@openora/core 0.4.1-canary.124 → 0.4.1-canary.126

package/dist/engagement/chat/__tests__/room-ownership-handover.int.test.js

@@ -0,0 +1,736 @@
+import { describe, it, expect, beforeAll, afterAll, beforeEach, afterEach, vi } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { and, eq, sql } from 'drizzle-orm';
+import { createTestDb, createTestRedis, RedisPubSubRealtimeTransport, } from '@openora/core/testing';
+import { user } from '@openora/core/pam/schema/identity';
+import { migrate as migrateIdentity } from '@openora/core/pam/migrate/identity';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { NO_CLIENT_META, makeEventBus, makeIdentityReader, mock } from '../../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { CHAT_MEMBER_ROLE_CHANGED_SIGNAL, CHAT_ROOM_SCHEDULED_FOR_DELETION_SIGNAL, OWNERLESS_ROOM_RETENTION_DAYS, } from '../contract/constants.js';
+import { chatMessage, chatMute, chatPlatformBan, chatRoom, chatRoomBan, chatRoomConfiguration, chatRoomMember, chatRoomMute, chatRoomRemove, chatRoomRule, chatUserBlock, chatUserIgnore, } from '../schema/index.js';
+import { ChatService } from '../service/chat.service.js';
+import { ChatModerationService } from '../service/chat-moderation.service.js';
+import { ChatRoomBanService } from '../service/chat-room-ban.service.js';
+import { ChatRoomMembershipService } from '../service/chat-room-membership.service.js';
+import { ChatRoomNotModeratorError } from '../service/errors/chat-moderation.errors.js';
+import { ChatRoomPurgeService } from '../service/chat-room-purge.service.js';
+const DAY_MS = 24 * 60 * 60 * 1000;
+let db;
+let redis;
+const transports = [];
+function makeTransport() {
+    const transport = new RedisPubSubRealtimeTransport(redis.client, `chat-handover-test-${randomUUID()}`);
+    transports.push(transport);
+    return transport;
+}
+function makeServices(transport = makeTransport()) {
+    const events = makeEventBus();
+    const audit = mock({
+        record: vi.fn().mockResolvedValue(undefined),
+        recordInTransaction: vi.fn().mockResolvedValue(undefined),
+    });
+    const directory = mock({
+        lookupPlayers: async () => [],
+        lookupUsers: async (ids) => ids.map((id) => ({
+            id,
+            email: `${id}@example.com`,
+            name: id,
+            createdAt: new Date(),
+            isActive: true,
+            role: 'player',
+        })),
+    });
+    const identityReader = makeIdentityReader();
+    const moderation = new ChatModerationService(db.drizzle, transport, audit);
+    const chat = new ChatService({
+        drizzle: db.drizzle,
+        events,
+        transport,
+        directory,
+        audit,
+        moderation,
+        identityReader,
+        allowedAttachmentHosts: [],
+    });
+    const membership = new ChatRoomMembershipService(db.drizzle, events, audit, transport, identityReader);
+    const purge = new ChatRoomPurgeService(db.drizzle, events, transport, audit);
+    const ban = new ChatRoomBanService(db.drizzle, events, audit, transport, identityReader);
+    return { chat, membership, purge, ban, events, transport, audit };
+}
+async function seedPrivateRoom(services, ownerId, memberIds = []) {
+    const room = await services.chat.createPrivateRoom({
+        userId: ownerId,
+        name: 'Wheel Spin',
+        ...NO_CLIENT_META,
+    });
+    for (const userId of memberIds) {
+        await services.membership.joinRoom({ userId, joinCode: room.joinCode, ...NO_CLIENT_META });
+    }
+    return room;
+}
+async function promote(services, room, ownerId, userId, roleAssignedAt) {
+    await services.membership.setMemberRole({
+        actorId: ownerId,
+        roomId: room.id,
+        userId,
+        role: 'moderator',
+        ...NO_CLIENT_META,
+    });
+    if (roleAssignedAt !== undefined) {
+        await db.drizzle.db
+            .update(chatRoomMember)
+            .set({ roleAssignedAt })
+            .where(and(eq(chatRoomMember.roomId, room.id), eq(chatRoomMember.userId, userId)));
+    }
+}
+function readMember(roomId, userId) {
+    return db.drizzle.db
+        .select()
+        .from(chatRoomMember)
+        .where(and(eq(chatRoomMember.roomId, roomId), eq(chatRoomMember.userId, userId)))
