@openora/core 0.4.1-canary.9 → 0.4.1-canary.91

package/dist/contracts/adapters/login-enforcement.js

@@ -1,9 +1,11 @@
-// Push port for Responsible-Gambling login enforcement. Owned + bound by the identity
-// module (it owns the `user` table); compliance depends only on this port to block or
-// unblock a player's login, never on the identity schema. `block` also revokes all of
-// the player's active sessions (the RG session-termination requirement). `until: null`
-// means an indefinite block (self-exclusion / permanent); a Date is the cooling-off
-// expiry the login gate auto-clears once elapsed. See ADR-0017.
+/**
+ * Push port for Responsible-Gambling login enforcement. Owned + bound by the identity
+ * module (it owns the `user` table); compliance depends only on this port to block or
+ * unblock a player's login, never on the identity schema. `block` also revokes all of
+ * the player's active sessions (the RG session-termination requirement). `until: null`
+ * means an indefinite block (self-exclusion / permanent); a Date is the cooling-off
+ * expiry the login gate auto-clears once elapsed. See ADR-0017.
+ */
 import { createToken } from './token.js';
 export const LOGIN_ENFORCEMENT = createToken('LOGIN_ENFORCEMENT');
 //# sourceMappingURL=login-enforcement.js.map

package/dist/contracts/adapters/login-enforcement.js.map

@@ -1 +1 @@
-{"version":3,"file":"login-enforcement.js","sourceRoot":"","sources":["../../../src/contracts/adapters/login-enforcement.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,sFAAsF;AACtF,sFAAsF;AACtF,uFAAuF;AACvF,oFAAoF;AACpF,gEAAgE;AAChE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAOrD,MAAM,CAAC,MAAM,iBAAiB,GAAgC,WAAW,CAAC,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"login-enforcement.js","sourceRoot":"","sources":["../../../src/contracts/adapters/login-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAOrD,MAAM,CAAC,MAAM,iBAAiB,GAAgC,WAAW,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/contracts/adapters/notification.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Notification-delivery seam. Custom implementation expected (no prescribed vendor).
+ * The notifications module ships MockNotificationDeliveryAdapter (logs to stdout) as default.
+ * Override via overlay: ctx.provide(NOTIFICATION_DELIVERY_ADAPTER, () => new MyAdapter())
+ * Load your overlay AFTER the notifications plugin in extensions.config.ts (last registration wins).
+ * See docs/adapters/notification.md for the full binding guide.
+ */
 import { type Token } from './token.js';
 export type NotificationDeliveryAdapter = {
     sendEmail(to: string, subject: string, body: string): Promise<void>;

package/dist/contracts/adapters/notification.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/notification.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,KAAK,CAAC,2BAA2B,CAE5E,CAAC"}
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/notification.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,KAAK,CAAC,2BAA2B,CAE5E,CAAC"}

package/dist/contracts/adapters/notification.js

@@ -1,8 +1,10 @@
-// Notification-delivery seam. Custom implementation expected (no prescribed vendor).
-// The notifications module ships MockNotificationDeliveryAdapter (logs to stdout) as default.
-// Override via overlay: ctx.provide(NOTIFICATION_DELIVERY_ADAPTER, () => new MyAdapter())
-// Load your overlay AFTER the notifications plugin in extensions.config.ts (last registration wins).
-// See docs/adapters/notification.md for the full binding guide.
+/**
+ * Notification-delivery seam. Custom implementation expected (no prescribed vendor).
+ * The notifications module ships MockNotificationDeliveryAdapter (logs to stdout) as default.
+ * Override via overlay: ctx.provide(NOTIFICATION_DELIVERY_ADAPTER, () => new MyAdapter())
+ * Load your overlay AFTER the notifications plugin in extensions.config.ts (last registration wins).
+ * See docs/adapters/notification.md for the full binding guide.
+ */
 import { createToken } from './token.js';
 export const NOTIFICATION_DELIVERY_ADAPTER = createToken('NOTIFICATION_DELIVERY_ADAPTER');
 //# sourceMappingURL=notification.js.map

