@arkyc/types 2.0.0 → 2.1.0

package/dist/access.d.mts

@@ -1,5 +1,4 @@
 import { Entity, Id, ProjectScoped } from "./common.mjs";
-
 //#region src/access.d.ts
 /**
  * A gated project capability. Extended access generalizes what used to be the
@@ -8,27 +7,27 @@ import { Entity, Id, ProjectScoped } from "./common.mjs";
  * runtime. New gated (and, later, paywalled) features are added here plus a row
  * in {@link ACCESS_CAPABILITIES}, not a new subsystem.
  */
-type AccessCapability = 'ai' | 'pii';
+export type AccessCapability = 'ai' | 'pii';
 /**
  * The lifecycle of a capability grant. `none` is synthetic (no row yet) and only
  * appears in API/UI responses; it is never persisted.
  */
-type AccessGrantStatus = 'none' | 'pending' | 'granted' | 'revoked';
+export type AccessGrantStatus = 'none' | 'pending' | 'granted' | 'revoked';
 /** Categories of personal data a project may request access to (PII capability). */
-type PiiCategory = 'identity' | 'address';
+export type PiiCategory = 'identity' | 'address';
 /** When a project needs the PII: before the session is decided, or only after. */
-type PiiTiming = 'before' | 'after';
+export type PiiTiming = 'before' | 'after';
 /**
  * Capability-specific request detail. Only meaningful for `pii`: what data the
  * project needs, when, and their justification for being able to protect it.
  */
-interface AccessGrantDetails {
+export interface AccessGrantDetails {
   categories?: PiiCategory[];
   timing?: PiiTiming;
   justification?: string | null;
 }
 /** A per-`(project, capability)` entitlement with a request/review lifecycle. */
-interface AccessGrant extends Entity, ProjectScoped {
+export interface AccessGrant extends Entity, ProjectScoped {
   capability: AccessCapability;
   status: AccessGrantStatus;
   details: AccessGrantDetails | null;
@@ -39,7 +38,7 @@ interface AccessGrant extends Entity, ProjectScoped {
   reviewed_at: string | null;
 }
 /** Registry metadata for one capability. */
-interface AccessCapabilityMeta {
+export interface AccessCapabilityMeta {
   key: AccessCapability;
   label: string;
   /** Whether projects can self-request it (vs admin-only grant). */
@@ -52,13 +51,13 @@ interface AccessCapabilityMeta {
  * Enforcement and UIs iterate this rather than hard-coding capability names.
  * (Room is left here for future `plan`/`billable` metadata behind a paywall.)
  */
-declare const ACCESS_CAPABILITIES: Record<AccessCapability, AccessCapabilityMeta>;
+export declare const ACCESS_CAPABILITIES: Record<AccessCapability, AccessCapabilityMeta>;
 /** All capability keys, in display order. */
-declare const ACCESS_CAPABILITY_KEYS: AccessCapability[];
+export declare const ACCESS_CAPABILITY_KEYS: AccessCapability[];
 /**
  * Identity fields extracted from the document (the `identity` PII category).
  */
-interface ExtractedIdentity {
+export interface ExtractedIdentity {
   first_name: string | null;
   last_name: string | null;
   full_name: string | null;
@@ -70,7 +69,7 @@ interface ExtractedIdentity {
 /**
  * Residential address fields (the `address` PII category).
  */
-interface ExtractedAddress {
+export interface ExtractedAddress {
   line1: string | null;
   line2: string | null;
   city: string | null;
@@ -86,10 +85,9 @@ interface ExtractedAddress {
  * (for `after` timing) only once the session is decided. Absent entirely when
  * the project has no granted PII entitlement.
  */
-interface ExtractedData {
+export interface ExtractedData {
   identity?: ExtractedIdentity;
   address?: ExtractedAddress;
 }
 //#endregion
-export { ACCESS_CAPABILITIES, ACCESS_CAPABILITY_KEYS, AccessCapability, AccessCapabilityMeta, AccessGrant, AccessGrantDetails, AccessGrantStatus, ExtractedAddress, ExtractedData, ExtractedIdentity, PiiCategory, PiiTiming };
 //# sourceMappingURL=access.d.mts.map

package/dist/access.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"access.d.mts","names":[],"sources":["../src/access.ts"],"mappings":";;;;;AASA;;;;AAA4B;KAAhB,gBAAA;;;;AAMiB;KAAjB,iBAAA;;KAGA,WAAA;;KAGA,SAAA;AAAZ;;;;AAAA,UAMiB,kBAAA;EACf,UAAA,GAAa,WAAA;EACb,MAAA,GAAS,SAAS;EAClB,aAAA;AAAA;;UAIe,WAAA,SAAoB,MAAA,EAAQ,aAAA;EAC3C,UAAA,EAAY,gBAAA;EACZ,MAAA,EAAQ,iBAAA;EACR,OAAA,EAAS,kBAAA;EACT,IAAA;EACA,YAAA,EAAc,EAAA;EACd,YAAA;EACA,WAAA,EAAa,EAAA;EACb,WAAA;AAAA;;UAIe,oBAAA;EACf,GAAA,EAAK,gBAAgB;EACrB,KAAA;EAdmC;EAgBnC,WAAA;EAhBwD;EAkBxD,eAAA;AAAA;;;;;;cAQW,mBAAA,EAAqB,MAAA,CAAO,gBAAA,EAAkB,oBAAA;;cAM9C,sBAAA,EAAwB,gBAAgB;;;;UAKpC,iBAAA;EACf,UAAA;EACA,SAAA;EACA,SAAA;EACA,aAAA;EACA,eAAA;EACA,WAAA;EACA,WAAA;AAAA;;;;UAMe,gBAAA;EACf,KAAA;EACA,KAAA;EACA,IAAA;EACA,MAAA;EACA,WAAA;EACA,OAAA;EACA,QAAA;EACA,SAAA;AAAA;;;;;;;UASe,aAAA;EACf,QAAA,GAAW,iBAAA;EACX,OAAA,GAAU,gBAAgB;AAAA"}
+{"version":3,"file":"access.d.mts","names":[],"sources":["../src/access.ts"],"mappings":";;;;;;;;;YASY;;;;;YAMA;;YAGA;;YAGA;;;;;iBAMK;EACf,aAAa;EACb,SAAS;EACT;;;iBAIe,oBAAoB,QAAQ;EAC3C,YAAY;EACZ,QAAQ;EACR,SAAS;EACT;EACA,cAAc;EACd;EACA,aAAa;EACb;;;iBAIe;EACf,KAAK;EACL;;EAEA;;EAEA;;;;;;;qBAQW,qBAAqB,OAAO,kBAAkB;;qBAM9C,wBAAwB;;;;iBAKpB;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;iBAMe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;;iBASe;EACf,WAAW;EACX,UAAU"}

