@openora/core 0.4.1-canary.39 → 0.4.1-canary.40

package/dist/pam/tag/router/index.d.ts

@@ -14,6 +14,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isSticky: import("zod").ZodDefault<import("zod").ZodBoolean>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
@@ -29,6 +33,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isSticky: import("zod").ZodDefault<import("zod").ZodBoolean>;
         createdAt: import("zod").ZodISODateTime;
@@ -46,6 +54,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
     }, import("zod/v4/core").$strip>, import("zod").ZodBoolean, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     listPlayerTags: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
@@ -92,8 +104,23 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
                     kyc_pending: "kyc_pending";
                     kyc_rejected: "kyc_rejected";
                     test_account: "test_account";
+                    dormant_high_roller: "dormant_high_roller";
+                    withdrawal_review: "withdrawal_review";
+                    multi_account: "multi_account";
+                    level: "level";
                 }>;
             }, import("zod/v4/core").$strip>;
+            assignMetadata: import("zod").ZodNullable<import("zod").ZodObject<{
+                amountBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                    amount: import("zod").ZodString;
+                    threshold: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+                countBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                    count: import("zod").ZodNumber;
+                    thresholdCount: import("zod").ZodNumber;
+                    thresholdDays: import("zod").ZodNumber;
+                }, import("zod/v4/core").$strip>>;
+            }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>>;
         total: import("zod").ZodNumber;
         page: import("zod").ZodNumber;
@@ -117,6 +144,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         id: import("zod").ZodUUID;
@@ -149,8 +180,23 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
                 kyc_pending: "kyc_pending";
                 kyc_rejected: "kyc_rejected";
                 test_account: "test_account";
+                dormant_high_roller: "dormant_high_roller";
+                withdrawal_review: "withdrawal_review";
+                multi_account: "multi_account";
+                level: "level";
             }>;
         }, import("zod/v4/core").$strip>;
+        assignMetadata: import("zod").ZodNullable<import("zod").ZodObject<{
+            amountBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                amount: import("zod").ZodString;
+                threshold: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            countBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                count: import("zod").ZodNumber;
+                thresholdCount: import("zod").ZodNumber;
+                thresholdDays: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     removePlayerTag: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         playerId: import("zod").ZodUUID;
@@ -170,6 +216,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         id: import("zod").ZodUUID;
@@ -202,8 +252,23 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
                 kyc_pending: "kyc_pending";
                 kyc_rejected: "kyc_rejected";
                 test_account: "test_account";
+                dormant_high_roller: "dormant_high_roller";
+                withdrawal_review: "withdrawal_review";
+                multi_account: "multi_account";
+                level: "level";
             }>;
         }, import("zod/v4/core").$strip>;
+        assignMetadata: import("zod").ZodNullable<import("zod").ZodObject<{
+            amountBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                amount: import("zod").ZodString;
+                threshold: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            countBreach: import("zod").ZodNullable<import("zod").ZodObject<{
+                count: import("zod").ZodNumber;
+                thresholdCount: import("zod").ZodNumber;
+                thresholdDays: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     listAssignableTags: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         playerId: import("zod").ZodUUID;
@@ -220,6 +285,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isSticky: import("zod").ZodDefault<import("zod").ZodBoolean>;
         createdAt: import("zod").ZodISODateTime;
@@ -239,6 +308,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isEnabled: import("zod").ZodBoolean;
         threshold: import("zod").ZodNullable<import("zod").ZodString>;
@@ -259,6 +332,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isEnabled: import("zod").ZodBoolean;
         threshold: import("zod").ZodNullable<import("zod").ZodString>;
@@ -278,6 +355,10 @@ export declare function createTagRouter(tag: TagService, rule: TagRuleService, a
             kyc_pending: "kyc_pending";
             kyc_rejected: "kyc_rejected";
             test_account: "test_account";
+            dormant_high_roller: "dormant_high_roller";
+            withdrawal_review: "withdrawal_review";
+            multi_account: "multi_account";
+            level: "level";
         }>;
         isEnabled: import("zod").ZodBoolean;
         threshold: import("zod").ZodNullable<import("zod").ZodString>;

