@bloque/sdk-identity 0.8.0 → 0.9.0

package/dist/api-keys/api-keys-client.d.ts

@@ -1,5 +1,5 @@
 import { BaseClient } from '@bloque/sdk-core';
-import type { ApiKeyInfo, CreateApiKeyParams, CreateApiKeyResult, ExchangeApiKeyParams, ExchangeApiKeyResult, RotateApiKeyResult } from './types';
+import type { ApiKeyInfo, CreateApiKeyParams, CreateApiKeyResult, ExchangeApiKeyParams, ExchangeApiKeyResult, RotateApiKeyResult, UpsertOriginWebhookSecretParams, UpsertOriginWebhookSecretResult } from './types';
 export declare class ApiKeysClient extends BaseClient {
     /**
      * Create a new API key.
@@ -23,4 +23,12 @@ export declare class ApiKeysClient extends BaseClient {
     revoke(id: string): Promise<void>;
     /** Rotate an API key secret. Returns the new secret key (shown only once). */
     rotate(id: string): Promise<RotateApiKeyResult>;
+    /**
+     * Create or update the webhook secret for an API-key-provider origin.
+     * Authenticates purely via the origin's own `apiKey` — no session/JWT
+     * involved, so your server can call this without a logged-in user.
+     *
+     * @param originName - The namespace of the api-key-provider origin.
+     */
+    upsertOriginWebhookSecret(originName: string, params: UpsertOriginWebhookSecretParams): Promise<UpsertOriginWebhookSecretResult>;
 }

package/dist/api-keys/types.d.ts

@@ -33,3 +33,13 @@ export interface ApiKeyInfo {
 export interface RotateApiKeyResult {
     secretKey: string;
 }
+export interface UpsertOriginWebhookSecretParams {
+    /** The origin's own API key — authenticates this call, no session/JWT needed. */
+    apiKey: string;
+    webhookSecret: string;
+}
+export interface UpsertOriginWebhookSecretResult {
+    originName: string;
+    key: string;
+    updated: true;
+}

