@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/wallet/drizzle/migrations/meta/_journal.json

@@ -22,6 +22,111 @@
       "when": 1783871890665,
       "tag": "0002_aromatic_archangel",
       "breakpoints": true
+    },
+    {
+      "idx": 3,
+      "version": "7",
+      "when": 1785015620531,
+      "tag": "0003_certain_ogun",
+      "breakpoints": true
+    },
+    {
+      "idx": 4,
+      "version": "7",
+      "when": 1785142636143,
+      "tag": "0004_reflective_shriek",
+      "breakpoints": true
+    },
+    {
+      "idx": 5,
+      "version": "7",
+      "when": 1785409961214,
+      "tag": "0005_gigantic_dust",
+      "breakpoints": true
+    },
+    {
+      "idx": 6,
+      "version": "7",
+      "when": 1785793698153,
+      "tag": "0006_lush_morg",
+      "breakpoints": true
+    },
+    {
+      "idx": 7,
+      "version": "7",
+      "when": 1787058824349,
+      "tag": "0007_bouncy_swordsman",
+      "breakpoints": true
+    },
+    {
+      "idx": 8,
+      "version": "7",
+      "when": 1787059720716,
+      "tag": "0008_gorgeous_colonel_america",
+      "breakpoints": true
+    },
+    {
+      "idx": 9,
+      "version": "7",
+      "when": 1787059873921,
+      "tag": "0009_smooth_sue_storm",
+      "breakpoints": true
+    },
+    {
+      "idx": 10,
+      "version": "7",
+      "when": 1787270367938,
+      "tag": "0010_worthless_quasimodo",
+      "breakpoints": true
+    },
+    {
+      "idx": 11,
+      "version": "7",
+      "when": 1787522270974,
+      "tag": "0011_premium_natasha_romanoff",
+      "breakpoints": true
+    },
+    {
+      "idx": 12,
+      "version": "7",
+      "when": 1787569976931,
+      "tag": "0012_long_wong",
+      "breakpoints": true
+    },
+    {
+      "idx": 13,
+      "version": "7",
+      "when": 1787607548687,
+      "tag": "0013_polite_peter_parker",
+      "breakpoints": true
+    },
+    {
+      "idx": 14,
+      "version": "7",
+      "when": 1787610320209,
+      "tag": "0014_abandoned_madripoor",
+      "breakpoints": true
+    },
+    {
+      "idx": 15,
+      "version": "7",
+      "when": 1787749886002,
+      "tag": "0015_right_oracle",
+      "breakpoints": true
+    },
+    {
+      "idx": 16,
+      "version": "7",
+      "when": 1787750835678,
+      "tag": "0016_curly_ben_urich",
+      "breakpoints": true
+    },
+    {
+      "idx": 17,
+      "version": "7",
+      "when": 1788096761490,
+      "tag": "0017_workable_wolf_cub",
+      "breakpoints": true
     }
   ]
 }

package/dist/wallet/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAEA,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/wallet/index.js

@@ -1,4 +1,2 @@
-// The public consumer surface: the domain's wire contract (schemas, enum triples, types).
-// Isomorphic - safe in the browser. Server wiring lives in './server', tables in './schema'.
 export * from './contract/index.js';
 //# sourceMappingURL=index.js.map

package/dist/wallet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,6FAA6F;AAC7F,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/wallet/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/wallet/migrate.d.ts

@@ -1,3 +1,2 @@
-/** Apply the wallet module migrations (idempotent: drizzle skips already-recorded ones). */
 export declare function migrate(databaseUrl?: string): Promise<void>;
 //# sourceMappingURL=migrate.d.ts.map

package/dist/wallet/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/wallet/migrate.ts"],"names":[],"mappings":"AAMA,4FAA4F;AAC5F,wBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,iBAO3C"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/wallet/migrate.ts"],"names":[],"mappings":"AAGA,wBAAgB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,iBAO3C"}

package/dist/wallet/migrate.js

@@ -1,9 +1,5 @@
-// Applies this module's own migration set against its own tracking table, so it
-// never collides with sibling modules that share the database. SQL ships in the
-// tarball ('files') and loads via an import.meta.url-relative path. See ADR-0020/0027.
