@openora/core 0.4.0

package/dist/compliance/service/kyc.service.js

@@ -0,0 +1,171 @@
+import { and, desc, eq, sql } from 'drizzle-orm';
+import { kycVerification } from '../schema/index.js';
+// Cross-domain reads via public /schema subpaths (ADR-0020); the wallet ledger is the
+// source of truth for lifetime deposits (player.totalDeposits is not maintained).
+import { player } from '@openora/core/pam/schema/profile';
+import { wallet, walletTransaction } from '@openora/core/wallet/schema';
+import { CumulativeDepositReKycTrigger } from './re-kyc-trigger.js';
+const DEFAULT_PROVIDER = 'mock';
+function mapVendorStatus(vendor) {
+    switch (vendor) {
+        case 'approved':
+            return 'verified';
+        case 'rejected':
+            return 'rejected';
+        case 'pending':
+            return 'pending';
+        case 'not_started':
+            return 'not_started';
+    }
+}
+function isDecided(status) {
+    return status === 'verified' || status === 'rejected';
+}
+function toDto(row) {
+    return {
+        id: row.id,
+        userId: row.userId,
+        provider: row.provider,
+        referenceId: row.referenceId,
+        status: row.status,
+        documentTypes: row.documentTypes,
+        decisionReason: row.decisionReason,
+        triggeredBy: row.triggeredBy,
+        submittedAt: row.submittedAt.toISOString(),
+        decidedAt: row.decidedAt ? row.decidedAt.toISOString() : null,
+        createdAt: row.createdAt.toISOString(),
+        updatedAt: row.updatedAt.toISOString(),
+    };
+}
+export class KycVerificationService {
+    drizzle;
+    events;
+    kycAdapter;
+    statusWriter;
+    platformConfig;
+    reKycTrigger;
+    constructor(deps) {
+        this.drizzle = deps.drizzle;
+        this.events = deps.events;
+        this.kycAdapter = deps.kycAdapter;
+        this.statusWriter = deps.statusWriter;
+        this.platformConfig = deps.platformConfig;
+        this.reKycTrigger = deps.reKycTrigger ?? new CumulativeDepositReKycTrigger();
+    }
+    get provider() {
+        return this.platformConfig?.kyc?.provider ?? DEFAULT_PROVIDER;
+    }
+    async submit(userId, input) {
+        const result = await this.kycAdapter.submit(userId, input.documents.map((d) => ({ type: d.type, frontUrl: d.frontUrl, backUrl: d.backUrl })));
+        const status = mapVendorStatus(result.status);
+        const decided = isDecided(status);
+        const [row] = await this.drizzle.db
+            .insert(kycVerification)
+            .values({
+            userId,
+            provider: this.provider,
+            referenceId: result.referenceId,
+            status,
+            documentTypes: input.documents.map((d) => d.type),
+            triggeredBy: 'submission',
+            decidedAt: decided ? new Date() : null,
+        })
+            .returning();
+        this.events.emit('compliance.kyc.submitted', {
+            userId,
+            referenceId: result.referenceId,
+            provider: this.provider,
+        });
+        await this.statusWriter.setStatus(userId, status, { actorId: null, source: 'vendor' });
+        return toDto(row);
+    }
+    /**
+     * Idempotent vendor-decision apply (polling + webhook). No-op when the latest record
+     * already holds the mapped status.
+     */
+    async reconcile(referenceId, vendorStatus, reason) {
+        const [existing] = await this.drizzle.db
+            .select()
+            .from(kycVerification)
+            .where(eq(kycVerification.referenceId, referenceId))
+            .orderBy(desc(kycVerification.createdAt))
+            .limit(1);
+        if (!existing)
+            return null;
+        const status = mapVendorStatus(vendorStatus);
+        if (existing.status === status && existing.decidedAt) {
+            return toDto(existing);
+        }
+        const [row] = await this.drizzle.db
+            .update(kycVerification)
+            .set({ status, decisionReason: reason ?? null, decidedAt: new Date() })
+            .where(eq(kycVerification.id, existing.id))
+            .returning();
+        await this.statusWriter.setStatus(existing.userId, status, {
+            actorId: null,
+            source: 'webhook',
+            reason,
+        });
+        return toDto(row);
+    }
+    async getForPlayer(userId) {
+        const rows = await this.drizzle.db
+            .select()
+            .from(kycVerification)
+            .where(eq(kycVerification.userId, userId))
+            .orderBy(desc(kycVerification.createdAt));
+        return { current: rows[0] ? toDto(rows[0]) : null, history: rows.map(toDto) };
+    }
+    /**
+     * Deposit-event hook: flips a currently-verified player to `resubmission_requested`
+     * once cumulative deposits cross a fresh per-currency threshold band. Idempotent twice
+     * over: skips unless presently `verified`, and the watermark stops a re-verified
+     * high-roller re-firing on every later deposit.
+     */
+    async handleDeposit(userId) {
+        const [current] = await this.drizzle.db
+            .select({ currency: player.currency, kycStatus: player.kycStatus })
+            .from(player)
+            .where(eq(player.userId, userId));
+        if (!current || current.kycStatus !== 'verified')
+            return;
+        const [deposited] = await this.drizzle.db
+            .select({ total: sql `coalesce(sum(${walletTransaction.amount}), 0)` })
+            .from(walletTransaction)
+            .innerJoin(wallet, eq(wallet.id, walletTransaction.walletId))
+            .where(and(eq(wallet.userId, userId), eq(walletTransaction.type, 'deposit'), eq(walletTransaction.status, 'completed'), eq(walletTransaction.currency, current.currency)));
+        const [lastFire] = await this.drizzle.db
+            .select({ triggerDeposits: kycVerification.triggerDeposits })
+            .from(kycVerification)
+            .where(and(eq(kycVerification.userId, userId), eq(kycVerification.triggeredBy, 'reverify_threshold')))
+            .orderBy(desc(kycVerification.createdAt))
+            .limit(1);
+        const totalDeposits = Number(deposited?.total ?? 0);
+        const snapshot = {
+            totalDeposits,
+            currency: current.currency,
+            lastTriggeredDeposits: Number(lastFire?.triggerDeposits ?? 0),
+        };
+        const thresholds = this.platformConfig?.kyc?.reverifyThresholds;
+        if (!this.reKycTrigger.requiresReverify(snapshot, thresholds))
+            return;
+        const reason = `Cumulative deposits ${totalDeposits} ${snapshot.currency} crossed the re-KYC threshold`;
+        await this.drizzle.db.insert(kycVerification).values({
+            userId,
+            provider: this.provider,
+            referenceId: `reverify-${userId}-${Date.now()}`,
+            status: 'resubmission_requested',
+            documentTypes: [],
+            triggeredBy: 'reverify_threshold',
+            triggerDeposits: String(totalDeposits),
+            decisionReason: reason,
+        });
+        await this.statusWriter.setStatus(userId, 'resubmission_requested', {
+            actorId: null,
+            source: 'reverify',
+            reason,
+        });
+        this.events.emit('compliance.kyc.reverify_required', { userId, reason });
+    }
+}
+//# sourceMappingURL=kyc.service.js.map

