TypeScript 97.6%
SQL 1.4%
JavaScript 0.5%
1import type { FastifyInstance } from "fastify";2import { and, db, desc, eq, favorites, gameStatistics, games, sql, userGameStats } from "@spinza/database";3import { getGame, FIRST_GAME_RECOMMENDATIONS, CRASH_BY_SLUG, ARCADE_BY_SLUG } from "@spinza/games";4import { spinSchema, type GameCard, type GameInfo } from "@spinza/shared";5import { requireUser } from "../plugins/auth";6import { errors } from "../lib/errors";7import { flag } from "../lib/settings";8import { spin } from "../services/spin";9import { rateLimit, redis } from "../lib/redis";10import { clientIp, logSecurity } from "../lib/security";11import { z } from "zod";1213type GameRow = typeof games.$inferSelect;1415function toCard(g: GameRow, extra: { popularity?: number; favorite?: boolean; lastPlayedAt?: Date | null } = {}): GameCard {16 const s = g.summary as Record<string, unknown>;17 return {18 slug: g.slug,19 name: g.name,20 tagline: s.tagline as string,21 theme: s.theme as string,22 volatility: s.volatility as GameCard["volatility"],23 version: g.version,24 grid: s.grid as GameCard["grid"],25 minBet: s.minBet as number,26 maxBet: s.maxBet as number,27 maxMultiplier: s.maxMultiplier as number,28 features: (s.features as string[]) ?? [],29 tags: (s.tags as string[]) ?? [],30 palette: s.palette as GameCard["palette"],31 presentation: s.presentation32 ? { frame: (s.presentation as GameCard["presentation"])!.frame, backdrop: (s.presentation as GameCard["presentation"])!.backdrop, particles: (s.presentation as GameCard["presentation"])!.particles, ambience: (s.presentation as GameCard["presentation"])!.ambience }33 : undefined,34 lifecycle: g.lifecycle as GameCard["lifecycle"],35 kind: ((s.kind as string) ?? "slot") as GameCard["kind"],36 category: ((s.category as string) ?? "slots") as GameCard["category"],37 isNew: g.isNew,38 isFeatured: g.isFeatured,39 isJackpot: !!s.isJackpot,40 popularity: extra.popularity ?? 0,41 favorite: extra.favorite,42 lastPlayedAt: extra.lastPlayedAt ? extra.lastPlayedAt.toISOString() : null,43 };44}4546export async function publishedGames(): Promise<GameRow[]> {47 const rows = await db.select().from(games).where(eq(games.lifecycle, "published")).orderBy(games.sortOrder);48 return rows.filter((g) => flag(`game.${g.slug}.enabled`));49}5051export async function gameRoutes(app: FastifyInstance) {52 /** Public lobby data. When signed in, includes favorites + continue playing. */53 app.get("/api/games", async (req) => {54 const rows = await publishedGames();55 const stats = await db.select({ gameId: gameStatistics.gameId, spins: gameStatistics.spins, launches: gameStatistics.launches }).from(gameStatistics);56 const statMap = new Map(stats.map((s) => [s.gameId, s]));57 let favs = new Set<string>();58 let recent = new Map<string, Date>();59 if (req.user) {60 const f = await db.select({ gameId: favorites.gameId }).from(favorites).where(eq(favorites.userId, req.user.id));61 favs = new Set(f.map((x) => x.gameId));62 const r = await db.select({ gameId: userGameStats.gameId, at: userGameStats.lastPlayedAt }).from(userGameStats).where(eq(userGameStats.userId, req.user.id));63 recent = new Map(r.map((x) => [x.gameId, x.at]));64 }65 const live = await redis().zcount("live:players", Date.now() - 5 * 60_000, "+inf").catch(() => 0);66 const cards = rows.map((g) => {67 const st = statMap.get(g.id);68 return toCard(g, { popularity: Number(st?.spins ?? 0) + Number(st?.launches ?? 0) * 20, favorite: favs.has(g.id), lastPlayedAt: recent.get(g.id) ?? null });69 });70 return { games: cards, livePlayers: live, recommendations: FIRST_GAME_RECOMMENDATIONS };71 });7273 app.get("/api/games/:slug", async (req) => {74 const { slug } = req.params as { slug: string };75 const g = await db.query.games.findFirst({ where: eq(games.slug, slug) });76 if (!g || g.lifecycle !== "published" || !flag(`game.${slug}.enabled`)) throw errors.notFound("Game not found");77 const crashDef = CRASH_BY_SLUG.get(slug);78 if (crashDef) {79 const s = g.summary as Record<string, unknown>;80 let favorite = false;81 if (req.user) favorite = !!