package/dist/pam/tag/router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEhE,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8C5F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE9F,OAAO,EACL,UAAU,EAMX,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,cAAc,EAAwB,MAAM,gCAAgC,CAAC;AAEtF,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkE5F"}

package/dist/pam/tag/router/index.js

@@ -1,32 +1,48 @@
 import { implement } from '@orpc/server';
-import { getUserId } from '@openora/core/server';
+import { getUserId, mapErrors } from '@openora/core/server';
 import { tagContract } from '../contract/index.js';
+import { TagNotFoundError, TagAlreadyInUseError, TagAssignmentNotFoundError, TagKeyConflictError, TagInUseError, } from '../service/tag.service.js';
+import { TagRuleNotFoundError } from '../service/tag-rule.service.js';
 export function createTagRouter(tag, rule, adminGuard) {
     const os = implement(tagContract).$context();
     return os.router({
-        createTag: os.createTag.handler(({ input }) => tag.createTag(input)),
-        deleteTag: os.deleteTag.handler(({ input }) => tag.deleteTag(input)),
-        listPlayerTags: os.listPlayerTags.handler(({ input }) => tag.listPlayerTags({
-            playerId: input.playerId,
-            page: input.page,
-            limit: input.limit,
-            sortBy: input.sortBy,
-            sortOrder: input.sortOrder,
-        })),
-        assignPlayerTag: os.assignPlayerTag.handler(({ context, input }) => {
-            return tag.assignPlayerTag({ ...input, assignActorUserId: getUserId(context) }, context.clientMeta);
-        }),
-        removePlayerTag: os.removePlayerTag.handler(({ context, input }) => {
-            return tag.removePlayerTag({ ...input, removalActorUserId: getUserId(context) }, context.clientMeta);
-        }),
-        listAssignableTags: os.listAssignableTags.handler(({ input }) => tag.listAssignableTags(input.playerId)),
+        createTag: os.createTag.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'create');
+            return mapErrors({ CONFLICT: TagKeyConflictError }, () => tag.createTag(input, getUserId(context)));
+        }),
+        deleteTag: os.deleteTag.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'delete');
+            return mapErrors({ NOT_FOUND: TagNotFoundError, CONFLICT: TagInUseError }, () => tag.deleteTag(input, getUserId(context)));
+        }),
+        listPlayerTags: os.listPlayerTags.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'view');
+            return tag.listPlayerTags({
+                playerId: input.playerId,
+                page: input.page,
+                limit: input.limit,
+                sortBy: input.sortBy,
+                sortOrder: input.sortOrder,
+            });
+        }),
+        assignPlayerTag: os.assignPlayerTag.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'create');
+            return mapErrors({ NOT_FOUND: TagNotFoundError, CONFLICT: TagAlreadyInUseError }, () => tag.assignPlayerTag({ ...input, assignActorUserId: getUserId(context) }, context.clientMeta));
+        }),
+        removePlayerTag: os.removePlayerTag.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'delete');
+            return mapErrors({ NOT_FOUND: [TagNotFoundError, TagAssignmentNotFoundError] }, () => tag.removePlayerTag({ ...input, removalActorUserId: getUserId(context) }, context.clientMeta));
+        }),
+        listAssignableTags: os.listAssignableTags.handler(async ({ context, input }) => {
+            await adminGuard.assert(context, 'tag', 'view');
+            return tag.listAssignableTags(input.playerId);
+        }),
         listTagRules: os.listTagRules.handler(async ({ context }) => {
             await adminGuard.assert(context, 'tag-rule', 'view');
             return rule.listTagRules();
         }),
         upsertTagRule: os.upsertTagRule.handler(async ({ context, input }) => {
             const { userId, ip, userAgent } = await adminGuard.assert(context, 'tag-rule', 'update');
-            return rule.upsertTagRule(input, userId, { ip, userAgent });
+            return mapErrors({ NOT_FOUND: TagRuleNotFoundError }, () => rule.upsertTagRule(input, userId, { ip, userAgent }));
         }),
     });
 }

