@openora/core 0.4.0

package/dist/contracts/schemas/events.d.ts

@@ -0,0 +1,348 @@
+import * as z from 'zod';
+export declare const domainEventSchemas: {
+    readonly 'identity.user.registered': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.user.login': z.ZodObject<{
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.user.login.failed': z.ZodObject<{
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        email: z.ZodEmail;
+        reason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    readonly 'identity.user.logout': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.user.lockout.triggered': z.ZodObject<{
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userId: z.ZodUUID;
+        email: z.ZodEmail;
+        lockoutUntil: z.ZodISODateTime;
+    }, z.core.$strip>;
+    readonly 'identity.user.unlocked': z.ZodObject<{
+        userId: z.ZodUUID;
+        email: z.ZodEmail;
+        actorId: z.ZodUUID;
+        previousFailedAttempts: z.ZodOptional<z.ZodNumber>;
+        previousLockoutUntil: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+    }, z.core.$strip>;
+    readonly 'identity.2fa.enabled': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.2fa.disabled': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.password.reset': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.email.verified': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.profile.updated': z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.user.deactivated': z.ZodObject<{
+        userId: z.ZodUUID;
+        actorId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.user.reactivated': z.ZodObject<{
+        userId: z.ZodUUID;
+        actorId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'identity.session.revoked': z.ZodObject<{
+        userId: z.ZodUUID;
+        sessionId: z.ZodUUID;
+        actorId: z.ZodOptional<z.ZodUUID>;
+    }, z.core.$strip>;
+    readonly 'identity.sessions.revoked_all': z.ZodObject<{
+        userId: z.ZodUUID;
+        actorId: z.ZodOptional<z.ZodUUID>;
+    }, z.core.$strip>;
+    readonly 'identity.user.unauthorized_access': z.ZodObject<{
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userId: z.ZodUUID;
+        resource: z.ZodString;
+        action: z.ZodString;
+        role: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly 'wallet.deposit.completed': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'wallet.withdrawal.completed': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'wallet.withdrawal.requested': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'wallet.withdrawal.approved': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+        adminId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'wallet.withdrawal.rejected': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+        adminId: z.ZodUUID;
+        reason: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'wallet.withdrawal.failed': z.ZodObject<{
+        userId: z.ZodUUID;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+        transactionId: z.ZodUUID;
+        adminId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'gaming.round.started': z.ZodObject<{
+        roundId: z.ZodUUID;
+        gameId: z.ZodUUID;
+        userId: z.ZodUUID;
+        currency: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'gaming.round.ended': z.ZodObject<{
+        roundId: z.ZodUUID;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'chat.message.sent': z.ZodObject<{
+        messageId: z.ZodUUID;
+        roomId: z.ZodNullable<z.ZodUUID>;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'chat.user.blocked': z.ZodObject<{
+        blockerId: z.ZodUUID;
+        blockedId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'chat.user.unblocked': z.ZodObject<{
+        blockerId: z.ZodUUID;
+        blockedId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'compliance.geo-rule.added': z.ZodObject<{
+        countryCode: z.ZodString;
+        action: z.ZodEnum<{
+            allow: "allow";
+            block: "block";
+        }>;
+        actorId: z.ZodOptional<z.ZodUUID>;
+    }, z.core.$strip>;
+    readonly 'compliance.limit.upserted': z.ZodObject<{
+        userId: z.ZodUUID;
+        limitId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'compliance.limit.removed': z.ZodObject<{
+        userId: z.ZodUUID;
+        limitId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'rg.limit.set': z.ZodObject<{
+        userId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        limitId: z.ZodUUID;
+        type: z.ZodEnum<{
+            deposit: "deposit";
+            wager: "wager";
+            loss: "loss";
+            session: "session";
+        }>;
+        period: z.ZodEnum<{
