chore(release): 0.2.8
[risinglegends.git] / src / server / api.ts
1 import * as otel from './tracing';
2 import { version } from "../../package.json";
3 import { config as dotenv } from 'dotenv';
4 import { join } from 'path';
5 import express, {Request, Response} from 'express';
6 import bodyParser from 'body-parser';
7
8 import http from 'http';
9 import { Server, Socket } from 'socket.io';
10 import { logger } from './lib/logger';
11 import { loadPlayer, createPlayer, updatePlayer, movePlayer } from './player';
12 import { random, sample } from 'lodash';
13 import {broadcastMessage, Message} from '../shared/message';
14 import {expToLevel, maxHp, Player} from '../shared/player';
15 import {clearFight, createFight, getMonsterList, getRandomMonster, loadMonster, loadMonsterFromFight, loadMonsterWithFaction, saveFightState} from './monster';
16 import {FightRound} from '../shared/fight';
17 import {addInventoryItem, deleteInventoryItem, getEquippedItems, getInventory, getInventoryItem, updateAp} from './inventory';
18 import { getItemFromPlayer, getItemFromShop, getPlayersItems, getShopItems, givePlayerItem, updateItemCount } from './items';
19 import {FightTrigger, Monster, MonsterForFight, MonsterWithFaction} from '../shared/monsters';
20 import {getShopEquipment, listShopItems } from './shopEquipment';
21 import {EquippedItemDetails} from '../shared/equipped';
22 import {ArmourEquipmentSlot, EquipmentSlot} from '../shared/inventory';
23 import { clearTravelPlan, completeTravel, getAllPaths, getAllServices, getCityDetails, getService, getTravelPlan, stepForward, travel } from './map';
24 import { signup, login, authEndpoint, AuthRequest } from './auth';
25 import {db} from './lib/db';
26 import { getPlayerSkills, getPlayerSkillsAsObject, updatePlayerSkills } from './skills';
27 import {SkillID, Skills} from '../shared/skills';
28
29 import  { router as healerRouter } from './locations/healer';
30
31 import * as Alert from './views/alert';
32 import { renderPlayerBar } from './views/player-bar'
33 import { renderEquipmentDetails, renderStore } from './views/stores';
34 import { renderMap } from './views/map';
35 import { renderProfilePage } from './views/profile';
36 import { renderSkills } from './views/skills';
37 import { renderInventoryPage } from './views/inventory';
38 import { renderMonsterSelector } from './views/monster-selector';
39 import { renderFight, renderRoundDetails } from './views/fight';
40 import { renderTravel, travelButton } from './views/travel';
41 import { renderChatMessage } from './views/chat';
42
43 // TEMP!
44 import { createMonsters } from '../../seeds/monsters';
45 import { createAllCitiesAndLocations } from '../../seeds/cities';
46 import { createShopItems, createShopEquipment } from '../../seeds/shop_items';
47 import { Item, PlayerItem, ShopItem } from 'shared/items';
48 import { equip, unequip } from './equipment';
49 import { HealthPotionSmall } from '../shared/items/health_potion';
50
51 dotenv();
52
53 otel.s();
54
55 const app = express();
56 const server = http.createServer(app);
57
58 app.use(express.static(join(__dirname, '..', '..', 'public')));
59 app.use(bodyParser.urlencoded({ extended: true }));
60 app.use(express.json());
61
62 const io = new Server(server);
63
64 const cache = new Map<string, any>();
65 const chatHistory: Message[] = [];
66
67 app.use((req, res, next) => {
68   console.log(req.method, req.url);
69   next();
70 });
71
72 async function bootstrapSocket(socket: Socket, player: Player) {
73   // ref to get the socket id for a particular player
74   cache.set(`socket:${player.id}`, socket.id);
75   // ref to get the player object
76   cache.set(`token:${player.id}`, player);
77
78   socket.emit('authToken', player.id);
79
80   socket.emit('chat', renderChatMessage(broadcastMessage('server', `${player.username} just logged in`)));
81 }
82
83 io.on('connection', async socket => {
84   logger.log(`socket ${socket.id} connected, authToken: ${socket.handshake.headers['x-authtoken']}`);
85
86   let authToken = socket.handshake.headers['x-authtoken'].toString() === 'null' ? null : socket.handshake.headers['x-authtoken'].toString();
87
88   let player: Player;
89   if(authToken) {
90     logger.log(`Attempting to load player with id ${authToken}`);
91     player = await loadPlayer(authToken);
92   }
93   if(!player) {
