@openora/core 0.4.0

package/dist/compliance/__tests__/rg-eval.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rg-eval.test.d.ts.map

package/dist/compliance/__tests__/rg-eval.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-eval.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg-eval.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/rg-eval.test.js

@@ -0,0 +1,48 @@
+import { describe, it, expect } from 'vitest';
+import { periodWindow, thresholdPct, isAtThreshold, RG_FLAG_THRESHOLD_PCT, } from '../service/rg-eval.js';
+const NOW = new Date('2026-07-06T12:00:00.000Z');
+const DAY = 24 * 60 * 60 * 1000;
+describe('periodWindow', () => {
+    it('daily window is the trailing 24h', () => {
+        const { from, to } = periodWindow('daily', NOW);
+        expect(to).toEqual(NOW);
+        expect(NOW.getTime() - from.getTime()).toBe(DAY);
+    });
+    it('weekly window is the trailing 7 days', () => {
+        const { from } = periodWindow('weekly', NOW);
+        expect(NOW.getTime() - from.getTime()).toBe(7 * DAY);
+    });
+    it('monthly window is the trailing 30 days', () => {
+        const { from } = periodWindow('monthly', NOW);
+        expect(NOW.getTime() - from.getTime()).toBe(30 * DAY);
+    });
+    it('session window is a zero-length point (handled by the sweep, not spend)', () => {
+        const { from, to } = periodWindow('session', NOW);
+        expect(from).toEqual(NOW);
+        expect(to).toEqual(NOW);
+    });
+});
+describe('thresholdPct', () => {
+    it('returns 0 for a non-positive limit', () => {
+        expect(thresholdPct(50, 0)).toBe(0);
+        expect(thresholdPct(50, -1)).toBe(0);
+    });
+    it('computes the ratio as a percentage', () => {
+        expect(thresholdPct(80, 100)).toBe(80);
+        expect(thresholdPct(50, 200)).toBe(25);
+    });
+});
+describe('isAtThreshold (80% boundary)', () => {
+    it('raises exactly at 80%', () => {
+        expect(isAtThreshold(80, 100)).toBe(true);
+        expect(RG_FLAG_THRESHOLD_PCT).toBe(80);
+    });
+    it('does not raise just below 80%', () => {
+        expect(isAtThreshold(79.99, 100)).toBe(false);
+    });
+    it('raises above 80% and at/over the limit', () => {
+        expect(isAtThreshold(90, 100)).toBe(true);
+        expect(isAtThreshold(100, 100)).toBe(true);
+    });
+});
+//# sourceMappingURL=rg-eval.test.js.map

package/dist/compliance/__tests__/rg-eval.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-eval.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg-eval.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACjD,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/rg-monitoring.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rg-monitoring.service.test.d.ts.map

package/dist/compliance/__tests__/rg-monitoring.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-monitoring.service.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg-monitoring.service.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/rg-monitoring.service.test.js

