@openora/core 0.4.1-canary.11 → 0.4.1-canary.111

package/dist/compliance/schema/index.d.ts

@@ -1,4 +1,5 @@
-export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
+import { type KycRiskSignals } from '@openora/core/contracts';
+export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
 export declare const kycTriggeredBy: import("drizzle-orm/pg-core").PgEnum<["submission", "reverify_threshold", "manual"]>;
 export declare const rgExclusionKind: import("drizzle-orm/pg-core").PgEnum<["cooling_off", "self_exclusion"]>;
 export declare const rgExclusionStatus: import("drizzle-orm/pg-core").PgEnum<["active", "lifted", "expired"]>;
@@ -299,14 +300,14 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             tableName: "kyc_verification";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+            data: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"];
+            enumValues: ["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -347,6 +348,50 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        riskSignals: import("drizzle-orm/pg-core").PgColumn<{
+            name: "riskSignals";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: KycRiskSignals;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: KycRiskSignals;
+        }>;
+        checks: import("drizzle-orm/pg-core").PgColumn<{
+            name: "checks";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+        }>;
         triggeredBy: import("drizzle-orm/pg-core").PgColumn<{
             name: "triggeredBy";
             tableName: "kyc_verification";
@@ -381,6 +426,23 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        decisionReceivedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "decisionReceivedAt";
+            tableName: "kyc_verification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         submittedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "submittedAt";
             tableName: "kyc_verification";
@@ -512,7 +574,7 @@ export declare const rgExclusion: import("drizzle-orm/pg-core").PgTableWithColum
             tableName: "rg_exclusion";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "active" | "lifted" | "expired";
+            data: "expired" | "active" | "lifted";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/compliance/schema/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,qBAAqB,2IAAkD,CAAC;AACrF,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AAEvE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AAcA,OAAO,EASL,KAAK,cAAc,EAEpB,MAAM,yBAAyB,CAAC;AAIjC,eAAO,MAAM,qBAAqB,uJAAkD,CAAC;AACrF,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AAEvE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkC3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}

package/dist/compliance/schema/index.js

@@ -40,10 +40,18 @@ export const kycVerification = pgTable('kyc_verification', {
     status: kycVerificationStatus().notNull(),
     documentTypes: jsonb().$type().notNull().default([]),
     decisionReason: text(),
+    riskSignals: jsonb().$type(),
+    checks: jsonb().$type(),
     triggeredBy: kycTriggeredBy().notNull(),
     // High-water mark of deposits at the last reverify_threshold fire, so re-KYC triggers
     // once per fresh threshold band rather than on every deposit.
     triggerDeposits: decimal({ precision: 18, scale: 2 }),
+    // The wall-clock time THIS decision was received (webhook arrival / submit time),
+    // never job-processing time - a job/webhook retry or out-of-order worker execution
+    // must not reorder this. `reconcile` refuses to apply an incoming decision older
+    // than this watermark, closing the window where two vendor decisions (eg
+    // approved then rejected) interleave out of order and leave the wrong one applied.