package/dist/audit.d.mts

@@ -1,13 +1,12 @@
 import { Id, IsoDateTime, Metadata } from "./common.mjs";
-
 //#region src/audit.d.ts
 /** Who performed an audited action. */
-type ActorType = 'user' | 'api_key' | 'system';
+export type ActorType = 'user' | 'api_key' | 'system';
 /**
  * An immutable audit log entry. Project scope is optional (some actions are
  * organization-level only). Audit rows are append-only and carry no `updated_at`.
  */
-interface AuditLog {
+export interface AuditLog {
   id: Id;
   organization_id: Id;
   project_id: Id | null;
@@ -23,5 +22,4 @@ interface AuditLog {
   created_at: IsoDateTime;
 }
 //#endregion
-export { ActorType, AuditLog };
 //# sourceMappingURL=audit.d.mts.map

package/dist/audit.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.mts","names":[],"sources":["../src/audit.ts"],"mappings":";;;;KAGY,SAAA;AAAZ;;;;AAAA,UAMiB,QAAA;EACf,EAAA,EAAI,EAAA;EACJ,eAAA,EAAiB,EAAA;EACjB,UAAA,EAAY,EAAA;EACZ,QAAA,EAAU,EAAA;EACV,UAAA,EAAY,SAAA;EAFA;EAIZ,MAAA;EACA,WAAA;EACA,SAAA,EAAW,EAAA;EACX,QAAA,EAAU,QAAA;EACV,UAAA;EACA,UAAA;EACA,UAAA,EAAY,WAAA;AAAA"}
+{"version":3,"file":"audit.d.mts","names":[],"sources":["../src/audit.ts"],"mappings":";;;YAGY;;;;;iBAMK;EACf,IAAI;EACJ,iBAAiB;EACjB,YAAY;EACZ,UAAU;EACV,YAAY;;EAEZ;EACA;EACA,WAAW;EACX,UAAU;EACV;EACA;EACA,YAAY"}

package/dist/common.d.mts

@@ -7,30 +7,29 @@
  * `kyc_sess_…`, `organization_…`, `project_…`); timestamps are ISO-8601 strings.
  */
 /** A unique identifier (typically a prefixed, URL-safe string). */
-type Id = string;
+export type Id = string;
 /** An ISO-8601 date-time string, e.g. `2026-06-20T00:00:00.000Z`. */
-type IsoDateTime = string;
+export type IsoDateTime = string;
 /** An ISO-8601 date string (no time component), e.g. `1990-05-21`. */
-type IsoDate = string;
+export type IsoDate = string;
 /** Arbitrary, JSON-serialisable metadata attached to an entity. */
-type Metadata = Record<string, unknown>;
+export type Metadata = Record<string, unknown>;
 /** Columns shared by every persisted entity. */
-interface Timestamps {
+export interface Timestamps {
   created_at: IsoDateTime;
   updated_at: IsoDateTime;
 }
 /** A persisted entity: an `id` plus creation/update timestamps. */
-interface Entity extends Timestamps {
+export interface Entity extends Timestamps {
   id: Id;
 }
 /** Scoping columns present on every organization-owned entity. */
-interface OrganizationScoped {
+export interface OrganizationScoped {
   organization_id: Id;
 }
 /** Scoping columns present on every project-owned entity. */
-interface ProjectScoped extends OrganizationScoped {
+export interface ProjectScoped extends OrganizationScoped {
   project_id: Id;
 }
 //#endregion
-export { Entity, Id, IsoDate, IsoDateTime, Metadata, OrganizationScoped, ProjectScoped, Timestamps };
 //# sourceMappingURL=common.d.mts.map

package/dist/common.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.mts","names":[],"sources":["../src/common.ts"],"mappings":";;AASA;;;;AAAc;AAGd;;KAHY,EAAA;;KAGA,WAAA;AAGZ;AAAA,KAAY,OAAA;;KAGA,QAAA,GAAW,MAAM;AAHV;AAAA,UAMF,UAAA;EACf,UAAA,EAAY,WAAA;EACZ,UAAA,EAAY,WAAW;AAAA;AALI;AAAA,UASZ,MAAA,SAAe,UAAU;EACxC,EAAA,EAAI,EAAA;AAAA;;UAIW,kBAAA;EACf,eAAA,EAAiB,EAAE;AAAA;;UAIJ,aAAA,SAAsB,kBAAkB;EACvD,UAAA,EAAY,EAAA;AAAA"}
+{"version":3,"file":"common.d.mts","names":[],"sources":["../src/common.ts"],"mappings":";;;;;;;;;YASY;;YAGA;;YAGA;;YAGA,WAAW;;iBAGN;EACf,YAAY;EACZ,YAAY;;;iBAIG,eAAe;EAC9B,IAAI;;;iBAIW;EACf,iBAAiB;;;iBAIF,sBAAsB;EACrC,YAAY"}

package/dist/errors.d.mts

@@ -10,7 +10,6 @@
  * The typed clients surface this as `ArkycApiError.error` (`@arkyc/sdk`) and
  * `WidgetApiError.error` (`@arkyc/widget`).
  */
-type ApiErrorKey = 'missing_client_token' | 'invalid_client_token' | 'session_expired' | 'origin_not_allowed' | 'client_token_used' | 'handoff_disabled' | 'missing_api_key' | 'invalid_api_key' | 'invalid_workflow' | 'invalid_webhook';
+export type ApiErrorKey = 'missing_client_token' | 'invalid_client_token' | 'session_expired' | 'origin_not_allowed' | 'client_token_used' | 'handoff_disabled' | 'missing_api_key' | 'invalid_api_key' | 'invalid_workflow' | 'invalid_webhook';
 //#endregion
-export { ApiErrorKey };
 //# sourceMappingURL=errors.d.mts.map

