@openora/core 0.4.1-canary.16 → 0.4.1-canary.160

package/dist/contracts/adapters/rate-limit.js

@@ -1,9 +1,34 @@
-// Rate-limiter seam. Abuse-prone routes (auth flows, money mutations) consume
-// from this adapter so the throttling backend is swappable: the default binding
-// is an in-process fixed-window limiter (zero deps - good for `pnpm dev`, seed
-// and tests), process-local so it does NOT coordinate across replicas. Set
-// REDIS_URL to bind the shipped Redis reference adapter (distributed fixed-window)
-// with zero consumer code; rebind RATE_LIMITER via an overlay for any other backend.
+/**
+ * Rate-limiter seam. Abuse-prone routes (auth flows, money mutations) consume
+ * from this adapter so the throttling backend is swappable: the default binding
+ * is an in-process fixed-window limiter (zero deps - good for `pnpm dev`, seed
+ * and tests), process-local so it does NOT coordinate across replicas. Set
+ * REDIS_URL to bind the shipped Redis reference adapter (distributed fixed-window)
+ * with zero consumer code; rebind RATE_LIMITER via an overlay for any other backend.
+ */
 import { createToken } from './token.js';
+export const RATE_LIMIT_KEYS = {
+    REGISTER: 'register',
+    LOGIN: 'login',
+    ENABLE_2FA: 'enable2fa',
+    VERIFY_2FA: 'verify2fa',
+    DISABLE_2FA: 'disable2fa',
+    PASSWORD_RESET_REQUEST: 'pwreset-req',
+    PASSWORD_RESET_VERIFY: 'pwreset-verify',
+    PASSWORD_RESET: 'pwreset',
+    CHANGE_PASSWORD: 'change-password',
+    WITHDRAWAL_PIN_MUTATION: 'withdrawal-pin-mutation',
+    ANTI_PHISHING_CODE_MUTATION: 'anti-phishing-code-mutation',
+    EMAIL_VERIFICATION: 'email-verify',
+    VERIFY_EMAIL: 'verify-email',
+    WALLET_MUTATION: 'wallet-mutation',
+    WALLET_WEBHOOK: 'wallet-webhook',
+    CHAT_ROOM_JOIN: 'chat-room-join',
+    CHAT_SEND: 'chat-send',
+    REPORT_ACCESS_DENIED: 'report-access-denied',
+};
+export function makeRateLimitKey(prefix, id) {
+    return `${prefix}:${id}`;
+}
 export const RATE_LIMITER = createToken('RATE_LIMITER');
 //# sourceMappingURL=rate-limit.js.map

package/dist/contracts/adapters/rate-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,mFAAmF;AACnF,qFAAqF;AACrF,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAuBrD,MAAM,CAAC,MAAM,YAAY,GAA8B,WAAW,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,YAAY;IACzB,sBAAsB,EAAE,aAAa;IACrC,qBAAqB,EAAE,gBAAgB;IACvC,cAAc,EAAE,SAAS;IACzB,eAAe,EAAE,iBAAiB;IAClC,uBAAuB,EAAE,yBAAyB;IAClD,2BAA2B,EAAE,6BAA6B;IAC1D,kBAAkB,EAAE,cAAc;IAClC,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,oBAAoB,EAAE,sBAAsB;CACpC,CAAC;AAMX,MAAM,UAAU,gBAAgB,CAAC,MAA0B,EAAE,EAAU;IACrE,OAAO,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;AAC3B,CAAC;AA0BD,MAAM,CAAC,MAAM,YAAY,GAA4C,WAAW,CAAC,cAAc,CAAC,CAAC"}