+    decisionReceivedAt: timestamp({ withTimezone: true }),
     submittedAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
     decidedAt: timestamp({ withTimezone: true }),
     createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
@@ -52,7 +60,7 @@ export const kycVerification = pgTable('kyc_verification', {
         .$onUpdateFn(() => new Date()),
 }, (t) => [
     index('kyc_verification_user_id_created_at_idx').on(t.userId, t.createdAt),
-    index('kyc_verification_reference_id_idx').on(t.referenceId),
+    uniqueIndex('kyc_verification_reference_id_key').on(t.referenceId),
     index('kyc_verification_status_idx').on(t.status),
 ]);
 // Cooling-off + self-exclusion. The partial-unique on (userId, kind) WHERE active

package/dist/compliance/schema/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,GACN,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAsB,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAG5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAC9B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1C,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE;IAClB,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAChF,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE;IACzC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC;IACpE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAChD,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CACpC,kBAAkB,EAClB;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC1B,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC7B,MAAM,EAAE,qBAAqB,EAAE,CAAC,OAAO,EAAE;IACzC,aAAa,EAAE,KAAK,EAAE,CAAC,KAAK,EAAyC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3F,cAAc,EAAE,IAAI,EAAE;IACtB,WAAW,EAAE,cAAc,EAAE,CAAC,OAAO,EAAE;IACvC,sFAAsF;IACtF,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrD,WAAW,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IAC1E,KAAK,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5D,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;CAClD,CACF,CAAC;AAEF,kFAAkF;AAClF,mFAAmF;AACnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAChC,cAAc,EACd;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,eAAe,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,iBAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvD,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,WAAW,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,QAAQ,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAClE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,QAAQ,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3C,YAAY,EAAE,IAAI,EAAE;IACpB,QAAQ,EAAE,IAAI,EAAE;IAChB,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC3B,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/D,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,WAAW,CAAC,8BAA8B,CAAC;SACxC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC;CACtC,CACF,CAAC;AAEF,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,OAAO,CAC3B,SAAS,EACT;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,EAAE;IACjB,mFAAmF;IACnF,mFAAmF;IACnF,MAAM,EAAE,KAAK,EAAE;SACZ,KAAK,EAAgB;SACrB,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,aAAa,CAAC;IAC5B,MAAM,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAClD,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC7C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IAChE,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,OAAO,EACP,OAAO,EACP,OAAO,EACP,KAAK,EACL,SAAS,EACT,WAAW,EACX,KAAK,GACN,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,cAAc,GAGf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAsB,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAG5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAC9B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1C,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAO,EAAE;IAClB,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,WAAW,CAAC,oCAAoC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAChF,KAAK,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;CAC7C,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE;IACzC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,8BAA8B,CAAC;IACpE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAChD,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CACpC,kBAAkB,EAClB;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC1B,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC7B,MAAM,EAAE,qBAAqB,EAAE,CAAC,OAAO,EAAE;IACzC,aAAa,EAAE,KAAK,EAAE,CAAC,KAAK,EAAyC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3F,cAAc,EAAE,IAAI,EAAE;IACtB,WAAW,EAAE,KAAK,EAAE,CAAC,KAAK,EAAkB;IAC5C,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,EAAoB;IACzC,WAAW,EAAE,cAAc,EAAE,CAAC,OAAO,EAAE;IACvC,sFAAsF;IACtF,8DAA8D;IAC9D,eAAe,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrD,kFAAkF;IAClF,mFAAmF;IACnF,iFAAiF;IACjF,yEAAyE;IACzE,mFAAmF;IACnF,kBAAkB,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACrD,WAAW,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACrE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,yCAAyC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IAC1E,WAAW,CAAC,mCAAmC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAClE,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;CAClD,CACF,CAAC;AAEF,kFAAkF;AAClF,mFAAmF;AACnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAChC,cAAc,EACd;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,eAAe,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,iBAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvD,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,WAAW,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,QAAQ,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IAClE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,QAAQ,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3C,YAAY,EAAE,IAAI,EAAE;IACpB,QAAQ,EAAE,IAAI,EAAE;IAChB,SAAS,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC3B,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;CACjC,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,iCAAiC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/D,KAAK,CAAC,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1D,WAAW,CAAC,8BAA8B,CAAC;SACxC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;SACpB,KAAK,CAAC,GAAG,CAAA,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC;CACtC,CACF,CAAC;AAEF,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,MAAM,GAAG,OAAO,CAC3B,SAAS,EACT;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IACxB,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,IAAI,EAAE;IACjB,mFAAmF;IACnF,mFAAmF;IACnF,MAAM,EAAE,KAAK,EAAE;SACZ,KAAK,EAAgB;SACrB,OAAO,EAAE;SACT,OAAO,CAAC,GAAG,CAAA,aAAa,CAAC;IAC5B,MAAM,EAAE,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IAClD,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC7C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC;IAChE,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;CAC9C,CACF,CAAC"}

package/dist/compliance/service/compliance.service.d.ts

@@ -1,6 +1,6 @@
 import { DrizzleService, type EventBus } from '@openora/core/server';
 import type { UpsertLimitInput, AddGeoRuleInput } from '../contract/index.js';
-import { type GeoIpAdapter, type User } from '@openora/core/contracts';
+import type { ClientMeta, GeoIpAdapter, IdentityReader, User } from '@openora/core/contracts';
 export declare const LimitNotFoundError: new (id: string) => Error;
 export declare const LimitOwnershipError: new () => Error;
 export declare const GeoRuleNotFoundError: new (id: string) => Error;
@@ -8,7 +8,8 @@ export declare class ComplianceService {
     private readonly drizzle;
     private readonly events;
     private readonly geoIp;
-    constructor(drizzle: DrizzleService, events: EventBus, geoIp?: GeoIpAdapter | null);
+    private readonly identityReader;
+    constructor(drizzle: DrizzleService, events: EventBus, geoIp: GeoIpAdapter | null, identityReader: IdentityReader);
     getLimitsForUser(userId: User['id']): Promise<import("@openora/core/server").SerializedRow<{
         id: string;
         userId: string;
@@ -19,7 +20,7 @@ export declare class ComplianceService {
         createdAt: Date;
         updatedAt: Date;
     }, "createdAt">[]>;
-    upsertLimit(userId: User['id'], input: UpsertLimitInput): Promise<import("@openora/core/server").SerializedRow<{
+    upsertLimit(userId: User['id'], input: UpsertLimitInput, meta?: ClientMeta): Promise<import("@openora/core/server").SerializedRow<{
         id: string;
         userId: string;
         type: "deposit" | "wager" | "loss" | "session";
@@ -29,23 +30,30 @@ export declare class ComplianceService {
         period: "session" | "daily" | "weekly" | "monthly";
         minutes: number | null;
     }, "createdAt">>;
-    removeLimit(id: string, userId: User['id']): Promise<{
+    removeLimit(id: string, userId: User['id'], meta?: ClientMeta): Promise<{
         success: true;
     }>;
-    geoCheck(ipAddress: string): Promise<{
+    geoCheck(ipAddress: string | null): Promise<{
         allowed: boolean;
         countryCode: null;
-        reason: null;
+        reason: string;
     } | {
         allowed: boolean;
-        countryCode: string;
+        countryCode: null;
         reason: null;
     } | {
         allowed: boolean;
         countryCode: string;
         reason: string;
+    } | {
+        allowed: boolean;
+        countryCode: string;
+        reason: null;
+    }>;
+    checkRegistration(ipAddress: string | null): Promise<{
+        allowed: boolean;
     }>;
-    addGeoRule(input: AddGeoRuleInput, actorId?: User['id']): Promise<import("@openora/core/server").SerializedRow<{
