{JSON.stringify(value, null, 2)};
/* ------------------------------------------------------------------ *
* Logs modal — GET /promotriggers/{id}/logslist (chrome + filters) and
* GET /promotriggers/{id}/getLogsTable (DataTables server-side feed).
* The filter row is modal-local by design: the real modal carries its
* own inline row (modals/list.blade.php L11-47), not the page's hero
* filter strip. The table and pager are the shared Hrs* chrome.
* ------------------------------------------------------------------ */
const HptLogsModal = ({ trg, logs, onClose }) => {
const [f, setF] = hptUseState({ from: "", to: "", player: "", status: "" });
/* DataTables server-side ordering on all six columns; default promo_trigger_logs.id.
The Player entry is the fixed version of the real one (divergence 2). */
const [sort, setSort] = hptUseState({ key: "id", dir: "desc" });
const [page, setPage] = hptUseState(0);
const [pageSize, setPageSize] = hptUseState(10);
const rows = hptUseMemo(() => {
const pq = f.player.trim().toLowerCase();
return (logs || []).filter(l => {
if (f.from && hptIsoDay(l.created_at) < f.from) return false;
if (f.to && hptIsoDay(l.created_at) > f.to) return false;
/* Player box is a prefix match on the real platform (username LIKE 'x%'). */
if (pq && l.player_username.toLowerCase().indexOf(pq) !== 0) return false;
if (f.status && l.status !== f.status) return false;
return true;
});
}, [logs, f]);
const sorted = hptUseMemo(() => {
const dir = sort.dir === "asc" ? 1 : -1;
const val = (l) => sort.key === "player" ? l.player_username
: sort.key === "created_at" ? l.created_at
: sort.key === "status" ? l.status
: sort.key === "error" ? (l.error || "")
: sort.key === "details" ? JSON.stringify(l.details)
: l.id;
return rows.slice().sort((a, b) => { const x = val(a), y = val(b); return (typeof x === "number" ? x - y : String(x).localeCompare(String(y))) * dir; });
}, [rows, sort]);
const pageCount = Math.max(1, Math.ceil(sorted.length / pageSize));
const safePage = Math.min(page, pageCount - 1);
const paged = sorted.slice(safePage * pageSize, safePage * pageSize + pageSize);
const columns = [
{ key: "id", label: "ID", sortable: true, firstDir: "desc", width: 92, render: l => {l.id} },
/* Player → users.username via leftJoin, linked to /players/{id} on the real platform. */
{
key: "player", label: "Player", sortable: true, firstDir: "asc", render: l => (
{l.player_username}
dd/mm/yyyy datepickers and the Player box matches
username LIKE ‘x%’ — a prefix, not a contains. Sorting is server-side on all six columns
(default promo_trigger_logs.id); the Player sort is the fixed version of one that SQL-errors on the
real platform because getLogsTable orders by players.username while the query joins
users.
executeTrigger(code, skin_id, player_id) runs it when a
promotion assignment fires it (PromotionsController::executeAssociatedTriggers) or when PromoPlay
reports a casino prize or trigger key — and only while now sits inside the window below. Attaching this
trigger to a promotion is done on the Promotions form, not here.
executeTrigger(). Unique per (code, skin_id) — two skins may reuse the same code.dd/mm/yyyy hh:ii datetimepicker parsed by
sistemadatatime(); the window is the only thing that decides whether a trigger fires —
the stato (Active/Disabled) column is never read.
/tt_freespins/fetchVendors, /fetchCurrencies and
/fetchGamesWithLimits; the bet amounts are the game’s fs_limits.limit_values for
the chosen currency. Execution posts a campaign to TimelessTech
(/api/generic/campaigns/create) — an upstream failure is written to the trigger’s logs as an
error row, not raised to whoever assigned the promotion.
fetchPromotions, which searches
promotion name and code. Execution runs
PromotionsBonusController::associateToPromo() — the same path a manual assignment takes.
skins.pp_api_url + /api/players/depositPoints, signed with
pp_username/pp_secret_key). A skin without those credentials fails at execution
time with a 500 from the upstream, logged as an error row.
executeRealMoney() calls TransferController::processTransfer() and credits the
player {pay.real_money_amount ? {hptAmount(pay.real_money_amount, cur)} : "the amount above"}, debiting
the player’s admin-skin ancestor as payeer. There is no cap, no per-player limit, no daily ceiling and
no reversal — the only brake is the start/end window. A trigger attached to a high-traffic promotion pays
this out once per successful assignment.
promo_trigger_logs row{logCount === 1 ? "" : "s"}, every
promotions_triggers pivot row that attaches this trigger to a promotion, and the trigger itself.