 import { fileURLToPath } from 'node:url';
 import { runMigrations } from '@openora/core/server/migrate';
-/** Apply the wallet module migrations (idempotent: drizzle skips already-recorded ones). */
 export function migrate(databaseUrl) {
     return runMigrations({
         migrationsFolder: fileURLToPath(new URL('./drizzle/migrations', import.meta.url)),

package/dist/wallet/migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/wallet/migrate.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,uFAAuF;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,4FAA4F;AAC5F,MAAM,UAAU,OAAO,CAAC,WAAoB;IAC1C,OAAO,aAAa,CAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,eAAe,EAAE,6BAA6B;QAC9C,gBAAgB,EAAE,SAAS;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/wallet/migrate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,UAAU,OAAO,CAAC,WAAoB;IAC1C,OAAO,aAAa,CAAC;QACnB,gBAAgB,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjF,eAAe,EAAE,6BAA6B;QAC9C,gBAAgB,EAAE,SAAS;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/wallet/plugin.d.ts

@@ -1,3 +1,183 @@
-declare const _default: import("@openora/core/server").Plugin;
+import { type RealtimeTransport } from '@openora/core/contracts';
+declare const _default: {
+    readonly id: "wallet";
+    readonly dependsOn: readonly ["identity", "audit"];
+    readonly register: (ctx: import("@openora/core/server").PluginContext<{
+        ADMIN_GAME_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminGameReporting>;
+        ADMIN_GUARD: import("@openora/core/contracts").Token<import("@openora/core/server").AdminGuard>;
+        ADMIN_PERMISSION_RESOLVER: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPermissionResolver>;
+        ADMIN_PLAYER_ACTIVITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPlayerActivity>;
+        ADMIN_ROLE_ASSIGNMENT_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminRoleAssignmentDirectory>;
+        ADMIN_SECURITY_POLICY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminSecurityPolicy>;
+        ADMIN_USER_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminUserDirectory>;
+        ADMIN_WALLET_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminWalletReporting>;
+        AUDIT_WRITER: import("@openora/core/contracts").SealedToken<import("@openora/core/contracts").AuditWritePort>;
+        AUTH_SESSION: import("@openora/core/contracts").Token<import("@openora/core/server").SessionResolver>;
+        CACHE: import("@openora/core/contracts").Token<import("@openora/core/contracts").CacheAdapter>;
+        CHAT_BLOCK_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatBlockWriter>;
+        CHAT_MODERATION: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatModeration, string>;
+        CHAT_REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        CHAT_REALTIME_TRANSPORT: import("@openora/core/contracts").Token<RealtimeTransport>;
+        CHAT_ROOM_ACCESS: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatRoomAccess>;
+        CHAT_SYSTEM_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatSystemWriter, string>;
+        DRIZZLE: import("@openora/core/contracts").Token<import("@openora/core/server").DrizzleService>;
+        EMAIL_SENDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailSenderPort>;
+        EMAIL_TEMPLATE_RENDERER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailTemplateRenderer>;
+        ERROR_TRACKING: import("@openora/core/contracts").Token<import("@openora/core/contracts").ErrorTrackingAdapter>;
+        EVENT_BUS: import("@openora/core/contracts").Token<import("@openora/core/server").EventBus>;
+        EXCHANGE_RATE_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateReader>;
+        CRYPTO_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        FIAT_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        SWAP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapAdapter>;
+        SWAP_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapWebhookVerifier>;
+        GAME_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GameAdapter>;
+        GEO_CHECK_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoCheckCommands>;
+        GEO_IP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoIpAdapter>;
+        IDENTITY_OPTIONS: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityServiceOptions>;
+        IDENTITY_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityReader, string>;
+        IGAMING_CONFIG: import("@openora/core/contracts").Token<{
+            branding: {
+                name: string;
+                themePreset?: string | undefined;
+                supportEmail?: string | undefined;
+            };
+            currencies: string[];
+            jurisdictions: string[];
+            blockedCountries: string[];
+            limits: {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            };