+        .limit(1)
+        .then(([row]) => row);
+}
+function emittedAudience(services) {
+    const call = services.events.emit.mock.calls.find((args) => args[0] === 'chat.room.scheduled_for_deletion');
+    return call?.[1]?.memberIds ?? [];
+}
+function readRoom(roomId) {
+    return db.drizzle.db
+        .select()
+        .from(chatRoom)
+        .where(eq(chatRoom.id, roomId))
+        .limit(1)
+        .then(([row]) => row ?? null);
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateIdentity, migrateProfile]);
+    redis = await createTestRedis();
+});
+afterAll(async () => {
+    await db.drop();
+    await redis.quit();
+});
+afterEach(async () => {
+    await Promise.allSettled(transports.splice(0).map((t) => t.close()));
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${chatMessage}, ${chatRoomRule}, ${chatRoomConfiguration}, ${chatRoomMember}, ${chatRoomBan}, ${chatRoomMute}, ${chatRoomRemove}, ${chatMute}, ${chatPlatformBan}, ${chatUserBlock}, ${chatUserIgnore}, ${chatRoom}, ${user} RESTART IDENTITY CASCADE`);
+});
+describe('ChatRoomMembershipService.handleAccountClosed - transfer (real PG)', () => {
+    it('hands the room to the only moderator, moving both halves of ownership', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        const closedAt = new Date('2026-08-31T10:00:00.000Z');
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt });
+        const stored = await readRoom(room.id);
+        expect(stored?.creatorId).toBe(modId);
+        expect(stored?.scheduledDeletionAt).toBeNull();
+        const successor = await readMember(room.id, modId);
+        expect(successor.role).toBe('owner');
+        expect(successor.roleAssignedAt).toBeInstanceOf(Date);
+        const previous = await readMember(room.id, ownerId);
+        expect(previous).toMatchObject({ role: 'member', roleAssignedAt: null });
+        expect(previous.accountClosedAt?.toISOString()).toBe(closedAt.toISOString());
+        expect(services.events.emit).toHaveBeenCalledWith('chat.room.ownership.transferred', {
+            roomId: room.id,
+            roomName: 'Wheel Spin',
+            previousOwnerId: ownerId,
+            newOwnerId: modId,
+            reason: 'account-closed',
+        });
+    });
+    it('picks the moderator with the earliest assignment, skipping one already closed', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const [deadMod, earlyMod, lateMod] = [randomUUID(), randomUUID(), randomUUID()];
+        const room = await seedPrivateRoom(services, ownerId, [deadMod, earlyMod, lateMod]);
+        await promote(services, room, ownerId, deadMod, new Date('2026-01-01T00:00:00.000Z'));
+        await promote(services, room, ownerId, earlyMod, new Date('2026-02-01T00:00:00.000Z'));
+        await promote(services, room, ownerId, lateMod, new Date('2026-03-01T00:00:00.000Z'));
+        await services.membership.handleAccountClosed({
+            userId: deadMod,
+            closedAt: new Date('2026-08-01T00:00:00.000Z'),
+        });
+        await services.membership.handleAccountClosed({
+            userId: ownerId,
+            closedAt: new Date('2026-08-31T10:00:00.000Z'),
+        });
+        expect((await readRoom(room.id))?.creatorId).toBe(earlyMod);
+        expect((await readMember(room.id, earlyMod)).role).toBe('owner');
+        expect((await readMember(room.id, lateMod)).role).toBe('moderator');
+        expect(await readMember(room.id, deadMod)).toMatchObject({ role: 'moderator' });
+        expect((await readMember(room.id, deadMod)).accountClosedAt).toBeInstanceOf(Date);
+    });
+    it('falls back to joinedAt for moderators a backfill left without an assignment stamp', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const first = randomUUID();
+        const second = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [first, second]);
+        await promote(services, room, ownerId, first, null);
+        await promote(services, room, ownerId, second, null);
+        await db.drizzle.db
+            .update(chatRoomMember)
+            .set({ joinedAt: new Date('2020-01-01T00:00:00.000Z') })
