@openora/core 0.4.1-canary.18 → 0.4.1-canary.181

package/dist/contracts/adapters/email-template.d.ts

@@ -0,0 +1,12 @@
+import { type Token } from './token.js';
+import type { MailTemplate } from '../schemas/mail.js';
+export type RenderedEmail = {
+    subject: string;
+    html: string;
+    text: string;
+};
+export type EmailTemplateRenderer = {
+    render(template: MailTemplate, locale: string, recipientName?: string | null, antiPhishingCode?: string | null): Promise<RenderedEmail> | RenderedEmail;
+};
+export declare const EMAIL_TEMPLATE_RENDERER: Token<EmailTemplateRenderer>;
+//# sourceMappingURL=email-template.d.ts.map

package/dist/contracts/adapters/email-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/email-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CACJ,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,EAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;CAC3C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CACF,CAAC"}

package/dist/contracts/adapters/email-template.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const EMAIL_TEMPLATE_RENDERER = createToken('EMAIL_TEMPLATE_RENDERER');
+//# sourceMappingURL=email-template.js.map

package/dist/contracts/adapters/email-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-template.js","sourceRoot":"","sources":["../../../src/contracts/adapters/email-template.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAcrD,MAAM,CAAC,MAAM,uBAAuB,GAClC,WAAW,CAAwB,yBAAyB,CAAC,CAAC"}

package/dist/contracts/adapters/error-tracking.d.ts

@@ -0,0 +1,12 @@
+import { type Token } from './token.js';
+export type ErrorContext = {
+    userId?: string;
+    traceId?: string;
+    tags?: Record<string, string>;
+    extra?: Record<string, unknown>;
+};
+export type ErrorTrackingAdapter = {
+    captureException(error: unknown, context?: ErrorContext): void;
+};
+export declare const ERROR_TRACKING: Token<ErrorTrackingAdapter>;
+//# sourceMappingURL=error-tracking.d.ts.map

package/dist/contracts/adapters/error-tracking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAChE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,oBAAoB,CACF,CAAC"}

package/dist/contracts/adapters/error-tracking.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const ERROR_TRACKING = createToken('ERROR_TRACKING');
+//# sourceMappingURL=error-tracking.js.map

package/dist/contracts/adapters/error-tracking.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-tracking.js","sourceRoot":"","sources":["../../../src/contracts/adapters/error-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,cAAc,GACzB,WAAW,CAAuB,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/exchange-rate-provider.d.ts

@@ -0,0 +1,14 @@
+import { type Token } from './token.js';
+/** `rate` is a decimal string. `asOf` is the ISO timestamp the vendor attached to the quote, not when it was called. */
+export type ExchangeRateQuote = {
+    rate: string;
+    asOf: string;
+};
+/** Returns `null` when the vendor has no quote for the pair; a thrown error means the call itself failed. */
+export type ExchangeRateProvider = {
+    getRate(from: string, to: string): Promise<ExchangeRateQuote | null>;
+};
+/** Both bindings are optional; an operator who binds neither gets `EXCHANGE_RATE_READER` always resolving `null`. */
+export declare const CRYPTO_EXCHANGE_RATE_PROVIDER: Token<ExchangeRateProvider>;
+export declare const FIAT_EXCHANGE_RATE_PROVIDER: Token<ExchangeRateProvider>;
+//# sourceMappingURL=exchange-rate-provider.d.ts.map

package/dist/contracts/adapters/exchange-rate-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-rate-provider.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/exchange-rate-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,wHAAwH;AACxH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,6GAA6G;AAC7G,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;CACtE,CAAC;AAEF,qHAAqH;AACrH,eAAO,MAAM,6BAA6B,EAAE,KAAK,CAAC,oBAAoB,CAErE,CAAC;AACF,eAAO,MAAM,2BAA2B,EAAE,KAAK,CAAC,oBAAoB,CAEnE,CAAC"}

package/dist/contracts/adapters/exchange-rate-provider.js

@@ -0,0 +1,5 @@
+import { createToken } from './token.js';
+/** Both bindings are optional; an operator who binds neither gets `EXCHANGE_RATE_READER` always resolving `null`. */
+export const CRYPTO_EXCHANGE_RATE_PROVIDER = createToken('CRYPTO_EXCHANGE_RATE_PROVIDER');
+export const FIAT_EXCHANGE_RATE_PROVIDER = createToken('FIAT_EXCHANGE_RATE_PROVIDER');
+//# sourceMappingURL=exchange-rate-provider.js.map

