From eebd010df05a170e79bb5feef53855df334feb6b Mon Sep 17 00:00:00 2001 From: architect-bot Date: Tue, 18 Aug 2026 18:38:39 +0000 Subject: [PATCH] WIP checkpoint: US-1..4: Moderation data model + Alembic migration --- backend/alembic/versions/0003_trust_safety.py | 268 ++++++++++++++++++ 1 file changed, 268 insertions(+) create mode 100644 backend/alembic/versions/0003_trust_safety.py diff --git a/backend/alembic/versions/0003_trust_safety.py b/backend/alembic/versions/0003_trust_safety.py new file mode 100644 index 0000000..40e6e59 --- /dev/null +++ b/backend/alembic/versions/0003_trust_safety.py @@ -0,0 +1,268 @@ +"""add trust & safety columns and tables + +Revision ID: 0003_trust_safety +Revises: 0002_add_date_of_birth_to_users +Create Date: 2025-07-10 00:00:00.000000 + +""" +from typing import Sequence, Union + +from alembic import op +import sqlalchemy as sa +from sqlalchemy.dialects import postgresql + +# revision identifiers, used by Alembic. +revision: str = "0003_trust_safety" +down_revision: Union[str, None] = "0002_add_date_of_birth_to_users" +branch_labels: Union[str, Sequence[str], None] = None +depends_on: Union[str, Sequence[str], None] = None + + +def upgrade() -> None: + """Add role/banned_until/suspended_until to users, and create + reports, moderation_actions, and appeals tables.""" + + # ── ENUM types ────────────────────────────────────────────── + + role_enum = postgresql.ENUM("user", "moderator", "admin", name="role") + role_enum.create(op.get_bind(), checkfirst=True) + + target_type_enum = postgresql.ENUM( + "user", "world", "asset", "chat_message", name="target_type" + ) + target_type_enum.create(op.get_bind(), checkfirst=True) + + reason_category_enum = postgresql.ENUM( + "harassment", + "hate_speech", + "sexual_content", + "violence", + "spam", + "self_harm", + "other", + name="reason_category", + ) + reason_category_enum.create(op.get_bind(), checkfirst=True) + + report_status_enum = postgresql.ENUM( + "open", "in_review", "resolved", "dismissed", name="report_status" + ) + report_status_enum.create(op.get_bind(), checkfirst=True) + + resolution_enum = postgresql.ENUM( + "action_taken", + "action_not_needed", + "duplicate", + "escalated", + name="resolution", + ) + resolution_enum.create(op.get_bind(), checkfirst=True) + + moderation_action_enum = postgresql.ENUM( + "warn", "suspend", "ban", "restrict", "remove", "restore", + name="moderation_action", + ) + moderation_action_enum.create(op.get_bind(), checkfirst=True) + + appeal_status_enum = postgresql.ENUM( + "pending", "approved", "rejected", name="appeal_status" + ) + appeal_status_enum.create(op.get_bind(), checkfirst=True) + + # ── users table changes ───────────────────────────────────── + + op.add_column( + "users", + sa.Column( + "role", + role_enum, + nullable=False, + server_default="user", + ), + ) + op.add_column( + "users", + sa.Column("banned_until", sa.DateTime(timezone=True), nullable=True), + ) + op.add_column( + "users", + sa.Column("suspended_until", sa.DateTime(timezone=True), nullable=True), + ) + + # ── reports table ─────────────────────────────────────────── + + op.create_table( + "reports", + sa.Column("id", sa.BigInteger(), primary_key=True, autoincrement=True), + sa.Column( + "reporter_id", sa.Integer(), sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=False + ), + sa.Column( + "target_type", + target_type_enum, + nullable=False, + ), + sa.Column("target_id", sa.String(length=64), nullable=False), + sa.Column( + "reason_category", + reason_category_enum, + nullable=False, + ), + sa.Column("details", sa.Text(), nullable=True), + sa.Column( + "status", + report_status_enum, + nullable=False, + server_default="open", + ), + sa.Column( + "resolved_by", + sa.Integer(), + sa.ForeignKey("users.id", ondelete="SET