(await db.query.favorites.findFirst({ where: and(eq(favorites.userId, req.user.id), eq(favorites.gameId, g.id)) }));82 const info: GameInfo = {83 ...toCard(g, { favorite }),84 rtp: crashDef.rtp,85 hitFrequency: ((s.certification as { hitRate?: number } | null)?.hitRate) ?? null,86 description: crashDef.description,87 rules: crashDef.rules,88 paytable: [],89 certification: (s.certification as GameInfo["certification"] | null) ?? null,90 };91 return { game: info, definition: crashDef };92 }93 const arcadeDef = ARCADE_BY_SLUG.get(slug);94 if (arcadeDef) {95 const s = g.summary as Record<string, unknown>;96 let favorite = false;97 if (req.user) favorite = !!(await db.query.favorites.findFirst({ where: and(eq(favorites.userId, req.user.id), eq(favorites.gameId, g.id)) }));98 const info: GameInfo = {99 ...toCard(g, { favorite }),100 rtp: arcadeDef.rtp,101 hitFrequency: ((s.certification as { hitRate?: number } | null)?.hitRate) ?? null,102 description: arcadeDef.description,103 rules: arcadeDef.rules,104 paytable: [],105 certification: (s.certification as GameInfo["certification"] | null) ?? null,106 };107 return { game: info, definition: arcadeDef };108 }109 const def = getGame(slug);110 if (!def) throw errors.notFound("Game not found");111 const s = g.summary as Record<string, unknown>;112 const cert = (s.certification as GameInfo["certification"] | null) ?? null;113 let favorite = false;114 if (req.user) favorite = !!(await db.query.favorites.findFirst({ where: and(eq(favorites.userId, req.user.id), eq(favorites.gameId, g.id)) }));115 const info: GameInfo = {116 ...toCard(g, { favorite }),117 rtp: def.rtp,118 hitFrequency: cert?.hitRate ?? null,119 description: def.description,120 rules: def.rules,121 paytable: def.symbols122 .filter((sym) => sym.pays || sym.scatterPays)123 .map((sym) => ({124 symbol: sym.id,125 label: sym.name,126 // Displayed as multiples of total bet (payScale/betDivisor applied), rounded to 2 decimals.127 pays: Object.fromEntries(128 Object.entries(sym.pays ?? sym.scatterPays ?? {}).map(([k, v]) => [k, Number(((v * def.payScale) / (sym.pays ? def.betDivisor : 1)).toFixed(3))]),129 ),130 })),131 certification: cert,132 };133 return { game: info, definition: clientDefinition(def) };134 });135136 app.post("/api/games/:slug/launch", async (req) => {137 const { slug } = req.params as { slug: string };138 const g = await db.query.games.findFirst({ where: eq(games.slug, slug), columns: { id: true } });139 if (!g) throw errors.notFound();140 await db.update(gameStatistics).set({ launches: sql`${gameStatistics.launches} + 1` }).where(eq(gameStatistics.gameId, g.id));141 if (req.user) {142 // Persisted game state for meters/heat so the client can render them on load.143 const st = await db.execute(sql`select state from game_states where user_id = ${req.user.id} and game_id = ${g.id}`);144 return { ok: true, state: (st.rows[0] as { state?: unknown } | undefined)?.state ?? null };145 }146 return { ok: true, state: null };147 });148149 app.post("/api/games/:slug/spin", async (req) => {150 const user = requireUser(req);151 const { slug } = req.params as { slug: string };152 const retry = await rateLimit(`spin:${user.id}`, 240, 60);153 if (retry) {154 await logSecurity(req, "spin.suspicious", { userId: user.id, severity: "warn", meta: { slug, ip: clientIp(req) } });155 throw errors.rateLimited(retry);156 }157 const parsed = spinSchema.safeParse(req.body);158 if (!parsed.success) throw errors.badRequest("Invalid spin request.", parsed.error.flatten());159 return spin({ userId: user.id, slug, bet: parsed.data.bet, clientRoundId: parsed.data.clientRoundId });160 });161162 app.get("/api/games/:slug/history", async (req) => {163 const user = requireUser(req);164 const { slug } = req.params as { slug: string };165 const q = z.object({ limit: z.coerce.number().int().min(1).max(50).default(20) }).parse(req.query);166 const rows = await db.execute(sql`select