@moneypot/hub 1.9.0-dev.9 → 1.10.0-dev.1

package/dist/src/risk-policy.js

@@ -0,0 +1,61 @@
+import { formatCurrency } from "./format-currency.js";
+import { logger } from "./logger.js";
+import { z } from "zod";
+const RiskLimitsSchema = z
+    .object({
+    maxWager: z.number().positive().optional(),
+    maxPayout: z.number().positive(),
+})
+    .strict();
+export function validateRisk(options) {
+    const { wager, bankroll, maxPotentialPayout, riskPolicy } = options;
+    if (maxPotentialPayout > bankroll) {
+        return {
+            ok: false,
+            error: `House cannot cover potential payout (${formatCurrency(maxPotentialPayout, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })}). Bankroll: ${formatCurrency(bankroll, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })}`,
+        };
+    }
+    if (!riskPolicy) {
+        return { ok: true, value: undefined };
+    }
+    const limitsResult = RiskLimitsSchema.safeParse(riskPolicy(options));
+    if (!limitsResult.success) {
+        logger.error(limitsResult, "Invalid risk policy");
+        return {
+            ok: false,
+            error: "Invalid risk policy",
+        };
+    }
+    const limits = limitsResult.data;
+    if (limits.maxWager !== undefined && wager > limits.maxWager) {
+        return {
+            ok: false,
+            error: `Wager (${formatCurrency(wager, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })}) exceeds limit (${formatCurrency(limits.maxWager, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })})`,
+        };
+    }
+    if (maxPotentialPayout > limits.maxPayout) {
+        return {
+            ok: false,
+            error: `Payout (${formatCurrency(maxPotentialPayout, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })}) exceeds limit (${formatCurrency(limits.maxPayout, {
+                displayUnitName: options.displayUnitName,
+                displayUnitScale: options.displayUnitScale,
+            })})`,
+        };
+    }
+    return { ok: true, value: undefined };
+}

package/dist/src/server/graphile.config.d.ts

@@ -1,5 +1,6 @@
 import "graphile-config";
 import "postgraphile";
+import { ServerContext } from "../context.js";
 export type UserSessionContext = {
     user_id: string;
     mp_user_id: string;
@@ -15,9 +16,10 @@ export type PluginIdentity = {
 };
 export declare const requiredPlugins: readonly GraphileConfig.Plugin[];
 export declare const defaultPlugins: readonly GraphileConfig.Plugin[];
-export declare function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, }: {
+export declare function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, context, }: {
     plugins: readonly GraphileConfig.Plugin[];
     exportSchemaSDLPath?: string;
     extraPgSchemas: string[];
     abortSignal: AbortSignal;
+    context: ServerContext;
 }): GraphileConfig.Preset;

package/dist/src/server/graphile.config.js

@@ -48,7 +48,7 @@ export const defaultPlugins = [
     HubClaimFaucetPlugin,
     customPgOmitArchivedPlugin("deleted"),
 ];
-export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, }) {
+export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, context, }) {
     if (exportSchemaSDLPath) {
         if (!exportSchemaSDLPath.startsWith("/")) {
             throw new Error("exportSchemaSDLPath must be an absolute path");
@@ -56,6 +56,7 @@ export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abo
         if (!exportSchemaSDLPath.endsWith(".graphql")) {
             throw new Error("exportSchemaSDLPath must end with .graphql");
         }
+        logger.info(`Will save generated graphql schema to ${exportSchemaSDLPath}`);
     }
     const mutablePlugins = [...plugins];
     for (const requiredPlugin of requiredPlugins) {
@@ -64,7 +65,6 @@ export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abo
             mutablePlugins.unshift(requiredPlugin);
         }
     }
-    logger.info(`Will save generated graphql schema to ${exportSchemaSDLPath}`);
     const preset = {
         extends: [PostGraphileAmberPreset],
         disablePlugins: ["NodePlugin"],
@@ -96,7 +96,7 @@ export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abo
         grafast: {
             context(ctx, _args) {
                 if (ctx.ws) {
-                    return handleWebsocketContext(ctx.ws);
+                    return handleWebsocketContext(context, ctx.ws);
                 }
                 const expressReq = ctx.expressv4.req;
                 const reqIdentity = expressReq.identity;
@@ -132,6 +132,7 @@ export function createPreset({ plugins, exportSchemaSDLPath, extraPgSchemas, abo
                     pgSettings,
                     identity: pluginIdentity,
                     abortSignal,
+                    superuserPool: context.superuserPool,
                 };
             },
         },
@@ -147,12 +148,12 @@ function getSessionIdFromWebsocketCtx(ws) {
     const uuid = value.slice("session:".length);
     return isUuid(uuid) ? uuid : "";
 }
-async function handleWebsocketContext(ws) {
+async function handleWebsocketContext(context, ws) {
     const sessionId = getSessionIdFromWebsocketCtx(ws);
     if (!sessionId) {
         throw new Error("Unauthorized");
     }
-    const result = await db.userFromActiveSessionKey(db.superuserPool, sessionId);
+    const result = await db.userFromActiveSessionKey(context.superuserPool, sessionId);
     if (!result) {
         throw new Error("Unauthorized");
     }

