@openora/core 0.4.1-canary.13 → 0.4.1-canary.131

package/dist/wallet/__tests__/wallet-currency-code.test.js

@@ -0,0 +1,48 @@
+import { randomUUID } from 'node:crypto';
+import { describe, it, expect } from 'vitest';
+import { DepositInputSchema, WalletBalanceSchema, WithdrawInputSchema, CreateWithdrawalAddressInputSchema, } from '../contract/index.js';
+describe('wallet currency codes', () => {
+    it('uppercases the currency on the way in', () => {
+        const parsed = DepositInputSchema.parse({
+            amount: '10',
+            currency: 'usdt',
+            idempotencyKey: randomUUID(),
+        });
+        expect(parsed.currency).toBe('USDT');
+    });
+    it('rejects a non-alphabetic or out-of-range code', () => {
+        expect(() => DepositInputSchema.parse({ amount: '10', currency: 'US$' })).toThrow();
+        expect(() => DepositInputSchema.parse({ amount: '10', currency: 'US' })).toThrow();
+        expect(() => WalletBalanceSchema.parse({ balance: '0', currency: '' })).toThrow();
+    });
+});
+describe('withdrawal destination address', () => {
+    const ADDRESS = '0xAbCdEf1111111111111111111111111111111111';
+    // The whitelist lookup matches the saved row by exact string equality, so both paths
+    // have to land on the same value for a pasted address with stray whitespace.
+    it('trims on the withdraw path exactly like the address book does', () => {
+        const saved = CreateWithdrawalAddressInputSchema.parse({
+            label: 'Ledger',
+            currency: 'usdt',
+            network: 'erc20',
+            address: `  ${ADDRESS}  `,
+        });
+        const payout = WithdrawInputSchema.parse({
+            amount: '10',
+            currency: 'usdt',
+            idempotencyKey: '9a2f7c11-0000-4000-8000-00000000a001',
+            destinationAddress: ` ${ADDRESS}\n`,
+        });
+        expect(payout.destinationAddress).toBe(saved.address);
+    });
+    it('keeps the case, since base58 rails are case-sensitive', () => {
+        const payout = WithdrawInputSchema.parse({
+            amount: '10',
+            currency: 'usdt',
+            idempotencyKey: '9a2f7c11-0000-4000-8000-00000000a001',
+            destinationAddress: ADDRESS,
+        });
+        expect(payout.destinationAddress).toBe(ADDRESS);
+    });
+});
+//# sourceMappingURL=wallet-currency-code.test.js.map

package/dist/wallet/__tests__/wallet-currency-code.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-currency-code.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-currency-code.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAE9B,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM;YAChB,cAAc,EAAE,UAAU,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACnF,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,MAAM,OAAO,GAAG,4CAA4C,CAAC;IAE7D,qFAAqF;IACrF,6EAA6E;IAC7E,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,kCAAkC,CAAC,KAAK,CAAC;YACrD,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,KAAK,OAAO,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC;YACvC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM;YAChB,cAAc,EAAE,sCAAsC;YACtD,kBAAkB,EAAE,IAAI,OAAO,IAAI;SACpC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC;YACvC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM;YAChB,cAAc,EAAE,sCAAsC;YACtD,kBAAkB,EAAE,OAAO;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-custody-routes.router.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-custody-routes.router.test.d.ts.map

package/dist/wallet/__tests__/wallet-custody-routes.router.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-custody-routes.router.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-custody-routes.router.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-custody-routes.router.test.js