package/dist/pam/tag/router/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/tag/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAoC,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAInD,MAAM,UAAU,eAAe,CAAC,GAAe,EAAE,IAAoB,EAAE,UAAsB;IAC3F,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEzD,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEpE,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEpE,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CACtD,GAAG,CAAC,cAAc,CAAC;YACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CACH;QAED,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACjE,OAAO,GAAG,CAAC,eAAe,CACxB,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EACnD,OAAO,CAAC,UAAU,CACnB,CAAC;QACJ,CAAC,CAAC;QAEF,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACjE,OAAO,GAAG,CAAC,eAAe,CACxB,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EACpD,OAAO,CAAC,UAAU,CACnB,CAAC;QACJ,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAC9D,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CACvC;QAED,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC;QAEF,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACnE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YACzF,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/tag/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAoC,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAEL,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,GACd,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAkB,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtF,MAAM,UAAU,eAAe,CAAC,GAAe,EAAE,IAAoB,EAAE,UAAsB;IAC3F,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEzD,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACvD,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CACzC,CAAC;QACJ,CAAC,CAAC;QAEF,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,CAC9E,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CACzC,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACrE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,GAAG,CAAC,cAAc,CAAC;gBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACvE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACrF,GAAG,CAAC,eAAe,CACjB,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EACnD,OAAO,CAAC,UAAU,CACnB,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACvE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,EAAE,EAAE,GAAG,EAAE,CACnF,GAAG,CAAC,eAAe,CACjB,EAAE,GAAG,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,EACpD,OAAO,CAAC,UAAU,CACnB,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YAC7E,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC;QAEF,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE;YACnE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;YACzF,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACzD,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACrD,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/pam/tag/schema/index.d.ts

@@ -1,5 +1,5 @@
 export declare const tagAssignRemoveSourceEnum: import("drizzle-orm/pg-core").PgEnum<["scheduled", "manual"]>;
-export declare const tagKeyEnum: import("drizzle-orm/pg-core").PgEnum<["high_roller", "vip", "bonus_abuser", "high_risk", "inactive", "large_depositor", "self_excluded", "kyc_pending", "kyc_rejected", "test_account"]>;
+export declare const tagKeyEnum: import("drizzle-orm/pg-core").PgEnum<["high_roller", "vip", "bonus_abuser", "high_risk", "inactive", "large_depositor", "self_excluded", "kyc_pending", "kyc_rejected", "test_account", "dormant_high_roller", "withdrawal_review", "multi_account", "level"]>;
 export declare const tag: import("drizzle-orm/pg-core").PgTableWithColumns<{
     name: "tag";
     schema: undefined;
@@ -26,14 +26,14 @@ export declare const tag: import("drizzle-orm/pg-core").PgTableWithColumns<{
             tableName: "tag";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "high_roller" | "vip" | "bonus_abuser" | "high_risk" | "inactive" | "large_depositor" | "self_excluded" | "kyc_pending" | "kyc_rejected" | "test_account";
+            data: "high_roller" | "vip" | "bonus_abuser" | "high_risk" | "inactive" | "large_depositor" | "self_excluded" | "kyc_pending" | "kyc_rejected" | "test_account" | "dormant_high_roller" | "withdrawal_review" | "multi_account" | "level";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["high_roller", "vip", "bonus_abuser", "high_risk", "inactive", "large_depositor", "self_excluded", "kyc_pending", "kyc_rejected", "test_account"];
+            enumValues: ["high_roller", "vip", "bonus_abuser", "high_risk", "inactive", "large_depositor", "self_excluded", "kyc_pending", "kyc_rejected", "test_account", "dormant_high_roller", "withdrawal_review", "multi_account", "level"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -198,6 +198,45 @@ export declare const playerTag: import("drizzle-orm/pg-core").PgTableWithColumns
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        assignMetadata: import("drizzle-orm/pg-core").PgColumn<{
+            name: "assignMetadata";
+            tableName: "player_tag";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: {
+                amountBreach: {
+                    amount: string;
+                    threshold: string;
+                } | null;
+                countBreach: {
+                    count: number;
+                    thresholdCount: number;
+                    thresholdDays: number;
+                } | null;
+            };
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: {
+                amountBreach: {
+                    amount: string;
+                    threshold: string;
+                } | null;
+                countBreach: {
+                    count: number;
+                    thresholdCount: number;
+                    thresholdDays: number;
+                } | null;
+            };
+        }>;
         removedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "removedAt";
             tableName: "player_tag";