+            session: "session";
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+        }>;
+        amount: z.ZodNumber;
+        previousAmount: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    readonly 'rg.cooling_off.activated': z.ZodObject<{
+        actorId: z.ZodUUID;
+        reason: z.ZodString;
+        userId: z.ZodUUID;
+        exclusionId: z.ZodUUID;
+        expiresAt: z.ZodISODateTime;
+    }, z.core.$strip>;
+    readonly 'rg.self_exclusion.activated': z.ZodObject<{
+        actorId: z.ZodUUID;
+        reason: z.ZodString;
+        userId: z.ZodUUID;
+        exclusionId: z.ZodUUID;
+        permanent: z.ZodBoolean;
+        expiresAt: z.ZodNullable<z.ZodISODateTime>;
+    }, z.core.$strip>;
+    readonly 'rg.self_exclusion.lifted': z.ZodObject<{
+        actorId: z.ZodUUID;
+        reason: z.ZodString;
+        userId: z.ZodUUID;
+        exclusionId: z.ZodUUID;
+        kind: z.ZodEnum<{
+            cooling_off: "cooling_off";
+            self_exclusion: "self_exclusion";
+        }>;
+    }, z.core.$strip>;
+    readonly 'rg.exclusion.login_blocked': z.ZodObject<{
+        userId: z.ZodUUID;
+        ip: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>;
+    readonly 'compliance.kyc.updated': z.ZodObject<{
+        userId: z.ZodUUID;
+        actorId: z.ZodNullable<z.ZodUUID>;
+        status: z.ZodEnum<{
+            pending: "pending";
+            not_started: "not_started";
+            verified: "verified";
+            rejected: "rejected";
+            resubmission_requested: "resubmission_requested";
+            manually_overridden: "manually_overridden";
+        }>;
+        previousStatus: z.ZodEnum<{
+            pending: "pending";
+            not_started: "not_started";
+            verified: "verified";
+            rejected: "rejected";
+            resubmission_requested: "resubmission_requested";
+            manually_overridden: "manually_overridden";
+        }>;
+    }, z.core.$strip>;
+    readonly 'compliance.kyc.submitted': z.ZodObject<{
+        userId: z.ZodUUID;
+        referenceId: z.ZodString;
+        provider: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'compliance.kyc.reverify_required': z.ZodObject<{
+        userId: z.ZodUUID;
+        reason: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'notifications.created': z.ZodObject<{
+        notificationId: z.ZodUUID;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'cms.page.published': z.ZodObject<{
+        pageId: z.ZodUUID;
+        slug: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'iam.invitation.accepted': z.ZodObject<{
+        email: z.ZodEmail;
+        roleId: z.ZodUUID;
+        invitationId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'iam.role.created': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        name: z.ZodString;
+    }, z.core.$strip>;
+    readonly 'iam.role.updated': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly 'iam.role.deleted': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'iam.role.permissions.changed': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        before: z.ZodArray<z.ZodObject<{
+            resource: z.ZodString;
+            level: z.ZodEnum<{
+                no_access: "no_access";
+                read: "read";
+                read_write: "read_write";
+            }>;
+        }, z.core.$strip>>;
+        after: z.ZodArray<z.ZodObject<{
+            resource: z.ZodString;
+            level: z.ZodEnum<{
+                no_access: "no_access";
+                read: "read";
+                read_write: "read_write";
+            }>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    readonly 'iam.role.assigned': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'iam.role.revoked': z.ZodObject<{
+        roleId: z.ZodUUID;
+        actorId: z.ZodUUID;
+        userId: z.ZodUUID;
+    }, z.core.$strip>;
+    readonly 'tag.player.assigned': z.ZodObject<{
+        actorId: z.ZodUUID;
+        reason: z.ZodString;
+        playerId: z.ZodUUID;
+        tagKey: z.ZodEnum<{
+            high_roller: "high_roller";
+            vip: "vip";
+            bonus_abuser: "bonus_abuser";
+            high_risk: "high_risk";
+            inactive: "inactive";
+            large_depositor: "large_depositor";
+            self_excluded: "self_excluded";
+            kyc_pending: "kyc_pending";
+            kyc_rejected: "kyc_rejected";
+            test_account: "test_account";
+        }>;
+    }, z.core.$strip>;
+    readonly 'tag.player.removed': z.ZodObject<{
+        actorId: z.ZodUUID;
+        reason: z.ZodString;
+        playerId: z.ZodUUID;
+        tagKey: z.ZodEnum<{
+            high_roller: "high_roller";
