7534b9cbbb
Portado de home/views/recruit.py: - lib/recruit-claim.ts: getRecruitRewards (con marca de reclamadas), getRecruitedLevel80Count, y claimRecruitReward con las mismas validaciones que Django (recompensa existe, no reclamada, amigos reclutados a nivel 80 suficientes, anti-abuso por IP compartida), entrega por SOAP `.send items` (éxito si "Mail sent to") y registro en home_claimedreward. Extra de seguridad: valida que el personaje sea de la cuenta. - API POST /api/recruit/claim (401 sin sesión). - UI /recruit (pública): rejilla de recompensas con estado reclamada/elegible/bloqueada, selector de personaje y contador de amigos a nivel 80. Enlace en el footer. - i18n es/en: namespace RecruitClaim + Nav.recruit. Verificado: build OK, /recruit 200, claim 401 sin sesión. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
138 lines
5.3 KiB
TypeScript
138 lines
5.3 KiB
TypeScript
import type { RowDataPacket } from 'mysql2'
|
|
import { db, DB } from './db'
|
|
import { executeSoapCommand } from './soap'
|
|
|
|
export interface RecruitRewardView {
|
|
id: number
|
|
required_friends: number
|
|
reward_name: string
|
|
item_id: number
|
|
item_quantity: number
|
|
item_link: string
|
|
icon_class: string
|
|
claimed: boolean
|
|
}
|
|
|
|
/** IDs de cuentas reclutadas por `accountId` (con su IP). */
|
|
async function getRecruitedAccounts(accountId: number): Promise<{ id: number; last_ip: string | null }[]> {
|
|
const [rows] = await db(DB.auth).query<RowDataPacket[]>(
|
|
'SELECT id, last_ip FROM account WHERE recruiter = ?',
|
|
[accountId],
|
|
)
|
|
return rows.map((r) => ({ id: r.id, last_ip: r.last_ip ?? null }))
|
|
}
|
|
|
|
/** Nº de personajes de amigos reclutados que han alcanzado el nivel 80. */
|
|
export async function getRecruitedLevel80Count(accountId: number): Promise<number> {
|
|
const recruited = await getRecruitedAccounts(accountId)
|
|
if (recruited.length === 0) return 0
|
|
const ids = recruited.map((r) => r.id)
|
|
const [rows] = await db(DB.characters).query<RowDataPacket[]>(
|
|
'SELECT COUNT(*) AS n FROM characters WHERE level = 80 AND account IN (?)',
|
|
[ids],
|
|
)
|
|
return Number(rows[0]?.n ?? 0)
|
|
}
|
|
|
|
/**
|
|
* Cuentas reclutadas válidas: tienen un personaje de nivel 80 y NO comparten IP
|
|
* con el reclutador (anti-abuso). Devuelve hasta `requiredCount` IDs.
|
|
*/
|
|
async function getValidRecruitsAtLevel80(accountId: number, requiredCount: number): Promise<number[]> {
|
|
const recruited = await getRecruitedAccounts(accountId)
|
|
if (recruited.length === 0) return []
|
|
const ipById = new Map(recruited.map((r) => [r.id, r.last_ip]))
|
|
const ids = recruited.map((r) => r.id)
|
|
|
|
const [ipRows] = await db(DB.auth).query<RowDataPacket[]>('SELECT last_ip FROM account WHERE id = ?', [accountId])
|
|
const userIp = ipRows[0]?.last_ip ?? null
|
|
|
|
const [rows] = await db(DB.characters).query<RowDataPacket[]>(
|
|
'SELECT DISTINCT account FROM characters WHERE level = 80 AND account IN (?)',
|
|
[ids],
|
|
)
|
|
const atLevel80 = rows.map((r) => Number(r.account))
|
|
// Excluir los que comparten IP con el reclutador.