package/dist/pam/tag/schema/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/schema/index.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,yBAAyB,+DAA4D,CAAC;AACnG,eAAO,MAAM,UAAU,0LAA6B,CAAC;AAErD,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQd,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BrB,CAAC;AAEF,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,YAAY,CAAC;AAC1C,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AAEtD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBlB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/tag/schema/index.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,yBAAyB,+DAA4D,CAAC;AACnG,eAAO,MAAM,UAAU,gQAA6B,CAAC;AAErD,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQd,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoCrB,CAAC;AAEF,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,YAAY,CAAC;AAC1C,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AAEtD,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBlB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC"}

package/dist/pam/tag/schema/index.js

@@ -1,5 +1,6 @@
 import { tagAssignRemoveSource, tagKeys } from '@openora/core/contracts';
-import { pgTable, uuid, text, timestamp, index, boolean, pgEnum, integer, decimal, } from 'drizzle-orm/pg-core';
+import { isNull } from 'drizzle-orm';
+import { pgTable, uuid, text, timestamp, index, uniqueIndex, boolean, pgEnum, integer, decimal, jsonb, } from 'drizzle-orm/pg-core';
 export const tagAssignRemoveSourceEnum = pgEnum('tag_assign_remove_source', tagAssignRemoveSource);
 export const tagKeyEnum = pgEnum('tag_key', tagKeys);
 export const tag = pgTable('tag', {
@@ -23,6 +24,7 @@ export const playerTag = pgTable('player_tag', {
     assignReason: text().notNull(),
     assignActor: tagAssignRemoveSourceEnum().notNull(),
     assignActorUserId: uuid() /* Potential FKey - user; null = system actor */,
+    assignMetadata: jsonb().$type(),
     /* Removal data */
     removedAt: timestamp({ withTimezone: true }),
     removalReason: text(),
@@ -33,7 +35,16 @@ export const playerTag = pgTable('player_tag', {
         .notNull()
         .$onUpdateFn(() => new Date()),
     createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
-}, (table) => [index('player_tag_player_tag_idx').on(table.playerId, table.tagId)]);
+}, (table) => [
+    index('player_tag_player_tag_idx').on(table.playerId, table.tagId),
+    index('player_tag_tag_id_idx').on(table.tagId).where(isNull(table.removedAt)),
+    // DB-level source of truth for "at most one active assignment per (tag, player)" -
+    // the service pre-check is a friendly fast path only; this index is what actually
+    // closes the concurrent-insert / at-least-once-redelivery race.
+    uniqueIndex('player_tag_active_key')
+        .on(table.tagId, table.playerId)
+        .where(isNull(table.removedAt)),
+]);
 export const tagRule = pgTable('tag_rule', {
     id: uuid().primaryKey().defaultRandom(),
     tagId: uuid()

