@openora/core 0.4.1-canary.16 → 0.4.1-canary.161

package/dist/pam/identity/adapters/identity-reader.service.js

@@ -1,6 +1,8 @@
-import { and, eq, isNull, lt, max, or } from 'drizzle-orm';
+import { createLogger } from '@openora/core/server';
+import { and, eq, inArray, isNull, lt, max, ne, or, SQL } from 'drizzle-orm';
 import { session, user } from '../schema/index.js';
 import { player } from '@openora/core/pam/schema/profile';
+const logger = createLogger('identity-reader');
 export class IdentityReaderService {
     drizzle;
     constructor(drizzle) {
@@ -17,7 +19,10 @@ export class IdentityReaderService {
         // Join users to their most-recent session. Players with no session at all
         // (registered but never logged in) are included via the LEFT JOIN + isNull check.
         const lastSessionPerUser = this.drizzle.db
-            .select({ userId: session.userId, lastAt: max(session.createdAt).as('last_at') })
+            .select({
+            userId: session.userId,
+            lastAt: new SQL.Aliased(max(session.createdAt), 'last_at'),
+        })
             .from(session)
             .groupBy(session.userId)
             .as('s');
@@ -36,5 +41,59 @@ export class IdentityReaderService {
             .limit(1);
         return row?.id ?? null;
     }
+    async getPlayerIdByUserIdSafe(userId) {
+        try {
+            return await this.getPlayerIdByUserId(userId);
+        }
+        catch (err) {
+            logger.warn({ err, userId }, 'player id lookup failed for event enrichment');
+            return null;
+        }
+    }
+    async getPlayerIdsByUserIdsSafe(userIds) {
+        const result = new Map(userIds.map((id) => [id, null]));
+        if (userIds.length === 0) {
+            return result;
+        }
+        try {
+            const rows = await this.drizzle.db
+                .select({ userId: player.userId, id: player.id })
+                .from(player)
+                .where(inArray(player.userId, userIds));
+            for (const row of rows) {
+                result.set(row.userId, row.id);
+            }
+        }
+        catch (err) {
+            logger.warn({ err, userIds }, 'batched player id lookup failed for event enrichment');
+        }
+        return result;
+    }
+    async getPlayerKycStatusByUserId(userId) {
+        const [row] = await this.drizzle.db
+            .select({ kycStatus: player.kycStatus })
+            .from(player)
+            .where(eq(player.userId, userId))
+            .limit(1);
+        return row?.kycStatus ?? null;
+    }
+    async getPlayerUserIdsSharingLoginIp(userId, ipAddress) {
+        const rows = await this.drizzle.db
+            .select({ userId: user.id })
+            .from(session)
+            .innerJoin(user, eq(session.userId, user.id))
+            .innerJoin(player, eq(player.userId, user.id))
+            .where(and(eq(session.ipAddress, ipAddress), ne(user.id, userId), eq(user.role, 'player')))
+            .groupBy(user.id);
+        return rows.map((r) => r.userId);
+    }
+    async canReceiveLoginWithdrawalAlerts(userId) {
+        const [row] = await this.drizzle.db
+            .select({ enabled: user.loginWithdrawalAlertsEnabled, emailVerified: user.emailVerified })
+            .from(user)
+            .where(eq(user.id, userId))
+            .limit(1);
+        return row?.enabled === true && row.emailVerified === true;
+    }
 }
 //# sourceMappingURL=identity-reader.service.js.map

package/dist/pam/identity/adapters/identity-reader.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-reader.service.js","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,cAAc,CAAC,MAAoB;QACvC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,SAAe;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACvC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAChF,IAAI,CAAC,OAAO,CAAC;aACb,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACvB,EAAE,CAAC,GAAG,CAAC,CAAC;QAEX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACpE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACvB,EAAE,CACA,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACrE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CACzC,CACF,CACF,CAAC;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc;QACtC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"identity-reader.service.js","sourceRoot":"","sources":["../../../../src/pam/identity/adapters/identity-reader.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAkB,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE/C,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,cAAc,CAAC,MAAkB;QACrC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1C,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,SAAe;QAC7C,0EAA0E;QAC1E,kFAAkF;QAClF,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;aACvC,MAAM,CAAC;YACN,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI,GAAG,CAAC,OAAO,CAAc,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;SACxE,CAAC;aACD,IAAI,CAAC,OAAO,CAAC;aACb,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;aACvB,EAAE,CAAC,GAAG,CAAC,CAAC;QAEX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACpE,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACvB,EAAE,CACA,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACrE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CACzC,CACF,CACF,CAAC;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAkB;QAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;aACzB,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,MAAkB;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,8CAA8C,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,OAAqB;QAErB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAkC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;iBAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;iBAChD,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAAkB;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aACvC,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,8BAA8B,CAClC,MAAkB,EAClB,SAAiB;QAEjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC3B,IAAI,CAAC,OAAO,CAAC;aACb,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5C,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC7C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;aAC1F,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,+BAA+B,CAAC,MAAkB;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAChC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,4BAA4B,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aACzF,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,OAAO,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC;IAC7D,CAAC;CACF"}

