@openora/core 0.4.1-canary.12 → 0.4.1-canary.121

package/dist/testing/seed-player.d.ts

@@ -0,0 +1,101 @@
+import { player } from '../pam/profile/schema/index.js';
+import { user } from '../pam/identity/schema/index.js';
+import type { TestDb } from './real-infra.js';
+/** A handle unique per call, so the case-insensitive unique index never collides. */
+export declare function uniqueUsername(prefix?: string): string;
+/** Inserts a verified `user` with a unique handle. Override any column. */
+export declare function seedUser(db: TestDb, overrides?: Partial<typeof user.$inferInsert>): Promise<{
+    email: string;
+    id: string;
+    username: string;
+    theme: "light" | "dark" | "system";
+    language: string;
+    createdAt: Date;
+    updatedAt: Date;
+    name: string;
+    emailVerified: boolean;
+    image: string | null;
+    phoneNumber: string | null;
+    phoneVerified: boolean;
+    twoFactorEnabled: boolean | null;
+    role: string;
+    lockoutUntil: Date | null;
+    isActive: boolean;
+    lastLockoutAt: Date | null;
+    failedLoginAttempts: number;
+    banReason: string | null;
+    banned: boolean | null;
+    banExpires: Date | null;
+    phoneVerifiedAt: Date | null;
+    failedTwoFactorAttempts: number;
+    twoFactorLockoutUntil: Date | null;
+    twoFactorLockoutCount: number;
+    lastFailedTwoFactorAt: Date | null;
+    lockoutCount: number;
+    lastFailedLoginAt: Date | null;
+    rgBlocked: boolean;
+    rgBlockedUntil: Date | null;
+}>;
+export type SeedPlayerOverrides = Partial<typeof player.$inferInsert> & {
+    username?: string;
+};
+/** Inserts a verified `user` plus its `player` row. */
+export declare function seedPlayerWithUser(db: TestDb, overrides?: SeedPlayerOverrides): Promise<{
+    account: {
+        email: string;
+        id: string;
+        username: string;
+        theme: "light" | "dark" | "system";
+        language: string;
+        createdAt: Date;
+        updatedAt: Date;
+        name: string;
+        emailVerified: boolean;
+        image: string | null;
+        phoneNumber: string | null;
+        phoneVerified: boolean;
+        twoFactorEnabled: boolean | null;
+        role: string;
+        lockoutUntil: Date | null;
+        isActive: boolean;
+        lastLockoutAt: Date | null;
+        failedLoginAttempts: number;
+        banReason: string | null;
+        banned: boolean | null;
+        banExpires: Date | null;
+        phoneVerifiedAt: Date | null;
+        failedTwoFactorAttempts: number;
+        twoFactorLockoutUntil: Date | null;
+        twoFactorLockoutCount: number;
+        lastFailedTwoFactorAt: Date | null;
+        lockoutCount: number;
+        lastFailedLoginAt: Date | null;
+        rgBlocked: boolean;
+        rgBlockedUntil: Date | null;
+    };
+    player: {
+        status: "active" | "self_excluded" | "dormant" | "suspended" | "closed";
+        id: string;
+        userId: string;
+        createdAt: Date;
+        updatedAt: Date;
+        phone: string | null;
+        level: number;
+        currency: string;
+        kycStatus: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+        totalWagered: string;
+        totalDeposits: string;
+        firstName: string | null;
+        lastName: string | null;
+        dateOfBirth: string | null;
+        country: string | null;
+        lastSeenAt: Date | null;
+        termsVersion: string | null;
+        displayCurrency: string | null;
+        termsAcceptedAt: Date | null;
+        ageAcceptedAt: Date | null;
+        registrationIp: string | null;
+        registrationUserAgent: string | null;
+    };
+}>;
+//# sourceMappingURL=seed-player.d.ts.map

package/dist/testing/seed-player.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-player.d.ts","sourceRoot":"","sources":["../../src/testing/seed-player.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,MAAM,SAAW,GAAG,MAAM,CAExD;AAED,2EAA2E;AAC3E,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,GAAE,OAAO,CAAC,OAAO,IAAI,CAAC,YAAY,CAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAe3F;AAED,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,uDAAuD;AACvD,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,GAAE,mBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgBvF"}

