@openora/core 0.4.0 → 0.4.1-canary.100

package/dist/contracts/adapters/index.d.ts

@@ -1,5 +1,13 @@
-export type { AnyToken, Token, SealedToken, ClientPageToken } from './token.js';
+/**
+ * @openora/core/contracts - the single home for vendor adapter interfaces (the swap
+ * seams). A module's service depends on an adapter interface; an operator binds
+ * a concrete implementation to its DI token in the module's plugin.ts. One file
+ * per service category. See AGENTS.md "third-party integration" in the decision tree.
+ */
+export type { AnyToken, Token, SealedToken, ClientPageToken, TokenCatalog, TokenCatalogValues, TokenValue, } from './token.js';
 export { createToken, createSealedToken, createClientPageToken } from './token.js';
+export type { ChatModeration, ChatModerationEntry, ChatPlatformBan, ChatModerationRoomId, ChatModerationScope, } from './chat-moderation.js';
+export { CHAT_MODERATION } from './chat-moderation.js';
 export type { EventEnvelope, MessageBrokerAdapter, BrokerHandler, SubscribeOptions, } from './broker.js';
 export { MESSAGE_BROKER } from './broker.js';
 export type { OutboxWriter } from './outbox.js';
@@ -8,24 +16,33 @@ export type { WalletCommands, WalletDebitArgs, WalletDebitOutcome, WalletCreditA
 export { WALLET_COMMANDS } from './wallet-commands.js';
 export type { WalletReader } from './wallet-reader.js';
 export { WALLET_READER } from './wallet-reader.js';
+export type { TagEvaluationCommands, TagEvaluationWithdrawalRequestedArgs, } from './tag-evaluation-commands.js';
+export { TAG_EVALUATION_COMMANDS } from './tag-evaluation-commands.js';
+export type { UserCommands } from './identity.js';
 export type { IdentityReader } from './identity-reader.js';
 export { IDENTITY_READER } from './identity-reader.js';
 export type { JobQueueAdapter, QueueName, BackoffStrategy, EnqueueOptions, RepeatOptions, JobContext, JobHandler, WorkerOptions, WorkerRegistration, PayloadSchema, } from './job-queue.js';
 export { JOB_QUEUE, queue } from './job-queue.js';
-export type { RateLimiterAdapter, RateLimitOptions, RateLimitResult } from './rate-limit.js';
-export { RATE_LIMITER } from './rate-limit.js';
+export type { RateLimiterAdapter, RateLimitOptions, RateLimitResult, RateLimitKey, RateLimitKeyPrefix, } from './rate-limit.js';
+export { RATE_LIMITER, RATE_LIMIT_KEYS, makeRateLimitKey } from './rate-limit.js';
 export type { CacheAdapter } from './cache.js';
 export { CACHE } from './cache.js';
 export type { RealtimeTransport, RealtimePresence, RealtimeConnectionGrant, RealtimeClientAuthorizer, RealtimeClientAuthorizerInput, } from './realtime.js';
-export { REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER } from './realtime.js';
+export { REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER, CHAT_REALTIME_TRANSPORT, CHAT_REALTIME_CLIENT_AUTHORIZER, } from './realtime.js';
 export type { GameAdapter } from './game.js';
 export { GAME_ADAPTER } from './game.js';
-export type { KycAdapter, KycVendorStatus, KycDocument, KycResult, KycStatusWriter, KycStatusSource, KycWebhookVerifier, } from './kyc.js';
-export { KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER } from './kyc.js';
-export type { PaymentAdapter } from './payment.js';
-export { PAYMENT_ADAPTER } from './payment.js';
+export type { KycAdapter, KycVendorStatus, KycDocument, KycResult, KycRiskSignals, KycStatusWriter, KycWebhookVerifier, KycCheckStatus, KycCheckResult, } from './kyc.js';
+export { KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER, KYC_VENDOR_STATUSES, KYC_CHECK_STATUSES, KycCheckStatusSchema, KycCheckResultSchema, } from './kyc.js';
+export type { PaymentAdapter, PaymentWebhookEvent, PaymentWebhookVerifier, CustodyBalance, PaymentProvider, PaymentProviderRegistry, } from './payment.js';
+export { PAYMENT_ADAPTER, PAYMENT_WEBHOOK_VERIFIER, PAYMENT_PROVIDERS, DEFAULT_PAYMENT_PROVIDER, } from './payment.js';
+export type { WalletAsset, WalletAssetCatalog } from './wallet-asset-catalog.js';
+export { WALLET_ASSET_CATALOG } from './wallet-asset-catalog.js';
 export type { GeoIpAdapter } from './geo-ip.js';
 export { GEO_IP_ADAPTER } from './geo-ip.js';
+export type { GeoCheckCommands } from './geo-check-commands.js';
+export { GEO_CHECK_COMMANDS } from './geo-check-commands.js';
+export type { PlayerProvisioning, PlayerRegistrationRecord } from './player-provisioning.js';
+export { PLAYER_PROVISIONING } from './player-provisioning.js';
 export type { NotificationDeliveryAdapter } from './notification.js';
 export { NOTIFICATION_DELIVERY_ADAPTER } from './notification.js';
 export type { AggregatorAdapter, AggregatorGame, AggregatorWebhookVerifier } from './aggregator.js';
@@ -34,18 +51,46 @@ export type { RngAdapter } from './rng.js';
 export { RNG_ADAPTER } from './rng.js';
 export type { SendEmailPort } from './email.js';
 export { SEND_EMAIL } from './email.js';
+export type { SmsAdapter } from './sms.js';
+export { SMS_ADAPTER } from './sms.js';
+export type { EmailTemplateKey, EmailTemplateData, EmailTemplateRenderer, } from './email-template.js';
+export { EMAIL_TEMPLATE_RENDERER, DEFAULT_EMAIL_TEMPLATES } from './email-template.js';
+export type { ErrorTrackingAdapter, ErrorContext } from './error-tracking.js';
+export { ERROR_TRACKING } from './error-tracking.js';
 export type { AdminGrant, AdminPermissionResolver } from './admin-permission.js';
 export { ADMIN_PERMISSION_RESOLVER } from './admin-permission.js';
 export type { AuditWritePort, AuditAction, DirectAuditAction } from './audit.js';
 export { AUDIT_WRITER } from './audit.js';
 export type { PlayerTags } from './player-tags.js';
 export { PLAYER_TAGS } from './player-tags.js';