package/dist/src/server/index.d.ts

@@ -1,8 +1,10 @@
 import { ServerOptions } from "../index.js";
+import { ServerContext } from "../context.js";
 export type HubServer = {
     listen: () => Promise<void>;
     shutdown: () => Promise<void>;
 };
-export declare function createHubServer({ configureApp, plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, }: Pick<ServerOptions, "plugins" | "exportSchemaSDLPath" | "extraPgSchemas" | "configureApp"> & {
+export declare function createHubServer({ configureApp, plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, context, }: Pick<ServerOptions, "plugins" | "exportSchemaSDLPath" | "extraPgSchemas" | "configureApp"> & {
     abortSignal: AbortSignal;
+    context: ServerContext;
 }): HubServer;

package/dist/src/server/index.js

@@ -31,11 +31,11 @@ const dashboardDir = path.join(distDir, "dashboard");
 if (!fs.existsSync(dashboardDir)) {
     throw new Error(`Could not find dashboard directory. Expected it to be at "${dashboardDir}"`);
 }
-function createExpressServer() {
+function createExpressServer(context) {
     const app = express();
     app.disable("x-powered-by");
     app.use(cors());
-    app.use(authentication());
+    app.use(authentication(context));
     app.use("/dashboard", express.static(dashboardDir));
     app.use("/dashboard/*splat", (_, res) => {
         res.sendFile(path.join(dashboardDir, "index.html"));
@@ -45,13 +45,14 @@ function createExpressServer() {
     });
     return app;
 }
-export function createHubServer({ configureApp, plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, }) {
-    const expressServer = createExpressServer();
+export function createHubServer({ configureApp, plugins, exportSchemaSDLPath, extraPgSchemas, abortSignal, context, }) {
+    const expressServer = createExpressServer(context);
     const preset = createPreset({
         plugins: plugins ?? defaultPlugins,
         exportSchemaSDLPath,
         extraPgSchemas: extraPgSchemas ?? [],
         abortSignal,
+        context,
     });
     const pgl = postgraphile.default(preset);
     const serv = pgl.createServ(grafserv);

package/dist/src/server/middleware/authentication.d.ts

@@ -1,4 +1,5 @@
 import { Response, NextFunction } from "express";
 import { HubRequest } from "../../express.js";
-declare const authentication: () => (req: HubRequest, _: Response, next: NextFunction) => Promise<void>;
+import { ServerContext } from "../../context.js";
+declare const authentication: (context: ServerContext) => (req: HubRequest, _: Response, next: NextFunction) => Promise<void>;
 export default authentication;