+    addGeoRule(input: AddGeoRuleInput, actorId?: User['id'], meta?: ClientMeta): Promise<import("@openora/core/server").SerializedRow<{
         id: string;
         createdAt: Date;
         action: "allow" | "block";

package/dist/compliance/service/compliance.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compliance.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/compliance.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAEd,KAAK,QAAQ,EAKd,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAEvE,eAAO,MAAM,kBAAkB,2BAA6B,CAAC;AAE7D,eAAO,MAAM,mBAAmB,iBAA8B,CAAC;AAE/D,eAAO,MAAM,oBAAoB,2BAA+B,CAAC;AAEjE,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAFL,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,QAAQ,EAChB,KAAK,GAAE,YAAY,GAAG,IAAW;IAG9C,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;IAKnC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB;;;;;;;;;;IAgBvD,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IAWvE,QAAQ,CAAC,SAAS,EAAE,MAAM;;;;;;;;;;;;;IA4B1B,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;;;;;;IAoBvD,YAAY;;;;;;CAInB"}
+{"version":3,"file":"compliance.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/compliance.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAEd,KAAK,QAAQ,EAKd,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE9F,eAAO,MAAM,kBAAkB,2BAA6B,CAAC;AAE7D,eAAO,MAAM,mBAAmB,iBAA8B,CAAC;AAE/D,eAAO,MAAM,oBAAoB,2BAA+B,CAAC;AAEjE,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAHd,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,YAAY,GAAG,IAAI,EAC1B,cAAc,EAAE,cAAc;IAG3C,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;IAKnC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;;;;;IAsB1E,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;IAiB1F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;IA2BjC,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;;;IAK1C,UAAU,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;IAsB1E,YAAY;;;;;;CAInB"}

package/dist/compliance/service/compliance.service.js

@@ -8,16 +8,18 @@ export class ComplianceService {
     drizzle;
     events;
     geoIp;
-    constructor(drizzle, events, geoIp = null) {
+    identityReader;
+    constructor(drizzle, events, geoIp, identityReader) {
         this.drizzle = drizzle;
         this.events = events;
         this.geoIp = geoIp;
+        this.identityReader = identityReader;
     }
     async getLimitsForUser(userId) {
         const rows = await this.drizzle.db.select().from(userLimit).where(eq(userLimit.userId, userId));
         return rows.map((r) => serializeRow(r, { dateFields: ['createdAt'] }));
     }
-    async upsertLimit(userId, input) {
+    async upsertLimit(userId, input, meta) {
         const row = findOneOrThrow(await this.drizzle.db
             .insert(userLimit)
             .values({ ...input, userId })
@@ -26,38 +28,54 @@ export class ComplianceService {
             set: { amount: input.amount, minutes: input.minutes },
         })
             .returning(), new LimitNotFoundError(userId));
-        this.events.emit('compliance.limit.upserted', { userId, limitId: row.id });
+        this.events.emit('compliance.limit.upserted', {
+            userId,
+            playerId: await this.identityReader.getPlayerIdByUserIdSafe(userId),
+            limitId: row.id,
+            ip: meta?.ip ?? null,
+            userAgent: meta?.userAgent ?? null,
+        });
         return serializeRow(row, { dateFields: ['createdAt'] });
     }
-    async removeLimit(id, userId) {
+    async removeLimit(id, userId, meta) {
         const existing = findOneOrThrow(await this.drizzle.db.select().from(userLimit).where(eq(userLimit.id, id)), new LimitNotFoundError(id));
         assertOwnership(existing.userId, userId, new LimitOwnershipError());
         await this.drizzle.db.delete(userLimit).where(eq(userLimit.id, id));
-        this.events.emit('compliance.limit.removed', { userId, limitId: id });
+        this.events.emit('compliance.limit.removed', {
+            userId,
+            playerId: await this.identityReader.getPlayerIdByUserIdSafe(userId),
+            limitId: id,
+            ip: meta?.ip ?? null,
+            userAgent: meta?.userAgent ?? null,
+        });
         return { success: true };
     }
     async geoCheck(ipAddress) {
-        let countryCode = null;
-        if (this.geoIp) {
-            const result = await this.geoIp.lookup(ipAddress);
-            countryCode = result.countryCode;
-        }
+        const countryCode = this.geoIp && ipAddress ? (await this.geoIp.lookup(ipAddress)).countryCode : null;
         if (!countryCode) {
-            return { allowed: true, countryCode: null, reason: null };
+            // With rules configured, an unresolvable address is a gap in the gate, not a pass.
