@openora/core 0.4.1-canary.11 → 0.4.1-canary.111

package/dist/wallet/__tests__/wallet-custody-routes.router.test.js

@@ -0,0 +1,129 @@
+import { describe, it, expect, vi } from 'vitest';
+import { call, ORPCError } from '@orpc/server';
+import { queue, } from '@openora/core/contracts';
+import { mock, makeDrizzle, makeEventBus, testContext, makeAuditWriter, makeAdminGuard, makeIdentityReader, makeJobQueue, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { createWalletRouter } from '../router/index.js';
+import { WalletService } from '../service/wallet.service.js';
+const CTX = testContext();
+const CALLER_ID = '9a2f7c11-0000-4000-8000-0000000000dd';
+const RECONCILIATION_QUEUE = queue('wallet-reconciliation');
+// Neither route reads or writes a row directly - they authorize, then delegate to a
+// service or enqueue a job - so a mocked DrizzleService is enough (no real Postgres).
+// The collaborators are per-test doubles so each case can assert what it delegated.
+function routerWith(guard, overrides = {}) {
+    const paymentProviders = makePaymentProviderRegistry();
+    const service = new WalletService({
+        drizzle: makeDrizzle(),
+        events: makeEventBus(),
+        payment: mock({}),
+        paymentProviders,
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+    });
+    return createWalletRouter({
+        wallet: service,
+        adminGuard: guard,
+        audit: makeAuditWriter(),
+        paymentProviders,
+        reconciliation: overrides.reconciliation ?? mock({}),
+        jobQueue: overrides.jobQueue ?? makeJobQueue(),
+        reconciliationQueue: RECONCILIATION_QUEUE,
+        realtime: mock({}),
+    });
+}
+const authorizedGuard = () => makeAdminGuard({ caller: { userId: CALLER_ID, role: 'admin' } });
+const deniedGuard = (deny) => makeAdminGuard({ deny, caller: { userId: CALLER_ID, role: 'support' } });
+describe('wallet custody and reconciliation routes', () => {
+    describe('POST /wallet/custody/sweep/run', () => {
+        it('enqueues a sweep cycle and returns its runId for an authorized caller', async () => {
+            const enqueue = vi.fn().mockResolvedValue({ id: 'job-1' });
+            const router = routerWith(authorizedGuard(), {
+                jobQueue: mock({ enqueue }),
+            });
+            const result = await call(router.custody.sweep.run, {}, { context: CTX });
+            expect(result.runId).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
+            expect(enqueue).toHaveBeenCalledTimes(1);
+            const [, payload] = enqueue.mock.calls[0];
+            expect(payload).toEqual({ runId: result.runId });
+        });
+        it('403s for a caller missing wallet-custody:run', async () => {
+            const router = routerWith(deniedGuard(['wallet-custody:run']));
+            await expect(call(router.custody.sweep.run, {}, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+            await expect(call(router.custody.sweep.run, {}, { context: CTX })).rejects.toMatchObject({
+                code: 'FORBIDDEN',
+            });
+        });
+    });
+    describe('GET /wallet/reconciliation', () => {
+        const input = { page: 1, limit: 20 };
+        it('delegates to the reconciliation service for an authorized caller', async () => {
+            const listFindings = vi.fn(async () => ({ items: [], total: 0, page: 1, limit: 20 }));
+            const router = routerWith(authorizedGuard(), {
+                reconciliation: mock({ listFindings }),
+            });
+            const result = await call(router.reconciliation.list, input, { context: CTX });
+            expect(result).toEqual({ items: [], total: 0, page: 1, limit: 20 });
+            expect(listFindings).toHaveBeenCalledWith(input);
+        });
+        it('403s for a caller missing wallet-reconciliation:view', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:view']));
+            await expect(call(router.reconciliation.list, input, { context: CTX })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+    describe('POST /wallet/reconciliation/{id}/resolve', () => {
+        const input = {
+            id: '63d3c264-3bf4-4d08-9b92-ea3eaf40a440',
+            resolution: { outcome: 'dismissed', note: 'confirmed non-issue' },
+        };
+        const resolved = {
+            id: input.id,
+            runId: '00000000-0000-0000-0000-000000000000',
+            providerName: 'default',
+            kind: 'missing_deposit',
+            currency: 'BTC',
+            network: null,
+            amount: '1',
+            address: null,
+            tag: null,
+            txHash: null,
+            externalId: 'vendor-ext-1',
+            transactionId: null,
+            detail: null,
+            status: 'resolved',
+            resolvedBy: CALLER_ID,
+            resolvedAt: new Date().toISOString(),
+            resolutionNote: input.resolution.note,
+            createdAt: new Date().toISOString(),
+        };
+        it('delegates to the reconciliation service for an authorized caller', async () => {