+            .where(and(eq(chatRoomMember.roomId, room.id), eq(chatRoomMember.userId, second)));
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: new Date() });
+        expect((await readRoom(room.id))?.creatorId).toBe(second);
+    });
+    it('signals both the successor and the demoted owner so rosters refetch', async () => {
+        const signal = vi.fn();
+        const services = makeServices(Object.assign(makeTransport(), { signal }));
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        signal.mockClear();
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: new Date() });
+        expect(signal).toHaveBeenCalledWith(`chat:room:${room.id}`, CHAT_MEMBER_ROLE_CHANGED_SIGNAL, {
+            roomId: room.id,
+            userId: modId,
+            role: 'owner',
+        });
+        expect(signal).toHaveBeenCalledWith(`chat:room:${room.id}`, CHAT_MEMBER_ROLE_CHANGED_SIGNAL, {
+            roomId: room.id,
+            userId: ownerId,
+            role: 'member',
+        });
+    });
+});
+describe('ChatRoomMembershipService.handleAccountClosed - countdown (real PG)', () => {
+    it('starts a 30-day countdown and freezes administration when nobody can inherit', async () => {
+        const signal = vi.fn();
+        const services = makeServices(Object.assign(makeTransport(), { signal }));
+        const ownerId = randomUUID();
+        const memberIds = [randomUUID(), randomUUID()];
+        const room = await seedPrivateRoom(services, ownerId, memberIds);
+        const closedAt = new Date('2026-08-31T10:00:00.000Z');
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt });
+        const stored = await readRoom(room.id);
+        expect(stored?.creatorId).toBeNull();
+        expect(stored?.scheduledDeletionAt?.toISOString()).toBe(new Date(closedAt.getTime() + OWNERLESS_ROOM_RETENTION_DAYS * DAY_MS).toISOString());
+        expect(services.events.emit).toHaveBeenCalledWith('chat.room.scheduled_for_deletion', expect.objectContaining({
+            roomId: room.id,
+            roomName: 'Wheel Spin',
+            previousOwnerId: ownerId,
+            memberIds: expect.arrayContaining(memberIds),
+            scheduledDeletionAt: stored.scheduledDeletionAt.toISOString(),
+        }));
+        expect(emittedAudience(services)).not.toContain(ownerId);
+        expect(signal).toHaveBeenCalledWith(`chat:room:${room.id}`, CHAT_ROOM_SCHEDULED_FOR_DELETION_SIGNAL, { roomId: room.id, scheduledDeletionAt: stored.scheduledDeletionAt.toISOString() });
+    });
+    it('leaves a member whose own account is already closed out of the audience', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const activeId = randomUUID();
+        const closedId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [activeId, closedId]);
+        await services.membership.handleAccountClosed({
+            userId: closedId,
+            closedAt: new Date('2026-08-30T10:00:00.000Z'),
+        });
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({
+            userId: ownerId,
+            closedAt: new Date('2026-08-31T10:00:00.000Z'),
+        });
+        expect(emittedAudience(services)).toEqual([activeId]);
+        const roster = await services.chat.listRoomMembers({ roomId: room.id, viewerId: activeId });
+        expect(roster).toHaveLength(3);
+        expect(roster
+            .filter((m) => m.isDeletedAccount)
+            .map((m) => m.userId)
+            .sort()).toEqual([ownerId, closedId].sort());
+    });
+    it('leaves the room readable and writable for its members throughout the window (AC4)', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: new Date() });
+        await services.chat.sendRoomMessage({
+            userId: memberId,
+            username: 'bob',
+            roomId: room.id,
+            content: 'still here',
+        });
+        const messages = await services.chat.getRoomMessages({ roomId: room.id, viewerId: memberId });
+        expect(messages.map((m) => m.content)).toContain('still here');
+    });
+    it('never moves the deadline once it is running, whatever members do (AC6)', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        const closedAt = new Date('2026-08-31T10:00:00.000Z');
