@openora/core 0.4.1-canary.13 → 0.4.1-canary.131

package/dist/pam/shared/__tests__/shared-mappers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shared-mappers.test.d.ts.map

package/dist/pam/shared/__tests__/shared-mappers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mappers.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/shared/__tests__/shared-mappers.test.ts"],"names":[],"mappings":""}

package/dist/pam/shared/__tests__/shared-mappers.test.js

@@ -0,0 +1,61 @@
+import { describe, it, expect } from 'vitest';
+import { definePlatformConfig } from '@openora/core/contracts';
+import { toIso } from '../date-to-iso-mapper.js';
+import { nodeHeadersToHeaders } from '../headers-mapper.js';
+import { assertSupportedLanguage, UnsupportedLanguageError } from '../language.js';
+describe('toIso', () => {
+    it('serialises a Date to an ISO string', () => {
+        expect(toIso(new Date('2026-07-24T10:30:00.000Z'))).toBe('2026-07-24T10:30:00.000Z');
+    });
+    it('leaves an already-serialised value alone', () => {
+        expect(toIso('2026-07-24T10:30:00.000Z')).toBe('2026-07-24T10:30:00.000Z');
+    });
+    it('normalises a non-UTC Date to UTC', () => {
+        expect(toIso(new Date(Date.UTC(2026, 0, 1, 0, 0, 0)))).toBe('2026-01-01T00:00:00.000Z');
+    });
+});
+describe('nodeHeadersToHeaders', () => {
+    it('copies a single-valued header', () => {
+        expect(nodeHeadersToHeaders({ 'x-real-ip': '203.0.113.7' }).get('x-real-ip')).toBe('203.0.113.7');
+    });
+    it('joins a repeated header into one comma-separated value', () => {
+        expect(nodeHeadersToHeaders({ 'set-cookie': ['a=1', 'b=2'] }).get('set-cookie')).toBe('a=1, b=2');
+    });
+    it('drops an undefined header instead of writing the string "undefined"', () => {
+        expect(nodeHeadersToHeaders({ 'x-real-ip': undefined }).has('x-real-ip')).toBe(false);
+    });
+    it('keeps lookups case-insensitive', () => {
+        expect(nodeHeadersToHeaders({ 'Content-Type': 'application/json' }).get('content-type')).toBe('application/json');
+    });
+    it('returns an empty Headers for an empty bag', () => {
+        expect([...nodeHeadersToHeaders({}).keys()]).toEqual([]);
+    });
+});
+describe('assertSupportedLanguage', () => {
+    const configWith = (supportedLanguages) => definePlatformConfig(supportedLanguages ? { supportedLanguages } : {});
+    it('accepts a listed language', () => {
+        expect(() => assertSupportedLanguage('uk', configWith(['en', 'uk']))).not.toThrow();
+    });
+    it('rejects an unlisted language', () => {
+        expect(() => assertSupportedLanguage('de', configWith(['en', 'uk']))).toThrow(UnsupportedLanguageError);
+    });
+    it('names the rejected language in the error', () => {
+        expect(() => assertSupportedLanguage('de', configWith(['en']))).toThrow(/de/);
+    });
+    it('accepts anything when no config is bound', () => {
+        expect(() => assertSupportedLanguage('de')).not.toThrow();
+    });
+    it('accepts anything when the operator listed no languages', () => {
+        expect(() => assertSupportedLanguage('de', configWith())).not.toThrow();
+    });
+    it('is case sensitive - the contract stores lowercase codes', () => {
+        expect(() => assertSupportedLanguage('EN', configWith(['en']))).toThrow(UnsupportedLanguageError);
+    });
+    it.each(['en_US', '!!', 'e', 'en-'])('rejects a tag Intl cannot parse (%s) even with no supported list', (tag) => {
+        expect(() => assertSupportedLanguage(tag)).toThrow(UnsupportedLanguageError);
+    });
+    it('still accepts the real tags better-auth issues (en-US)', () => {
+        expect(() => assertSupportedLanguage('en-US')).not.toThrow();
+    });
+});
+//# sourceMappingURL=shared-mappers.test.js.map

package/dist/pam/shared/__tests__/shared-mappers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-mappers.test.js","sourceRoot":"","sources":["../../../../src/pam/shared/__tests__/shared-mappers.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAEnF,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAChF,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CACnF,UAAU,CACX,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,oBAAoB,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAC3F,kBAAkB,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,CAAC,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,UAAU,GAAG,CAAC,kBAA6B,EAAE,EAAE,CACnD,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEzE,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAC3E,wBAAwB,CACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CACrE,wBAAwB,CACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAClC,kEAAkE,EAClE,CAAC,GAAG,EAAE,EAAE;QACN,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC/E,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/shared/language.d.ts

