@openora/core 0.4.1-canary.13 → 0.4.1-canary.130

package/dist/engagement/chat/drizzle/migrations/meta/_journal.json

@@ -8,6 +8,104 @@
       "when": 1783555224311,
       "tag": "0000_numerous_albert_cleary",
       "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1784721152596,
+      "tag": "0001_cloudy_groot",
+      "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "7",
+      "when": 1785142633864,
+      "tag": "0002_steep_zodiak",
+      "breakpoints": true
+    },
+    {
+      "idx": 3,
+      "version": "7",
+      "when": 1785446950360,
+      "tag": "0003_stormy_king_bedlam",
+      "breakpoints": true
+    },
+    {
+      "idx": 4,
+      "version": "7",
+      "when": 1785847639753,
+      "tag": "0004_panoramic_robin_chapel",
+      "breakpoints": true
+    },
+    {
+      "idx": 5,
+      "version": "7",
+      "when": 1787007709566,
+      "tag": "0005_tranquil_gwen_stacy",
+      "breakpoints": true
+    },
+    {
+      "idx": 6,
+      "version": "7",
+      "when": 1787037041382,
+      "tag": "0006_tiny_ultron",
+      "breakpoints": true
+    },
+    {
+      "idx": 7,
+      "version": "7",
+      "when": 1787296386010,
+      "tag": "0007_seed_global_chat_room",
+      "breakpoints": true
+    },
+    {
+      "idx": 8,
+      "version": "7",
+      "when": 1787913359236,
+      "tag": "0008_robust_korvac",
+      "breakpoints": true
+    },
+    {
+      "idx": 9,
+      "version": "7",
+      "when": 1788165909926,
+      "tag": "0009_massive_bill_hollister",
+      "breakpoints": true
+    },
+    {
+      "idx": 10,
+      "version": "7",
+      "when": 1788165921652,
+      "tag": "0010_backfill_role_assigned_at",
+      "breakpoints": true
+    },
+    {
+      "idx": 11,
+      "version": "7",
+      "when": 1788296092259,
+      "tag": "0011_light_changeling",
+      "breakpoints": true
+    },
+    {
+      "idx": 12,
+      "version": "7",
+      "when": 1788508946073,
+      "tag": "0012_strange_mephisto",
+      "breakpoints": true
+    },
+    {
+      "idx": 13,
+      "version": "7",
+      "when": 1788510703169,
+      "tag": "0013_chilly_sprite",
+      "breakpoints": true
+    },
+    {
+      "idx": 14,
+      "version": "7",
+      "when": 1788531588015,
+      "tag": "0014_chat_moderation_expiry_recorded",
+      "breakpoints": true
     }
   ]
 }

package/dist/engagement/chat/index.d.ts

@@ -1,3 +1,2 @@
-export { ChatService } from './service/chat.service.js';
-export { createChatRouter } from './router/index.js';
+export * from './contract/constants.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/engagement/chat/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engagement/chat/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/engagement/chat/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/engagement/chat/index.js

@@ -1,3 +1,2 @@
-export { ChatService } from './service/chat.service.js';
-export { createChatRouter } from './router/index.js';
+export * from './contract/constants.js';
 //# sourceMappingURL=index.js.map

package/dist/engagement/chat/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engagement/chat/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/engagement/chat/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/engagement/chat/moderation/index.d.ts

@@ -1,4 +1,5 @@
 export { moderateContent, type ModerationResult } from './moderate.js';
 export { hasProfanity, SUPPORTED_LANGUAGES, type SupportedLanguage } from './profanity.js';
 export { sanitizeUrls } from './sanitize-urls.js';
+export { validateAttachment, type AttachmentValidationResult } from './validate-attachment.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/engagement/chat/moderation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,KAAK,0BAA0B,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/engagement/chat/moderation/index.js