package/dist/pam/identity/adapters/mock/mock-kyc-adapter.d.ts

@@ -1,7 +1,7 @@
-import type { KycAdapter, KycDocument, KycResult, KycVendorStatus } from '@openora/core/contracts';
+import type { KycAdapter, KycDocument, KycResult, KycTier, KycVendorStatus } from '@openora/core/contracts';
 export declare class MockKycAdapter implements KycAdapter {
     readonly autoApproves = true;
-    submit(userId: string, _docs: KycDocument[]): Promise<KycResult>;
-    getStatus(_userId: string): Promise<KycVendorStatus>;
+    submit(userId: string, _docs: KycDocument[], tier: KycTier): Promise<KycResult>;
+    getStatus(_userId: string, _tier: KycTier): Promise<KycVendorStatus>;
 }
 //# sourceMappingURL=mock-kyc-adapter.d.ts.map

package/dist/pam/identity/adapters/mock/mock-kyc-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mock-kyc-adapter.d.ts","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-kyc-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEnG,qBAAa,cAAe,YAAW,UAAU;IAC/C,QAAQ,CAAC,YAAY,QAAQ;IAEvB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAIhE,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CAG3D"}
+{"version":3,"file":"mock-kyc-adapter.d.ts","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-kyc-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,OAAO,EACP,eAAe,EAChB,MAAM,yBAAyB,CAAC;AAEjC,qBAAa,cAAe,YAAW,UAAU;IAC/C,QAAQ,CAAC,YAAY,QAAQ;IAEvB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC;IAI/E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC;CAG3E"}

package/dist/pam/identity/adapters/mock/mock-kyc-adapter.js

@@ -1,9 +1,9 @@
 export class MockKycAdapter {
     autoApproves = true;
-    async submit(userId, _docs) {
-        return { referenceId: `mock-${userId}`, status: 'approved' };
+    async submit(userId, _docs, tier) {
+        return { referenceId: `mock-${userId}-${tier}`, status: 'approved' };
     }
-    async getStatus(_userId) {
+    async getStatus(_userId, _tier) {
         return 'approved';
     }
 }

package/dist/pam/identity/adapters/mock/mock-kyc-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"mock-kyc-adapter.js","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-kyc-adapter.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,cAAc;IAChB,YAAY,GAAG,IAAI,CAAC;IAE7B,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAoB;QAC/C,OAAO,EAAE,WAAW,EAAE,QAAQ,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"mock-kyc-adapter.js","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-kyc-adapter.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,cAAc;IAChB,YAAY,GAAG,IAAI,CAAC;IAE7B,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,KAAoB,EAAE,IAAa;QAC9D,OAAO,EAAE,WAAW,EAAE,QAAQ,MAAM,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,KAAc;QAC7C,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/pam/identity/adapters/mock/mock-sms-adapter.d.ts

@@ -0,0 +1,8 @@
+import type { SmsAdapter } from '@openora/core/contracts';
+export declare class MockSmsAdapter implements SmsAdapter {
+    sendOtp({ to, code }: {
+        to: string;
+        code: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=mock-sms-adapter.d.ts.map

package/dist/pam/identity/adapters/mock/mock-sms-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-sms-adapter.d.ts","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-sms-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,qBAAa,cAAe,YAAW,UAAU;IACzC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAIzE"}

package/dist/pam/identity/adapters/mock/mock-sms-adapter.js

@@ -0,0 +1,7 @@
+export class MockSmsAdapter {
+    async sendOtp({ to, code }) {
+        // mock: log-to-stdout delivery until a real SMS vendor adapter is bound via overlay.
+        console.log(`[SMS OTP] ${to}: ${code}`); // oxlint-disable-line no-console
+    }
+}
+//# sourceMappingURL=mock-sms-adapter.js.map

