@openora/core 0.4.1-canary.66 → 0.4.1-canary.68

package/dist/engagement/social/plugin.d.ts

@@ -0,0 +1,111 @@
+declare const _default: {
+    readonly id: "social";
+    readonly dependsOn: readonly ["chat"];
+    readonly register: (ctx: import("@openora/core/server").PluginContext<{
+        ADMIN_GAME_REPORTING: import("../../contracts/index.js").Token<import("../../contracts/index.js").AdminGameReporting>;
+        ADMIN_GUARD: import("../../contracts/index.js").Token<import("@openora/core/server").AdminGuard>;
+        ADMIN_PERMISSION_RESOLVER: import("../../contracts/index.js").Token<import("../../contracts/index.js").AdminPermissionResolver>;
+        ADMIN_PLAYER_ACTIVITY: import("../../contracts/index.js").Token<import("../../contracts/index.js").AdminPlayerActivity>;
+        ADMIN_USER_DIRECTORY: import("../../contracts/index.js").Token<import("../../contracts/index.js").AdminUserDirectory>;
+        ADMIN_WALLET_REPORTING: import("../../contracts/index.js").Token<import("../../contracts/index.js").AdminWalletReporting>;
+        AUDIT_WRITER: import("../../contracts/index.js").SealedToken<import("../../contracts/index.js").AuditWritePort>;
+        AUTH_SESSION: import("../../contracts/index.js").Token<import("@openora/core/server").SessionResolver>;
+        CACHE: import("../../contracts/index.js").Token<import("../../contracts/index.js").CacheAdapter>;
+        CHAT_BLOCK_WRITER: import("../../contracts/index.js").Token<import("../../contracts/index.js").ChatBlockWriter>;
+        CHAT_REALTIME_CLIENT_AUTHORIZER: import("../../contracts/index.js").Token<import("../../contracts/index.js").RealtimeClientAuthorizer>;
+        CHAT_REALTIME_TRANSPORT: import("../../contracts/index.js").Token<import("../../contracts/index.js").RealtimeTransport>;
+        CHAT_ROOM_ACCESS: import("../../contracts/index.js").Token<import("../../contracts/index.js").ChatRoomAccess>;
+        CHAT_SYSTEM_WRITER: import("../../contracts/index.js").Token<import("../../contracts/index.js").ChatSystemWriter, string>;
+        DRIZZLE: import("../../contracts/index.js").Token<import("@openora/core/server").DrizzleService>;
+        EMAIL_TEMPLATE_RENDERER: import("../../contracts/index.js").Token<import("../../contracts/index.js").EmailTemplateRenderer>;
+        ERROR_TRACKING: import("../../contracts/index.js").Token<import("../../contracts/index.js").ErrorTrackingAdapter>;
+        EVENT_BUS: import("../../contracts/index.js").Token<import("@openora/core/server").EventBus>;
+        GAME_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").GameAdapter>;
+        GEO_IP_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").GeoIpAdapter>;
+        GIFT_COMMANDS: import("../../contracts/index.js").Token<import("../../contracts/index.js").GiftCommands>;
+        IDENTITY_OPTIONS: import("../../contracts/index.js").Token<import("../../contracts/index.js").IdentityServiceOptions>;
+        IDENTITY_READER: import("../../contracts/index.js").Token<import("../../contracts/index.js").IdentityReader, string>;
+        IGAMING_CONFIG: import("../../contracts/index.js").Token<{
+            branding: {
+                name: string;
+                themePreset?: string | undefined;
+                supportEmail?: string | undefined;
+            };
+            currencies: string[];
+            jurisdictions: string[];
+            blockedCountries: string[];
+            limits: {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            };
+            providers: {
+                payment?: string | undefined;
+                kyc?: string | undefined;
+                geoIp?: string | undefined;
+                aggregator?: string | undefined;
+                notification?: string | undefined;
+            };
+            enabledModules?: string[] | undefined;
+        }, string>;
+        JOB_QUEUE: import("../../contracts/index.js").Token<import("../../contracts/index.js").JobQueueAdapter>;
+        KYC_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").KycAdapter>;
+        KYC_STATUS_WRITER: import("../../contracts/index.js").Token<import("../../contracts/index.js").KycStatusWriter>;
+        KYC_WEBHOOK_VERIFIER: import("../../contracts/index.js").Token<import("../../contracts/index.js").KycWebhookVerifier>;
