@openora/core 0.4.1-canary.13 → 0.4.1-canary.131

package/dist/contracts/adapters/sms.d.ts

@@ -0,0 +1,15 @@
+/**
+ * SMS delivery seam. The phone-login OTP flow sends codes through this adapter so the
+ * transport is swappable: the platform default (bound in identity/plugin.ts) is a
+ * log-to-stdout mock, safe for dev/stage. A consumer overlay rebinds SMS_ADAPTER to a
+ * real vendor (Twilio, AWS SNS) in production. See AGENTS.md "third-party integration".
+ */
+import { type Token } from './token.js';
+export type SmsAdapter = {
+    sendOtp(params: {
+        to: string;
+        code: string;
+    }): Promise<void>;
+};
+export declare const SMS_ADAPTER: Token<SmsAdapter>;
+//# sourceMappingURL=sms.d.ts.map

package/dist/contracts/adapters/sms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/sms.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}

package/dist/contracts/adapters/sms.js

@@ -0,0 +1,9 @@
+/**
+ * SMS delivery seam. The phone-login OTP flow sends codes through this adapter so the
+ * transport is swappable: the platform default (bound in identity/plugin.ts) is a
+ * log-to-stdout mock, safe for dev/stage. A consumer overlay rebinds SMS_ADAPTER to a
+ * real vendor (Twilio, AWS SNS) in production. See AGENTS.md "third-party integration".
+ */
+import { createToken } from './token.js';
+export const SMS_ADAPTER = createToken('SMS_ADAPTER');
+//# sourceMappingURL=sms.js.map

package/dist/contracts/adapters/sms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.js","sourceRoot":"","sources":["../../../src/contracts/adapters/sms.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}

package/dist/contracts/adapters/social-commands.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Social command port: chat's blockUser() dissolves any active friendship on the
+ * caller's own tx, so the dissolve is atomic with the block. ADR-0017.
+ */
+import { type Token } from './token.js';
+import type { DomainEventPayload } from '../schemas/events.js';
+export type SocialCommands = {
+    dissolveFriendshipOnBlock(tx: unknown, blockerId: string, blockedId: string): Promise<FriendshipDissolvedPayload | null>;
+};
+export type FriendshipDissolvedPayload = DomainEventPayload<'social.friendship.removed'>;
+export declare const SOCIAL_COMMANDS: Token<SocialCommands>;
+//# sourceMappingURL=social-commands.d.ts.map

package/dist/contracts/adapters/social-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/social-commands.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG;IAC3B,yBAAyB,CACvB,EAAE,EAAE,OAAO,EACX,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;AAEzF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}

package/dist/contracts/adapters/social-commands.js

@@ -0,0 +1,7 @@
+/**
+ * Social command port: chat's blockUser() dissolves any active friendship on the
+ * caller's own tx, so the dissolve is atomic with the block. ADR-0017.
+ */
+import { createToken } from './token.js';
+export const SOCIAL_COMMANDS = createToken('SOCIAL_COMMANDS');
+//# sourceMappingURL=social-commands.js.map

package/dist/contracts/adapters/social-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/social-commands.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/contracts/adapters/swap.d.ts