@@ -1,4 +1,6 @@
 import type { PlatformConfig } from '@openora/core/contracts';
-export declare const UnsupportedLanguageError: new (language: string) => Error;
+export declare const UnsupportedLanguageError: new (language: string) => Error & {
+    data?: Record<string, string>;
+};
 export declare function assertSupportedLanguage(language: string, platformConfig?: PlatformConfig): void;
 //# sourceMappingURL=language.d.ts.map

package/dist/pam/shared/language.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"language.d.ts","sourceRoot":"","sources":["../../../src/pam/shared/language.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,eAAO,MAAM,wBAAwB,iCAGpC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,cAAc,QASxF"}
+{"version":3,"file":"language.d.ts","sourceRoot":"","sources":["../../../src/pam/shared/language.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,eAAO,MAAM,wBAAwB;QACnC,CAAA;CAED,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,cAAc,QAexF"}

package/dist/pam/shared/language.js

@@ -1,6 +1,12 @@
 import { createDomainError } from '@openora/core/server';
 export const UnsupportedLanguageError = createDomainError('UnsupportedLanguageError', (language) => `${language} is not supported`);
 export function assertSupportedLanguage(language, platformConfig) {
+    try {
+        Intl.getCanonicalLocales(language);
+    }
+    catch {
+        throw new UnsupportedLanguageError(language);
+    }
     const supportedLanguages = platformConfig?.supportedLanguages;
     if (supportedLanguages &&
         supportedLanguages.length > 0 &&

package/dist/pam/shared/language.js.map

@@ -1 +1 @@
-{"version":3,"file":"language.js","sourceRoot":"","sources":["../../../src/pam/shared/language.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CACvD,0BAA0B,EAC1B,CAAC,QAAgB,EAAE,EAAE,CAAC,GAAG,QAAQ,mBAAmB,CACrD,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,cAA+B;IACvF,MAAM,kBAAkB,GAAG,cAAc,EAAE,kBAAkB,CAAC;IAC9D,IACE,kBAAkB;QAClB,kBAAkB,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}
+{"version":3,"file":"language.js","sourceRoot":"","sources":["../../../src/pam/shared/language.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CACvD,0BAA0B,EAC1B,CAAC,QAAgB,EAAE,EAAE,CAAC,GAAG,QAAQ,mBAAmB,CACrD,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,cAA+B;IACvF,IAAI,CAAC;QACH,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,EAAE,kBAAkB,CAAC;IAC9D,IACE,kBAAkB;QAClB,kBAAkB,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/pam/shared/otp.d.ts

@@ -0,0 +1,3 @@
+export declare function hashCode(code: string): string;
+export declare function generateCode(): string;
+//# sourceMappingURL=otp.d.ts.map

package/dist/pam/shared/otp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.d.ts","sourceRoot":"","sources":["../../../src/pam/shared/otp.ts"],"names":[],"mappings":"AAEA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAKD,wBAAgB,YAAY,IAAI,MAAM,CAErC"}

package/dist/pam/shared/otp.js

@@ -0,0 +1,11 @@
+import { createHash, randomInt } from 'node:crypto';
+export function hashCode(code) {
+    return createHash('sha256').update(code).digest('hex');
+}
+// Never logged here: the code is a login credential, and NODE_ENV is not set by the
+// consumer scaffold, so an env-guarded log leaks it on a stock deploy. MockSmsAdapter
+// already prints it for dev, which is the one place it belongs.
+export function generateCode() {
+    return randomInt(0, 1_000_000).toString().padStart(6, '0');
+}
+//# sourceMappingURL=otp.js.map

package/dist/pam/shared/otp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.js","sourceRoot":"","sources":["../../../src/pam/shared/otp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,oFAAoF;AACpF,sFAAsF;AACtF,gEAAgE;AAChE,MAAM,UAAU,YAAY;IAC1B,OAAO,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/pam/shared/player-mapper.d.ts

