Add administrative room close and reopen controls
Preserve readable private tables, discussion and pending games while closure blocks new play, joins, messages, AI and seat mutations. Add live-authorized atomic closure audits, room-version/revision fences, dedicated controls and exact saved retries. Reopen with the saved pause/join settings and current credentials; restoring a removed but closed room keeps its AI stopped. Verified types, lint, 5356 offline tests, 52 HTTP tests and build. Seventeen dedicated authenticated HTTP groups and independent privacy/persistence review passed. Desktop/mobile browser QA confirmed one close after a lost response and refresh, persistent readable notices, retained private draft, mobile reopening and saved-seat refresh. All 2,001 baseline rooms, 4,243 seats and related records preserved. Positive production admin acceptance awaits authorized QA access; full admin and rules gates remain open.
This commit is contained in:
1 parent
238de3860d
commit
98b1b3261b
49 files changed
+4255
-86
No files matched your search
+4
-2
@@ -11,13 +11,14 @@ const authority = `SELECT a.role FROM admin_sessions s JOIN admin_accounts a ON
|
||||
AND s.expires_at > ? AND s.generation = a.session_generation
|
||||
AND a.role IN ('owner','operator','viewer')`;
|
||||
const mutationAuthority = authority + " AND a.role IN ('owner','operator')";
|
||||
const roomSelect = `SELECT r.code,r.version,COALESCE(m.removed,0) AS removed,
|
||||
const roomSelect = `SELECT r.code,r.version,EXISTS (SELECT 1 FROM room_closures WHERE room_code = r.code AND closed = 1) AS closed,COALESCE(m.removed,0) AS removed,
|
||||
COALESCE(m.revision,0) AS revision,m.removed_at,m.updated_at,
|
||||
COALESCE(c.paused,0) AS paused,COALESCE(c.join_locked,0) AS join_locked
|
||||
FROM rooms r LEFT JOIN room_removals m ON m.room_code = r.code
|
||||
LEFT JOIN room_controls c ON c.room_code = r.code
|
||||
WHERE r.code = ? AND EXISTS (${authority})`;
|
||||
type Row = {
|
||||
closed: number;
|
||||
code: string;
|
||||
version: number;
|
||||
removed: number;
|
||||
@@ -37,6 +38,7 @@ type Receipt = {
|
||||
};
|
||||
const project = (row: Row): AdminRemovalView => ({
|
||||
code: row.code,
|
||||
...(row.closed === 1 ? { closed: true as const } : {}),
|
||||
version: row.version,
|
||||
removed: row.removed === 1,
|
||||
revision: row.revision,
|
||||
@@ -160,7 +162,7 @@ export async function applyAdminRemoval(
|
||||
// Removing never parses or changes JSON. Restore tolerates malformed saved state.
|
||||
database
|
||||
.prepare(`UPDATE rooms SET version = version + 1,
|
||||
state = CASE WHEN ? = 0 AND NOT EXISTS (
|
||||
state = CASE WHEN ? = 0 AND NOT EXISTS (SELECT 1 FROM room_closures WHERE room_code = rooms.code AND closed = 1) AND NOT EXISTS (
|
||||
SELECT 1 FROM room_controls WHERE room_code = rooms.code AND paused = 1
|
||||
) THEN CASE WHEN json_valid(state) THEN CASE WHEN
|
||||
json_extract(state, '$.status') IN ('setup','playing') AND
|
||||
|
||||
Reference in new issue
Block a user