@openora/core 0.4.1-canary.11 → 0.4.1-canary.111

package/dist/contracts/adapters/cache.js

@@ -1,9 +1,11 @@
-// Cache seam. Hot, non-personalized reads (public catalogue/content feeds) load
-// through this adapter so the backend is swappable: the default binding is an
-// in-process TTL cache (zero deps), process-local so invalidation does NOT
-// propagate across replicas. Set REDIS_URL to bind the shipped Redis reference
-// adapter (cross-replica invalidation) with zero consumer code; rebind CACHE via
-// an overlay for any other backend.
+/**
+ * Cache seam. Hot, non-personalized reads (public catalogue/content feeds) load
+ * through this adapter so the backend is swappable: the default binding is an
+ * in-process TTL cache (zero deps), process-local so invalidation does NOT
+ * propagate across replicas. Set REDIS_URL to bind the shipped Redis reference
+ * adapter (cross-replica invalidation) with zero consumer code; rebind CACHE via
+ * an overlay for any other backend.
+ */
 import { createToken } from './token.js';
 export const CACHE = createToken('CACHE');
 //# sourceMappingURL=cache.js.map

package/dist/contracts/adapters/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/contracts/adapters/cache.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,iFAAiF;AACjF,oCAAoC;AACpC,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAQrD,MAAM,CAAC,MAAM,KAAK,GAAwB,WAAW,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/contracts/adapters/cache.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AASrD,MAAM,CAAC,MAAM,KAAK,GAAwB,WAAW,CAAC,OAAO,CAAC,CAAC"}

package/dist/contracts/adapters/chat-block-writer.d.ts

@@ -0,0 +1,18 @@
+import { type Token } from './token.js';
+import type { Uuid } from '../schemas/common.js';
+export type ChatBlockWriter = {
+    blockUser(blockerId: Uuid, blockedId: Uuid): Promise<unknown>;
+    ignoreUser(ignorerId: Uuid, ignoredId: Uuid): Promise<unknown>;
+    /**
+     * Union of blocked + ignored ids for a viewer - chat-commands uses this to keep
+     * blocked/ignored players out of player search results.
+     */
+    getExcludedUserIds(viewerId: string): Promise<string[]>;
+    /** Active block relationships only; ignores do not prevent money transfers. */
+    getBlockedUserIds(viewerId: string): Promise<string[]>;
+    /** Checks the relationship on the caller's transaction before a money mutation. */
+    isBlocked(tx: unknown, blockerId: string, blockedId: string): Promise<boolean>;
+};
+export declare function chatBlockLockKey(blockerId: string, blockedId: string): string;
+export declare const CHAT_BLOCK_WRITER: Token<ChatBlockWriter>;
+//# sourceMappingURL=chat-block-writer.d.ts.map

package/dist/contracts/adapters/chat-block-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-block-writer.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-block-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D;;;OAGG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACxD,+EAA+E;IAC/E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,mFAAmF;IACnF,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChF,CAAC;AAGF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,eAAe,CAAoC,CAAC"}

package/dist/contracts/adapters/chat-block-writer.js

@@ -0,0 +1,7 @@
+import { createToken } from './token.js';
+// Shared by block mutations and money-transfer authorization checks.
+export function chatBlockLockKey(blockerId, blockedId) {
+    return `chat-block:${blockerId}:${blockedId}`;
+}
+export const CHAT_BLOCK_WRITER = createToken('CHAT_BLOCK_WRITER');
+//# sourceMappingURL=chat-block-writer.js.map

package/dist/contracts/adapters/chat-block-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-block-writer.js","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-block-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAiBrD,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;IACnE,OAAO,cAAc,SAAS,IAAI,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAA2B,WAAW,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/contracts/adapters/chat-moderation.d.ts