@@ -1,21 +1,31 @@
 import type { DrizzleService } from '@openora/core/server';
 import type { User } from '@openora/core/contracts';
 import { player } from '../profile/schema/index.js';
-export declare function toPlayer(row: typeof player.$inferSelect, email: string): {
+export declare function toPlayer(row: typeof player.$inferSelect, email: string, username: string): {
     id: string;
     userId: string;
-    displayName: string;
+    username: string;
     email: string;
+    firstName: string | null;
+    lastName: string | null;
+    dateOfBirth: string | null;
+    phone: string | null;
     country: string | null;
     currency: string;
     status: "active" | "self_excluded" | "dormant" | "suspended" | "closed";
-    kycStatus: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+    kycStatus: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
     level: number;
     totalWagered: string;
     totalDeposits: string;
     lastSeenAt: string | null;
+    timezone: string | null;
+    timezoneUpdatedAt: string | null;
     createdAt: string;
     updatedAt: string;
 };
-export declare function fetchEmailByUserId(drizzle: DrizzleService, userId: User['id']): Promise<string>;
+/** The identity columns `toPlayer` needs, or null when the user row is gone. */
+export declare function fetchIdentityByUserId(drizzle: DrizzleService, userId: User['id']): Promise<{
+    email: string;
+    username: string;
+}>;
 //# sourceMappingURL=player-mapper.d.ts.map

package/dist/pam/shared/player-mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"player-mapper.d.ts","sourceRoot":"","sources":["../../../src/pam/shared/player-mapper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGpD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM;;;;;;;;;;;;;;;EAiBtE;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GACjB,OAAO,CAAC,MAAM,CAAC,CAMjB"}
+{"version":3,"file":"player-mapper.d.ts","sourceRoot":"","sources":["../../../src/pam/shared/player-mapper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGpD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;EAyBxF;AAED,gFAAgF;AAChF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;;;GAMtF"}

package/dist/pam/shared/player-mapper.js

@@ -1,11 +1,17 @@
 import { eq } from 'drizzle-orm';
 import { user } from '../identity/schema/index.js';
-export function toPlayer(row, email) {
+export function toPlayer(row, email, username) {
     return {
         id: row.id,
         userId: row.userId,
-        displayName: row.displayName,
+        username,
         email,
+        firstName: row.firstName,
+        lastName: row.lastName,
+        // Already a 'YYYY-MM-DD' string - the column is a `date` in string mode, unlike the
+        // timestamps below.
+        dateOfBirth: row.dateOfBirth,
+        phone: row.phone,
         country: row.country,
         currency: row.currency,
         status: row.status,
@@ -14,15 +20,18 @@ export function toPlayer(row, email) {
         totalWagered: row.totalWagered,
         totalDeposits: row.totalDeposits,
         lastSeenAt: row.lastSeenAt ? row.lastSeenAt.toISOString() : null,
+        timezone: row.timezone,
+        timezoneUpdatedAt: row.timezoneUpdatedAt ? row.timezoneUpdatedAt.toISOString() : null,
         createdAt: row.createdAt.toISOString(),
         updatedAt: row.updatedAt.toISOString(),
     };
 }
-export async function fetchEmailByUserId(drizzle, userId) {
+/** The identity columns `toPlayer` needs, or null when the user row is gone. */
+export async function fetchIdentityByUserId(drizzle, userId) {
     const [record] = await drizzle.db
-        .select({ email: user.email })
+        .select({ email: user.email, username: user.username })
         .from(user)
         .where(eq(user.id, userId));
-    return record?.email ?? '';
+    return record ?? null;
 }
 //# sourceMappingURL=player-mapper.js.map

package/dist/pam/shared/player-mapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"player-mapper.js","sourceRoot":"","sources":["../../../src/pam/shared/player-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAEnD,MAAM,UAAU,QAAQ,CAAC,GAA+B,EAAE,KAAa;IACrE,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,MAAkB;IAElB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC;SACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"player-mapper.js","sourceRoot":"","sources":["../../../src/pam/shared/player-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAIjC,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAEnD,MAAM,UAAU,QAAQ,CAAC,GAA+B,EAAE,KAAa,EAAE,QAAgB;IACvF,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,oFAAoF;QACpF,oBAAoB;QACpB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAChE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QACrF,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAuB,EAAE,MAAkB;IACrF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC9B,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;SACtD,IAAI,CAAC,IAAI,CAAC;SACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC"}

package/dist/pam/tag/__tests__/get-active-tag-keys.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=get-active-tag-keys.int.test.d.ts.map

package/dist/pam/tag/__tests__/get-active-tag-keys.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-active-tag-keys.int.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/__tests__/get-active-tag-keys.int.test.ts"],"names":[],"mappings":""}

