@openora/core 0.4.1-canary.39 → 0.4.1-canary.41

package/dist/compliance/plugin.js

@@ -1,6 +1,6 @@
 import { definePlugin, EVENT_BUS, DRIZZLE, ADMIN_GUARD, createLogger } from '@openora/core/server';
 import * as z from 'zod';
-import { ADMIN_USER_DIRECTORY, GEO_IP_ADAPTER, JOB_QUEUE, KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER, LOGIN_ENFORCEMENT, PLATFORM_CONFIG, SEND_EMAIL, EMAIL_TEMPLATE_RENDERER, UuidSchema, domainEventSchemas, queue, } from '@openora/core/contracts';
+import { ADMIN_USER_DIRECTORY, AUDIT_WRITER, CACHE, GEO_IP_ADAPTER, JOB_QUEUE, KYC_ADAPTER, KYC_STATUS_WRITER, KYC_VENDOR_STATUSES, KYC_WEBHOOK_VERIFIER, LOGIN_ENFORCEMENT, PLATFORM_CONFIG, SEND_EMAIL, EMAIL_TEMPLATE_RENDERER, UuidSchema, domainEventSchemas, queue, } from '@openora/core/contracts';
 import { ComplianceService } from './service/compliance.service.js';
 import { KycVerificationService } from './service/kyc.service.js';
 import { RgService } from './service/rg.service.js';
@@ -10,14 +10,22 @@ import { HmacKycWebhookVerifier } from './adapters/hmac-kyc-webhook-verifier.js'
 const logger = createLogger('compliance');
 const RG_EVAL_QUEUE = queue('rg-eval');
 const RG_MONITOR_QUEUE = queue('rg-monitor');
+const KYC_DECISION_SYNC_QUEUE = queue('kyc-decision-sync');
 const RgEvalJobSchema = z.object({
     userId: UuidSchema,
     trigger: z.enum(RG_EVAL_TRIGGERS),
 });
 const RgMonitorJobSchema = z.object({});
+const KycDecisionSyncJobSchema = z.object({
+    referenceId: z.string().min(1),
+    status: z.enum(KYC_VENDOR_STATUSES),
+    // Webhook-arrival time, stamped by the router before enqueue - the monotonicity
+    // watermark `reconcile` compares against, immune to job-processing reordering.
+    receivedAt: z.iso.datetime(),
+});
 export default definePlugin({
     id: 'compliance',
-    dependsOn: ['player-management', 'identity', 'wallet', 'gaming'],
+    dependsOn: ['player-management', 'identity', 'wallet', 'gaming', 'audit'],
     requiresPorts: [LOGIN_ENFORCEMENT],
     register(ctx) {
         ctx.provide(KYC_WEBHOOK_VERIFIER, (c) => {
@@ -28,7 +36,7 @@ export default definePlugin({
                 .min(1)
                 .optional()
                 .parse(process.env[envName] || undefined);
-            return new HmacKycWebhookVerifier(webhookSecret);
+            return new HmacKycWebhookVerifier(webhookSecret, c.get(CACHE));
         });
         // svcRefs are null at registration (subscriptions wire before router factories run)
         // but set before any real event/job arrives. See create-app.ts boot order.