@@ -0,0 +1,75 @@
+import type { Uuid } from '../schemas/common.js';
+export type ChatModerationEntry = {
+    id: Uuid;
+    userId: Uuid;
+    roomId: Uuid | null;
+    scope: ChatModerationScope;
+    reason: string;
+    createdAt: string;
+    expiresAt: string | null;
+};
+export type ChatPlatformBan = {
+    id: Uuid;
+    userId: Uuid;
+    reason: string;
+    createdAt: string;
+    liftedAt: string | null;
+    bannedUntil: string | null;
+    roomId: Uuid | null;
+    scope: ChatModerationScope;
+};
+export type ChatModerationRoomId = Uuid | '__global' | '__all_public' | '__all';
+export type ChatModerationScope = '__global' | '__all_public' | '__all' | 'room';
+export type ChatModeration = {
+    assertCanSend(userId: Uuid, roomId: Uuid | null, isPublic?: boolean): Promise<void>;
+    deleteMessage(id: Uuid, actorId: Uuid, meta?: {
+        ip: string | null;
+        userAgent: string | null;
+    }, actorType?: 'admin' | 'player'): Promise<{
+        success: true;
+    }>;
+    mute(input: {
+        userId: Uuid;
+        roomId: ChatModerationRoomId;
+        durationSeconds?: number | null;
+        reason: string;
+        actorId: Uuid;
+        ip: string | null;
+        userAgent: string | null;
+    }): Promise<{
+        success: true;
+    }>;
+    unmute(input: {
+        userId: Uuid;
+        roomId: ChatModerationRoomId;
+        actorId: Uuid;
+        ip: string | null;
+        userAgent: string | null;
+    }): Promise<{
+        success: true;
+    }>;
+    listMutes(userId?: Uuid): Promise<ChatModerationEntry[]>;
+    ban(input: {
+        userId: Uuid;
+        roomId: ChatModerationRoomId;
+        durationSeconds: number | null;
+        reason: string;
+        actorId: Uuid;
+        ip: string | null;
+        userAgent: string | null;
+    }): Promise<{
+        success: true;
+    }>;
+    unban(input: {
+        userId: Uuid;
+        roomId: ChatModerationRoomId;
+        actorId: Uuid;
+        ip: string | null;
+        userAgent: string | null;
+    }): Promise<{
+        success: true;
+    }>;
+    listBans(userId?: Uuid): Promise<ChatPlatformBan[]>;
+};
+export declare const CHAT_MODERATION: import("./token.js").Token<ChatModeration, string>;
+//# sourceMappingURL=chat-moderation.d.ts.map

package/dist/contracts/adapters/chat-moderation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-moderation.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-moderation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,IAAI,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,mBAAmB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,CAAC;AAChF,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG;IAC3B,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,aAAa,CACX,EAAE,EAAE,IAAI,EACR,OAAO,EAAE,IAAI,EACb,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EACtD,SAAS,CAAC,EAAE,OAAO,GAAG,QAAQ,GAC7B,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,EAAE;QACV,MAAM,EAAE,IAAI,CAAC;QACb,MAAM,EAAE,oBAAoB,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,IAAI,CAAC;QACd,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,EAAE;QACZ,MAAM,EAAE,IAAI,CAAC;QACb,MAAM,EAAE,oBAAoB,CAAC;QAC7B,OAAO,EAAE,IAAI,CAAC;QACd,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/B,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,KAAK,EAAE;QACT,MAAM,EAAE,IAAI,CAAC;QACb,MAAM,EAAE,oBAAoB,CAAC;QAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,IAAI,CAAC;QACd,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,KAAK,EAAE;QACX,MAAM,EAAE,IAAI,CAAC;QACb,MAAM,EAAE,oBAAoB,CAAC;QAC7B,OAAO,EAAE,IAAI,CAAC;QACd,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CACrD,CAAC;AAEF,eAAO,MAAM,eAAe,oDAAgD,CAAC"}

package/dist/contracts/adapters/chat-moderation.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const CHAT_MODERATION = createToken('ChatModeration');
+//# sourceMappingURL=chat-moderation.js.map

package/dist/contracts/adapters/chat-moderation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-moderation.js","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-moderation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAuEzC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/chat-room-access.d.ts

