d-points: dejar sólo Stripe y SumUp con compra de PD funcional

Elimina las pestañas de PayPal/dLocal/Crypto/Skrill y por país; deja Información + Stripe + SumUp (las dos únicas pasarelas que se usarán). - Stripe: totalmente funcional reutilizando createCheckoutSession + webhook + página de éxito. Nueva ruta /api/dpoints/checkout crea la sesión con importe elegido por el usuario (1 unidad = 100 PD). - SumUp: integración real (lib/sumup.ts) mediante checkout hospedado, habilitada al definir SUMUP_API_KEY/SUMUP_MERCHANT_CODE; si no, avisa. - Nuevo servicio de entrega `dpoints` (lib/paid-services.ts) que acredita PD en home_api_points; entrega idempotente vía reclamo atómico. - Página /d-points-success entrega ambos proveedores (session_id/ref). - Iconos SVG generados para cada pasarela (stripe/sumup, marca + wordmark). - Moneda configurable con DP_CURRENCY (por defecto EUR). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 17:14:29 +00:00
parent 44fcedbe62
commit 89f6e5689f
13 changed files with 453 additions and 693 deletions
@@ -0,0 +1,27 @@
+import type { RowDataPacket } from 'mysql2'
+import { db, DB } from './db'
+
+/** Ratio de conversión: cada 1 unidad de moneda = 100 PD. */
+export const PD_PER_UNIT = 100
+/** Límites de compra por transacción (en unidades de moneda). */
+export const DP_MIN_AMOUNT = 1
+export const DP_MAX_AMOUNT = 200
+
+/** Acredita PD (donate points) a una cuenta de juego en `home_api_points` (upsert). */
+export async function creditDPoints(accountId: number, points: number): Promise<boolean> {
+  if (!accountId || !(points > 0)) return false
+  try {
+    const [rows] = await db(DB.default).query<RowDataPacket[]>(
+      'SELECT id FROM home_api_points WHERE accountID = ?',
+      [accountId],
+    )
+    if (rows[0]) {
+      await db(DB.default).query('UPDATE home_api_points SET dp = dp + ? WHERE accountID = ?', [points, accountId])
+    } else {
+      await db(DB.default).query('INSERT INTO home_api_points (accountID, vp, dp) VALUES (?, 0, ?)', [accountId, points])
+    }
+    return true
+  } catch {
+    return false
+  }
+}
@@ -1,5 +1,6 @@
 import { executeSoapCommand } from './soap'
 import { db, DB } from './db'
+import { creditDPoints } from './dpoints'
 import {
  getRenamePrice,
  getCustomizePrice,
@@ -78,6 +79,14 @@ export const PAID_SERVICES: Record<string, PaidServiceConfig> = {
    fulfill: (c, m) => soapFulfill(`.char changeaccount ${m.destination_account} ${c}`),
    extraFields: ['destination_account'],
  },
+  // Compra de PD (Adquirir PD): acredita puntos a la cuenta que hizo el pago.
+  // El importe lo elige el usuario, por eso `price` lee metadata.amount.
+  dpoints: {
+    price: (m) => Promise.resolve(Number(m.amount)),
+    productName: (_c, m) => `${Number(m.points)} PD`,
+    fulfill: (_c, m) => creditDPoints(Number(m.accountId), Number(m.points)),
+    extraFields: [],
+  },
 }

 export function getPaidService(slug: string): PaidServiceConfig | null {
@@ -0,0 +1,108 @@
+import type { RowDataPacket, ResultSetHeader } from 'mysql2'
+import { db, DB } from './db'
+import { creditDPoints, PD_PER_UNIT } from './dpoints'
+
+const API = 'https://api.sumup.com/v0.1'
+
+/** SumUp está disponible sólo si hay API key y merchant code configurados. */
+export function sumupConfigured(): boolean {
+  return Boolean(process.env.SUMUP_API_KEY && process.env.SUMUP_MERCHANT_CODE)
+}
+
+function authHeaders(): Record<string, string> {
+  return {
+    Authorization: `Bearer ${process.env.SUMUP_API_KEY}`,
+    'Content-Type': 'application/json',
+  }
+}
+
+interface CreateParams {
+  accountId: number
+  username: string
+  email: string
+  acoreIp: string
+  amount: number // importe en la moneda del comercio
+  points: number
+  reference: string
+  description: string
+  returnUrl: string
+}
+
+/**
+ * Crea un checkout hospedado de SumUp y registra el pago en `home_stripelog`
+ * (reutilizamos la tabla de logs; `mode = 'sumup'`, `session_id = reference`).