@@ -93,6 +101,15 @@ export default definePlugin({
                 }
             },
         });
+        ctx.jobs.worker({
+            queue: KYC_DECISION_SYNC_QUEUE,
+            schema: KycDecisionSyncJobSchema,
+            handler: async ({ payload }) => {
+                if (kycRef) {
+                    await kycRef.syncDecision(payload.referenceId, payload.status, new Date(payload.receivedAt));
+                }
+            },
+        });
         ctx.routers.add('compliance', (c) => {
             const platformConfig = c.has(PLATFORM_CONFIG) ? c.get(PLATFORM_CONFIG) : undefined;
             const kycAdapter = c.get(KYC_ADAPTER);
@@ -133,9 +150,12 @@ export default definePlugin({
             return createComplianceRouter({
                 compliance: new ComplianceService(c.get(DRIZZLE), c.get(EVENT_BUS), c.has(GEO_IP_ADAPTER) ? c.get(GEO_IP_ADAPTER) : null),
                 adminGuard: c.get(ADMIN_GUARD),
+                audit: c.get(AUDIT_WRITER),
                 kyc,
                 kycAdapter,
                 webhookVerifier: c.get(KYC_WEBHOOK_VERIFIER),
+                jobQueue: jobQueueRef,
+                kycDecisionSyncQueue: KYC_DECISION_SYNC_QUEUE,
                 rg,
                 rgMonitoring,
             });

package/dist/compliance/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/compliance/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EAClB,KAAK,GAEN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;AACvC,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAE7C,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;CAClC,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAExC,eAAe,YAAY,CAAC;IAC1B,EAAE,EAAE,YAAY;IAChB,SAAS,EAAE,CAAC,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;IAChE,aAAa,EAAE,CAAC,iBAAiB,CAAC;IAClC,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,gBAAgB,IAAI,oBAAoB,CAAC;YACnE,MAAM,aAAa,GAAG,CAAC;iBACpB,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,2EAA2E;QAC3E,IAAI,MAAM,GAAkC,IAAI,CAAC;QACjD,IAAI,KAAK,GAAqB,IAAI,CAAC;QACnC,IAAI,UAAU,GAA+B,IAAI,CAAC;QAClD,IAAI,WAAW,GAA2B,IAAI,CAAC;QAE/C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM;iBACH,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBACjC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,OAAsB,EAAE,EAAE;YAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,KAAK,WAAW;iBACb,OAAO,CACN,aAAa,EACb,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,EAAE,cAAc,EAAE,WAAW,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAC7D;iBACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,OAAO,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,4BAA4B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;YACzC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBACxC,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,qFAAqF;YACrF,sFAAsF;YACtF,sDAAsD;YACtD,IAAI,cAAc,EAAE,GAAG,EAAE,eAAe,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBACpE,MAAM,GAAG,GACP,kJAAkJ,CAAC;gBACrJ,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC;gBACrC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,UAAU;gBACV,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACtC,cAAc;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC;YAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnF,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;gBACvB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC1C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnD,SAAS;gBACT,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI;aACzF,CAAC,CAAC;YACH,KAAK,GAAG,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACrF,UAAU,GAAG,YAAY,CAAC;YAE1B,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,KAAK,WAAW;iBACb,QAAQ,CAAC,gBAAgB,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;iBACjE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAEvE,OAAO,sBAAsB,CAAC;gBAC5B,UAAU,EAAE,IAAI,iBAAiB,CAC/B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAChB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CACrD;gBACD,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC9B,GAAG;gBACH,UAAU;gBACV,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBAC5C,EAAE;gBACF,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/compliance/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,KAAK,EACL,cAAc,EACd,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,uBAAuB,EACvB,UAAU,EACV,kBAAkB,EAClB,KAAK,GAEN,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAEjF,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;AACvC,MAAM,gBAAgB,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;AAC7C,MAAM,uBAAuB,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAE3D,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;CAClC,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACnC,gFAAgF;IAChF,+EAA+E;IAC/E,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,eAAe,YAAY,CAAC;IAC1B,EAAE,EAAE,YAAY;IAChB,SAAS,EAAE,CAAC,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC;IACzE,aAAa,EAAE,CAAC,iBAAiB,CAAC;IAClC,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,EAAE,gBAAgB,IAAI,oBAAoB,CAAC;YACnE,MAAM,aAAa,GAAG,CAAC;iBACpB,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,sBAAsB,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,2EAA2E;QAC3E,IAAI,MAAM,GAAkC,IAAI,CAAC;QACjD,IAAI,KAAK,GAAqB,IAAI,CAAC;QACnC,IAAI,UAAU,GAA+B,IAAI,CAAC;QAClD,IAAI,WAAW,GAA2B,IAAI,CAAC;QAE/C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM;iBACH,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;iBACjC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,OAAsB,EAAE,EAAE;YAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,KAAK,WAAW;iBACb,OAAO,CACN,aAAa,EACb,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,EAAE,cAAc,EAAE,WAAW,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAC7D;iBACA,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC;QAEF,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,OAAO,EAAE,EAAE;YACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,4BAA4B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACnF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;YACzC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBACxC,CAAC;gBACD,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACd,KAAK,EAAE,uBAAuB;YAC9B,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC7B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,MAAM,CAAC,YAAY,CACvB,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,MAAM,EACd,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAC7B,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QAEH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;YAClC,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,qFAAqF;YACrF,sFAAsF;YACtF,sDAAsD;YACtD,IAAI,cAAc,EAAE,GAAG,EAAE,eAAe,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBACpE,MAAM,GAAG,GACP,kJAAkJ,CAAC;gBACrJ,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,sBAAsB,CAAC;gBACrC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,UAAU;gBACV,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBACtC,cAAc;aACf,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC;YAEb,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnF,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;gBACvB,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;gBAC1C,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;gBACnD,SAAS;gBACT,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI;aACzF,CAAC,CAAC;YACH,KAAK,GAAG,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACrF,UAAU,GAAG,YAAY,CAAC;YAE1B,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,KAAK,WAAW;iBACb,QAAQ,CAAC,gBAAgB,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;iBACjE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAEvE,OAAO,sBAAsB,CAAC;gBAC5B,UAAU,EAAE,IAAI,iBAAiB,CAC/B,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EACd,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAChB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CACrD;gBACD,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC9B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1B,GAAG;gBACH,UAAU;gBACV,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBAC5C,QAAQ,EAAE,WAAW;gBACrB,oBAAoB,EAAE,uBAAuB;gBAC7C,EAAE;gBACF,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC,CAAC"}

package/dist/compliance/router/index.d.ts

@@ -1,17 +1,20 @@
 import { AdminGuard, type OssContext } from '@openora/core/server';
-import type { KycAdapter, KycWebhookVerifier } from '@openora/core/contracts';
+import type { AuditWritePort, JobQueueAdapter, KycAdapter, KycWebhookVerifier, QueueName } from '@openora/core/contracts';
 import { ComplianceService } from '../service/compliance.service.js';
 import { KycVerificationService } from '../service/kyc.service.js';
 import { RgService } from '../service/rg.service.js';
 import { RgMonitoringService } from '../service/rg-monitoring.service.js';
-export declare function createComplianceRouter({ compliance, adminGuard, kyc, kycAdapter, webhookVerifier, rg, rgMonitoring, }: {
+export declare function createComplianceRouter({ compliance, adminGuard, audit, kyc, kycAdapter, webhookVerifier, jobQueue, kycDecisionSyncQueue, rg, rgMonitoring, }: {
     rg: RgService;
     rgMonitoring: RgMonitoringService;
     compliance: ComplianceService;
     adminGuard: AdminGuard;
+    audit: AuditWritePort;
     kyc: KycVerificationService;
     kycAdapter: KycAdapter;
     webhookVerifier: KycWebhookVerifier;
+    jobQueue: JobQueueAdapter;
+    kycDecisionSyncQueue: QueueName;
 }): {
     getLimits: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodArray<import("zod").ZodObject<{
         id: import("zod").ZodUUID;
@@ -111,6 +114,7 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
             status: import("zod").ZodEnum<{
                 pending: "pending";
                 not_started: "not_started";
+                approved: "approved";
                 verified: "verified";
                 rejected: "rejected";
                 resubmission_requested: "resubmission_requested";
@@ -127,6 +131,25 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
                 submission: "submission";
                 reverify_threshold: "reverify_threshold";
             }>;
+            riskSignals: import("zod").ZodNullable<import("zod").ZodObject<{
+                vpnOrTorDetected: import("zod").ZodBoolean;
+                dataCenterIpDetected: import("zod").ZodBoolean;
+                duplicateDeviceDetected: import("zod").ZodBoolean;
+                highRiskCountryDetected: import("zod").ZodBoolean;
+                deviceFingerprints: import("zod").ZodArray<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>>;
+            checks: import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodObject<{
+                step: import("zod").ZodString;
+                status: import("zod").ZodEnum<{
+                    expired: "expired";
+                    unknown: "unknown";
+                    not_started: "not_started";
+                    approved: "approved";
+                    in_progress: "in_progress";
+                    in_review: "in_review";
+                    declined: "declined";
+                }>;
+            }, import("zod/v4/core").$strip>>>;
             submittedAt: import("zod").ZodISODateTime;
             decidedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
             createdAt: import("zod").ZodISODateTime;
@@ -140,6 +163,7 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
             status: import("zod").ZodEnum<{
                 pending: "pending";
                 not_started: "not_started";
+                approved: "approved";