Promotions that referenced it keep working — they simply stop firing this side effect, with no notice on their
own screen.
GET /promotriggers/delete/{trg.id}/ with no CSRF token. Skin admins may only
delete triggers belonging to their own skin; super admins may delete any.
delete() refuses while
end ≥ time(). This window closes {hptFmtTs(trg.end)}. To retire it now, edit the
trigger and move its end date into the past — then delete it.
This route executes executeTrigger(‘{HPT_TEST_CODE}’, {HPT_TEST_SKIN}, ‘{HPT_TEST_PLAYER}’) against
live data. It is not a dry run, a sandbox or a connectivity check — it runs the same engine a real
promotion assignment runs, for the hardcoded player {HPT_TEST_PLAYER} on skin{" "}
{HPT_TEST_SKIN} ({hptSkinName(HPT_TEST_SKIN)}).
{target ? ( <>Trigger {HPT_TEST_CODE} currently exists on that skin as a{" "} {hptTypeLabel(target.promotype)} trigger {target.promotype === "real_money" && <> for {hptAmount(target.pay.real_money_amount, hptSkinCur(target.skin_id))}}, and its window is {target.end < hptNow() ? closed : open} ({hptFmtTs(target.start)} → {hptFmtTs(target.end)}).{" "} {target.end < hptNow() ? "While the window is closed the call is a no-op — but any edit that reopens it makes the URL live again." : target.promotype === "real_money" ? "While the window is open, calling this URL transfers real money: TransferController::processTransfer() debits the player's admin-skin ancestor and credits the player, and a real_money_assigned row lands in this trigger's logs." : "While the window is open, calling this URL runs that side effect for real against the hardcoded player — and if the trigger is ever switched back to Real Money, the same URL starts paying cash again."} ) : ( <>No trigger with code {HPT_TEST_CODE} exists on skin {HPT_TEST_SKIN} right now, so the call would find nothing to run — until someone creates one with that code, at which point this URL starts paying it out. )}
Anyone with a back-office session that clears the auth + 2FA middleware can call it — testTrigger
{" "}checks no role at all, unlike index (super admin / skin admin) or delete.
executeRealMoney() → TransferController::processTransfer(): {hptAmount(target.pay.real_money_amount, cur)} credited to the player, debited from the player’s admin-skin ancestor.}promo_trigger_logs row (real_money_assigned on success) — the only record that it happened.ORDER BY promo_triggers.id DESC with paginate(25). Only the logs modal sorts.promo_triggers.stato exists and is fillable, but nothing displays, edits or reads it — a trigger’s only on/off is its start/end window.promotions_triggers pivot is written from the Promotions edit form; this screen only shows the result through the logs.POST /promotriggers/{"{id}"}/hidden and its JS exist — but no element calls them, hidden is not in $fillable, and the committed migration has no such column, so on the real platform that endpoint would SQL-error. It is drawn here as the evident intent of the sibling Promotions list.players.username while the query joins users, which raises a SQL error.name LIKE %x% OR code LIKE %x%, plus an exact id match when the term is all digits.,
},
{
key: "skin", label: "Skin", type: "select", icon: "flag", placeholder: "Select", width: 190,
options: HPT_SKINS.map(s => ({ value: String(s.id), label: s.name })),
tip: <>Empty means every skin. Super admins only: a skin admin reaching this page by URL is hard-forced to their own skin_id and sees neither this filter nor the Skin column.,
},
{
key: "show_expired", label: "Show expired triggers", type: "select", icon: "calendar", width: 190,
defaultValue: "0", options: [{ value: "0", label: "No" }, { value: "1", label: "Yes" }],
tip: <>Default No — rows whose end date has passed are hidden. Yes shows valid and expired together; there is no expired-only view.,
},
];
/* Search + skin only — the chip counts are computed before the expired filter, the way the