+        LOGIN_ENFORCEMENT: import("../../contracts/index.js").Token<import("../../contracts/index.js").LoginEnforcementPort>;
+        MESSAGE_BROKER: import("../../contracts/index.js").Token<import("../../contracts/index.js").MessageBrokerAdapter>;
+        NOTIFICATION_DELIVERY_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").NotificationDeliveryAdapter>;
+        OUTBOX: import("../../contracts/index.js").Token<import("../../contracts/index.js").OutboxWriter>;
+        PAYMENT_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").PaymentAdapter>;
+        PAYMENT_WEBHOOK_VERIFIER: import("../../contracts/index.js").Token<import("../../contracts/index.js").PaymentWebhookVerifier>;
+        PLATFORM_CONFIG: import("../../contracts/index.js").Token<{
+            features: Record<string, boolean>;
+            brands: {
+                id: string;
+                name: string;
+                themePreset?: string | undefined;
+                themeOverrides?: Record<string, string> | undefined;
+            }[];
+            rgLimits: Record<string, {
+                maxDepositPerDay?: number | undefined;
+                maxDepositPerMonth?: number | undefined;
+                maxLossPerDay?: number | undefined;
+                maxStakePerBet?: number | undefined;
+                sessionReminderMinutes?: number | undefined;
+            }>;
+            activeBrand?: string | undefined;
+            kyc?: {
+                gateWithdrawals: boolean;
+                provider?: string | undefined;
+                webhookSecretEnv?: string | undefined;
+                reverifyThresholds?: Record<string, string> | undefined;
+            } | undefined;
+            autoWithdrawal?: {
+                enabled: boolean;
+                dailyCapAmount?: string | undefined;
+                dailyCapCount?: number | undefined;
+            } | undefined;
+            wallet?: {
+                cryptoCurrencies?: string[] | undefined;
+            } | undefined;
+            supportedLanguages?: string[] | undefined;
+        }, string>;
+        PLAYER_TAGS: import("../../contracts/index.js").Token<import("../../contracts/index.js").PlayerTags>;
+        PLAY_ELIGIBILITY: import("../../contracts/index.js").Token<import("../../contracts/index.js").PlayEligibilityPort>;
+        RAIN_COMMANDS: import("../../contracts/index.js").Token<import("../../contracts/index.js").RainCommands>;
+        RATE_LIMITER: import("../../contracts/index.js").Token<import("../../contracts/index.js").RateLimiterAdapter<`register:${string}` | `login:${string}` | `enable2fa:${string}` | `verify2fa:${string}` | `disable2fa:${string}` | `pwreset-req:${string}` | `pwreset-verify:${string}` | `pwreset:${string}` | `change-password:${string}` | `email-verify:${string}` | `verify-email:${string}` | `wallet-mutation:${string}` | `chat-room-join:${string}` | `chat-send:${string}` | `report-access-denied:${string}`>>;
+        REALTIME_CLIENT_AUTHORIZER: import("../../contracts/index.js").Token<import("../../contracts/index.js").RealtimeClientAuthorizer>;
+        REALTIME_TRANSPORT: import("../../contracts/index.js").Token<import("../../contracts/index.js").RealtimeTransport>;
+        RNG_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").RngAdapter>;
+        SEND_EMAIL: import("../../contracts/index.js").Token<import("../../contracts/index.js").SendEmailPort>;
+        SESSION_COMMANDS: import("../../contracts/index.js").Token<import("../../contracts/index.js").SessionCommands>;
+        SMS_ADAPTER: import("../../contracts/index.js").Token<import("../../contracts/index.js").SmsAdapter>;
+        TAG_EVALUATION_COMMANDS: import("../../contracts/index.js").Token<import("../../contracts/index.js").TagEvaluationCommands>;
+        WALLET_COMMANDS: import("../../contracts/index.js").Token<import("../../contracts/index.js").WalletCommands>;
+        WALLET_READER: import("../../contracts/index.js").Token<import("../../contracts/index.js").WalletReader, string>;
+    }>) => void;
+};
+export default _default;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/engagement/social/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/engagement/social/plugin.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,wBAQ8C"}