package/dist/index.cjs

@@ -1 +1 @@
-"use strict";const __rslib_import_meta_url__="u"<typeof document?new(require("url".replace("",""))).URL("file:"+__filename).href:document.currentScript&&document.currentScript.src||new URL("main.js",document.baseURI).href;var __webpack_require__={};__webpack_require__.d=(e,t)=>{for(var i in t)__webpack_require__.o(t,i)&&!__webpack_require__.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},__webpack_require__.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),__webpack_require__.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var __webpack_exports__={};__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{ApiKeysClient:()=>ApiKeysClient,OriginClient:()=>OriginClient,AliasesClient:()=>AliasesClient,IdentityClient:()=>IdentityClient,OriginsClient:()=>OriginsClient});const sdk_core_namespaceObject=require("@bloque/sdk-core");class AliasesClient extends sdk_core_namespaceObject.BaseClient{async get(e){return await this.httpClient.request({method:"GET",path:`/api/aliases?alias=${encodeURIComponent(e)}`})}}function mapApiKeyWire(e){return{id:e.id,keyId:e.key_id,publishableKey:e.publishable_key,name:e.name,scopes:e.scopes,domains:e.domains,status:e.status,expiration:e.expiration,metadata:e.metadata,lastUsedAt:e.last_used_at,createdAt:e.created_at}}class ApiKeysClient extends sdk_core_namespaceObject.BaseClient{async create(e){let t={name:e.name,scopes:e.scopes,domains:e.domains,expiration:e.expiration,metadata:e.metadata},i=await this.httpClient.request({method:"POST",path:"/api/api-keys",body:t});return{keyId:i.key_id,secretKey:i.secret_key,publishableKey:i.publishable_key}}async list(){return(await this.httpClient.request({method:"GET",path:"/api/api-keys"})).map(mapApiKeyWire)}async get(e){return mapApiKeyWire(await this.httpClient.request({method:"GET",path:`/api/api-keys/${e}`}))}async exchange(e){let t=await this.httpClient.request({method:"POST",path:"/api/api-keys/exchange",body:{key:e.key,scopes:e.scopes}});return{accessToken:t.access_token,expiresIn:t.expires_in,tokenType:t.token_type}}async revoke(e){await this.httpClient.request({method:"DELETE",path:`/api/api-keys/${e}`})}async rotate(e){return{secretKey:(await this.httpClient.request({method:"POST",path:`/api/api-keys/${e}/rotate`})).secret_key}}}class OriginClient extends sdk_core_namespaceObject.BaseClient{origin;constructor(e,t){super(e),this.origin=t}async assert(e){return await this.httpClient.request({method:"GET",path:`/api/origins/${this.origin}/assert?alias=${e}`})}}class OriginsClient extends sdk_core_namespaceObject.BaseClient{whatsapp;email;constructor(e){super(e),this.whatsapp=new OriginClient(e,"bloque-whatsapp"),this.email=new OriginClient(e,"bloque-email")}custom(e){return new OriginClient(this.httpClient,e)}async list(){return await this.httpClient.request({method:"GET",path:"/api/origins"})}async register(e,t,i){let a,s=i.assertionResult,n="API_KEY"===s.challengeType?{alias:s.alias,challengeType:"API_KEY",value:{api_key:s.value.apiKey,alias:e},originalChallengeParams:s.originalChallengeParams}:{alias:e,challengeType:s.challengeType,value:s.value,originalChallengeParams:s.originalChallengeParams};return a="individual"===i.type?{assertion_result:n,extra_context:i.extraContext,type:"individual",profile:this._mapUserProfile(i.profile)}:{assertion_result:n,extra_context:i.extraContext,type:"business",profile:this._mapBusinessProfile(i.profile)},{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/register`,body:a,headers:i.clientIp?{"x-original-client-ip":i.clientIp}:void 0})).result.access_token}}_mapUserProfile(e){return{first_name:e.firstName,last_name:e.lastName,birthdate:e.birthdate,email:e.email,phone:e.phone,gender:e.gender,address_line1:e.addressLine1,address_line2:e.addressLine2,city:e.city,state:e.state,postal_code:e.postalCode,neighborhood:e.neighborhood,country_of_birth_code:e.countryOfBirthCode,country_of_residence_code:e.countryOfResidenceCode,personal_id_type:e.personalIdType,personal_id_number:e.personalIdNumber}}_mapBusinessProfile(e){return{address_line1:e.addressLine1,city:e.city,country:e.country,incorporation_date:e.incorporationDate,legal_name:e.legalName,name:e.name,postal_code:e.postalCode,state:e.state,tax_id:e.taxId,type:e.type,address_line2:e.addressLine2,country_code:e.countryCode,email:e.email,logo:e.logo,owner_address_line1:e.ownerAddressLine1,owner_address_line2:e.ownerAddressLine2,owner_city:e.ownerCity,owner_country_code:e.ownerCountryCode,owner_id_number:e.ownerIdNumber,owner_id_type:e.ownerIdType,owner_name:e.ownerName,owner_postal_code:e.ownerPostalCode,owner_state:e.ownerState,phone:e.phone}}}class IdentityClient{httpClient;aliases;apiKeys;origins;constructor(e){this.httpClient=e,this.aliases=new AliasesClient(this.httpClient),this.apiKeys=new ApiKeysClient(this.httpClient),this.origins=new OriginsClient(this.httpClient)}async me(){return await this.httpClient.request({method:"GET",path:"/api/identities/me"})}async updateMe(e){return(await this.httpClient.request({method:"PATCH",path:"/api/identities/me",body:e})).result.identity}async myAliases(){return await this.httpClient.request({method:"GET",path:"/api/identities/me/aliases"})}async get(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}`})}async update(e,t){return(await this.httpClient.request({method:"PATCH",path:`/api/identities/${e}`,body:t})).result.identity}async getAliases(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}/aliases`})}}for(var __rspack_i in exports.AliasesClient=__webpack_exports__.AliasesClient,exports.ApiKeysClient=__webpack_exports__.ApiKeysClient,exports.IdentityClient=__webpack_exports__.IdentityClient,exports.OriginClient=__webpack_exports__.OriginClient,exports.OriginsClient=__webpack_exports__.OriginsClient,__webpack_exports__)-1===["AliasesClient","ApiKeysClient","IdentityClient","OriginClient","OriginsClient"].indexOf(__rspack_i)&&(exports[__rspack_i]=__webpack_exports__[__rspack_i]);Object.defineProperty(exports,"__esModule",{value:!0});
