@openora/core 0.4.1-canary.14 → 0.4.1-canary.141

package/dist/contracts/schemas/mail.js

@@ -0,0 +1,80 @@
+import * as z from 'zod';
+import { MoneyAmountSchema, TimestampSchema, UuidSchema } from './common.js';
+import { CurrencyCodeSchema } from './igaming-config.js';
+export const MAIL_TEMPLATE_KEYS = [
+    'verifyEmail',
+    'twoFactorOtp',
+    'resetPasswordOtp',
+    'adminResetPasswordOtp',
+    'existingAccountSignUp',
+    'rgLimitUpdated',
+    'rgCoolingOffActivated',
+    'rgCoolingOffLifted',
+    'rgSelfExclusionActivated',
+    'rgSelfExclusionLifted',
+    'depositCompleted',
+    'withdrawalApproved',
+    'withdrawalRejected',
+    'kycResubmissionRequested',
+    'adminInvitation',
+    'securityLoginAlert',
+    'securityWithdrawalRequested',
+];
+const WithdrawalDetailsShape = {
+    amount: MoneyAmountSchema,
+    currency: CurrencyCodeSchema,
+    transactionId: UuidSchema,
+    occurredAt: TimestampSchema,
+};
+export const EmailTemplateDataSchemas = {
+    verifyEmail: z.object({ otp: z.string() }),
+    twoFactorOtp: z.object({ otp: z.string() }),
+    resetPasswordOtp: z.object({ otp: z.string(), email: z.email() }),
+    adminResetPasswordOtp: z.object({ otp: z.string(), email: z.email() }),
+    existingAccountSignUp: z.object({ otp: z.string(), email: z.email() }),
+    rgLimitUpdated: z.object({
+        period: z.string(),
+        type: z.string(),
+        amount: MoneyAmountSchema.nullable(),
+        currency: CurrencyCodeSchema.nullable(),
+        minutes: z.number().int().nullable(),
+    }),
+    rgCoolingOffActivated: z.object({ expiresAt: TimestampSchema }),
+    rgCoolingOffLifted: z.object({}),
+    rgSelfExclusionActivated: z.object({
+        expiresAt: TimestampSchema.nullable(),
+        isPermanent: z.boolean(),
+    }),
+    rgSelfExclusionLifted: z.object({}),
+    depositCompleted: z.object({ ...WithdrawalDetailsShape }),
+    withdrawalApproved: z.object({ ...WithdrawalDetailsShape }),
+    withdrawalRejected: z.object({
+        ...WithdrawalDetailsShape,
+        reason: z.string().nullable(),
+    }),
+    kycResubmissionRequested: z.object({ reason: z.string().nullable() }),
+    adminInvitation: z.object({ token: z.string(), expiresAt: TimestampSchema }),
+    securityLoginAlert: z.object({ occurredAt: TimestampSchema }),
+    securityWithdrawalRequested: z.object({ ...WithdrawalDetailsShape }),
+};
+const templateVariant = (key) => z.object({ key: z.literal(key), data: EmailTemplateDataSchemas[key] });
+export const MailTemplateSchema = z.discriminatedUnion('key', [
+    templateVariant('verifyEmail'),
+    templateVariant('twoFactorOtp'),
+    templateVariant('resetPasswordOtp'),
+    templateVariant('adminResetPasswordOtp'),
+    templateVariant('existingAccountSignUp'),
+    templateVariant('rgLimitUpdated'),
+    templateVariant('rgCoolingOffActivated'),
+    templateVariant('rgCoolingOffLifted'),
+    templateVariant('rgSelfExclusionActivated'),
+    templateVariant('rgSelfExclusionLifted'),
+    templateVariant('depositCompleted'),
+    templateVariant('withdrawalApproved'),
+    templateVariant('withdrawalRejected'),
+    templateVariant('kycResubmissionRequested'),
+    templateVariant('adminInvitation'),
+    templateVariant('securityLoginAlert'),
+    templateVariant('securityWithdrawalRequested'),
+]);
+//# sourceMappingURL=mail.js.map

package/dist/contracts/schemas/mail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mail.js","sourceRoot":"","sources":["../../../src/contracts/schemas/mail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,uBAAuB;IACvB,uBAAuB;IACvB,gBAAgB;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,0BAA0B;IAC1B,uBAAuB;IACvB,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,0BAA0B;IAC1B,iBAAiB;IACjB,oBAAoB;IACpB,6BAA6B;CACrB,CAAC;AAIX,MAAM,sBAAsB,GAAG;IAC7B,MAAM,EAAE,iBAAiB;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,aAAa,EAAE,UAAU;IACzB,UAAU,EAAE,eAAe;CACnB,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACjE,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACtE,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACtE