@openora/core 0.4.1-canary.11 → 0.4.1-canary.111

package/dist/compliance/__tests__/assert.test.js

@@ -0,0 +1,34 @@
+import { describe, it, expect } from 'vitest';
+import { assertSealedServicesBound } from '../assert.js';
+import { IMPLEMENTED_SEALED_TOKENS } from '../sealed.js';
+const containerWith = (bound) => ({
+    has: (token) => bound.includes(token),
+});
+describe('assertSealedServicesBound', () => {
+    it('passes when every implemented sealed service is bound', () => {
+        expect(() => assertSealedServicesBound(containerWith(IMPLEMENTED_SEALED_TOKENS))).not.toThrow();
+    });
+    it('refuses an assembly missing a sealed service', () => {
+        expect(() => assertSealedServicesBound(containerWith([]))).toThrow(/sealed services must be/);
+    });
+    it('names every missing service so the operator knows which module to enable', () => {
+        try {
+            assertSealedServicesBound(containerWith([]));
+        }
+        catch (err) {
+            for (const token of IMPLEMENTED_SEALED_TOKENS) {
+                expect(err.message).toContain(token.description);
+            }
+            return;
+        }
+        throw new Error('expected assertSealedServicesBound to throw');
+    });
+    it('points at the regulatory citations', () => {
+        expect(() => assertSealedServicesBound(containerWith([]))).toThrow(/sealed\.ts/);
+    });
+    it('ignores unrelated bindings', () => {
+        const unrelated = Symbol('payment-adapter');
+        expect(() => assertSealedServicesBound(containerWith([unrelated]))).toThrow();
+    });
+});
+//# sourceMappingURL=assert.test.js.map

package/dist/compliance/__tests__/assert.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/assert.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAA4B,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,MAAM,aAAa,GAAG,CAAC,KAAwB,EAAuB,EAAE,CAAC,CAAC;IACxE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,IAAI,CAAC;YACH,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,KAAK,IAAI,yBAAyB,EAAE,CAAC;gBAC9C,MAAM,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE5C,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/compliance.service.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=compliance.service.int.test.d.ts.map

package/dist/compliance/__tests__/compliance.service.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.service.int.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/compliance.service.int.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/compliance.service.int.test.js

