@openora/core 0.4.1-canary.111 → 0.4.1-canary.112

package/dist/admin-console/plugin.d.ts

@@ -78,6 +78,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/admin-console/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/admin-console/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,wBAkB8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/admin-console/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,wBAkB8C"}

package/dist/analytics/plugin.d.ts

@@ -78,6 +78,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/analytics/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/analytics/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,wBAY8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/analytics/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,wBAY8C"}

package/dist/audit/plugin.d.ts

@@ -79,6 +79,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/audit/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/audit/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAS5E,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CA2nBtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0FD,wBAoC8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/audit/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAS5E,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACzB,OAAO,CAAC,WAAW,CAAC,CA2nBtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0FD,wBAoC8C"}

package/dist/casino/gaming/plugin.d.ts

@@ -79,6 +79,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/casino/gaming/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/casino/gaming/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,wBAqB8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/casino/gaming/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,wBAqB8C"}

package/dist/casino/lobby/plugin.d.ts

@@ -77,6 +77,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/casino/lobby/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/casino/lobby/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,wBAO8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/casino/lobby/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,wBAO8C"}

package/dist/cms/plugin.d.ts

@@ -77,6 +77,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/cms/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cms/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,wBAU8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cms/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,wBAU8C"}

package/dist/compliance/plugin.d.ts

@@ -80,6 +80,9 @@ declare const _default: {
                 maxStakePerBet?: number | undefined;
                 sessionReminderMinutes?: number | undefined;
             }>;
+            chat: {
+                allowedAttachmentHosts: string[];
+            };
             activeBrand?: string | undefined;
             kyc?: {
                 gateWithdrawals: boolean;

package/dist/compliance/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/compliance/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAoBL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCjC,wBA6K8C"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/compliance/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAoBL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCjC,wBA6K8C"}

package/dist/contracts/schemas/__tests__/platform-config.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=platform-config.test.d.ts.map

package/dist/contracts/schemas/__tests__/platform-config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-config.test.d.ts","sourceRoot":"","sources":["../../../../src/contracts/schemas/__tests__/platform-config.test.ts"],"names":[],"mappings":""}

package/dist/contracts/schemas/__tests__/platform-config.test.js

@@ -0,0 +1,16 @@
+import { describe, expect, it } from 'vitest';
+import { definePlatformConfig } from '../platform-config.js';
+describe('definePlatformConfig', () => {
+    it('canonicalizes attachment hosts before services consume the config', () => {
+        const config = definePlatformConfig({
+            chat: { allowedAttachmentHosts: ['MEDIA.EXAMPLE.COM'] },
+        });
+        expect(config.chat.allowedAttachmentHosts).toEqual(['media.example.com']);
+    });
+    it('rejects attachment hosts that include URL components', () => {
+        expect(() => definePlatformConfig({
+            chat: { allowedAttachmentHosts: ['https://media.example.com/path'] },
+        })).toThrow(/chat\.allowedAttachmentHosts\.0/);
+    });
+});
+//# sourceMappingURL=platform-config.test.js.map

package/dist/contracts/schemas/__tests__/platform-config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-config.test.js","sourceRoot":"","sources":["../../../../src/contracts/schemas/__tests__/platform-config.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,oBAAoB,CAAC;YAClC,IAAI,EAAE,EAAE,sBAAsB,EAAE,CAAC,mBAAmB,CAAC,EAAE;SACxD,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CACV,oBAAoB,CAAC;YACnB,IAAI,EAAE,EAAE,sBAAsB,EAAE,CAAC,gCAAgC,CAAC,EAAE;SACrE,CAAC,CACH,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/contracts/schemas/chat-attachment.d.ts

@@ -0,0 +1,20 @@
+import * as z from 'zod';
+export declare const CHAT_ATTACHMENT_KINDS: readonly ["gif"];
+export declare const ChatAttachmentKindSchema: z.ZodEnum<{
+    gif: "gif";
+}>;
+export type ChatAttachmentKind = z.infer<typeof ChatAttachmentKindSchema>;
+export declare const ChatAttachmentSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        gif: "gif";
+    }>;
+    provider: z.ZodString;
+    externalId: z.ZodString;
+    url: z.ZodURL;
+    previewUrl: z.ZodURL;
+    width: z.ZodNumber;
+    height: z.ZodNumber;
+    title: z.ZodString;
+}, z.core.$strip>;
+export type ChatAttachment = z.infer<typeof ChatAttachmentSchema>;
+//# sourceMappingURL=chat-attachment.d.ts.map

package/dist/contracts/schemas/chat-attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-attachment.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/chat-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,eAAO,MAAM,qBAAqB,kBAAmB,CAAC;AACtD,eAAO,MAAM,wBAAwB;;EAAgC,CAAC;AACtE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB;;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/contracts/schemas/chat-attachment.js