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACpC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;IACF,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAC/D,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAChC,wBAAwB,EAAE,CAAC,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;QACrC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;KACzB,CAAC;IACF,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACzD,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAC3D,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3B,GAAG,sBAAsB;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;IACF,wBAAwB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACrE,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAC5E,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;IAC7D,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,sBAAsB,EAAE,CAAC;CACd,CAAC;AAMzD,MAAM,eAAe,GAAG,CAA6B,GAAM,EAAE,EAAE,CAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE;IAC5D,eAAe,CAAC,aAAa,CAAC;IAC9B,eAAe,CAAC,cAAc,CAAC;IAC/B,eAAe,CAAC,kBAAkB,CAAC;IACnC,eAAe,CAAC,uBAAuB,CAAC;IACxC,eAAe,CAAC,uBAAuB,CAAC;IACxC,eAAe,CAAC,gBAAgB,CAAC;IACjC,eAAe,CAAC,uBAAuB,CAAC;IACxC,eAAe,CAAC,oBAAoB,CAAC;IACrC,eAAe,CAAC,0BAA0B,CAAC;IAC3C,eAAe,CAAC,uBAAuB,CAAC;IACxC,eAAe,CAAC,kBAAkB,CAAC;IACnC,eAAe,CAAC,oBAAoB,CAAC;IACrC,eAAe,CAAC,oBAAoB,CAAC;IACrC,eAAe,CAAC,0BAA0B,CAAC;IAC3C,eAAe,CAAC,iBAAiB,CAAC;IAClC,eAAe,CAAC,oBAAoB,CAAC;IACrC,eAAe,CAAC,6BAA6B,CAAC;CAC/C,CAAC,CAAC"}

package/dist/contracts/schemas/platform-config.d.ts

@@ -27,24 +27,91 @@ export declare const KycConfigSchema: z.ZodObject<{
 }, z.core.$strict>;
 export declare const AutoWithdrawalConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
-    fiatThreshold: z.ZodOptional<z.ZodString>;
-    cryptoThreshold: z.ZodOptional<z.ZodString>;
-    excludeRiskFlags: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-        high_roller: "high_roller";
-        vip: "vip";
-        bonus_abuser: "bonus_abuser";
-        high_risk: "high_risk";
-        inactive: "inactive";
-        large_depositor: "large_depositor";
-        self_excluded: "self_excluded";
-        kyc_pending: "kyc_pending";
-        kyc_rejected: "kyc_rejected";
-        test_account: "test_account";
-    }>>>;
     dailyCapAmount: z.ZodOptional<z.ZodString>;
     dailyCapCount: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
 export type AutoWithdrawalConfig = z.infer<typeof AutoWithdrawalConfigSchema>;
+export declare const WalletConfigSchema: z.ZodObject<{
+    cryptoCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    treasuryRefs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    sweep: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+        feeMultiple: z.ZodDefault<z.ZodString>;
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        concurrency: z.ZodDefault<z.ZodNumber>;
+        unknownAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+    reconciliation: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+        lookbackHours: z.ZodDefault<z.ZodNumber>;
+        batchSize: z.ZodDefault<z.ZodNumber>;
+        stuckAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        alertThreshold: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WalletConfig = z.infer<typeof WalletConfigSchema>;
+export declare const ExchangeRateConfigSchema: z.ZodObject<{
+    pivot: z.ZodDefault<z.ZodString>;
+    freshTtlMs: z.ZodDefault<z.ZodNumber>;
+    hardMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+    providerTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type ExchangeRateConfig = z.infer<typeof ExchangeRateConfigSchema>;
+export declare const NotificationsConfigSchema: z.ZodObject<{
+    retention: z.ZodOptional<z.ZodObject<{
+        days: z.ZodDefault<z.ZodNumber>;
+        cron: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type NotificationsConfig = z.infer<typeof NotificationsConfigSchema>;
+export declare const RegistrationConfigSchema: z.ZodObject<{
+    termsVersion: z.ZodString;
+    requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Structural check on a cron expression: 5 fields, or 6 with a leading seconds field.