package/dist/compliance/service/kyc.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kyc.service.js","sourceRoot":"","sources":["../../../src/compliance/service/kyc.service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,eAAe,EAAwB,MAAM,oBAAoB,CAAC;AAC3E,sFAAsF;AACtF,kFAAkF;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAMxE,OAAO,EAAE,6BAA6B,EAAqB,MAAM,qBAAqB,CAAC;AAEvF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,SAAS,eAAe,CAAC,MAAuB;IAC9C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,CAAC;AACxD,CAAC;AAED,SAAS,KAAK,CAAC,GAAoB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE;QAC1C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAC7D,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAgBD,MAAM,OAAO,sBAAsB;IAChB,OAAO,CAAiB;IACxB,MAAM,CAAW;IACjB,UAAU,CAAa;IACvB,YAAY,CAAkB;IAC9B,cAAc,CAAkB;IAChC,YAAY,CAAe;IAE5C,YAAY,IAAyB;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,6BAA6B,EAAE,CAAC;IAC/E,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAqB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CACzC,MAAM,EACN,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CACzF,CAAC;QACF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,eAAe,CAAC;aACvB,MAAM,CAAC;YACN,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM;YACN,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,WAAW,EAAE,YAAY;YACzB,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SACvC,CAAC;aACD,SAAS,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YAC3C,MAAM;YACN,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,OAAO,KAAK,CAAC,GAAI,CAAC,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,WAAmB,EAAE,YAA6B,EAAE,MAAe;QACjF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACrC,MAAM,EAAE;aACR,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;aACnD,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;aACxC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,eAAe,CAAC;aACvB,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACtE,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;aAC1C,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE;YACzD,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,MAAM;SACP,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAI,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,EAAE;aACR,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACzC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc;QAChC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACpC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aAClE,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU;YAAE,OAAO;QAEzD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACtC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,iBAAiB,CAAC,MAAM,OAAO,EAAE,CAAC;aAC7E,IAAI,CAAC,iBAAiB,CAAC;aACvB,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;aAC5D,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACzB,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,EACrC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CACjD,CACF,CAAC;QAEJ,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACrC,MAAM,CAAC,EAAE,eAAe,EAAE,eAAe,CAAC,eAAe,EAAE,CAAC;aAC5D,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,oBAAoB,CAAC,CACtD,CACF;aACA,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;aACxC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG;YACf,aAAa;YACb,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,qBAAqB,EAAE,MAAM,CAAC,QAAQ,EAAE,eAAe,IAAI,CAAC,CAAC;SAC9D,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,kBAAkB,CAAC;QAChE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC;YAAE,OAAO;QAEtE,MAAM,MAAM,GAAG,uBAAuB,aAAa,IAAI,QAAQ,CAAC,QAAQ,+BAA+B,CAAC;QACxG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC;YACnD,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,YAAY,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;YAC/C,MAAM,EAAE,wBAAwB;YAChC,aAAa,EAAE,EAAE;YACjB,WAAW,EAAE,oBAAoB;YACjC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC;YACtC,cAAc,EAAE,MAAM;SACvB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,EAAE,wBAAwB,EAAE;YAClE,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,UAAU;YAClB,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}