+            providers: {
+                payment?: string | undefined;
+                kyc?: string | undefined;
+                geoIp?: string | undefined;
+                aggregator?: string | undefined;
+                notification?: string | undefined;
+            };
+            enabledModules?: string[] | undefined;
+        }, string>;
+        JOB_QUEUE: import("@openora/core/contracts").Token<import("@openora/core/contracts").JobQueueAdapter>;
+        KYC_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycAdapter>;
+        KYC_STATUS_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycStatusWriter>;
+        KYC_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycWebhookVerifier>;
+        LOGIN_ENFORCEMENT: import("@openora/core/contracts").Token<import("@openora/core/contracts").LoginEnforcementPort>;
+        MAIL_DISPATCH: import("@openora/core/contracts").Token<import("@openora/core/contracts").MailDispatchPort>;
+        MESSAGE_BROKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").MessageBrokerAdapter>;
+        OUTBOX: import("@openora/core/contracts").Token<import("@openora/core/contracts").OutboxWriter>;
+        PAYMENT_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentAdapter>;
+        PAYMENT_PROVIDERS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentProviderRegistry>;
+        PAYMENT_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentWebhookVerifier>;
+        PLATFORM_CONFIG: import("@openora/core/contracts").Token<{
+            features: Record<string, boolean>;
+            brands: {
+                id: string;
+                name: string;
+                themePreset?: string | undefined;
+                themeOverrides?: Record<string, string> | undefined;
+            }[];
+            rgLimits: Record<string, {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            }>;
+            responsibleGambling: {
+                limitIncreaseCooldownHours: number;
+                limitChangeConfirmationWindowHours: number;
+            };
+            chat: {
+                allowedAttachmentHosts: string[];
+                moderationExpiry?: {
+                    cron: string;
+                } | undefined;
+            };
+            adminSecurity: {
+                requireTwoFactor: boolean;
+                bindSessionToDevice: boolean;
+                trustedDeviceDays: number;
+                ipChangePolicy: "any" | "country" | "off";
+                twoFactorLockout: {
+                    maxAttempts: number;
+                    durationMs: number;
+                };
+            };
+            cms: {
+                allowedBannerImageHosts: string[];
+            };
+            activeBrand?: string | undefined;
+            kyc?: {
+                gateWithdrawals: boolean;
+                provider?: string | undefined;
+                webhookSecretEnv?: string | undefined;
+                reverifyThresholds?: Record<string, string> | undefined;
+            } | undefined;
+            autoWithdrawal?: {
+                enabled: boolean;
+                dailyCapAmount?: string | undefined;
+                dailyCapCount?: number | undefined;
+            } | undefined;
+            wallet?: {
+                cryptoCurrencies?: string[] | undefined;
+                treasuryRefs?: Record<string, string> | undefined;
+                sweep?: {
+                    cron: string;
+                    feeMultiple: string;
+                    batchSize: number;
+                    concurrency: number;
+                    unknownAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                } | undefined;
+                reconciliation?: {
+                    cron: string;
+                    lookbackHours: number;
+                    batchSize: number;
+                    stuckAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                    alertThreshold: number;
+                } | undefined;
+            } | undefined;
+            exchangeRate?: {
+                pivot: string;
+                freshTtlMs: number;
+                hardMaxAgeMs: number;
+                providerTimeoutMs: number;
+            } | undefined;
+            registration?: {
+                termsVersion: string;
+                requireEmailVerification: boolean;
+            } | undefined;
+            notifications?: {
+                retention?: {
+                    days: number;
+                    cron: string;
+                } | undefined;
+            } | undefined;
+            supportedLanguages?: string[] | undefined;
+            displayCurrencies?: string[] | undefined;
+        }, string>;
+        PLAYER_ACTIVITY_TRACKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerActivityTracker>;
+        PLAYER_PROVISIONING: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerProvisioning>;