                 verified: "verified";
                 rejected: "rejected";
                 resubmission_requested: "resubmission_requested";
@@ -156,6 +180,25 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
                 submission: "submission";
                 reverify_threshold: "reverify_threshold";
             }>;
+            riskSignals: import("zod").ZodNullable<import("zod").ZodObject<{
+                vpnOrTorDetected: import("zod").ZodBoolean;
+                dataCenterIpDetected: import("zod").ZodBoolean;
+                duplicateDeviceDetected: import("zod").ZodBoolean;
+                highRiskCountryDetected: import("zod").ZodBoolean;
+                deviceFingerprints: import("zod").ZodArray<import("zod").ZodString>;
+            }, import("zod/v4/core").$strip>>;
+            checks: import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodObject<{
+                step: import("zod").ZodString;
+                status: import("zod").ZodEnum<{
+                    expired: "expired";
+                    unknown: "unknown";
+                    not_started: "not_started";
+                    approved: "approved";
+                    in_progress: "in_progress";
+                    in_review: "in_review";
+                    declined: "declined";
+                }>;
+            }, import("zod/v4/core").$strip>>>;
             submittedAt: import("zod").ZodISODateTime;
             decidedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
             createdAt: import("zod").ZodISODateTime;
@@ -180,6 +223,7 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
         status: import("zod").ZodEnum<{
             pending: "pending";
             not_started: "not_started";
+            approved: "approved";
             verified: "verified";
             rejected: "rejected";
             resubmission_requested: "resubmission_requested";
@@ -196,6 +240,25 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
             submission: "submission";
             reverify_threshold: "reverify_threshold";
         }>;
+        riskSignals: import("zod").ZodNullable<import("zod").ZodObject<{
+            vpnOrTorDetected: import("zod").ZodBoolean;
+            dataCenterIpDetected: import("zod").ZodBoolean;
+            duplicateDeviceDetected: import("zod").ZodBoolean;
+            highRiskCountryDetected: import("zod").ZodBoolean;
+            deviceFingerprints: import("zod").ZodArray<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        checks: import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodObject<{
+            step: import("zod").ZodString;
+            status: import("zod").ZodEnum<{
+                expired: "expired";
+                unknown: "unknown";
+                not_started: "not_started";
+                approved: "approved";
+                in_progress: "in_progress";
+                in_review: "in_review";
+                declined: "declined";
+            }>;
+        }, import("zod/v4/core").$strip>>>;
         submittedAt: import("zod").ZodISODateTime;
         decidedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
         createdAt: import("zod").ZodISODateTime;
@@ -205,6 +268,127 @@ export declare function createComplianceRouter({ compliance, adminGuard, kyc, ky
     kycWebhook: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
     }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    requestKycResubmission: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        userId: import("zod").ZodUUID;
+        reason: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        id: import("zod").ZodUUID;
+        userId: import("zod").ZodUUID;
+        provider: import("zod").ZodString;
+        referenceId: import("zod").ZodString;
+        status: import("zod").ZodEnum<{
+            pending: "pending";
+            not_started: "not_started";
+            approved: "approved";
+            verified: "verified";
+            rejected: "rejected";
+            resubmission_requested: "resubmission_requested";
+            manually_overridden: "manually_overridden";
+        }>;
+        documentTypes: import("zod").ZodArray<import("zod").ZodEnum<{
+            passport: "passport";
+            drivers_license: "drivers_license";
+            national_id: "national_id";
+        }>>;
+        decisionReason: import("zod").ZodNullable<import("zod").ZodString>;
+        triggeredBy: import("zod").ZodEnum<{
+            manual: "manual";
+            submission: "submission";
+            reverify_threshold: "reverify_threshold";
+        }>;
+        riskSignals: import("zod").ZodNullable<import("zod").ZodObject<{
+            vpnOrTorDetected: import("zod").ZodBoolean;
+            dataCenterIpDetected: import("zod").ZodBoolean;
+            duplicateDeviceDetected: import("zod").ZodBoolean;
+            highRiskCountryDetected: import("zod").ZodBoolean;
+            deviceFingerprints: import("zod").ZodArray<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        checks: import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodObject<{
+            step: import("zod").ZodString;
+            status: import("zod").ZodEnum<{
+                expired: "expired";
+                unknown: "unknown";
+                not_started: "not_started";
+                approved: "approved";
+                in_progress: "in_progress";
+                in_review: "in_review";
+                declined: "declined";
+            }>;
+        }, import("zod/v4/core").$strip>>>;
+        submittedAt: import("zod").ZodISODateTime;
+        decidedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        createdAt: import("zod").ZodISODateTime;
