@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/contracts/schemas/platform-config.d.ts

@@ -27,24 +27,91 @@ export declare const KycConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const AutoWithdrawalConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
-    fiatThreshold: z.ZodOptional<z.ZodString>;
-    cryptoThreshold: z.ZodOptional<z.ZodString>;
-    excludeRiskFlags: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-        high_roller: "high_roller";
-        vip: "vip";
-        bonus_abuser: "bonus_abuser";
-        high_risk: "high_risk";
-        inactive: "inactive";
-        large_depositor: "large_depositor";
-        self_excluded: "self_excluded";
-        kyc_pending: "kyc_pending";
-        kyc_rejected: "kyc_rejected";
-        test_account: "test_account";
-    }>>>;
     dailyCapAmount: z.ZodOptional<z.ZodString>;
     dailyCapCount: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
 export type AutoWithdrawalConfig = z.infer<typeof AutoWithdrawalConfigSchema>;
+export declare const WalletConfigSchema: z.ZodObject<{
+    cryptoCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    treasuryRefs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    sweep: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+        feeMultiple: z.ZodDefault<z.ZodString>;
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        concurrency: z.ZodDefault<z.ZodNumber>;
+        unknownAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+    reconciliation: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+        lookbackHours: z.ZodDefault<z.ZodNumber>;
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        stuckAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        alertThreshold: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WalletConfig = z.infer<typeof WalletConfigSchema>;
+export declare const ExchangeRateConfigSchema: z.ZodObject<{
+    pivot: z.ZodDefault<z.ZodString>;
+    freshTtlMs: z.ZodDefault<z.ZodNumber>;
+    hardMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+    providerTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type ExchangeRateConfig = z.infer<typeof ExchangeRateConfigSchema>;
+export declare const NotificationsConfigSchema: z.ZodObject<{
+    retention: z.ZodOptional<z.ZodObject<{
+        days: z.ZodDefault<z.ZodNumber>;
+        cron: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type NotificationsConfig = z.infer<typeof NotificationsConfigSchema>;
+export declare const RegistrationConfigSchema: z.ZodObject<{
+    termsVersion: z.ZodString;
+    requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Structural check on a cron expression: 5 fields, or 6 with a leading seconds field.
+ * Not a full parse - the driver owns that - but it turns the typo class that would
+ * otherwise surface as one `logger.error` at boot and a job that never ticks into a
+ * config-validation failure.
+ */
+export declare const CronExpressionSchema: z.ZodString;
+/**
+ * Offset off the :00/:15/:30/:45 tick the wallet custody sweep owns, so the in-process
+ * driver never runs the moderation-expiry sweep alongside a money path. Cadence sets
+ * audit-trail latency only - a lapsed mute stops being enforced at its own `expiresAt`
+ * with or without the job, and the entry is dated from the row, so a late run still
+ * records the right instant.
+ */
+export declare const CHAT_MODERATION_EXPIRY_DEFAULT_CRON = "7,22,37,52 * * * *";
+export declare const HostAllowlistEntrySchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+export declare const ChatConfigSchema: z.ZodObject<{
+    allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    moderationExpiry: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ChatConfig = z.infer<typeof ChatConfigSchema>;
+export declare const AdminSecurityConfigSchema: z.ZodObject<{
+    requireTwoFactor: z.ZodDefault<z.ZodBoolean>;
+    bindSessionToDevice: z.ZodDefault<z.ZodBoolean>;
+    trustedDeviceDays: z.ZodDefault<z.ZodNumber>;
+    ipChangePolicy: z.ZodDefault<z.ZodEnum<{
+        any: "any";
+        country: "country";
+        off: "off";
+    }>>;
+    twoFactorLockout: z.ZodPrefault<z.ZodObject<{
+        maxAttempts: z.ZodDefault<z.ZodNumber>;
+        durationMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AdminSecurityConfig = z.infer<typeof AdminSecurityConfigSchema>;
+export declare const CmsConfigSchema: z.ZodObject<{
+    allowedBannerImageHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+}, z.core.$strict>;
+export type CmsConfig = z.infer<typeof CmsConfigSchema>;
 export declare const PlatformConfigSchema: z.ZodObject<{
     features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
     brands: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -61,6 +128,10 @@ export declare const PlatformConfigSchema: z.ZodObject<{
