feat(hub): reports from public-group members, decided by an administrator

A report needs a person's account at least a day old, membership of the
public group, and fits a daily allowance per account. Past the threshold
a hash is queued and administrators are notified; blocking without
review is an instance setting, off by default. Report menu item in
public groups, Reports tab and settings in the admin panel.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 36 insertions, 0 deletions

diff --git a/packages/meshbay-hub/src/meshbay_hub/hub_settings.py b/packages/meshbay-hub/src/meshbay_hub/hub_settings.py
index e01bfd2..d14cc0c 100644
--- a/packages/meshbay-hub/src/meshbay_hub/hub_settings.py
+++ b/packages/meshbay-hub/src/meshbay_hub/hub_settings.py
@@ -158,6 +158,42 @@ async def session_limits(db: AsyncSession) -> dict[str, int]:
             for k in SESSION_KEYS}
 
 
+# ── Content reports ──────────────────────────────────────────────────────────
+#
+# Who may report public content, how often, and what a report leads to
+# (docs/MESHBAY_DESIGN.md §7.5). `auto_block` is 0 or 1: off, a hash that
+# reaches the threshold waits for an administrator; on, it is blocked at once —
+# three accounts made for the purpose would then be enough to take a file down.
+
+REPORT_KEYS = ("min_account_age_hours", "daily_per_account",
+               "review_threshold", "auto_block")
+
+REPORT_DEFAULTS: dict[str, int] = {
+    "min_account_age_hours": 24,
+    "daily_per_account":     20,
+    "review_threshold":      3,
+    "auto_block":            0,
+}
+
+REPORT_BOUNDS: dict[str, tuple[int, int]] = {
+    "min_account_age_hours": (0, 720),      # 30 days
+    "daily_per_account":     (1, 1_000),
+    "review_threshold":      (1, 100),
+    "auto_block":            (0, 1),
+}
+
+
+def clamp_report_value(key: str, value: int) -> int:
+    low, high = REPORT_BOUNDS[key]
+    return max(low, min(high, int(value)))
+
+
+async def report_limits(db: AsyncSession) -> dict[str, int]:
+    return {k: clamp_report_value(
+                k, await get_int(db, f"reports.{k}", REPORT_DEFAULTS[k]))
+            for k in REPORT_KEYS}
+
+
 async def get_raw(db: AsyncSession, key: str) -> str | None:
     row = await db.get(HubSetting, key)
     return row.value if row else None