package/dist/pam/identity/adapters/mock/mock-sms-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-sms-adapter.js","sourceRoot":"","sources":["../../../../../src/pam/identity/adapters/mock/mock-sms-adapter.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAgC;QACtD,qFAAqF;QACrF,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,iCAAiC;IAC5E,CAAC;CACF"}

package/dist/pam/identity/admin-user-directory.d.ts

@@ -1,4 +1,4 @@
-import type { AdminUserDirectory, AdminUserListOptions } from '@openora/core/contracts';
+import type { AdminUserDirectory, AdminUserListOptions, ClientMeta, MailRecipientDirectory, PlayerIdSearchOptions } from '@openora/core/contracts';
 import { DrizzleService } from '@openora/core/server';
 import type { EventBus } from '@openora/core/server';
 export declare class DrizzleAdminUserDirectory implements AdminUserDirectory {
@@ -6,14 +6,15 @@ export declare class DrizzleAdminUserDirectory implements AdminUserDirectory {
     private readonly events;
     constructor(drizzle: DrizzleService, events: EventBus);
     count(): Promise<number>;
-    list({ page, limit, search }: AdminUserListOptions): Promise<{
+    list({ page, limit, search, sortBy, sortOrder }: AdminUserListOptions): Promise<{
         rows: {
             id: string;
             email: string;
             name: string;
             createdAt: Date;
             isActive: boolean;
-            role: "admin" | "player";
+            role: string;
+            language: string;
             failedLoginAttempts: number;
             lockoutUntil: Date | null;
         }[];
@@ -25,29 +26,70 @@ export declare class DrizzleAdminUserDirectory implements AdminUserDirectory {
         name: string;
         createdAt: Date;
         isActive: boolean;
-        role: "admin" | "player";
+        role: string;
+        language: string;
         failedLoginAttempts: number;
         lockoutUntil: Date | null;
     } | null>;
+    lookupUsers(userIds: readonly string[]): Promise<{
+        id: string;
+        email: string;
+        name: string;
+        createdAt: Date;
+        isActive: boolean;
+        role: string;
+        language: string;
+        failedLoginAttempts: number;
+        lockoutUntil: Date | null;
+    }[]>;
     update(id: string, patch: {
         isActive?: boolean;
         role?: string;
-    }, actorId: string): Promise<{
+    }, actorId: string, meta?: ClientMeta): Promise<{
         id: string;
         email: string;
         name: string;
         createdAt: Date;
         isActive: boolean;
-        role: "admin" | "player";
+        role: string;
+        language: string;
         failedLoginAttempts: number;
         lockoutUntil: Date | null;
     } | null>;
     lookupPlayers(userIds: readonly string[]): Promise<{
+        kycStatus: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden" | null;
+        playerId: string;
         userId: string;
         username: string;
         email: string;
-        kycStatus: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden" | null;
+        language: string;
+        avatarUrl: string | null;
+        createdAt: Date;
+        level: number;
+        currency: string;
     }[]>;
-    findPlayerIds(query: string): Promise<string[]>;
+    getPlayerByUsername(username: string): Promise<{
+        kycStatus: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden" | null;
+        playerId: string;
+        userId: string;
+        username: string;
+        email: string;
+        language: string;
+        avatarUrl: string | null;
+        createdAt: Date;
+        level: number;
+        currency: string;
+    } | null>;
+    findPlayerIds(query: string, limit?: number, options?: PlayerIdSearchOptions): Promise<string[]>;
+}
+export declare class DrizzleMailRecipientDirectory implements MailRecipientDirectory {
+    private readonly drizzle;
+    constructor(drizzle: DrizzleService);
+    getMailRecipient(userId: string): Promise<{
+        email: string;
+        language: string;
+        name: string;
+        antiPhishingCode: string | null;
+    }>;
 }
 //# sourceMappingURL=admin-user-directory.d.ts.map