package/dist/contracts/adapters/notification.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification.js","sourceRoot":"","sources":["../../../src/contracts/adapters/notification.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,8FAA8F;AAC9F,0FAA0F;AAC1F,qGAAqG;AACrG,gEAAgE;AAChE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,6BAA6B,GAAuC,WAAW,CAC1F,+BAA+B,CAChC,CAAC"}
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../../../src/contracts/adapters/notification.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,6BAA6B,GAAuC,WAAW,CAC1F,+BAA+B,CAChC,CAAC"}

package/dist/contracts/adapters/outbox.d.ts

@@ -1,3 +1,17 @@
+/**
+ * Transactional-outbox seam. A money/critical service, INSIDE its db.transaction,
+ * records the event through this port; the row commits atomically with the state
+ * change. A relay then publishes it to the MESSAGE_BROKER after commit, closing
+ * the gap where a crash between "state committed" and "event published" would
+ * otherwise lose the event. This is the primitive that makes cross-service,
+ * at-least-once domain events reliable - and the reason a module can be extracted
+ * to its own process without dropping events. See ADR-0016.
+ *
+ * `tx` is the active transaction handle, typed `unknown` here to keep @openora/core/contracts
+ * ORM-free; the Drizzle implementation in @openora/core/server narrows it. Services never touch
+ * this port directly - they call EventBus.emitInTransaction(tx, ...), which builds
+ * the envelope and delegates here.
+ */
 import { type Token } from './token.js';
 import type { EventEnvelope } from './broker.js';
 export type OutboxWriter = {

package/dist/contracts/adapters/outbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/outbox.ts"],"names":[],"mappings":"AAYA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,YAAY,CAAyB,CAAC"}
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,KAAK,CAAC,YAAY,CAAyB,CAAC"}

package/dist/contracts/adapters/outbox.js

@@ -1,15 +1,17 @@
-// Transactional-outbox seam. A money/critical service, INSIDE its db.transaction,
-// records the event through this port; the row commits atomically with the state
-// change. A relay then publishes it to the MESSAGE_BROKER after commit, closing
-// the gap where a crash between "state committed" and "event published" would
-// otherwise lose the event. This is the primitive that makes cross-service,
-// at-least-once domain events reliable - and the reason a module can be extracted
-// to its own process without dropping events. See ADR-0016.
-//
-// `tx` is the active transaction handle, typed `unknown` here to keep @openora/core/contracts
-// ORM-free; the Drizzle implementation in @openora/core/server narrows it. Services never touch
-// this port directly - they call EventBus.emitInTransaction(tx, ...), which builds
-// the envelope and delegates here.
+/**
+ * Transactional-outbox seam. A money/critical service, INSIDE its db.transaction,
+ * records the event through this port; the row commits atomically with the state
+ * change. A relay then publishes it to the MESSAGE_BROKER after commit, closing
+ * the gap where a crash between "state committed" and "event published" would
+ * otherwise lose the event. This is the primitive that makes cross-service,
+ * at-least-once domain events reliable - and the reason a module can be extracted
+ * to its own process without dropping events. See ADR-0016.
+ *
+ * `tx` is the active transaction handle, typed `unknown` here to keep @openora/core/contracts
+ * ORM-free; the Drizzle implementation in @openora/core/server narrows it. Services never touch
+ * this port directly - they call EventBus.emitInTransaction(tx, ...), which builds
+ * the envelope and delegates here.
+ */
 import { createToken } from './token.js';
 export const OUTBOX = createToken('OUTBOX');
 //# sourceMappingURL=outbox.js.map

package/dist/contracts/adapters/outbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/contracts/adapters/outbox.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,4EAA4E;AAC5E,kFAAkF;AAClF,4DAA4D;AAC5D,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,mCAAmC;AACnC,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAOrD,MAAM,CAAC,MAAM,MAAM,GAAwB,WAAW,CAAC,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../../src/contracts/adapters/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAOrD,MAAM,CAAC,MAAM,MAAM,GAAwB,WAAW,CAAC,QAAQ,CAAC,CAAC"}