+            vip: "vip";
+            bonus_abuser: "bonus_abuser";
+            high_risk: "high_risk";
+            inactive: "inactive";
+            large_depositor: "large_depositor";
+            self_excluded: "self_excluded";
+            kyc_pending: "kyc_pending";
+            kyc_rejected: "kyc_rejected";
+            test_account: "test_account";
+        }>;
+    }, z.core.$strip>;
+    readonly 'tag.rule.upserted': z.ZodObject<{
+        tagKey: z.ZodEnum<{
+            high_roller: "high_roller";
+            vip: "vip";
+            bonus_abuser: "bonus_abuser";
+            high_risk: "high_risk";
+            inactive: "inactive";
+            large_depositor: "large_depositor";
+            self_excluded: "self_excluded";
+            kyc_pending: "kyc_pending";
+            kyc_rejected: "kyc_rejected";
+            test_account: "test_account";
+        }>;
+        actorId: z.ZodUUID;
+        after: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>;
+};
+export type DomainEventName = keyof typeof domainEventSchemas;
+export type DomainEventPayload<K extends DomainEventName> = z.infer<(typeof domainEventSchemas)[K]>;
+export declare const domainEventVersions: Partial<Record<DomainEventName, number>>;
+export declare function getEventVersion(event: string): number;
+/** Returns every cross-module topic and its current schema version for broker provisioning and producer/consumer agreement checks. */
+export declare function eventCatalog(): ReadonlyArray<{
+    topic: DomainEventName;
+    version: number;
+}>;
+//# sourceMappingURL=events.d.ts.map

package/dist/contracts/schemas/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAkCzB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmMrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAC9D,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAIpG,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAOxE,CAAC;AAEF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,sIAAsI;AACtI,wBAAgB,YAAY,IAAI,aAAa,CAAC;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAKzF"}

package/dist/contracts/schemas/events.js

@@ -0,0 +1,225 @@
+import * as z from 'zod';
+import { TimestampSchema, UuidSchema } from './common.js';
+import { GeoRuleActionSchema, LimitTypeSchema, LimitPeriodSchema, ExclusionKindSchema, } from './compliance.js';
+import { TagKeySchema } from './tag.js';
+import { CurrencyCodeSchema, CountryCodeSchema } from './igaming-config.js';
+import { PermissionLevelSchema } from './iam.js';
+import { KycStatusSchema } from './player.js';
+const iamRoleEventBase = z.object({ roleId: UuidSchema, actorId: UuidSchema });
+const actorReasonBase = z.object({ actorId: UuidSchema, reason: z.string() });
+const tagPlayerEventBase = actorReasonBase.extend({ playerId: UuidSchema, tagKey: TagKeySchema });
+const permissionLevelEntries = z.array(z.object({ resource: z.string(), level: PermissionLevelSchema }));
+// Optional request-origin metadata shared by auth events; both fields may be absent.
+const authContextBase = z.object({
+    ip: z.string().nullable().optional(),
+    userAgent: z.string().nullable().optional(),
+});
+// Shared shape for every wallet money-movement event.
+const walletTxnBase = z.object({
+    userId: UuidSchema,
+    amount: z.number(),
+    currency: CurrencyCodeSchema,
+    transactionId: UuidSchema,
+});
+export const domainEventSchemas = {
+    'identity.user.registered': z.object({ userId: UuidSchema }),
+    'identity.user.login': authContextBase.extend({ userId: UuidSchema }),
+    'identity.user.login.failed': authContextBase.extend({
+        email: z.email(),
+        reason: z.string().nullable().optional(),
+    }),
+    'identity.user.logout': z.object({ userId: UuidSchema }),
+    'identity.user.lockout.triggered': authContextBase.extend({
+        userId: UuidSchema,
+        email: z.email(),
+        lockoutUntil: TimestampSchema,
+    }),
+    'identity.user.unlocked': z.object({
+        userId: UuidSchema,
+        email: z.email(),
+        actorId: UuidSchema,
+        previousFailedAttempts: z.number().int().optional(),
+        previousLockoutUntil: TimestampSchema.nullable().optional(),
+    }),
+    'identity.2fa.enabled': z.object({ userId: UuidSchema }),
+    'identity.2fa.disabled': z.object({ userId: UuidSchema }),
+    'identity.password.reset': z.object({ userId: UuidSchema }),
+    'identity.email.verified': z.object({ userId: UuidSchema }),
+    'identity.profile.updated': z.object({ userId: UuidSchema }),
+    // An admin toggled a user's active status (the only user-lifecycle flow today;
+    // users are deactivated, never hard-deleted). userId = subject, actorId = the
+    // admin who acted (for a complete audit trail).