@@ -0,0 +1,14 @@
+import * as z from 'zod';
+export const CHAT_ATTACHMENT_KINDS = ['gif'];
+export const ChatAttachmentKindSchema = z.enum(CHAT_ATTACHMENT_KINDS);
+export const ChatAttachmentSchema = z.object({
+    kind: ChatAttachmentKindSchema,
+    provider: z.string().trim().min(1).max(32),
+    externalId: z.string().trim().min(1).max(128),
+    url: z.url().max(2048),
+    previewUrl: z.url().max(2048),
+    width: z.number().int().positive().max(4096),
+    height: z.number().int().positive().max(4096),
+    title: z.string().trim().max(200),
+});
+//# sourceMappingURL=chat-attachment.js.map

package/dist/contracts/schemas/chat-attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-attachment.js","sourceRoot":"","sources":["../../../src/contracts/schemas/chat-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAU,CAAC;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACtB,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CAClC,CAAC,CAAC"}

package/dist/contracts/schemas/index.d.ts

@@ -12,4 +12,5 @@ export * from './events.js';
 export * from './reporting.js';
 export * from './chat-command-metadata.js';
 export * from './chat-command.js';
+export * from './chat-attachment.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/contracts/schemas/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/contracts/schemas/index.js

@@ -12,4 +12,5 @@ export * from './events.js';
 export * from './reporting.js';
 export * from './chat-command-metadata.js';
 export * from './chat-command.js';
+export * from './chat-attachment.js';
 //# sourceMappingURL=index.js.map

package/dist/contracts/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/contracts/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/contracts/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/contracts/schemas/platform-config.d.ts

@@ -56,6 +56,10 @@ export declare const RegistrationConfigSchema: z.ZodObject<{
     termsVersion: z.ZodString;
     requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
 }, z.core.$strict>;
+export declare const ChatConfigSchema: z.ZodObject<{
+    allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+}, z.core.$strict>;
+export type ChatConfig = z.infer<typeof ChatConfigSchema>;
 export declare const PlatformConfigSchema: z.ZodObject<{
     features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
     brands: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -108,6 +112,9 @@ export declare const PlatformConfigSchema: z.ZodObject<{
         requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strict>>;
     supportedLanguages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    chat: z.ZodDefault<z.ZodObject<{
+        allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type PlatformConfig = z.infer<typeof PlatformConfigSchema>;
 export type PlatformConfigInput = z.input<typeof PlatformConfigSchema>;
@@ -134,6 +141,9 @@ export declare const PLATFORM_CONFIG: import("../adapters/token.js").Token<{
         maxStakePerBet?: number | undefined;
         sessionReminderMinutes?: number | undefined;
     }>;
+    chat: {
+        allowedAttachmentHosts: string[];
+    };
     activeBrand?: string | undefined;
     kyc?: {
         gateWithdrawals: boolean;

package/dist/contracts/schemas/platform-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;kBAQ5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAkEpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;kBAU1B,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkD7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAAiD,CAAC"}
+{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;kBAQ5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAkEpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;kBAU1B,CAAC;AA2BZ,eAAO,MAAM,gBAAgB;;kBAKlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoD7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAAiD,CAAC"}

