@openora/core 0.4.1-canary.13 → 0.4.1-canary.131

package/dist/compliance/router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAwB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EACL,iBAAiB,EAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,SAAS,EAKV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,GAAG,EACH,UAAU,EACV,eAAe,EACf,EAAE,EACF,YAAY,GACb,EAAE;IACD,EAAE,EAAE,SAAS,CAAC;IACd,YAAY,EAAE,mBAAmB,CAAC;IAClC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,GAAG,EAAE,sBAAsB,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,CAAC;CACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgGA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EAIV,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,IAAI,EACL,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EACL,iBAAiB,EAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,sBAAsB,EAGvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,SAAS,EAMV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EAIrB,MAAM,uCAAuC,CAAC;AAE/C,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAE3D;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAClB,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,cAAc,CAAC,eAAe,CAAC,CAKjC;AAED,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,KAAK,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,EAAE,EACF,YAAY,EACZ,aAAa,GACd,EAAE;IACD,EAAE,EAAE,SAAS,CAAC;IACd,YAAY,EAAE,mBAAmB,CAAC;IAClC,aAAa,EAAE,oBAAoB,CAAC;IACpC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,cAAc,CAAC;IACtB,GAAG,EAAE,sBAAsB,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,CAAC;IACpC,QAAQ,EAAE,eAAe,CAAC;IAC1B,oBAAoB,EAAE,SAAS,CAAC;IAChC,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqNA"}

package/dist/compliance/router/index.js

@@ -1,22 +1,34 @@
+import { createHash } from 'node:crypto';
 import { implement, ORPCError } from '@orpc/server';
-import { getUserId, mapErrors } from '@openora/core/server';
+import { createEventStreamGenerator, getUserId, mapErrors, } from '@openora/core/server';
 import { complianceContract } from '../contract/index.js';
 import { LimitNotFoundError, LimitOwnershipError, } from '../service/compliance.service.js';
-import { ExclusionNotFoundError, ActiveExclusionError, PermanentExclusionLiftError, ExclusionPeriodNotElapsedError, } from '../service/rg.service.js';
-export function createComplianceRouter({ compliance, adminGuard, kyc, kycAdapter, webhookVerifier, rg, rgMonitoring, }) {
+import { PlayerNotFoundError, toPlayerSummaryView, } from '../service/kyc.service.js';
+import { ExclusionNotFoundError, ActiveExclusionError, PermanentExclusionLiftError, ExclusionPeriodNotElapsedError, LimitRaiseNotAllowedError, } from '../service/rg.service.js';
+import { CooldownNotElapsedError, LimitChangeExpiredError, NoPendingLimitChangeError, } from '../service/rg-self-service.service.js';
+export function kycStatusChannel(userId) {
+    return `compliance:kyc-status:${userId}`;
+}
+export function createKycStatusStream(realtime, userId, signal) {
+    return createEventStreamGenerator((push) => realtime.subscribe(kycStatusChannel(userId), push), { signal });
+}
+export function createComplianceRouter({ compliance, adminGuard, audit, kyc, kycAdapter, webhookVerifier, jobQueue, kycDecisionSyncQueue, realtime, rg, rgMonitoring, rgSelfService, }) {
     const os = implement(complianceContract).$context();
     return os.router({
-        getLimits: os.getLimits.handler(({ context }) => compliance.getLimitsForUser(getUserId(context))),
-        upsertLimit: os.upsertLimit.handler(({ input, context }) => compliance.upsertLimit(getUserId(context), input)),
-        deleteLimit: os.deleteLimit.handler(({ input, context }) => mapErrors({ NOT_FOUND: LimitNotFoundError, FORBIDDEN: LimitOwnershipError }, () => compliance.removeLimit(input.id, getUserId(context)))),
+        getLimits: os.getLimits.handler(({ context }) => rgSelfService.getLimits(getUserId(context))),
+        upsertLimit: os.upsertLimit.handler(({ input, context }) => {
+            return rgSelfService.upsertLimit(getUserId(context), input, context.clientMeta);
+        }),
+        deleteLimit: os.deleteLimit.handler(({ input, context }) => {
+            return mapErrors({ NOT_FOUND: LimitNotFoundError, FORBIDDEN: LimitOwnershipError }, () => rgSelfService.requestLimitRemoval(input.id, getUserId(context), context.clientMeta));
+        }),
         geoCheck: os.geoCheck.handler(({ context }) => {
-            const ip = context.request.headers['x-forwarded-for']?.split(',')[0]?.trim() ??