package/dist/contracts/adapters/realtime.d.ts

@@ -1,35 +1,184 @@
+/**
+ * Realtime-transport seam. Client-facing push (live chat messages, PvP round
+ * state, live odds, big-win/jackpot feeds) flows through this adapter, so the
+ * transport is swappable: the default binding is a first-party in-process
+ * fan-out (served to clients as oRPC event-iterators over SSE); a downstream
+ * operator binds a managed transport (Ably / GetStream / PubNub) to
+ * REALTIME_TRANSPORT without touching modules. This realizes ADR-0007's
+ * `ChatTransportPort` as a generic primitive shared across modules - it is NOT
+ * the inter-module MESSAGE_BROKER (ADR-0010 #4 keeps client push separate from
+ * the event broker, which has delivery guarantees/acks). Money and moderation
+ * stay first-party domain logic; they are never delegated to the transport.
+ *
+ * CHAT_REALTIME_TRANSPORT / CHAT_REALTIME_CLIENT_AUTHORIZER are the SAME two
+ * port shapes, scoped to chat only. The chat module defaults them to whatever
+ * REALTIME_TRANSPORT/REALTIME_CLIENT_AUTHORIZER resolve to (so out of the box
+ * chat behaves identically to every other realtime consumer), but an operator
+ * can rebind just the CHAT_-prefixed tokens to run chat on a managed vendor
+ * (eg Ably) while KYC status updates and everything else stay first-party SSE
+ * - the two seams are independently swappable. `chat-commands` shares the SAME
+ * chat channels (gift claims, rain), so it consumes CHAT_REALTIME_TRANSPORT
+ * too, never the generic token.
+ */
 import { type Token } from './token.js';
+/**
+ * Optional presence capability. A first-party transport can offer a simple
+ * connected-member count; managed vendors provide richer presence. Kept optional
+ * (a capability flag, per ADR-0007) so the base port is the common denominator.
+ */
 export type RealtimePresence = {
-    join(channel: string, memberId: string): void;
-    leave(channel: string, memberId: string): void;
-    count(channel: string): number;
+    /**
+     * `connectionId` distinguishes concurrent tabs for the same member. Counts remain
+     * per member, so one tab leaving never marks a user offline while another is active.
+     */
+    join(channel: string, memberId: string, connectionId: string): void;
+    leave(channel: string, memberId: string, connectionId: string): void;
+    count(channel: string): number | Promise<number>;
 };
+/** A named control signal on a channel: "something here changed, refetch". */
+export type RealtimeSignal = {
+    name: string;
+    payload: unknown;
+};
+/**
+ * Name of the signal `revokeUserFromChannel` delivers to the user losing access, so a client
+ * matches it by constant rather than by a hardcoded string. Exported here rather than from the
+ * chat module because the transport that emits it is provider-agnostic; the chat-namespaced
+ * name is historical, and any channel a transport revokes carries it.
+ */
+export declare const ACCESS_REVOKED_SIGNAL = "chat:access-revoked";
 export type RealtimeTransport = {
+    /**
+     * Fan a message out to every subscriber of `channel`. Best-effort, at-most-once
+     * for late joiners (the transport is not a system of record - persist first).
+     */
     publish<T>(channel: string, event: T): void | Promise<void>;
-    subscribe<T>(channel: string, handler: (event: T) => void): () => void;
+    /**
+     * Fan out a deletion/tombstone event to the channel. The transport does not
+     * remove persisted data; callers must complete the database mutation first.
+     * SSE and managed transports deliver this through their normal live stream.
+     */
+    remove<T>(channel: string, event: T): void | Promise<void>;
+    /**
+     * Subscribe a handler to a channel. Returns an unsubscribe fn the caller MUST
+     * invoke on teardown (eg an SSE handler on request abort).
+     */
+    subscribe<T>(channel: string, handler: (event: T) => void, userId?: string): () => void;
+    /**
+     * Push a NAMED control signal to a channel - "something about this room changed, refetch"
+     * - as opposed to `publish`/`remove`, which carry the channel's payload stream itself (for
+     * chat, `ChatMessage`). A managed transport delivers it as its own named event, the way
+     * `revokeUserFromChannel` already surfaces `ACCESS_REVOKED_SIGNAL`, so a signal never
+     * reaches a payload subscriber and cannot corrupt that stream. The first-party Redis Pub/Sub
+     * transport implements it over a second Redis channel per chat channel, which the
+     * `/chat/signals` SSE route serves, so the default deployment carries signals too. Optional per ADR-0007 all the same:
+     * a transport that only fans out payloads is still a valid transport.
+     *
+     * `subscribeSignal` below is the server-side receiving half; on the client it is
+     * `RealtimeSubscribeHandlers.onSignal` in react/context/realtime-client, which a vendor
+     * adapter feeds from the vendor's own named events. Every half is optional on its own.
+     */
+    signal?: (channel: string, name: string, payload: unknown) => void | Promise<void>;
+    /**
+     * Server-side receiving half of `signal`, and the reason the first-party path can carry one:
+     * the signal lane is separate from the payload lane, so subscribing here never sees a