+    'identity.user.deactivated': z.object({ userId: UuidSchema, actorId: UuidSchema }),
+    'identity.user.reactivated': z.object({ userId: UuidSchema, actorId: UuidSchema }),
+    'identity.session.revoked': z.object({
+        userId: UuidSchema,
+        sessionId: UuidSchema,
+        actorId: UuidSchema.optional(),
+    }),
+    'identity.sessions.revoked_all': z.object({
+        userId: UuidSchema,
+        actorId: UuidSchema.optional(),
+    }),
+    'identity.user.unauthorized_access': authContextBase.extend({
+        userId: UuidSchema,
+        resource: z.string(),
+        action: z.string(),
+        role: z.string().optional(),
+    }),
+    'wallet.deposit.completed': walletTxnBase,
+    'wallet.withdrawal.completed': walletTxnBase,
+    // A player requested a withdrawal; funds are held (balance debited) and the
+    // request enters the back-office approval queue as `pending`.
+    'wallet.withdrawal.requested': walletTxnBase,
+    // A payments admin approved a pending withdrawal; it moves to `processing` and
+    // is sent to the PSP/Fireblocks rail. `adminId` is the acting reviewer.
+    'wallet.withdrawal.approved': walletTxnBase.extend({ adminId: UuidSchema }),
+    // A payments admin rejected a pending withdrawal; held funds are returned to the
+    // player balance. `adminId` is the acting reviewer; `reason` is mandatory.
+    'wallet.withdrawal.rejected': walletTxnBase.extend({
+        adminId: UuidSchema,
+        reason: z.string(),
+    }),
+    // An approved withdrawal failed at the PSP/Fireblocks rail; the held funds were
+    // returned to the player balance and the transaction moved to `failed`.
+    'wallet.withdrawal.failed': walletTxnBase.extend({ adminId: UuidSchema }),
+    'gaming.round.started': z.object({
+        roundId: UuidSchema,
+        gameId: UuidSchema,
+        userId: UuidSchema,
+        currency: CurrencyCodeSchema,
+    }),
+    'gaming.round.ended': z.object({ roundId: UuidSchema, userId: UuidSchema }),
+    'chat.message.sent': z.object({
+        messageId: UuidSchema,
+        // null for global-chat messages (no room); a room id otherwise.
+        roomId: UuidSchema.nullable(),
+        userId: UuidSchema,
+    }),
+    // A player muted/unmuted another player's messages for themselves (ABC-45 AC11).
+    'chat.user.blocked': z.object({ blockerId: UuidSchema, blockedId: UuidSchema }),
+    'chat.user.unblocked': z.object({ blockerId: UuidSchema, blockedId: UuidSchema }),
+    // An admin added or changed a geo (country) rule (regulatory). `actorId` is the
+    // acting admin so the audit log can attribute the mutation.
+    'compliance.geo-rule.added': z.object({
+        countryCode: CountryCodeSchema,
+        action: GeoRuleActionSchema,
+        actorId: UuidSchema.optional(),
+    }),
+    'compliance.limit.upserted': z.object({ userId: UuidSchema, limitId: UuidSchema }),
+    'compliance.limit.removed': z.object({ userId: UuidSchema, limitId: UuidSchema }),
+    // Responsible-Gambling admin actions. `userId` = the subject player, `actorId` =
+    // the acting admin (the envelope carries no caller, so it is explicit for the audit
+    // trail). login_blocked is system-driven (no actor) and a failure outcome.