package/dist/pam/tag/__tests__/get-active-tag-keys.int.test.js

@@ -0,0 +1,77 @@
+import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { player } from '@openora/core/pam/schema/profile';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { makeEventBus } from '../../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { playerTag, tag } from '../schema/index.js';
+import { TagService } from '../service/tag.service.js';
+let db;
+let svc;
+async function tagIdFor(key) {
+    const [existing] = await db.drizzle.db.select().from(tag).where(eq(tag.key, key));
+    if (existing) {
+        return existing.id;
+    }
+    const [created] = await db.drizzle.db.insert(tag).values({ key }).returning();
+    return created.id;
+}
+async function seedPlayerWithTags(activeKeys, removedKeys = []) {
+    const userId = randomUUID();
+    const [playerRow] = await db.drizzle.db.insert(player).values({ userId }).returning();
+    for (const key of [...activeKeys, ...removedKeys]) {
+        await db.drizzle.db.insert(playerTag).values({
+            playerId: playerRow.id,
+            tagId: await tagIdFor(key),
+            assignReason: 'seed',
+            assignActor: 'manual',
+            assignActorUserId: randomUUID(),
+            removedAt: removedKeys.includes(key) ? new Date() : null,
+        });
+    }
+    return userId;
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateProfile]);
+    svc = new TagService(db.drizzle, makeEventBus());
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${playerTag}, ${tag}, ${player} RESTART IDENTITY CASCADE`);
+});
+describe('TagService.getActiveTagKeys (real PG)', () => {
+    it('groups active tag keys per user, keyed by auth userId', async () => {
+        const tagged = await seedPlayerWithTags(['high_risk', 'bonus_abuser']);
+        const vip = await seedPlayerWithTags(['vip']);
+        const untagged = randomUUID();
+        const map = await svc.getActiveTagKeys([tagged, vip, untagged]);
+        expect(map.get(tagged)?.sort()).toEqual(['bonus_abuser', 'high_risk']);
+        expect(map.get(vip)).toEqual(['vip']);
+        expect(map.has(untagged)).toBe(false);
+    });
+    it('excludes assignments that were removed', async () => {
+        const userId = await seedPlayerWithTags(['vip'], ['high_risk']);
+        const map = await svc.getActiveTagKeys([userId]);
+        expect(map.get(userId)).toEqual(['vip']);
+    });
+    it('omits a user whose every tag was removed', async () => {
+        const userId = await seedPlayerWithTags([], ['high_risk']);
+        const map = await svc.getActiveTagKeys([userId]);
+        expect(map.has(userId)).toBe(false);
+    });
+    it('ignores users outside the requested set', async () => {
+        const wanted = await seedPlayerWithTags(['vip']);
+        const other = await seedPlayerWithTags(['high_risk']);
+        const map = await svc.getActiveTagKeys([wanted]);
+        expect(map.has(other)).toBe(false);
+    });
+    it('returns an empty map for an empty input', async () => {
+        await seedPlayerWithTags(['vip']);
+        expect((await svc.getActiveTagKeys([])).size).toBe(0);
+    });
+});
+//# sourceMappingURL=get-active-tag-keys.int.test.js.map

package/dist/pam/tag/__tests__/get-active-tag-keys.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-active-tag-keys.int.test.js","sourceRoot":"","sources":["../../../../src/pam/tag/__tests__/get-active-tag-keys.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,IAAI,EAAU,CAAC;AACf,IAAI,GAAe,CAAC;AAEpB,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC9E,OAAO,OAAQ,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,UAAoB,EAAE,cAAwB,EAAE;IAChF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IACtF,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAC3C,QAAQ,EAAE,SAAU,CAAC,EAAE;YACvB,KAAK,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC;YAC1B,YAAY,EAAE,MAAM;YACpB,WAAW,EAAE,QAAQ;YACrB,iBAAiB,EAAE,UAAU,EAAE;YAC/B,SAAS,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACnD,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,SAAS,KAAK,GAAG,KAAK,MAAM,2BAA2B,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAE9B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAEhE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAEhE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAElC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/tag/__tests__/tag-evaluation.service.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tag-evaluation.service.int.test.d.ts.map

package/dist/pam/tag/__tests__/tag-evaluation.service.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-evaluation.service.int.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/__tests__/tag-evaluation.service.int.test.ts"],"names":[],"mappings":""}