Add moderator bots and editable MineGeo usernames

app/moderator-application/[token]/page.tsx

@@ -0,0 +1,32 @@
+import { createHash } from "node:crypto";
+import { createClient } from "@supabase/supabase-js";
+import { redirect } from "next/navigation";
+import { user } from "@/lib/supabase";
+import { Header, Footer } from "@/components/Shell";
+export const metadata = { robots: { index: false, follow: false }, referrer: "no-referrer" as const };
+
+function db() {
+  return createClient(process.env.NEXT_PUBLIC_SUPABASE_URL!, process.env.SUPABASE_SECRET_KEY!, { auth: { persistSession: false } });
+}
+async function confirm(form: FormData) {
+  "use server";
+  const token = String(form.get("token") ?? "");
+  if (!/^[a-f0-9]{64}$/.test(token)) throw new Error("Invalid application link");
+  const account = await user();
+  if (!account) redirect(`/log-in?next=${encodeURIComponent(`/moderator-application/${token}`)}`);
+  const database = db();
+  const { data: profile, error: profileError } = await database.from("profiles").select("username,account_status").eq("id", account.id).single();
+  if (profileError || !profile || profile.account_status !== "active" || !profile.username) redirect(`/moderator-application/${token}?error=username`);
+  const hash = createHash("sha256").update(token).digest("hex");
+  const { data, error } = await database.from("moderator_applications").update({ status: "pending", profile_id: account.id }).eq("confirmation_hash", hash).eq("requested_username", profile.username).eq("status", "confirming").gt("expires_at", new Date().toISOString()).select("id").maybeSingle();
+  if (error || !data) redirect(`/moderator-application/${token}?error=link`);
+  redirect(`/moderator-application/${token}?submitted=1`);
+}
+export default async function ApplicationPage({ params, searchParams }: { params: Promise<{ token: string }>; searchParams: Promise<{ submitted?: string; error?: string }> }) {
+  const { token } = await params;
+  if (!/^[a-f0-9]{64}$/.test(token)) return <main>Invalid application link.</main>;
+  const account = await user();
+  if (!account) redirect(`/log-in?next=${encodeURIComponent(`/moderator-application/${token}`)}`);
+  const { submitted, error } = await searchParams;
+  return <><Header /><main className="section page-content"><h1>Moderator application</h1>{submitted ? <p>Application sent for review.</p> : <><p>Confirm that this MineGeo account belongs to you.</p>{error && <p role="alert">{error === "username" ? "Set your username in account settings first." : "This link expired, was already used, or belongs to a different username. Start again in the bot."}</p>}<form action={confirm}><input type="hidden" name="token" value={token} /><button className="button primary">Confirm application</button></form></>}</main><Footer /></>;
+}