@openora/core 0.4.1-canary.91 → 0.4.1-canary.93

package/dist/wallet/__tests__/wallet.router.int.test.js

@@ -1,9 +1,9 @@
-import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vitest';
+import { describe, it, expect, beforeAll, afterAll, beforeEach } from 'vitest';
 import { findOneOrThrow } from '@openora/core/server';
 import { randomUUID } from 'node:crypto';
 import { call, ORPCError } from '@orpc/server';
 import { createTestDb } from '@openora/core/testing';
-import { mock, makeEventBus, testContext, makeAuditWriter, makeAdminGuard, makeIdentityReader, } from '../../testing/mock.js';
+import { mock, makeEventBus, testContext, makeAuditWriter, makeAdminGuard, makeIdentityReader, makePaymentProviderRegistry, } from '../../testing/mock.js';
 import { migrate } from '../migrate.js';
 import { wallet, walletTransaction } from '../schema/index.js';
 import { createWalletRouter } from '../router/index.js';
@@ -26,15 +26,20 @@ function realWalletService() {
         drizzle: db.drizzle,
         events: makeEventBus(),
         payment: mock({}),
+        paymentProviders: makePaymentProviderRegistry(),
         audit: makeAuditWriter(),
         identityReader: makeIdentityReader(),
     });
 }
 function routerWith(adminGuard) {
-    return createWalletRouter(realWalletService(), adminGuard, makeAuditWriter(), mock({}), mock({ verify: vi.fn().mockReturnValue(false) }));
+    return createWalletRouter(realWalletService(), adminGuard, makeAuditWriter(), makePaymentProviderRegistry());
 }
 const transactionDenyingGuard = () => makeAdminGuard({ deny: ['transaction'], caller: { userId: 'caller-1', role: 'support' } });
 const allowingGuard = () => makeAdminGuard({ caller: { userId: 'caller-1' } });
+const adjustmentDenyingGuard = () => makeAdminGuard({
+    deny: ['player:adjust-balance'],
+    caller: { userId: 'caller-1', role: 'admin' },
+});
 async function seedLedger(userId, amounts) {
     const row = findOneOrThrow(await db.drizzle.db.insert(wallet).values({ userId, currency: 'USD' }).returning(), new Error('seedLedger: query returned no row'));
     for (const amount of amounts) {
@@ -70,4 +75,19 @@ describe('wallet router listPlayerTransactions authz', () => {
         expect(result.items[0]?.amount).toBe('10.000000000000000000');
     });
 });
+describe('wallet router manualAdjustment authz', () => {
+    it('requires the player:adjust-balance grant and changes nothing on denial', async () => {
+        const userId = randomUUID();
+        await expect(call(routerWith(adjustmentDenyingGuard()).manualAdjustment, {
+            userId,
+            direction: 'credit',
+            amount: '5',
+            currency: 'USD',
+            reason: 'compensation',
+            idempotencyKey: randomUUID(),
+        }, { context: CTX })).rejects.toMatchObject({ code: 'FORBIDDEN' });
+        expect(await db.drizzle.db.select().from(wallet)).toHaveLength(0);
+        expect(await db.drizzle.db.select().from(walletTransaction)).toHaveLength(0);
+    });
+});
 //# sourceMappingURL=wallet.router.int.test.js.map

package/dist/wallet/__tests__/wallet.router.int.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallet.router.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet.router.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,IAAI,EAAU,CAAC;AAEf,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,SAAS,iBAAiB;IACxB,OAAO,IAAI,aAAa,CAAC;QACvB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,CAAC;QACjC,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAsB;IACxC,OAAO,kBAAkB,CACvB,iBAAiB,EAAE,EACnB,UAAU,EACV,eAAe,EAAE,EACjB,IAAI,CAAiB,EAAE,CAAC,EACxB,IAAI,CAAyB,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,GAAG,EAAE,CACnC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AAE/E,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,OAAiB;IACzD,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,EAClF,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACnD,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,IAAI,EAAE,SAAS;YACf,MAAM;YACN,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,IAAI,CACF,UAAU,CAAC,uBAAuB,EAAE,CAAC,CAAC,sBAAsB,EAC5D,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACvD,uBAAuB;YACvB,uBAAuB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"wallet.router.int.test.js","sourceRoot":"","sources":["../../../src/wallet/__tests__/wallet.router.int.