+            const resolveFinding = vi.fn(async () => resolved);
+            const router = routerWith(authorizedGuard(), {
+                reconciliation: mock({ resolveFinding }),
+            });
+            const result = await call(router.reconciliation.resolve, input, { context: CTX });
+            expect(result).toEqual(resolved);
+            expect(resolveFinding).toHaveBeenCalledWith(CALLER_ID, input.id, input.resolution, expect.objectContaining({}));
+        });
+        it('403s for a caller missing wallet-reconciliation:resolve', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:resolve']));
+            await expect(call(router.reconciliation.resolve, input, { context: CTX })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+    describe('POST /wallet/reconciliation/run', () => {
+        it('enqueues the job and returns a runId for an authorized caller, never running inline', async () => {
+            const jobQueue = makeJobQueue();
+            const router = routerWith(authorizedGuard(), { jobQueue });
+            const result = await call(router.reconciliation.run, {}, { context: CTX });
+            expect(result.runId).toEqual(expect.any(String));
+            expect(jobQueue.enqueue).toHaveBeenCalledTimes(1);
+            expect(jobQueue.enqueue).toHaveBeenCalledWith(RECONCILIATION_QUEUE, { runId: result.runId });
+        });
+        it('403s for a caller missing wallet-reconciliation:run', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:run']));
+            await expect(call(router.reconciliation.run, {}, { context: CTX })).rejects.toMatchObject({
+                code: 'FORBIDDEN',
+            });
+        });
+    });
+});
+//# sourceMappingURL=wallet-custody-routes.router.test.js.map

package/dist/wallet/__tests__/wallet-custody-routes.router.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-custody-routes.router.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-custody-routes.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,KAAK,GAIN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAE5D,oFAAoF;AACpF,sFAAsF;AACtF,oFAAoF;AACpF,SAAS,UAAU,CACjB,KAAiB,EACjB,YAAoF,EAAE;IAEtF,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE;QACtB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,CAAC;QACjC,gBAAgB;QAChB,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC;QACxB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,eAAe,EAAE;QACxB,gBAAgB;QAChB,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAwB,EAAE,CAAC;QAC3E,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,YAAY,EAAE;QAC9C,mBAAmB,EAAE,oBAAoB;QACzC,QAAQ,EAAE,IAAI,CAAoB,EAAE,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAE/F,MAAM,WAAW,GAAG,CAAC,IAAuB,EAAE,EAAE,CAC9C,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE3E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,QAAQ,EAAE,IAAI,CAAkB,EAAE,OAAO,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE1E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAC1B,gEAAgE,CACjE,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiC,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAE/D,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CACvF,SAAS,CACV,CAAC;YACF,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;gBACvF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAErC,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,cAAc,EAAE,IAAI,CAAwB,EAAE,YAAY,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE/E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;YAEvE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,sCAAsC;YAC1C,UAAU,EAAE,EAAE,OAAO,EAAE,WAAoB,EAAE,IAAI,EAAE,qBAAqB,EAAE;SAC3E,CAAC;QACF,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,sCAAsC;YAC7C,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,iBAA0B;YAChC,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,UAAmB;YAC3B,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,cAAc,EAAE,IAAI,CAAwB,EAAE,cAAc,EAAE,CAAC;aAChE,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAElF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,SAAS,EACT,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,UAAU,EAChB,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;YAE1E,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAC7D,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;YACnG,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;YAEtE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;gBACxF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-kyc-gate.int.test.d.ts.map

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-kyc-gate.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-kyc-gate.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.js

@@ -0,0 +1,104 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { findOneOrThrow } from '@openora/core/server';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { mock, makeEventBus, makeIdentityReader, NO_CLIENT_META, makeAuditWriter, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletBalance, walletTransaction } from '../schema/index.js';
