feat: add Pred.gg coach data foundation

apps/api/src/routes/admin.test.ts

@@ -14,6 +14,12 @@ vi.mock('../db.js', () => ({
 
 vi.mock('../services/predgg-token-service.js', () => ({
   getPlatformAccessToken: vi.fn().mockResolvedValue(null),
+  readPlatformOAuthStatus: vi.fn().mockResolvedValue({
+    requestedScopes: ['offline_access', 'profile'], grantedScopes: [], missingScopes: ['offline_access', 'profile'],
+    capabilities: { profile: false, offlineRefresh: false, playerIntervals: false, heroLeaderboard: false, matchupStatistics: false },
+    checkedAt: null, error: 'Granted scopes have not been inspected yet',
+  }),
+  inspectPlatformOAuthStatus: vi.fn(),
   platformTokenState: { status: 'missing', lastCheckedAt: null, lastError: null },
 }));
 
@@ -22,6 +28,8 @@ vi.mock('../services/sync-service.js', () => ({
   syncVersionsFromPredgg: vi.fn().mockResolvedValue(5),
   syncStalePlayers: vi.fn().mockResolvedValue({ synced: 2, skipped: 0, errors: 0 }),
   syncIncompleteMatches: vi.fn().mockResolvedValue({ synced: 1, errors: 0 }),
+  syncGameCatalog: vi.fn().mockResolvedValue({ version: '1.16.1', items: 270, perks: 276, eternalCategories: 6 }),
+  syncTrackedGameCatalogs: vi.fn().mockResolvedValue({ versions: 1, catalogs: [{ version: '1.16.1', items: 270, perks: 276, eternalCategories: 6 }] }),
   repairEventStreamPlayerIds: vi.fn().mockResolvedValue({
     heroKillsUpdated: 1,
     objectiveKillsUpdated: 1,

apps/api/src/routes/admin.ts

@@ -12,13 +12,15 @@ import {
   syncMatchEventStream,
   resyncMatch,
   cleanupOldData,
+  syncGameCatalog,
+  syncTrackedGameCatalogs,
 } from '../services/sync-service.js';
 import { syncHeroMeta } from '../services/hero-meta-service.js';
 import { invalidateHeroMetaCache } from './hero-meta.js';
 import { getAllConfig, updateConfigValue, updateConfigText, resetConfigValue } from '../services/config-service.js';
 import { getPermissions, savePermissions, DEFAULT_PERMISSIONS, CONFIGURABLE_ROLES } from '../services/permissions-service.js';
 import { getValidToken } from './auth.js';
-import { getPlatformAccessToken, platformTokenState } from '../services/predgg-token-service.js';
+import { getPlatformAccessToken, inspectPlatformOAuthStatus, platformTokenState, readPlatformOAuthStatus } from '../services/predgg-token-service.js';
 import { requireAuth } from '../middleware/require-auth.js';
 import { requirePlatformAdmin } from '../middleware/require-platform-admin.js';
 
@@ -676,6 +678,11 @@ adminRouter.get('/api-status', async (_req, res, next) => {
     }
 
     const dayAgo = new Date(Date.now() - 24 * 60 * 60 * 1000);
+    const platformToken = await getPlatformAccessToken();
+    const oauth = platformToken
+      ? await inspectPlatformOAuthStatus(platformToken.accessToken)
+      : await readPlatformOAuthStatus();
+
     const [totalErrors, recentErrors, lastSuccess, recentBySource] = await Promise.all([
       db.syncLog.count({ where: { status: 'error' } }),
       db.syncLog.count({ where: { status: 'error', syncedAt: { gte: dayAgo } } }),
@@ -684,7 +691,7 @@ adminRouter.get('/api-status', async (_req, res, next) => {
     ]);
 
     res.json({
-      predgg: { status: predggStatus, responseMs: predggMs, error: predggError, endpoint: GQL_URL },
+      predgg: { status: predggStatus, responseMs: predggMs, error: predggError, endpoint: GQL_URL, oauth },
       syncErrors: { total: totalErrors, last24h: recentErrors, bySource: recentBySource },
       lastSuccessfulSync: lastSuccess,
     });
@@ -705,6 +712,19 @@ adminRouter.post('/sync-heroes', requireAuth, requirePlatformAdmin, async (_req,
   }
 });
 
+/** POST /admin/sync-game-catalog — current or selected patch catalog. */
+adminRouter.post('/sync-game-catalog', requireAuth, requirePlatformAdmin, async (req, res, next) => {
+  try {
+    const { versionId } = z.object({ versionId: z.string().optional() }).parse(req.body ?? {});
+    const result = versionId
+      ? await syncGameCatalog(db, versionId)
+      : await syncTrackedGameCatalogs(db);
+    res.json({ ok: true, ...result });
+  } catch (err) {
+    next(err);
+  }
+});
+
 /**
  * GET /admin/config
  * Returns all platform config entries.