package/dist/testing/seed-player.js

@@ -0,0 +1,43 @@
+import { randomUUID } from 'node:crypto';
+import { player } from '../pam/profile/schema/index.js';
+import { user } from '../pam/identity/schema/index.js';
+/** A handle unique per call, so the case-insensitive unique index never collides. */
+export function uniqueUsername(prefix = 'player') {
+    return `${prefix}_${randomUUID().replaceAll('-', '').slice(0, 12)}`;
+}
+/** Inserts a verified `user` with a unique handle. Override any column. */
+export async function seedUser(db, overrides = {}) {
+    const [row] = await db.drizzle.db
+        .insert(user)
+        .values({
+        name: 'Player',
+        username: uniqueUsername(),
+        email: `${randomUUID()}@test.dev`,
+        emailVerified: true,
+        ...overrides,
+    })
+        .returning();
+    if (!row) {
+        throw new Error('seedUser: insert returned no row');
+    }
+    return row;
+}
+/** Inserts a verified `user` plus its `player` row. */
+export async function seedPlayerWithUser(db, overrides = {}) {
+    const { username, ...playerOverrides } = overrides;
+    const userId = playerOverrides.userId ?? randomUUID();
+    const account = await seedUser(db, {
+        id: userId,
+        ...(username ? { name: username, username } : {}),
+        email: `${userId}@test.dev`,
+    });
+    const [row] = await db.drizzle.db
+        .insert(player)
+        .values({ ...playerOverrides, userId })
+        .returning();
+    if (!row) {
+        throw new Error('seedPlayerWithUser: insert returned no row');
+    }
+    return { account, player: row };
+}
+//# sourceMappingURL=seed-player.js.map

package/dist/testing/seed-player.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-player.js","sourceRoot":"","sources":["../../src/testing/seed-player.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,iCAAiC,CAAC;AAGvD,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,QAAQ;IAC9C,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,YAA+C,EAAE;IAC1F,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,cAAc,EAAE;QAC1B,KAAK,EAAE,GAAG,UAAU,EAAE,WAAW;QACjC,aAAa,EAAE,IAAI;QACnB,GAAG,SAAS;KACb,CAAC;SACD,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAID,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAU,EAAE,YAAiC,EAAE;IACtF,MAAM,EAAE,QAAQ,EAAE,GAAG,eAAe,EAAE,GAAG,SAAS,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE;QACjC,EAAE,EAAE,MAAM;QACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,KAAK,EAAE,GAAG,MAAM,WAAW;KAC5B,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,CAAC;SACtC,SAAS,EAAE,CAAC;IACf,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAClC,CAAC"}

package/dist/testing/seed-wallet.d.ts

@@ -0,0 +1,9 @@
+import { walletTransaction } from '../wallet/schema/index.js';
+import type { TestDb } from './real-infra.js';
+/**
+ * Inserts a completed deposit for a user, creating the wallet row when the test
+ * has not made one yet. Enough to give the RG limit gate and the monitoring
+ * evaluator prior spend to read.
+ */
+export declare function seedCompletedDeposit(db: TestDb, userId: string, amount: string, overrides?: Partial<typeof walletTransaction.$inferInsert>): Promise<void>;
+//# sourceMappingURL=seed-wallet.d.ts.map

package/dist/testing/seed-wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-wallet.d.ts","sourceRoot":"","sources":["../../src/testing/seed-wallet.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,OAAO,CAAC,OAAO,iBAAiB,CAAC,YAAY,CAAM,iBAmB/D"}