-                '127.0.0.1';
-            return compliance.geoCheck(ip);
+            const { ip } = context.clientMeta;
+            return compliance.geoCheck(ip ?? '127.0.0.1');
         }),
         addGeoRule: os.addGeoRule.handler(async ({ input, context }) => {
-            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
-            return compliance.addGeoRule(input, caller.userId);
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'override-limit');
+            return compliance.addGeoRule(input, userId, { ip, userAgent });
         }),
         listGeoRules: os.listGeoRules.handler(async ({ context }) => {
             await adminGuard.assert(context, 'compliance', 'view');
@@ -26,47 +38,118 @@ export function createComplianceRouter({ compliance, adminGuard, kyc, kycAdapter
             await adminGuard.assert(context, 'compliance', 'view');
             return kyc.getForPlayer(input.userId);
         }),
-        submitKyc: os.submitKyc.handler(({ input, context }) => kyc.submit(getUserId(context), input)),
+        getMyKyc: os.getMyKyc.handler(({ context }) => kyc.getForPlayer(getUserId(context)).then(toPlayerSummaryView)),
+        submitKyc: os.submitKyc.handler(({ input, context }) => {
+            return kyc.submit(getUserId(context), input, context.clientMeta);
+        }),
+        streamKycStatus: os.streamKycStatus.handler(({ signal, context }) => {
+            return createKycStatusStream(realtime, getUserId(context), signal);
+        }),
         // M2M provider webhook - no admin session. Verify the verbatim bytes against the
         // signature header or reject (fail closed); never fall back to an empty body.
         kycWebhook: os.kycWebhook.handler(async ({ context }) => {
             const rawBody = context.rawBody;
-            if (rawBody === undefined || !webhookVerifier.verify(rawBody, context.request.headers)) {
+            if (rawBody === undefined ||
+                !(await webhookVerifier.verify(rawBody, context.request.headers))) {
                 throw new ORPCError('UNAUTHORIZED', { message: 'Invalid KYC webhook signature' });
             }
             const decision = kycAdapter.parseWebhook?.(rawBody, context.request.headers);
             if (decision) {
-                await kyc.reconcile(decision.referenceId, decision.status);
+                // Dedup on a hash of the verbatim delivery bytes, never on referenceId:status.
+                // The vendor-neutral KycResult carries no delivery/event id, so the only
+                // signal that reliably distinguishes "the SAME decision resent" (retry storm
+                // within the vendor's own SLA - collapse it) from "a genuinely NEW decision
+                // that happens to land on a status we've seen before" (eg
+                // rejected -> approved -> rejected again - must run) is the raw body itself:
+                // a true redelivery is byte-identical: a new decision is not. Keying on
+                // referenceId:status instead would give BullMQ's permanent-by-default jobId
+                // dedup (see bullmq-job-queue.ts) a key that legitimately repeats, silently
+                // dropping the later, real decision forever.
+                const idempotencyKey = `kyc-decision-sync:${createHash('sha256').update(rawBody).digest('hex')}`;
+                // Stamped HERE, at webhook-arrival time - never in the job handler - so the
+                // reconcile monotonicity guard has the true delivery order even when the job
+                // queue (which ignores orderingKey) runs two decisions for the same reference
+                // out of order.
