NightSpire/web-next/app/api/forum/moderate/route.ts

import { getSession } from '@/lib/session'
import { getTopic } from '@/lib/forum'
import { setTopicFlag } from '@/lib/forum-write'
import { forumIsModerator } from '@/lib/forum-perm'

type Action = 'lock' | 'unlock' | 'sticky' | 'unsticky' | 'delete'

/** Moderación de temas: bloquear, fijar, borrar. Solo moderadores. */
export async function POST(request: Request) {
  const session = await getSession()
  if (!session.accountId) return Response.json({ success: false, error: 'notAuthenticated' }, { status: 401 })
  if (!(await forumIsModerator(session))) return Response.json({ success: false, error: 'forbidden' }, { status: 403 })

  let b: Record<string, string> = {}
  try { b = await request.json() } catch { return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 }) }
  const topicId = Number(b.topicId)
  const action = String(b.action ?? '') as Action
  if (!topicId) return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })

  const topic = await getTopic(topicId)
  if (!topic) return Response.json({ success: false, error: 'topicNotFound' }, { status: 404 })

  switch (action) {
    case 'lock':
      await setTopicFlag(topicId, 'locked', true)
      break
    case 'unlock':
      await setTopicFlag(topicId, 'locked', false)
      break
    case 'sticky':
      await setTopicFlag(topicId, 'sticky', true)
      break
    case 'unsticky':
      await setTopicFlag(topicId, 'sticky', false)
      break
    case 'delete':
      await setTopicFlag(topicId, 'deleted', true)
      return Response.json({ success: true, forumId: topic.forum_id })
    default:
      return Response.json({ success: false, error: 'invalidRequest' }, { status: 400 })
  }
  return Response.json({ success: true })
}