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt });
+        const deadline = (await readRoom(room.id)).scheduledDeletionAt;
+        await services.chat.sendRoomMessage({
+            userId: memberId,
+            username: 'bob',
+            roomId: room.id,
+            content: 'hello',
+        });
+        const latecomer = randomUUID();
+        await services.membership.joinRoom({
+            userId: latecomer,
+            joinCode: room.joinCode,
+            ...NO_CLIENT_META,
+        });
+        await services.membership.handleAccountClosed({
+            userId: ownerId,
+            closedAt: new Date('2026-09-15T10:00:00.000Z'),
+        });
+        expect((await readRoom(room.id)).scheduledDeletionAt?.toISOString()).toBe(deadline?.toISOString());
+    });
+    it('is a no-op the second time it runs for the same account', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        await services.membership.handleAccountClosed({
+            userId: ownerId,
+            closedAt: new Date('2026-08-31T10:00:00.000Z'),
+        });
+        const afterFirst = await readRoom(room.id);
+        const successorAfterFirst = await readMember(room.id, modId);
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({
+            userId: ownerId,
+            closedAt: new Date('2026-09-01T10:00:00.000Z'),
+        });
+        expect(await readRoom(room.id)).toEqual(afterFirst);
+        expect(await readMember(room.id, modId)).toEqual(successorAfterFirst);
+        expect(services.events.emit).not.toHaveBeenCalled();
+    });
+});
+describe('handleAccountClosed redelivery (real PG)', () => {
+    const CLOSED_AT = new Date('2026-08-31T10:00:00.000Z');
+    it('re-announces the countdown a previous delivery committed but may not have sent', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        const afterFirst = await readRoom(room.id);
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        expect(services.events.emit).toHaveBeenCalledWith('chat.room.scheduled_for_deletion', expect.objectContaining({
+            roomId: room.id,
+            previousOwnerId: ownerId,
+            scheduledDeletionAt: afterFirst.scheduledDeletionAt.toISOString(),
+        }));
+        expect(emittedAudience(services)).toEqual([memberId]);
+        expect(await readRoom(room.id)).toEqual(afterFirst);
+    });
+    it('re-announces a transfer, naming the successor the first delivery installed', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        const afterFirst = await readRoom(room.id);
+        const successorAfterFirst = await readMember(room.id, modId);
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        expect(services.events.emit).toHaveBeenCalledWith('chat.room.ownership.transferred', {
+            roomId: room.id,
+            roomName: room.name,
+            previousOwnerId: ownerId,
+            newOwnerId: modId,
+            reason: 'account-closed',
+        });
+        expect(await readRoom(room.id)).toEqual(afterFirst);
+        expect(await readMember(room.id, modId)).toEqual(successorAfterFirst);
+    });
+    it("says nothing about a room somebody else's closure changed", async () => {
+        const services = makeServices();
+        const firstOwnerId = randomUUID();
+        const secondOwnerId = randomUUID();
+        const room = await seedPrivateRoom(services, firstOwnerId, [secondOwnerId]);
+        await promote(services, room, firstOwnerId, secondOwnerId);
+        await services.membership.handleAccountClosed({ userId: firstOwnerId, closedAt: CLOSED_AT });
+        const secondClosedAt = new Date('2026-09-02T10:00:00.000Z');
+        await services.membership.handleAccountClosed({
+            userId: secondOwnerId,
+            closedAt: secondClosedAt,
+        });
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({ userId: firstOwnerId, closedAt: CLOSED_AT });
+        expect(services.events.emit).not.toHaveBeenCalled();
+    });
+    it('leaves a non-owner redelivery silent - there was nothing to announce', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: memberId, closedAt: CLOSED_AT });
+        services.events.emit.mockClear();