+        updatedAt: import("zod").ZodISODateTime;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    overrideKycStatus: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        userId: import("zod").ZodUUID;
+        status: import("zod").ZodEnum<{
+            pending: "pending";
+            not_started: "not_started";
+            approved: "approved";
+            rejected: "rejected";
+            resubmission_requested: "resubmission_requested";
+        }>;
+        reason: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        id: import("zod").ZodUUID;
+        userId: import("zod").ZodUUID;
+        provider: import("zod").ZodString;
+        referenceId: import("zod").ZodString;
+        status: import("zod").ZodEnum<{
+            pending: "pending";
+            not_started: "not_started";
+            approved: "approved";
+            verified: "verified";
+            rejected: "rejected";
+            resubmission_requested: "resubmission_requested";
+            manually_overridden: "manually_overridden";
+        }>;
+        documentTypes: import("zod").ZodArray<import("zod").ZodEnum<{
+            passport: "passport";
+            drivers_license: "drivers_license";
+            national_id: "national_id";
+        }>>;
+        decisionReason: import("zod").ZodNullable<import("zod").ZodString>;
+        triggeredBy: import("zod").ZodEnum<{
+            manual: "manual";
+            submission: "submission";
+            reverify_threshold: "reverify_threshold";
+        }>;
+        riskSignals: import("zod").ZodNullable<import("zod").ZodObject<{
+            vpnOrTorDetected: import("zod").ZodBoolean;
+            dataCenterIpDetected: import("zod").ZodBoolean;
+            duplicateDeviceDetected: import("zod").ZodBoolean;
+            highRiskCountryDetected: import("zod").ZodBoolean;
+            deviceFingerprints: import("zod").ZodArray<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        checks: import("zod").ZodNullable<import("zod").ZodArray<import("zod").ZodObject<{
+            step: import("zod").ZodString;
+            status: import("zod").ZodEnum<{
+                expired: "expired";
+                unknown: "unknown";
+                not_started: "not_started";
+                approved: "approved";
+                in_progress: "in_progress";
+                in_review: "in_review";
+                declined: "declined";
+            }>;
+        }, import("zod/v4/core").$strip>>>;
+        submittedAt: import("zod").ZodISODateTime;
+        decidedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        createdAt: import("zod").ZodISODateTime;
+        updatedAt: import("zod").ZodISODateTime;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    bulkApproveKyc: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        userIds: import("zod").ZodArray<import("zod").ZodUUID>;
+        reason: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        results: import("zod").ZodArray<import("zod").ZodObject<{
+            userId: import("zod").ZodUUID;
+            success: import("zod").ZodBoolean;
+            error: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     setPlayerLimit: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
         userId: import("zod").ZodUUID;
         type: import("zod").ZodEnum<{

package/dist/compliance/router/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAwB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE9E,OAAO,EACL,iBAAiB,EAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EACL,SAAS,EAKV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,GAAG,EACH,UAAU,EACV,eAAe,EACf,EAAE,EACF,YAAY,GACb,EAAE;IACD,EAAE,EAAE,SAAS,CAAC;IACd,YAAY,EAAE,mBAAmB,CAAC;IAClC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,GAAG,EAAE,sBAAsB,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,CAAC;CACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2GA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAwB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,SAAS,EACV,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,EAGlB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAuB,MAAM,2BAA2B,CAAC;AACxF,OAAO,EACL,SAAS,EAKV,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,KAAK,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,EAAE,EACF,YAAY,GACb,EAAE;IACD,EAAE,EAAE,SAAS,CAAC;IACd,YAAY,EAAE,mBAAmB,CAAC;IAClC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,cAAc,CAAC;IACtB,GAAG,EAAE,sBAAsB,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,CAAC;IACpC,QAAQ,EAAE,eAAe,CAAC;IAC1B,oBAAoB,EAAE,SAAS,CAAC;CACjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuKA"}

package/dist/compliance/router/index.js

@@ -1,9 +1,11 @@
+import { createHash } from 'node:crypto';
 import { implement, ORPCError } from '@orpc/server';
 import { getUserId, mapErrors } from '@openora/core/server';
 import { complianceContract } from '../contract/index.js';
 import { LimitNotFoundError, LimitOwnershipError, } from '../service/compliance.service.js';
+import { PlayerNotFoundError } from '../service/kyc.service.js';
 import { ExclusionNotFoundError, ActiveExclusionError, PermanentExclusionLiftError, ExclusionPeriodNotElapsedError, } from '../service/rg.service.js';
-export function createComplianceRouter({ compliance, adminGuard, kyc, kycAdapter, webhookVerifier, rg, rgMonitoring, }) {
+export function createComplianceRouter({ compliance, adminGuard, audit, kyc, kycAdapter, webhookVerifier, jobQueue, kycDecisionSyncQueue, rg, rgMonitoring, }) {
     const os = implement(complianceContract).$context();
     return os.router({
         getLimits: os.getLimits.handler(({ context }) => compliance.getLimitsForUser(getUserId(context))),
@@ -36,15 +38,62 @@ export function createComplianceRouter({ compliance, adminGuard, kyc, kycAdapter
         // signature header or reject (fail closed); never fall back to an empty body.
