Add stop confirmation to client power action

test/web/rule-editor-contract.test.js

@@ -40,6 +40,7 @@ test('rule editor add latency stays constant and dirty exits are guarded', () =>
 });
 
 test('critical confirmations share one accessible blocking popup', () => {
+  assert.match(component, /id="stop-connection"/);
   assert.match(component, /id="discard-local-rules"/);
   assert.match(component, /id="delete-subscription"/);
   assert.doesNotMatch(component, /client-local-rules-discard|client-delete-confirmation/);
@@ -47,9 +48,17 @@ test('critical confirmations share one accessible blocking popup', () => {
   assert.match(popup, /aria-modal="true"/);
   assert.match(popup, /querySelectorAll\(FOCUSABLE\)/);
   assert.match(popup, /element\.inert = true/);
+  assert.match(popup, /requestAnimationFrame\(\(\) => cancelRef\.current\?\.focus\(\)\)/);
   assert.match(styles, /\.client-confirmation-popup\.is-open[\s\S]*backdrop-filter: blur\(18px\)/);
 });
 
+test('power click and native Enter cannot stop VPN without a separate confirmation', () => {
+  assert.match(component, /className="client-power"[\s\S]*type="button"[\s\S]*onClick=\{toggleConnection\}/);
+  assert.match(component, /if \(action\?\.type === 'stop'\) \{[\s\S]*setConfirmingStop\(true\);[\s\S]*return;[\s\S]*\}/);
+  assert.doesNotMatch(component, /if \(action\?\.type === 'stop'\) return onStop\(\)/);
+  assert.match(component, /id="stop-connection"[\s\S]*cancelLabel="Оставить включённым"[\s\S]*confirmLabel="Отключить VPN"[\s\S]*onConfirm=\{stopConnection\}/);
+});
+
 test('copy feedback, drawers and Gateway access actions expose complete semantics', () => {
   assert.match(component, /className="client-live-region" role="status" aria-live="polite" aria-atomic="true"/);
   assert.match(component, /Не удалось скопировать/);