@@ -0,0 +1,99 @@
+import { describe, it, expect } from 'vitest';
+import { mockDb } from '../../testing/mock.js';
+import { RgMonitoringService } from '../service/rg-monitoring.service.js';
+import { userLimit, rgFlag } from '../schema/index.js';
+import { walletTransaction } from '@openora/core/wallet/schema';
+// Routing Drizzle stub: awaited selects resolve by the table passed to `.from()`;
+// inserts/updates are captured for assertions.
+function routingDb(cfg) {
+    const selectMap = new Map(cfg.selects);
+    function selectChain() {
+        let table;
+        const c = {
+            from: (t) => {
+                table = t;
+                return c;
+            },
+            innerJoin: () => c,
+            where: () => c,
+            orderBy: () => c,
+            limit: () => c,
+            offset: () => c,
+            then: (resolve) => resolve(selectMap.get(table) ?? []),
+        };
+        return c;
+    }
+    const db = {
+        select: () => selectChain(),
+        insert: (table) => {
+            const c = {
+                values: (v) => {
+                    cfg.onInsert?.(table, v);
+                    return c;
+                },
+                onConflictDoUpdate: () => c,
+                returning: () => Promise.resolve([]),
+                then: (resolve) => resolve(undefined),
+            };
+            return c;
+        },
+        update: (table) => {
+            const c = {
+                set: (s) => {
+                    cfg.onUpdate?.(table, s);
+                    return c;
+                },
+                where: () => c,
+                returning: () => Promise.resolve([]),
+                then: (resolve) => resolve(undefined),
+            };
+            return c;
+        },
+    };
+    return mockDb(db);
+}
+const USER = 'user-1';
+const depositLimit = { id: 'l1', userId: USER, type: 'deposit', amount: 100, period: 'daily' };
+describe('RgMonitoringService.evaluateUser (80% boundary)', () => {
+    it('raises a limit_threshold flag at exactly 80% of the limit', async () => {
+        const inserts = [];
+        const db = routingDb({
+            selects: [
+                [userLimit, [depositLimit]],
+                [walletTransaction, [{ total: '80' }]],
+                [rgFlag, []],
+            ],
+            onInsert: (table, values) => inserts.push({ table, values }),
+        });
+        await new RgMonitoringService({ drizzle: db }).evaluateUser(USER, 'wallet.deposit.completed');
+        expect(inserts).toHaveLength(1);
+        expect(inserts[0].table).toBe(rgFlag);
+        expect(inserts[0].values).toMatchObject({ flagType: 'limit_threshold', limitType: 'deposit' });
+    });
+    it('clears the flag when spend drops below 80%', async () => {
+        const updates = [];
+        const db = routingDb({
+            selects: [
+                [userLimit, [depositLimit]],
+                [walletTransaction, [{ total: '79' }]],
+                [rgFlag, []],
+            ],
+            onUpdate: (table, set) => updates.push({ table, set }),
+        });
+        await new RgMonitoringService({ drizzle: db }).evaluateUser(USER, 'wallet.deposit.completed');
+        expect(updates).toHaveLength(1);
+        expect(updates[0].table).toBe(rgFlag);
+        expect(updates[0].set).toMatchObject({ status: 'cleared' });
+    });
+    it('raises a self_excluded_login flag on a blocked-login trigger', async () => {
+        const inserts = [];
+        const db = routingDb({
+            selects: [[rgFlag, []]],
+            onInsert: (table, values) => inserts.push({ table, values }),
+        });
+        await new RgMonitoringService({ drizzle: db }).evaluateUser(USER, 'rg.exclusion.login_blocked');
+        expect(inserts).toHaveLength(1);
+        expect(inserts[0].values).toMatchObject({ flagType: 'self_excluded_login', limitType: null });
+    });
+});
+//# sourceMappingURL=rg-monitoring.service.test.js.map

package/dist/compliance/__tests__/rg-monitoring.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-monitoring.service.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg-monitoring.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAIhE,kFAAkF;AAClF,+CAA+C;AAC/C,SAAS,SAAS,CAAC,GAIlB;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,SAAS,WAAW;QAClB,IAAI,KAAc,CAAC;QACnB,MAAM,CAAC,GAA4B;YACjC,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE;gBACnB,KAAK,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,CAAC;YACX,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAChF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,GAAG;QACT,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC3B,MAAM,EAAE,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,CAAC,GAA4B;gBACjC,MAAM,EAAE,CAAC,CAAU,EAAE,EAAE;oBACrB,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACzB,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;aAC/D,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,CAAC,KAAc,EAAE,EAAE;YACzB,MAAM,CAAC,GAA4B;gBACjC,GAAG,EAAE,CAAC,CAAU,EAAE,EAAE;oBAClB,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBACzB,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;aAC/D,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,IAAI,GAAG,QAAQ,CAAC;AACtB,MAAM,YAAY,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAE/F,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAA+C,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,OAAO,EAAE;gBACP,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC;gBAC3B,CAAC,iBAAiB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC,MAAM,EAAE,EAAE,CAAC;aACb;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,GAA4C,EAAE,CAAC;QAC5D,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,OAAO,EAAE;gBACP,CAAC,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC;gBAC3B,CAAC,iBAAiB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC,MAAM,EAAE,EAAE,CAAC;aACb;YACD,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,MAAM,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAA+C,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAChG,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/rg.contract.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rg.contract.test.d.ts.map

package/dist/compliance/__tests__/rg.contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.contract.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.contract.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/rg.contract.test.js

