Añade gold y transfer: patrón de pago unificado con fulfill + metadata

- lib/stripe.ts: createCheckoutSession acepta metadata; claimPaidCheckout la
  recupera de la sesión Stripe y la devuelve.
- lib/paid-services.ts: config unificado con fulfill(character, meta) + extraFields.
  gold -> UPDATE characters money (BD directa, no SOAP), transfer -> SOAP
  .char changeaccount. Los 5 simples usan soapFulfill.
- checkout [service]: lee extraFields -> metadata, precio depende de metadata (gold),
  valida precio>0. service-success llama cfg.fulfill(name, metadata).
- prices.ts: getTransferPrice, getGoldOptions/goldPriceFor (home_goldprice).
- GoldForm (personaje + cantidad) y TransferForm (personaje + destino); páginas
  /gold y /transfer. Catálogos Paid.gold/transfer.

Verificado: /gold /transfer redirigen a login, checkout 401 sin sesión, home OK.
NOTA: transfer no valida aún el token de seguridad ni reglas AC (nivel>=55, DK).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/lib/paid-services.ts

@@ -1,44 +1,82 @@
+import { executeSoapCommand } from './soap'
+import { db, DB } from './db'
 import {
   getRenamePrice,
   getCustomizePrice,
   getChangeRacePrice,
   getChangeFactionPrice,
   getLevelUpPrice,
+  getTransferPrice,
+  goldPriceFor,
 } from './prices'
 
+type Meta = Record<string, string>
+
 export interface PaidServiceConfig {
-  command: (character: string) => string
-  getPrice: () => Promise<number>
-  productName: (character: string) => string
+  price: (meta: Meta) => Promise<number>
+  productName: (character: string, meta: Meta) => string
+  fulfill: (character: string, meta: Meta) => Promise<boolean>
+  extraFields: string[] // campos (además de character) que el form envía y se guardan en metadata
+}
+
+async function soapFulfill(command: string): Promise<boolean> {
+  return (await executeSoapCommand(command)) !== null
+}
+
+async function addGold(character: string, goldAmount: number): Promise<boolean> {
+  try {
+    await db(DB.characters).query('UPDATE characters SET money = money + ? WHERE name = ?', [
+      goldAmount * 10000,
+      character,
+    ])
+    return true
+  } catch {
+    return false
+  }
 }
 
-// Servicios de personaje de pago. slug = ruta (/rename, /customize, ...) y clave de
-// catálogo (Paid.<slug>). Comandos SOAP tal cual las success views de Django.
 export const PAID_SERVICES: Record<string, PaidServiceConfig> = {
   rename: {
-    command: (c) => `.char rename ${c}`,
-    getPrice: getRenamePrice,
+    price: () => getRenamePrice(),
     productName: (c) => `Renombrar personaje: ${c}`,
+    fulfill: (c) => soapFulfill(`.char rename ${c}`),
+    extraFields: [],
   },
   customize: {
-    command: (c) => `.char customi ${c}`,
-    getPrice: getCustomizePrice,
+    price: () => getCustomizePrice(),
     productName: (c) => `Personalizar personaje: ${c}`,
+    fulfill: (c) => soapFulfill(`.char customi ${c}`),
+    extraFields: [],
   },
   'change-race': {
-    command: (c) => `.char changerace ${c}`,
-    getPrice: getChangeRacePrice,
+    price: () => getChangeRacePrice(),
     productName: (c) => `Cambiar raza: ${c}`,
+    fulfill: (c) => soapFulfill(`.char changerace ${c}`),
+    extraFields: [],
   },
   'change-faction': {
-    command: (c) => `.char changef ${c}`,
-    getPrice: getChangeFactionPrice,
+    price: () => getChangeFactionPrice(),
     productName: (c) => `Cambiar facción: ${c}`,
+    fulfill: (c) => soapFulfill(`.char changef ${c}`),
+    extraFields: [],
   },
   'level-up': {
-    command: (c) => `.char level ${c} 80`,
-    getPrice: getLevelUpPrice,
+    price: () => getLevelUpPrice(),
     productName: (c) => `Subir a nivel 80: ${c}`,
+    fulfill: (c) => soapFulfill(`.char level ${c} 80`),
+    extraFields: [],
+  },
+  gold: {
+    price: (m) => goldPriceFor(Number(m.gold_amount)),
+    productName: (c, m) => `Aumentar el Oro: ${m.gold_amount} al Personaje: ${c}`,
+    fulfill: (c, m) => addGold(c, Number(m.gold_amount)),
+    extraFields: ['gold_amount'],
+  },
+  transfer: {
+    price: () => getTransferPrice(),
+    productName: (c, m) => `Transferir ${c} a la cuenta ${m.destination_account}`,
+    fulfill: (c, m) => soapFulfill(`.char changeaccount ${m.destination_account} ${c}`),
+    extraFields: ['destination_account'],
   },
 }
 

