@openora/core 0.4.1-canary.17 → 0.4.1-canary.170

package/dist/pam/identity/__tests__/identity.service.test.js

@@ -1,297 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { IdentityService, SESSION_DURATION_IN_SECONDS } from '../service/identity.service.js';
-import { UnsupportedLanguageError } from '../../shared/language.js';
-import { ORPCError } from '@orpc/server';
-const { signInEmailMock, getSessionMock, updateUserMock } = vi.hoisted(() => ({
-    signInEmailMock: vi.fn(),
-    getSessionMock: vi.fn().mockResolvedValue(null),
-    updateUserMock: vi.fn(),
-}));
-vi.mock('@openora/core/server', async (importOriginal) => ({
-    ...(await importOriginal()),
-    createAuth: vi.fn(() => ({
-        options: {
-            session: {
-                expiresIn: SESSION_DURATION_IN_SECONDS,
-            },
-        },
-        api: {
-            getSession: getSessionMock,
-            signUpEmail: vi.fn(),
-            signInEmail: signInEmailMock,
-            signOut: vi.fn(),
-            updateUser: updateUserMock,
-        },
-    })),
-}));
-function makeDrizzle({ selectRows = [], updateReturning = [] } = {}) {
-    const selectQueue = [...selectRows];
-    const returningQueue = [...updateReturning];
-    const update = vi.fn(() => ({
-        set: () => ({
-            where: () => Object.assign(Promise.resolve(undefined), {
-                returning: () => Promise.resolve(returningQueue.shift() ?? []),
-            }),
-        }),
-    }));
-    const select = vi.fn(() => ({
-        from: () => ({ where: () => ({ limit: () => Promise.resolve(selectQueue.shift() ?? []) }) }),
-    }));
-    return { db: { select, update }, update, select };
-}
-function makeEvents() {
-    return { emit: vi.fn(), on: vi.fn() };
-}
-function jsonResponse(body, status) {
-    return new Response(JSON.stringify(body), {
-        status,
-        headers: { 'content-type': 'application/json' },
-    });
-}
-const betterAuthUser = {
-    id: 'u1',
-    email: 'a@b.dev',
-    name: 'A',
-    emailVerified: true,
-    createdAt: '2020-01-01T00:00:00.000Z',
-    updatedAt: '2020-01-01T00:00:00.000Z',
-};
-beforeEach(() => {
-    vi.clearAllMocks();
-    getSessionMock.mockResolvedValue(null);
-});
-describe('IdentityService - SendEmailPort seam', () => {
-    it('constructs without a SendEmailPort (email delivery silently skipped)', () => {
-        const svc = new IdentityService({
-            drizzle: makeDrizzle(),
-            events: makeEvents(),
-        });
-        expect(svc).toBeInstanceOf(IdentityService);
-    });
-    it('constructs with a stub SendEmailPort and exposes it for use', () => {
-        const stub = { send: vi.fn().mockResolvedValue(undefined) };
-        const svc = new IdentityService({
-            drizzle: makeDrizzle(),
-            events: makeEvents(),
-            email: stub,
-        });
-        expect(svc).toBeInstanceOf(IdentityService);
-    });
-    it('me returns null when no session exists', async () => {
-        const svc = new IdentityService({
-            drizzle: makeDrizzle(),
-            events: makeEvents(),
-        });
-        const result = await svc.me({});
-        expect(result).toBeNull();
-    });
-});
-describe('IdentityService - login lockout', () => {
-    it('locks the account once failed attempts reach the threshold and emits lockout.triggered', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [[{ id: 'u1', failedLoginAttempts: 4, lockoutUntil: null }]],
-            updateReturning: [[{ failedLoginAttempts: 5 }]],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        await expect(svc.login({ email: 'A@B.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
-        expect(events.emit).toHaveBeenCalledWith('identity.user.lockout.triggered', expect.objectContaining({ userId: 'u1', email: 'a@b.dev' }));
-    });
-    it('emits login.failed (not lockout) while still below the threshold', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [[{ id: 'u1', failedLoginAttempts: 0, lockoutUntil: null }]],
-            updateReturning: [[{ failedLoginAttempts: 1 }]],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        await expect(svc.login({ email: 'a@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
-        expect(events.emit).toHaveBeenCalledWith('identity.user.login.failed', expect.objectContaining({ email: 'a@b.dev', reason: 'invalid_credentials' }));
-        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
-    });