         maxStakePerBet: z.ZodOptional<z.ZodNumber>;
         sessionReminderMinutes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
+    responsibleGambling: z.ZodDefault<z.ZodObject<{
+        limitIncreaseCooldownHours: z.ZodDefault<z.ZodNumber>;
+        limitChangeConfirmationWindowHours: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     kyc: z.ZodOptional<z.ZodObject<{
         provider: z.ZodOptional<z.ZodString>;
         webhookSecretEnv: z.ZodOptional<z.ZodString>;
@@ -69,24 +140,70 @@ export declare const PlatformConfigSchema: z.ZodObject<{
     }, z.core.$strict>>;
     autoWithdrawal: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
-        fiatThreshold: z.ZodOptional<z.ZodString>;
-        cryptoThreshold: z.ZodOptional<z.ZodString>;
-        excludeRiskFlags: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-            high_roller: "high_roller";
-            vip: "vip";
-            bonus_abuser: "bonus_abuser";
-            high_risk: "high_risk";
-            inactive: "inactive";
-            large_depositor: "large_depositor";
-            self_excluded: "self_excluded";
-            kyc_pending: "kyc_pending";
-            kyc_rejected: "kyc_rejected";
-            test_account: "test_account";
-        }>>>;
         dailyCapAmount: z.ZodOptional<z.ZodString>;
         dailyCapCount: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
+    wallet: z.ZodOptional<z.ZodObject<{
+        cryptoCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        treasuryRefs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        sweep: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+            feeMultiple: z.ZodDefault<z.ZodString>;
+            batchSize: z.ZodDefault<z.ZodNumber>;
+            concurrency: z.ZodDefault<z.ZodNumber>;
+            unknownAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+        reconciliation: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+            lookbackHours: z.ZodDefault<z.ZodNumber>;
+            batchSize: z.ZodDefault<z.ZodNumber>;
+            stuckAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            alertThreshold: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    exchangeRate: z.ZodOptional<z.ZodObject<{
+        pivot: z.ZodDefault<z.ZodString>;
+        freshTtlMs: z.ZodDefault<z.ZodNumber>;
+        hardMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+        providerTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+    registration: z.ZodOptional<z.ZodObject<{
+        termsVersion: z.ZodString;
+        requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    notifications: z.ZodOptional<z.ZodObject<{
+        retention: z.ZodOptional<z.ZodObject<{
+            days: z.ZodDefault<z.ZodNumber>;
+            cron: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     supportedLanguages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    displayCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    chat: z.ZodDefault<z.ZodObject<{
+        allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+        moderationExpiry: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    adminSecurity: z.ZodPrefault<z.ZodObject<{
+        requireTwoFactor: z.ZodDefault<z.ZodBoolean>;
+        bindSessionToDevice: z.ZodDefault<z.ZodBoolean>;
+        trustedDeviceDays: z.ZodDefault<z.ZodNumber>;
+        ipChangePolicy: z.ZodDefault<z.ZodEnum<{
+            any: "any";
+            country: "country";
+            off: "off";
+        }>>;
+        twoFactorLockout: z.ZodPrefault<z.ZodObject<{
+            maxAttempts: z.ZodDefault<z.ZodNumber>;
+            durationMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    cms: z.ZodDefault<z.ZodObject<{
+        allowedBannerImageHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type PlatformConfig = z.infer<typeof PlatformConfigSchema>;
 export type PlatformConfigInput = z.input<typeof PlatformConfigSchema>;
@@ -113,6 +230,29 @@ export declare const PLATFORM_CONFIG: import("../adapters/token.js").Token<{
         maxStakePerBet?: number | undefined;
         sessionReminderMinutes?: number | undefined;
     }>;
+    responsibleGambling: {
+        limitIncreaseCooldownHours: number;
+        limitChangeConfirmationWindowHours: number;
+    };
+    chat: {
+        allowedAttachmentHosts: string[];
+        moderationExpiry?: {
+            cron: string;
+        } | undefined;
+    };
+    adminSecurity: {
+        requireTwoFactor: boolean;
+        bindSessionToDevice: boolean;
+        trustedDeviceDays: number;
+        ipChangePolicy: "any" | "country" | "off";
+        twoFactorLockout: {
+            maxAttempts: number;
+            durationMs: number;
+        };
+    };
+    cms: {
+        allowedBannerImageHosts: string[];
+    };
     activeBrand?: string | undefined;
