 .profile-card-meta { 1972 1972 display: flex; 1973 1973 + flex-direction: column; 1974 1974 + align-items: flex-start; 1973 1975 flex-wrap: wrap; 1974 1976 gap: 0.4rem; 1975 1977 margin: 0.6rem 0 0; 1976 1978 font-size: 0.78rem; 1977 1979 } 1978 1980 .profile-card-category, .profile-card-sub { 1981 1981 + display: inline-flex; 1982 1982 + align-items: center; 1979 1983 padding: 0.15rem 0.55rem; 1980 1984 border-radius: 999px; 1981 1985 background: rgba(255, 255, 255, 0.5); 1982 1986 color: rgba(18, 26, 47, 0.78); 1983 1987 border: 1px solid rgba(255, 255, 255, 0.5); 1984 1988 } 1989 1989 + .profile-card-category { 1990 1990 + background: rgba(42, 90, 168, 0.12); 1991 1991 + border-color: rgba(42, 90, 168, 0.26); 1992 1992 + color: #254a9e; 1993 1993 + font-size: 0.76rem; 1994 1994 + font-weight: 700; 1995 1995 + letter-spacing: 0.04em; 1996 1996 + text-transform: uppercase; 1997 1997 + } 1998 1998 + .profile-card-categories { 1999 1999 + display: flex; 2000 2000 + flex-wrap: wrap; 2001 2001 + gap: 0.35rem; 2002 2002 + } 2003 2003 + .profile-card-subcategories { 2004 2004 + display: flex; 2005 2005 + flex-wrap: wrap; 2006 2006 + gap: 0.35rem; 2007 2007 + } 2008 2008 + .profile-card-sub { 2009 2009 + font-size: 0.76rem; 2010 2010 + } 1985 2011 .dark-phase .profile-card-category, .dark-phase .profile-card-sub { 1986 2012 background: rgba(255, 255, 255, 0.1); 1987 2013 color: rgba(255, 255, 255, 0.85); 1988 2014 border-color: rgba(255, 255, 255, 0.15); 2015 2015 + } 2016 2016 + .dark-phase .profile-card-category { 2017 2017 + background: rgba(106, 149, 255, 0.18); 2018 2018 + border-color: rgba(166, 191, 255, 0.24); 2019 2019 + color: #d8e4ff; 1989 2020 } 1990 2021 .profile-badge { 1991 2022 display: inline-flex; ··· 2185 2216 } 2186 2217 .profile-hero-meta { 2187 2218 display: flex; 2219 2219 + flex-direction: column; 2220 2220 + align-items: flex-start; 2188 2221 gap: 0.4rem; 2189 2222 flex-wrap: wrap; 2190 2223 margin-top: 0.5rem; ··· 2291 2324 color: rgba(255, 255, 255, 0.85); 2292 2325 } 2293 2326 2327 2327 + .profile-screenshots { 2328 2328 + margin-top: 1.5rem; 2329 2329 + } 2330 2330 + .profile-screenshots-shell { 2331 2331 + position: relative; 2332 2332 + width: 100%; 2333 2333 + min-width: 0; 2334 2334 + } 2335 2335 + .profile-screenshots-carousel { 2336 2336 + display: flex; 2337 2337 + gap: 1rem; 2338 2338 + overflow-x: auto; 2339 2339 + overscroll-behavior-x: contain; 2340 2340 + scroll-snap-type: x proximity; 2341 2341 + scrollbar-gutter: stable; 2342 2342 + padding: 0.1rem 0 1rem; 2343 2343 + -webkit-overflow-scrolling: touch; 2344 2344 + width: 100%; 2345 2345 + min-width: 0; 2346 2346 + } 2347 2347 + .profile-screenshots-arrow { 2348 2348 + position: absolute; 2349 2349 + top: 50%; 2350 2350 + transform: translateY(-50%); 2351 2351 + z-index: 2; 2352 2352 + width: 42px; 2353 2353 + height: 42px; 2354 2354 + border-radius: 999px; 2355 2355 + border: 1px solid rgba(255, 255, 255, 0.55); 2356 2356 + background: rgba(255, 255, 255, 0.68); 2357 2357 + color: #254a9e; 2358 2358 + font: inherit; 2359 2359 + font-size: 1.2rem; 2360 2360 + cursor: pointer; 2361 2361 + display: inline-flex; 2362 2362 + align-items: center; 2363 2363 + justify-content: center; 2364 2364 + box-shadow: 0 10px 26px rgba(20, 34, 70, 0.1); 2365 2365 + transition: background 0.15s ease, transform 0.15s ease; 2366 2366 + } 2367 2367 + .profile-screenshots-arrow--prev { 2368 2368 + left: 0.65rem; 2369 2369 + } 2370 2370 + .profile-screenshots-arrow--next { 2371 2371 + right: 0.65rem; 2372 2372 + } 2373 2373 + .profile-screenshots-arrow:hover { 2374 2374 + background: rgba(255, 255, 255, 0.9); 2375 2375 + transform: translateY(-50%) translateY(-1px); 2376 2376 + } 2377 2377 + .profile-screenshots-arrow:disabled { 2378 2378 + opacity: 0.42; 2379 2379 + cursor: default; 2380 2380 + pointer-events: none; 2381 2381 + } 2382 2382 + .profile-screenshot-card { 2383 2383 + display: flex; 2384 2384 + align-items: center; 2385 2385 + justify-content: center; 2386 2386 + flex: 0 0 auto; 2387 2387 + scroll-snap-align: start; 2388 2388 + overflow: hidden; 2389 2389 + height: clamp(320px, 58vh, 620px); 2390 2390 + max-width: 100%; 2391 2391 + border-radius: 20px; 2392 2392 + background: rgba(255, 255, 255, 0.45); 2393 2393 + border: 1px solid rgba(255, 255, 255, 0.55); 2394 2394 + box-shadow: 0 16px 40px rgba(20, 34, 70, 0.12); 2395 2395 + } 2396 2396 + .profile-screenshot-img { 2397 2397 + height: 100%; 2398 2398 + width: auto; 2399 2399 + max-width: 100%; 2400 2400 + object-fit: contain; 2401 2401 + display: block; 2402 2402 + transition: transform 0.2s ease; 2403 2403 + } 2404 2404 + .profile-screenshot-card:hover .profile-screenshot-img { 2405 2405 + transform: scale(1.015); 2406 2406 + } 2407 2407 + .dark-phase .profile-screenshot-card { 2408 2408 + background: rgba(255, 255, 255, 0.08); 2409 2409 + border-color: rgba(255, 255, 255, 0.14); 2410 2410 + } 2411 2411 + .dark-phase .profile-screenshots-arrow { 2412 2412 + background: rgba(255, 255, 255, 0.1); 2413 2413 + border-color: rgba(255, 255, 255, 0.16); 2414 2414 + color: #f0f4ff; 2415 2415 + } 2416 2416 + .dark-phase .profile-screenshots-arrow:hover { 2417 2417 + background: rgba(255, 255, 255, 0.16); 2418 2418 + } 2419 2419 + @media (max-width: 720px) { 2420 2420 + .profile-screenshots-shell { 2421 2421 + grid-template-columns: 1fr; 2422 2422 + } 2423 2423 + .profile-screenshots-arrow { 2424 2424 + display: none; 2425 2425 + } 2426 2426 + .profile-screenshot-card { 2427 2427 + height: clamp(300px, 62vh, 560px); 2428 2428 + max-width: 82vw; 2429 2429 + } 2430 2430 + .profile-screenshot-img { 2431 2431 + max-width: 82vw; 2432 2432 + } 2433 2433 + } 2434 2434 + 2294 2435 .profile-footer { 2295 2436 margin-top: 2rem; 2296 2437 font-size: 0.85rem; ··· 2446 2587 @media (max-width: 720px) { 2447 2588 .profile-form-mobile-links { 2448 2589 grid-template-columns: 1fr; 2590 2590 + } 2591 2591 + } 2592 2592 + .profile-form-section-heading { 2593 2593 + display: flex; 2594 2594 + align-items: center; 2595 2595 + justify-content: space-between; 2596 2596 + gap: 1rem; 2597 2597 + } 2598 2598 + .profile-form-count { 2599 2599 + font-family: "IBM Plex Mono", monospace; 2600 2600 + font-size: 0.8rem; 2601 2601 + color: rgba(18, 26, 47, 0.52); 2602 2602 + } 2603 2603 + .profile-screenshots-field { 2604 2604 + gap: 0.75rem; 2605 2605 + } 2606 2606 + .profile-screenshot-status { 2607 2607 + width: fit-content; 2608 2608 + } 2609 2609 + .profile-screenshot-grid { 2610 2610 + display: grid; 2611 2611 + grid-template-columns: repeat(4, minmax(0, 1fr)); 2612 2612 + gap: 0.75rem; 2613 2613 + } 2614 2614 + .profile-screenshot-edit { 2615 2615 + position: relative; 2616 2616 + overflow: hidden; 2617 2617 + aspect-ratio: 16 / 10; 2618 2618 + border-radius: 16px; 2619 2619 + border: 1px solid rgba(18, 26, 47, 0.1); 2620 2620 + background: rgba(255, 255, 255, 0.42); 2621 2621 + } 2622 2622 + .profile-screenshot-edit-img { 2623 2623 + width: 100%; 2624 2624 + height: 100%; 2625 2625 + object-fit: cover; 2626 2626 + display: block; 2627 2627 + } 2628 2628 + .profile-screenshot-remove { 2629 2629 + position: absolute; 2630 2630 + top: 0.45rem; 2631 2631 + right: 0.45rem; 2632 2632 + width: 28px; 2633 2633 + height: 28px; 2634 2634 + border-radius: 999px; 2635 2635 + border: 1px solid rgba(255, 255, 255, 0.66); 2636 2636 + background: rgba(18, 26, 47, 0.78); 2637 2637 + color: #ffffff; 2638 2638 + cursor: pointer; 2639 2639 + } 2640 2640 + .profile-screenshot-native-picker { 2641 2641 + max-width: 520px; 2642 2642 + } 2643 2643 + .profile-screenshot-file-input { 2644 2644 + padding: 0.7rem; 2645 2645 + cursor: pointer; 2646 2646 + } 2647 2647 + .dark-phase .profile-form-count { 2648 2648 + color: rgba(255, 255, 255, 0.58); 2649 2649 + } 2650 2650 + .dark-phase .profile-screenshot-edit { 2651 2651 + border-color: rgba(255, 255, 255, 0.14); 2652 2652 + background: rgba(255, 255, 255, 0.08); 2653 2653 + } 2654 2654 + @media (max-width: 720px) { 2655 2655 + .profile-screenshot-grid { 2656 2656 + grid-template-columns: repeat(2, minmax(0, 1fr)); 2449 2657 } 2450 2658 } 2451 2659 ··· 3226 3434 } 3227 3435 .profile-form-status--error { 3228 3436 color: #c25048; 3437 3437 + } 3438 3438 + .profile-form-hydration-note { 3439 3439 + margin: 0.75rem 0 0; 3440 3440 + font-size: 0.85rem; 3441 3441 + color: rgba(194, 80, 72, 0.9); 3229 3442 } 3230 3443 3231 3444 /* ---- Sign-in form ---- */ ··· 4682 4895 .dark-phase .profile-report-button { 4683 4896 border-color: rgba(255, 255, 255, 0.18); 4684 4897 color: rgba(255, 255, 255, 0.65); 4898 4898 + } 4899 4899 + .profile-reviews-shell { 4900 4900 + display: flex; 4901 4901 + flex-direction: column; 4902 4902 + gap: 0.85rem; 4903 4903 + margin-top: 1.5rem; 4904 4904 + } 4905 4905 + .profile-reviews-summary, 4906 4906 + .profile-reviews-panel, 4907 4907 + .profile-review-card { 4908 4908 + padding: 1.1rem 1.2rem; 4909 4909 + border-radius: 1.2rem; 4910 4910 + } 4911 4911 + .profile-reviews-summary { 4912 4912 + display: grid; 4913 4913 + grid-template-columns: minmax(0, 1fr) minmax(180px, 280px); 4914 4914 + gap: 1.2rem; 4915 4915 + align-items: center; 4916 4916 + } 4917 4917 + .profile-reviews-eyebrow { 4918 4918 + margin: 0; 4919 4919 + font-size: 0.78rem; 4920 4920 + font-weight: 800; 4921 4921 + letter-spacing: 0.08em; 4922 4922 + text-transform: uppercase; 4923 4923 + color: rgba(18, 26, 47, 0.58); 4924 4924 + } 4925 4925 + .profile-reviews-average { 4926 4926 + margin: 0.2rem 0 0; 4927 4927 + font-size: clamp(1.3rem, 2.5vw, 1.9rem); 4928 4928 + font-weight: 850; 4929 4929 + } 4930 4930 + .profile-reviews-average span, 4931 4931 + .profile-review-stars { 4932 4932 + color: #d89a23; 4933 4933 + } 4934 4934 + .profile-reviews-threshold { 4935 4935 + margin: 0.25rem 0 0; 4936 4936 + color: rgba(18, 26, 47, 0.68); 4937 4937 + } 4938 4938 + .profile-rating-distribution { 4939 4939 + display: flex; 4940 4940 + flex-direction: column; 4941 4941 + gap: 0.35rem; 4942 4942 + } 4943 4943 + .profile-rating-row { 4944 4944 + display: grid; 4945 4945 + grid-template-columns: 2.4rem 1fr 2rem; 4946 4946 + gap: 0.5rem; 4947 4947 + align-items: center; 4948 4948 + font-size: 0.8rem; 4949 4949 + color: rgba(18, 26, 47, 0.68); 4950 4950 + } 4951 4951 + .profile-rating-bar { 4952 4952 + height: 0.45rem; 4953 4953 + overflow: hidden; 4954 4954 + border-radius: 999px; 4955 4955 + background: rgba(18, 26, 47, 0.1); 4956 4956 + } 4957 4957 + .profile-rating-bar span { 4958 4958 + display: block; 4959 4959 + height: 100%; 4960 4960 + border-radius: inherit; 4961 4961 + background: linear-gradient(90deg, #d89a23, #f2c75c); 4962 4962 + } 4963 4963 + .profile-reviews-heading { 4964 4964 + margin: 0; 4965 4965 + font-size: 1rem; 4966 4966 + } 4967 4967 + .profile-reviews-panel-header { 4968 4968 + display: flex; 4969 4969 + flex-wrap: wrap; 4970 4970 + align-items: center; 4971 4971 + justify-content: space-between; 4972 4972 + gap: 0.75rem; 4973 4973 + margin-bottom: 0.85rem; 4974 4974 + } 4975 4975 + .profile-review-action-row { 4976 4976 + display: flex; 4977 4977 + flex-wrap: wrap; 4978 4978 + justify-content: flex-end; 4979 4979 + align-items: center; 4980 4980 + gap: 0.75rem; 4981 4981 + } 4982 4982 + .profile-review-action-hint, 4983 4983 + .profile-review-owner-note { 4984 4984 + margin: 0; 4985 4985 + font-size: 0.88rem; 4986 4986 + color: rgba(18, 26, 47, 0.62); 4987 4987 + } 4988 4988 + .profile-review-rating-field { 4989 4989 + display: flex; 4990 4990 + gap: 0.2rem; 4991 4991 + margin: 0 0 0.85rem; 4992 4992 + padding: 0; 4993 4993 + border: 0; 4994 4994 + } 4995 4995 + .profile-review-rating-field legend, 4996 4996 + .profile-review-body-field span { 4997 4997 + display: block; 4998 4998 + margin-bottom: 0.4rem; 4999 4999 + font-size: 0.82rem; 5000 5000 + font-weight: 750; 5001 5001 + color: rgba(18, 26, 47, 0.7); 5002 5002 + } 5003 5003 + .profile-review-star { 5004 5004 + background: none; 5005 5005 + border: 0; 5006 5006 + color: rgba(18, 26, 47, 0.22); 5007 5007 + cursor: pointer; 5008 5008 + font-size: 1.8rem; 5009 5009 + line-height: 1; 5010 5010 + padding: 0 0.1rem; 5011 5011 + } 5012 5012 + .profile-review-star.is-active { 5013 5013 + color: #d89a23; 5014 5014 + } 5015 5015 + .profile-review-body-field textarea, 5016 5016 + .profile-review-response-composer textarea { 5017 5017 + width: 100%; 5018 5018 + min-height: 5.5rem; 5019 5019 + resize: vertical; 5020 5020 + border: 1px solid rgba(18, 26, 47, 0.14); 5021 5021 + border-radius: 0.9rem; 5022 5022 + padding: 0.8rem; 5023 5023 + background: rgba(255, 255, 255, 0.92); 5024 5024 + color: inherit; 5025 5025 + font: inherit; 5026 5026 + } 5027 5027 + .profile-review-char-count { 5028 5028 + margin: 0.35rem 0 0; 5029 5029 + text-align: right; 5030 5030 + font-size: 0.78rem; 5031 5031 + color: rgba(18, 26, 47, 0.55); 5032 5032 + } 5033 5033 + .profile-review-composer-actions { 5034 5034 + display: flex; 5035 5035 + flex-wrap: wrap; 5036 5036 + gap: 0.65rem; 5037 5037 + justify-content: flex-end; 5038 5038 + margin-top: 0.85rem; 5039 5039 + } 5040 5040 + .profile-review-cards { 5041 5041 + display: flex; 5042 5042 + flex-direction: column; 5043 5043 + gap: 0.85rem; 5044 5044 + } 5045 5045 + .profile-reviews-empty { 5046 5046 + margin-top: 0.25rem; 5047 5047 + } 5048 5048 + .profile-review-header { 5049 5049 + display: flex; 5050 5050 + justify-content: space-between; 5051 5051 + gap: 1rem; 5052 5052 + align-items: flex-start; 5053 5053 + } 5054 5054 + .profile-review-author, 5055 5055 + .profile-review-date, 5056 5056 + .profile-review-body, 5057 5057 + .profile-review-stars { 5058 5058 + margin: 0; 5059 5059 + } 5060 5060 + .profile-review-author { 5061 5061 + font-weight: 800; 5062 5062 + } 5063 5063 + .profile-review-date { 5064 5064 + margin-top: 0.15rem; 5065 5065 + font-size: 0.78rem; 5066 5066 + color: rgba(18, 26, 47, 0.55); 5067 5067 + } 5068 5068 + .profile-review-stars { 5069 5069 + flex: 0 0 auto; 5070 5070 + letter-spacing: 0.05em; 5071 5071 + } 5072 5072 + .profile-review-stars span { 5073 5073 + color: rgba(18, 26, 47, 0.24); 5074 5074 + } 5075 5075 + .profile-review-body { 5076 5076 + margin-top: 0.8rem; 5077 5077 + white-space: pre-wrap; 5078 5078 + } 5079 5079 + .profile-review-response { 5080 5080 + margin-top: 0.9rem; 5081 5081 + border-left: 3px solid rgba(18, 26, 47, 0.18); 5082 5082 + padding: 0.1rem 0 0.1rem 0.85rem; 5083 5083 + } 5084 5084 + .profile-review-response p { 5085 5085 + margin: 0.2rem 0 0; 5086 5086 + } 5087 5087 + .profile-review-response-label { 5088 5088 + font-size: 0.78rem; 5089 5089 + font-weight: 850; 5090 5090 + letter-spacing: 0.04em; 5091 5091 + text-transform: uppercase; 5092 5092 + color: rgba(18, 26, 47, 0.58); 5093 5093 + } 5094 5094 + .profile-review-response-toggle, 5095 5095 + .profile-review-report-button { 5096 5096 + margin-top: 0.9rem; 5097 5097 + } 5098 5098 + .profile-review-report-button { 5099 5099 + display: inline-flex; 5100 5100 + } 5101 5101 + .profile-review-response-composer { 5102 5102 + margin-top: 0.9rem; 5103 5103 + } 5104 5104 + .dark-phase .profile-reviews-eyebrow, 5105 5105 + .dark-phase .profile-review-rating-field legend, 5106 5106 + .dark-phase .profile-review-body-field span, 5107 5107 + .dark-phase .profile-review-response-label { 5108 5108 + color: rgba(255, 255, 255, 0.65); 5109 5109 + } 5110 5110 + .dark-phase .profile-reviews-threshold, 5111 5111 + .dark-phase .profile-rating-row, 5112 5112 + .dark-phase .profile-review-date, 5113 5113 + .dark-phase .profile-review-char-count, 5114 5114 + .dark-phase .profile-review-action-hint, 5115 5115 + .dark-phase .profile-review-owner-note { 5116 5116 + color: rgba(255, 255, 255, 0.58); 5117 5117 + } 5118 5118 + .dark-phase .profile-rating-bar { 5119 5119 + background: rgba(255, 255, 255, 0.12); 5120 5120 + } 5121 5121 + .dark-phase .profile-review-star { 5122 5122 + color: rgba(255, 255, 255, 0.22); 5123 5123 + } 5124 5124 + .dark-phase .profile-review-star.is-active { 5125 5125 + color: #f2c75c; 5126 5126 + } 5127 5127 + .dark-phase .profile-review-stars span { 5128 5128 + color: rgba(255, 255, 255, 0.25); 5129 5129 + } 5130 5130 + .dark-phase .profile-review-body-field textarea, 5131 5131 + .dark-phase .profile-review-response-composer textarea { 5132 5132 + background: rgba(255, 255, 255, 0.06); 5133 5133 + border-color: rgba(255, 255, 255, 0.12); 5134 5134 + } 5135 5135 + .dark-phase .profile-review-response { 5136 5136 + border-left-color: rgba(255, 255, 255, 0.2); 5137 5137 + } 5138 5138 + @media (max-width: 640px) { 5139 5139 + .profile-reviews-summary { 5140 5140 + grid-template-columns: 1fr; 5141 5141 + } 5142 5142 + .profile-review-header { 5143 5143 + flex-direction: column; 5144 5144 + } 4685 5145 } 4686 5146 4687 5147 /* Modal-internal styles for the report dialog */