+     * `ChatMessage` and subscribing to `subscribe` never sees a signal. The default SSE route
+     * reads this lane and streams it to browsers; a managed transport delivers its own named
+     * events to the client directly and need not implement this.
+     */
+    subscribeSignal?: (channel: string, handler: (signal: RealtimeSignal) => void, userId?: string) => () => void;
+    /** Revoke managed-provider credentials for a client after access is removed. */
+    revokeClient?: (clientId: string) => void | Promise<void>;
+    /**
+     * Revoke a user's access to one channel without affecting other chats. Keyed on the
+     * AUTHENTICATED user, not on a connection: `getConnection` lets a caller pick its own
+     * per-connection `clientId`, so revoking one of those would leave the same person's other
+     * tabs subscribed. Before cutting access, the transport delivers
+     * `{ name: ACCESS_REVOKED_SIGNAL, payload: { channel } }` to the signal subscriptions it
+     * holds for that user on the channel. It must not send the signal to other users or include
+     * `userId` in its payload. Message and signal lanes remain separate, and every connection on
+     * both lanes is removed even when a signal handler fails.
+     *
+     * Reach is whatever the transport itself owns. `RedisPubSubRealtimeTransport` holds
+     * subscriptions per replica, so it signals and cuts only the connections on the replica the
+     * call lands on - the same user's tabs on a sibling replica keep streaming until they
+     * reconnect. A managed adapter owns every connection centrally and must therefore signal and
+     * cut all of them, which is the behaviour a multi-replica deployment needs.
+     */
+    revokeUserFromChannel?: (userId: string, channel: string) => void | Promise<void>;
     presence?: RealtimePresence;
+    /**
+     * Returns the set of authenticated user IDs currently online in `channel`.
+     * Anonymous connections (memberIds beginning with 'anonymous:') are excluded.
+     */
+    getOnlineUserIds(channel: string): Promise<string[]>;
 };
 export declare const REALTIME_TRANSPORT: Token<RealtimeTransport>;
-export type RealtimeConnectionGrant = {
+/** Chat-scoped realtime transport - see the module header comment above. */
+export declare const CHAT_REALTIME_TRANSPORT: Token<RealtimeTransport>;
+/**
+ * Client connection provisioning - the complement to REALTIME_TRANSPORT.
+ *
+ * REALTIME_TRANSPORT is how the SERVER fans a message out. This seam is how a
+ * CLIENT learns to CONNECT and receive. The two models differ by provider:
+ *   - first-party (default): the client pulls from our own API over SSE, so the
+ *     "grant" is just the stream path - no secret, the session cookie authorizes.
+ *   - managed vendor (Ably/GetStream/PubNub): the client connects DIRECTLY to the
+ *     vendor edge, so the backend must mint a per-player, capability-scoped token
+ *     (never ship the vendor API key to the browser). The grant carries that token.
+ * A downstream operator binds this token to its provider's authorizer without any
+ * module change; the chat module just hands the grant to the caller. See ADR-0007.
+ */
+/**
+ * What the client needs to start receiving, tagged by `provider` so a pluggable
+ * client-side adapter can pick the right transport. Open union - a new vendor adds
+ * its own variant without editing core.
+ */
+export type RealtimeConnectionGrant = 
+/** First-party SSE: subscribe by opening this event-iterator path on our API. */
+{
     provider: 'sse';
     streamPath: string;
     channels: string[];
-} | {
+}
+/**
+ * Ably: a signed TokenRequest the browser exchanges for a scoped token, plus the
+ * channels the player may subscribe to. `tokenRequest` is opaque here (the Ably
+ * SDK shape lives in the consumer, not in vendor-neutral core).
+ */
+ | {
     provider: 'ably';
     tokenRequest: unknown;
     channels: string[];
-} | {
+}
+/** Escape hatch for any other vendor (GetStream, PubNub, ...). */
+ | {
     provider: string;
     channels: string[];
     [key: string]: unknown;
 };
 export type RealtimeClientAuthorizerInput = {
+    /**
+     * The authenticated caller; becomes the vendor `clientId` so presence/identity
+     * is bound server-side and cannot be spoofed by the browser.
+     */
     userId: string;
+    /** A stable per-connection id from the client (defaults to userId when absent). */
     clientId: string;
+    /**
+     * The channels the caller is allowed to subscribe to (the module computes these
+     * from the player's access - eg the global channel plus their rooms).
+     */
     channels: string[];
 };
 export type RealtimeClientAuthorizer = {
+    /**
+     * Mint a connection grant for an authenticated caller. Async because a managed
+     * vendor signs a token request over its SDK.
+     */
     issueGrant(input: RealtimeClientAuthorizerInput): RealtimeConnectionGrant | Promise<RealtimeConnectionGrant>;
 };
 export declare const REALTIME_CLIENT_AUTHORIZER: Token<RealtimeClientAuthorizer>;
+/** Chat-scoped client authorizer - see the module header comment above. */
+export declare const CHAT_REALTIME_CLIENT_AUTHORIZER: Token<RealtimeClientAuthorizer>;
 //# sourceMappingURL=realtime.d.ts.map