         kycWebhook: os.kycWebhook.handler(async ({ context }) => {
             const rawBody = context.rawBody;
-            if (rawBody === undefined || !webhookVerifier.verify(rawBody, context.request.headers)) {
+            if (rawBody === undefined ||
+                !(await webhookVerifier.verify(rawBody, context.request.headers))) {
                 throw new ORPCError('UNAUTHORIZED', { message: 'Invalid KYC webhook signature' });
             }
             const decision = kycAdapter.parseWebhook?.(rawBody, context.request.headers);
             if (decision) {
-                await kyc.reconcile(decision.referenceId, decision.status);
+                // Dedup on a hash of the verbatim delivery bytes, never on referenceId:status.
+                // The vendor-neutral KycResult carries no delivery/event id, so the only
+                // signal that reliably distinguishes "the SAME decision resent" (retry storm
+                // within the vendor's own SLA - collapse it) from "a genuinely NEW decision
+                // that happens to land on a status we've seen before" (eg
+                // rejected -> approved -> rejected again - must run) is the raw body itself:
+                // a true redelivery is byte-identical: a new decision is not. Keying on
+                // referenceId:status instead would give BullMQ's permanent-by-default jobId
+                // dedup (see bullmq-job-queue.ts) a key that legitimately repeats, silently
+                // dropping the later, real decision forever.
+                const idempotencyKey = `kyc-decision-sync:${createHash('sha256').update(rawBody).digest('hex')}`;
+                // Stamped HERE, at webhook-arrival time - never in the job handler - so the
+                // reconcile monotonicity guard has the true delivery order even when the job
+                // queue (which ignores orderingKey) runs two decisions for the same reference
+                // out of order.
+                const receivedAt = new Date().toISOString();
+                await jobQueue.enqueue(kycDecisionSyncQueue, { referenceId: decision.referenceId, status: decision.status, receivedAt }, {
+                    idempotencyKey,
+                    orderingKey: decision.referenceId,
+                    attempts: 5,
+                    backoff: { type: 'exponential', delayMs: 1_000 },
+                });
             }
             return { ok: true };
         }),
+        requestKycResubmission: os.requestKycResubmission.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            return mapErrors({ NOT_FOUND: PlayerNotFoundError }, () => kyc.requestResubmission(input.userId, input.reason, caller.userId));
+        }),
+        overrideKycStatus: os.overrideKycStatus.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            return mapErrors({ NOT_FOUND: PlayerNotFoundError }, () => kyc.overrideStatus(input.userId, input.status, input.reason, caller.userId));
+        }),
+        bulkApproveKyc: os.bulkApproveKyc.handler(async ({ input, context }) => {
+            const caller = await adminGuard.assert(context, 'compliance', 'override-limit');
+            const results = await kyc.bulkApprove(input.userIds, input.reason, caller.userId);
+            // A per-item failure never reaches overrideStatus, so it leaves no
+            // compliance.kyc.updated trail of its own - record the WHOLE attempted batch here
+            // (every userId, success/failure per item) so a probe of nonexistent ids is still
+            // visible in the audit log even when nothing downstream changed.
