fix(workshop): expose moderation

apps/workshop/README.md

@@ -8,7 +8,8 @@ The runtime base is PocketBase 0.39.9 pinned by its multi-platform OCI digest in
 version and digest together, then run the Workshop integration and production-image smoke suites.
 
 The internal PocketBase field `users.isAdmin` means **Workshop moderator**. It does not grant Homarr administrator
-access. Moderators can review private reports, dismiss reports, and remove submissions or comments.
+access. Signed-in moderators can open `/workshop/admin` from the visible **Moderation** button, review private report
+details, dismiss reports, and remove submissions or comments. Public submission cards show only the open report count.
 
 ## Run locally
 

apps/workshop/pb_migrations/1784240000_workshop_widgets.js

@@ -216,7 +216,7 @@ migrate(
           name: "category",
           required: true,
           maxSelect: 1,
-          values: ["malicious", "spam", "copyright", "inappropriate", "other"],
+          values: ["outdated", "malicious", "spam", "copyright", "inappropriate", "other"],
         },
         { type: "text", name: "explanation", required: true, min: 3, max: 1000 },
         { type: "select", name: "status", required: true, maxSelect: 1, values: ["open", "dismissed"] },

apps/workshop/tests/workshop-contracts.mjs

@@ -69,6 +69,10 @@ const docsConfig = await read("apps/docs/docusaurus.config.ts");
 if (!docsConfig.includes('scripts: [{ src: "/workshop-runtime-config.js" }]')) {
   throw new Error("Workshop must load the container runtime configuration before the documentation bundle");
 }
+if (!docsConfig.includes('path: "/workshop/:id"') || !docsConfig.includes("priority: -1")) {
+  throw new Error("Workshop submission routes must not capture the moderation page");
+}
 await access(resolve("apps/docs/static/workshop-runtime-config.js"));
+await access(resolve("apps/docs/src/pages/workshop/admin/index.tsx"));
 
 console.log("Workshop static contracts passed");

apps/workshop/tests/workshop.integration.mjs

@@ -268,11 +268,12 @@ const report = await request("/api/collections/reports/records", {
   body: JSON.stringify({
     submission: submission.id,
     reporter: visitor.id,
-    category: "other",
+    category: "outdated",
     explanation: "Runtime moderation test",
     status: "dismissed",
   }),
 });
+if (report.category !== "outdated") throw new Error("Outdated Workshop reports must be accepted");
 await expectStatus(`/api/collections/reports/records/${report.id}`, { headers: visitorSession.headers }, 404);
 await expectStatus("/api/collections/reports/records", { headers: visitorSession.headers }, 200);
 const publicReports = await request("/api/collections/reports/records", { headers: visitorSession.headers });