@@ -1,4 +1,5 @@
 export { moderateContent } from './moderate.js';
 export { hasProfanity, SUPPORTED_LANGUAGES } from './profanity.js';
 export { sanitizeUrls } from './sanitize-urls.js';
+export { validateAttachment } from './validate-attachment.js';
 //# sourceMappingURL=index.js.map

package/dist/engagement/chat/moderation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAyB,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAA0B,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAyB,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAA0B,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAmC,MAAM,0BAA0B,CAAC"}

package/dist/engagement/chat/moderation/profanity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profanity.d.ts","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/profanity.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAEjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AASrE,kGAAkG;AAClG,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAE/F"}
+{"version":3,"file":"profanity.d.ts","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/profanity.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,mBAAmB,+CAAgD,CAAC;AAEjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAYrE,kGAAkG;AAClG,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAAG,OAAO,CAE/F"}

package/dist/engagement/chat/moderation/profanity.js

@@ -9,6 +9,8 @@ const profanity = new Profanity({
     languages: [...SUPPORTED_LANGUAGES],
     unicodeWordBoundaries: true,
 });
+// @2toad/profanity 3.3.0 incorrectly lists "5" as Portuguese profanity.
+profanity.removeWords(['5']);
 /** True when `content` contains a blocked term in any of `languages` (default: all supported). */
 export function hasProfanity(content, languages) {
     return profanity.exists(content, languages ? [...languages] : undefined);

package/dist/engagement/chat/moderation/profanity.js.map

@@ -1 +1 @@
-{"version":3,"file":"profanity.js","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/profanity.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mFAAmF;AACnF,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAIjF,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;IAC9B,SAAS,EAAE,CAAC,GAAG,mBAAmB,CAAC;IACnC,qBAAqB,EAAE,IAAI;CAC5B,CAAC,CAAC;AAEH,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAwC;IACpF,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"profanity.js","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/profanity.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mFAAmF;AACnF,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAIjF,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;IAC9B,SAAS,EAAE,CAAC,GAAG,mBAAmB,CAAC;IACnC,qBAAqB,EAAE,IAAI;CAC5B,CAAC,CAAC;AAEH,wEAAwE;AACxE,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAE7B,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAwC;IACpF,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC3E,CAAC"}

package/dist/engagement/chat/moderation/validate-attachment.d.ts

@@ -0,0 +1,9 @@
+import type { ChatAttachment } from '@openora/core/contracts';
+export type AttachmentValidationResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function validateAttachment(attachment: Pick<ChatAttachment, 'url' | 'previewUrl'>, allowedHosts: readonly string[]): AttachmentValidationResult;
+//# sourceMappingURL=validate-attachment.d.ts.map

package/dist/engagement/chat/moderation/validate-attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-attachment.d.ts","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/validate-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,MAAM,MAAM,0BAA0B,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAsBtF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,YAAY,CAAC,EACtD,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,0BAA0B,CAM5B"}

package/dist/engagement/chat/moderation/validate-attachment.js

@@ -0,0 +1,27 @@
+function isAllowedHost(hostname, allowedHosts) {
+    return allowedHosts.some((allowed) => hostname === allowed || hostname.endsWith(`.${allowed}`));
+}
+function validateUrl(raw, allowedHosts) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return { ok: false, reason: `invalid URL: ${raw}` };
+    }
+    if (url.protocol !== 'https:') {
+        return { ok: false, reason: `unsupported protocol: ${url.protocol}` };
+    }
+    if (!isAllowedHost(url.hostname, allowedHosts)) {
+        return { ok: false, reason: `host not allowed: ${url.hostname}` };
+    }
+    return { ok: true };
+}
+export function validateAttachment(attachment, allowedHosts) {
+    const urlResult = validateUrl(attachment.url, allowedHosts);
+    if (!urlResult.ok) {
+        return urlResult;
+    }
+    return validateUrl(attachment.previewUrl, allowedHosts);
+}
+//# sourceMappingURL=validate-attachment.js.map

package/dist/engagement/chat/moderation/validate-attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-attachment.js","sourceRoot":"","sources":["../../../../src/engagement/chat/moderation/validate-attachment.ts"],"names":[],"mappings":"AAIA,SAAS,aAAa,CAAC,QAAgB,EAAE,YAA+B;IACtE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,YAA+B;IAC/D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAAsD,EACtD,YAA+B;IAE/B,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC1D,CAAC"}