@@ -0,0 +1,162 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { mock, makeEventBus, makeIdentityReader } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { userLimit, geoRule } from '../schema/index.js';
+import { ComplianceService, LimitNotFoundError, LimitOwnershipError, } from '../service/compliance.service.js';
+let db;
+function makeService(countryCode) {
+    const events = makeEventBus();
+    const geoIp = countryCode === undefined
+        ? null
+        : mock({ lookup: vi.fn(async () => ({ countryCode })) });
+    const svc = new ComplianceService(db.drizzle, events, geoIp, makeIdentityReader());
+    return { svc, events };
+}
+async function seedLimit(userId, overrides = {}) {
+    const [row] = await db.drizzle.db
+        .insert(userLimit)
+        .values({
+        userId,
+        type: 'deposit',
+        amount: '100',
+        minutes: null,
+        period: 'daily',
+        ...overrides,
+    })
+        .returning();
+    return row;
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateProfile]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${userLimit}, ${geoRule} RESTART IDENTITY CASCADE`);
+});
+describe('ComplianceService limits (real PG)', () => {
+    it('returns an empty list for a player with no limits', async () => {
+        const { svc } = makeService();
+        expect(await svc.getLimitsForUser(randomUUID())).toEqual([]);
+    });
+    it('returns only the requesting player rows, with serialized timestamps', async () => {
+        const { svc } = makeService();
+        const userId = randomUUID();
+        await seedLimit(userId);
+        await seedLimit(randomUUID());
+        const limits = await svc.getLimitsForUser(userId);
+        expect(limits).toHaveLength(1);
+        expect(typeof limits[0]?.createdAt).toBe('string');
+    });
+    it('inserts a limit and emits upserted', async () => {
+        const { svc, events } = makeService();
+        const userId = randomUUID();
+        const limit = await svc.upsertLimit(userId, {
+            type: 'deposit',
+            amount: '100',
+            minutes: null,
+            period: 'daily',
+        });
+        expect(Number(limit.amount)).toBe(100);
+        expect(events.emit).toHaveBeenCalledWith('compliance.limit.upserted', expect.objectContaining({ userId, limitId: limit.id }));
+    });
+    it('upserts in place on the same type and period', async () => {
+        const { svc } = makeService();
+        const userId = randomUUID();
+        const first = await svc.upsertLimit(userId, {
+            type: 'deposit',
+            amount: '100',
+            minutes: null,
+            period: 'daily',
+        });
+        const second = await svc.upsertLimit(userId, {
+            type: 'deposit',
+            amount: '250',
+            minutes: null,
+            period: 'daily',
+        });
+        expect(second.id).toBe(first.id);
+        const rows = await db.drizzle.db.select().from(userLimit).where(eq(userLimit.userId, userId));
+        expect(rows).toHaveLength(1);
+        expect(Number(rows[0]?.amount)).toBe(250);
+    });
+    it('removes an owned limit and emits removed', async () => {
+        const { svc, events } = makeService();
+        const userId = randomUUID();
+        const limit = await seedLimit(userId);
+        await expect(svc.removeLimit(limit.id, userId)).resolves.toEqual({ success: true });
+        expect(await db.drizzle.db.select().from(userLimit)).toHaveLength(0);
+        expect(events.emit).toHaveBeenCalledWith('compliance.limit.removed', expect.objectContaining({ userId, limitId: limit.id }));