package/dist/engagement/social/plugin.js

@@ -0,0 +1,16 @@
+import { EVENT_BUS, DRIZZLE } from '@openora/core/server';
+import { SocialService } from './service/social.service.js';
+import { createSocialRouter } from './router/index.js';
+// DI wiring only - no business logic here. sendFriendRequest/getRelationships read
+// the `player` table via the read-only @openora/core/pam/schema/profile subpath
+// (ADR-0020), not a DI token/command port, so no dependsOn is needed to pin load
+// order - the imported pgTable is a plain object available regardless of plugin
+// registration order.
+export default {
+    id: 'social',
+    dependsOn: ['chat'],
+    register(ctx) {
+        ctx.routers.add('social', (c) => createSocialRouter(new SocialService(c.get(DRIZZLE), c.get(EVENT_BUS))));
+    },
+};
+//# sourceMappingURL=plugin.js.map

package/dist/engagement/social/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../src/engagement/social/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,mFAAmF;AACnF,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,sBAAsB;AACtB,eAAe;IACb,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,QAAQ,CAAC,GAAG;QACV,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,kBAAkB,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC;CAC0C,CAAC"}

package/dist/engagement/social/router/index.d.ts

@@ -0,0 +1,31 @@
+import { type OssContext } from '@openora/core/server';
+import { SocialService } from '../service/social.service.js';
+export declare function createSocialRouter(social: SocialService): {
+    sendFriendRequest: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        targetUserId: import("zod").ZodUUID;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        id: import("zod").ZodUUID;
+        requesterId: import("zod").ZodUUID;
+        addresseeId: import("zod").ZodUUID;
+        createdAt: import("zod").ZodISODateTime;
+        acceptedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+        refusedAt: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+    }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    getRelationships: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<OssContext & Record<never, never>, OssContext & Record<never, never>, OssContext>, OssContext, import("zod").ZodObject<{
+        userIds: import("zod").ZodArray<import("zod").ZodUUID>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodArray<import("zod").ZodObject<{
+        userId: import("zod").ZodUUID;
+        status: import("zod").ZodEnum<{
+            none: "none";
+            pending_outgoing: "pending_outgoing";
+            pending_incoming: "pending_incoming";
+            friends: "friends";
+            refused: "refused";
+            blocked_by_me: "blocked_by_me";
+            unavailable: "unavailable";
+        }>;
+        friendshipId: import("zod").ZodNullable<import("zod").ZodUUID>;
+        canSendRequest: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/engagement/social/router/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/engagement/social/router/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,EACL,aAAa,EAQd,MAAM,8BAA8B,CAAC;AAKtC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BvD"}

package/dist/engagement/social/router/index.js

@@ -0,0 +1,31 @@
+import { implement } from '@orpc/server';
+import { getUserId, mapErrors } from '@openora/core/server';
+import { socialContract } from '../contract/index.js';
+import { SelfFriendRequestError, FriendRequestTargetNotFoundError, FriendRequestUnavailableError, AlreadyFriendsError, RequestAlreadyPendingError, FriendRequestRefusedError, BlockedBySelfError, } from '../service/social.service.js';
+// oRPC router factory for Social. plugin.ts builds the service from the
+// container and passes it here; each procedure delegates to the service. Keep this
+// thin: resolve the caller, call the service, map domain errors - no business rules.
+export function createSocialRouter(social) {
+    const os = implement(socialContract).$context();
+    return os.router({
+        sendFriendRequest: os.sendFriendRequest.handler(({ input, context }) => {
+            const callerId = getUserId(context);
+            return mapErrors({
+                BAD_REQUEST: [SelfFriendRequestError],
+                NOT_FOUND: [FriendRequestTargetNotFoundError],
+                CONFLICT: [
+                    AlreadyFriendsError,
+                    RequestAlreadyPendingError,
+                    FriendRequestRefusedError,
+                    FriendRequestUnavailableError,
+                    BlockedBySelfError,
+                ],
+            }, () => social.sendFriendRequest(callerId, input.targetUserId));
+        }),
+        getRelationships: os.getRelationships.handler(({ input, context }) => {
+            const callerId = getUserId(context);
+            return social.getRelationships(callerId, input.userIds);
+        }),
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/engagement/social/router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/engagement/social/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAmB,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAEL,sBAAsB,EACtB,gCAAgC,EAChC,6BAA6B,EAC7B,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAEtC,wEAAwE;AACxE,mFAAmF;AACnF,qFAAqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,EAAE,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAc,CAAC;IAE5D,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,SAAS,CACd;gBACE,WAAW,EAAE,CAAC,sBAAsB,CAAC;gBACrC,SAAS,EAAE,CAAC,gCAAgC,CAAC;gBAC7C,QAAQ,EAAE;oBACR,mBAAmB;oBACnB,0BAA0B;oBAC1B,yBAAyB;oBACzB,6BAA6B;oBAC7B,kBAAkB;iBACnB;aACF,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC;QAEF,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE;YACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/engagement/social/schema/index.d.ts