package/dist/engagement/chat/plugin.d.ts

@@ -1,3 +1,183 @@
-declare const _default: import("@openora/core/server").Plugin;
+import type { JobQueueAdapter } from '@openora/core/contracts';
+declare const _default: {
+    readonly id: "chat";
+    readonly dependsOn: readonly ["identity", "audit"];
+    readonly register: (ctx: import("@openora/core/server").PluginContext<{
+        ADMIN_GAME_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminGameReporting>;
+        ADMIN_GUARD: import("@openora/core/contracts").Token<import("@openora/core/server").AdminGuard>;
+        ADMIN_PERMISSION_RESOLVER: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPermissionResolver>;
+        ADMIN_PLAYER_ACTIVITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPlayerActivity>;
+        ADMIN_ROLE_ASSIGNMENT_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminRoleAssignmentDirectory>;
+        ADMIN_SECURITY_POLICY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminSecurityPolicy>;
+        ADMIN_USER_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminUserDirectory>;
+        ADMIN_WALLET_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminWalletReporting>;
+        AUDIT_WRITER: import("@openora/core/contracts").SealedToken<import("@openora/core/contracts").AuditWritePort>;
+        AUTH_SESSION: import("@openora/core/contracts").Token<import("@openora/core/server").SessionResolver>;
+        CACHE: import("@openora/core/contracts").Token<import("@openora/core/contracts").CacheAdapter>;
+        CHAT_BLOCK_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatBlockWriter>;
+        CHAT_MODERATION: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatModeration, string>;
+        CHAT_REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        CHAT_REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+        CHAT_ROOM_ACCESS: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatRoomAccess>;
+        CHAT_SYSTEM_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatSystemWriter, string>;
+        DRIZZLE: import("@openora/core/contracts").Token<import("@openora/core/server").DrizzleService>;
+        EMAIL_SENDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailSenderPort>;
+        EMAIL_TEMPLATE_RENDERER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailTemplateRenderer>;
+        ERROR_TRACKING: import("@openora/core/contracts").Token<import("@openora/core/contracts").ErrorTrackingAdapter>;
+        EVENT_BUS: import("@openora/core/contracts").Token<import("@openora/core/server").EventBus>;
+        EXCHANGE_RATE_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateReader>;
+        CRYPTO_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        FIAT_EXCHANGE_RATE_PROVIDER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ExchangeRateProvider>;
+        SWAP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapAdapter>;
+        SWAP_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SwapWebhookVerifier>;
+        GAME_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GameAdapter>;
+        GEO_CHECK_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoCheckCommands>;
+        GEO_IP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoIpAdapter>;
+        IDENTITY_OPTIONS: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityServiceOptions>;
+        IDENTITY_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityReader, string>;
+        IGAMING_CONFIG: import("@openora/core/contracts").Token<{
+            branding: {
+                name: string;
+                themePreset?: string | undefined;
+                supportEmail?: string | undefined;
+            };
+            currencies: string[];
+            jurisdictions: string[];
+            blockedCountries: string[];
+            limits: {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            };
+            providers: {
+                payment?: string | undefined;
+                kyc?: string | undefined;
+                geoIp?: string | undefined;
+                aggregator?: string | undefined;
+                notification?: string | undefined;
+            };
+            enabledModules?: string[] | undefined;
+        }, string>;
+        JOB_QUEUE: import("@openora/core/contracts").Token<JobQueueAdapter>;
+        KYC_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycAdapter>;
+        KYC_STATUS_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycStatusWriter>;
+        KYC_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycWebhookVerifier>;
+        LOGIN_ENFORCEMENT: import("@openora/core/contracts").Token<import("@openora/core/contracts").LoginEnforcementPort>;
+        MAIL_DISPATCH: import("@openora/core/contracts").Token<import("@openora/core/contracts").MailDispatchPort>;
+        MESSAGE_BROKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").MessageBrokerAdapter>;
+        OUTBOX: import("@openora/core/contracts").Token<import("@openora/core/contracts").OutboxWriter>;
+        PAYMENT_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentAdapter>;
+        PAYMENT_PROVIDERS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentProviderRegistry>;
+        PAYMENT_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentWebhookVerifier>;
+        PLATFORM_CONFIG: import("@openora/core/contracts").Token<{
+            features: Record<string, boolean>;
+            brands: {