package/dist/pam/tag/schema/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/tag/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,KAAK,EACL,OAAO,EACP,MAAM,EACN,OAAO,EACP,OAAO,GACR,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE;IAChC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,GAAG,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAC9B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,6BAA6B;IACxD,KAAK,EAAE,IAAI,EAAE;SACV,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;QACxB,QAAQ,EAAE,UAAU;KACrB,CAAC;IACJ,gDAAgD;IAChD,YAAY,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,yBAAyB,EAAE,CAAC,OAAO,EAAE;IAClD,iBAAiB,EAAE,IAAI,EAAE,CAAC,gDAAgD;IAC1E,kBAAkB;IAClB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,aAAa,EAAE,IAAI,EAAE;IACrB,YAAY,EAAE,yBAAyB,EAAE;IACzC,kBAAkB,EAAE,IAAI,EAAE,CAAC,2BAA2B;IACtD,uBAAuB;IACvB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAChF,CAAC;AAKF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE;IACzC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,KAAK,EAAE,IAAI,EAAE;SACV,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;SAClD,MAAM,EAAE;IACX,SAAS,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,sJAAsJ;IACtJ,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/C,wGAAwG;IACxG,aAAa,EAAE,OAAO,EAAE;IACxB,+EAA+E;IAC/E,cAAc,EAAE,OAAO,EAAE;IACzB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/tag/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,OAAO,EACP,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,KAAK,EACL,WAAW,EACX,OAAO,EACP,MAAM,EACN,OAAO,EACP,OAAO,EACP,KAAK,GACN,MAAM,qBAAqB,CAAC;AAG7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE;IAChC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,GAAG,EAAE,UAAU,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAC9B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,6BAA6B;IACxD,KAAK,EAAE,IAAI,EAAE;SACV,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE;QACxB,QAAQ,EAAE,UAAU;KACrB,CAAC;IACJ,gDAAgD;IAChD,YAAY,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,yBAAyB,EAAE,CAAC,OAAO,EAAE;IAClD,iBAAiB,EAAE,IAAI,EAAE,CAAC,gDAAgD;IAC1E,cAAc,EAAE,KAAK,EAAE,CAAC,KAAK,EAA2B;IACxD,kBAAkB;IAClB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5C,aAAa,EAAE,IAAI,EAAE;IACrB,YAAY,EAAE,yBAAyB,EAAE;IACzC,kBAAkB,EAAE,IAAI,EAAE,CAAC,2BAA2B;IACtD,uBAAuB;IACvB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,2BAA2B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;IAClE,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7E,mFAAmF;IACnF,kFAAkF;IAClF,gEAAgE;IAChE,WAAW,CAAC,uBAAuB,CAAC;SACjC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC/B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;CAClC,CACF,CAAC;AAKF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE;IACzC,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,KAAK,EAAE,IAAI,EAAE;SACV,OAAO,EAAE;SACT,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;SAClD,MAAM,EAAE;IACX,SAAS,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,sJAAsJ;IACtJ,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/C,wGAAwG;IACxG,aAAa,EAAE,OAAO,EAAE;IACxB,+EAA+E;IAC/E,cAAc,EAAE,OAAO,EAAE;IACzB,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CACpE,CAAC,CAAC"}

package/dist/pam/tag/seed/data/default-tag-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-tag-rules.d.ts","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tag-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,eAAO,MAAM,iBAAiB,EAAE,kBAAkB,EA2CjD,CAAC"}
+{"version":3,"file":"default-tag-rules.d.ts","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tag-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,eAAO,MAAM,iBAAiB,EAAE,kBAAkB,EAuEjD,CAAC"}

package/dist/pam/tag/seed/data/default-tag-rules.js

@@ -13,6 +13,13 @@ export const DEFAULT_TAG_RULES = [
         thresholdDays: null,
         thresholdCount: null,
     },
+    {
+        tagKey: 'bonus_abuser',
+        isEnabled: true,
+        threshold: null,
+        thresholdDays: null,
+        thresholdCount: null,
+    },
     {
         tagKey: 'high_risk',
         isEnabled: false,
@@ -41,5 +48,26 @@ export const DEFAULT_TAG_RULES = [
         thresholdDays: null,
         thresholdCount: null,
     },
+    {
+        tagKey: 'multi_account',
+        isEnabled: true,
+        threshold: null,
+        thresholdDays: null,
+        thresholdCount: null,
+    },
+    {
+        tagKey: 'dormant_high_roller',
+        isEnabled: false,
+        threshold: null,
+        thresholdDays: null,
+        thresholdCount: null,
+    },
+    {
+        tagKey: 'withdrawal_review',
+        isEnabled: false,
+        threshold: null,
+        thresholdDays: null,
+        thresholdCount: null,
+    },
 ];
 //# sourceMappingURL=default-tag-rules.js.map