+            const [anyRule] = await this.drizzle.db
+                .select({ action: geoRule.action })
+                .from(geoRule)
+                .limit(1);
+            return anyRule
+                ? { allowed: false, countryCode: null, reason: 'Geolocation could not be determined' }
+                : { allowed: true, countryCode: null, reason: null };
         }
         const [rule] = await this.drizzle.db
             .select({ action: geoRule.action })
             .from(geoRule)
             .where(eq(geoRule.countryCode, countryCode));
-        if (!rule) {
-            return { allowed: true, countryCode, reason: null };
-        }
-        if (rule.action === 'block') {
+        if (rule?.action === 'block') {
             return { allowed: false, countryCode, reason: `Country ${countryCode} is blocked` };
         }
         return { allowed: true, countryCode, reason: null };
     }
-    async addGeoRule(input, actorId) {
+    async checkRegistration(ipAddress) {
+        const result = await this.geoCheck(ipAddress);
+        return { allowed: result.allowed };
+    }
+    async addGeoRule(input, actorId, meta) {
         const row = findOneOrThrow(await this.drizzle.db
             .insert(geoRule)
             .values({ ...input })
@@ -70,6 +88,8 @@ export class ComplianceService {
             countryCode: input.countryCode,
             action: input.action,
             actorId,
+            ip: meta?.ip ?? null,
+            userAgent: meta?.userAgent ?? null,
         });
         return serializeRow(row, { dateFields: ['createdAt'] });
     }

package/dist/compliance/service/compliance.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"compliance.service.js","sourceRoot":"","sources":["../../../src/compliance/service/compliance.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAIxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAEjE,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IAHnB,YACmB,OAAuB,EACvB,MAAgB,EAChB,QAA6B,IAAI;QAFjC,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;QAChB,UAAK,GAAL,KAAK,CAA4B;IACjD,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,MAAkB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAkB,EAAE,KAAuB;QAC3D,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClB,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;aAC5B,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC;YAC5D,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SACtD,CAAC;aACD,SAAS,EAAE,EACd,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAC/B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAkB;QAC9C,MAAM,QAAQ,GAAG,cAAc,CAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAC1E,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAC3B,CAAC;QACF,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAC9B,IAAI,WAAW,GAAkB,IAAI,CAAC;QAEtC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5D,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACjC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aAClC,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,WAAW,aAAa,EAAE,CAAC;QACtF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB,EAAE,OAAoB;QAC3D,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;aACpB,kBAAkB,CAAC;YAClB,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;SAC9B,CAAC;aACD,SAAS,EAAE,EACd,IAAI,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;SACR,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;CACF"}
+{"version":3,"file":"compliance.service.js","sourceRoot":"","sources":["../../../src/compliance/service/compliance.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAIxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;AAEjE,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IACA;IAJnB,YACmB,OAAuB,EACvB,MAAgB,EAChB,KAA0B,EAC1B,cAA8B;QAH9B,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;QAChB,UAAK,GAAL,KAAK,CAAqB;QAC1B,mBAAc,GAAd,cAAc,CAAgB;IAC9C,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,MAAkB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAkB,EAAE,KAAuB,EAAE,IAAiB;QAC9E,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClB,MAAM,CAAC,SAAS,CAAC;aACjB,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;aAC5B,kBAAkB,CAAC;YAClB,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC;YAC5D,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SACtD,CAAC;aACD,SAAS,EAAE,EACd,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAC/B,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC5C,MAAM;YACN,QAAQ,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,MAAM,CAAC;YACnE,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;YACpB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,MAAkB,EAAE,IAAiB;QACjE,MAAM,QAAQ,GAAG,cAAc,CAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAC1E,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAC3B,CAAC;QACF,eAAe,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,mBAAmB,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YAC3C,MAAM;YACN,QAAQ,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC,MAAM,CAAC;YACnE,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;YACpB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAwB;QACrC,MAAM,WAAW,GACf,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,mFAAmF;YACnF,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBACpC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBAClC,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,qCAAqC,EAAE;gBACtF,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACjC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aAClC,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAE/C,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,WAAW,aAAa,EAAE,CAAC;QACtF,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAwB;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB,EAAE,OAAoB,EAAE,IAAiB;QAC9E,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAClB,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;aACpB,kBAAkB,CAAC;YAClB,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;SAC9B,CAAC;aACD,SAAS,EAAE,EACd,IAAI,oBAAoB,CAAC,KAAK,CAAC,WAAW,CAAC,CAC5C,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;YAC5C,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO;YACP,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;YACpB,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/compliance/service/kyc.service.d.ts