@@ -0,0 +1,80 @@
+import { describe, it, expect } from 'vitest';
+import { ActivateCoolingOffInputSchema, ActivateSelfExclusionInputSchema, LiftSelfExclusionInputSchema, SetPlayerLimitInputSchema, } from '../contract/rg.js';
+const USER = '11111111-1111-4111-8111-111111111111';
+describe('SetPlayerLimitInputSchema session invariant', () => {
+    const base = { userId: USER, amount: 100 };
+    it('allows a session-time limit only with the session period', () => {
+        expect(SetPlayerLimitInputSchema.safeParse({ ...base, type: 'session', period: 'session' }).success).toBe(true);
+        expect(SetPlayerLimitInputSchema.safeParse({ ...base, type: 'deposit', period: 'daily' }).success).toBe(true);
+    });
+    it('rejects a mismatched type/period', () => {
+        expect(SetPlayerLimitInputSchema.safeParse({ ...base, type: 'deposit', period: 'session' }).success).toBe(false);
+        expect(SetPlayerLimitInputSchema.safeParse({ ...base, type: 'session', period: 'daily' }).success).toBe(false);
+    });
+});
+describe('ActivateCoolingOffInputSchema', () => {
+    it('accepts the 24h..1008h window with a reason', () => {
+        expect(ActivateCoolingOffInputSchema.safeParse({ userId: USER, durationHours: 24, reason: 'x' })
+            .success).toBe(true);
+        expect(ActivateCoolingOffInputSchema.safeParse({ userId: USER, durationHours: 1008, reason: 'x' })
+            .success).toBe(true);
+    });
+    it('rejects durations outside the window', () => {
+        expect(ActivateCoolingOffInputSchema.safeParse({ userId: USER, durationHours: 23, reason: 'x' })
+            .success).toBe(false);
+        expect(ActivateCoolingOffInputSchema.safeParse({ userId: USER, durationHours: 1009, reason: 'x' })
+            .success).toBe(false);
+    });
+    it('requires a non-empty reason', () => {
+        expect(ActivateCoolingOffInputSchema.safeParse({ userId: USER, durationHours: 24, reason: '' })
+            .success).toBe(false);
+    });
+});
+describe('ActivateSelfExclusionInputSchema', () => {
+    it('accepts a permanent exclusion without a duration', () => {
+        expect(ActivateSelfExclusionInputSchema.safeParse({
+            userId: USER,
+            permanent: true,
+            reason: 'x',
+            confirm: true,
+        }).success).toBe(true);
+    });
+    it('requires durationMonths (>= 6) for a fixed-term exclusion', () => {
+        expect(ActivateSelfExclusionInputSchema.safeParse({
+            userId: USER,
+            permanent: false,
+            reason: 'x',
+            confirm: true,
+        }).success).toBe(false);
+        expect(ActivateSelfExclusionInputSchema.safeParse({
+            userId: USER,
+            permanent: false,
+            durationMonths: 5,
+            reason: 'x',
+            confirm: true,
+        }).success).toBe(false);
+        expect(ActivateSelfExclusionInputSchema.safeParse({
+            userId: USER,
+            permanent: false,
+            durationMonths: 6,
+            reason: 'x',
+            confirm: true,
+        }).success).toBe(true);
+    });
+    it('requires an explicit confirm:true', () => {
+        expect(ActivateSelfExclusionInputSchema.safeParse({
+            userId: USER,
+            permanent: true,
+            reason: 'x',
+            confirm: false,
+        }).success).toBe(false);
+    });
+});
+describe('LiftSelfExclusionInputSchema', () => {
+    it('requires reason and confirm:true', () => {
+        expect(LiftSelfExclusionInputSchema.safeParse({ userId: USER, reason: 'x', confirm: true }).success).toBe(true);
+        expect(LiftSelfExclusionInputSchema.safeParse({ userId: USER, reason: '', confirm: true }).success).toBe(false);
+        expect(LiftSelfExclusionInputSchema.safeParse({ userId: USER, reason: 'x', confirm: false }).success).toBe(false);
+    });
+});
+//# sourceMappingURL=rg.contract.test.js.map