package/dist/contracts/adapters/realtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/realtime.ts"],"names":[],"mappings":"AAUA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAKrD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAG9B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5D,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACvE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAqC,CAAC;AAiB9F,MAAM,MAAM,uBAAuB,GAE/B;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAI3D;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAE/D;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAErE,MAAM,MAAM,6BAA6B,GAAG;IAG1C,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,EAAE,MAAM,CAAC;IAGjB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IAGrC,UAAU,CACR,KAAK,EAAE,6BAA6B,GACnC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/D,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,wBAAwB,CAEtE,CAAC"}
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;OAGG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACpE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClD,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAE3D,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;OAGG;IACH,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D;;;;OAIG;IACH,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D;;;OAGG;IACH,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IACxF;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,EACzC,MAAM,CAAC,EAAE,MAAM,KACZ,MAAM,IAAI,CAAC;IAChB,gFAAgF;IAChF,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACtD,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,iBAAiB,CAAqC,CAAC;AAE9F,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,iBAAiB,CACrB,CAAC;AAEzC;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,MAAM,MAAM,uBAAuB;AACjC,iFAAiF;AAC/E;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AAC7D;;;;GAIG;GACD;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AACjE,kEAAkE;GAChE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAErE,MAAM,MAAM,6BAA6B,GAAG;IAC1C;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;OAGG;IACH,UAAU,CACR,KAAK,EAAE,6BAA6B,GACnC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC/D,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,KAAK,CAAC,wBAAwB,CAEtE,CAAC;AAEF,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B,EAAE,KAAK,CAAC,wBAAwB,CAE3E,CAAC"}