+"use strict";const __rslib_import_meta_url__="u"<typeof document?new(require("url".replace("",""))).URL("file:"+__filename).href:document.currentScript&&document.currentScript.src||new URL("main.js",document.baseURI).href;var __webpack_require__={};__webpack_require__.d=(e,t)=>{for(var i in t)__webpack_require__.o(t,i)&&!__webpack_require__.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},__webpack_require__.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),__webpack_require__.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})};var __webpack_exports__={};__webpack_require__.r(__webpack_exports__),__webpack_require__.d(__webpack_exports__,{ApiKeysClient:()=>ApiKeysClient,OriginClient:()=>OriginClient,AliasesClient:()=>AliasesClient,IdentityClient:()=>IdentityClient,OriginsClient:()=>OriginsClient});const sdk_core_namespaceObject=require("@bloque/sdk-core");class AliasesClient extends sdk_core_namespaceObject.BaseClient{async get(e){return await this.httpClient.request({method:"GET",path:`/api/aliases?alias=${encodeURIComponent(e)}`})}}function mapApiKeyWire(e){return{id:e.id,keyId:e.key_id,publishableKey:e.publishable_key,name:e.name,scopes:e.scopes,domains:e.domains,status:e.status,expiration:e.expiration,metadata:e.metadata,lastUsedAt:e.last_used_at,createdAt:e.created_at}}class ApiKeysClient extends sdk_core_namespaceObject.BaseClient{async create(e){let t={name:e.name,scopes:e.scopes,domains:e.domains,expiration:e.expiration,metadata:e.metadata},i=await this.httpClient.request({method:"POST",path:"/api/api-keys",body:t});return{keyId:i.key_id,secretKey:i.secret_key,publishableKey:i.publishable_key}}async list(){return(await this.httpClient.request({method:"GET",path:"/api/api-keys"})).map(mapApiKeyWire)}async get(e){return mapApiKeyWire(await this.httpClient.request({method:"GET",path:`/api/api-keys/${e}`}))}async exchange(e){let t=await this.httpClient.request({method:"POST",path:"/api/api-keys/exchange",body:{key:e.key,scopes:e.scopes}});return{accessToken:t.access_token,expiresIn:t.expires_in,tokenType:t.token_type}}async revoke(e){await this.httpClient.request({method:"DELETE",path:`/api/api-keys/${e}`})}async rotate(e){return{secretKey:(await this.httpClient.request({method:"POST",path:`/api/api-keys/${e}/rotate`})).secret_key}}async upsertOriginWebhookSecret(e,t){let i=await this.httpClient.request({method:"PUT",path:`/api/api-keys/origins/${e}/webhook-secret`,body:{api_key:t.apiKey,webhook_secret:t.webhookSecret}});return{originName:i.origin_name,key:i.key,updated:i.updated}}}class OriginClient extends sdk_core_namespaceObject.BaseClient{origin;constructor(e,t){super(e),this.origin=t}async assert(e){return await this.httpClient.request({method:"GET",path:`/api/origins/${this.origin}/assert?alias=${e}`})}async attest(e){return await this.httpClient.request({method:"GET",path:e?`/api/origins/${this.origin}/attest?alias=${e}`:`/api/origins/${this.origin}/attest`})}}class OriginsClient extends sdk_core_namespaceObject.BaseClient{whatsapp;email;constructor(e){super(e),this.whatsapp=new OriginClient(e,"bloque-whatsapp"),this.email=new OriginClient(e,"bloque-email")}custom(e){return new OriginClient(this.httpClient,e)}async list(){return await this.httpClient.request({method:"GET",path:"/api/origins"})}async register(e,t,i){let a,s=i.assertionResult,n="API_KEY"===s.challengeType?{alias:s.alias,challengeType:"API_KEY",value:{api_key:s.value.apiKey,alias:e},originalChallengeParams:s.originalChallengeParams}:{alias:e,challengeType:s.challengeType,value:s.value,originalChallengeParams:s.originalChallengeParams};return a="individual"===i.type?{assertion_result:n,extra_context:i.extraContext,type:"individual",profile:this._mapUserProfile(i.profile)}:"business"===i.type?{assertion_result:n,extra_context:i.extraContext,type:"business",profile:this._mapBusinessProfile(i.profile)}:{assertion_result:n,extra_context:i.extraContext,type:i.type,profile:i.profile},{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/register`,body:a,headers:i.clientIp?{"x-original-client-ip":i.clientIp}:void 0})).result.access_token}}async connect(e,t,i){return{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/connect`,body:{assertion_result:{alias:e,challengeType:i.assertionResult.challengeType,value:i.assertionResult.value,originalChallengeParams:i.assertionResult.originalChallengeParams},extra_context:i.extraContext}})).result.access_token}}async updateMetadata(e,t){let i=await this.httpClient.request({method:"PATCH",path:`/api/origins/${e}/metadata`,body:{api_key:t.apiKey,metadata:t.metadata}});return{originName:i.origin_name,metadata:i.metadata,updated:i.updated}}_mapUserProfile(e){return{first_name:e.firstName,last_name:e.lastName,birthdate:e.birthdate,email:e.email,phone:e.phone,gender:e.gender,address_line1:e.addressLine1,address_line2:e.addressLine2,city:e.city,state:e.state,postal_code:e.postalCode,neighborhood:e.neighborhood,country_of_birth_code:e.countryOfBirthCode,country_of_residence_code:e.countryOfResidenceCode,personal_id_type:e.personalIdType,personal_id_number:e.personalIdNumber}}_mapBusinessProfile(e){return{address_line1:e.addressLine1,city:e.city,country:e.country,incorporation_date:e.incorporationDate,legal_name:e.legalName,name:e.name,postal_code:e.postalCode,state:e.state,tax_id:e.taxId,type:e.type,address_line2:e.addressLine2,country_code:e.countryCode,email:e.email,logo:e.logo,owner_address_line1:e.ownerAddressLine1,owner_address_line2:e.ownerAddressLine2,owner_city:e.ownerCity,owner_country_code:e.ownerCountryCode,owner_id_number:e.ownerIdNumber,owner_id_type:e.ownerIdType,owner_name:e.ownerName,owner_postal_code:e.ownerPostalCode,owner_state:e.ownerState,phone:e.phone}}}class IdentityClient{httpClient;aliases;apiKeys;origins;constructor(e){this.httpClient=e,this.aliases=new AliasesClient(this.httpClient),this.apiKeys=new ApiKeysClient(this.httpClient),this.origins=new OriginsClient(this.httpClient)}async me(){return await this.httpClient.request({method:"GET",path:"/api/identities/me"})}async updateMe(e){return(await this.httpClient.request({method:"PATCH",path:"/api/identities/me",body:e})).result.identity}async myAliases(){return await this.httpClient.request({method:"GET",path:"/api/identities/me/aliases"})}async get(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}`})}async update(e,t){return(await this.httpClient.request({method:"PATCH",path:`/api/identities/${e}`,body:t})).result.identity}async getAliases(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}/aliases`})}}for(var __rspack_i in exports.AliasesClient=__webpack_exports__.AliasesClient,exports.ApiKeysClient=__webpack_exports__.ApiKeysClient,exports.IdentityClient=__webpack_exports__.IdentityClient,exports.OriginClient=__webpack_exports__.OriginClient,exports.OriginsClient=__webpack_exports__.OriginsClient,__webpack_exports__)-1===["AliasesClient","ApiKeysClient","IdentityClient","OriginClient","OriginsClient"].indexOf(__rspack_i)&&(exports[__rspack_i]=__webpack_exports__[__rspack_i]);Object.defineProperty(exports,"__esModule",{value:!0});

