@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/iam/adapters/admin-player-activity.d.ts

@@ -0,0 +1,10 @@
+import type { ActiveUsersTrendPoint, AdminPlayerActivity, PlayerActivityFilter, RegistrationsOverTimePoint, RetentionCohortRow } from '@openora/core/contracts';
+import { DrizzleService } from '@openora/core/server';
+export declare class DrizzleAdminPlayerActivity implements AdminPlayerActivity {
+    private readonly drizzle;
+    constructor(drizzle: DrizzleService);
+    getRegistrationsOverTime(filter: PlayerActivityFilter): Promise<RegistrationsOverTimePoint[]>;
+    getActiveUsersTrend(filter: PlayerActivityFilter): Promise<ActiveUsersTrendPoint[]>;
+    getRetentionCohorts(filter: PlayerActivityFilter, windowDays: 7 | 30): Promise<RetentionCohortRow[]>;
+}
+//# sourceMappingURL=admin-player-activity.d.ts.map

package/dist/iam/adapters/admin-player-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-player-activity.d.ts","sourceRoot":"","sources":["../../../src/iam/adapters/admin-player-activity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAgBtD,qBAAa,0BAA2B,YAAW,mBAAmB;IACxD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,cAAc;IAE9C,wBAAwB,CAC5B,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAiBlC,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAuCnF,mBAAmB,CACvB,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,CAAC,GAAG,EAAE,GACjB,OAAO,CAAC,kBAAkB,EAAE,CAAC;CA2CjC"}

package/dist/iam/adapters/admin-player-activity.js

@@ -0,0 +1,106 @@
+import { sql } from 'drizzle-orm';
+// Read-only cross-domain read of the user/session tables via the public /schema
+// subpath (allowed per ADR-0020/0025) - iam already depends on identity (plugin.ts),
+// which owns these tables. Mirrors how identity's DrizzleAdminUserDirectory reads
+// the profile module's `player` table.
+import { session, user } from '@openora/core/pam/schema/identity';
+const DEFAULT_RANGE_DAYS = 30;
+function resolveRange(filter) {
+    const to = filter.dateTo ?? new Date();
+    const from = filter.dateFrom ?? new Date(to.getTime() - DEFAULT_RANGE_DAYS * 24 * 60 * 60 * 1000);
+    return { from, to };
+}
+export class DrizzleAdminPlayerActivity {
+    drizzle;
+    constructor(drizzle) {
+        this.drizzle = drizzle;
+    }
+    async getRegistrationsOverTime(filter) {
+        const { from, to } = resolveRange(filter);
+        const result = await this.drizzle.db.execute(sql `
+      select gs::date::text as date, count(${user.id})::int as registrations
+      from generate_series(${from}::date, ${to}::date, interval '1 day') as gs
+      left join ${user} on date_trunc('day', ${user.createdAt}) = gs
+      group by gs
+      order by gs
+    `);
+        return result.rows.map((r) => ({ date: r.date, registrations: Number(r.registrations) }));
+    }
+    // "Active" = a session row whose `updatedAt` falls in the trailing window. Chosen over
+    // `createdAt` because better-auth refreshes a session's `updatedAt` on continued use
+    // (schema/index.ts `$onUpdateFn`), so it approximates ongoing activity across the
+    // session's lifetime; `createdAt` would only capture the single login moment. This is
+    // the same "active" definition reused below for retention's "has a session row" check.
+    async getActiveUsersTrend(filter) {
+        const { from, to } = resolveRange(filter);
+        // A single join bounded by the widest (MAU) window, then FILTER narrows the
+        // distinct-user count per day - one pass over `session` instead of three
+        // correlated subqueries re-scanning it for every generated day.
+        const result = await this.drizzle.db.execute(sql `
+      select
+        gs::date::text as date,
+        count(distinct ${session.userId}) filter (
+          where ${session.updatedAt} >= gs and ${session.updatedAt} < gs + interval '1 day'
+        ) as dau,
+        count(distinct ${session.userId}) filter (
+          where ${session.updatedAt} >= gs - interval '6 days'
+            and ${session.updatedAt} < gs + interval '1 day'
+        ) as wau,
+        count(distinct ${session.userId}) filter (
+          where ${session.updatedAt} >= gs - interval '29 days'
+            and ${session.updatedAt} < gs + interval '1 day'
+        ) as mau
+      from generate_series(${from}::date, ${to}::date, interval '1 day') as gs
+      left join ${session}
+        on ${session.updatedAt} >= gs - interval '29 days'
+        and ${session.updatedAt} < gs + interval '1 day'
+      group by gs
+      order by gs
+    `);
+        return result.rows.map((r) => ({
+            date: r.date,
+            dau: Number(r.dau),
+            wau: Number(r.wau),
+            mau: Number(r.mau),
+        }));
+    }
+    async getRetentionCohorts(filter, windowDays) {
+        const { from, to } = resolveRange(filter);
+        const result = await this.drizzle.db.execute(sql `
+      with cohort_users as (
+        select ${user.id} as user_id, date_trunc('day', ${user.createdAt}) as cohort_date
+        from ${user}
+        where ${user.createdAt} >= ${from} and ${user.createdAt} <= ${to}
+      ),
+      returned_users as (
+        select distinct cu.user_id
+        from cohort_users cu
+        inner join ${session}
+          on ${session.userId} = cu.user_id
+          and ${session.updatedAt} >= cu.cohort_date + interval '1 day'
+          and ${session.updatedAt} <= cu.cohort_date + interval '1 day' * ${windowDays}
+      )
+      select
+        cu.cohort_date::date::text as cohort_date,
+        count(cu.user_id) as cohort_size,
+        count(ru.user_id) as returned,
+        (cu.cohort_date + interval '1 day' * ${windowDays} <= now()) as is_complete
+      from cohort_users cu
+      left join returned_users ru on ru.user_id = cu.user_id
+      group by cu.cohort_date
+      order by cu.cohort_date
+    `);
+        return result.rows.map((r) => {
+            const cohortSize = Number(r.cohort_size);
+            const returned = Number(r.returned);
+            return {
+                cohortDate: r.cohort_date,
+                cohortSize,
+                returned,
+                returnRate: cohortSize > 0 ? returned / cohortSize : 0,
+                isComplete: r.is_complete,
+            };
+        });
+    }
+}
+//# sourceMappingURL=admin-player-activity.js.map