+2 -2

components/explore/CategoryTabs.tsx

reviewed

··· 1 1 - import { CATEGORIES, type Category } from "../../lib/lexicons.ts"; 1 1 + import { type Category, PUBLIC_CATEGORIES } from "../../lib/lexicons.ts"; 2 2 import { useT } from "../../i18n/mod.ts"; 3 3 4 4 interface Props { ··· 24 24 > 25 25 {t.categories.all} 26 26 </a> 27 27 - {CATEGORIES.map((c: Category) => ( 27 27 + {PUBLIC_CATEGORIES.map((c: Category) => ( 28 28 <a 29 29 key={c} 30 30 href={buildHref(c, query)}

+33 -16

components/explore/ProfileCard.tsx

reviewed

··· 1 1 import type { ProfileRow } from "../../lib/registry.ts"; 2 2 + import { PUBLIC_CATEGORIES } from "../../lib/lexicons.ts"; 2 3 import { useT } from "../../i18n/mod.ts"; 3 4 import VerifiedBadge from "../VerifiedBadge.tsx"; 4 5 ··· 15 16 export default function ProfileCard({ profile }: Props) { 16 17 const t = useT(); 17 18 const tCat = t.categories as Record<string, string>; 18 18 - const cats = profile.categories.slice(0, 3); 19 19 + const publicCategories = profile.categories.filter((c) => 20 20 + (PUBLIC_CATEGORIES as readonly string[]).includes(c) 21 21 + ); 22 22 + const appSubcategories = publicCategories.includes("app") 23 23 + ? profile.subcategories.slice(0, 2) 24 24 + : []; 19 25 const featured = profile.featured; 20 26 21 27 return ( ··· 62 68 {profile.description && ( 63 69 <p class="profile-card-description">{profile.description}</p> 64 70 )} 65 65 - <p class="profile-card-meta"> 66 66 - {cats.map((c) => ( 67 67 - <span key={c} class="profile-card-category"> 68 68 - {tCat[c] ?? c} 69 69 - </span> 70 70 - ))} 71 71 - {profile.subcategories.slice(0, 2).map((s) => { 72 72 - const sub = (t.subcategories as Record<string, string>)[s] ?? s; 73 73 - return ( 74 74 - <span key={s} class="profile-card-sub"> 75 75 - {sub} 76 76 - </span> 77 77 - ); 78 78 - })} 79 79 - </p> 71 71 + {(publicCategories.length > 0 || appSubcategories.length > 0) && ( 72 72 + <div class="profile-card-meta"> 73 73 + {publicCategories.length > 0 && ( 74 74 + <div class="profile-card-categories"> 75 75 + {publicCategories.map((c) => ( 76 76 + <span key={c} class="profile-card-category"> 77 77 + {tCat[c] ?? c} 78 78 + </span> 79 79 + ))} 80 80 + </div> 81 81 + )} 82 82 + {appSubcategories.length > 0 && ( 83 83 + <div class="profile-card-subcategories"> 84 84 + {appSubcategories.map((s) => { 85 85 + const sub = (t.subcategories as Record<string, string>)[s] ?? 86 86 + s; 87 87 + return ( 88 88 + <span key={s} class="profile-card-sub"> 89 89 + {sub} 90 90 + </span> 91 91 + ); 92 92 + })} 93 93 + </div> 94 94 + )} 95 95 + </div> 96 96 + )} 80 97 </div> 81 98 </a> 82 99 );

+29 -13

components/explore/ProfileHero.tsx

reviewed

··· 1 1 import type { ProfileRow } from "../../lib/registry.ts"; 2 2 + import { PUBLIC_CATEGORIES } from "../../lib/lexicons.ts"; 2 3 import { useT } from "../../i18n/mod.ts"; 3 4 import VerifiedBadge from "../VerifiedBadge.tsx"; 4 5 import WebsiteIcon from "../icons/WebsiteIcon.tsx"; ··· 19 20 const tBadges = t.badges; 20 21 const tLink = t.linkKinds; 21 22 const featured = profile.featured; 22 22 - const cats = profile.categories; 23 23 + const publicCategories = profile.categories.filter((c) => 24 24 + (PUBLIC_CATEGORIES as readonly string[]).includes(c) 25 25 + ); 26 26 + const appSubcategories = publicCategories.includes("app") 27 27 + ? profile.subcategories 28 28 + : []; 23 29 const primaryLinks = [ 24 30 profile.mainLink 25 31 ? { ··· 81 87 )} 82 88 </div> 83 89 <p class="profile-hero-handle">@{profile.handle}</p> 84 84 - <div class="profile-hero-meta"> 85 85 - {cats.map((c) => ( 86 86 - <span key={c} class="profile-card-category"> 87 87 - {tCat[c] ?? c} 88 88 - </span> 89 89 - ))} 90 90 - {profile.subcategories.map((s) => ( 91 91 - <span key={s} class="profile-card-sub"> 92 92 - {tSub[s] ?? s} 93 93 - </span> 94 94 - ))} 95 95 - </div> 90 90 + {(publicCategories.length > 0 || appSubcategories.length > 0) && ( 91 91 + <div class="profile-hero-meta"> 92 92 + {publicCategories.length > 0 && ( 93 93 + <div class="profile-card-categories"> 94 94 + {publicCategories.map((c) => ( 95 95 + <span key={c} class="profile-card-category"> 96 96 + {tCat[c] ?? c} 97 97 + </span> 98 98 + ))} 99 99 + </div> 100 100 + )} 101 101 + {appSubcategories.length > 0 && ( 102 102 + <div class="profile-card-subcategories"> 103 103 + {appSubcategories.map((s) => ( 104 104 + <span key={s} class="profile-card-sub"> 105 105 + {tSub[s] ?? s} 106 106 + </span> 107 107 + ))} 108 108 + </div> 109 109 + )} 110 110 + </div> 111 111 + )} 96 112 {profile.description && ( 97 113 <p class="profile-hero-description">{profile.description}</p> 98 114 )}

+64

components/explore/ProfileRatingSummary.tsx

reviewed

··· 1 1 + import { 2 2 + REVIEW_AGGREGATE_MIN_COUNT, 3 3 + type ReviewSummary, 4 4 + } from "../../lib/reviews.ts"; 5 5 + 6 6 + interface Props { 7 7 + summary: ReviewSummary; 8 8 + copy: { 9 9 + heading: string; 10 10 + threshold: (count: number, needed: number) => string; 11 11 + average: (rating: string, count: number) => string; 12 12 + distributionLabel: (stars: number, count: number) => string; 13 13 + }; 14 14 + } 15 15 + 16 16 + export default function ProfileRatingSummary({ summary, copy }: Props) { 17 17 + const hasAggregate = summary.averageRating != null && summary.distribution; 18 18 + return ( 19 19 + <section class="profile-reviews-summary glass"> 20 20 + <div> 21 21 + <p class="profile-reviews-eyebrow">{copy.heading}</p> 22 22 + {hasAggregate 23 23 + ? ( 24 24 + <p class="profile-reviews-average"> 25 25 + <span aria-hidden="true">★</span> {copy.average( 26 26 + summary.averageRating!.toFixed(1), 27 27 + summary.visibleCount, 28 28 + )} 29 29 + </p> 30 30 + ) 31 31 + : ( 32 32 + <p class="profile-reviews-threshold"> 33 33 + {copy.threshold( 34 34 + summary.visibleCount, 35 35 + Math.max(0, REVIEW_AGGREGATE_MIN_COUNT - summary.visibleCount), 36 36 + )} 37 37 + </p> 38 38 + )} 39 39 + </div> 40 40 + {hasAggregate && ( 41 41 + <div class="profile-rating-distribution"> 42 42 + {[5, 4, 3, 2, 1].map((stars) => { 43 43 + const count = summary.distribution![stars as 1 | 2 | 3 | 4 | 5]; 44 44 + const pct = summary.visibleCount > 0 45 45 + ? Math.round((count / summary.visibleCount) * 100) 46 46 + : 0; 47 47 + return ( 48 48 + <div class="profile-rating-row" key={stars}> 49 49 + <span>{stars}★</span> 50 50 + <div 51 51 + class="profile-rating-bar" 52 52 + aria-label={copy.distributionLabel(stars, count)} 53 53 + > 54 54 + <span style={{ width: `${pct}%` }} /> 55 55 + </div> 56 56 + <span>{count}</span> 57 57 + </div> 58 58 + ); 59 59 + })} 60 60 + </div> 61 61 + )} 62 62 + </section> 63 63 + ); 64 64 + }

+117

components/explore/ProfileReviewList.tsx

reviewed

··· 1 1 + import type { ComponentChildren } from "preact"; 2 2 + import type { ReviewRow } from "../../lib/reviews.ts"; 3 3 + import ReportReviewButton from "../../islands/ReportReviewButton.tsx"; 4 4 + import ReviewResponseComposer from "../../islands/ReviewResponseComposer.tsx"; 5 5 + 6 6 + export interface DisplayReview extends ReviewRow { 7 7 + reviewerHandle: string | null; 8 8 + } 9 9 + 10 10 + interface Props { 11 11 + reviews: DisplayReview[]; 12 12 + signedIn: boolean; 13 13 + isOwner: boolean; 14 14 + action?: ComponentChildren; 15 15 + copy: { 16 16 + heading: string; 17 17 + empty: string; 18 18 + reviewerFallback: string; 19 19 + edited: string; 20 20 + ownerResponse: string; 21 21 + report: { 22 22 + button: string; 23 23 + modalTitle: string; 24 24 + modalBody: string; 25 25 + reasonLabel: string; 26 26 + detailsLabel: string; 27 27 + detailsPlaceholder: string; 28 28 + submit: string; 29 29 + submitting: string; 30 30 + cancel: string; 31 31 + sentTitle: string; 32 32 + sentBody: string; 33 33 + signInRequired: string; 34 34 + error: string; 35 35 + reasons: Record<"harmful" | "spam" | "off_topic" | "other", string>; 36 36 + }; 37 37 + response: { 38 38 + button: string; 39 39 + updateButton: string; 40 40 + deleteButton: string; 41 41 + placeholder: string; 42 42 + submit: string; 43 43 + submitting: string; 44 44 + cancel: string; 45 45 + error: string; 46 46 + }; 47 47 + }; 48 48 + } 49 49 + 50 50 + export default function ProfileReviewList( 51 51 + { reviews, signedIn, isOwner, action, copy }: Props, 52 52 + ) { 53 53 + return ( 54 54 + <section class="profile-reviews-panel glass"> 55 55 + <div class="profile-reviews-panel-header"> 56 56 + <h2 class="profile-reviews-heading">{copy.heading}</h2> 57 57 + {action} 58 58 + </div> 59 59 + {reviews.length === 0 60 60 + ? <p class="text-body profile-reviews-empty">{copy.empty}</p> 61 61 + : ( 62 62 + <div class="profile-review-cards"> 63 63 + {reviews.map((review) => ( 64 64 + <article class="profile-review-card glass" key={review.id}> 65 65 + <header class="profile-review-header"> 66 66 + <div> 67 67 + <p class="profile-review-author"> 68 68 + {review.reviewerHandle 69 69 + ? `@${review.reviewerHandle}` 70 70 + : copy.reviewerFallback} 71 71 + </p> 72 72 + <p class="profile-review-date"> 73 73 + {new Date(review.createdAt).toISOString().slice(0, 10)} 74 74 + {review.updatedAt > review.createdAt && ( 75 75 + <span>· {copy.edited}</span> 76 76 + )} 77 77 + </p> 78 78 + </div> 79 79 + <p 80 80 + class="profile-review-stars" 81 81 + aria-label={`${review.rating} stars`} 82 82 + > 83 83 + {"★".repeat(review.rating)} 84 84 + <span aria-hidden="true"> 85 85 + {"☆".repeat(5 - review.rating)} 86 86 + </span> 87 87 + </p> 88 88 + </header> 89 89 + {review.body && <p class="profile-review-body">{review.body} 90 90 + </p>} 91 91 + {review.response && ( 92 92 + <div class="profile-review-response"> 93 93 + <p class="profile-review-response-label"> 94 94 + {copy.ownerResponse} 95 95 + </p> 96 96 + <p>{review.response.body}</p> 97 97 + </div> 98 98 + )} 99 99 + {isOwner && ( 100 100 + <ReviewResponseComposer 101 101 + reviewId={review.id} 102 102 + initialBody={review.response?.body ?? ""} 103 103 + copy={copy.response} 104 104 + /> 105 105 + )} 106 106 + <ReportReviewButton 107 107 + reviewId={review.id} 108 108 + signedIn={signedIn} 109 109 + copy={copy.report} 110 110 + /> 111 111 + </article> 112 112 + ))} 113 113 + </div> 114 114 + )} 115 115 + </section> 116 116 + ); 117 117 + }

+56

components/explore/ProfileScreenshots.tsx

reviewed

··· 1 1 + import type { ProfileRow } from "../../lib/registry.ts"; 2 2 + 3 3 + interface Props { 4 4 + profile: ProfileRow; 5 5 + } 6 6 + 7 7 + export default function ProfileScreenshots({ profile }: Props) { 8 8 + if (profile.screenshots.length === 0) return null; 9 9 + 10 10 + return ( 11 11 + <section class="profile-screenshots" aria-label="Screenshots"> 12 12 + <div class="profile-screenshots-shell" data-screenshot-carousel> 13 13 + <button 14 14 + type="button" 15 15 + class="profile-screenshots-arrow profile-screenshots-arrow--prev" 16 16 + aria-label="Previous screenshot" 17 17 + data-screenshot-direction="-1" 18 18 + > 19 19 + ← 20 20 + </button> 21 21 + <div class="profile-screenshots-carousel"> 22 22 + {profile.screenshots.map((_, i) => ( 23 23 + <a 24 24 + class="profile-screenshot-card" 25 25 + href={`/api/registry/screenshot/${ 26 26 + encodeURIComponent(profile.did) 27 27 + }/${i}`} 28 28 + target="_blank" 29 29 + rel="noopener noreferrer" 30 30 + key={i} 31 31 + > 32 32 + <img 33 33 + src={`/api/registry/screenshot/${ 34 34 + encodeURIComponent(profile.did) 35 35 + }/${i}`} 36 36 + alt={`${profile.name} screenshot ${i + 1}`} 37 37 + loading="lazy" 38 38 + decoding="async" 39 39 + class="profile-screenshot-img" 40 40 + /> 41 41 + </a> 42 42 + ))} 43 43 + </div> 44 44 + <button 45 45 + type="button" 46 46 + class="profile-screenshots-arrow profile-screenshots-arrow--next" 47 47 + aria-label="Next screenshot" 48 48 + data-screenshot-direction="1" 49 49 + > 50 50 + → 51 51 + </button> 52 52 + </div> 53 53 + <script type="module" src="/profile-screenshot-carousel.js" /> 54 54 + </section> 55 55 + ); 56 56 + }

+127 -2

i18n/messages/en.tsx

reviewed

··· 543 543 namePlaceholder: "e.g. Bluesky", 544 544 descriptionLabel: "Short description", 545 545 descriptionPlaceholder: "What does it do? Who's it for?", 546 546 - categoryLabel: "Categories", 546 546 + categoryLabel: "Category", 547 547 categoryHint: 548 548 - "Pick all that apply. A project can be both an app and an account provider.", 548 548 + "Choose App, Account Provider, or both. Selected categories are shown as primary badges.", 549 549 subcategoriesLabel: "Subcategories (optional)", 550 550 subcategoriesHint: "For apps. Pick up to a few.", 551 551 avatarLabel: "Project icon", ··· 607 607 androidHint: "Add this if your project has an Android app.", 608 608 androidInvalid: "Android link must be a valid http(s) URL.", 609 609 }, 610 610 + screenshots: { 611 611 + sectionLabel: "Screenshots", 612 612 + hint: "Optional. Add up to 4 PNG, JPEG, or WebP screenshots, 5MB each.", 613 613 + upload: "Add screenshots", 614 614 + addMore: "Add more screenshots", 615 615 + invalidType: "Screenshots must be PNG, JPEG, or WebP images.", 616 616 + tooLarge: "Each screenshot must be 5MB or smaller.", 617 617 + maxReached: "You can add up to 4 screenshots.", 618 618 + added: (n: number) => 619 619 + `${n} screenshot${ 620 620 + n === 1 ? "" : "s" 621 621 + } ready. Click Update profile to save.`, 622 622 + partialAdded: (added: number, skipped: number) => 623 623 + `${added} screenshot${added === 1 ? "" : "s"} ready. ${skipped} file${ 624 624 + skipped === 1 ? " was" : "s were" 625 625 + } skipped because screenshots must be PNG, JPEG, or WebP and 5MB or smaller.`, 626 626 + noneAdded: 627 627 + "No screenshots were added. Use PNG, JPEG, or WebP images that are 5MB or smaller.", 628 628 + removeAriaLabel: (n: number) => `Remove screenshot ${n}`, 629 629 + }, 610 630 customLinks: { 611 631 sectionLabel: "Custom links", 612 632 addButton: "Add custom link", ··· 681 701 "Projects asking to be verified — grants a checkmark on their listing and unlocks SVG icon uploads for the developer API.", 682 702 reportsTitle: "Open reports", 683 703 reportsBody: "User-submitted reports against profiles in Explore.", 704 704 + reviewReportsTitle: "Review reports", 705 705 + reviewReportsBody: "Reports against user reviews and ratings.", 684 706 featuredTitle: "Featured", 685 707 featuredBody: 686 708 "Curate the projects that appear in the featured rail at the top of Explore.", ··· 755 777 other: "Other", 756 778 }, 757 779 }, 780 780 + reviewReports: { 781 781 + headline: "Review reports", 782 782 + subhead: 783 783 + "Reports submitted against user reviews. Hide or remove a review to close the report, or dismiss reports that don't need action.", 784 784 + empty: "No open review reports.", 785 785 + action: "Mark actioned", 786 786 + dismiss: "Dismiss", 787 787 + hide: "Hide review", 788 788 + remove: "Remove review", 789 789 + restore: "Restore review", 790 790 + actionedLabel: "Actioned", 791 791 + dismissedLabel: "Dismissed", 792 792 + hiddenLabel: "Hidden", 793 793 + removedLabel: "Removed", 794 794 + restoredLabel: "Restored", 795 795 + notePlaceholder: "What did you do?", 796 796 + reasonLabel: "Reason", 797 797 + reporterLabel: "Reporter", 798 798 + reviewerLabel: "Reviewer", 799 799 + detailsLabel: "Details", 800 800 + reviewLabel: "Review", 801 801 + submittedAt: "Submitted", 802 802 + reasons: { 803 803 + harmful: "Harmful or hateful", 804 804 + spam: "Spam", 805 805 + off_topic: "Off-topic", 806 806 + other: "Other", 807 807 + }, 808 808 + }, 758 809 takedowns: { 759 810 headline: "Taken-down profiles", 760 811 subhead: ··· 829 880 impersonation: "Impersonating someone", 830 881 spam: "Spam", 831 882 other: "Other", 883 883 + }, 884 884 + }, 885 885 + 886 886 + reviews: { 887 887 + summary: { 888 888 + heading: "Ratings & Reviews", 889 889 + threshold: (count: number, needed: number): string => 890 890 + count === 0 891 891 + ? "Ratings appear after 5 reviews." 892 892 + : `${count} review${ 893 893 + count === 1 ? "" : "s" 894 894 + } so far. ${needed} more until the average rating appears.`, 895 895 + average: (rating: string, count: number): string => 896 896 + `${rating} average from ${count} review${count === 1 ? "" : "s"}`, 897 897 + distributionLabel: (stars: number, count: number): string => 898 898 + `${count} ${stars}-star review${count === 1 ? "" : "s"}`, 899 899 + }, 900 900 + composer: { 901 901 + heading: "Write a review", 902 902 + modalBody: "Rate this project and add a short note for other people.", 903 903 + signedOut: "Sign in to rate and review this project.", 904 904 + ownerNote: "You can't review your own project.", 905 905 + ratingLabel: "Rating", 906 906 + bodyLabel: "Review (optional)", 907 907 + bodyPlaceholder: "What should other people know?", 908 908 + charsRemaining: (n: number): string => `${n} characters remaining`, 909 909 + charsRemainingSuffix: "characters remaining", 910 910 + submit: "Post review", 911 911 + update: "Update review", 912 912 + submitting: "Saving…", 913 913 + delete: "Delete review", 914 914 + signIn: "Sign in", 915 915 + cancel: "Cancel", 916 916 + saved: "Review saved.", 917 917 + deleted: "Review deleted.", 918 918 + error: "Couldn't save the review. Please try again.", 919 919 + }, 920 920 + list: { 921 921 + heading: "Reviews", 922 922 + empty: "No reviews yet.", 923 923 + reviewerFallback: "Atmosphere user", 924 924 + edited: "edited", 925 925 + ownerResponse: "Developer response", 926 926 + }, 927 927 + report: { 928 928 + button: "Report review", 929 929 + modalTitle: "Report this review", 930 930 + modalBody: "Send a report to the Atmosphere admins.", 931 931 + reasonLabel: "What's wrong?", 932 932 + detailsLabel: "Add details (optional)", 933 933 + detailsPlaceholder: "Anything we should know?", 934 934 + submit: "Send report", 935 935 + submitting: "Sending…", 936 936 + cancel: "Cancel", 937 937 + sentTitle: "Report sent", 938 938 + sentBody: "Thanks. An admin will review it shortly.", 939 939 + signInRequired: "Sign in to report reviews.", 940 940 + error: "Couldn't send the report. Please try again.", 941 941 + reasons: { 942 942 + harmful: "Harmful or hateful content", 943 943 + spam: "Spam", 944 944 + off_topic: "Off-topic or not useful", 945 945 + other: "Other", 946 946 + }, 947 947 + }, 948 948 + response: { 949 949 + button: "Respond as developer", 950 950 + updateButton: "Edit developer response", 951 951 + deleteButton: "Delete response", 952 952 + placeholder: "Add a short developer response…", 953 953 + submit: "Save response", 954 954 + submitting: "Saving…", 955 955 + cancel: "Cancel", 956 956 + error: "Couldn't save the response", 832 957 }, 833 958 }, 834 959