@@ -0,0 +1,75 @@
+/** Bind a concrete `SwapAdapter` to `SWAP_ADAPTER` in an overlay; core never binds one. Never price a swap off the exchange-rate reader - only `SwapQuote.toAmount` is binding. */
+import { type Token } from './token.js';
+/** `processing` covers every non-terminal vendor status. */
+export type SwapStatus = 'processing' | 'completed' | 'failed';
+/**
+ * `toAmount` is what the player actually receives, net of `fee`, and is the only binding
+ * number - `rate` is never multiplied to reach it. Amounts are decimal strings. `expiresAt`
+ * and `asOf` are vendor timestamps.
+ */
+export type SwapQuote = {
+    quoteId: string;
+    fromCurrency: string;
+    toCurrency: string;
+    fromAmount: string;
+    toAmount: string;
+    rate: string;
+    fee: string;
+    /** The currency `fee` is denominated in - a vendor may charge it either side of the pair. */
+    feeCurrency: string;
+    asOf: string;
+    expiresAt: string;
+};
+/** `toAmount`/`rate` are optional: an async vendor reports them later via `parseWebhook`/`getSwapStatus`. */
+export type SwapExecution = {
+    externalId: string;
+    status: SwapStatus;
+    toAmount?: string;
+    rate?: string;
+};
+/** `toAmount` on a `completed` event is the amount actually filled; the credit must use this number, never the quoted one. */
+export type SwapWebhookEvent = {
+    kind: 'swap';
+    externalId: string;
+    status: SwapStatus;
+    toAmount?: string;
+    rate?: string;
+    failureReason?: string;
+};
+export type SwapAdapter = {
+    /** Returns `null` when the vendor will not quote the pair at all; a thrown error means the call itself failed. */
+    getQuote(input: {
+        fromCurrency: string;
+        toCurrency: string;
+        fromAmount: string;
+    }): Promise<SwapQuote | null>;
+    /**
+     * The vendor must dedupe a retry on `idempotencyKey` and return the original execution
+     * rather than trading the player's funds twice. An adapter whose vendor has expired the
+     * quote must throw rather than silently fill at a worse price.
+     */
+    execute(input: {
+        quoteId?: string;
+        fromCurrency: string;
+        toCurrency: string;
+        fromAmount: string;
+        idempotencyKey: string;
+    }): Promise<SwapExecution>;
+    /** Optional; an adapter that omits it is assumed to accept anything, and `getQuote` returning `null` is then the only signal. */
+    supportsPair?(fromCurrency: string, toCurrency: string): boolean;
+    /** Returns `null` when the body is not a swap webhook. Optional: a synchronous vendor never sends one. */
+    parseWebhook?(rawBody: string, headers: Record<string, string | string[] | undefined>): SwapWebhookEvent | null;
+    /** Returns `null` when the vendor has no record of it. */
+    getSwapStatus?(externalId: string): Promise<{
+        status: SwapStatus;
+        toAmount?: string;
+        rate?: string;
+    } | null>;
+};
+export declare const SWAP_ADAPTER: Token<SwapAdapter>;
+/** Its own token, not a reuse of `PAYMENT_WEBHOOK_VERIFIER`: the swap vendor signs with a different key. Fails closed. */
+export type SwapWebhookVerifier = {
+    verify(rawBody: string, headers: Record<string, string | string[] | undefined>): boolean | Promise<boolean>;
+};
+export declare const SWAP_WEBHOOK_VERIFIER: Token<SwapWebhookVerifier>;
+//# sourceMappingURL=swap.d.ts.map

package/dist/contracts/adapters/swap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/swap.ts"],"names":[],"mappings":"AAAA,mLAAmL;AACnL,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,4DAA4D;AAC5D,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,6FAA6F;IAC7F,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,6GAA6G;AAC7G,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,8HAA8H;AAC9H,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,kHAAkH;IAClH,QAAQ,CAAC,KAAK,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAE9B;;;;OAIG;IACH,OAAO,CAAC,KAAK,EAAE;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE3B,iIAAiI;IACjI,YAAY,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IAEjE,0GAA0G;IAC1G,YAAY,CAAC,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,gBAAgB,GAAG,IAAI,CAAC;IAE3B,0DAA0D;IAC1D,aAAa,CAAC,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAC1C,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,IAAI,CAAC,CAAC;CACX,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,WAAW,CAA+B,CAAC;AAE5E,0HAA0H;AAC1H,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,CACvB,CAAC"}

package/dist/contracts/adapters/swap.js

@@ -0,0 +1,5 @@
+/** Bind a concrete `SwapAdapter` to `SWAP_ADAPTER` in an overlay; core never binds one. Never price a swap off the exchange-rate reader - only `SwapQuote.toAmount` is binding. */
+import { createToken } from './token.js';
+export const SWAP_ADAPTER = createToken('SWAP_ADAPTER');
+export const SWAP_WEBHOOK_VERIFIER = createToken('SWAP_WEBHOOK_VERIFIER');
+//# sourceMappingURL=swap.js.map