+    'rg.limit.set': z.object({
+        userId: UuidSchema,
+        actorId: UuidSchema,
+        limitId: UuidSchema,
+        type: LimitTypeSchema,
+        period: LimitPeriodSchema,
+        amount: z.number(),
+        // null when this is the first limit of that (type, period).
+        previousAmount: z.number().nullable(),
+    }),
+    'rg.cooling_off.activated': actorReasonBase.extend({
+        userId: UuidSchema,
+        exclusionId: UuidSchema,
+        expiresAt: TimestampSchema,
+    }),
+    'rg.self_exclusion.activated': actorReasonBase.extend({
+        userId: UuidSchema,
+        exclusionId: UuidSchema,
+        permanent: z.boolean(),
+        expiresAt: TimestampSchema.nullable(),
+    }),
+    'rg.self_exclusion.lifted': actorReasonBase.extend({
+        userId: UuidSchema,
+        exclusionId: UuidSchema,
+        kind: ExclusionKindSchema,
+    }),
+    'rg.exclusion.login_blocked': z.object({
+        userId: UuidSchema,
+        ip: z.string().nullable().optional(),
+        userAgent: z.string().nullable().optional(),
+    }),
+    // A player's KYC status changed. userId = subject player; actorId = the admin who
+    // acted, or null for system-driven changes (vendor decision, webhook, threshold
+    // re-KYC). before/after status records the transition for the audit log.
+    'compliance.kyc.updated': z.object({
+        userId: UuidSchema,
+        actorId: UuidSchema.nullable(),
+        status: KycStatusSchema,
+        previousStatus: KycStatusSchema,
+    }),
+    // A player submitted KYC documents; a verification record was created and sent to
+    // the provider. userId = the submitting player; referenceId = the provider reference.
+    'compliance.kyc.submitted': z.object({
+        userId: UuidSchema,
+        referenceId: z.string(),
+        provider: z.string(),
+    }),
+    // A threshold-triggered re-KYC flipped a verified player to resubmission_requested.
+    // System-driven (no admin actor); reason records the metric that crossed.
+    'compliance.kyc.reverify_required': z.object({
+        userId: UuidSchema,
+        reason: z.string(),
+    }),
+    'notifications.created': z.object({ notificationId: UuidSchema, userId: UuidSchema }),
+    'cms.page.published': z.object({ pageId: UuidSchema, slug: z.string() }),
+    // Emitted when an admin invitation token is accepted. The consumer (identity
+    // module or an overlay) provisions the user account and completes the role
+    // assignment by resolving the userId from the email.
+    'iam.invitation.accepted': z.object({
+        email: z.email(),
+        roleId: UuidSchema,
+        invitationId: UuidSchema,
+    }),
+    // Backoffice RBAC mutations. The envelope does NOT carry the
+    // caller, so every payload carries an explicit `actorId` (the admin who acted)
+    // for the audit trail. `before`/`after` carry the level matrix for permission
+    // changes so the audit log records the transition.
+    'iam.role.created': iamRoleEventBase.extend({
+        name: z.string(),
+    }),
+    'iam.role.updated': iamRoleEventBase.extend({
+        name: z.string().optional(),
+    }),
+    'iam.role.deleted': iamRoleEventBase,
+    'iam.role.permissions.changed': iamRoleEventBase.extend({
+        before: permissionLevelEntries,
+        after: permissionLevelEntries,
+    }),
+    'iam.role.assigned': iamRoleEventBase.extend({ userId: UuidSchema }),
+    'iam.role.revoked': iamRoleEventBase.extend({ userId: UuidSchema }),
+    // Emitted after any tag is assigned to or removed from a player (both automated and manual).
+    // actorId is the user performing the action (SYSTEM_ACTOR_ID for automated ops).
+    'tag.player.assigned': tagPlayerEventBase,
+    'tag.player.removed': tagPlayerEventBase,
+    // Emitted after an admin creates or updates a tag rule configuration.
+    'tag.rule.upserted': z.object({
+        tagKey: TagKeySchema,
+        actorId: UuidSchema,
+        after: z.record(z.string(), z.unknown()),
+    }),
+};
+// Bump an entry only when its payload shape changes in a non-additive way, in the SAME commit
+// that edits the schema above. Events not listed default to version 1.
