Additional card content

SVSim.EmulatedEntrypoint/Controllers/LoadController.cs

@@ -13,6 +13,7 @@ using SVSim.EmulatedEntrypoint.Infrastructure;
 using SVSim.EmulatedEntrypoint.Models.Dtos;
 using SVSim.EmulatedEntrypoint.Models.Dtos.Requests;
 using SVSim.EmulatedEntrypoint.Models.Dtos.Responses;
+using SVSim.EmulatedEntrypoint.Services;
 
 namespace SVSim.EmulatedEntrypoint.Controllers;
 
@@ -41,14 +42,17 @@ public class LoadController : SVSimController
     private readonly ICardRepository _cardRepository;
     private readonly ICollectionRepository _collectionRepository;
     private readonly IGlobalsRepository _globalsRepository;
+    private readonly ICardAcquisitionService _acquisition;
 
     public LoadController(IViewerRepository viewerRepository, ICardRepository cardRepository,
-        ICollectionRepository collectionRepository, IGlobalsRepository globalsRepository)
+        ICollectionRepository collectionRepository, IGlobalsRepository globalsRepository,
+        ICardAcquisitionService acquisition)
     {
         _viewerRepository = viewerRepository;
         _cardRepository = cardRepository;
         _collectionRepository = collectionRepository;
         _globalsRepository = globalsRepository;
+        _acquisition = acquisition;
     }
 
     [HttpPost("index")]
@@ -66,6 +70,18 @@ public class LoadController : SVSimController
             return NotFound();
         }
 
+        // Backfill any card-associated cosmetics the viewer should already own. Idempotent.
+        // We MUST re-fetch the viewer after this call because GetViewerByShortUdid uses
+        // .AsNoTracking() — the local `viewer` instance is detached, and the service's writes
+        // (on a separate tracked instance) won't appear on this snapshot. Without the re-fetch,
+        // the response payload would be one /load/index behind on newly-granted cosmetics.
+        await _acquisition.GrantAsync(viewer.Id, newCardIds: null);
+        viewer = await _viewerRepository.GetViewerByShortUdid(shortUdid);
+        if (viewer is null)
+        {
+            return NotFound();   // defensive — should never happen
+        }
+
         // user_card_list policy (see docs/api-spec/endpoints/post-login/load-index.md
         // §user_card_list for the full discussion):
         //