package/dist/contracts/adapters/swap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap.js","sourceRoot":"","sources":["../../../src/contracts/adapters/swap.ts"],"names":[],"mappings":"AAAA,mLAAmL;AACnL,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAgFrD,MAAM,CAAC,MAAM,YAAY,GAAuB,WAAW,CAAC,cAAc,CAAC,CAAC;AAU5E,MAAM,CAAC,MAAM,qBAAqB,GAChC,WAAW,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/contracts/adapters/tag-evaluation-commands.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Tag-evaluation command port: wallet's withdraw() calls this synchronously, on its own
+ * transaction handle, so a withdrawal_review assignment is guaranteed to commit before
+ * maybeAutoApprove reads risk tags - closing the race an unawaited EventBus emit alone
+ * leaves open (`wallet.withdrawal.requested` is still fired for other consumers, but
+ * auto-approval's money decision must never depend on that fire-and-forget fan-out; see
+ * messaging-and-microservices "money never flows over events"). Mirrors the WALLET_COMMANDS
+ * command-port idiom (ADR-0017): `tx: unknown` so the caller's transaction handle threads
+ * through without either side importing the other's DB module.
+ */
+import { type Token } from './token.js';
+export type TagEvaluationWithdrawalRequestedArgs = {
+    userId: string;
+    amount: string;
+};
+export type TagEvaluationCommands = {
+    evaluateWithdrawalRequested(tx: unknown, args: TagEvaluationWithdrawalRequestedArgs): Promise<void>;
+};
+export declare const TAG_EVALUATION_COMMANDS: Token<TagEvaluationCommands>;
+//# sourceMappingURL=tag-evaluation-commands.d.ts.map

package/dist/contracts/adapters/tag-evaluation-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-evaluation-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/tag-evaluation-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,oCAAoC,GAAG;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,2BAA2B,CACzB,EAAE,EAAE,OAAO,EACX,IAAI,EAAE,oCAAoC,GACzC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CACzB,CAAC"}

package/dist/contracts/adapters/tag-evaluation-commands.js

@@ -0,0 +1,13 @@
+/**
+ * Tag-evaluation command port: wallet's withdraw() calls this synchronously, on its own
+ * transaction handle, so a withdrawal_review assignment is guaranteed to commit before
+ * maybeAutoApprove reads risk tags - closing the race an unawaited EventBus emit alone
+ * leaves open (`wallet.withdrawal.requested` is still fired for other consumers, but
+ * auto-approval's money decision must never depend on that fire-and-forget fan-out; see
+ * messaging-and-microservices "money never flows over events"). Mirrors the WALLET_COMMANDS
+ * command-port idiom (ADR-0017): `tx: unknown` so the caller's transaction handle threads
+ * through without either side importing the other's DB module.
+ */
+import { createToken } from './token.js';
+export const TAG_EVALUATION_COMMANDS = createToken('TAG_EVALUATION_COMMANDS');
+//# sourceMappingURL=tag-evaluation-commands.js.map

package/dist/contracts/adapters/tag-evaluation-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag-evaluation-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/tag-evaluation-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAcrD,MAAM,CAAC,MAAM,uBAAuB,GAClC,WAAW,CAAC,yBAAyB,CAAC,CAAC"}

package/dist/contracts/adapters/token.d.ts

@@ -1,10 +1,33 @@
-export type AnyToken<T> = symbol & {
+/**
+ * Typed DI token. A token is a plain Symbol at runtime; the phantom `__token`
+ * field only carries the resolved type so the composition container can infer
+ * what `container.get(TOKEN)` returns. No decorators, no reflection - the type
+ * travels with the symbol. See @openora/core/server `Container`.
+ */
+/**
+ * Common shape both Token and SealedToken share - what Container itself accepts.
+ * Container is a type-erased-at-runtime symbol map; it doesn't care whether a
+ * token is sealed, only ModuleRegistry.provide()/provideSealed() do.
+ */
+export type AnyToken<T, K extends string = string> = symbol & {
     readonly __token?: T;
+    readonly __key?: K;
 };
-export type Token<T> = AnyToken<T> & {
+export type TokenCatalogValues = Record<string, unknown>;
+export type TokenCatalog<Values extends TokenCatalogValues = TokenCatalogValues> = {
+    [K in keyof Values]: AnyToken<Values[K]>;
+};
+export type TokenValue<T> = T extends AnyToken<infer Value> ? Value : never;
+/**
+ * The `__sealed?: never` brand makes Token<T> structurally incompatible with
+ * SealedToken<T> (which has `__sealed: true`). That mismatch is what lets the
+ * `provide<T>(token: Token<T>, ...)` signature reject sealed tokens at the
+ * call site - see SealedToken below.
+ */
+export type Token<T, K extends string = string> = AnyToken<T, K> & {
     readonly __sealed?: never;
 };
-export declare function createToken<T>(description: string): Token<T>;
+export declare function createToken<T, const K extends string = string>(key: K): Token<T, K>;
 /**
  * A sealed token represents a regulator-mandated service operators must NEVER
  * override (self-exclusion enforcement, AML/SAR audit log writes, ledger writes,
@@ -22,10 +45,10 @@ export declare function createToken<T>(description: string): Token<T>;
  * See `@openora/core/compliance` for the canonical list and the regulatory
  * citation per token.
  */
-export type SealedToken<T> = AnyToken<T> & {
+export type SealedToken<T, K extends string = string> = AnyToken<T, K> & {
     readonly __sealed: true;
 };
-export declare function createSealedToken<T>(description: string): SealedToken<T>;
+export declare function createSealedToken<T, const K extends string = string>(key: K): SealedToken<T, K>;
 /**
  * A page override token lets a plugin replace an entire client-side page
  * via `ctx.provide(ADMIN_USERS_PAGE, MyImpl)`. The phantom type tracks the