package/dist/iam/adapters/admin-player-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-player-activity.js","sourceRoot":"","sources":["../../../src/iam/adapters/admin-player-activity.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,gFAAgF;AAChF,qFAAqF;AACrF,kFAAkF;AAClF,uCAAuC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,mCAAmC,CAAC;AAElE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,YAAY,CAAC,MAA4B;IAChD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,wBAAwB,CAC5B,MAA4B;QAE5B,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAA0C,GAAG,CAAA;6CAChD,IAAI,CAAC,EAAE;6BACvB,IAAI,WAAW,EAAE;kBAC5B,IAAI,yBAAyB,IAAI,CAAC,SAAS;;;KAGxD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC;IAED,uFAAuF;IACvF,qFAAqF;IACrF,kFAAkF;IAClF,sFAAsF;IACtF,uFAAuF;IACvF,KAAK,CAAC,mBAAmB,CAAC,MAA4B;QACpD,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAKzC,GAAG,CAAA;;;yBAGe,OAAO,CAAC,MAAM;kBACrB,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,SAAS;;yBAEzC,OAAO,CAAC,MAAM;kBACrB,OAAO,CAAC,SAAS;kBACjB,OAAO,CAAC,SAAS;;yBAEV,OAAO,CAAC,MAAM;kBACrB,OAAO,CAAC,SAAS;kBACjB,OAAO,CAAC,SAAS;;6BAEN,IAAI,WAAW,EAAE;kBAC5B,OAAO;aACZ,OAAO,CAAC,SAAS;cAChB,OAAO,CAAC,SAAS;;;KAG1B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAClB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAClB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,MAA4B,EAC5B,UAAkB;QAElB,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAKzC,GAAG,CAAA;;iBAEO,IAAI,CAAC,EAAE,kCAAkC,IAAI,CAAC,SAAS;eACzD,IAAI;gBACH,IAAI,CAAC,SAAS,OAAO,IAAI,QAAQ,IAAI,CAAC,SAAS,OAAO,EAAE;;;;;qBAKnD,OAAO;eACb,OAAO,CAAC,MAAM;gBACb,OAAO,CAAC,SAAS;gBACjB,OAAO,CAAC,SAAS,2CAA2C,UAAU;;;;;;+CAMvC,UAAU;;;;;KAKpD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO;gBACL,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,UAAU;gBACV,QAAQ;gBACR,UAAU,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBACtD,UAAU,EAAE,CAAC,CAAC,WAAW;aAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/iam/adapters/admin-role-assignment-directory.d.ts