+                const receivedAt = new Date().toISOString();
+                await jobQueue.enqueue(kycDecisionSyncQueue, {
+                    referenceId: decision.referenceId,
+                    status: decision.status,
+                    tier: decision.tier,
+                    receivedAt,
+                }, {
+                    idempotencyKey,
+                    orderingKey: decision.referenceId,
+                    attempts: 5,
+                    backoff: { type: 'exponential', delayMs: 1_000 },
+                });
             }
             return { ok: true };
         }),
+        requestKycResubmission: os.requestKycResubmission.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            return mapErrors({ NOT_FOUND: PlayerNotFoundError }, () => kyc.requestResubmission(input.userId, input.tier, input.reason, caller.userId));
+        }),
+        overrideKycStatus: os.overrideKycStatus.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            return mapErrors({ NOT_FOUND: PlayerNotFoundError }, () => kyc.overrideStatus(input.userId, input.tier, input.status, input.reason, caller.userId));
+        }),
+        bulkApproveKyc: os.bulkApproveKyc.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            const results = await kyc.bulkApprove(input.userIds, input.tier, input.reason, caller.userId);
+            // A per-item failure never reaches overrideStatus, so it leaves no
+            // compliance.kyc.updated trail of its own - record the WHOLE attempted batch here
+            // (every userId, success/failure per item) so a probe of nonexistent ids is still
+            // visible in the audit log even when nothing downstream changed.
+            await audit.record({
+                actorId: caller.userId,
+                actorType: 'admin',
+                action: 'compliance.kyc.bulk_approve',
+                resourceType: 'compliance',
+                resourceId: null,
+                after: { tier: input.tier, reason: input.reason, results },
+            });
+            return { results };
+        }),
         setPlayerLimit: os.setPlayerLimit.handler(async ({ input, context }) => {
-            const caller = await adminGuard.assert(context, 'compliance', 'manage-rg');
-            return rg.setPlayerLimit(input.userId, input, caller.userId);
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
+            return mapErrors({ CONFLICT: LimitRaiseNotAllowedError }, () => rg.setPlayerLimit(input.userId, input, userId, 'admin', { ip, userAgent }));
         }),
         activateCoolingOff: os.activateCoolingOff.handler(async ({ input, context }) => {
-            const caller = await adminGuard.assert(context, 'compliance', 'manage-rg');
-            return mapErrors({ CONFLICT: ActiveExclusionError }, () => rg.activateCoolingOff(input.userId, input, caller.userId));
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
+            return mapErrors({ CONFLICT: ActiveExclusionError }, () => rg.activateCoolingOff(input.userId, input, userId, 'admin', { ip, userAgent }));
         }),
         activateSelfExclusion: os.activateSelfExclusion.handler(async ({ input, context }) => {
-            const caller = await adminGuard.assert(context, 'compliance', 'manage-rg');
-            return mapErrors({ CONFLICT: ActiveExclusionError }, () => rg.activateSelfExclusion(input.userId, input, caller.userId));
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
+            return mapErrors({ CONFLICT: ActiveExclusionError }, () => rg.activateSelfExclusion(input.userId, input, userId, 'admin', { ip, userAgent }));
         }),
         liftSelfExclusion: os.liftSelfExclusion.handler(async ({ input, context }) => {
-            const caller = await adminGuard.assert(context, 'compliance', 'manage-rg');
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
             return mapErrors({
                 NOT_FOUND: ExclusionNotFoundError,
                 CONFLICT: [PermanentExclusionLiftError, ExclusionPeriodNotElapsedError],
-            }, () => rg.liftSelfExclusion(input.userId, input, caller.userId));
+            }, () => rg.liftSelfExclusion(input.userId, input, userId, { ip, userAgent }));
+        }),
+        liftCoolingOff: os.liftCoolingOff.handler(async ({ input, context }) => {
+            const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
+            return mapErrors({ NOT_FOUND: ExclusionNotFoundError }, () => rg.liftCoolingOff(input.userId, input, userId, { ip, userAgent }));
         }),
         getRgSection: os.getRgSection.handler(async ({ input, context }) => {
             await adminGuard.assert(context, 'compliance', 'view');
-            return rg.getRgSection(input.userId);
+            return rgSelfService.getSection(input.userId);
         }),
         listRgFlags: os.listRgFlags.handler(async ({ input, context }) => {
             await adminGuard.assert(context, 'compliance', 'view');