@@ -1,7 +1,8 @@
 import { DrizzleService, type EventBus } from '@openora/core/server';
-import type { KycAdapter, KycStatusWriter, KycVendorStatus, PlatformConfig, User } from '@openora/core/contracts';
-import type { SubmitKycInput, PlayerKycView } from '../contract/index.js';
+import { type KycAdapter, type KycCheckResult, type KycDocument, type KycRiskSignals, type KycStatusWriter, type KycVendorStatus, type PlatformConfig, type IdentityReader, type User, ClientMeta } from '@openora/core/contracts';
+import type { SubmitKycInput, PlayerKycView, KycOverrideStatus, BulkApproveKycResult } from '../contract/index.js';
 import { type ReKycTrigger } from './re-kyc-trigger.js';
+export declare const PlayerNotFoundError: new (id: string) => Error;
 export declare const KycVerificationNotFoundError: new (id: string) => Error;
 /**
  * Owns the append-only `kyc_verification` history and the submit/reconcile/re-KYC
@@ -13,6 +14,7 @@ export type KycVerificationDeps = {
     events: EventBus;
     kycAdapter: KycAdapter;
     statusWriter: KycStatusWriter;
+    identityReader: IdentityReader;
     platformConfig?: PlatformConfig;
     reKycTrigger?: ReKycTrigger;
 };
@@ -21,14 +23,71 @@ export declare class KycVerificationService {
     private readonly events;
     private readonly kycAdapter;
     private readonly statusWriter;
+    private readonly identityReader;
     private readonly platformConfig?;
     private readonly reKycTrigger;
     constructor(deps: KycVerificationDeps);
     private get provider();
-    submit(userId: User['id'], input: SubmitKycInput): Promise<import("@openora/core/server").SerializedRow<{
-        status: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+    submit(userId: User['id'], input: SubmitKycInput, meta?: ClientMeta): Promise<{
+        verificationUrl: string | undefined;
+        status: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
         id: string;
         userId: string;
+        checks: {
+            step: string;
+            status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+        }[] | null;
+        provider: string;
+        referenceId: string;
+        triggeredBy: "manual" | "submission" | "reverify_threshold";
+        documentTypes: ("passport" | "drivers_license" | "national_id")[];
+        decisionReason: string | null;
+        riskSignals: KycRiskSignals | null;
+        triggerDeposits: string | null;
+        decisionReceivedAt: Date | null;
+        createdAt: string;
+        updatedAt: string;
+        submittedAt: string;
+        decidedAt: string;
+    }>;
+    /**
+     * Idempotent vendor-decision apply (polling + webhook). No-op when the latest record
+     * already holds the mapped status. `reason`/`documentTypes`/`riskSignals` are only
+     * overwritten when the caller supplies them, and `decidedAt` is stamped only on an
+     * actual decision, so a bare status reconcile never blanks out an earlier one. Emits
+     * `compliance.kyc.high_risk_signal_detected` when the supplied `riskSignals` (never a
+     * preserved prior value) trip `warrantsHighRiskTag`.
+     *
+     * `opts.receivedAt` (when the caller has it - the `kyc-decision-sync` job path always
+     * does, stamped at webhook-arrival time in the router, BEFORE the job queue can
+     * reorder anything) is a monotonicity guard: a decision older than the one already on
+     * file for this referenceId is refused, not applied. The job queue does not honour
+     * `orderingKey` (see bullmq-job-queue.ts), so two decisions for the same reference can
+     * reach here out of arrival order after a retry; without this guard the LATER-arriving
+     * (but actually OLDER) decision would win and silently overwrite a newer, correct one.
+     * A caller with no `receivedAt` (eg a direct `reconcile` call with no job path behind
+     * it) skips the guard entirely - always applies, exactly as before.
+     *
+     * A vendor `approved` is downgraded to `resubmission_requested` when the checks this
+     * call is about to persist (`opts.checks`, falling back to the existing row's `checks`
+     * when the caller supplies none - the SAME value written below, so the gate can never
+     * evaluate a different set of checks than the one that ends up on the row) contain any
+     * non-`approved` entry.
+     */
+    reconcile(referenceId: string, vendorStatus: KycVendorStatus, opts?: {
+        reason?: string;
+        documentTypes?: KycDocument['type'][];
+        riskSignals?: KycRiskSignals;
+        checks?: KycCheckResult[];
+        receivedAt?: Date;
+    }): Promise<import("@openora/core/server").SerializedRow<{
+        status: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+        id: string;
+        userId: string;
+        checks: {
+            step: string;
+            status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+        }[] | null;
         createdAt: Date;
         updatedAt: Date;
         provider: string;
@@ -37,17 +96,30 @@ export declare class KycVerificationService {
         submittedAt: Date;
         documentTypes: ("passport" | "drivers_license" | "national_id")[];
         decisionReason: string | null;
+        riskSignals: KycRiskSignals | null;
         decidedAt: Date | null;
         triggerDeposits: string | null;
-    }, "createdAt" | "updatedAt" | "submittedAt" | "decidedAt">>;
+        decisionReceivedAt: Date | null;
+    }, "createdAt" | "updatedAt" | "submittedAt" | "decidedAt"> | null>;
     /**
-     * Idempotent vendor-decision apply (polling + webhook). No-op when the latest record
-     * already holds the mapped status.