94     logger.log(`Creating player`);
95     player = await createPlayer();
96     authToken = player.id;
97     socket.handshake.headers['x-authtoken'] = authToken;
98   }
99
100   logger.log(`Socket [${socket.id}] auth token: ${player.id}`);
101
102   bootstrapSocket(socket, player);
103
104   socket.on('disconnect', () => {
105     console.log(`Player ${player.username} left`);
106     io.emit('status', `${io.sockets.sockets.size} Online (v${version})`);
107   });
108
109
110   io.emit('status', `${io.sockets.sockets.size} Online (v${version})`);
111   // this is a special event to let the client know it can start 
112   // requesting data
113   socket.emit('ready');
114 });
115
116 async function fightRound(player: Player, monster: MonsterWithFaction,  data: {action: 'attack' | 'cast' | 'flee', target: 'head' | 'body' | 'arms' | 'legs'}) {
117   const playerSkills = await getPlayerSkillsAsObject(player.id);
118   const roundData: FightRound = {
119     monster,
120     player,
121     winner: 'in-progress',
122     fightTrigger: monster.fight_trigger,
123     roundDetails: [],
124     rewards: {
125       exp: 0,
126       gold: 0,
127       levelIncrease: false
128     }
129   };
130   const equippedItems = await getEquippedItems(player.id);
131
132   // we only use this if the player successfully defeated the monster 
133   // they were fighting, then we load the other monsters in this area 
134   // so they can "fight again"
135   let potentialMonsters: MonsterForFight[] = [];
136
137   /*
138    * cumulative chance of head/arms/body/legs
139    * 0 -> 0.2 = head
140    * 0.21 -> 0.4 = arms
141    *
142    * we use the factor to decide how many decimal places 
143    * we care about
144    */
145   const factor = 100;
146   const monsterTarget = [0.2, 0.4, 0.9, 1];
147   const targets: ArmourEquipmentSlot[] = ['HEAD', 'CHEST', 'ARMS', 'LEGS'];
148   // calc weighted
149   const rand = Math.ceil(Math.random() * factor);
150   let target: ArmourEquipmentSlot = 'CHEST';
151   monsterTarget.forEach((i, idx) => {
152     if (rand > (i * factor)) {
153       target = targets[idx] as ArmourEquipmentSlot;
154     }
155   });
156
157   const boost = {
158     strength: 0,
159     constitution: 0,
160     dexterity: 0,
161     intelligence: 0,
162     damage: 0,
163     hp: 0,
164   };
165
166   const equipment: Map<EquipmentSlot, EquippedItemDetails> = new Map<EquipmentSlot, EquippedItemDetails>();
167   const weapons: EquippedItemDetails[] = [];
168   let anyDamageSpells: boolean = false;
169   equippedItems.forEach(item => {
170     if(item.type === 'ARMOUR') {
171       equipment.set(item.equipment_slot, item);
172     }
173     else if(item.type === 'WEAPON') {
174       weapons.push(item);
175     }
176     else if(item.type === 'SPELL') {
177       if(item.affectedSkills.includes('destruction_magic')) {
178         anyDamageSpells = true;
179       }
180       weapons.push(item);
181     }
182
183     boost.strength += item.boosts.strength;
184     boost.constitution += item.boosts.constitution;
185     boost.dexterity += item.boosts.dexterity;
186     boost.intelligence += item.boosts.intelligence;
187
188     if(item.type === 'SPELL' && item.affectedSkills.includes('restoration_magic')) {
189       boost.hp += item.boosts.damage;
190     }
191     else {
192       boost.damage += item.boosts.damage;
193     }
194   });
195
196   // if you flee'd, then we want to check your dex vs. the monsters
197   // but we want to give you the item/weapon boosts you need
198   // if not then you're going to get hit.
199   if(data.action === 'flee') {
200     roundData.roundDetails.push(`You managed to escape from the ${monster.name}!`)
201     roundData.winner = 'monster';
202     await clearFight(player.id);
203
204     return { roundData, monsters: [], player };
205   }
206
207   const attackType = data.action === 'attack' ? 'physical' : 'magical';
208   const primaryStat = data.action === 'attack' ? player.strength : player.intelligence;
209   const boostStat = data.action === 'attack' ? boost.strength : boost.intelligence;
210
211   const playerDamage = Math.floor(((primaryStat + boostStat) * 1.3) + boost.damage);
212   const skillsUsed: Record<SkillID | any, number> = {};
213   let hpHealAfterMasteries: number = -1;
214   let playerDamageAfterMasteries: number = 0;
215   // apply masteries!
