@openora/core 0.4.1-canary.9 → 0.4.1-canary.91

package/dist/server/runtime/__tests__/create-app.test.js

@@ -0,0 +1,73 @@
+import { describe, it, expect, afterEach } from 'vitest';
+import { MESSAGE_BROKER, JOB_QUEUE, CACHE, RATE_LIMITER } from '@openora/core/contracts';
+import { redisUrlForWorker } from '@openora/core/testing';
+import { createApp } from '../create-app.js';
+// A syntactically valid but unreachable DB url - fine here because nothing in this
+// suite ever runs a query: DrizzleService's pg.Pool connects lazily, and neither
+// health.ping nor better-auth's getSession() touch the DB when the request carries
+// no session cookie (getSessionFromCtx short-circuits on a missing cookie).
+const DUMMY_DATABASE_URL = 'postgres://test:test@127.0.0.1:1/create_app_test';
+describe('createApp - distributed-only durable seams (ADR-0030)', () => {
+    it('throws a clear, actionable error when no durable seam is bound', async () => {
+        await expect(createApp({ plugins: [], databaseUrl: DUMMY_DATABASE_URL })).rejects.toThrow(/MESSAGE_BROKER.*JOB_QUEUE.*CACHE.*RATE_LIMITER/s);
+    });
+    it('boots and serves once REDIS_URL auto-binds all four seams', async () => {
+        const saved = process.env['REDIS_URL'];
+        process.env['REDIS_URL'] = redisUrlForWorker();
+        try {
+            const created = await createApp({
+                plugins: [],
+                databaseUrl: DUMMY_DATABASE_URL,
+            });
+            for (const token of [MESSAGE_BROKER, JOB_QUEUE, CACHE, RATE_LIMITER]) {
+                expect(created.container.has(token)).toBe(true);
+            }
+            const res = await created.app.request('/health');
+            expect(res.status).toBe(200);
+            expect(await res.json()).toMatchObject({ status: 'ok' });
+            const spec = await created.app.request('/openapi.json');
+            expect(spec.status).toBe(200);
+            expect(await spec.json()).toMatchObject({ openapi: expect.any(String) });
+            const docs = await created.app.request('/docs');
+            expect(docs.status).toBe(200);
+            expect(await docs.text()).toContain('API Reference');
+            await created.close();
+        }
+        finally {
+            if (saved === undefined) {
+                delete process.env['REDIS_URL'];
+            }
+            else {
+                process.env['REDIS_URL'] = saved;
+            }
+        }
+    });
+});
+describe('createApp - service name for the Redis Streams consumer group', () => {
+    const saved = { redis: process.env['REDIS_URL'], manifest: process.env['SERVICE_MANIFEST'] };
+    afterEach(() => {
+        // Restore rather than delete: a bare delete would strip a REDIS_URL the rest of
+        // the suite (or a CI service container) legitimately set.
+        for (const [key, value] of [
+            ['REDIS_URL', saved.redis],
+            ['SERVICE_MANIFEST', saved.manifest],
+        ]) {
+            if (value === undefined) {
+                delete process.env[key];
+            }
+            else {
+                process.env[key] = value;
+            }
+        }
+    });
+    it('refuses to boot a split service that has no SERVICE_NAME of its own', async () => {
+        // The consumer group is a durable identity, so it can never be derived from
+        // SERVICE_MANIFEST - that is a list of module ids ('wallet,iam') which reorders
+        // and grows. Throws before any Redis client is opened.
+        process.env['REDIS_URL'] = 'redis://127.0.0.1:1';
+        process.env['SERVICE_MANIFEST'] = 'wallet,iam';
+        delete process.env['SERVICE_NAME'];
+        await expect(createApp({ plugins: [], databaseUrl: DUMMY_DATABASE_URL })).rejects.toThrow(/SERVICE_MANIFEST is set but SERVICE_NAME is not/);
+    });
+});
+//# sourceMappingURL=create-app.test.js.map

package/dist/server/runtime/__tests__/create-app.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-app.test.js","sourceRoot":"","sources":["../../../../src/server/runtime/__tests__/create-app.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mFAAmF;AACnF,iFAAiF;AACjF,mFAAmF;AACnF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,kDAAkD,CAAC;AAE9E,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvF,iDAAiD,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,iBAAiB,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC;gBAC9B,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,kBAAkB;aAChC,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAEzE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAErD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAE7F,SAAS,CAAC,GAAG,EAAE;QACb,gFAAgF;QAChF,0DAA0D;QAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;YACzB,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;YAC1B,CAAC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC;SAC5B,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,4EAA4E;QAC5E,gFAAgF;QAChF,uDAAuD;QACvD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,qBAAqB,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAEnC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACvF,iDAAiD,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/server/runtime/assert-durable-seams.d.ts

