fix: durable payouts survive journal failure, cap bank withdrawals, hash passwords off the owner loop.

1 files changed, 14 insertions, 0 deletions

diff --git a/internal/game/economy_journal_test_helpers_test.go b/internal/game/economy_journal_test_helpers_test.go
new file mode 100644
index 0000000..e65c622
--- /dev/null
+++ b/internal/game/economy_journal_test_helpers_test.go
@@ -0,0 +1,14 @@
+package game
+
+import "testing"
+
+// mustLoadOpen is the test-side loadOpen: a journal fold failure is a test
+// failure, not a nil slice to accidentally treat as "nothing open".
+func (j *economyJournal) mustLoadOpen(t *testing.T) []*economyRecord {
+	t.Helper()
+	open, err := j.loadOpen()
+	if err != nil {
+		t.Fatalf("loadOpen: %v", err)
+	}
+	return open
+}