package/dist/compliance/__tests__/rg.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.contract.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.contract.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3C,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CACJ,yBAAyB,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CACJ,yBAAyB,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CACJ,yBAAyB,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAC7F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,yBAAyB,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAC3F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CACJ,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;aACtF,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CACJ,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;aACxF,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CACJ,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;aACtF,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;aACxF,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CACJ,6BAA6B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;aACrF,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CACJ,gCAAgC,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CACJ,gCAAgC,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,gCAAgC,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,gCAAgC,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CACJ,gCAAgC,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CACJ,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CACJ,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAC5F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,4BAA4B,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAC9F,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/rg.router.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rg.router.test.d.ts.map

package/dist/compliance/__tests__/rg.router.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.router.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.router.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/rg.router.test.js

@@ -0,0 +1,65 @@
+import { describe, it, expect, vi } from 'vitest';
+import { call, ORPCError } from '@orpc/server';
+import { mock } from '../../testing/mock.js';
+import { createComplianceRouter } from '../router/index.js';
+import { ExclusionPeriodNotElapsedError } from '../service/rg.service.js';
+const CTX = { request: { headers: {} } };
+const USER = '11111111-1111-4111-8111-111111111111';
+function fakeGuard(allowed) {
+    return mock({
+        assert: vi.fn(async (_ctx, resource, action) => {
+            if (resource && action && !allowed.includes(`${resource}:${action}`)) {
+                throw new ORPCError('FORBIDDEN', { message: `Missing permission: ${resource}:${action}` });
+            }
+            return { userId: 'admin-1', role: 'admin' };
+        }),
+    });
+}
+function build(guard, rg = {}, monitoring = {}) {
+    return createComplianceRouter({
+        compliance: mock({}),
+        adminGuard: guard,
+        kyc: mock({}),
+        kycAdapter: mock({}),
+        webhookVerifier: mock({}),
+        rg: mock(rg),
+        rgMonitoring: mock(monitoring),
+    });
+}
+describe('compliance RG router authz', () => {
+    it('setPlayerLimit requires compliance:manage-rg', async () => {
+        const router = build(fakeGuard([]));
+        await expect(call(router.setPlayerLimit, { userId: USER, type: 'deposit', amount: 100, period: 'daily' }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+    });
+    it('activateSelfExclusion requires compliance:manage-rg', async () => {
+        const router = build(fakeGuard([]));
+        await expect(call(router.activateSelfExclusion, { userId: USER, permanent: true, reason: 'x', confirm: true }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+    });
+    it('getRgSection requires compliance:view', async () => {
+        const router = build(fakeGuard([]));
+        await expect(call(router.getRgSection, { userId: USER }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+    });
+    it('listRgFlags requires compliance:view', async () => {
+        const router = build(fakeGuard([]));
+        await expect(call(router.listRgFlags, { page: 1, limit: 100 }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+    });
+    it('passes the caller id to setPlayerLimit when authorized', async () => {
+        const setPlayerLimit = vi.fn().mockResolvedValue({
+            id: '22222222-2222-4222-8222-222222222222',
+            userId: USER,
+            type: 'deposit',
+            amount: 100,
+            period: 'daily',
+            createdAt: new Date().toISOString(),
+        });
+        const router = build(fakeGuard(['compliance:manage-rg']), { setPlayerLimit });
+        await call(router.setPlayerLimit, { userId: USER, type: 'deposit', amount: 100, period: 'daily' }, { context: CTX });
+        expect(setPlayerLimit).toHaveBeenCalledWith(USER, expect.any(Object), 'admin-1');
+    });
+    it('maps a min-period lift rejection to a CONFLICT error', async () => {
+        const liftSelfExclusion = vi.fn().mockRejectedValue(new ExclusionPeriodNotElapsedError());
+        const router = build(fakeGuard(['compliance:manage-rg']), { liftSelfExclusion });
+        await expect(call(router.liftSelfExclusion, { userId: USER, reason: 'x', confirm: true }, { context: CTX })).rejects.toMatchObject({ code: 'CONFLICT' });
+    });
+});
+//# sourceMappingURL=rg.router.test.js.map

