SVSimServer

Go to file

gamer147 82d9668c9b fix(pack): /tutorial/pack_open restricted to starter pack + pre-END viewer

The tutorial alias bypassed the currency / type_detail / open-count guards
unconditionally. Combined with the unconditional TutorialState=100 write, any
authenticated viewer could send /tutorial/pack_open with any parent_gacha_id
to draw a pack for free and clobber their state down to 100.

Two gates: parent_gacha_id MUST be 99047 (the legendary starter), and the
viewer's TutorialState MUST be below 100. The state write is also max-preserved
as a belt-and-braces backstop. Mirrors the 31→41 guard in GiftController.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-28 20:31:23 -04:00

SVSim.Bootstrap

feat(tutorial): /tutorial/pack_open emits tutorial_step=100, advances viewer state

2026-05-28 12:55:08 -04:00

SVSim.Database

fix(viewer): RegisterViewer defaults to post-tutorial TutorialState=100

2026-05-28 20:07:05 -04:00

SVSim.EmulatedEntrypoint

fix(pack): /tutorial/pack_open restricted to starter pack + pre-END viewer

2026-05-28 20:31:23 -04:00

SVSim.UnitTests

fix(pack): /tutorial/pack_open restricted to starter pack + pre-END viewer