Stage 8: UI social/account/history surfaces

Wire the deferred Stage 7 surfaces end-to-end (UI -> gateway transcode ->
backend REST -> existing domain services): friends (incl. one-time friend
codes), per-user blocks, friend-game invitations, profile editing + email
binding, the statistics screen, and the in-game history + GCG export.

Friends gain two add paths (interview decision, a deliberate plan change):
one-time 6-digit codes (friend_codes table, 12h TTL, single-use, rate-limited
redeem); and play-gated requests (shared game required) where an explicit
decline is permanent, an ignored request lapses after 30 days, and a code
bypasses a decline. Migration 00006 widens friendships_status_chk and adds
friend_codes.

Lobby notification badge is poll + push: a new generic `notify` event drives
it live; the client polls on open/focus. Language stays a single Settings
control that writes through to the durable account's preferred_language. GCG
export is finished-only (game.ErrGameActive) and shares/downloads the .gcg file.

Tests: backend unit + inttest (friend gate/decline/code, ListInvitations,
GetStats, GCG gate), gateway transcode round-trips + notify constructor, UI
vitest (codecs, win-rate, share choice) + Playwright social specs. Docs: PLAN
(Stage 8 done + refinements + TODO-5), ARCHITECTURE, FUNCTIONAL(+ru), UI_DESIGN,
TESTING, module READMEs.

backend/internal/postgres/jet/backend/model/friend_codes.go

@@ -0,0 +1,22 @@
+//
+// Code generated by go-jet DO NOT EDIT.
+//
+// WARNING: Changes to this file may cause incorrect behavior
+// and will be lost if the code is regenerated
+//
+
+package model
+
+import (
+	"github.com/google/uuid"
+	"time"
+)
+
+type FriendCodes struct {
+	CodeID     uuid.UUID `sql:"primary_key"`
+	AccountID  uuid.UUID
+	CodeHash   string
+	ExpiresAt  time.Time
+	ConsumedAt *time.Time
+	CreatedAt  time.Time
+}

backend/internal/postgres/jet/backend/table/friend_codes.go

@@ -0,0 +1,93 @@
+//
+// Code generated by go-jet DO NOT EDIT.
+//
+// WARNING: Changes to this file may cause incorrect behavior
+// and will be lost if the code is regenerated
+//
+
+package table
+
+import (
+	"github.com/go-jet/jet/v2/postgres"
+)
+
+var FriendCodes = newFriendCodesTable("backend", "friend_codes", "")
+
+type friendCodesTable struct {
+	postgres.Table
+
+	// Columns
+	CodeID     postgres.ColumnString
+	AccountID  postgres.ColumnString
+	CodeHash   postgres.ColumnString
+	ExpiresAt  postgres.ColumnTimestampz
+	ConsumedAt postgres.ColumnTimestampz
+	CreatedAt  postgres.ColumnTimestampz
+
+	AllColumns     postgres.ColumnList
+	MutableColumns postgres.ColumnList
+	DefaultColumns postgres.ColumnList
+}
+
+type FriendCodesTable struct {
+	friendCodesTable
+
+	EXCLUDED friendCodesTable
+}
+
+// AS creates new FriendCodesTable with assigned alias
+func (a FriendCodesTable) AS(alias string) *FriendCodesTable {
+	return newFriendCodesTable(a.SchemaName(), a.TableName(), alias)
+}
+
+// Schema creates new FriendCodesTable with assigned schema name
+func (a FriendCodesTable) FromSchema(schemaName string) *FriendCodesTable {
+	return newFriendCodesTable(schemaName, a.TableName(), a.Alias())
+}
+
+// WithPrefix creates new FriendCodesTable with assigned table prefix
+func (a FriendCodesTable) WithPrefix(prefix string) *FriendCodesTable {
+	return newFriendCodesTable(a.SchemaName(), prefix+a.TableName(), a.TableName())
+}
+
+// WithSuffix creates new FriendCodesTable with assigned table suffix
+func (a FriendCodesTable) WithSuffix(suffix string) *FriendCodesTable {
+	return newFriendCodesTable(a.SchemaName(), a.TableName()+suffix, a.TableName())
+}
+
+func newFriendCodesTable(schemaName, tableName, alias string) *FriendCodesTable {
+	return &FriendCodesTable{
+		friendCodesTable: newFriendCodesTableImpl(schemaName, tableName, alias),
+		EXCLUDED:         newFriendCodesTableImpl("", "excluded", ""),
+	}
+}
+
+func newFriendCodesTableImpl(schemaName, tableName, alias string) friendCodesTable {
+	var (
+		CodeIDColumn     = postgres.StringColumn("code_id")
+		AccountIDColumn  = postgres.StringColumn("account_id")
+		CodeHashColumn   = postgres.StringColumn("code_hash")
+		ExpiresAtColumn  = postgres.TimestampzColumn("expires_at")
+		ConsumedAtColumn = postgres.TimestampzColumn("consumed_at")
+		CreatedAtColumn  = postgres.TimestampzColumn("created_at")
+		allColumns       = postgres.ColumnList{CodeIDColumn, AccountIDColumn, CodeHashColumn, ExpiresAtColumn, ConsumedAtColumn, CreatedAtColumn}
+		mutableColumns   = postgres.ColumnList{AccountIDColumn, CodeHashColumn, ExpiresAtColumn, ConsumedAtColumn, CreatedAtColumn}
+		defaultColumns   = postgres.ColumnList{CreatedAtColumn}
+	)
+
+	return friendCodesTable{
+		Table: postgres.NewTable(schemaName, tableName, alias, allColumns...),
+
+		//Columns
+		CodeID:     CodeIDColumn,
+		AccountID:  AccountIDColumn,
+		CodeHash:   CodeHashColumn,
+		ExpiresAt:  ExpiresAtColumn,
+		ConsumedAt: ConsumedAtColumn,
+		CreatedAt:  CreatedAtColumn,
+
+		AllColumns:     allColumns,
+		MutableColumns: mutableColumns,
+		DefaultColumns: defaultColumns,
+	}
+}

