// NO PROD JSON API (bucket B — feed is a DataTables render payload or // {"html":...}, not data) — mock until backend (see PROD_API_INVENTORY.md) // Represents: GET /deposits · DepositsController — see docs/ISYSTEM_REFERENCE.md §Batch 1 "Deposits" /* Host → Deposits — the admin deposit-request queue (`ordini` table). Replaces the legacy HostDeposits bundled in src/pages/HostFinanceMsg.jsx (this file loads after it, so this definition wins — HostFinanceMsg's copy retires later). Real surface: route admin.deposits `GET /deposits` (+ /deposits/getDeposits, POST /deposits/approve/{id}, POST /deposits/decline/{id}); sidebar badge via GET /getPendingCounts polled every 3 s. Permission: sidebar gated by checkUserBoPerm('support_deposits') inside the role gate isadmin() || isSkinAdmin() || isAdministration() || isCustomCare() || isShop(); the routes themselves enforce only ['auth','admin','2fa','g2fa'] + hierarchy scoping (users.user_path LIKE '/%'). Labels: runtime translations live in storage/lang (gitignored); backend.* keys with no committed text (backend.payment_details, backend.last_transaction, backend.decline_reason, …) are rendered as sensible operator-facing labels ("label inferred" per build policy). The portlet title is hardcoded "Deposits" in the real Blade. */ const { useState: useStateHdp, useMemo: useMemoHdp, useEffect: useEffectHdp } = React; /* ---------------- constants (real values from the reference) ---------------- */ /* ordini.payment_status — DepositsController::getPaymentStatusLabel. No constants class in the real code (magic numbers throughout); NOT WithdrawRequestStatus — deposits have no ERROR/CANCELED values. Anything else renders "Unknown". */ /* Labels come from deposit_request_statuses; only the chip COLOUR stays here, because a colour is a presentation choice and the table has no opinion. */ const HDP_STATUS_CLASS = { 0: "fm-chip--pending", // badge-warning 1: "fm-chip--approved", // badge-success 2: "fm-chip--rejected", // badge-danger }; /* A row carries its own label from the embedded status row; the list form is only needed where there is no row (the filter pill, the export header). */ const hdpStatusOf = (r) => [r.statusLabel || `Status ${r.status}`, HDP_STATUS_CLASS[r.status] || "hdp-chip--unknown"]; const hdpStatusLabel = (statuses, s) => { const hit = (statuses || []).find(x => x[0] === Number(s)); return hit ? hit[1] : `Status ${s}`; }; /* Method filter options come from payment_methods, which is what DepositMethodsController::getDepositMethods reads for the admin's skin. The five hardcoded codes that used to live here were the platform's real methods at one point in time — which is exactly the kind of list that goes stale silently. */ /* Search-type select (user_search_type2). The real server `switch` default case is SINGLE account, so the empty "Select" option behaves as an exact-user match; it only applies when a user is selected. */ const HDP_SEARCH_TYPES = [ ["", "Select"], // backend.select_option — behaves as single ["all", "Account + sub-accounts"], // backend.all_selections ["subaccounts", "Sub-accounts"], // backend.subaccounts ["single", "Single account"], // backend.account ]; const HDP_PAGE_SIZES = [5, 10, 25, 50, 100]; // real DataTables lengthMenu; default 100 /* ---------------- live rows ---------------- This block used to build 120 deposits from a seeded RNG: twelve player names against three shops, ten Spanish-language sender names, five real-sounding Spanish rejection reasons ("ya se te cargo, revise antes de solicitar deposito"), 22-digit CVU numbers and CUITs. Every one of those is a claim about money somebody moved. They are `deposit_requests` rows now, and an empty queue means an empty queue. */ const hdpMethodLabel = (code) => { const s = code.replace(/-/g, " "); return s.charAt(0).toUpperCase() + s.slice(1); }; // ucfirst(str_replace('-',' ',…)) like the real row builder const