package/dist/pam/tag/seed/data/default-tag-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-tag-rules.js","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tag-rules.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAyB;IACrD;QACE,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;CACF,CAAC"}
+{"version":3,"file":"default-tag-rules.js","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tag-rules.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAyB;IACrD;QACE,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,cAAc;QACtB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,qBAAqB;QAC7B,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;IACD;QACE,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,KAAK;QAChB,SAAS,EAAE,IAAI;QACf,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;KACrB;CACF,CAAC"}

package/dist/pam/tag/seed/data/default-tags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default-tags.d.ts","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,eAAO,MAAM,YAAY,EAAE,cAAc,EAWxC,CAAC"}
+{"version":3,"file":"default-tags.d.ts","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE9D,eAAO,MAAM,YAAY,EAAE,cAAc,EAexC,CAAC"}

package/dist/pam/tag/seed/data/default-tags.js

@@ -9,5 +9,9 @@ export const DEFAULT_TAGS = [
     { key: 'kyc_pending', isSticky: false },
     { key: 'kyc_rejected', isSticky: true },
     { key: 'test_account', isSticky: true },
+    { key: 'dormant_high_roller', isSticky: false },
+    { key: 'withdrawal_review', isSticky: true },
+    { key: 'multi_account', isSticky: true },
+    { key: 'level', isSticky: false },
 ];
 //# sourceMappingURL=default-tags.js.map

package/dist/pam/tag/seed/data/default-tags.js.map

@@ -1 +1 @@
-{"version":3,"file":"default-tags.js","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tags.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9B,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpC,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3C,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxC,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;CACxC,CAAC"}
+{"version":3,"file":"default-tags.js","sourceRoot":"","sources":["../../../../../src/pam/tag/seed/data/default-tags.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC9B,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACrC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;IACpC,EAAE,GAAG,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3C,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxC,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE;IACvC,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvC,EAAE,GAAG,EAAE,qBAAqB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC/C,EAAE,GAAG,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC5C,EAAE,GAAG,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE;IACxC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE;CAClC,CAAC"}