+ * Not a full parse - the driver owns that - but it turns the typo class that would
+ * otherwise surface as one `logger.error` at boot and a job that never ticks into a
+ * config-validation failure.
+ */
+export declare const CronExpressionSchema: z.ZodString;
+/**
+ * Offset off the :00/:15/:30/:45 tick the wallet custody sweep owns, so the in-process
+ * driver never runs the moderation-expiry sweep alongside a money path. Cadence sets
+ * audit-trail latency only - a lapsed mute stops being enforced at its own `expiresAt`
+ * with or without the job, and the entry is dated from the row, so a late run still
+ * records the right instant.
+ */
+export declare const CHAT_MODERATION_EXPIRY_DEFAULT_CRON = "7,22,37,52 * * * *";
+export declare const HostAllowlistEntrySchema: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+export declare const ChatConfigSchema: z.ZodObject<{
+    allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    moderationExpiry: z.ZodOptional<z.ZodObject<{
+        cron: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ChatConfig = z.infer<typeof ChatConfigSchema>;
+export declare const AdminSecurityConfigSchema: z.ZodObject<{
+    requireTwoFactor: z.ZodDefault<z.ZodBoolean>;
+    bindSessionToDevice: z.ZodDefault<z.ZodBoolean>;
+    trustedDeviceDays: z.ZodDefault<z.ZodNumber>;
+    ipChangePolicy: z.ZodDefault<z.ZodEnum<{
+        any: "any";
+        country: "country";
+        off: "off";
+    }>>;
+    twoFactorLockout: z.ZodPrefault<z.ZodObject<{
+        maxAttempts: z.ZodDefault<z.ZodNumber>;
+        durationMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type AdminSecurityConfig = z.infer<typeof AdminSecurityConfigSchema>;
+export declare const CmsConfigSchema: z.ZodObject<{
+    allowedBannerImageHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+}, z.core.$strict>;
+export type CmsConfig = z.infer<typeof CmsConfigSchema>;
 export declare const PlatformConfigSchema: z.ZodObject<{
     features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
     brands: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -61,6 +128,10 @@ export declare const PlatformConfigSchema: z.ZodObject<{
         maxStakePerBet: z.ZodOptional<z.ZodNumber>;
         sessionReminderMinutes: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
+    responsibleGambling: z.ZodDefault<z.ZodObject<{
+        limitIncreaseCooldownHours: z.ZodDefault<z.ZodNumber>;
+        limitChangeConfirmationWindowHours: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
     kyc: z.ZodOptional<z.ZodObject<{
         provider: z.ZodOptional<z.ZodString>;
         webhookSecretEnv: z.ZodOptional<z.ZodString>;
@@ -69,24 +140,70 @@ export declare const PlatformConfigSchema: z.ZodObject<{
     }, z.core.$strict>>;
     autoWithdrawal: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
-        fiatThreshold: z.ZodOptional<z.ZodString>;
-        cryptoThreshold: z.ZodOptional<z.ZodString>;
-        excludeRiskFlags: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-            high_roller: "high_roller";
-            vip: "vip";
-            bonus_abuser: "bonus_abuser";
-            high_risk: "high_risk";
-            inactive: "inactive";
-            large_depositor: "large_depositor";
-            self_excluded: "self_excluded";
-            kyc_pending: "kyc_pending";
-            kyc_rejected: "kyc_rejected";
-            test_account: "test_account";
-        }>>>;
         dailyCapAmount: z.ZodOptional<z.ZodString>;
         dailyCapCount: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;
+    wallet: z.ZodOptional<z.ZodObject<{
+        cryptoCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        treasuryRefs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        sweep: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+            feeMultiple: z.ZodDefault<z.ZodString>;
+            batchSize: z.ZodDefault<z.ZodNumber>;
+            concurrency: z.ZodDefault<z.ZodNumber>;