package/dist/src/server/middleware/authentication.js

@@ -1,7 +1,7 @@
 import { isUuid } from "../../util.js";
 import * as db from "../../db/index.js";
-async function checkAndUpdateApiKey(key) {
-    const row = await db.superuserPool
+async function checkAndUpdateApiKey(key, pool) {
+    const row = await pool
         .query(`
     UPDATE hub.api_key 
     SET last_used_at = now()
@@ -11,7 +11,7 @@ async function checkAndUpdateApiKey(key) {
         .then(db.maybeOneRow);
     return !!row;
 }
-const authentication = () => {
+const authentication = (context) => {
     return async (req, _, next) => {
         const header = req.get("authorization");
         if (!header) {
@@ -28,7 +28,7 @@ const authentication = () => {
         }
         if (tokenType === "session") {
             const sessionKey = token;
-            const result = await db.userFromActiveSessionKey(db.superuserPool, sessionKey);
+            const result = await db.userFromActiveSessionKey(context.superuserPool, sessionKey);
             if (result) {
                 req.identity = {
                     kind: "user",
@@ -40,7 +40,7 @@ const authentication = () => {
         }
         else if (tokenType === "apikey") {
             const apiKey = token;
-            const isValid = await checkAndUpdateApiKey(apiKey);
+            const isValid = await checkAndUpdateApiKey(apiKey, context.superuserPool);
             if (isValid) {
                 req.identity = {
                     kind: "operator",

package/dist/src/take-request/process-take-request.d.ts

@@ -1,16 +1,27 @@
 import { GraphQLClient } from "graphql-request";
 import { MpTakeRequestFieldsFragment } from "../__generated__/graphql.js";
+import * as pg from "pg";
 export declare const MP_TAKE_REQUEST_FIELDS: import("@graphql-typed-document-node/core").TypedDocumentNode<MpTakeRequestFieldsFragment, unknown>;
 export declare function mpGetTakeRequest(graphqlClient: GraphQLClient, id: string): Promise<MpTakeRequestFieldsFragment | null>;
-export declare function processTakeRequests({ abortSignal, controllerId, casinoId, graphqlClient, }: {
+export declare function processTakeRequests({ abortSignal, controllerId, casinoId, graphqlClient, pool, }: {
     abortSignal: AbortSignal;
     controllerId: string;
     casinoId: string;
     graphqlClient: GraphQLClient;
+    pool: pg.Pool;
 }): Promise<void>;
-export declare function processSingleTakeRequest({ mpTakeRequestId, mpTakeRequest, casinoId, graphqlClient, }: {
+export declare function processSingleTakeRequest({ mpTakeRequestId, mpTakeRequest, casinoId, graphqlClient, pool, }: {
     mpTakeRequestId: string;
     mpTakeRequest?: MpTakeRequestFieldsFragment;
     casinoId: string;
     graphqlClient: GraphQLClient;
+    pool: pg.Pool;
 }): Promise<string | null>;
+export declare function completeTransfer({ mpTakeRequestId, takeRequestId, mpTransferId, graphqlClient, casinoId, pool, }: {
+    mpTakeRequestId: string;
+    takeRequestId: string;
+    mpTransferId: string;
+    graphqlClient: GraphQLClient;
+    casinoId: string;
+    pool: pg.Pool;
+}): Promise<void>;