package/dist/contracts/adapters/exchange-rate-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-rate-provider.js","sourceRoot":"","sources":["../../../src/contracts/adapters/exchange-rate-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,qHAAqH;AACrH,MAAM,CAAC,MAAM,6BAA6B,GAAgC,WAAW,CACnF,+BAA+B,CAChC,CAAC;AACF,MAAM,CAAC,MAAM,2BAA2B,GAAgC,WAAW,CACjF,6BAA6B,CAC9B,CAAC"}

package/dist/contracts/adapters/exchange-rate-reader.d.ts

@@ -0,0 +1,16 @@
+import { type Token } from './token.js';
+import type { ExchangeRateQuote } from './exchange-rate-provider.js';
+/**
+ * Read-through cache: a fresh stored quote answers with no vendor call; a soft-stale one
+ * answers immediately and refreshes in the background; a hard-stale or missing one is
+ * fetched from `CRYPTO_EXCHANGE_RATE_PROVIDER`/`FIAT_EXCHANGE_RATE_PROVIDER` synchronously,
+ * bounded by a timeout, before answering. Fails closed to `null` - never throws, never
+ * blocks past its configured timeout.
+ */
+export type ExchangeRateReader = {
+    getRate(from: string, to: string): Promise<ExchangeRateQuote | null>;
+    /** `amount * rate(from, to)`, or `null` when no rate is available. */
+    convert(amount: string, from: string, to: string): Promise<string | null>;
+};
+export declare const EXCHANGE_RATE_READER: Token<ExchangeRateReader>;
+//# sourceMappingURL=exchange-rate-reader.d.ts.map

package/dist/contracts/adapters/exchange-rate-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-rate-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/exchange-rate-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACrE,sEAAsE;IACtE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,kBAAkB,CAAuC,CAAC"}

package/dist/contracts/adapters/exchange-rate-reader.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const EXCHANGE_RATE_READER = createToken('EXCHANGE_RATE_READER');
+//# sourceMappingURL=exchange-rate-reader.js.map

package/dist/contracts/adapters/exchange-rate-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-rate-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/exchange-rate-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAgBrD,MAAM,CAAC,MAAM,oBAAoB,GAA8B,WAAW,CAAC,sBAAsB,CAAC,CAAC"}

package/dist/contracts/adapters/game-catalog-reader.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Read-only view of the casino catalog for code outside the gaming module (overlay lobby
+ * sections, promotions), so it never re-implements the playability rule over the gaming tables.
+ * "Playable" means the game and its provider are both active and the vendor has not marked the
+ * game unavailable. Every method is batched; an id that is unknown, unplayable, inactive or not
+ * a UUID is simply absent from the result, and a map keyed by the given ids iterates in the
+ * order those ids were passed.
+ */
+import { type Token } from './token.js';
+import type { PageQuery, Paginated } from '../kit.js';
+import type { GameCategorySummary, GameCategorySummaryWithTranslations, GameProviderSummary } from '../schemas/game.js';
+export type CatalogGame = {
+    id: string;
+    name: string;
+    slug: string;
+    provider: GameProviderSummary;
+    thumbnailUrl: string | null;
+};
+export type CatalogCategoryWithGameCount = GameCategorySummaryWithTranslations & {
+    gameCount: number;
+};
+export type GameCatalogReader = {
+    getPlayableGames(gameIds: CatalogGame['id'][]): Promise<Map<CatalogGame['id'], CatalogGame>>;
+    /** Ordered by name. Empty when the category is inactive or `limit` is below 1. */
+    listPlayableGamesInCategory(categoryId: GameCategorySummary['id'], opts: {
+        limit: number;
+    }): Promise<CatalogGame[]>;
+    /** `gameCount` is present only with `withGameCount: true` and counts playable games only, so it can be 0. */
+    getActiveCategories(categoryIds: GameCategorySummary['id'][], opts?: {
+        withGameCount?: boolean;
+    }): Promise<Map<GameCategorySummary['id'], GameCategorySummaryWithTranslations | CatalogCategoryWithGameCount>>;
+    /** Active category ids per game, whatever the game's own playability. A game in no active category is absent. */
+    getCategoryIdsByGame(gameIds: CatalogGame['id'][]): Promise<Map<CatalogGame['id'], Set<GameCategorySummary['id']>>>;
+    /** Ordered by sortOrder then name; `gameCount` counts playable games only, so it can be 0. */
+    listActiveCategoriesWithGameCount(opts: PageQuery): Promise<Paginated<CatalogCategoryWithGameCount>>;
+    getActiveProviders(providerIds: GameProviderSummary['id'][]): Promise<Map<GameProviderSummary['id'], GameProviderSummary>>;
+    /** Ordered by name. */
+    listActiveProviders(opts: PageQuery): Promise<Paginated<GameProviderSummary>>;
+};
+export declare const GAME_CATALOG_READER: Token<GameCatalogReader>;
+//# sourceMappingURL=game-catalog-reader.d.ts.map

