Close the smaller state inconsistencies (B-96, BET-02, BET-07, WDR-01, WDR-15, TX-16, TX-18, TX-27, TX-29, DEP-15, DEP-16, AUD-30, AUD-46, DAT-22)

- bet/withdrawal routes read listener.client after taking the user lock
- a reduced full-balance withdrawal is checked against the minimum again
- a bet covered only by pending balance answers balance_pending_confirmation
- a recovered bet/withdrawal/payout writes bet_placed/withdrawal_sent/payout_sent
- an abandoned payout clears winner/fee/reserve amounts with payout_txid
- the reconciler pings SSE only for rows it changed
- closing_stalled every 30 minutes past the deadline; closing_waiting_since on /rounds/current
- one refresh per user at a time; a failed refresh no longer ends the Electrum session

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

app/api/routes/bets.py

@@ -26,16 +26,19 @@ async def create_bet(
     session: AsyncSession = Depends(get_session),
 ) -> BetResponse:
     listener = request.app.state.electrum_listener
-    if listener.client is None:
-        raise http_error(
-            status.HTTP_503_SERVICE_UNAVAILABLE,
-            "network_unavailable",
-            "not connected to the network, try again shortly",
-        )
 
     async with request.app.state.user_locks.acquire(user.id):
+        # B-96 (BET-02): read after the lock is taken — a wait on it across a reconnection
+        # must not hand place_bet the connection that closed while this request queued.
+        client = listener.client
+        if client is None:
+            raise http_error(
+                status.HTTP_503_SERVICE_UNAVAILABLE,
+                "network_unavailable",
+                "not connected to the network, try again shortly",
+            )
         try:
-            participant = await place_bet(session, listener.client, user, network=listener)
+            participant = await place_bet(session, client, user, network=listener)
         except BetError as exc:
             # A rejected broadcast isn't the client's fault — it's the network
             # refusing our transaction, so it answers 502 rather than 400 (B-07).

app/api/routes/rounds.py

@@ -119,6 +119,8 @@ class CurrentRoundResponse(BaseModel):
     # waiting for a block" rather than a countdown implying a bounded wait — this
     # phase has no timeout, only draw_animation_seconds' cosmetic minimum.
     draw_waiting_since: str | None = None
+    # B-96 (TX-29): since when the round has waited in "closing" for in-flight bets; only then.
+    closing_waiting_since: str | None = None
     # B-73 (RND-34, RND-14): the commitment published from the opening, and what is fixed
     # on entering "drawing". The secret itself is never in this response (API-45 has it, once
     # revealed).
@@ -233,6 +235,7 @@ async def current_round(
         draw_block_height=round_.draw_block_height,
         draw_block_hash=round_.draw_block_hash,
         draw_waiting_since=isoformat_utc(round_.drawing_started_at) if round_.status == "drawing" else None,
+        closing_waiting_since=isoformat_utc(round_.closed_at) if round_.status == "closing" and round_.closed_at else None,
         server_seed_hash=round_.server_seed_hash,
         participants_hash=round_.participants_hash,
         draw_height=round_.draw_height,

app/api/routes/withdrawals.py

@@ -32,17 +32,19 @@ async def create_withdrawal(
     session: AsyncSession = Depends(get_session),
 ) -> WithdrawalResponse:
     listener = request.app.state.electrum_listener
-    if listener.client is None:
-        raise http_error(
-            status.HTTP_503_SERVICE_UNAVAILABLE,
-            "network_unavailable",
-            "not connected to the network, try again shortly",
-        )
 
     async with request.app.state.user_locks.acquire(user.id):
+        # B-96 (WDR-01): read after the lock is taken, as in create_bet.
+        client = listener.client
+        if client is None:
+            raise http_error(
+                status.HTTP_503_SERVICE_UNAVAILABLE,
+                "network_unavailable",
+                "not connected to the network, try again shortly",
+            )
         try:
             withdrawal = await request_withdrawal(
-                session, listener.client, user, body.external_address, body.amount_sats, network=listener
+                session, client, user, body.external_address, body.amount_sats, network=listener
             )
         except WithdrawalError as exc:
             code = (