backend/internal/postgres/jet/backend/table/table_use_schema.go

@@ -16,6 +16,7 @@ func UseSchema(schema string) {
 	ChatMessages = ChatMessages.FromSchema(schema)
 	Complaints = Complaints.FromSchema(schema)
 	EmailConfirmations = EmailConfirmations.FromSchema(schema)
+	FriendCodes = FriendCodes.FromSchema(schema)
 	Friendships = Friendships.FromSchema(schema)
 	GameInvitationInvitees = GameInvitationInvitees.FromSchema(schema)
 	GameInvitations = GameInvitations.FromSchema(schema)

backend/internal/postgres/migrations/00006_friend_codes.sql

@@ -0,0 +1,45 @@
+-- +goose Up
+-- Stage 8 social UI: two changes to the friend graph.
+--
+-- 1. A declined friend request is now remembered permanently (status 'declined')
+--    instead of deleting the row, so a recipient's explicit "no" blocks the same
+--    requester from re-sending (anti-spam). An ignored request still lazily
+--    expires (30 days, computed from created_at in Go) and can then be re-sent; a
+--    one-time friend code from the same person bypasses a prior decline. This
+--    widens friendships_status_chk; the Stage 4 "declining deletes the row" rule
+--    is superseded (cancelling by the requester still deletes).
+--
+-- 2. friend_codes backs the code-redeem add-a-friend path: the player who wants to
+--    be added issues a one-time 6-digit numeric code; whoever enters it becomes
+--    their friend immediately. Only the hex-encoded SHA-256 of the code is stored
+--    (the plaintext is never persisted, matching the session and email-code
+--    models); expires_at bounds the 12h TTL and consumed_at marks single use. At
+--    most one live code exists per issuer (issuing a new one clears the prior
+--    unconsumed code, enforced in Go). This adds a table, so the generated jet code
+--    is regenerated (cmd/jetgen).
+SET search_path = backend, pg_catalog;
+
+ALTER TABLE friendships
+    DROP CONSTRAINT friendships_status_chk,
+    ADD CONSTRAINT friendships_status_chk CHECK (status IN ('pending', 'accepted', 'declined'));
+
+CREATE TABLE friend_codes (
+    code_id     uuid        PRIMARY KEY,
+    account_id  uuid        NOT NULL REFERENCES accounts (account_id) ON DELETE CASCADE,
+    code_hash   text        NOT NULL,
+    expires_at  timestamptz NOT NULL,
+    consumed_at timestamptz,
+    created_at  timestamptz NOT NULL DEFAULT now()
+);
+-- Backs "clear the issuer's prior live code" on issue.
+CREATE INDEX friend_codes_account_idx ON friend_codes (account_id);
+-- Backs the redeem lookup by code hash.
+CREATE INDEX friend_codes_code_hash_idx ON friend_codes (code_hash);
+
+-- +goose Down
+SET search_path = backend, pg_catalog;
+
+DROP TABLE friend_codes;
+ALTER TABLE friendships
+    DROP CONSTRAINT friendships_status_chk,
+    ADD CONSTRAINT friendships_status_chk CHECK (status IN ('pending', 'accepted'));