+            unknownAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+        reconciliation: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+            lookbackHours: z.ZodDefault<z.ZodNumber>;
+            batchSize: z.ZodDefault<z.ZodNumber>;
+            stuckAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            staleRunAfterMinutes: z.ZodDefault<z.ZodNumber>;
+            alertThreshold: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    exchangeRate: z.ZodOptional<z.ZodObject<{
+        pivot: z.ZodDefault<z.ZodString>;
+        freshTtlMs: z.ZodDefault<z.ZodNumber>;
+        hardMaxAgeMs: z.ZodDefault<z.ZodNumber>;
+        providerTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>>;
+    registration: z.ZodOptional<z.ZodObject<{
+        termsVersion: z.ZodString;
+        requireEmailVerification: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    notifications: z.ZodOptional<z.ZodObject<{
+        retention: z.ZodOptional<z.ZodObject<{
+            days: z.ZodDefault<z.ZodNumber>;
+            cron: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     supportedLanguages: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    displayCurrencies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    chat: z.ZodDefault<z.ZodObject<{
+        allowedAttachmentHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+        moderationExpiry: z.ZodOptional<z.ZodObject<{
+            cron: z.ZodDefault<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    adminSecurity: z.ZodPrefault<z.ZodObject<{
+        requireTwoFactor: z.ZodDefault<z.ZodBoolean>;
+        bindSessionToDevice: z.ZodDefault<z.ZodBoolean>;
+        trustedDeviceDays: z.ZodDefault<z.ZodNumber>;
+        ipChangePolicy: z.ZodDefault<z.ZodEnum<{
+            any: "any";
+            country: "country";
+            off: "off";
+        }>>;
+        twoFactorLockout: z.ZodPrefault<z.ZodObject<{
+            maxAttempts: z.ZodDefault<z.ZodNumber>;
+            durationMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    cms: z.ZodDefault<z.ZodObject<{
+        allowedBannerImageHosts: z.ZodDefault<z.ZodArray<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type PlatformConfig = z.infer<typeof PlatformConfigSchema>;
 export type PlatformConfigInput = z.input<typeof PlatformConfigSchema>;
@@ -113,6 +230,29 @@ export declare const PLATFORM_CONFIG: import("../adapters/token.js").Token<{
         maxStakePerBet?: number | undefined;
         sessionReminderMinutes?: number | undefined;
     }>;
+    responsibleGambling: {
+        limitIncreaseCooldownHours: number;
+        limitChangeConfirmationWindowHours: number;
+    };
+    chat: {
+        allowedAttachmentHosts: string[];
+        moderationExpiry?: {
+            cron: string;
+        } | undefined;
+    };
+    adminSecurity: {
+        requireTwoFactor: boolean;
+        bindSessionToDevice: boolean;
+        trustedDeviceDays: number;
+        ipChangePolicy: "any" | "country" | "off";
+        twoFactorLockout: {
+            maxAttempts: number;
+            durationMs: number;
+        };
+    };
+    cms: {
+        allowedBannerImageHosts: string[];
+    };
     activeBrand?: string | undefined;
     kyc?: {
         gateWithdrawals: boolean;
@@ -122,12 +262,46 @@ export declare const PLATFORM_CONFIG: import("../adapters/token.js").Token<{
     } | undefined;
     autoWithdrawal?: {
         enabled: boolean;
-        excludeRiskFlags: ("high_roller" | "vip" | "bonus_abuser" | "high_risk" | "inactive" | "large_depositor" | "self_excluded" | "kyc_pending" | "kyc_rejected" | "test_account")[];
-        fiatThreshold?: string | undefined;
-        cryptoThreshold?: string | undefined;
         dailyCapAmount?: string | undefined;
         dailyCapCount?: number | undefined;
     } | undefined;
+    wallet?: {
+        cryptoCurrencies?: string[] | undefined;
+        treasuryRefs?: Record<string, string> | undefined;