apps/api/src/routes/auth.test.ts

@@ -2,8 +2,8 @@ import { describe, it, expect, vi } from 'vitest';
 import request from 'supertest';
 import express from 'express';
 import cookieParser from 'cookie-parser';
-import { authRouter } from './auth.js';
-import { savePlatformOAuthTokens } from '../services/predgg-token-service.js';
+import { authRouter, getValidToken } from './auth.js';
+import { getPlatformAccessToken, savePlatformOAuthTokens } from '../services/predgg-token-service.js';
 
 vi.hoisted(() => {
   process.env.PRED_GG_CLIENT_ID = 'test-client-id';
@@ -22,9 +22,28 @@ vi.mock('../services/predgg-token-service.js', () => ({
 
 const app = express();
 app.use(cookieParser());
+app.get('/token-probe', async (req, res) => {
+  const token = await getValidToken(req, res);
+  res.json({ token: token ?? null });
+});
 app.use('/auth', authRouter);
 
 describe('GET /auth/predgg', () => {
+  it('clears an expired browser session when silent refresh is unavailable', async () => {
+    vi.mocked(getPlatformAccessToken).mockResolvedValueOnce(null);
+
+    const res = await request(app)
+      .get('/token-probe')
+      .set('Cookie', ['predgg_expires_at=1']);
+
+    expect(res.status).toBe(200);
+    expect(res.body).toEqual({ token: null });
+    expect(res.headers['set-cookie']).toEqual(expect.arrayContaining([
+      expect.stringContaining('predgg_token='),
+      expect.stringContaining('predgg_expires_at='),
+    ]));
+  });
+
   it('redirects to the pred.gg OAuth SPA authorize route with PKCE', async () => {
     const res = await request(app).get('/auth/predgg');
 

apps/api/src/routes/auth.ts

@@ -55,7 +55,7 @@ export async function getValidToken(req: Request, res: Response): Promise<string
     return platformToken.accessToken;
   }
 
-  logger.warn({ error: result.data.error }, 'silent refresh failed — user must re-login');
+  logger.warn('silent refresh failed — user must re-login');
   // Clear stale cookies so /auth/me returns unauthenticated
   res.clearCookie(COOKIE_TOKEN);
   res.clearCookie(COOKIE_EXPIRES_AT);

apps/api/src/routes/matches.test.ts

@@ -1,5 +1,39 @@
-import { describe, expect, it } from 'vitest';
-import { buildLiveDetail } from './matches.js';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import cookieParser from 'cookie-parser';
+import express from 'express';
+import request from 'supertest';
+import { authCookie } from '../test/auth-cookie.js';
+import { errorHandler } from '../middleware/error-handler.js';
+
+const mocks = vi.hoisted(() => ({
+  matchFindUnique: vi.fn(),
+  getMatchDetail: vi.fn(),
+  getMatchEvents: vi.fn(),
+  getValidToken: vi.fn(),
+}));
+
+vi.mock('../db.js', () => ({
+  db: {
+    match: { findUnique: mocks.matchFindUnique },
+    user: { findUnique: vi.fn() },
+    matchPlayer: { findFirst: vi.fn() },
+  },
+}));
+vi.mock('../services/match-service.js', () => ({
+  getMatchDetail: mocks.getMatchDetail,
+  getMatchEvents: mocks.getMatchEvents,
+}));
+vi.mock('./auth.js', () => ({ getValidToken: mocks.getValidToken }));
+vi.mock('../services/sync-service.js', () => ({ resyncMatch: vi.fn(), syncMatchEventStream: vi.fn() }));
+vi.mock('../services/build-coach-service.js', () => ({ getMatchBuildAnalysis: vi.fn() }));
+
+import { buildLiveDetail, matchesRouter } from './matches.js';
+
+const app = express();
+app.use(express.json());
+app.use(cookieParser());
+app.use('/matches', matchesRouter);
+app.use(errorHandler);
 
 describe('buildLiveDetail', () => {
   it('ignores null and empty inventory slots returned by pred.gg', () => {
@@ -26,3 +60,25 @@ describe('buildLiveDetail', () => {
     expect(result.detail.dusk[0].inventoryItems).toEqual(['lightning-hawk']);
   });
 });
+
+describe('GET /matches/live/:predggUuid', () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+    mocks.matchFindUnique.mockResolvedValue({ id: 'stored-match-1' });
+    mocks.getMatchDetail.mockResolvedValue({ id: 'stored-match-1', predggUuid: 'uuid-1', dusk: [], dawn: [] });
+    mocks.getMatchEvents.mockResolvedValue({ heroKills: [], objectiveKills: [], structureDestructions: [], wardEvents: [], transactions: [] });
+  });
+
+  it('serves a synced local match without depending on the browser Pred.gg token', async () => {
+    const cookie = await authCookie({ globalRole: 'PLAYER', memberships: [] });
+
+    const response = await request(app).get('/matches/live/uuid-1').set('Cookie', cookie);
+
+    expect(response.status).toBe(200);
+    expect(response.headers['cache-control']).toBe('no-store');
+    expect(response.body.detail.id).toBe('stored-match-1');
+    expect(mocks.getMatchDetail).toHaveBeenCalledWith('stored-match-1');
+    expect(mocks.getMatchEvents).toHaveBeenCalledWith('stored-match-1');
+    expect(mocks.getValidToken).not.toHaveBeenCalled();
+  });
+});