+     * `kyc-decision-sync` job handler, run off the webhook request path. Enriches the
+     * reconcile through `resolveDecision`/`resolveRiskSignals` when the bound adapter
+     * implements them, falling back to a status-only reconcile when it does not. Errors
+     * (notably `PlayerNotFoundError`) propagate so the job queue retries the decision.
+     * `receivedAt` is the webhook's
+     * arrival time (stamped by the router before enqueue, carried on the job payload) -
+     * passed through to `reconcile` as the monotonicity watermark so a job that runs
+     * out of arrival order (the driver ignores `orderingKey`) can't overwrite a newer
+     * decision with a stale one.
      */
-    reconcile(referenceId: string, vendorStatus: KycVendorStatus, reason?: string): Promise<import("@openora/core/server").SerializedRow<{
-        status: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+    syncDecision(referenceId: string, status: KycVendorStatus, receivedAt?: Date): Promise<import("@openora/core/server").SerializedRow<{
+        status: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
         id: string;
         userId: string;
+        checks: {
+            step: string;
+            status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+        }[] | null;
         createdAt: Date;
         updatedAt: Date;
         provider: string;
@@ -56,16 +128,89 @@ export declare class KycVerificationService {
         submittedAt: Date;
         documentTypes: ("passport" | "drivers_license" | "national_id")[];
         decisionReason: string | null;
+        riskSignals: KycRiskSignals | null;
         decidedAt: Date | null;
         triggerDeposits: string | null;
+        decisionReceivedAt: Date | null;
     }, "createdAt" | "updatedAt" | "submittedAt" | "decidedAt"> | null>;
     getForPlayer(userId: User['id']): Promise<PlayerKycView>;
     /**
-     * Deposit-event hook: flips a currently-verified player to `resubmission_requested`
+     * Deposit-event hook: flips a currently-approved player to `resubmission_requested`
      * once cumulative deposits cross a fresh per-currency threshold band. Idempotent twice
-     * over: skips unless presently `verified`, and the watermark stops a re-verified
+     * over: skips unless presently approved, and the watermark stops a re-approved
      * high-roller re-firing on every later deposit.
      */
     handleDeposit(userId: User['id']): Promise<void>;
+    /**
+     * Shared transaction body for `requestResubmission`/`overrideStatus`: inserts the
+     * manual `kyc_verification` history row and calls `KYC_STATUS_WRITER.setStatus` in
+     * the SAME transaction so the locking and idempotency rules cannot diverge between
+     * the two call sites. Caller has already run the idempotency pre-check
+     * (`requirePlayerRowForUpdate` + a status compare) before calling this.
+     */
+    private applyManualDecision;
+    /**
+     * Admin-initiated: requests the player resubmit documents. Idempotent on a repeat
+     * call while the player is already at `resubmission_requested` - no duplicate history
+     * row or `compliance.kyc.updated` emit.
+     */
+    requestResubmission(userId: User['id'], reason: string, actorId: User['id']): Promise<import("@openora/core/server").SerializedRow<{
+        status: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+        id: string;
+        userId: string;
+        checks: {
+            step: string;
+            status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+        }[] | null;
+        createdAt: Date;
+        updatedAt: Date;
+        provider: string;
+        referenceId: string;
+        triggeredBy: "manual" | "submission" | "reverify_threshold";
+        submittedAt: Date;
+        documentTypes: ("passport" | "drivers_license" | "national_id")[];
+        decisionReason: string | null;
+        riskSignals: KycRiskSignals | null;
+        decidedAt: Date | null;
+        triggerDeposits: string | null;
+        decisionReceivedAt: Date | null;
+    }, "createdAt" | "updatedAt" | "submittedAt" | "decidedAt">>;
+    /**
+     * Admin-initiated: forces the player to an operator-chosen status, guarded by the
+     * router's `compliance:override-limit`. `resolveManualStatus` remaps an `approved`
+     * choice to `manually_overridden`; every other choice is written verbatim. Idempotent
+     * on a repeat call resolving to the status the player already holds.
