[raphoester]

A player can now report a drawing on the map, and the operator can undo it. This is the backend and the game; the back office screens come next, in their own PR.

The player

• "Report a drawing" in Settings, beside Feedback. The next tap on the globe picks the tile instead of painting it. A banner says so, with Cancel; Escape cancels too.
• The tile opens a dialog: "A hateful symbol or words", "Something sexual" or "Something else", and optional details.
• support.v1.SupportService/ReportPlace(tile_id, reason, text), under the support limiter.
• ?tile=<id> opens the globe close up on that tile. The back office will link reports with it.

The operator

• ListPlaceReports and DecidePlaceReport, as for player reports. A place report is its own table. When the reporter's account is deleted, or the retention passes, the report stays and loses its reporter.
• One decision rule for both kinds of report: decisions.Decision[R], two tables.
• planet.v1.AdminService/RestoreArea(tile_id, rings, before, dry_run): the area is the tiles within rings tile spacings of the tile (1 to 50; a bomb is 8). It answers who painted the area since before, and puts each tile back as it was then. A dry run comes first.
  • The check is against the owner each tile holds when the restore runs, as a revert does. A tile somebody takes during the restore stays theirs.
  • The ledger in memory keeps 72 hours, so an older before is refused.
• ClearArea(tile_id, rings, dry_run) gives every owned tile of the area to nobody, for a drawing older than the ledger keeps.
• Every call is logged at Warn, dry runs included. deploy/vps/README.md has the console commands.

Known limits

• A reassign, a paint or a revert writes no ledger event, so RestoreArea cannot rewind what one of them changed.
• The ledger in memory keeps whole seconds, so before is cut to its second.

Tests

• Unit tests for the area, the rewind, both use cases, the place reports and the generic decisions.
• e2e/map_drawing_test.go: paint a tile over a flag, see the painter in a dry run, restore, clear; report a drawing, list it, close it; a deleted reporter.
• Game: the dialog, the tile link, and the whole flow checked in the browser in fake mode.

🤖 Generated with Claude Code