-export type { AdminUserRow, AdminUserListOptions, AdminUserDirectory, AdminPlayerSummary, } from './admin-user-directory.js';
-export { ADMIN_USER_DIRECTORY } from './admin-user-directory.js';
-export type { AdminTxRow, AdminTxDetail, AdminTxListOptions, AdminWalletReporting, } from './admin-wallet-reporting.js';
-export { ADMIN_WALLET_REPORTING } from './admin-wallet-reporting.js';
+export type { AdminUserRow, AdminUserListOptions, AdminUserDirectory, AdminPlayerSummary, AdminUserSortBy, } from './admin-user-directory.js';
+export { ADMIN_USER_DIRECTORY, ADMIN_USER_SORT_BY_VALUES } from './admin-user-directory.js';
+export type { AdminRoleAssignmentSummary, AdminRoleAssignmentDirectory, } from './admin-role-assignment-directory.js';
+export { ADMIN_ROLE_ASSIGNMENT_DIRECTORY } from './admin-role-assignment-directory.js';
+export type { AdminTxRow, AdminTxDetail, AdminTxListOptions, AdminWalletReporting, AdminTxSortBy, } from './admin-wallet-reporting.js';
+export { ADMIN_WALLET_REPORTING, ADMIN_TX_SORT_BY_VALUES } from './admin-wallet-reporting.js';
+export type { GamePerformanceSortBy, GamePerformanceFilter, GamePerformanceRow, AdminGameReporting, PlayerGameStats, } from './admin-game-reporting.js';
+export { GAME_PERFORMANCE_SORT_FIELDS, ADMIN_GAME_REPORTING } from './admin-game-reporting.js';
+export type { PlayerActivityFilter, RegistrationsOverTimePoint, ActiveUsersTrendPoint, RetentionCohortRow, AdminPlayerActivity, } from './admin-player-activity.js';
+export { ADMIN_PLAYER_ACTIVITY } from './admin-player-activity.js';
 export type { IdentityServiceOptions, IdentityLockoutOptions, SessionCommands, } from './identity.js';
-export { IDENTITY_OPTIONS, SESSION_COMMANDS } from './identity.js';
+export { IDENTITY_OPTIONS, SESSION_COMMANDS, USER_COMMANDS } from './identity.js';
 export type { LoginEnforcementPort } from './login-enforcement.js';
 export { LOGIN_ENFORCEMENT } from './login-enforcement.js';
+export type { PlayEligibilityPort } from './play-eligibility.js';
+export { PLAY_ELIGIBILITY } from './play-eligibility.js';
+export type { ChatSystemMessage, CommandChatMessage, ChatSystemWriter, } from './chat-system-writer.js';
+export { CHAT_SYSTEM_WRITER } from './chat-system-writer.js';
+export type { ChatBlockWriter } from './chat-block-writer.js';
+export { CHAT_BLOCK_WRITER, chatBlockLockKey } from './chat-block-writer.js';
+export type { ChatRoomAccess } from './chat-room-access.js';
+export { CHAT_ROOM_ACCESS } from './chat-room-access.js';
+export type { PlayerActivityTracker } from './player-activity.js';
+export { PLAYER_ACTIVITY_TRACKER } from './player-activity.js';
+export type { SendGiftArgs, SendGiftFailureReason, SendGiftResult, ClaimGiftFailureReason, ClaimGiftResult, GiftSnapshot, GetGiftFailureReason, GetGiftResult, GiftCommands, } from './gift-commands.js';
+export { GIFT_COMMANDS } from './gift-commands.js';
+export type { SendRainArgs, SendRainFailureReason, SendRainResult, RainCommands, } from './rain-commands.js';
+export { RAIN_COMMANDS } from './rain-commands.js';
+export type { SocialCommands, FriendshipDissolvedPayload } from './social-commands.js';
+export { SOCIAL_COMMANDS } from './social-commands.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/contracts/adapters/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/index.ts"],"names":[],"mappings":"AAKA,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnF,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,YAAY,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,YAAY,EACV,eAAe,EACf,SAAS,EACT,eAAe,EACf,cAAc,EACd,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAElD,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAE/E,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,YAAY,EACV,UAAU,EACV,eAAe,EACf,WAAW,EACX,SAAS,EACT,eAAe,EACf,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAEhF,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,YAAY,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAElE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAElF,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,YAAY,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,YAAY,EACV,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEnE,YAAY,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,QAAQ,EACR,KAAK,EACL,WAAW,EACX,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnF,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,YAAY,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,YAAY,EACV,qBAAqB,EACrB,oCAAoC,GACrC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,YAAY,EACV,eAAe,EACf,SAAS,EACT,eAAe,EACf,cAAc,EACd,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAElD,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAElF,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,YAAY,EACV,UAAU,EACV,eAAe,EACf,WAAW,EACX,SAAS,EACT,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAElB,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,eAAe,EACf,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,YAAY,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAElE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAElF,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAEvF,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,YAAY,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE5F,YAAY,EACV,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,YAAY,EACV,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,GACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAE9F,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAE/F,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAElF,YAAY,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,YAAY,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/contracts/adapters/index.js