package/dist/contracts/schemas/platform-config.js

@@ -129,6 +129,32 @@ export const RegistrationConfigSchema = z
     requireEmailVerification: z.boolean().default(false),
 })
     .strict();
+const AttachmentHostSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .refine((hostname) => {
+    try {
+        const url = new URL(`https://${hostname}`);
+        return (url.hostname === hostname.toLowerCase() &&
+            url.pathname === '/' &&
+            url.port === '' &&
+            url.username === '' &&
+            url.password === '' &&
+            url.search === '' &&
+            url.hash === '');
+    }
+    catch {
+        return false;
+    }
+}, { message: 'must be a hostname without a protocol, port, credentials, or path' })
+    .transform((hostname) => hostname.toLowerCase());
+export const ChatConfigSchema = z
+    .object({
+    /** Hostnames a chat message attachment may be served from. Empty = attachments disabled. */
+    allowedAttachmentHosts: z.array(AttachmentHostSchema).default([]),
+})
+    .strict();
 export const PlatformConfigSchema = z
     .object({
     /**
@@ -169,6 +195,8 @@ export const PlatformConfigSchema = z
      * Undefined or empty means no restriction - any value is accepted.
      */
     supportedLanguages: z.array(z.string().min(1)).optional(),
+    /** Chat attachment host allow-list. Absent = built-in default (empty = disabled). */
+    chat: ChatConfigSchema.default({ allowedAttachmentHosts: [] }),
 })
     .strict()
     .superRefine((cfg, ctx) => {

package/dist/contracts/schemas/platform-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.js","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,4DAA4D;IAC5D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kEAAkE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,iFAAiF;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wFAAwF;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,wFAAwF;IACxF,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC5C,uFAAuF;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE;;;OAGG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;QACxC;;;WAGG;QACH,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QAC3C,yEAAyE;QACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,+DAA+D;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD;;;;;WAKG;QACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D;;;;WAIG;QACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;OAGG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,wEAAwE;QACxE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACxD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B;;;OAGG;IACH,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN;;;OAGG;IACH,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE;;;OAGG;IACH,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,6HAA6H;IAC7H,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACrD,iGAAiG;IACjG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,sDAAsD;IACtD,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACjD;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,mCAAmC;YAC3E,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"platform-config.js","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,4DAA4D;IAC5D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kEAAkE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,iFAAiF;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wFAAwF;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,wFAAwF;IACxF,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC5C,uFAAuF;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE;;;OAGG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;QACxC;;;WAGG;QACH,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QAC3C,yEAAyE;QACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,+DAA+D;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD;;;;;WAKG;QACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D;;;;WAIG;QACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;OAGG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,wEAAwE;QACxE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACxD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B;;;OAGG;IACH,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE;IACX,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,WAAW,EAAE;YACvC,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,MAAM,KAAK,EAAE;YACjB,GAAG,CAAC,IAAI,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EACD,EAAE,OAAO,EAAE,mEAAmE,EAAE,CACjF;KACA,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,4FAA4F;IAC5F,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAClE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN;;;OAGG;IACH,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE;;;OAGG;IACH,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,6HAA6H;IAC7H,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACrD,iGAAiG;IACjG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,sDAAsD;IACtD,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACjD;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,qFAAqF;IACrF,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC;CAC/D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,mCAAmC;YAC3E,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}