+    });
+    it('throws LimitNotFoundError for an unknown id', async () => {
+        const { svc } = makeService();
+        await expect(svc.removeLimit(randomUUID(), randomUUID())).rejects.toBeInstanceOf(LimitNotFoundError);
+    });
+    it('refuses to remove another players limit and leaves the row in place', async () => {
+        const { svc, events } = makeService();
+        const owner = randomUUID();
+        const limit = await seedLimit(owner);
+        await expect(svc.removeLimit(limit.id, randomUUID())).rejects.toBeInstanceOf(LimitOwnershipError);
+        expect(await db.drizzle.db.select().from(userLimit)).toHaveLength(1);
+        expect(events.emit).not.toHaveBeenCalled();
+    });
+});
+describe('ComplianceService.geoCheck (real PG)', () => {
+    it('allows the request when no geo-ip port is bound', async () => {
+        const { svc } = makeService();
+        expect(await svc.geoCheck('1.2.3.4')).toEqual({
+            allowed: true,
+            countryCode: null,
+            reason: null,
+        });
+    });
+    it('allows the request when the lookup resolves no country', async () => {
+        const { svc } = makeService(null);
+        expect(await svc.geoCheck('1.2.3.4')).toMatchObject({ allowed: true, countryCode: null });
+    });
+    it('allows a resolved country that carries no rule', async () => {
+        const { svc } = makeService('DE');
+        expect(await svc.geoCheck('1.2.3.4')).toMatchObject({ allowed: true, countryCode: 'DE' });
+    });
+    it('blocks a country whose rule says block, with a reason', async () => {
+        const { svc } = makeService('US');
+        await db.drizzle.db.insert(geoRule).values({ countryCode: 'US', action: 'block' });
+        const result = await svc.geoCheck('1.2.3.4');
+        expect(result).toMatchObject({ allowed: false, countryCode: 'US' });
+        expect(result.reason).toContain('US');
+    });
+    it('allows a country whose rule says allow', async () => {
+        const { svc } = makeService('DE');
+        await db.drizzle.db.insert(geoRule).values({ countryCode: 'DE', action: 'allow' });
+        expect(await svc.geoCheck('1.2.3.4')).toMatchObject({ allowed: true, countryCode: 'DE' });
+    });
+});
+describe('ComplianceService geo rules (real PG)', () => {
+    it('adds a rule and emits the event', async () => {
+        const { svc, events } = makeService();
+        const actorId = randomUUID();
+        const rule = await svc.addGeoRule({ countryCode: 'FR', action: 'block' }, actorId);
+        expect(rule).toMatchObject({ countryCode: 'FR', action: 'block' });
+        expect(events.emit).toHaveBeenCalledWith('compliance.geo-rule.added', expect.objectContaining({ countryCode: 'FR', action: 'block', actorId }));
+    });
+    it('upserts the action for a country already on file', async () => {
+        const { svc } = makeService();
+        await svc.addGeoRule({ countryCode: 'FR', action: 'block' });
+        const updated = await svc.addGeoRule({ countryCode: 'FR', action: 'allow' });
+        expect(updated.action).toBe('allow');
+        expect(await db.drizzle.db.select().from(geoRule)).toHaveLength(1);
+    });
+    it('lists every rule on file', async () => {
+        const { svc } = makeService();
+        await svc.addGeoRule({ countryCode: 'FR', action: 'block' });
+        await svc.addGeoRule({ countryCode: 'DE', action: 'allow' });
+        const rules = await svc.listGeoRules();
+        expect(rules.map((r) => r.countryCode).sort()).toEqual(['DE', 'FR']);
+    });
+});
+//# sourceMappingURL=compliance.service.int.test.js.map

