jwinterm d8d10728ba fix: gate direct (entry-fee) payouts behind DIRECT_PAYOUTS_ENABLED ...

completeGame only gated PAID_CREDITS payouts (on creditsPayoutEnabled); a
PAID_SINGLE win paid out unconditionally, so DIRECT_PAYOUTS_ENABLED=false did
NOT actually stop direct payouts — a no-payout instance (mainnet legitimacy)
would still send crypto on an entry-fee win. Caught during deploy verification.

- Add this.directPayoutEnabled (from DIRECT_PAYOUTS_ENABLED env / direct rule
  enabled in the config snapshot), mirroring creditsPayoutEnabled.
- completeGame now gates the PAID_SINGLE payout on directPayoutEnabled.
- The derived directPayoutsEnabled flags (getGameModeInfo / effective mode)
  and /api/game-modes PAID_SINGLE.payoutMultiplier now respect it (show 0 when
  off) instead of inferring from multipliers > 0.

Adds a regression test: a PAID_SINGLE win with directPayoutEnabled=false
queues no payout. Full suite: 22 suites / 159 tests.

2026-05-31 15:25:46 -04:00

..

addressManager.test.js

add address modal and try to fix payout

2025-09-29 17:40:59 -04:00

adminRoutes.test.js

refactor: extract smirk auth routes from index.js

2026-05-31 14:23:23 -04:00

batchPayout.test.js

security: fix batch-payout tx_hash collision and double-pay risk

2026-05-31 09:26:14 -04:00

earlyEntry.test.js

add early entry and help screens for new users

2025-12-26 10:21:25 -05:00

freePlay.test.js

feat: free-play choice + per-game dual leaderboard (backend)

2026-05-31 15:01:01 -04:00

gameModeManager.test.js

fix edge cases and tests

2026-02-19 06:15:45 -05:00

identityResolution.test.js

refactor: unify identity resolution on stable user_id (anon_token)

2026-05-31 10:15:08 -04:00

inputValidation.test.js

fix: input validation + memory-leak/concurrency hardening

2026-05-31 13:46:53 -04:00

moneyAtomic.test.js

refactor: exact BigInt money math via src/money/atomic.js

2026-05-31 09:45:58 -04:00

monsterChase.test.js

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

monsterCollision.test.js

fix: dungeon reachability guard + per-substep monster collision

2026-05-31 14:08:45 -04:00

movementManager.test.js

Begin payment logic and tests

2025-09-27 08:45:22 -04:00

payment_flow.integration.test.js

security: fix underpayment exploit and make provably-fair real

2026-05-31 09:14:21 -04:00

payment_payout_comprehensive.test.js

fix credits package bug and improve stale payment logic

2026-02-19 07:05:15 -05:00

paymentHandlers.test.js

add error handling and more tests

2025-09-29 11:20:11 -04:00

payoutRetry.test.js

fix: retry payout stat-counting and atomic tx_hash write

2026-05-31 10:00:51 -04:00

payoutSnapshot.test.js

fix: gate direct (entry-fee) payouts behind DIRECT_PAYOUTS_ENABLED

2026-05-31 15:25:46 -04:00

provablyFair.test.js

fix: dungeon reachability guard + per-substep monster collision

2026-05-31 14:08:45 -04:00

rateLimit.test.js

fix: reconnect-proof rate limiting (stable id + real client IP)

2026-05-31 10:21:28 -04:00

security.test.js

security: move session token to handshake auth and rotate on resume

2026-05-31 09:29:20 -04:00

singleGameRecovery.test.js

fix: recover unconsumed single-game payments; make game preservation deterministic

2026-05-31 09:36:09 -04:00

walletRPCService.test.js

fix edge cases and tests

2026-02-19 06:15:45 -05:00