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;AAC1B,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,IAAI,EAAU,CAAC;AAEf,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,SAAS,iBAAiB;IACxB,OAAO,IAAI,aAAa,CAAC;QACvB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,YAAY,EAAE;QACtB,OAAO,EAAE,IAAI,CAAiB,EAAE,CAAC;QACjC,gBAAgB,EAAE,2BAA2B,EAAE;QAC/C,KAAK,EAAE,eAAe,EAAE;QACxB,cAAc,EAAE,kBAAkB,EAAE;KACrC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,UAAsB;IACxC,OAAO,kBAAkB,CACvB,iBAAiB,EAAE,EACnB,UAAU,EACV,eAAe,EAAE,EACjB,2BAA2B,EAAE,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG,GAAG,EAAE,CACnC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAE7F,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AAE/E,MAAM,sBAAsB,GAAG,GAAG,EAAE,CAClC,cAAc,CAAC;IACb,IAAI,EAAE,CAAC,uBAAuB,CAAC;IAC/B,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;CAC9C,CAAC,CAAC;AAEL,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,OAAiB;IACzD,MAAM,GAAG,GAAG,cAAc,CACxB,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,EAClF,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACnD,QAAQ,EAAE,GAAG,CAAC,EAAE;YAChB,IAAI,EAAE,SAAS;YACf,MAAM;YACN,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAErC,MAAM,MAAM,CACV,IAAI,CACF,UAAU,CAAC,uBAAuB,EAAE,CAAC,CAAC,sBAAsB,EAC5D,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;YACvD,uBAAuB;YACvB,uBAAuB;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrC,MAAM,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,sBAAsB,EAClD,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACvC,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAE5B,MAAM,MAAM,CACV,IAAI,CACF,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC,gBAAgB,EACrD;YACE,MAAM;YACN,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,cAAc;YACtB,cAAc,EAAE,UAAU,EAAE;SAC7B,EACD,EAAE,OAAO,EAAE,GAAG,EAAE,CACjB,CAIF,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAE/C,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/wallet/__tests__/wallet.service.int.test.js

@@ -2,12 +2,13 @@ import { describe, it, expect, vi, beforeAll, afterAll, beforeEach } from 'vites
 import { findOneOrThrow } from '@openora/core/server';
 import { randomUUID } from 'node:crypto';
 import { and, eq, sql } from 'drizzle-orm';
+import { DEFAULT_PAYMENT_PROVIDER, } from '@openora/core/contracts';
 import { createTestDb } from '@openora/core/testing';
 import { migrate as migrateProfile } from '@openora/core/pam/migrate/profile';
-import { mock, makeEventBus, makeIdentityReader, NO_CLIENT_META, makeAuditWriter, } from '../../testing/mock.js';
+import { mock, makeEventBus, makeIdentityReader, NO_CLIENT_META, makeAuditWriter, makePaymentProviderRegistry, } from '../../testing/mock.js';
 import { migrate } from '../migrate.js';
-import { wallet, walletBalance, walletTransaction, walletDepositAddress } from '../schema/index.js';
-import { WalletService, WalletNotFoundError, WithdrawalNotFoundError, WithdrawalNotPendingError, InsufficientBalanceError, AmbiguousDepositAddressError, CurrencyMismatchError, IdempotencyKeyReuseError, DepositAddressUnsupportedError, DestinationAddressRequiredError, } from '../service/wallet.service.js';
+import { wallet, walletBalance, walletTransaction, walletDepositAddress, walletAsset, } from '../schema/index.js';
+import { WalletService, WalletNotFoundError, WithdrawalNotFoundError, WithdrawalNotPendingError, InsufficientBalanceError, AmbiguousDepositAddressError, CurrencyMismatchError, IdempotencyKeyReuseError, DepositAddressUnsupportedError, DestinationAddressRequiredError, AmbiguousNetworkError, BelowMinimumWithdrawalError, WithdrawalDisabledError, } from '../service/wallet.service.js';