package/dist/contracts/adapters/payment.d.ts

@@ -1,13 +1,83 @@
+/**
+ * Payment seam. A PSP (card/bank/e-wallet) or a custody/address-issuing crypto vendor
+ * implements PaymentAdapter; bind a concrete adapter to PAYMENT_ADAPTER in the wallet
+ * module's plugin.ts. See docs/adapters/payment.md for the full binding guide.
+ */
 import { type Token } from './token.js';
+/**
+ * Normalized shape of an inbound payment-vendor webhook, produced by a
+ * `PaymentAdapter.parseWebhook` implementation. A `deposit` event reports funds that
+ * arrived at a previously-issued address (see `issueDepositAddress`); a `withdrawal`
+ * event reports a status transition for a withdrawal already sent to the vendor via
+ * `processWithdrawal`. `externalId` is the vendor's reference id for the underlying
+ * settlement - the dedup key the wallet module reconciles against.
+ *
+ * A deposit carries `network` because an address does not identify a chain: an EVM vault
+ * hands out one address that is shared across every EVM chain AND every token on them, so
+ * `address` alone maps to many issued rows. Omitting it falls back to address-only lookup,
+ * which is safe only for a vendor that issues a distinct address per currency.
+ */
+export type PaymentWebhookEvent = {
+    kind: 'deposit';
+    address: string;
+    network?: string;
+    tag?: string;
+    amount: string;
+    currency: string;
+    txHash: string;
+    externalId: string;
+} | {
+    kind: 'withdrawal';
+    externalId: string;
+    status: 'processing' | 'completed' | 'failed';
+    txHash?: string;
+};
 export type PaymentAdapter = {
-    processDeposit(amount: number, currency: string, metadata: Record<string, unknown>): Promise<{
+    processDeposit(amount: string, currency: string, metadata: Record<string, unknown>): Promise<{
         externalId: string;
         status: string;
     }>;
-    processWithdrawal(amount: number, currency: string, metadata: Record<string, unknown>): Promise<{
+    /**
+     * Send a withdrawal to the vendor. For a synchronous PSP the returned `status` is
+     * already terminal (`'completed'`/`'failed'`) and the caller finalizes the
+     * transaction immediately. For an async vendor (eg a custody/MPC rail that
+     * broadcasts on-chain) the returned `status` may be anything else (eg
+     * `'processing'`/`'submitted'`) - the caller then leaves the transaction in
+     * `processing` and relies on the webhook path (`parseWebhook` -> reconciliation)
+     * for the eventual terminal transition.
+     */
+    processWithdrawal(amount: string, currency: string, metadata: Record<string, unknown>): Promise<{
         externalId: string;
         status: string;
     }>;
+    /**
+     * Issue (or return) a deposit address for this user/asset. Only implemented by
+     * address-based deposit vendors (eg a custody/MPC crypto rail) - a synchronous PSP
+     * or `MockPaymentAdapter` omits it. The wallet module persists the returned address
+     * so re-requesting the same (userId, currency, network) is idempotent without a second
+     * vendor call.
+     */
+    issueDepositAddress?(userId: string, currency: string, network?: string): Promise<{
+        address: string;
+        tag?: string;
+    }>;
+    /**
+     * Vendor-specific normalization of a raw webhook into a reconcilable event, or
+     * null when the body is not one (eg an unrecognized event type). Optional -
+     * `MockPaymentAdapter` omits it; an address-based/async vendor overlay implements it.
+     */
+    parseWebhook?(rawBody: string, headers: Record<string, string | string[] | undefined>): PaymentWebhookEvent | null;
 };
 export declare const PAYMENT_ADAPTER: Token<PaymentAdapter>;
+/**
+ * Verifies the public payment-vendor webhook is genuine. The default impl
+ * (`HmacPaymentWebhookVerifier`) recomputes an HMAC-SHA256 over the raw request body
+ * and constant-time compares it against the `x-payment-signature` header; a vendor
+ * overlay rebinds it. Fails closed when the secret is unset, the signature header is
+ * absent, or the raw body was not captured.
+ */
+export type PaymentWebhookVerifier = {
+    verify(rawBody: string, headers: Record<string, string | string[] | undefined>): boolean | Promise<boolean>;
+};
+export declare const PAYMENT_WEBHOOK_VERIFIER: Token<PaymentWebhookVerifier>;
 //# sourceMappingURL=payment.d.ts.map

package/dist/contracts/adapters/payment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/payment.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnD,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC"}
+{"version":3,"file":"payment.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/payment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnD;;;;;;;;OAQG;IACH,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEnD;;;;;;OAMG;IACH,mBAAmB,CAAC,CAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE9C;;;;OAIG;IACH,YAAY,CAAC,CACX,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,mBAAmB,GAAG,IAAI,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,cAAc,CAAkC,CAAC;AAErF;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,CACJ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,KAAK,CAAC,sBAAsB,CAElE,CAAC"}

