Function rejectContentForUser

server/src/routes/content.ts:913–979

(
  user: ContentUser,
  contentId: string,
  reason: string
)

 * Reject pending content - direct function call (no HTTP required).
 */
export async function rejectContentForUser(
  user: ContentUser,
  contentId: string,
  reason: string
): Promise<ContentReviewResult> {
  if (!reason) {
    return {
      success: false,
      error: 'missing_reason',
      error_message: 'A reason is required when rejecting content',
    };
  }

  const pool = getPool();

  const contentResult = await pool.query(
    `SELECT p.*, wg.slug as committee_slug
     FROM perspectives p
     LEFT JOIN working_groups wg ON wg.id = p.working_group_id
     WHERE p.id = $1`,
    [contentId]
  );

  if (contentResult.rows.length === 0) {
    return { success: false, error: 'not_found', error_message: `No content found with id: ${contentId}` };
  }

  const content = contentResult.rows[0];

  if (content.status !== 'pending_review') {
    return {
      success: false,
      error: 'invalid_status',
      error_message: `Content is not pending review (current status: ${content.status})`,
    };
  }

  const userIsAdmin = await isWebUserAAOAdmin(user.id);
  const userIsLead = content.working_group_id
    ? await isCommitteeLead(content.working_group_id, user.id)
    : false;

  if (!userIsAdmin && !userIsLead) {
    return {
      success: false,
      error: 'permission_denied',
      error_message: 'You do not have permission to reject this content',
    };
  }

  await pool.query(
    `UPDATE perspectives
     SET status = 'rejected', rejection_reason = $1,
         reviewed_by_user_id = $2, reviewed_at = NOW()
     WHERE id = $3`,
    [reason, user.id, contentId]
  );