+        await services.membership.handleAccountClosed({ userId: memberId, closedAt: CLOSED_AT });
+        expect(services.events.emit).not.toHaveBeenCalled();
+    });
+});
+describe('ChatRoomMembershipService.handleAccountClosed - non-owners (real PG)', () => {
+    it('marks a closed moderator without transferring or starting a countdown', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        await services.membership.handleAccountClosed({ userId: modId, closedAt: new Date() });
+        const stored = await readRoom(room.id);
+        expect(stored?.creatorId).toBe(ownerId);
+        expect(stored?.scheduledDeletionAt).toBeNull();
+        expect((await readMember(room.id, modId)).accountClosedAt).toBeInstanceOf(Date);
+        expect((await readMember(room.id, ownerId)).role).toBe('owner');
+    });
+    it('marks a closed plain member and changes nothing else', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: memberId, closedAt: new Date() });
+        const stored = await readRoom(room.id);
+        expect(stored?.creatorId).toBe(ownerId);
+        expect(stored?.scheduledDeletionAt).toBeNull();
+        expect((await readMember(room.id, memberId)).accountClosedAt).toBeInstanceOf(Date);
+        expect(services.events.emit).not.toHaveBeenCalledWith('chat.room.scheduled_for_deletion', expect.anything());
+    });
+    it('leaves public rooms alone - they have no owner to inherit', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const [publicRoom] = await db.drizzle.db
+            .insert(chatRoom)
+            .values({ name: 'Lobby', slug: `lobby-${randomUUID()}`, isPublic: true })
+            .returning();
+        await services.membership.joinPublicRoom({
+            roomId: publicRoom.id,
+            userId: ownerId,
+            ...NO_CLIENT_META,
+        });
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: new Date() });
+        expect((await readMember(publicRoom.id, ownerId)).accountClosedAt).toBeNull();
+        expect((await readRoom(publicRoom.id))?.scheduledDeletionAt).toBeNull();
+    });
+});
+describe('handleAccountClosed against a concurrent membership write (real PG)', () => {
+    const settle = () => new Promise((resolve) => setTimeout(resolve, 150));
+    function holdRoomLock(roomId) {
+        let held;
+        const acquired = new Promise((resolve) => {
+            held = resolve;
+        });
+        let release;
+        const work = new Promise((resolve) => {
+            release = resolve;
+        });
+        const done = db.drizzle.db.transaction(async (t) => {
+            await t.execute(sql `select pg_advisory_xact_lock(hashtext(${`chat-room:${roomId}`}))`);
+            held();
+            await (await work)(t);
+        });
+        return { acquired, release: (w) => release(w), done };
+    }
+    const handoverWrites = (roomId, closedOwnerId, successorId) => async (t) => {
+        await t
+            .update(chatRoomMember)
+            .set({ role: 'owner', roleAssignedAt: new Date() })
+            .where(and(eq(chatRoomMember.roomId, roomId), eq(chatRoomMember.userId, successorId)));
+        await t
+            .update(chatRoomMember)
+            .set({ role: 'member', roleAssignedAt: null, accountClosedAt: new Date() })
+            .where(and(eq(chatRoomMember.roomId, roomId), eq(chatRoomMember.userId, closedOwnerId)));
+        await t.update(chatRoom).set({ creatorId: successorId }).where(eq(chatRoom.id, roomId));
+    };
+    it('starts the countdown rather than naming a creator whose membership vanished mid-transfer', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        const closedAt = new Date('2026-08-31T10:00:00.000Z');
+        let commitDelete;
+        const deleteCommitted = new Promise((resolve) => {
+            commitDelete = resolve;
+        });
+        const deleting = db.drizzle.db.transaction(async (t) => {
+            await t
+                .delete(chatRoomMember)
+                .where(and(eq(chatRoomMember.roomId, room.id), eq(chatRoomMember.userId, modId)));
+            await deleteCommitted;
+        });
+        await settle();
+        const handover = services.membership.handleAccountClosed({ userId: ownerId, closedAt });
+        await settle();