package/dist/contracts/adapters/game-catalog-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-catalog-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game-catalog-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EACV,mBAAmB,EACnB,mCAAmC,EACnC,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,mCAAmC,GAAG;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7F,kFAAkF;IAClF,2BAA2B,CACzB,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,EACrC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GACtB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1B,6GAA6G;IAC7G,mBAAmB,CACjB,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,EACxC,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACjC,OAAO,CACR,GAAG,CACD,mBAAmB,CAAC,IAAI,CAAC,EACzB,mCAAmC,GAAG,4BAA4B,CACnE,CACF,CAAC;IACF,iHAAiH;IACjH,oBAAoB,CAClB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,GAC3B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,8FAA8F;IAC9F,iCAAiC,CAC/B,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACpD,kBAAkB,CAChB,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,GACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChE,uBAAuB;IACvB,mBAAmB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC;CAC/E,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,iBAAiB,CAAsC,CAAC"}

package/dist/contracts/adapters/game-catalog-reader.js

@@ -0,0 +1,11 @@
+/**
+ * Read-only view of the casino catalog for code outside the gaming module (overlay lobby
+ * sections, promotions), so it never re-implements the playability rule over the gaming tables.
+ * "Playable" means the game and its provider are both active and the vendor has not marked the
+ * game unavailable. Every method is batched; an id that is unknown, unplayable, inactive or not
+ * a UUID is simply absent from the result, and a map keyed by the given ids iterates in the
+ * order those ids were passed.
+ */
+import { createToken } from './token.js';
+export const GAME_CATALOG_READER = createToken('GAME_CATALOG_READER');
+//# sourceMappingURL=game-catalog-reader.js.map

package/dist/contracts/adapters/game-catalog-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-catalog-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game-catalog-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAoDrD,MAAM,CAAC,MAAM,mBAAmB,GAA6B,WAAW,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/contracts/adapters/game-geo-check.d.ts

@@ -0,0 +1,37 @@
+import * as z from 'zod';
+import { type Token } from './token.js';
+export declare const GAME_GEO_DENIAL_REASONS: readonly ["global_block", "provider_block", "game_block", "geo_unresolved", "game_not_found"];
+export declare const GameGeoDenialReasonSchema: z.ZodEnum<{
+    global_block: "global_block";
+    provider_block: "provider_block";
+    game_block: "game_block";
+    geo_unresolved: "geo_unresolved";
+    game_not_found: "game_not_found";
+}>;
+export type GameGeoDenialReason = z.infer<typeof GameGeoDenialReasonSchema>;
+export declare const GameGeoCheckInputSchema: z.ZodObject<{
+    gameId: z.ZodUUID;
+    ipAddress: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type GameGeoCheckInput = z.infer<typeof GameGeoCheckInputSchema>;
+export declare const GameGeoDecisionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    allowed: z.ZodLiteral<true>;
+    countryCode: z.ZodNullable<z.ZodString>;
+    reason: z.ZodNull;
+}, z.core.$strip>, z.ZodObject<{
+    allowed: z.ZodLiteral<false>;
+    countryCode: z.ZodNullable<z.ZodString>;
+    reason: z.ZodEnum<{
+        global_block: "global_block";
+        provider_block: "provider_block";
+        game_block: "game_block";
+        geo_unresolved: "geo_unresolved";
+        game_not_found: "game_not_found";
+    }>;
+}, z.core.$strip>], "allowed">;
+export type GameGeoDecision = z.infer<typeof GameGeoDecisionSchema>;
+export type GameGeoCheckPort = {
+    checkGame(input: GameGeoCheckInput): Promise<GameGeoDecision>;
+};
+export declare const GAME_GEO_CHECK: Token<GameGeoCheckPort>;
+//# sourceMappingURL=game-geo-check.d.ts.map