package/dist/errors.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.mts","names":[],"sources":["../src/errors.ts"],"mappings":";;AAWA;;;;AAAuB;;;;;;KAAX,WAAA"}
+{"version":3,"file":"errors.d.mts","names":[],"sources":["../src/errors.ts"],"mappings":";;;;;;;;;;;;YAWY"}

package/dist/notifications.d.mts

@@ -1,26 +1,31 @@
 import { Id } from "./common.mjs";
-
 //#region src/notifications.d.ts
 /** Kinds of in-app notification a user can receive. */
-declare const NOTIFICATION_TYPE: {
-  /** A verification session was assigned to you for review. */readonly reviewAssigned: "review.assigned"; /** A verification session in a project you review needs a manual decision. */
-  readonly sessionNeedsReview: "session.requires_review"; /** Someone else approved or rejected a session assigned to you. */
-  readonly reviewDecided: "review.decided"; /** A webhook endpoint you maintain exhausted its delivery retries. */
-  readonly webhookFailing: "webhook.failing"; /** You were invited to join an organization. */
-  readonly invitationReceived: "invitation.received"; /** Watchlist screening matched a session in a project you review. */
+export declare const NOTIFICATION_TYPE: {
+  /** A verification session was assigned to you for review. */
+  readonly reviewAssigned: "review.assigned";
+  /** A verification session in a project you review needs a manual decision. */
+  readonly sessionNeedsReview: "session.requires_review";
+  /** Someone else approved or rejected a session assigned to you. */
+  readonly reviewDecided: "review.decided";
+  /** A webhook endpoint you maintain exhausted its delivery retries. */
+  readonly webhookFailing: "webhook.failing";
+  /** You were invited to join an organization. */
+  readonly invitationReceived: "invitation.received";
+  /** Watchlist screening matched a session in a project you review. */
   readonly screeningHit: "screening.hit";
 };
-type NotificationType = (typeof NOTIFICATION_TYPE)[keyof typeof NOTIFICATION_TYPE];
+export type NotificationType = (typeof NOTIFICATION_TYPE)[keyof typeof NOTIFICATION_TYPE];
 /** A user's notification delivery preferences. */
-interface NotificationPreferences {
+export interface NotificationPreferences {
   /** Also push notifications to the user's registered devices. */
   push: boolean;
 }
-declare const DEFAULT_NOTIFICATION_PREFERENCES: NotificationPreferences;
+export declare const DEFAULT_NOTIFICATION_PREFERENCES: NotificationPreferences;
 /** Platforms a device push token can be registered for. */
-type PushPlatform = 'ios' | 'android' | 'web';
+export type PushPlatform = 'ios' | 'android' | 'web';
 /** A stored in-app notification, as the API returns it. */
-interface UserNotification {
+export interface UserNotification {
   id: Id;
   type: NotificationType | string | null;
   title: string;
@@ -33,5 +38,4 @@ interface UserNotification {
   created_at: string;
 }
 //#endregion
-export { DEFAULT_NOTIFICATION_PREFERENCES, NOTIFICATION_TYPE, NotificationPreferences, NotificationType, PushPlatform, UserNotification };
 //# sourceMappingURL=notifications.d.mts.map

package/dist/notifications.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.mts","names":[],"sources":["../src/notifications.ts"],"mappings":";;;;cAGa,iBAAA;EAAA;;;;;;;KAeD,gBAAA,WAA2B,iBAAA,eAAgC,iBAAiB;;UAGvE,uBAAA;EAHuE;EAKtF,IAAI;AAAA;AAAA,cAGO,gCAAA,EAAkC,uBAE9C;;KAGW,YAAA;AALZ;AAAA,UAQiB,gBAAA;EACf,EAAA,EAAI,EAAA;EACJ,IAAA,EAAM,gBAAA;EACN,KAAA;EACA,WAAA;EACA,WAAA;;EAEA,WAAA;EACA,IAAA,EAAM,MAAA;EACN,OAAA;EACA,UAAA;AAAA"}
+{"version":3,"file":"notifications.d.mts","names":[],"sources":["../src/notifications.ts"],"mappings":";;;qBAGa;;;;;;;;;;;;;;YAeD,2BAA2B,gCAAgC;;iBAGtD;;EAEf;;qBAGW,kCAAkC;;YAKnC;;iBAGK;EACf,IAAI;EACJ,MAAM;EACN;EACA;EACA;;EAEA;EACA,MAAM;EACN;EACA"}

package/dist/organization.d.mts

@@ -1,37 +1,36 @@
 import { Entity, Id, IsoDateTime, Metadata, OrganizationScoped } from "./common.mjs";
 import { FaceEmbeddingSettings } from "./risk.mjs";
-
 //#region src/organization.d.ts
 /** Membership lifecycle states for organization/project members. */
-type MembershipStatus = 'active' | 'invited' | 'suspended';
+export type MembershipStatus = 'active' | 'invited' | 'suspended';
 /** Invitation lifecycle states. */
-type InvitationStatus = 'pending' | 'accepted' | 'expired' | 'revoked';
+export type InvitationStatus = 'pending' | 'accepted' | 'expired' | 'revoked';
 /**
  * An organization, business, or workspace using Arkyc. An organization owns projects,
  * members, roles, API keys, sessions, webhooks, and audit logs.
  */
-interface Organization extends Entity {
+export interface Organization extends Entity {
   name: string;
   slug: string;
   logo_url: string | null;
   settings: OrganizationSettings;
 }
 /** Organization-level configuration (free-form, with known optional keys). */
-interface OrganizationSettings extends Metadata {
+export interface OrganizationSettings extends Metadata {
   /** Days to retain verification media before cleanup (Phase 15). */
   retention_days?: number;
   /** Store face embeddings to catch one face behind several identities. Off by default. */
   face_embeddings?: Partial<FaceEmbeddingSettings>;
 }
 /** Links a {@link User} to a {@link Organization} with a role. */
-interface OrganizationMember extends Entity, OrganizationScoped {
+export interface OrganizationMember extends Entity, OrganizationScoped {
   user_id: Id;
   role_id: Id;
   status: MembershipStatus;
   joined_at: IsoDateTime | null;
 }
 /** A pending invitation to join an organization with a given role. */
-interface OrganizationInvitation extends Entity, OrganizationScoped {
+export interface OrganizationInvitation extends Entity, OrganizationScoped {
   email: string;
   role_id: Id;
   /** Hash of the single-use invitation token; the raw token is emailed once. */
@@ -40,5 +39,4 @@ interface OrganizationInvitation extends Entity, OrganizationScoped {
   accepted_at: IsoDateTime | null;
 }
 //#endregion
-export { InvitationStatus, MembershipStatus, Organization, OrganizationInvitation, OrganizationMember, OrganizationSettings };
 //# sourceMappingURL=organization.d.mts.map