+212

islands/AdminReviewReportRow.tsx

reviewed

··· 1 1 + import { useSignal } from "@preact/signals"; 2 2 + 3 3 + interface Props { 4 4 + id: number; 5 5 + reviewId: number; 6 6 + targetHandle: string; 7 7 + reviewerDid: string | null; 8 8 + reporterDid: string | null; 9 9 + rating: number | null; 10 10 + body: string | null; 11 11 + reviewStatus: string | null; 12 12 + reasonLabel: string; 13 13 + details: string | null; 14 14 + createdAt: number; 15 15 + copy: { 16 16 + action: string; 17 17 + dismiss: string; 18 18 + hide: string; 19 19 + remove: string; 20 20 + restore: string; 21 21 + actionedLabel: string; 22 22 + dismissedLabel: string; 23 23 + hiddenLabel: string; 24 24 + removedLabel: string; 25 25 + restoredLabel: string; 26 26 + notePlaceholder: string; 27 27 + reasonLabel: string; 28 28 + reporterLabel: string; 29 29 + reviewerLabel: string; 30 30 + detailsLabel: string; 31 31 + reviewLabel: string; 32 32 + submittedAt: string; 33 33 + error: string; 34 34 + }; 35 35 + } 36 36 + 37 37 + type DoneKind = "actioned" | "dismissed" | "hidden" | "removed" | "restored"; 38 38 + 39 39 + export default function AdminReviewReportRow(p: Props) { 40 40 + const notes = useSignal(""); 41 41 + const status = useSignal< 42 42 + | { kind: "open" } 43 43 + | { kind: "submitting" } 44 44 + | { kind: "done"; action: DoneKind } 45 45 + | { kind: "error"; text: string } 46 46 + >({ kind: "open" }); 47 47 + 48 48 + const resolve = async (action: "actioned" | "dismissed") => { 49 49 + status.value = { kind: "submitting" }; 50 50 + try { 51 51 + const r = await fetch(`/api/admin/review-reports/${p.id}/resolve`, { 52 52 + method: "POST", 53 53 + headers: { "content-type": "application/json" }, 54 54 + body: JSON.stringify({ 55 55 + action, 56 56 + notes: notes.value.trim() || undefined, 57 57 + }), 58 58 + }); 59 59 + if (!r.ok) throw new Error(await r.text()); 60 60 + status.value = { kind: "done", action }; 61 61 + } catch (err) { 62 62 + status.value = { 63 63 + kind: "error", 64 64 + text: err instanceof Error ? err.message : String(err), 65 65 + }; 66 66 + } 67 67 + }; 68 68 + 69 69 + const moderate = async (action: "hide" | "remove" | "restore") => { 70 70 + status.value = { kind: "submitting" }; 71 71 + try { 72 72 + const r = await fetch(`/api/admin/reviews/${p.reviewId}/${action}`, { 73 73 + method: "POST", 74 74 + headers: { "content-type": "application/json" }, 75 75 + body: JSON.stringify({ notes: notes.value.trim() || undefined }), 76 76 + }); 77 77 + if (!r.ok) throw new Error(await r.text()); 78 78 + if (action !== "restore") { 79 79 + await resolve("actioned"); 80 80 + status.value = { 81 81 + kind: "done", 82 82 + action: action === "hide" ? "hidden" : "removed", 83 83 + }; 84 84 + return; 85 85 + } 86 86 + status.value = { kind: "done", action: "restored" }; 87 87 + } catch (err) { 88 88 + status.value = { 89 89 + kind: "error", 90 90 + text: err instanceof Error ? err.message : String(err), 91 91 + }; 92 92 + } 93 93 + }; 94 94 + 95 95 + if (status.value.kind === "done") { 96 96 + const labels: Record<DoneKind, string> = { 97 97 + actioned: p.copy.actionedLabel, 98 98 + dismissed: p.copy.dismissedLabel, 99 99 + hidden: p.copy.hiddenLabel, 100 100 + removed: p.copy.removedLabel, 101 101 + restored: p.copy.restoredLabel, 102 102 + }; 103 103 + return ( 104 104 + <div class="admin-report-row admin-report-row--done"> 105 105 + <div class="admin-report-meta"> 106 106 + <span> 107 107 + <strong>@{p.targetHandle}</strong> 108 108 + </span> 109 109 + <span>{p.reasonLabel}</span> 110 110 + <span> 111 111 + <span class="admin-status-badge admin-status-badge--approved"> 112 112 + {labels[status.value.action]} 113 113 + </span> 114 114 + </span> 115 115 + </div> 116 116 + </div> 117 117 + ); 118 118 + } 119 119 + 120 120 + const submitted = new Date(p.createdAt).toISOString().slice(0, 10); 121 121 + const reviewMissing = p.rating == null || p.body == null; 122 122 + return ( 123 123 + <div class="admin-report-row"> 124 124 + <div class="admin-report-meta"> 125 125 + <span> 126 126 + <strong> 127 127 + <a href={`/explore/${p.targetHandle}`}>@{p.targetHandle}</a> 128 128 + </strong> 129 129 + </span> 130 130 + <span> 131 131 + {p.copy.reasonLabel}: <strong>{p.reasonLabel}</strong> 132 132 + </span> 133 133 + <span> 134 134 + {p.copy.reporterLabel}: <strong>{p.reporterDid ?? "Unknown"}</strong> 135 135 + </span> 136 136 + <span> 137 137 + {p.copy.reviewerLabel}: <strong>{p.reviewerDid ?? "Unknown"}</strong> 138 138 + </span> 139 139 + <span> 140 140 + {p.copy.submittedAt}: <strong>{submitted}</strong> 141 141 + </span> 142 142 + </div> 143 143 + {p.details && ( 144 144 + <p class="admin-report-details"> 145 145 + <strong>{p.copy.detailsLabel}:</strong> {p.details} 146 146 + </p> 147 147 + )} 148 148 + <p class="admin-report-details"> 149 149 + <strong>{p.copy.reviewLabel}:</strong> {reviewMissing 150 150 + ? "Review no longer exists." 151 151 + : `${"★".repeat(p.rating!)} ${p.body || "(no text)"}`} 152 152 + </p> 153 153 + <div class="admin-report-actions"> 154 154 + <input 155 155 + type="text" 156 156 + class="admin-report-notes-input" 157 157 + placeholder={p.copy.notePlaceholder} 158 158 + value={notes.value} 159 159 + onInput={(e) => 160 160 + notes.value = (e.currentTarget as HTMLInputElement).value} 161 161 + /> 162 162 + <button 163 163 + type="button" 164 164 + class="profile-form-button-primary" 165 165 + onClick={() => resolve("actioned")} 166 166 + disabled={status.value.kind === "submitting"} 167 167 + > 168 168 + {p.copy.action} 169 169 + </button> 170 170 + <button 171 171 + type="button" 172 172 + class="profile-form-button-secondary" 173 173 + onClick={() => resolve("dismissed")} 174 174 + disabled={status.value.kind === "submitting"} 175 175 + > 176 176 + {p.copy.dismiss} 177 177 + </button> 178 178 + <button 179 179 + type="button" 180 180 + class="admin-report-takedown-button" 181 181 + onClick={() => moderate("hide")} 182 182 + disabled={status.value.kind === "submitting" || reviewMissing} 183 183 + > 184 184 + {p.copy.hide} 185 185 + </button> 186 186 + <button 187 187 + type="button" 188 188 + class="admin-report-takedown-button" 189 189 + onClick={() => moderate("remove")} 190 190 + disabled={status.value.kind === "submitting" || reviewMissing} 191 191 + > 192 192 + {p.copy.remove} 193 193 + </button> 194 194 + {p.reviewStatus && p.reviewStatus !== "visible" && ( 195 195 + <button 196 196 + type="button" 197 197 + class="profile-form-button-secondary" 198 198 + onClick={() => moderate("restore")} 199 199 + disabled={status.value.kind === "submitting" || reviewMissing} 200 200 + > 201 201 + {p.copy.restore} 202 202 + </button> 203 203 + )} 204 204 + </div> 205 205 + {status.value.kind === "error" && ( 206 206 + <p class="admin-icon-row-error"> 207 207 + {p.copy.error}: {status.value.text} 208 208 + </p> 209 209 + )} 210 210 + </div> 211 211 + ); 212 212 + }

+183 -3

islands/CreateProfileForm.tsx

reviewed

··· 2 2 import { useSignal } from "@preact/signals"; 3 3 import { 4 4 APP_SUBCATEGORIES, 5 5 - CATEGORIES, 6 5 type Category, 7 6 type LinkEntry, 7 7 + PUBLIC_CATEGORIES, 8 8 } from "../lib/lexicons.ts"; 9 9 import { 10 10 type AtmosphereService, ··· 33 33 categories: string[]; 34 34 subcategories: string[]; 35 35 links: LinkEntry[]; 36 36 + screenshots: Array<{ ref: string; mime: string; size: number }>; 36 37 avatar: { ref: string; mime: string } | null; 37 38 /** Optional developer-facing SVG icon. */ 38 39 icon: ··· 81 82 ref: { $link: string }; 82 83 mimeType: string; 83 84 size: number; 85 85 + } 86 86 + 87 87 + interface ScreenshotDraft { 88 88 + id: string; 89 89 + previewUrl: string; 90 90 + blob: BlobRefShape | null; 91 91 + file: File | null; 92 92 + mimeType: string | null; 93 93 + } 94 94 + 95 95 + const SCREENSHOT_MAX_COUNT = 4; 96 96 + const SCREENSHOT_MAX_BYTES = 5_000_000; 97 97 + const SCREENSHOT_ACCEPT = ["image/png", "image/jpeg", "image/webp"]; 98 98 + 99 99 + function screenshotMimeForFile(file: File): string | null { 100 100 + if (SCREENSHOT_ACCEPT.includes(file.type)) return file.type; 101 101 + const name = file.name.toLowerCase(); 102 102 + if (name.endsWith(".png")) return "image/png"; 103 103 + if (name.endsWith(".jpg") || name.endsWith(".jpeg")) return "image/jpeg"; 104 104 + if (name.endsWith(".webp")) return "image/webp"; 105 105 + return null; 84 106 } 85 107 86 108 async function readFileAsBase64(file: File): Promise<string> { ··· 206 228 const tCustom = tForm.customLinks; 207 229 const tMainLink = tForm.mainLink; 208 230 const tAppLinks = tForm.appLinks; 231 231 + const tScreenshots = tForm.screenshots; 209 232 const tManage = t.explore.manage; 210 233 /** Live registry status. Flips on save (-> true) and delete (-> false). */ 211 234 const published = useSignal<boolean>(initialPublished); ··· 229 252 const androidLink = useSignal<string>( 230 253 initial?.androidLink ?? initialSplit.androidLink, 231 254 ); 255 255 + const initialCategories = initial?.categories?.filter((c) => 256 256 + (PUBLIC_CATEGORIES as readonly string[]).includes(c) 257 257 + ); 232 258 const categories = useSignal<string[]>( 233 233 - initial?.categories?.length ? initial.categories : ["app"], 259 259 + initialCategories?.length ? initialCategories : ["app"], 234 260 ); 235 261 const subcategories = useSignal<string[]>(initial?.subcategories ?? []); 236 262 ··· 278 304 const avatarFile = useSignal<File | null>(null); 279 305 const avatarRemoved = useSignal(false); 280 306 307 307 + const screenshots = useSignal<ScreenshotDraft[]>( 308 308 + (initial?.screenshots ?? []).slice(0, SCREENSHOT_MAX_COUNT).map((s, i) => ({ 309 309 + id: `existing-${s.ref}-${i}`, 310 310 + previewUrl: `/api/registry/screenshot/${encodeURIComponent(did)}/${i}`, 311 311 + blob: { 312 312 + $type: "blob", 313 313 + ref: { $link: s.ref }, 314 314 + mimeType: s.mime, 315 315 + size: s.size, 316 316 + }, 317 317 + file: null, 318 318 + mimeType: s.mime, 319 319 + })), 320 320 + ); 321 321 + const screenshotMessage = useSignal< 322 322 + { kind: "ok" | "error"; text: string } | null 323 323 + >(null); 324 324 + 281 325 /* ---------------- Developer icon (SVG) signals ----------------------- */ 282 326 /** 283 327 * SVG icons get a separate slot from the main avatar — the avatar is ··· 316 360 317 361 const submitting = useSignal(false); 318 362 const deleting = useSignal(false); 363 363 + const hydrated = useSignal(false); 319 364 const message = useSignal<{ kind: "ok" | "error"; text: string } | null>( 320 365 null, 321 366 ); 367 367 + 368 368 + useEffect(() => { 369 369 + hydrated.value = true; 370 370 + }, []); 322 371 323 372 useEffect(() => { 324 373 if (!initial?.avatar) return; ··· 404 453 avatarPreview.value = null; 405 454 }; 406 455 456 456 + const onScreenshotsChange = (event: Event) => { 457 457 + const input = event.currentTarget as HTMLInputElement; 458 458 + const files = Array.from(input.files ?? []); 459 459 + if (files.length === 0) return; 460 460 + const available = SCREENSHOT_MAX_COUNT - screenshots.value.length; 461 461 + if (available <= 0) { 462 462 + screenshotMessage.value = { 463 463 + kind: "error", 464 464 + text: tScreenshots.maxReached, 465 465 + }; 466 466 + input.value = ""; 467 467 + return; 468 468 + } 469 469 + const next: ScreenshotDraft[] = []; 470 470 + let skipped = 0; 471 471 + for (const file of files.slice(0, available)) { 472 472 + const mimeType = screenshotMimeForFile(file); 473 473 + if (!mimeType) { 474 474 + skipped++; 475 475 + continue; 476 476 + } 477 477 + if (file.size > SCREENSHOT_MAX_BYTES) { 478 478 + skipped++; 479 479 + continue; 480 480 + } 481 481 + next.push({ 482 482 + id: `new-${crypto.randomUUID()}`, 483 483 + previewUrl: URL.createObjectURL(file), 484 484 + blob: null, 485 485 + file, 486 486 + mimeType, 487 487 + }); 488 488 + } 489 489 + skipped += Math.max(0, files.length - available); 490 490 + if (next.length > 0) { 491 491 + screenshots.value = [...screenshots.value, ...next]; 492 492 + screenshotMessage.value = { 493 493 + kind: skipped > 0 ? "error" : "ok", 494 494 + text: skipped > 0 495 495 + ? tScreenshots.partialAdded(next.length, skipped) 496 496 + : tScreenshots.added(next.length), 497 497 + }; 498 498 + } else { 499 499 + screenshotMessage.value = { 500 500 + kind: "error", 501 501 + text: tScreenshots.noneAdded, 502 502 + }; 503 503 + } 504 504 + input.value = ""; 505 505 + }; 506 506 + 507 507 + const removeScreenshot = (id: string) => { 508 508 + screenshots.value = screenshots.value.filter((s) => s.id !== id); 509 509 + screenshotMessage.value = null; 510 510 + }; 511 511 + 407 512 const onIconChange = (event: Event) => { 408 513 const input = event.currentTarget as HTMLInputElement; 409 514 const file = input.files?.[0]; ··· 577 682 payload.icon = null; 578 683 } 579 684 685 685 + payload.screenshots = screenshots.value 686 686 + .filter((s) => s.blob) 687 687 + .map((s) => ({ image: s.blob })); 688 688 + payload.screenshotUploads = await Promise.all( 689 689 + screenshots.value 690 690 + .filter((s) => s.file) 691 691 + .map(async (s) => ({ 692 692 + dataBase64: await readFileAsBase64(s.file as File), 693 693 + mimeType: s.mimeType ?? (s.file as File).type, 694 694 + })), 695 695 + ); 696 696 + 580 697 const res = await fetch("/api/registry/profile", { 581 698 method: "PUT", 582 699 headers: { "content-type": "application/json" }, ··· 754 871 <fieldset class="profile-form-field"> 755 872 <legend class="profile-form-label">{tForm.categoryLabel}</legend> 756 873 <div class="profile-form-chips" role="group"> 757 757 - {CATEGORIES.map((c: Category) => { 874 874 + {PUBLIC_CATEGORIES.map((c: Category) => { 758 875 const selected = categories.value.includes(c); 759 876 return ( 760 877 <label ··· 849 966 </label> 850 967 </div> 851 968 969 969 + {/* ---------------- Screenshots --------------------------- */} 970 970 + <div class="profile-form-field profile-screenshots-field"> 971 971 + <div class="profile-form-section-heading"> 972 972 + <span class="profile-form-label">{tScreenshots.sectionLabel}</span> 973 973 + <span class="profile-form-count"> 974 974 + {screenshots.value.length}/{SCREENSHOT_MAX_COUNT} 975 975 + </span> 976 976 + </div> 977 977 + <p class="profile-form-hint">{tScreenshots.hint}</p> 978 978 + {screenshotMessage.value && ( 979 979 + <p 980 980 + class={`profile-screenshot-status profile-form-status profile-form-status--${screenshotMessage.value.kind}`} 981 981 + role="status" 982 982 + > 983 983 + {screenshotMessage.value.text} 984 984 + </p> 985 985 + )} 986 986 + 987 987 + {screenshots.value.length > 0 && ( 988 988 + <div class="profile-screenshot-grid"> 989 989 + {screenshots.value.map((shot, i) => ( 990 990 + <div class="profile-screenshot-edit" key={shot.id}> 991 991 + <img 992 992 + src={shot.previewUrl} 993 993 + alt="" 994 994 + class="profile-screenshot-edit-img" 995 995 + /> 996 996 + <button 997 997 + type="button" 998 998 + class="profile-screenshot-remove" 999 999 + aria-label={tScreenshots.removeAriaLabel(i + 1)} 1000 1000 + onClick={() => 1001 1001 + removeScreenshot(shot.id)} 1002 1002 + > 1003 1003 + × 1004 1004 + </button> 1005 1005 + </div> 1006 1006 + ))} 1007 1007 + </div> 1008 1008 + )} 1009 1009 + 1010 1010 + <label class="profile-form-field profile-screenshot-native-picker"> 1011 1011 + <span class="profile-form-label"> 1012 1012 + {screenshots.value.length > 0 1013 1013 + ? tScreenshots.addMore 1014 1014 + : tScreenshots.upload} 1015 1015 + </span> 1016 1016 + <input 1017 1017 + type="file" 1018 1018 + accept="image/png,image/jpeg,image/webp,.png,.jpg,.jpeg,.webp" 1019 1019 + multiple 1020 1020 + disabled={screenshots.value.length >= SCREENSHOT_MAX_COUNT} 1021 1021 + onChange={onScreenshotsChange} 1022 1022 + class="profile-form-input profile-screenshot-file-input" 1023 1023 + /> 1024 1024 + </label> 1025 1025 + </div> 1026 1026 + 852 1027 {/* ---------------- Atmosphere links ----------------------- */} 853 1028 <fieldset class="profile-form-field"> 854 1029 <legend class="profile-form-label">{tAtmos.sectionLabel}</legend> ··· 1095 1270 </span> 1096 1271 )} 1097 1272 </div> 1273 1273 + {!hydrated.value && ( 1274 1274 + <p class="profile-form-hydration-note"> 1275 1275 + Loading editor controls... 1276 1276 + </p> 1277 1277 + )} 1098 1278 1099 1279 {/* ---------------- Verification request modal ---------------- */} 1100 1280 {requestModalOpen.value && (