@@ -0,0 +1,8 @@
+import type { AdminRoleAssignmentDirectory, AdminRoleAssignmentSummary } from '@openora/core/contracts';
+import { DrizzleService } from '@openora/core/server';
+export declare class DrizzleAdminRoleAssignmentDirectory implements AdminRoleAssignmentDirectory {
+    private readonly drizzle;
+    constructor(drizzle: DrizzleService);
+    listByUserIds(userIds: readonly string[]): Promise<AdminRoleAssignmentSummary[]>;
+}
+//# sourceMappingURL=admin-role-assignment-directory.d.ts.map

package/dist/iam/adapters/admin-role-assignment-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-role-assignment-directory.d.ts","sourceRoot":"","sources":["../../../src/iam/adapters/admin-role-assignment-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,qBAAa,mCAAoC,YAAW,4BAA4B;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,cAAc;IAE9C,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;CAcvF"}

package/dist/iam/adapters/admin-role-assignment-directory.js

@@ -0,0 +1,23 @@
+import { eq, inArray } from 'drizzle-orm';
+import { adminRole, adminRoleAssignment } from '../schema/index.js';
+export class DrizzleAdminRoleAssignmentDirectory {
+    drizzle;
+    constructor(drizzle) {
+        this.drizzle = drizzle;
+    }
+    async listByUserIds(userIds) {
+        if (userIds.length === 0) {
+            return [];
+        }
+        return this.drizzle.db
+            .select({
+            userId: adminRoleAssignment.userId,
+            roleId: adminRoleAssignment.roleId,
+            roleName: adminRole.name,
+        })
+            .from(adminRoleAssignment)
+            .innerJoin(adminRole, eq(adminRole.id, adminRoleAssignment.roleId))
+            .where(inArray(adminRoleAssignment.userId, userIds));
+    }
+}
+//# sourceMappingURL=admin-role-assignment-directory.js.map

package/dist/iam/adapters/admin-role-assignment-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-role-assignment-directory.js","sourceRoot":"","sources":["../../../src/iam/adapters/admin-role-assignment-directory.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,MAAM,OAAO,mCAAmC;IACjB;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;aACnB,MAAM,CAAC;YACN,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,QAAQ,EAAE,SAAS,CAAC,IAAI;SACzB,CAAC;aACD,IAAI,CAAC,mBAAmB,CAAC;aACzB,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;aAClE,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/iam/contract/index.d.ts

@@ -95,6 +95,27 @@ export declare const EffectivePermissionsSchema: z.ZodObject<{
         }>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
+export declare const IAM_ROLE_SORT_BY_VALUES: readonly ["name", "createdAt", "key"];
+export declare const IamRoleSortBySchema: z.ZodDefault<z.ZodEnum<{
+    createdAt: "createdAt";
+    name: "name";
+    key: "key";
+}>>;
+export type IamRoleSortBy = z.infer<typeof IamRoleSortBySchema>;
+export declare const IAM_ASSIGNMENT_SORT_BY_VALUES: readonly ["createdAt"];
+export declare const IamAssignmentSortBySchema: z.ZodDefault<z.ZodEnum<{
+    createdAt: "createdAt";
+}>>;
+export type IamAssignmentSortBy = z.infer<typeof IamAssignmentSortBySchema>;
+export declare const IAM_INVITATION_SORT_BY_VALUES: readonly ["createdAt", "expiresAt", "email", "status", "acceptedAt"];
+export declare const IamInvitationSortBySchema: z.ZodDefault<z.ZodEnum<{
+    email: "email";
+    status: "status";
+    createdAt: "createdAt";
+    expiresAt: "expiresAt";
+    acceptedAt: "acceptedAt";
+}>>;
+export type IamInvitationSortBy = z.infer<typeof IamInvitationSortBySchema>;
 export declare const iamContract: {
     listCatalog: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
         modules: z.ZodArray<z.ZodObject<{
@@ -111,6 +132,15 @@ export declare const iamContract: {
     listRoles: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
         limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+        sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            createdAt: "createdAt";
+            name: "name";
+            key: "key";
+        }>>>;
+        sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            asc: "asc";
+            desc: "desc";
+        }>>>;
     }, z.core.$strip>, z.ZodObject<{
         items: z.ZodArray<z.ZodObject<{
             id: z.ZodUUID;
@@ -221,6 +251,13 @@ export declare const iamContract: {
         page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
         limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
         userId: z.ZodOptional<z.ZodUUID>;
+        sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            createdAt: "createdAt";
+        }>>>;
+        sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            asc: "asc";
+            desc: "desc";
+        }>>>;
     }, z.core.$strip>, z.ZodObject<{
         items: z.ZodArray<z.ZodObject<{
             id: z.ZodUUID;
@@ -251,6 +288,17 @@ export declare const iamContract: {
     listInvitations: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
         limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+        sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            email: "email";
+            status: "status";
+            createdAt: "createdAt";
+            expiresAt: "expiresAt";
+            acceptedAt: "acceptedAt";
+        }>>>;
+        sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+            asc: "asc";
+            desc: "desc";
+        }>>>;
     }, z.core.$strip>, z.ZodObject<{
         items: z.ZodArray<z.ZodObject<{
             id: z.ZodUUID;
@@ -308,6 +356,16 @@ export declare const iamContract: {
             }>;
         }, z.core.$strip>>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    reportAccessDenied: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        resource: z.ZodString;
+        level: z.ZodEnum<{
+            no_access: "no_access";
+            read: "read";
+            read_write: "read_write";
+        }>;
+    }, z.core.$strip>, z.ZodObject<{
+        recorded: z.ZodBoolean;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
 };
 export type AdminRole = z.infer<typeof AdminRoleSchema>;
 export type AdminRoleWithGrants = z.infer<typeof AdminRoleWithGrantsSchema>;