-    it('rejects a currently-locked account before attempting sign-in', async () => {
-        const future = new Date(Date.now() + 60_000);
-        const drizzle = makeDrizzle({
-            selectRows: [[{ id: 'u1', failedLoginAttempts: 5, lockoutUntil: future }]],
-        });
-        const svc = new IdentityService({ drizzle: drizzle, events: makeEvents() });
-        const promise = svc.login({ email: 'a@b.dev', password: 'whatever1' }, {}, new Headers());
-        await expect(promise).rejects.toThrow(ORPCError);
-        await expect(promise).rejects.toMatchObject({
-            code: 'UNAUTHORIZED',
-            message: 'Account is temporarily locked. Please try again later.',
-            data: {
-                code: 'ACCOUNT_LOCKED',
-                lockoutUntil: future.toISOString(),
-            },
-        });
-        expect(signInEmailMock).not.toHaveBeenCalled();
-    });
-    it('clears the counter and emits login on success', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [[{ id: 'u1', failedLoginAttempts: 2, lockoutUntil: null }]],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ user: betterAuthUser, token: 'tok', session: { expiresAt: '2020-02-01T00:00:00.000Z' } }, 200));
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        const result = await svc.login({ email: 'a@b.dev', password: 'rightpass1' }, {}, new Headers());
-        expect(result).toMatchObject({ session: { token: 'tok' } });
-        expect(events.emit).toHaveBeenCalledWith('identity.user.login', expect.objectContaining({ userId: 'u1' }));
-        expect(drizzle.update).toHaveBeenCalled();
-    });
-    it('bypasses lockout for admins if configured with bypassForAdmins: true', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [[{ id: 'u1', failedLoginAttempts: 4, lockoutUntil: null, role: 'admin' }]],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
-        const svc = new IdentityService({
-            drizzle: drizzle,
-            events: events,
-            options: {
-                lockout: {
-                    enabled: true,
-                    bypassForAdmins: true,
-                },
-            },
-        });
-        await expect(svc.login({ email: 'admin@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
-        // It should not increment the failed attempts or trigger lockout
-        expect(drizzle.update).not.toHaveBeenCalled();
-        expect(events.emit).toHaveBeenCalledWith('identity.user.login.failed', expect.objectContaining({ email: 'admin@b.dev' }));
-        expect(events.emit).not.toHaveBeenCalledWith('identity.user.lockout.triggered', expect.anything());
-    });
-    it('does not bypass lockout for other backoffice roles if bypassForAdmins is true', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [
-                [{ id: 'u1', failedLoginAttempts: 4, lockoutUntil: null, role: 'support' }],
-                [{ failedLoginAttempts: 5 }],
-            ],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ message: 'Invalid' }, 401));
-        const svc = new IdentityService({
-            drizzle: drizzle,
-            events: events,
-            options: {
-                lockout: {
-                    enabled: true,
-                    bypassForAdmins: true,
-                    maxAttempts: 5,
-                },
-            },
-        });
-        await expect(svc.login({ email: 'support@b.dev', password: 'wrongpass1' }, {}, new Headers())).rejects.toThrow();
-        // It should increment the failed attempts and trigger lockout
-        expect(drizzle.update).toHaveBeenCalled();
-        expect(events.emit).toHaveBeenCalledWith('identity.user.lockout.triggered', expect.objectContaining({ userId: 'u1', email: 'support@b.dev' }));
-    });
-});
-describe('IdentityService - RG login gate', () => {
-    it('blocks a self-excluded login AFTER credentials verify and emits rg.exclusion.login_blocked', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [
-                [
-                    {
-                        id: 'u1',
-                        failedLoginAttempts: 0,
-                        lockoutUntil: null,
-                        rgBlocked: true,
-                        rgBlockedUntil: null,
-                    },
-                ],
-            ],
-        });
-        const events = makeEvents();
-        // Valid credentials (200) - the gate must still block.
-        signInEmailMock.mockResolvedValue(jsonResponse({ user: betterAuthUser, token: 'tok', session: {} }, 200));