+211

islands/ProfileReviewComposer.tsx

reviewed

··· 1 1 + import { useSignal } from "@preact/signals"; 2 2 + import type { ReviewRow } from "../lib/reviews.ts"; 3 3 + 4 4 + interface Props { 5 5 + targetId: string; 6 6 + signedIn: boolean; 7 7 + isOwner: boolean; 8 8 + loginHref: string; 9 9 + ownReview: Pick<ReviewRow, "id" | "rating" | "body"> | null; 10 10 + copy: { 11 11 + heading: string; 12 12 + modalBody: string; 13 13 + signedOut: string; 14 14 + ownerNote: string; 15 15 + ratingLabel: string; 16 16 + bodyLabel: string; 17 17 + bodyPlaceholder: string; 18 18 + charsRemainingSuffix: string; 19 19 + submit: string; 20 20 + update: string; 21 21 + submitting: string; 22 22 + delete: string; 23 23 + signIn: string; 24 24 + cancel: string; 25 25 + saved: string; 26 26 + deleted: string; 27 27 + error: string; 28 28 + }; 29 29 + } 30 30 + 31 31 + const MAX_BODY = 300; 32 32 + 33 33 + export default function ProfileReviewComposer( 34 34 + { targetId, signedIn, isOwner, loginHref, ownReview, copy }: Props, 35 35 + ) { 36 36 + const rating = useSignal<1 | 2 | 3 | 4 | 5>(ownReview?.rating ?? 5); 37 37 + const body = useSignal(ownReview?.body ?? ""); 38 38 + const open = useSignal(false); 39 39 + const submitting = useSignal(false); 40 40 + const status = useSignal< 41 41 + | { kind: "idle" } 42 42 + | { kind: "ok"; text: string } 43 43 + | { kind: "error"; text: string } 44 44 + >({ kind: "idle" }); 45 45 + 46 46 + const submit = async () => { 47 47 + submitting.value = true; 48 48 + status.value = { kind: "idle" }; 49 49 + try { 50 50 + const r = await fetch( 51 51 + `/api/registry/profile/${encodeURIComponent(targetId)}/reviews`, 52 52 + { 53 53 + method: "POST", 54 54 + headers: { "content-type": "application/json" }, 55 55 + body: JSON.stringify({ 56 56 + rating: rating.value, 57 57 + body: body.value.trim(), 58 58 + }), 59 59 + }, 60 60 + ); 61 61 + if (!r.ok) throw new Error(await r.text()); 62 62 + status.value = { kind: "ok", text: copy.saved }; 63 63 + globalThis.location.reload(); 64 64 + } catch (err) { 65 65 + status.value = { 66 66 + kind: "error", 67 67 + text: err instanceof Error ? err.message : copy.error, 68 68 + }; 69 69 + } finally { 70 70 + submitting.value = false; 71 71 + } 72 72 + }; 73 73 + 74 74 + const remove = async () => { 75 75 + submitting.value = true; 76 76 + status.value = { kind: "idle" }; 77 77 + try { 78 78 + const r = await fetch( 79 79 + `/api/registry/profile/${encodeURIComponent(targetId)}/reviews/me`, 80 80 + { method: "DELETE" }, 81 81 + ); 82 82 + if (!r.ok) throw new Error(await r.text()); 83 83 + status.value = { kind: "ok", text: copy.deleted }; 84 84 + globalThis.location.reload(); 85 85 + } catch (err) { 86 86 + status.value = { 87 87 + kind: "error", 88 88 + text: err instanceof Error ? err.message : copy.error, 89 89 + }; 90 90 + } finally { 91 91 + submitting.value = false; 92 92 + } 93 93 + }; 94 94 + 95 95 + return ( 96 96 + <> 97 97 + <div class="profile-review-action-row"> 98 98 + {!signedIn 99 99 + ? ( 100 100 + <> 101 101 + <span class="profile-review-action-hint">{copy.signedOut}</span> 102 102 + <a class="explore-cta-primary" href={loginHref}> 103 103 + {copy.signIn} 104 104 + </a> 105 105 + </> 106 106 + ) 107 107 + : isOwner 108 108 + ? <p class="text-body profile-review-owner-note">{copy.ownerNote}</p> 109 109 + : ( 110 110 + <button 111 111 + type="button" 112 112 + class="explore-cta-primary" 113 113 + onClick={() => { 114 114 + open.value = true; 115 115 + }} 116 116 + > 117 117 + {ownReview ? copy.update : copy.heading} 118 118 + </button> 119 119 + )} 120 120 + </div> 121 121 + 122 122 + {open.value && signedIn && !isOwner && ( 123 123 + <div 124 124 + class="modal-backdrop" 125 125 + onClick={(e) => { 126 126 + if (e.target === e.currentTarget) open.value = false; 127 127 + }} 128 128 + > 129 129 + <div class="modal-card"> 130 130 + <div class="modal-header"> 131 131 + <p class="modal-title">{copy.heading}</p> 132 132 + <p class="modal-body-text">{copy.modalBody}</p> 133 133 + </div> 134 134 + <fieldset class="profile-review-rating-field"> 135 135 + <legend>{copy.ratingLabel}</legend> 136 136 + {[1, 2, 3, 4, 5].map((n) => ( 137 137 + <button 138 138 + type="button" 139 139 + class={n <= rating.value 140 140 + ? "profile-review-star is-active" 141 141 + : "profile-review-star"} 142 142 + aria-pressed={n <= rating.value} 143 143 + onClick={() => rating.value = n as 1 | 2 | 3 | 4 | 5} 144 144 + key={n} 145 145 + > 146 146 + ★ 147 147 + </button> 148 148 + ))} 149 149 + </fieldset> 150 150 + <label class="profile-review-body-field"> 151 151 + <span>{copy.bodyLabel}</span> 152 152 + <textarea 153 153 + maxLength={MAX_BODY} 154 154 + value={body.value} 155 155 + placeholder={copy.bodyPlaceholder} 156 156 + onInput={(e) => 157 157 + body.value = (e.currentTarget as HTMLTextAreaElement).value} 158 158 + /> 159 159 + </label> 160 160 + <p class="profile-review-char-count"> 161 161 + {MAX_BODY - body.value.length} {copy.charsRemainingSuffix} 162 162 + </p> 163 163 + <div class="profile-review-composer-actions"> 164 164 + <button 165 165 + type="button" 166 166 + class="profile-form-button-link" 167 167 + onClick={() => { 168 168 + open.value = false; 169 169 + }} 170 170 + disabled={submitting.value} 171 171 + > 172 172 + {copy.cancel} 173 173 + </button> 174 174 + {ownReview && ( 175 175 + <button 176 176 + type="button" 177 177 + class="profile-form-button-danger" 178 178 + onClick={remove} 179 179 + disabled={submitting.value} 180 180 + > 181 181 + {copy.delete} 182 182 + </button> 183 183 + )} 184 184 + <button 185 185 + type="button" 186 186 + class="profile-form-button-primary" 187 187 + onClick={submit} 188 188 + disabled={submitting.value} 189 189 + > 190 190 + {submitting.value 191 191 + ? copy.submitting 192 192 + : ownReview 193 193 + ? copy.update 194 194 + : copy.submit} 195 195 + </button> 196 196 + </div> 197 197 + {status.value.kind !== "idle" && ( 198 198 + <p 199 199 + class={status.value.kind === "ok" 200 200 + ? "report-modal-status report-modal-status--ok" 201 201 + : "report-modal-status report-modal-status--error"} 202 202 + > 203 203 + {status.value.text} 204 204 + </p> 205 205 + )} 206 206 + </div> 207 207 + </div> 208 208 + )} 209 209 + </> 210 210 + ); 211 211 + }

+193

islands/ReportReviewButton.tsx

reviewed

··· 1 1 + import { useSignal } from "@preact/signals"; 2 2 + 3 3 + interface Props { 4 4 + reviewId: number; 5 5 + signedIn: boolean; 6 6 + copy: { 7 7 + button: string; 8 8 + modalTitle: string; 9 9 + modalBody: string; 10 10 + reasonLabel: string; 11 11 + detailsLabel: string; 12 12 + detailsPlaceholder: string; 13 13 + submit: string; 14 14 + submitting: string; 15 15 + cancel: string; 16 16 + sentTitle: string; 17 17 + sentBody: string; 18 18 + signInRequired: string; 19 19 + error: string; 20 20 + reasons: Record<"harmful" | "spam" | "off_topic" | "other", string>; 21 21 + }; 22 22 + } 23 23 + 24 24 + const REASONS: Array<keyof Props["copy"]["reasons"]> = [ 25 25 + "harmful", 26 26 + "spam", 27 27 + "off_topic", 28 28 + "other", 29 29 + ]; 30 30 + 31 31 + export default function ReportReviewButton( 32 32 + { reviewId, signedIn, copy }: Props, 33 33 + ) { 34 34 + const open = useSignal(false); 35 35 + const reason = useSignal<keyof Props["copy"]["reasons"]>("harmful"); 36 36 + const details = useSignal(""); 37 37 + const submitting = useSignal(false); 38 38 + const status = useSignal< 39 39 + | { kind: "idle" } 40 40 + | { kind: "ok" } 41 41 + | { kind: "error"; text: string } 42 42 + >({ kind: "idle" }); 43 43 + 44 44 + const close = () => { 45 45 + open.value = false; 46 46 + reason.value = "harmful"; 47 47 + details.value = ""; 48 48 + status.value = { kind: "idle" }; 49 49 + }; 50 50 + 51 51 + const submit = async () => { 52 52 + if (!signedIn) { 53 53 + status.value = { kind: "error", text: copy.signInRequired }; 54 54 + return; 55 55 + } 56 56 + submitting.value = true; 57 57 + try { 58 58 + const r = await fetch( 59 59 + `/api/registry/reviews/${encodeURIComponent(String(reviewId))}/report`, 60 60 + { 61 61 + method: "POST", 62 62 + headers: { "content-type": "application/json" }, 63 63 + body: JSON.stringify({ 64 64 + reason: reason.value, 65 65 + details: details.value.trim() || undefined, 66 66 + }), 67 67 + }, 68 68 + ); 69 69 + if (!r.ok) throw new Error(await r.text()); 70 70 + status.value = { kind: "ok" }; 71 71 + } catch (err) { 72 72 + status.value = { 73 73 + kind: "error", 74 74 + text: err instanceof Error ? err.message : copy.error, 75 75 + }; 76 76 + } finally { 77 77 + submitting.value = false; 78 78 + } 79 79 + }; 80 80 + 81 81 + return ( 82 82 + <> 83 83 + <button 84 84 + type="button" 85 85 + class="profile-report-button profile-review-report-button" 86 86 + onClick={() => open.value = true} 87 87 + > 88 88 + {copy.button} 89 89 + </button> 90 90 + {open.value && ( 91 91 + <div 92 92 + class="modal-backdrop" 93 93 + onClick={(e) => { 94 94 + if (e.target === e.currentTarget) close(); 95 95 + }} 96 96 + > 97 97 + <div class="modal-card"> 98 98 + <div class="modal-header"> 99 99 + <p class="modal-title">{copy.modalTitle}</p> 100 100 + <p class="modal-body-text"> 101 101 + {signedIn ? copy.modalBody : copy.signInRequired} 102 102 + </p> 103 103 + </div> 104 104 + {status.value.kind === "ok" 105 105 + ? ( 106 106 + <> 107 107 + <p class="report-modal-status report-modal-status--ok"> 108 108 + <strong>{copy.sentTitle}</strong> 109 109 + </p> 110 110 + <p class="modal-body-text">{copy.sentBody}</p> 111 111 + <div 112 112 + class="report-modal-actions" 113 113 + style={{ marginTop: "1rem" }} 114 114 + > 115 115 + <button 116 116 + type="button" 117 117 + class="profile-form-button-primary" 118 118 + onClick={close} 119 119 + > 120 120 + {copy.cancel} 121 121 + </button> 122 122 + </div> 123 123 + </> 124 124 + ) 125 125 + : ( 126 126 + <> 127 127 + <fieldset class="report-modal-fieldset"> 128 128 + <legend>{copy.reasonLabel}</legend> 129 129 + {REASONS.map((r) => ( 130 130 + <label key={r} class="report-modal-radio"> 131 131 + <input 132 132 + type="radio" 133 133 + name={`review-report-reason-${reviewId}`} 134 134 + value={r} 135 135 + checked={reason.value === r} 136 136 + onChange={() => 137 137 + reason.value = r} 138 138 + /> 139 139 + {copy.reasons[r]} 140 140 + </label> 141 141 + ))} 142 142 + </fieldset> 143 143 + <label 144 144 + class="report-modal-radio" 145 145 + style={{ display: "block" }} 146 146 + > 147 147 + <span style={{ display: "block", marginBottom: "0.4rem" }}> 148 148 + {copy.detailsLabel} 149 149 + </span> 150 150 + <textarea 151 151 + class="report-modal-textarea" 152 152 + maxLength={500} 153 153 + placeholder={copy.detailsPlaceholder} 154 154 + value={details.value} 155 155 + onInput={(e) => 156 156 + details.value = 157 157 + (e.currentTarget as HTMLTextAreaElement).value} 158 158 + /> 159 159 + </label> 160 160 + {status.value.kind === "error" && ( 161 161 + <p class="report-modal-status report-modal-status--error"> 162 162 + {copy.error}: {status.value.text} 163 163 + </p> 164 164 + )} 165 165 + <div 166 166 + class="report-modal-actions" 167 167 + style={{ marginTop: "1rem" }} 168 168 + > 169 169 + <button 170 170 + type="button" 171 171 + class="profile-form-button-link" 172 172 + onClick={close} 173 173 + disabled={submitting.value} 174 174 + > 175 175 + {copy.cancel} 176 176 + </button> 177 177 + <button 178 178 + type="button" 179 179 + class="profile-form-button-primary" 180 180 + onClick={submit} 181 181 + disabled={submitting.value || !signedIn} 182 182 + > 183 183 + {submitting.value ? copy.submitting : copy.submit} 184 184 + </button> 185 185 + </div> 186 186 + </> 187 187 + )} 188 188 + </div> 189 189 + </div> 190 190 + )} 191 191 + </> 192 192 + ); 193 193 + }

+126

islands/ReviewResponseComposer.tsx

reviewed

··· 1 1 + import { useSignal } from "@preact/signals"; 2 2 + 3 3 + interface Props { 4 4 + reviewId: number; 5 5 + initialBody: string; 6 6 + copy: { 7 7 + button: string; 8 8 + updateButton: string; 9 9 + deleteButton: string; 10 10 + placeholder: string; 11 11 + submit: string; 12 12 + submitting: string; 13 13 + cancel: string; 14 14 + error: string; 15 15 + }; 16 16 + } 17 17 + 18 18 + const MAX_RESPONSE = 500; 19 19 + 20 20 + export default function ReviewResponseComposer( 21 21 + { reviewId, initialBody, copy }: Props, 22 22 + ) { 23 23 + const open = useSignal(false); 24 24 + const body = useSignal(initialBody); 25 25 + const submitting = useSignal(false); 26 26 + const error = useSignal<string | null>(null); 27 27 + 28 28 + const save = async () => { 29 29 + submitting.value = true; 30 30 + error.value = null; 31 31 + try { 32 32 + const r = await fetch( 33 33 + `/api/registry/reviews/${ 34 34 + encodeURIComponent(String(reviewId)) 35 35 + }/response`, 36 36 + { 37 37 + method: "PUT", 38 38 + headers: { "content-type": "application/json" }, 39 39 + body: JSON.stringify({ body: body.value.trim() }), 40 40 + }, 41 41 + ); 42 42 + if (!r.ok) throw new Error(await r.text()); 43 43 + globalThis.location.reload(); 44 44 + } catch (err) { 45 45 + error.value = err instanceof Error ? err.message : copy.error; 46 46 + } finally { 47 47 + submitting.value = false; 48 48 + } 49 49 + }; 50 50 + 51 51 + const remove = async () => { 52 52 + submitting.value = true; 53 53 + error.value = null; 54 54 + try { 55 55 + const r = await fetch( 56 56 + `/api/registry/reviews/${ 57 57 + encodeURIComponent(String(reviewId)) 58 58 + }/response`, 59 59 + { method: "DELETE" }, 60 60 + ); 61 61 + if (!r.ok) throw new Error(await r.text()); 62 62 + globalThis.location.reload(); 63 63 + } catch (err) { 64 64 + error.value = err instanceof Error ? err.message : copy.error; 65 65 + } finally { 66 66 + submitting.value = false; 67 67 + } 68 68 + }; 69 69 + 70 70 + if (!open.value) { 71 71 + return ( 72 72 + <button 73 73 + type="button" 74 74 + class="profile-form-button-secondary profile-review-response-toggle" 75 75 + onClick={() => open.value = true} 76 76 + > 77 77 + {initialBody ? copy.updateButton : copy.button} 78 78 + </button> 79 79 + ); 80 80 + } 81 81 + 82 82 + return ( 83 83 + <div class="profile-review-response-composer"> 84 84 + <textarea 85 85 + maxLength={MAX_RESPONSE} 86 86 + placeholder={copy.placeholder} 87 87 + value={body.value} 88 88 + onInput={(e) => 89 89 + body.value = (e.currentTarget as HTMLTextAreaElement).value} 90 90 + /> 91 91 + <div class="profile-review-composer-actions"> 92 92 + <button 93 93 + type="button" 94 94 + class="profile-form-button-link" 95 95 + onClick={() => open.value = false} 96 96 + disabled={submitting.value} 97 97 + > 98 98 + {copy.cancel} 99 99 + </button> 100 100 + {initialBody && ( 101 101 + <button 102 102 + type="button" 103 103 + class="profile-form-button-danger" 104 104 + onClick={remove} 105 105 + disabled={submitting.value} 106 106 + > 107 107 + {copy.deleteButton} 108 108 + </button> 109 109 + )} 110 110 + <button 111 111 + type="button" 112 112 + class="profile-form-button-primary" 113 113 + onClick={save} 114 114 + disabled={submitting.value || body.value.trim().length === 0} 115 115 + > 116 116 + {submitting.value ? copy.submitting : copy.submit} 117 117 + </button> 118 118 + </div> 119 119 + {error.value && ( 120 120 + <p class="report-modal-status report-modal-status--error"> 121 121 + {copy.error}: {error.value} 122 122 + </p> 123 123 + )} 124 124 + </div> 125 125 + ); 126 126 + }

+21

lexicons/com/atmosphereaccount/registry/profile.json

reviewed

··· 53 53 "maxSize": 200000, 54 54 "description": "Optional vector icon (SVG) intended for developers building badges, app showcases, sign-in flows, etc. Not displayed on the public Explore profile. Sanitised on upload (script tags, event handlers, foreignObject and javascript:/data: hrefs are stripped)." 55 55 }, 56 56 + "screenshots": { 57 57 + "type": "array", 58 58 + "maxLength": 4, 59 59 + "items": { 60 60 + "type": "ref", 61 61 + "ref": "#screenshotEntry" 62 62 + }, 63 63 + "description": "Optional screenshots for the project. Up to 4 PNG, JPEG, or WebP images." 64 64 + }, 56 65 "categories": { 57 66 "type": "array", 58 67 "minLength": 1, ··· 93 102 "format": "datetime", 94 103 "maxLength": 64 95 104 } 105 105 + } 106 106 + } 107 107 + }, 108 108 + "screenshotEntry": { 109 109 + "type": "object", 110 110 + "required": ["image"], 111 111 + "properties": { 112 112 + "image": { 113 113 + "type": "blob", 114 114 + "accept": ["image/png", "image/jpeg", "image/webp"], 115 115 + "maxSize": 5000000, 116 116 + "description": "Screenshot image. Up to 5MB." 96 117 } 97 118 } 98 119 },

+60

lib/db.ts

reviewed

··· 98 98 categories TEXT NOT NULL DEFAULT '[]', 99 99 subcategories TEXT NOT NULL DEFAULT '[]', 100 100 links TEXT NOT NULL DEFAULT '[]', 101 101 + screenshots TEXT NOT NULL DEFAULT '[]', 101 102 avatar_cid TEXT, 102 103 avatar_mime TEXT, 103 104 icon_cid TEXT, ··· 194 195 )`, 195 196 `CREATE INDEX IF NOT EXISTS report_status_target ON report(status, target_did)`, 196 197 `CREATE INDEX IF NOT EXISTS report_dedup ON report(target_did, reporter_ip_hash, reason, created_at)`, 198 198 + /** 199 199 + * Signed-in user reviews for registry profiles. Reviews are AppView-owned 200 200 + * moderation data, not ATProto records: this keeps aggregates and admin 201 201 + * actions local to the Explore surface. 202 202 + */ 203 203 + `CREATE TABLE IF NOT EXISTS review ( 204 204 + id INTEGER PRIMARY KEY AUTOINCREMENT, 205 205 + target_did TEXT NOT NULL, 206 206 + reviewer_did TEXT NOT NULL, 207 207 + rating INTEGER NOT NULL CHECK(rating >= 1 AND rating <= 5), 208 208 + body TEXT NOT NULL DEFAULT '', 209 209 + status TEXT NOT NULL DEFAULT 'visible', 210 210 + created_at INTEGER NOT NULL, 211 211 + updated_at INTEGER NOT NULL, 212 212 + hidden_at INTEGER, 213 213 + hidden_by TEXT, 214 214 + removed_at INTEGER, 215 215 + removed_by TEXT, 216 216 + admin_notes TEXT 217 217 + )`, 218 218 + `CREATE UNIQUE INDEX IF NOT EXISTS review_target_reviewer ON review(target_did, reviewer_did)`, 219 219 + `CREATE INDEX IF NOT EXISTS review_target_status_rating ON review(target_did, status, rating)`, 220 220 + `CREATE INDEX IF NOT EXISTS review_target_status_created ON review(target_did, status, created_at)`, 221 221 + /** 222 222 + * Reports against individual reviews. Kept separate from profile reports 223 223 + * because moderation targets and action surfaces differ. 224 224 + */ 225 225 + `CREATE TABLE IF NOT EXISTS review_report ( 226 226 + id INTEGER PRIMARY KEY AUTOINCREMENT, 227 227 + review_id INTEGER NOT NULL, 228 228 + reporter_did TEXT, 229 229 + reporter_ip_hash TEXT, 230 230 + reason TEXT NOT NULL, 231 231 + details TEXT, 232 232 + status TEXT NOT NULL DEFAULT 'open', 233 233 + admin_notes TEXT, 234 234 + created_at INTEGER NOT NULL, 235 235 + resolved_at INTEGER, 236 236 + resolved_by TEXT 237 237 + )`, 238 238 + `CREATE INDEX IF NOT EXISTS review_report_status_review ON review_report(status, review_id)`, 239 239 + `CREATE INDEX IF NOT EXISTS review_report_dedup ON review_report(review_id, reporter_ip_hash, reason, created_at)`, 240 240 + /** 241 241 + * Optional developer response for App Store-style owner replies. One 242 242 + * response per review; hidden/removed parent reviews are not served publicly. 243 243 + */ 244 244 + `CREATE TABLE IF NOT EXISTS review_response ( 245 245 + review_id INTEGER PRIMARY KEY, 246 246 + responder_did TEXT NOT NULL, 247 247 + body TEXT NOT NULL, 248 248 + created_at INTEGER NOT NULL, 249 249 + updated_at INTEGER NOT NULL 250 250 + )`, 197 251 ]; 198 252 199 253 /** ··· 256 310 table: "profile", 257 311 column: "links", 258 312 ddl: "ALTER TABLE profile ADD COLUMN links TEXT NOT NULL DEFAULT '[]'", 313 313 + }, 314 314 + { 315 315 + table: "profile", 316 316 + column: "screenshots", 317 317 + ddl: 318 318 + "ALTER TABLE profile ADD COLUMN screenshots TEXT NOT NULL DEFAULT '[]'", 259 319 }, 260 320 { 261 321 table: "profile",