@@ -0,0 +1,6 @@
+import { type Token } from './token.js';
+export type ChatRoomAccess = {
+    verifyRoomAccess(roomId: string, viewerId: string): Promise<void>;
+};
+export declare const CHAT_ROOM_ACCESS: Token<ChatRoomAccess>;
+//# sourceMappingURL=chat-room-access.d.ts.map

package/dist/contracts/adapters/chat-room-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room-access.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-room-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAmC,CAAC"}

package/dist/contracts/adapters/chat-room-access.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const CHAT_ROOM_ACCESS = createToken('CHAT_ROOM_ACCESS');
+//# sourceMappingURL=chat-room-access.js.map

package/dist/contracts/adapters/chat-room-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-room-access.js","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-room-access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,gBAAgB,GAA0B,WAAW,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/contracts/adapters/chat-system-writer.d.ts

@@ -0,0 +1,19 @@
+import type { SystemChatMessage, CommandChatMessage, CommandMetadata } from '../schemas/chat-command.js';
+export type { SystemChatMessage as ChatSystemMessage };
+export type { CommandChatMessage };
+export type ChatSystemWriter = {
+    postSystemMessage(args: {
+        roomId: string | null;
+        actorId: string;
+        username: string;
+        metadata: CommandMetadata;
+        tx?: unknown;
+    }): Promise<SystemChatMessage>;
+    updateSystemMessage(args: {
+        messageId: string;
+        metadata: CommandMetadata;
+        tx?: unknown;
+    }): Promise<CommandChatMessage>;
+};
+export declare const CHAT_SYSTEM_WRITER: import("./token.js").Token<ChatSystemWriter, string>;
+//# sourceMappingURL=chat-system-writer.d.ts.map

package/dist/contracts/adapters/chat-system-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-system-writer.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-system-writer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EAChB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EAAE,iBAAiB,IAAI,iBAAiB,EAAE,CAAC;AACvD,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAEnC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,eAAe,CAAC;QAC1B,EAAE,CAAC,EAAE,OAAO,CAAC;KACd,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,mBAAmB,CAAC,IAAI,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,eAAe,CAAC;QAC1B,EAAE,CAAC,EAAE,OAAO,CAAC;KACd,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,sDAAoD,CAAC"}

package/dist/contracts/adapters/chat-system-writer.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const CHAT_SYSTEM_WRITER = createToken('ChatSystemWriter');
+//# sourceMappingURL=chat-system-writer.js.map

package/dist/contracts/adapters/chat-system-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-system-writer.js","sourceRoot":"","sources":["../../../src/contracts/adapters/chat-system-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAyBzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,WAAW,CAAmB,kBAAkB,CAAC,CAAC"}