+     */
+    overrideStatus(userId: User['id'], status: KycOverrideStatus, reason: string, actorId: User['id']): Promise<import("@openora/core/server").SerializedRow<{
+        status: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+        id: string;
+        userId: string;
+        checks: {
+            step: string;
+            status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+        }[] | null;
+        createdAt: Date;
+        updatedAt: Date;
+        provider: string;
+        referenceId: string;
+        triggeredBy: "manual" | "submission" | "reverify_threshold";
+        submittedAt: Date;
+        documentTypes: ("passport" | "drivers_license" | "national_id")[];
+        decisionReason: string | null;
+        riskSignals: KycRiskSignals | null;
+        decidedAt: Date | null;
+        triggerDeposits: string | null;
+        decisionReceivedAt: Date | null;
+    }, "createdAt" | "updatedAt" | "submittedAt" | "decidedAt">>;
+    /**
+     * Admin-initiated: approves every listed player through the same
+     * `overrideStatus('approved', ...)` path, so a bulk approval is recorded identically
+     * to a single one. Bounded fan-out with per-player error isolation - one failure is
+     * captured as a result row rather than aborting the batch, and the returned message
+     * is a fixed string, never the raw exception text.
+     */
+    bulkApprove(userIds: User['id'][], reason: string, actorId: User['id']): Promise<BulkApproveKycResult[]>;
+    private requirePlayerRowForUpdate;
+    private latestVerificationOrThrow;
 }
 //# sourceMappingURL=kyc.service.d.ts.map

package/dist/compliance/service/kyc.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kyc.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/kyc.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAId,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,eAAe,EAEf,cAAc,EACd,IAAI,EACL,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIvF,eAAO,MAAM,4BAA4B,2BAAuC,CAAC;AAyBjF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,eAAe,CAAC;IAC9B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEF,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAiB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;gBAEhC,IAAI,EAAE,mBAAmB;IASrC,OAAO,KAAK,QAAQ,GAEnB;IAEK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc;;;;;;;;;;;;;;;IA+BtD;;;OAGG;IAEG,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;IAgC7E,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAS9D;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;CA+DvC"}
+{"version":3,"file":"kyc.service.d.ts","sourceRoot":"","sources":["../../../src/compliance/service/kyc.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EAMd,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,IAAI,EACT,UAAU,EACX,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAiC,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAYvF,eAAO,MAAM,mBAAmB,2BAA8B,CAAC;AAE/D,eAAO,MAAM,4BAA4B,2BAAuC,CAAC;AAyDjF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,QAAQ,CAAC;IACjB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,eAAe,CAAC;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B,CAAC;AAEF,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAkB;IAC/C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAiB;IACjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;gBAEhC,IAAI,EAAE,mBAAmB;IAUrC,OAAO,KAAK,QAAQ,GAEnB;IAEK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;IA4DzE;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IAEG,SAAS,CACb,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,eAAe,EAC7B,IAAI,GAAE;QACJ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,WAAW,CAAC,EAAE,cAAc,CAAC;QAC7B,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;QAC1B,UAAU,CAAC,EAAE,IAAI,CAAC;KACd;;;;;;;;;;;;;;;;;;;;;IA8ER;;;;;;;;;;OAUG;IACG,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,EAAE,IAAI;;;;;;;;;;;;;;;;;;;;;IAiB5E,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAS9D;;;;;OAKG;IACG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;IAgEtC;;;;;;OAMG;YACW,mBAAmB;IAoCjC;;;;OAIG;IACG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;IAkBjF;;;;;OAKG;IACG,cAAc,CAClB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAClB,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;IAoBrB;;;;;;OAMG;IACG,WAAW,CACf,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EACrB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAiBpB,yBAAyB;YAazB,yBAAyB;CASxC"}