+ * Devuelve la URL del checkout hospedado para redirigir al usuario.
+ */
+export async function createSumUpCheckout(p: CreateParams): Promise<{ success: boolean; url?: string; error?: string }> {
+  if (!sumupConfigured()) return { success: false, error: 'notConfigured' }
+  try {
+    const res = await fetch(`${API}/checkouts`, {
+      method: 'POST',
+      headers: authHeaders(),
+      body: JSON.stringify({
+        checkout_reference: p.reference,
+        amount: p.amount,
+        currency: process.env.SUMUP_CURRENCY || 'EUR',
+        merchant_code: process.env.SUMUP_MERCHANT_CODE,
+        description: p.description,
+        return_url: p.returnUrl,
+        hosted_checkout: { enabled: true },
+      }),
+    })
+    if (!res.ok) return { success: false, error: `sumup_${res.status}` }
+    const data: { id?: string; hosted_checkout_url?: string } = await res.json()
+    const url = data.hosted_checkout_url
+    if (!url) return { success: false, error: 'noHostedUrl' }
+
+    await db(DB.default).query(
+      'INSERT INTO home_stripelog (account_id, username, email, acore_ip, stripe_ip, product_name, amount, session_id, mode, character_name, timestamp, fulfilled) ' +
+        'VALUES (?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, NOW(), 0)',
+      [p.accountId, p.username, p.email, p.acoreIp, p.description, p.amount, p.reference, 'sumup', p.username],
+    )
+    return { success: true, url }
+  } catch (e) {
+    return { success: false, error: String(e) }
+  }
+}
+
+/** ¿El checkout con esta referencia está PAGADO en SumUp? */
+async function isReferencePaid(reference: string): Promise<boolean> {
+  try {
+    const res = await fetch(`${API}/checkouts?checkout_reference=${encodeURIComponent(reference)}`, {
+      headers: authHeaders(),
+    })
+    if (!res.ok) return false
+    const list: { status?: string }[] = await res.json()
+    return Array.isArray(list) && list.some((c) => c.status === 'PAID')
+  } catch {
+    return false
+  }
+}
+
+/**
+ * Entrega un checkout SumUp pagado: verifica el estado, reclama de forma atómica
+ * (fulfilled 0->1) y acredita los PD. Idempotente. Devuelve true si acreditó ahora.
+ */
+export async function fulfillSumUpCheckout(reference: string): Promise<{ ok: boolean; paid: boolean }> {
+  if (!reference) return { ok: false, paid: false }
+  const paid = await isReferencePaid(reference)
+  if (!paid) return { ok: false, paid: false }
+
+  const [rows] = await db(DB.default).query<RowDataPacket[]>(
+    'SELECT id, account_id, amount FROM home_stripelog WHERE session_id = ? AND mode = ?',
+    [reference, 'sumup'],
+  )
+  const log = rows[0]
+  if (!log) return { ok: false, paid: true }
+
+  // Reclamo atómico: sólo gana quien pasa fulfilled 0->1.
+  const [res] = await db(DB.default).query<ResultSetHeader>(
+    'UPDATE home_stripelog SET fulfilled = 1 WHERE id = ? AND fulfilled = 0',
+    [log.id],
+  )
+  if (res.affectedRows === 0) return { ok: false, paid: true }
+
+  const points = Math.round(Number(log.amount) * PD_PER_UNIT)
+  const ok = await creditDPoints(Number(log.account_id), points)
+  return { ok, paid: true }
+}