Admin add-to-portal: retroactively associate an existing map with a portal

Portal membership is a Submission row, so association needs no tag
mechanism: POST /api/submissions/admin/add inserts a submitted,
live-referenced row (map_is_clone=false — takedown never demotes the
author's working map) after the same require_portal_admin team check as
every other admin action. One map can join any number of portals, each
row moderated independently; a duplicate add 409s. The entry surfaces
publicly only once the map's draft_status is past scratch, exactly like
an auto-collected entry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: nofurtherinformation

backend/app/submissions/main.py

@@ -67,6 +67,7 @@
     NsfwUpdate,
     Submission,
     SubmissionAdmin,
+    SubmissionAdminAdd,
     SubmissionContent,
     SubmissionCreate,
     SubmissionCreated,
@@ -731,3 +732,57 @@ async def set_submission_hidden(
         )
     session.commit()
     return {"id": submission_pk, "hidden": body.hidden}
+
+
+@router.post(
+    "/admin/add", response_model=SubmissionCreated, status_code=status.HTTP_201_CREATED
+)
+async def admin_add_submission(
+    data: SubmissionAdminAdd,
+    session: Session = Depends(get_session),
+    auth_result: dict = Security(auth.verify, scopes=[TokenScope.review_content]),
+):
+    """Retroactively associate an existing map with a portal.
+
+    Portal membership is a Submission row, so one map can join any number of
+    portals — each row is hidden/blurred independently. The row references
+    the LIVE map (map_is_clone=False, like auto-collection): no snapshot is
+    taken, and takedown never demotes the author's working document. The
+    entry surfaces in the public gallery only once the map's draft_status is
+    past scratch, exactly like an auto-collected entry. No moderation task —
+    there is no text content to score, and an admin vouched for the map.
+    """
+    config = get_form_config(data.portal_id, session)
+    require_portal_admin(auth_result, config)
+    document = session.exec(
+        select(Document).where(col(Document.public_id) == data.map_public_id)
+    ).first()
+    if document is None:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail=f"Map {data.map_public_id} not found",
+        )
+    existing = session.exec(
+        select(Submission).where(
+            col(Submission.portal_id) == config.portal_id,
+            col(Submission.map_public_id) == data.map_public_id,
+        )
+    ).first()
+    if existing is not None:
+        raise HTTPException(
+            status_code=status.HTTP_409_CONFLICT,
+            detail=f"Map {data.map_public_id} already has a {existing.status} "
+            f"submission in portal {config.portal_id!r}",
+        )
+    submission = Submission(
+        portal_id=config.portal_id,
+        map_public_id=data.map_public_id,
+        tags=[config.portal_id],
+        status=SubmissionStatus.submitted,
+        submitted_at=datetime.now(timezone.utc),
+        map_is_clone=False,
+    )
+    session.add(submission)
+    session.commit()
+    session.refresh(submission)
+    return SubmissionCreated(id=submission.id, submission_id=submission.submission_id)

backend/app/submissions/models.py

@@ -369,6 +369,13 @@ class FlagSubmissionRequest(BaseModel):
     id: int
 
 
+class SubmissionAdminAdd(BaseModel):
+    """Body for retroactively associating an existing map with a portal."""
+
+    portal_id: str
+    map_public_id: int
+
+
 class NsfwUpdate(BaseModel):
     nsfw: bool
 

backend/tests/test_submissions.py

@@ -1037,3 +1037,66 @@ def test_custom_textarea_length_cap(self, client):
         response = _submit(client, fields={**base, "custom_story": "x" * 5001})
         assert response.status_code == 422
         assert any("custom_story" in e for e in response.json()["detail"])
+
+
+# ---------------------------------------------------------------------------
+# Admin add-to-portal (retroactive association)
+# ---------------------------------------------------------------------------
+
+
+class TestAdminAdd:
+    """Retroactive portal membership is a Submission row: team-scoped like
+    every other admin action, duplicate-safe, and live-referenced (no clone,
+    so takedown can never demote the author's working map)."""
+
+    def _add(self, client, public_id, portal_id=PORTAL):
+        return client.post(
+            "/api/submissions/admin/add",
+            json={"portal_id": portal_id, "map_public_id": public_id},
+        )
+
+    def _public_id(self, client, document_id):
+        return client.get(f"/api/document/{document_id}").json()["public_id"]
+
+    def test_scoped_admin_adds_live_reference(
+        self, client, form_config, document_id, session
+    ):
+        public_id = self._public_id(client, document_id)
+        _set_auth(TEAM_A_PAYLOAD)
+        response = self._add(client, public_id)
+        assert response.status_code == 201, response.json()
+        submission = session.get(Submission, response.json()["id"])
+        assert submission.status == "submitted"
+        # The LIVE map, not a snapshot: no clone row, no demotable copy.
+        assert submission.map_public_id == public_id
+        assert submission.map_is_clone is False
+        assert submission.tags == [PORTAL]
+
+    def test_one_map_can_join_multiple_portals(
+        self, client, form_config, document_id, session
+    ):
+        public_id = self._public_id(client, document_id)
+        _set_auth(UNRESTRICTED_PAYLOAD)
+        assert self._add(client, public_id).status_code == 201
+        assert self._add(client, public_id, portal_id=OTHER_PORTAL).status_code == 201
+        rows = session.exec(
+            select(Submission).where(col(Submission.map_public_id) == public_id)
+        ).all()
+        assert sorted(r.portal_id for r in rows) == sorted([PORTAL, OTHER_PORTAL])
+
+    def test_wrong_team_cannot_add(self, client, form_config, document_id):
+        public_id = self._public_id(client, document_id)
+        _set_auth(TEAM_B_PAYLOAD)  # form_config's portal is team-a's
+        assert self._add(client, public_id).status_code == 403
+
+    def test_duplicate_add_conflicts(self, client, form_config, document_id):
+        public_id = self._public_id(client, document_id)
+        _set_auth(TEAM_A_PAYLOAD)
+        assert self._add(client, public_id).status_code == 201
+        response = self._add(client, public_id)
+        assert response.status_code == 409
+        assert "already has" in response.json()["detail"]
+
+    def test_unknown_map_404(self, client, form_config):
+        _set_auth(TEAM_A_PAYLOAD)
+        assert self._add(client, 99999999).status_code == 404