package/dist/index.js

@@ -1 +1 @@
-import{BaseClient as e}from"@bloque/sdk-core";class t extends e{async get(e){return await this.httpClient.request({method:"GET",path:`/api/aliases?alias=${encodeURIComponent(e)}`})}}function a(e){return{id:e.id,keyId:e.key_id,publishableKey:e.publishable_key,name:e.name,scopes:e.scopes,domains:e.domains,status:e.status,expiration:e.expiration,metadata:e.metadata,lastUsedAt:e.last_used_at,createdAt:e.created_at}}class i extends e{async create(e){let t={name:e.name,scopes:e.scopes,domains:e.domains,expiration:e.expiration,metadata:e.metadata},a=await this.httpClient.request({method:"POST",path:"/api/api-keys",body:t});return{keyId:a.key_id,secretKey:a.secret_key,publishableKey:a.publishable_key}}async list(){return(await this.httpClient.request({method:"GET",path:"/api/api-keys"})).map(a)}async get(e){return a(await this.httpClient.request({method:"GET",path:`/api/api-keys/${e}`}))}async exchange(e){let t=await this.httpClient.request({method:"POST",path:"/api/api-keys/exchange",body:{key:e.key,scopes:e.scopes}});return{accessToken:t.access_token,expiresIn:t.expires_in,tokenType:t.token_type}}async revoke(e){await this.httpClient.request({method:"DELETE",path:`/api/api-keys/${e}`})}async rotate(e){return{secretKey:(await this.httpClient.request({method:"POST",path:`/api/api-keys/${e}/rotate`})).secret_key}}}class s extends e{origin;constructor(e,t){super(e),this.origin=t}async assert(e){return await this.httpClient.request({method:"GET",path:`/api/origins/${this.origin}/assert?alias=${e}`})}}class n extends e{whatsapp;email;constructor(e){super(e),this.whatsapp=new s(e,"bloque-whatsapp"),this.email=new s(e,"bloque-email")}custom(e){return new s(this.httpClient,e)}async list(){return await this.httpClient.request({method:"GET",path:"/api/origins"})}async register(e,t,a){let i,s=a.assertionResult,n="API_KEY"===s.challengeType?{alias:s.alias,challengeType:"API_KEY",value:{api_key:s.value.apiKey,alias:e},originalChallengeParams:s.originalChallengeParams}:{alias:e,challengeType:s.challengeType,value:s.value,originalChallengeParams:s.originalChallengeParams};return i="individual"===a.type?{assertion_result:n,extra_context:a.extraContext,type:"individual",profile:this._mapUserProfile(a.profile)}:{assertion_result:n,extra_context:a.extraContext,type:"business",profile:this._mapBusinessProfile(a.profile)},{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/register`,body:i,headers:a.clientIp?{"x-original-client-ip":a.clientIp}:void 0})).result.access_token}}_mapUserProfile(e){return{first_name:e.firstName,last_name:e.lastName,birthdate:e.birthdate,email:e.email,phone:e.phone,gender:e.gender,address_line1:e.addressLine1,address_line2:e.addressLine2,city:e.city,state:e.state,postal_code:e.postalCode,neighborhood:e.neighborhood,country_of_birth_code:e.countryOfBirthCode,country_of_residence_code:e.countryOfResidenceCode,personal_id_type:e.personalIdType,personal_id_number:e.personalIdNumber}}_mapBusinessProfile(e){return{address_line1:e.addressLine1,city:e.city,country:e.country,incorporation_date:e.incorporationDate,legal_name:e.legalName,name:e.name,postal_code:e.postalCode,state:e.state,tax_id:e.taxId,type:e.type,address_line2:e.addressLine2,country_code:e.countryCode,email:e.email,logo:e.logo,owner_address_line1:e.ownerAddressLine1,owner_address_line2:e.ownerAddressLine2,owner_city:e.ownerCity,owner_country_code:e.ownerCountryCode,owner_id_number:e.ownerIdNumber,owner_id_type:e.ownerIdType,owner_name:e.ownerName,owner_postal_code:e.ownerPostalCode,owner_state:e.ownerState,phone:e.phone}}}class r{httpClient;aliases;apiKeys;origins;constructor(e){this.httpClient=e,this.aliases=new t(this.httpClient),this.apiKeys=new i(this.httpClient),this.origins=new n(this.httpClient)}async me(){return await this.httpClient.request({method:"GET",path:"/api/identities/me"})}async updateMe(e){return(await this.httpClient.request({method:"PATCH",path:"/api/identities/me",body:e})).result.identity}async myAliases(){return await this.httpClient.request({method:"GET",path:"/api/identities/me/aliases"})}async get(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}`})}async update(e,t){return(await this.httpClient.request({method:"PATCH",path:`/api/identities/${e}`,body:t})).result.identity}async getAliases(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}/aliases`})}}export{t as AliasesClient,i as ApiKeysClient,r as IdentityClient,s as OriginClient,n as OriginsClient};