+        commitDelete();
+        await deleting;
+        await handover;
+        const stored = await readRoom(room.id);
+        expect(stored?.creatorId).toBeNull();
+        expect(stored?.scheduledDeletionAt?.toISOString()).toBe(new Date(closedAt.getTime() + OWNERLESS_ROOM_RETENTION_DAYS * DAY_MS).toISOString());
+    });
+    it('makes removeMember wait on the room lock and re-read the roles it was authorized against', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        const lock = holdRoomLock(room.id);
+        await lock.acquired;
+        const removing = services.membership.removeMember({
+            moderatorId: ownerId,
+            roomId: room.id,
+            userId: modId,
+            ...NO_CLIENT_META,
+        });
+        const outcome = removing.then(() => 'settled', () => 'settled');
+        expect(await Promise.race([outcome, settle().then(() => 'blocked')])).toBe('blocked');
+        lock.release(handoverWrites(room.id, ownerId, modId));
+        await lock.done;
+        await expect(removing).rejects.toBeInstanceOf(ChatRoomNotModeratorError);
+        expect((await readMember(room.id, modId)).role).toBe('owner');
+        expect((await readRoom(room.id))?.creatorId).toBe(modId);
+    });
+    it('authorizes banMember inside the room lock, so a demoted owner cannot ban their successor', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        const lock = holdRoomLock(room.id);
+        await lock.acquired;
+        const banning = services.ban.banMember({
+            moderatorId: ownerId,
+            roomId: room.id,
+            userId: modId,
+            ...NO_CLIENT_META,
+        });
+        const outcome = banning.then(() => 'settled', () => 'settled');
+        expect(await Promise.race([outcome, settle().then(() => 'blocked')])).toBe('blocked');
+        lock.release(handoverWrites(room.id, ownerId, modId));
+        await lock.done;
+        await expect(banning).rejects.toBeInstanceOf(ChatRoomNotModeratorError);
+        expect(await readMember(room.id, modId)).toMatchObject({ role: 'owner' });
+    });
+});
+describe('ChatRoomMembershipService.handleAccountReopened (real PG)', () => {
+    const CLOSED_AT = new Date('2026-08-31T10:00:00.000Z');
+    it('cancels the countdown and gives the room back to the owner who came back', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        expect((await readRoom(room.id))?.scheduledDeletionAt).not.toBeNull();
+        await services.membership.handleAccountReopened({ userId: ownerId });
+        const restored = await readRoom(room.id);
+        expect(restored?.scheduledDeletionAt).toBeNull();
+        expect(restored?.creatorId).toBe(ownerId);
+        const owner = await readMember(room.id, ownerId);
+        expect(owner.role).toBe('owner');
+        expect(owner.accountClosedAt).toBeNull();
+        await expect(services.chat.updatePrivateRoom({
+            id: room.id,
+            actorId: ownerId,
+            name: 'Back In Business',
+            ...NO_CLIENT_META,
+        })).resolves.toBeDefined();
+        const cancelled = services.events.emit.mock.calls.find((args) => args[0] === 'chat.room.deletion.cancelled');
+        expect(cancelled?.[1]).toMatchObject({ roomId: room.id, ownerId });
+        expect((cancelled?.[1]).memberIds).toEqual(expect.arrayContaining([ownerId, memberId]));
+    });
+    it('clears the deleted-account flag but leaves a room a moderator inherited alone', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const modId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [modId]);
+        await promote(services, room, ownerId, modId);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        expect((await readRoom(room.id))?.creatorId).toBe(modId);
+        await services.membership.handleAccountReopened({ userId: ownerId });
+        expect((await readRoom(room.id))?.creatorId).toBe(modId);
+        const previousOwner = await readMember(room.id, ownerId);
+        expect(previousOwner.role).toBe('member');
+        expect(previousOwner.accountClosedAt).toBeNull();
+        expect(services.events.emit.mock.calls.some((args) => args[0] === 'chat.room.deletion.cancelled')).toBe(false);