package/dist/engagement/chat/__tests__/chat.service.int.test.js

@@ -18,7 +18,7 @@ import { migrate } from '../migrate.js';
 //   NO_CLIENT_META,
 // } from '../../../testing/mock.js';
 import { chatChannel } from '@openora/core/contracts';
-import { ChatService, ChatMessageBlockedError, ChatSelfBlockError, ChatSelfIgnoreError, ChatRoomSlugConflictError, ChatRoomJoinCodeNotFoundError, ChatRoomBannedError, ChatRoomLimitReachedError, ChatRoomLastModeratorError, ChatRoomNotMemberError, ChatRoomNotModeratorError, ChatRoomSelfModerationError, ChatRoomOwnershipError, } from '../service/chat.service.js';
+import { ChatService, ChatMessageBlockedError, ChatAttachmentRejectedError, ChatSelfBlockError, ChatSelfIgnoreError, ChatRoomSlugConflictError, ChatRoomJoinCodeNotFoundError, ChatRoomBannedError, ChatRoomLimitReachedError, ChatRoomLastModeratorError, ChatRoomNotMemberError, ChatRoomNotModeratorError, ChatRoomSelfModerationError, ChatRoomOwnershipError, } from '../service/chat.service.js';
 import { ChatModerationService, ChatRoomNotFoundError, ChatMessageNotFoundError, ChatPlayerMutedError, ChatPlayerBannedError, ChatAdminPrivateRoomModerationError, } from '../service/chat-moderation.service.js';
 import { chatMessage, chatRoom, chatRoomMember, chatRoomBan, chatRoomRule, chatRoomConfiguration, chatRoomMute, chatRoomRemove, chatUserBlock, chatUserIgnore, chatMute, chatPlatformBan, } from '../schema/index.js';
 import { ChatRoomMembershipService } from '../service/chat-room-membership.service.js';
@@ -35,7 +35,7 @@ function makeService(directory = mock({
         isActive: true,
         role: 'player',
     })),
-}), socialCommands) {
+}), socialCommands, allowedAttachmentHosts = []) {
     const transport = new InProcessRealtimeTransport();
     const events = makeEventBus();
     const audit = mock({
@@ -44,7 +44,17 @@ function makeService(directory = mock({
     });
     const moderation = new ChatModerationService(db.drizzle, transport, audit);
     const identityReader = makeIdentityReader();
-    const chatService = new ChatService(db.drizzle, events, transport, directory, audit, moderation, identityReader, socialCommands);
+    const chatService = new ChatService({
+        drizzle: db.drizzle,
+        events,
+        transport,
+        directory,
+        audit,
+        moderation,
+        identityReader,
+        allowedAttachmentHosts,
+        socialCommands,
+    });
     const membership = new ChatRoomMembershipService(db.drizzle, events, audit, transport, identityReader);
     const roomBan = new ChatRoomBanService(db.drizzle, events, audit, transport, identityReader);
     const roomMute = new ChatRoomMuteService(db.drizzle, audit);
@@ -128,6 +138,7 @@ describe('ChatService realtime wiring', () => {
         content: 'hi',
         type: 'user',
         metadata: null,
+        attachment: null,
         isDeleted: false,
         createdAt: '2026-05-29T00:00:00.000Z',
     };
@@ -188,6 +199,7 @@ describe('ChatService.subscribeMessages per-viewer block filtering (real PG)', (
         content: 'hi',
         type: 'user',
         metadata: null,
+        attachment: null,
         isDeleted: false,
         createdAt: '2026-05-29T00:00:00.000Z',
     };
@@ -240,7 +252,11 @@ describe('ChatService.sendGlobalMessage (real PG)', () => {
     it('stores the username from the verified user, ignoring the header fallback', async () => {
         const { svc, events } = makeService();
         const account = await seedUser(db, { name: 'Platform Admin', username: 'platform_admin' });
-        const msg = await svc.sendGlobalMessage(account.id, 'spoofed-header-name', 'hi');
+        const msg = await svc.sendGlobalMessage({
+            userId: account.id,
+            username: 'spoofed-header-name',
+            content: 'hi',
+        });
         expect(msg.username).toBe('platform_admin');
         const [stored] = await db.drizzle.db.select().from(chatMessage);
         expect(stored).toMatchObject({ roomId: null, username: 'platform_admin' });
@@ -253,20 +269,24 @@ describe('ChatService.sendGlobalMessage (real PG)', () => {
     it('falls back to the passed name, then anonymous, when no user row exists', async () => {
         const { svc } = makeService();
         const userId = randomUUID();
-        expect((await svc.sendGlobalMessage(userId, 'fallback', 'hi')).username).toBe('fallback');
-        expect((await svc.sendGlobalMessage(userId, '', 'hi')).username).toBe('anonymous');
+        expect((await svc.sendGlobalMessage({ userId, username: 'fallback', content: 'hi' })).username).toBe('fallback');
+        expect((await svc.sendGlobalMessage({ userId, username: '', content: 'hi' })).username).toBe('anonymous');
     });