216   weapons.forEach(item => {
217     item.affectedSkills.forEach(id => {
218       if(id === 'restoration_magic') {
219         if(hpHealAfterMasteries < 0) {
220           hpHealAfterMasteries = 0;
221         }
222         hpHealAfterMasteries += Skills.get(id).effect(playerSkills.get(id));
223       }
224       else {
225         playerDamageAfterMasteries += playerDamage * Skills.get(id).effect(playerSkills.get(id));
226       }
227
228       if(!skillsUsed[id]) {
229         skillsUsed[id] = 0;
230       }
231       skillsUsed[id]++;
232     });
233   });
234
235   await updatePlayerSkills(player.id, skillsUsed);
236
237   const playerFinalDamage = (data.action === 'cast' && !anyDamageSpells) ? 0 : Math.floor(playerDamage + playerDamageAfterMasteries);
238   const playerFinalHeal = Math.floor(boost.hp + hpHealAfterMasteries);
239
240   roundData.roundDetails.push(`You targeted the monsters ${data.target.toUpperCase()} with ${attackType} damage!`);
241   let armourKey: string;
242   switch(data.target) {
243     case 'arms':
244       armourKey = 'armsAp';
245       break;
246     case 'head':
247       armourKey = 'helmAp';
248       break;
249     case 'legs':
250       armourKey = 'legsAp';
251       break;
252     case 'body':
253       armourKey = 'chestAp';
254       break;
255   }
256
257   if(monster[armourKey] && monster[armourKey] > 0) {
258     monster[armourKey] -= playerFinalDamage;
259
260     roundData.roundDetails.push(`You dealt ${playerFinalDamage} damage to their armour`);
261     if(monster[armourKey] < 0) {
262       roundData.roundDetails.push(`You destroyed the ${monster.name}'s armour!'`);
263       roundData.roundDetails.push(`You dealt ${monster[armourKey] * -1} damage to their HP`);
264       monster.hp += monster[armourKey];
265       monster[armourKey] = 0;
266     }
267   }
268   else {
269     roundData.roundDetails.push(`You hit the ${monster.name} for ${playerFinalDamage} damage.`);
270     monster.hp -= playerFinalDamage;
271   }
272
273   if(monster.hp <= 0) {
274     roundData.monster.hp = 0;
275     roundData.winner = 'player';
276
277     roundData.rewards.exp = monster.exp;
278     roundData.rewards.gold = monster.gold;
279
280     player.gold += monster.gold;
281     player.exp += monster.exp;
282
283     if(player.exp >= expToLevel(player.level + 1)) {
284       player.exp -= expToLevel(player.level + 1)
285       player.level++;
286       roundData.rewards.levelIncrease = true;
287       let statPointsGained = 1;
288
289       if(player.profession !== 'Wanderer') {
290         statPointsGained = 2;
291       }
292
293       player.stat_points += statPointsGained;
294
295       roundData.roundDetails.push(`You gained ${statPointsGained} stat points!`);
296
297       player.hp = maxHp(player.constitution, player.level);
298     }
299     // get the monster location if it was an EXPLORED fight
300     if(roundData.fightTrigger === 'explore') {
301       const rawMonster = await loadMonster(monster.ref_id);
302       const monsterList  = await getMonsterList(rawMonster.location_id);
303       potentialMonsters = monsterList.map(monster => {
304         return {
305           id: monster.id,
306           name: monster.name,
307           level: monster.level,
308           hp: monster.hp,
309           maxHp: monster.maxHp,
310           fight_trigger: 'explore'
311         }
312       });
313     }
314
315     await clearFight(player.id);
316     await updatePlayer(player);
317     return { roundData, monsters: potentialMonsters, player };
318   }
319
320   roundData.roundDetails.push(`The ${monster.name} targeted your ${target}!`);
321   if(equipment.has(target)) {
322     const item = equipment.get(target);
323     // apply mitigation!
324     const mitigationPercentage = item.boosts.damage_mitigation || 0;
325     const damageAfterMitigation = Math.floor(monster.strength * ((100-mitigationPercentage)/100));
326
327     item.currentAp -= damageAfterMitigation;
328
329     if(item.currentAp < 0) {
330       roundData.roundDetails.push(`Your ${item.name} amour was destroyed`);
331       roundData.roundDetails.push(`The ${monster.name} hit your HP for ${item.currentAp * -1} damage!`);
332       player.hp += item.currentAp;
333       item.currentAp = 0;
334       await deleteInventoryItem(player.id, item.item_id);
335     }
336     else {
337       roundData.roundDetails.push(`Your ${target} took ${damageAfterMitigation} damage!`);
338       await updateAp(player.id, item.item_id, item.currentAp, item.maxAp);
339     }
340
341   }
342   else {
343     roundData.roundDetails.push(`The ${monster.name} hit you for ${monster.strength} damage`);
344     player.hp -= monster.strength;
345   }
346
347   if(playerFinalHeal > 0) {
348     player.hp += playerFinalHeal;
349     if(player.hp > maxHp(player.constitution, player.level)) {
350       player.hp = maxHp(player.constitution, player.level);
351     }
352     roundData.roundDetails.push(`You healed for ${playerFinalHeal} HP`);
353   }
354
355   // update the players inventory for this item!