+    });
+    it('does not hand a room to a plain member whose own account reopens', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({
+            userId: memberId,
+            closedAt: new Date('2026-08-30T10:00:00.000Z'),
+        });
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        await services.membership.handleAccountReopened({ userId: memberId });
+        const room2 = await readRoom(room.id);
+        expect(room2?.creatorId).toBeNull();
+        expect(room2?.scheduledDeletionAt).toEqual(new Date(CLOSED_AT.getTime() + 30 * DAY_MS));
+        expect((await readMember(room.id, memberId)).accountClosedAt).toBeNull();
+        expect((await readMember(room.id, memberId)).role).toBe('member');
+    });
+    it('is a no-op the second time, so a redelivery cannot re-announce', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        await services.membership.handleAccountReopened({ userId: ownerId });
+        services.events.emit.mockClear();
+        await services.membership.handleAccountReopened({ userId: ownerId });
+        expect(services.events.emit).not.toHaveBeenCalled();
+        expect((await readRoom(room.id))?.creatorId).toBe(ownerId);
+    });
+    it('stops the purge that would otherwise have deleted the room anyway', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: CLOSED_AT });
+        await services.membership.handleAccountReopened({ userId: ownerId });
+        expect(await services.purge.listDueRooms(100)).toEqual([]);
+        expect(await services.purge.purgeRoom(room.id)).toBe(false);
+        expect(await readRoom(room.id)).not.toBeNull();
+    });
+});
+describe('ChatService.listRoomMembers with a closed account (real PG)', () => {
+    it('keeps the closed member on the roster, flagged', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.membership.handleAccountClosed({ userId: ownerId, closedAt: new Date() });
+        const members = await services.chat.listRoomMembers({ roomId: room.id, viewerId: memberId });
+        expect(members).toEqual(expect.arrayContaining([
+            expect.objectContaining({ userId: ownerId, isDeletedAccount: true }),
+            expect.objectContaining({ userId: memberId, isDeletedAccount: false }),
+        ]));
+    });
+});
+describe('ChatRoomPurgeService (real PG)', () => {
+    async function seedRoom(overrides) {
+        const [row] = await db.drizzle.db
+            .insert(chatRoom)
+            .values({ name: 'Room', slug: `room-${randomUUID()}`, isPublic: false, ...overrides })
+            .returning();
+        return row;
+    }
+    it('hard-deletes a room past its deadline together with everything hanging off it', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        await services.chat.sendRoomMessage({
+            userId: memberId,
+            username: 'bob',
+            roomId: room.id,
+            content: 'goodbye',
+        });
+        await db.drizzle.db.insert(chatPlatformBan).values({
+            userId: memberId,
+            bannedBy: ownerId,
+            scope: 'room',
+            roomId: room.id,
+            reason: 'spam',
+        });
+        await db.drizzle.db
+            .insert(chatMute)
+            .values({ userId: memberId, roomId: room.id, mutedBy: ownerId, reason: 'spam' });
+        await db.drizzle.db
+            .update(chatRoom)
+            .set({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) })
+            .where(eq(chatRoom.id, room.id));
+        await expect(services.purge.purgeRoom(room.id)).resolves.toBe(true);
+        expect(await readRoom(room.id)).toBeNull();
+        expect(await db.drizzle.db.select().from(chatMessage).where(eq(chatMessage.roomId, room.id))).toHaveLength(0);
+        expect(await db.drizzle.db.select().from(chatRoomMember).where(eq(chatRoomMember.roomId, room.id))).toHaveLength(0);
+        expect(await db.drizzle.db.select().from(chatPlatformBan).where(eq(chatPlatformBan.roomId, room.id))).toHaveLength(0);
+        expect(await db.drizzle.db.select().from(chatMute).where(eq(chatMute.roomId, room.id))).toHaveLength(0);
+    });
+    it('leaves a public room, a null-deadline room and a future-deadline room untouched', async () => {