 import { WithdrawalQueueItemSchema } from '../contract/index.js';
 let db;
 function makePsp() {
@@ -25,12 +26,18 @@ function makeService(overrides = {}) {
         drizzle: db.drizzle,
         events: events,
         payment: mock(psp),
+        paymentProviders: makePaymentProviderRegistry(),
         audit,
         identityReader: makeIdentityReader(),
         ...overrides,
     });
     return { svc, events, psp, audit };
 }
+function playerIdentityReader() {
+    const identityReader = makeIdentityReader();
+    vi.mocked(identityReader.getPlayerIdByUserId).mockResolvedValue(randomUUID());
+    return identityReader;
+}
 const queueService = () => makeService().svc;
 function makeDirectory(summaries) {
     return mock({
@@ -90,7 +97,7 @@ afterAll(async () => {
     await db.drop();
 });
 beforeEach(async () => {
-    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${walletDepositAddress}, ${wallet} RESTART IDENTITY CASCADE`);
+    await db.drizzle.db.execute(sql `TRUNCATE ${walletTransaction}, ${walletDepositAddress}, ${walletAsset}, ${wallet} RESTART IDENTITY CASCADE`);
 });
 describe('WalletService.deposit (real PG)', () => {
     it('creates the wallet on a first deposit, credits it, and writes one completed fiat ledger row', async () => {
@@ -121,7 +128,7 @@ describe('WalletService.deposit (real PG)', () => {
     it('records the crypto rail for a crypto currency', async () => {
         const { svc } = makeService();
         const w = await seedWallet({ currency: 'BTC' });
-        await svc.deposit({ userId: w.userId, amount: '1', currency: 'BTC', provider: 'fireblocks' });
+        await svc.deposit({ userId: w.userId, amount: '1', currency: 'BTC', provider: 'custody' });
         const rows = await txRows(w.id);
         expect(rows[0]).toMatchObject({ type: 'deposit', rail: 'crypto' });
     });
@@ -151,6 +158,96 @@ describe('WalletService.deposit (real PG)', () => {
         expect(await balanceOf(w.userId, 'EUR')).toBe(10);
     });
 });
+describe('WalletService.manualAdjust (real PG)', () => {
+    it('credits, debits, writes an immutable ledger row and replays exactly once', async () => {
+        const { svc, audit, psp } = makeService({ identityReader: playerIdentityReader() });
+        const player = await seedWallet({ balance: '10' });
+        const adminId = randomUUID();
+        const idempotencyKey = randomUUID();
+        const credit = await svc.manualAdjust({
+            adminId,
+            userId: player.userId,
+            direction: 'credit',
+            amount: '5',
+            currency: 'USD',
+            reason: 'settlement correction',
+            idempotencyKey,
+            ...NO_CLIENT_META,
+        });
+        const replay = await svc.manualAdjust({
+            adminId,
+            userId: player.userId,
+            direction: 'credit',
+            amount: '5',
+            currency: 'USD',
+            reason: 'settlement correction',
+            idempotencyKey,
+            ...NO_CLIENT_META,
+        });
+        const debit = await svc.manualAdjust({
+            adminId,
+            userId: player.userId,
+            direction: 'debit',
+            amount: '3',
+            currency: 'USD',
+            reason: 'duplicate credit reversal',
+            idempotencyKey: randomUUID(),
+            ...NO_CLIENT_META,
+        });
+        expect(replay).toEqual(credit);
+        expect(await balanceOf(player.userId)).toBe(12);
+        expect(await txById(credit.transactionId)).toMatchObject({
+            type: 'manual_credit',
+            status: 'completed',
+            reviewedBy: adminId,
+            reviewReason: 'settlement correction',
+        });
+        expect(await txById(debit.transactionId)).toMatchObject({ type: 'manual_debit' });
+        expect(audit.recordInTransaction).toHaveBeenCalledTimes(2);
+        expect(audit.recordInTransaction).toHaveBeenCalledWith(expect.anything(), expect.objectContaining({
+            action: 'wallet.manual_adjustment.created',