356
357   if(player.hp <= 0) {
358     player.hp = 0;
359     roundData.winner = 'monster';
360
361     roundData.roundDetails.push(`You were killed by the ${monster.name}`);
362
363     await clearFight(player.id);
364     await updatePlayer(player);
365     await clearTravelPlan(player.id);
366
367     return { roundData, monsters: [], player};
368   }
369
370   await updatePlayer(player);
371   await saveFightState(player.id, monster);
372
373   return { roundData, monsters: [], player};
374 };
375
376 app.use(healerRouter);
377
378
379 app.get('/chat/history', authEndpoint, async (req: AuthRequest, res: Response) => {
380   let html = chatHistory.map(renderChatMessage);
381
382   res.send(html.join("\n"));
383 });
384
385 app.post('/chat', authEndpoint, async (req: AuthRequest, res: Response) => {
386   const msg = req.body.message.trim();
387
388   if(!msg || !msg.length) {
389     res.sendStatus(204);
390     return;
391   }
392
393   let message: Message;
394   if(msg.startsWith('/server lmnop')) {
395     if(msg === '/server lmnop refresh-monsters') {
396       await createMonsters();
397       message = broadcastMessage('server', 'Monster refresh!');
398     }
399     else if(msg === '/server lmnop refresh-cities') {
400       await createAllCitiesAndLocations();
401       message = broadcastMessage('server', 'Cities, Locations, and Paths refreshed!');
402     }
403     else if(msg === '/server lmnop refresh-shops') {
404       await createShopItems();
405       await createShopEquipment();
406       message = broadcastMessage('server', 'Refresh shop items');
407     }
408     else {
409       const str = msg.split('/server lmnop ')[1];
410       if(str) {
411         message = broadcastMessage('server', str);
412       }
413     }
414   }
415   else {
416     message = broadcastMessage(req.player.username, msg);
417     chatHistory.push(message);
418     chatHistory.slice(-10);
419   }
420
421   if(message) {
422     io.emit('chat', renderChatMessage(message));
423     res.sendStatus(204);
424   }
425 });
426
427 app.get('/player', authEndpoint, async (req: AuthRequest, res: Response) => {
428   const inventory = await getEquippedItems(req.player.id);
429
430   res.send(renderPlayerBar(req.player, inventory) + renderProfilePage(req.player));
431 });
432
433 app.post('/player/stat/:stat', authEndpoint, async (req: AuthRequest, res: Response) => {
434   const stat = req.params.stat;
435   if(!['strength', 'constitution', 'dexterity', 'intelligence'].includes(stat)) {
436     res.send(Alert.ErrorAlert(`Sorry, that's not a valid stat to increase`));
437     return;
438   }
439
440   if(req.player.stat_points <= 0) {
441     res.send(Alert.ErrorAlert(`Sorry, you don't have enough stat points`));
442     return;
443   }
444
445   req.player.stat_points -= 1;
446   req.player[stat]++;
447
448   updatePlayer(req.player);
449
450   const equippedItems = await getEquippedItems(req.player.id);
451   res.send(renderPlayerBar(req.player, equippedItems) + renderProfilePage(req.player));
452 });
453
454 app.get('/player/skills', authEndpoint, async (req: AuthRequest, res: Response) => {
455   const skills = await getPlayerSkills(req.player.id);
456
457   res.send(renderSkills(skills));
458 });
459
460 app.get('/player/inventory', authEndpoint, async (req: AuthRequest, res: Response) => {
461   const [inventory, items] = await Promise.all([
462     getInventory(req.player.id),
463     getPlayersItems(req.player.id)
464   ]);
465
466   res.send(renderInventoryPage(inventory, items));
467 });
468
469 app.post('/player/equip/:item_id/:slot', authEndpoint, async (req: AuthRequest, res: Response) => {
470   const inventoryItem = await getInventoryItem(req.player.id, req.params.item_id);
471   const equippedItems = await getEquippedItems(req.player.id);
472   const requestedSlot = req.params.slot;
473   let desiredSlot: EquipmentSlot = inventoryItem.equipment_slot;
474
475   try {
476     // handes the situation where you're trying to equip an item 
477     // that can be equipped to any hand
478     if(inventoryItem.equipment_slot === 'ANY_HAND') {
479       if(requestedSlot === 'LEFT_HAND' || requestedSlot === 'RIGHT_HAND') {
480         // get the players current equipment in that slot!
481         if(equippedItems.some(v => {
482           return v.equipment_slot === requestedSlot || v.equipment_slot === 'TWO_HANDED';
483         })) {
484           throw new Error();
485         }
486         else {
487           desiredSlot = requestedSlot;
488         }
489       }
490     }
491
492     if(requestedSlot === 'TWO_HANDED') {
493       if(equippedItems.some(v => {
494         return v.equipment_slot === 'LEFT_HAND' || v.equipment_slot === 'RIGHT_HAND';
495       })) {
496         throw new Error();
497       }
498     }
499
500
501     await equip(req.player.id, inventoryItem, desiredSlot);
502     const socketId = cache.get(`socket:${req.player.id}`).toString();
503     io.to(socketId).emit('updatePlayer', req.player);
504     io.to(socketId).emit('alert', {
505       type: 'success',
506       text: `You equipped your ${inventoryItem.name}`
507     });
508   }
509   catch(e) {
510     logger.log(e);
511   }
512
513   const [inventory, items] = await Promise.all([
514     getInventory(req.player.id),
515     getPlayersItems(req.player.id)
516   ]);
517
518   res.send(renderInventoryPage(inventory, items, inventoryItem.type) + renderPlayerBar(req.player, inventory));
519 });
520
521 app.post('/player/unequip/:item_id', authEndpoint, async (req: AuthRequest, res: Response) => {
522   const [item, ] = await Promise.all([
523     getInventoryItem(req.player.id, req.params.item_id),
524     unequip(req.player.id, req.params.item_id)
525   ]);
526
527   const [inventory, items] = await Promise.all([
528     getInventory(req.player.id),
529     getPlayersItems(req.player.id)
530   ]);
531
532   res.send(renderInventoryPage(inventory, items, item.type) + renderPlayerBar(req.player, inventory));
533 });
534
535 app.get('/player/explore', authEndpoint, async (req: AuthRequest, res: Response) => {
536   const fight = await loadMonsterFromFight(req.player.id);
537   let closestTown = req.player.city_id;
538
539   if(fight) {
540     // ok lets display the fight screen!