package/dist/contracts/adapters/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/token.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAM5D,MAAM,MAAM,KAAK,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAEnE,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAE5D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG;IACzC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAExE;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,GAAG;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAE1F"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,MAAM,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,MAAM,GAAG;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,MAAM,YAAY,CAAC,MAAM,SAAS,kBAAkB,GAAG,kBAAkB,IAAI;KAChF,CAAC,IAAI,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,QAAQ,CAAC,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;CAC3B,CAAC;AAEF,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAEnF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;IACvE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAE/F;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,GAAG;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;CAC7B,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAE1F"}

package/dist/contracts/adapters/token.js

@@ -1,12 +1,14 @@
-// Typed DI token. A token is a plain Symbol at runtime; the phantom `__token`
-// field only carries the resolved type so the composition container can infer
-// what `container.get(TOKEN)` returns. No decorators, no reflection - the type
-// travels with the symbol. See @openora/core/server `Container`.
-export function createToken(description) {
-    return Symbol(description);
+/**
+ * Typed DI token. A token is a plain Symbol at runtime; the phantom `__token`
+ * field only carries the resolved type so the composition container can infer
+ * what `container.get(TOKEN)` returns. No decorators, no reflection - the type
+ * travels with the symbol. See @openora/core/server `Container`.
+ */
+export function createToken(key) {
+    return Symbol(key);
 }
-export function createSealedToken(description) {
-    return Symbol(`sealed:${description}`);
+export function createSealedToken(key) {
+    return Symbol(`sealed:${key}`);
 }
 export function createClientPageToken(description) {
     return Symbol(`page:${description}`);

package/dist/contracts/adapters/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/contracts/adapters/token.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,iEAAiE;AAajE,MAAM,UAAU,WAAW,CAAI,WAAmB;IAChD,OAAO,MAAM,CAAC,WAAW,CAAa,CAAC;AACzC,CAAC;AAuBD,MAAM,UAAU,iBAAiB,CAAI,WAAmB;IACtD,OAAO,MAAM,CAAC,UAAU,WAAW,EAAE,CAAmB,CAAC;AAC3D,CAAC;AAgBD,MAAM,UAAU,qBAAqB,CAAc,WAAmB;IACpE,OAAO,MAAM,CAAC,QAAQ,WAAW,EAAE,CAAuB,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/contracts/adapters/token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8BH,MAAM,UAAU,WAAW,CAAqC,GAAM;IACpE,OAAO,MAAM,CAAC,GAAG,CAAgB,CAAC;AACpC,CAAC;AAuBD,MAAM,UAAU,iBAAiB,CAAqC,GAAM;IAC1E,OAAO,MAAM,CAAC,UAAU,GAAG,EAAE,CAAsB,CAAC;AACtD,CAAC;AAgBD,MAAM,UAAU,qBAAqB,CAAc,WAAmB;IACpE,OAAO,MAAM,CAAC,QAAQ,WAAW,EAAE,CAAuB,CAAC;AAC7D,CAAC"}