package/dist/src/take-request/process-take-request.js

@@ -1,6 +1,6 @@
 import { gql } from "../__generated__/gql.js";
 import { TakeRequestStatus as MpTakeRequestStatus, TransferStatusKind as MpTransferStatus, } from "../__generated__/graphql.js";
-import { exactlyOneRow, maybeOneRow, superuserPool, withPgPoolTransaction, } from "../db/index.js";
+import { exactlyOneRow, maybeOneRow, withPgPoolTransaction, } from "../db/index.js";
 import { assert } from "tsafe";
 import { PgAdvisoryLock } from "../pg-advisory-lock.js";
 import { useFragment } from "../__generated__/fragment-masking.js";
@@ -124,10 +124,10 @@ const MP_COMPLETE_TRANSFER = gql(`
   mutation CompleteTransfer2($mpTransferId: UUID!) {
     completeTransfer(input: { id: $mpTransferId }) {
       result {
+        __typename
         ... on CompleteTransferSuccess {
           __typename
           transfer {
-            __typename
             id
             status
             ... on ExperienceTransfer {
@@ -139,8 +139,10 @@ const MP_COMPLETE_TRANSFER = gql(`
             }
           }
         }
+        ... on InsufficientBalance {
+          message
+        }
         ... on InvalidTransferStatus {
-          __typename
           currentStatus
           message
           transfer {
@@ -166,7 +168,7 @@ var LocalTakeRequestStatus;
     LocalTakeRequestStatus["FAILED"] = "FAILED";
     LocalTakeRequestStatus["REJECTED"] = "REJECTED";
 })(LocalTakeRequestStatus || (LocalTakeRequestStatus = {}));
-export async function processTakeRequests({ abortSignal, controllerId, casinoId, graphqlClient, }) {
+export async function processTakeRequests({ abortSignal, controllerId, casinoId, graphqlClient, pool, }) {
     if (abortSignal.aborted) {
         return;
     }
@@ -180,14 +182,16 @@ export async function processTakeRequests({ abortSignal, controllerId, casinoId,
             mpTakeRequest: takeRequest,
             casinoId,
             graphqlClient,
+            pool,
         });
     }
     await processPendingTransferCompletions({
         casinoId,
         graphqlClient,
         abortSignal,
+        pool,
     });
-    await processStuckRequests({ casinoId, graphqlClient, abortSignal });
+    await processStuckRequests({ casinoId, graphqlClient, abortSignal, pool });
 }
 async function fetchPendingTakeRequests(graphqlClient, controllerId) {
     const result = await graphqlClient.request(MP_PAGINATE_PENDING_TAKE_REQUESTS, {
@@ -200,8 +204,8 @@ async function fetchPendingTakeRequests(graphqlClient, controllerId) {
         return useFragment(MP_TAKE_REQUEST_FIELDS, takeRequest);
     }) || []);
 }
-export async function processSingleTakeRequest({ mpTakeRequestId, mpTakeRequest, casinoId, graphqlClient, }) {
-    return withPgPoolTransaction(superuserPool, async (pgClient) => {
+export async function processSingleTakeRequest({ mpTakeRequestId, mpTakeRequest, casinoId, graphqlClient, pool, }) {
+    return withPgPoolTransaction(pool, async (pgClient) => {
         await PgAdvisoryLock.forMpTakeRequestProcessing(pgClient, {
             mpTakeRequestId,
             casinoId,
@@ -247,10 +251,7 @@ async function createAndProcessNewTakeRequest({ pgClient, mpTakeRequest, casinoI
         currencyKey: mpTakeRequest.currencyKey,
         casinoId,
     });
-    if (!dbUser || !dbExperience || !dbCurrency || !dbBalance) {
-        await rejectMpTakeRequest(pgClient, graphqlClient, mpTakeRequest.id);
-        return null;
-    }
+    assert(dbUser && dbExperience && dbCurrency && dbBalance, "Required entities not found");
     const amountToTransfer = Math.floor(typeof mpTakeRequest.amount === "number"
         ? Math.min(mpTakeRequest.amount, dbBalance.amount)
         : dbBalance.amount);
@@ -434,11 +435,11 @@ async function attemptTransfer({ pgClient, takeRequestId, mpTakeRequestId, mpExp
         return null;
     }
 }
-async function processPendingTransferCompletions({ casinoId, graphqlClient, abortSignal, }) {
+async function processPendingTransferCompletions({ casinoId, graphqlClient, abortSignal, pool, }) {
     if (abortSignal.aborted) {
         return;
     }
-    const pendingCompletions = await superuserPool
+    const pendingCompletions = await pool
         .query({
         text: `
       SELECT id, mp_take_request_id, mp_transfer_id, transfer_completion_attempted_at
@@ -476,15 +477,29 @@ async function processPendingTransferCompletions({ casinoId, graphqlClient, abor
             mpTransferId: request.mp_transfer_id,
             graphqlClient,
             casinoId,
+            pool,
         });
     }
 }
-async function completeTransfer({ mpTakeRequestId, takeRequestId, mpTransferId, graphqlClient, casinoId, }) {
-    return withPgPoolTransaction(superuserPool, async (pgClient) => {
+export async function completeTransfer({ mpTakeRequestId, takeRequestId, mpTransferId, graphqlClient, casinoId, pool, }) {