package/dist/testing/seed-wallet.js

@@ -0,0 +1,27 @@
+import { eq } from 'drizzle-orm';
+import { wallet, walletTransaction } from '../wallet/schema/index.js';
+/**
+ * Inserts a completed deposit for a user, creating the wallet row when the test
+ * has not made one yet. Enough to give the RG limit gate and the monitoring
+ * evaluator prior spend to read.
+ */
+export async function seedCompletedDeposit(db, userId, amount, overrides = {}) {
+    await db.drizzle.db
+        .insert(wallet)
+        .values({ userId, currency: 'USD' })
+        .onConflictDoNothing()
+        .returning();
+    const [walletRow] = await db.drizzle.db.select().from(wallet).where(eq(wallet.userId, userId));
+    if (!walletRow) {
+        throw new Error('seedCompletedDeposit: no wallet row for user');
+    }
+    await db.drizzle.db.insert(walletTransaction).values({
+        walletId: walletRow.id,
+        type: 'deposit',
+        amount,
+        currency: 'USD',
+        status: 'completed',
+        ...overrides,
+    });
+}
+//# sourceMappingURL=seed-wallet.js.map

package/dist/testing/seed-wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-wallet.js","sourceRoot":"","sources":["../../src/testing/seed-wallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGtE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,EAAU,EACV,MAAc,EACd,MAAc,EACd,YAA4D,EAAE;IAE9D,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SACnC,mBAAmB,EAAE;SACrB,SAAS,EAAE,CAAC;IACf,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;QACnD,QAAQ,EAAE,SAAS,CAAC,EAAE;QACtB,IAAI,EAAE,SAAS;QACf,MAAM;QACN,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,WAAW;QACnB,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/wallet/__tests__/admin-reporting.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=admin-reporting.int.test.d.ts.map

package/dist/wallet/__tests__/admin-reporting.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-reporting.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/admin-reporting.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/admin-reporting.int.test.js