@@ -0,0 +1,19 @@
+import { type AnyToken } from '@openora/core/contracts';
+/**
+ * Production is distributed-only (ADR-0030, superseding ADR-0010/0014/0016/0028):
+ * the in-process seam impls no longer ship on the production path, so every
+ * always-needed seam must resolve to a durable binding before `createApp` finishes
+ * booting. Call this AFTER `loadPlugins` + `configure` so a `REDIS_URL` auto-bind or
+ * an overlay's own registration has already won (Container is last-registration-wins).
+ * Modeled on `assertSealedServicesBound` (`compliance/assert.ts`) - same `has(token)`
+ * shape, same "list every gap, don't stop at the first" style.
+ *
+ * `REALTIME_TRANSPORT` is excluded: `createApp` binds `InProcessRealtimeTransport` as
+ * the default for single-process SSE deployments. Infra overlays (e.g. Ably) rebind it
+ * via last-wins `container.register`. Not listed here because it always has a binding.
+ */
+export type DurableSeamContainerView = {
+    has(token: AnyToken<unknown>): boolean;
+};
+export declare function assertDurableSeamsBound(container: DurableSeamContainerView): void;
+//# sourceMappingURL=assert-durable-seams.d.ts.map

package/dist/server/runtime/assert-durable-seams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-durable-seams.d.ts","sourceRoot":"","sources":["../../../src/server/runtime/assert-durable-seams.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,QAAQ,EACd,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CACxC,CAAC;AA2BF,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,wBAAwB,GAAG,IAAI,CASjF"}

package/dist/server/runtime/assert-durable-seams.js

@@ -0,0 +1,32 @@
+import { MESSAGE_BROKER, JOB_QUEUE, CACHE, RATE_LIMITER, } from '@openora/core/contracts';
+const REQUIRED_DURABLE_SEAMS = [
+    {
+        token: MESSAGE_BROKER,
+        name: 'MESSAGE_BROKER',
+        fix: 'set REDIS_URL to auto-bind RedisStreamsBroker, or bind a MessageBrokerAdapter overlay (eg RabbitMQ/Kafka) via ctx.provide(MESSAGE_BROKER, ...)',
+    },
+    {
+        token: JOB_QUEUE,
+        name: 'JOB_QUEUE',
+        fix: 'set REDIS_URL to auto-bind BullMqJobQueue, or bind a JOB_QUEUE overlay directly',
+    },
+    {
+        token: CACHE,
+        name: 'CACHE',
+        fix: 'set REDIS_URL to auto-bind RedisCache, or bind a CACHE overlay directly',
+    },
+    {
+        token: RATE_LIMITER,
+        name: 'RATE_LIMITER',
+        fix: 'set REDIS_URL to auto-bind RedisRateLimiter, or bind a RATE_LIMITER overlay directly',
+    },
+];
+export function assertDurableSeamsBound(container) {
+    const missing = REQUIRED_DURABLE_SEAMS.filter((seam) => !container.has(seam.token));
+    if (missing.length === 0) {
+        return;
+    }
+    throw new Error(`[create-app] production is distributed-only - the following seams have no durable binding:\n` +
+        missing.map((seam) => `  - ${seam.name}: ${seam.fix}`).join('\n'));
+}
+//# sourceMappingURL=assert-durable-seams.js.map

package/dist/server/runtime/assert-durable-seams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-durable-seams.js","sourceRoot":"","sources":["../../../src/server/runtime/assert-durable-seams.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,KAAK,EACL,YAAY,GAEb,MAAM,yBAAyB,CAAC;AAqBjC,MAAM,sBAAsB,GAA+B;IACzD;QACE,KAAK,EAAE,cAAc;QACrB,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,gJAAgJ;KACtJ;IACD;QACE,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,iFAAiF;KACvF;IACD;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,yEAAyE;KAC/E;IACD;QACE,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,sFAAsF;KAC5F;CACF,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,SAAmC;IACzE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8FAA8F;QAC5F,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/server/runtime/core-token-catalog.d.ts