controller's summary is (L111-115). `all` is computed there too and never displayed; it is not
displayed here either. */
const preExpiry = hptUseMemo(() => {
const q = String(applied.search || "").trim().toLowerCase();
const digits = q && /^\d+$/.test(q);
return rows.filter(r => {
if (applied.skin && String(r.skin_id) !== String(applied.skin)) return false;
if (q) {
const hit = r.name.toLowerCase().includes(q) || (r.code || "").toLowerCase().includes(q) || (digits && String(r.id) === q);
if (!hit) return false;
}
return true;
});
}, [rows, applied]);
const counts = hptUseMemo(() => ({
valid: preExpiry.filter(r => r.end >= now).length,
expired: preExpiry.filter(r => r.end < now).length,
}), [preExpiry, now]);
/* Fixed ORDER BY promo_triggers.id DESC (L106) — the list has no sortable columns at all, so the
order is not user-controllable here either. */
const filtered = hptUseMemo(
() => (applied.show_expired === "1" ? preExpiry : preExpiry.filter(r => r.end >= now)).slice().sort((a, b) => b.id - a.id),
[preExpiry, applied.show_expired, now]);
const PAGE_SIZE = 25; // paginate(25), L106 — the real page has no page-size control
const pageCount = Math.max(1, Math.ceil(filtered.length / PAGE_SIZE));
const safePage = Math.min(page, pageCount - 1);
const paged = filtered.slice(safePage * PAGE_SIZE, safePage * PAGE_SIZE + PAGE_SIZE);
const onSearch = (v) => { setApplied({ search: v.search || "", skin: v.skin || "", show_expired: v.show_expired || "0" }); setPage(0); };
const onReset = () => { const d = { search: "", skin: "", show_expired: "0" }; setDraft(d); setApplied(d); setPage(0); };
const setExpired = (v) => { const next = { ...applied, show_expired: v }; setDraft(next); setApplied(next); setPage(0); };
/* The screen's field names map back to the columns here rather than at the
form, so the form keeps talking about `promotype`, `start`, `end` and
`hidden` the way every render site in this file does. `visible` is the
column and `hidden` is the screen's word: one inversion, one place. */
const toColumns = (t) => ({
skin_id: t.skin_id,
name: t.name,
code: t.code,
action_type: t.promotype,
starts_at: t.start ? new Date(t.start * 1000).toISOString() : null,
ends_at: t.end ? new Date(t.end * 1000).toISOString() : null,
visible: !t.hidden,
promotion_id: t.pay ? t.pay.promotion_id : null,
freespin_currency: t.pay ? t.pay.currency : null,
freespins_per_player: t.pay ? t.pay.freespins : null,
freespin_game_id: t.pay ? t.pay.game_id : null,
freespin_bet_amount: t.pay ? t.pay.bet : null,
freespin_vendor: t.pay ? t.pay.vendor : null,
promoplay_points: t.pay ? t.pay.points : null,
real_money_amount: t.pay ? t.pay.amount : null,
});
const onSave = (t) => {
const body = toColumns(t);
return t.id == null
? save.run(() => window.sb.create("promoTriggers", body))
: save.run(() => window.sb.update("promoTriggers", t.id, body));
};
const onDelete = () => {
const t = del;
setDel(null);
/* promo_trigger_logs references the trigger. The FK decides what happens to
them — cascade or restrict — not this screen, and not a toast that claims
a row count it did not verify. The old handler asserted "N log rows and
its pivot rows went with it, in one transaction" while deleting nothing
but a local array. */
return save.run(() => window.sb.remove("promoTriggers", t.id));
};
/* Divergence 1 — evident intent of toggleHidden (isadmin()-gated on the real endpoint). */
const onToggleHidden = (t) => save.run(
/* isystem's endpoint writes a `hidden` column its own migration never
created, so the call SQL-errors there. This schema has `visible`, which
is the same switch stated positively — so the button works here, and the
divergence is that it works at all. */
() => window.sb.update("promoTriggers", t.id, { visible: !!t.hidden }));
const testTarget = rows.find(r => r.code === HPT_TEST_CODE && r.skin_id === HPT_TEST_SKIN) || null;
const runTestTrigger = () => {
setTestOpen(false);
if (!testTarget) {