package/dist/organization.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"organization.d.mts","names":[],"sources":["../src/organization.ts"],"mappings":";;;;;KAIY,gBAAA;AAAZ;AAAA,KAGY,gBAAA;;;AAHgB;AAG5B;UAMiB,YAAA,SAAqB,MAAM;EAC1C,IAAA;EACA,IAAA;EACA,QAAA;EACA,QAAA,EAAU,oBAAA;AAAA;;UAIK,oBAAA,SAA6B,QAAA;EARR;EAUpC,cAAA;EARA;EAUA,eAAA,GAAkB,OAAA,CAAQ,qBAAA;AAAA;;UAIX,kBAAA,SAA2B,MAAA,EAAQ,kBAAA;EAClD,OAAA,EAAS,EAAA;EACT,OAAA,EAAS,EAAA;EACT,MAAA,EAAQ,gBAAA;EACR,SAAA,EAAW,WAAA;AAAA;;UAII,sBAAA,SAA+B,MAAA,EAAQ,kBAAA;EACtD,KAAA;EACA,OAAA,EAAS,EAAA;EAlBmC;EAoB5C,UAAA;EACA,UAAA,EAAY,WAAA;EACZ,WAAA,EAAa,WAAA;AAAA"}
+{"version":3,"file":"organization.d.mts","names":[],"sources":["../src/organization.ts"],"mappings":";;;;YAIY;;YAGA;;;;;iBAMK,qBAAqB;EACpC;EACA;EACA;EACA,UAAU;;;iBAIK,6BAA6B;;EAE5C;;EAEA,kBAAkB,QAAQ;;;iBAIX,2BAA2B,QAAQ;EAClD,SAAS;EACT,SAAS;EACT,QAAQ;EACR,WAAW;;;iBAII,+BAA+B,QAAQ;EACtD;EACA,SAAS;;EAET;EACA,YAAY;EACZ,aAAa"}

package/dist/project.d.mts

@@ -2,17 +2,16 @@ import { Entity, Id, IsoDateTime, Metadata, OrganizationScoped, ProjectScoped }
 import { VelocitySettings } from "./risk.mjs";
 import { MembershipStatus } from "./organization.mjs";
 import { CaptureModel } from "./settings.mjs";
-
 //#region src/project.d.ts
 /** Deployment environment for a project. */
-type ProjectEnvironment = 'production' | 'staging' | 'development';
+export type ProjectEnvironment = 'production' | 'staging' | 'development';
 /** Project lifecycle status. */
-type ProjectStatus = 'active' | 'paused' | 'archived';
+export type ProjectStatus = 'active' | 'paused' | 'archived';
 /**
  * Per-project, configurable thresholds the decision engine compares scores
  * against. Projects may override any subset of {@link DEFAULT_VERIFICATION_THRESHOLDS}.
  */
-interface VerificationThresholds {
+export interface VerificationThresholds {
   documentQualityThreshold: number;
   ocrConfidenceThreshold: number;
   livenessThreshold: number;
@@ -21,9 +20,9 @@ interface VerificationThresholds {
   addressThreshold: number;
 }
 /** Platform default verification thresholds. */
-declare const DEFAULT_VERIFICATION_THRESHOLDS: VerificationThresholds;
+export declare const DEFAULT_VERIFICATION_THRESHOLDS: VerificationThresholds;
 /** Visual branding applied to the widget for a project. */
-interface ProjectBranding {
+export interface ProjectBranding {
   logo_url?: string | null;
   /**
    * Storage object key of an uploaded logo. Server-side only: the API resolves
@@ -46,7 +45,7 @@ interface ProjectBranding {
  * their phone by scanning a QR code.
  * The QR is shown first on desktop.
  */
-interface ProjectHandoffSettings {
+export interface ProjectHandoffSettings {
   /** Whether desktop users are offered the QR handoff to their phone. */
   enabled?: boolean;
   /**
@@ -56,7 +55,7 @@ interface ProjectHandoffSettings {
   allow_desktop?: boolean;
 }
 /** Project-level configuration. */
-interface ProjectSettings extends Metadata {
+export interface ProjectSettings extends Metadata {
   thresholds?: Partial<VerificationThresholds>;
   allowed_origins?: string[];
   /** Maximum verification attempts before a session is hard-failed. */
@@ -72,7 +71,7 @@ interface ProjectSettings extends Metadata {
  * A specific application, environment, or product integration owned by a
  * organization. Sessions, API keys, and webhooks are scoped to a project.
  */
-interface Project extends Entity, OrganizationScoped {
+export interface Project extends Entity, OrganizationScoped {
   name: string;
   slug: string;
   environment: ProjectEnvironment;
@@ -82,7 +81,7 @@ interface Project extends Entity, OrganizationScoped {
   has_ai_grant?: boolean;
 }
 /** Links a user to a project with a role (narrower tha organization membership). */
-interface ProjectMember extends Entity, ProjectScoped {
+export interface ProjectMember extends Entity, ProjectScoped {
   user_id: Id;
   role_id: Id;
   status: MembershipStatus;
@@ -91,7 +90,7 @@ interface ProjectMember extends Entity, ProjectScoped {
  * A project API key. Only `key_prefix` is stored in clear; the secret is hashed
  * (`key_hash`) and shown to the integrator exactly once at creation.
  */
-interface ApiKey extends Entity, ProjectScoped {
+export interface ApiKey extends Entity, ProjectScoped {
   name: string;
   key_prefix: string;
   key_hash: string;
@@ -100,17 +99,16 @@ interface ApiKey extends Entity, ProjectScoped {
   revoked_at: IsoDateTime | null;
 }
 /** An API key plus its one-time-visible secret, returned only at creation. */
-interface ApiKeyWithSecret {
+export interface ApiKeyWithSecret {
   api_key: ApiKey;
   /** The full secret key, e.g. `sk_live_…`. Never persisted in clear. */
   secret: string;
 }
 /** Resolves the organization + project + (optionally) acting user for a request. */
-interface ProjectContext {
+export interface ProjectContext {
   organization_id: Id;
   project_id: Id;
   api_key_id?: Id;
 }
 //#endregion
-export { ApiKey, ApiKeyWithSecret, DEFAULT_VERIFICATION_THRESHOLDS, Project, ProjectBranding, ProjectContext, ProjectEnvironment, ProjectHandoffSettings, ProjectMember, ProjectSettings, ProjectStatus, VerificationThresholds };
 //# sourceMappingURL=project.d.mts.map