     kyc?: {
         gateWithdrawals: boolean;
@@ -122,12 +262,46 @@ export declare const PLATFORM_CONFIG: import("../adapters/token.js").Token<{
     } | undefined;
     autoWithdrawal?: {
         enabled: boolean;
-        excludeRiskFlags: ("high_roller" | "vip" | "bonus_abuser" | "high_risk" | "inactive" | "large_depositor" | "self_excluded" | "kyc_pending" | "kyc_rejected" | "test_account")[];
-        fiatThreshold?: string | undefined;
-        cryptoThreshold?: string | undefined;
         dailyCapAmount?: string | undefined;
         dailyCapCount?: number | undefined;
     } | undefined;
+    wallet?: {
+        cryptoCurrencies?: string[] | undefined;
+        treasuryRefs?: Record<string, string> | undefined;
+        sweep?: {
+            cron: string;
+            feeMultiple: string;
+            batchSize: number;
+            concurrency: number;
+            unknownAfterMinutes: number;
+            staleRunAfterMinutes: number;
+        } | undefined;
+        reconciliation?: {
+            cron: string;
+            lookbackHours: number;
+            batchSize: number;
+            stuckAfterMinutes: number;
+            staleRunAfterMinutes: number;
+            alertThreshold: number;
+        } | undefined;
+    } | undefined;
+    exchangeRate?: {
+        pivot: string;
+        freshTtlMs: number;
+        hardMaxAgeMs: number;
+        providerTimeoutMs: number;
+    } | undefined;
+    registration?: {
+        termsVersion: string;
+        requireEmailVerification: boolean;
+    } | undefined;
+    notifications?: {
+        retention?: {
+            days: number;
+            cron: string;
+        } | undefined;
+    } | undefined;
     supportedLanguages?: string[] | undefined;
-}>;
+    displayCurrencies?: string[] | undefined;
+}, string>;
 //# sourceMappingURL=platform-config.d.ts.map

package/dist/contracts/schemas/platform-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;kBAa5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA8C7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAiD,CAAC"}
+{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;kBAQ5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAkEpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;kBAY1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;kBAc3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;kBAU1B,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,aAK9B,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,uBAAuB,CAAC;AAExE,eAAO,MAAM,wBAAwB,wDAuBa,CAAC;AAEnD,eAAO,MAAM,gBAAgB;;;;;kBAiBlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;kBAwC3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;kBAKjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA+D7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAAiD,CAAC"}

package/dist/contracts/schemas/platform-config.js

@@ -1,6 +1,5 @@
 import { z } from 'zod';
-import { LimitsSchema } from './igaming-config.js';
-import { TagKeySchema } from './tag.js';
+import { LimitsSchema, CurrencyCodeSchema, ResponsibleGamingSchema, defaultResponsibleGamingConfig, } from './igaming-config.js';
 import { MoneyAmountSchema } from './common.js';
 import { createToken } from '../adapters/token.js';
 /**
@@ -46,17 +45,220 @@ export const KycConfigSchema = z
 export const AutoWithdrawalConfigSchema = z
     .object({
     enabled: z.boolean().default(false),
-    /** Fiat-rail auto-approval ceiling; a per-player rule overrides it. */
-    fiatThreshold: MoneyAmountSchema.optional(),
-    cryptoThreshold: MoneyAmountSchema.optional(),
-    /** Active tag keys that veto auto-approval and force manual review. */
-    excludeRiskFlags: z.array(TagKeySchema).default([]),
     /** Amount cap on auto-approved payouts per player per trailing 24h. Absent = no cap. */
     dailyCapAmount: MoneyAmountSchema.optional(),
     /** Count cap on auto-approved payouts per player per trailing 24h. Absent = no cap. */
     dailyCapCount: z.number().int().positive().optional(),
 })
     .strict();
+export const WalletConfigSchema = z
+    .object({
+    /**
+     * Currency codes routed to the crypto rail by `railFor` (case-insensitive).
+     * Absent = the built-in default (BTC, ETH, USDT, USDC). Lets an operator add or
+     * swap crypto assets (eg a custody vendor's supported asset list) without a
+     * core code change.
+     */
+    cryptoCurrencies: z.array(z.string().min(1)).optional(),
+    /**
+     * Vendor-side account each provider's sweeps move player funds into, keyed by the
+     * provider name in `wallet_asset.providerName` (`default` for the single bound
+     * adapter). Keyed rather than flat because one operator can run several vendors,
+     * and an account id only means something at the vendor that issued it. A provider
+     * with no entry sweeps to whatever its adapter defaults to.