@@ -0,0 +1,119 @@
+declare const coreTokenCatalog: {
+    ADMIN_GAME_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminGameReporting>;
+    ADMIN_GUARD: import("@openora/core/contracts").Token<import("../auth/admin-guard.js").AdminGuard>;
+    ADMIN_PERMISSION_RESOLVER: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPermissionResolver>;
+    ADMIN_PLAYER_ACTIVITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminPlayerActivity>;
+    ADMIN_ROLE_ASSIGNMENT_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminRoleAssignmentDirectory>;
+    ADMIN_USER_DIRECTORY: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminUserDirectory>;
+    ADMIN_WALLET_REPORTING: import("@openora/core/contracts").Token<import("@openora/core/contracts").AdminWalletReporting>;
+    AUDIT_WRITER: import("@openora/core/contracts").SealedToken<import("@openora/core/contracts").AuditWritePort>;
+    AUTH_SESSION: import("@openora/core/contracts").Token<import("../auth/session-resolver.js").SessionResolver>;
+    CACHE: import("@openora/core/contracts").Token<import("@openora/core/contracts").CacheAdapter>;
+    CHAT_BLOCK_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatBlockWriter>;
+    CHAT_MODERATION: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatModeration, string>;
+    CHAT_REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+    CHAT_REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+    CHAT_ROOM_ACCESS: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatRoomAccess>;
+    CHAT_SYSTEM_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").ChatSystemWriter, string>;
+    DRIZZLE: import("@openora/core/contracts").Token<import("../db/drizzle.service.js").DrizzleService>;
+    EMAIL_TEMPLATE_RENDERER: import("@openora/core/contracts").Token<import("@openora/core/contracts").EmailTemplateRenderer>;
+    ERROR_TRACKING: import("@openora/core/contracts").Token<import("@openora/core/contracts").ErrorTrackingAdapter>;
+    EVENT_BUS: import("@openora/core/contracts").Token<import("../kernel/event-bus.js").EventBus>;
+    GAME_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GameAdapter>;
+    GEO_CHECK_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoCheckCommands>;
+    GEO_IP_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").GeoIpAdapter>;
+    GIFT_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").GiftCommands>;
+    IDENTITY_OPTIONS: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityServiceOptions>;
+    IDENTITY_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").IdentityReader, string>;
+    IGAMING_CONFIG: import("@openora/core/contracts").Token<{
+        branding: {
+            name: string;
+            themePreset?: string | undefined;
+            supportEmail?: string | undefined;
+        };
+        currencies: string[];
+        jurisdictions: string[];
+        blockedCountries: string[];
+        limits: {
+            maxDepositPerDay?: number | undefined;
+            maxDepositPerMonth?: number | undefined;
+            maxLossPerDay?: number | undefined;
+            maxStakePerBet?: number | undefined;
+            sessionReminderMinutes?: number | undefined;
+        };
+        providers: {
+            payment?: string | undefined;
+            kyc?: string | undefined;
+            geoIp?: string | undefined;
+            aggregator?: string | undefined;
+            notification?: string | undefined;
+        };
+        enabledModules?: string[] | undefined;
+    }, string>;
+    JOB_QUEUE: import("@openora/core/contracts").Token<import("@openora/core/contracts").JobQueueAdapter>;
+    KYC_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycAdapter>;
+    KYC_STATUS_WRITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycStatusWriter>;
+    KYC_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").KycWebhookVerifier>;
+    LOGIN_ENFORCEMENT: import("@openora/core/contracts").Token<import("@openora/core/contracts").LoginEnforcementPort>;