+import { WalletService, KycRequiredError } from '../service/wallet.service.js';
+let db;
+function makeService(kycStatus, gateWithdrawals) {
+    const directory = mock({
+        lookupPlayers: vi.fn(async (ids) => kycStatus === null
+            ? []
+            : ids.map((userId) => mock({ userId, username: 'p', kycStatus }))),
+    });
+    const svc = new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment: mock({ processWithdrawal: vi.fn() }),
+        paymentProviders: makePaymentProviderRegistry(),
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+        directory,
+        platformConfig: mock({ kyc: { gateWithdrawals } }),
+    });
+    return { svc, directory };
+}
+async function seedWallet() {
+    const row = findOneOrThrow(await db.drizzle.db
+        .insert(wallet)
+        .values({ userId: randomUUID(), currency: 'USD' })
+        .returning(), new Error('seedWallet: query returned no row'));
+    await db.drizzle.db
+        .insert(walletBalance)
+        .values({ walletId: row.id, currency: row.currency, amount: '100' });
+    return row;
+}
+async function txCount(walletId) {
+    const rows = await db.drizzle.db
+        .select()
+        .from(walletTransaction)
+        .where(eq(walletTransaction.walletId, walletId));
+    return rows.length;
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateProfile]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${wallet} RESTART IDENTITY CASCADE`);
+});
+describe('WalletService.withdraw KYC gate (real PG)', () => {
+    it('throws KycRequiredError before touching the ledger when the status is not in the pass-set', async () => {
+        const { svc } = makeService('pending', true);
+        const w = await seedWallet();
+        await expect(svc.withdraw({ userId: w.userId, amount: '50', currency: 'USD', ...NO_CLIENT_META })).rejects.toBeInstanceOf(KycRequiredError);
+        expect(await txCount(w.id)).toBe(0);
+    });
+    it('fails closed when the player has no KYC summary at all', async () => {
+        const { svc } = makeService(null, true);
+        const w = await seedWallet();
+        await expect(svc.withdraw({ userId: w.userId, amount: '50', currency: 'USD', ...NO_CLIENT_META })).rejects.toBeInstanceOf(KycRequiredError);
+    });
+    it('lets a verified player through the gate', async () => {
+        const { svc } = makeService('verified', true);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+        expect(await txCount(w.id)).toBe(1);
+    });
+    it('lets a manually_overridden player through the gate', async () => {
+        const { svc } = makeService('manually_overridden', true);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+    });
+    it('never consults the directory when the gate is off', async () => {
+        const { svc, directory } = makeService('pending', false);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+        expect(directory.lookupPlayers).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=wallet-kyc-gate.int.test.js.map

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-kyc-gate.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-kyc-gate.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAQtC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAE/E,IAAI,EAAU,CAAC;AAEf,SAAS,WAAW,CAAC,SAA2B,EAAE,eAAwB;IACxE,MAAM,SAAS,GAAG,IAAI,CAAqB;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAa,EAAE,EAAE,CAC3C,SAAS,KAAK,IAAI;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CACxF;KACF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC;QAC5B,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAC7D,gBAAgB,EAAE,2BAA2B,EAAE;QAC/C,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;QACpC,SAAS;QACT,cAAc,EAAE,IAAI,CAAiB,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SACjD,SAAS,EAAE,EACd,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAC/C,CAAC;IACF,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC7B,MAAM,EAAE;SACR,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,iBAAiB,KAAK,MAAM,2BAA2B,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,CACV,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC,CACrF,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,CACV,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC,CACrF,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-transaction-direction-backfill.test.d.ts.map

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-transaction-direction-backfill.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-transaction-direction-backfill.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.js

@@ -0,0 +1,24 @@
+import { describe, it, expect } from 'vitest';
+import { WALLET_TRANSACTION_TYPES } from '@openora/core/contracts';
+// Mirrors the CASE mapping hand-appended to
+// drizzle/migrations/0014_abandoned_madripoor.sql. Kept in lockstep here so a future type
+// added to WALLET_TRANSACTION_TYPES fails this test instead of silently backfilling as
+// NULL (or, worse, someone guessing a direction for it).