package/dist/contracts/adapters/game-geo-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-geo-check.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game-geo-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,uBAAuB,+FAM1B,CAAC;AAEX,eAAO,MAAM,yBAAyB;;;;;;EAAkC,CAAC;AACzE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;8BAWhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC/D,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,gBAAgB,CACF,CAAC"}

package/dist/contracts/adapters/game-geo-check.js

@@ -0,0 +1,29 @@
+import * as z from 'zod';
+import { CountryCodeSchema, UuidSchema } from '../schemas/index.js';
+import { createToken } from './token.js';
+export const GAME_GEO_DENIAL_REASONS = [
+    'global_block',
+    'provider_block',
+    'game_block',
+    'geo_unresolved',
+    'game_not_found',
+];
+export const GameGeoDenialReasonSchema = z.enum(GAME_GEO_DENIAL_REASONS);
+export const GameGeoCheckInputSchema = z.object({
+    gameId: UuidSchema,
+    ipAddress: z.string().nullable(),
+});
+export const GameGeoDecisionSchema = z.discriminatedUnion('allowed', [
+    z.object({
+        allowed: z.literal(true),
+        countryCode: CountryCodeSchema.nullable(),
+        reason: z.null(),
+    }),
+    z.object({
+        allowed: z.literal(false),
+        countryCode: CountryCodeSchema.nullable(),
+        reason: GameGeoDenialReasonSchema,
+    }),
+]);
+export const GAME_GEO_CHECK = createToken('GAME_GEO_CHECK');
+//# sourceMappingURL=game-geo-check.js.map

package/dist/contracts/adapters/game-geo-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"game-geo-check.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game-geo-check.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AAGzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IACnE,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACzC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;KACjB,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACzC,MAAM,EAAE,yBAAyB;KAClC,CAAC;CACH,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,cAAc,GACzB,WAAW,CAAmB,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/game.d.ts

@@ -1,10 +1,22 @@
+/**
+ * Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
+ * concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+ */
 import { type Token } from './token.js';
+/**
+ * What the provider reports when a round closes. `winAmount` is a decimal string in the
+ * round's own currency and is the only number the win credit may use - never a client's.
+ * A void return, or an omitted `winAmount`, is a round that paid nothing.
+ */
+export type RoundOutcome = {
+    winAmount?: string;
+};
 export type GameAdapter = {
     launchGame(gameId: string, userId: string, currency: string): Promise<{
         launchUrl: string;
         token: string;
     }>;
-    endRound(externalRoundId: string): Promise<void>;
+    endRound(externalRoundId: string): Promise<RoundOutcome | void>;
 };
 export declare const GAME_ADAPTER: Token<GameAdapter>;
 //# sourceMappingURL=game.d.ts.map

package/dist/contracts/adapters/game.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"game.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,WAAW,CAA+B,CAAC"}
+{"version":3,"file":"game.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CACR,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACjE,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,WAAW,CAA+B,CAAC"}

package/dist/contracts/adapters/game.js

@@ -1,5 +1,7 @@
-// Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
-// concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+/**
+ * Gaming integration seam. A game studio/RGS implements GameAdapter; bind a
+ * concrete adapter to GAME_ADAPTER in the module's plugin.ts.
+ */
 import { createToken } from './token.js';
 export const GAME_ADAPTER = createToken('GAME_ADAPTER');
 //# sourceMappingURL=game.js.map