package/dist/iam/contract/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/iam/contract/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AASzB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAExF,eAAO,MAAM,eAAe;;;;;;;iBAS1B,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAEpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;iBAG1C,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAShC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;iBAGxB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;iBAG3B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;iBAErC,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiFvB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/iam/contract/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AASzB,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAExF,eAAO,MAAM,eAAe;;;;;;;iBAS1B,CAAC;AAGH,eAAO,MAAM,yBAAyB;;;;;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;iBAEpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;iBAG1C,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;iBAShC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;iBAGxB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;iBAG3B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;iBAErC,CAAC;AAEH,eAAO,MAAM,uBAAuB,uCAAwC,CAAC;AAC7E,eAAO,MAAM,mBAAmB;;;;GAAkD,CAAC;AACnF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,6BAA6B,wBAAyB,CAAC;AACpE,eAAO,MAAM,yBAAyB;;GAA6D,CAAC;AACpG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,6BAA6B,sEAMhC,CAAC;AACX,eAAO,MAAM,yBAAyB;;;;;;GAA6D,CAAC;AACpG,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsGvB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/iam/contract/index.js

@@ -1,7 +1,7 @@
 import { oc } from '@orpc/contract';
 import * as z from 'zod';
 import { InvitationStatusSchema, PermissionLevelSchema, TimestampSchema, UuidSchema, } from '@openora/core/contracts';
-import { PageQuerySchema, paginated } from '@openora/core/contracts/kit';
+import { PageQuerySchema, SortOrderSchema, paginated } from '@openora/core/contracts/kit';
 export { InvitationStatusSchema, PermissionLevelSchema } from '@openora/core/contracts';
 export const AdminRoleSchema = z.object({
     id: UuidSchema,
@@ -57,11 +57,26 @@ export const GrantInputSchema = z.object({
 export const EffectivePermissionsSchema = z.object({
     permissions: z.array(RolePermissionLevelSchema),
 });
+export const IAM_ROLE_SORT_BY_VALUES = ['name', 'createdAt', 'key'];
+export const IamRoleSortBySchema = z.enum(IAM_ROLE_SORT_BY_VALUES).default('name');
+export const IAM_ASSIGNMENT_SORT_BY_VALUES = ['createdAt'];
+export const IamAssignmentSortBySchema = z.enum(IAM_ASSIGNMENT_SORT_BY_VALUES).default('createdAt');
+export const IAM_INVITATION_SORT_BY_VALUES = [
+    'createdAt',
+    'expiresAt',
+    'email',
+    'status',
+    'acceptedAt',
+];
+export const IamInvitationSortBySchema = z.enum(IAM_INVITATION_SORT_BY_VALUES).default('createdAt');
 export const iamContract = {
     listCatalog: oc.route({ method: 'GET', path: '/iam/catalog' }).output(CatalogSchema),
     listRoles: oc
         .route({ method: 'GET', path: '/iam/roles' })
-        .input(PageQuerySchema)
+        .input(PageQuerySchema.extend({
+        sortBy: IamRoleSortBySchema.optional(),
+        sortOrder: SortOrderSchema.default('asc').optional(),
+    }))
         .output(paginated(AdminRoleWithGrantsSchema)),
     getRole: oc
         .route({ method: 'GET', path: '/iam/roles/{roleId}' })
@@ -96,7 +111,11 @@ export const iamContract = {
         .output(z.object({ success: z.literal(true) })),
     listAssignments: oc
         .route({ method: 'GET', path: '/iam/assignments' })
-        .input(PageQuerySchema.extend({ userId: UuidSchema.optional() }))
+        .input(PageQuerySchema.extend({
+        userId: UuidSchema.optional(),
+        sortBy: IamAssignmentSortBySchema.optional(),
+        sortOrder: SortOrderSchema.default('desc').optional(),
+    }))
         .output(paginated(AdminRoleAssignmentDetailSchema)),
     previewEffectivePermissions: oc
         .route({ method: 'POST', path: '/iam/effective-permissions' })
@@ -104,7 +123,10 @@ export const iamContract = {
         .output(EffectivePermissionsSchema),
     listInvitations: oc
         .route({ method: 'GET', path: '/iam/invitations' })
-        .input(PageQuerySchema)
+        .input(PageQuerySchema.extend({
+        sortBy: IamInvitationSortBySchema.optional(),
+        sortOrder: SortOrderSchema.default('desc').optional(),
+    }))
         .output(paginated(AdminInvitationSchema)),
     inviteAdmin: oc
         .route({ method: 'POST', path: '/iam/invitations' })
@@ -121,5 +143,9 @@ export const iamContract = {
     getMyPermissions: oc
         .route({ method: 'GET', path: '/iam/my-permissions' })
         .output(EffectivePermissionsSchema),
+    reportAccessDenied: oc
+        .route({ method: 'POST', path: '/iam/report-access-denied' })
+        .input(GrantInputSchema)
+        .output(z.object({ recorded: z.boolean() })),
 };
 //# sourceMappingURL=index.js.map