+            await audit.record({
+                actorId: caller.userId,
+                actorType: 'admin',
+                action: 'compliance.kyc.bulk_approve',
+                resourceType: 'compliance',
+                resourceId: null,
+                after: { reason: input.reason, results },
+            });
+            return { results };
+        }),
         setPlayerLimit: os.setPlayerLimit.handler(async ({ input, context }) => {
             const { userId, ip, userAgent } = await adminGuard.assert(context, 'compliance', 'manage-rg');
             return rg.setPlayerLimit(input.userId, input, userId, { ip, userAgent });

package/dist/compliance/router/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAc,SAAS,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAEL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,MAAM,UAAU,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,GAAG,EACH,UAAU,EACV,eAAe,EACf,EAAE,EACF,YAAY,GASb;IACC,MAAM,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9C,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAChD;QAED,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/E,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACvF,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CACzE,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CACvD,OAAO,EACP,YAAY,EACZ,gBAAgB,CACjB,CAAC;YACF,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;QACnC,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrD,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC,CAAC;QAEF,iFAAiF;QACjF,8EAA8E;QAC9E,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvF,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACtE,CAAC;QACJ,CAAC,CAAC;QAEF,qBAAqB,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACzE,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;aACxE,EACD,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,CAC3D,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;QACJ,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/compliance/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAc,SAAS,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AAQzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAA0B,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAEL,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,MAAM,UAAU,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,EACV,KAAK,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,EAAE,EACF,YAAY,GAYb;IACC,MAAM,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAc,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9C,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAChD;QAED,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/E,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACzD,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACvF,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CACzE,CAAC;QACJ,CAAC,CAAC;QAEF,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;YAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;YAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,WAAW,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7D,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CACvD,OAAO,EACP,YAAY,EACZ,gBAAgB,CACjB,CAAC;YACF,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAC;QACnC,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrD,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC,CAAC;QAEF,iFAAiF;QACjF,8EAA8E;QAC9E,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,IACE,OAAO,KAAK,SAAS;gBACrB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EACjE,CAAC;gBACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7E,IAAI,QAAQ,EAAE,CAAC;gBACb,+EAA+E;gBAC/E,yEAAyE;gBACzE,6EAA6E;gBAC7E,4EAA4E;gBAC5E,0DAA0D;gBAC1D,6EAA6E;gBAC7E,wEAAwE;gBACxE,4EAA4E;gBAC5E,4EAA4E;gBAC5E,6CAA6C;gBAC7C,MAAM,cAAc,GAAG,qBAAqB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjG,4EAA4E;gBAC5E,6EAA6E;gBAC7E,8EAA8E;gBAC9E,gBAAgB;gBAChB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,QAAQ,CAAC,OAAO,CACpB,oBAAoB,EACpB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,EAC1E;oBACE,cAAc;oBACd,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,QAAQ,EAAE,CAAC;oBACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;iBACjD,CACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC,CAAC;QAEF,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrF,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACxD,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CACnE,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE,CACxD,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAC5E,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;YAChF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAClF,mEAAmE;YACnE,kFAAkF;YAClF,kFAAkF;YAClF,iEAAiE;YACjE,MAAM,KAAK,CAAC,MAAM,CAAC;gBACjB,OAAO,EAAE,MAAM,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO;gBAClB,MAAM,EAAE,6BAA6B;gBACrC,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;aACzC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC;QAEF,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC7E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACtE,CAAC;QACJ,CAAC,CAAC;QAEF,qBAAqB,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnF,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CACxD,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CACzE,CAAC;QACJ,CAAC,CAAC;QAEF,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3E,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CACd;gBACE,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,CAAC,2BAA2B,EAAE,8BAA8B,CAAC;aACxE,EACD,GAAG,EAAE,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAC3E,CAAC;QACJ,CAAC,CAAC;QAEF,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9F,OAAO,SAAS,CAAC,EAAE,SAAS,EAAE,sBAAsB,EAAE,EAAE,GAAG,EAAE,CAC3D,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAClE,CAAC;QACJ,CAAC,CAAC;QAEF,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACjE,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC,CAAC;QAEF,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YAC/D,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/compliance/schema/index.d.ts