@@ -0,0 +1,236 @@
+import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest';
+import { findOneOrThrow } from '@openora/core/server';
+import { randomUUID } from 'node:crypto';
+import { sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { migrate } from '../migrate.js';
+import { wallet, walletTransaction } from '../schema/index.js';
+import { DrizzleAdminWalletReporting } from '../admin-reporting.js';
+let db;
+let reporting;
+const AT = (iso) => new Date(iso);
+async function seedWallet(overrides = {}) {
+    const row = findOneOrThrow(await db.drizzle.db
+        .insert(wallet)
+        .values({ userId: randomUUID(), currency: 'USD', ...overrides })
+        .returning(), new Error('seedWallet: query returned no row'));
+    return row;
+}
+async function seedTx(walletId, overrides = {}) {
+    const row = findOneOrThrow(await db.drizzle.db
+        .insert(walletTransaction)
+        .values({
+        walletId,
+        type: 'deposit',
+        amount: '100',
+        currency: 'USD',
+        status: 'completed',
+        rail: 'fiat',
+        createdAt: AT('2026-01-01T00:00:00.000Z'),
+        ...overrides,
+    })
+        .returning(), new Error('seedTx: query returned no row'));
+    return row;
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate]);
+    reporting = new DrizzleAdminWalletReporting(db.drizzle);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${wallet} RESTART IDENTITY CASCADE`);
+});
+describe('DrizzleAdminWalletReporting.totals (real PG)', () => {
+    it('returns zeroes when there is nothing to sum', async () => {
+        expect(await reporting.totals()).toEqual({ deposits: '0', withdrawals: '0' });
+    });
+    it('sums completed deposits and withdrawals separately, ignoring other statuses and types', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { type: 'deposit', amount: '100' });
+        await seedTx(w.id, { type: 'deposit', amount: '50.25' });
+        await seedTx(w.id, { type: 'deposit', amount: '999', status: 'pending' });
+        await seedTx(w.id, { type: 'withdrawal', amount: '30' });
+        await seedTx(w.id, { type: 'withdrawal', amount: '777', status: 'failed' });
+        await seedTx(w.id, { type: 'bet', amount: '400' });
+        const totals = await reporting.totals();
+        expect(Number(totals.deposits)).toBe(150.25);
+        expect(Number(totals.withdrawals)).toBe(30);
+    });
+});
+describe('DrizzleAdminWalletReporting.listTransactions (real PG)', () => {
+    it('joins the owning wallet and maps the row onto the admin shape', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { amount: '100' });
+        const { rows, total } = await reporting.listTransactions({ page: 1, limit: 20 });
+        expect(total).toBe(1);
+        expect(rows[0]).toMatchObject({
+            userId: w.userId,
+            type: 'deposit',
+            currency: 'USD',
+            status: 'completed',
+            rail: 'fiat',
+        });
+        expect(Number(rows[0]?.amount)).toBe(100);
+        expect(rows[0]?.createdAt).toBeInstanceOf(Date);
+    });
+    it('maps a null rail to null', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { rail: null });
+        const { rows } = await reporting.listTransactions({ page: 1, limit: 20 });
+        expect(rows[0]?.rail).toBeNull();
+    });
+    it('filters by userIds across wallets', async () => {
+        const mine = await seedWallet();
+        const other = await seedWallet();
+        await seedTx(mine.id, { amount: '10' });
+        await seedTx(other.id, { amount: '20' });
+        const { rows, total } = await reporting.listTransactions({
+            page: 1,
+            limit: 20,
+            userIds: [mine.userId],
+        });
+        expect(total).toBe(1);
+        expect(rows[0]?.userId).toBe(mine.userId);
+    });
+    it('ignores an empty userIds array instead of matching nothing', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id);
+        const { total } = await reporting.listTransactions({ page: 1, limit: 20, userIds: [] });
+        expect(total).toBe(1);
+    });
+    it('filters by type, currency, rail and status', async () => {
+        const w = await seedWallet();
+        const match = await seedTx(w.id, {
+            type: 'withdrawal',
+            currency: 'BTC',
+            rail: 'crypto',
+            status: 'pending',
+        });
+        await seedTx(w.id, {
+            type: 'withdrawal',
+            currency: 'BTC',
+            rail: 'crypto',
+            status: 'completed',
+        });
+        await seedTx(w.id, { type: 'deposit', currency: 'BTC', rail: 'crypto', status: 'pending' });
+        await seedTx(w.id, { type: 'withdrawal', currency: 'USD', rail: 'fiat', status: 'pending' });
+        const { rows, total } = await reporting.listTransactions({
+            page: 1,
+            limit: 20,
+            type: 'withdrawal',
+            currency: 'BTC',
+            rail: 'crypto',
+            status: 'pending',
+        });
+        expect(total).toBe(1);
+        expect(rows[0]?.id).toBe(match.id);