+     */
+    treasuryRefs: z.record(z.string().min(1), z.string().min(1)).optional(),
+    /**
+     * Custody sweep cron knobs. Static config, not a DB row - nothing here is edited
+     * during an incident. Absent means the sweep job no-ops.
+     */
+    sweep: z
+        .object({
+        cron: z.string().default('*/15 * * * *'),
+        /**
+         * Decimal string, compared exactly (see `moneyCompare`/`moneyScaleBy`). A
+         * balance must be worth at least this many times the fee to be worth sweeping.
+         */
+        feeMultiple: MoneyAmountSchema.default('5'),
+        /** Balances considered per cycle; listSweepableBalances is unbounded. */
+        batchSize: z.number().int().positive().default(200),
+        /** Vendor API parallelism. Tune to the vendor's rate limit. */
+        concurrency: z.number().int().positive().default(4),
+        /**
+         * How long a sweep may sit in `unknown` before reconciliation reports it for a
+         * human. `unknown` means the vendor call threw and we cannot tell whether it
+         * was received, so the in-flight guard stays held and nobody releases it
+         * automatically.
+         */
+        unknownAfterMinutes: z.number().int().positive().default(60),
+        /**
+         * How long a claimed run may sit unfinished before another cycle treats it as
+         * abandoned and takes over. Distinct from `unknownAfterMinutes`: this one is
+         * about a crashed worker, that one is about an ambiguous vendor call.
+         */
+        staleRunAfterMinutes: z.number().int().positive().default(30),
+    })
+        .strict()
+        .optional(),
+    /**
+     * Reconciliation cron knobs. Static config, not a DB row - nothing here is edited
+     * during an incident. Absent means the reconciliation job no-ops.
+     */
+    reconciliation: z
+        .object({
+        cron: z.string().default('0 * * * *'),
+        lookbackHours: z.number().int().positive().default(24),
+        batchSize: z.number().int().positive().default(200),
+        stuckAfterMinutes: z.number().int().positive().default(60),
+        /** Run-claim takeover threshold, as in `sweep.staleRunAfterMinutes`. */
+        staleRunAfterMinutes: z.number().int().positive().default(30),
+        alertThreshold: z.number().int().positive().default(10),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const ExchangeRateConfigSchema = z
+    .object({
+    /** Comparison currency the fx module derives a cross rate against. Absent = 'USD'. */
+    pivot: CurrencyCodeSchema.default('USD'),
+    freshTtlMs: z.number().int().positive().default(60_000),
+    hardMaxAgeMs: z
+        .number()
+        .int()
+        .positive()
+        .default(15 * 60_000),
+    providerTimeoutMs: z.number().int().positive().default(2_000),
+})
+    .strict();
+export const NotificationsConfigSchema = z
+    .object({
+    /**
+     * In-app notification retention knobs. Static config, not a DB row - nothing
+     * here is edited during an incident. Absent means the built-in defaults apply.
+     */
+    retention: z
+        .object({
+        days: z.number().int().positive().default(30),
+        cron: z.string().default('0 3 * * *'),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const RegistrationConfigSchema = z
+    .object({
+    /** Version recorded beside the player's affirmative terms acceptance. */
+    termsVersion: z.string().min(1),
+    /**
+     * Blocks sign-in until the player has verified their address. Off by default:
+     * unverified players stay unrestricted while the KYC toggle is off.
+     */
+    requireEmailVerification: z.boolean().default(false),
+})
+    .strict();
+/**
+ * Structural check on a cron expression: 5 fields, or 6 with a leading seconds field.
+ * Not a full parse - the driver owns that - but it turns the typo class that would
+ * otherwise surface as one `logger.error` at boot and a job that never ticks into a
+ * config-validation failure.
+ */
+export const CronExpressionSchema = z
+    .string()
+    .regex(/^[0-9A-Za-z*?,\-/]+( [0-9A-Za-z*?,\-/]+){4,5}$/, 'must be a 5- or 6-field cron expression');
+/**
+ * Offset off the :00/:15/:30/:45 tick the wallet custody sweep owns, so the in-process
+ * driver never runs the moderation-expiry sweep alongside a money path. Cadence sets
+ * audit-trail latency only - a lapsed mute stops being enforced at its own `expiresAt`
+ * with or without the job, and the entry is dated from the row, so a late run still
+ * records the right instant.