@@ -0,0 +1,128 @@
+export declare const friendship: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "friendship";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "friendship";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        requesterId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "requesterId";
+            tableName: "friendship";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        addresseeId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "addresseeId";
+            tableName: "friendship";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "createdAt";
+            tableName: "friendship";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updatedAt";
+            tableName: "friendship";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        acceptedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "acceptedAt";
+            tableName: "friendship";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        refusedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "refusedAt";
+            tableName: "friendship";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type Friendship = typeof friendship.$inferSelect;
+//# sourceMappingURL=index.d.ts.map

package/dist/engagement/social/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/engagement/social/schema/index.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BtB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC"}

package/dist/engagement/social/schema/index.js

@@ -0,0 +1,36 @@
+import { sql } from 'drizzle-orm';
+import { pgTable, uuid, timestamp, uniqueIndex, index, check } from 'drizzle-orm/pg-core';
+// Drizzle tables owned by the Social module.
+// Rules:
+//   - Column names come from the key via the snake_case casing config - never pass
+//     an explicit string (lint: drizzle-snake-case).
+//   - Timestamps are always `withTimezone` (lint: no-naive-timestamp).
+//   - Do NOT add FK references to tables owned by another domain - reference by id.
+// One row per friendship, directional at creation (requester -> addressee) but the
+// PAIR is what must stay unique regardless of direction - the canonical-pair unique
+// index below is what makes duplicate-request and the mutual/simultaneous-request
+// race condition (see social.service.ts sendFriendRequest) safe at the DB level: an
+// INSERT is attempted directly (no pre-SELECT), and a unique-violation on the pair
+// key is caught and resolved. A request is pending while both decision timestamps
+// are null, accepted when acceptedAt is set, and refused when refusedAt is set.
+export const friendship = pgTable('friendship', {
+    id: uuid().primaryKey().defaultRandom(),
+    requesterId: uuid().notNull(), // bare id - cross-module (user from pam), no FK
+    addresseeId: uuid().notNull(), // bare id - cross-module (user from pam), no FK
+    createdAt: timestamp({ withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp({ withTimezone: true })
+        .notNull()
+        .defaultNow()
+        .$onUpdateFn(() => new Date()),
+    acceptedAt: timestamp({ withTimezone: true }),
+    refusedAt: timestamp({ withTimezone: true }),
+}, (t) => [
+    // Canonical-pair unique index: the same two users can never have two rows
+    // regardless of who sent the request. LEAST/GREATEST normalize the pair so
+    // (A, B) and (B, A) collide on the same index entry.
+    uniqueIndex('friendship_pair_key').on(sql `LEAST(${t.requesterId}, ${t.addresseeId})`, sql `GREATEST(${t.requesterId}, ${t.addresseeId})`),
+    index('friendship_addressee_idx').on(t.addresseeId),
+    index('friendship_requester_idx').on(t.requesterId),
+    check('friendship_one_decision_key', sql `NOT (${t.acceptedAt} IS NOT NULL AND ${t.refusedAt} IS NOT NULL)`),
+]);
+//# sourceMappingURL=index.js.map