package/dist/project.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"project.d.mts","names":[],"sources":["../src/project.ts"],"mappings":";;;;;;;KAOY,kBAAA;AAAZ;AAAA,KAGY,aAAA;;;AAHkB;AAG9B;UAMiB,sBAAA;EACf,wBAAA;EACA,sBAAA;EACA,iBAAA;EACA,kBAAA;EAJqC;EAMrC,gBAAA;AAAA;;cAIW,+BAAA,EAAiC,sBAM7C;;UAGgB,eAAA;EACf,QAAA;EAdgB;AAAA;AAIlB;;EAeE,QAAA;EACA,aAAA;EACA,aAAA;EACA,KAAA;EAT8B;EAW9B,IAAA;EAX8B;;;;EAgB9B,aAAA;AAAA;;;;AAAa;AAQf;UAAiB,sBAAA;;EAEf,OAAA;EAKa;AAIf;;;EAJE,aAAa;AAAA;;UAIE,eAAA,SAAwB,QAAA;EACvC,UAAA,GAAa,OAAA,CAAQ,sBAAA;EACrB,eAAA;EAFuC;EAIvC,WAAA;EAJ+C;EAM/C,aAAA,GAAgB,YAAA;EALhB;EAOA,OAAA,GAAU,sBAAA;EAPW;EASrB,QAAA,GAAW,OAAA,CAAQ,gBAAA;AAAA;;;;;UAOJ,OAAA,SAAgB,MAAA,EAAQ,kBAAA;EACvC,IAAA;EACA,IAAA;EACA,WAAA,EAAa,kBAAA;EACb,QAAA,EAAU,eAAA;EACV,QAAA,EAAU,eAAA;EACV,MAAA,EAAQ,aAAA;EACR,YAAA;AAAA;;UAIe,aAAA,SAAsB,MAAA,EAAQ,aAAA;EAC7C,OAAA,EAAS,EAAA;EACT,OAAA,EAAS,EAAA;EACT,MAAA,EAAQ,gBAAA;AAAA;;;;;UAOO,MAAA,SAAe,MAAA,EAAQ,aAAA;EACtC,IAAA;EACA,UAAA;EACA,QAAA;EACA,YAAA,EAAc,WAAA;EACd,UAAA,EAAY,WAAA;EACZ,UAAA,EAAY,WAAA;AAAA;;UAIG,gBAAA;EACf,OAAA,EAAS,MAAM;EAzBH;EA2BZ,MAAA;AAAA;;UAIe,cAAA;EACf,eAAA,EAAiB,EAAA;EACjB,UAAA,EAAY,EAAA;EACZ,UAAA,GAAa,EAAA;AAAA"}
+{"version":3,"file":"project.d.mts","names":[],"sources":["../src/project.ts"],"mappings":";;;;;;YAOY;;YAGA;;;;;iBAMK;EACf;EACA;EACA;EACA;;EAEA;;;qBAIW,iCAAiC;;iBAS7B;EACf;;;;;EAKA;EACA;EACA;EACA;;EAEA;;;;;EAKA;;;;;;;iBAQe;;EAEf;;;;;EAKA;;;iBAIe,wBAAwB;EACvC,aAAa,QAAQ;EACrB;;EAEA;;EAEA,gBAAgB;;EAEhB,UAAU;;EAEV,WAAW,QAAQ;;;;;;iBAOJ,gBAAgB,QAAQ;EACvC;EACA;EACA,aAAa;EACb,UAAU;EACV,UAAU;EACV,QAAQ;EACR;;;iBAIe,sBAAsB,QAAQ;EAC7C,SAAS;EACT,SAAS;EACT,QAAQ;;;;;;iBAOO,eAAe,QAAQ;EACtC;EACA;EACA;EACA,cAAc;EACd,YAAY;EACZ,YAAY;;;iBAIG;EACf,SAAS;;EAET;;;iBAIe;EACf,iBAAiB;EACjB,YAAY;EACZ,aAAa"}