+                id: string;
+                name: string;
+                themePreset?: string | undefined;
+                themeOverrides?: Record<string, string> | undefined;
+            }[];
+            rgLimits: Record<string, {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            }>;
+            responsibleGambling: {
+                limitIncreaseCooldownHours: number;
+                limitChangeConfirmationWindowHours: number;
+            };
+            chat: {
+                allowedAttachmentHosts: string[];
+                moderationExpiry?: {
+                    cron: string;
+                } | undefined;
+            };
+            adminSecurity: {
+                requireTwoFactor: boolean;
+                bindSessionToDevice: boolean;
+                trustedDeviceDays: number;
+                ipChangePolicy: "any" | "country" | "off";
+                twoFactorLockout: {
+                    maxAttempts: number;
+                    durationMs: number;
+                };
+            };
+            cms: {
+                allowedBannerImageHosts: string[];
+            };
+            activeBrand?: string | undefined;
+            kyc?: {
+                gateWithdrawals: boolean;
+                provider?: string | undefined;
+                webhookSecretEnv?: string | undefined;
+                reverifyThresholds?: Record<string, string> | undefined;
+            } | undefined;
+            autoWithdrawal?: {
+                enabled: boolean;
+                dailyCapAmount?: string | undefined;
+                dailyCapCount?: number | undefined;
+            } | undefined;
+            wallet?: {
+                cryptoCurrencies?: string[] | undefined;
+                treasuryRefs?: Record<string, string> | undefined;
+                sweep?: {
+                    cron: string;
+                    feeMultiple: string;
+                    batchSize: number;
+                    concurrency: number;
+                    unknownAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                } | undefined;
+                reconciliation?: {
+                    cron: string;
+                    lookbackHours: number;
+                    batchSize: number;
+                    stuckAfterMinutes: number;
+                    staleRunAfterMinutes: number;
+                    alertThreshold: number;
+                } | undefined;
+            } | undefined;
+            exchangeRate?: {
+                pivot: string;
+                freshTtlMs: number;
+                hardMaxAgeMs: number;
+                providerTimeoutMs: number;
+            } | undefined;
+            registration?: {
+                termsVersion: string;
+                requireEmailVerification: boolean;
+            } | undefined;
+            notifications?: {
+                retention?: {
+                    days: number;
+                    cron: string;
+                } | undefined;
+            } | undefined;
+            supportedLanguages?: string[] | undefined;
+            displayCurrencies?: string[] | undefined;
+        }, string>;
+        PLAYER_ACTIVITY_TRACKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerActivityTracker>;
+        PLAYER_PROVISIONING: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerProvisioning>;
+        PLAYER_TAGS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerTags>;
+        PLAY_ELIGIBILITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayEligibilityPort>;
+        RATE_LIMITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RateLimiterAdapter<`register:${string}` | `login:${string}` | `enable2fa:${string}` | `verify2fa:${string}` | `disable2fa:${string}` | `pwreset-req:${string}` | `pwreset-verify:${string}` | `pwreset:${string}` | `change-password:${string}` | `email-verify:${string}` | `verify-email:${string}` | `wallet-mutation:${string}` | `wallet-webhook:${string}` | `chat-room-join:${string}` | `chat-send:${string}` | `report-access-denied:${string}`>>;
+        REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+        REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+        RG_LIMITS: import("@openora/core/contracts").Token<import("@openora/core/contracts").RgLimitsPort>;
+        RNG_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RngAdapter>;
+        SESSION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SessionCommands>;
+        USER_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").UserCommands>;
+        SMS_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SmsAdapter>;
+        SOCIAL_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SocialCommands>;
+        TAG_EVALUATION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").TagEvaluationCommands>;
+        WALLET_ASSET_CATALOG: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletAssetCatalog, string>;
+        WALLET_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletCommands>;
+        WALLET_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletReader, string>;
+    }>) => void;
+};
 export default _default;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/engagement/chat/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/engagement/chat/plugin.ts"],"names":[],"mappings":";AAKA,wBAUG"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/engagement/chat/plugin.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqD/D,wBA+Q8C"}