package/dist/compliance/__tests__/compliance.service.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance.service.int.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/compliance.service.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,IAAI,EAAU,CAAC;AAEf,SAAS,WAAW,CAAC,WAA2B;IAC9C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,KAAK,GACT,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAe,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,YAAoD,EAAE;IAC7F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC;QACN,MAAM;QACN,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,OAAO;QACf,GAAG,SAAS;KACb,CAAC;SACD,SAAS,EAAE,CAAC;IACf,OAAO,GAAI,CAAC;AACd,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,YAAY,SAAS,KAAK,OAAO,2BAA2B,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE;YAC1C,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,2BAA2B,EAC3B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE;YAC1C,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE;YAC3C,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpF,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,0BAA0B,EAC1B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9B,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC9E,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAC1E,mBAAmB,CACpB,CAAC;QACF,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9B,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5C,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAE7C,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnF,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAE7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAEnF,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,2BAA2B,EAC3B,MAAM,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7D,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7E,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,YAAY,EAAE,CAAC;QAEvC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hmac-kyc-webhook-verifier.int.test.d.ts.map

package/dist/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac-kyc-webhook-verifier.int.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.js

@@ -0,0 +1,82 @@
+import { createHmac } from 'node:crypto';
+import { describe, it, expect, beforeAll, afterEach, afterAll } from 'vitest';
+import { RedisCache } from '@openora/core/server';
+import { createTestRedis } from '@openora/core/testing';
+import { HmacKycWebhookVerifier } from '../adapters/hmac-kyc-webhook-verifier.js';
+let redis;
+beforeAll(async () => {
+    redis = await createTestRedis();
+});
+afterEach(async () => {
+    await redis.flush();
+});
+afterAll(async () => {
+    await redis.quit();
+});
+const SECRET = 'shh';
+const BODY = '{"event":"decision"}';
+function sign(body, secret = SECRET) {
+    return createHmac('sha256', secret).update(body, 'utf8').digest('hex');
+}
+function makeCache() {
+    return new RedisCache(redis.client);
+}
+function unavailableCache() {
+    return {
+        get: async () => {
+            throw new Error('cache unavailable');
+        },
+        set: async () => {
+            throw new Error('cache unavailable');
+        },
+        setIfAbsent: async () => {
+            throw new Error('cache unavailable');
+        },
+        delete: async () => undefined,
+    };
+}
+describe('HmacKycWebhookVerifier (fail closed)', () => {
+    it('accepts a correct signature (with and without sha256= prefix)', async () => {
+        const v = new HmacKycWebhookVerifier(SECRET, makeCache());
+        await expect(v.verify(BODY, { 'x-kyc-signature': sign(BODY) })).resolves.toBe(true);
+        const prefixedBody = '{"event":"decision-2"}';
+        const v2 = new HmacKycWebhookVerifier(SECRET, makeCache());
+        await expect(v2.verify(prefixedBody, { 'x-kyc-signature': `sha256=${sign(prefixedBody)}` })).resolves.toBe(true);
+    });
+    it('extracts the signature header case-insensitively', async () => {
+        const v = new HmacKycWebhookVerifier(SECRET, makeCache());
+        await expect(v.verify(BODY, { 'X-Kyc-Signature': sign(BODY) })).resolves.toBe(true);
+    });
+    it('rejects a wrong signature, a missing signature, and an unset secret', async () => {
+        await expect(new HmacKycWebhookVerifier(SECRET, makeCache()).verify(BODY, {
+            'x-kyc-signature': sign('tampered'),
+        })).resolves.toBe(false);
+        await expect(new HmacKycWebhookVerifier(SECRET, makeCache()).verify(BODY, {})).resolves.toBe(false);
+        await expect(new HmacKycWebhookVerifier(undefined, makeCache()).verify(BODY, {
+            'x-kyc-signature': sign(BODY),
+        })).resolves.toBe(false);
+    });
+});
+describe('HmacKycWebhookVerifier replay protection', () => {
+    it('rejects a second delivery carrying the same valid signature (a captured payload replayed later)', async () => {
+        const cache = makeCache();
+        const v = new HmacKycWebhookVerifier(SECRET, cache);
+        const headers = { 'x-kyc-signature': sign(BODY) };
+        await expect(v.verify(BODY, headers)).resolves.toBe(true);
+        // Same verifier instance, same signature, later call - the exact "captured and
+        // resent" attack this control exists for.
+        await expect(v.verify(BODY, headers)).resolves.toBe(false);
+    });
+    it('does not cross-contaminate replay state between different signatures', async () => {
+        const cache = makeCache();
+        const v = new HmacKycWebhookVerifier(SECRET, cache);
+        const otherBody = '{"event":"other-decision"}';
+        await expect(v.verify(BODY, { 'x-kyc-signature': sign(BODY) })).resolves.toBe(true);
+        await expect(v.verify(otherBody, { 'x-kyc-signature': sign(otherBody) })).resolves.toBe(true);
+    });
+    it('degrades open (accepts) when the replay-check cache is unavailable, rather than blocking every webhook', async () => {
+        const v = new HmacKycWebhookVerifier(SECRET, unavailableCache());
+        await expect(v.verify(BODY, { 'x-kyc-signature': sign(BODY) })).resolves.toBe(true);
+    });
+});
+//# sourceMappingURL=hmac-kyc-webhook-verifier.int.test.js.map

package/dist/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac-kyc-webhook-verifier.int.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/hmac-kyc-webhook-verifier.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE9E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAkB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAElF,IAAI,KAAgB,CAAC;AAErB,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,KAAK,CAAC;AACrB,MAAM,IAAI,GAAG,sBAAsB,CAAC;AAEpC,SAAS,IAAI,CAAC,IAAY,EAAE,MAAM,GAAG,MAAM;IACzC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,WAAW,EAAE,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEpF,MAAM,YAAY,GAAG,wBAAwB,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,CACV,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,iBAAiB,EAAE,UAAU,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAC/E,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,MAAM,CACV,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC3D,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC;SACpC,CAAC,CACH,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,IAAI,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAC1F,KAAK,CACN,CAAC;QACF,MAAM,MAAM,CACV,IAAI,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9D,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC;SAC9B,CAAC,CACH,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAElD,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,+EAA+E;QAC/E,0CAA0C;QAC1C,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,4BAA4B,CAAC;QAE/C,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,MAAM,CAAC,GAAG,IAAI,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/kyc-admin.router.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=kyc-admin.router.int.test.d.ts.map

package/dist/compliance/__tests__/kyc-admin.router.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kyc-admin.router.int.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/kyc-admin.router.int.test.ts"],"names":[],"mappings":""}