             return rgMonitoring.listFlags(input);
         }),
+        getMyRgSection: os.getMyRgSection.handler(({ context }) => rgSelfService.getSection(getUserId(context))),
+        confirmPendingLimitChange: os.confirmPendingLimitChange.handler(({ input, context }) => mapErrors({
+            NOT_FOUND: [LimitNotFoundError, NoPendingLimitChangeError],
+            FORBIDDEN: LimitOwnershipError,
+            CONFLICT: [CooldownNotElapsedError, LimitChangeExpiredError],
+        }, () => rgSelfService.confirmPendingChange(input.id, getUserId(context), context.clientMeta))),
+        cancelPendingLimitChange: os.cancelPendingLimitChange.handler(({ input, context }) => mapErrors({ NOT_FOUND: LimitNotFoundError, FORBIDDEN: LimitOwnershipError }, () => rgSelfService.cancelPendingChange(input.id, getUserId(context), context.clientMeta))),
+        requestCoolingOff: os.requestCoolingOff.handler(({ input, context }) => mapErrors({ CONFLICT: ActiveExclusionError }, () => rgSelfService.requestCoolingOff(getUserId(context), input, context.clientMeta))),
+        requestSelfExclusion: os.requestSelfExclusion.handler(({ input, context }) => mapErrors({ CONFLICT: ActiveExclusionError }, () => rgSelfService.requestSelfExclusion(getUserId(context), input, context.clientMeta))),
     });
 }
 //# sourceMappingURL=index.js.map

package/dist/compliance/router/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAc,SAAS,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,MAAM,UAAU,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,GAAG,EACH,UAAU,EACV,eAAe,EACf,EAAE,EACF,YAAY,GASb;IACC,MAAM,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9C,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAChD;QAED,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACzD,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAClD;QAED,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACzD,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAChF,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CACrD,CACF;QAED,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,GACL,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAwB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBACzF,WAAW,CAAC;YACd,OAAO,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC;QAEF,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;QACnC,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAE9F,iFAAiF;QACjF,8EAA8E;QAC9E,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3E,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3E,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAC1D,CAAC;QACJ,CAAC,CAAC;QAEF,qBAAqB,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3E,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3E,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;aACxE,EACD,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAC/D,CAAC;QACJ,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAEL,0BAA0B,EAC1B,SAAS,EACT,SAAS,GAEV,MAAM,sBAAsB,CAAC;AAU9B,OAAO,EAAE,kBAAkB,EAAwB,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAEL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAEL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAEL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAE/C,MAAM,UAAU,gBAAgB,CAAC,MAAkB;IACjD,OAAO,yBAAyB,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAA2B,EAC3B,MAAkB,EAClB,MAA+B;IAE/B,OAAO,0BAA0B,CAC/B,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAkB,gBAAgB,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,EAC7E,EAAE,MAAM,EAAE,CACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,KAAK,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,EAAE,EACF,YAAY,EACZ,aAAa,GAcd;IACC,MAAM,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7F,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,aAAa,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACvF,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CACpF,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CACvD,OAAO,EACP,YAAY,EACZ,gBAAgB,CACjB,CAAC;YACF,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;QACnC,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC5C,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAC/D;QAED,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrD,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC,CAAC;QAEF,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YAClE,OAAO,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC,CAAC;QAEF,iFAAiF;QACjF,8EAA8E;QAC9E,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IACE,OAAO,KAAK,SAAS;gBACrB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EACjE,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,+EAA+E;gBAC/E,yEAAyE;gBACzE,6EAA6E;gBAC7E,4EAA4E;gBAC5E,0DAA0D;gBAC1D,6EAA6E;gBAC7E,wEAAwE;gBACxE,4EAA4E;gBAC5E,4EAA4E;gBAC5E,6CAA6C;gBAC7C,MAAM,cAAc,GAAG,qBAAqB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjG,4EAA4E;gBAC5E,6EAA6E;gBAC7E,8EAA8E;gBAC9E,gBAAgB;gBAChB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,