package/dist/pam/identity/admin-user-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-user-directory.d.ts","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAExF,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAuBrD,qBAAa,yBAA0B,YAAW,kBAAkB;IAEhE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,QAAQ;IAG7B,KAAK;IAKL,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,oBAAoB;;;;;;;;;;;;;IAgBlD,GAAG,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;IAKd,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,EAAE,MAAM;;;;;;;;;;IA6BhF,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE;;;;;;IA8BxC,aAAa,CAAC,KAAK,EAAE,MAAM;CAoBlC"}
+{"version":3,"file":"admin-user-directory.d.ts","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAgB,MAAM,sBAAsB,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAsCrD,qBAAa,yBAA0B,YAAW,kBAAkB;IAEhE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,QAAQ;IAG7B,KAAK;IAKL,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,oBAAoB;;;;;;;;;;;;;;IAmCrE,GAAG,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;IAKd,WAAW,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE;;;;;;;;;;;IAWtC,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5C,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,UAAU;;;;;;;;;;;IAgCb,aAAa,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE;;;;;;;;;;;;IAkCxC,mBAAmB,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;;;;IA4BpC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAO,EAAE,OAAO,CAAC,EAAE,qBAAqB;CAsBjF;AAED,qBAAa,6BAA8B,YAAW,sBAAsB;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,cAAc;IAE9C,gBAAgB,CAAC,MAAM,EAAE,MAAM;;;;;;CAatC"}