package/dist/compliance/__tests__/kyc-admin.router.int.test.js

@@ -0,0 +1,192 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { call, ORPCError } from '@orpc/server';
+import { queue, } from '@openora/core/contracts';
+import { createTestDb, InProcessRealtimeTransport } from '@openora/core/testing';
+import { player } from '@openora/core/pam/schema/profile';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { makeIdentityReader, mock, makeEventBus, makeAuditWriter, NO_CLIENT_META, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { kycVerification } from '../schema/index.js';
+import { createComplianceRouter } from '../router/index.js';
+import { KycVerificationService } from '../service/kyc.service.js';
+const CTX = {
+    request: { headers: {} },
+    clientMeta: NO_CLIENT_META,
+};
+const ADMIN = '33333333-3333-4333-8333-333333333333';
+let db;
+beforeAll(async () => {
+    db = await createTestDb([migrateProfile, migrate]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${kycVerification}, ${player} RESTART IDENTITY CASCADE`);
+});
+function fakeGuard(allowed) {
+    return mock({
+        assert: vi.fn(async (_ctx, resource, action) => {
+            if (resource && action && !allowed.includes(`${resource}:${action}`)) {
+                throw new ORPCError('FORBIDDEN', { message: `Missing permission: ${resource}:${action}` });
+            }
+            return { userId: ADMIN, role: 'admin' };
+        }),
+    });
+}
+function build(guard) {
+    const events = makeEventBus();
+    const statusWriter = mock({ setStatus: vi.fn(async () => undefined) });
+    const kyc = new KycVerificationService({
+        drizzle: db.drizzle,
+        events,
+        kycAdapter: mock({}),
+        statusWriter,
+        identityReader: makeIdentityReader(),
+    });
+    const audit = makeAuditWriter();
+    const router = createComplianceRouter({
+        compliance: mock({}),
+        adminGuard: guard,
+        audit,
+        kyc,
+        kycAdapter: mock({}),
+        webhookVerifier: mock({}),
+        jobQueue: mock({}),
+        kycDecisionSyncQueue: queue('kyc-decision-sync'),
+        realtime: new InProcessRealtimeTransport(),
+        rg: mock({}),
+        rgMonitoring: mock({}),
+    });
+    return { router, audit, statusWriter, events };
+}
+async function seedPlayer(overrides = {}) {
+    const [row] = await db.drizzle.db
+        .insert(player)
+        .values({
+        userId: randomUUID(),
+        currency: 'USD',
+        kycStatus: 'pending',
+        ...overrides,
+    })
+        .returning();
+    return row;
+}
+async function verificationsOf(userId) {
+    return db.drizzle.db.select().from(kycVerification).where(eq(kycVerification.userId, userId));
+}
+describe('compliance admin KYC router authz (real PG)', () => {
+    it('requestKycResubmission requires compliance:override-limit and writes no history row', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard([]));
+        await expect(call(router.requestKycResubmission, { userId: seeded.userId, reason: 'blurry docs' }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+        expect(await verificationsOf(seeded.userId)).toHaveLength(0);
+    });
+    it('overrideKycStatus requires compliance:override-limit', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard([]));
+        await expect(call(router.overrideKycStatus, { userId: seeded.userId, status: 'approved', reason: 'manual review' }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+        expect(await verificationsOf(seeded.userId)).toHaveLength(0);
+    });
+    it('bulkApproveKyc requires compliance:override-limit', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard([]));
+        await expect(call(router.bulkApproveKyc, { userIds: [seeded.userId], reason: 'sweep' }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+        expect(await verificationsOf(seeded.userId)).toHaveLength(0);
+    });
+});
+describe('compliance admin KYC router input validation (real PG)', () => {
+    it('rejects a whitespace-only reason on requestKycResubmission before the handler runs', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard(['compliance:override-limit']));
+        await expect(call(router.requestKycResubmission, { userId: seeded.userId, reason: '   ' }, { context: CTX })).rejects.toThrow();
+        expect(await verificationsOf(seeded.userId)).toHaveLength(0);
+    });
+    it('rejects an empty reason on overrideKycStatus', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard(['compliance:override-limit']));
+        await expect(call(router.overrideKycStatus, { userId: seeded.userId, status: 'rejected', reason: '' }, { context: CTX })).rejects.toThrow();
+    });
+    it('rejects an empty reason on bulkApproveKyc', async () => {
+        const seeded = await seedPlayer();