@@ -1,30 +1,51 @@
-// @openora/core/contracts - the single home for vendor adapter interfaces (the swap
-// seams). A module's service depends on an adapter interface; an operator binds
-// a concrete implementation to its DI token in the module's plugin.ts. One file
-// per service category. See AGENTS.md "third-party integration" in the decision tree.
+/**
+ * @openora/core/contracts - the single home for vendor adapter interfaces (the swap
+ * seams). A module's service depends on an adapter interface; an operator binds
+ * a concrete implementation to its DI token in the module's plugin.ts. One file
+ * per service category. See AGENTS.md "third-party integration" in the decision tree.
+ */
 export { createToken, createSealedToken, createClientPageToken } from './token.js';
+export { CHAT_MODERATION } from './chat-moderation.js';
 export { MESSAGE_BROKER } from './broker.js';
 export { OUTBOX } from './outbox.js';
 export { WALLET_COMMANDS } from './wallet-commands.js';
 export { WALLET_READER } from './wallet-reader.js';
+export { TAG_EVALUATION_COMMANDS } from './tag-evaluation-commands.js';
 export { IDENTITY_READER } from './identity-reader.js';
 export { JOB_QUEUE, queue } from './job-queue.js';
-export { RATE_LIMITER } from './rate-limit.js';
+export { RATE_LIMITER, RATE_LIMIT_KEYS, makeRateLimitKey } from './rate-limit.js';
 export { CACHE } from './cache.js';
-export { REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER } from './realtime.js';
+export { REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER, CHAT_REALTIME_TRANSPORT, CHAT_REALTIME_CLIENT_AUTHORIZER, } from './realtime.js';
 export { GAME_ADAPTER } from './game.js';
-export { KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER } from './kyc.js';
-export { PAYMENT_ADAPTER } from './payment.js';
+export { KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER, KYC_VENDOR_STATUSES, KYC_CHECK_STATUSES, KycCheckStatusSchema, KycCheckResultSchema, } from './kyc.js';
+export { PAYMENT_ADAPTER, PAYMENT_WEBHOOK_VERIFIER, PAYMENT_PROVIDERS, DEFAULT_PAYMENT_PROVIDER, } from './payment.js';
+export { WALLET_ASSET_CATALOG } from './wallet-asset-catalog.js';
 export { GEO_IP_ADAPTER } from './geo-ip.js';
+export { GEO_CHECK_COMMANDS } from './geo-check-commands.js';
+export { PLAYER_PROVISIONING } from './player-provisioning.js';
 export { NOTIFICATION_DELIVERY_ADAPTER } from './notification.js';
 export { AGGREGATOR_ADAPTER, AGGREGATOR_WEBHOOK_VERIFIER } from './aggregator.js';
 export { RNG_ADAPTER } from './rng.js';
 export { SEND_EMAIL } from './email.js';
+export { SMS_ADAPTER } from './sms.js';
+export { EMAIL_TEMPLATE_RENDERER, DEFAULT_EMAIL_TEMPLATES } from './email-template.js';
+export { ERROR_TRACKING } from './error-tracking.js';
 export { ADMIN_PERMISSION_RESOLVER } from './admin-permission.js';
 export { AUDIT_WRITER } from './audit.js';
 export { PLAYER_TAGS } from './player-tags.js';
-export { ADMIN_USER_DIRECTORY } from './admin-user-directory.js';
-export { ADMIN_WALLET_REPORTING } from './admin-wallet-reporting.js';
-export { IDENTITY_OPTIONS, SESSION_COMMANDS } from './identity.js';
+export { ADMIN_USER_DIRECTORY, ADMIN_USER_SORT_BY_VALUES } from './admin-user-directory.js';
+export { ADMIN_ROLE_ASSIGNMENT_DIRECTORY } from './admin-role-assignment-directory.js';
+export { ADMIN_WALLET_REPORTING, ADMIN_TX_SORT_BY_VALUES } from './admin-wallet-reporting.js';
+export { GAME_PERFORMANCE_SORT_FIELDS, ADMIN_GAME_REPORTING } from './admin-game-reporting.js';
+export { ADMIN_PLAYER_ACTIVITY } from './admin-player-activity.js';
+export { IDENTITY_OPTIONS, SESSION_COMMANDS, USER_COMMANDS } from './identity.js';
 export { LOGIN_ENFORCEMENT } from './login-enforcement.js';
+export { PLAY_ELIGIBILITY } from './play-eligibility.js';
+export { CHAT_SYSTEM_WRITER } from './chat-system-writer.js';
+export { CHAT_BLOCK_WRITER, chatBlockLockKey } from './chat-block-writer.js';
+export { CHAT_ROOM_ACCESS } from './chat-room-access.js';
+export { PLAYER_ACTIVITY_TRACKER } from './player-activity.js';
+export { GIFT_COMMANDS } from './gift-commands.js';
+export { RAIN_COMMANDS } from './rain-commands.js';
+export { SOCIAL_COMMANDS } from './social-commands.js';
 //# sourceMappingURL=index.js.map