@@ -1,4 +1,5 @@
-export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
+import { type KycRiskSignals } from '@openora/core/contracts';
+export declare const kycVerificationStatus: import("drizzle-orm/pg-core").PgEnum<["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"]>;
 export declare const kycTriggeredBy: import("drizzle-orm/pg-core").PgEnum<["submission", "reverify_threshold", "manual"]>;
 export declare const rgExclusionKind: import("drizzle-orm/pg-core").PgEnum<["cooling_off", "self_exclusion"]>;
 export declare const rgExclusionStatus: import("drizzle-orm/pg-core").PgEnum<["active", "lifted", "expired"]>;
@@ -299,14 +300,14 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             tableName: "kyc_verification";
             dataType: "string";
             columnType: "PgEnumColumn";
-            data: "pending" | "not_started" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
+            data: "pending" | "not_started" | "approved" | "verified" | "rejected" | "resubmission_requested" | "manually_overridden";
             driverParam: string;
             notNull: true;
             hasDefault: false;
             isPrimaryKey: false;
             isAutoincrement: false;
             hasRuntimeDefault: false;
-            enumValues: ["not_started", "pending", "verified", "rejected", "resubmission_requested", "manually_overridden"];
+            enumValues: ["not_started", "pending", "approved", "verified", "rejected", "resubmission_requested", "manually_overridden"];
             baseColumn: never;
             identity: undefined;
             generated: undefined;
@@ -347,6 +348,50 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        riskSignals: import("drizzle-orm/pg-core").PgColumn<{
+            name: "riskSignals";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: KycRiskSignals;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: KycRiskSignals;
+        }>;
+        checks: import("drizzle-orm/pg-core").PgColumn<{
+            name: "checks";
+            tableName: "kyc_verification";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: {
+                step: string;
+                status: "expired" | "unknown" | "not_started" | "approved" | "in_progress" | "in_review" | "declined";
+            }[];
+        }>;
         triggeredBy: import("drizzle-orm/pg-core").PgColumn<{
             name: "triggeredBy";
             tableName: "kyc_verification";
@@ -381,6 +426,23 @@ export declare const kycVerification: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        decisionReceivedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "decisionReceivedAt";
+            tableName: "kyc_verification";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         submittedAt: import("drizzle-orm/pg-core").PgColumn<{
             name: "submittedAt";
             tableName: "kyc_verification";

package/dist/compliance/schema/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,qBAAqB,2IAAkD,CAAC;AACrF,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AAEvE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/compliance/schema/index.ts"],"names":[],"mappings":"AAcA,OAAO,EASL,KAAK,cAAc,EAEpB,MAAM,yBAAyB,CAAC;AAIjC,eAAO,MAAM,qBAAqB,uJAAkD,CAAC;AACrF,eAAO,MAAM,cAAc,sFAA+C,CAAC;AAC3E,eAAO,MAAM,eAAe,yEAA+C,CAAC;AAC5E,eAAO,MAAM,iBAAiB,uEAAoD,CAAC;AACnF,eAAO,MAAM,UAAU,kGAAwC,CAAC;AAChE,eAAO,MAAM,YAAY,6DAA6C,CAAC;AAEvE,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBrB,CAAC;AAEF,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKlB,CAAC;AAGH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkC3B,CAAC;AAKF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4BvB,CAAC;AAIF,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsBlB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,YAAY,CAAC;AACtD,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,YAAY,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,YAAY,CAAC;AAC1D,MAAM,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC"}

package/dist/compliance/schema/index.js

@@ -40,10 +40,18 @@ export const kycVerification = pgTable('kyc_verification', {
     status: kycVerificationStatus().notNull(),
     documentTypes: jsonb().$type().notNull().default([]),
     decisionReason: text(),
+    riskSignals: jsonb().$type(),
+    checks: jsonb().$type(),
     triggeredBy: kycTriggeredBy().notNull(),
     // High-water mark of deposits at the last reverify_threshold fire, so re-KYC triggers
     // once per fresh threshold band rather than on every deposit.
     triggerDeposits: decimal({ precision: 18, scale: 2 }),
+    // The wall-clock time THIS decision was received (webhook arrival / submit time),
+    // never job-processing time - a job/webhook retry or out-of-order worker execution
+    // must not reorder this. `reconcile` refuses to apply an incoming decision older
+    // than this watermark, closing the window where two vendor decisions (eg
+    // approved then rejected) interleave out of order and leave the wrong one applied.
+    decisionReceivedAt: timestamp({ withTimezone: true }),
     submittedAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
     decidedAt: timestamp({ withTimezone: true }),
     createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),