package/dist/providers.d.mts

@@ -1,11 +1,10 @@
 import { Entity, Id, IsoDate, ProjectScoped } from "./common.mjs";
 import { AddressMethod } from "./workflow.mjs";
-
 //#region src/providers.d.ts
 /** Supported identity document categories. */
-type DocumentType = 'passport' | 'id_card' | 'drivers_license' | 'residence_permit';
+export type DocumentType = 'passport' | 'id_card' | 'drivers_license' | 'residence_permit';
 /** Structured identity fields extracted from a document via OCR. */
-interface OcrFields {
+export interface OcrFields {
   firstName?: string;
   lastName?: string;
   fullName?: string;
@@ -20,7 +19,7 @@ interface OcrFields {
  * (the `ai` vision driver). Advisory anti-spoofing signals — a flagged document
  * is routed to manual review, never auto-rejected on the model's say-so.
  */
-interface OcrAuthenticity {
+export interface OcrAuthenticity {
   /** False when any tamper/replay signal fired. */
   genuine: boolean;
   /** Model's authenticity confidence in [0, 1]: 1 = clearly an original, 0 = clearly fake/replayed. */
@@ -37,7 +36,7 @@ interface OcrAuthenticity {
   observations: string[];
 }
 /** The shape returned by any OCR driver. */
-interface OcrResultData {
+export interface OcrResultData {
   fields: OcrFields;
   /** Overall extraction confidence in [0, 1]. */
   confidence: number;
@@ -47,7 +46,7 @@ interface OcrResultData {
   raw?: unknown;
 }
 /** Anti-spoofing signals surfaced by a liveness driver. */
-interface SpoofSignals {
+export interface SpoofSignals {
   screenReplay?: boolean;
   printedPhoto?: boolean;
   maskDetected?: boolean;
@@ -56,7 +55,7 @@ interface SpoofSignals {
   poorLighting?: boolean;
 }
 /** The shape returned by any passive-liveness driver. */
-interface LivenessResultData {
+export interface LivenessResultData {
   passed: boolean;
   /** Liveness confidence in [0, 1]. */
   score: number;
@@ -64,7 +63,7 @@ interface LivenessResultData {
   raw?: unknown;
 }
 /** The shape returned by any face-match driver. */
-interface FaceMatchResultData {
+export interface FaceMatchResultData {
   passed: boolean;
   /** Similarity between document portrait and selfie in [0, 1]. */
   similarityScore: number;
@@ -73,7 +72,7 @@ interface FaceMatchResultData {
   raw?: unknown;
 }
 /** A normalized postal address. Any field may be absent depending on the source. */
-interface PostalAddress {
+export interface PostalAddress {
   line1?: string;
   line2?: string;
   city?: string;
@@ -87,7 +86,7 @@ interface PostalAddress {
   longitude?: number;
 }
 /** One method's contribution to address verification. */
-interface AddressMethodResult {
+export interface AddressMethodResult {
   method: AddressMethod;
   /** Whether this method produced a usable, valid result. */
   passed: boolean;
@@ -106,7 +105,7 @@ interface AddressMethodResult {
   raw?: unknown;
 }
 /** The shape returned by an address verifier — the aggregate of its methods. */
-interface AddressResultData {
+export interface AddressResultData {
   passed: boolean;
   /** Overall confidence in [0, 1]. */
   score: number;
@@ -117,7 +116,7 @@ interface AddressResultData {
   raw?: unknown;
 }
 /** A captured identity document (front and optional back) for a session. */
-interface DocumentCapture extends Entity, ProjectScoped {
+export interface DocumentCapture extends Entity, ProjectScoped {
   session_id: Id;
   country: string | null;
   document_type: DocumentType | null;
@@ -126,7 +125,7 @@ interface DocumentCapture extends Entity, ProjectScoped {
   quality_score: number | null;
 }
 /** Persisted OCR output for a document capture. */
-interface OcrResult extends Entity, ProjectScoped {
+export interface OcrResult extends Entity, ProjectScoped {
   session_id: Id;
   document_capture_id: Id;
   fields: OcrFields;
@@ -134,14 +133,14 @@ interface OcrResult extends Entity, ProjectScoped {
   raw_response: unknown;
 }
 /** The portrait region extracted from a document, used for face matching. */
-interface DocumentPortrait extends Entity, ProjectScoped {
+export interface DocumentPortrait extends Entity, ProjectScoped {
   session_id: Id;
   document_capture_id: Id;
   portrait_image_path: string;
   detection_confidence: number;
 }
 /** Persisted passive-liveness result for a session. */
-interface LivenessCheck extends Entity, ProjectScoped {
+export interface LivenessCheck extends Entity, ProjectScoped {
   session_id: Id;
   selfie_image_path: string | null;
   video_path: string | null;
@@ -152,7 +151,7 @@ interface LivenessCheck extends Entity, ProjectScoped {
   raw_response: unknown;
 }
 /** Persisted face-match result comparing document portrait to selfie. */
-interface FaceMatchCheck extends Entity, ProjectScoped {
+export interface FaceMatchCheck extends Entity, ProjectScoped {
   session_id: Id;
   id_portrait_image_path: string | null;
   selfie_image_path: string | null;
@@ -163,7 +162,7 @@ interface FaceMatchCheck extends Entity, ProjectScoped {
   raw_response: unknown;
 }
 /** Persisted address-verification result for a session. */
-interface AddressVerification extends Entity, ProjectScoped {
+export interface AddressVerification extends Entity, ProjectScoped {
   session_id: Id;
   /** The address the user claimed (typed in the widget), when provided. */
   claimed_address: PostalAddress | null;
@@ -181,5 +180,4 @@ interface AddressVerification extends Entity, ProjectScoped {
   raw_response: unknown;
 }
 //#endregion
-export { AddressMethodResult, AddressResultData, AddressVerification, DocumentCapture, DocumentPortrait, DocumentType, FaceMatchCheck, FaceMatchResultData, LivenessCheck, LivenessResultData, OcrAuthenticity, OcrFields, OcrResult, OcrResultData, PostalAddress, SpoofSignals };
 //# sourceMappingURL=providers.d.mts.map