package/dist/contracts/adapters/wallet-asset-catalog.d.ts

@@ -0,0 +1,34 @@
+/**
+ * One operator-configured (currency, network) pair the platform accepts deposits for or
+ * pays withdrawals out of. Rows are editable at runtime from the admin surface, so this
+ * is config rather than code: adding a currency is not a deploy.
+ */
+export type WalletAsset = {
+    currency: string;
+    network: string;
+    /**
+     * The bound payment vendor's own identifier for this asset (eg a custody vendor's
+     * `USDT_ERC20`). Opaque - the wallet module stores and returns it, never parses it,
+     * so a different vendor's identifier scheme needs no core change.
+     */
+    providerAssetId: string;
+    minDeposit: string;
+    minWithdrawal: string;
+    withdrawalFee: string;
+    depositEnabled: boolean;
+    withdrawalEnabled: boolean;
+};
+/**
+ * Read side of the asset catalog, for an adapter that needs the operator's asset table
+ * without importing wallet internals.
+ *
+ * Unlike most ports here, the wallet module binds a DB-backed default implementation to
+ * this token itself (as with `CACHE`/`RATE_LIMITER`), so an operator gets a working
+ * catalog with no wiring; rebinding it is possible but not required.
+ */
+export type WalletAssetCatalog = {
+    list(): Promise<WalletAsset[]>;
+    get(currency: string, network: string): Promise<WalletAsset | null>;
+};
+export declare const WALLET_ASSET_CATALOG: import("./token.js").Token<WalletAssetCatalog, string>;
+//# sourceMappingURL=wallet-asset-catalog.d.ts.map

package/dist/contracts/adapters/wallet-asset-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-asset-catalog.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-asset-catalog.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;CACrE,CAAC;AAEF,eAAO,MAAM,oBAAoB,wDAA0D,CAAC"}

package/dist/contracts/adapters/wallet-asset-catalog.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const WALLET_ASSET_CATALOG = createToken('WALLET_ASSET_CATALOG');
+//# sourceMappingURL=wallet-asset-catalog.js.map

package/dist/contracts/adapters/wallet-asset-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-asset-catalog.js","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-asset-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAoCzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAqB,sBAAsB,CAAC,CAAC"}

package/dist/contracts/adapters/wallet-commands.d.ts

@@ -1,13 +1,25 @@
+/**
+ * Wallet command port: another module moves money on the caller's own `tx`, so the move is
+ * atomic with the caller's writes yet the modules stay decoupled and independently extractable. ADR-0017.
+ */
 import type { WalletTransactionType } from '../schemas/wallet-tx.js';
 import { type Token } from './token.js';
 export type WalletDebitArgs = {
     userId: string;
     amount: string;
     type: WalletTransactionType;
+    /** Which of the player's balances to take from. Omit it and the debit falls on the player's active currency (`wallet.currency`). */
+    currency?: string;
 };
 export type WalletDebitOutcome = {
     ok: true;
     newBalance: string;
+    currency: string;
+    completedBonusCredits?: Array<{
+        id: string;
+        currency: string;
+        creditedAmount: string;
+    }>;
 } | {
     ok: false;
     available: string;
@@ -15,7 +27,12 @@ export type WalletDebitOutcome = {
 export type WalletCreditArgs = {
     userId: string;
     amount: string;
+    currency: string;
     type: WalletTransactionType;
+    /** Allow crediting a currency the player does not hold a balance in yet, creating the `wallet_balance` row. Off by default. */
+    allowNewCurrency?: boolean;
+    /** Allow crediting a player who has no `wallet` row at all yet, creating it in the caller's transaction. Off by default. */
+    allowNewWallet?: boolean;
 };
 export type WalletCreditOutcome = {
     ok: true;

package/dist/contracts/adapters/wallet-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-commands.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,qBAAqB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,qBAAqB,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}
+{"version":3,"file":"wallet-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-commands.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,qBAAqB,CAAC;IAC5B,oIAAoI;IACpI,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzF,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,qBAAqB,CAAC;IAC5B,+HAA+H;IAC/H,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4HAA4H;IAC5H,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}

package/dist/contracts/adapters/wallet-commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAyBrD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"wallet-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAqCrD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/contracts/adapters/wallet-reader.d.ts