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        await expect(svc.login({ email: 'a@b.dev', password: 'rightpass1' }, {}, new Headers())).rejects.toMatchObject({ code: 'FORBIDDEN' });
-        expect(signInEmailMock).toHaveBeenCalled();
-        expect(events.emit).toHaveBeenCalledWith('rg.exclusion.login_blocked', expect.objectContaining({ userId: 'u1' }));
-        expect(events.emit).not.toHaveBeenCalledWith('identity.user.login', expect.anything());
-        expect(events.emit).not.toHaveBeenCalledWith('identity.user.login.failed', expect.anything());
-        // The just-issued session is revoked.
-        expect(drizzle.update).toHaveBeenCalled();
-    });
-    it('allows login once a lapsed cooling-off block has elapsed', async () => {
-        const past = new Date(Date.now() - 60_000);
-        const drizzle = makeDrizzle({
-            selectRows: [
-                [
-                    {
-                        id: 'u1',
-                        failedLoginAttempts: 0,
-                        lockoutUntil: null,
-                        rgBlocked: true,
-                        rgBlockedUntil: past,
-                    },
-                ],
-            ],
-        });
-        const events = makeEvents();
-        signInEmailMock.mockResolvedValue(jsonResponse({ user: betterAuthUser, token: 'tok', session: {} }, 200));
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        const result = await svc.login({ email: 'a@b.dev', password: 'rightpass1' }, {}, new Headers());
-        expect(result).toMatchObject({ session: { token: 'tok' } });
-        expect(events.emit).toHaveBeenCalledWith('identity.user.login', expect.objectContaining({ userId: 'u1' }));
-        expect(events.emit).not.toHaveBeenCalledWith('rg.exclusion.login_blocked', expect.anything());
-    });
-});
-describe('IdentityService - unlockUser', () => {
-    it('clears the lockout and emits unlocked with the prior state', async () => {
-        const drizzle = makeDrizzle({
-            selectRows: [
-                [
-                    {
-                        id: 'u1',
-                        email: 'a@b.dev',
-                        failedLoginAttempts: 5,
-                        lockoutUntil: new Date('2020-01-01T00:00:00.000Z'),
-                    },
-                ],
-            ],
-        });
-        const events = makeEvents();
-        const svc = new IdentityService({ drizzle: drizzle, events: events });
-        const res = await svc.unlockUser('u1', 'admin1');
-        expect(res).toEqual({ success: true });
-        expect(drizzle.update).toHaveBeenCalled();
-        expect(events.emit).toHaveBeenCalledWith('identity.user.unlocked', expect.objectContaining({
-            userId: 'u1',
-            actorId: 'admin1',
-            previousFailedAttempts: 5,
-            previousLockoutUntil: '2020-01-01T00:00:00.000Z',
-        }));
-    });
-    it('throws when the user does not exist', async () => {
-        const drizzle = makeDrizzle({ selectRows: [[]] });
-        const svc = new IdentityService({ drizzle: drizzle, events: makeEvents() });
-        await expect(svc.unlockUser('missing', 'admin1')).rejects.toThrow();
-    });
-});
-describe('IdentityService.updateProfile language validation', () => {
-    it('rejects an unsupported language before calling updateUser', async () => {
-        const svc = new IdentityService({
-            drizzle: makeDrizzle(),
-            events: makeEvents(),
-            platformConfig: { supportedLanguages: ['en', 'fr'] },
-        });
-        await expect(svc.updateProfile({ language: 'de' }, {}, new Headers())).rejects.toThrow(UnsupportedLanguageError);
-        expect(updateUserMock).not.toHaveBeenCalled();
-    });
-    it('accepts a supported language and forwards it to updateUser', async () => {
-        updateUserMock.mockResolvedValue(jsonResponse({ status: true }, 200));
-        getSessionMock.mockResolvedValueOnce({ user: { ...betterAuthUser, language: 'fr' } });
-        const svc = new IdentityService({
-            drizzle: makeDrizzle(),
-            events: makeEvents(),
-            platformConfig: { supportedLanguages: ['en', 'fr'] },
-        });
-        const result = await svc.updateProfile({ language: 'fr' }, {}, new Headers());
-        expect(updateUserMock).toHaveBeenCalledWith(expect.objectContaining({ body: expect.objectContaining({ language: 'fr' }) }));
-        expect(result.user.language).toBe('fr');
-    });
-});
-//# sourceMappingURL=identity.service.test.js.map

