2 files changed, 53 insertions, 0 deletions
diff --git a/packages/meshbay-hub/src/meshbay_hub/db/migrations/versions/f7a8b9c0d1e2_add_content_reviews.py b/packages/meshbay-hub/src/meshbay_hub/db/migrations/versions/f7a8b9c0d1e2_add_content_reviews.py
new file mode 100644
index 0000000..18466b8
--- /dev/null
+++ b/packages/meshbay-hub/src/meshbay_hub/db/migrations/versions/f7a8b9c0d1e2_add_content_reviews.py
@@ -0,0 +1,35 @@
+"""content reports wait for an administrator
+
+A hash reported by enough distinct accounts is queued for review instead of
+being blocked on the spot, unless the instance chose automatic blocking.
+
+Revision ID: f7a8b9c0d1e2
+Revises: e6f7a8b9c0d1
+"""
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "f7a8b9c0d1e2"
+down_revision: str | Sequence[str] | None = "e6f7a8b9c0d1"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "content_reviews",
+        sa.Column("content_hash", sa.String(64), nullable=False),
+        sa.Column("status", sa.String(16), nullable=False),
+        sa.Column("opened_at", sa.DateTime(timezone=True), nullable=False,
+                  server_default=sa.func.now()),
+        sa.Column("decided_at", sa.DateTime(timezone=True), nullable=True),
+        sa.Column("decided_by", sa.String(64), nullable=True),
+        sa.PrimaryKeyConstraint("content_hash"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_table("content_reviews")
diff --git a/packages/meshbay-hub/src/meshbay_hub/db/models.py b/packages/meshbay-hub/src/meshbay_hub/db/models.py
index 288f1e7..5b140f1 100644
--- a/packages/meshbay-hub/src/meshbay_hub/db/models.py
+++ b/packages/meshbay-hub/src/meshbay_hub/db/models.py
@@ -325,6 +325,24 @@ class ContentBlocklist(Base):
     added_by:     Mapped[str | None] = mapped_column(String(64))  # "auto" or admin username
 
 
+class ContentReview(Base):
+    """
+    A reported hash waiting for — or given — an administrator's decision.
+
+    Opened when enough distinct accounts have reported it; `status` is
+    `pending`, then `blocked` or `dismissed`. A dismissed hash stays dismissed:
+    more reports of it do not reopen it, and an administrator can still block
+    it from the blocklist. The reports themselves stay in `content_reports`.
+    """
+    __tablename__ = "content_reviews"
+
+    content_hash: Mapped[str] = mapped_column(String(64), primary_key=True)
+    status:       Mapped[str] = mapped_column(String(16), default="pending")
+    opened_at:    Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_now)
+    decided_at:   Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
+    decided_by:   Mapped[str | None] = mapped_column(String(64))
+
+
 class UserPreference(Base):
     __tablename__ = "user_preferences"