package/dist/contracts/adapters/realtime.js

@@ -1,14 +1,37 @@
-// Realtime-transport seam. Client-facing push (live chat messages, PvP round
-// state, live odds, big-win/jackpot feeds) flows through this adapter, so the
-// transport is swappable: the default binding is a first-party in-process
-// fan-out (served to clients as oRPC event-iterators over SSE); a downstream
-// operator binds a managed transport (Ably / GetStream / PubNub) to
-// REALTIME_TRANSPORT without touching modules. This realizes ADR-0007's
-// `ChatTransportPort` as a generic primitive shared across modules - it is NOT
-// the inter-module MESSAGE_BROKER (ADR-0010 #4 keeps client push separate from
-// the event broker, which has delivery guarantees/acks). Money and moderation
-// stay first-party domain logic; they are never delegated to the transport.
+/**
+ * Realtime-transport seam. Client-facing push (live chat messages, PvP round
+ * state, live odds, big-win/jackpot feeds) flows through this adapter, so the
+ * transport is swappable: the default binding is a first-party in-process
+ * fan-out (served to clients as oRPC event-iterators over SSE); a downstream
+ * operator binds a managed transport (Ably / GetStream / PubNub) to
+ * REALTIME_TRANSPORT without touching modules. This realizes ADR-0007's
+ * `ChatTransportPort` as a generic primitive shared across modules - it is NOT
+ * the inter-module MESSAGE_BROKER (ADR-0010 #4 keeps client push separate from
+ * the event broker, which has delivery guarantees/acks). Money and moderation
+ * stay first-party domain logic; they are never delegated to the transport.
+ *
+ * CHAT_REALTIME_TRANSPORT / CHAT_REALTIME_CLIENT_AUTHORIZER are the SAME two
+ * port shapes, scoped to chat only. The chat module defaults them to whatever
+ * REALTIME_TRANSPORT/REALTIME_CLIENT_AUTHORIZER resolve to (so out of the box
+ * chat behaves identically to every other realtime consumer), but an operator
+ * can rebind just the CHAT_-prefixed tokens to run chat on a managed vendor
+ * (eg Ably) while KYC status updates and everything else stay first-party SSE
+ * - the two seams are independently swappable. `chat-commands` shares the SAME
+ * chat channels (gift claims, rain), so it consumes CHAT_REALTIME_TRANSPORT
+ * too, never the generic token.
+ */
 import { createToken } from './token.js';
+/**
+ * Name of the signal `revokeUserFromChannel` delivers to the user losing access, so a client
+ * matches it by constant rather than by a hardcoded string. Exported here rather than from the
+ * chat module because the transport that emits it is provider-agnostic; the chat-namespaced
+ * name is historical, and any channel a transport revokes carries it.
+ */
+export const ACCESS_REVOKED_SIGNAL = 'chat:access-revoked';
 export const REALTIME_TRANSPORT = createToken('REALTIME_TRANSPORT');
+/** Chat-scoped realtime transport - see the module header comment above. */
+export const CHAT_REALTIME_TRANSPORT = createToken('CHAT_REALTIME_TRANSPORT');
 export const REALTIME_CLIENT_AUTHORIZER = createToken('REALTIME_CLIENT_AUTHORIZER');
+/** Chat-scoped client authorizer - see the module header comment above. */
+export const CHAT_REALTIME_CLIENT_AUTHORIZER = createToken('CHAT_REALTIME_CLIENT_AUTHORIZER');
 //# sourceMappingURL=realtime.js.map

package/dist/contracts/adapters/realtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../../../src/contracts/adapters/realtime.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,oEAAoE;AACpE,wEAAwE;AACxE,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAqBrD,MAAM,CAAC,MAAM,kBAAkB,GAA6B,WAAW,CAAC,oBAAoB,CAAC,CAAC;AA8C9F,MAAM,CAAC,MAAM,0BAA0B,GAAoC,WAAW,CACpF,4BAA4B,CAC7B,CAAC"}
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../../../src/contracts/adapters/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAoBrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAyE3D,MAAM,CAAC,MAAM,kBAAkB,GAA6B,WAAW,CAAC,oBAAoB,CAAC,CAAC;AAE9F,4EAA4E;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAClC,WAAW,CAAC,yBAAyB,CAAC,CAAC;AA0DzC,MAAM,CAAC,MAAM,0BAA0B,GAAoC,WAAW,CACpF,4BAA4B,CAC7B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,+BAA+B,GAAoC,WAAW,CACzF,iCAAiC,CAClC,CAAC"}