package/dist/contracts/adapters/game.js.map

@@ -1 +1 @@
-{"version":3,"file":"game.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8DAA8D;AAC9D,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,YAAY,GAAuB,WAAW,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"game.js","sourceRoot":"","sources":["../../../src/contracts/adapters/game.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAkBrD,MAAM,CAAC,MAAM,YAAY,GAAuB,WAAW,CAAC,cAAc,CAAC,CAAC"}

package/dist/contracts/adapters/gaming-commands.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Gaming command port: a wallet bridge accumulates a provider-reported round delta on the
+ * caller's own `tx`, atomic with whatever wallet move the caller makes in the same
+ * transaction. Mirrors the WALLET_COMMANDS command-port idiom (ADR-0017).
+ */
+import { type Token } from './token.js';
+export type GamingAccumulateExternalRoundArgs = {
+    gameId: string;
+    userId: string;
+    currency: string;
+    externalRoundId: string;
+    betDelta?: string;
+    winDelta?: string;
+    isFinal?: boolean;
+};
+export type GamingAccumulateExternalRoundOutcome = {
+    roundId: string;
+    betAmount: string;
+    winAmount: string;
+};
+export type GamingSetGameAvailabilityArgs = {
+    gameId: string;
+    isUnavailable: boolean;
+};
+export type GamingCommands = {
+    accumulateExternalRound(tx: unknown, args: GamingAccumulateExternalRoundArgs): Promise<GamingAccumulateExternalRoundOutcome>;
+    /**
+     * The only writer of a game's vendor-unavailable flag; an unavailable game is unplayable.
+     * `changed` is false when the game was already in that state. Throws when the game is unknown.
+     */
+    setGameAvailability(args: GamingSetGameAvailabilityArgs): Promise<{
+        changed: boolean;
+    }>;
+};
+export declare const GAMING_COMMANDS: Token<GamingCommands>;
+//# sourceMappingURL=gaming-commands.d.ts.map

package/dist/contracts/adapters/gaming-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gaming-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/gaming-commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,uBAAuB,CACrB,EAAE,EAAE,OAAO,EACX,IAAI,EAAE,iCAAiC,GACtC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjD;;;OAGG;IACH,mBAAmB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACzF,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}

package/dist/contracts/adapters/gaming-commands.js

@@ -0,0 +1,8 @@
+/**
+ * Gaming command port: a wallet bridge accumulates a provider-reported round delta on the
+ * caller's own `tx`, atomic with whatever wallet move the caller makes in the same
+ * transaction. Mirrors the WALLET_COMMANDS command-port idiom (ADR-0017).
+ */
+import { createToken } from './token.js';
+export const GAMING_COMMANDS = createToken('GAMING_COMMANDS');
+//# sourceMappingURL=gaming-commands.js.map

package/dist/contracts/adapters/gaming-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gaming-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/gaming-commands.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAmCrD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/contracts/adapters/geo-check-commands.d.ts

@@ -0,0 +1,8 @@
+import { type Token } from './token.js';
+export type GeoCheckCommands = {
+    checkRegistration(ipAddress: string | null): Promise<{
+        allowed: boolean;
+    }>;
+};
+export declare const GEO_CHECK_COMMANDS: Token<GeoCheckCommands>;
+//# sourceMappingURL=geo-check-commands.d.ts.map

package/dist/contracts/adapters/geo-check-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-check-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-check-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAqC,CAAC"}

package/dist/contracts/adapters/geo-check-commands.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const GEO_CHECK_COMMANDS = createToken('GEO_CHECK_COMMANDS');
+//# sourceMappingURL=geo-check-commands.js.map

package/dist/contracts/adapters/geo-check-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geo-check-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-check-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,kBAAkB,GAA4B,WAAW,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/contracts/adapters/geo-ip.d.ts