541     const data: MonsterForFight = {
542       id: fight.id,
543       hp: fight.hp,
544       maxHp: fight.maxHp,
545       name: fight.name,
546       level: fight.level,
547       fight_trigger: fight.fight_trigger
548     };
549
550     res.send(renderFight(data));
551   }
552   else {
553     const travelPlan = await getTravelPlan(req.player.id);
554     if(travelPlan) {
555       // traveling!
556       const travelPlan = await getTravelPlan(req.player.id);
557
558       const closest: number = (travelPlan.current_position / travelPlan.total_distance) > 0.5 ? travelPlan.destination_id : travelPlan.source_id;
559
560       const chanceToSeeMonster = random(0, 100);
561       const things: any[] = [];
562       if(chanceToSeeMonster <= 30) {
563         const monster = await getRandomMonster([closest]);
564         things.push(monster);
565       }
566
567       // STEP_DELAY
568       const nextAction = cache[`step:${req.player.id}`] || 0;
569
570       res.send(renderTravel({
571         things,
572         nextAction,
573         closestTown: closest,
574         walkingText: ''
575       }));
576     }
577     else {
578       // display the city info!
579       const [city, locations, paths] = await Promise.all([
580         getCityDetails(req.player.city_id),
581         getAllServices(req.player.city_id),
582         getAllPaths(req.player.city_id)
583       ]);
584
585       res.send(await renderMap({city, locations, paths}, closestTown));
586     }
587
588   }
589 });
590
591 // used to purchase equipment from a particular shop
592 app.put('/location/:location_id/equipment/:item_id', authEndpoint, async (req: AuthRequest, res: Response) => {
593   const item = await getShopEquipment(parseInt(req.params.item_id), parseInt(req.params.location_id));
594
595   if(!item) {
596     logger.log(`Invalid item [${req.params.item_id}]`);
597     return res.sendStatus(400);
598   }
599
600   if(req.player.gold < item.cost) {
601     res.send(Alert.ErrorAlert(`Sorry, you need at least ${item.cost.toLocaleString()}G to purchase this.`));
602     return;
603   }
604
605   req.player.gold -= item.cost;
606
607   await updatePlayer(req.player);
608   await addInventoryItem(req.player.id, item);
609
610   const equippedItems = await getEquippedItems(req.player.id);
611
612   res.send(renderPlayerBar(req.player, equippedItems) + Alert.SuccessAlert(`You purchased ${item.name}`));
613 });
614
615 // used to purchase items from a particular shop
616 app.put('/location/:location_id/items/:item_id', authEndpoint, async (req: AuthRequest, res: Response) => {
617   const item: (ShopItem & Item) = await getItemFromShop(parseInt(req.params.item_id), parseInt(req.params.location_id));
618
619   if(!item) {
620     logger.log(`Invalid item [${req.params.item_id}]`);
621     return res.sendStatus(400);
622   }
623
624   if(req.player.gold < item.price_per_unit) {
625     res.send(Alert.ErrorAlert(`Sorry, you need at least ${item.price_per_unit.toLocaleString()}G to purchase this.`));
626     return;
627   }
628
629   req.player.gold -= item.price_per_unit;
630
631   await updatePlayer(req.player);
632   await givePlayerItem(req.player.id, item.id, 1);
633
634   const equippedItems = await getEquippedItems(req.player.id);
635
636   res.send(renderPlayerBar(req.player, equippedItems) + Alert.SuccessAlert(`You purchased a ${item.name}`));
637 });
638
639 // used to display equipment modals in a store, validates that 
640 // the equipment is actually in this store before displaying 
641 // the modal
642 app.get('/location/:location_id/equipment/:item_id/overview', authEndpoint, async (req: AuthRequest, res: Response) => {
643   const equipment = await getShopEquipment(parseInt(req.params.item_id), parseInt(req.params.location_id));
644
645   if(!equipment) {
646     logger.log(`Invalid equipment [${req.params.item_id}]`);
647     return res.sendStatus(400);
648   }
649
650   let html = `
651 <dialog>
652   <div class="item-modal-overview">
653     <div class="icon">
654       <img src="${equipment.icon ? `/assets/img/icons/equipment/${equipment.icon}` : 'https://via.placeholder.com/64x64'}" title="${equipment.name}" alt="${equipment.name}"> 
655     </div>
656     <div>
657       ${renderEquipmentDetails(equipment, req.player)}
658     </div>
659   </div>
660   <div class="actions">
661     <button hx-put="/location/${equipment.location_id}/equipment/${equipment.id}" formmethod="dialog" value="cancel">Buy</button>
662     <button class="close-modal" formmethod="dialog" value="cancel">Cancel</button>