hdpAmount = (n, cur) => Number(n).toLocaleString("en-US", { minimumFractionDigits: 2, maximumFractionDigits: 2 }) + " " + cur; // number_format(amount,2).' '.currency const hdpDate = (ts) => { const d = new Date(ts); const p = (x) => String(x).padStart(2, "0"); return `${p(d.getDate())}/${p(d.getMonth() + 1)}/${d.getFullYear()} ${p(d.getHours())}:${p(d.getMinutes())}`; }; // d/m/Y H:i /* deposit_requests -> the row shape this screen renders. `lastTx` used to be an N+1 lookup faked over the generated set. isystem runs that query per row; here it is derived from the rows already fetched, and marked as scoped to them rather than presented as the player's true last approved deposit. */ const hdpRow = (r) => ({ id: Number(r.id), user: r.user ? r.user.username : "", userId: r.user_id == null ? null : Number(r.user_id), parent: r.user && r.user.parent ? r.user.parent.username : "", skin: r.skin ? r.skin.name : "", skinId: r.skin_id == null ? null : Number(r.skin_id), ts: r.created_at ? Date.parse(r.created_at) : null, amount: Number(r.amount) || 0, currency: r.currency || "", method: r.method ? r.method.code : "", methodName: r.method ? r.method.name : "", status: Number(r.status_id), statusLabel: r.status ? r.status.label : null, updateTs: r.decided_at ? Date.parse(r.decided_at) : null, doneBy: r.decidedBy ? r.decidedBy.username : null, reason: r.decline_reason || "", /* isystem spread the payer's identity across ~35 PSP-specific columns. Here it is payer_name / payer_document plus the provider payload, so a method that does not collect a sender simply has none — rather than one invented for it. */ sender: r.payer_name || null, recipient: null, cvi: r.payer_document || null, cuit: null, isTest: !!r.is_test, ledgerEntryId: r.ledger_entry_id == null ? null : Number(r.ledger_entry_id), lastTx: null, }); const hdpToast = (m) => window.PAYBO?.emitToast && window.PAYBO.emitToast({ id: `hdp-${Date.now()}`, tx_id: m, amount: 0, currency: "HOST", player: "Deposits", reason: "Prototype state only \u2014 not persisted." }); /* ---------------- small pieces ---------------- */ const HdpPill = ({ label, onClear }) => ( {label} ); const HdpCopyField = ({ label, value }) => (
{label} {value}
); /* Payment details cell — only rendered for wire-argentina (real behavior); the cuit "Código Único" block is commented out in the real view and stays hidden. */ const HdpPayDetails = ({ r }) => r.method !== "wire-argentina" ? — : (
); const HdpStatusCell = ({ r }) => { const [label, cls] = hdpStatusOf(r); return (
{label} {r.status !== 0 && (
{hdpDate(r.updateTs)}
{r.doneBy}
)}
); }; /* Row actions — rendered only when payment_status == 0 AND method !== 'online' (real condition). 'online' (PSP-processed) deposits never get buttons but DO count toward the pending badge. */ const HdpRowActions = ({ r, onApprove, onDecline, block }) => { if (r.status !== 0) return —; if (r.method === "online") return ( — ); return (
); }; /* Approve / Reject confirmation modal (SweetAlert in the real page). Full-screen on mobile via .hdp-modal media query. */ const HdpActionModal = ({ mode, row, busy, onConfirm, onClose }) => { const [reason, setReason] = useStateHdp(""); const approve = mode === "approve"; return (
{ if (!busy) onClose(); }}>
e.stopPropagation()}>
{approve ? "Approve deposit" : "Reject deposit"} #{row.id}
{approve ? "Credits the player via an internal transfer (processTransfer, system 'bo'), then runs reward processing." : "No money moves — the request is marked Rejected with your reason."}
Player{row.user}
Parent{row.parent || "-"}
Amount{hdpAmount(row.amount, row.currency)}
Method{hdpMethodLabel(row.method)}
Date{hdpDate(row.ts)}
{!approve && (
{/* Required client-side only in the real page (SweetAlert inputValidator); the server reads `reason` with fallback 'No reason provided' and does no validation / max length. The prototype keeps the requirement in the UI. */} {/* */}