+            actorId: adminId,
+            resourceId: credit.transactionId,
+        }));
+        expect(psp.processDeposit).not.toHaveBeenCalled();
+        expect(psp.processWithdrawal).not.toHaveBeenCalled();
+    });
+    it('rejects an overdraw without a ledger or audit entry', async () => {
+        const { svc, audit } = makeService({ identityReader: playerIdentityReader() });
+        const player = await seedWallet({ balance: '10' });
+        await expect(svc.manualAdjust({
+            adminId: randomUUID(),
+            userId: player.userId,
+            direction: 'debit',
+            amount: '11',
+            currency: 'USD',
+            reason: 'correction',
+            idempotencyKey: randomUUID(),
+            ...NO_CLIENT_META,
+        })).rejects.toBeInstanceOf(InsufficientBalanceError);
+        expect(await balanceOf(player.userId)).toBe(10);
+        expect(await txRows(player.id)).toHaveLength(0);
+        expect(audit.recordInTransaction).not.toHaveBeenCalled();
+    });
+    it('creates a selected-currency balance for a player without a wallet', async () => {
+        const { svc } = makeService({ identityReader: playerIdentityReader() });
+        const userId = randomUUID();
+        await svc.manualAdjust({
+            adminId: randomUUID(),
+            userId,
+            direction: 'credit',
+            amount: '7',
+            currency: 'EUR',
+            reason: 'goodwill',
+            idempotencyKey: randomUUID(),
+            ...NO_CLIENT_META,
+        });
+        expect(await svc.getBalances(userId)).toEqual({
+            activeCurrency: 'EUR',
+            balances: [{ currency: 'EUR', balance: '7.000000000000000000' }],
+        });
+    });
+});
 describe('WalletService.getBalances / setActiveCurrency (real PG)', () => {
     it('returns every held currency ordered by code alongside the active one', async () => {
         const { svc } = makeService();
@@ -216,6 +313,99 @@ describe('WalletService.withdraw (real PG)', () => {
             destinationAddress: 'bc1qexample',
         });
     });
+    it('pins the only payable network on the transaction', async () => {
+        const { svc } = makeService();
+        const w = await seedWallet({ balance: '2', currency: 'BTC' });
+        await db.drizzle.db.insert(walletAsset).values({
+            currency: 'BTC',
+            network: 'BITCOIN',
+            providerAssetId: 'BTC',
+            minDeposit: '0',
+            minWithdrawal: '0',
+            withdrawalFee: '0',
+        });
+        const result = await svc.withdraw({
+            userId: w.userId,
+            amount: '1',
+            currency: 'BTC',
+            destinationAddress: 'bc1qexample',
+            ...NO_CLIENT_META,
+        });
+        expect(await txById(result.transactionId)).toMatchObject({ network: 'BITCOIN' });
+    });
+    it('demands a network when the currency is payable on several, holding no funds', async () => {
+        const { svc } = makeService();
+        const w = await seedWallet({ balance: '100', currency: 'USDT' });
+        await db.drizzle.db.insert(walletAsset).values(['ERC20', 'TRC20'].map((network) => ({
+            currency: 'USDT',
+            network,
+            providerAssetId: `USDT_${network}`,
+            minDeposit: '0',
+            minWithdrawal: '0',
+            withdrawalFee: '0',
+        })));
+        await expect(svc.withdraw({
+            userId: w.userId,
+            amount: '10',
+            currency: 'USDT',
+            destinationAddress: '0xexample',
+            ...NO_CLIENT_META,
+        })).rejects.toBeInstanceOf(AmbiguousNetworkError);
+        expect(await balanceOf(w.userId)).toBe(100);
+    });
+    it('enforces the minimum of the chosen chain, not the currency', async () => {
+        const { svc } = makeService();
+        const w = await seedWallet({ balance: '100', currency: 'USDT' });
+        await db.drizzle.db.insert(walletAsset).values([
+            {
+                currency: 'USDT',