+const BACKFILL_CREDIT_TYPES = ['deposit', 'win', 'bonus', 'manual_credit'];
+const BACKFILL_DEBIT_TYPES = ['withdrawal', 'bet', 'loss', 'manual_debit'];
+// The only types where the same value is written for both legs of a transfer (see
+// engagement/social-transfers/service/social-transfers.service.ts), so a historical row
+// has no recoverable direction and the migration deliberately leaves it NULL.
+const KNOWN_AMBIGUOUS_TYPES = ['gift', 'rain', 'tip'];
+describe('wallet_transaction direction backfill vocabulary', () => {
+    it('accounts for every WALLET_TRANSACTION_TYPES value exactly once', () => {
+        const partitioned = [
+            ...BACKFILL_CREDIT_TYPES,
+            ...BACKFILL_DEBIT_TYPES,
+            ...KNOWN_AMBIGUOUS_TYPES,
+        ];
+        expect(new Set(partitioned).size).toBe(partitioned.length);
+        expect([...partitioned].sort()).toEqual([...WALLET_TRANSACTION_TYPES].sort());
+    });
+});
+//# sourceMappingURL=wallet-transaction-direction-backfill.test.js.map

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-transaction-direction-backfill.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-transaction-direction-backfill.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAA8B,MAAM,yBAAyB,CAAC;AAE/F,4CAA4C;AAC5C,0FAA0F;AAC1F,uFAAuF;AACvF,yDAAyD;AACzD,MAAM,qBAAqB,GAA4B,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;AACpG,MAAM,oBAAoB,GAA4B,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAEpG,kFAAkF;AAClF,wFAAwF;AACxF,8EAA8E;AAC9E,MAAM,qBAAqB,GAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/E,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,WAAW,GAAG;YAClB,GAAG,qBAAqB;YACxB,GAAG,oBAAoB;YACvB,GAAG,qBAAqB;SACzB,CAAC;QAEF,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-webhook.router.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-webhook.router.int.test.d.ts.map

package/dist/wallet/__tests__/wallet-webhook.router.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-webhook.router.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-webhook.router.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-webhook.router.int.test.js

@@ -0,0 +1,310 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { findOneOrThrow } from '@openora/core/server';
+import { randomUUID } from 'node:crypto';
+import { eq } from 'drizzle-orm';
+import { call, ORPCError } from '@orpc/server';
+import { queue, } from '@openora/core/contracts';
+import { createTestDb, InProcessRealtimeTransport } from '@openora/core/testing';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { mock, makeEventBus, makeIdentityReader, testContext, makeAuditWriter, makeJobQueue, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletBalance, walletTransaction, walletDepositAddress, walletReconciliationFinding, } from '../schema/index.js';
+import { createWalletRouter } from '../router/index.js';
+import { WalletService } from '../service/wallet.service.js';
+const USER_ID = '63d3c264-3bf4-4d08-9b92-ea3eaf40a440';
+const DEPOSIT_ADDRESS = 'bc1qxyz';
+const RECONCILIATION_QUEUE = queue('wallet-reconciliation');
+let db;
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateProfile]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.delete(walletReconciliationFinding);
+    await db.drizzle.db.delete(walletTransaction);
+    await db.drizzle.db.delete(walletDepositAddress);
+    await db.drizzle.db.delete(walletBalance);
+    await db.drizzle.db.delete(wallet);
+});
+function routerWith(payment, verifier, limiter) {
+    const paymentProviders = makePaymentProviderRegistry({
+        adapter: payment,
+        webhookVerifier: verifier,
+    });
+    return routerWithProviders(paymentProviders, payment, limiter);
+}
+function routerWithProviders(paymentProviders, payment, limiter) {
+    const service = new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment,
+        paymentProviders,
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+    });
+    return createWalletRouter({
+        wallet: service,
+        adminGuard: mock({ assert: vi.fn() }),
+        audit: makeAuditWriter(),
+        paymentProviders,
+        reconciliation: mock({}),
+        jobQueue: makeJobQueue(),
+        reconciliationQueue: RECONCILIATION_QUEUE,
+        realtime: new InProcessRealtimeTransport(),
+        limiter,
+    });
+}
+async function findingsFor(externalId) {
+    return db.drizzle.db
+        .select()
+        .from(walletReconciliationFinding)
+        .where(eq(walletReconciliationFinding.externalId, externalId));
+}
+// A registry with two DISTINCTLY-behaving named providers, to test that a webhook is
+// never verified with one vendor's key and parsed with another's format.