+import{BaseClient as e}from"@bloque/sdk-core";class t extends e{async get(e){return await this.httpClient.request({method:"GET",path:`/api/aliases?alias=${encodeURIComponent(e)}`})}}function a(e){return{id:e.id,keyId:e.key_id,publishableKey:e.publishable_key,name:e.name,scopes:e.scopes,domains:e.domains,status:e.status,expiration:e.expiration,metadata:e.metadata,lastUsedAt:e.last_used_at,createdAt:e.created_at}}class i extends e{async create(e){let t={name:e.name,scopes:e.scopes,domains:e.domains,expiration:e.expiration,metadata:e.metadata},a=await this.httpClient.request({method:"POST",path:"/api/api-keys",body:t});return{keyId:a.key_id,secretKey:a.secret_key,publishableKey:a.publishable_key}}async list(){return(await this.httpClient.request({method:"GET",path:"/api/api-keys"})).map(a)}async get(e){return a(await this.httpClient.request({method:"GET",path:`/api/api-keys/${e}`}))}async exchange(e){let t=await this.httpClient.request({method:"POST",path:"/api/api-keys/exchange",body:{key:e.key,scopes:e.scopes}});return{accessToken:t.access_token,expiresIn:t.expires_in,tokenType:t.token_type}}async revoke(e){await this.httpClient.request({method:"DELETE",path:`/api/api-keys/${e}`})}async rotate(e){return{secretKey:(await this.httpClient.request({method:"POST",path:`/api/api-keys/${e}/rotate`})).secret_key}}async upsertOriginWebhookSecret(e,t){let a=await this.httpClient.request({method:"PUT",path:`/api/api-keys/origins/${e}/webhook-secret`,body:{api_key:t.apiKey,webhook_secret:t.webhookSecret}});return{originName:a.origin_name,key:a.key,updated:a.updated}}}class s extends e{origin;constructor(e,t){super(e),this.origin=t}async assert(e){return await this.httpClient.request({method:"GET",path:`/api/origins/${this.origin}/assert?alias=${e}`})}async attest(e){return await this.httpClient.request({method:"GET",path:e?`/api/origins/${this.origin}/attest?alias=${e}`:`/api/origins/${this.origin}/attest`})}}class n extends e{whatsapp;email;constructor(e){super(e),this.whatsapp=new s(e,"bloque-whatsapp"),this.email=new s(e,"bloque-email")}custom(e){return new s(this.httpClient,e)}async list(){return await this.httpClient.request({method:"GET",path:"/api/origins"})}async register(e,t,a){let i,s=a.assertionResult,n="API_KEY"===s.challengeType?{alias:s.alias,challengeType:"API_KEY",value:{api_key:s.value.apiKey,alias:e},originalChallengeParams:s.originalChallengeParams}:{alias:e,challengeType:s.challengeType,value:s.value,originalChallengeParams:s.originalChallengeParams};return i="individual"===a.type?{assertion_result:n,extra_context:a.extraContext,type:"individual",profile:this._mapUserProfile(a.profile)}:"business"===a.type?{assertion_result:n,extra_context:a.extraContext,type:"business",profile:this._mapBusinessProfile(a.profile)}:{assertion_result:n,extra_context:a.extraContext,type:a.type,profile:a.profile},{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/register`,body:i,headers:a.clientIp?{"x-original-client-ip":a.clientIp}:void 0})).result.access_token}}async connect(e,t,a){return{accessToken:(await this.httpClient.request({method:"POST",path:`/api/origins/${t}/connect`,body:{assertion_result:{alias:e,challengeType:a.assertionResult.challengeType,value:a.assertionResult.value,originalChallengeParams:a.assertionResult.originalChallengeParams},extra_context:a.extraContext}})).result.access_token}}async updateMetadata(e,t){let a=await this.httpClient.request({method:"PATCH",path:`/api/origins/${e}/metadata`,body:{api_key:t.apiKey,metadata:t.metadata}});return{originName:a.origin_name,metadata:a.metadata,updated:a.updated}}_mapUserProfile(e){return{first_name:e.firstName,last_name:e.lastName,birthdate:e.birthdate,email:e.email,phone:e.phone,gender:e.gender,address_line1:e.addressLine1,address_line2:e.addressLine2,city:e.city,state:e.state,postal_code:e.postalCode,neighborhood:e.neighborhood,country_of_birth_code:e.countryOfBirthCode,country_of_residence_code:e.countryOfResidenceCode,personal_id_type:e.personalIdType,personal_id_number:e.personalIdNumber}}_mapBusinessProfile(e){return{address_line1:e.addressLine1,city:e.city,country:e.country,incorporation_date:e.incorporationDate,legal_name:e.legalName,name:e.name,postal_code:e.postalCode,state:e.state,tax_id:e.taxId,type:e.type,address_line2:e.addressLine2,country_code:e.countryCode,email:e.email,logo:e.logo,owner_address_line1:e.ownerAddressLine1,owner_address_line2:e.ownerAddressLine2,owner_city:e.ownerCity,owner_country_code:e.ownerCountryCode,owner_id_number:e.ownerIdNumber,owner_id_type:e.ownerIdType,owner_name:e.ownerName,owner_postal_code:e.ownerPostalCode,owner_state:e.ownerState,phone:e.phone}}}class r{httpClient;aliases;apiKeys;origins;constructor(e){this.httpClient=e,this.aliases=new t(this.httpClient),this.apiKeys=new i(this.httpClient),this.origins=new n(this.httpClient)}async me(){return await this.httpClient.request({method:"GET",path:"/api/identities/me"})}async updateMe(e){return(await this.httpClient.request({method:"PATCH",path:"/api/identities/me",body:e})).result.identity}async myAliases(){return await this.httpClient.request({method:"GET",path:"/api/identities/me/aliases"})}async get(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}`})}async update(e,t){return(await this.httpClient.request({method:"PATCH",path:`/api/identities/${e}`,body:t})).result.identity}async getAliases(e){return await this.httpClient.request({method:"GET",path:`/api/identities/${e}/aliases`})}}export{t as AliasesClient,i as ApiKeysClient,r as IdentityClient,s as OriginClient,n as OriginsClient};