+    MESSAGE_BROKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").MessageBrokerAdapter>;
+    NOTIFICATION_DELIVERY_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").NotificationDeliveryAdapter>;
+    OUTBOX: import("@openora/core/contracts").Token<import("@openora/core/contracts").OutboxWriter>;
+    PAYMENT_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentAdapter>;
+    PAYMENT_WEBHOOK_VERIFIER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PaymentWebhookVerifier>;
+    PLATFORM_CONFIG: import("@openora/core/contracts").Token<{
+        features: Record<string, boolean>;
+        brands: {
+            id: string;
+            name: string;
+            themePreset?: string | undefined;
+            themeOverrides?: Record<string, string> | undefined;
+        }[];
+        rgLimits: Record<string, {
+            maxDepositPerDay?: number | undefined;
+            maxDepositPerMonth?: number | undefined;
+            maxLossPerDay?: number | undefined;
+            maxStakePerBet?: number | undefined;
+            sessionReminderMinutes?: number | undefined;
+        }>;
+        activeBrand?: string | undefined;
+        kyc?: {
+            gateWithdrawals: boolean;
+            provider?: string | undefined;
+            webhookSecretEnv?: string | undefined;
+            reverifyThresholds?: Record<string, string> | undefined;
+        } | undefined;
+        autoWithdrawal?: {
+            enabled: boolean;
+            dailyCapAmount?: string | undefined;
+            dailyCapCount?: number | undefined;
+        } | undefined;
+        wallet?: {
+            cryptoCurrencies?: string[] | undefined;
+        } | undefined;
+        registration?: {
+            termsVersion: string;
+            webUrl: string;
+        } | undefined;
+        supportedLanguages?: string[] | undefined;
+    }, string>;
+    PLAYER_ACTIVITY_TRACKER: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerActivityTracker>;
+    PLAYER_PROVISIONING: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerProvisioning>;
+    PLAYER_TAGS: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayerTags>;
+    PLAY_ELIGIBILITY: import("@openora/core/contracts").Token<import("@openora/core/contracts").PlayEligibilityPort>;
+    RAIN_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").RainCommands>;
+    RATE_LIMITER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RateLimiterAdapter<`register:${string}` | `login:${string}` | `enable2fa:${string}` | `verify2fa:${string}` | `disable2fa:${string}` | `pwreset-req:${string}` | `pwreset-verify:${string}` | `pwreset:${string}` | `change-password:${string}` | `email-verify:${string}` | `verify-email:${string}` | `wallet-mutation:${string}` | `chat-room-join:${string}` | `chat-send:${string}` | `report-access-denied:${string}`>>;
+    REALTIME_CLIENT_AUTHORIZER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeClientAuthorizer>;
+    REALTIME_TRANSPORT: import("@openora/core/contracts").Token<import("@openora/core/contracts").RealtimeTransport>;
+    RNG_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").RngAdapter>;
+    SEND_EMAIL: import("@openora/core/contracts").Token<import("@openora/core/contracts").SendEmailPort>;
+    SESSION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SessionCommands>;
+    USER_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").UserCommands>;
+    SMS_ADAPTER: import("@openora/core/contracts").Token<import("@openora/core/contracts").SmsAdapter>;
+    SOCIAL_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").SocialCommands>;
+    TAG_EVALUATION_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").TagEvaluationCommands>;
+    WALLET_COMMANDS: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletCommands>;
+    WALLET_READER: import("@openora/core/contracts").Token<import("@openora/core/contracts").WalletReader, string>;
+};
+export type CoreTokenCatalog = typeof coreTokenCatalog;
+export {};
+//# sourceMappingURL=core-token-catalog.d.ts.map