663   </div>
664 </dialog>
665 `;
666
667   res.send(html);
668 });
669
670 // used to display item modals in a store, validates that 
671 // the item is actually in this store before displaying 
672 // the modal
673 app.get('/location/:location_id/items/:item_id/overview', authEndpoint, async (req: AuthRequest, res: Response) => {
674   const item: (ShopItem & Item) = await getItemFromShop(parseInt(req.params.item_id), parseInt(req.params.location_id));
675
676   if(!item) {
677     logger.log(`Invalid item [${req.params.item_id}]`);
678     return res.sendStatus(400);
679   }
680
681   let html = `
682 <dialog>
683   <div class="item-modal-overview">
684     <div class="icon">
685       <img src="/assets/img/icons/items/${item.icon_name}" title="${item.name}" alt="${item.name}"> 
686     </div>
687     <div>
688       <h4>${item.name}</h4>
689       <p>${item.description}</p>
690     </div>
691   </div>
692   <div class="actions">
693     <button hx-put="/location/${item.location_id}/items/${item.id}" formmethod="dialog" value="cancel">Buy</button>
694     <button class="close-modal" formmethod="dialog" value="cancel">Cancel</button>
695   </div>
696 </dialog>
697 `;
698
699   res.send(html);
700 });
701
702 app.put('/item/:item_id', authEndpoint, async (req: AuthRequest, res: Response) => {
703   const item: PlayerItem = await getItemFromPlayer(req.player.id, parseInt(req.params.item_id));
704
705   if(!item) {
706     console.log(`Can't find item [${req.params.item_id}]`);
707     return;
708   }
709
710   if(item.amount < 1) {
711     res.send(Alert.ErrorAlert(`You dont have enough ${item.name}`));
712     return;
713   }
714
715   item.amount -= 1;
716
717   switch(item.effect_name) {
718     case 'heal_small':
719       const hpGain = HealthPotionSmall.effect(req.player);
720
721       req.player.hp += hpGain;
722
723       if(req.player.hp > maxHp(req.player.constitution, req.player.level)) {
724         req.player.hp = maxHp(req.player.constitution, req.player.level);
725       }
726     break;
727   }
728
729   await updateItemCount(req.player.id, item.item_id, -1);
730   await updatePlayer(req.player);
731
732   const inventory = await getInventory(req.player.id);
733   const equippedItems = inventory.filter(i => i.is_equipped);
734   const items = await getPlayersItems(req.player.id);
735
736   res.send(
737     [
738       renderPlayerBar(req.player, equippedItems),
739       renderInventoryPage(inventory, items, 'ITEMS'),
740       Alert.SuccessAlert(`You used the ${item.name}`)
741     ].join("")
742   );
743
744 });
745
746 app.get('/modal/items/:item_id', authEndpoint, async (req: AuthRequest, res: Response) => {
747   const item: PlayerItem = await getItemFromPlayer(req.player.id, parseInt(req.params.item_id));
748
749   if(!item) {
750     logger.log(`Invalid item [${req.params.item_id}]`);
751     return res.sendStatus(400);
752   }
753
754   let html = `
755 <dialog>
756   <div class="item-modal-overview">
757     <div class="icon">
758       <img src="/assets/img/icons/items/${item.icon_name}" title="${item.name}" alt="${item.name}"> 
759     </div>
760     <div>
761       <h4>${item.name}</h4>
762       <p>${item.description}</p>
763     </div>
764   </div>
765   <div class="actions">
766     <button hx-put="/item/${item.item_id}" formmethod="dialog" value="cancel" hx-target="#inventory">Use</button>
767     <button class="close-modal" formmethod="dialog" value="cancel">Cancel</button>
768   </div>
769 </dialog>
770 `;
771
772   res.send(html);
773 });
774
775 app.get('/city/stores/city:stores/:location_id', authEndpoint, async (req: AuthRequest, res: Response) => {
776   const location = await getService(parseInt(req.params.location_id));
777
778   if(!location || location.city_id !== req.player.city_id) {
779     logger.log(`Invalid location: [${req.params.location_id}]`);
780     res.sendStatus(400);
781   }
782   const [shopEquipment, shopItems] = await Promise.all([
783     listShopItems({location_id: location.id}),
784     getShopItems(location.id)
785   ]);
786
787   const html = await renderStore(shopEquipment, shopItems, req.player);
788
789   res.send(html);
790 });
791
792 app.get('/city/explore/city:explore/:location_id', authEndpoint, async (req: AuthRequest, res: Response) => {
793   const location = await getService(parseInt(req.params.location_id));
794   if(!location || location.city_id !== req.player.city_id) {
795
796     logger.log(`Invalid location: [${req.params.location_id}]`);