+ */
+export const CHAT_MODERATION_EXPIRY_DEFAULT_CRON = '7,22,37,52 * * * *';
+export const HostAllowlistEntrySchema = z
+    .string()
+    .trim()
+    .min(1)
+    .refine((hostname) => {
+    try {
+        const url = new URL(`https://${hostname}`);
+        return (url.hostname === hostname.toLowerCase() &&
+            url.pathname === '/' &&
+            url.port === '' &&
+            url.username === '' &&
+            url.password === '' &&
+            url.search === '' &&
+            url.hash === '');
+    }
+    catch {
+        return false;
+    }
+}, { message: 'must be a hostname without a protocol, port, credentials, or path' })
+    .transform((hostname) => hostname.toLowerCase());
+export const ChatConfigSchema = z
+    .object({
+    /** Hostnames a chat message attachment may be served from. Empty = attachments disabled. */
+    allowedAttachmentHosts: z.array(HostAllowlistEntrySchema).default([]),
+    /**
+     * Cron knob for the sweep that audits a mute or platform ban lapsing on its own.
+     * Static config, not a DB row. Absent means the built-in default applies; the cadence
+     * only sets how soon the lapse shows in the audit trail - enforcement already stops
+     * at `expiresAt` without it.
+     */
+    moderationExpiry: z
+        .object({
+        cron: CronExpressionSchema.default(CHAT_MODERATION_EXPIRY_DEFAULT_CRON),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const AdminSecurityConfigSchema = z
+    .object({
+    /**
+     * Every Backoffice account must hold a second factor before it can reach any
+     * admin route. Operator-level switch with no per-user opt-out: an operator under
+     * a licence that mandates 2FA turns this on, and no account can then bypass it.
+     *
+     * Off by default. Whether Backoffice 2FA is mandatory is a licensing decision the
+     * operator owns, and defaulting it on would lock every existing deployment out of
+     * its own back office on upgrade.
+     */
+    requireTwoFactor: z.boolean().default(false),
+    /**
+     * Ties a Backoffice session to the browser it was issued to: a mid-session
+     * User-Agent change (or an IP change, per `ipChangePolicy`) ends the session and
+     * forces full re-authentication. Off by default for the same reason as above.
+     */
+    bindSessionToDevice: z.boolean().default(false),
+    /** How long a device stays trusted after a successful second factor. */
+    trustedDeviceDays: z.number().int().min(0).max(90).default(30),
+    /**
+     * Which mid-session IP change invalidates a Backoffice session, once
+     * `bindSessionToDevice` is on. `country` needs a bound GEO_IP_ADAPTER and degrades
+     * to `off` without one - never to `any`, which would end a session on every NAT or
+     * mobile-network hop.
+     */
+    ipChangePolicy: z.enum(['off', 'country', 'any']).default('off'),
+    /** Consecutive failed second-factor attempts before the account locks. */
+    twoFactorLockout: z
+        .object({
+        maxAttempts: z.number().int().min(1).max(20).default(5),
+        durationMs: z
+            .number()
+            .int()
+            .min(0)
+            .default(15 * 60 * 1000),
+    })
+        .strict()
+        .prefault({}),
+})
+    .strict();
+export const CmsConfigSchema = z
+    .object({
+    /** Hostnames a banner image URL may be served from. Empty = no banner images allowed. */
+    allowedBannerImageHosts: z.array(HostAllowlistEntrySchema).default([]),
+})
+    .strict();
 export const PlatformConfigSchema = z
     .object({
     /**
@@ -81,6 +283,7 @@ export const PlatformConfigSchema = z
      * defaults), reusing the shared LimitsSchema shape.
      */
     rgLimits: z.record(z.string().length(2), LimitsSchema).default({}),
+    responsibleGambling: ResponsibleGamingSchema.default(defaultResponsibleGamingConfig),
     /**
      * KYC verification knobs: provider id, webhook secret env, withdrawal gating,
      * and per-currency re-KYC deposit thresholds. Absent = KYC ungated, no re-KYC.