package/dist/iam/contract/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/iam/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,UAAU;IACd,8EAA8E;IAC9E,6EAA6E;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC,MAAM,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,UAAU;IACd,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IAEpF,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SAC5C,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAE/C,OAAO,EAAE,EAAE;SACR,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,yBAAyB,CAAC;IAEpC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SAC7C,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACrC,MAAM,CAAC,eAAe,CAAC;IAE1B,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,eAAe,CAAC;IAE1B,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACxD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,kBAAkB,EAAE,EAAE;SACnB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;SACjE,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAClC,CAAC,CACH;SACA,MAAM,CAAC,yBAAyB,CAAC;IAEpC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SAC3D,MAAM,CAAC,yBAAyB,CAAC;IAEpC,YAAY,EAAE,EAAE;SACb,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,eAAe,EAAE,EAAE;SAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SAClD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAChE,MAAM,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAErD,2BAA2B,EAAE,EAAE;SAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC9F,MAAM,CAAC,0BAA0B,CAAC;IAErC,eAAe,EAAE,EAAE;SAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SAClD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAE3C,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,qBAAqB,CAAC;IAEhC,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;SAC1D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpE,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACrD,MAAM,CAAC,0BAA0B,CAAC;CACtC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/iam/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE1F,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAExF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,UAAU;IACd,8EAA8E;IAC9E,6EAA6E;IAC7E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAAC,MAAM,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,UAAU;IACd,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAU,CAAC;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAGnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,WAAW,CAAU,CAAC;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGpG,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW;IACX,WAAW;IACX,OAAO;IACP,QAAQ;IACR,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGpG,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IAEpF,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SAC5C,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC,CACH;SACA,MAAM,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAE/C,OAAO,EAAE,EAAE;SACR,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,yBAAyB,CAAC;IAEpC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SAC7C,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACrC,MAAM,CAAC,eAAe,CAAC;IAE1B,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACpE,MAAM,CAAC,eAAe,CAAC;IAE1B,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACxD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,kBAAkB,EAAE,EAAE;SACnB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC;SACjE,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAClC,CAAC,CACH;SACA,MAAM,CAAC,yBAAyB,CAAC;IAEpC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SAC3D,MAAM,CAAC,yBAAyB,CAAC;IAEpC,YAAY,EAAE,EAAE;SACb,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,eAAe,EAAE,EAAE;SAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SAClD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC,CACH;SACA,MAAM,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAErD,2BAA2B,EAAE,EAAE;SAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;SAC7D,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SAC9F,MAAM,CAAC,0BAA0B,CAAC;IAErC,eAAe,EAAE,EAAE;SAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SAClD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE;QAC5C,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC,CACH;SACA,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAE3C,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,qBAAqB,CAAC;IAEhC,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;SAC1D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpE,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjD,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;SACrD,MAAM,CAAC,0BAA0B,CAAC;IAErC,kBAAkB,EAAE,EAAE;SACnB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAC/C,CAAC"}