package/dist/contracts/adapters/payment.js

@@ -1,5 +1,9 @@
-// Payment seam. A PSP (card/bank/e-wallet) implements PaymentAdapter; bind a
-// concrete adapter to PAYMENT_ADAPTER in the wallet module's plugin.ts.
+/**
+ * Payment seam. A PSP (card/bank/e-wallet) or a custody/address-issuing crypto vendor
+ * implements PaymentAdapter; bind a concrete adapter to PAYMENT_ADAPTER in the wallet
+ * module's plugin.ts. See docs/adapters/payment.md for the full binding guide.
+ */
 import { createToken } from './token.js';
 export const PAYMENT_ADAPTER = createToken('PAYMENT_ADAPTER');
+export const PAYMENT_WEBHOOK_VERIFIER = createToken('PAYMENT_WEBHOOK_VERIFIER');
 //# sourceMappingURL=payment.js.map

package/dist/contracts/adapters/payment.js.map

@@ -1 +1 @@
-{"version":3,"file":"payment.js","sourceRoot":"","sources":["../../../src/contracts/adapters/payment.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,wEAAwE;AACxE,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAgBrD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"payment.js","sourceRoot":"","sources":["../../../src/contracts/adapters/payment.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AA+ErD,MAAM,CAAC,MAAM,eAAe,GAA0B,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAgBrF,MAAM,CAAC,MAAM,wBAAwB,GAAkC,WAAW,CAChF,0BAA0B,CAC3B,CAAC"}

package/dist/contracts/adapters/play-eligibility.d.ts

@@ -0,0 +1,15 @@
+import { type Token } from './token.js';
+/**
+ * Read port for Responsible-Gambling play enforcement. Owned + bound by the identity
+ * module (it owns the `user` table and the `rgBlocked`/`rgBlockedUntil` projection that
+ * `LOGIN_ENFORCEMENT` writes). Gaming and wallet depend only on this port to refuse a
+ * wager, never on the identity schema.
+ *
+ * A cooling-off whose `rgBlockedUntil` has elapsed reports `false` without waiting for
+ * the expiry sweep, matching the login gate's lazy-expiry behaviour.
+ */
+export type PlayEligibilityPort = {
+    isRestricted(userId: string): Promise<boolean>;
+};
+export declare const PLAY_ELIGIBILITY: Token<PlayEligibilityPort>;
+//# sourceMappingURL=play-eligibility.d.ts.map

package/dist/contracts/adapters/play-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"play-eligibility.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/play-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,mBAAmB,CACF,CAAC"}

package/dist/contracts/adapters/play-eligibility.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const PLAY_ELIGIBILITY = createToken('PLAY_ELIGIBILITY');
+//# sourceMappingURL=play-eligibility.js.map

package/dist/contracts/adapters/play-eligibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"play-eligibility.js","sourceRoot":"","sources":["../../../src/contracts/adapters/play-eligibility.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAerD,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAsB,kBAAkB,CAAC,CAAC"}

package/dist/contracts/adapters/player-activity.d.ts

@@ -0,0 +1,6 @@
+import { type Token } from './token.js';
+export type PlayerActivityTracker = {
+    touchLastSeen(userId: string): Promise<void>;
+};
+export declare const PLAYER_ACTIVITY_TRACKER: Token<PlayerActivityTracker>;
+//# sourceMappingURL=player-activity.d.ts.map

package/dist/contracts/adapters/player-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"player-activity.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/player-activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,KAAK,CAAC,qBAAqB,CACzB,CAAC"}

package/dist/contracts/adapters/player-activity.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const PLAYER_ACTIVITY_TRACKER = createToken('PLAYER_ACTIVITY_TRACKER');
+//# sourceMappingURL=player-activity.js.map

package/dist/contracts/adapters/player-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"player-activity.js","sourceRoot":"","sources":["../../../src/contracts/adapters/player-activity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAMrD,MAAM,CAAC,MAAM,uBAAuB,GAClC,WAAW,CAAC,yBAAyB,CAAC,CAAC"}