+        PLAYER_TAGS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerTags>;
+        PLAY_ELIGIBILITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayEligibilityPort>;
+        RATE_LIMITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RateLimiterAdapter<`register:${string}` | `login:${string}` | `enable2fa:${string}` | `verify2fa:${string}` | `disable2fa:${string}` | `pwreset-req:${string}` | `pwreset-verify:${string}` | `pwreset:${string}` | `change-password:${string}` | `email-verify:${string}` | `verify-email:${string}` | `wallet-mutation:${string}` | `wallet-webhook:${string}` | `chat-room-join:${string}` | `chat-send:${string}` | `report-access-denied:${string}`>>;
+        REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        REALTIME_TRANSPORT: import("@openora/core/contracts").Token<RealtimeTransport>;
+        RG_LIMITS: import("@openora/core/contracts").Token<import("@openora/core/contracts").RgLimitsPort>;
+        RNG_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RngAdapter>;
+        SESSION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SessionCommands>;
+        USER_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").UserCommands>;
+        SMS_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SmsAdapter>;
+        SOCIAL_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SocialCommands>;
+        TAG_EVALUATION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").TagEvaluationCommands>;
+        WALLET_ASSET_CATALOG: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletAssetCatalog, string>;
+        WALLET_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletCommands>;
+        WALLET_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletReader, string>;
+    }>) => void;
+};
 export default _default;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/wallet/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/wallet/plugin.ts"],"names":[],"mappings":";AAsBA,wBAyCG"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/wallet/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAuBL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BjC,wBA4O8C"}

package/dist/wallet/plugin.js

@@ -1,21 +1,121 @@
-import { definePlugin, ADMIN_GUARD, EVENT_BUS, DRIZZLE } from '@openora/core/server';
+import { ADMIN_GUARD, EVENT_BUS, DRIZZLE, createLogger } from '@openora/core/server';
 import * as z from 'zod';
-import { ADMIN_USER_DIRECTORY, ADMIN_WALLET_REPORTING, PAYMENT_ADAPTER, PAYMENT_WEBHOOK_VERIFIER, WALLET_COMMANDS, WALLET_READER, PLATFORM_CONFIG, RATE_LIMITER, PLAYER_TAGS, AUDIT_WRITER, } from '@openora/core/contracts';
+import { ADMIN_USER_DIRECTORY, IDENTITY_READER, ADMIN_WALLET_REPORTING, PAYMENT_ADAPTER, PAYMENT_WEBHOOK_VERIFIER, PAYMENT_PROVIDERS, DEFAULT_PAYMENT_PROVIDER, REALTIME_TRANSPORT, WALLET_COMMANDS, WALLET_READER, WALLET_ASSET_CATALOG, PLATFORM_CONFIG, RATE_LIMITER, PLAYER_TAGS, TAG_EVALUATION_COMMANDS, PLAY_ELIGIBILITY, RG_LIMITS, AUDIT_WRITER, JOB_QUEUE, UuidSchema, domainEventSchemas, queue, } from '@openora/core/contracts';
 import { WalletService } from './service/wallet.service.js';
 import { WalletCommandsService } from './service/wallet-commands.service.js';
+import { CustodySweepService, CUSTODY_SWEEP_QUEUE, CustodySweepJobPayloadSchema, } from './service/custody-sweep.service.js';
 import { WalletReaderService } from './adapters/wallet-reader.service.js';
+import { WalletAssetCatalogService } from './adapters/wallet-asset-catalog.service.js';
 import { DrizzleAdminWalletReporting } from './admin-reporting.js';
-import { createWalletRouter } from './router/index.js';
+import { createWalletRouter, walletBalanceChannel } from './router/index.js';
 import { MockPaymentAdapter } from './adapters/mock/mock-payment-adapter.js';
 import { HmacPaymentWebhookVerifier } from './adapters/hmac-payment-webhook-verifier.js';
-export default definePlugin({
+import { ReconciliationService } from './service/reconciliation.service.js';
+const logger = createLogger('wallet');
+// Mirrors WalletConfigSchema's wallet.sweep.cron default - used only when the operator
+// hasn't configured platformConfig.wallet.sweep at all, so the job is still scheduled
+// (CustodySweepService.runCycle no-ops every tick until sweep policy is configured).
+const DEFAULT_SWEEP_CRON = '*/15 * * * *';
+const WALLET_RECONCILIATION_QUEUE = queue('wallet-reconciliation');
+const WalletReconciliationJobSchema = z.object({ runId: UuidSchema.optional() });
+export default {
     // NOT dependsOn 'tag': that would cycle (tag hard-depends on wallet's WALLET_READER).
-    // wallet's use of tag's PLAYER_TAGS is optional and resolved lazily in the router
-    // factory (`c.has(PLAYER_TAGS)`), which runs after every plugin has registered - so
-    // the port is bound by then regardless of load order.