+        sweep?: {
+            cron: string;
+            feeMultiple: string;
+            batchSize: number;
+            concurrency: number;
+            unknownAfterMinutes: number;
+            staleRunAfterMinutes: number;
+        } | undefined;
+        reconciliation?: {
+            cron: string;
+            lookbackHours: number;
+            batchSize: number;
+            stuckAfterMinutes: number;
+            staleRunAfterMinutes: number;
+            alertThreshold: number;
+        } | undefined;
+    } | undefined;
+    exchangeRate?: {
+        pivot: string;
+        freshTtlMs: number;
+        hardMaxAgeMs: number;
+        providerTimeoutMs: number;
+    } | undefined;
+    registration?: {
+        termsVersion: string;
+        requireEmailVerification: boolean;
+    } | undefined;
+    notifications?: {
+        retention?: {
+            days: number;
+            cron: string;
+        } | undefined;
+    } | undefined;
     supportedLanguages?: string[] | undefined;
-}>;
+    displayCurrencies?: string[] | undefined;
+}, string>;
 //# sourceMappingURL=platform-config.d.ts.map

package/dist/contracts/schemas/platform-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;kBAa5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA8C7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAiD,CAAC"}
+{"version":3,"file":"platform-config.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/platform-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,kBAAkB,wCAAoC,CAAC;AAEpE,eAAO,MAAM,WAAW;;;;;kBAUb,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;kBAcjB,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;kBAQ5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;kBAkEpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;kBAY1B,CAAC;AAEZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,yBAAyB;;;;;kBAc3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,wBAAwB;;;kBAU1B,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,aAK9B,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,mCAAmC,uBAAuB,CAAC;AAExE,eAAO,MAAM,wBAAwB,wDAuBa,CAAC;AAEnD,eAAO,MAAM,gBAAgB;;;;;kBAiBlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;kBAwC3B,CAAC;AAEZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,eAAe;;kBAKjB,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA+D7B,CAAC;AAEL,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEvE;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,cAAc,CAShF;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,EAAE,cAAyC,CAAC;AAE9E,+EAA+E;AAC/E,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAAiD,CAAC"}

package/dist/contracts/schemas/platform-config.js

@@ -1,6 +1,5 @@
 import { z } from 'zod';
-import { LimitsSchema } from './igaming-config.js';
-import { TagKeySchema } from './tag.js';
+import { LimitsSchema, CurrencyCodeSchema, ResponsibleGamingSchema, defaultResponsibleGamingConfig, } from './igaming-config.js';
 import { MoneyAmountSchema } from './common.js';
 import { createToken } from '../adapters/token.js';
 /**
@@ -46,17 +45,220 @@ export const KycConfigSchema = z
 export const AutoWithdrawalConfigSchema = z
     .object({
     enabled: z.boolean().default(false),
-    /** Fiat-rail auto-approval ceiling; a per-player rule overrides it. */
-    fiatThreshold: MoneyAmountSchema.optional(),
-    cryptoThreshold: MoneyAmountSchema.optional(),
-    /** Active tag keys that veto auto-approval and force manual review. */
-    excludeRiskFlags: z.array(TagKeySchema).default([]),
     /** Amount cap on auto-approved payouts per player per trailing 24h. Absent = no cap. */
     dailyCapAmount: MoneyAmountSchema.optional(),
     /** Count cap on auto-approved payouts per player per trailing 24h. Absent = no cap. */
     dailyCapCount: z.number().int().positive().optional(),
 })
     .strict();
+export const WalletConfigSchema = z
+    .object({
+    /**
+     * Currency codes routed to the crypto rail by `railFor` (case-insensitive).
+     * Absent = the built-in default (BTC, ETH, USDT, USDC). Lets an operator add or
+     * swap crypto assets (eg a custody vendor's supported asset list) without a
+     * core code change.
+     */
+    cryptoCurrencies: z.array(z.string().min(1)).optional(),
+    /**
+     * Vendor-side account each provider's sweeps move player funds into, keyed by the
+     * provider name in `wallet_asset.providerName` (`default` for the single bound
+     * adapter). Keyed rather than flat because one operator can run several vendors,
+     * and an account id only means something at the vendor that issued it. A provider
+     * with no entry sweeps to whatever its adapter defaults to.
+     */
+    treasuryRefs: z.record(z.string().min(1), z.string().min(1)).optional(),
+    /**
+     * Custody sweep cron knobs. Static config, not a DB row - nothing here is edited
+     * during an incident. Absent means the sweep job no-ops.
+     */
+    sweep: z
+        .object({
+        cron: z.string().default('*/15 * * * *'),
+        /**
+         * Decimal string, compared exactly (see `moneyCompare`/`moneyScaleBy`). A
+         * balance must be worth at least this many times the fee to be worth sweeping.
+         */
+        feeMultiple: MoneyAmountSchema.default('5'),
+        /** Balances considered per cycle; listSweepableBalances is unbounded. */
+        batchSize: z.number().int().positive().default(200),
+        /** Vendor API parallelism. Tune to the vendor's rate limit. */
+        concurrency: z.number().int().positive().default(4),
+        /**
+         * How long a sweep may sit in `unknown` before reconciliation reports it for a
+         * human. `unknown` means the vendor call threw and we cannot tell whether it
+         * was received, so the in-flight guard stays held and nobody releases it
+         * automatically.
+         */
+        unknownAfterMinutes: z.number().int().positive().default(60),
+        /**
+         * How long a claimed run may sit unfinished before another cycle treats it as
+         * abandoned and takes over. Distinct from `unknownAfterMinutes`: this one is
+         * about a crashed worker, that one is about an ambiguous vendor call.
+         */
+        staleRunAfterMinutes: z.number().int().positive().default(30),
+    })
+        .strict()
+        .optional(),
+    /**
+     * Reconciliation cron knobs. Static config, not a DB row - nothing here is edited
+     * during an incident. Absent means the reconciliation job no-ops.
+     */
+    reconciliation: z
+        .object({
+        cron: z.string().default('0 * * * *'),
+        lookbackHours: z.number().int().positive().default(24),
+        batchSize: z.number().int().positive().default(200),
+        stuckAfterMinutes: z.number().int().positive().default(60),
+        /** Run-claim takeover threshold, as in `sweep.staleRunAfterMinutes`. */
+        staleRunAfterMinutes: z.number().int().positive().default(30),
+        alertThreshold: z.number().int().positive().default(10),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const ExchangeRateConfigSchema = z
+    .object({
+    /** Comparison currency the fx module derives a cross rate against. Absent = 'USD'. */
+    pivot: CurrencyCodeSchema.default('USD'),
+    freshTtlMs: z.number().int().positive().default(60_000),
+    hardMaxAgeMs: z
+        .number()
+        .int()
+        .positive()
+        .default(15 * 60_000),
+    providerTimeoutMs: z.number().int().positive().default(2_000),
+})
+    .strict();
+export const NotificationsConfigSchema = z
+    .object({
+    /**
+     * In-app notification retention knobs. Static config, not a DB row - nothing
+     * here is edited during an incident. Absent means the built-in defaults apply.