+    });
+    it('filters by an inclusive createdAt window', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { createdAt: AT('2026-01-01T00:00:00.000Z') });
+        const inside = await seedTx(w.id, { createdAt: AT('2026-01-15T00:00:00.000Z') });
+        const edge = await seedTx(w.id, { createdAt: AT('2026-02-01T00:00:00.000Z') });
+        await seedTx(w.id, { createdAt: AT('2026-03-01T00:00:00.000Z') });
+        const { rows, total } = await reporting.listTransactions({
+            page: 1,
+            limit: 20,
+            dateFrom: AT('2026-01-10T00:00:00.000Z'),
+            dateTo: AT('2026-02-01T00:00:00.000Z'),
+        });
+        expect(total).toBe(2);
+        expect(rows.map((r) => r.id).sort()).toEqual([inside.id, edge.id].sort());
+    });
+    it('compares amountMin/amountMax numerically, not as strings', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { amount: '9' });
+        const inRange = await seedTx(w.id, { amount: '20' });
+        await seedTx(w.id, { amount: '100' });
+        const { rows, total } = await reporting.listTransactions({
+            page: 1,
+            limit: 20,
+            amountMin: '10',
+            amountMax: '99',
+        });
+        expect(total).toBe(1);
+        expect(rows[0]?.id).toBe(inRange.id);
+    });
+    it('sorts by createdAt descending by default', async () => {
+        const w = await seedWallet();
+        const older = await seedTx(w.id, { createdAt: AT('2026-01-01T00:00:00.000Z') });
+        const newer = await seedTx(w.id, { createdAt: AT('2026-02-01T00:00:00.000Z') });
+        const { rows } = await reporting.listTransactions({ page: 1, limit: 20 });
+        expect(rows.map((r) => r.id)).toEqual([newer.id, older.id]);
+    });
+    it('sorts by amount numerically when asked, ascending', async () => {
+        const w = await seedWallet();
+        const nine = await seedTx(w.id, { amount: '9' });
+        const ten = await seedTx(w.id, { amount: '10' });
+        const hundred = await seedTx(w.id, { amount: '100' });
+        const { rows } = await reporting.listTransactions({
+            page: 1,
+            limit: 20,
+            sortBy: 'amount',
+            sortOrder: 'asc',
+        });
+        expect(rows.map((r) => r.id)).toEqual([nine.id, ten.id, hundred.id]);
+    });
+    it('breaks a sort tie on id so paging never repeats or drops a row', async () => {
+        const w = await seedWallet();
+        const sameInstant = AT('2026-01-01T00:00:00.000Z');
+        await Promise.all([
+            seedTx(w.id, { createdAt: sameInstant }),
+            seedTx(w.id, { createdAt: sameInstant }),
+            seedTx(w.id, { createdAt: sameInstant }),
+        ]);
+        const first = await reporting.listTransactions({ page: 1, limit: 2 });
+        const second = await reporting.listTransactions({ page: 2, limit: 2 });
+        expect(first.rows).toHaveLength(2);
+        expect(second.rows).toHaveLength(1);
+        expect(new Set([...first.rows, ...second.rows].map((r) => r.id)).size).toBe(3);
+    });
+    it('pages the rows while total stays the size of the whole filtered set', async () => {
+        const w = await seedWallet();
+        await seedTx(w.id, { createdAt: AT('2026-01-01T00:00:00.000Z') });
+        const middle = await seedTx(w.id, { createdAt: AT('2026-01-02T00:00:00.000Z') });
+        await seedTx(w.id, { createdAt: AT('2026-01-03T00:00:00.000Z') });
+        const { rows, total } = await reporting.listTransactions({ page: 2, limit: 1 });
+        expect(total).toBe(3);
+        expect(rows.map((r) => r.id)).toEqual([middle.id]);
+    });
+});
+describe('DrizzleAdminWalletReporting.getTransaction (real PG)', () => {
+    it('returns null when no row matches', async () => {
+        expect(await reporting.getTransaction(randomUUID())).toBeNull();
+    });
+    it('surfaces the provider columns alongside the joined userId', async () => {
+        const w = await seedWallet();
+        const tx = await seedTx(w.id, { providerName: 'stripe', providerRefId: 'pi_123' });
+        const detail = await reporting.getTransaction(tx.id);
+        expect(detail).toMatchObject({
+            id: tx.id,
+            userId: w.userId,
+            providerName: 'stripe',
+            providerRefId: 'pi_123',
+        });
+    });
+    it('maps unset provider columns to null and surfaces the review columns', async () => {
+        const w = await seedWallet();
+        const reviewer = randomUUID();
+        const tx = await seedTx(w.id, {
+            reviewedBy: reviewer,
+            reviewedAt: AT('2026-01-02T00:00:00.000Z'),
+            reviewReason: 'manual',
+        });
+        const detail = await reporting.getTransaction(tx.id);
+        expect(detail).toMatchObject({
+            providerName: null,
+            providerRefId: null,
+            reviewedBy: reviewer,
+            reviewReason: 'manual',
+        });
+        expect(detail?.reviewedAt).toEqual(AT('2026-01-02T00:00:00.000Z'));
+    });
+});
+//# sourceMappingURL=admin-reporting.int.test.js.map