package/dist/engagement/social/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/engagement/social/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAE1F,6CAA6C;AAC7C,SAAS;AACT,mFAAmF;AACnF,qDAAqD;AACrD,uEAAuE;AACvE,oFAAoF;AACpF,mFAAmF;AACnF,oFAAoF;AACpF,kFAAkF;AAClF,oFAAoF;AACpF,mFAAmF;AACnF,kFAAkF;AAClF,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAC/B,YAAY,EACZ;IACE,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IACvC,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,gDAAgD;IAC/E,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,gDAAgD;IAC/E,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACnE,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SACzC,OAAO,EAAE;SACT,UAAU,EAAE;SACZ,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,UAAU,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7C,SAAS,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CAC7C,EACD,CAAC,CAAC,EAAE,EAAE,CAAC;IACL,0EAA0E;IAC1E,2EAA2E;IAC3E,qDAAqD;IACrD,WAAW,CAAC,qBAAqB,CAAC,CAAC,EAAE,CACnC,GAAG,CAAA,SAAS,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,GAAG,EAC9C,GAAG,CAAA,YAAY,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,GAAG,CAClD;IACD,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACnD,KAAK,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IACnD,KAAK,CACH,6BAA6B,EAC7B,GAAG,CAAA,QAAQ,CAAC,CAAC,UAAU,oBAAoB,CAAC,CAAC,SAAS,eAAe,CACtE;CACF,CACF,CAAC"}

package/dist/engagement/social/service/social.service.d.ts

@@ -0,0 +1,39 @@
+import { type DrizzleService, type EventBus } from '@openora/core/server';
+import { type Uuid } from '@openora/core/contracts';
+import { type Friendship, type Relationship } from '../contract/index.js';
+export declare const SelfFriendRequestError: new () => Error;
+export declare const FriendRequestTargetNotFoundError: new (id: string) => Error;
+export declare const FriendRequestUnavailableError: new () => Error;
+export declare const BlockedBySelfError: new () => Error;
+export declare const AlreadyFriendsError: new () => Error;
+export declare const RequestAlreadyPendingError: new () => Error;
+export declare const FriendRequestRefusedError: new () => Error;
+export declare class SocialService {
+    private readonly drizzle;
+    private readonly events;
+    constructor(drizzle: DrizzleService, events: EventBus);
+    /**
+     * Sends a friend request from `callerId` to `targetUserId`. The insert is
+     * attempted directly against the canonical-pair unique index (no pre-SELECT,
+     * avoiding a TOCTOU race); a unique-violation means a row for this pair already
+     * exists, which is resolved by re-reading it - including the mutual/simultaneous
+     * case where the existing row was already addressed TO the caller, which
+     * auto-accepts instead of conflicting. Events are emitted strictly after the
+     * mutating statement/transaction has committed.
+     */
+    sendFriendRequest(callerId: Uuid, targetUserId: Uuid): Promise<Friendship>;
+    /**
+     * Re-reads the row a unique-violation on `friendship_pair_key` proved already
+     * exists and resolves it: already accepted -> conflict, same-direction duplicate
+     * -> conflict, opposite-direction (mutual/simultaneous request) -> auto-accept.
+     * `FOR UPDATE` serializes this against a concurrent resolution of the same pair.
+     */
+    private resolveExistingPair;
+    /**
+     * Batch relationship lookup for a set of target users, from the caller's point
+     * of view. Reads are batched (one query per table, `IN (...)` over the target
+     * ids) rather than N+1 per target.
+     */
+    getRelationships(callerId: Uuid, targetUserIds: readonly Uuid[]): Promise<Relationship[]>;
+}
+//# sourceMappingURL=social.service.d.ts.map

package/dist/engagement/social/service/social.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.service.d.ts","sourceRoot":"","sources":["../../../../src/engagement/social/service/social.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,QAAQ,EAKd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAIpD,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAK1E,eAAO,MAAM,sBAAsB,iBAGlC,CAAC;AAKF,eAAO,MAAM,gCAAgC,2BAA2C,CAAC;AAOzF,eAAO,MAAM,6BAA6B,iBAGzC,CAAC;AAGF,eAAO,MAAM,kBAAkB,iBAG9B,CAAC;AACF,eAAO,MAAM,mBAAmB,iBAG/B,CAAC;AACF,eAAO,MAAM,0BAA0B,iBAGtC,CAAC;AACF,eAAO,MAAM,yBAAyB,iBAGrC,CAAC;AAwCF,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,QAAQ;IAGnC;;;;;;;;OAQG;IACG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC;IAwEhF;;;;;OAKG;YACW,mBAAmB;IAuCjC;;;;OAIG;IACG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,IAAI,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAuGhG"}