package/dist/server/runtime/core-token-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-token-catalog.d.ts","sourceRoot":"","sources":["../../../src/server/runtime/core-token-catalog.ts"],"names":[],"mappings":"AA0DA,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDE,CAAC;AAEzB,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC"}

package/dist/server/runtime/core-token-catalog.js

@@ -0,0 +1,62 @@
+import { ADMIN_GAME_REPORTING, ADMIN_PERMISSION_RESOLVER, ADMIN_PLAYER_ACTIVITY, ADMIN_ROLE_ASSIGNMENT_DIRECTORY, ADMIN_USER_DIRECTORY, ADMIN_WALLET_REPORTING, AUDIT_WRITER, CACHE, CHAT_BLOCK_WRITER, CHAT_MODERATION, CHAT_REALTIME_CLIENT_AUTHORIZER, CHAT_REALTIME_TRANSPORT, CHAT_ROOM_ACCESS, CHAT_SYSTEM_WRITER, EMAIL_TEMPLATE_RENDERER, ERROR_TRACKING, GAME_ADAPTER, GEO_CHECK_COMMANDS, GEO_IP_ADAPTER, GIFT_COMMANDS, IDENTITY_OPTIONS, IDENTITY_READER, IGAMING_CONFIG, JOB_QUEUE, KYC_ADAPTER, KYC_STATUS_WRITER, KYC_WEBHOOK_VERIFIER, LOGIN_ENFORCEMENT, MESSAGE_BROKER, NOTIFICATION_DELIVERY_ADAPTER, OUTBOX, PAYMENT_ADAPTER, PAYMENT_WEBHOOK_VERIFIER, PLATFORM_CONFIG, PLAYER_ACTIVITY_TRACKER, PLAYER_PROVISIONING, PLAYER_TAGS, PLAY_ELIGIBILITY, RAIN_COMMANDS, RATE_LIMITER, REALTIME_CLIENT_AUTHORIZER, REALTIME_TRANSPORT, RNG_ADAPTER, SEND_EMAIL, SESSION_COMMANDS, USER_COMMANDS, SMS_ADAPTER, SOCIAL_COMMANDS, TAG_EVALUATION_COMMANDS, WALLET_COMMANDS, WALLET_READER, } from '@openora/core/contracts';
+import { ADMIN_GUARD, AUTH_SESSION } from '../auth/index.js';
+import { DRIZZLE } from '../db/index.js';
+import { EVENT_BUS } from '../kernel/index.js';
+const coreTokenCatalog = {
+    ADMIN_GAME_REPORTING,
+    ADMIN_GUARD,
+    ADMIN_PERMISSION_RESOLVER,
+    ADMIN_PLAYER_ACTIVITY,
+    ADMIN_ROLE_ASSIGNMENT_DIRECTORY,
+    ADMIN_USER_DIRECTORY,
+    ADMIN_WALLET_REPORTING,
+    AUDIT_WRITER,
+    AUTH_SESSION,
+    CACHE,
+    CHAT_BLOCK_WRITER,
+    CHAT_MODERATION,
+    CHAT_REALTIME_CLIENT_AUTHORIZER,
+    CHAT_REALTIME_TRANSPORT,
+    CHAT_ROOM_ACCESS,
+    CHAT_SYSTEM_WRITER,
+    DRIZZLE,
+    EMAIL_TEMPLATE_RENDERER,
+    ERROR_TRACKING,
+    EVENT_BUS,
+    GAME_ADAPTER,
+    GEO_CHECK_COMMANDS,
+    GEO_IP_ADAPTER,
+    GIFT_COMMANDS,
+    IDENTITY_OPTIONS,
+    IDENTITY_READER,
+    IGAMING_CONFIG,
+    JOB_QUEUE,
+    KYC_ADAPTER,
+    KYC_STATUS_WRITER,
+    KYC_WEBHOOK_VERIFIER,
+    LOGIN_ENFORCEMENT,
+    MESSAGE_BROKER,
+    NOTIFICATION_DELIVERY_ADAPTER,
+    OUTBOX,
+    PAYMENT_ADAPTER,
+    PAYMENT_WEBHOOK_VERIFIER,
+    PLATFORM_CONFIG,
+    PLAYER_ACTIVITY_TRACKER,
+    PLAYER_PROVISIONING,
+    PLAYER_TAGS,
+    PLAY_ELIGIBILITY,
+    RAIN_COMMANDS,
+    RATE_LIMITER,
+    REALTIME_CLIENT_AUTHORIZER,
+    REALTIME_TRANSPORT,
+    RNG_ADAPTER,
+    SEND_EMAIL,
+    SESSION_COMMANDS,
+    USER_COMMANDS,
+    SMS_ADAPTER,
+    SOCIAL_COMMANDS,
+    TAG_EVALUATION_COMMANDS,
+    WALLET_COMMANDS,
+    WALLET_READER,
+};
+//# sourceMappingURL=core-token-catalog.js.map

package/dist/server/runtime/core-token-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-token-catalog.js","sourceRoot":"","sources":["../../../src/server/runtime/core-token-catalog.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,+BAA+B,EAC/B,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,KAAK,EACL,iBAAiB,EACjB,eAAe,EACf,+BAA+B,EAC/B,uBAAuB,EACvB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,6BAA6B,EAC7B,MAAM,EACN,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,0BAA0B,EAC1B,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,WAAW;IACX,yBAAyB;IACzB,qBAAqB;IACrB,+BAA+B;IAC/B,oBAAoB;IACpB,sBAAsB;IACtB,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,iBAAiB;IACjB,eAAe;IACf,+BAA+B;IAC/B,uBAAuB;IACvB,gBAAgB;IAChB,kBAAkB;IAClB,OAAO;IACP,uBAAuB;IACvB,cAAc;IACd,SAAS;IACT,YAAY;IACZ,kBAAkB;IAClB,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,cAAc;IACd,6BAA6B;IAC7B,MAAM;IACN,eAAe;IACf,wBAAwB;IACxB,eAAe;IACf,uBAAuB;IACvB,mBAAmB;IACnB,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,0BAA0B;IAC1B,kBAAkB;IAClB,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,eAAe;IACf,uBAAuB;IACvB,eAAe;IACf,aAAa;CACS,CAAC"}