+                network: 'ERC20',
+                providerAssetId: 'USDT_ERC20',
+                minDeposit: '0',
+                minWithdrawal: '20',
+                withdrawalFee: '0',
+            },
+            {
+                currency: 'USDT',
+                network: 'BEP20',
+                providerAssetId: 'USDT_BSC',
+                minDeposit: '0',
+                minWithdrawal: '1',
+                withdrawalFee: '0',
+            },
+        ]);
+        const args = {
+            userId: w.userId,
+            amount: '5',
+            currency: 'USDT',
+            destinationAddress: '0xexample',
+            ...NO_CLIENT_META,
+        };
+        await expect(svc.withdraw({ ...args, network: 'ERC20' })).rejects.toBeInstanceOf(BelowMinimumWithdrawalError);
+        const ok = await svc.withdraw({ ...args, network: 'BEP20' });
+        expect(await txById(ok.transactionId)).toMatchObject({ network: 'BEP20' });
+    });
+    it('fails closed when the currency is configured but payable nowhere', async () => {
+        const { svc } = makeService();
+        const w = await seedWallet({ balance: '100', currency: 'USDT' });
+        await db.drizzle.db.insert(walletAsset).values({
+            currency: 'USDT',
+            network: 'ERC20',
+            providerAssetId: 'USDT_ERC20',
+            minDeposit: '0',
+            minWithdrawal: '0',
+            withdrawalFee: '0',
+            withdrawalEnabled: false,
+        });
+        await expect(svc.withdraw({
+            userId: w.userId,
+            amount: '10',
+            currency: 'USDT',
+            destinationAddress: '0xexample',
+            ...NO_CLIENT_META,
+        })).rejects.toBeInstanceOf(WithdrawalDisabledError);
+        expect(await balanceOf(w.userId)).toBe(100);
+    });
     it('throws DestinationAddressRequiredError for a crypto withdrawal with no address', async () => {
         const { svc } = makeService();
         const w = await seedWallet({ balance: '2', currency: 'BTC' });
@@ -478,7 +668,7 @@ describe('WalletService idempotency - withdraw (real PG)', () => {
     });
 });
 describe('WalletService.approveWithdrawal (real PG)', () => {
-    it('moves pending -> completed, records the provider, and emits approved then completed', async () => {
+    it('moves pending -> completed and emits approved then completed', async () => {
         const { svc, events, psp } = makeService();
         const w = await seedWallet({ balance: '60' });
         const adminId = randomUUID();
@@ -489,7 +679,7 @@ describe('WalletService.approveWithdrawal (real PG)', () => {
         expect(await txById(pending.id)).toMatchObject({
             status: 'completed',
             reviewedBy: adminId,
-            providerName: 'psp',
+            providerName: DEFAULT_PAYMENT_PROVIDER,
         });
         expect(await balanceOf(w.userId)).toBe(60);
         expect(emittedTopics(events)).toEqual([
@@ -497,12 +687,53 @@ describe('WalletService.approveWithdrawal (real PG)', () => {
             'wallet.withdrawal.completed',
         ]);
     });
-    it('records the fireblocks provider for a crypto-rail withdrawal', async () => {
+    it('resolves providerName from the default binding when the pair has no catalog row', async () => {
         const { svc } = makeService();
         const w = await seedWallet({ currency: 'BTC' });
         const pending = await seedTx(w.id, { currency: 'BTC', rail: 'crypto', amount: '1' });
         await svc.approveWithdrawal(randomUUID(), pending.id);
-        expect(await txById(pending.id)).toMatchObject({ providerName: 'fireblocks' });
+        expect(await txById(pending.id)).toMatchObject({ providerName: DEFAULT_PAYMENT_PROVIDER });
+    });
+    it("resolves providerName from the (currency, network) catalog row's own providerName", async () => {
+        const { svc } = makeService();
+        await db.drizzle.db.insert(walletAsset).values({
+            currency: 'USDT',
+            network: 'ERC20',
+            providerAssetId: 'USDT_ERC20',