797     res.sendStatus(400);
798   }
799
800   const monsters: Monster[] = await getMonsterList(location.id);
801   res.send(renderMonsterSelector(monsters));
802 });
803
804 app.post('/travel', authEndpoint, async (req: AuthRequest, res: Response) => {
805   const destination_id = parseInt(req.body.destination_id);
806
807   if(!destination_id || isNaN(destination_id)) {
808     logger.log(`Invalid destination_id [${req.body.destination_id}]`);
809     return res.sendStatus(400);
810   }
811
812   const travelPlan = travel(req.player, req.body.destination_id);
813
814   res.json(travelPlan);
815 });
816
817 app.post('/fight/turn', authEndpoint, async (req: AuthRequest, res: Response) => {
818   const monster = await loadMonsterWithFaction(req.player.id);
819
820   if(!monster) {
821     res.send(Alert.ErrorAlert('Not in a fight'));
822     return;
823   }
824
825   const fightData  = await fightRound(req.player, monster, {
826     action: req.body.action,
827     target: req.body.fightTarget
828   });
829
830   let html = renderFight(
831     monster,
832     renderRoundDetails(fightData.roundData),
833     fightData.roundData.winner === 'in-progress'
834   );
835
836   if(fightData.monsters.length && monster.fight_trigger === 'explore') {
837     html += renderMonsterSelector(fightData.monsters, monster.ref_id);
838   }
839
840   let travelSection = '';
841   if(monster.fight_trigger === 'travel' && fightData.roundData.winner === 'player') {
842     // you're travellinga dn you won.. display the keep walking!
843     const travelPlan = await getTravelPlan(req.player.id);
844     const closest: number = (travelPlan.current_position / travelPlan.total_distance) > 0.5 ? travelPlan.destination_id : travelPlan.source_id;
845     travelSection = travelButton(0);
846   }
847
848   const equippedItems = await getEquippedItems(req.player.id);
849   const playerBar = renderPlayerBar(fightData.player, equippedItems);
850
851   res.send(html + travelSection + playerBar);
852 });
853
854 app.post('/fight', authEndpoint, async (req: AuthRequest, res: Response) => {
855   if(req.player.hp <= 0) {
856     logger.log(`Player didn\'t have enough hp`);
857     return res.sendStatus(400);
858   }
859
860   const monsterId: number = req.body.monsterId;
861   const fightTrigger: FightTrigger = req.body.fightTrigger ?? 'travel';
862
863   if(!monsterId) {
864     logger.log(`Missing monster Id ${monsterId}`);
865     return res.sendStatus(400);
866   }
867
868   if(!fightTrigger || !['travel', 'explore'].includes(fightTrigger)) {
869     logger.log(`Invalid fight trigger [${fightTrigger}]`);
870     return res.sendStatus(400);
871   }
872
873   const monster = await loadMonster(monsterId);
874
875   if(!monster) {
876     logger.log(`Couldnt find monster for ${monsterId}`);
877     return res.sendStatus(400);
878   }
879
880   const fight = await createFight(req.player.id, monster, fightTrigger);
881
882
883   const data: MonsterForFight = {
884     id: fight.id,
885     hp: fight.hp,
886     maxHp: fight.maxHp,
887     name: fight.name,
888     level: fight.level,
889     fight_trigger: fight.fight_trigger
890   };
891
892   res.send(renderFight(data));
893 });
894
895 app.post('/travel/step', authEndpoint, async (req: AuthRequest, res: Response) => {
896   const stepTimerKey = `step:${req.player.id}`;
897
898   const travelPlan = await getTravelPlan(req.player.id);
899   if(!travelPlan) {
900     res.send(Alert.ErrorAlert('You don\'t have a travel plan'));
901     return;
902   }
903
904   if(cache[stepTimerKey]) {
905     if(cache[stepTimerKey] > Date.now()) {
906       res.send(Alert.ErrorAlert('Hmm.. travelling too quickly'));
907       return;
908     }
909   }
910
911   travelPlan.current_position++;
912
913   if(travelPlan.current_position >= travelPlan.total_distance) {
914     const travel = await completeTravel(req.player.id);
915
916     req.player.city_id = travel.destination_id;
917     await movePlayer(travel.destination_id, req.player.id);
918
919     const [city, locations, paths] = await Promise.all([
920       getCityDetails(travel.destination_id),
921       getAllServices(travel.destination_id),
922       getAllPaths(travel.destination_id)
923     ]);
924
925     delete cache[stepTimerKey];
926     res.send(await renderMap({city, locations, paths}, req.player.city_id));
927   }
928   else {
929     const walkingText: string[] = [
930       'You take a step forward',
931       'You keep moving'
932     ];
933     // update existing plan..