package/dist/compliance/service/re-kyc-trigger.d.ts

@@ -0,0 +1,21 @@
+import * as z from 'zod';
+declare const ReKycSnapshotSchema: z.ZodObject<{
+    currency: z.ZodString;
+    totalDeposits: z.ZodNumber;
+    lastTriggeredDeposits: z.ZodNumber;
+}, z.core.$strip>;
+export type ReKycPlayerSnapshot = z.infer<typeof ReKycSnapshotSchema>;
+/**
+ * Replaceable strategy deciding when a verified player must re-verify. The default fires
+ * once per per-currency threshold band, high-water-marked on the last fire so a
+ * re-verified high-roller is not re-triggered on every later deposit. Swapping to a
+ * rolling-window or wager metric is a binding change, not a service rewrite.
+ */
+export type ReKycTrigger = {
+    requiresReverify(player: ReKycPlayerSnapshot, thresholds: Record<string, number> | undefined): boolean;
+};
+export declare class CumulativeDepositReKycTrigger implements ReKycTrigger {
+    requiresReverify(player: ReKycPlayerSnapshot, thresholds: Record<string, number> | undefined): boolean;
+}
+export {};
+//# sourceMappingURL=re-kyc-trigger.d.ts.map

package/dist/compliance/service/re-kyc-trigger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"re-kyc-trigger.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/re-kyc-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAGzB,QAAA,MAAM,mBAAmB;;;;iBAGuB,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,gBAAgB,CACd,MAAM,EAAE,mBAAmB,EAC3B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC7C,OAAO,CAAC;CACZ,CAAC;AAEF,qBAAa,6BAA8B,YAAW,YAAY;IAChE,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS;CAQ7F"}