package/dist/contracts/adapters/rg-limits.d.ts

@@ -0,0 +1,47 @@
+import type { LimitType, LimitPeriod, RgLimitErrorReason } from '../schemas/compliance.js';
+import { type Token } from './token.js';
+export type RgLimitDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    limitType: LimitType;
+    period: LimitPeriod;
+    /** The configured limit, decimal string. */
+    limit: string;
+    /** Spend already inside the period window, decimal string. */
+    used: string;
+};
+export type RgLimitExceededData = {
+    reason: RgLimitErrorReason;
+    limitType: LimitType;
+    period: LimitPeriod;
+    limit: string;
+    used: string;
+};
+/** A money move refused by the player's own responsible-gambling limit. */
+export declare class RgLimitExceededError extends Error {
+    readonly data: RgLimitExceededData;
+    constructor(reason: RgLimitErrorReason, decision: Extract<RgLimitDecision, {
+        allowed: false;
+    }>);
+}
+/**
+ * `amount` is the move being *attempted*: the gate answers "may this move happen", not
+ * "has the limit already been passed".
+ *
+ * Check-then-act: a caller that must not exceed the limit has to invoke this inside the
+ * transaction that performs the move, after taking whatever row lock serializes
+ * concurrent moves for that player.
+ *
+ * `tx` is the caller's transaction and is mandatory; every read the gate makes runs on
+ * it. A caller with no transaction of its own passes `drizzle.db`.
+ *
+ * Optional for its consumers (`c.has(RG_LIMITS)`); where bound, the gate is fail-closed -
+ * a throwing `check*` refuses the move rather than letting it through.
+ */
+export type RgLimitsPort = {
+    checkDeposit(tx: unknown, userId: string, amount: string, currency: string): Promise<RgLimitDecision>;
+    checkWager(tx: unknown, userId: string, amount: string, currency: string): Promise<RgLimitDecision>;
+};
+export declare const RG_LIMITS: Token<RgLimitsPort>;
+//# sourceMappingURL=rg-limits.d.ts.map

package/dist/contracts/adapters/rg-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-limits.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rg-limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IACE,OAAO,EAAE,KAAK,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;gBAEvB,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,CAAC,eAAe,EAAE;QAAE,OAAO,EAAE,KAAK,CAAA;KAAE,CAAC;CAa/F;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,CACV,EAAE,EAAE,OAAO,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,UAAU,CACR,EAAE,EAAE,OAAO,EACX,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,KAAK,CAAC,YAAY,CAA0C,CAAC"}

package/dist/contracts/adapters/rg-limits.js

@@ -0,0 +1,18 @@
+import { createToken } from './token.js';
+/** A money move refused by the player's own responsible-gambling limit. */
+export class RgLimitExceededError extends Error {
+    data;
+    constructor(reason, decision) {
+        super(`Refused: this would exceed the ${decision.period} ${decision.limitType} limit of ${decision.limit} (${decision.used} already used)`);
+        this.name = 'RgLimitExceededError';
+        this.data = {
+            reason,
+            limitType: decision.limitType,
+            period: decision.period,
+            limit: decision.limit,
+            used: decision.used,
+        };
+    }
+}
+export const RG_LIMITS = createToken('RG_LIMITS');
+//# sourceMappingURL=rg-limits.js.map

package/dist/contracts/adapters/rg-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rg-limits.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rg-limits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAsBrD,2EAA2E;AAC3E,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAsB;IAEnC,YAAY,MAA0B,EAAE,QAAsD;QAC5F,KAAK,CACH,kCAAkC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,aAAa,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,gBAAgB,CACrI,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG;YACV,MAAM;YACN,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;SACpB,CAAC;IACJ,CAAC;CACF;AA+BD,MAAM,CAAC,MAAM,SAAS,GAAwB,WAAW,CAAe,WAAW,CAAC,CAAC"}