package/dist/pam/identity/__tests__/identity.service.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity.service.test.js","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/identity.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5E,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;CACxB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC;IACnC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE;YACP,OAAO,EAAE;gBACP,SAAS,EAAE,2BAA2B;aACvC;SACF;QACD,GAAG,EAAE;YACH,UAAU,EAAE,cAAc;YAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE;YACpB,WAAW,EAAE,eAAe;YAC5B,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;YAChB,UAAU,EAAE,cAAc;SAC3B;KACF,CAAC,CAAC;CACJ,CAAC,CAAC,CAAC;AAIJ,SAAS,WAAW,CAAC,EAAE,UAAU,GAAG,EAAE,EAAE,eAAe,GAAG,EAAE,KAAkB,EAAE;IAC9E,MAAM,WAAW,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IACpC,MAAM,cAAc,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1B,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACV,KAAK,EAAE,GAAG,EAAE,CACV,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;gBACxC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;aAC/D,CAAC;SACL,CAAC;KACH,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1B,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KAC7F,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,MAAc;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG;IACrB,EAAE,EAAE,IAAI;IACR,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,GAAG;IACT,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,0BAA0B;IACrC,SAAS,EAAE,0BAA0B;CACtC,CAAC;AAEF,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,WAAW,EAAW;YAC/B,MAAM,EAAE,UAAU,EAAW;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAkB,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,WAAW,EAAW;YAC/B,MAAM,EAAE,UAAU,EAAW;YAC7B,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,WAAW,EAAW;YAC/B,MAAM,EAAE,UAAU,EAAW;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,eAAe,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,iCAAiC,EACjC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,eAAe,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAC7E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;SAC3E,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,UAAU,EAAW,EAAE,CAAC,CAAC;QAE9F,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAC1F,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE;gBACJ,IAAI,EAAE,gBAAgB;gBACtB,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE;aACnC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;SACzE,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAC/B,YAAY,CACV,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,EAAE,EAC1F,GAAG,CACJ,CACF,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAEhG,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,OAAgB;YACzB,MAAM,EAAE,MAAe;YACvB,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,IAAI;iBACtB;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC/E,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,iEAAiE;QACjE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAClD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAC1C,iCAAiC,EACjC,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE;gBACV,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC3E,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;aAC7B;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,OAAgB;YACzB,MAAM,EAAE,MAAe;YACvB,OAAO,EAAE;gBACP,OAAO,EAAE;oBACP,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,IAAI;oBACrB,WAAW,EAAE,CAAC;iBACf;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CACjF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAEpB,8DAA8D;QAC9D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,iCAAiC,EACjC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE;gBACV;oBACE;wBACE,EAAE,EAAE,IAAI;wBACR,mBAAmB,EAAE,CAAC;wBACtB,YAAY,EAAE,IAAI;wBAClB,SAAS,EAAE,IAAI;wBACf,cAAc,EAAE,IAAI;qBACrB;iBACF;aACF;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,uDAAuD;QACvD,eAAe,CAAC,iBAAiB,CAC/B,YAAY,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CACvE,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,CACV,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,4BAA4B,EAC5B,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9F,sCAAsC;QACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE;gBACV;oBACE;wBACE,EAAE,EAAE,IAAI;wBACR,mBAAmB,EAAE,CAAC;wBACtB,YAAY,EAAE,IAAI;wBAClB,SAAS,EAAE,IAAI;wBACf,cAAc,EAAE,IAAI;qBACrB;iBACF;aACF;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAC/B,YAAY,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CACvE,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAEhG,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,qBAAqB,EACrB,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC1C,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,WAAW,CAAC;YAC1B,UAAU,EAAE;gBACV;oBACE;wBACE,EAAE,EAAE,IAAI;wBACR,KAAK,EAAE,SAAS;wBAChB,mBAAmB,EAAE,CAAC;wBACtB,YAAY,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;qBACnD;iBACF;aACF;SACF,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC;QAExF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACtC,wBAAwB,EACxB,MAAM,CAAC,gBAAgB,CAAC;YACtB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,QAAQ;YACjB,sBAAsB,EAAE,CAAC;YACzB,oBAAoB,EAAE,0BAA0B;SACjD,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAgB,EAAE,MAAM,EAAE,UAAU,EAAW,EAAE,CAAC,CAAC;QAC9F,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,WAAW,EAAW;YAC/B,MAAM,EAAE,UAAU,EAAW;YAC7B,cAAc,EAAE,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAW;SAC9D,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACpF,wBAAwB,CACzB,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QACtE,cAAc,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC;YAC9B,OAAO,EAAE,WAAW,EAAW;YAC/B,MAAM,EAAE,UAAU,EAAW;YAC7B,cAAc,EAAE,EAAE,kBAAkB,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAW;SAC9D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QAE9E,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAC/E,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/identity/__tests__/login-enforcement.service.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=login-enforcement.service.test.d.ts.map