package/dist/contracts/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/contracts/adapters/index.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,gFAAgF;AAChF,gFAAgF;AAChF,sFAAsF;AAGtF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQnF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AASrC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAcvD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAGlD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AASnC,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAG/E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAWzC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAGhF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAGlE,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAQ/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAQjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAOrE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/contracts/adapters/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQnF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQvD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AASrC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAIvE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAcvD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AASlD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGlF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AASnC,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAazC,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAUlB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAGlE,OAAO,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAGlF,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAGvC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAMvC,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAGvF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAS/C,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAM5F,OAAO,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAC;AASvF,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAS9F,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAS/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAOnE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGlF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAOzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAG7D,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAa/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAQnD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/contracts/adapters/job-queue.d.ts

@@ -1,4 +1,19 @@
+/**
+ * Background-job seam. Modules enqueue durable, retryable, schedulable work
+ * through this adapter, so the queue driver is swappable: the default binding is
+ * an in-process queue (zero dependencies - good for `pnpm dev`, seed and tests);
+ * a downstream operator binds a durable driver (BullMQ/Redis is the reference
+ * overlay) to JOB_QUEUE without touching modules. Delivery is at-least-once, so
+ * handlers MUST be idempotent (use `idempotencyKey` + a DB guard for money jobs).
+ * Distinct from MESSAGE_BROKER: the broker is "something happened" fan-out (the
+ * EventBus facade); JOB_QUEUE is "execute this unit of work later, with delivery
+ * and retry control". See ADR-0014.
+ */
 import { type Token } from './token.js';
+/**
+ * A queue name is a branded string so registrations and enqueues line up and a
+ * bare string can't be passed by accident.
+ */
 export type QueueName = string & {
     readonly __brand: 'QueueName';
 };
@@ -8,50 +23,90 @@ export type BackoffStrategy = {
     delayMs: number;
 };
 export type EnqueueOptions = {
+    /**
+     * Stable key -> at most one active job with this key (dedupe / idempotency).
+     * Drivers map this to BullMQ's jobId. Required-by-convention for money jobs;
+     * the handler must STILL guard duplicate execution with a DB unique constraint
+     * (queue dedupe alone is insufficient across a partial commit + retry).
+     */
     idempotencyKey?: string;
+    /**
+     * Fan-in ordering: jobs sharing a key run in order, never concurrently
+     * (per-wallet, per-bet). Cross-key jobs still parallelise.
+     */
     orderingKey?: string;
     delayMs?: number;
+    /** Total tries incl. the first (driver default if omitted). */
     attempts?: number;
     backoff?: BackoffStrategy;
+    /** Lower = sooner; a driver may ignore it. */
     priority?: number;
+    /** Drop the job if not started within this window. */
     ttlMs?: number;
+    /** Tracing/correlation metadata carried verbatim onto JobContext.meta. */
     meta?: Record<string, string | undefined>;
 };
 export type RepeatOptions = {
+    /** eg '0 * * * *' (durable drivers only). */
     cron?: string;
+    /** OR a fixed interval. */
     everyMs?: number;
     timezone?: string;
 };
+/**
+ * Context handed to a worker handler. `payload` has already been validated by
+ * the registration's schema before the handler runs.
+ */
 export type JobContext<T> = {
     id: string;
     name: QueueName;
     payload: T;
+    /** 1-based. */
     attempt: number;
     enqueuedAt: Date;
+    /** Carried metadata (correlationId, idempotencyKey) for tracing. */
     meta: Record<string, string | undefined>;
 };
 export type JobHandler<T> = (ctx: JobContext<T>) => void | Promise<void>;
 export type WorkerOptions = {
+    /** Per-worker parallelism. */
     concurrency?: number;
+    /** Strict per-orderingKey serialization even when concurrency > 1. */
     serializeByOrderingKey?: boolean;
 };
+/**
+ * A minimal structural validator. A Zod schema (`ZodType<T>`) satisfies this, so
+ * callers pass their schema directly - but @openora/core/contracts stays zod-free (every
+ * other seam here imports nothing but ./token).
+ */
 export type PayloadSchema<T> = {
     parse(data: unknown): T;
 };
+/**
+ * What an overlay registers to start consuming a queue. The schema is the
+ * payload contract - validated before the handler runs, no vendor type leaks.
+ */
 export type WorkerRegistration<T> = {
     queue: QueueName;
     schema: PayloadSchema<T>;
     handler: JobHandler<T>;
     options?: WorkerOptions;
+    /**
+     * Invoked after attempts are exhausted (post-dead-letter hook): alert, persist
+     * the poison job, or trigger a compensating action. Never throws into the queue.
+     */
     onDeadLetter?: (ctx: JobContext<T>, error: Error) => void | Promise<void>;
 };
 export type JobQueueAdapter = {
     enqueue<T>(queue: QueueName, payload: T, opts?: EnqueueOptions): Promise<{
         id: string;
     }>;
+    /** Idempotent registration of a recurring schedule (keyed by queue + scheduleId). */
     schedule<T>(queue: QueueName, scheduleId: string, payload: T, repeat: RepeatOptions): Promise<void>;
     unschedule(queue: QueueName, scheduleId: string): Promise<void>;
+    /** Start consuming a queue. Called once per worker overlay during boot. */
     registerWorker<T>(registration: WorkerRegistration<T>): void;
+    /** Graceful drain: stop accepting, finish in-flight, close connections. */
     close(): Promise<void>;
 };
 export declare const JOB_QUEUE: Token<JobQueueAdapter>;