QAAQ,CAAC,OAAO,CACpB,oBAAoB,EACpB;oBACE,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,UAAU;iBACX,EACD;oBACE,cAAc;oBACd,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;iBACjD,CACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC;QAEF,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACxD,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC/E,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACxD,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CACxF,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9F,mEAAmE;YACnE,kFAAkF;YAClF,kFAAkF;YAClF,iEAAiE;YACjE,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjB,OAAO,EAAE,MAAM,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,6BAA6B;gBACrC,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;aAC3D,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,yBAAyB,EAAE,EAAE,GAAG,EAAE,CAC7D,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC/E,CAAC;QACJ,CAAC,CAAC;QAEF,qBAAqB,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClF,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;aACxE,EACD,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,CAC3D,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;QACJ,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACxD,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAC7C;QAED,yBAAyB,EAAE,EAAE,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACrF,SAAS,CACP;YACE,SAAS,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;YAC1D,SAAS,EAAE,mBAAmB;YAC9B,QAAQ,EAAE,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;SAC7D,EACD,GAAG,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAC3F,CACF;QAED,wBAAwB,EAAE,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACnF,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CAChF,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CACpF,CACF;QAED,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CACrE,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACjD,aAAa,CAAC,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAC/E,CACF;QAED,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAC3E,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACjD,aAAa,CAAC,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAClF,CACF;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/compliance/schema/index.d.ts

@@ -1,9 +1,13 @@
-export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
+import { type KycRiskSignals } from '@openora/core/contracts';
+export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
+export declare const kycVerificationTier: import("drizzle-orm/pg-core").PgEnum<["basic", "advanced"]>;
 export declare const kycTriggeredBy: import("drizzle-orm/pg-core").PgEnum<["submission", "reverify_threshold", "manual"]>;
 export declare const rgExclusionKind: import("drizzle-orm/pg-core").PgEnum<["cooling_off", "self_exclusion"]>;
 export declare const rgExclusionStatus: import("drizzle-orm/pg-core").PgEnum<["active", "lifted", "expired"]>;
 export declare const rgFlagType: import("drizzle-orm/pg-core").PgEnum<["limit_threshold", "session_time", "self_excluded_login"]>;
 export declare const rgFlagStatus: import("drizzle-orm/pg-core").PgEnum<["active", "cleared"]>;
+export declare const limitChangeKind: import("drizzle-orm/pg-core").PgEnum<["increase", "removal"]>;
+export declare const SESSION_LIMIT_CURRENCY = "SESSION";
 export declare const userLimit: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "user_limit";
     schema: undefined;
@@ -93,6 +97,23 @@ export declare const userLimit: import("drizzle-orm/pg-core").PgTableWithColumns
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        currency: import("drizzle-orm/pg-core").PgColumn<{
+            name: "currency";
+            tableName: "user_limit";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         period: import("drizzle-orm/pg-core").PgColumn<{
             name: "period";
             tableName: "user_limit";
@@ -110,6 +131,125 @@ export declare const userLimit: import("drizzle-orm/pg-core").PgTableWithColumns
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        pendingKind: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingKind";
+            tableName: "user_limit";
+            dataType: "string";
+            columnType: "PgEnumColumn";
+            data: "increase" | "removal";
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["increase", "removal"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingAmount: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingAmount";
+            tableName: "user_limit";
+            dataType: "string";
+            columnType: "PgNumeric";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingMinutes: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingMinutes";
+            tableName: "user_limit";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingCurrency: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingCurrency";
