nodebb-plugin-niki-loyalty 1.2.3 → 1.2.4

package/library.js

@@ -411,7 +411,127 @@ Plugin.adminGetUsers = async function (socket, data) {
 
 // Soket'e kaydet (Client: socket.emit('plugins.niki.getUsers', ...))
 SocketPlugins.niki = {
-  getUsers: Plugin.adminGetUsers
+  getUsers: Plugin.adminGetUsers,
+  scanQR: Plugin.socketScanQR,
+  getKasaHistory: Plugin.socketKasaHistory,
+  managePoints: Plugin.adminManagePoints
+};
+
+// =========================
+// 🔌 YENİ SOCKET FONKSİYONLARI (POS & ADMIN)
+// =========================
+
+// 1) QR SCAN (Socket Versiyonu)
+Plugin.socketScanQR = async function (socket, data) {
+  const uid = socket.uid;
+  if (!uid) throw new Error('Giriş yapmalısınız.');
+
+  const isAdmin = await user.isAdministrator(uid);
+  const isMod = await user.isGlobalModerator(uid);
+  if (!isAdmin && !isMod) throw new Error('Yetkisiz Erişim');
+
+  const token = data.token;
+  if (!token) throw new Error('Geçersiz Token');
+
+  const custUid = await db.get(`niki:qr:${token}`);
+  if (!custUid) throw new Error('QR Kod Geçersiz veya Süresi Dolmuş');
+
+  const pts = parseFloat((await user.getUserField(custUid, 'niki_points')) || 0);
+
+  let selectedReward = null;
+  if (!TEST_MODE_UNLIMITED) {
+    for (const r of REWARDS) {
+      if (pts >= r.cost) { selectedReward = r; break; }
+    }
+    if (!selectedReward) throw new Error('Puan Yetersiz');
+  } else { selectedReward = REWARDS[0]; }
+
+  if (!TEST_MODE_UNLIMITED) {
+    await user.decrementUserFieldBy(custUid, 'niki_points', selectedReward.cost);
+  }
+  await db.delete(`niki:qr:${token}`);
+
+  const cData = await user.getUserFields(custUid, ['username', 'picture', 'userslug']);
+  await addUserLog(custUid, 'spend', selectedReward.cost, selectedReward.name);
+  await addKasaLog(uid, cData.username, custUid, selectedReward.name, selectedReward.cost);
+
+  return { success: true, customer: cData, rewardName: selectedReward.name, cost: selectedReward.cost };
+};
+
+// 2) KASA HISTORY (Socket Versiyonu)
+Plugin.socketKasaHistory = async function (socket, data) {
+  const uid = socket.uid;
+  if (!uid) throw new Error('Giriş yapmalısınız.');
+
+  const isAdmin = await user.isAdministrator(uid);
+  const isMod = await user.isGlobalModerator(uid);
+  if (!isAdmin && !isMod) throw new Error('Yetkisiz Erişim');
+
+  const raw = await db.getListRange('niki:kasa:history', 0, -1);
+  const rows = (raw || []).map(safeParseMaybeJson).filter(Boolean).reverse();
+
+  const uids = rows.map(r => parseInt(r.cuid, 10)).filter(n => Number.isFinite(n) && n > 0);
+  const users = await user.getUsersFields(uids, ['uid', 'username', 'userslug', 'picture', 'icon:bgColor']);
+  const userMap = {};
+  (users || []).forEach(u => userMap[u.uid] = u);
+
+  const rp = nconf.get('relative_path') || '';
+  return rows.map(r => {
+    const u = userMap[r.cuid] || {};
+    return {
+      ...r,
+      cust: u.username || r.cust || 'Bilinmeyen',
+      picture: u.picture || '',
+      iconBg: u['icon:bgColor'] || '#4b5563',
+      profileUrl: u.userslug ? `${rp}/user/${u.userslug}` : '',
+      reward: r.reward || 'İşlem'
+    };
+  });
+};
+
+// 3) MANUEL PUAN YÖNETİMİ (Güvenli)
+Plugin.adminManagePoints = async function (socket, data) {
+  // data = { targetUid, action: 'add'|'remove', amount, reason }
+  const uid = socket.uid;
+  if (!uid) throw new Error('Giriş yapmalısınız.');
+
+  // KESİN YETKİ KONTROLÜ (Sadece Administrator)
+  const isAdmin = await user.isAdministrator(uid);
+  if (!isAdmin) {
+    console.warn(`[NIKI SECURITY] Yetkisiz puan değiştirme denemesi! Actor: ${uid}`);
+    throw new Error('BU İŞLEM İÇİN YETKİNİZ YOK! (Olay Loglandı)');
+  }
+
+  const targetUid = data.targetUid;
+  const amount = Math.abs(parseFloat(data.amount));
+  const action = data.action;
+  const reason = data.reason || 'Manuel Düzenleme';
+
+  if (!targetUid || !amount || amount <= 0) throw new Error('Geçersiz veri.');
+
+  const exists = await user.exists(targetUid);
+  if (!exists) throw new Error('Kullanıcı bulunamadı.');
+
+  if (action === 'add') {
+    await user.incrementUserFieldBy(targetUid, 'niki_points', amount);
+  } else if (action === 'remove') {
+    await user.decrementUserFieldBy(targetUid, 'niki_points', amount);
+  } else {
+    throw new Error('Geçersiz işlem türü.');
+  }
+
+  // GÜVENLİK LOGU
+  const adminUserData = await user.getUserFields(uid, ['username']);
+  const logMsg = `Admin (${adminUserData.username}) tarafından ${action === 'add' ? '+' : '-'}${amount} puan. Sebep: ${reason}`;
+
+  await addUserLog(targetUid, 'admin_adjust', amount, logMsg);
+
+  // Denetim Logu
+  const auditLog = { ts: Date.now(), adminUid: uid, adminName: adminUserData.username, targetUid: targetUid, action: action, amount: amount, reason: reason };
+  await db.listAppend('niki:audit:admin_points', JSON.stringify(auditLog));
+
+  const newPoints = await user.getUserField(targetUid, 'niki_points');
+  return { success: true, newPoints: parseFloat(newPoints) };
 };
 
 module.exports = Plugin;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-niki-loyalty",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "description": "Niki The Cat Coffee Loyalty System - Earn points while studying on IEU Forum.",
   "main": "library.js",
   "nbbpm": {