package/dist/contracts/adapters/email-template.d.ts

@@ -0,0 +1,54 @@
+import { type Token } from './token.js';
+export type EmailTemplateKey = 'verifyEmail' | 'resetPasswordOtp' | 'existingAccountSignUp' | 'rgLimitUpdated' | 'rgCoolingOffActivated' | 'rgCoolingOffLifted' | 'rgSelfExclusionActivated' | 'rgSelfExclusionLifted';
+export type EmailTemplateData = {
+    verifyEmail: {
+        otp: string;
+    };
+    resetPasswordOtp: {
+        otp: string;
+        email: string;
+    };
+    existingAccountSignUp: {
+        otp: string;
+        email: string;
+    };
+    rgLimitUpdated: {
+        period: string;
+        type: string;
+        description: string;
+    };
+    rgCoolingOffActivated: {
+        expiresAt: Date;
+    };
+    rgCoolingOffLifted: Record<string, never>;
+    rgSelfExclusionActivated: {
+        expiresAt: Date | null;
+        isPermanent: boolean;
+    };
+    rgSelfExclusionLifted: Record<string, never>;
+};
+export type EmailTemplateRenderer = {
+    render<K extends EmailTemplateKey>(key: K, data: EmailTemplateData[K], locale: string): Promise<{
+        subject: string;
+        body: string;
+    }> | {
+        subject: string;
+        body: string;
+    };
+};
+export declare const EMAIL_TEMPLATE_RENDERER: Token<EmailTemplateRenderer>;
+/**
+ * Production-safe English-only copy, shared by `DefaultEmailTemplateRenderer`
+ * (packages/core/src/pam/identity/adapters/) and the SessionResolver-only createAuth()
+ * fallback in server/auth/auth.ts - single source of truth so the two never drift.
+ * Openora core intentionally ships English-only; overlays that need other languages
+ * replace the renderer via ctx.provide(EMAIL_TEMPLATE_RENDERER, () => new MyRenderer()) -
+ * `render`'s `locale` param (sourced from IdentityService.resolveUserLanguage) exists for exactly that seam.
+ */
+export declare const DEFAULT_EMAIL_TEMPLATES: {
+    [K in EmailTemplateKey]: (data: EmailTemplateData[K]) => {
+        subject: string;
+        body: string;
+    };
+};
+//# sourceMappingURL=email-template.d.ts.map

package/dist/contracts/adapters/email-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/email-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,kBAAkB,GAClB,uBAAuB,GACvB,gBAAgB,GAChB,uBAAuB,GACvB,oBAAoB,GACpB,0BAA0B,GAC1B,uBAAuB,CAAC;AAE5B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,WAAW,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,gBAAgB,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,qBAAqB,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,cAAc,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,qBAAqB,EAAE;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,CAAC;IAC3C,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,wBAAwB,EAAE;QAAE,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CAC9C,CAAC;AAWF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,CAAC,SAAS,gBAAgB,EAC/B,GAAG,EAAE,CAAC,EACN,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnF,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CACF,CAAC;AAEhE;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE;KACnC,CAAC,IAAI,gBAAgB,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;CA4C3F,CAAC"}

