feat(hub): reports from public-group members, decided by an administrator

A report needs a person's account at least a day old, membership of the
public group, and fits a daily allowance per account. Past the threshold
a hash is queued and administrators are notified; blocking without
review is an instance setting, off by default. Report menu item in
public groups, Reports tab and settings in the admin panel.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 18 insertions, 0 deletions

diff --git a/packages/meshbay-hub/src/meshbay_hub/db/models.py b/packages/meshbay-hub/src/meshbay_hub/db/models.py
index 288f1e7..5b140f1 100644
--- a/packages/meshbay-hub/src/meshbay_hub/db/models.py
+++ b/packages/meshbay-hub/src/meshbay_hub/db/models.py
@@ -325,6 +325,24 @@ class ContentBlocklist(Base):
     added_by:     Mapped[str | None] = mapped_column(String(64))  # "auto" or admin username
 
 
+class ContentReview(Base):
+    """
+    A reported hash waiting for — or given — an administrator's decision.
+
+    Opened when enough distinct accounts have reported it; `status` is
+    `pending`, then `blocked` or `dismissed`. A dismissed hash stays dismissed:
+    more reports of it do not reopen it, and an administrator can still block
+    it from the blocklist. The reports themselves stay in `content_reports`.
+    """
+    __tablename__ = "content_reviews"
+
+    content_hash: Mapped[str] = mapped_column(String(64), primary_key=True)
+    status:       Mapped[str] = mapped_column(String(16), default="pending")
+    opened_at:    Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_now)
+    decided_at:   Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
+    decided_by:   Mapped[str | None] = mapped_column(String(64))
+
+
 class UserPreference(Base):
     __tablename__ = "user_preferences"