package/dist/contracts/adapters/job-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"job-queue.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/job-queue.ts"],"names":[],"mappings":"AASA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAIrD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AACnE,eAAO,MAAM,KAAK,GAAI,MAAM,MAAM,KAAG,SAA8B,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG;IAK3B,cAAc,CAAC,EAAE,MAAM,CAAC;IAGxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;IAEjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEzE,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAKF,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;IAC7B,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC;CACzB,CAAC;AAIF,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;IAGxB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzF,QAAQ,CAAC,CAAC,EACR,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEhE,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAE7D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,eAAe,CAA4B,CAAC"}
+{"version":3,"file":"job-queue.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/job-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AACnE,eAAO,MAAM,KAAK,GAAI,MAAM,MAAM,KAAG,SAA8B,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,OAAO,GAAG,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG;IAC3B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,CAAC,CAAC;IACX,eAAe;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;IACjB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEzE,MAAM,MAAM,aAAa,GAAG;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI;IAC7B,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI;IAClC,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,qFAAqF;IACrF,QAAQ,CAAC,CAAC,EACR,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,CAAC,EACV,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,2EAA2E;IAC3E,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7D,2EAA2E;IAC3E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,eAAe,CAA4B,CAAC"}

package/dist/contracts/adapters/job-queue.js

@@ -1,12 +1,14 @@
-// Background-job seam. Modules enqueue durable, retryable, schedulable work
-// through this adapter, so the queue driver is swappable: the default binding is
-// an in-process queue (zero dependencies - good for `pnpm dev`, seed and tests);
-// a downstream operator binds a durable driver (BullMQ/Redis is the reference
-// overlay) to JOB_QUEUE without touching modules. Delivery is at-least-once, so
-// handlers MUST be idempotent (use `idempotencyKey` + a DB guard for money jobs).
-// Distinct from MESSAGE_BROKER: the broker is "something happened" fan-out (the
-// EventBus facade); JOB_QUEUE is "execute this unit of work later, with delivery
-// and retry control". See ADR-0014.
+/**
+ * Background-job seam. Modules enqueue durable, retryable, schedulable work
+ * through this adapter, so the queue driver is swappable: the default binding is
+ * an in-process queue (zero dependencies - good for `pnpm dev`, seed and tests);
+ * a downstream operator binds a durable driver (BullMQ/Redis is the reference
+ * overlay) to JOB_QUEUE without touching modules. Delivery is at-least-once, so
+ * handlers MUST be idempotent (use `idempotencyKey` + a DB guard for money jobs).
+ * Distinct from MESSAGE_BROKER: the broker is "something happened" fan-out (the
+ * EventBus facade); JOB_QUEUE is "execute this unit of work later, with delivery
+ * and retry control". See ADR-0014.
+ */
 import { createToken } from './token.js';
 export const queue = (name) => name;
 export const JOB_QUEUE = createToken('JOB_QUEUE');