package/dist/pam/identity/__tests__/login-enforcement.service.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-enforcement.service.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/login-enforcement.service.test.ts"],"names":[],"mappings":""}

package/dist/pam/identity/__tests__/login-enforcement.service.test.js

@@ -1,41 +0,0 @@
-import { describe, it, expect, vi } from 'vitest';
-import { mock, mockDb } from '../../../testing/mock.js';
-import { LoginEnforcementService } from '../service/login-enforcement.service.js';
-function captureDb() {
-    const sets = [];
-    const db = {
-        update: () => ({
-            set: (s) => {
-                sets.push(s);
-                return { where: () => Promise.resolve(undefined) };
-            },
-        }),
-    };
-    return { drizzle: mockDb(db), sets };
-}
-function makeSessions() {
-    return mock({ revokeAllSessions: vi.fn().mockResolvedValue({ success: true }) });
-}
-describe('LoginEnforcementService', () => {
-    it('block sets the RG columns and revokes all sessions', async () => {
-        const { drizzle, sets } = captureDb();
-        const sessions = makeSessions();
-        const until = new Date('2026-08-01T00:00:00.000Z');
-        await new LoginEnforcementService(drizzle, sessions).block('u1', { until });
-        expect(sets[0]).toEqual({ rgBlocked: true, rgBlockedUntil: until });
-        expect(sessions.revokeAllSessions).toHaveBeenCalledWith('u1');
-    });
-    it('block with until:null sets an indefinite block', async () => {
-        const { drizzle, sets } = captureDb();
-        await new LoginEnforcementService(drizzle, makeSessions()).block('u1', { until: null });
-        expect(sets[0]).toEqual({ rgBlocked: true, rgBlockedUntil: null });
-    });
-    it('unblock clears the RG columns', async () => {
-        const { drizzle, sets } = captureDb();
-        const sessions = makeSessions();
-        await new LoginEnforcementService(drizzle, sessions).unblock('u1');
-        expect(sets[0]).toEqual({ rgBlocked: false, rgBlockedUntil: null });
-        expect(sessions.revokeAllSessions).not.toHaveBeenCalled();
-    });
-});
-//# sourceMappingURL=login-enforcement.service.test.js.map