package/dist/iam/plugin.d.ts

@@ -1,3 +1,183 @@
-declare const _default: import("@openora/core/server").Plugin;
+declare const _default: {
+    readonly id: "iam";
+    readonly dependsOn: readonly ["identity"];
+    readonly requiresPorts: readonly [import("@openora/core/contracts").Token<import("@openora/core/contracts").MailDispatchPort>];
+    readonly register: (ctx: import("@openora/core/server").PluginContext<{
+        ADMIN_GAME_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminGameReporting>;
+        ADMIN_GUARD: import("@openora/core/contracts").Token<import("@openora/core/server").AdminGuard>;
+        ADMIN_PERMISSION_RESOLVER: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPermissionResolver>;
+        ADMIN_PLAYER_ACTIVITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPlayerActivity>;
+        ADMIN_ROLE_ASSIGNMENT_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminRoleAssignmentDirectory>;
+        ADMIN_SECURITY_POLICY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminSecurityPolicy>;
+        ADMIN_USER_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminUserDirectory>;
+        ADMIN_WALLET_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminWalletReporting>;
+        AUDIT_WRITER: import("@openora/core/contracts").SealedToken<import("@openora/core/contracts").AuditWritePort>;
+        AUTH_SESSION: import("@openora/core/contracts").Token<import("@openora/core/server").SessionResolver>;
+        CACHE: import("@openora/core/contracts").Token<import("@openora/core/contracts").CacheAdapter>;
+        CHAT_BLOCK_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatBlockWriter>;
+        CHAT_MODERATION: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatModeration, string>;
+        CHAT_REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        CHAT_REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+        CHAT_ROOM_ACCESS: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatRoomAccess>;
+        CHAT_SYSTEM_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatSystemWriter, string>;
+        DRIZZLE: import("@openora/core/contracts").Token<import("@openora/core/server").DrizzleService>;
+        EMAIL_SENDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailSenderPort>;
+        EMAIL_TEMPLATE_RENDERER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailTemplateRenderer>;
+        ERROR_TRACKING: import("@openora/core/contracts").Token<import("@openora/core/contracts").ErrorTrackingAdapter>;
+        EVENT_BUS: import("@openora/core/contracts").Token<import("@openora/core/server").EventBus>;
+        EXCHANGE_RATE_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateReader>;
+        CRYPTO_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        FIAT_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        SWAP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapAdapter>;
+        SWAP_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapWebhookVerifier>;
+        GAME_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GameAdapter>;
+        GEO_CHECK_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoCheckCommands>;
+        GEO_IP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoIpAdapter>;
+        IDENTITY_OPTIONS: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityServiceOptions>;
+        IDENTITY_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityReader, string>;
+        IGAMING_CONFIG: import("@openora/core/contracts").Token<{
+            branding: {
+                name: string;
+                themePreset?: string | undefined;
+                supportEmail?: string | undefined;
+            };
+            currencies: string[];
+            jurisdictions: string[];
+            blockedCountries: string[];
+            limits: {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            };
+            providers: {
+                payment?: string | undefined;
+                kyc?: string | undefined;
+                geoIp?: string | undefined;
+                aggregator?: string | undefined;
+                notification?: string | undefined;
+            };
+            enabledModules?: string[] | undefined;
+        }, string>;
+        JOB_QUEUE: import("@openora/core/contracts").Token<import("@openora/core/contracts").JobQueueAdapter>;
+        KYC_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycAdapter>;
+        KYC_STATUS_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycStatusWriter>;
+        KYC_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycWebhookVerifier>;
+        LOGIN_ENFORCEMENT: import("@openora/core/contracts").Token<import("@openora/core/contracts").LoginEnforcementPort>;
+        MAIL_DISPATCH: import("@openora/core/contracts").Token<import("@openora/core/contracts").MailDispatchPort>;
+        MESSAGE_BROKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").MessageBrokerAdapter>;
+        OUTBOX: import("@openora/core/contracts").Token<import("@openora/core/contracts").OutboxWriter>;
+        PAYMENT_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentAdapter>;
+        PAYMENT_PROVIDERS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentProviderRegistry>;
+        PAYMENT_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentWebhookVerifier>;
+        PLATFORM_CONFIG: import("@openora/core/contracts").Token<{