+function twoProviderRegistry(a, b) {
+    return {
+        get: (name) => {
+            if (name === 'vendor-a') {
+                return { adapter: a.payment, webhookVerifier: a.verifier };
+            }
+            if (name === 'vendor-b') {
+                return { adapter: b.payment, webhookVerifier: b.verifier };
+            }
+            return null;
+        },
+        names: () => ['vendor-a', 'vendor-b'],
+    };
+}
+const verifierReturning = (result) => mock({ verify: vi.fn().mockReturnValue(result) });
+const paymentParsing = (event) => mock({ parseWebhook: vi.fn().mockReturnValue(event) });
+function ctx(rawBody, headers = {}) {
+    return { context: testContext({ request: { headers }, rawBody }) };
+}
+async function seedWallet(currency = 'BTC') {
+    const row = findOneOrThrow(await db.drizzle.db.insert(wallet).values({ userId: USER_ID, currency }).returning(), new Error('seedWallet: query returned no row'));
+    await db.drizzle.db
+        .insert(walletBalance)
+        .values({ walletId: row.id, currency: row.currency, amount: '0' });
+    return row;
+}
+async function seedDepositAddress(currency = 'BTC') {
+    await db.drizzle.db.insert(walletDepositAddress).values({
+        userId: USER_ID,
+        currency,
+        address: DEPOSIT_ADDRESS,
+        providerName: 'custody',
+    });
+}
+async function seedProcessingWithdrawal(walletId, externalId) {
+    const row = findOneOrThrow(await db.drizzle.db
+        .insert(walletTransaction)
+        .values({
+        walletId,
+        type: 'withdrawal',
+        amount: '1',
+        currency: 'BTC',
+        status: 'processing',
+        rail: 'crypto',
+        providerRefId: externalId,
+    })
+        .returning(), new Error('seedProcessingWithdrawal: query returned no row'));
+    return row;
+}
+async function ledgerFor(walletId) {
+    return db.drizzle.db
+        .select()
+        .from(walletTransaction)
+        .where(eq(walletTransaction.walletId, walletId));
+}
+const depositEvent = {
+    kind: 'deposit',
+    address: DEPOSIT_ADDRESS,
+    amount: '0.5',
+    currency: 'BTC',
+    txHash: '0xabc',
+    externalId: 'vendor-ext-1',
+};
+describe('wallet webhook route (M2M, no admin session)', () => {
+    it('rejects when the signature verifier fails (fail closed)', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const payment = paymentParsing(depositEvent);
+        const router = routerWith(payment, verifierReturning(false));
+        await expect(call(router.webhook, {}, ctx('{}', { 'x-payment-signature': 'bad' }))).rejects.toBeInstanceOf(ORPCError);
+        expect(payment.parseWebhook).not.toHaveBeenCalled();
+        expect(await ledgerFor(w.id)).toHaveLength(0);
+    });
+    it('rejects when no raw body was captured', async () => {
+        const verifier = verifierReturning(true);
+        const router = routerWith(paymentParsing(depositEvent), verifier);
+        await expect(call(router.webhook, {}, { context: testContext() })).rejects.toBeInstanceOf(ORPCError);
+        expect(verifier.verify).not.toHaveBeenCalled();
+    });
+    it('credits the player wallet on a verified deposit event', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const router = routerWith(paymentParsing(depositEvent), verifierReturning(true));
+        const result = await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        expect(result).toEqual({ ok: true });
+        const ledger = await ledgerFor(w.id);
+        expect(ledger).toHaveLength(1);
+        expect(ledger[0]).toMatchObject({
+            type: 'deposit',
+            status: 'completed',
+            amount: '0.500000000000000000',
+            providerRefId: 'vendor-ext-1',
+            txHash: '0xabc',
+        });
+        const [credited] = await db.drizzle.db
+            .select()
+            .from(walletBalance)
+            .where(eq(walletBalance.walletId, w.id));
+        expect(credited?.amount).toBe('0.500000000000000000');