package/dist/internal/wire-types.d.ts

@@ -21,7 +21,7 @@ export type AliasResponse = {
         alias: string;
         [key: string]: unknown;
     };
-    status: 'active' | 'inactive' | 'revoked';
+    status: 'awaiting_verification' | 'active' | 'inactive' | 'blocked' | 'rejected';
     is_public: boolean;
     is_primary: boolean;
     created_at: string;
@@ -199,11 +199,22 @@ export type BusinessRegisterRequest = {
     type: 'business';
     profile: BusinessProfile;
 };
+/**
+ * @internal
+ * Registration request for identity types with no dedicated profile shape
+ * (`dao`, `proxy`, `other`).
+ */
+export type OtherRegisterRequest = {
+    assertion_result: AssertionResult;
+    extra_context?: Record<string, unknown>;
+    type: 'dao' | 'proxy' | 'other';
+    profile: Record<string, unknown>;
+};
 /**
  * @internal
  * Combined registration request type
  */
-export type RegisterRequest = IndividualRegisterRequest | BusinessRegisterRequest;
+export type RegisterRequest = IndividualRegisterRequest | BusinessRegisterRequest | OtherRegisterRequest;
 /**
  * @internal
  * Registration response from API

package/dist/origins/origin-client.d.ts

@@ -4,4 +4,15 @@ export declare class OriginClient<TAssertion> extends BaseClient {
     private readonly origin;
     constructor(httpClient: HttpClient, origin: string);
     assert(alias: string): Promise<TAssertion>;
+    /**
+     * Request the attestation challenge that starts registration — the
+     * counterpart to `assert()`, which starts connecting to an existing
+     * identity instead. Resolve the returned challenge and pass the result
+     * as `register()`'s `assertionResult`.
+     *
+     * @param alias - Optional identity alias/identifier (e.g. a wallet
+     * address for Ethereum origins). Omit for challenge types that don't
+     * need one.
+     */
+    attest(alias?: string): Promise<TAssertion>;
 }