+            minDeposit: '1',
+            minWithdrawal: '1',
+            withdrawalFee: '1',
+            providerName: 'vendor-a',
+        });
+        const w = await seedWallet({ currency: 'USDT' });
+        const pending = await seedTx(w.id, {
+            currency: 'USDT',
+            network: 'ERC20',
+            rail: 'crypto',
+            amount: '5',
+        });
+        await svc.approveWithdrawal(randomUUID(), pending.id);
+        expect(await txById(pending.id)).toMatchObject({ providerName: 'vendor-a' });
+    });
+    it('falls back to the default binding when the catalog row has a null providerName', async () => {
+        const { svc } = makeService();
+        await db.drizzle.db.insert(walletAsset).values({
+            currency: 'USDT',
+            network: 'TRC20',
+            providerAssetId: 'USDT_TRC20',
+            minDeposit: '1',
+            minWithdrawal: '1',
+            withdrawalFee: '1',
+        });
+        const w = await seedWallet({ currency: 'USDT' });
+        const pending = await seedTx(w.id, {
+            currency: 'USDT',
+            network: 'TRC20',
+            rail: 'crypto',
+            amount: '5',
+        });
+        await svc.approveWithdrawal(randomUUID(), pending.id);
+        expect(await txById(pending.id)).toMatchObject({ providerName: DEFAULT_PAYMENT_PROVIDER });
     });
     it('marks failed, refunds the hold, emits failed, and rethrows when the PSP throws', async () => {
         const { svc, events, psp } = makeService();
@@ -763,7 +994,7 @@ describe('WalletService.getOrCreateDepositAddress (real PG)', () => {
             userId,
             currency: 'BTC',
             address: 'bc1qexisting',
-            providerName: 'fireblocks',
+            providerName: 'custody',
         });
         expect(await svc.getOrCreateDepositAddress(userId, 'BTC')).toEqual({
             address: 'bc1qexisting',
@@ -783,7 +1014,29 @@ describe('WalletService.getOrCreateDepositAddress (real PG)', () => {
             .select()
             .from(walletDepositAddress)
             .where(eq(walletDepositAddress.userId, userId));
-        expect(stored).toMatchObject({ address: 'bc1qnew', providerName: 'fireblocks' });
+        expect(stored).toMatchObject({ address: 'bc1qnew', providerName: DEFAULT_PAYMENT_PROVIDER });
+    });
+    it("persists the (currency, network) catalog row's own providerName", async () => {
+        await db.drizzle.db.insert(walletAsset).values({
+            currency: 'USDT',
+            network: 'ERC20',
+            providerAssetId: 'USDT_ERC20',
+            minDeposit: '1',
+            minWithdrawal: '1',
+            withdrawalFee: '1',
+            providerName: 'vendor-a',
+        });
+        const userId = randomUUID();
+        const issueDepositAddress = vi.fn(async () => ({ address: '0xnew' }));
+        const { svc } = makeService({
+            payment: mock({ ...makePsp(), issueDepositAddress }),
+        });
+        await svc.getOrCreateDepositAddress(userId, 'USDT', 'ERC20');
+        const [stored] = await db.drizzle.db
+            .select()
+            .from(walletDepositAddress)
+            .where(eq(walletDepositAddress.userId, userId));
+        expect(stored).toMatchObject({ address: '0xnew', providerName: 'vendor-a' });
     });
     it('issues one address when two calls race on the same user and currency', async () => {
         const userId = randomUUID();
@@ -811,7 +1064,7 @@ describe('WalletService.creditDepositByAddress (real PG)', () => {
     async function seedAddress(userId, address, currency = 'BTC', network) {
         await db.drizzle.db
             .insert(walletDepositAddress)
-            .values({ userId, currency, address, network, providerName: 'fireblocks' });
+            .values({ userId, currency, address, network, providerName: 'custody' });
     }
     it('resolves the address, credits the wallet, and emits deposit.completed', async () => {
         const { svc, events } = makeService();