package/dist/server/runtime/create-app.d.ts

@@ -1,8 +1,8 @@
-import type { ContractRouter } from '@orpc/contract';
 import { Hono } from 'hono';
 import { Container } from '../kernel/index.js';
 import { type IgamingConfig } from '@openora/core/contracts';
 import { type PluginEntry } from '../plugin-host/index.js';
+import type { CoreTokenCatalog } from './core-token-catalog.js';
 export type CreateAppConfig = {
     plugins: PluginEntry[];
     authSchema?: Record<string, unknown>;
@@ -11,30 +11,36 @@ export type CreateAppConfig = {
         origins?: string | string[];
     };
     databaseUrl?: string;
-    contract?: ContractRouter<any>;
-    openapi?: {
-        enabled?: boolean;
-        info?: {
-            title?: string;
-            version?: string;
-        };
-        outputPath?: string;
-    };
     igaming?: IgamingConfig;
     httpCache?: {
         paths?: string[];
         maxAgeSeconds?: number;
     } | false;
-    configure?: (container: Container) => void | Promise<void>;
     disableHealthModule?: boolean;
 };
 export type CreatedApp = {
     app: Hono;
-    container: Container;
+    container: Container<CoreTokenCatalog>;
     port: number;
     listen(): Promise<void>;
-    emitOpenApiSpec(): Promise<string | null>;
     close(): Promise<void>;
 };
-export declare function createApp(config: CreateAppConfig): Promise<CreatedApp>;
+/**
+ * The single composition root: wires the DI container, boots every plugin in
+ * `config.plugins`, and mounts the resulting oRPC router on a Hono app.
+ * Production is distributed-only (ADR-0030, superseding ADR-0010/0014/0016/0028):
+ * `REDIS_URL` auto-binds `JOB_QUEUE`/`RATE_LIMITER`/`CACHE`/`MESSAGE_BROKER` to their
+ * Redis-backed drivers - the broker being the `RedisStreamsBroker` reference driver,
+ * which an overlay (RabbitMQ/Kafka) or a test's `configure` callback can replace.
+ * `assertDurableSeamsBound` runs right after
+ * plugins + `configure` and throws a clear, actionable error listing every
+ * always-needed seam that still has no binding - it never falls back to an
+ * in-process realtime implementation. `OUTBOX_ENABLED` (or
+ * `AMQP_URL`/`RABBITMQ_URL`) enables the transactional outbox relay.
+ * `container.dispose()` (via `close()`) runs disposers in REVERSE registration
+ * order, so DRIZZLE is registered before JOB_QUEUE to guarantee workers drain
+ * before the DB closes. A router namespace registered by more than one plugin
+ * throws at boot, not at request time.
+ */
+export declare function createApp(config: CreateAppConfig, configure?: (container: Container<CoreTokenCatalog>) => void | Promise<void>): Promise<CreatedApp>;
 //# sourceMappingURL=create-app.d.ts.map

package/dist/server/runtime/create-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../../src/server/runtime/create-app.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EACL,SAAS,EAgBV,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAYL,KAAK,aAAa,EAEnB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAsBxE,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,WAAW,EAAE,CAAC;IAOvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,IAAI,CAAC,EAAE,OAAO,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC;IAEjD,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,QAAQ,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;IAE/B,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,OAAO,CAAC,EAAE,aAAa,CAAC;IAIxB,SAAS,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAEjE,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE3D,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,SAAS,EAAE,SAAS,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AA2CF,wBAAsB,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CA2P5E"}
+{"version":3,"file":"create-app.d.ts","sourceRoot":"","sources":["../../../src/server/runtime/create-app.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EACL,SAAS,EAaV,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAWL,KAAK,aAAa,EAGnB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA4ChE,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,WAAW,EAAE,CAAC;IAOvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,IAAI,CAAC,EAAE,OAAO,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAAE,CAAC;IAEjD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,OAAO,CAAC,EAAE,aAAa,CAAC;IAIxB,SAAS,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,CAAC;IAEjE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,IAAI,CAAC;IACV,SAAS,EAAE,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAqDF;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,SAAS,CAC7B,MAAM,EAAE,eAAe,EACvB,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,gBAAgB,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAC3E,OAAO,CAAC,UAAU,CAAC,CAwRrB"}