package/dist/pam/identity/__tests__/login-enforcement.service.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-enforcement.service.test.js","sourceRoot":"","sources":["../../../../src/pam/identity/__tests__/login-enforcement.service.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAGlF,SAAS,SAAS;IAChB,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG;QACT,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACb,GAAG,EAAE,CAAC,CAAU,EAAE,EAAE;gBAClB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,CAAC;SACF,CAAC;KACH,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAmB,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAiB,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/player-management/__tests__/kyc-status-writer.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=kyc-status-writer.test.d.ts.map

package/dist/pam/player-management/__tests__/kyc-status-writer.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kyc-status-writer.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/player-management/__tests__/kyc-status-writer.test.ts"],"names":[],"mappings":""}

package/dist/pam/player-management/__tests__/kyc-status-writer.test.js

@@ -1,38 +0,0 @@
-import { describe, it, expect, vi } from 'vitest';
-import { PlayerKycStatusWriter } from '../service/kyc-status-writer.js';
-import { mock, mockDb } from '../../../testing/mock.js';
-function makeDb(selectResult) {
-    const builder = new Proxy(function () { }, {
-        get(_t, prop) {
-            if (prop === 'then') {
-                return (res) => res(selectResult);
-            }
-            return () => builder;
-        },
-        apply: () => builder,
-    });
-    return mockDb(builder);
-}
-function makeWriter(selectResult) {
-    const events = { emit: vi.fn(), on: vi.fn() };
-    const writer = new PlayerKycStatusWriter(makeDb(selectResult), mock(events));
-    return { writer, events };
-}
-describe('PlayerKycStatusWriter.setStatus', () => {
-    it('writes player.kycStatus and emits compliance.kyc.updated on a real change', async () => {
-        const { writer, events } = makeWriter([{ kycStatus: 'pending' }]);
-        await writer.setStatus('u-1', 'verified', { actorId: 'admin-1', source: 'manual' });
-        expect(events.emit).toHaveBeenCalledWith('compliance.kyc.updated', {
-            userId: 'u-1',
-            actorId: 'admin-1',
-            status: 'verified',
-            previousStatus: 'pending',
-        });
-    });
-    it('is a no-op when the status is unchanged', async () => {
-        const { writer, events } = makeWriter([{ kycStatus: 'verified' }]);
-        await writer.setStatus('u-1', 'verified', { actorId: null, source: 'vendor' });
-        expect(events.emit).not.toHaveBeenCalled();
-    });
-});
-//# sourceMappingURL=kyc-status-writer.test.js.map

package/dist/pam/player-management/__tests__/kyc-status-writer.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kyc-status-writer.test.js","sourceRoot":"","sources":["../../../../src/pam/player-management/__tests__/kyc-status-writer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAExD,SAAS,MAAM,CAAC,YAAqB;IACnC,MAAM,OAAO,GAAY,IAAI,KAAK,CAAC,cAAa,CAAC,EAAE;QACjD,GAAG,CAAC,EAAE,EAAE,IAAI;YACV,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,GAA4B,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO;KACrB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,YAAqB;IACvC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,CAAW,MAAM,CAAC,CAAC,CAAC;IACvF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,EAAE;YACjE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,UAAU;YAClB,cAAc,EAAE,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/player-management/__tests__/player.router.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=player.router.test.d.ts.map

package/dist/pam/player-management/__tests__/player.router.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"player.router.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/player-management/__tests__/player.router.test.ts"],"names":[],"mappings":""}