package/dist/compliance/service/re-kyc-trigger.js

@@ -0,0 +1,16 @@
+import * as z from 'zod';
+import { PlayerSchema } from '@openora/core/contracts';
+const ReKycSnapshotSchema = PlayerSchema.pick({
+    currency: true,
+    totalDeposits: true,
+}).extend({ lastTriggeredDeposits: z.number() });
+export class CumulativeDepositReKycTrigger {
+    requiresReverify(player, thresholds) {
+        const threshold = thresholds?.[player.currency];
+        if (threshold === undefined || threshold <= 0)
+            return false;
+        return (Math.floor(player.totalDeposits / threshold) >
+            Math.floor(player.lastTriggeredDeposits / threshold));
+    }
+}
+//# sourceMappingURL=re-kyc-trigger.js.map

package/dist/compliance/service/re-kyc-trigger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"re-kyc-trigger.js","sourceRoot":"","sources":["../../../src/compliance/service/re-kyc-trigger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC;IAC5C,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAiBjD,MAAM,OAAO,6BAA6B;IACxC,gBAAgB,CAAC,MAA2B,EAAE,UAA8C;QAC1F,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,GAAG,SAAS,CAAC,CACrD,CAAC;IACJ,CAAC;CACF"}

package/dist/compliance/service/rg-eval.d.ts

@@ -0,0 +1,9 @@
+import type { LimitPeriod } from '@openora/core/contracts';
+export declare function periodWindow(period: LimitPeriod, now: Date): {
+    from: Date;
+    to: Date;
+};
+export declare function thresholdPct(actual: number, limit: number): number;
+export declare const RG_FLAG_THRESHOLD_PCT = 80;
+export declare function isAtThreshold(actual: number, limit: number): boolean;
+//# sourceMappingURL=rg-eval.d.ts.map

package/dist/compliance/service/rg-eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-eval.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/rg-eval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAU3D,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,IAAI,CAAA;CAAE,CAGrF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlE;AAGD,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAExC,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpE"}

package/dist/compliance/service/rg-eval.js

@@ -0,0 +1,23 @@
+// Pure, DB-free RG evaluation helpers. Rolling windows (last N) rather than calendar
+// buckets: a defensible, timezone-free reading of "daily/weekly/monthly" spend.
+const PERIOD_MS = {
+    daily: 24 * 60 * 60 * 1000,
+    weekly: 7 * 24 * 60 * 60 * 1000,
+    monthly: 30 * 24 * 60 * 60 * 1000,
+};
+export function periodWindow(period, now) {
+    if (period === 'session')
+        return { from: now, to: now };
+    return { from: new Date(now.getTime() - PERIOD_MS[period]), to: now };
+}
+export function thresholdPct(actual, limit) {
+    if (limit <= 0)
+        return 0;
+    return (actual / limit) * 100;
+}
+// The 80% monitoring band per the Confluence spec.
+export const RG_FLAG_THRESHOLD_PCT = 80;
+export function isAtThreshold(actual, limit) {
+    return thresholdPct(actual, limit) >= RG_FLAG_THRESHOLD_PCT;
+}
+//# sourceMappingURL=rg-eval.js.map

package/dist/compliance/service/rg-eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-eval.js","sourceRoot":"","sources":["../../../src/compliance/service/rg-eval.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,gFAAgF;AAChF,MAAM,SAAS,GAAoD;IACjE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC1B,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IAC/B,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CAClC,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAmB,EAAE,GAAS;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IACxD,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC;AAChC,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAExC,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,KAAa;IACzD,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,qBAAqB,CAAC;AAC9D,CAAC"}