package/dist/pam/tag/service/tag-evaluation.service.d.ts

@@ -1,4 +1,4 @@
-import { type WalletReader, type IdentityReader } from '@openora/core/contracts';
+import { type WalletReader, type IdentityReader, type User } from '@openora/core/contracts';
 import { TagService } from './tag.service.js';
 import { TagRuleService } from './tag-rule.service.js';
 export declare class TagEvaluationService {
@@ -18,37 +18,138 @@ export declare class TagEvaluationService {
      * Called on wallet.deposit.completed.
      */
     onDepositCompleted(payload: unknown): Promise<void>;
+    /** True when the withdrawal_review rule is enabled and amount crosses its threshold. Shared by the event path and the synchronous command-port path below so both stay in lockstep. */
+    private _withdrawalReviewThresholdCrossed;
+    /**
+     * Assigns withdrawal_review when a single withdrawal attempt exceeds its threshold.
+     * Called on wallet.withdrawal.requested (the attempt, before funds move) so the
+     * review tag lands before payout. Sticky - never auto-removed here or anywhere else.
+     * This is the async, best-effort fan-out path (other consumers may want the event) -
+     * wallet's own auto-approval decision does NOT wait on this; it calls
+     * evaluateWithdrawalRequested below instead. Idempotent with that path via
+     * TagAlreadyInUseError (see tryAssignTag).
+     */
+    onWithdrawalRequested(payload: unknown): Promise<void>;
+    /**
+     * Synchronous, transactional counterpart to onWithdrawalRequested, bound behind
+     * TAG_EVALUATION_COMMANDS. wallet.withdraw() awaits this on its own transaction handle
+     * BEFORE its maybeAutoApprove reads risk tags, so a withdrawal_review assignment is
+     * guaranteed committed before the auto-approval decision runs - closing the race the
+     * fire-and-forget EventBus emit above cannot (an EventBus emit is never awaited by the
+     * emitter). Money-adjacent: never events-only for this decision (see
+     * messaging-and-microservices "money never flows over events"). Any error here
+     * propagates and aborts the caller's withdrawal transaction - a review-gate evaluation
+     * failure must block the withdrawal rather than silently skip review.
+     */
+    evaluateWithdrawalRequested(tx: unknown, args: {
+        userId: User['id'];
+        amount: string;
+    }): Promise<void>;
     /**
      * Evaluates the high_risk rule based on withdrawal amount and frequency.
-     * Called on wallet.withdrawal.completed.
-     * Only assigns the tag when a threshold is crossed; never auto-removes
-     * (risk designation requires an explicit admin clear).
+     * Called on wallet.withdrawal.completed. Only assigns the tag when a threshold is
+     * crossed; removal is handled separately by the daily resweep in runDailyEvaluation
+     * (a rolling-window count/amount can drop back under threshold with no new
+     * withdrawal, so it can't be detected event-driven-only). Records which breach
+     * condition(s) fired in assignMetadata - the resweep uses this to know whether the
+     * amount dimension (never resweepable, see _runHighRiskResweep) was involved.
      */
     onWithdrawalCompleted(payload: unknown): Promise<void>;
     /**
-     * Removes the inactive tag when a player logs in.
-     * Called on identity.user.login.
+     * Handles password login side effects:
+     *  - removes inactive/dormant_high_roller on activity
+     *  - assigns multi_account + bonus_abuser when another player has used this login IP
      */
     onUserLogin(payload: unknown): Promise<void>;
     /**
-     * Applies the kyc_pending tag on KYC submission and clears any prior kyc_rejected.
-     * Called on compliance.kyc.submitted. Respects the kyc_pending rule's isEnabled flag.
+     * Phone-login path mirrors password-login risk evaluation. The signal is the same
+     * authenticated session IP; the login method is intentionally not encoded in the tag.
+     */
+    onUserPhoneLogin(payload: unknown): Promise<void>;
+    private onAuthenticatedLogin;
+    private evaluateSharedLoginIp;
+    /**
+     * Applies kyc_pending on KYC submission only while the profile still has a pending-like
+     * status. Does not clear kyc_rejected: that sticky tag remains until a later approved
+     * state explicitly clears it.
      */
     onKycSubmitted(payload: unknown): Promise<void>;
     /**
      * Manages kyc_pending / kyc_rejected lifecycle on KYC status changes.
-     * Called on compliance.kyc.updated. Respects the kyc_pending rule's isEnabled flag.
+     * Called on compliance.kyc.updated. Assignment respects each tag rule's isEnabled flag;
+     * terminal cleanup still runs so disabled rules cannot strand old active rows.
      *
      * Transitions:
      *   verified / manually_overridden -> remove kyc_pending + kyc_rejected
      *   rejected                       -> remove kyc_pending, assign kyc_rejected