package/dist/compliance/__tests__/rg.router.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.router.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,OAAO,EAAa,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAGrF,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAmD,EAAE,EAAE,CAAC;AAC1F,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,SAAS,SAAS,CAAC,OAA6C;IAC9D,OAAO,IAAI,CAAa;QACtB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAE,MAAe,EAAE,EAAE;YACxE,IAAI,QAAQ,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,uBAAuB,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC9C,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CACZ,KAAiB,EACjB,KAAyB,EAAE,EAC3B,aAA2C,EAAE;IAE7C,OAAO,sBAAsB,CAAC;QAC5B,UAAU,EAAE,IAAI,CAAoB,EAAE,CAAC;QACvC,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,IAAI,CAAyB,EAAE,CAAC;QACrC,UAAU,EAAE,IAAI,CAAa,EAAE,CAAC;QAChC,eAAe,EAAE,IAAI,CAAqB,EAAE,CAAC;QAC7C,EAAE,EAAE,IAAI,CAAY,EAAE,CAAC;QACvB,YAAY,EAAE,IAAI,CAAsB,UAAU,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,cAAc,EACrB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAC/D,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,qBAAqB,EAC5B,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAC7D,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAC9D,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CACpE,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC/C,EAAE,EAAE,sCAAsC;YAC1C,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9E,MAAM,IAAI,CACR,MAAM,CAAC,cAAc,EACrB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAC/D,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,iBAAiB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,8BAA8B,EAAE,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACjF,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,iBAAiB,EACxB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAC5C,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/rg.service.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rg.service.test.d.ts.map

package/dist/compliance/__tests__/rg.service.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.service.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.service.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/rg.service.test.js