package/dist/contracts/adapters/player-provisioning.d.ts

@@ -0,0 +1,21 @@
+import { type Token } from './token.js';
+export type PlayerProvisioning = {
+    /**
+     * `created: false` means a player row already existed, so this consent record was
+     * NOT stored. Callers must surface that - it is a compliance record, not a no-op.
+     */
+    createForRegistration(record: PlayerRegistrationRecord): Promise<{
+        created: boolean;
+        playerId?: string;
+    }>;
+};
+export type PlayerRegistrationRecord = {
+    userId: string;
+    termsVersion: string;
+    termsAcceptedAt: Date;
+    ageAcceptedAt: Date;
+    registrationIp: string | null;
+    registrationUserAgent: string | null;
+};
+export declare const PLAYER_PROVISIONING: Token<PlayerProvisioning>;
+//# sourceMappingURL=player-provisioning.d.ts.map

package/dist/contracts/adapters/player-provisioning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"player-provisioning.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/player-provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;OAGG;IACH,qBAAqB,CACnB,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,IAAI,CAAC;IACtB,aAAa,EAAE,IAAI,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,CAAsC,CAAC"}

package/dist/contracts/adapters/player-provisioning.js

@@ -0,0 +1,3 @@
+import { createToken } from './token.js';
+export const PLAYER_PROVISIONING = createToken('PLAYER_PROVISIONING');
+//# sourceMappingURL=player-provisioning.js.map

package/dist/contracts/adapters/player-provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"player-provisioning.js","sourceRoot":"","sources":["../../../src/contracts/adapters/player-provisioning.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAqBrD,MAAM,CAAC,MAAM,mBAAmB,GAA8B,WAAW,CAAC,qBAAqB,CAAC,CAAC"}

package/dist/contracts/adapters/player-tags.d.ts

@@ -1,5 +1,9 @@
 import { type Token } from './token.js';
 import type { TagKey } from '../schemas/tag.js';
+/**
+ * Read-only seam letting the wallet auto-withdrawal evaluator query a player's tags
+ * without importing the tag module's schema (module isolation). Absent from the map == no active tags.
+ */
 export type PlayerTags = {
     getActiveTagKeys(userIds: readonly string[]): Promise<Map<string, TagKey[]>>;
 };

package/dist/contracts/adapters/player-tags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"player-tags.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/player-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAIhD,MAAM,MAAM,UAAU,GAAG;IACvB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;CAC9E,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}
+{"version":3,"file":"player-tags.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/player-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,gBAAgB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;CAC9E,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,UAAU,CAA8B,CAAC"}

package/dist/contracts/adapters/player-tags.js.map

@@ -1 +1 @@
-{"version":3,"file":"player-tags.js","sourceRoot":"","sources":["../../../src/contracts/adapters/player-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AASrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}
+{"version":3,"file":"player-tags.js","sourceRoot":"","sources":["../../../src/contracts/adapters/player-tags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAWrD,MAAM,CAAC,MAAM,WAAW,GAAsB,WAAW,CAAC,aAAa,CAAC,CAAC"}

package/dist/contracts/adapters/rain-commands.d.ts

@@ -0,0 +1,27 @@
+import { type Token } from './token.js';
+import type { Uuid } from '../schemas/common.js';
+import type { CommandChatMessage } from './chat-system-writer.js';
+export type SendRainArgs = {
+    amount: string;
+    recipientCount: number;
+    roomId: Uuid | null;
+    idempotencyKey: Uuid;
+    onlineUserIds: Uuid[];
+};
+export type SendRainFailureReason = 'disabled' | 'insufficient_balance' | 'exceeds_limit' | 'below_minimum' | 'no_online_users' | 'too_many_recipients' | 'rain_credit_failed' | 'idempotency_key_reuse' | 'concurrent_replay' | 'room_not_member';
+export type SendRainResult = {
+    ok: true;
+    message: CommandChatMessage;
+} | {
+    ok: false;
+    reason: SendRainFailureReason;
+} | {
+    ok: false;
+    reason: 'player_not_found';
+    playerId: Uuid;
+};
+export type RainCommands = {
+    sendRain(input: SendRainArgs, actorId: Uuid): Promise<SendRainResult>;
+};
+export declare const RAIN_COMMANDS: Token<RainCommands>;
+//# sourceMappingURL=rain-commands.d.ts.map