package/dist/pam/player-management/__tests__/player.router.test.js

@@ -1,57 +0,0 @@
-import { describe, it, expect, vi } from 'vitest';
-import { mock } from '../../../testing/mock.js';
-import { call, ORPCError } from '@orpc/server';
-import { createPlayerRouter } from '../router/index.js';
-const CTX = { request: { headers: {} } };
-const PLAYER_ID = '63d3c264-3bf4-4d08-9b92-ea3eaf40a440';
-function fakeGuard(allowed) {
-    return mock({
-        assert: vi.fn(async (_ctx, resource, action) => {
-            if (resource && action && !allowed.includes(`${resource}:${action}`)) {
-                throw new ORPCError('FORBIDDEN', { message: `Missing permission: ${resource}:${action}` });
-            }
-            return { userId: 'admin-1', role: 'admin' };
-        }),
-    });
-}
-function fakeService() {
-    const playerDto = {
-        id: PLAYER_ID,
-        userId: PLAYER_ID,
-        displayName: 'Player',
-        email: 'p@example.com',
-        country: 'MT',
-        currency: 'EUR',
-        status: 'active',
-        kycStatus: 'verified',
-        level: 1,
-        totalWagered: '0',
-        totalDeposits: '0',
-        lastSeenAt: null,
-        createdAt: '2026-01-01T00:00:00.000Z',
-        updatedAt: '2026-01-01T00:00:00.000Z',
-        tags: [],
-    };
-    return mock({ update: vi.fn().mockResolvedValue(playerDto) });
-}
-describe('player router update KYC authz', () => {
-    it('rejects a kycStatus change without compliance:override-limit', async () => {
-        const svc = fakeService();
-        const router = createPlayerRouter(svc, fakeGuard(['player:update']));
-        await expect(call(router.update, { playerId: PLAYER_ID, kycStatus: 'verified' }, { context: CTX })).rejects.toBeInstanceOf(ORPCError);
-        expect(svc.update).not.toHaveBeenCalled();
-    });
-    it('allows a kycStatus change with the compliance gate', async () => {
-        const svc = fakeService();
-        const router = createPlayerRouter(svc, fakeGuard(['player:update', 'compliance:override-limit']));
-        await call(router.update, { playerId: PLAYER_ID, kycStatus: 'verified' }, { context: CTX });
-        expect(svc.update).toHaveBeenCalledWith(PLAYER_ID, expect.objectContaining({ kycStatus: 'verified' }), 'admin-1');
-    });
-    it('allows a non-KYC update with only player:update', async () => {
-        const svc = fakeService();
-        const router = createPlayerRouter(svc, fakeGuard(['player:update']));
-        await call(router.update, { playerId: PLAYER_ID, displayName: 'New' }, { context: CTX });
-        expect(svc.update).toHaveBeenCalledOnce();
-    });
-});
-//# sourceMappingURL=player.router.test.js.map

package/dist/pam/player-management/__tests__/player.router.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"player.router.test.js","sourceRoot":"","sources":["../../../../src/pam/player-management/__tests__/player.router.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;AACzC,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,SAAS,SAAS,CAAC,OAA6C;IAC9D,OAAO,IAAI,CAAa;QACtB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,QAAiB,EAAE,MAAe,EAAE,EAAE;YACxE,IAAI,QAAQ,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,uBAAuB,QAAQ,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC9C,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,SAAS,GAAG;QAChB,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,QAAQ;QACrB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,UAAU;QACrB,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,GAAG;QACjB,aAAa,EAAE,GAAG;QAClB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,0BAA0B;QACrC,SAAS,EAAE,0BAA0B;QACrC,IAAI,EAAE,EAAE;KACT,CAAC;IACF,OAAO,IAAI,CAAgB,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,CACV,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CACtF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,kBAAkB,CAC/B,GAAG,EACH,SAAS,CAAC,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC,CAC1D,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,CACrC,SAAS,EACT,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAClD,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pam/player-management/__tests__/player.service.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=player.service.test.d.ts.map

package/dist/pam/player-management/__tests__/player.service.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"player.service.test.d.ts","sourceRoot":"","sources":["../../../../src/pam/player-management/__tests__/player.service.test.ts"],"names":[],"mappings":""}