package/dist/compliance/service/rg-monitoring.service.d.ts

@@ -0,0 +1,50 @@
+import { DrizzleService } from '@openora/core/server';
+import type { AdminUserDirectory } from '@openora/core/contracts';
+import type { ListRgFlagsInput } from '../contract/index.js';
+export type RgEvalTrigger = 'wallet.deposit.completed' | 'gaming.round.ended' | 'rg.exclusion.login_blocked';
+export type RgMonitoringDeps = {
+    drizzle: DrizzleService;
+    directory?: AdminUserDirectory | null;
+};
+export declare class RgMonitoringService {
+    private readonly drizzle;
+    private readonly directory;
+    constructor(deps: RgMonitoringDeps);
+    evaluateUser(userId: string, trigger: RgEvalTrigger): Promise<void>;
+    sweep(): Promise<void>;
+    listFlags(filters: ListRgFlagsInput): Promise<{
+        items: {
+            id: string;
+            userId: string;
+            username: string | null;
+            email: string | null;
+            flagType: "limit_threshold" | "session_time" | "self_excluded_login";
+            limitType: string | null;
+            detail: {
+                actual: number;
+                limit: number;
+                period: "session" | "daily" | "weekly" | "monthly";
+                pct: number;
+            } | {
+                sessionMinutes: number;
+                limitMinutes: number;
+                pct: number;
+            } | {
+                trigger: string;
+                kind: "cooling_off" | "self_exclusion" | null;
+            };
+            status: "active" | "cleared";
+            flaggedAt: string;
+            clearedAt: string | null;
+        }[];
+        total: number;
+        page: number;
+        limit: number;
+    }>;
+    private spendFor;
+    private depositsSum;
+    private betsSum;
+    private raiseFlag;
+    private clearFlag;
+}
+//# sourceMappingURL=rg-monitoring.service.d.ts.map

package/dist/compliance/service/rg-monitoring.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-monitoring.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/rg-monitoring.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AAEpE,OAAO,KAAK,EAAE,kBAAkB,EAA0B,MAAM,yBAAyB,CAAC;AAK1F,OAAO,KAAK,EAAkB,gBAAgB,EAAgB,MAAM,sBAAsB,CAAC;AAI3F,MAAM,MAAM,aAAa,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,4BAA4B,CAAC;AAIjC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;gBAE1C,IAAI,EAAE,gBAAgB;IAK5B,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BtB,SAAS,CAAC,OAAO,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAgD3B,QAAQ;YAKR,WAAW;YAiBX,OAAO;YAcP,SAAS;YA0BT,SAAS;CAiBxB"}