package/dist/contracts/adapters/email-template.js

@@ -0,0 +1,61 @@
+import { createToken } from './token.js';
+const formatEmailDate = (value) => value === null
+    ? 'further notice'
+    : `${new Intl.DateTimeFormat('en-GB', {
+        dateStyle: 'long',
+        timeStyle: 'short',
+        timeZone: 'UTC',
+    }).format(value)} UTC`;
+export const EMAIL_TEMPLATE_RENDERER = createToken('EMAIL_TEMPLATE_RENDERER');
+/**
+ * Production-safe English-only copy, shared by `DefaultEmailTemplateRenderer`
+ * (packages/core/src/pam/identity/adapters/) and the SessionResolver-only createAuth()
+ * fallback in server/auth/auth.ts - single source of truth so the two never drift.
+ * Openora core intentionally ships English-only; overlays that need other languages
+ * replace the renderer via ctx.provide(EMAIL_TEMPLATE_RENDERER, () => new MyRenderer()) -
+ * `render`'s `locale` param (sourced from IdentityService.resolveUserLanguage) exists for exactly that seam.
+ */
+export const DEFAULT_EMAIL_TEMPLATES = {
+    verifyEmail: (data) => ({
+        subject: 'Verify your email',
+        body: `Your email verification code is: ${data.otp}`,
+    }),
+    resetPasswordOtp: (data) => ({
+        subject: 'Reset your password',
+        body: `Your password reset code is: ${data.otp}`,
+    }),
+    // Sent when someone tries to sign up with an address that already has an account. It
+    // must never confirm or deny that the account exists to anyone but its owner, so the
+    // wording addresses the owner and the sign-up response stays identical either way.
+    // Carries a reset code rather than only a notice: whoever tried is most likely the
+    // owner having forgotten they registered.
+    existingAccountSignUp: (data) => ({
+        subject: 'You already have an account',
+        body: `Someone tried to create an account with this email address. ` +
+            `You already have one, so no new account was created. ` +
+            `If it was you, sign in as usual - or use this code to reset your password: ${data.otp}`,
+    }),
+    rgLimitUpdated: (data) => ({
+        subject: 'Your gambling limit was updated',
+        body: `A ${data.period} ${data.type} limit of ${data.description} is now active on your account.`,
+    }),
+    rgCoolingOffActivated: (data) => ({
+        subject: 'Your cooling-off period has started',
+        body: `A cooling-off period is active on your account until ${formatEmailDate(data.expiresAt)}.\n\nYou will not be able to log in or place bets until then.`,
+    }),
+    rgCoolingOffLifted: () => ({
+        subject: 'Your cooling-off period has ended',
+        body: 'Your cooling-off period has been ended and you can log in again.',
+    }),
+    rgSelfExclusionActivated: (data) => ({
+        subject: 'Your self-exclusion has started',
+        body: data.isPermanent
+            ? 'Your account has been permanently self-excluded and you will not be able to log in.'
+            : `Your account is self-excluded until ${formatEmailDate(data.expiresAt)}.\n\nYou will not be able to log in until then.`,
+    }),
+    rgSelfExclusionLifted: () => ({
+        subject: 'Your self-exclusion has been lifted',
+        body: 'Your self-exclusion has been lifted and you can log in again.',
+    }),
+};
+//# sourceMappingURL=email-template.js.map

package/dist/contracts/adapters/email-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.js","sourceRoot":"","sources":["../../../src/contracts/adapters/email-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAuBrD,MAAM,eAAe,GAAG,CAAC,KAAkB,EAAU,EAAE,CACrD,KAAK,KAAK,IAAI;IACZ,CAAC,CAAC,gBAAgB;IAClB,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;QAClC,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;AAU7B,MAAM,CAAC,MAAM,uBAAuB,GAClC,WAAW,CAAwB,yBAAyB,CAAC,CAAC;AAEhE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAEhC;IACF,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,EAAE,mBAAmB;QAC5B,IAAI,EAAE,oCAAoC,IAAI,CAAC,GAAG,EAAE;KACrD,CAAC;IACF,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,gCAAgC,IAAI,CAAC,GAAG,EAAE;KACjD,CAAC;IACF,qFAAqF;IACrF,qFAAqF;IACrF,mFAAmF;IACnF,mFAAmF;IACnF,0CAA0C;IAC1C,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO,EAAE,6BAA6B;QACtC,IAAI,EACF,8DAA8D;YAC9D,uDAAuD;YACvD,8EAA8E,IAAI,CAAC,GAAG,EAAE;KAC3F,CAAC;IACF,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,WAAW,iCAAiC;KAClG,CAAC;IACF,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO,EAAE,qCAAqC;QAC9C,IAAI,EAAE,wDAAwD,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,+DAA+D;KAC7J,CAAC;IACF,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,kEAAkE;KACzE,CAAC;IACF,wBAAwB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,IAAI,CAAC,WAAW;YACpB,CAAC,CAAC,qFAAqF;YACvF,CAAC,CAAC,uCAAuC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,iDAAiD;KAC5H,CAAC;IACF,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5B,OAAO,EAAE,qCAAqC;QAC9C,IAAI,EAAE,+DAA+D;KACtE,CAAC;CACH,CAAC"}

package/dist/contracts/adapters/email.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Email-send seam. The identity module uses this to deliver password-reset and
+ * verification emails. The default implementation delegates to
+ * NOTIFICATION_DELIVERY_ADAPTER (log-to-stdout in dev); operators swap it via
+ * an overlay: ctx.provide(SEND_EMAIL, () => new MyEmailAdapter())
+ * Load your overlay AFTER the identity plugin in extensions.config.ts.
+ */
 import { type Token } from './token.js';
 export type SendEmailPort = {
     send(input: {