     it('blocks profane messages before they are stored or published', async () => {
         const { svc, transport } = makeService();
         const delivered = [];
         transport.subscribe('chat:global', (m) => delivered.push(m));
-        await expect(svc.sendGlobalMessage(randomUUID(), 'Alice', 'this is shit')).rejects.toThrow(ChatMessageBlockedError);
+        await expect(svc.sendGlobalMessage({ userId: randomUUID(), username: 'Alice', content: 'this is shit' })).rejects.toThrow(ChatMessageBlockedError);
         expect(delivered).toHaveLength(0);
         expect(await db.drizzle.db.select().from(chatMessage)).toHaveLength(0);
     });
     it('persists URL-sanitized content', async () => {
         const { svc } = makeService();
-        const msg = await svc.sendGlobalMessage(randomUUID(), 'Alice', 'click javascript:alert(1)');
+        const msg = await svc.sendGlobalMessage({
+            userId: randomUUID(),
+            username: 'Alice',
+            content: 'click javascript:alert(1)',
+        });
         expect(msg.content).toBe('click javascript alert(1)');
         const [stored] = await db.drizzle.db.select().from(chatMessage);
         expect(stored?.content).toBe('click javascript alert(1)');
@@ -275,9 +295,60 @@ describe('ChatService.sendGlobalMessage (real PG)', () => {
         const { svc, transport } = makeService();
         const delivered = [];
         transport.subscribe('chat:global', (m) => delivered.push(m));
-        const msg = await svc.sendGlobalMessage(randomUUID(), 'Alice', 'hello');
+        const msg = await svc.sendGlobalMessage({
+            userId: randomUUID(),
+            username: 'Alice',
+            content: 'hello',
+        });
         expect(delivered.map((m) => m.id)).toEqual([msg.id]);
     });
+    it('persists an attachment whose host is on the allow-list and publishes it', async () => {
+        const { svc, transport } = makeService(undefined, undefined, ['media.example.com']);
+        const delivered = [];
+        transport.subscribe('chat:global', (m) => delivered.push(m));
+        const attachment = {
+            kind: 'gif',
+            provider: 'example',
+            externalId: 'abc123',
+            url: 'https://media.example.com/abc123.gif',
+            previewUrl: 'https://media.example.com/abc123-preview.gif',
+            width: 320,
+            height: 240,
+            title: 'a gif',
+        };
+        const msg = await svc.sendGlobalMessage({
+            userId: randomUUID(),
+            username: 'Alice',
+            content: '',
+            attachment,
+        });
+        expect(msg.type).toBe('user');
+        if (msg.type === 'user') {
+            expect(msg.attachment).toEqual(attachment);
+        }
+        const [stored] = await db.drizzle.db.select().from(chatMessage);
+        expect(stored?.attachment).toEqual(attachment);
+        expect(delivered.map((m) => m.id)).toEqual([msg.id]);
+    });
+    it('rejects an attachment whose host is not on the allow-list', async () => {
+        const { svc } = makeService(undefined, undefined, ['media.example.com']);
+        await expect(svc.sendGlobalMessage({
+            userId: randomUUID(),
+            username: 'Alice',
+            content: '',
+            attachment: {
+                kind: 'gif',
+                provider: 'example',
+                externalId: 'abc123',
+                url: 'https://evil.example.net/abc123.gif',
+                previewUrl: 'https://evil.example.net/abc123-preview.gif',
+                width: 320,
+                height: 240,
+                title: 'a gif',
+            },
+        })).rejects.toThrow(ChatAttachmentRejectedError);
+        expect(await db.drizzle.db.select().from(chatMessage)).toHaveLength(0);
+    });
 });
 describe('ChatService message reads (real PG)', () => {
     it('returns global messages newest-first, excluding soft-deleted ones', async () => {
@@ -362,6 +433,59 @@ describe('ChatService.sendRoomMessage (real PG)', () => {
         })).rejects.toBeInstanceOf(ChatRoomNotMemberError);
         expect(await db.drizzle.db.select().from(chatMessage)).toHaveLength(0);
     });
+    it('persists an attachment whose host is on the allow-list and publishes it', async () => {
+        const { svc, transport } = makeService(undefined, undefined, ['media.example.com']);
+        const room = await seedRoom();
+        const account = await seedUser(db, { name: 'Alice', username: 'alice' });
+        const delivered = [];
+        transport.subscribe(chatChannel(room.id), (m) => delivered.push(m));
+        const attachment = {
+            kind: 'gif',
+            provider: 'example',
+            externalId: 'abc123',