package/dist/engagement/chat/plugin.js

@@ -1,11 +1,217 @@
-import { definePlugin, EVENT_BUS, DRIZZLE } from '@openora/core/server';
-import { REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER } from '@openora/core/contracts';
+import * as z from 'zod';
+import { EVENT_BUS, DRIZZLE, ADMIN_GUARD, createLogger } from '@openora/core/server';
+import { JOB_QUEUE, domainEventSchemas, queue, CHAT_REALTIME_TRANSPORT, CHAT_REALTIME_CLIENT_AUTHORIZER, RATE_LIMITER, CHAT_SYSTEM_WRITER, CHAT_BLOCK_WRITER, CHAT_MODERATION, CHAT_ROOM_ACCESS, ADMIN_USER_DIRECTORY, SOCIAL_COMMANDS, REALTIME_TRANSPORT, REALTIME_CLIENT_AUTHORIZER, AUDIT_WRITER, IDENTITY_READER, PLATFORM_CONFIG, CHAT_MODERATION_EXPIRY_DEFAULT_CRON, UuidSchema, } from '@openora/core/contracts';
 import { ChatService } from './service/chat.service.js';
+import { ChatModerationService } from './service/chat-moderation.service.js';
+import { ChatRoomMembershipService } from './service/chat-room-membership.service.js';
+import { ChatRoomBanService } from './service/chat-room-ban.service.js';
+import { ChatRoomMuteService } from './service/chat-room-mute.service.js';
+import { ChatModerationExpiryService } from './service/chat-moderation-expiry.service.js';
+import { ChatRoomPurgeService } from './service/chat-room-purge.service.js';
 import { createChatRouter } from './router/index.js';
-export default definePlugin({
+const CHAT_MODERATION_EXPIRY_QUEUE = queue('chat-moderation-expiry');
+const CHAT_ROOM_PURGE_SCAN_QUEUE = queue('chat-room-purge-scan');
+const CHAT_ROOM_PURGE_QUEUE = queue('chat-room-purge');
+const CHAT_ACCOUNT_CLOSED_QUEUE = queue('chat-account-closed');
+const CHAT_ACCOUNT_REOPENED_QUEUE = queue('chat-account-reopened');
+const CHAT_ROOM_PURGE_CRON = '15 3 * * *';
+const CHAT_ROOM_PURGE_TIMEZONE = 'UTC';
+const CHAT_ROOM_PURGE_BATCH = 500;
+const RETRY = { attempts: 5, backoff: { type: 'exponential', delayMs: 1000 } };
+const accountJobKey = (prefix, userId, at) => `${prefix}:${userId}:${at.toISOString().slice(0, 10)}`;
+// The cron tick carries no state - the job's whole input is "what has lapsed by now".
+const EmptyJobPayloadSchema = z.object({});
+const RoomPurgeJobSchema = z.object({ roomId: UuidSchema });
+const AccountClosedJobSchema = z.object({ userId: UuidSchema, closedAt: z.iso.datetime() });
+const AccountReopenedJobSchema = z.object({ userId: UuidSchema });
+export default {
     id: 'chat',
+    dependsOn: ['identity', 'audit'],
     register(ctx) {
-        ctx.routers.add('chat', (c) => createChatRouter(new ChatService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(REALTIME_TRANSPORT)), c.get(REALTIME_CLIENT_AUTHORIZER)));
+        const logger = createLogger('chat');
+        let expiryRef;
+        ctx.provide(CHAT_REALTIME_TRANSPORT, (c) => c.get(REALTIME_TRANSPORT));
+        ctx.provide(CHAT_REALTIME_CLIENT_AUTHORIZER, (c) => c.get(REALTIME_CLIENT_AUTHORIZER));
+        ctx.provide(CHAT_MODERATION, (c) => new ChatModerationService(c.get(DRIZZLE), c.get(CHAT_REALTIME_TRANSPORT), c.get(AUDIT_WRITER)));
+        const createChatService = (c) => new ChatService({
+            drizzle: c.get(DRIZZLE),
+            events: c.get(EVENT_BUS),
+            transport: c.get(CHAT_REALTIME_TRANSPORT),
+            directory: c.get(ADMIN_USER_DIRECTORY),
+            audit: c.get(AUDIT_WRITER),
+            moderation: c.get(CHAT_MODERATION),
+            identityReader: c.get(IDENTITY_READER),
+            allowedAttachmentHosts: c.has(PLATFORM_CONFIG)
+                ? c.get(PLATFORM_CONFIG).chat.allowedAttachmentHosts
+                : [],
+            socialCommands: c.has(SOCIAL_COMMANDS) ? c.get(SOCIAL_COMMANDS) : undefined,
+        });
+        const createMembershipService = (c) => new ChatRoomMembershipService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(AUDIT_WRITER), c.get(CHAT_REALTIME_TRANSPORT), c.get(IDENTITY_READER));
+        ctx.provide(CHAT_SYSTEM_WRITER, createChatService);
+        ctx.provide(CHAT_BLOCK_WRITER, createChatService);
+        ctx.provide(CHAT_ROOM_ACCESS, (c) => ({
+            verifyRoomAccess: async (roomId, viewerId) => {
+                await createChatService(c).verifyRoomAccess(roomId, viewerId);
