Add administrative room close and reopen controls

Preserve readable private tables, discussion and pending games while closure blocks new play, joins, messages, AI and seat mutations. Add live-authorized atomic closure audits, room-version/revision fences, dedicated controls and exact saved retries. Reopen with the saved pause/join settings and current credentials; restoring a removed but closed room keeps its AI stopped.

Verified types, lint, 5356 offline tests, 52 HTTP tests and build. Seventeen dedicated authenticated HTTP groups and independent privacy/persistence review passed. Desktop/mobile browser QA confirmed one close after a lost response and refresh, persistent readable notices, retained private draft, mobile reopening and saved-seat refresh. All 2,001 baseline rooms, 4,243 seats and related records preserved. Positive production admin acceptance awaits authorized QA access; full admin and rules gates remain open.

app/api/admin/rooms/[code]/closure/route.ts

@@ -0,0 +1,35 @@
+import { env, waitUntil } from 'cloudflare:workers';
+import { AdminError, requireAdmin } from '@/db/admin-access';
+import { applyAdminClosure, readAdminClosure } from '@/db/admin-closure';
+import { resumeRoom } from '@/db/room-continuation';
+import { validAdminClosureInput } from '@/lib/admin-closure';
+import { adminBody, adminFailure, adminResponse, adminToken } from '@/lib/admin-http';
+
+function code(request: Request) {
+  const code = new URL(request.url).pathname.split('/').at(-2)?.toUpperCase() ?? '';
+  if (code.length !== 8 || !/^[A-Z2-9]{8}$/.test(code)) throw new AdminError('Enter the eight-character room code.', 400);
+  return code;
+}
+
+export async function GET(request: Request) {
+  try {
+    const identity = await requireAdmin(env.DB, adminToken(request));
+    if (request.headers.has('X-Dune-Admin-Id') && request.headers.get('X-Dune-Admin-Id') !== identity.id)
+      throw new AdminError('The signed-in administrator changed. Reload administration before continuing.', 401);
+    return adminResponse(await readAdminClosure(env.DB, identity, code(request)));
+  } catch (error) { return adminFailure(error); }
+}
+
+export async function POST(request: Request) {
+  try {
+    const input = await adminBody(request, env.DUNE_PUBLIC_ORIGIN);
+    const identity = await requireAdmin(env.DB, adminToken(request), ['owner', 'operator']);
+    if (request.headers.get('X-Dune-Admin-Id') !== identity.id)
+      throw new AdminError('The signed-in administrator changed. Reload administration before continuing.', 401);
+    if (!validAdminClosureInput(input)) throw new AdminError('Choose closure or reopening, current versions and an operational reason.', 400);
+    const room = code(request);
+    const result = await applyAdminClosure(env.DB, identity, room, input);
+    if (!result.replayed && !result.room.closed && !result.room.paused) waitUntil(resumeRoom(room));
+    return adminResponse(result);
+  } catch (error) { return adminFailure(error); }
+}

app/api/admin/rooms/[code]/control/route.ts

@@ -29,7 +29,7 @@ export async function POST(request: Request) {
     if (!validAdminRoomControlInput(body)) throw new AdminError('Provide room settings and a reason of 1–300 characters.', 400);
     const code = roomCode(request);
     const result = await applyAdminRoomControl(env.DB, identity, code, body);
-    if (!result.paused) waitUntil(resumeRoom(code));
+    if (!result.paused && !result.closed) waitUntil(resumeRoom(code));
     return adminResponse(result);
   } catch (error) { return adminFailure(error); }
 }

app/api/admin/rooms/[code]/removal/route.ts

@@ -29,7 +29,7 @@ export async function POST(request: Request) {
     if (!validAdminRemovalInput(input)) throw new AdminError('Choose removal or restoration, current versions and an operational reason.', 400);
     const room = code(request);
     const result = await applyAdminRemoval(env.DB, identity, room, input);
-    if (!result.replayed && !result.room.removed && !result.room.paused) waitUntil(resumeRoom(room));
+    if (!result.replayed && !result.room.removed && !result.room.paused && !result.room.closed) waitUntil(resumeRoom(room));
     return adminResponse(result);
   } catch (error) { return adminFailure(error); }
 }

app/api/rooms/[code]/control/route.ts

@@ -86,7 +86,7 @@ export async function POST(req: Request) {
                 ownerId: input.ownerId,
                 grantId: input.grantId,
               });
-      if (!result.view.roomControl?.paused && (result.view.botsPending || needsAutomaticRoomRecovery(result.view)))
+      if (!result.view.roomControl?.paused && !result.view.roomControl?.closed && (result.view.botsPending || needsAutomaticRoomRecovery(result.view)))
         waitUntil(resumeRoom(code));
       return Response.json(result, { headers: noStore });
     }

app/api/rooms/[code]/route.ts

@@ -56,7 +56,7 @@ export async function GET(req: Request) {
     const view = await readSeatView(code, id);
     // Reconnect resumes persisted automatic effects/acknowledgements and AI work
     // after an interruption. Actual human choices remain engine-owned decisions.
-    if (!view.roomControl?.paused && (view.botsPending || needsAutomaticRoomRecovery(view)))
+    if (!view.roomControl?.paused && !view.roomControl?.closed && (view.botsPending || needsAutomaticRoomRecovery(view)))
       waitUntil(resumeRoom(code));
     return Response.json(view, {
       headers: { 'Cache-Control': 'no-store' },
@@ -132,7 +132,7 @@ export async function POST(req: Request) {
     )
       throw new RuleError('The action is invalid.');
     const view = await act(code, id, body.version, body.action);
-    if (!view.roomControl?.paused && (view.botsPending || needsAutomaticRoomRecovery(view)))
+    if (!view.roomControl?.paused && !view.roomControl?.closed && (view.botsPending || needsAutomaticRoomRecovery(view)))
       waitUntil(resumeRoom(code));
     return Response.json(view, {
       headers: { 'Cache-Control': 'no-store' },