+            features: Record<string, boolean>;
+            brands: {
+                id: string;
+                name: string;
+                themePreset?: string | undefined;
+                themeOverrides?: Record<string, string> | undefined;
+            }[];
+            rgLimits: Record<string, {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            }>;
+            responsibleGambling: {
+                limitIncreaseCooldownHours: number;
+                limitChangeConfirmationWindowHours: number;
+            };
+            chat: {
+                allowedAttachmentHosts: string[];
+                moderationExpiry?: {
+                    cron: string;
+                } | undefined;
+            };
+            adminSecurity: {
+                requireTwoFactor: boolean;
+                bindSessionToDevice: boolean;
+                trustedDeviceDays: number;
+                ipChangePolicy: "any" | "country" | "off";
+                twoFactorLockout: {
+                    maxAttempts: number;
+                    durationMs: number;
+                };
+            };
+            cms: {
+                allowedBannerImageHosts: string[];
+            };
+            activeBrand?: string | undefined;
+            kyc?: {
+                gateWithdrawals: boolean;
+                provider?: string | undefined;
+                webhookSecretEnv?: string | undefined;
+                reverifyThresholds?: Record<string, string> | undefined;
+            } | undefined;
+            autoWithdrawal?: {
+                enabled: boolean;
+                dailyCapAmount?: string | undefined;
+                dailyCapCount?: number | undefined;
+            } | undefined;
+            wallet?: {
+                cryptoCurrencies?: string[] | undefined;
+                treasuryRefs?: Record<string, string> | undefined;
+                sweep?: {
+                    cron: string;
+                    feeMultiple: string;
+                    batchSize: number;
+                    concurrency: number;
+                    unknownAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                } | undefined;
+                reconciliation?: {
+                    cron: string;
+                    lookbackHours: number;
+                    batchSize: number;
+                    stuckAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                    alertThreshold: number;
+                } | undefined;
+            } | undefined;
+            exchangeRate?: {
+                pivot: string;
+                freshTtlMs: number;
+                hardMaxAgeMs: number;
+                providerTimeoutMs: number;
+            } | undefined;
+            registration?: {
+                termsVersion: string;
+                requireEmailVerification: boolean;
+            } | undefined;
+            notifications?: {
+                retention?: {
+                    days: number;
+                    cron: string;
+                } | undefined;
+            } | undefined;
+            supportedLanguages?: string[] | undefined;
+            displayCurrencies?: string[] | undefined;
+        }, string>;
+        PLAYER_ACTIVITY_TRACKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerActivityTracker>;
+        PLAYER_PROVISIONING: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerProvisioning>;
+        PLAYER_TAGS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerTags>;
+        PLAY_ELIGIBILITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayEligibilityPort>;
+        RATE_LIMITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RateLimiterAdapter<`register:${string}` | `login:${string}` | `enable2fa:${string}` | `verify2fa:${string}` | `disable2fa:${string}` | `pwreset-req:${string}` | `pwreset-verify:${string}` | `pwreset:${string}` | `change-password:${string}` | `email-verify:${string}` | `verify-email:${string}` | `wallet-mutation:${string}` | `wallet-webhook:${string}` | `chat-room-join:${string}` | `chat-send:${string}` | `report-access-denied:${string}`>>;
+        REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+        RG_LIMITS: import("@openora/core/contracts").Token<import("@openora/core/contracts").RgLimitsPort>;
+        RNG_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RngAdapter>;
+        SESSION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SessionCommands>;
+        USER_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").UserCommands>;
+        SMS_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SmsAdapter>;
+        SOCIAL_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SocialCommands>;
+        TAG_EVALUATION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").TagEvaluationCommands>;
+        WALLET_ASSET_CATALOG: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletAssetCatalog, string>;
+        WALLET_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletCommands>;
+        WALLET_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletReader, string>;
+    }>) => void;
+};
 export default _default;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/iam/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/iam/plugin.ts"],"names":[],"mappings":";AAaA,wBAuDG"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/iam/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,wBAgE8C"}