package/dist/contracts/adapters/job-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"job-queue.js","sourceRoot":"","sources":["../../../src/contracts/adapters/job-queue.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,iFAAiF;AACjF,oCAAoC;AACpC,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAKrD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAa,EAAE,CAAC,IAAiB,CAAC;AAmFpE,MAAM,CAAC,MAAM,SAAS,GAA2B,WAAW,CAAC,WAAW,CAAC,CAAC"}
+{"version":3,"file":"job-queue.js","sourceRoot":"","sources":["../../../src/contracts/adapters/job-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAOrD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAa,EAAE,CAAC,IAAiB,CAAC;AAsGpE,MAAM,CAAC,MAAM,SAAS,GAA2B,WAAW,CAAC,WAAW,CAAC,CAAC"}

package/dist/contracts/adapters/kyc.d.ts

@@ -1,21 +1,125 @@
+/**
+ * KYC/identity-verification seam. Intended real provider: SumSub (https://sumsub.com).
+ * The identity module ships MockKycAdapter (auto-approves) as the default binding.
+ * Override via overlay: `ctx.provide(KYC_ADAPTER, () => new SumsubKycAdapter())`.
+ * Load your overlay AFTER the identity plugin in extensions.config.ts (last registration wins).
+ * See docs/adapters/kyc.md for the full binding guide.
+ */
+import * as z from 'zod';
 import { type Token } from './token.js';
-import type { KycStatus, Player } from '../schemas/player.js';
-export type KycStatusSource = 'vendor' | 'manual' | 'webhook' | 'reverify';
+import type { KycStatus, KycStatusSource, Player } from '../schemas/player.js';
 export type KycDocument = {
     type: 'passport' | 'drivers_license' | 'national_id';
     frontUrl: string;
     backUrl?: string;
 };
-export type KycVendorStatus = 'pending' | 'approved' | 'rejected' | 'not_started';
+export declare const KYC_VENDOR_STATUSES: readonly ["pending", "approved", "rejected", "not_started"];
+export type KycVendorStatus = (typeof KYC_VENDOR_STATUSES)[number];
+/**
+ * Vendor-neutral outcome of a single workflow step (eg an ID check, a liveness check,
+ * an AML screen). `approved` is the only terminal-successful value; every other value
+ * (including `unknown`, used when a vendor reports a step status this platform does
+ * not recognize) means the step has not reached a successful state.
+ */
+export declare const KYC_CHECK_STATUSES: readonly ["not_started", "in_progress", "in_review", "approved", "declined", "expired", "unknown"];
+export declare const KycCheckStatusSchema: z.ZodEnum<{
+    expired: "expired";
+    unknown: "unknown";
+    not_started: "not_started";
+    approved: "approved";
+    in_progress: "in_progress";
+    in_review: "in_review";
+    declined: "declined";
+}>;
+export type KycCheckStatus = z.infer<typeof KycCheckStatusSchema>;
+/** One workflow step's outcome. `step` is a free-form, vendor-supplied label (eg Didit's `ID_VERIFICATION`). */
+export declare const KycCheckResultSchema: z.ZodObject<{
+    step: z.ZodString;
+    status: z.ZodEnum<{
+        expired: "expired";
+        unknown: "unknown";
+        not_started: "not_started";
+        approved: "approved";
+        in_progress: "in_progress";
+        in_review: "in_review";
+        declined: "declined";
+    }>;
+}, z.core.$strip>;
+export type KycCheckResult = z.infer<typeof KycCheckResultSchema>;
 export type KycResult = {
     referenceId: string;
     status: KycVendorStatus;
+    /**
+     * Hosted verification URL to redirect the end user to, for vendors whose flow collects
+     * documents on their own hosted page (eg Didit) rather than accepting them from our
+     * backend. Omitted by document-forwarding vendors (eg SumSub, MockKycAdapter).
+     */
+    verificationUrl?: string;
+    /** Document types the vendor's decision covers, when it reports them. */
+    documentTypes?: KycDocument['type'][];
+    /** Vendor-supplied human-readable reason for the decision (eg a rejection cause). */
+    decisionReason?: string;
+    /**
+     * Per-step outcomes for every workflow step the vendor considers part of THIS
+     * session (eg Didit's decision `features` list) - vendor-neutral, and inherently
+     * self-updating when the vendor-side workflow graph changes, since it is derived
+     * from the same session's decision payload rather than a separately maintained
+     * step list. Omitted by vendors/adapters with no step-level granularity (eg
+     * MockKycAdapter, a document-forwarding vendor). The compliance completeness gate
+     * (`KycVerificationService.reconcile`) requires every entry to be `approved`
+     * before it lets a vendor `approved` status stand; a missing/incomplete step
+     * routes the decision to `resubmission_requested` instead.
+     */
+    checks?: KycCheckResult[];
+};
+/**
+ * Vendor-neutral device/IP risk signals resolved for a KYC verification session.
+ * Hosted-session vendors (eg Didit) extract these from their own session decision;
+ * document-forwarding vendors and MockKycAdapter have no session-level device/IP
+ * telemetry to report and omit the port method entirely rather than returning a
+ * default-false shape.
+ */
+export type KycRiskSignals = {
+    vpnOrTorDetected: boolean;
+    dataCenterIpDetected: boolean;
+    duplicateDeviceDetected: boolean;
+    highRiskCountryDetected: boolean;
+    deviceFingerprints: string[];
 };
 export type KycAdapter = {
+    /**
+     * True when the adapter rubber-stamps every submission (the default MockKycAdapter).
+     * A boot guard refuses/warns if withdrawals are KYC-gated while this is bound, so an
+     * operator can't enable the gate yet leave verification a no-op. Real providers omit it.
+     */
     readonly autoApproves?: boolean;
     submit(userId: string, documents: KycDocument[]): Promise<KycResult>;
     getStatus(userId: string): Promise<KycVendorStatus>;
+    /**
+     * Provider-specific normalization of a raw webhook into a vendor decision, or
+     * null when the body is not a reconcilable decision. Optional - MockKycAdapter
+     * omits it; the Didit/SumSub overlay implements it.
+     */
     parseWebhook?(rawBody: string, headers: Record<string, string | string[] | undefined>): KycResult | null;
+    /**
+     * Fetches the full decision for a reference id - documentTypes, decisionReason,
+     * and the authoritative status - from the vendor. Optional: document-forwarding
+     * vendors and MockKycAdapter have nothing to resolve (the webhook/submit payload
+     * IS the decision); a hosted-session vendor (eg Didit) implements it so the
+     * `kyc-decision-sync` job can enrich the webhook's bare referenceId+status with
+     * the full decision off the request path, never awaited inline in the webhook
+     * handler (Didit's own SLA is ~5s with 2 retries - the webhook route must not
+     * inherit that latency).
+     */
+    resolveDecision?(referenceId: string): Promise<KycResult>;
+    /**
+     * Fetches device/IP risk signals for a reference id. Optional - the signals only
+     * exist as part of a vendor's hosted verification session, never at signup, so
+     * only a hosted-session vendor (eg Didit) implements it; document-forwarding
+     * vendors and MockKycAdapter omit it. Called by the `kyc-decision-sync` job
+     * alongside `resolveDecision`, off the webhook request path.
+     */
+    resolveRiskSignals?(referenceId: string): Promise<KycRiskSignals>;
 };
 export declare const KYC_ADAPTER: Token<KycAdapter>;
 /**
@@ -38,8 +142,21 @@ export type KycStatusWriter = {
     }, tx?: unknown): Promise<void>;
 };
 export declare const KYC_STATUS_WRITER: Token<KycStatusWriter>;
+/**
+ * Verifies the public KYC provider webhook is genuine. The default impl recomputes
+ * an HMAC-SHA256 over the raw request body and constant-time compares it against the
+ * `x-kyc-signature` header; a vendor overlay rebinds it. Fails closed when the secret is
+ * unset, the signature is absent, or the raw body was not captured. Takes the full
+ * headers map (not a pre-extracted value) because the signing header name is
+ * vendor-specific - eg SumSub vs a hosted-session vendor each names it differently -
+ * so each implementation extracts whatever header(s) it actually needs. Async (a
+ * `boolean` return also satisfies the type) because a real implementation - the
+ * default `HmacKycWebhookVerifier` included - checks replay protection against a
+ * store, not just the signature bytes; a captured valid signature must not be
+ * honored forever.
+ */
 export type KycWebhookVerifier = {
-    verify(rawBody: string, signature: string | null): boolean;
+    verify(rawBody: string, headers: Record<string, string | string[] | undefined>): boolean | Promise<boolean>;
 };
 export declare const KYC_WEBHOOK_VERIFIER: Token<KycWebhookVerifier>;
 //# sourceMappingURL=kyc.d.ts.map