+    // wallet's use of tag's PLAYER_TAGS / TAG_EVALUATION_COMMANDS is optional and resolved
+    // lazily in the router factory (`c.has(...)`), which runs after every plugin has
+    // registered - so both ports are bound by then regardless of load order.
     id: 'wallet',
     dependsOn: ['identity', 'audit'],
     register(ctx) {
+        // Set inside the router factory (container access); the job worker's handler
+        // closes over this ref, same shape as pam/tag's evalSvc - subscriptions/workers
+        // wire before router factories run, but are set before any real job arrives.
+        let reconciliationRef = null;
+        // Set inside the router factory (container access); the balance-changed event
+        // handlers below close over this ref - same shape as compliance's kycStatusChannel
+        // publish. Subscriptions wire before router factories run, but are set before any
+        // real event arrives.
+        let realtimeTransport = null;
+        // Publishes a change *signal*, never the balance itself - see the comment on
+        // WalletBalanceUpdateSchema. Only wired to events that actually move a settled
+        // balance (see the `ctx.events.on` calls below); `wallet.withdrawal.approved` and
+        // `wallet.withdrawal.completed` are deliberately absent - approval only flips a
+        // pending withdrawal to `processing` and completion just finalizes the PSP leg, the
+        // funds were already debited at `wallet.withdrawal.requested` time.
+        const publishBalanceChanged = (userId, currency, reason, eventId) => {
+            if (!realtimeTransport) {
+                return;
+            }
+            return realtimeTransport.publish(walletBalanceChannel(userId), {
+                eventId,
+                currency,
+                reason,
+            });
+        };
+        ctx.events.on('wallet.deposit.completed', (payload, envelope) => {
+            const parsed = domainEventSchemas['wallet.deposit.completed'].safeParse(payload);
+            if (!parsed.success || !envelope) {
+                return;
+            }
+            publishBalanceChanged(parsed.data.userId, parsed.data.currency, 'deposit', envelope.eventId);
+        });
+        ctx.events.on('wallet.withdrawal.requested', (payload, envelope) => {
+            const parsed = domainEventSchemas['wallet.withdrawal.requested'].safeParse(payload);
+            if (!parsed.success || !envelope) {
+                return;
+            }
+            publishBalanceChanged(parsed.data.userId, parsed.data.currency, 'withdrawal', envelope.eventId);
+        });
+        ctx.events.on('wallet.withdrawal.failed', (payload, envelope) => {
+            const parsed = domainEventSchemas['wallet.withdrawal.failed'].safeParse(payload);
+            if (!parsed.success || !envelope) {
+                return;
+            }
+            publishBalanceChanged(parsed.data.userId, parsed.data.currency, 'withdrawal', envelope.eventId);
+        });
+        ctx.events.on('wallet.withdrawal.rejected', (payload, envelope) => {
+            const parsed = domainEventSchemas['wallet.withdrawal.rejected'].safeParse(payload);
+            if (!parsed.success || !envelope) {
+                return;
+            }
+            publishBalanceChanged(parsed.data.userId, parsed.data.currency, 'withdrawal', envelope.eventId);
+        });
+        ctx.events.on('wallet.manual_adjustment.created', (payload, envelope) => {
+            const parsed = domainEventSchemas['wallet.manual_adjustment.created'].safeParse(payload);
+            if (!parsed.success || !envelope) {
+                return;
+            }
+            publishBalanceChanged(parsed.data.userId, parsed.data.currency, 'adjustment', envelope.eventId);
+        });
+        // One memoized instance backs the cron worker and the router factory below - lazily
+        // constructed (subscriptions/workers wire before router factories run), matching
+        // pam/tag's and compliance's job-worker shape.