934     // decide if they will run into anything
935     const travelPlan = await stepForward(req.player.id);
936
937     const closest: number = (travelPlan.current_position / travelPlan.total_distance) > 0.5 ? travelPlan.destination_id : travelPlan.source_id;
938
939     const chanceToSeeMonster = random(0, 100);
940     const things: any[] = [];
941     if(chanceToSeeMonster <= 30) {
942       const monster = await getRandomMonster([closest]);
943       things.push(monster);
944     }
945
946     // STEP_DELAY
947     const nextAction = Date.now() + 3000;
948
949     cache[stepTimerKey] = nextAction;
950
951     res.send(renderTravel({
952       things,
953       nextAction,
954       closestTown: closest,
955       walkingText: sample(walkingText)
956     }));
957
958   }
959 });
960
961 app.post('/travel/:destination_id', authEndpoint, async (req: AuthRequest, res: Response) => {
962   if(req.player.hp <= 0) {
963     logger.log(`Player didn\'t have enough hp`);
964     res.send(Alert.ErrorAlert('Sorry, you need some HP to start travelling.'));
965     return;
966   }
967
968   const destination = await getCityDetails(parseInt(req.params.destination_id));
969
970   if(!destination) {
971     res.send(Alert.ErrorAlert(`Thats not a valid desination`));
972     return;
973   }
974
975   await travel(req.player, destination.id);
976
977   res.send(renderTravel({
978     things: [],
979     nextAction: 0,
980     walkingText: '',
981     closestTown: req.player.city_id
982   }));
983 });
984
985 app.get('/settings', authEndpoint, async (req: AuthRequest, res: Response) => {
986   let warning = '';
987   let html = '';
988   if(req.player.account_type === 'session') {
989     warning += `<div class="alert error">If you log out without signing up first, this account is lost forever.</div>`;
990   }
991
992   html += '<a href="#" hx-post="/logout">Logout</a>';
993   res.send(warning + html);
994 });
995
996 app.post('/logout', authEndpoint, async (req: AuthRequest, res: Response) => {
997   // ref to get the socket id for a particular player
998   cache.delete(`socket:${req.player.id}`);
999   // ref to get the player object
1000   cache.delete(`token:${req.player.id}`);
1001
1002   logger.log(`${req.player.username} logged out`);
1003
1004   res.send('logout');
1005 });
1006
1007
1008 app.post('/auth', async (req: Request, res: Response) => {
1009   if(req.body.authType === 'login') {
1010     loginHandler(req, res);
1011   }
1012   else if(req.body.authType === 'signup') { 
1013     signupHandler(req, res);
1014   }
1015   else {
1016     logger.log(`Invalid auth type [${req.body.authType}]`);
1017     res.sendStatus(400);
1018   }
1019 });
1020
1021
1022 async function signupHandler(req: Request, res: Response) {
1023   const {username, password} = req.body;
1024   const authToken = req.headers['x-authtoken'];
1025
1026   if(!username || !password || !authToken) {
1027     res.send(Alert.ErrorAlert('Invalid username/password'));
1028     return;
1029   }
1030
1031   try {
1032     const player = await loadPlayer(authToken.toString());
1033     logger.log(`Attempted claim for ${player.username}`);
1034
1035     await signup(authToken.toString(), username, password);
1036
1037     await db('players').where({id: player.id}).update({
1038       account_type: 'auth',
1039       username: username
1040     });
1041
1042     logger.log(`${username} claimed ${player.username}`);
1043
1044     io.emit('chat', broadcastMessage('server', `${player.username} is now ${username}`));
1045
1046     res.setHeader('hx-refresh', 'true');
1047     res.sendStatus(200);
1048   }
1049   catch(e) {
1050     logger.log(e);
1051     if(e?.constraint === 'players_username_unique') {
1052       res.send(Alert.ErrorAlert('That username is already taken'));
1053     }
1054     else {
1055       res.send(Alert.ErrorAlert('Please try again'));
1056     }
1057   }
1058 }
1059
1060 async function loginHandler (req: Request, res: Response) {
1061   const {username, password} = req.body;
1062   if(!username || !username.length) {
1063     res.send(Alert.ErrorAlert('Invalid username'));
1064     return;
1065   }
1066   if(!password || !password.length) {
1067     res.send(Alert.ErrorAlert('Invalid password'));
1068     return;
1069   }
1070
1071   try {
1072     const player = await login(username, password);
1073     io.sockets.sockets.forEach(socket => {
1074       if(socket.handshake.headers['x-authtoken'] === req.headers['x-authtoken']) {
1075         bootstrapSocket(socket, player);
1076       }
1077     });
1078     res.sendStatus(204);
1079   }
1080   catch(e) {
1081     console.log(e);
1082     res.send(Alert.ErrorAlert('That user doesn\'t exist'));
1083   }
1084 }
1085
1086 server.listen(process.env.API_PORT, () => {
1087   logger.log(`Listening on port ${process.env.API_PORT}`);
1088 });