package/dist/contracts/adapters/email.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/email.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC,aAAa,CAA4C,CAAC"}
+{"version":3,"file":"email.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/email.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,KAAK,CAAC,aAAa,CAA4C,CAAC"}

package/dist/contracts/adapters/email.js

@@ -1,8 +1,10 @@
-// Email-send seam. The identity module uses this to deliver password-reset and
-// verification emails. The default implementation delegates to
-// NOTIFICATION_DELIVERY_ADAPTER (log-to-stdout in dev); operators swap it via
-// an overlay: ctx.provide(SEND_EMAIL, () => new MyEmailAdapter())
-// Load your overlay AFTER the identity plugin in extensions.config.ts.
+/**
+ * Email-send seam. The identity module uses this to deliver password-reset and
+ * verification emails. The default implementation delegates to
+ * NOTIFICATION_DELIVERY_ADAPTER (log-to-stdout in dev); operators swap it via
+ * an overlay: ctx.provide(SEND_EMAIL, () => new MyEmailAdapter())
+ * Load your overlay AFTER the identity plugin in extensions.config.ts.
+ */
 import { createToken } from './token.js';
 export const SEND_EMAIL = createToken('SEND_EMAIL');
 //# sourceMappingURL=email.js.map

package/dist/contracts/adapters/email.js.map

@@ -1 +1 @@
-{"version":3,"file":"email.js","sourceRoot":"","sources":["../../../src/contracts/adapters/email.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+DAA+D;AAC/D,8EAA8E;AAC9E,kEAAkE;AAClE,uEAAuE;AACvE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,UAAU,GAAyB,WAAW,CAAgB,YAAY,CAAC,CAAC"}
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../../src/contracts/adapters/email.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,UAAU,GAAyB,WAAW,CAAgB,YAAY,CAAC,CAAC"}

package/dist/contracts/adapters/error-tracking.d.ts

@@ -0,0 +1,12 @@
+import { type Token } from './token.js';
+export type ErrorContext = {
+    userId?: string;
+    traceId?: string;
+    tags?: Record<string, string>;
+    extra?: Record<string, unknown>;
+};
+export type ErrorTrackingAdapter = {
+    captureException(error: unknown, context?: ErrorContext): void;
+};
+export declare const ERROR_TRACKING: Token<ErrorTrackingAdapter>;
+//# sourceMappingURL=error-tracking.d.ts.map

package/dist/contracts/adapters/error-tracking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAChE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,oBAAoB,CACF,CAAC"}

package/dist/contracts/adapters/error-tracking.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const ERROR_TRACKING = createToken('ERROR_TRACKING');
+//# sourceMappingURL=error-tracking.js.map

package/dist/contracts/adapters/error-tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.js","sourceRoot":"","sources":["../../../src/contracts/adapters/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,cAAc,GACzB,WAAW,CAAuB,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/game.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
+ * concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+ */
 import { type Token } from './token.js';
 export type GameAdapter = {
     launchGame(gameId: string, userId: string, currency: string): Promise<{

package/dist/contracts/adapters/game.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"game.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,WAAW,CAA+B,CAAC"}
+{"version":3,"file":"game.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,WAAW,CAA+B,CAAC"}

package/dist/contracts/adapters/game.js

@@ -1,5 +1,7 @@
-// Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
-// concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+/**
+ * Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
+ * concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+ */
 import { createToken } from './token.js';
 export const GAME_ADAPTER = createToken('GAME_ADAPTER');
 //# sourceMappingURL=game.js.map