@@ -0,0 +1,129 @@
+import { describe, it, expect, vi } from 'vitest';
+import { call, ORPCError } from '@orpc/server';
+import { queue, } from '@openora/core/contracts';
+import { mock, makeDrizzle, makeEventBus, testContext, makeAuditWriter, makeAdminGuard, makeIdentityReader, makeJobQueue, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { createWalletRouter } from '../router/index.js';
+import { WalletService } from '../service/wallet.service.js';
+const CTX = testContext();
+const CALLER_ID = '9a2f7c11-0000-4000-8000-0000000000dd';
+const RECONCILIATION_QUEUE = queue('wallet-reconciliation');
+// Neither route reads or writes a row directly - they authorize, then delegate to a
+// service or enqueue a job - so a mocked DrizzleService is enough (no real Postgres).
+// The collaborators are per-test doubles so each case can assert what it delegated.
+function routerWith(guard, overrides = {}) {
+    const paymentProviders = makePaymentProviderRegistry();
+    const service = new WalletService({
+        drizzle: makeDrizzle(),
+        events: makeEventBus(),
+        payment: mock({}),
+        paymentProviders,
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+    });
+    return createWalletRouter({
+        wallet: service,
+        adminGuard: guard,
+        audit: makeAuditWriter(),
+        paymentProviders,
+        reconciliation: overrides.reconciliation ?? mock({}),
+        jobQueue: overrides.jobQueue ?? makeJobQueue(),
+        reconciliationQueue: RECONCILIATION_QUEUE,
+        realtime: mock({}),
+    });
+}
+const authorizedGuard = () => makeAdminGuard({ caller: { userId: CALLER_ID, role: 'admin' } });
+const deniedGuard = (deny) => makeAdminGuard({ deny, caller: { userId: CALLER_ID, role: 'support' } });
+describe('wallet custody and reconciliation routes', () => {
+    describe('POST /wallet/custody/sweep/run', () => {
+        it('enqueues a sweep cycle and returns its runId for an authorized caller', async () => {
+            const enqueue = vi.fn().mockResolvedValue({ id: 'job-1' });
+            const router = routerWith(authorizedGuard(), {
+                jobQueue: mock({ enqueue }),
+            });
+            const result = await call(router.custody.sweep.run, {}, { context: CTX });
+            expect(result.runId).toMatch(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/);
+            expect(enqueue).toHaveBeenCalledTimes(1);
+            const [, payload] = enqueue.mock.calls[0];
+            expect(payload).toEqual({ runId: result.runId });
+        });
+        it('403s for a caller missing wallet-custody:run', async () => {
+            const router = routerWith(deniedGuard(['wallet-custody:run']));
+            await expect(call(router.custody.sweep.run, {}, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
+            await expect(call(router.custody.sweep.run, {}, { context: CTX })).rejects.toMatchObject({
+                code: 'FORBIDDEN',
+            });
+        });
+    });
+    describe('GET /wallet/reconciliation', () => {
+        const input = { page: 1, limit: 20 };
+        it('delegates to the reconciliation service for an authorized caller', async () => {
+            const listFindings = vi.fn(async () => ({ items: [], total: 0, page: 1, limit: 20 }));
+            const router = routerWith(authorizedGuard(), {
+                reconciliation: mock({ listFindings }),
+            });
+            const result = await call(router.reconciliation.list, input, { context: CTX });
+            expect(result).toEqual({ items: [], total: 0, page: 1, limit: 20 });
+            expect(listFindings).toHaveBeenCalledWith(input);
+        });
+        it('403s for a caller missing wallet-reconciliation:view', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:view']));
+            await expect(call(router.reconciliation.list, input, { context: CTX })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+    describe('POST /wallet/reconciliation/{id}/resolve', () => {
+        const input = {
+            id: '63d3c264-3bf4-4d08-9b92-ea3eaf40a440',
+            resolution: { outcome: 'dismissed', note: 'confirmed non-issue' },
+        };
+        const resolved = {
+            id: input.id,
+            runId: '00000000-0000-0000-0000-000000000000',
+            providerName: 'default',
+            kind: 'missing_deposit',
+            currency: 'BTC',
+            network: null,
+            amount: '1',
+            address: null,
+            tag: null,
+            txHash: null,
+            externalId: 'vendor-ext-1',
+            transactionId: null,
+            detail: null,
+            status: 'resolved',
+            resolvedBy: CALLER_ID,
+            resolvedAt: new Date().toISOString(),
+            resolutionNote: input.resolution.note,
+            createdAt: new Date().toISOString(),
+        };
+        it('delegates to the reconciliation service for an authorized caller', async () => {
+            const resolveFinding = vi.fn(async () => resolved);
+            const router = routerWith(authorizedGuard(), {
+                reconciliation: mock({ resolveFinding }),
+            });
+            const result = await call(router.reconciliation.resolve, input, { context: CTX });
+            expect(result).toEqual(resolved);
+            expect(resolveFinding).toHaveBeenCalledWith(CALLER_ID, input.id, input.resolution, expect.objectContaining({}));
+        });
+        it('403s for a caller missing wallet-reconciliation:resolve', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:resolve']));
+            await expect(call(router.reconciliation.resolve, input, { context: CTX })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        });
+    });
+    describe('POST /wallet/reconciliation/run', () => {
+        it('enqueues the job and returns a runId for an authorized caller, never running inline', async () => {
+            const jobQueue = makeJobQueue();
+            const router = routerWith(authorizedGuard(), { jobQueue });
+            const result = await call(router.reconciliation.run, {}, { context: CTX });
+            expect(result.runId).toEqual(expect.any(String));
+            expect(jobQueue.enqueue).toHaveBeenCalledTimes(1);
+            expect(jobQueue.enqueue).toHaveBeenCalledWith(RECONCILIATION_QUEUE, { runId: result.runId });
+        });
+        it('403s for a caller missing wallet-reconciliation:run', async () => {
+            const router = routerWith(deniedGuard(['wallet-reconciliation:run']));
+            await expect(call(router.reconciliation.run, {}, { context: CTX })).rejects.toMatchObject({
+                code: 'FORBIDDEN',
+            });
+        });
+    });
+});
+//# sourceMappingURL=wallet-custody-routes.router.test.js.map