NULL"), + nullable=True, + ), + sa.Column( + "resolution", + resolution_enum, + nullable=True, + ), + sa.Column( + "created_at", + sa.DateTime(timezone=True), + server_default=sa.func.now(), + nullable=False, + ), + sa.Column( + "updated_at", + sa.DateTime(timezone=True), + onupdate=sa.func.now(), + nullable=False, + ), + sa.Column("resolved_at", sa.DateTime(timezone=True), nullable=True), + sa.UniqueConstraint("reporter_id", "target_type", "target_id"), + ) + op.create_index(op.f("ix_reports_id"), "reports", ["id"], unique=False) + op.create_index(op.f("ix_reports_reporter_id"), "reports", ["reporter_id"], unique=False) + + # ── moderation_actions table ──────────────────────────────── + + op.create_table( + "moderation_actions", + sa.Column("id", sa.BigInteger(), primary_key=True, autoincrement=True), + sa.Column( + "moderator_id", + sa.Integer(), + sa.ForeignKey("users.id", ondelete="CASCADE"), + nullable=False, + ), + sa.Column( + "target_user_id", + sa.Integer(), + sa.ForeignKey("users.id", ondelete="SET NULL"), + nullable=True, + ), + sa.Column( + "target_type", + target_type_enum, + nullable=False, + ), + sa.Column("target_id", sa.String(length=64), nullable=False), + sa.Column( + "action", + moderation_action_enum, + nullable=False, + ), + sa.Column("reason", sa.Text(), nullable=False), + sa.Column( + "report_id", + sa.Integer(), + sa.ForeignKey("reports.id", ondelete="SET NULL"), + nullable=True, + ), + sa.Column("expires_at", sa.DateTime(timezone=True), nullable=True), + sa.Column("revoked_at", sa.DateTime(timezone=True), nullable=True), + sa.Column( + "created_at", + sa.DateTime(timezone=True), + server_default=sa.func.now(), + nullable=False, + ), + ) + op.create_index(op.f("ix_moderation_actions_id"), "moderation_actions", ["id"], unique=False) + op.create_index( + op.f("ix_moderation_actions_moderator_id"), + "moderation_actions", + ["moderator_id"], + unique=False, + ) + + # ── appeals table ─────────────────────────────────────────── + + op.create_table( + "appeals", + sa.Column("id", sa.BigInteger(), primary_key=True, autoincrement=True), + sa.Column( + "moderation_action_id", + sa.Integer(), + sa.ForeignKey("moderation_actions.id", ondelete="CASCADE"), + nullable=False, + ), + sa.Column( + "user_id", + sa.Integer(), + sa.ForeignKey("users.id", ondelete="CASCADE"), + nullable=False, + ), + sa.Column("reason", sa.Text(), nullable=False), + sa.Column( + "status", + appeal_status_enum, + nullable=False, + server_default="pending", + ), + sa.Column( + "reviewed_by", + sa.Integer(), + sa.ForeignKey("users.id", ondelete="SET NULL"), + nullable=True, + ), + sa.Column("reviewed_at", sa.DateTime(timezone=True), nullable=True), + sa.Column( + "created_at", + sa.DateTime(timezone=True), + server_default=sa.func.now(), + nullable=False, + ), + sa.UniqueConstraint("moderation_action_id", "user_id"), + ) + op.create_index(op.f("ix_appeals_id"), "appeals", ["id"], unique=False) + op.create_index(op.f("ix_appeals_user_id"), "appeals", ["user_id"], unique=False) + + +def downgrade() -> None: + """Remove trust & safety tables and columns.""" + + op.drop_index(op.f("ix_appeals_user_id"), table_name="appeals") + op.drop_index(op.f("ix_appeals_id"), table_name="appeals") + op.drop_table("appeals") + + op.drop_index(op.f("ix_moderation_actions_moderator_id"), table_name="moderation_actions") + op.drop_index(op.f("ix_moderation_actions_id"), table_name="moderation_actions") + op.drop_table("moderation_actions") + + op.drop_index(op.f("ix_reports_reporter_id"), table_name="reports") + op.drop_index(op.f("ix_reports_id"), table_name="reports") + op.drop_table("reports") + + op.drop_column("users", "suspended_until") + op.drop_column("users", "banned_until") + op.drop_column("users", "role") + + # Drop ENUM types + postgresql.ENUM(name="appeal_status").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="moderation_action").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="resolution").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="report_status").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="reason_category").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="target_type").drop(op.get_bind(), checkfirst=True) + postgresql.ENUM(name="role").drop(op.get_bind(), checkfirst=True)