+    });
+    it('credits a replayed deposit event exactly once', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const router = routerWith(paymentParsing(depositEvent), verifierReturning(true));
+        await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        expect(await ledgerFor(w.id)).toHaveLength(1);
+        const [credited] = await db.drizzle.db
+            .select()
+            .from(walletBalance)
+            .where(eq(walletBalance.walletId, w.id));
+        expect(credited?.amount).toBe('0.500000000000000000');
+    });
+    it('settles the matching withdrawal on a verified withdrawal event', async () => {
+        const w = await seedWallet();
+        const externalId = randomUUID();
+        const withdrawal = await seedProcessingWithdrawal(w.id, externalId);
+        const router = routerWith(paymentParsing({ kind: 'withdrawal', externalId, status: 'completed', txHash: '0xdef' }), verifierReturning(true));
+        const result = await call(router.webhook, {}, ctx('{"event":"withdrawal"}'));
+        expect(result).toEqual({ ok: true });
+        const [settled] = await db.drizzle.db
+            .select()
+            .from(walletTransaction)
+            .where(eq(walletTransaction.id, withdrawal.id));
+        expect(settled).toMatchObject({ status: 'completed', txHash: '0xdef' });
+    });
+    it('returns ok without touching the ledger when parseWebhook does not recognize the body', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const router = routerWith(paymentParsing(null), verifierReturning(true));
+        const result = await call(router.webhook, {}, ctx('{"event":"unknown"}'));
+        expect(result).toEqual({ ok: true });
+        expect(await ledgerFor(w.id)).toHaveLength(0);
+    });
+    it('returns ok, credits nobody, and files an unattributed_deposit finding when the deposit address is unknown', async () => {
+        const w = await seedWallet();
+        const router = routerWith(paymentParsing(depositEvent), verifierReturning(true));
+        const result = await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        expect(result).toEqual({ ok: true });
+        expect(await ledgerFor(w.id)).toHaveLength(0);
+        const findings = await findingsFor(depositEvent.externalId);
+        expect(findings).toHaveLength(1);
+        expect(findings[0]).toMatchObject({
+            kind: 'unattributed_deposit',
+            providerName: 'default',
+            currency: 'BTC',
+            amount: '0.500000000000000000',
+            address: DEPOSIT_ADDRESS,
+            status: 'open',
+        });
+    });
+});
+describe('POST /wallet/webhook/{provider} (multi-provider routing)', () => {
+    it('resolves the verifier AND the adapter from the same named provider entry', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const a = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const b = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const router = routerWithProviders(twoProviderRegistry(a, b), a.payment);
+        const result = await call(router.webhookForProvider, { provider: 'vendor-a' }, ctx('{"event":"deposit"}'));
+        expect(result).toEqual({ ok: true });
+        expect(a.verifier.verify).toHaveBeenCalledTimes(1);
+        expect(a.payment.parseWebhook).toHaveBeenCalledTimes(1);
+        expect(await ledgerFor(w.id)).toHaveLength(1);
+    });
+    it('never verifies with one provider and parses with another (signature confusion)', async () => {
+        const a = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const b = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const router = routerWithProviders(twoProviderRegistry(a, b), a.payment);
+        await call(router.webhookForProvider, { provider: 'vendor-a' }, ctx('{"event":"deposit"}'));
+        expect(a.verifier.verify).toHaveBeenCalledTimes(1);
+        expect(b.verifier.verify).not.toHaveBeenCalled();
+        expect(b.payment.parseWebhook).not.toHaveBeenCalled();