+     */
+    retention: z
+        .object({
+        days: z.number().int().positive().default(30),
+        cron: z.string().default('0 3 * * *'),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const RegistrationConfigSchema = z
+    .object({
+    /** Version recorded beside the player's affirmative terms acceptance. */
+    termsVersion: z.string().min(1),
+    /**
+     * Blocks sign-in until the player has verified their address. Off by default:
+     * unverified players stay unrestricted while the KYC toggle is off.
+     */
+    requireEmailVerification: z.boolean().default(false),
+})
+    .strict();
+/**
+ * Structural check on a cron expression: 5 fields, or 6 with a leading seconds field.
+ * Not a full parse - the driver owns that - but it turns the typo class that would
+ * otherwise surface as one `logger.error` at boot and a job that never ticks into a
+ * config-validation failure.
+ */
+export const CronExpressionSchema = z
+    .string()
+    .regex(/^[0-9A-Za-z*?,\-/]+( [0-9A-Za-z*?,\-/]+){4,5}$/, 'must be a 5- or 6-field cron expression');
+/**
+ * Offset off the :00/:15/:30/:45 tick the wallet custody sweep owns, so the in-process
+ * driver never runs the moderation-expiry sweep alongside a money path. Cadence sets
+ * audit-trail latency only - a lapsed mute stops being enforced at its own `expiresAt`
+ * with or without the job, and the entry is dated from the row, so a late run still
+ * records the right instant.
+ */
+export const CHAT_MODERATION_EXPIRY_DEFAULT_CRON = '7,22,37,52 * * * *';
+export const HostAllowlistEntrySchema = z
+    .string()
+    .trim()
+    .min(1)
+    .refine((hostname) => {
+    try {
+        const url = new URL(`https://${hostname}`);
+        return (url.hostname === hostname.toLowerCase() &&
+            url.pathname === '/' &&
+            url.port === '' &&
+            url.username === '' &&
+            url.password === '' &&
+            url.search === '' &&
+            url.hash === '');
+    }
+    catch {
+        return false;
+    }
+}, { message: 'must be a hostname without a protocol, port, credentials, or path' })
+    .transform((hostname) => hostname.toLowerCase());
+export const ChatConfigSchema = z
+    .object({
+    /** Hostnames a chat message attachment may be served from. Empty = attachments disabled. */
+    allowedAttachmentHosts: z.array(HostAllowlistEntrySchema).default([]),
+    /**
+     * Cron knob for the sweep that audits a mute or platform ban lapsing on its own.
+     * Static config, not a DB row. Absent means the built-in default applies; the cadence
+     * only sets how soon the lapse shows in the audit trail - enforcement already stops
+     * at `expiresAt` without it.
+     */
+    moderationExpiry: z
+        .object({
+        cron: CronExpressionSchema.default(CHAT_MODERATION_EXPIRY_DEFAULT_CRON),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const AdminSecurityConfigSchema = z
+    .object({
+    /**
+     * Every Backoffice account must hold a second factor before it can reach any
+     * admin route. Operator-level switch with no per-user opt-out: an operator under
+     * a licence that mandates 2FA turns this on, and no account can then bypass it.
+     *
+     * Off by default. Whether Backoffice 2FA is mandatory is a licensing decision the
+     * operator owns, and defaulting it on would lock every existing deployment out of
+     * its own back office on upgrade.