+            },
+        }));
+        ctx.jobs.worker({
+            queue: CHAT_MODERATION_EXPIRY_QUEUE,
+            schema: EmptyJobPayloadSchema,
+            handler: async () => {
+                if (!expiryRef) {
+                    // Workers started without building routers: the sweep is wired to the router
+                    // factory, so it has nothing to run. Say so rather than no-op in silence.
+                    logger.warn('chat-moderation-expiry sweep skipped - service not constructed');
+                    return;
+                }
+                const { mutes, bans } = await expiryRef.sweep();
+                if (mutes > 0 || bans > 0) {
+                    logger.info({ mutes, bans }, 'chat moderation expiry recorded');
+                }
+            },
+        });
+        let membershipRef = null;
+        let purgeRef = null;
+        let jobQueueRef = null;
+        const onAccountClosed = (userId) => {
+            if (!jobQueueRef) {
+                logger.error({ userId }, 'chat account-closed dropped: job queue not bound yet');
+                return;
+            }
+            const closedAt = new Date();
+            jobQueueRef
+                .enqueue(CHAT_ACCOUNT_CLOSED_QUEUE, { userId, closedAt: closedAt.toISOString() }, { idempotencyKey: accountJobKey('chat-account-closed', userId, closedAt), ...RETRY })
+                .catch((err) => logger.error({ err, userId }, 'chat account-closed enqueue failed'));
+        };
+        const onAccountReopened = (userId) => {
+            if (!jobQueueRef) {
+                logger.error({ userId }, 'chat account-reopened dropped: job queue not bound yet');
+                return;
+            }
+            jobQueueRef
+                .enqueue(CHAT_ACCOUNT_REOPENED_QUEUE, { userId }, {
+                idempotencyKey: accountJobKey('chat-account-reopened', userId, new Date()),
+                ...RETRY,
+            })
+                .catch((err) => logger.error({ err, userId }, 'chat account-reopened enqueue failed'));
+        };
+        ctx.events.on('player.account.closed', (payload) => {
+            const parsed = domainEventSchemas['player.account.closed'].safeParse(payload);
+            if (parsed.success) {
+                onAccountClosed(parsed.data.userId);
+            }
+        });
+        ctx.events.on('identity.user.deactivated', (payload) => {
+            const parsed = domainEventSchemas['identity.user.deactivated'].safeParse(payload);
+            if (parsed.success) {
+                onAccountClosed(parsed.data.userId);
+            }
+        });
+        ctx.events.on('player.account.reopened', (payload) => {
+            const parsed = domainEventSchemas['player.account.reopened'].safeParse(payload);
+            if (parsed.success) {
+                onAccountReopened(parsed.data.userId);
+            }
+        });
+        ctx.events.on('identity.user.reactivated', (payload) => {
+            const parsed = domainEventSchemas['identity.user.reactivated'].safeParse(payload);
+            if (parsed.success) {
+                onAccountReopened(parsed.data.userId);
+            }
+        });
+        ctx.jobs.worker({
+            queue: CHAT_ACCOUNT_CLOSED_QUEUE,
+            schema: AccountClosedJobSchema,
+            handler: async ({ payload }) => {
+                if (!membershipRef) {
+                    throw new Error('chat account-closed: service not constructed yet');
+                }
+                await membershipRef.handleAccountClosed({
+                    userId: payload.userId,
+                    closedAt: new Date(payload.closedAt),
+                });
+            },
+            onDeadLetter: (jobCtx, error) => {
+                logger.error({ err: error, userId: jobCtx.payload.userId, jobId: jobCtx.id }, 'chat account-closed handling exhausted retries');
+            },
+        });
+        ctx.jobs.worker({
+            queue: CHAT_ACCOUNT_REOPENED_QUEUE,
+            schema: AccountReopenedJobSchema,
+            handler: async ({ payload }) => {
+                if (!membershipRef) {
+                    throw new Error('chat account-reopened: service not constructed yet');