package/dist/wallet/__tests__/admin-reporting.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-reporting.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/admin-reporting.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEpE,IAAI,EAAU,CAAC;AACf,IAAI,SAAsC,CAAC;AAE3C,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;AAE1C,KAAK,UAAU,UAAU,CAAC,YAAiD,EAAE;IAC3E,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,CAAC;SAC/D,SAAS,EAAE,EACd,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAC/C,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,QAAgB,EAChB,YAA4D,EAAE;IAE9D,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC;QACN,QAAQ;QACR,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC;QACzC,GAAG,SAAS;KACb,CAAC;SACD,SAAS,EAAE,EACd,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAC3C,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,SAAS,GAAG,IAAI,2BAA2B,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,iBAAiB,KAAK,MAAM,2BAA2B,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;QAExC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAEjF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC5B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;YACvD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEnB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAExF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/B,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACjB,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5F,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAE7F,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;YACvD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,YAAY;YAClB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;YACvD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE,CAAC,0BAA0B,CAAC;YACxC,MAAM,EAAE,EAAE,CAAC,0BAA0B,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;YACvD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAEhF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAEtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC;YAChD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;SACzC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAEvE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAEhF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,CAAC,MAAM,SAAS,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,QAAQ;YACtB,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,EAAE,CAAC,0BAA0B,CAAC;YAC1C,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC;YAC3B,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,QAAQ;YACpB,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/bonus-rollover-concurrency.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bonus-rollover-concurrency.int.test.d.ts.map

