feat(gateway): add accountable admin controls

app/gateway-api/src/auth/inMemoryUserRepository.ts

@@ -157,6 +157,15 @@ export const createInMemoryUserRepository = (hasher: PasswordHasher = createSimp
             }
             throw new Error('User not found.');
         },
+        async updateKakaoGraceUntil(userId: string, until: Date | null): Promise<void> {
+            for (const user of usersByName.values()) {
+                if (user.id === userId) {
+                    user.kakaoGraceUntil = until?.toISOString();
+                    return;
+                }
+            }
+            throw new Error('User not found.');
+        },
         async updateIcon(userId: string, picture: string, imageServer: number, updatedAt: Date): Promise<void> {
             for (const user of usersByName.values()) {
                 if (user.id === userId) {

app/gateway-api/src/auth/localAccountPolicy.ts

@@ -47,6 +47,10 @@ export const resolveLocalAccountProfilePolicy = (options: {
     const graceStartedAt = new Date(options.user.kakaoGraceStartedAt);
     const now = options.now ?? new Date();
     const accessEndsAt = new Date(graceStartedAt.getTime() + accessGraceDays * DAY_MS);
+    const adminGraceUntil = options.user.kakaoGraceUntil ? new Date(options.user.kakaoGraceUntil) : null;
+    if (adminGraceUntil && Number.isFinite(adminGraceUntil.getTime()) && adminGraceUntil > accessEndsAt) {
+        accessEndsAt.setTime(adminGraceUntil.getTime());
+    }
     const generalCreationEndsAt = new Date(graceStartedAt.getTime() + generalCreationGraceDays * DAY_MS);
     const accessAllowed = kakaoVerified || bypass || now < accessEndsAt;
     const canCreateGeneral = kakaoVerified || bypass || (accessAllowed && now < generalCreationEndsAt);

app/gateway-api/src/auth/postgresUserRepository.ts

@@ -59,6 +59,7 @@ const mapUser = (row: {
     privacyAcceptedAt: Date | null;
     kakaoVerifiedAt: Date | null;
     kakaoGraceStartedAt: Date;
+    kakaoGraceUntil: Date | null;
     deleteAfter: Date | null;
     createdAt: Date;
     legacyData: GatewayPrisma.JsonValue;
@@ -83,6 +84,7 @@ const mapUser = (row: {
     privacyAcceptedAt: row.privacyAcceptedAt?.toISOString(),
     kakaoVerifiedAt: row.kakaoVerifiedAt?.toISOString(),
     kakaoGraceStartedAt: row.kakaoGraceStartedAt.toISOString(),
+    kakaoGraceUntil: row.kakaoGraceUntil?.toISOString(),
     deleteAfter: row.deleteAfter?.toISOString(),
     passwordHash: row.passwordHash,
     passwordSalt: row.passwordSalt,
@@ -250,6 +252,12 @@ export const createPostgresUserRepository = (
                 },
             });
         },
+        async updateKakaoGraceUntil(userId: string, until: Date | null): Promise<void> {
+            await prisma.appUser.update({
+                where: { id: userId },
+                data: { kakaoGraceUntil: until },
+            });
+        },
         async updateIcon(userId: string, picture: string, imageServer: number, updatedAt: Date): Promise<void> {
             await prisma.appUser.update({
                 where: { id: userId },

app/gateway-api/src/auth/userRepository.ts

@@ -19,6 +19,7 @@ export interface UserRecord {
     privacyAcceptedAt?: string;
     kakaoVerifiedAt?: string;
     kakaoGraceStartedAt: string;
+    kakaoGraceUntil?: string;
     deleteAfter?: string;
     passwordHash: string;
     passwordSalt: string;
@@ -120,6 +121,7 @@ export interface UserRepository {
     ): Promise<UserRecord>;
     updateRoles(userId: string, roles: string[]): Promise<void>;
     updateSanctions(userId: string, sanctions: UserSanctions): Promise<void>;
+    updateKakaoGraceUntil(userId: string, until: Date | null): Promise<void>;
     updateIcon(userId: string, picture: string, imageServer: number, updatedAt: Date): Promise<void>;
     updateIconForDay(
         userId: string,