Add auditor read-only governance endpoints (#14)

Author: ME-Massine

app/api/audit/flags/route.ts

@@ -0,0 +1,32 @@
+import { NextResponse } from "next/server";
+
+import { listModerationFlagsBySeverity } from "@/lib/general-chat/store";
+import type { ModerationFlagDetail } from "@/lib/general-chat/store";
+import type { ModerationSeverity } from "@/lib/general-chat/models";
+
+const VALID_SEVERITIES: ModerationSeverity[] = ["low", "medium", "high"];
+
+export async function GET(req: Request) {
+  const { searchParams } = new URL(req.url);
+  const severity = (searchParams.get("severity") ?? "high") as ModerationSeverity;
+
+  if (!VALID_SEVERITIES.includes(severity)) {
+    return NextResponse.json(
+      { error: "Invalid severity. Use low, medium, or high." },
+      { status: 400 }
+    );
+  }
+
+  try {
+    const flags: ModerationFlagDetail[] = await listModerationFlagsBySeverity(
+      severity
+    );
+    return NextResponse.json({ flags });
+  } catch (error) {
+    console.error("Failed to load audit moderation flags", error);
+    return NextResponse.json(
+      { error: "Unable to load moderation flags." },
+      { status: 500 }
+    );
+  }
+}

app/api/audit/thread/[threadId]/route.ts

@@ -0,0 +1,33 @@
+import { NextResponse } from "next/server";
+
+import { augmentThread } from "@/lib/general-chat/store";
+
+interface RouteParams {
+  params: {
+    threadId: string;
+  };
+}
+
+export async function GET(_req: Request, { params }: RouteParams) {
+  const threadId = params.threadId;
+  if (!threadId) {
+    return NextResponse.json(
+      { error: "threadId is required." },
+      { status: 400 }
+    );
+  }
+
+  try {
+    const thread = await augmentThread(threadId);
+    return NextResponse.json({ thread });
+  } catch (error) {
+    if (error instanceof Error && error.message === "Thread not found") {
+      return NextResponse.json({ error: "Thread not found." }, { status: 404 });
+    }
+    console.error("Failed to load audit thread", error);
+    return NextResponse.json(
+      { error: "Unable to load audit thread." },
+      { status: 500 }
+    );
+  }
+}

app/api/audit/verifications/route.ts

@@ -0,0 +1,36 @@
+import { NextResponse } from "next/server";
+
+import { listVerificationsByResult } from "@/lib/general-chat/store";
+import type { VerificationDetail } from "@/lib/general-chat/store";
+import type { VerificationResult } from "@/lib/general-chat/models";
+
+const STATUS_MAP: Record<string, VerificationResult> = {
+  confirmed: "confirmed",
+  partial: "partially_correct",
+  incorrect: "incorrect",
+};
+
+export async function GET(req: Request) {
+  const { searchParams } = new URL(req.url);
+  const statusParam = (searchParams.get("status") ?? "partial").toLowerCase();
+  const verificationResult = STATUS_MAP[statusParam];
+
+  if (!verificationResult) {
+    return NextResponse.json(
+      { error: "Invalid status. Use confirmed, partial, or incorrect." },
+      { status: 400 }
+    );
+  }
+
+  try {
+    const verifications: VerificationDetail[] =
+      await listVerificationsByResult(verificationResult);
+    return NextResponse.json({ verifications });
+  } catch (error) {
+    console.error("Failed to load audit verifications", error);
+    return NextResponse.json(
+      { error: "Unable to load verifications." },
+      { status: 500 }
+    );
+  }
+}

lib/general-chat/store.ts

@@ -7,9 +7,11 @@ import {
   ChatMessageMetadata,
   ChatThread,
   ModerationFlag,
+  ModerationSeverity,
   OfficialRule,
   User,
   VerifiedStatus,
+  VerificationResult,
 } from "./models";
 import {
   createAcsChatThread,
@@ -391,6 +393,55 @@ export async function listModerationFlags(
   return resources.map(stripCosmosFields);
 }
 
+export type ModerationFlagDetail = ModerationFlag & { message?: ChatMessage };
+export type VerificationDetail = AIVerification & { message?: ChatMessage };
+
+export async function listModerationFlagsBySeverity(
+  severity: ModerationSeverity
+): Promise<ModerationFlagDetail[]> {
+  const container = await moderationContainerPromise;
+  const { resources } = await container.items
+    .query<WithId<ModerationFlag>>({
+      query:
+        "SELECT * FROM c WHERE c.severity = @severity ORDER BY c.createdAt DESC",
+      parameters: [{ name: "@severity", value: severity }],
+    })
+    .fetchAll();
+
+  const flags = resources.map(stripCosmosFields);
+  const messages = await Promise.all(
+    flags.map((flag) => findMessage(flag.messageId))
+  );
+
+  return flags.map((flag, index) => ({
+    ...flag,
+    message: messages[index],
+  }));
+}
+
+export async function listVerificationsByResult(
+  verificationResult: VerificationResult
+): Promise<VerificationDetail[]> {
+  const container = await verificationsContainerPromise;
+  const { resources } = await container.items
+    .query<WithId<AIVerification>>({
+      query:
+        "SELECT * FROM c WHERE c.verificationResult = @verificationResult ORDER BY c.createdAt DESC",
+      parameters: [{ name: "@verificationResult", value: verificationResult }],
+    })
+    .fetchAll();
+
+  const verifications = resources.map(stripCosmosFields);
+  const messages = await Promise.all(
+    verifications.map((verification) => findMessage(verification.messageId))
+  );
+
+  return verifications.map((verification, index) => ({
+    ...verification,
+    message: messages[index],
+  }));
+}
+
 export function getOfficialRules(schoolId: string, language: string) {
   return store.rules.filter(
     (rule) => rule.schoolId === schoolId && rule.language === language