package/dist/contracts/adapters/kyc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kyc.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/kyc.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3E,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,UAAU,GAAG,iBAAiB,GAAG,aAAa,CAAC;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;AAElF,MAAM,MAAM,SAAS,GAAG;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAIvB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAIpD,YAAY,CAAC,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,SAAS,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CACP,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE,EACpF,EAAE,CAAC,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAoC,CAAC;AAM1F,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;CAC5D,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAuC,CAAC"}
+{"version":3,"file":"kyc.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/kyc.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE/E,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,UAAU,GAAG,iBAAiB,GAAG,aAAa,CAAC;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,mBAAmB,6DAA8D,CAAC;AAC/F,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,oGAQrB,CAAC;AACX,eAAO,MAAM,oBAAoB;;;;;;;;EAA6B,CAAC;AAC/D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,gHAAgH;AAChH,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAG/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,SAAS,GAAG;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IACtC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;CAC3B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,uBAAuB,EAAE,OAAO,CAAC;IACjC,uBAAuB,EAAE,OAAO,CAAC;IACjC,kBAAkB,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD;;;;OAIG;IACH,YAAY,CAAC,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,SAAS,GAAG,IAAI,CAAC;IACpB;;;;;;;;;OASG;IACH,eAAe,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,kBAAkB,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACnE,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC;AAEzE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CACP,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EACxB,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,eAAe,CAAA;KAAE,EACpF,EAAE,CAAC,EAAE,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAoC,CAAC;AAE1F;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAuC,CAAC"}