@@ -1,8 +1,28 @@
+/** One player balance row, as returned by `WalletReader.getBalances`. */
+export type WalletBalanceReading = {
+    currency: string;
+    balance: string;
+};
+/** Full per-currency balance snapshot for a player, as returned by `WalletReader.getBalances`. */
+export type WalletBalancesReading = {
+    activeCurrency: string;
+    balances: WalletBalanceReading[];
+};
 export type WalletReader = {
     /** Sum of all completed deposits for a player, as a decimal string (same as wallet_transaction.amount). Used for high_roller evaluation. */
     getLifetimeDeposit(userId: string): Promise<string>;
+    /** Always answers: a player with no wallet row yet gets an empty `balances` array and the platform's default wallet currency, never a throw. */
+    getBalances(userId: string): Promise<WalletBalancesReading>;
     /** Count of completed withdrawals for a player within the last windowDays days. Used for high_risk evaluation. */
     getWithdrawalCountInWindow(userId: string, windowDays: number): Promise<number>;
+    /**
+     * Completed-withdrawal counts within the last windowDays days for a batch of players,
+     * keyed by userId (absent key = 0). Used for the high_risk daily resweep. Optional so an
+     * external/consumer WalletReader implementation that predates this batched method still
+     * satisfies the port - a caller without it falls back to looping the singular
+     * getWithdrawalCountInWindow (see TagEvaluationService's high_risk resweep).
+     */
+    getWithdrawalCountsInWindow?(userIds: string[], windowDays: number): Promise<Map<string, number>>;
 };
-export declare const WALLET_READER: import("./token.js").Token<WalletReader>;
+export declare const WALLET_READER: import("./token.js").Token<WalletReader, string>;
 //# sourceMappingURL=wallet-reader.d.ts.map

package/dist/contracts/adapters/wallet-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-reader.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,YAAY,GAAG;IACzB,4IAA4I;IAC5I,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,kHAAkH;IAClH,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACjF,CAAC;AAEF,eAAO,MAAM,aAAa,0CAA6C,CAAC"}
+{"version":3,"file":"wallet-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-reader.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,kGAAkG;AAClG,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,4IAA4I;IAC5I,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,gJAAgJ;IAChJ,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5D,kHAAkH;IAClH,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF;;;;;;OAMG;IACH,2BAA2B,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnG,CAAC;AAEF,eAAO,MAAM,aAAa,kDAA6C,CAAC"}

package/dist/contracts/adapters/wallet-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AASzC,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAe,eAAe,CAAC,CAAC"}
+{"version":3,"file":"wallet-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/wallet-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA+BzC,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAe,eAAe,CAAC,CAAC"}

package/dist/contracts/kit.d.ts

@@ -4,6 +4,21 @@ export declare const PageQuerySchema: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
 }, z.core.$strip>;
 export type PageQuery = z.infer<typeof PageQuerySchema>;
+export declare const SortOrderSchema: z.ZodEnum<{
+    asc: "asc";
+    desc: "desc";
+}>;
+export type SortOrder = z.infer<typeof SortOrderSchema>;
+export type PaginationOptions<TFilter extends object = object, TSortBy extends string = string> = PageQuery & TFilter & {
+    sortBy?: TSortBy;
+    sortOrder?: SortOrder;
+};
+export type Paginated<T> = {
+    items: T[];
+    total: number;
+    page: number;
+    limit: number;
+};
 export declare const paginated: <T extends z.ZodType>(item: T) => z.ZodObject<{
     items: z.ZodArray<T>;
     total: z.ZodNumber;

package/dist/contracts/kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kit.d.ts","sourceRoot":"","sources":["../../src/contracts/kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,SAAS,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;iBAMlD,CAAC"}
+{"version":3,"file":"kit.d.ts","sourceRoot":"","sources":["../../src/contracts/kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,eAAe;;;iBAG1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;EAA0B,CAAC;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,MAAM,MAAM,iBAAiB,CAC3B,OAAO,SAAS,MAAM,GAAG,MAAM,EAC/B,OAAO,SAAS,MAAM,GAAG,MAAM,IAC7B,SAAS,GACX,OAAO,GAAG;IACR,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEJ,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtF,eAAO,MAAM,SAAS,GAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC;;;;;iBAMlD,CAAC"}

package/dist/contracts/kit.js

@@ -3,6 +3,7 @@ export const PageQuerySchema = z.object({
     page: z.coerce.number().int().min(1).default(1),
     limit: z.coerce.number().int().min(1).max(100).default(100),
 });
+export const SortOrderSchema = z.enum(['asc', 'desc']);
 export const paginated = (item) => z.object({
     items: z.array(item),
     total: z.number().int(),