package/dist/iam/plugin.js

@@ -1,11 +1,14 @@
-import { definePlugin, EVENT_BUS, DRIZZLE, ADMIN_GUARD, createLogger } from '@openora/core/server';
-import { ADMIN_PERMISSION_RESOLVER, SEND_EMAIL, SESSION_COMMANDS, CACHE, domainEventSchemas, } from '@openora/core/contracts';
+import { EVENT_BUS, DRIZZLE, ADMIN_GUARD, createLogger } from '@openora/core/server';
+import { ADMIN_PERMISSION_RESOLVER, ADMIN_PLAYER_ACTIVITY, ADMIN_ROLE_ASSIGNMENT_DIRECTORY, IDENTITY_READER, MAIL_DISPATCH, SESSION_COMMANDS, CACHE, RATE_LIMITER, domainEventSchemas, } from '@openora/core/contracts';
 import { IamService, DbAdminPermissionResolver } from './service/iam.service.js';
 import { createIamRouter } from './router/index.js';
+import { DrizzleAdminPlayerActivity } from './adapters/admin-player-activity.js';
+import { DrizzleAdminRoleAssignmentDirectory } from './adapters/admin-role-assignment-directory.js';
 const logger = createLogger('iam');
-export default definePlugin({
+export default {
     id: 'iam',
     dependsOn: ['identity'],
+    requiresPorts: [MAIL_DISPATCH],
     register(ctx) {
         // Captured from the provider factory so the event handlers below purge the SAME
         // singleton the AdminGuard reads (Container memoizes per token). Null until the
@@ -41,7 +44,9 @@ export default definePlugin({
                 .invalidateRole(parsed.data.roleId)
                 .catch((err) => logger.error({ err }, 'grant cache purge failed'));
         });
-        ctx.routers.add('iam', (c) => createIamRouter(new IamService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(SEND_EMAIL), c.get(SESSION_COMMANDS)), c.get(ADMIN_GUARD)));
+        ctx.provide(ADMIN_PLAYER_ACTIVITY, (c) => new DrizzleAdminPlayerActivity(c.get(DRIZZLE)));
+        ctx.provide(ADMIN_ROLE_ASSIGNMENT_DIRECTORY, (c) => new DrizzleAdminRoleAssignmentDirectory(c.get(DRIZZLE)));
+        ctx.routers.add('iam', (c) => createIamRouter(new IamService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(MAIL_DISPATCH), c.get(IDENTITY_READER), c.get(SESSION_COMMANDS), c.get(RATE_LIMITER)), c.get(ADMIN_GUARD)));
     },
-});
+};
 //# sourceMappingURL=plugin.js.map

package/dist/iam/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/iam/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EACL,yBAAyB,EACzB,UAAU,EACV,gBAAgB,EAChB,KAAK,EACL,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;AAEnC,eAAe,YAAY,CAAC;IAC1B,EAAE,EAAE,KAAK;IACT,SAAS,EAAE,CAAC,UAAU,CAAC;IACvB,QAAQ,CAAC,GAAG;QACV,gFAAgF;QAChF,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,IAAI,WAAW,GAAqC,IAAI,CAAC;QACzD,4EAA4E;QAC5E,sDAAsD;QACtD,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3C,WAAW,GAAG,IAAI,yBAAyB,CACzC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACxC,CAAC;YACF,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,sFAAsF;QACtF,oFAAoF;QACpF,KAAK,MAAM,KAAK,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,CAAU,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;oBACpC,OAAO;gBACT,CAAC;gBACD,WAAW;qBACR,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;qBAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,EAAE,CAAC,OAAO,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,WAAW;iBACR,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,eAAe,CACb,IAAI,UAAU,CACZ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAChB,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EACjB,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CACxB,EACD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACnB,CACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/iam/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,+BAA+B,EAC/B,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,KAAK,EACL,YAAY,EACZ,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;AAEnC,eAAe;IACb,EAAE,EAAE,KAAK;IACT,SAAS,EAAE,CAAC,UAAU,CAAC;IACvB,aAAa,EAAE,CAAC,aAAa,CAAC;IAC9B,QAAQ,CAAC,GAAG;QACV,gFAAgF;QAChF,gFAAgF;QAChF,iFAAiF;QACjF,+EAA+E;QAC/E,IAAI,WAAW,GAAqC,IAAI,CAAC;QACzD,4EAA4E;QAC5E,sDAAsD;QACtD,GAAG,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3C,WAAW,GAAG,IAAI,yBAAyB,CACzC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CACxC,CAAC;YACF,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,sFAAsF;QACtF,oFAAoF;QACpF,KAAK,MAAM,KAAK,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,CAAU,EAAE,CAAC;YACvE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;oBACpC,OAAO;gBACT,CAAC;gBACD,WAAW;qBACR,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;qBAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,8BAA8B,EAAE,CAAC,OAAO,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,WAAW;iBACR,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBAClC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,GAAG,CAAC,OAAO,CACT,+BAA+B,EAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mCAAmC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAC/D,CAAC;QAEF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3B,eAAe,CACb,IAAI,UAAU,CACZ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAChB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,EACpB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CACpB,EACD,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACnB,CACF,CAAC;IACJ,CAAC;CAC0C,CAAC"}