package/dist/pam/identity/admin-user-directory.js

@@ -1,11 +1,12 @@
-import { KycStatusSchema, UserRoleSchema } from '@openora/core/contracts';
+import { KycStatusSchema, normalizeKycStatus, UuidSchema } from '@openora/core/contracts';
 import { pageToOffset } from '@openora/core/server';
-import { count, desc, eq, ilike, inArray } from 'drizzle-orm';
+import { asc, count, desc, eq, ilike, inArray, isNotNull, notInArray, or, sql, and, } from 'drizzle-orm';
 import { user } from './schema/index.js';
 // Read-only cross-domain read of the player/profile table via the public /schema
 // subpath (allowed per ADR-0020) so back-office lists can label players by
 // username + KYC without leaking the schema to the consumer module.
 import { player } from '@openora/core/pam/schema/profile';
+const escapeLikePattern = (value) => value.replaceAll(/[%_\\]/g, '\\$&');
 // Identity owns the `user` table, so it owns the admin directory port.
 // admin-console depends only on ADMIN_USER_DIRECTORY - never on this schema. See ADR-0017/0025.
 function toRow(r) {
@@ -15,7 +16,8 @@ function toRow(r) {
         name: r.name ?? null,
         createdAt: r.createdAt,
         isActive: r.isActive,
-        role: UserRoleSchema.parse(r.role),
+        role: r.role,
+        language: r.language ?? null,
         failedLoginAttempts: r.failedLoginAttempts,
         lockoutUntil: r.lockoutUntil,
     };
@@ -31,15 +33,31 @@ export class DrizzleAdminUserDirectory {
         const [r] = await this.drizzle.db.select({ n: count() }).from(user);
         return Number(r?.n ?? 0);
     }
-    async list({ page, limit, search }) {
+    async list({ page, limit, search, sortBy, sortOrder }) {
         const db = this.drizzle.db;
         const where = search ? ilike(user.email, `%${search}%`) : undefined;
+        const dir = (sortOrder ?? 'desc') === 'asc' ? asc : desc;
+        const USER_SORT_COLS = {
+            createdAt: user.createdAt,
+            email: user.email,
+            name: user.name,
+            role: user.role,
+            isActive: user.isActive,
+            lastLockoutAt: user.lastLockoutAt,
+        };
+        const col = USER_SORT_COLS[sortBy === 'email' ||
+            sortBy === 'name' ||
+            sortBy === 'role' ||
+            sortBy === 'isActive' ||
+            sortBy === 'lastLockoutAt'
+            ? sortBy
+            : 'createdAt'];
         const [rows, [{ n }]] = await Promise.all([
             db
                 .select()
                 .from(user)
                 .where(where)
-                .orderBy(desc(user.createdAt))
+                .orderBy(dir(col), desc(user.id))
                 .limit(limit)
                 .offset(pageToOffset(page, limit)),
             db.select({ n: count() }).from(user).where(where),
@@ -50,7 +68,17 @@ export class DrizzleAdminUserDirectory {
         const [r] = await this.drizzle.db.select().from(user).where(eq(user.id, id));
         return r ? toRow(r) : null;
     }
-    async update(id, patch, actorId) {
+    async lookupUsers(userIds) {
+        if (userIds.length === 0) {
+            return [];
+        }
+        const rows = await this.drizzle.db
+            .select()
+            .from(user)
+            .where(inArray(user.id, [...userIds]));
+        return rows.map(toRow);
+    }
+    async update(id, patch, actorId, meta) {
         const [existing] = await this.drizzle.db.select().from(user).where(eq(user.id, id));
         if (!existing) {
             return null;
@@ -69,11 +97,13 @@ export class DrizzleAdminUserDirectory {
         // Emit only on an actual active-status flip, after the commit. Literal topics
         // (not a ternary) so the catalog generator's emit-scanner picks them up.
         if (patch.isActive !== undefined && patch.isActive !== existing.isActive) {
+            const ip = meta?.ip ?? null;
+            const userAgent = meta?.userAgent ?? null;
             if (patch.isActive) {
-                this.events.emit('identity.user.reactivated', { userId: id, actorId });
+                this.events.emit('identity.user.reactivated', { userId: id, actorId, ip, userAgent });
             }
             else {
-                this.events.emit('identity.user.deactivated', { userId: id, actorId });
+                this.events.emit('identity.user.deactivated', { userId: id, actorId, ip, userAgent });
             }
         }
         return toRow(r);
@@ -84,48 +114,94 @@ export class DrizzleAdminUserDirectory {
         }
         const rows = await this.drizzle.db
             .select({
+            playerId: player.id,
             userId: player.userId,
-            username: player.displayName,
+            username: user.username,
             kycStatus: player.kycStatus,
             email: user.email,
+            language: user.language,
+            avatarUrl: user.image,
+            createdAt: player.createdAt,
+            level: player.level,
+            currency: player.currency,
         })
             .from(player)
             .innerJoin(user, eq(player.userId, user.id))
-            .where(inArray(player.userId, [...userIds]));
+            .where(and(inArray(player.userId, [...userIds]), eq(user.role, 'player')));
         return rows.map((r) => {
             // The player table stores kycStatus as free text; coerce unknown values to null
-            // so the port's KycStatus contract holds without a cast.
+            // so the port's KycStatus contract holds without a cast. Normalize the deprecated
+            // `verified` value to `approved` here - the single read boundary every admin
+            // consumer (wallet queue filter, tag evaluation, admin-console) goes through -
+            // so a legacy row is indistinguishable from a fresh one downstream.
             const kyc = KycStatusSchema.safeParse(r.kycStatus);
             return {
-                userId: r.userId,
-                username: r.username,
-                email: r.email,
-                kycStatus: kyc.success ? kyc.data : null,
+                ...r,
+                kycStatus: kyc.success ? normalizeKycStatus(kyc.data) : null,
             };
         });
     }
-    // Substring search is index-backed by the pg_trgm GIN indexes on user.email and
-    // player.display_name; the 1000 cap is a safety bound on the id set, not a perf
-    // crutch - it is effectively unreachable for a real admin search term.
-    async findPlayerIds(query) {
-        const term = `%${query}%`;
-        const cap = 1000;
-        const [byEmail, byName] = await Promise.all([
-            this.drizzle.db.select({ id: user.id }).from(user).where(ilike(user.email, term)).limit(cap),
-            this.drizzle.db
-                .select({ userId: player.userId })
-                .from(player)
-                .where(ilike(player.displayName, term))
-                .limit(cap),
-        ]);
-        const ids = new Set();
-        for (const r of byEmail) {
-            ids.add(r.id);
+    async getPlayerByUsername(username) {
+        const rows = await this.drizzle.db
+            .select({
+            playerId: player.id,
+            userId: player.userId,
+            username: user.username,
+            kycStatus: player.kycStatus,
+            email: user.email,
+            language: user.language,
+            avatarUrl: user.image,
+            createdAt: player.createdAt,
+            level: player.level,
+            currency: player.currency,
+        })
+            .from(player)
+            .innerJoin(user, eq(player.userId, user.id))
+            // Exact, case-insensitive match - ILIKE would let % and _ in `username` act as
+            // wildcards, letting a caller-supplied pattern select an arbitrary matching player.
+            .where(eq(sql `lower(${user.username})`, username.toLowerCase()))
+            .limit(1);
+        const [row] = rows;
+        if (!row) {
+            return null;
         }
-        for (const r of byName) {
-            ids.add(r.userId);
+        const kyc = KycStatusSchema.safeParse(row.kycStatus);
+        return { ...row, kycStatus: kyc.success ? normalizeKycStatus(kyc.data) : null };
+    }
+    async findPlayerIds(query, limit = 1000, options) {
+        const term = `%${escapeLikePattern(query)}%`;
+        const conditions = [ilike(user.email, term), ilike(user.username, term)];
+        if (UuidSchema.safeParse(query).success) {
+            conditions.push(eq(player.id, query), eq(player.userId, query));
         }
-        return [...ids].slice(0, cap);
+        const rows = await this.drizzle.db
+            .selectDistinct({ id: user.id })
+            .from(user)
+            .leftJoin(player, eq(player.userId, user.id))
+            .where(and(or(...conditions), options?.playerOnly ? and(eq(user.role, 'player'), isNotNull(player.id)) : undefined, options?.excludeUserIds?.length
+            ? notInArray(user.id, [...options.excludeUserIds])
+            : undefined))
+            .limit(limit);
+        return rows.map((r) => r.id);
+    }
+}
+export class DrizzleMailRecipientDirectory {
+    drizzle;
+    constructor(drizzle) {
+        this.drizzle = drizzle;
+    }
+    async getMailRecipient(userId) {
+        const [recipient] = await this.drizzle.db
+            .select({
+            email: user.email,
+            language: user.language,
+            name: user.name,
+            antiPhishingCode: user.antiPhishingCode,
+        })
+            .from(user)
+            .where(eq(user.id, userId))
+            .limit(1);
+        return recipient ?? null;
     }
 }
 //# sourceMappingURL=admin-user-directory.js.map