-     *   resubmission_requested         -> assign kyc_pending
+     *   resubmission_requested         -> assign kyc_pending, keep kyc_rejected sticky
      */
     onKycStatusUpdated(payload: unknown): Promise<void>;
     /**
-     * Daily scheduled evaluation: assigns inactive to players who have not logged in
-     * for rule.thresholdDays days. Removal is handled by onUserLogin on next login.
+     * Assigns self_excluded when a player activates self-exclusion.
+     * Called on rg.self_exclusion.activated.
+     */
+    onSelfExclusionActivated(payload: unknown): Promise<void>;
+    /**
+     * Removes self_excluded when a player's self-exclusion is lifted.
+     * Called on rg.self_exclusion.lifted.
+     */
+    onSelfExclusionLifted(payload: unknown): Promise<void>;
+    /**
+     * Replaces the single mutable `level` tag with the player's new level.
+     * Called on player.level.changed (emitted by PlayerService.update() after commit).
+     * Not sticky - the level value lives only in assignReason text, never as a separate
+     * tag key per level. The swap goes through TagService.replacePlayerTag: removal of
+     * the prior active row (silent no-op when absent) + insert of the new one on ONE
+     * transaction, so a mid-swap failure can never strand the player with the old row
+     * removed and no new one committed. The loser of a concurrent replace throws
+     * TagAlreadyInUseError with nothing committed - swallowed here as the usual
+     * idempotent no-op (player.level itself stays the source of truth).
+     */
+    onPlayerLevelChanged(payload: unknown): Promise<void>;
+    /**
+     * Daily scheduled evaluation, three independent sweeps:
+     *  - inactive: assigns to players who have not logged in for rule.thresholdDays
+     *    days. Removal is handled by onUserLogin on next login.
+     *  - dormant_high_roller: a co-occurrence check, not a history lookup - high_roller
+     *    is only re-evaluated on deposit, so a player who goes quiet never loses it via
+     *    that path. Assigns to players who are both currently inactive (per this tag's
+     *    OWN thresholdDays, decoupled from the inactive rule's) and currently hold an
+     *    active high_roller tag. Removal is handled by onUserLogin on next login.
+     *  - high_risk resweep: removal-only, frequency dimension only. A rolling
+     *    withdrawal-count window can drop back under threshold with no new withdrawal
+     *    to trigger onWithdrawalCompleted, so current holders are rechecked here and
+     *    removed once the count falls below threshold. Deliberately does NOT recheck
+     *    the amount dimension - assignment's amount check has no time bound, so a
+     *    windowed recheck would silently de-designate a still-risky player once their
+     *    triggering withdrawal ages out of the window (an AML false negative). Now gated
+     *    on each holder's assignMetadata (recorded at assignment): a holder whose
+     *    metadata shows an amount breach is skipped regardless of their current count,
+     *    and a holder with null metadata (pre-migration/legacy row, or manually
+     *    assigned) is also skipped - "unknown why this was assigned" is treated as
+     *    "do not auto-remove". Skipped entirely when thresholdDays or thresholdCount is
+     *    null - an amount-only high_risk rule isn't resweepable by the cron; it stays
+     *    until an admin clears it or a future withdrawal re-triggers assignment.
      */
     runDailyEvaluation(): Promise<void>;
+    private _runInactiveSweep;
+    private _runDormantHighRollerSweep;
+    /**
+     * Frequency-only removal. Assignment (onWithdrawalCompleted) checks a single
+     * withdrawal's amount with no time bound, so an amount-only breach from outside
+     * this rolling window is invisible to a windowed recheck - resweeping it would
+     * silently de-designate a still-risky player (an AML false negative). Only the
+     * count dimension, which IS windowed at assignment time, is safe to resweep. Each
+     * holder's assignMetadata (recorded at assignment) records which breach dimension(s)
+     * fired; a holder whose metadata shows an amount breach, or whose metadata is null
+     * (pre-migration/legacy row or manual assignment - unknown why it was assigned), is
+     * skipped regardless of their current windowed count - pinned until an admin
+     * manually clears the tag or a future onWithdrawalCompleted re-evaluation populates
+     * metadata. Skipped entirely when thresholdDays or thresholdCount is null - an
+     * amount-only rule has no frequency dimension to resweep against and is never
+     * auto-cleared by the cron, only by an admin or a future onWithdrawalCompleted
+     * re-evaluation.
+     */
+    private _runHighRiskResweep;
 }
 //# sourceMappingURL=tag-evaluation.service.d.ts.map