+        const services = makeServices();
+        const publicRoom = await seedRoom({
+            isPublic: true,
+            scheduledDeletionAt: new Date(Date.now() - DAY_MS),
+        });
+        const noDeadline = await seedRoom({});
+        const future = await seedRoom({ scheduledDeletionAt: new Date(Date.now() + DAY_MS) });
+        const soft = await seedRoom({
+            deletedAt: new Date(),
+            scheduledDeletionAt: new Date(Date.now() - DAY_MS),
+        });
+        await expect(services.purge.listDueRooms(100)).resolves.toEqual([]);
+        for (const room of [publicRoom, noDeadline, future, soft]) {
+            await expect(services.purge.purgeRoom(room.id)).resolves.toBe(false);
+            expect(await readRoom(room.id)).not.toBeNull();
+        }
+    });
+    it('emits the purge event carrying the message count', async () => {
+        const services = makeServices();
+        const ownerId = randomUUID();
+        const memberId = randomUUID();
+        const room = await seedPrivateRoom(services, ownerId, [memberId]);
+        for (const content of ['one', 'two']) {
+            await services.chat.sendRoomMessage({
+                userId: memberId,
+                username: 'bob',
+                roomId: room.id,
+                content,
+            });
+        }
+        await db.drizzle.db
+            .update(chatRoom)
+            .set({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) })
+            .where(eq(chatRoom.id, room.id));
+        await services.purge.purgeRoom(room.id);
+        expect(services.audit.recordInTransaction).toHaveBeenCalledWith(expect.anything(), expect.objectContaining({
+            actorType: 'system',
+            action: 'chat.private_room.purged',
+            resourceType: 'chat_room',
+            resourceId: room.id,
+            after: { messageCount: 2 },
+        }));
+        expect(services.events.emit).toHaveBeenCalledWith('chat.private_room.purged', {
+            roomId: room.id,
+            messageCount: 2,
+        });
+    });
+    it('takes the room down with the audit write when the audit write fails', async () => {
+        const services = makeServices();
+        const room = await seedRoom({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) });
+        vi.mocked(services.audit.recordInTransaction).mockRejectedValueOnce(new Error('audit down'));
+        await expect(services.purge.purgeRoom(room.id)).rejects.toThrow('audit down');
+        expect(await readRoom(room.id)).not.toBeNull();
+    });
+    it('hands out only what is due, leaving the rest of the countdown running', async () => {
+        const services = makeServices();
+        const due = await seedRoom({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) });
+        const notYet = await seedRoom({ scheduledDeletionAt: new Date(Date.now() + 30 * DAY_MS) });
+        await expect(services.purge.listDueRooms(100)).resolves.toEqual([due.id]);
+        await services.purge.purgeRoom(due.id);
+        expect(await readRoom(due.id)).toBeNull();
+        expect(await readRoom(notYet.id)).not.toBeNull();
+    });
+    it('caps one tick at the batch limit, oldest deadline first', async () => {
+        const services = makeServices();
+        const oldest = await seedRoom({ scheduledDeletionAt: new Date(Date.now() - 3 * DAY_MS) });
+        const middle = await seedRoom({ scheduledDeletionAt: new Date(Date.now() - 2 * DAY_MS) });
+        await seedRoom({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) });
+        await expect(services.purge.listDueRooms(2)).resolves.toEqual([oldest.id, middle.id]);
+    });
+    it('is a no-op the second time a job runs for the same room', async () => {
+        const services = makeServices();
+        const room = await seedRoom({ scheduledDeletionAt: new Date(Date.now() - DAY_MS) });
+        await expect(services.purge.purgeRoom(room.id)).resolves.toBe(true);
+        await expect(services.purge.purgeRoom(room.id)).resolves.toBe(false);
+        expect(services.audit.recordInTransaction).toHaveBeenCalledTimes(1);
+    });
+});
+//# sourceMappingURL=room-ownership-handover.int.test.js.map