package/dist/wallet/__tests__/wallet-custody-routes.router.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-custody-routes.router.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-custody-routes.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,KAAK,GAIN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,SAAS,GAAG,sCAAsC,CAAC;AACzD,MAAM,oBAAoB,GAAG,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAE5D,oFAAoF;AACpF,sFAAsF;AACtF,oFAAoF;AACpF,SAAS,UAAU,CACjB,KAAiB,EACjB,YAAoF,EAAE;IAEtF,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE;QACtB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,CAAC;QACjC,gBAAgB;QAChB,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC;QACxB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,eAAe,EAAE;QACxB,gBAAgB;QAChB,cAAc,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI,CAAwB,EAAE,CAAC;QAC3E,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,YAAY,EAAE;QAC9C,mBAAmB,EAAE,oBAAoB;QACzC,QAAQ,EAAE,IAAI,CAAoB,EAAE,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAE/F,MAAM,WAAW,GAAG,CAAC,IAAuB,EAAE,EAAE,CAC9C,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE3E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,QAAQ,EAAE,IAAI,CAAkB,EAAE,OAAO,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE1E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAC1B,gEAAgE,CACjE,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiC,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAE/D,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CACvF,SAAS,CACV,CAAC;YACF,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;gBACvF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAErC,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,cAAc,EAAE,IAAI,CAAwB,EAAE,YAAY,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE/E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;YAEvE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAC3F,EAAE,IAAI,EAAE,WAAW,EAAE,CACtB,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG;YACZ,EAAE,EAAE,sCAAsC;YAC1C,UAAU,EAAE,EAAE,OAAO,EAAE,WAAoB,EAAE,IAAI,EAAE,qBAAqB,EAAE;SAC3E,CAAC;QACF,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,sCAAsC;YAC7C,YAAY,EAAE,SAAS;YACvB,IAAI,EAAE,iBAA0B;YAChC,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,cAAc;YAC1B,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,UAAmB;YAC3B,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAChF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE;gBAC3C,cAAc,EAAE,IAAI,CAAwB,EAAE,cAAc,EAAE,CAAC;aAChE,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAElF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,SAAS,EACT,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,UAAU,EAChB,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAC5B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;YAE1E,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAC7D,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;YACnG,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAE3E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;YAEtE,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;gBACxF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-kyc-gate.int.test.d.ts.map

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-kyc-gate.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-kyc-gate.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.js