@@ -4,5 +4,7 @@ export type GeoIpAdapter = {
         countryCode: string | null;
     }>;
 };
+/** Normalize an adapter value to a validated ISO country code. */
+export declare function normalizeCountryCode(value: unknown): string | null;
 export declare const GEO_IP_ADAPTER: Token<GeoIpAdapter>;
 //# sourceMappingURL=geo-ip.d.ts.map

package/dist/contracts/adapters/geo-ip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"geo-ip.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,YAAY,CAAiC,CAAC"}
+{"version":3,"file":"geo-ip.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACpE,CAAC;AAEF,kEAAkE;AAClE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAOlE;AAED,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,YAAY,CAAiC,CAAC"}

package/dist/contracts/adapters/geo-ip.js

@@ -1,5 +1,16 @@
-// Geo-IP seam. A vendor (eg MaxMind) implements GeoIpAdapter; bind a concrete
-// adapter to GEO_IP_ADAPTER in the compliance module's plugin.ts.
+/**
+ * Geo-IP seam. A vendor (eg MaxMind) implements GeoIpAdapter; bind a concrete
+ * adapter to GEO_IP_ADAPTER in the compliance module's plugin.ts.
+ */
+import { CountryCodeSchema } from '../schemas/igaming-config.js';
 import { createToken } from './token.js';
+/** Normalize an adapter value to a validated ISO country code. */
+export function normalizeCountryCode(value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const parsed = CountryCodeSchema.safeParse(value.trim().toUpperCase());
+    return parsed.success ? parsed.data : null;
+}
 export const GEO_IP_ADAPTER = createToken('GEO_IP_ADAPTER');
 //# sourceMappingURL=geo-ip.js.map

package/dist/contracts/adapters/geo-ip.js.map

@@ -1 +1 @@
-{"version":3,"file":"geo-ip.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,kEAAkE;AAClE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,cAAc,GAAwB,WAAW,CAAC,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"geo-ip.js","sourceRoot":"","sources":["../../../src/contracts/adapters/geo-ip.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAwB,WAAW,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/contracts/adapters/identity-reader.d.ts

@@ -1,10 +1,26 @@
+import type { User } from '../schemas/identity.js';
+import type { KycStatus, Player } from '../schemas/player.js';
 export type IdentityReader = {
     /** Timestamp of the player's most recent session, or null if they have never logged in. Used for inactive evaluation. */
-    getLastLoginAt(userId: string): Promise<Date | null>;
+    getLastLoginAt(userId: User['id']): Promise<Date | null>;
     /** Returns player user ids whose most recent session predates sinceDate. Used for the daily inactive batch sweep. */
-    getPlayerIdsInactiveSince(sinceDate: Date): Promise<string[]>;
+    getPlayerIdsInactiveSince(sinceDate: Date): Promise<User['id'][]>;
     /** Resolves the player profile id for a given auth user id, or null when no profile exists yet. */
-    getPlayerIdByUserId(userId: string): Promise<string | null>;
+    getPlayerIdByUserId(userId: User['id']): Promise<Player['id'] | null>;
+    /** Best-effort variant for optional event enrichment; lookup failures resolve to null. */
+    getPlayerIdByUserIdSafe(userId: User['id']): Promise<Player['id'] | null>;
+    /** Batched, best-effort variant of {@link getPlayerIdByUserIdSafe} for enriching events across many users in one round trip. */
+    getPlayerIdsByUserIdsSafe(userIds: User['id'][]): Promise<Map<User['id'], Player['id'] | null>>;
+    /** Resolves the player's current KYC status from PAM, or null when no profile exists yet. */
+    getPlayerKycStatusByUserId(userId: User['id']): Promise<KycStatus | null>;
+    /** Returns other player user ids that have authenticated from the same login IP. */
+    getPlayerUserIdsSharingLoginIp(userId: User['id'], ipAddress: string): Promise<User['id'][]>;
+    /**
+     * True only while the player explicitly opted in and their delivery address remains
+     * verified. Optional so an operator's own implementation of this port keeps compiling;
+     * a missing implementation reads as opted out, which is the default state anyway.
+     */
+    canReceiveLoginWithdrawalAlerts?(userId: User['id']): Promise<boolean>;
 };
-export declare const IDENTITY_READER: import("./token.js").Token<IdentityReader>;
+export declare const IDENTITY_READER: import("./token.js").Token<IdentityReader, string>;
 //# sourceMappingURL=identity-reader.d.ts.map

