Initial commit

2026-01-26 08:34:48 +01:00
commit 387314581f
216 changed files with 81204 additions and 0 deletions
@@ -0,0 +1,65 @@
+import { NextResponse } from 'next/server';
+import { db, reports, posts, users } from '@/db';
+import { requireAuth } from '@/lib/auth';
+import { eq } from 'drizzle-orm';
+import { z } from 'zod';
+
+const reportSchema = z.object({
+    targetType: z.enum(['post', 'user']),
+    targetId: z.string().uuid(),
+    reason: z.string().min(3).max(500),
+});
+
+export async function POST(request: Request) {
+    try {
+        const reporter = await requireAuth();
+
+        if (reporter.isSuspended || reporter.isSilenced) {
+            return NextResponse.json({ error: 'Account restricted' }, { status: 403 });
+        }
+
+        if (!db) {
+            return NextResponse.json({ error: 'Database not available' }, { status: 503 });
+        }
+
+        const body = await request.json();
+        const data = reportSchema.parse(body);
+
+        if (data.targetType === 'post') {
+            const targetPost = await db.query.posts.findFirst({
+                where: eq(posts.id, data.targetId),
+            });
+            if (!targetPost || targetPost.isRemoved) {
+                return NextResponse.json({ error: 'Post not found' }, { status: 404 });
+            }
+        }
+
+        if (data.targetType === 'user') {
+            const targetUser = await db.query.users.findFirst({
+                where: eq(users.id, data.targetId),
+            });
+            if (!targetUser) {
+                return NextResponse.json({ error: 'User not found' }, { status: 404 });
+            }
+        }
+
+        const [report] = await db.insert(reports).values({
+            reporterId: reporter.id,
+            targetType: data.targetType,
+            targetId: data.targetId,
+            reason: data.reason,
+            status: 'open',
+        }).returning();
+
+        return NextResponse.json({ report });
+    } catch (error) {
+        if (error instanceof z.ZodError) {
+            return NextResponse.json({ error: 'Invalid input', details: error.issues }, { status: 400 });
+        }
+        if (error instanceof Error && error.message === 'Authentication required') {
+            return NextResponse.json({ error: 'Authentication required' }, { status: 401 });
+        }
+        console.error('Report error:', error);
+        return NextResponse.json({ error: 'Failed to submit report' }, { status: 500 });
+    }
+}