@@ -0,0 +1,206 @@
+import { describe, it, expect, vi } from 'vitest';
+import { mock, mockDb } from '../../testing/mock.js';
+import { userLimit, rgExclusion } from '../schema/index.js';
+import { RgService, ActiveExclusionError, PermanentExclusionLiftError, ExclusionPeriodNotElapsedError, ExclusionNotFoundError, } from '../service/rg.service.js';
+// Routing Drizzle stub. `select().from(t)` resolves the next value from that table's
+// queue (so the pre-write check and the enforcement recompute get distinct rows);
+// `transaction(cb)` runs inline; `insert`/`update` `.returning()` yield `returning`.
+function routingDb(cfg) {
+    const queues = new Map([
+        [rgExclusion, [...(cfg.rgExclusion ?? [])]],
+        [userLimit, [...(cfg.userLimit ?? [])]],
+    ]);
+    function selectChain() {
+        let table;
+        const c = {
+            from: (t) => {
+                table = t;
+                return c;
+            },
+            innerJoin: () => c,
+            where: () => c,
+            orderBy: () => c,
+            limit: () => c,
+            offset: () => c,
+            then: (resolve) => {
+                const q = queues.get(table);
+                resolve(q && q.length > 0 ? q.shift() : []);
+            },
+        };
+        return c;
+    }
+    const returning = () => Promise.resolve(cfg.returning ?? []);
+    const db = {
+        transaction: (cb) => cb(db),
+        select: () => selectChain(),
+        insert: () => {
+            const c = {
+                values: () => c,
+                onConflictDoUpdate: () => c,
+                returning,
+                then: (r) => r(undefined),
+            };
+            return c;
+        },
+        update: () => {
+            const c = {
+                set: () => c,
+                where: () => c,
+                returning,
+                then: (r) => r(undefined),
+            };
+            return c;
+        },
+    };
+    return mockDb(db);
+}
+function makeEvents() {
+    return { emit: vi.fn(), on: vi.fn() };
+}
+function makeEnforcement() {
+    return {
+        block: vi.fn().mockResolvedValue(undefined),
+        unblock: vi.fn().mockResolvedValue(undefined),
+    };
+}
+function newSvc(db, enforcement = makeEnforcement(), events = makeEvents()) {
+    const svc = new RgService({
+        drizzle: db,
+        events: mock(events),
+        loginEnforcement: enforcement,
+        email: null,
+        directory: null,
+    });
+    return { svc, events, enforcement };
+}
+function exclusionRow(overrides = {}) {
+    const now = new Date();
+    return {
+        id: 'excl-1',
+        userId: 'user-1',
+        kind: 'self_exclusion',
+        status: 'active',
+        reason: 'gambling concern',
+        permanent: false,
+        startsAt: now,
+        expiresAt: null,
+        liftedAt: null,
+        liftedReason: null,
+        liftedBy: null,
+        createdBy: 'admin-1',
+        createdAt: now,
+        updatedAt: now,
+        ...overrides,
+    };
+}
+const USER = 'user-1';
+const ADMIN = 'admin-1';
+const future = () => new Date(Date.now() + 200 * 24 * 3600_000);
+describe('RgService.setPlayerLimit', () => {
+    it('emits rg.limit.set with the prior amount and returns the DTO', async () => {
+        const row = {
+            id: 'lim-1',
+            userId: USER,
+            type: 'deposit',
+            amount: 100,
+            period: 'daily',
+            createdAt: new Date(),
+        };
+        const { svc, events } = newSvc(routingDb({ userLimit: [[{ amount: 50 }]], returning: [row] }));
+        const dto = await svc.setPlayerLimit(USER, { userId: USER, type: 'deposit', amount: 100, period: 'daily' }, ADMIN);
+        expect(dto.id).toBe('lim-1');
+        expect(events.emit).toHaveBeenCalledWith('rg.limit.set', expect.objectContaining({ userId: USER, actorId: ADMIN, amount: 100, previousAmount: 50 }));
+    });
+});
+describe('RgService.activateCoolingOff', () => {
+    it('blocks login until the expiry and emits the activation event', async () => {
+        const row = exclusionRow({ kind: 'cooling_off', expiresAt: future() });
+        const db = routingDb({
+            rgExclusion: [[], [{ kind: 'cooling_off', expiresAt: future() }]],
+            returning: [row],
+        });
+        const { svc, events, enforcement } = newSvc(db);
+        await svc.activateCoolingOff(USER, { userId: USER, durationHours: 24, reason: 'break' }, ADMIN);
+        expect(enforcement.block).toHaveBeenCalledWith(USER, { until: expect.any(Date) });
+        expect(enforcement.unblock).not.toHaveBeenCalled();
+        expect(events.emit).toHaveBeenCalledWith('rg.cooling_off.activated', expect.objectContaining({ userId: USER }));
+    });
