feat(admin): manual account blocking (suspensions)

Operator-driven hard block, the counterpart to the soft high-rate flag: permanent or until a date, with an optional reason chosen from an editable en+ru picklist (snapshotted onto the block). A block forfeits the player's active games (opponent wins, as a resignation) and cancels their open matchmaking games. A backend gate refuses a blocked account on every /api/v1/user/* route except the block-status probe with 403 account_blocked, which threads through the gateway as the Execute result_code; the UI surfaces it as a terminal blocked screen and stops all push/poll. Temporary blocks self-expire; the operator can unblock at any time (lost games stay lost). Sessions are not revoked, so the blocked client can still reach the exempt block-status endpoint. Backend: migration 00003 (account_suspensions + suspension_reasons) + jet regen; account suspension store; game.ForfeitAllForAccount; requireNotSuspended gate + block-status endpoint; admin console block/unblock + Reasons CRUD. Wire: fbs BlockStatus + account.block_status gateway op. UI: blocked screen, app state, transport/codec, i18n. Docs: ARCHITECTURE, FUNCTIONAL(+ru), PRERELEASE (AB).
2026-06-14 21:55:59 +02:00
parent 9d85090075
commit d1ba666495
48 changed files with 2206 additions and 2 deletions
@@ -0,0 +1,42 @@
+import { expect, test } from './fixtures';
+
+// The terminal blocked screen replaces every screen. The mock never blocks of its own accord, so
+// the e2e drives it through the mock-mode __block seam (lib/app.svelte.ts), mirroring what
+// enterBlocked does when any call returns the account_blocked code.
+
+test('a temporary block shows the dated message and reason, replacing the lobby', async ({
+  page,
+}) => {
+  await page.goto('/');
+  await page.getByRole('button', { name: /guest/i }).click();
+  await expect(page.getByText('Your turn')).toBeVisible(); // reached the lobby
+
+  await page.evaluate(() =>
+    (window as unknown as { __block: (b: unknown) => void }).__block({
+      permanent: false,
+      until: '2026-07-01T12:00:00Z',
+      reason: 'Спам',
+    }),
+  );
+
+  const blocked = page.locator('.blocked');
+  await expect(blocked).toBeVisible();
+  await expect(blocked).toContainText('2026'); // the expiry rendered in the user's locale/timezone
+  await expect(blocked).toContainText('Спам'); // the operator reason
+  // The lobby is gone: the blocked screen overlays every screen, stopping its push/poll.
+  await expect(page.getByText('Your turn')).toHaveCount(0);
+});
+
+test('a permanent block shows the permanent message with no date', async ({ page }) => {
+  await page.goto('/');
+  await page.getByRole('button', { name: /guest/i }).click();
+  await expect(page.getByText('Your turn')).toBeVisible();
+
+  await page.evaluate(() =>
+    (window as unknown as { __block: (b: unknown) => void }).__block({ permanent: true }),
+  );
+
+  const blocked = page.locator('.blocked');
+  await expect(blocked).toBeVisible();
+  await expect(blocked).not.toContainText('2026');
+});