From 7eab582d8a8ee2af1a6baae7baf0696c7005de2e Mon Sep 17 00:00:00 2001
From: historia <[not public]>
Date: Fri, 18 Sep 2026 15:16:44 -0400
Subject: fix: harden triggers, economy, casino, world data, and admin/net
 paths

---
 internal/player/hardening_removeitem_test.go | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 internal/player/hardening_removeitem_test.go

(limited to 'internal/player/hardening_removeitem_test.go')

diff --git a/internal/player/hardening_removeitem_test.go b/internal/player/hardening_removeitem_test.go
new file mode 100644
index 0000000..5cb1e4c
--- /dev/null
+++ b/internal/player/hardening_removeitem_test.go
@@ -0,0 +1,23 @@
+package player
+
+import "testing"
+
+// TestRemoveItemRejectsNonPositive: a non-positive quantity must never mutate
+// a stack; a negative value used to increase it.
+func TestRemoveItemRejectsNonPositive(t *testing.T) {
+	p := New("alice")
+	p.SetInvSlot(0, &InventorySlot{ItemID: "coin", Quantity: 5})
+
+	if p.RemoveItem("coin", -3) {
+		t.Fatal("negative quantity accepted")
+	}
+	if slot := p.InvSlot(0); slot == nil || slot.Quantity != 5 {
+		t.Fatalf("stack mutated by a negative removal: %+v", slot)
+	}
+	if p.RemoveItem("coin", 0) {
+		t.Fatal("zero quantity accepted")
+	}
+	if slot := p.InvSlot(0); slot == nil || slot.Quantity != 5 {
+		t.Fatalf("stack mutated by a zero removal: %+v", slot)
+	}
+}
-- 
cgit v1.2.3