package/dist/contracts/adapters/rng.d.ts

@@ -1,3 +1,14 @@
+/**
+ * Random number generator seam. For dev / demo / non-certified game contexts.
+ *
+ * IMPORTANT: production game outcomes are governed by the SEALED
+ * `GAME_OUTCOME_AUTHORITY` token in `@openora/core/compliance` (regulator
+ * mandate - GLI / eCOGRA / BMM / iTechLabs). `RNG_ADAPTER` is NOT a substitute
+ * for a lab-certified RGS. Use this seam to swap deterministic mocks in tests,
+ * to plug in a seedable provider for replay debugging, or to back demo games
+ * that never resolve real money. Real-money RTP must flow through the sealed
+ * authority.
+ */
 import { type Token } from './token.js';
 export type RngAdapter = {
     /** Uniform float in [0, 1). */

package/dist/contracts/adapters/rng.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rng.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rng.ts"],"names":[],"mappings":"AASA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG;IACvB,+BAA+B;IAC/B,SAAS,IAAI,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnD,qFAAqF;IACrF,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}
+{"version":3,"file":"rng.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rng.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG;IACvB,+BAA+B;IAC/B,SAAS,IAAI,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACnD,qFAAqF;IACrF,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}

package/dist/contracts/adapters/rng.js

@@ -1,12 +1,14 @@
-// Random number generator seam. For dev / demo / non-certified game contexts.
-//
-// IMPORTANT: production game outcomes are governed by the SEALED
-// `GAME_OUTCOME_AUTHORITY` token in `@openora/core/compliance` (regulator
-// mandate - GLI / eCOGRA / BMM / iTechLabs). `RNG_ADAPTER` is NOT a substitute
-// for a lab-certified RGS. Use this seam to swap deterministic mocks in tests,
-// to plug in a seedable provider for replay debugging, or to back demo games
-// that never resolve real money. Real-money RTP must flow through the sealed
-// authority.
+/**
+ * Random number generator seam. For dev / demo / non-certified game contexts.
+ *
+ * IMPORTANT: production game outcomes are governed by the SEALED
+ * `GAME_OUTCOME_AUTHORITY` token in `@openora/core/compliance` (regulator
+ * mandate - GLI / eCOGRA / BMM / iTechLabs). `RNG_ADAPTER` is NOT a substitute
+ * for a lab-certified RGS. Use this seam to swap deterministic mocks in tests,
+ * to plug in a seedable provider for replay debugging, or to back demo games
+ * that never resolve real money. Real-money RTP must flow through the sealed
+ * authority.
+ */
 import { createToken } from './token.js';
 export const RNG_ADAPTER = createToken('RNG_ADAPTER');
 //# sourceMappingURL=rng.js.map

package/dist/contracts/adapters/rng.js.map

@@ -1 +1 @@
-{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rng.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,iEAAiE;AACjE,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,aAAa;AACb,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}
+{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rng.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}

package/dist/contracts/adapters/session-idle-policy.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Push port for the per-player "auto-logout when inactive" setting. Bound by the identity
+ * module (it owns the `user` and `session` tables); the request middleware depends only on
+ * this port and never on the identity schema (ADR-0019/0025).
+ *
+ * `touch` runs once per authenticated request. It records activity on the session and
+ * answers `expired` when the session has already sat idle past the player's chosen window
+ * - by then it has been revoked, so the caller must treat the request as unauthenticated
+ * rather than trusting the resolved session.
+ */
+import { type Token } from './token.js';
+export type SessionIdlePolicy = {
+    touch(userId: string, sessionId: string): Promise<'active' | 'expired'>;
+};
+export declare const SESSION_IDLE_POLICY: Token<SessionIdlePolicy>;
+//# sourceMappingURL=session-idle-policy.d.ts.map

package/dist/contracts/adapters/session-idle-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-idle-policy.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/session-idle-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;CACzE,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAsC,CAAC"}