+        let sweepSvc = null;
+        const custodySweepService = (c) => (sweepSvc ??= new CustodySweepService({
+            drizzle: c.get(DRIZZLE),
+            paymentProviders: c.get(PAYMENT_PROVIDERS),
+            audit: c.get(AUDIT_WRITER),
+            platformConfig: c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG) : undefined,
+        }));
+        ctx.jobs.worker({
+            queue: CUSTODY_SWEEP_QUEUE,
+            schema: CustodySweepJobPayloadSchema,
+            handler: async ({ payload }) => {
+                if (!sweepSvc) {
+                    throw new Error('wallet custody sweep: service not constructed yet');
+                }
+                await sweepSvc.runCycle(payload.runId);
+            },
+        });
+        ctx.jobs.worker({
+            queue: WALLET_RECONCILIATION_QUEUE,
+            schema: WalletReconciliationJobSchema,
+            handler: async ({ payload }) => {
+                if (!reconciliationRef) {
+                    throw new Error('wallet reconciliation: service not constructed yet');
+                }
+                await reconciliationRef.runCycle(payload.runId);
+            },
+        });
         ctx.provide(PAYMENT_ADAPTER, () => new MockPaymentAdapter());
         ctx.provide(PAYMENT_WEBHOOK_VERIFIER, () => {
             const webhookSecret = z
@@ -25,21 +125,81 @@ export default definePlugin({
                 .parse(process.env.PAYMENT_WEBHOOK_SECRET || undefined);
             return new HmacPaymentWebhookVerifier(webhookSecret);
         });
+        // Wraps the single PAYMENT_ADAPTER/PAYMENT_WEBHOOK_VERIFIER tokens as the 'default'
+        // registry entry, so a one-vendor operator changes nothing. Core only looks a
+        // providerName up here - it never discovers vendors itself, because Container.register
+        // is last-wins: two overlays each rebinding the single tokens would clobber each
+        // other, so running more than one vendor at once needs an operator-composed map
+        // (rebind PAYMENT_PROVIDERS entirely) rather than a second core-discovered slot.
+        ctx.provide(PAYMENT_PROVIDERS, (c) => ({
+            get: (name) => name === DEFAULT_PAYMENT_PROVIDER
+                ? { adapter: c.get(PAYMENT_ADAPTER), webhookVerifier: c.get(PAYMENT_WEBHOOK_VERIFIER) }
+                : null,
+            names: () => [DEFAULT_PAYMENT_PROVIDER],
+        }));
         // Other modules debit through this port within their own transaction (never importing wallet tables). See ADR-0016.
-        ctx.provide(WALLET_COMMANDS, () => new WalletCommandsService());
+        ctx.provide(WALLET_COMMANDS, (c) => new WalletCommandsService(c.get(PLAY_ELIGIBILITY), c.get(AUDIT_WRITER), c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG) : undefined, c.has(RG_LIMITS) ? c.get(RG_LIMITS) : undefined));
         // Read-only queries for cross-module consumers (eg tag evaluation). Never exposes wallet internals.
         ctx.provide(WALLET_READER, (c) => new WalletReaderService(c.get(DRIZZLE)));
         ctx.provide(ADMIN_WALLET_REPORTING, (c) => new DrizzleAdminWalletReporting(c.get(DRIZZLE)));
-        ctx.routers.add('wallet', (c) => createWalletRouter(new WalletService({
-            drizzle: c.get(DRIZZLE),
-            events: c.get(EVENT_BUS),
-            payment: c.get(PAYMENT_ADAPTER),
-            directory: c.get(ADMIN_USER_DIRECTORY),
-            platformConfig: c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG) : undefined,
-            limiter: c.get(RATE_LIMITER),
-            riskTags: c.has(PLAYER_TAGS) ? c.get(PLAYER_TAGS) : undefined,
-            audit: c.get(AUDIT_WRITER),
-        }), c.get(ADMIN_GUARD), c.get(AUDIT_WRITER), c.get(PAYMENT_ADAPTER), c.get(PAYMENT_WEBHOOK_VERIFIER)));
+        // Operator-editable currency/network config, readable by a payment adapter without
+        // importing wallet tables. Overlay-rebindable, but bound here so it always works.