package/dist/pam/identity/admin-user-directory.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-user-directory.js","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,uEAAuE;AACvE,gGAAgG;AAChG,SAAS,KAAK,CAAC,CAA2B;IACxC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAEjB;IACA;IAFnB,YACmB,OAAuB,EACvB,MAAgB;QADhB,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;IAChC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAwB;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,EAAE;iBACC,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBAC7B,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA4C,EAAE,OAAe;QACpF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAsC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,gFAAgF;YAChF,yDAAyD;YACzD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aACzC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,gFAAgF;IAChF,uEAAuE;IACvE,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAC5F,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;iBACjC,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;iBACtC,KAAK,CAAC,GAAG,CAAC;SACd,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;CACF"}
+{"version":3,"file":"admin-user-directory.js","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAkB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EACL,GAAG,EACH,KAAK,EACL,IAAI,EACJ,EAAE,EACF,KAAK,EACL,OAAO,EACP,SAAS,EACT,UAAU,EACV,EAAE,EACF,GAAG,EACH,GAAG,GACJ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAEjF,uEAAuE;AACvE,gGAAgG;AAChG,SAAS,KAAK,CAAC,CAA2B;IACxC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAC5B,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAEjB;IACA;IAFnB,YACmB,OAAuB,EACvB,MAAgB;QADhB,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;IAChC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAwB;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,MAAM,cAAc,GAAG;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;SACzB,CAAC;QACX,MAAM,GAAG,GACP,cAAc,CACZ,MAAM,KAAK,OAAO;YAClB,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,UAAU;YACrB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,WAAW,CAChB,CAAC;QACJ,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,EAAE;iBACC,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;iBAChC,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA0B;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,KAA4C,EAC5C,OAAe,EACf,IAAiB;QAEjB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAsC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACzE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,gFAAgF;YAChF,kFAAkF;YAClF,6EAA6E;YAC7E,+EAA+E;YAC/E,oEAAoE;YACpE,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO;gBACL,GAAG,CAAC;gBACJ,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;aAC7D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5C,+EAA+E;YAC/E,oFAAoF;aACnF,KAAK,CAAC,EAAE,CAAC,GAAG,CAAA,SAAS,IAAI,CAAC,QAAQ,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;aAC/D,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,IAAI,EAAE,OAA+B;QAC9E,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC;QAC7C,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5C,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,GAAG,UAAU,CAAC,EACjB,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EACpF,OAAO,EAAE,cAAc,EAAE,MAAM;YAC7B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;YAClD,CAAC,CAAC,SAAS,CACd,CACF;aACA,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,OAAO,6BAA6B;IACX;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aACtC,MAAM,CAAC;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;aAC1B,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,OAAO,SAAS,IAAI,IAAI,CAAC;IAC3B,CAAC;CACF"}