wtclaude
41a1e84b51
USER_SAFETY.md step 2 (core), with S11-S14 decided while building it. - Reports: POST /player/reports takes any target type, core's forum types or a module's registered ones. One resolver (model/safety/targets.js) answers "what is this item, for this reader" and 404s an item the reader cannot see. Every report stores content_reports.snapshot; the queue shows a module item from it. - Hide for everyone: POST /admin/moderation/reports/:id/hide hides the item through its own moderation (forum hide as staff, or the module's hide) and actions the report with actioned_with = 'hide'. - Blocks (user_blocks) name an item, never a person, and land on the author's account first (S12); an unlinked game identity is blocked as itself and becomes an account block once linked (S14). Staff cannot be blocked; a block on someone later promoted stops applying (S8). - Hide for me (user_hidden_items), /auth/me/blocks and /auth/me/hidden. - Forum reads filter blocked authors and hidden items on the server and carry canBlock per thread and post. - MODULE_API 1.21.0: api.registerReportTargets, api.registerGameIdentities, ctx.safety.forViewer and ctx.safety.staffAmong, so a module filters its own per-viewer feeds on the server (S11) and marks lines canBlock (S13). - Web: Hide for me / Block author in the forum menus, a Blocked section on both account pages, Hide for everyone in the Reports queue. - Tests, OpenAPI, route/guard/engagement manifests regenerated. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY
57 lines
2.7 KiB
JavaScript
57 lines
2.7 KiB
JavaScript
// /api/v1/player — the player self-service surface, assembled from
|
|
// per-capability routers.
|
|
//
|
|
// This file owns exactly two things: the gate every player route shares, and the
|
|
// mount table. No route is declared here. Each capability router mounts at the
|
|
// prefix it already owned inside the old monolithic player.routes.js.
|
|
//
|
|
// Self-service account security (`/player/account/*`) used to be mounted here. It
|
|
// is gone: `/auth/me/account/*` is the single canonical self surface for every
|
|
// role, and this group's copy was a strictly smaller duplicate of it.
|
|
//
|
|
// **Staff are a superset of players.** This group is open to any authenticated
|
|
// account, not just role 'player': every read/write is self-scoped to req.user.id,
|
|
// and a staff member has every player ability plus their staff tools on top.
|
|
// Adding a requireRole('player') here would 403 an admin off their own characters
|
|
// (it happened once — see docs/website/BACKEND_DESIGN.md). Staff also reach the
|
|
// identical self-scoped handlers under /admin/shard, which lives in module-uo now
|
|
// — that changes where they are defined and nothing about which URLs answer.
|
|
//
|
|
// See docs/website/API_V2_PLAN.md § Phase 2 for the split.
|
|
|
|
const express = require('express')
|
|
|
|
const { requireAuth } = require('../../../auth/session.middleware')
|
|
const noindex = require('../../../middleware/noindex')
|
|
|
|
const appealsRouter = require('./appeals.router')
|
|
const teamsRouter = require('./teams.router')
|
|
const teamForumRouter = require('./teamForum.router')
|
|
const eventsRouter = require('./events.router')
|
|
const reportsRouter = require('./reports.router')
|
|
|
|
const playerRouter = express.Router()
|
|
|
|
// Group gate: authenticated only (no role restriction). Keep it out of search
|
|
// indexes. requireAuth also enforces the account status check (a disabled/banned
|
|
// account is rejected here with 403 before any handler runs).
|
|
//
|
|
// It lives here, ahead of every mount, so a capability router added later cannot
|
|
// silently ship without it.
|
|
playerRouter.use(noindex, requireAuth)
|
|
|
|
playerRouter.use('/appeals', appealsRouter)
|
|
// This account's own event participation (Phase 14a). Self-scoped on
|
|
// req.user.id, like everything else in this group.
|
|
playerRouter.use('/events', eventsRouter)
|
|
// Report anything reportable (USER_SAFETY.md §4.1): forum items and a game
|
|
// module's items through one route.
|
|
playerRouter.use('/reports', reportsRouter)
|
|
playerRouter.use('/teams', teamsRouter)
|
|
// Same prefix, second router. The forum and the leader-exercised grant flow are a
|
|
// different capability from "the caller's own Teams", and splitting them keeps
|
|
// each file about one thing; no path in the two collides.
|
|
playerRouter.use('/teams', teamForumRouter)
|
|
|
|
module.exports = playerRouter
|