+59 -5

lib/lexicons.ts

reviewed

··· 31 31 "developerTool", 32 32 ] as const; 33 33 export type Category = typeof CATEGORIES[number]; 34 34 + export const PUBLIC_CATEGORIES = [ 35 35 + "app", 36 36 + "accountProvider", 37 37 + ] as const satisfies readonly Category[]; 34 38 35 39 export const APP_SUBCATEGORIES = [ 36 40 "microblog", ··· 108 112 ref: { $link: string }; 109 113 mimeType: string; 110 114 size: number; 115 115 + } 116 116 + 117 117 + export interface ScreenshotEntry { 118 118 + image: BlobRef; 111 119 } 112 120 113 121 export interface ProfileRecord { ··· 130 138 * public profile. Must be `image/svg+xml`; we sanitise on upload. 131 139 */ 132 140 icon?: BlobRef; 141 141 + /** Optional detail-page screenshots. Stored as PDS blobs and lazy-loaded 142 142 + * only on the profile detail page. */ 143 143 + screenshots?: ScreenshotEntry[]; 133 144 /** All categories that apply to the project (1-4). The first item is the 134 145 * primary category used for sort/grouping in lists. */ 135 146 categories: string[]; ··· 184 195 return true; 185 196 } 186 197 198 198 + function validateScreenshots( 199 199 + input: unknown, 200 200 + ): { ok: true; value: ScreenshotEntry[] } | { ok: false; error: string } { 201 201 + if (input === undefined) return { ok: true, value: [] }; 202 202 + if (!Array.isArray(input)) { 203 203 + return { ok: false, error: "screenshots: must be an array" }; 204 204 + } 205 205 + if (input.length > 4) { 206 206 + return { ok: false, error: "screenshots: at most 4" }; 207 207 + } 208 208 + const out: ScreenshotEntry[] = []; 209 209 + const seen = new Set<string>(); 210 210 + for (const raw of input) { 211 211 + if (!raw || typeof raw !== "object") { 212 212 + return { ok: false, error: "screenshots: items must be objects" }; 213 213 + } 214 214 + const image = (raw as Record<string, unknown>).image; 215 215 + if (!isBlob(image)) { 216 216 + return { ok: false, error: "screenshots[].image: invalid blob ref" }; 217 217 + } 218 218 + if ( 219 219 + image.mimeType !== "image/png" && 220 220 + image.mimeType !== "image/jpeg" && 221 221 + image.mimeType !== "image/webp" 222 222 + ) { 223 223 + return { 224 224 + ok: false, 225 225 + error: "screenshots[].image: must be png, jpeg, or webp", 226 226 + }; 227 227 + } 228 228 + if (image.size > 5_000_000) { 229 229 + return { ok: false, error: "screenshots[].image: max 5MB" }; 230 230 + } 231 231 + if (seen.has(image.ref.$link)) continue; 232 232 + seen.add(image.ref.$link); 233 233 + out.push({ image }); 234 234 + } 235 235 + return { ok: true, value: out }; 236 236 + } 237 237 + 187 238 export interface ValidationResult<T> { 188 239 ok: boolean; 189 240 value?: T; ··· 386 437 return { ok: false, error: "icon: must be image/svg+xml" }; 387 438 } 388 439 } 440 440 + const screenshotsRes = validateScreenshots(v.screenshots); 441 441 + if (!screenshotsRes.ok) return { ok: false, error: screenshotsRes.error }; 389 442 const linksRes = normalizeLinks(v.links); 390 443 if (!linksRes.ok) return { ok: false, error: linksRes.error }; 391 444 if (v.subcategories !== undefined) { ··· 413 466 androidLink: normalizedAndroidLink, 414 467 avatar: v.avatar as BlobRef | undefined, 415 468 icon: v.icon as BlobRef | undefined, 469 469 + screenshots: screenshotsRes.value.length > 0 470 470 + ? screenshotsRes.value 471 471 + : undefined, 416 472 categories: normalizedCategories, 417 473 subcategories: v.subcategories as string[] | undefined, 418 474 links: linksRes.value.length > 0 ? linksRes.value : undefined, ··· 483 539 [PERMISSION_SET_NSID]: "fullPermissions.json", 484 540 }; 485 541 const filename = fileMap[nsid]; 486 486 - const url = new URL( 487 487 - `../lexicons/com/atmosphereaccount/registry/${filename}`, 488 488 - import.meta.url, 489 489 - ); 490 542 try { 491 491 - const text = await Deno.readTextFile(url); 543 543 + const text = await Deno.readTextFile( 544 544 + `lexicons/com/atmosphereaccount/registry/${filename}`, 545 545 + ); 492 546 return JSON.parse(text); 493 547 } catch (_) { 494 548 return null;

+9 -1

lib/public-profile.ts

reviewed

··· 10 10 * “verified” badge as Explore (`icon_access_status === 'granted'`), without 11 11 * exposing emails, timestamps, or admin DIDs. 12 12 */ 13 13 - import type { LinkEntry } from "./lexicons.ts"; 13 13 + import type { LinkEntry, ScreenshotEntry } from "./lexicons.ts"; 14 14 import type { ProfileRow } from "./registry.ts"; 15 15 16 16 export interface PublicProfileJson { ··· 24 24 categories: string[]; 25 25 subcategories: string[]; 26 26 links: LinkEntry[]; 27 27 + screenshots: ScreenshotEntry[]; 28 28 + /** Fully-qualified URLs for lazily loaded detail-page screenshots. */ 29 29 + screenshotUrls: string[]; 27 30 avatarCid: string | null; 28 31 avatarMime: string | null; 29 32 /** Fully-qualified URL for the profile avatar image proxy, or null. */ ··· 60 63 profile.iconAccessStatus === "granted" 61 64 ? `${origin}/api/registry/icon/${encodeURIComponent(profile.did)}` 62 65 : null; 66 66 + const screenshotUrls = profile.screenshots.map((_, i) => 67 67 + `${origin}/api/registry/screenshot/${encodeURIComponent(profile.did)}/${i}` 68 68 + ); 63 69 64 70 const out: PublicProfileJson = { 65 71 did: profile.did, ··· 74 80 // `website` was the former Landing Page button. The current public 75 81 // API exposes the primary web destination via `mainLink` instead. 76 82 links: profile.links.filter((entry) => entry.kind !== "website"), 83 83 + screenshots: profile.screenshots, 84 84 + screenshotUrls, 77 85 avatarCid: profile.avatarCid, 78 86 avatarMime: profile.avatarMime, 79 87 avatarUrl,

+36 -3

lib/registry.ts

reviewed

··· 4 4 */ 5 5 import type { InValue } from "@libsql/client"; 6 6 import { withDb } from "./db.ts"; 7 7 - import type { FeaturedBadge, LinkEntry } from "./lexicons.ts"; 7 7 + import type { FeaturedBadge, LinkEntry, ScreenshotEntry } from "./lexicons.ts"; 8 8 9 9 /** 10 10 * Approval state of the developer-facing SVG icon. ··· 62 62 subcategories: string[]; 63 63 /** Outbound links (atmosphere services and custom links) in author-defined order. */ 64 64 links: LinkEntry[]; 65 65 + screenshots: ScreenshotEntry[]; 65 66 avatarCid: string | null; 66 67 avatarMime: string | null; 67 68 /** Optional developer-facing SVG icon. Not rendered on public profile. ··· 109 110 categories: string; 110 111 subcategories: string; 111 112 links: string | null; 113 113 + screenshots: string | null; 112 114 avatar_cid: string | null; 113 115 avatar_mime: string | null; 114 116 icon_cid: string | null; ··· 168 170 } 169 171 } 170 172 173 173 + function safeJsonScreenshots( 174 174 + text: string | null | undefined, 175 175 + ): ScreenshotEntry[] { 176 176 + if (!text) return []; 177 177 + try { 178 178 + const v = JSON.parse(text); 179 179 + if (!Array.isArray(v)) return []; 180 180 + return v 181 181 + .filter((x): x is Record<string, unknown> => !!x && typeof x === "object") 182 182 + .map((x) => x.image) 183 183 + .filter((image): image is ScreenshotEntry["image"] => 184 184 + !!image && typeof image === "object" && 185 185 + (image as Record<string, unknown>).$type === "blob" && 186 186 + typeof ((image as Record<string, unknown>).ref as 187 187 + | Record< 188 188 + string, 189 189 + unknown 190 190 + > 191 191 + | undefined)?.$link === "string" && 192 192 + typeof (image as Record<string, unknown>).mimeType === "string" 193 193 + ) 194 194 + .map((image) => ({ image })); 195 195 + } catch { 196 196 + return []; 197 197 + } 198 198 + } 199 199 + 171 200 function normalizeIconStatus(v: string | null): IconStatus | null { 172 201 if (v === "pending" || v === "approved" || v === "rejected") return v; 173 202 return null; ··· 198 227 categories: safeJsonArray(r.categories), 199 228 subcategories: safeJsonArray(r.subcategories), 200 229 links: safeJsonLinks(r.links), 230 230 + screenshots: safeJsonScreenshots(r.screenshots), 201 231 avatarCid: r.avatar_cid, 202 232 avatarMime: r.avatar_mime, 203 233 iconCid: r.icon_cid, ··· 252 282 categories: string[]; 253 283 subcategories: string[]; 254 284 links?: LinkEntry[] | null; 285 285 + screenshots?: ScreenshotEntry[] | null; 255 286 avatarCid?: string | null; 256 287 avatarMime?: string | null; 257 288 iconCid?: string | null; ··· 295 326 sql: ` 296 327 INSERT INTO profile ( 297 328 did, handle, name, description, main_link, ios_link, android_link, 298 298 - categories, subcategories, links, 329 329 + categories, subcategories, links, screenshots, 299 330 avatar_cid, avatar_mime, icon_cid, icon_mime, icon_status, 300 331 icon_reviewed_by, icon_reviewed_at, icon_rejected_reason, 301 332 icon_access_status, icon_access_email, icon_access_requested_at, ··· 304 335 takedown_status, takedown_reason, takedown_by, takedown_at, 305 336 pds_url, record_cid, record_rev, created_at, indexed_at 306 337 ) VALUES ( 307 307 - ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 338 338 + ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 308 339 NULL, NULL, NULL, 309 340 NULL, NULL, NULL, NULL, NULL, NULL, 310 341 NULL, NULL, NULL, NULL, ··· 320 351 categories=excluded.categories, 321 352 subcategories=excluded.subcategories, 322 353 links=excluded.links, 354 354 + screenshots=excluded.screenshots, 323 355 avatar_cid=excluded.avatar_cid, 324 356 avatar_mime=excluded.avatar_mime, 325 357 icon_cid=excluded.icon_cid, ··· 397 429 JSON.stringify(cats), 398 430 JSON.stringify(input.subcategories ?? []), 399 431 JSON.stringify(input.links ?? []), 432 432 + JSON.stringify(input.screenshots ?? []), 400 433 input.avatarCid ?? null, 401 434 input.avatarMime ?? null, 402 435 input.iconCid ?? null,

