habitica/website/common/script/ops/stats/allocateBulk.js

import get from 'lodash/get';
import {
  ATTRIBUTES,
} from '../../constants';
import {
  BadRequest,
  NotAuthorized,
} from '../../libs/errors';
import i18n from '../../i18n';
import errorMessage from '../../libs/errorMessage';
import hasClass from '../../libs/hasClass';

export default function allocateBulk (user, req = {}) {
  const stats = get(req, 'body.stats');
  if (!stats) throw new BadRequest(errorMessage('statsObjectRequired'));

  const statKeys = Object.keys(stats);
  const invalidStats = statKeys.filter(statKey => ATTRIBUTES.indexOf(statKey) === -1);
  if (invalidStats.length > 0) {
    throw new BadRequest(errorMessage('invalidAttribute', { attr: invalidStats.join(',') }));
  }

  if (!hasClass(user)) {
    throw new NotAuthorized(i18n.t('classNotSelected', req.language));
  }

  if (user.stats.points <= 0) {
    throw new NotAuthorized(i18n.t('notEnoughAttrPoints', req.language));
  }

  const newStatValues = Object.values(stats);
  const totalPointsToAllocate = newStatValues.reduce((sum, value) => sum + value, 0);
  if (user.stats.points < totalPointsToAllocate) {
    throw new NotAuthorized(i18n.t('notEnoughAttrPoints', req.language));
  }

  for (const [stat, value] of Object.entries(stats)) {
    user.stats[stat] += value;
    user.stats.points -= value;
    if (stat === 'int') user.stats.mp += value;
  }

  return [
    user.stats,
  ];
}