package/dist/contracts/adapters/session-idle-policy.js

@@ -0,0 +1,13 @@
+/**
+ * Push port for the per-player "auto-logout when inactive" setting. Bound by the identity
+ * module (it owns the `user` and `session` tables); the request middleware depends only on
+ * this port and never on the identity schema (ADR-0019/0025).
+ *
+ * `touch` runs once per authenticated request. It records activity on the session and
+ * answers `expired` when the session has already sat idle past the player's chosen window
+ * - by then it has been revoked, so the caller must treat the request as unauthenticated
+ * rather than trusting the resolved session.
+ */
+import { createToken } from './token.js';
+export const SESSION_IDLE_POLICY = createToken('SESSION_IDLE_POLICY');
+//# sourceMappingURL=session-idle-policy.js.map

package/dist/contracts/adapters/session-idle-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-idle-policy.js","sourceRoot":"","sources":["../../../src/contracts/adapters/session-idle-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,mBAAmB,GAA6B,WAAW,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/contracts/adapters/sms.d.ts

@@ -0,0 +1,15 @@
+/**
+ * SMS delivery seam. The phone-login OTP flow sends codes through this adapter so the
+ * transport is swappable: the platform default (bound in identity/plugin.ts) is a
+ * log-to-stdout mock, safe for dev/stage. A consumer overlay rebinds SMS_ADAPTER to a
+ * real vendor (Twilio, AWS SNS) in production. See AGENTS.md "third-party integration".
+ */
+import { type Token } from './token.js';
+export type SmsAdapter = {
+    sendOtp(params: {
+        to: string;
+        code: string;
+    }): Promise<void>;
+};
+export declare const SMS_ADAPTER: Token<SmsAdapter>;
+//# sourceMappingURL=sms.d.ts.map

package/dist/contracts/adapters/sms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/sms.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}

package/dist/contracts/adapters/sms.js

@@ -0,0 +1,9 @@
+/**
+ * SMS delivery seam. The phone-login OTP flow sends codes through this adapter so the
+ * transport is swappable: the platform default (bound in identity/plugin.ts) is a
+ * log-to-stdout mock, safe for dev/stage. A consumer overlay rebinds SMS_ADAPTER to a
+ * real vendor (Twilio, AWS SNS) in production. See AGENTS.md "third-party integration".
+ */
+import { createToken } from './token.js';
+export const SMS_ADAPTER = createToken('SMS_ADAPTER');
+//# sourceMappingURL=sms.js.map

package/dist/contracts/adapters/sms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sms.js","sourceRoot":"","sources":["../../../src/contracts/adapters/sms.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}

package/dist/contracts/adapters/social-commands.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Social command port: chat's blockUser() dissolves any active friendship on the
+ * caller's own tx, so the dissolve is atomic with the block. ADR-0017.
+ */
+import { type Token } from './token.js';
+import type { DomainEventPayload } from '../schemas/events.js';
+export type SocialCommands = {
+    dissolveFriendshipOnBlock(tx: unknown, blockerId: string, blockedId: string): Promise<FriendshipDissolvedPayload | null>;
+};
+export type FriendshipDissolvedPayload = DomainEventPayload<'social.friendship.removed'>;
+export declare const SOCIAL_COMMANDS: Token<SocialCommands>;
+//# sourceMappingURL=social-commands.d.ts.map

package/dist/contracts/adapters/social-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/social-commands.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG;IAC3B,yBAAyB,CACvB,EAAE,EAAE,OAAO,EACX,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CAAC,2BAA2B,CAAC,CAAC;AAEzF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}

package/dist/contracts/adapters/social-commands.js

@@ -0,0 +1,7 @@
+/**
+ * Social command port: chat's blockUser() dissolves any active friendship on the
+ * caller's own tx, so the dissolve is atomic with the block. ADR-0017.
+ */
+import { createToken } from './token.js';
+export const SOCIAL_COMMANDS = createToken('SOCIAL_COMMANDS');
+//# sourceMappingURL=social-commands.js.map

package/dist/contracts/adapters/social-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/social-commands.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}