package/dist/contracts/kit.js.map

@@ -1 +1 @@
-{"version":3,"file":"kit.js","sourceRoot":"","sources":["../../src/contracts/kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAsB,IAAO,EAAE,EAAE,CACxD,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACxB,CAAC,CAAC"}
+{"version":3,"file":"kit.js","sourceRoot":"","sources":["../../src/contracts/kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAcvD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAsB,IAAO,EAAE,EAAE,CACxD,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACxB,CAAC,CAAC"}

package/dist/contracts/schemas/__tests__/common-schemas.test.js

@@ -1,17 +1,46 @@
 import { describe, it, expect } from 'vitest';
-import { MoneyAmountSchema } from '../common.js';
+import { MoneyAmountSchema, TimezoneSchema, resolveTimezone } from '../common.js';
 describe('MoneyAmountSchema', () => {
+    it('round-trips a 1-wei ETH amount (18-decimal precision)', () => {
+        expect(MoneyAmountSchema.parse('0.000000000000000001')).toBe('0.000000000000000001');
+        expect(MoneyAmountSchema.parse('21000000.123456789012345678')).toBe('21000000.123456789012345678');
+    });
     it('round-trips an 8-decimal-place crypto amount (BTC-level precision)', () => {
         expect(MoneyAmountSchema.parse('0.00000001')).toBe('0.00000001');
-        expect(MoneyAmountSchema.parse('21000000.12345678')).toBe('21000000.12345678');
     });
     it('still accepts a plain 2-decimal fiat amount', () => {
         expect(MoneyAmountSchema.parse('19.99')).toBe('19.99');
         expect(MoneyAmountSchema.parse('0')).toBe('0');
     });
-    it('rejects more than 8 decimal places and a negative amount', () => {
-        expect(MoneyAmountSchema.safeParse('0.123456789').success).toBe(false);
+    it('rejects amounts outside numeric(38, 18)', () => {
+        expect(MoneyAmountSchema.safeParse('0.0000000000000000001').success).toBe(false);
+        expect(MoneyAmountSchema.safeParse('100000000000000000000').success).toBe(false);
         expect(MoneyAmountSchema.safeParse('-1').success).toBe(false);
     });
 });
+describe('resolveTimezone', () => {
+    it('canonicalises the aliases and casings different browsers report', () => {
+        expect(resolveTimezone('europe/warsaw')).toBe('Europe/Warsaw');
+        expect(resolveTimezone('US/Pacific')).toBe('America/Los_Angeles');
+    });
+    it('rejects a value the tz database does not recognise rather than passing it through', () => {
+        expect(resolveTimezone('Mars/Phobos')).toBeNull();
+        expect(resolveTimezone('')).toBeNull();
+        expect(resolveTimezone('Europe/Warsaw ')).toBeNull();
+        expect(resolveTimezone("'; DROP TABLE player;--")).toBeNull();
+    });
+    it('rejects a bare UTC offset, which Intl accepts but which is not a zone', () => {
+        expect(resolveTimezone('+05:00')).toBeNull();
+        expect(resolveTimezone('-08:00')).toBeNull();
+    });
+});
+describe('TimezoneSchema', () => {
+    it('accepts an empty string, leaving the drop to resolveTimezone', () => {
+        expect(TimezoneSchema.safeParse('').success).toBe(true);
+    });
+    it('accepts arbitrary client text, leaving the drop to resolveTimezone', () => {
+        expect(TimezoneSchema.safeParse('x'.repeat(65)).success).toBe(true);
+        expect(resolveTimezone('x'.repeat(65))).toBeNull();
+    });
+});
 //# sourceMappingURL=common-schemas.test.js.map

package/dist/contracts/schemas/__tests__/common-schemas.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"common-schemas.test.js","sourceRoot":"","sources":["../../../../src/contracts/schemas/__tests__/common-schemas.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"common-schemas.test.js","sourceRoot":"","sources":["../../../../src/contracts/schemas/__tests__/common-schemas.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAElF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACrF,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CACjE,6BAA6B,CAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,CAAC,eAAe,CAAC,yBAAyB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/contracts/schemas/__tests__/events.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=events.test.d.ts.map

package/dist/contracts/schemas/__tests__/events.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.test.d.ts","sourceRoot":"","sources":["../../../../src/contracts/schemas/__tests__/events.test.ts"],"names":[],"mappings":""}