Servicios de personaje de pago (Stripe): patrón + rename

- lib/stripe.ts: createCheckoutSession (crea sesión Stripe + StripeLog en
  home_stripelog, success_url con {CHECKOUT_SESSION_ID}), isSessionPaid,
  claimPaidCheckout (verifica pagado + no entregado, marca fulfilled -> evita
  re-entregas; port de require_paid_stripe).
- lib/prices.ts: precios desde home_*price (rename/customize/race/faction/level).
- components/PaidServiceForm.tsx: selector + botón de pago -> redirige a la URL de
  Checkout de Stripe (session.url, sin stripe.js).
- Rename: route /api/character/rename/checkout (guard + valida personaje + crea
  checkout), página /rename (PaidServiceForm) y /rename/success (verifica pago y
  ejecuta SOAP .char rename, i18n). STRIPE_* + NEXT_PUBLIC_STRIPE_PUBLIC_KEY en
  .env.local. Namespace Rename.

Verificado: checkout sin sesión 401, /rename redirige a login, /rename/success con
session_id inválido no entrega el servicio (muestra error). Patrón para los demás
servicios de pago (cambiar precio + comando SOAP).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web-next/lib/prices.ts

@@ -0,0 +1,17 @@
+import type { RowDataPacket } from 'mysql2'
+import { db, DB } from './db'
+
+async function priceFrom(table: string, fallback: number): Promise<number> {
+  try {
+    const [rows] = await db(DB.default).query<RowDataPacket[]>(`SELECT price FROM ${table} LIMIT 1`)
+    return rows[0] ? Number(rows[0].price) : fallback
+  } catch {
+    return fallback
+  }
+}
+
+export const getRenamePrice = () => priceFrom('home_renameprice', 2.0)
+export const getCustomizePrice = () => priceFrom('home_customizeprice', 1.0)
+export const getChangeRacePrice = () => priceFrom('home_changeraceprice', 10.0)
+export const getChangeFactionPrice = () => priceFrom('home_changefactionprice', 10.0)
+export const getLevelUpPrice = () => priceFrom('home_levelupprice', 10.0)

web-next/lib/stripe.ts

@@ -0,0 +1,80 @@
+import Stripe from 'stripe'
+import type { RowDataPacket } from 'mysql2'
+import { db, DB } from './db'
+
+const stripe = new Stripe(process.env.STRIPE_SECRET_KEY as string)
+
+export async function isSessionPaid(sessionId: string): Promise<boolean> {
+  if (!sessionId) return false
+  try {
+    const s = await stripe.checkout.sessions.retrieve(sessionId)
+    return s.payment_status === 'paid'
+  } catch {
+    return false
+  }
+}
+
+export interface CheckoutParams {
+  accountId: number
+  username: string
+  email: string
+  acoreIp: string
+  amount: number
+  characterName: string
+  productName: string
+  successUrl: string
+  cancelUrl: string
+  currency?: string
+}
+
+/** Crea una sesión de pago Stripe y registra el StripeLog. Devuelve la URL de checkout. */
+export async function createCheckoutSession(
+  p: CheckoutParams,
+): Promise<{ success: boolean; url?: string; error?: string }> {
+  try {
+    const sep = p.successUrl.includes('?') ? '&' : '?'
+    const successUrl = `${p.successUrl}${sep}session_id={CHECKOUT_SESSION_ID}`
+    const session = await stripe.checkout.sessions.create({
+      payment_method_types: ['card'],
+      line_items: [
+        {
+          price_data: {
+            currency: p.currency || 'eur',
+            product_data: { name: p.productName },
+            unit_amount: Math.round(p.amount * 100),
+          },
+          quantity: 1,
+        },
+      ],
+      mode: 'payment',
+      success_url: successUrl,
+      cancel_url: p.cancelUrl,
+    })
+    const mode = (process.env.STRIPE_SECRET_KEY || '').startsWith('sk_live') ? 'live' : 'test'
+    await db(DB.default).query(
+      'INSERT INTO home_stripelog (account_id, username, email, acore_ip, stripe_ip, product_name, amount, session_id, mode, character_name, timestamp, fulfilled) ' +
+        'VALUES (?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, NOW(), 0)',
+      [p.accountId, p.username, p.email, p.acoreIp, p.productName, p.amount, session.id, mode, p.characterName],
+    )
+    return { success: true, url: session.url ?? undefined }
+  } catch (e) {
+    return { success: false, error: String(e) }
+  }
+}
+
+/**
+ * Verifica que la sesión está pagada y aún no entregada; la marca como entregada
+ * (evita re-entregas). Devuelve el character_name del log o null. (Port de
+ * require_paid_stripe.)
+ */
+export async function claimPaidCheckout(sessionId: string): Promise<{ characterName: string } | null> {
+  if (!(await isSessionPaid(sessionId))) return null
+  const [rows] = await db(DB.default).query<RowDataPacket[]>(
+    'SELECT id, character_name, fulfilled FROM home_stripelog WHERE session_id = ?',
+    [sessionId],
+  )
+  const log = rows[0]
+  if (!log || log.fulfilled) return null
+  await db(DB.default).query('UPDATE home_stripelog SET fulfilled = 1 WHERE id = ?', [log.id])
+  return { characterName: log.character_name }
+}