package/dist/providers.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.mts","names":[],"sources":["../src/providers.ts"],"mappings":";;;;;KAIY,YAAA;AAAZ;AAAA,UAGiB,SAAA;EACf,SAAA;EACA,QAAA;EACA,QAAA;EACA,WAAA,GAAc,OAAA;EACd,cAAA;EACA,UAAA,GAAa,OAAA;EACb,SAAA,GAAY,OAAA;EACZ,WAAA;AAAA;;;;;;UAQe,eAAA;EAZD;EAcd,OAAA;EAZA;EAcA,UAAA;EAbA;EAeA,YAAA;EAdA;EAgBA,SAAA;EAhBW;EAkBX,gBAAA;EAV8B;EAY9B,iBAAA;EAZ8B;EAc9B,YAAA;AAAA;;UAIe,aAAA;EACf,MAAA,EAAQ,SAAA;EAPR;EASA,UAAA;EAPY;EASZ,YAAA,GAAe,eAAe;EALf;EAOf,GAAA;AAAA;;UAIe,YAAA;EACf,YAAA;EACA,YAAA;EACA,YAAA;EACA,aAAA;EACA,eAAA;EACA,YAAA;AAAA;AANF;AAAA,UAUiB,kBAAA;EACf,MAAA;EAX2B;EAa3B,KAAA;EACA,YAAA,EAAc,YAAY;EAC1B,GAAA;AAAA;;UAIe,mBAAA;EACf,MAAA;EAdY;EAgBZ,eAAA;EAZiC;EAcjC,UAAA;EACA,GAAA;AAAA;;UAIe,aAAA;EACf,KAAA;EACA,KAAA;EACA,IAAA;EAjBG;EAmBH,MAAA;EACA,UAAA;;EAEA,OAAA;EAjBA;EAmBA,QAAA;EACA,SAAA;AAAA;;UAIe,mBAAA;EACf,MAAA,EAAQ,aAAA;EAhBoB;EAkB5B,MAAA;EAlB4B;EAoB5B,UAAA;EAlBA;EAoBA,QAAA,GAAW,aAAa;EAjBxB;;;;;EAuBA,aAAA;EAjBS;EAmBT,IAAA;EACA,GAAA;AAAA;;UAIe,iBAAA;EACf,MAAA;EAlBA;EAoBA,KAAA;EAhBA;EAkBA,OAAA,EAAS,mBAAmB;EAZ5B;EAcA,UAAA;EACA,GAAA;AAAA;AAZG;AAAA,UAgBY,eAAA,SAAwB,MAAA,EAAQ,aAAA;EAC/C,UAAA,EAAY,EAAA;EACZ,OAAA;EACA,aAAA,EAAe,YAAA;EACf,gBAAA;EACA,eAAA;EACA,aAAA;AAAA;;UAIe,SAAA,SAAkB,MAAA,EAAQ,aAAA;EACzC,UAAA,EAAY,EAAA;EACZ,mBAAA,EAAqB,EAAA;EACrB,MAAA,EAAQ,SAAA;EACR,UAAA;EACA,YAAA;AAAA;;UAIe,gBAAA,SAAyB,MAAA,EAAQ,aAAA;EAChD,UAAA,EAAY,EAAA;EACZ,mBAAA,EAAqB,EAAA;EACrB,mBAAA;EACA,oBAAA;AAAA;;UAIe,aAAA,SAAsB,MAAA,EAAQ,aAAA;EAC7C,UAAA,EAAY,EAAA;EACZ,iBAAA;EACA,UAAA;EACA,KAAA;EACA,MAAA;EACA,aAAA,EAAe,YAAA;EACf,QAAA;EACA,YAAA;AAAA;;UAIe,cAAA,SAAuB,MAAA,EAAQ,aAAA;EAC9C,UAAA,EAAY,EAAA;EACZ,sBAAA;EACA,iBAAA;EACA,gBAAA;EACA,UAAA;EACA,MAAA;EACA,QAAA;EACA,YAAA;AAAA;;UAIe,mBAAA,SAA4B,MAAA,EAAQ,aAAA;EACnD,UAAA,EAAY,EAAA;EAxCS;EA0CrB,eAAA,EAAiB,aAAA;EAzCT;EA2CR,mBAAA;EAzCA;EA2CA,QAAA;EACA,SAAA;EACA,MAAA;EAzCgC;EA2ChC,KAAA;EA1CY;EA4CZ,OAAA,EAAS,mBAAA;EACT,QAAA;EACA,YAAA;AAAA"}
+{"version":3,"file":"providers.d.mts","names":[],"sources":["../src/providers.ts"],"mappings":";;;;YAIY;;iBAGK;EACf;EACA;EACA;EACA,cAAc;EACd;EACA,aAAa;EACb,YAAY;EACZ;;;;;;;iBAQe;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;iBAIe;EACf,QAAQ;;EAER;;EAEA,eAAe;;EAEf;;;iBAIe;EACf;EACA;EACA;EACA;EACA;EACA;;;iBAIe;EACf;;EAEA;EACA,cAAc;EACd;;;iBAIe;EACf;;EAEA;;EAEA;EACA;;;iBAIe;EACf;EACA;EACA;;EAEA;EACA;;EAEA;;EAEA;EACA;;;iBAIe;EACf,QAAQ;;EAER;;EAEA;;EAEA,WAAW;;;;;;EAMX;;EAEA;EACA;;;iBAIe;EACf;;EAEA;;EAEA,SAAS;;EAET;EACA;;;iBAIe,wBAAwB,QAAQ;EAC/C,YAAY;EACZ;EACA,eAAe;EACf;EACA;EACA;;;iBAIe,kBAAkB,QAAQ;EACzC,YAAY;EACZ,qBAAqB;EACrB,QAAQ;EACR;EACA;;;iBAIe,yBAAyB,QAAQ;EAChD,YAAY;EACZ,qBAAqB;EACrB;EACA;;;iBAIe,sBAAsB,QAAQ;EAC7C,YAAY;EACZ;EACA;EACA;EACA;EACA,eAAe;EACf;EACA;;;iBAIe,uBAAuB,QAAQ;EAC9C,YAAY;EACZ;EACA;EACA;EACA;EACA;EACA;EACA;;;iBAIe,4BAA4B,QAAQ;EACnD,YAAY;;EAEZ,iBAAiB;;EAEjB;;EAEA;EACA;EACA;;EAEA;;EAEA,SAAS;EACT;EACA"}