+576

lib/reviews.ts

reviewed

··· 1 1 + /** 2 2 + * Signed-in reviews for registry profiles. Reviews are local AppView data: 3 3 + * they power Explore profile ratings and can be hidden/removed by admins 4 4 + * without changing a user's PDS records. 5 5 + */ 6 6 + import { withDb } from "./db.ts"; 7 7 + 8 8 + export const MAX_REVIEW_BODY_LENGTH = 300; 9 9 + export const REVIEW_AGGREGATE_MIN_COUNT = 5; 10 10 + export const MAX_REVIEW_RESPONSE_LENGTH = 500; 11 11 + 12 12 + export const REVIEW_REPORT_REASONS = [ 13 13 + "harmful", 14 14 + "spam", 15 15 + "off_topic", 16 16 + "other", 17 17 + ] as const; 18 18 + export type ReviewReportReason = typeof REVIEW_REPORT_REASONS[number]; 19 19 + 20 20 + export type ReviewStatus = "visible" | "hidden" | "removed"; 21 21 + export type ReviewReportStatus = "open" | "actioned" | "dismissed"; 22 22 + 23 23 + export interface RatingDistribution { 24 24 + 1: number; 25 25 + 2: number; 26 26 + 3: number; 27 27 + 4: number; 28 28 + 5: number; 29 29 + } 30 30 + 31 31 + export interface ReviewSummary { 32 32 + visibleCount: number; 33 33 + averageRating: number | null; 34 34 + distribution: RatingDistribution | null; 35 35 + } 36 36 + 37 37 + export interface ReviewResponseRow { 38 38 + reviewId: number; 39 39 + responderDid: string; 40 40 + body: string; 41 41 + createdAt: number; 42 42 + updatedAt: number; 43 43 + } 44 44 + 45 45 + export interface ReviewRow { 46 46 + id: number; 47 47 + targetDid: string; 48 48 + reviewerDid: string; 49 49 + rating: 1 | 2 | 3 | 4 | 5; 50 50 + body: string; 51 51 + status: ReviewStatus; 52 52 + createdAt: number; 53 53 + updatedAt: number; 54 54 + hiddenAt: number | null; 55 55 + hiddenBy: string | null; 56 56 + removedAt: number | null; 57 57 + removedBy: string | null; 58 58 + adminNotes: string | null; 59 59 + response: ReviewResponseRow | null; 60 60 + } 61 61 + 62 62 + export interface ReviewReportRow { 63 63 + id: number; 64 64 + reviewId: number; 65 65 + reporterDid: string | null; 66 66 + reason: ReviewReportReason; 67 67 + details: string | null; 68 68 + status: ReviewReportStatus; 69 69 + adminNotes: string | null; 70 70 + createdAt: number; 71 71 + resolvedAt: number | null; 72 72 + resolvedBy: string | null; 73 73 + review: ReviewRow | null; 74 74 + } 75 75 + 76 76 + interface RawReviewRow { 77 77 + id: number; 78 78 + target_did: string; 79 79 + reviewer_did: string; 80 80 + rating: number; 81 81 + body: string; 82 82 + status: string; 83 83 + created_at: number; 84 84 + updated_at: number; 85 85 + hidden_at: number | null; 86 86 + hidden_by: string | null; 87 87 + removed_at: number | null; 88 88 + removed_by: string | null; 89 89 + admin_notes: string | null; 90 90 + response_body?: string | null; 91 91 + response_responder_did?: string | null; 92 92 + response_created_at?: number | null; 93 93 + response_updated_at?: number | null; 94 94 + } 95 95 + 96 96 + interface RawReviewReportRow { 97 97 + id: number; 98 98 + review_id: number; 99 99 + reporter_did: string | null; 100 100 + reason: string; 101 101 + details: string | null; 102 102 + status: string; 103 103 + admin_notes: string | null; 104 104 + created_at: number; 105 105 + resolved_at: number | null; 106 106 + resolved_by: string | null; 107 107 + } 108 108 + 109 109 + function normalizeRating(v: number): 1 | 2 | 3 | 4 | 5 { 110 110 + if (v === 1 || v === 2 || v === 3 || v === 4 || v === 5) return v; 111 111 + return 1; 112 112 + } 113 113 + 114 114 + function normalizeReviewStatus(v: string): ReviewStatus { 115 115 + if (v === "hidden" || v === "removed") return v; 116 116 + return "visible"; 117 117 + } 118 118 + 119 119 + function normalizeReportReason(v: string): ReviewReportReason { 120 120 + return (REVIEW_REPORT_REASONS as readonly string[]).includes(v) 121 121 + ? v as ReviewReportReason 122 122 + : "other"; 123 123 + } 124 124 + 125 125 + function normalizeReportStatus(v: string): ReviewReportStatus { 126 126 + if (v === "actioned" || v === "dismissed") return v; 127 127 + return "open"; 128 128 + } 129 129 + 130 130 + function rowToReview(r: RawReviewRow): ReviewRow { 131 131 + const response = r.response_body != null && r.response_responder_did 132 132 + ? { 133 133 + reviewId: Number(r.id), 134 134 + responderDid: r.response_responder_did, 135 135 + body: r.response_body, 136 136 + createdAt: Number(r.response_created_at ?? r.updated_at), 137 137 + updatedAt: Number(r.response_updated_at ?? r.updated_at), 138 138 + } 139 139 + : null; 140 140 + return { 141 141 + id: Number(r.id), 142 142 + targetDid: r.target_did, 143 143 + reviewerDid: r.reviewer_did, 144 144 + rating: normalizeRating(Number(r.rating)), 145 145 + body: r.body ?? "", 146 146 + status: normalizeReviewStatus(r.status), 147 147 + createdAt: Number(r.created_at), 148 148 + updatedAt: Number(r.updated_at), 149 149 + hiddenAt: r.hidden_at != null ? Number(r.hidden_at) : null, 150 150 + hiddenBy: r.hidden_by, 151 151 + removedAt: r.removed_at != null ? Number(r.removed_at) : null, 152 152 + removedBy: r.removed_by, 153 153 + adminNotes: r.admin_notes, 154 154 + response, 155 155 + }; 156 156 + } 157 157 + 158 158 + function rowToReviewReport( 159 159 + report: RawReviewReportRow, 160 160 + review?: RawReviewRow | null, 161 161 + ): ReviewReportRow { 162 162 + return { 163 163 + id: Number(report.id), 164 164 + reviewId: Number(report.review_id), 165 165 + reporterDid: report.reporter_did, 166 166 + reason: normalizeReportReason(report.reason), 167 167 + details: report.details, 168 168 + status: normalizeReportStatus(report.status), 169 169 + adminNotes: report.admin_notes, 170 170 + createdAt: Number(report.created_at), 171 171 + resolvedAt: report.resolved_at != null ? Number(report.resolved_at) : null, 172 172 + resolvedBy: report.resolved_by, 173 173 + review: review ? rowToReview(review) : null, 174 174 + }; 175 175 + } 176 176 + 177 177 + export function validateReviewRating(value: unknown): 1 | 2 | 3 | 4 | 5 | null { 178 178 + return typeof value === "number" && Number.isInteger(value) && 179 179 + value >= 1 && value <= 5 180 180 + ? value as 1 | 2 | 3 | 4 | 5 181 181 + : null; 182 182 + } 183 183 + 184 184 + export function normalizeReviewBody(value: unknown): string | null { 185 185 + if (typeof value !== "string") return ""; 186 186 + const body = value.trim(); 187 187 + if (body.length > MAX_REVIEW_BODY_LENGTH) return null; 188 188 + return body; 189 189 + } 190 190 + 191 191 + export function normalizeReviewResponseBody(value: unknown): string | null { 192 192 + if (typeof value !== "string") return null; 193 193 + const body = value.trim(); 194 194 + if (!body || body.length > MAX_REVIEW_RESPONSE_LENGTH) return null; 195 195 + return body; 196 196 + } 197 197 + 198 198 + export async function createOrUpdateReview(input: { 199 199 + targetDid: string; 200 200 + reviewerDid: string; 201 201 + rating: 1 | 2 | 3 | 4 | 5; 202 202 + body: string; 203 203 + }): Promise<ReviewRow> { 204 204 + return await withDb(async (c) => { 205 205 + const now = Date.now(); 206 206 + await c.execute({ 207 207 + sql: ` 208 208 + INSERT INTO review ( 209 209 + target_did, reviewer_did, rating, body, status, created_at, updated_at 210 210 + ) VALUES (?, ?, ?, ?, 'visible', ?, ?) 211 211 + ON CONFLICT(target_did, reviewer_did) DO UPDATE SET 212 212 + rating = excluded.rating, 213 213 + body = excluded.body, 214 214 + status = 'visible', 215 215 + updated_at = excluded.updated_at, 216 216 + hidden_at = NULL, 217 217 + hidden_by = NULL, 218 218 + removed_at = NULL, 219 219 + removed_by = NULL, 220 220 + admin_notes = NULL 221 221 + `, 222 222 + args: [ 223 223 + input.targetDid, 224 224 + input.reviewerDid, 225 225 + input.rating, 226 226 + input.body, 227 227 + now, 228 228 + now, 229 229 + ], 230 230 + }); 231 231 + const review = await getOwnReview(input.targetDid, input.reviewerDid); 232 232 + if (!review) throw new Error("review_write_failed"); 233 233 + return review; 234 234 + }); 235 235 + } 236 236 + 237 237 + export async function getOwnReview( 238 238 + targetDid: string, 239 239 + reviewerDid: string, 240 240 + ): Promise<ReviewRow | null> { 241 241 + return await withDb(async (c) => { 242 242 + const r = await c.execute({ 243 243 + sql: ` 244 244 + SELECT r.*, rr.body AS response_body, 245 245 + rr.responder_did AS response_responder_did, 246 246 + rr.created_at AS response_created_at, 247 247 + rr.updated_at AS response_updated_at 248 248 + FROM review r 249 249 + LEFT JOIN review_response rr ON rr.review_id = r.id 250 250 + WHERE r.target_did = ? AND r.reviewer_did = ? 251 251 + LIMIT 1 252 252 + `, 253 253 + args: [targetDid, reviewerDid], 254 254 + }); 255 255 + const row = r.rows[0] as unknown as RawReviewRow | undefined; 256 256 + return row ? rowToReview(row) : null; 257 257 + }); 258 258 + } 259 259 + 260 260 + export async function getReviewById(id: number): Promise<ReviewRow | null> { 261 261 + return await withDb(async (c) => { 262 262 + const r = await c.execute({ 263 263 + sql: ` 264 264 + SELECT r.*, rr.body AS response_body, 265 265 + rr.responder_did AS response_responder_did, 266 266 + rr.created_at AS response_created_at, 267 267 + rr.updated_at AS response_updated_at 268 268 + FROM review r 269 269 + LEFT JOIN review_response rr ON rr.review_id = r.id 270 270 + WHERE r.id = ? 271 271 + LIMIT 1 272 272 + `, 273 273 + args: [id], 274 274 + }); 275 275 + const row = r.rows[0] as unknown as RawReviewRow | undefined; 276 276 + return row ? rowToReview(row) : null; 277 277 + }); 278 278 + } 279 279 + 280 280 + export async function deleteOwnReview( 281 281 + targetDid: string, 282 282 + reviewerDid: string, 283 283 + ): Promise<boolean> { 284 284 + return await withDb(async (c) => { 285 285 + const r = await c.execute({ 286 286 + sql: ` 287 287 + UPDATE review SET 288 288 + status = 'removed', 289 289 + updated_at = ?, 290 290 + removed_at = ?, 291 291 + removed_by = ? 292 292 + WHERE target_did = ? AND reviewer_did = ? AND status != 'removed' 293 293 + `, 294 294 + args: [Date.now(), Date.now(), reviewerDid, targetDid, reviewerDid], 295 295 + }); 296 296 + return Number(r.rowsAffected ?? 0) > 0; 297 297 + }); 298 298 + } 299 299 + 300 300 + export async function getReviewSummary( 301 301 + targetDid: string, 302 302 + ): Promise<ReviewSummary> { 303 303 + return await withDb(async (c) => { 304 304 + const r = await c.execute({ 305 305 + sql: ` 306 306 + SELECT rating, COUNT(*) AS n 307 307 + FROM review 308 308 + WHERE target_did = ? AND status = 'visible' 309 309 + GROUP BY rating 310 310 + `, 311 311 + args: [targetDid], 312 312 + }); 313 313 + const distribution: RatingDistribution = { 1: 0, 2: 0, 3: 0, 4: 0, 5: 0 }; 314 314 + let visibleCount = 0; 315 315 + let sum = 0; 316 316 + for ( 317 317 + const row of r.rows as unknown as Array<{ rating: number; n: number }> 318 318 + ) { 319 319 + const rating = normalizeRating(Number(row.rating)); 320 320 + const n = Number(row.n ?? 0); 321 321 + distribution[rating] = n; 322 322 + visibleCount += n; 323 323 + sum += rating * n; 324 324 + } 325 325 + if (visibleCount < REVIEW_AGGREGATE_MIN_COUNT) { 326 326 + return { visibleCount, averageRating: null, distribution: null }; 327 327 + } 328 328 + return { 329 329 + visibleCount, 330 330 + averageRating: Math.round((sum / visibleCount) * 10) / 10, 331 331 + distribution, 332 332 + }; 333 333 + }); 334 334 + } 335 335 + 336 336 + export async function listVisibleReviews( 337 337 + targetDid: string, 338 338 + opts: { limit?: number; cursor?: number } = {}, 339 339 + ): Promise<ReviewRow[]> { 340 340 + const limit = Math.max(1, Math.min(opts.limit ?? 20, 50)); 341 341 + return await withDb(async (c) => { 342 342 + const hasCursor = typeof opts.cursor === "number" && 343 343 + Number.isFinite(opts.cursor); 344 344 + const r = await c.execute({ 345 345 + sql: ` 346 346 + SELECT r.*, rr.body AS response_body, 347 347 + rr.responder_did AS response_responder_did, 348 348 + rr.created_at AS response_created_at, 349 349 + rr.updated_at AS response_updated_at 350 350 + FROM review r 351 351 + LEFT JOIN review_response rr ON rr.review_id = r.id 352 352 + WHERE r.target_did = ? AND r.status = 'visible' 353 353 + ${hasCursor ? "AND r.created_at < ?" : ""} 354 354 + ORDER BY r.created_at DESC 355 355 + LIMIT ? 356 356 + `, 357 357 + args: hasCursor ? [targetDid, opts.cursor!, limit] : [targetDid, limit], 358 358 + }); 359 359 + return r.rows.map((row) => rowToReview(row as unknown as RawReviewRow)); 360 360 + }); 361 361 + } 362 362 + 363 363 + export async function upsertReviewResponse(input: { 364 364 + reviewId: number; 365 365 + responderDid: string; 366 366 + body: string; 367 367 + }): Promise<void> { 368 368 + await withDb(async (c) => { 369 369 + const now = Date.now(); 370 370 + await c.execute({ 371 371 + sql: ` 372 372 + INSERT INTO review_response ( 373 373 + review_id, responder_did, body, created_at, updated_at 374 374 + ) VALUES (?, ?, ?, ?, ?) 375 375 + ON CONFLICT(review_id) DO UPDATE SET 376 376 + responder_did = excluded.responder_did, 377 377 + body = excluded.body, 378 378 + updated_at = excluded.updated_at 379 379 + `, 380 380 + args: [input.reviewId, input.responderDid, input.body, now, now], 381 381 + }); 382 382 + }); 383 383 + } 384 384 + 385 385 + export async function deleteReviewResponse( 386 386 + reviewId: number, 387 387 + responderDid: string, 388 388 + ): Promise<boolean> { 389 389 + return await withDb(async (c) => { 390 390 + const r = await c.execute({ 391 391 + sql: ` 392 392 + DELETE FROM review_response 393 393 + WHERE review_id = ? AND responder_did = ? 394 394 + `, 395 395 + args: [reviewId, responderDid], 396 396 + }); 397 397 + return Number(r.rowsAffected ?? 0) > 0; 398 398 + }); 399 399 + } 400 400 + 401 401 + const REPORT_DEDUP_WINDOW_MS = 24 * 60 * 60 * 1000; 402 402 + 403 403 + export async function createReviewReport(input: { 404 404 + reviewId: number; 405 405 + reporterDid: string | null; 406 406 + ipHash: string | null; 407 407 + reason: ReviewReportReason; 408 408 + details?: string | null; 409 409 + }): Promise<{ ok: true; id: number } | { ok: false; reason: "duplicate" }> { 410 410 + return await withDb(async (c) => { 411 411 + if (input.ipHash) { 412 412 + const dup = await c.execute({ 413 413 + sql: ` 414 414 + SELECT id FROM review_report 415 415 + WHERE review_id = ? AND reporter_ip_hash = ? AND reason = ? 416 416 + AND created_at >= ? 417 417 + LIMIT 1 418 418 + `, 419 419 + args: [ 420 420 + input.reviewId, 421 421 + input.ipHash, 422 422 + input.reason, 423 423 + Date.now() - REPORT_DEDUP_WINDOW_MS, 424 424 + ], 425 425 + }); 426 426 + if (dup.rows.length > 0) return { ok: false, reason: "duplicate" }; 427 427 + } 428 428 + const r = await c.execute({ 429 429 + sql: ` 430 430 + INSERT INTO review_report ( 431 431 + review_id, reporter_did, reporter_ip_hash, reason, details, 432 432 + status, created_at 433 433 + ) VALUES (?, ?, ?, ?, ?, 'open', ?) 434 434 + `, 435 435 + args: [ 436 436 + input.reviewId, 437 437 + input.reporterDid, 438 438 + input.ipHash, 439 439 + input.reason, 440 440 + input.details ?? null, 441 441 + Date.now(), 442 442 + ], 443 443 + }); 444 444 + return { ok: true, id: Number(r.lastInsertRowid ?? 0) }; 445 445 + }); 446 446 + } 447 447 + 448 448 + export async function listOpenReviewReports(): Promise<ReviewReportRow[]> { 449 449 + return await withDb(async (c) => { 450 450 + const r = await c.execute(` 451 451 + SELECT 452 452 + rp.id AS report_id, rp.review_id, rp.reporter_did, rp.reason, 453 453 + rp.details, rp.status AS report_status, rp.admin_notes AS report_notes, 454 454 + rp.created_at AS report_created_at, rp.resolved_at, rp.resolved_by, 455 455 + rv.id, rv.target_did, rv.reviewer_did, rv.rating, rv.body, 456 456 + rv.status, rv.created_at, rv.updated_at, rv.hidden_at, rv.hidden_by, 457 457 + rv.removed_at, rv.removed_by, rv.admin_notes 458 458 + FROM review_report rp 459 459 + LEFT JOIN review rv ON rv.id = rp.review_id 460 460 + WHERE rp.status = 'open' 461 461 + ORDER BY rp.created_at ASC 462 462 + `); 463 463 + return r.rows.map((row) => { 464 464 + const record = row as Record<string, unknown>; 465 465 + const report: RawReviewReportRow = { 466 466 + id: Number(record.report_id), 467 467 + review_id: Number(record.review_id), 468 468 + reporter_did: record.reporter_did as string | null, 469 469 + reason: String(record.reason ?? "other"), 470 470 + details: record.details as string | null, 471 471 + status: String(record.report_status ?? "open"), 472 472 + admin_notes: record.report_notes as string | null, 473 473 + created_at: Number(record.report_created_at), 474 474 + resolved_at: record.resolved_at == null 475 475 + ? null 476 476 + : Number(record.resolved_at), 477 477 + resolved_by: record.resolved_by as string | null, 478 478 + }; 479 479 + const review = record.id == null ? null : { 480 480 + id: Number(record.id), 481 481 + target_did: String(record.target_did), 482 482 + reviewer_did: String(record.reviewer_did), 483 483 + rating: Number(record.rating), 484 484 + body: String(record.body ?? ""), 485 485 + status: String(record.status ?? "visible"), 486 486 + created_at: Number(record.created_at), 487 487 + updated_at: Number(record.updated_at), 488 488 + hidden_at: record.hidden_at == null ? null : Number(record.hidden_at), 489 489 + hidden_by: record.hidden_by as string | null, 490 490 + removed_at: record.removed_at == null 491 491 + ? null 492 492 + : Number(record.removed_at), 493 493 + removed_by: record.removed_by as string | null, 494 494 + admin_notes: record.admin_notes as string | null, 495 495 + }; 496 496 + return rowToReviewReport(report, review); 497 497 + }); 498 498 + }); 499 499 + } 500 500 + 501 501 + export async function countOpenReviewReports(): Promise<number> { 502 502 + return await withDb(async (c) => { 503 503 + const r = await c.execute( 504 504 + `SELECT COUNT(*) AS n FROM review_report WHERE status = 'open'`, 505 505 + ); 506 506 + return Number((r.rows[0] as Record<string, unknown>).n ?? 0); 507 507 + }); 508 508 + } 509 509 + 510 510 + export async function resolveReviewReport( 511 511 + id: number, 512 512 + resolver: string, 513 513 + status: "actioned" | "dismissed", 514 514 + notes?: string | null, 515 515 + ): Promise<void> { 516 516 + await withDb(async (c) => { 517 517 + await c.execute({ 518 518 + sql: ` 519 519 + UPDATE review_report SET 520 520 + status = ?, 521 521 + admin_notes = ?, 522 522 + resolved_at = ?, 523 523 + resolved_by = ? 524 524 + WHERE id = ? 525 525 + `, 526 526 + args: [status, notes ?? null, Date.now(), resolver, id], 527 527 + }); 528 528 + }); 529 529 + } 530 530 + 531 531 + export async function moderateReview( 532 532 + id: number, 533 533 + moderatorDid: string, 534 534 + action: "hide" | "remove" | "restore", 535 535 + notes?: string | null, 536 536 + ): Promise<boolean> { 537 537 + return await withDb(async (c) => { 538 538 + const now = Date.now(); 539 539 + const sql = action === "restore" 540 540 + ? ` 541 541 + UPDATE review SET 542 542 + status = 'visible', 543 543 + updated_at = ?, 544 544 + hidden_at = NULL, 545 545 + hidden_by = NULL, 546 546 + removed_at = NULL, 547 547 + removed_by = NULL, 548 548 + admin_notes = ? 549 549 + WHERE id = ? 550 550 + ` 551 551 + : action === "hide" 552 552 + ? ` 553 553 + UPDATE review SET 554 554 + status = 'hidden', 555 555 + updated_at = ?, 556 556 + hidden_at = ?, 557 557 + hidden_by = ?, 558 558 + admin_notes = ? 559 559 + WHERE id = ? 560 560 + ` 561 561 + : ` 562 562 + UPDATE review SET 563 563 + status = 'removed', 564 564 + updated_at = ?, 565 565 + removed_at = ?, 566 566 + removed_by = ?, 567 567 + admin_notes = ? 568 568 + WHERE id = ? 569 569 + `; 570 570 + const args = action === "restore" 571 571 + ? [now, notes ?? null, id] 572 572 + : [now, now, moderatorDid, notes ?? null, id]; 573 573 + const r = await c.execute({ sql, args }); 574 574 + return Number(r.rowsAffected ?? 0) > 0; 575 575 + }); 576 576 + }

+25 -7

routes/admin/index.tsx

reviewed

··· 13 13 countTakenDownProfiles, 14 14 } from "../../lib/registry.ts"; 15 15 import { countOpenReports } from "../../lib/reports.ts"; 16 16 + import { countOpenReviewReports } from "../../lib/reviews.ts"; 16 17 import { buildAccountMenuProps } from "../../lib/account-menu-props.ts"; 17 18 18 19 export const handler = define.handlers({ 19 20 async GET(ctx) { 20 20 - const [iconAccessRequests, openReports, takenDown] = await Promise.all([ 21 21 - countPendingIconAccess().catch(() => 0), 22 22 - countOpenReports().catch(() => 0), 23 23 - countTakenDownProfiles().catch(() => 0), 24 24 - ]); 21 21 + const [iconAccessRequests, openReports, openReviewReports, takenDown] = 22 22 + await Promise.all([ 23 23 + countPendingIconAccess().catch(() => 0), 24 24 + countOpenReports().catch(() => 0), 25 25 + countOpenReviewReports().catch(() => 0), 26 26 + countTakenDownProfiles().catch(() => 0), 27 27 + ]); 25 28 return ctx.render( 26 29 <AdminHome 27 30 account={buildAccountMenuProps(ctx.state)} 28 31 iconAccessRequests={iconAccessRequests} 29 32 openReports={openReports} 33 33 + openReviewReports={openReviewReports} 30 34 takenDown={takenDown} 31 35 locale={ctx.state.locale} 32 36 />, ··· 38 42 account: ReturnType<typeof buildAccountMenuProps>; 39 43 iconAccessRequests: number; 40 44 openReports: number; 45 45 + openReviewReports: number; 41 46 takenDown: number; 42 47 locale: Locale; 43 48 } 44 49 45 50 function AdminHome( 46 46 - { account, iconAccessRequests, openReports, takenDown, locale }: 47 47 - AdminHomeProps, 51 51 + { 52 52 + account, 53 53 + iconAccessRequests, 54 54 + openReports, 55 55 + openReviewReports, 56 56 + takenDown, 57 57 + locale, 58 58 + }: AdminHomeProps, 48 59 ) { 49 60 const t = getMessages(locale).admin; 50 61 return ( ··· 69 80 <p class="admin-card-count">{openReports}</p> 70 81 <h2 class="admin-card-title">{t.overview.reportsTitle}</h2> 71 82 <p class="admin-card-body">{t.overview.reportsBody}</p> 83 83 + </a> 84 84 + <a href="/admin/reviews" class="admin-card"> 85 85 + <p class="admin-card-count">{openReviewReports}</p> 86 86 + <h2 class="admin-card-title"> 87 87 + {t.overview.reviewReportsTitle} 88 88 + </h2> 89 89 + <p class="admin-card-body">{t.overview.reviewReportsBody}</p> 72 90 </a> 73 91 <a href="/admin/featured" class="admin-card"> 74 92 <p class="admin-card-count">★</p>

+124

routes/admin/reviews.tsx

reviewed

··· 1 1 + /** 2 2 + * Admin: open review report inbox. 3 3 + */ 4 4 + import { define } from "../../utils.ts"; 5 5 + import Nav from "../../components/Nav.tsx"; 6 6 + import GlassClouds from "../../components/GlassClouds.tsx"; 7 7 + import Footer from "../../components/Footer.tsx"; 8 8 + import AdminReviewReportRow from "../../islands/AdminReviewReportRow.tsx"; 9 9 + import { getMessages } from "../../i18n/mod.ts"; 10 10 + import type { Locale } from "../../i18n/mod.ts"; 11 11 + import { getProfileByDid } from "../../lib/registry.ts"; 12 12 + import { 13 13 + listOpenReviewReports, 14 14 + type ReviewReportRow, 15 15 + } from "../../lib/reviews.ts"; 16 16 + import { buildAccountMenuProps } from "../../lib/account-menu-props.ts"; 17 17 + 18 18 + interface ReviewReportWithHandle extends ReviewReportRow { 19 19 + targetHandle: string; 20 20 + } 21 21 + 22 22 + export const handler = define.handlers({ 23 23 + async GET(ctx) { 24 24 + const reports = await listOpenReviewReports().catch(() => 25 25 + [] as ReviewReportRow[] 26 26 + ); 27 27 + const enriched: ReviewReportWithHandle[] = await Promise.all( 28 28 + reports.map(async (r) => { 29 29 + const p = r.review 30 30 + ? await getProfileByDid(r.review.targetDid, { 31 31 + includeTakenDown: true, 32 32 + }) 33 33 + .catch(() => null) 34 34 + : null; 35 35 + return { 36 36 + ...r, 37 37 + targetHandle: p?.handle ?? r.review?.targetDid ?? "unknown", 38 38 + }; 39 39 + }), 40 40 + ); 41 41 + return ctx.render( 42 42 + <AdminReviewReportsPage 43 43 + account={buildAccountMenuProps(ctx.state)} 44 44 + reports={enriched} 45 45 + locale={ctx.state.locale} 46 46 + />, 47 47 + ); 48 48 + }, 49 49 + }); 50 50 + 51 51 + interface PageProps { 52 52 + account: ReturnType<typeof buildAccountMenuProps>; 53 53 + reports: ReviewReportWithHandle[]; 54 54 + locale: Locale; 55 55 + } 56 56 + 57 57 + function AdminReviewReportsPage({ account, reports, locale }: PageProps) { 58 58 + const t = getMessages(locale).admin; 59 59 + return ( 60 60 + <div id="page-top"> 61 61 + <GlassClouds /> 62 62 + <div class="content-layer"> 63 63 + <Nav account={account} /> 64 64 + <section class="admin-section"> 65 65 + <div class="container" style={{ maxWidth: "920px" }}> 66 66 + <p> 67 67 + <a href="/admin" class="text-link-button"> 68 68 + ← {t.backToOverview} 69 69 + </a> 70 70 + </p> 71 71 + <header class="admin-header" style={{ marginTop: "0.75rem" }}> 72 72 + <h1 class="text-section">{t.reviewReports.headline}</h1> 73 73 + <p class="text-body mt-2">{t.reviewReports.subhead}</p> 74 74 + </header> 75 75 + 76 76 + {reports.length === 0 77 77 + ? <p class="text-body admin-empty">{t.reviewReports.empty}</p> 78 78 + : ( 79 79 + <div class="admin-report-list"> 80 80 + {reports.map((r) => ( 81 81 + <AdminReviewReportRow 82 82 + key={r.id} 83 83 + id={r.id} 84 84 + reviewId={r.reviewId} 85 85 + targetHandle={r.targetHandle} 86 86 + reviewerDid={r.review?.reviewerDid ?? null} 87 87 + reporterDid={r.reporterDid} 88 88 + rating={r.review?.rating ?? null} 89 89 + body={r.review?.body ?? null} 90 90 + reviewStatus={r.review?.status ?? null} 91 91 + reasonLabel={t.reviewReports.reasons[r.reason]} 92 92 + details={r.details} 93 93 + createdAt={r.createdAt} 94 94 + copy={{ 95 95 + action: t.reviewReports.action, 96 96 + dismiss: t.reviewReports.dismiss, 97 97 + hide: t.reviewReports.hide, 98 98 + remove: t.reviewReports.remove, 99 99 + restore: t.reviewReports.restore, 100 100 + actionedLabel: t.reviewReports.actionedLabel, 101 101 + dismissedLabel: t.reviewReports.dismissedLabel, 102 102 + hiddenLabel: t.reviewReports.hiddenLabel, 103 103 + removedLabel: t.reviewReports.removedLabel, 104 104 + restoredLabel: t.reviewReports.restoredLabel, 105 105 + notePlaceholder: t.reviewReports.notePlaceholder, 106 106 + reasonLabel: t.reviewReports.reasonLabel, 107 107 + reporterLabel: t.reviewReports.reporterLabel, 108 108 + reviewerLabel: t.reviewReports.reviewerLabel, 109 109 + detailsLabel: t.reviewReports.detailsLabel, 110 110 + reviewLabel: t.reviewReports.reviewLabel, 111 111 + submittedAt: t.reviewReports.submittedAt, 112 112 + error: t.errorPrefix, 113 113 + }} 114 114 + /> 115 115 + ))} 116 116 + </div> 117 117 + )} 118 118 + </div> 119 119 + </section> 120 120 + <Footer variant="compact" /> 121 121 + </div> 122 122 + </div> 123 123 + ); 124 124 + }