+            tableName: "user_limit";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingRequestedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingRequestedAt";
+            tableName: "user_limit";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingEffectiveAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingEffectiveAt";
+            tableName: "user_limit";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pendingExpiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "pendingExpiresAt";
+            tableName: "user_limit";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         createdAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "createdAt";
             tableName: "user_limit";
@@ -294,19 +434,36 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        tier: import("drizzle-orm/pg-core").PgColumn<{
+            name: "tier";
+            tableName: "kyc_verification";
+            dataType: "string";
+            columnType: "PgEnumColumn";
+            data: "basic" | "advanced";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["basic", "advanced"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         status: import("drizzle-orm/pg-core").PgColumn<{
             name: "status";
             tableName: "kyc_verification";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+            data: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"];
+            enumValues: ["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -347,6 +504,50 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        riskSignals: import("drizzle-orm/pg-core").PgColumn<{
+            name: "riskSignals";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: KycRiskSignals;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: KycRiskSignals;
+        }>;
+        checks: import("drizzle-orm/pg-core").PgColumn<{
+            name: "checks";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+        }>;
         triggeredBy: import("drizzle-orm/pg-core").PgColumn<{
             name: "triggeredBy";
             tableName: "kyc_verification";
@@ -381,6 +582,23 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        decisionReceivedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "decisionReceivedAt";
+            tableName: "kyc_verification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         submittedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "submittedAt";
             tableName: "kyc_verification";
@@ -512,7 +730,7 @@ export declare const rgExclusion: import("drizzle-orm/pg-core").PgTableWithColum
             tableName: "rg_exclusion";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "active" | "lifted" | "expired";
+            data: "expired" | "active" | "lifted";
             driverParam: string;
             notNull: true;
             hasDefault: true;

package/dist/compliance/schema/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,qBAAqB,2IAAkD,CAAC;AACrF,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AAEvE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAaL,KAAK,cAAc,EAEpB,MAAM,yBAAyB,CAAC;AAIjC,eAAO,MAAM,qBAAqB,uJAAkD,CAAC;AACrF,eAAO,MAAM,mBAAmB,6DAA6C,CAAC;AAC9E,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AACvE,eAAO,MAAM,eAAe,+DAAkD,CAAC;AAI/E,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAEhD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkCrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuC3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}

package/dist/compliance/schema/index.js

@@ -1,29 +1,43 @@
 import { sql } from 'drizzle-orm';
 import { pgTable, pgEnum, uuid, text, integer, boolean, decimal, jsonb, timestamp, uniqueIndex, index, } from 'drizzle-orm/pg-core';
-import { KYC_STATUSES, EXCLUSION_KINDS, EXCLUSION_STATUSES, RG_FLAG_TYPES, RG_FLAG_STATUSES, limitTypes, limitPeriods, geoRuleActions, } from '@openora/core/contracts';
+import { KYC_STATUSES, KYC_TIERS, EXCLUSION_KINDS, EXCLUSION_STATUSES, RG_FLAG_TYPES, RG_FLAG_STATUSES, limitTypes, limitPeriods, LIMIT_CHANGE_KINDS, geoRuleActions, MONEY_SCALE, MONEY_PRECISION, } from '@openora/core/contracts';
 import { KYC_TRIGGERED_BY } from '../contract/enums.js';
 export const kycVerificationStatus = pgEnum('kyc_verification_status', KYC_STATUSES);
+export const kycVerificationTier = pgEnum('kyc_verification_tier', KYC_TIERS);
 export const kycTriggeredBy = pgEnum('kyc_triggered_by', KYC_TRIGGERED_BY);
 export const rgExclusionKind = pgEnum('rg_exclusion_kind', EXCLUSION_KINDS);
 export const rgExclusionStatus = pgEnum('rg_exclusion_status', EXCLUSION_STATUSES);
 export const rgFlagType = pgEnum('rg_flag_type', RG_FLAG_TYPES);
 export const rgFlagStatus = pgEnum('rg_flag_status', RG_FLAG_STATUSES);
+export const limitChangeKind = pgEnum('limit_change_kind', LIMIT_CHANGE_KINDS);
+// Postgres treats every NULL as distinct in a unique index, so a session-type row uses
+// this sentinel instead of NULL to stay covered by the unique index below.