+            url: 'https://media.example.com/abc123.gif',
+            previewUrl: 'https://media.example.com/abc123-preview.gif',
+            width: 320,
+            height: 240,
+            title: 'a gif',
+        };
+        const msg = await svc.sendRoomMessage({
+            userId: account.id,
+            username: 'ignored',
+            roomId: room.id,
+            content: '',
+            attachment,
+        });
+        expect(msg.type).toBe('user');
+        if (msg.type === 'user') {
+            expect(msg.attachment).toEqual(attachment);
+        }
+        const [stored] = await db.drizzle.db.select().from(chatMessage);
+        expect(stored?.attachment).toEqual(attachment);
+        expect(delivered.map((m) => m.id)).toEqual([msg.id]);
+    });
+    it('rejects an attachment whose host is not on the allow-list', async () => {
+        const { svc } = makeService(undefined, undefined, ['media.example.com']);
+        const room = await seedRoom();
+        const account = await seedUser(db, { name: 'Alice', username: 'alice' });
+        await expect(svc.sendRoomMessage({
+            userId: account.id,
+            username: 'ignored',
+            roomId: room.id,
+            content: '',
+            attachment: {
+                kind: 'gif',
+                provider: 'example',
+                externalId: 'abc123',
+                url: 'https://evil.example.net/abc123.gif',
+                previewUrl: 'https://evil.example.net/abc123-preview.gif',
+                width: 320,
+                height: 240,
+                title: 'a gif',
+            },
+        })).rejects.toThrow(ChatAttachmentRejectedError);
+        expect(await db.drizzle.db.select().from(chatMessage)).toHaveLength(0);
+    });
 });
 describe('ChatService.deleteMessage (real PG)', () => {
     it('soft-deletes a message for a room owner and publishes a tombstone', async () => {
@@ -1200,7 +1324,7 @@ describe('ChatService moderation (real PG)', () => {
             roomId: globalRoom.id,
             readOnlyMode: true,
         });
-        await expect(svc.sendGlobalMessage(randomUUID(), 'ReadOnly', 'hello')).rejects.toBeInstanceOf(ChatPlayerMutedError);
+        await expect(svc.sendGlobalMessage({ userId: randomUUID(), username: 'ReadOnly', content: 'hello' })).rejects.toBeInstanceOf(ChatPlayerMutedError);
     });
     it.each(['__all_public', '__all'])('enforces %s mutes on global sends', async (scope) => {
         const { svc, moderation } = makeService();
@@ -1213,7 +1337,7 @@ describe('ChatService moderation (real PG)', () => {
             ...NO_CLIENT_META,
         });
         const [mute] = await db.drizzle.db.select().from(chatMute).limit(1);
-        await expect(svc.sendGlobalMessage(mute.userId, 'Muted', 'hello')).rejects.toBeInstanceOf(ChatPlayerMutedError);
+        await expect(svc.sendGlobalMessage({ userId: mute.userId, username: 'Muted', content: 'hello' })).rejects.toBeInstanceOf(ChatPlayerMutedError);
     });
     it('supports a global mute when the virtual global room has no row', async () => {
         const { svc, moderation } = makeService();
@@ -1226,7 +1350,7 @@ describe('ChatService moderation (real PG)', () => {
             actorId: randomUUID(),
             ...NO_CLIENT_META,
         })).resolves.toEqual({ success: true });
-        await expect(svc.sendGlobalMessage(userId, 'Muted', 'hello')).rejects.toBeInstanceOf(ChatPlayerMutedError);
+        await expect(svc.sendGlobalMessage({ userId, username: 'Muted', content: 'hello' })).rejects.toBeInstanceOf(ChatPlayerMutedError);
     });
     it('enforces an all-chat mute in private rooms', async () => {
         const { svc, moderation } = makeService();
@@ -1278,7 +1402,7 @@ describe('ChatService moderation (real PG)', () => {
             actorId: randomUUID(),
             ...NO_CLIENT_META,
         });
-        await expect(svc.sendGlobalMessage(userId, 'Banned', 'hello')).rejects.toBeInstanceOf(ChatPlayerBannedError);
+        await expect(svc.sendGlobalMessage({ userId, username: 'Banned', content: 'hello' })).rejects.toBeInstanceOf(ChatPlayerBannedError);
         await expect(svc.sendRoomMessage({ userId, username: 'Banned', roomId: room.id, content: 'hello' })).resolves.toMatchObject({ userId });
         await moderation.unban({
             userId,
@@ -1286,7 +1410,7 @@ describe('ChatService moderation (real PG)', () => {
             actorId: randomUUID(),
             ...NO_CLIENT_META,
         });
-        await expect(svc.sendGlobalMessage(userId, 'Banned', 'hello')).resolves.toMatchObject({
+        await expect(svc.sendGlobalMessage({ userId, username: 'Banned', content: 'hello' })).resolves.toMatchObject({
             userId,
         });
     });