package/dist/compliance/service/rg-monitoring.service.js

@@ -0,0 +1,168 @@
+import { pageToOffset } from '@openora/core/server';
+import { and, eq, or, gt, gte, lte, isNull, desc, sql } from 'drizzle-orm';
+import { userLimit, rgFlag, rgExclusion } from '../schema/index.js';
+import { wallet, walletTransaction } from '@openora/core/wallet/schema';
+import { gameRound } from '@openora/core/casino/schema/gaming';
+import { session } from '@openora/core/pam/schema/identity';
+import { periodWindow, isAtThreshold, thresholdPct } from './rg-eval.js';
+const SESSION_LIMIT = { type: 'session', period: 'session' };
+export class RgMonitoringService {
+    drizzle;
+    directory;
+    constructor(deps) {
+        this.drizzle = deps.drizzle;
+        this.directory = deps.directory ?? null;
+    }
+    async evaluateUser(userId, trigger) {
+        const now = new Date();
+        if (trigger === 'rg.exclusion.login_blocked') {
+            // Label the flag with the exclusion kind so dashboards distinguish a cooling-off
+            // login attempt from a self-exclusion one.
+            const active = await this.drizzle.db
+                .select({ kind: rgExclusion.kind })
+                .from(rgExclusion)
+                .where(and(eq(rgExclusion.userId, userId), eq(rgExclusion.status, 'active'), or(eq(rgExclusion.kind, 'self_exclusion'), gt(rgExclusion.expiresAt, now))));
+            const kind = active.some((e) => e.kind === 'self_exclusion')
+                ? 'self_exclusion'
+                : (active[0]?.kind ?? null);
+            await this.raiseFlag(userId, 'self_excluded_login', null, { trigger, kind });
+            return;
+        }
+        const limits = await this.drizzle.db
+            .select()
+            .from(userLimit)
+            .where(eq(userLimit.userId, userId));
+        for (const limit of limits) {
+            if (limit.period === 'session' || limit.type === 'session')
+                continue;
+            const { from } = periodWindow(limit.period, now);
+            const actual = await this.spendFor(userId, limit.type, from, now);
+            if (isAtThreshold(actual, limit.amount)) {
+                await this.raiseFlag(userId, 'limit_threshold', limit.type, {
+                    actual,
+                    limit: limit.amount,
+                    period: limit.period,
+                    pct: thresholdPct(actual, limit.amount),
+                });
+            }
+            else {
+                await this.clearFlag(userId, 'limit_threshold', limit.type);
+            }
+        }
+    }
+    // Recurring session-time sweep: raises session_time flags for players whose current
+    // active session is at >= 80% of their configured session-minute limit, and clears
+    // flags for players who have since ended or rolled over their session.
+    async sweep() {
+        const now = new Date();
+        const sessionLimits = await this.drizzle.db
+            .select()
+            .from(userLimit)
+            .where(and(eq(userLimit.type, SESSION_LIMIT.type), eq(userLimit.period, SESSION_LIMIT.period)));
+        for (const limit of sessionLimits) {
+            const [longest] = await this.drizzle.db
+                .select({ createdAt: session.createdAt })
+                .from(session)
+                .where(and(eq(session.userId, limit.userId), gt(session.expiresAt, now)))
+                .orderBy(session.createdAt)
+                .limit(1);
+            const elapsedMinutes = longest ? (now.getTime() - longest.createdAt.getTime()) / 60000 : 0;
+            if (longest && isAtThreshold(elapsedMinutes, limit.amount)) {
+                await this.raiseFlag(limit.userId, 'session_time', null, {
+                    sessionMinutes: elapsedMinutes,
+                    limitMinutes: limit.amount,
+                    pct: thresholdPct(elapsedMinutes, limit.amount),
+                });
+            }
+            else {
+                await this.clearFlag(limit.userId, 'session_time', null);
+            }
+        }
+    }
+    async listFlags(filters) {
+        const db = this.drizzle.db;
+        const { page, limit, flagType, limitType, status, fromDate, toDate } = filters;
+        const offset = pageToOffset(page, limit);
+        const conditions = [];
+        if (flagType)
+            conditions.push(eq(rgFlag.flagType, flagType));
+        if (limitType)
+            conditions.push(eq(rgFlag.limitType, limitType));
+        if (status)
+            conditions.push(eq(rgFlag.status, status));
+        if (fromDate)
+            conditions.push(gte(rgFlag.flaggedAt, new Date(fromDate)));
+        if (toDate)
+            conditions.push(lte(rgFlag.flaggedAt, new Date(toDate)));
+        const where = conditions.length > 0 ? and(...conditions) : undefined;
+        const [rows, countResult] = await Promise.all([
+            db
+                .select()
+                .from(rgFlag)
+                .where(where)
+                .orderBy(desc(rgFlag.flaggedAt))
+                .limit(limit)
+                .offset(offset),
+            db
+                .select({ count: sql `count(*)::int` })
+                .from(rgFlag)
+                .where(where),
+        ]);
+        const summaries = this.directory
+            ? await this.directory.lookupPlayers(rows.map((r) => r.userId))
+            : [];
+        const byId = new Map(summaries.map((s) => [s.userId, s]));
+        const items = rows.map((r) => ({
+            id: r.id,
+            userId: r.userId,
+            username: byId.get(r.userId)?.username ?? null,
+            email: byId.get(r.userId)?.email ?? null,
+            flagType: r.flagType,
+            limitType: r.limitType,
+            detail: r.detail,
+            status: r.status,
+            flaggedAt: r.flaggedAt.toISOString(),
+            clearedAt: r.clearedAt ? r.clearedAt.toISOString() : null,
+        }));
+        return { items, total: countResult[0]?.count ?? 0, page, limit };
+    }
+    async spendFor(userId, type, from, to) {
+        if (type === 'deposit')
+            return this.depositsSum(userId, from, to);
+        return this.betsSum(userId, from, to);
+    }
+    async depositsSum(userId, from, to) {
+        const [row] = await this.drizzle.db
+            .select({ total: sql `coalesce(sum(${walletTransaction.amount}), 0)` })
+            .from(walletTransaction)
+            .innerJoin(wallet, eq(wallet.id, walletTransaction.walletId))
+            .where(and(eq(wallet.userId, userId), eq(walletTransaction.type, 'deposit'), eq(walletTransaction.status, 'completed'), gte(walletTransaction.createdAt, from), lte(walletTransaction.createdAt, to)));
+        return Number(row?.total ?? 0);
+    }
+    async betsSum(userId, from, to) {
+        const [rounds] = await this.drizzle.db
+            .select({ total: sql `coalesce(sum(${gameRound.betAmount}), 0)` })
+            .from(gameRound)
+            .where(and(eq(gameRound.userId, userId), gte(gameRound.startedAt, from), lte(gameRound.startedAt, to)));
+        return Number(rounds?.total ?? 0);
+    }
+    async raiseFlag(userId, flagType, limitType, detail) {
+        const [existing] = await this.drizzle.db
+            .select({ id: rgFlag.id })
+            .from(rgFlag)
+            .where(and(eq(rgFlag.userId, userId), eq(rgFlag.flagType, flagType), eq(rgFlag.status, 'active'), limitType === null ? isNull(rgFlag.limitType) : eq(rgFlag.limitType, limitType)))
+            .limit(1);
+        if (existing) {
+            await this.drizzle.db.update(rgFlag).set({ detail }).where(eq(rgFlag.id, existing.id));
+            return;
+        }
+        await this.drizzle.db.insert(rgFlag).values({ userId, flagType, limitType, detail });
+    }
+    async clearFlag(userId, flagType, limitType) {
+        await this.drizzle.db
+            .update(rgFlag)
+            .set({ status: 'cleared', clearedAt: new Date() })
+            .where(and(eq(rgFlag.userId, userId), eq(rgFlag.flagType, flagType), eq(rgFlag.status, 'active'), limitType === null ? isNull(rgFlag.limitType) : eq(rgFlag.limitType, limitType)));
+    }
+}
+//# sourceMappingURL=rg-monitoring.service.js.map