+        const { router } = build(fakeGuard(['compliance:override-limit']));
+        await expect(call(router.bulkApproveKyc, { userIds: [seeded.userId], reason: '' }, { context: CTX })).rejects.toThrow();
+    });
+    it('rejects a batch over the size cap', async () => {
+        const { router } = build(fakeGuard(['compliance:override-limit']));
+        const userIds = Array.from({ length: 101 }, () => randomUUID());
+        await expect(call(router.bulkApproveKyc, { userIds, reason: 'sweep' }, { context: CTX })).rejects.toThrow();
+    });
+});
+describe('compliance admin KYC router effects (real PG)', () => {
+    it('requestKycResubmission appends a manual history row and drives the status writer', async () => {
+        const seeded = await seedPlayer();
+        const { router, statusWriter } = build(fakeGuard(['compliance:override-limit']));
+        await call(router.requestKycResubmission, { userId: seeded.userId, reason: 'blurry docs' }, { context: CTX });
+        const rows = await verificationsOf(seeded.userId);
+        expect(rows).toHaveLength(1);
+        expect(rows[0]).toMatchObject({
+            status: 'resubmission_requested',
+            triggeredBy: 'manual',
+            provider: 'manual',
+            decisionReason: 'blurry docs',
+        });
+        expect(statusWriter.setStatus).toHaveBeenCalledWith(seeded.userId, 'resubmission_requested', expect.objectContaining({ actorId: ADMIN, source: 'manual', reason: 'blurry docs' }), expect.anything());
+    });
+    it('overrideKycStatus writes an approved choice as manually_overridden', async () => {
+        const seeded = await seedPlayer();
+        const { router, statusWriter } = build(fakeGuard(['compliance:override-limit']));
+        await call(router.overrideKycStatus, { userId: seeded.userId, status: 'approved', reason: 'manual review' }, { context: CTX });
+        const rows = await verificationsOf(seeded.userId);
+        expect(rows).toHaveLength(1);
+        expect(rows[0]?.status).toBe('manually_overridden');
+        expect(statusWriter.setStatus).toHaveBeenCalledWith(seeded.userId, 'manually_overridden', expect.objectContaining({ actorId: ADMIN, source: 'manual' }), expect.anything());
+    });
+    it('is idempotent on a repeat override that resolves to the current status', async () => {
+        const seeded = await seedPlayer();
+        const { router, statusWriter } = build(fakeGuard(['compliance:override-limit']));
+        const input = { userId: seeded.userId, status: 'approved', reason: 'manual review' };
+        await call(router.overrideKycStatus, input, { context: CTX });
+        await db.drizzle.db
+            .update(player)
+            .set({ kycStatus: 'manually_overridden' })
+            .where(eq(player.userId, seeded.userId));
+        vi.mocked(statusWriter.setStatus).mockClear();
+        await call(router.overrideKycStatus, input, { context: CTX });
+        expect(await verificationsOf(seeded.userId)).toHaveLength(1);
+        expect(statusWriter.setStatus).not.toHaveBeenCalled();
+    });
+    it('bulkApproveKyc reports per-item results and leaves history only for the real player', async () => {
+        const seeded = await seedPlayer();
+        const missing = randomUUID();
+        const { router } = build(fakeGuard(['compliance:override-limit']));
+        const result = await call(router.bulkApproveKyc, { userIds: [seeded.userId, missing], reason: 'sweep' }, { context: CTX });
+        expect(result.results).toEqual(expect.arrayContaining([
+            { userId: seeded.userId, success: true, error: null },
+            { userId: missing, success: false, error: expect.any(String) },
+        ]));
+        expect(await verificationsOf(seeded.userId)).toHaveLength(1);
+        expect(await verificationsOf(missing)).toHaveLength(0);
+    });
+    it('audits the whole attempted bulk-approve batch, including the failed item', async () => {
+        const seeded = await seedPlayer();
+        const missing = randomUUID();
+        const { router, audit } = build(fakeGuard(['compliance:override-limit']));
+        await call(router.bulkApproveKyc, { userIds: [seeded.userId, missing], reason: 'sweep' }, { context: CTX });
+        expect(audit.record).toHaveBeenCalledWith(expect.objectContaining({
+            actorId: ADMIN,
+            actorType: 'admin',
+            action: 'compliance.kyc.bulk_approve',
+            after: expect.objectContaining({
+                reason: 'sweep',
+                results: expect.arrayContaining([
+                    { userId: seeded.userId, success: true, error: null },
+                    { userId: missing, success: false, error: expect.any(String) },
+                ]),
+            }),
+        }));
+    });
+});
+//# sourceMappingURL=kyc-admin.router.int.test.js.map