hrsToast("/testTrigger executed — nothing to run", `No trigger with code ${HPT_TEST_CODE} exists on skin ${HPT_TEST_SKIN}; executeTrigger() found no row and logged nothing.`);
return;
}
const open = testTarget.end >= hptNow();
const player = HPT_PLAYERS[0];
const entry = {
id: Math.max(0, ...(logs[testTarget.id] || []).map(l => l.id)) + 1,
player_id: HPT_TEST_PLAYER,
player_username: player.u,
created_at: hptNow(),
status: open ? "success" : "error",
details: hptLogDetails(testTarget, { id: HPT_TEST_PLAYER, u: player.u }, open),
error: open ? "" : "Trigger window closed — executeTrigger() refused to run",
};
setLogs(l => ({ ...l, [testTarget.id]: [entry, ...(l[testTarget.id] || [])] }));
const cash = testTarget.promotype === "real_money";
hrsToast(
open ? (cash ? "/testTrigger executed — real-money transfer written" : "/testTrigger executed — side effect applied") : "/testTrigger executed — window closed, nothing ran",
open
? (cash
? `${hptAmount(testTarget.pay.real_money_amount, hptSkinCur(testTarget.skin_id))} to player ${HPT_TEST_PLAYER} via processTransfer(); a real_money_assigned row is now on trigger #${testTarget.id}. Prototype only — no money moved here.`
: `${hptTypeLabel(testTarget.promotype)} applied to player ${HPT_TEST_PLAYER}; a log row is now on trigger #${testTarget.id}. Prototype only — nothing was sent upstream.`)
: `executeTrigger('${HPT_TEST_CODE}', ${HPT_TEST_SKIN}, '${HPT_TEST_PLAYER}') found the trigger outside its start/end window and did nothing.`);
};
const columns = [
{ key: "id", label: "ID", width: 78, render: r => {r.id} },
/* Skin column renders only for super admins ($canPickSkin) — the canonical view, since the
sidebar entry itself is inside @if (isadmin()). */
{ key: "skin", label: "Skin", width: 170, render: r => POST /promotriggers/{"{id}"}/hidden and its JS exist and are isadmin()-gated, but nothing on the real screen calls them, hidden is not in PromoTrigger::$fillable, and the committed promo_triggers migration has no hidden column — the call would SQL-error. Drawn here as the Visible/Hidden switch of the sibling Promotions list this screen was copied from. Nothing in the execution engine reads it.PromoTriggersController::index aborts 404 unless isAdmin() (super admin) or isSkinAdmin() (skin admin). The CMS sidebar link sits inside @if (isadmin()), so a skin admin has to reach the page by URL — and when they do, the skin is forced to their own, with no Skin column and no Skin filter. No skin feature flag gates this screen. }
gateNote={<>Permission asymmetry, honestly: only index, delete (isadmin()/isSkinAdmin(), own skin only) and toggleHidden (isadmin()) check a role. saveTrigger, triggerForm, fetchPromotions, search, logslist, getLogsTable and testTrigger check nothing beyond the auth + 2FA middleware — so any authenticated back-office user who knows the URLs can create, edit and execute triggers, including the real-money ones.}
explainer={{
title: "What this screen does, in plain English",
bullets: [
<>A promo trigger is a code plus one side effect. Nothing here runs on a schedule: executeTrigger(code, skin_id, player_id) is called after a successful promotion assignment and by PromoPlay (casino prize / trigger key), and it acts only while now is inside the trigger’s start/end window.,
<>Four side effects: assign a Promotion, grant Freespins through TimelessTech, deposit Promoplay Points through the skin’s PromoPlay API, or transfer Real Money from the player’s admin-skin ancestor into the player’s balance. Real Money is cash, not bonus, and there is no cap or reversal.,
<>Every run appends a promo_trigger_logs row — success or error, with the payload as JSON. Failures are recorded here and not raised to whoever assigned the promotion, so this list is the only place a broken trigger shows up. Open Logs on a row to read them.,
<>Triggers are attached to promotions from the Promotions edit form, not here. Deleting one is refused until it has expired, and then takes its logs and its promotion links with it.,
]
}}
actions={
}>