round_id, bet, win, multiplier, balance_after, created_at, features from game_rounds where user_id = ${user.id} and game_slug = ${slug} order by created_at desc limit ${q.limit}`);167 return {168 entries: (rows.rows as Record<string, unknown>[]).map((r) => ({169 roundId: r.round_id,170 bet: Number(r.bet),171 win: Number(r.win),172 multiplier: Number(r.multiplier),173 balanceAfter: Number(r.balance_after),174 createdAt: (r.created_at as Date).toISOString(),175 features: r.features,176 })),177 };178 });179180 app.post("/api/games/:slug/favorite", async (req) => {181 const user = requireUser(req);182 const { slug } = req.params as { slug: string };183 const g = await db.query.games.findFirst({ where: eq(games.slug, slug), columns: { id: true } });184 if (!g) throw errors.notFound();185 const existing = await db.query.favorites.findFirst({ where: and(eq(favorites.userId, user.id), eq(favorites.gameId, g.id)) });186 if (existing) {187 await db.delete(favorites).where(and(eq(favorites.userId, user.id), eq(favorites.gameId, g.id)));188 await db.update(gameStatistics).set({ favorites: sql`greatest(${gameStatistics.favorites} - 1, 0)` }).where(eq(gameStatistics.gameId, g.id));189 return { favorite: false };190 }191 await db.insert(favorites).values({ userId: user.id, gameId: g.id });192 await db.update(gameStatistics).set({ favorites: sql`${gameStatistics.favorites} + 1` }).where(eq(gameStatistics.gameId, g.id));193 return { favorite: true };194 });195196 app.get("/api/user/games", async (req) => {197 const user = requireUser(req);198 const rows = await db199 .select({ slug: games.slug, name: games.name, spins: userGameStats.spins, won: userGameStats.won, wagered: userGameStats.wagered, biggestWin: userGameStats.biggestWin, biggestMultiplier: userGameStats.biggestMultiplier, lastPlayedAt: userGameStats.lastPlayedAt })200 .from(userGameStats)201 .innerJoin(games, eq(games.id, userGameStats.gameId))202 .where(eq(userGameStats.userId, user.id))203 .orderBy(desc(userGameStats.lastPlayedAt));204 return { games: rows.map((r) => ({ ...r, biggestMultiplier: Number(r.biggestMultiplier), lastPlayedAt: r.lastPlayedAt.toISOString() })) };205 });206}207208/** Definition data the renderer needs (symbols, grid, presentation). Weights are public "Game Info" data too. */209export function clientDefinition(def: ReturnType<typeof getGame> & object) {210 return {211 slug: def.slug,212 name: def.name,213 version: def.version,214 grid: def.grid,215 payModel: def.payModel,216 symbols: def.symbols.map((s) => ({ id: s.id, name: s.name, kind: s.kind, tier: s.tier, style: s.style })),217 wild: def.wild ? { id: def.wild.id, expanding: !!def.wild.expanding, sticky: !!def.wild.sticky, multiplier: !!def.wild.multiplier, exploding: !!def.wild.exploding, moving: !!def.wild.moving } : null,218 scatter: def.scatter ? { id: def.scatter.id, triggers: def.scatter.triggers } : null,219 cascades: !!def.cascades,220 spinCollect: def.spinCollect ? { symbolId: def.spinCollect.symbolId, ladder: def.spinCollect.ladder } : null,221 holdRespin: def.holdRespin ? { symbolId: def.holdRespin.symbolId, respins: def.holdRespin.respins, jackpots: def.holdRespin.jackpots } : null,222 meter: def.meter ? { id: def.meter.id, name: def.meter.name, symbolId: def.meter.symbolId, max: def.meter.max, label: def.meter.onFull.label } : null,223 heat: def.heat ? { max: def.heat.max, ladder: def.heat.ladder, bandSize: def.heat.bandSize, label: def.heat.meltdown.label } : null,224 mystery: def.mystery ? { symbolId: def.mystery.symbolId } : null,225 quantum: !!def.quantum,226 dynamicGrid: def.dynamicGrid ?? null,227 jackpot: def.jackpot ? { tiers: def.jackpot.tiers.map((t) => ({ id: t.id, multiplier: t.multiplier })) } : null,228 pickBonuses: def.pickBonuses?.map((b) => ({ id: b.id, name: b.name, cells: b.cells, picks: b.picks })) ?? [],229 minBet: def.minBet,230 maxBet: def.maxBet,231 maxMultiplier: def.maxMultiplier,232 volatility: def.volatility,233 presentation: def.presentation,234 featureNames: def.featureNames,235 };236}237