@@ -0,0 +1,104 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { findOneOrThrow } from '@openora/core/server';
+import { randomUUID } from 'node:crypto';
+import { eq, sql } from 'drizzle-orm';
+import { createTestDb } from '@openora/core/testing';
+import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
+import { mock, makeEventBus, makeIdentityReader, NO_CLIENT_META, makeAuditWriter, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletBalance, walletTransaction } from '../schema/index.js';
+import { WalletService, KycRequiredError } from '../service/wallet.service.js';
+let db;
+function makeService(kycStatus, gateWithdrawals) {
+    const directory = mock({
+        lookupPlayers: vi.fn(async (ids) => kycStatus === null
+            ? []
+            : ids.map((userId) => mock({ userId, username: 'p', kycStatus }))),
+    });
+    const svc = new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment: mock({ processWithdrawal: vi.fn() }),
+        paymentProviders: makePaymentProviderRegistry(),
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+        directory,
+        platformConfig: mock({ kyc: { gateWithdrawals } }),
+    });
+    return { svc, directory };
+}
+async function seedWallet() {
+    const row = findOneOrThrow(await db.drizzle.db
+        .insert(wallet)
+        .values({ userId: randomUUID(), currency: 'USD' })
+        .returning(), new Error('seedWallet: query returned no row'));
+    await db.drizzle.db
+        .insert(walletBalance)
+        .values({ walletId: row.id, currency: row.currency, amount: '100' });
+    return row;
+}
+async function txCount(walletId) {
+    const rows = await db.drizzle.db
+        .select()
+        .from(walletTransaction)
+        .where(eq(walletTransaction.walletId, walletId));
+    return rows.length;
+}
+beforeAll(async () => {
+    db = await createTestDb([migrate, migrateProfile]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${wallet} RESTART IDENTITY CASCADE`);
+});
+describe('WalletService.withdraw KYC gate (real PG)', () => {
+    it('throws KycRequiredError before touching the ledger when the status is not in the pass-set', async () => {
+        const { svc } = makeService('pending', true);
+        const w = await seedWallet();
+        await expect(svc.withdraw({ userId: w.userId, amount: '50', currency: 'USD', ...NO_CLIENT_META })).rejects.toBeInstanceOf(KycRequiredError);
+        expect(await txCount(w.id)).toBe(0);
+    });
+    it('fails closed when the player has no KYC summary at all', async () => {
+        const { svc } = makeService(null, true);
+        const w = await seedWallet();
+        await expect(svc.withdraw({ userId: w.userId, amount: '50', currency: 'USD', ...NO_CLIENT_META })).rejects.toBeInstanceOf(KycRequiredError);
+    });
+    it('lets a verified player through the gate', async () => {
+        const { svc } = makeService('verified', true);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+        expect(await txCount(w.id)).toBe(1);
+    });
+    it('lets a manually_overridden player through the gate', async () => {
+        const { svc } = makeService('manually_overridden', true);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+    });
+    it('never consults the directory when the gate is off', async () => {
+        const { svc, directory } = makeService('pending', false);
+        const w = await seedWallet();
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '50',
+            currency: 'USD',
+            ...NO_CLIENT_META,
+        });
+        expect(result.status).toBe('pending');
+        expect(directory.lookupPlayers).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=wallet-kyc-gate.int.test.js.map

package/dist/wallet/__tests__/wallet-kyc-gate.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-kyc-gate.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-kyc-gate.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAQtC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAE/E,IAAI,EAAU,CAAC;AAEf,SAAS,WAAW,CAAC,SAA2B,EAAE,eAAwB;IACxE,MAAM,SAAS,GAAG,IAAI,CAAqB;QACzC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAa,EAAE,EAAE,CAC3C,SAAS,KAAK,IAAI;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CACxF;KACF,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC;QAC5B,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAC7D,gBAAgB,EAAE,2BAA2B,EAAE;QAC/C,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;QACpC,SAAS;QACT,cAAc,EAAE,IAAI,CAAiB,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SACjD,SAAS,EAAE,EACd,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAC/C,CAAC;IACF,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAChB,MAAM,CAAC,aAAa,CAAC;SACrB,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE;SAC7B,MAAM,EAAE;SACR,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,iBAAiB,KAAK,MAAM,2BAA2B,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,CACV,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC,CACrF,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,CACV,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,CAAC,CACrF,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,UAAU,EAAE,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,GAAG,cAAc;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-rg-limit-gate.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-rg-limit-gate.int.test.d.ts.map

package/dist/wallet/__tests__/wallet-rg-limit-gate.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-rg-limit-gate.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-rg-limit-gate.int.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-rg-limit-gate.int.test.js