package/dist/compliance/service/rg-monitoring.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-monitoring.service.js","sourceRoot":"","sources":["../../../src/compliance/service/rg-monitoring.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAErF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQzE,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;AAOtE,MAAM,OAAO,mBAAmB;IACb,OAAO,CAAiB;IACxB,SAAS,CAA4B;IAEtD,YAAY,IAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,OAAsB;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,4BAA4B,EAAE,CAAC;YAC7C,iFAAiF;YACjF,2CAA2C;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBACjC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;iBAClC,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,EAChC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAC3E,CACF,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC;gBAC1D,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACjC,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACrE,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAqB,EAAE,GAAG,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,IAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/E,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,EAAE;oBAC1D,MAAM;oBACN,KAAK,EAAE,KAAK,CAAC,MAAM;oBACnB,MAAM,EAAE,KAAK,CAAC,MAAqB;oBACnC,GAAG,EAAE,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,mFAAmF;IACnF,uEAAuE;IACvE,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACxC,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CACxF,CAAC;QAEJ,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBACpC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;iBACxC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;iBACxE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;iBAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;YAEZ,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3F,IAAI,OAAO,IAAI,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE;oBACvD,cAAc,EAAE,cAAc;oBAC9B,YAAY,EAAE,KAAK,CAAC,MAAM;oBAC1B,GAAG,EAAE,YAAY,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAyB;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAU,EAAE,CAAC;QAC7B,IAAI,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,SAAS;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAChE,IAAI,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACvD,IAAI,QAAQ;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM;YAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAErE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,EAAE;iBACC,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;iBAC/B,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,MAAM,CAAC;YACjB,EAAE;iBACC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,eAAe,EAAE,CAAC;iBAC7C,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,KAAK,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS;YAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAqB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;YAC9C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI;YACxC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAC1D,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAe,EAAE,IAAU,EAAE,EAAQ;QAC1E,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,IAAU,EAAE,EAAQ;QAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,iBAAiB,CAAC,MAAM,OAAO,EAAE,CAAC;aAC7E,IAAI,CAAC,iBAAiB,CAAC;aACvB,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;aAC5D,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACzB,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,EACrC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,EACzC,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,EACtC,GAAG,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC,CACrC,CACF,CAAC;QACJ,OAAO,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,IAAU,EAAE,EAAQ;QACxD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACnC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,gBAAgB,SAAS,CAAC,SAAS,OAAO,EAAE,CAAC;aACxE,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,EAC9B,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAC7B,CACF,CAAC;QACJ,OAAO,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,MAAc,EACd,QAAkD,EAClD,SAAwB,EACxB,MAAoB;QAEpB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACrC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACzB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC7B,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAChF,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,MAAc,EACd,QAAkD,EAClD,SAAwB;QAExB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACjD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACzB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC7B,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAChF,CACF,CAAC;IACN,CAAC;CACF"}