web-next/lib/prices.ts

@@ -15,3 +15,26 @@ export const getCustomizePrice = () => priceFrom('home_customizeprice', 1.0)
 export const getChangeRacePrice = () => priceFrom('home_changeraceprice', 10.0)
 export const getChangeFactionPrice = () => priceFrom('home_changefactionprice', 10.0)
 export const getLevelUpPrice = () => priceFrom('home_levelupprice', 10.0)
+export const getTransferPrice = () => priceFrom('home_transferprice', 10.0)
+
+export interface GoldOption {
+  gold_amount: number
+  price: number
+}
+
+export async function getGoldOptions(): Promise<GoldOption[]> {
+  try {
+    const [rows] = await db(DB.default).query<RowDataPacket[]>(
+      'SELECT gold_amount, price FROM home_goldprice ORDER BY gold_amount',
+    )
+    return rows.map((r) => ({ gold_amount: r.gold_amount, price: Number(r.price) }))
+  } catch {
+    return []
+  }
+}
+
+/** Precio de una cantidad de oro concreta (0 si no existe esa opción). */
+export async function goldPriceFor(goldAmount: number): Promise<number> {
+  const opts = await getGoldOptions()
+  return opts.find((o) => o.gold_amount === goldAmount)?.price ?? 0
+}

web-next/lib/stripe.ts

@@ -25,6 +25,7 @@ export interface CheckoutParams {
   successUrl: string
   cancelUrl: string
   currency?: string
+  metadata?: Record<string, string>
 }
 
 /** Crea una sesión de pago Stripe y registra el StripeLog. Devuelve la URL de checkout. */
@@ -49,6 +50,7 @@ export async function createCheckoutSession(
       mode: 'payment',
       success_url: successUrl,
       cancel_url: p.cancelUrl,
+      metadata: p.metadata,
     })
     const mode = (process.env.STRIPE_SECRET_KEY || '').startsWith('sk_live') ? 'live' : 'test'
     await db(DB.default).query(
@@ -67,8 +69,18 @@ export async function createCheckoutSession(
  * (evita re-entregas). Devuelve el character_name del log o null. (Port de
  * require_paid_stripe.)
  */
-export async function claimPaidCheckout(sessionId: string): Promise<{ characterName: string } | null> {
-  if (!(await isSessionPaid(sessionId))) return null
+export async function claimPaidCheckout(
+  sessionId: string,
+): Promise<{ characterName: string; metadata: Record<string, string> } | null> {
+  if (!sessionId) return null
+  let metadata: Record<string, string> = {}
+  try {
+    const s = await stripe.checkout.sessions.retrieve(sessionId)
+    if (s.payment_status !== 'paid') return null
+    metadata = (s.metadata as Record<string, string>) ?? {}
+  } catch {
+    return null
+  }
   const [rows] = await db(DB.default).query<RowDataPacket[]>(
     'SELECT id, character_name, fulfilled FROM home_stripelog WHERE session_id = ?',
     [sessionId],
@@ -76,5 +88,5 @@ export async function claimPaidCheckout(sessionId: string): Promise<{ characterN
   const log = rows[0]
   if (!log || log.fulfilled) return null
   await db(DB.default).query('UPDATE home_stripelog SET fulfilled = 1 WHERE id = ?', [log.id])
-  return { characterName: log.character_name }
+  return { characterName: log.character_name, metadata }
 }