package/dist/compliance/__tests__/kyc-admin.router.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kyc-admin.router.int.test.js","sourceRoot":"","sources":["../../../src/compliance/__tests__/kyc-admin.router.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,KAAK,GAKN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAe,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,kBAAkB,EAClB,IAAI,EACJ,YAAY,EACZ,eAAe,EACf,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAKnE,MAAM,GAAG,GAAG;IACV,OAAO,EAAE,EAAE,OAAO,EAAE,EAAmD,EAAE;IACzE,UAAU,EAAE,cAAc;CAC3B,CAAC;AACF,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAErD,IAAI,EAAU,CAAC;AAEf,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA,YAAY,eAAe,KAAK,MAAM,2BAA2B,CAAC,CAAC;AACpG,CAAC,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,OAA6C;IAC9D,OAAO,IAAI,CAAa;QACtB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAE,MAAe,EAAE,EAAE;YACxE,IAAI,QAAQ,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,uBAAuB,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAkB,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC;QACrC,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM;QACN,UAAU,EAAE,IAAI,CAAa,EAAE,CAAC;QAChC,YAAY;QACZ,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,UAAU,EAAE,IAAI,CAAoB,EAAE,CAAC;QACvC,UAAU,EAAE,KAAK;QACjB,KAAK;QACL,GAAG;QACH,UAAU,EAAE,IAAI,CAAa,EAAE,CAAC;QAChC,eAAe,EAAE,IAAI,CAAqB,EAAE,CAAC;QAC7C,QAAQ,EAAE,IAAI,CAAkB,EAAE,CAAC;QACnC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAChD,QAAQ,EAAE,IAAI,0BAA0B,EAAE;QAC1C,EAAE,EAAE,IAAI,CAAY,EAAE,CAAC;QACvB,YAAY,EAAE,IAAI,CAAsB,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,YAAiD,EAAE;IAC3E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC;QACN,MAAM,EAAE,UAAU,EAAE;QACpB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,SAAS;QACpB,GAAG,SAAS;KACb,CAAC;SACD,SAAS,EAAE,CAAC;IACf,OAAO,GAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,sBAAsB,EAC7B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAChD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,iBAAiB,EACxB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,EACtE,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAC7F,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,sBAAsB,EAC7B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EACxC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,CACV,IAAI,CACF,MAAM,CAAC,iBAAiB,EACxB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,EACzD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CACxF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QAEhE,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAC5E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEjF,MAAM,IAAI,CACR,MAAM,CAAC,sBAAsB,EAC7B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,EAChD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5B,MAAM,EAAE,wBAAwB;YAChC,WAAW,EAAE,QAAQ;YACrB,QAAQ,EAAE,QAAQ;YAClB,cAAc,EAAE,aAAa;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACjD,MAAM,CAAC,MAAM,EACb,wBAAwB,EACxB,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EACpF,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEjF,MAAM,IAAI,CACR,MAAM,CAAC,iBAAiB,EACxB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,EACtE,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,oBAAoB,CACjD,MAAM,CAAC,MAAM,EACb,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAC7D,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAmB,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAE9F,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;aAChB,MAAM,CAAC,MAAM,CAAC;aACd,GAAG,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;aACzC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,CAAC;QAE9C,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,MAAM,CAAC,cAAc,EACrB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EACtD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAC5B,MAAM,CAAC,eAAe,CAAC;YACrB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;YACrD,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SAC/D,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAE1E,MAAM,IAAI,CACR,MAAM,CAAC,cAAc,EACrB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EACtD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACvC,MAAM,CAAC,gBAAgB,CAAC;YACtB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,OAAO;YAClB,MAAM,EAAE,6BAA6B;YACrC,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC7B,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC;oBAC9B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;oBACrD,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;iBAC/D,CAAC;aACH,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/compliance/__tests__/kyc-webhook.router.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=kyc-webhook.router.int.test.d.ts.map

package/dist/compliance/__tests__/kyc-webhook.router.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kyc-webhook.router.int.test.d.ts","sourceRoot":"","sources":["../../../src/compliance/__tests__/kyc-webhook.router.int.test.ts"],"names":[],"mappings":""}