package/dist/contracts/adapters/kyc.js

@@ -1,9 +1,34 @@
-// KYC/identity-verification seam. Intended real provider: SumSub (https://sumsub.com).
-// The identity module ships MockKycAdapter (auto-approves) as the default binding.
-// Override via overlay: ctx.provide(KYC_ADAPTER, () => new SumsubKycAdapter())
-// Load your overlay AFTER the identity plugin in extensions.config.ts (last registration wins).
-// See docs/adapters/kyc.md for the full binding guide.
+/**
+ * KYC/identity-verification seam. Intended real provider: SumSub (https://sumsub.com).
+ * The identity module ships MockKycAdapter (auto-approves) as the default binding.
+ * Override via overlay: `ctx.provide(KYC_ADAPTER, () => new SumsubKycAdapter())`.
+ * Load your overlay AFTER the identity plugin in extensions.config.ts (last registration wins).
+ * See docs/adapters/kyc.md for the full binding guide.
+ */
+import * as z from 'zod';
 import { createToken } from './token.js';
+export const KYC_VENDOR_STATUSES = ['pending', 'approved', 'rejected', 'not_started'];
+/**
+ * Vendor-neutral outcome of a single workflow step (eg an ID check, a liveness check,
+ * an AML screen). `approved` is the only terminal-successful value; every other value
+ * (including `unknown`, used when a vendor reports a step status this platform does
+ * not recognize) means the step has not reached a successful state.
+ */
+export const KYC_CHECK_STATUSES = [
+    'not_started',
+    'in_progress',
+    'in_review',
+    'approved',
+    'declined',
+    'expired',
+    'unknown',
+];
+export const KycCheckStatusSchema = z.enum(KYC_CHECK_STATUSES);
+/** One workflow step's outcome. `step` is a free-form, vendor-supplied label (eg Didit's `ID_VERIFICATION`). */
+export const KycCheckResultSchema = z.object({
+    step: z.string(),
+    status: KycCheckStatusSchema,
+});
 export const KYC_ADAPTER = createToken('KYC_ADAPTER');
 export const KYC_STATUS_WRITER = createToken('KYC_STATUS_WRITER');
 export const KYC_WEBHOOK_VERIFIER = createToken('KYC_WEBHOOK_VERIFIER');

package/dist/contracts/adapters/kyc.js.map

@@ -1 +1 @@
-{"version":3,"file":"kyc.js","sourceRoot":"","sources":["../../../src/contracts/adapters/kyc.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,mFAAmF;AACnF,+EAA+E;AAC/E,gGAAgG;AAChG,uDAAuD;AACvD,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAkCrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC;AAuBzE,MAAM,CAAC,MAAM,iBAAiB,GAA2B,WAAW,CAAC,mBAAmB,CAAC,CAAC;AAU1F,MAAM,CAAC,MAAM,oBAAoB,GAA8B,WAAW,CAAC,sBAAsB,CAAC,CAAC"}
+{"version":3,"file":"kyc.js","sourceRoot":"","sources":["../../../src/contracts/adapters/kyc.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AASrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAG/F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,aAAa;IACb,WAAW;IACX,UAAU;IACV,UAAU;IACV,SAAS;IACT,SAAS;CACD,CAAC;AACX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAG/D,gHAAgH;AAChH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,oBAAoB;CAC7B,CAAC,CAAC;AAoFH,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC;AAuBzE,MAAM,CAAC,MAAM,iBAAiB,GAA2B,WAAW,CAAC,mBAAmB,CAAC,CAAC;AAsB1F,MAAM,CAAC,MAAM,oBAAoB,GAA8B,WAAW,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/contracts/adapters/login-enforcement.d.ts

@@ -1,3 +1,11 @@
+/**
+ * Push port for Responsible-Gambling login enforcement. Owned + bound by the identity
+ * module (it owns the `user` table); compliance depends only on this port to block or
+ * unblock a player's login, never on the identity schema. `block` also revokes all of
+ * the player's active sessions (the RG session-termination requirement). `until: null`
+ * means an indefinite block (self-exclusion / permanent); a Date is the cooling-off
+ * expiry the login gate auto-clears once elapsed. See ADR-0017.
+ */
 import { type Token } from './token.js';
 export type LoginEnforcementPort = {
     block(userId: string, opts: {

package/dist/contracts/adapters/login-enforcement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-enforcement.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/login-enforcement.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,oBAAoB,CAAoC,CAAC"}
+{"version":3,"file":"login-enforcement.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/login-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,oBAAoB,CAAoC,CAAC"}