Built for gaming operators
who mean business

// ─── ArcadeAPI Relay Engine ────────────────────────────────────────────────
// Receives your encrypted call → decrypts with your AES key → validates → 
// re-encrypts with network key → forwards → relays response back to you

function handleGameRequest(Request $request): JsonResponse {

    // 1. Identify agency and load their AES key from DB
    $agency     = Agency::resolveFromIp($request->ip());
    $clientKey  = $agency->aes_key;

    // 2. Decrypt YOUR payload with YOUR key
    $decrypted = openssl_decrypt(
        base64_decode($request->input('data')),
        'AES-256-ECB', $clientKey, OPENSSL_RAW_DATA
    );
    $payload = json_decode($decrypted, true);

    // 3. Validate: agency_uid, serial_number dedup, game access check
    validatePayload($payload, $agency);

    // 4. Re-encrypt with our game network key (never exposed to you)
    $networkKey  = config('arcade.network_aes_key'); // ← sealed from clients
    $reEncrypted = base64_encode(openssl_encrypt(
        json_encode($payload), 'AES-256-ECB', $networkKey, OPENSSL_RAW_DATA
    ));

    // 5. Forward to game network → get launch URL
    $response = Http::post(config('arcade.network_endpoint'), [
        'data' => $reEncrypted
    ])->json();

    // 6. Log GGR event, return game URL to your platform
    GgrLog::record($agency, $payload);

    return response()->json(['code' => 0, 'data' => $response['data']]); // ← sent to you
}