Add reversible administrator room archiving

Organize closed rooms with archive filters, live-authorized atomic receipts and exact saved retries. Preserve saved games, timestamps, credentials, discussion and AI deadlines. Unarchive leaves play closed; reopen requires unarchive, and removal/restoration preserves both flags.

Verified types, lint, 5379 offline tests, 52 HTTP tests and build. Twenty dedicated administrator HTTP groups and independent privacy/persistence review passed. Desktop/mobile browser QA confirmed a single archive after a lost response and refresh, readable recovery text, mobile unarchive and separate reopening, and saved-seat restoration. All 2,049 baseline rooms, 4,348 seats and related records preserved. Authenticated production admin acceptance awaits authorized QA access; full admin and rules gates remain open.

db/admin-closure.ts

@@ -11,13 +11,14 @@ const authority = `SELECT a.role FROM admin_sessions s JOIN admin_accounts a ON
   AND s.expires_at > ? AND s.generation = a.session_generation
   AND a.role IN ('owner','operator','viewer')`;
 const mutationAuthority = authority + " AND a.role IN ('owner','operator')";
-const roomSelect = `SELECT r.code,r.version,EXISTS (SELECT 1 FROM room_removals WHERE room_code = r.code AND removed = 1) AS removed,COALESCE(m.closed,0) AS closed,
+const roomSelect = `SELECT r.code,r.version,EXISTS (SELECT 1 FROM room_archives WHERE room_code = r.code AND archived = 1) AS archived,EXISTS (SELECT 1 FROM room_removals WHERE room_code = r.code AND removed = 1) AS removed,COALESCE(m.closed,0) AS closed,
   COALESCE(m.revision,0) AS revision,m.closed_at,m.updated_at,
   COALESCE(c.paused,0) AS paused,COALESCE(c.join_locked,0) AS join_locked
   FROM rooms r LEFT JOIN room_closures m ON m.room_code = r.code
   LEFT JOIN room_controls c ON c.room_code = r.code
   WHERE r.code = ? AND EXISTS (${authority})`;
 type Row = {
+  archived: number;
   removed: number;
   code: string;
   version: number;
@@ -38,6 +39,7 @@ type Receipt = {
 };
 const project = (row: Row): AdminClosureView => ({
   code: row.code,
+  ...(row.archived === 1 ? { archived: true as const } : {}),
   removed: row.removed === 1,
   version: row.version,
   closed: row.closed === 1,
@@ -139,6 +141,7 @@ export async function applyAdminClosure(
       LEFT JOIN room_controls c ON c.room_code = r.code
       WHERE r.code = ? AND r.version = ? AND COALESCE(m.revision,0) = ? AND COALESCE(m.closed,0) != ?
       AND EXISTS (${mutationAuthority})
+      AND NOT EXISTS (SELECT 1 FROM room_archives WHERE room_code = r.code AND archived = 1)
       AND NOT EXISTS (SELECT 1 FROM room_removals WHERE room_code = r.code AND removed = 1)
       AND NOT EXISTS (SELECT 1 FROM admin_room_closures WHERE operation_id = ?)`)
       .bind(
@@ -211,6 +214,7 @@ export async function applyAdminClosure(
   }
   if (!row) throw new AdminError('Room not found.', 404);
   if (row.removed) throw new AdminError('Restore this removed room before changing its closure.', 409);
+  if (row.archived) throw new AdminError('Unarchive this room before reopening it.', 409);
   if (row.version !== expectedVersion || row.revision !== expectedRevision)
     throw new AdminError(
       'The room or closure settings changed. Refresh before choosing a new operation.',