@@ -0,0 +1,93 @@
+import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { randomUUID } from 'node:crypto';
+import { sql } from 'drizzle-orm';
+import { RgLimitExceededError, } from '@openora/core/contracts';
+import { createTestDb } from '@openora/core/testing';
+import { mock, makeEventBus, makeIdentityReader, makeAuditWriter, makePaymentProviderRegistry, } from '../../testing/mock.js';
+import { migrate } from '../migrate.js';
+import { wallet, walletTransaction } from '../schema/index.js';
+import { WalletService } from '../service/wallet.service.js';
+let db;
+const REFUSED = {
+    allowed: false,
+    limitType: 'deposit',
+    period: 'daily',
+    limit: '100',
+    used: '90',
+};
+function makeService(rgLimits) {
+    const payment = mock({
+        processDeposit: vi.fn(async () => ({ externalId: `psp-${randomUUID()}`, status: 'completed' })),
+    });
+    const svc = new WalletService({
+        drizzle: db.drizzle,
+        events: makeEventBus(),
+        payment,
+        paymentProviders: makePaymentProviderRegistry(),
+        audit: makeAuditWriter(),
+        identityReader: makeIdentityReader(),
+        ...(rgLimits ? { rgLimits } : {}),
+    });
+    return { svc, payment };
+}
+const refusingGate = () => mock({
+    checkDeposit: vi.fn(async () => REFUSED),
+    checkWager: vi.fn(),
+});
+beforeAll(async () => {
+    db = await createTestDb([migrate]);
+});
+afterAll(async () => {
+    await db.drop();
+});
+beforeEach(async () => {
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${wallet} RESTART IDENTITY CASCADE`);
+});
+describe('WalletService deposit RG limit gate (real PG)', () => {
+    it('refuses a deposit over the limit BEFORE calling the PSP', async () => {
+        const { svc, payment } = makeService(refusingGate());
+        await expect(svc.deposit({ userId: randomUUID(), amount: '30', currency: 'USD' })).rejects.toBeInstanceOf(RgLimitExceededError);
+        expect(payment.processDeposit).not.toHaveBeenCalled();
+        expect(await db.drizzle.db.select().from(walletTransaction)).toHaveLength(0);
+    });
+    it('carries the whole reason as typed data so the client can translate it', async () => {
+        const { svc } = makeService(refusingGate());
+        await expect(svc.deposit({ userId: randomUUID(), amount: '30', currency: 'USD' })).rejects.toMatchObject({
+            data: { limitType: 'deposit', period: 'daily', limit: '100', used: '90' },
+        });
+    });
+    it('lets a deposit within the limit through', async () => {
+        const { svc, payment } = makeService(mock({
+            checkDeposit: vi.fn(async () => ({ allowed: true })),
+            checkWager: vi.fn(),
+        }));
+        await expect(svc.deposit({ userId: randomUUID(), amount: '30', currency: 'USD' })).resolves.toMatchObject({ status: 'completed' });
+        expect(payment.processDeposit).toHaveBeenCalled();
+    });
+    it('lets a replay of a completed deposit through even once the limit is used up', async () => {
+        const userId = randomUUID();
+        const idempotencyKey = randomUUID();
+        let used = 0;
+        const gate = mock({
+            checkWager: vi.fn(),
+            checkDeposit: vi.fn(async (_u, amount) => {
+                if (used + Number(amount) > 100) {
+                    return { ...REFUSED, used: String(used) };
+                }
+                used += Number(amount);
+                return { allowed: true };
+            }),
+        });
+        const { svc, payment } = makeService(gate);
+        const first = await svc.deposit({ userId, amount: '100', currency: 'USD', idempotencyKey });
+        const replay = await svc.deposit({ userId, amount: '100', currency: 'USD', idempotencyKey });
+        expect(replay.transactionId).toBe(first.transactionId);
+        expect(payment.processDeposit).toHaveBeenCalledTimes(1);
+        expect(gate.checkDeposit).toHaveBeenCalledTimes(1);
+    });
+    it('passes deposits through untouched when no gate is bound', async () => {
+        const { svc } = makeService();
+        await expect(svc.deposit({ userId: randomUUID(), amount: '30', currency: 'USD' })).resolves.toMatchObject({ status: 'completed' });
+    });
+});
+//# sourceMappingURL=wallet-rg-limit-gate.int.test.js.map