+    it('rejects when an active cooling-off already exists', async () => {
+        const { svc, enforcement } = newSvc(routingDb({ rgExclusion: [[{ id: 'x' }]] }));
+        await expect(svc.activateCoolingOff(USER, { userId: USER, durationHours: 24, reason: 'break' }, ADMIN)).rejects.toBeInstanceOf(ActiveExclusionError);
+        expect(enforcement.block).not.toHaveBeenCalled();
+    });
+    // GROUP 1: a cooling-off on a self-excluded player must NOT downgrade the hard block.
+    it('keeps an indefinite block when a self-exclusion is still active', async () => {
+        const row = exclusionRow({ kind: 'cooling_off', expiresAt: future() });
+        const db = routingDb({
+            rgExclusion: [
+                [],
+                [
+                    { kind: 'self_exclusion', expiresAt: null },
+                    { kind: 'cooling_off', expiresAt: future() },
+                ],
+            ],
+            returning: [row],
+        });
+        const { svc, enforcement } = newSvc(db);
+        await svc.activateCoolingOff(USER, { userId: USER, durationHours: 24, reason: 'break' }, ADMIN);
+        expect(enforcement.block).toHaveBeenCalledWith(USER, { until: null });
+    });
+});
+describe('RgService.activateSelfExclusion', () => {
+    it('blocks indefinitely (until null) for a permanent exclusion', async () => {
+        const row = exclusionRow({ permanent: true, expiresAt: null });
+        const db = routingDb({
+            rgExclusion: [[], [{ kind: 'self_exclusion', expiresAt: null }]],
+            returning: [row],
+        });
+        const { svc, events, enforcement } = newSvc(db);
+        await svc.activateSelfExclusion(USER, { userId: USER, permanent: true, reason: 'stop', confirm: true }, ADMIN);
+        expect(enforcement.block).toHaveBeenCalledWith(USER, { until: null });
+        expect(events.emit).toHaveBeenCalledWith('rg.self_exclusion.activated', expect.objectContaining({ permanent: true, expiresAt: null }));
+    });
+});
+describe('RgService.liftSelfExclusion', () => {
+    it('rejects lifting a permanent self-exclusion', async () => {
+        const db = routingDb({ rgExclusion: [[exclusionRow({ permanent: true, expiresAt: null })]] });
+        const { svc, enforcement } = newSvc(db);
+        await expect(svc.liftSelfExclusion(USER, { userId: USER, reason: 'ok', confirm: true }, ADMIN)).rejects.toBeInstanceOf(PermanentExclusionLiftError);
+        expect(enforcement.unblock).not.toHaveBeenCalled();
+    });
+    it('rejects lifting before the minimum period elapses', async () => {
+        const db = routingDb({
+            rgExclusion: [[exclusionRow({ permanent: false, expiresAt: future() })]],
+        });
+        const { svc } = newSvc(db);
+        await expect(svc.liftSelfExclusion(USER, { userId: USER, reason: 'ok', confirm: true }, ADMIN)).rejects.toBeInstanceOf(ExclusionPeriodNotElapsedError);
+    });
+    it('rejects when there is no active self-exclusion', async () => {
+        const { svc } = newSvc(routingDb({ rgExclusion: [[]] }));
+        await expect(svc.liftSelfExclusion(USER, { userId: USER, reason: 'ok', confirm: true }, ADMIN)).rejects.toBeInstanceOf(ExclusionNotFoundError);
+    });
+    it('lifts after the minimum period and unblocks when nothing else is active', async () => {
+        const past = new Date(Date.now() - 1000);
+        const existing = exclusionRow({ permanent: false, expiresAt: past });
+        const lifted = { ...existing, status: 'lifted' };
+        const db = routingDb({ rgExclusion: [[existing], []], returning: [lifted] });
+        const { svc, events, enforcement } = newSvc(db);
+        await svc.liftSelfExclusion(USER, { userId: USER, reason: 'ok', confirm: true }, ADMIN);
+        expect(enforcement.unblock).toHaveBeenCalledWith(USER);
+        expect(events.emit).toHaveBeenCalledWith('rg.self_exclusion.lifted', expect.objectContaining({ userId: USER }));
+    });
+    // GROUP 1: lifting the self-exclusion must not clear an unrelated active cooling-off.
+    it('recomputes to the remaining cooling-off block instead of unblocking', async () => {
+        const past = new Date(Date.now() - 1000);
+        const existing = exclusionRow({ permanent: false, expiresAt: past });
+        const db = routingDb({
+            rgExclusion: [[existing], [{ kind: 'cooling_off', expiresAt: future() }]],
+            returning: [{ ...existing, status: 'lifted' }],
+        });
+        const { svc, enforcement } = newSvc(db);
+        await svc.liftSelfExclusion(USER, { userId: USER, reason: 'ok', confirm: true }, ADMIN);
+        expect(enforcement.block).toHaveBeenCalledWith(USER, { until: expect.any(Date) });
+        expect(enforcement.unblock).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=rg.service.test.js.map

