Summary

Turn the organization appeal portal into a complete contributor and moderator workflow.

• Lets contributors submit an appeal even when the original moderation event is missing.
• Gives authorized organization members an appeal inbox, editable portal copy, and a public preview URL.
• Adds dedicated appeals:read and appeals:manage organization permissions.

Problem

The portal only worked when Tripwire could find a prior eligible moderation run. That locked contributors out of the recovery path when an event was missing or recorded incorrectly, and organization moderators had no dedicated view for reviewing appeals or controlling the contributor-facing guidance.

UX Flow

Contributor
├─ Open the organization appeal portal
├─ Sign in with the affected GitHub identity
└─ Submit and track a general or run-linked appeal

Organization moderator
├─ Open the same portal URL
├─ Review the organization inbox
├─ Resolve appeals when their role allows it
└─ Edit and preview the public portal guidance

Solution

General appeals now bind to the contributor's linked GitHub identity and preserve the existing one-open-appeal invariant without requiring a prior moderation run. The portal detects organization appeal permissions to present the moderator inbox and settings, carries the organization avatar and configured copy into the public view, and exposes a shareable ?preview=public URL. A new portal-settings record and organization-appeal permission region keep the behavior explicit and auditable.

Validation

• Full monorepo typecheck
• Dependency-boundary check
• Biome on every changed TypeScript, TSX, and JSON file
• 14 focused database and RPC appeal tests
• Live desktop verification of the admin portal, public preview, sign-out confirmation, empty state, and settings footer

Before (Appeal portal)	After (Appeal portal)