+45

routes/api/admin/review-reports/[id]/resolve.ts

reviewed

··· 1 1 + /** 2 2 + * Admin: resolve an open review report. 3 3 + * 4 4 + * POST /api/admin/review-reports/:id/resolve 5 5 + * { action: 'actioned' | 'dismissed', notes?: string } 6 6 + */ 7 7 + import { define } from "../../../../../utils.ts"; 8 8 + import { requireAdminApi } from "../../../../../lib/admin.ts"; 9 9 + import { resolveReviewReport } from "../../../../../lib/reviews.ts"; 10 10 + 11 11 + export const handler = define.handlers({ 12 12 + async POST(ctx) { 13 13 + const gate = requireAdminApi(ctx); 14 14 + if (!gate.ok) return gate.response; 15 15 + 16 16 + const id = Number(ctx.params.id); 17 17 + if (!Number.isFinite(id) || id <= 0) { 18 18 + return jsonError(400, "invalid_id"); 19 19 + } 20 20 + const body = await ctx.req.json().catch(() => null) as 21 21 + | { action?: unknown; notes?: unknown } 22 22 + | null; 23 23 + const action = body?.action; 24 24 + if (action !== "actioned" && action !== "dismissed") { 25 25 + return jsonError(400, "invalid_action"); 26 26 + } 27 27 + const notes = typeof body?.notes === "string" 28 28 + ? body.notes.trim().slice(0, 1000) || null 29 29 + : null; 30 30 + 31 31 + await resolveReviewReport(id, gate.did, action, notes); 32 32 + return jsonResponse(200, { ok: true }); 33 33 + }, 34 34 + }); 35 35 + 36 36 + function jsonResponse(status: number, body: unknown): Response { 37 37 + return new Response(JSON.stringify(body), { 38 38 + status, 39 39 + headers: { "content-type": "application/json; charset=utf-8" }, 40 40 + }); 41 41 + } 42 42 + 43 43 + function jsonError(status: number, code: string): Response { 44 44 + return jsonResponse(status, { error: code }); 45 45 + }

+43

routes/api/admin/reviews/[reviewId]/hide.ts

reviewed

··· 1 1 + /** 2 2 + * Admin: hide a review from public UI and aggregates while retaining it. 3 3 + */ 4 4 + import { define } from "../../../../../utils.ts"; 5 5 + import { requireAdminApi } from "../../../../../lib/admin.ts"; 6 6 + import { moderateReview } from "../../../../../lib/reviews.ts"; 7 7 + 8 8 + export const handler = define.handlers({ 9 9 + async POST(ctx) { 10 10 + const gate = requireAdminApi(ctx); 11 11 + if (!gate.ok) return gate.response; 12 12 + return await moderate(ctx.params.reviewId, gate.did, "hide", ctx.req); 13 13 + }, 14 14 + }); 15 15 + 16 16 + async function moderate( 17 17 + rawId: string | undefined, 18 18 + adminDid: string, 19 19 + action: "hide" | "remove" | "restore", 20 20 + req: Request, 21 21 + ): Promise<Response> { 22 22 + const id = Number(rawId); 23 23 + if (!Number.isFinite(id) || id <= 0) return jsonError(400, "invalid_id"); 24 24 + const body = await req.json().catch(() => null) as 25 25 + | { notes?: unknown } 26 26 + | null; 27 27 + const notes = typeof body?.notes === "string" 28 28 + ? body.notes.trim().slice(0, 1000) || null 29 29 + : null; 30 30 + const ok = await moderateReview(id, adminDid, action, notes); 31 31 + return ok ? jsonResponse(200, { ok: true }) : jsonError(404, "not_found"); 32 32 + } 33 33 + 34 34 + function jsonResponse(status: number, body: unknown): Response { 35 35 + return new Response(JSON.stringify(body), { 36 36 + status, 37 37 + headers: { "content-type": "application/json; charset=utf-8" }, 38 38 + }); 39 39 + } 40 40 + 41 41 + function jsonError(status: number, code: string): Response { 42 42 + return jsonResponse(status, { error: code }); 43 43 + }

+42

routes/api/admin/reviews/[reviewId]/remove.ts

reviewed

··· 1 1 + /** 2 2 + * Admin: remove a review from public UI and aggregates. 3 3 + */ 4 4 + import { define } from "../../../../../utils.ts"; 5 5 + import { requireAdminApi } from "../../../../../lib/admin.ts"; 6 6 + import { moderateReview } from "../../../../../lib/reviews.ts"; 7 7 + 8 8 + export const handler = define.handlers({ 9 9 + async POST(ctx) { 10 10 + const gate = requireAdminApi(ctx); 11 11 + if (!gate.ok) return gate.response; 12 12 + return await moderate(ctx.params.reviewId, gate.did, ctx.req); 13 13 + }, 14 14 + }); 15 15 + 16 16 + async function moderate( 17 17 + rawId: string | undefined, 18 18 + adminDid: string, 19 19 + req: Request, 20 20 + ): Promise<Response> { 21 21 + const id = Number(rawId); 22 22 + if (!Number.isFinite(id) || id <= 0) return jsonError(400, "invalid_id"); 23 23 + const body = await req.json().catch(() => null) as 24 24 + | { notes?: unknown } 25 25 + | null; 26 26 + const notes = typeof body?.notes === "string" 27 27 + ? body.notes.trim().slice(0, 1000) || null 28 28 + : null; 29 29 + const ok = await moderateReview(id, adminDid, "remove", notes); 30 30 + return ok ? jsonResponse(200, { ok: true }) : jsonError(404, "not_found"); 31 31 + } 32 32 + 33 33 + function jsonResponse(status: number, body: unknown): Response { 34 34 + return new Response(JSON.stringify(body), { 35 35 + status, 36 36 + headers: { "content-type": "application/json; charset=utf-8" }, 37 37 + }); 38 38 + } 39 39 + 40 40 + function jsonError(status: number, code: string): Response { 41 41 + return jsonResponse(status, { error: code }); 42 42 + }

+42

routes/api/admin/reviews/[reviewId]/restore.ts

reviewed

··· 1 1 + /** 2 2 + * Admin: restore a hidden or removed review. 3 3 + */ 4 4 + import { define } from "../../../../../utils.ts"; 5 5 + import { requireAdminApi } from "../../../../../lib/admin.ts"; 6 6 + import { moderateReview } from "../../../../../lib/reviews.ts"; 7 7 + 8 8 + export const handler = define.handlers({ 9 9 + async POST(ctx) { 10 10 + const gate = requireAdminApi(ctx); 11 11 + if (!gate.ok) return gate.response; 12 12 + return await moderate(ctx.params.reviewId, gate.did, ctx.req); 13 13 + }, 14 14 + }); 15 15 + 16 16 + async function moderate( 17 17 + rawId: string | undefined, 18 18 + adminDid: string, 19 19 + req: Request, 20 20 + ): Promise<Response> { 21 21 + const id = Number(rawId); 22 22 + if (!Number.isFinite(id) || id <= 0) return jsonError(400, "invalid_id"); 23 23 + const body = await req.json().catch(() => null) as 24 24 + | { notes?: unknown } 25 25 + | null; 26 26 + const notes = typeof body?.notes === "string" 27 27 + ? body.notes.trim().slice(0, 1000) || null 28 28 + : null; 29 29 + const ok = await moderateReview(id, adminDid, "restore", notes); 30 30 + return ok ? jsonResponse(200, { ok: true }) : jsonError(404, "not_found"); 31 31 + } 32 32 + 33 33 + function jsonResponse(status: number, body: unknown): Response { 34 34 + return new Response(JSON.stringify(body), { 35 35 + status, 36 36 + headers: { "content-type": "application/json; charset=utf-8" }, 37 37 + }); 38 38 + } 39 39 + 40 40 + function jsonError(status: number, code: string): Response { 41 41 + return jsonResponse(status, { error: code }); 42 42 + }

+68

routes/api/registry/profile.ts

reviewed

··· 17 17 } from "../../../lib/pds.ts"; 18 18 import { 19 19 ATMOSPHERE_LINK_KINDS, 20 20 + type BlobRef, 20 21 type LinkEntry, 21 22 type ProfileRecord, 23 23 + type ScreenshotEntry, 22 24 validateProfile, 23 25 } from "../../../lib/lexicons.ts"; 24 26 import { ··· 29 31 import { sanitizeSvgBytes } from "../../../lib/svg-sanitize.ts"; 30 32 31 33 const ICON_MAX_BYTES = 200_000; 34 34 + const SCREENSHOT_MAX_BYTES = 5_000_000; 35 35 + const SCREENSHOT_MAX_COUNT = 4; 36 36 + const SCREENSHOT_MIME_TYPES = new Set([ 37 37 + "image/png", 38 38 + "image/jpeg", 39 39 + "image/webp", 40 40 + ]); 32 41 33 42 interface LinkPayload { 34 43 kind?: string; ··· 70 79 size: number; 71 80 } | null; 72 81 iconUpload?: { dataBase64: string; mimeType: string }; 82 82 + /** Existing screenshots to keep plus new uploads to append. */ 83 83 + screenshots?: ScreenshotEntry[]; 84 84 + screenshotUploads?: { dataBase64: string; mimeType: string }[]; 73 85 } 74 86 75 87 function trimOrNull(s: unknown): string | undefined { ··· 131 143 return out; 132 144 } 133 145 146 146 + function isImageBlobRef(v: unknown): v is BlobRef { 147 147 + if (!v || typeof v !== "object") return false; 148 148 + const b = v as Record<string, unknown>; 149 149 + const ref = b.ref as Record<string, unknown> | undefined; 150 150 + return b.$type === "blob" && 151 151 + !!ref && 152 152 + typeof ref.$link === "string" && 153 153 + typeof b.mimeType === "string" && 154 154 + SCREENSHOT_MIME_TYPES.has(b.mimeType) && 155 155 + typeof b.size === "number" && 156 156 + b.size <= SCREENSHOT_MAX_BYTES; 157 157 + } 158 158 + 134 159 export const handler = define.handlers({ 135 160 async PUT(ctx) { 136 161 const user = ctx.state.user; ··· 249 274 } 250 275 } 251 276 277 277 + const screenshots: ScreenshotEntry[] = []; 278 278 + if (Array.isArray(body.screenshots)) { 279 279 + for (const entry of body.screenshots) { 280 280 + if (screenshots.length >= SCREENSHOT_MAX_COUNT) break; 281 281 + if (entry && isImageBlobRef(entry.image)) { 282 282 + screenshots.push({ image: entry.image }); 283 283 + } 284 284 + } 285 285 + } 286 286 + const uploads = Array.isArray(body.screenshotUploads) 287 287 + ? body.screenshotUploads 288 288 + : []; 289 289 + if (screenshots.length + uploads.length > SCREENSHOT_MAX_COUNT) { 290 290 + return new Response(`screenshots: at most ${SCREENSHOT_MAX_COUNT}`, { 291 291 + status: 400, 292 292 + }); 293 293 + } 294 294 + for (const upload of uploads) { 295 295 + if (!SCREENSHOT_MIME_TYPES.has(upload.mimeType)) { 296 296 + return new Response("screenshots must be png, jpeg, or webp", { 297 297 + status: 400, 298 298 + }); 299 299 + } 300 300 + const bytes = decodeBase64(upload.dataBase64); 301 301 + if (bytes.byteLength > SCREENSHOT_MAX_BYTES) { 302 302 + return new Response("screenshot exceeds 5MB", { status: 400 }); 303 303 + } 304 304 + try { 305 305 + const image = await uploadBlob( 306 306 + user.did, 307 307 + session.pdsUrl, 308 308 + bytes, 309 309 + upload.mimeType, 310 310 + ); 311 311 + screenshots.push({ image }); 312 312 + } catch (err) { 313 313 + const m = err instanceof Error ? err.message : String(err); 314 314 + return new Response(`screenshot upload failed: ${m}`, { status: 502 }); 315 315 + } 316 316 + } 317 317 + 252 318 // Dedupe categories defensively. The lexicon validator below also 253 319 // does this, but normalising here means we surface a clean 400 ("at 254 320 // least one category") instead of a validator error string. ··· 291 357 links: links.length > 0 ? links : undefined, 292 358 avatar: avatar ?? undefined, 293 359 icon: icon ?? undefined, 360 360 + screenshots: screenshots.length > 0 ? screenshots : undefined, 294 361 createdAt: new Date().toISOString(), 295 362 }; 296 363 ··· 331 398 categories: validation.value.categories, 332 399 subcategories: validation.value.subcategories ?? [], 333 400 links: validation.value.links ?? [], 401 401 + screenshots: validation.value.screenshots ?? [], 334 402 avatarCid: validation.value.avatar?.ref.$link ?? null, 335 403 avatarMime: validation.value.avatar?.mimeType ?? null, 336 404 iconCid: validation.value.icon?.ref.$link ?? null,

+110

routes/api/registry/profile/[id]/reviews.ts

reviewed

··· 1 1 + /** 2 2 + * Public list + signed-in create/update for reviews on a registry profile. 3 3 + * 4 4 + * GET /api/registry/profile/:id/reviews 5 5 + * POST /api/registry/profile/:id/reviews { rating, body? } 6 6 + */ 7 7 + import { define } from "../../../../../utils.ts"; 8 8 + import { withRateLimit } from "../../../../../lib/rate-limit.ts"; 9 9 + import { 10 10 + getProfileByDid, 11 11 + getProfileByHandle, 12 12 + } from "../../../../../lib/registry.ts"; 13 13 + import { 14 14 + createOrUpdateReview, 15 15 + getOwnReview, 16 16 + getReviewSummary, 17 17 + listVisibleReviews, 18 18 + normalizeReviewBody, 19 19 + validateReviewRating, 20 20 + } from "../../../../../lib/reviews.ts"; 21 21 + 22 22 + interface ReviewPayload { 23 23 + rating?: unknown; 24 24 + body?: unknown; 25 25 + } 26 26 + 27 27 + export const handler = define.handlers({ 28 28 + GET: withRateLimit(async (ctx) => { 29 29 + const target = await resolveTarget(ctx.params.id); 30 30 + if (!target) return jsonError(404, "not_found"); 31 31 + 32 32 + const url = new URL(ctx.req.url); 33 33 + const cursorRaw = url.searchParams.get("cursor"); 34 34 + const cursor = cursorRaw ? Number(cursorRaw) : undefined; 35 35 + const limitRaw = url.searchParams.get("limit"); 36 36 + const limit = limitRaw ? Number(limitRaw) : undefined; 37 37 + const [summary, reviews, ownReview] = await Promise.all([ 38 38 + getReviewSummary(target.did), 39 39 + listVisibleReviews(target.did, { cursor, limit }), 40 40 + ctx.state.user 41 41 + ? getOwnReview(target.did, ctx.state.user.did).catch(() => null) 42 42 + : Promise.resolve(null), 43 43 + ]); 44 44 + 45 45 + return jsonResponse(200, { 46 46 + summary, 47 47 + reviews, 48 48 + ownReview: ownReview?.status === "visible" ? ownReview : null, 49 49 + }, { 50 50 + "cache-control": ctx.state.user 51 51 + ? "private, max-age=0" 52 52 + : "public, max-age=30, s-maxage=120", 53 53 + }); 54 54 + }), 55 55 + 56 56 + POST: withRateLimit(async (ctx) => { 57 57 + const user = ctx.state.user; 58 58 + if (!user) return jsonError(401, "not_authenticated"); 59 59 + 60 60 + const target = await resolveTarget(ctx.params.id); 61 61 + if (!target) return jsonError(404, "not_found"); 62 62 + if (target.did === user.did) return jsonError(400, "cannot_review_self"); 63 63 + 64 64 + const body = await ctx.req.json().catch(() => null) as 65 65 + | ReviewPayload 66 66 + | null; 67 67 + if (!body) return jsonError(400, "invalid_body"); 68 68 + 69 69 + const rating = validateReviewRating(body.rating); 70 70 + if (!rating) return jsonError(400, "invalid_rating"); 71 71 + 72 72 + const reviewBody = normalizeReviewBody(body.body); 73 73 + if (reviewBody == null) return jsonError(400, "body_too_long"); 74 74 + 75 75 + const review = await createOrUpdateReview({ 76 76 + targetDid: target.did, 77 77 + reviewerDid: user.did, 78 78 + rating, 79 79 + body: reviewBody, 80 80 + }); 81 81 + const summary = await getReviewSummary(target.did); 82 82 + return jsonResponse(200, { ok: true, review, summary }); 83 83 + }), 84 84 + }); 85 85 + 86 86 + async function resolveTarget(id: string | undefined) { 87 87 + const raw = decodeURIComponent(id ?? "").trim(); 88 88 + if (!raw) return null; 89 89 + return raw.startsWith("did:") 90 90 + ? await getProfileByDid(raw).catch(() => null) 91 91 + : await getProfileByHandle(raw.toLowerCase()).catch(() => null); 92 92 + } 93 93 + 94 94 + function jsonResponse( 95 95 + status: number, 96 96 + body: unknown, 97 97 + headers: Record<string, string> = {}, 98 98 + ): Response { 99 99 + return new Response(JSON.stringify(body), { 100 100 + status, 101 101 + headers: { 102 102 + "content-type": "application/json; charset=utf-8", 103 103 + ...headers, 104 104 + }, 105 105 + }); 106 106 + } 107 107 + 108 108 + function jsonError(status: number, code: string): Response { 109 109 + return jsonResponse(status, { error: code }); 110 110 + }

+48

routes/api/registry/profile/[id]/reviews/me.ts

reviewed

··· 1 1 + /** 2 2 + * Signed-in caller actions for their own review on a profile. 3 3 + * 4 4 + * DELETE /api/registry/profile/:id/reviews/me 5 5 + */ 6 6 + import { define } from "../../../../../../utils.ts"; 7 7 + import { withRateLimit } from "../../../../../../lib/rate-limit.ts"; 8 8 + import { 9 9 + getProfileByDid, 10 10 + getProfileByHandle, 11 11 + } from "../../../../../../lib/registry.ts"; 12 12 + import { 13 13 + deleteOwnReview, 14 14 + getReviewSummary, 15 15 + } from "../../../../../../lib/reviews.ts"; 16 16 + 17 17 + export const handler = define.handlers({ 18 18 + DELETE: withRateLimit(async (ctx) => { 19 19 + const user = ctx.state.user; 20 20 + if (!user) return jsonError(401, "not_authenticated"); 21 21 + 22 22 + const target = await resolveTarget(ctx.params.id); 23 23 + if (!target) return jsonError(404, "not_found"); 24 24 + 25 25 + const removed = await deleteOwnReview(target.did, user.did); 26 26 + const summary = await getReviewSummary(target.did); 27 27 + return jsonResponse(200, { ok: true, removed, summary }); 28 28 + }), 29 29 + }); 30 30 + 31 31 + async function resolveTarget(id: string | undefined) { 32 32 + const raw = decodeURIComponent(id ?? "").trim(); 33 33 + if (!raw) return null; 34 34 + return raw.startsWith("did:") 35 35 + ? await getProfileByDid(raw).catch(() => null) 36 36 + : await getProfileByHandle(raw.toLowerCase()).catch(() => null); 37 37 + } 38 38 + 39 39 + function jsonResponse(status: number, body: unknown): Response { 40 40 + return new Response(JSON.stringify(body), { 41 41 + status, 42 42 + headers: { "content-type": "application/json; charset=utf-8" }, 43 43 + }); 44 44 + } 45 45 + 46 46 + function jsonError(status: number, code: string): Response { 47 47 + return jsonResponse(status, { error: code }); 48 48 + }