package/dist/compliance/__tests__/rg.service.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.service.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/rg.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAGlD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAElC,qFAAqF;AACrF,kFAAkF;AAClF,qFAAqF;AACrF,SAAS,SAAS,CAAC,GAIlB;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAqB;QACzC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;KACxC,CAAC,CAAC;IACH,SAAS,WAAW;QAClB,IAAI,KAAc,CAAC;QACnB,MAAM,CAAC,GAA4B;YACjC,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE;gBACnB,KAAK,GAAG,CAAC,CAAC;gBACV,OAAO,CAAC,CAAC;YACX,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAClB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,CAAC,OAAgC,EAAE,EAAE;gBACzC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,EAAE,GAA4B;QAClC,WAAW,EAAE,CAAC,EAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC3B,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,CAAC,GAA4B;gBACjC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACf,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3B,SAAS;gBACT,IAAI,EAAE,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACnD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,CAAC,GAA4B;gBACjC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;gBACZ,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACd,SAAS;gBACT,IAAI,EAAE,CAAC,CAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACnD,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC3C,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,EAAkB,EAAE,WAAW,GAAG,eAAe,EAAE,EAAE,MAAM,GAAG,UAAU,EAAE;IACxF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,OAAO,EAAE,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,gBAAgB,EAAE,WAAW;QAC7B,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,YAAqC,EAAE;IAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,kBAAkB;QAC1B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;QACd,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG,QAAQ,CAAC;AACtB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;AAEhE,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,OAAO;YACX,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,cAAc,CAClC,IAAI,EACJ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAC/D,KAAK,CACN,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,cAAc,EACd,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAC3F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjE,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAChG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,0BAA0B,EAC1B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,CACV,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAC1F,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,sFAAsF;IACtF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,WAAW,EAAE;gBACX,EAAE;gBACF;oBACE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE;oBAC3C,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;iBAC7C;aACF;YACD,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAChG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,SAAS,EAAE,CAAC,GAAG,CAAC;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,qBAAqB,CAC7B,IAAI,EACJ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAChE,KAAK,CACN,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,6BAA6B,EAC7B,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAC9D,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9F,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,CACV,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAClF,CAAC,OAAO,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,CACV,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAClF,CAAC,OAAO,CAAC,cAAc,CAAC,8BAA8B,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,MAAM,CACV,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAClF,CAAC,OAAO,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,0BAA0B,EAC1B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC1C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,sFAAsF;IACtF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,SAAS,CAAC;YACnB,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACzE,SAAS,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QACxF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/adapters/hmac-kyc-webhook-verifier.d.ts

@@ -0,0 +1,13 @@
+import type { KycWebhookVerifier } from '@openora/core/contracts';
+/**
+ * Default KYC-webhook verifier: recomputes an HMAC-SHA256 of the raw request body
+ * keyed by the configured secret and constant-time compares the hex digest against
+ * the signature header (a leading `sha256=` is tolerated). Fails closed when the
+ * secret is unset, the signature is absent, or the body was not captured.
+ */
+export declare class HmacKycWebhookVerifier implements KycWebhookVerifier {
+    private readonly secret;
+    constructor(secret: string | undefined);
+    verify(rawBody: string, signature: string | null): boolean;
+}
+//# sourceMappingURL=hmac-kyc-webhook-verifier.d.ts.map

package/dist/compliance/adapters/hmac-kyc-webhook-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac-kyc-webhook-verifier.d.ts","sourceRoot":"","sources":["../../../src/compliance/adapters/hmac-kyc-webhook-verifier.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,kBAAkB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM,GAAG,SAAS;IAEvD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO;CAe3D"}