|
|
return atLevel80.filter((acc) => ipById.get(acc) !== userIp).slice(0, requiredCount)
|
|
}
|
|
|
|
/** Todas las recompensas con marca de si esta cuenta ya las reclamó. */
|
|
export async function getRecruitRewards(accountId: number | null): Promise<RecruitRewardView[]> {
|
|
const [rows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT id, required_friends, reward_name, item_id, item_quantity, item_link, icon_class FROM home_recruitreward ORDER BY required_friends, id',
|
|
)
|
|
let claimedIds = new Set<number>()
|
|
if (accountId) {
|
|
const [claimed] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT recruit_reward_id FROM home_claimedreward WHERE account_id = ?',
|
|
[accountId],
|
|
)
|
|
claimedIds = new Set(claimed.map((c) => Number(c.recruit_reward_id)))
|
|
}
|
|
return rows.map((r) => ({
|
|
id: r.id,
|
|
required_friends: r.required_friends,
|
|
reward_name: r.reward_name,
|
|
item_id: r.item_id,
|
|
item_quantity: r.item_quantity,
|
|
item_link: r.item_link,
|
|
icon_class: r.icon_class,
|
|
claimed: claimedIds.has(Number(r.id)),
|
|
}))
|
|
}
|
|
|
|
/** ¿El personaje pertenece a la cuenta? */
|
|
async function characterBelongsToAccount(accountId: number, name: string): Promise<boolean> {
|
|
const [rows] = await db(DB.characters).query<RowDataPacket[]>(
|
|
'SELECT 1 FROM characters WHERE name = ? AND account = ? LIMIT 1',
|
|
[name, accountId],
|
|
)
|
|
return Boolean(rows[0])
|
|
}
|
|
|
|
export interface ClaimResult {
|
|
success: boolean
|
|
message: string // clave i18n de RecruitClaim
|
|
}
|
|
|
|
/** Reclama una recompensa de reclutamiento: valida requisitos, envía el item por SOAP y lo registra. */
|
|
export async function claimRecruitReward(
|
|
accountId: number,
|
|
username: string,
|
|
rewardId: number,
|
|
characterName: string,
|
|
ip: string,
|
|
): Promise<ClaimResult> {
|
|
const [rewardRows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT id, required_friends, reward_name, item_id, item_quantity FROM home_recruitreward WHERE id = ?',
|
|
[rewardId],
|
|
)
|
|
const reward = rewardRows[0]
|
|
if (!reward) return { success: false, message: 'rewardNotFound' }
|
|
|
|
if (!(await characterBelongsToAccount(accountId, characterName))) {
|
|
return { success: false, message: 'invalidCharacter' }
|
|
}
|
|
|
|
const [already] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT 1 FROM home_claimedreward WHERE account_id = ? AND recruit_reward_id = ? LIMIT 1',
|
|
[accountId, rewardId],
|
|
)
|
|
if (already[0]) return { success: false, message: 'alreadyClaimed' }
|
|
|
|
const valid = await getValidRecruitsAtLevel80(accountId, reward.required_friends)
|
|
if (valid.length < reward.required_friends) return { success: false, message: 'requirementsNotMet' }
|
|
|
|
const command = `.send items ${characterName} 'Recompensa de Recluta Amigo' 'Tu amigo alcanzó el Nivel 80' ${reward.item_id}:${reward.item_quantity}`
|
|
const response = await executeSoapCommand(command)
|
|
if (!response || !response.includes('Mail sent to')) {
|
|
return { success: false, message: 'deliveryError' }
|
|
}
|
|
|
|
await db(DB.default).query(
|
|
'INSERT INTO home_claimedreward (account_id, username, recruit_reward_id, character_name, claimed_at, ip_address) VALUES (?, ?, ?, ?, NOW(), ?)',
|
|
[accountId, username, rewardId, characterName, ip.slice(0, 45)],
|
|
)
|
|
return { success: true, message: 'claimSuccess' }
|
|
}
|