+export const domainEventVersions = {
+    // v3: actorId is nullable - null marks a system-driven flip (vendor/webhook/reverify),
+    // which the audit writer records as actorType 'system'.
+    'compliance.kyc.updated': 3,
+    // v2: sessionToken (the raw bearer credential) replaced with sessionId - the token
+    // must never be persisted to the audit log or handed back to any caller.
+    'identity.session.revoked': 2,
+};
+export function getEventVersion(event) {
+    return domainEventVersions[event] ?? 1;
+}
+/** Returns every cross-module topic and its current schema version for broker provisioning and producer/consumer agreement checks. */
+export function eventCatalog() {
+    return Object.keys(domainEventSchemas).map((topic) => ({
+        topic,
+        version: getEventVersion(topic),
+    }));
+}
+//# sourceMappingURL=events.js.map

package/dist/contracts/schemas/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/contracts/schemas/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAC/E,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9E,MAAM,kBAAkB,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AAClG,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CACpC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CACjE,CAAC;AAEF,qFAAqF;AACrF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,kBAAkB;IAC5B,aAAa,EAAE,UAAU;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC5D,qBAAqB,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACrE,4BAA4B,EAAE,eAAe,CAAC,MAAM,CAAC;QACnD,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACzC,CAAC;IACF,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxD,iCAAiC,EAAE,eAAe,CAAC,MAAM,CAAC;QACxD,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QAChB,YAAY,EAAE,eAAe;KAC9B,CAAC;IACF,wBAAwB,EAAE,CAAC,CAAC,MAAM,CAAC;QACjC,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,UAAU;QACnB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACnD,oBAAoB,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC5D,CAAC;IACF,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxD,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzD,yBAAyB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3D,yBAAyB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3D,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC5D,+EAA+E;IAC/E,8EAA8E;IAC9E,gDAAgD;IAChD,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAClF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAClF,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,UAAU;QACrB,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF,+BAA+B,EAAE,CAAC,CAAC,MAAM,CAAC;QACxC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF,mCAAmC,EAAE,eAAe,CAAC,MAAM,CAAC;QAC1D,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;IAEF,0BAA0B,EAAE,aAAa;IACzC,6BAA6B,EAAE,aAAa;IAC5C,4EAA4E;IAC5E,8DAA8D;IAC9D,6BAA6B,EAAE,aAAa;IAC5C,+EAA+E;IAC/E,wEAAwE;IACxE,4BAA4B,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC3E,iFAAiF;IACjF,2EAA2E;IAC3E,4BAA4B,EAAE,aAAa,CAAC,MAAM,CAAC;QACjD,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,gFAAgF;IAChF,wEAAwE;IACxE,0BAA0B,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAEzE,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,kBAAkB;KAC7B,CAAC;IACF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE3E,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,SAAS,EAAE,UAAU;QACrB,gEAAgE;QAChE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,UAAU;KACnB,CAAC;IAEF,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC/E,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAEjF,gFAAgF;IAChF,4DAA4D;IAC5D,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAClF,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAEjF,iFAAiF;IACjF,oFAAoF;IACpF,2EAA2E;IAC3E,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,4DAA4D;QAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;IACF,0BAA0B,EAAE,eAAe,CAAC,MAAM,CAAC;QACjD,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,eAAe;KAC3B,CAAC;IACF,6BAA6B,EAAE,eAAe,CAAC,MAAM,CAAC;QACpD,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;QACtB,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;KACtC,CAAC;IACF,0BAA0B,EAAE,eAAe,CAAC,MAAM,CAAC;QACjD,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,mBAAmB;KAC1B,CAAC;IACF,4BAA4B,EAAE,CAAC,