package/dist/contracts/adapters/rain-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rain-commands.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rain-commands.ts"],"names":[],"mappings":"AASA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IAEvB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,cAAc,EAAE,IAAI,CAAC;IAIrB,aAAa,EAAE,IAAI,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,sBAAsB,GACtB,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,uBAAuB,GACvB,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACvE,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,KAAK,CAAC,YAAY,CAAgC,CAAC"}

package/dist/contracts/adapters/rain-commands.js

@@ -0,0 +1,12 @@
+// Rain command port: `chat-commands` owns presence (it already depends on `chat`
+// for CHAT_BLOCK_WRITER), so it resolves which players are online in a room via
+// CHAT_REALTIME_TRANSPORT and hands `social-transfers` the plain id list - social-
+// transfers never queries chat's presence tracking directly.
+//
+// Same discriminated-result shape as GIFT_COMMANDS and the same reason it
+// exists: chat-commands' router can't `instanceof`-match an error class
+// defined in social-transfers without a forbidden cross-module internals
+// import. ADR-0017.
+import { createToken } from './token.js';
+export const RAIN_COMMANDS = createToken('RAIN_COMMANDS');
+//# sourceMappingURL=rain-commands.js.map

package/dist/contracts/adapters/rain-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rain-commands.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rain-commands.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,mFAAmF;AACnF,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,oBAAoB;AACpB,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAqCrD,MAAM,CAAC,MAAM,aAAa,GAAwB,WAAW,CAAC,eAAe,CAAC,CAAC"}

package/dist/contracts/adapters/rate-limit.d.ts

@@ -1,15 +1,52 @@
+/**
+ * Rate-limiter seam. Abuse-prone routes (auth flows, money mutations) consume
+ * from this adapter so the throttling backend is swappable: the default binding
+ * is an in-process fixed-window limiter (zero deps - good for `pnpm dev`, seed
+ * and tests), process-local so it does NOT coordinate across replicas. Set
+ * REDIS_URL to bind the shipped Redis reference adapter (distributed fixed-window)
+ * with zero consumer code; rebind RATE_LIMITER via an overlay for any other backend.
+ */
 import { type Token } from './token.js';
+export declare const RATE_LIMIT_KEYS: {
+    readonly REGISTER: "register";
+    readonly LOGIN: "login";
+    readonly ENABLE_2FA: "enable2fa";
+    readonly VERIFY_2FA: "verify2fa";
+    readonly DISABLE_2FA: "disable2fa";
+    readonly PASSWORD_RESET_REQUEST: "pwreset-req";
+    readonly PASSWORD_RESET_VERIFY: "pwreset-verify";
+    readonly PASSWORD_RESET: "pwreset";
+    readonly CHANGE_PASSWORD: "change-password";
+    readonly EMAIL_VERIFICATION: "email-verify";
+    readonly VERIFY_EMAIL: "verify-email";
+    readonly WALLET_MUTATION: "wallet-mutation";
+    readonly CHAT_ROOM_JOIN: "chat-room-join";
+    readonly CHAT_SEND: "chat-send";
+    readonly REPORT_ACCESS_DENIED: "report-access-denied";
+};
+export type RateLimitKeyPrefix = (typeof RATE_LIMIT_KEYS)[keyof typeof RATE_LIMIT_KEYS];
+export type RateLimitKey = `${RateLimitKeyPrefix}:${string}`;
+export declare function makeRateLimitKey(prefix: RateLimitKeyPrefix, id: string): RateLimitKey;
 export type RateLimitOptions = {
+    /** Max allowed consumptions per window per key. */
     limit: number;
     windowMs: number;
+    /**
+     * What to do when the backing store is unreachable: 'allow' keeps availability
+     * (throttling pauses during an outage); 'deny' fails closed for keys where an
+     * unthrottled window is worse than a 429 (credential guessing). Default 'allow'.
+     * The in-process default is never unavailable, so it ignores this.
+     */
     onUnavailable?: 'allow' | 'deny';
 };
 export type RateLimitResult = {
     allowed: boolean;
+    /** Milliseconds until the window resets. 0 when allowed. */
     retryAfterMs: number;
 };
-export type RateLimiterAdapter = {
-    consume(key: string, opts: RateLimitOptions): Promise<RateLimitResult>;
+export type RateLimiterAdapter<Key extends string = string> = {
+    consume(key: Key, opts: RateLimitOptions): Promise<RateLimitResult>;
+    reset(key: Key): Promise<void>;
 };
-export declare const RATE_LIMITER: Token<RateLimiterAdapter>;
+export declare const RATE_LIMITER: Token<RateLimiterAdapter<RateLimitKey>>;
 //# sourceMappingURL=rate-limit.d.ts.map