+    return withPgPoolTransaction(pool, async (pgClient) => {
         await PgAdvisoryLock.forMpTakeRequestProcessing(pgClient, {
             mpTakeRequestId,
             casinoId,
         });
+        const dbTakeRequest = await pgClient
+            .query({
+            text: `
+        SELECT transfer_needs_completion
+        FROM hub.take_request
+        WHERE id = $1
+      `,
+            values: [takeRequestId],
+        })
+            .then(exactlyOneRow);
+        if (!dbTakeRequest.transfer_needs_completion) {
+            return;
+        }
         await pgClient.query({
             text: `
         UPDATE hub.take_request
@@ -553,26 +568,57 @@ async function completeTransfer({ mpTakeRequestId, takeRequestId, mpTransferId,
                         if (!mpStatus) {
                             throw new Error("No MP status returned from MP API");
                         }
+                        const takeRequestData = await pgClient
+                            .query({
+                            text: `
+                  SELECT *
+                  FROM hub.take_request
+                  WHERE id = $1
+                `,
+                            values: [takeRequestId],
+                        })
+                            .then(exactlyOneRow);
+                        if (takeRequestData.refunded_at) {
+                            logger.warn({ mpTransferId, takeRequestId }, `[completeTransfer] Transfer was already refunded. This should never happen.`);
+                            break;
+                        }
+                        await pgClient.query({
+                            text: `
+                UPDATE hub.balance
+                SET amount = amount + $1
+                WHERE user_id = $2 
+                  AND experience_id = $3 
+                  AND casino_id = $4 
+                  AND currency_key = $5
+              `,
+                            values: [
+                                takeRequestData.reserved_amount,
+                                takeRequestData.user_id,
+                                takeRequestData.experience_id,
+                                takeRequestData.casino_id,
+                                takeRequestData.currency_key,
+                            ],
+                        });
                         await pgClient.query({
                             text: `
                 UPDATE hub.take_request
                 SET 
                   transfer_needs_completion = FALSE,
                   mp_transfer_status = $2,
-                  status = $3,
-                  mp_status = $4,
-                  debug = $5
+                  mp_status = $3,
+                  debug = $4,
+                  refunded_at = now(),
+                  updated_at = now()
                 WHERE id = $1
               `,
                             values: [
                                 takeRequestId,
                                 currentStatus,
-                                LocalTakeRequestStatus.FAILED,
                                 mpStatus,
-                                `MP transfer was ${currentStatus}`,
+                                `MP transfer was ${currentStatus}. Refunded ${takeRequestData.reserved_amount} to user`,
                             ],
                         });
-                        logger.info(`[completeTransfer] Transfer ${mpTransferId} has status ${currentStatus}`);
+                        logger.info(`[completeTransfer] Transfer ${mpTransferId} has status ${currentStatus}. Refunded ${takeRequestData.reserved_amount} base units of ${takeRequestData.currency_key} to hub user.`);
                     }
                     else {
                         logger.info(`[completeTransfer] Transfer ${mpTransferId} has status ${currentStatus}, will retry later`);
@@ -636,11 +682,11 @@ async function completeTransfer({ mpTakeRequestId, takeRequestId, mpTransferId,
         }
     });
 }
-async function processStuckRequests({ casinoId, graphqlClient, abortSignal, }) {
+async function processStuckRequests({ casinoId, graphqlClient, abortSignal, pool, }) {
     if (abortSignal.aborted) {
         return;
     }
-    const stuckRequests = await superuserPool
+    const stuckRequests = await pool
         .query({
         text: `
       SELECT id, mp_take_request_id
@@ -665,6 +711,7 @@ async function processStuckRequests({ casinoId, graphqlClient, abortSignal, }) {
             mpTakeRequestId: request.mp_take_request_id,
             casinoId,
             graphqlClient,
+            pool,
         });
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moneypot/hub",
-  "version": "1.9.0-dev.9",
+  "version": "1.10.0-dev.1",
   "author": "moneypot.com",
   "homepage": "https://moneypot.com/hub",
   "keywords": [