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,UAAU;QAClB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC;IAEF,kFAAkF;IAClF,gFAAgF;IAChF,yEAAyE;IACzE,wBAAwB,EAAE,CAAC,CAAC,MAAM,CAAC;QACjC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC9B,MAAM,EAAE,eAAe;QACvB,cAAc,EAAE,eAAe;KAChC,CAAC;IAEF,kFAAkF;IAClF,sFAAsF;IACtF,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC;IAEF,oFAAoF;IACpF,0EAA0E;IAC1E,kCAAkC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3C,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IAEF,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAErF,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAExE,6EAA6E;IAC7E,2EAA2E;IAC3E,qDAAqD;IACrD,yBAAyB,EAAE,CAAC,CAAC,MAAM,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,UAAU;QAClB,YAAY,EAAE,UAAU;KACzB,CAAC;IAEF,6DAA6D;IAC7D,+EAA+E;IAC/E,8EAA8E;IAC9E,mDAAmD;IACnD,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,CAAC;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;IACF,kBAAkB,EAAE,gBAAgB;IACpC,8BAA8B,EAAE,gBAAgB,CAAC,MAAM,CAAC;QACtD,MAAM,EAAE,sBAAsB;QAC9B,KAAK,EAAE,sBAAsB;KAC9B,CAAC;IACF,mBAAmB,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACpE,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAEnE,6FAA6F;IAC7F,iFAAiF;IACjF,qBAAqB,EAAE,kBAAkB;IACzC,oBAAoB,EAAE,kBAAkB;IACxC,sEAAsE;IACtE,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC5B,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACzC,CAAC;CACM,CAAC;AAKX,8FAA8F;AAC9F,uEAAuE;AACvE,MAAM,CAAC,MAAM,mBAAmB,GAA6C;IAC3E,uFAAuF;IACvF,wDAAwD;IACxD,wBAAwB,EAAE,CAAC;IAC3B,mFAAmF;IACnF,yEAAyE;IACzE,0BAA0B,EAAE,CAAC;CAC9B,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,mBAAmB,CAAC,KAAwB,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,sIAAsI;AACtI,MAAM,UAAU,YAAY;IAC1B,OAAQ,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAuB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,KAAK;QACL,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC;KAChC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/contracts/schemas/iam.d.ts

@@ -0,0 +1,22 @@
+import * as z from 'zod';
+export declare const permissionLevels: readonly ["no_access", "read", "read_write"];
+export declare const PermissionLevelSchema: z.ZodEnum<{
+    no_access: "no_access";
+    read: "read";
+    read_write: "read_write";
+}>;
+export type PermissionLevel = z.infer<typeof PermissionLevelSchema>;
+export declare const invitationStatuses: readonly ["pending", "accepted", "revoked"];
+export declare const InvitationStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    accepted: "accepted";
+    revoked: "revoked";
+}>;
+export type InvitationStatus = z.infer<typeof InvitationStatusSchema>;
+export declare const userRoles: readonly ["player", "admin"];
+export declare const UserRoleSchema: z.ZodEnum<{
+    admin: "admin";
+    player: "player";
+}>;
+export type UserRole = z.infer<typeof UserRoleSchema>;
+//# sourceMappingURL=iam.d.ts.map

package/dist/contracts/schemas/iam.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,eAAO,MAAM,gBAAgB,8CAA+C,CAAC;AAC7E,eAAO,MAAM,qBAAqB;;;;EAA2B,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB,6CAA8C,CAAC;AAC9E,eAAO,MAAM,sBAAsB;;;;EAA6B,CAAC;AACjE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,SAAS,8BAA+B,CAAC;AACtD,eAAO,MAAM,cAAc;;;EAAoB,CAAC;AAChD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/contracts/schemas/iam.js

@@ -0,0 +1,10 @@
+import * as z from 'zod';
+export const permissionLevels = ['no_access', 'read', 'read_write'];
+export const PermissionLevelSchema = z.enum(permissionLevels);
+export const invitationStatuses = ['pending', 'accepted', 'revoked'];
+export const InvitationStatusSchema = z.enum(invitationStatuses);
+// Closed set of values the better-auth `user.role` column legitimately holds.
+// Shared here so the adapter port (contracts) and consumer contracts never duplicate it.
+export const userRoles = ['player', 'admin'];
+export const UserRoleSchema = z.enum(userRoles);
+//# sourceMappingURL=iam.js.map

package/dist/contracts/schemas/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../../../src/contracts/schemas/iam.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAG9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AAGjE,8EAA8E;AAC9E,yFAAyF;AACzF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC"}