package/dist/contracts/adapters/game.js.map

@@ -1 +1 @@
-{"version":3,"file":"game.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8DAA8D;AAC9D,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,YAAY,GAAuB,WAAW,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"game.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,YAAY,GAAuB,WAAW,CAAC,cAAc,CAAC,CAAC"}

package/dist/contracts/adapters/geo-check-commands.d.ts

@@ -0,0 +1,8 @@
+import { type Token } from './token.js';
+export type GeoCheckCommands = {
+    checkRegistration(ipAddress: string | null): Promise<{
+        allowed: boolean;
+    }>;
+};
+export declare const GEO_CHECK_COMMANDS: Token<GeoCheckCommands>;
+//# sourceMappingURL=geo-check-commands.d.ts.map

package/dist/contracts/adapters/geo-check-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-check-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-check-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAqC,CAAC"}

package/dist/contracts/adapters/geo-check-commands.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const GEO_CHECK_COMMANDS = createToken('GEO_CHECK_COMMANDS');
+//# sourceMappingURL=geo-check-commands.js.map

package/dist/contracts/adapters/geo-check-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-check-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-check-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,kBAAkB,GAA4B,WAAW,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/contracts/adapters/geo-ip.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Geo-IP seam. A vendor (eg MaxMind) implements GeoIpAdapter; bind a concrete
+ * adapter to GEO_IP_ADAPTER in the compliance module's plugin.ts.
+ */
 import { type Token } from './token.js';
 export type GeoIpAdapter = {
     lookup(ipAddress: string): Promise<{

package/dist/contracts/adapters/geo-ip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"geo-ip.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,YAAY,CAAiC,CAAC"}
+{"version":3,"file":"geo-ip.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,YAAY,CAAiC,CAAC"}

package/dist/contracts/adapters/geo-ip.js

@@ -1,5 +1,7 @@
-// Geo-IP seam. A vendor (eg MaxMind) implements GeoIpAdapter; bind a concrete
-// adapter to GEO_IP_ADAPTER in the compliance module's plugin.ts.
+/**
+ * Geo-IP seam. A vendor (eg MaxMind) implements GeoIpAdapter; bind a concrete
+ * adapter to GEO_IP_ADAPTER in the compliance module's plugin.ts.
+ */
 import { createToken } from './token.js';
 export const GEO_IP_ADAPTER = createToken('GEO_IP_ADAPTER');
 //# sourceMappingURL=geo-ip.js.map

package/dist/contracts/adapters/geo-ip.js.map

@@ -1 +1 @@
-{"version":3,"file":"geo-ip.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,kEAAkE;AAClE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,cAAc,GAAwB,WAAW,CAAC,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"geo-ip.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,cAAc,GAAwB,WAAW,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/identity-reader.d.ts

@@ -1,10 +1,20 @@
+import type { User } from '../schemas/identity.js';
+import type { KycStatus, Player } from '../schemas/player.js';
 export type IdentityReader = {
     /** Timestamp of the player's most recent session, or null if they have never logged in. Used for inactive evaluation. */
-    getLastLoginAt(userId: string): Promise<Date | null>;
+    getLastLoginAt(userId: User['id']): Promise<Date | null>;
     /** Returns player user ids whose most recent session predates sinceDate. Used for the daily inactive batch sweep. */
-    getPlayerIdsInactiveSince(sinceDate: Date): Promise<string[]>;
+    getPlayerIdsInactiveSince(sinceDate: Date): Promise<User['id'][]>;
     /** Resolves the player profile id for a given auth user id, or null when no profile exists yet. */
-    getPlayerIdByUserId(userId: string): Promise<string | null>;
+    getPlayerIdByUserId(userId: User['id']): Promise<Player['id'] | null>;
+    /** Best-effort variant for optional event enrichment; lookup failures resolve to null. */
+    getPlayerIdByUserIdSafe(userId: User['id']): Promise<Player['id'] | null>;
+    /** Batched, best-effort variant of {@link getPlayerIdByUserIdSafe} for enriching events across many users in one round trip. */
+    getPlayerIdsByUserIdsSafe(userIds: User['id'][]): Promise<Map<User['id'], Player['id'] | null>>;
+    /** Resolves the player's current KYC status from PAM, or null when no profile exists yet. */
+    getPlayerKycStatusByUserId(userId: User['id']): Promise<KycStatus | null>;
+    /** Returns other player user ids that have authenticated from the same login IP. */
+    getPlayerUserIdsSharingLoginIp(userId: User['id'], ipAddress: string): Promise<User['id'][]>;
 };
-export declare const IDENTITY_READER: import("./token.js").Token<IdentityReader>;
+export declare const IDENTITY_READER: import("./token.js").Token<IdentityReader, string>;
 //# sourceMappingURL=identity-reader.d.ts.map