package/dist/wallet/__tests__/wallet-rg-limit-gate.int.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-rg-limit-gate.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-rg-limit-gate.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,oBAAoB,GAGrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,IAAI,EAAU,CAAC;AAEf,MAAM,OAAO,GAAG;IACd,OAAO,EAAE,KAAc;IACvB,SAAS,EAAE,SAAkB;IAC7B,MAAM,EAAE,OAAgB;IACxB,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,SAAS,WAAW,CAAC,QAAuB;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAiB;QACnC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;KAChG,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC;QAC5B,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO;QACP,gBAAgB,EAAE,2BAA2B,EAAE;QAC/C,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;QACpC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,CAAe;IACjB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC;IACxC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;CACpB,CAAC,CAAC;AAEL,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CACzB,GAAG,CAAA,YAAY,iBAAiB,KAAK,MAAM,2BAA2B,CACvE,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtD,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC;QAE5C,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC,OAAO,CAAC,aAAa,CAAC;YACtB,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,WAAW,CAClC,IAAI,CAAe;YACjB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;SACpB,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAe;YAC9B,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,MAAc,EAAE,EAAE;gBACvD,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;oBAChC,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,CAAC;gBACD,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;YACpC,CAAC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAE5F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QAE9B,MAAM,MAAM,CACV,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACrE,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-transaction-direction-backfill.test.d.ts.map

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-transaction-direction-backfill.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-transaction-direction-backfill.test.ts"],"names":[],"mappings":""}

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.js

@@ -0,0 +1,36 @@
+import { describe, it, expect } from 'vitest';
+import { WALLET_TRANSACTION_TYPES } from '@openora/core/contracts';
+// Mirrors the CASE mapping hand-appended to
+// drizzle/migrations/0014_abandoned_madripoor.sql. Kept in lockstep here so a future type
+// added to WALLET_TRANSACTION_TYPES fails this test instead of silently backfilling as
+// NULL (or, worse, someone guessing a direction for it).
+const BACKFILL_CREDIT_TYPES = [
+    'deposit',
+    'win',
+    'bonus',
+    'manual_credit',
+    'swap_in',
+];
+const BACKFILL_DEBIT_TYPES = [
+    'withdrawal',
+    'bet',
+    'loss',
+    'manual_debit',
+    'swap_out',
+];
+// The only types where the same value is written for both legs of a transfer (see
+// engagement/social-transfers/service/social-transfers.service.ts), so a historical row
+// has no recoverable direction and the migration deliberately leaves it NULL.
+const KNOWN_AMBIGUOUS_TYPES = ['gift', 'rain', 'tip'];
+describe('wallet_transaction direction backfill vocabulary', () => {
+    it('accounts for every WALLET_TRANSACTION_TYPES value exactly once', () => {
+        const partitioned = [
+            ...BACKFILL_CREDIT_TYPES,
+            ...BACKFILL_DEBIT_TYPES,
+            ...KNOWN_AMBIGUOUS_TYPES,
+        ];
+        expect(new Set(partitioned).size).toBe(partitioned.length);
+        expect([...partitioned].sort()).toEqual([...WALLET_TRANSACTION_TYPES].sort());
+    });
+});
+//# sourceMappingURL=wallet-transaction-direction-backfill.test.js.map

package/dist/wallet/__tests__/wallet-transaction-direction-backfill.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-transaction-direction-backfill.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-transaction-direction-backfill.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAA8B,MAAM,yBAAyB,CAAC;AAE/F,4CAA4C;AAC5C,0FAA0F;AAC1F,uFAAuF;AACvF,yDAAyD;AACzD,MAAM,qBAAqB,GAA4B;IACrD,SAAS;IACT,KAAK;IACL,OAAO;IACP,eAAe;IACf,SAAS;CACV,CAAC;AACF,MAAM,oBAAoB,GAA4B;IACpD,YAAY;IACZ,KAAK;IACL,MAAM;IACN,cAAc;IACd,UAAU;CACX,CAAC;AAEF,kFAAkF;AAClF,wFAAwF;AACxF,8EAA8E;AAC9E,MAAM,qBAAqB,GAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAE/E,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,WAAW,GAAG;YAClB,GAAG,qBAAqB;YACxB,GAAG,oBAAoB;YACvB,GAAG,qBAAqB;SACzB,CAAC;QAEF,MAAM,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet-webhook.router.int.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=wallet-webhook.router.int.test.d.ts.map

package/dist/wallet/__tests__/wallet-webhook.router.int.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-webhook.router.int.test.d.ts","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet-webhook.router.int.test.ts"],"names":[],"mappings":""}