+export const SESSION_LIMIT_CURRENCY = 'SESSION';
 export const userLimit = pgTable('user_limit', {
     id: uuid().primaryKey().defaultRandom(),
     userId: uuid().notNull(),
     type: text({ enum: limitTypes }).notNull(),
     // Exactly one of the two is set, discriminated by `type`: money-type limits
     // (deposit/wager/loss) carry amount; the session-type limit carries minutes.
-    amount: decimal({ precision: 18, scale: 2 }),
+    amount: decimal({ precision: MONEY_PRECISION, scale: MONEY_SCALE }),
     minutes: integer(),
+    currency: text(),
     period: text({ enum: limitPeriods }).notNull(),
+    pendingKind: limitChangeKind(),
+    pendingAmount: decimal({ precision: MONEY_PRECISION, scale: MONEY_SCALE }),
+    pendingMinutes: integer(),
+    pendingCurrency: text(),
+    pendingRequestedAt: timestamp({ withTimezone: true }),
+    pendingEffectiveAt: timestamp({ withTimezone: true }),
+    pendingExpiresAt: timestamp({ withTimezone: true }),
     createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
     updatedAt: timestamp({ withTimezone: true })
         .notNull()
         .$onUpdateFn(() => new Date()),
 }, (t) => [
-    uniqueIndex('user_limit_user_id_type_period_key').on(t.userId, t.type, t.period),
+    uniqueIndex('user_limit_user_id_type_period_currency_key').on(t.userId, t.type, t.period, t.currency),
     index('user_limit_user_id_idx').on(t.userId),
+    index('user_limit_pending_expires_at_idx').on(t.pendingExpiresAt),
 ]);
 export const geoRule = pgTable('geo_rule', {
     id: uuid().primaryKey().defaultRandom(),
@@ -37,13 +51,22 @@ export const kycVerification = pgTable('kyc_verification', {
     userId: uuid().notNull(),
     provider: text().notNull(),
     referenceId: text().notNull(),
+    tier: kycVerificationTier().notNull().default('basic'),
     status: kycVerificationStatus().notNull(),
     documentTypes: jsonb().$type().notNull().default([]),
     decisionReason: text(),
+    riskSignals: jsonb().$type(),
+    checks: jsonb().$type(),
     triggeredBy: kycTriggeredBy().notNull(),
     // High-water mark of deposits at the last reverify_threshold fire, so re-KYC triggers
     // once per fresh threshold band rather than on every deposit.
     triggerDeposits: decimal({ precision: 18, scale: 2 }),
+    // The wall-clock time THIS decision was received (webhook arrival / submit time),
+    // never job-processing time - a job/webhook retry or out-of-order worker execution
+    // must not reorder this. `reconcile` refuses to apply an incoming decision older
+    // than this watermark, closing the window where two vendor decisions (eg
+    // approved then rejected) interleave out of order and leave the wrong one applied.
+    decisionReceivedAt: timestamp({ withTimezone: true }),
     submittedAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
     decidedAt: timestamp({ withTimezone: true }),
     createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
@@ -51,8 +74,8 @@ export const kycVerification = pgTable('kyc_verification', {
         .notNull()
         .$onUpdateFn(() => new Date()),
 }, (t) => [
-    index('kyc_verification_user_id_created_at_idx').on(t.userId, t.createdAt),
-    index('kyc_verification_reference_id_idx').on(t.referenceId),
+    index('kyc_verification_user_id_tier_created_at_idx').on(t.userId, t.tier, t.createdAt),
+    uniqueIndex('kyc_verification_user_id_reference_id_tier_key').on(t.userId, t.referenceId, t.tier),
     index('kyc_verification_status_idx').on(t.status),
 ]);
 // Cooling-off + self-exclusion. The partial-unique on (userId, kind) WHERE active