@@ -88,11 +291,27 @@ export const PlatformConfigSchema = z
     kyc: KycConfigSchema.optional(),
     /** Auto-approve withdrawals that clear every risk gate instead of queuing them for manual review. Absent = always manual. */
     autoWithdrawal: AutoWithdrawalConfigSchema.optional(),
+    /** Wallet rail-routing knobs (currently: the crypto currency set). Absent = built-in default. */
+    wallet: WalletConfigSchema.optional(),
+    /** Exchange-rate refresh knobs (pivot currency, refresh cron). Absent = built-in defaults. */
+    exchangeRate: ExchangeRateConfigSchema.optional(),
+    /** Required before public registration is enabled. */
+    registration: RegistrationConfigSchema.optional(),
+    /** In-app notification retention knobs. Absent = built-in default (30 days). */
+    notifications: NotificationsConfigSchema.optional(),
     /**
      * Player-facing language codes the operator supports (eg `['en', 'es']`).
      * Undefined or empty means no restriction - any value is accepted.
      */
     supportedLanguages: z.array(z.string().min(1)).optional(),
+    /** Currencies a player may pick to display amounts in. Absent or empty = built-in default. */
+    displayCurrencies: z.array(z.string().min(1)).optional(),
+    /** Chat attachment host allow-list. Absent = built-in default (empty = disabled). */
+    chat: ChatConfigSchema.default({ allowedAttachmentHosts: [] }),
+    /** Backoffice 2FA + session-binding policy. Absent = the schema defaults apply. */
+    adminSecurity: AdminSecurityConfigSchema.prefault({}),
+    /** CMS banner image host allow-list. Absent = built-in default (empty = disabled). */
+    cms: CmsConfigSchema.default({ allowedBannerImageHosts: [] }),
 })
     .strict()
     .superRefine((cfg, ctx) => {

package/dist/contracts/schemas/platform-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.js","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,4DAA4D;IAC5D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kEAAkE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,iFAAiF;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wFAAwF;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,uEAAuE;IACvE,aAAa,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC3C,eAAe,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC7C,uEAAuE;IACvE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,wFAAwF;IACxF,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC5C,uFAAuF;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN;;;OAGG;IACH,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE;;;OAGG;IACH,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,6HAA6H;IAC7H,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACrD;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,mCAAmC;YAC3E,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"platform-config.js","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,4DAA4D;IAC5D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,yDAAyD;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kEAAkE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,iFAAiF;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,wFAAwF;IACxF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,0FAA0F;IAC1F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,wFAAwF;IACxF,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC5C,uFAAuF;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvD;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvE;;;OAGG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;QACxC;;;WAGG;QACH,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC;QAC3C,yEAAyE;QACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,+DAA+D;QAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD;;;;;WAKG;QACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D;;;;WAIG;QACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9D,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb;;;OAGG;IACH,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACnD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,wEAAwE;QACxE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACxD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,sFAAsF;IACtF,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACvD,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;IACvB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC9D,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN;;;OAGG;IACH,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;KACtC,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B;;;OAGG;IACH,wBAAwB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,KAAK,CACJ,gDAAgD,EAChD,yCAAyC,CAC1C,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,oBAAoB,CAAC;AAExE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE;IACX,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;QAC3C,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,WAAW,EAAE;YACvC,GAAG,CAAC,QAAQ,KAAK,GAAG;YACpB,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,MAAM,KAAK,EAAE;YACjB,GAAG,CAAC,IAAI,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EACD,EAAE,OAAO,EAAE,mEAAmE,EAAE,CACjF;KACA,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAEnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,4FAA4F;IAC5F,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrE;;;;;OAKG;IACH,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,mCAAmC,CAAC;KACxE,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN;;;;;;;;OAQG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,wEAAwE;IACxE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D;;;;;OAKG;IACH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChE,0EAA0E;IAC1E,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,UAAU,EAAE,CAAC;aACV,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;KAC3B,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,yFAAyF;IACzF,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN;;;OAGG;IACH,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC;;;;OAIG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;OAGG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,mBAAmB,EAAE,uBAAuB,CAAC,OAAO,CAAC,8BAA8B,CAAC;IACpF;;;OAGG;IACH,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,6HAA6H;IAC7H,cAAc,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACrD,iGAAiG;IACjG,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,8FAA8F;IAC9F,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACjD,sDAAsD;IACtD,YAAY,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACjD,gFAAgF;IAChF,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACnD;;;OAGG;IACH,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,8FAA8F;IAC9F,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,qFAAqF;IACrF,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC;IAC9D,mFAAmF;IACnF,aAAa,EAAE,yBAAyB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrD,sFAAsF;IACtF,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC;CAC9D,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gBAAgB,GAAG,CAAC,WAAW,mCAAmC;YAC3E,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAKL;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAE9E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}