1c06d1d0d1
CI / changes (pull_request) Successful in 2s
CI / unit (pull_request) Successful in 11s
CI / integration (pull_request) Successful in 22s
CI / ui (pull_request) Successful in 1m7s
CI / conformance (pull_request) Successful in 9s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m41s
Stand up the internal chip/benefit mechanic behind the narrow payments interface: context-aware balances and benefits, an atomic chip spend, admin grants as zero-price value sales, the one-directional store-compliance gate (VK/TG same- origin only, web draws direct→vk→tg, VK-iOS frozen, untrusted fail-closed), and per-origin hint and no-ads application with term stacking. Reads are served from an in-process, account-keyed write-through cache (mirroring the suspension gate), so hot paths issue no query to the payments schema. Flip the online-game hint wallet and the ad-banner suppression from the deprecated accounts.hint_balance / paid_account columns to the payments benefit (a hint balance no longer suppresses the banner — only a no-ads benefit does), and fold chip segments and benefits by origin on account merge, inside the merge tx. Add the GET/POST /api/v1/user/wallet edge chain (REST → Connect → FlatBuffers) plus its codec unit test; no wallet UI yet. Bring the frozen owner decisions log into the repo at docs/PAYMENTS_DECISIONS_ru.md (it was untracked under .vscode) and reference it from PLAN.md; record the read-cache design and the present-sources interface in PLAN.md and docs/PAYMENTS.md (+ RU mirror).
32 lines
1.0 KiB
Go
32 lines
1.0 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/google/uuid"
|
|
|
|
"scrabble/backend/internal/payments"
|
|
"scrabble/backend/internal/session"
|
|
)
|
|
|
|
// walletGate resolves the payments gate inputs for an account on the current request: the
|
|
// trusted execution context (the session platform carried on ctx by the platformContext
|
|
// middleware; absent ⇒ untrusted, fail-closed) and the account's present identity sources
|
|
// (which chip/benefit segments are awake, §6). The payments domain holds no cross-schema
|
|
// identity knowledge, so the server supplies present from account.Identities.
|
|
func (s *Server) walletGate(ctx context.Context, accountID uuid.UUID) (payments.Context, []payments.Source, error) {
|
|
var cxt payments.Context
|
|
if p, ok := session.PlatformFromContext(ctx); ok {
|
|
cxt = payments.NewContext(p.Kind, p.Subtype)
|
|
}
|
|
ids, err := s.accounts.Identities(ctx, accountID)
|
|
if err != nil {
|
|
return payments.Context{}, nil, err
|
|
}
|
|
kinds := make([]string, len(ids))
|
|
for i, id := range ids {
|
|
kinds[i] = id.Kind
|
|
}
|
|
return cxt, payments.PresentSources(kinds), nil
|
|
}
|