package/dist/compliance/service/rg.service.d.ts

@@ -0,0 +1,33 @@
+import { DrizzleService, type EventBus } from '@openora/core/server';
+import type { LoginEnforcementPort, SendEmailPort, AdminUserDirectory } from '@openora/core/contracts';
+import type { Limit, RgExclusion, SetPlayerLimitInput, ActivateCoolingOffInput, ActivateSelfExclusionInput, LiftSelfExclusionInput, RgSection } from '../contract/index.js';
+export declare const ExclusionNotFoundError: new (id: string) => Error;
+export declare const ActiveExclusionError: new () => Error;
+export declare const PermanentExclusionLiftError: new () => Error;
+export declare const ExclusionPeriodNotElapsedError: new () => Error;
+export type RgServiceDeps = {
+    drizzle: DrizzleService;
+    events: EventBus;
+    loginEnforcement: LoginEnforcementPort;
+    email?: SendEmailPort | null;
+    directory?: AdminUserDirectory | null;
+};
+export declare class RgService {
+    private readonly drizzle;
+    private readonly events;
+    private readonly loginEnforcement;
+    private readonly email;
+    private readonly directory;
+    constructor(deps: RgServiceDeps);
+    setPlayerLimit(userId: string, input: SetPlayerLimitInput, actorId: string): Promise<Limit>;
+    activateCoolingOff(userId: string, input: ActivateCoolingOffInput, actorId: string): Promise<RgExclusion>;
+    activateSelfExclusion(userId: string, input: ActivateSelfExclusionInput, actorId: string): Promise<RgExclusion>;
+    liftSelfExclusion(userId: string, input: LiftSelfExclusionInput, actorId: string): Promise<RgExclusion>;
+    getRgSection(userId: string): Promise<RgSection>;
+    expireLapsedCoolingOffs(): Promise<void>;
+    private expireLapsedCoolingOff;
+    private syncEnforcement;
+    private assertNoActiveExclusion;
+    private notify;
+}
+//# sourceMappingURL=rg.service.d.ts.map

package/dist/compliance/service/rg.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/rg.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAKd,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,SAAS,EACV,MAAM,sBAAsB,CAAC;AAO9B,eAAO,MAAM,sBAAsB,2BAAiC,CAAC;AACrE,eAAO,MAAM,oBAAoB,iBAGhC,CAAC;AACF,eAAO,MAAM,2BAA2B,iBAGvC,CAAC;AACF,eAAO,MAAM,8BAA8B,iBAG1C,CAAC;AA2BF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;IACjB,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACvC,CAAC;AAEF,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;IACxD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;gBAE1C,IAAI,EAAE,aAAa;IAQzB,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,KAAK,CAAC;IAqCX,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,uBAAuB,EAC9B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC;IAqCjB,qBAAqB,CACzB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC;IA0CjB,iBAAiB,CACrB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC;IA2CjB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAwBhD,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAkB9C,OAAO,CAAC,sBAAsB;YAiBhB,eAAe;YAwBf,uBAAuB;YAqBvB,MAAM;CAUrB"}