+     */
+    requireTwoFactor: z.boolean().default(false),
+    /**
+     * Ties a Backoffice session to the browser it was issued to: a mid-session
+     * User-Agent change (or an IP change, per `ipChangePolicy`) ends the session and
+     * forces full re-authentication. Off by default for the same reason as above.
+     */
+    bindSessionToDevice: z.boolean().default(false),
+    /** How long a device stays trusted after a successful second factor. */
+    trustedDeviceDays: z.number().int().min(0).max(90).default(30),
+    /**
+     * Which mid-session IP change invalidates a Backoffice session, once
+     * `bindSessionToDevice` is on. `country` needs a bound GEO_IP_ADAPTER and degrades
+     * to `off` without one - never to `any`, which would end a session on every NAT or
+     * mobile-network hop.
+     */
+    ipChangePolicy: z.enum(['off', 'country', 'any']).default('off'),
+    /** Consecutive failed second-factor attempts before the account locks. */
+    twoFactorLockout: z
+        .object({
+        maxAttempts: z.number().int().min(1).max(20).default(5),
+        durationMs: z
+            .number()
+            .int()
+            .min(0)
+            .default(15 * 60 * 1000),
+    })
+        .strict()
+        .prefault({}),
+})
+    .strict();
+export const CmsConfigSchema = z
+    .object({
+    /** Hostnames a banner image URL may be served from. Empty = no banner images allowed. */
+    allowedBannerImageHosts: z.array(HostAllowlistEntrySchema).default([]),
+})
+    .strict();
 export const PlatformConfigSchema = z
     .object({
     /**
@@ -81,6 +283,7 @@ export const PlatformConfigSchema = z
      * defaults), reusing the shared LimitsSchema shape.
      */
     rgLimits: z.record(z.string().length(2), LimitsSchema).default({}),
+    responsibleGambling: ResponsibleGamingSchema.default(defaultResponsibleGamingConfig),
     /**
      * KYC verification knobs: provider id, webhook secret env, withdrawal gating,
      * and per-currency re-KYC deposit thresholds. Absent = KYC ungated, no re-KYC.
@@ -88,11 +291,27 @@ export const PlatformConfigSchema = z
     kyc: KycConfigSchema.optional(),
     /** Auto-approve withdrawals that clear every risk gate instead of queuing them for manual review. Absent = always manual. */
     autoWithdrawal: AutoWithdrawalConfigSchema.optional(),
+    /** Wallet rail-routing knobs (currently: the crypto currency set). Absent = built-in default. */
+    wallet: WalletConfigSchema.optional(),
+    /** Exchange-rate refresh knobs (pivot currency, refresh cron). Absent = built-in defaults. */
+    exchangeRate: ExchangeRateConfigSchema.optional(),
+    /** Required before public registration is enabled. */
+    registration: RegistrationConfigSchema.optional(),
+    /** In-app notification retention knobs. Absent = built-in default (30 days). */
+    notifications: NotificationsConfigSchema.optional(),
     /**
      * Player-facing language codes the operator supports (eg `['en', 'es']`).
      * Undefined or empty means no restriction - any value is accepted.
      */
     supportedLanguages: z.array(z.string().min(1)).optional(),
+    /** Currencies a player may pick to display amounts in. Absent or empty = built-in default. */
+    displayCurrencies: z.array(z.string().min(1)).optional(),
+    /** Chat attachment host allow-list. Absent = built-in default (empty = disabled). */
+    chat: ChatConfigSchema.default({ allowedAttachmentHosts: [] }),
+    /** Backoffice 2FA + session-binding policy. Absent = the schema defaults apply. */
+    adminSecurity: AdminSecurityConfigSchema.prefault({}),
+    /** CMS banner image host allow-list. Absent = built-in default (empty = disabled). */
+    cms: CmsConfigSchema.default({ allowedBannerImageHosts: [] }),
 })
     .strict()
     .superRefine((cfg, ctx) => {