66d056c04b
- /transfer-d-points: transferir PD a la cuenta dueña de un personaje (requiere token de seguridad; movimiento atómico con FOR UPDATE). - /trade-points: comercio PD<->oro mediante códigos de 1 solo uso (contraseña + token + Turnstile; oro al creador por SOAP; expira 1h; lock de 5s tras canjear; rollback total si falla la entrega). - /promo-code: canje de códigos por PD/PV (sensibles a mayúsculas/minúsculas, usos limitados, 1 canje por cuenta). - /admin/promo: panel para crear / editar / activar / desactivar / borrar códigos de promoción. - Tablas nuevas (sql/): home_tradecode, home_promocode, home_promoredemption. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
88 lines
2.9 KiB
TypeScript
88 lines
2.9 KiB
TypeScript
import type { RowDataPacket } from 'mysql2'
|
|
import { db, DB } from './db'
|
|
|
|
/** Ratio de conversión: cada 1 unidad de moneda = 100 PD. */
|
|
export const PD_PER_UNIT = 100
|
|
/** Límites de compra por transacción (en unidades de moneda). */
|
|
export const DP_MIN_AMOUNT = 1
|
|
export const DP_MAX_AMOUNT = 200
|
|
|
|
/** Acredita PD (donate points) a una cuenta de juego en `home_api_points` (upsert). */
|
|
export async function creditDPoints(accountId: number, points: number): Promise<boolean> {
|
|
if (!accountId || !(points > 0)) return false
|
|
try {
|
|
const [rows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT id FROM home_api_points WHERE accountID = ?',
|
|
[accountId],
|
|
)
|
|
if (rows[0]) {
|
|
await db(DB.default).query('UPDATE home_api_points SET dp = dp + ? WHERE accountID = ?', [points, accountId])
|
|
} else {
|
|
await db(DB.default).query('INSERT INTO home_api_points (accountID, vp, dp) VALUES (?, 0, ?)', [accountId, points])
|
|
}
|
|
return true
|
|
} catch {
|
|
return false
|
|
}
|
|
}
|
|
|
|
/** Saldo de PD (donate points) de una cuenta de juego. 0 si no tiene fila. */
|
|
export async function getDPointsBalance(accountId: number): Promise<number> {
|
|
if (!accountId) return 0
|
|
try {
|
|
const [rows] = await db(DB.default).query<RowDataPacket[]>(
|
|
'SELECT dp FROM home_api_points WHERE accountID = ?',
|
|
[accountId],
|
|
)
|
|
return rows[0] ? Number(rows[0].dp) : 0
|
|
} catch {
|
|
return 0
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Transfiere `points` PD desde una cuenta de origen a una de destino de forma
|
|
* atómica (transacción con bloqueo de fila del origen). Es irreversible.
|
|
*/
|
|
export async function transferDPoints(
|
|
fromAccountId: number,
|
|
toAccountId: number,
|
|
points: number,
|
|
): Promise<{ success: boolean; error?: string }> {
|
|
if (!fromAccountId || !toAccountId || !Number.isInteger(points) || points <= 0) {
|
|
return { success: false, error: 'invalidRequest' }
|
|
}
|
|
if (fromAccountId === toAccountId) return { success: false, error: 'sameAccount' }
|
|
|
|
const conn = await db(DB.default).getConnection()
|
|
try {
|
|
await conn.beginTransaction()
|
|
// Bloquea la fila del origen para evitar dobles gastos concurrentes.
|
|
const [src] = await conn.query<RowDataPacket[]>(
|
|
'SELECT dp FROM home_api_points WHERE accountID = ? FOR UPDATE',
|
|
[fromAccountId],
|
|
)
|
|
const balance = src[0] ? Number(src[0].dp) : 0
|
|
if (balance < points) {
|
|
await conn.rollback()
|
|
return { success: false, error: 'insufficientFunds' }
|
|
}
|
|
await conn.query('UPDATE home_api_points SET dp = dp - ? WHERE accountID = ?', [points, fromAccountId])
|
|
await conn.query(
|
|
'INSERT INTO home_api_points (accountID, vp, dp) VALUES (?, 0, ?) ON DUPLICATE KEY UPDATE dp = dp + ?',
|
|
[toAccountId, points, points],
|
|
)
|
|
await conn.commit()
|
|
return { success: true }
|
|
} catch {
|
|
try {
|
|
await conn.rollback()
|
|
} catch {
|
|
/* ignore */
|
|
}
|
|
return { success: false, error: 'genericError' }
|
|
} finally {
|
|
conn.release()
|
|
}
|
|
}
|