package/dist/contracts/adapters/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAMA,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG;IAE7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IAKjB,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,OAAO,CAAC;IAEjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACxE,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAA+B,CAAC"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAe,KAAK,KAAK,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;CAgBlB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAExF,MAAM,MAAM,YAAY,GAAG,GAAG,kBAAkB,IAAI,MAAM,EAAE,CAAC;AAE7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAErF;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,IAAI;IAC5D,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpE,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAA+B,CAAC"}

package/dist/contracts/adapters/rate-limit.js

@@ -1,9 +1,31 @@
-// Rate-limiter seam. Abuse-prone routes (auth flows, money mutations) consume
-// from this adapter so the throttling backend is swappable: the default binding
-// is an in-process fixed-window limiter (zero deps - good for `pnpm dev`, seed
-// and tests), process-local so it does NOT coordinate across replicas. Set
-// REDIS_URL to bind the shipped Redis reference adapter (distributed fixed-window)
-// with zero consumer code; rebind RATE_LIMITER via an overlay for any other backend.
+/**
+ * Rate-limiter seam. Abuse-prone routes (auth flows, money mutations) consume
+ * from this adapter so the throttling backend is swappable: the default binding
+ * is an in-process fixed-window limiter (zero deps - good for `pnpm dev`, seed
+ * and tests), process-local so it does NOT coordinate across replicas. Set
+ * REDIS_URL to bind the shipped Redis reference adapter (distributed fixed-window)
+ * with zero consumer code; rebind RATE_LIMITER via an overlay for any other backend.
+ */
 import { createToken } from './token.js';
+export const RATE_LIMIT_KEYS = {
+    REGISTER: 'register',
+    LOGIN: 'login',
+    ENABLE_2FA: 'enable2fa',
+    VERIFY_2FA: 'verify2fa',
+    DISABLE_2FA: 'disable2fa',
+    PASSWORD_RESET_REQUEST: 'pwreset-req',
+    PASSWORD_RESET_VERIFY: 'pwreset-verify',
+    PASSWORD_RESET: 'pwreset',
+    CHANGE_PASSWORD: 'change-password',
+    EMAIL_VERIFICATION: 'email-verify',
+    VERIFY_EMAIL: 'verify-email',
+    WALLET_MUTATION: 'wallet-mutation',
+    CHAT_ROOM_JOIN: 'chat-room-join',
+    CHAT_SEND: 'chat-send',
+    REPORT_ACCESS_DENIED: 'report-access-denied',
+};
+export function makeRateLimitKey(prefix, id) {
+    return `${prefix}:${id}`;
+}
 export const RATE_LIMITER = createToken('RATE_LIMITER');
 //# sourceMappingURL=rate-limit.js.map

package/dist/contracts/adapters/rate-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,mFAAmF;AACnF,qFAAqF;AACrF,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAuBrD,MAAM,CAAC,MAAM,YAAY,GAA8B,WAAW,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/contracts/adapters/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,WAAW,EAAc,MAAM,YAAY,CAAC;AAErD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,YAAY;IACzB,sBAAsB,EAAE,aAAa;IACrC,qBAAqB,EAAE,gBAAgB;IACvC,cAAc,EAAE,SAAS;IACzB,eAAe,EAAE,iBAAiB;IAClC,kBAAkB,EAAE,cAAc;IAClC,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,iBAAiB;IAClC,cAAc,EAAE,gBAAgB;IAChC,SAAS,EAAE,WAAW;IACtB,oBAAoB,EAAE,sBAAsB;CACpC,CAAC;AAMX,MAAM,UAAU,gBAAgB,CAAC,MAA0B,EAAE,EAAU;IACrE,OAAO,GAAG,MAAM,IAAI,EAAE,EAAE,CAAC;AAC3B,CAAC;AA0BD,MAAM,CAAC,MAAM,YAAY,GAA4C,WAAW,CAAC,cAAc,CAAC,CAAC"}