package/dist/origins/origins-client.d.ts

@@ -2,7 +2,7 @@ import type { HttpClient } from '@bloque/sdk-core';
 import { BaseClient } from '@bloque/sdk-core';
 import type { Origin, OTPAssertion, OTPAssertionEmail, OTPAssertionWhatsApp } from '../internal/wire-types';
 import { OriginClient } from './origin-client';
-import type { RegisterParams, RegisterResult } from './types';
+import type { ConnectParams, RegisterParams, RegisterResult, UpdateOriginMetadataParams, UpdateOriginMetadataResult } from './types';
 export declare class OriginsClient extends BaseClient {
     readonly whatsapp: OriginClient<OTPAssertionWhatsApp>;
     readonly email: OriginClient<OTPAssertionEmail>;
@@ -123,6 +123,43 @@ export declare class OriginsClient extends BaseClient {
      * ```
      */
     register(alias: string, origin: string, params: RegisterParams): Promise<RegisterResult>;
+    /**
+     * Connect to an existing identity — the counterpart to `register()`.
+     * Resolve an `assert()` challenge and pass the result here to obtain an
+     * access token for an identity that already exists, instead of creating
+     * a new one.
+     *
+     * @param alias - The identity alias/identifier being connected (same
+     *   value passed to `assert()`).
+     * @param origin - The origin namespace to connect with.
+     * @param params - The resolved assertion result.
+     * @returns Promise resolving to the connection result with access token.
+     *
+     * @example
+     * ```typescript
+     * const challenge = await bloque.identity.email.assert('user@example.com');
+     * // ...resolve the challenge (e.g. collect the OTP the user received)...
+     * const session = await bloque.identity.origins.connect('user@example.com', 'bloque-email', {
+     *   assertionResult: {
+     *     alias: 'user@example.com',
+     *     challengeType: 'OTP',
+     *     value: { code: '123456' },
+     *   },
+     * });
+     * ```
+     */
+    connect(alias: string, origin: string, params: ConnectParams): Promise<RegisterResult>;
+    /**
+     * Self-service update of an API-key-provider origin's presentation
+     * metadata (e.g. `company`, `gate_accent_color`). Authenticates purely
+     * via the origin's own `apiKey` — no session/JWT involved, so your
+     * server can call this directly. Shallow-merges `params.metadata` into
+     * the origin's existing metadata; only allowlisted keys are accepted
+     * (see {@link SelfServiceMetadataKey}).
+     *
+     * @param originName - The namespace of the api-key-provider origin.
+     */
+    updateMetadata(originName: string, params: UpdateOriginMetadataParams): Promise<UpdateOriginMetadataResult>;
     private _mapUserProfile;
     private _mapBusinessProfile;
 }

package/dist/origins/types.d.ts

@@ -28,7 +28,13 @@ type BaseAssertion<TType extends string, TValue> = {
     };
 };
 type ApiKeyAssertion = BaseAssertion<'API_KEY', ApiKeyValue>;
-type InteractiveAssertion = BaseAssertion<'REDIRECT' | 'OAUTH_REDIRECT' | 'SIGNING_CHALLENGE' | 'WEBAUTHN' | 'OTP' | 'PASSWORD', SigningChallengeValue>;
+/**
+ * An assertion resolution for a challenge type a user resolves directly
+ * (as opposed to `API_KEY`, which is your server registering on a user's
+ * behalf). This is the only kind `connect()` accepts.
+ */
+export type InteractiveAssertionResult = BaseAssertion<'REDIRECT' | 'OAUTH_REDIRECT' | 'SIGNING_CHALLENGE' | 'WEBAUTHN' | 'OTP' | 'PASSWORD', SigningChallengeValue>;
+type InteractiveAssertion = InteractiveAssertionResult;
 type AssertionResult = ApiKeyAssertion | InteractiveAssertion;
 interface UserProfile {
     firstName?: string;
@@ -205,11 +211,73 @@ export interface BusinessRegisterParams {
      */
     clientIp?: string;
 }
-export type RegisterParams = IndividualRegisterParams | BusinessRegisterParams;
+/**
+ * Registration params for identity types with no dedicated profile shape
+ * (`dao`, `proxy`, `other`). These have little to no server-side profile
+ * validation today — confirm with Bloque which of these your integration
+ * actually needs before relying on one in production.
+ */
+export interface OtherRegisterParams {
+    /**
+     * Result of the assertion challenge
+     */
+    assertionResult: AssertionResult;
+    /**
+     * Additional context data
+     */
+    extraContext?: Record<string, unknown>;
+    /**
+     * Type of entity being registered
+     */
+    type: 'dao' | 'proxy' | 'other';
+    /**
+     * Unstructured profile data — shape is caller-defined for these types.
+     */
+    profile: Record<string, unknown>;
+    /**
+     * The end user's own IP address, forwarded from your server so Bloque can
+     * resolve their real usage country and record it on the compliance audit
+     * trail — instead of falling back to your server's own IP. Only honored
+     * for `API_KEY`-challenge registrations (your server calling on the
+     * user's behalf); silently ignored otherwise, since Bloque can already
+     * see the caller's real IP for interactive challenge types.
+     * @example "190.85.12.4"
+     */
+    clientIp?: string;
+}
+export type RegisterParams = IndividualRegisterParams | BusinessRegisterParams | OtherRegisterParams;
 export interface RegisterResult {
     /**
      * JWT access token for the registered identity
      */
     accessToken: string;
 }
+export interface ConnectParams {
+    /**
+     * Result of the assertion challenge from `assert()`. Only interactive
+     * challenge types are accepted — not `API_KEY`, which is for registering
+     * a new identity on a user's behalf, not reconnecting to an existing one.
+     */
+    assertionResult: InteractiveAssertionResult;
+    /**
+     * Additional context data
+     */
+    extraContext?: Record<string, unknown>;
+}
+/**
+ * Metadata keys an origin may self-service update via `updateMetadata()`.
+ * Any other key is rejected.
+ */
+export type SelfServiceMetadataKey = 'company' | 'tos_gate_show_home' | 'gate_accent_color' | 'verification_gate_return_url_allowlist' | 'gate_frame_ancestors_allowlist';
+export interface UpdateOriginMetadataParams {
+    /** The origin's own API key — authenticates this call, no session/JWT needed. */
+    apiKey: string;
+    /** Shallow-merged into the origin's existing metadata. Unlisted keys are rejected. */
+    metadata: Partial<Record<SelfServiceMetadataKey, unknown>>;
+}
+export interface UpdateOriginMetadataResult {
+    originName: string;
+    metadata: Record<string, unknown>;
+    updated: true;
+}
 export {};