package/dist/contracts/adapters/identity-reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG;IAC3B,yHAAyH;IACzH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrD,qHAAqH;IACrH,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,mGAAmG;IACnG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7D,CAAC;AAEF,eAAO,MAAM,eAAe,4CAAiD,CAAC"}
+{"version":3,"file":"identity-reader.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9D,MAAM,MAAM,cAAc,GAAG;IAC3B,yHAAyH;IACzH,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzD,qHAAqH;IACrH,yBAAyB,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,mGAAmG;IACnG,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACtE,0FAA0F;IAC1F,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,gIAAgI;IAChI,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChG,6FAA6F;IAC7F,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC1E,oFAAoF;IACpF,8BAA8B,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F;;;;OAIG;IACH,+BAA+B,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE,CAAC;AAEF,eAAO,MAAM,eAAe,oDAAiD,CAAC"}

package/dist/contracts/adapters/identity-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWzC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"identity-reader.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity-reader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA2BzC,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAiB,iBAAiB,CAAC,CAAC"}

package/dist/contracts/adapters/identity.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Identity options token. Downstream operators can provide this to configure
+ * identity behaviors such as login rate-limiting/lockouts.
+ */
 import { type Token } from './token.js';
 export type IdentityLockoutOptions = {
     enabled?: boolean;
@@ -5,8 +9,25 @@ export type IdentityLockoutOptions = {
     durationMs?: number;
     bypassForAdmins?: boolean;
 };
+/**
+ * Coarse per-IP throttle on login attempts, separate from the per-account lockout
+ * above. Protects against credential stuffing across many accounts from one source
+ * (eg a botnet or a leaked-credential list), which the per-account counter can't see
+ * because each guess lands on a different account. Must stay well above the
+ * per-account threshold so a shared network (office NAT) never blocks legitimate
+ * users signing into their own accounts.
+ *
+ * The IP is the socket peer, or the client address appended to X-Forwarded-For by one of
+ * `createApp`'s explicitly configured `trustedProxies`.
+ */
+export type IdentityLoginIpRateLimitOptions = {
+    enabled?: boolean;
+    limit?: number;
+    windowMs?: number;
+};
 export type IdentityServiceOptions = {
     lockout?: IdentityLockoutOptions;
+    loginIpRateLimit?: IdentityLoginIpRateLimitOptions;
 };
 export declare const IDENTITY_OPTIONS: Token<IdentityServiceOptions>;
 export type SessionCommands = {
@@ -15,4 +36,15 @@ export type SessionCommands = {
     }>;
 };
 export declare const SESSION_COMMANDS: Token<SessionCommands>;
+/**
+ * Writes to identity-owned user columns. Sibling modules may read `user` through the
+ * `/schema` subpath but must mutate it here, so identity keeps its own invariants.
+ */
+export type UserCommands = {
+    /** Throws if the handle is taken; comparison is case-insensitive. */
+    setUsername(userId: string, username: string): Promise<{
+        success: boolean;
+    }>;
+};
+export declare const USER_COMMANDS: Token<UserCommands>;
 //# sourceMappingURL=identity.d.ts.map

package/dist/contracts/adapters/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,sBAAsB,CACF,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,eAAe,CACF,CAAC"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;CACpD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,sBAAsB,CACF,CAAC;AAE1D,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,eAAe,CACF,CAAC;AAEnD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,qEAAqE;IACrE,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC9E,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,YAAY,CAA8C,CAAC"}

package/dist/contracts/adapters/identity.js

@@ -1,6 +1,9 @@
-// Identity options token. Downstream operators can provide this to configure
-// identity behaviors such as login rate-limiting/lockouts.
+/**
+ * Identity options token. Downstream operators can provide this to configure
+ * identity behaviors such as login rate-limiting/lockouts.
+ */
 import { createToken } from './token.js';
 export const IDENTITY_OPTIONS = createToken('IDENTITY_OPTIONS');
 export const SESSION_COMMANDS = createToken('SESSION_COMMANDS');
+export const USER_COMMANDS = createToken('USER_COMMANDS');
 //# sourceMappingURL=identity.js.map

package/dist/contracts/adapters/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2DAA2D;AAC3D,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAarD,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAyB,kBAAkB,CAAC,CAAC;AAM1D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAkB,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/contracts/adapters/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AA+BrD,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAyB,kBAAkB,CAAC,CAAC;AAM1D,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAkB,kBAAkB,CAAC,CAAC;AAWnD,MAAM,CAAC,MAAM,aAAa,GAAwB,WAAW,CAAe,eAAe,CAAC,CAAC"}