+                }
+                await membershipRef.handleAccountReopened({ userId: payload.userId });
+            },
+            onDeadLetter: (jobCtx, error) => {
+                logger.error({ err: error, userId: jobCtx.payload.userId, jobId: jobCtx.id }, 'chat account-reopened handling exhausted retries');
+            },
+        });
+        ctx.jobs.worker({
+            queue: CHAT_ROOM_PURGE_SCAN_QUEUE,
+            schema: EmptyJobPayloadSchema,
+            handler: async () => {
+                if (!purgeRef || !jobQueueRef) {
+                    throw new Error('chat room purge: service not constructed yet');
+                }
+                const queueRef = jobQueueRef;
+                const due = await purgeRef.listDueRooms(CHAT_ROOM_PURGE_BATCH);
+                const tick = new Date().toISOString().slice(0, 10);
+                for (const roomId of due) {
+                    await queueRef
+                        .enqueue(CHAT_ROOM_PURGE_QUEUE, { roomId }, { idempotencyKey: `chat-room-purge:${roomId}:${tick}`, ...RETRY })
+                        .catch((err) => logger.error({ err, roomId }, 'chat-room-purge enqueue failed'));
+                }
+                logger.info({ count: due.length }, 'chat room purge dispatched');
+            },
+            onDeadLetter: (jobCtx, error) => {
+                logger.error({ err: error, jobId: jobCtx.id }, 'chat room purge scan failed');
+            },
+        });
+        ctx.jobs.worker({
+            queue: CHAT_ROOM_PURGE_QUEUE,
+            schema: RoomPurgeJobSchema,
+            handler: async ({ payload }) => {
+                if (!purgeRef) {
+                    throw new Error('chat room purge: service not constructed yet');
+                }
+                await purgeRef.purgeRoom(payload.roomId);
+            },
+            onDeadLetter: (jobCtx, error) => {
+                logger.error({ err: error, roomId: jobCtx.payload.roomId, jobId: jobCtx.id }, 'chat room purge exhausted retries');
+            },
+        });
+        ctx.routers.add('chat', (c) => {
+            const chatService = createChatService(c);
+            expiryRef = new ChatModerationExpiryService(c.get(DRIZZLE), c.get(AUDIT_WRITER));
+            const expiryCron = (c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG).chat.moderationExpiry?.cron : undefined) ??
+                CHAT_MODERATION_EXPIRY_DEFAULT_CRON;
+            // Idempotent registration (keyed by scheduleId). JOB_QUEUE binds to BullMQ whenever
+            // REDIS_URL is set, which every real deployment has, so the schedule is durable
+            // there; the in-process default still ticks for `pnpm dev`.
+            void c
+                .get(JOB_QUEUE)
+                .schedule(CHAT_MODERATION_EXPIRY_QUEUE, 'chat-moderation-expiry.cron', {}, { cron: expiryCron })
+                .catch((err) => logger.error({ err }, 'chat-moderation-expiry schedule failed'));
+            const membershipService = createMembershipService(c);
+            membershipRef = membershipService;
+            purgeRef = new ChatRoomPurgeService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(CHAT_REALTIME_TRANSPORT), c.get(AUDIT_WRITER));
+            jobQueueRef = c.get(JOB_QUEUE);
+            void jobQueueRef
+                .schedule(CHAT_ROOM_PURGE_SCAN_QUEUE, 'chat-room-purge.cron', {}, { cron: CHAT_ROOM_PURGE_CRON, timezone: CHAT_ROOM_PURGE_TIMEZONE })
+                .catch((err) => logger.error({ err }, 'chat-room-purge schedule failed'));
+            return createChatRouter({
+                chatService,
+                membershipService,
+                roomBanService: new ChatRoomBanService(c.get(DRIZZLE), c.get(EVENT_BUS), c.get(AUDIT_WRITER), c.get(CHAT_REALTIME_TRANSPORT), c.get(IDENTITY_READER)),
+                roomMuteService: new ChatRoomMuteService(c.get(DRIZZLE), c.get(AUDIT_WRITER)),
+                moderationService: c.get(CHAT_MODERATION),
+                authorizer: c.get(CHAT_REALTIME_CLIENT_AUTHORIZER),
+                adminGuard: c.get(ADMIN_GUARD),
+                limiter: c.get(RATE_LIMITER),
+            });
+        });
     },
-});
+};
 //# sourceMappingURL=plugin.js.map