+        ctx.provide(WALLET_ASSET_CATALOG, (c) => new WalletAssetCatalogService(c.get(DRIZZLE)));
+        ctx.routers.add('wallet', (c) => {
+            realtimeTransport = c.get(REALTIME_TRANSPORT);
+            const platformConfig = c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG) : undefined;
+            const walletService = new WalletService({
+                drizzle: c.get(DRIZZLE),
+                events: c.get(EVENT_BUS),
+                payment: c.get(PAYMENT_ADAPTER),
+                paymentProviders: c.get(PAYMENT_PROVIDERS),
+                identityReader: c.get(IDENTITY_READER),
+                directory: c.get(ADMIN_USER_DIRECTORY),
+                platformConfig,
+                limiter: c.get(RATE_LIMITER),
+                riskTags: c.has(PLAYER_TAGS) ? c.get(PLAYER_TAGS) : undefined,
+                tagEvaluationCommands: c.has(TAG_EVALUATION_COMMANDS)
+                    ? c.get(TAG_EVALUATION_COMMANDS)
+                    : undefined,
+                audit: c.get(AUDIT_WRITER),
+                rgLimits: c.has(RG_LIMITS) ? c.get(RG_LIMITS) : undefined,
+            });
+            const reconciliation = new ReconciliationService({
+                drizzle: c.get(DRIZZLE),
+                events: c.get(EVENT_BUS),
+                wallet: walletService,
+                paymentProviders: c.get(PAYMENT_PROVIDERS),
+                audit: c.get(AUDIT_WRITER),
+                platformConfig,
+            });
+            reconciliationRef = reconciliation;
+            const jobQueue = c.get(JOB_QUEUE);
+            custodySweepService(c); // ensure sweepSvc is constructed for the job worker above
+            const sweepCron = platformConfig?.wallet?.sweep?.cron ?? DEFAULT_SWEEP_CRON;
+            // Idempotent schedule (keyed by scheduleId). If platformConfig.wallet.sweep is
+            // absent, this still registers the tick - the handler just no-ops every time.
+            void jobQueue
+                .schedule(CUSTODY_SWEEP_QUEUE, 'wallet-custody-sweep.cron', {}, { cron: sweepCron })
+                .catch((err) => logger.error({ err }, 'wallet-custody-sweep schedule failed'));
+            // Absent config means the cycle no-ops - see ReconciliationService.runCycle - but
+            // there is also nothing to schedule at all.
+            if (platformConfig?.wallet?.reconciliation) {
+                void jobQueue
+                    .schedule(WALLET_RECONCILIATION_QUEUE, 'wallet-reconciliation.cron', {}, { cron: platformConfig.wallet.reconciliation.cron })
+                    .catch((err) => logger.error({ err }, 'wallet-reconciliation schedule failed'));
+            }
+            return createWalletRouter({
+                wallet: walletService,
+                adminGuard: c.get(ADMIN_GUARD),
+                audit: c.get(AUDIT_WRITER),
+                paymentProviders: c.get(PAYMENT_PROVIDERS),
+                reconciliation,
+                jobQueue,
+                reconciliationQueue: WALLET_RECONCILIATION_QUEUE,
+                realtime: realtimeTransport,
+                limiter: c.get(RATE_LIMITER),
+            });
+        });
     },
-});
+};
 //# sourceMappingURL=plugin.js.map

package/dist/wallet/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/wallet/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAEzF,eAAe,YAAY,CAAC;IAC1B,sFAAsF;IACtF,kFAAkF;IAClF,oFAAoF;IACpF,sDAAsD;IACtD,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACzC,MAAM,aAAa,GAAG,CAAC;iBACpB,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC,CAAC;YAC1D,OAAO,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,oHAAoH;QACpH,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC;QAChE,oGAAoG;QACpG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5F,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,kBAAkB,CAChB,IAAI,aAAa,CAAC;YAChB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YACxB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;YAC/B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACtC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7D,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;SAC3B,CAAC,EACF,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAClB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EACnB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EACtB,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAChC,CACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/wallet/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,WAAW,EACX,uBAAuB,EACvB,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,KAAK,GAEN,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAEtC,uFAAuF;AACvF,sFAAsF;AACtF,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAE1C,MAAM,2BAA2B,GAAG,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACnE,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEjF,eAAe;IACb,sFAAsF;IACtF,uFAAuF;IACvF,iFAAiF;IACjF,yEAAyE;IACzE,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,GAAG;QACV,6EAA6E;QAC7E,gFAAgF;QAChF,6EAA6E;QAC7E,IAAI,iBAAiB,GAAiC,IAAI,CAAC;QAE3D,8EAA8E;QAC9E,mFAAmF;QACnF,kFAAkF;QAClF,sBAAsB;QACtB,IAAI,iBAAiB,GAA6B,IAAI,CAAC;QAEvD,6EAA6E;QAC7E,+EAA+E;QAC/E,kFAAkF;QAClF,gFAAgF;QAChF,oFAAoF;QACpF,oEAAoE;QACpE,MAAM,qBAAqB,GAAG,CAC5B,MAAc,EACd,QAAgB,EAChB,MAAiC,EACjC,OAAe,EACf,EAAE;YACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE;gBAC7D,OAAO;gBACP,QAAQ;gBACR,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,6BAA6B,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACjE,MAAM,MAAM,GAAG,kBAAkB,CAAC,6BAA6B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACpF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,qBAAqB,CACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,YAAY,EACZ,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,qBAAqB,CACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,YAAY,EACZ,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,4BAA4B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,qBAAqB,CACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,YAAY,EACZ,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,kCAAkC,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,kCAAkC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YACD,qBAAqB,CACnB,MAAM,CAAC,IAAI,CAAC,MAAM,EAClB,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,YAAY,EACZ,QAAQ,CAAC,OAAO,CACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,iFAAiF;QACjF,+CAA+C;QAC/C,IAAI,QAAQ,GAA+B,IAAI,CAAC;QAChD,MAAM,mBAAmB,GAAG,CAAC,CAAmC,EAAE,EAAE,CAClE,CAAC,QAAQ,KAAK,IAAI,mBAAmB,CAAC;YACpC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;YACvB,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC1C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;YAC1B,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC,CAAC,CAAC;QAEN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,mBAAmB;YAC1B,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;SACF,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,2BAA2B;YAClC,MAAM,EAAE,6BAA6B;YACrC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;SACF,CAAC,CAAC;QAEH,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,EAAE;YACzC,MAAM,aAAa,GAAG,CAAC;iBACpB,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC,CAAC;YAC1D,OAAO,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,oFAAoF;QACpF,8EAA8E;QAC9E,uFAAuF;QACvF,iFAAiF;QACjF,gFAAgF;QAChF,iFAAiF;QACjF,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,EAAE,CAAC,IAAY,EAAE,EAAE,CACpB,IAAI,KAAK,wBAAwB;gBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE;gBACvF,CAAC,CAAC,IAAI;YACV,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,wBAAwB,CAAC;SACxC,CAAC,CAAC,CAAC;QACJ,oHAAoH;QACpH,GAAG,CAAC,OAAO,CACT,eAAe,EACf,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,qBAAqB,CACvB,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,EACvB,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,EACnB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,EAC3D,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAChD,CACJ,CAAC;QACF,oGAAoG;QACpG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5F,mFAAmF;QACnF,kFAAkF;QAClF,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YAC9B,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC9C,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;gBACtC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC/B,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC1C,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBACtC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACtC,cAAc;gBACd,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC5B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7D,qBAAqB,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;oBACnD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;oBAChC,CAAC,CAAC,SAAS;gBACb,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1B,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAAC;gBAC/C,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,MAAM,EAAE,aAAa;gBACrB,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC1C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1B,cAAc;aACf,CAAC,CAAC;YACH,iBAAiB,GAAG,cAAc,CAAC;YAEnC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAElC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,0DAA0D;YAClF,MAAM,SAAS,GAAG,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,kBAAkB,CAAC;YAC5E,+EAA+E;YAC/E,8EAA8E;YAC9E,KAAK,QAAQ;iBACV,QAAQ,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;iBACnF,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,sCAAsC,CAAC,CAAC,CAAC;YAEjF,kFAAkF;YAClF,4CAA4C;YAC5C,IAAI,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC3C,KAAK,QAAQ;qBACV,QAAQ,CACP,2BAA2B,EAC3B,4BAA4B,EAC5B,EAAE,EACF,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CACpD;qBACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAC,CAAC;YACpF,CAAC;YAED,OAAO,kBAAkB,CAAC;gBACxB,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC9B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1B,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC1C,cAAc;gBACd,QAAQ;gBACR,mBAAmB,EAAE,2BAA2B;gBAChD,QAAQ,EAAE,iBAAiB;gBAC3B,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CAC0C,CAAC"}