package/dist/rbac.d.mts

@@ -1,5 +1,4 @@
 import { Entity, Id, OrganizationScoped } from "./common.mjs";
-
 //#region src/rbac.d.ts
 /**
  * The full catalogue of permission strings recognised by Arkyc.
@@ -8,27 +7,27 @@ import { Entity, Id, OrganizationScoped } from "./common.mjs";
  * a user is the union of their role permissions and any directly-assigned
  * permissions (see `@arkyc/permissions`).
  */
-type PermissionKey = 'organizations.view' | 'organizations.update' | 'organizations.delete' | 'members.view' | 'members.invite' | 'members.update' | 'members.remove' | 'projects.view' | 'projects.create' | 'projects.update' | 'projects.delete' | 'api_keys.view' | 'api_keys.create' | 'api_keys.revoke' | 'webhooks.view' | 'webhooks.create' | 'webhooks.update' | 'webhooks.delete' | 'webhooks.test' | 'workflows.view' | 'workflows.create' | 'workflows.update' | 'workflows.delete' | 'sessions.view' | 'sessions.create' | 'sessions.cancel' | 'sessions.retry' | 'sessions.export' | 'reviews.view' | 'reviews.assign' | 'reviews.approve' | 'reviews.reject' | 'reviews.request_retry' | 'reviews.note' | 'audit_logs.view' | 'settings.view' | 'settings.update' | 'billing.view' | 'billing.update';
+export type PermissionKey = 'organizations.view' | 'organizations.update' | 'organizations.delete' | 'members.view' | 'members.invite' | 'members.update' | 'members.remove' | 'projects.view' | 'projects.create' | 'projects.update' | 'projects.delete' | 'api_keys.view' | 'api_keys.create' | 'api_keys.revoke' | 'webhooks.view' | 'webhooks.create' | 'webhooks.update' | 'webhooks.delete' | 'webhooks.test' | 'workflows.view' | 'workflows.create' | 'workflows.update' | 'workflows.delete' | 'sessions.view' | 'sessions.create' | 'sessions.cancel' | 'sessions.retry' | 'sessions.export' | 'reviews.view' | 'reviews.assign' | 'reviews.approve' | 'reviews.reject' | 'reviews.request_retry' | 'reviews.note' | 'audit_logs.view' | 'settings.view' | 'settings.update' | 'billing.view' | 'billing.update';
 /** The domain groups permissions are organised under. */
-type PermissionGroup = 'organizations' | 'members' | 'projects' | 'api_keys' | 'webhooks' | 'workflows' | 'sessions' | 'reviews' | 'audit_logs' | 'settings' | 'billing';
+export type PermissionGroup = 'organizations' | 'members' | 'projects' | 'api_keys' | 'webhooks' | 'workflows' | 'sessions' | 'reviews' | 'audit_logs' | 'settings' | 'billing';
 /** The built-in system roles seeded for every organization. */
-type SystemRoleSlug = 'owner' | 'admin' | 'reviewer' | 'developer' | 'readonly';
+export type SystemRoleSlug = 'owner' | 'admin' | 'reviewer' | 'developer' | 'readonly';
 /**
  * Platform-scope permission strings, distinct from organization {@link PermissionKey}.
  * These gate the super-admin surface above organizations and are only ever granted
  * through {@link AdminPermission} (never an organization role). Rows carry `admin: true`.
  */
-type AdminPermissionKey = 'admin.organizations.view' | 'admin.organizations.manage' | 'admin.users.view' | 'admin.users.manage' | 'admin.settings.view' | 'admin.settings.update' | 'admin.audit.view' | 'admin.billing.view' | 'admin.billing.update' | 'admin.extended_access.view' | 'admin.extended_access.manage';
+export type AdminPermissionKey = 'admin.organizations.view' | 'admin.organizations.manage' | 'admin.users.view' | 'admin.users.manage' | 'admin.settings.view' | 'admin.settings.update' | 'admin.audit.view' | 'admin.billing.view' | 'admin.billing.update' | 'admin.extended_access.view' | 'admin.extended_access.manage';
 /** The domain groups platform-admin permissions are organised under. */
-type AdminPermissionGroup = 'admin.organizations' | 'admin.users' | 'admin.settings' | 'admin.audit' | 'admin.billing' | 'admin.extended_access';
+export type AdminPermissionGroup = 'admin.organizations' | 'admin.users' | 'admin.settings' | 'admin.audit' | 'admin.billing' | 'admin.extended_access';
 /** Any permission string, organization- or platform-scope. */
-type AnyPermissionKey = PermissionKey | AdminPermissionKey;
+export type AnyPermissionKey = PermissionKey | AdminPermissionKey;
 /** Any permission group, organization- or platform-scope. */
-type AnyPermissionGroup = PermissionGroup | AdminPermissionGroup;
+export type AnyPermissionGroup = PermissionGroup | AdminPermissionGroup;
 /** The built-in platform-admin role slug. */
-type AdminRoleSlug = 'platform-owner';
+export type AdminRoleSlug = 'platform-owner';
 /** A permission definition row. Permissions are global (not organization-scoped). */
-interface Permission extends Entity {
+export interface Permission extends Entity {
   /** The permission string, e.g. `sessions.view` or `admin.settings.view`. */
   name: AnyPermissionKey;
   description: string | null;
@@ -40,7 +39,7 @@ interface Permission extends Entity {
  * A role within an organization. System roles (`is_system`) are seeded and cannot be
  * deleted; organizations may also define custom roles.
  */
-interface Role extends Entity {
+export interface Role extends Entity {
   /** Null for platform-admin roles (`admin: true`); set for organization roles. */
   organization_id: Id | null;
   name: string;
@@ -51,7 +50,7 @@ interface Role extends Entity {
   admin: boolean;
 }
 /** Join row granting a {@link Permission} to a {@link Role}. */
-interface RolePermission extends Entity {
+export interface RolePermission extends Entity {
   role_id: Id;
   permission_id: Id;
 }
@@ -59,7 +58,7 @@ interface RolePermission extends Entity {
  * A permission assigned directly to a user, on top of their role permissions.
  * `project_id` is null for organization-level grants, set for project-level grants.
  */
-interface UserPermission extends Entity, OrganizationScoped {
+export interface UserPermission extends Entity, OrganizationScoped {
   project_id: Id | null;
   user_id: Id;
   permission_id: Id;
@@ -70,11 +69,10 @@ interface UserPermission extends Entity, OrganizationScoped {
  * permission grant (`permission_id` set). Effective admin access is the union of
  * both, resolved by `@arkyc/permissions`.
  */
-interface AdminPermission extends Entity {
+export interface AdminPermission extends Entity {
   user_id: Id;
   permission_id: Id | null;
   role_id: Id | null;
 }
 //#endregion
-export { AdminPermission, AdminPermissionGroup, AdminPermissionKey, AdminRoleSlug, AnyPermissionGroup, AnyPermissionKey, Permission, PermissionGroup, PermissionKey, Role, RolePermission, SystemRoleSlug, UserPermission };
 //# sourceMappingURL=rbac.d.mts.map