package/dist/types.d.ts

@@ -4,8 +4,9 @@ export type CreateIdentityParams = Pick<IndividualRegisterParams, 'extraContext'
  * Parameters for updating the current user's identity
  */
 export interface UpdateIdentityParams {
-    /** Partial profile fields to update (merged with existing) */
-    profile?: Partial<IdentityMeProfile>;
+    /** Partial profile fields to update (merged with existing). Shape
+     * depends on the identity's `type` — see {@link IdentityMe.profile}. */
+    profile?: Partial<IdentityMeProfile> | Partial<IdentityMeBusinessProfile> | Record<string, unknown>;
     /** Partial metadata to update (merged with existing) */
     metadata?: Record<string, unknown>;
 }
@@ -18,29 +19,60 @@ export interface IdentityAlias {
     verified: boolean;
     primary: boolean;
 }
+/**
+ * Shape of `IdentityMe.profile` when `type === 'individual'`. Other
+ * identity types (`business`, `dao`, `proxy`, `other`) have a differently
+ * shaped profile — see {@link IdentityMe.profile}.
+ */
 export interface IdentityMeProfile {
-    city: string;
-    email: string;
-    phone: string;
-    state: string;
-    gender: string;
-    birthdate: string;
-    last_name: string;
-    first_name: string;
-    postal_code: string;
-    neighborhood: string;
-    address_line1: string;
+    city?: string;
+    email?: string;
+    phone?: string;
+    state?: string;
+    gender?: string;
+    birthdate?: string;
+    last_name?: string;
+    first_name?: string;
+    postal_code?: string;
+    neighborhood?: string;
+    address_line1?: string;
+    address_line2?: string;
+    personal_id_type?: string;
+    personal_id_number?: string;
+    country_of_birth_code?: string;
+    country_of_residence_code?: string;
+}
+/**
+ * Shape of `IdentityMe.profile` when `type === 'business'`.
+ */
+export interface IdentityMeBusinessProfile {
+    legal_name?: string;
+    tax_id?: string;
+    owner_name?: string;
+    owner_id_type?: string;
+    owner_id_number?: string;
+    address_line1?: string;
     address_line2?: string;
-    personal_id_type: string;
-    personal_id_number: string;
-    country_of_birth_code: string;
-    country_of_residence_code: string;
+    city?: string;
+    state?: string;
+    postal_code?: string;
+    country_code?: string;
+    phone?: string;
+    email?: string;
 }
 export interface IdentityMe {
     urn: string;
     origin: string;
+    /** `'individual'`, `'business'`, `'dao'`, `'proxy'`, or `'other'`. Check
+     * this before reading `profile` — its shape depends on this value. */
     type: string;
-    profile: IdentityMeProfile;
+    /**
+     * Shaped per `type`: {@link IdentityMeProfile} for `'individual'`,
+     * {@link IdentityMeBusinessProfile} for `'business'`. `'dao'`/`'proxy'`/
+     * `'other'` identities carry an unstructured profile — treat it as
+     * `Record<string, unknown>` for those.
+     */
+    profile: IdentityMeProfile | IdentityMeBusinessProfile | Record<string, unknown>;
     status: string;
     metadata: Record<string, unknown>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bloque/sdk-identity",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "keywords": [
     "bloque",
@@ -34,6 +34,6 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@bloque/sdk-core": "0.5.0"
+    "@bloque/sdk-core": "0.9.0"
   }
 }