package/dist/contracts/adapters/identity-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG;IAC3B,yHAAyH;IACzH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrD,qHAAqH;IACrH,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,mGAAmG;IACnG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7D,CAAC;AAEF,eAAO,MAAM,eAAe,4CAAiD,CAAC"}
+{"version":3,"file":"identity-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG;IAC3B,yHAAyH;IACzH,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD,qHAAqH;IACrH,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,mGAAmG;IACnG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACtE,0FAA0F;IAC1F,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,gIAAgI;IAChI,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChG,6FAA6F;IAC7F,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC1E,oFAAoF;IACpF,8BAA8B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;CAC9F,CAAC;AAEF,eAAO,MAAM,eAAe,oDAAiD,CAAC"}

package/dist/contracts/adapters/identity-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWzC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"identity-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqBzC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}

package/dist/contracts/adapters/identity.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Identity options token. Downstream operators can provide this to configure
+ * identity behaviors such as login rate-limiting/lockouts.
+ */
 import { type Token } from './token.js';
 export type IdentityLockoutOptions = {
     enabled?: boolean;
@@ -15,4 +19,15 @@ export type SessionCommands = {
     }>;
 };
 export declare const SESSION_COMMANDS: Token<SessionCommands>;
+/**
+ * Writes to identity-owned user columns. Sibling modules may read `user` through the
+ * `/schema` subpath but must mutate it here, so identity keeps its own invariants.
+ */
+export type UserCommands = {
+    /** Throws if the handle is taken; comparison is case-insensitive. */
+    setUsername(userId: string, username: string): Promise<{
+        success: boolean;
+    }>;
+};
+export declare const USER_COMMANDS: Token<UserCommands>;
 //# sourceMappingURL=identity.d.ts.map

package/dist/contracts/adapters/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,sBAAsB,CACF,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,eAAe,CACF,CAAC"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,sBAAsB,CACF,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,eAAe,CACF,CAAC;AAEnD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,qEAAqE;IACrE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC9E,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,YAAY,CAA8C,CAAC"}

package/dist/contracts/adapters/identity.js

@@ -1,6 +1,9 @@
-// Identity options token. Downstream operators can provide this to configure
-// identity behaviors such as login rate-limiting/lockouts.
+/**
+ * Identity options token. Downstream operators can provide this to configure
+ * identity behaviors such as login rate-limiting/lockouts.
+ */
 import { createToken } from './token.js';
 export const IDENTITY_OPTIONS = createToken('IDENTITY_OPTIONS');
 export const SESSION_COMMANDS = createToken('SESSION_COMMANDS');
+export const USER_COMMANDS = createToken('USER_COMMANDS');
 //# sourceMappingURL=identity.js.map

package/dist/contracts/adapters/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAyB,kBAAkB,CAAC,CAAC;AAM1D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAkB,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAyB,kBAAkB,CAAC,CAAC;AAM1D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAkB,kBAAkB,CAAC,CAAC;AAWnD,MAAM,CAAC,MAAM,aAAa,GAAwB,WAAW,CAAe,eAAe,CAAC,CAAC"}