+    });
+    it('an unknown provider name fails the same shape as a bad signature, without calling any bound verifier', async () => {
+        const a = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const b = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const router = routerWithProviders(twoProviderRegistry(a, b), a.payment);
+        await expect(call(router.webhookForProvider, { provider: 'not-a-bound-vendor' }, ctx('{"event":"deposit"}'))).rejects.toMatchObject({ code: 'UNAUTHORIZED' });
+        expect(a.verifier.verify).not.toHaveBeenCalled();
+        expect(b.verifier.verify).not.toHaveBeenCalled();
+    });
+    it('rejects a bad signature on the named-provider route the same way as the default route', async () => {
+        const a = { payment: paymentParsing(depositEvent), verifier: verifierReturning(false) };
+        const b = { payment: paymentParsing(depositEvent), verifier: verifierReturning(true) };
+        const router = routerWithProviders(twoProviderRegistry(a, b), a.payment);
+        await expect(call(router.webhookForProvider, { provider: 'vendor-a' }, ctx('{"event":"deposit"}'))).rejects.toMatchObject({ code: 'UNAUTHORIZED' });
+        expect(a.payment.parseWebhook).not.toHaveBeenCalled();
+    });
+    it('the unparameterised route keeps working, delegating to the default provider', async () => {
+        const w = await seedWallet();
+        await seedDepositAddress();
+        const router = routerWith(paymentParsing(depositEvent), verifierReturning(true));
+        const result = await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        expect(result).toEqual({ ok: true });
+        expect(await ledgerFor(w.id)).toHaveLength(1);
+    });
+});
+describe('wallet webhook route - per-IP rate limit', () => {
+    function exhaustedLimiter() {
+        return {
+            consume: vi.fn(async () => ({ allowed: false, retryAfterMs: 1000 })),
+            reset: vi.fn(async () => undefined),
+        };
+    }
+    it('rejects with 429 once the per-IP limiter denies the request', async () => {
+        const limiter = exhaustedLimiter();
+        const router = routerWith(paymentParsing(null), verifierReturning(true), limiter);
+        await expect(call(router.webhook, {}, {
+            context: testContext({
+                request: { headers: {} },
+                rawBody: '{}',
+                clientMeta: { ip: '1.2.3.4', userAgent: null },
+            }),
+        })).rejects.toMatchObject({ code: 'TOO_MANY_REQUESTS' });
+        expect(limiter.consume).toHaveBeenCalledTimes(1);
+    });
+    it('still rate-limits a request with no IP, under a shared bucket rather than skipping the limiter', async () => {
+        const limiter = exhaustedLimiter();
+        const router = routerWith(paymentParsing(null), verifierReturning(true), limiter);
+        await expect(call(router.webhook, {}, {
+            context: testContext({
+                request: { headers: {} },
+                rawBody: '{}',
+                clientMeta: { ip: null, userAgent: null },
+            }),
+        })).rejects.toMatchObject({ code: 'TOO_MANY_REQUESTS' });
+        expect(limiter.consume).toHaveBeenCalledTimes(1);
+        const [key] = limiter.consume.mock.calls[0];
+        expect(key).toBe('wallet-webhook:unknown');
+    });
+    it('does not consume the limiter twice for the same request beyond the one throttle check', async () => {
+        const limiter = {
+            consume: vi.fn(async () => ({ allowed: true, retryAfterMs: 0 })),
+            reset: vi.fn(async () => undefined),
+        };
+        await seedWallet();
+        await seedDepositAddress();
+        const router = routerWith(paymentParsing(depositEvent), verifierReturning(true), limiter);
+        await call(router.webhook, {}, ctx('{"event":"deposit"}'));
+        expect(limiter.consume).toHaveBeenCalledTimes(1);
+    });
+});
+//# sourceMappingURL=wallet-webhook.router.int.test.js.map