+73

routes/api/registry/reviews/[reviewId]/report.ts

reviewed

··· 1 1 + /** 2 2 + * Signed-in report submission for an individual review. 3 3 + * 4 4 + * POST /api/registry/reviews/:reviewId/report { reason, details? } 5 5 + */ 6 6 + import { define } from "../../../../../utils.ts"; 7 7 + import { withRateLimit } from "../../../../../lib/rate-limit.ts"; 8 8 + import { callerIp, hashIp } from "../../../../../lib/reports.ts"; 9 9 + import { 10 10 + createReviewReport, 11 11 + getReviewById, 12 12 + REVIEW_REPORT_REASONS, 13 13 + type ReviewReportReason, 14 14 + } from "../../../../../lib/reviews.ts"; 15 15 + 16 16 + interface ReportPayload { 17 17 + reason?: unknown; 18 18 + details?: unknown; 19 19 + } 20 20 + 21 21 + const MAX_DETAILS_LEN = 500; 22 22 + 23 23 + export const handler = define.handlers({ 24 24 + POST: withRateLimit(async (ctx) => { 25 25 + const user = ctx.state.user; 26 26 + if (!user) return jsonError(401, "not_authenticated"); 27 27 + 28 28 + const reviewId = Number(ctx.params.reviewId); 29 29 + if (!Number.isFinite(reviewId) || reviewId <= 0) { 30 30 + return jsonError(400, "invalid_review_id"); 31 31 + } 32 32 + const review = await getReviewById(reviewId); 33 33 + if (!review || review.status !== "visible") { 34 34 + return jsonError(404, "not_found"); 35 35 + } 36 36 + 37 37 + const body = await ctx.req.json().catch(() => null) as 38 38 + | ReportPayload 39 39 + | null; 40 40 + if (!body) return jsonError(400, "invalid_body"); 41 41 + 42 42 + const reason = typeof body.reason === "string" ? body.reason : ""; 43 43 + if (!(REVIEW_REPORT_REASONS as readonly string[]).includes(reason)) { 44 44 + return jsonError(400, "invalid_reason"); 45 45 + } 46 46 + const details = typeof body.details === "string" 47 47 + ? body.details.trim().slice(0, MAX_DETAILS_LEN) || null 48 48 + : null; 49 49 + 50 50 + const ip = callerIp(ctx.req); 51 51 + const ipHash = ip === "anonymous" ? null : await hashIp(ip); 52 52 + const result = await createReviewReport({ 53 53 + reviewId, 54 54 + reporterDid: user.did, 55 55 + ipHash, 56 56 + reason: reason as ReviewReportReason, 57 57 + details, 58 58 + }); 59 59 + 60 60 + return jsonResponse(200, { ok: true, deduped: result.ok === false }); 61 61 + }), 62 62 + }); 63 63 + 64 64 + function jsonResponse(status: number, body: unknown): Response { 65 65 + return new Response(JSON.stringify(body), { 66 66 + status, 67 67 + headers: { "content-type": "application/json; charset=utf-8" }, 68 68 + }); 69 69 + } 70 70 + 71 71 + function jsonError(status: number, code: string): Response { 72 72 + return jsonResponse(status, { error: code }); 73 73 + }

+87

routes/api/registry/reviews/[reviewId]/response.ts

reviewed

··· 1 1 + /** 2 2 + * Profile-owner response to a review. 3 3 + * 4 4 + * PUT /api/registry/reviews/:reviewId/response { body } 5 5 + * DELETE /api/registry/reviews/:reviewId/response 6 6 + */ 7 7 + import { define } from "../../../../../utils.ts"; 8 8 + import { withRateLimit } from "../../../../../lib/rate-limit.ts"; 9 9 + import { getProfileByDid } from "../../../../../lib/registry.ts"; 10 10 + import { 11 11 + deleteReviewResponse, 12 12 + getReviewById, 13 13 + normalizeReviewResponseBody, 14 14 + upsertReviewResponse, 15 15 + } from "../../../../../lib/reviews.ts"; 16 16 + 17 17 + interface ResponsePayload { 18 18 + body?: unknown; 19 19 + } 20 20 + 21 21 + export const handler = define.handlers({ 22 22 + PUT: withRateLimit(async (ctx) => { 23 23 + const gate = await ownerGate(ctx.params.reviewId, ctx.state.user?.did); 24 24 + if (!gate.ok) return gate.response; 25 25 + 26 26 + const body = await ctx.req.json().catch(() => null) as 27 27 + | ResponsePayload 28 28 + | null; 29 29 + const responseBody = normalizeReviewResponseBody(body?.body); 30 30 + if (!responseBody) return jsonError(400, "invalid_body"); 31 31 + 32 32 + await upsertReviewResponse({ 33 33 + reviewId: gate.review.id, 34 34 + responderDid: gate.did, 35 35 + body: responseBody, 36 36 + }); 37 37 + const review = await getReviewById(gate.review.id); 38 38 + return jsonResponse(200, { ok: true, review }); 39 39 + }), 40 40 + 41 41 + DELETE: withRateLimit(async (ctx) => { 42 42 + const gate = await ownerGate(ctx.params.reviewId, ctx.state.user?.did); 43 43 + if (!gate.ok) return gate.response; 44 44 + 45 45 + const deleted = await deleteReviewResponse(gate.review.id, gate.did); 46 46 + const review = await getReviewById(gate.review.id); 47 47 + return jsonResponse(200, { ok: true, deleted, review }); 48 48 + }), 49 49 + }); 50 50 + 51 51 + async function ownerGate( 52 52 + rawReviewId: string | undefined, 53 53 + did: string | undefined, 54 54 + ): Promise< 55 55 + | { 56 56 + ok: true; 57 57 + did: string; 58 58 + review: NonNullable<Awaited<ReturnType<typeof getReviewById>>>; 59 59 + } 60 60 + | { ok: false; response: Response } 61 61 + > { 62 62 + if (!did) return { ok: false, response: jsonError(401, "not_authenticated") }; 63 63 + const reviewId = Number(rawReviewId); 64 64 + if (!Number.isFinite(reviewId) || reviewId <= 0) { 65 65 + return { ok: false, response: jsonError(400, "invalid_review_id") }; 66 66 + } 67 67 + const review = await getReviewById(reviewId); 68 68 + if (!review || review.status !== "visible") { 69 69 + return { ok: false, response: jsonError(404, "not_found") }; 70 70 + } 71 71 + const profile = await getProfileByDid(review.targetDid).catch(() => null); 72 72 + if (!profile || profile.did !== did) { 73 73 + return { ok: false, response: jsonError(403, "forbidden") }; 74 74 + } 75 75 + return { ok: true, did, review }; 76 76 + } 77 77 + 78 78 + function jsonResponse(status: number, body: unknown): Response { 79 79 + return new Response(JSON.stringify(body), { 80 80 + status, 81 81 + headers: { "content-type": "application/json; charset=utf-8" }, 82 82 + }); 83 83 + } 84 84 + 85 85 + function jsonError(status: number, code: string): Response { 86 86 + return jsonResponse(status, { error: code }); 87 87 + }

+47

routes/api/registry/screenshot/[did]/[index].ts

reviewed

··· 1 1 + /** 2 2 + * Proxy + cache a profile screenshot blob. Screenshots are only rendered on 3 3 + * profile detail pages and are lazy-loaded by the browser, so list pages never 4 4 + * pull these image bytes. 5 5 + */ 6 6 + import { define } from "../../../../../utils.ts"; 7 7 + import { getProfileByDid } from "../../../../../lib/registry.ts"; 8 8 + import { fetchBlobPublic } from "../../../../../lib/pds.ts"; 9 9 + import { withRateLimit } from "../../../../../lib/rate-limit.ts"; 10 10 + 11 11 + export const handler = define.handlers({ 12 12 + GET: withRateLimit(async (ctx) => { 13 13 + const did = decodeURIComponent(ctx.params.did); 14 14 + const index = Number(ctx.params.index); 15 15 + if (!Number.isInteger(index) || index < 0 || index >= 4) { 16 16 + return new Response("not found", { status: 404 }); 17 17 + } 18 18 + const profile = await getProfileByDid(did).catch(() => null); 19 19 + const screenshot = profile?.screenshots[index]; 20 20 + if (!profile || !screenshot) { 21 21 + return new Response("not found", { status: 404 }); 22 22 + } 23 23 + try { 24 24 + const cid = screenshot.image.ref.$link; 25 25 + const upstream = await fetchBlobPublic(profile.pdsUrl, did, cid); 26 26 + if (!upstream.ok) { 27 27 + return new Response("not found", { status: 404 }); 28 28 + } 29 29 + const headers = new Headers(); 30 30 + headers.set( 31 31 + "content-type", 32 32 + upstream.headers.get("content-type") ?? 33 33 + screenshot.image.mimeType ?? 34 34 + "application/octet-stream", 35 35 + ); 36 36 + headers.set( 37 37 + "cache-control", 38 38 + "public, max-age=3600, s-maxage=86400, stale-while-revalidate=86400", 39 39 + ); 40 40 + headers.set("etag", cid); 41 41 + return new Response(upstream.body, { status: 200, headers }); 42 42 + } catch (err) { 43 43 + console.warn("screenshot proxy error:", err); 44 44 + return new Response("upstream error", { status: 502 }); 45 45 + } 46 46 + }), 47 47 + });

+5 -5

routes/explore.tsx

reviewed

··· 13 13 type ProfileRow, 14 14 searchProfiles, 15 15 } from "../lib/registry.ts"; 16 16 - import { CATEGORIES } from "../lib/lexicons.ts"; 16 16 + import { PUBLIC_CATEGORIES } from "../lib/lexicons.ts"; 17 17 import { buildAccountMenuProps } from "../lib/account-menu-props.ts"; 18 18 19 19 interface ExploreData { ··· 33 33 async GET(ctx) { 34 34 const url = ctx.url; 35 35 const rawCategory = url.searchParams.get("category"); 36 36 - const category = 37 37 - rawCategory && (CATEGORIES as readonly string[]).includes(rawCategory) 38 38 - ? rawCategory 39 39 - : null; 36 36 + const category = rawCategory && 37 37 + (PUBLIC_CATEGORIES as readonly string[]).includes(rawCategory) 38 38 + ? rawCategory 39 39 + : null; 40 40 const subcategory = url.searchParams.get("subcategory"); 41 41 const query = url.searchParams.get("q")?.trim() ?? ""; 42 42 const page = Math.max(1, Number(url.searchParams.get("page") ?? "1") || 1);

+117 -2

routes/explore/[handle].tsx

reviewed

··· 4 4 import Footer from "../../components/Footer.tsx"; 5 5 import ProfileHero from "../../components/explore/ProfileHero.tsx"; 6 6 import ProfileLinks from "../../components/explore/ProfileLinks.tsx"; 7 7 + import ProfileScreenshots from "../../components/explore/ProfileScreenshots.tsx"; 8 8 + import ProfileRatingSummary from "../../components/explore/ProfileRatingSummary.tsx"; 9 9 + import ProfileReviewList, { 10 10 + type DisplayReview, 11 11 + } from "../../components/explore/ProfileReviewList.tsx"; 12 12 + import ProfileReviewComposer from "../../islands/ProfileReviewComposer.tsx"; 7 13 import ReportProfileButton from "../../islands/ReportProfileButton.tsx"; 8 14 import { getMessages } from "../../i18n/mod.ts"; 9 15 import type { Locale } from "../../i18n/mod.ts"; ··· 12 18 getProfileByHandle, 13 19 type ProfileRow, 14 20 } from "../../lib/registry.ts"; 21 21 + import { 22 22 + getOwnReview, 23 23 + getReviewSummary, 24 24 + listVisibleReviews, 25 25 + type ReviewRow, 26 26 + type ReviewSummary, 27 27 + } from "../../lib/reviews.ts"; 15 28 import { accountProviderName } from "../../lib/account-providers.ts"; 16 29 import { buildAccountMenuProps } from "../../lib/account-menu-props.ts"; 17 30 ··· 29 42 null, 30 43 ), 31 44 ]); 45 45 + const [reviewSummary, reviews, ownReview] = profile 46 46 + ? await Promise.all([ 47 47 + getReviewSummary(profile.did).catch(() => emptyReviewSummary()), 48 48 + listVisibleReviews(profile.did, { limit: 20 }).catch(() => []), 49 49 + user ? getOwnReview(profile.did, user.did).catch(() => null) : null, 50 50 + ]) 51 51 + : [emptyReviewSummary(), [] as ReviewRow[], null]; 52 52 + const displayReviews = profile ? await enrichReviews(reviews) : []; 32 53 return ctx.render( 33 54 <ProfileDetailPage 34 55 profile={profile} 56 56 + reviewSummary={reviewSummary} 57 57 + reviews={displayReviews} 58 58 + ownReview={ownReview?.status === "visible" ? ownReview : null} 35 59 signedInUser={user ? { did: user.did, handle: user.handle } : null} 36 60 account={buildAccountMenuProps(ctx.state, ownerProfile?.handle ?? null)} 37 61 ownerHandle={ownerProfile?.handle ?? null} ··· 44 68 45 69 interface DetailProps { 46 70 profile: ProfileRow | null; 71 71 + reviewSummary: ReviewSummary; 72 72 + reviews: DisplayReview[]; 73 73 + ownReview: ReviewRow | null; 47 74 signedInUser: { did: string; handle: string } | null; 48 75 account: ReturnType<typeof buildAccountMenuProps>; 49 76 ownerHandle: string | null; ··· 51 78 } 52 79 53 80 function ProfileDetailPage( 54 54 - { profile, signedInUser, account, ownerHandle: _ownerHandle, locale }: 55 55 - DetailProps, 81 81 + { 82 82 + profile, 83 83 + reviewSummary, 84 84 + reviews, 85 85 + ownReview, 86 86 + signedInUser, 87 87 + account, 88 88 + ownerHandle: _ownerHandle, 89 89 + locale, 90 90 + }: DetailProps, 56 91 ) { 57 92 const messages = getMessages(locale); 58 93 const t = messages.explore; ··· 87 122 <ProfileHero profile={profile} /> 88 123 </div> 89 124 <ProfileLinks profile={profile} /> 125 125 + <ProfileScreenshots profile={profile} /> 126 126 + 127 127 + <div class="profile-reviews-shell"> 128 128 + <ProfileRatingSummary 129 129 + summary={reviewSummary} 130 130 + copy={{ 131 131 + heading: messages.reviews.summary.heading, 132 132 + threshold: messages.reviews.summary.threshold, 133 133 + average: messages.reviews.summary.average, 134 134 + distributionLabel: messages.reviews.summary.distributionLabel, 135 135 + }} 136 136 + /> 137 137 + <ProfileReviewList 138 138 + reviews={reviews} 139 139 + signedIn={!!signedInUser} 140 140 + isOwner={isOwner} 141 141 + action={ 142 142 + <ProfileReviewComposer 143 143 + targetId={profile.handle} 144 144 + signedIn={!!signedInUser} 145 145 + isOwner={isOwner} 146 146 + loginHref={`/oauth/login?next=${ 147 147 + encodeURIComponent(`/explore/${profile.handle}`) 148 148 + }`} 149 149 + ownReview={ownReview 150 150 + ? { 151 151 + id: ownReview.id, 152 152 + rating: ownReview.rating, 153 153 + body: ownReview.body, 154 154 + } 155 155 + : null} 156 156 + copy={{ 157 157 + heading: messages.reviews.composer.heading, 158 158 + modalBody: messages.reviews.composer.modalBody, 159 159 + signedOut: messages.reviews.composer.signedOut, 160 160 + ownerNote: messages.reviews.composer.ownerNote, 161 161 + ratingLabel: messages.reviews.composer.ratingLabel, 162 162 + bodyLabel: messages.reviews.composer.bodyLabel, 163 163 + bodyPlaceholder: 164 164 + messages.reviews.composer.bodyPlaceholder, 165 165 + charsRemainingSuffix: 166 166 + messages.reviews.composer.charsRemainingSuffix, 167 167 + submit: messages.reviews.composer.submit, 168 168 + update: messages.reviews.composer.update, 169 169 + submitting: messages.reviews.composer.submitting, 170 170 + delete: messages.reviews.composer.delete, 171 171 + signIn: messages.reviews.composer.signIn, 172 172 + cancel: messages.reviews.composer.cancel, 173 173 + saved: messages.reviews.composer.saved, 174 174 + deleted: messages.reviews.composer.deleted, 175 175 + error: messages.reviews.composer.error, 176 176 + }} 177 177 + /> 178 178 + } 179 179 + copy={{ 180 180 + heading: messages.reviews.list.heading, 181 181 + empty: messages.reviews.list.empty, 182 182 + reviewerFallback: messages.reviews.list.reviewerFallback, 183 183 + edited: messages.reviews.list.edited, 184 184 + ownerResponse: messages.reviews.list.ownerResponse, 185 185 + report: messages.reviews.report, 186 186 + response: messages.reviews.response, 187 187 + }} 188 188 + /> 189 189 + </div> 90 190 91 191 {isOwner && ( 92 192 <p style={{ marginTop: "1.5rem" }}> ··· 132 232 <Footer variant="compact" /> 133 233 </div> 134 234 </div> 235 235 + ); 236 236 + } 237 237 + 238 238 + function emptyReviewSummary(): ReviewSummary { 239 239 + return { visibleCount: 0, averageRating: null, distribution: null }; 240 240 + } 241 241 + 242 242 + async function enrichReviews(reviews: ReviewRow[]): Promise<DisplayReview[]> { 243 243 + return await Promise.all( 244 244 + reviews.map(async (review) => { 245 245 + const profile = await getProfileByDid(review.reviewerDid).catch(() => 246 246 + null 247 247 + ); 248 248 + return { ...review, reviewerHandle: profile?.handle ?? null }; 249 249 + }), 135 250 ); 136 251 } 137 252

+6

routes/explore/manage.tsx

reviewed

··· 59 59 categories: existing.categories, 60 60 subcategories: existing.subcategories, 61 61 links: existing.links, 62 62 + screenshots: existing.screenshots.map((entry) => ({ 63 63 + ref: entry.image.ref.$link, 64 64 + mime: entry.image.mimeType, 65 65 + size: entry.image.size, 66 66 + })), 62 67 avatar: existing.avatarCid && existing.avatarMime 63 68 ? { ref: existing.avatarCid, mime: existing.avatarMime } 64 69 : null, ··· 88 93 categories: ["app"], 89 94 subcategories: [], 90 95 links: [], 96 96 + screenshots: [], 91 97 avatar: bsky.avatar 92 98 ? { 93 99 ref: bsky.avatar.ref.$link,

+65

static/profile-screenshot-carousel.js

reviewed

··· 1 1 + const carouselSelector = "[data-screenshot-carousel]"; 2 2 + const directionSelector = "[data-screenshot-direction]"; 3 3 + 4 4 + function updateButtons(shell) { 5 5 + const track = shell.querySelector(".profile-screenshots-carousel"); 6 6 + if (!track) return; 7 7 + 8 8 + const maxScrollLeft = Math.max(0, track.scrollWidth - track.clientWidth); 9 9 + const atStart = track.scrollLeft <= 1; 10 10 + const atEnd = track.scrollLeft >= maxScrollLeft - 1; 11 11 + 12 12 + for (const button of shell.querySelectorAll(directionSelector)) { 13 13 + const isPrevious = button.dataset.screenshotDirection === "-1"; 14 14 + const disabled = maxScrollLeft <= 1 || (isPrevious ? atStart : atEnd); 15 15 + button.disabled = disabled; 16 16 + button.setAttribute("aria-disabled", disabled ? "true" : "false"); 17 17 + } 18 18 + } 19 19 + 20 20 + function scrollCarousel(button) { 21 21 + const shell = button.closest(carouselSelector); 22 22 + const track = shell?.querySelector(".profile-screenshots-carousel"); 23 23 + const firstCard = track?.querySelector(".profile-screenshot-card"); 24 24 + if (!track || !firstCard) return; 25 25 + 26 26 + const direction = button.dataset.screenshotDirection === "-1" ? -1 : 1; 27 27 + const gap = Number.parseFloat(getComputedStyle(track).columnGap || "0") || 0; 28 28 + const cardStep = firstCard.getBoundingClientRect().width + gap; 29 29 + const step = Math.min( 30 30 + Math.max(cardStep, 220), 31 31 + Math.max(track.clientWidth * 0.85, 220), 32 32 + ); 33 33 + 34 34 + track.scrollBy({ 35 35 + left: direction * step, 36 36 + behavior: "smooth", 37 37 + }); 38 38 + globalThis.setTimeout(() => updateButtons(shell), 350); 39 39 + } 40 40 + 41 41 + document.addEventListener("click", (event) => { 42 42 + const target = event.target; 43 43 + if (!(target instanceof Element)) return; 44 44 + 45 45 + const button = target.closest(directionSelector); 46 46 + if (!(button instanceof HTMLButtonElement)) return; 47 47 + 48 48 + event.preventDefault(); 49 49 + event.stopPropagation(); 50 50 + scrollCarousel(button); 51 51 + }); 52 52 + 53 53 + for (const shell of document.querySelectorAll(carouselSelector)) { 54 54 + updateButtons(shell); 55 55 + const track = shell.querySelector(".profile-screenshots-carousel"); 56 56 + track?.addEventListener("scroll", () => updateButtons(shell), { 57 57 + passive: true, 58 58 + }); 59 59 + } 60 60 + 61 61 + globalThis.addEventListener("resize", () => { 62 62 + for (const shell of document.querySelectorAll(carouselSelector)) { 63 63 + updateButtons(shell); 64 64 + } 65 65 + });

+1

worker/indexer.ts

reviewed

··· 116 116 categories: r.categories, 117 117 subcategories: r.subcategories ?? [], 118 118 links: r.links ?? [], 119 119 + screenshots: r.screenshots ?? [], 119 120 avatarCid: r.avatar?.ref.$link ?? null, 120 121 avatarMime: r.avatar?.mimeType ?? null, 121 122 iconCid: r.icon?.ref.$link ?? null,