package/dist/wallet/__tests__/bonus-rollover-concurrency.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bonus-rollover-concurrency.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/bonus-rollover-concurrency.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/bonus-rollover-concurrency.int.test.js

@@ -0,0 +1,163 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { findOneOrThrow } from '@openora/core/server';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { mock, makeEventBus, makeAuditWriter, makeIdentityReader, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletBalance, walletTransaction, walletBonusCredit, walletBonusRolloverConfig, } from '../schema/index.js';
+import { WalletCommandsService } from '../service/wallet-commands.service.js';
+import { WalletService, BonusRolloverLockedError, InsufficientBalanceError, } from '../service/wallet.service.js';
+let db;
+const unrestricted = mock({ isRestricted: vi.fn().mockResolvedValue(false) });
+async function seedWallet(balance, currency = 'USD') {
+    const row = findOneOrThrow(await db.drizzle.db.insert(wallet).values({ userId: randomUUID(), currency }).returning(), new Error('seedWallet: query returned no row'));
+    await db.drizzle.db
+        .insert(walletBalance)
+        .values({ walletId: row.id, currency: row.currency, amount: balance });
+    return row;
+}
+async function insertCredit(w, overrides = {}) {
+    return findOneOrThrow(await db.drizzle.db
+        .insert(walletBonusCredit)
+        .values({
+        walletId: w.id,
+        userId: w.userId,
+        currency: w.currency,
+        sourceType: 'gift',
+        creditedAmount: '0',
+        rolloverMultiplier: '1',
+        rolloverRequired: '0',
+        rolloverProgress: '0',
+        status: 'active',
+        ...overrides,
+    })
+        .returning(), new Error('insertCredit: query returned no row'));
+}
+function makeCommandsSvc() {
+    return new WalletCommandsService(unrestricted, makeAuditWriter());
+}
+function makeWalletSvc() {
+    return new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment: mock({ processDeposit: vi.fn(), processWithdrawal: vi.fn() }),
+        paymentProviders: makePaymentProviderRegistry(),
+        identityReader: makeIdentityReader(),
+        audit: makeAuditWriter(),
+    });
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${walletBonusCredit}, ${walletBonusRolloverConfig}, ${wallet} RESTART IDENTITY CASCADE`);
+});
+describe('bonus-rollover QA concurrency probe: two simultaneous bets against ONE active credit', () => {
+    const TRIALS = 8;
+    it('never lets rolloverProgress exceed rolloverRequired and completes the credit exactly once, across repeated trials', async () => {
+        for (let trial = 0; trial < TRIALS; trial++) {
+            const w = await seedWallet('1000');
+            const credit = await insertCredit(w, { creditedAmount: '100', rolloverRequired: '100' });
+            const svc = makeCommandsSvc();
+            const [r1, r2] = await Promise.all([
+                db.drizzle.db.transaction((txn) => svc.debit(txn, { userId: w.userId, amount: '70', type: 'bet' })),
+                db.drizzle.db.transaction((txn) => svc.debit(txn, { userId: w.userId, amount: '70', type: 'bet' })),
+            ]);
+            if (!r1.ok || !r2.ok) {
+                throw new Error(`trial ${trial}: expected both debits ok`);
+            }
+            const [row] = await db.drizzle.db
+                .select()
+                .from(walletBonusCredit)
+                .where(eq(walletBonusCredit.id, credit.id));
+            expect(Number(row.rolloverProgress), `trial ${trial}: progress must cap at 100`).toBe(100);
+            expect(row.status, `trial ${trial}: must flip to completed`).toBe('completed');
+            const completions = [
+                ...(r1.completedBonusCredits ?? []),
+                ...(r2.completedBonusCredits ?? []),
+            ];
+            expect(completions, `trial ${trial}: exactly one debit reports the completion, not zero, not both`).toHaveLength(1);
+            expect(completions[0].id).toBe(credit.id);
+        }
+    });
+});
+describe('bonus-rollover QA concurrency probe: withdrawal racing the bet that unlocks it', () => {
+    const TRIALS = 8;
+    it('a withdrawal for the full pre-bet balance never succeeds, regardless of which transaction wins the race', async () => {
+        for (let trial = 0; trial < TRIALS; trial++) {
+            const w = await seedWallet('100');
+            await insertCredit(w, {
+                creditedAmount: '100',
+                rolloverRequired: '100',
+                rolloverProgress: '90',
+            });
+            const commandsSvc = makeCommandsSvc();
+            const walletSvc = makeWalletSvc();
+            const betPromise = db.drizzle.db.transaction((txn) => commandsSvc.debit(txn, { userId: w.userId, amount: '10', type: 'bet' }));
+            const withdrawPromise = walletSvc
+                .withdraw({
+                userId: w.userId,
+                amount: '100',
+                currency: 'USD',
+                ip: null,
+                userAgent: null,
+            })
+                .then((res) => ({ ok: true, res }), (err) => ({ ok: false, err }));
+            const [betResult, withdrawOutcome] = await Promise.all([betPromise, withdrawPromise]);
+            if (!betResult.ok) {
+                throw new Error(`trial ${trial}: expected bet debit ok`);
+            }
+            expect(withdrawOutcome.ok, `trial ${trial}: a 100-unit withdrawal must never succeed here`).toBe(false);
+            if (!withdrawOutcome.ok) {
+                expect(withdrawOutcome.err, `trial ${trial}: refusal must be one of the two expected domain errors, not a generic failure`).toSatisfy((err) => err instanceof BonusRolloverLockedError || err instanceof InsufficientBalanceError);
+            }
+            const [balRow] = await db.drizzle.db
+                .select()
+                .from(walletBalance)
+                .where(eq(walletBalance.walletId, w.id));
+            expect(Number(balRow.amount), `trial ${trial}: only the bet's 10 ever left the balance`).toBe(90);
+            const [creditRow] = await db.drizzle.db
+                .select()
+                .from(walletBonusCredit)
+                .where(eq(walletBonusCredit.walletId, w.id));
+            expect(creditRow.status).toBe('completed');
+            expect(Number(creditRow.rolloverProgress)).toBe(100);
+        }
+    });
+    it('a withdrawal for exactly the pre-bet UNLOCKED portion succeeds under either race ordering, and total money out is consistent', async () => {
+        for (let trial = 0; trial < TRIALS; trial++) {
+            const w = await seedWallet('100');
+            await insertCredit(w, {
+                creditedAmount: '100',
+                rolloverRequired: '100',
+                rolloverProgress: '90',
+            });
+            const commandsSvc = makeCommandsSvc();
+            const walletSvc = makeWalletSvc();
+            const betPromise = db.drizzle.db.transaction((txn) => commandsSvc.debit(txn, { userId: w.userId, amount: '10', type: 'bet' }));
+            const withdrawPromise = walletSvc
+                .withdraw({
+                userId: w.userId,
+                amount: '10',
+                currency: 'USD',
+                ip: null,
+                userAgent: null,
+            })
+                .then(() => true, () => false);
+            const [betResult, withdrawSucceeded] = await Promise.all([betPromise, withdrawPromise]);
+            if (!betResult.ok) {
+                throw new Error(`trial ${trial}: expected bet debit ok`);
+            }
+            const [balRow] = await db.drizzle.db
+                .select()
+                .from(walletBalance)
+                .where(eq(walletBalance.walletId, w.id));
+            expect(Number(balRow.amount), `trial ${trial}: balance must equal 100 - bet(10) - withdraw(10 if it succeeded)`).toBe(withdrawSucceeded ? 80 : 90);
+        }
+    });
+});
+//# sourceMappingURL=bonus-rollover-concurrency.int.test.js.map