@didit-protocol/sdk-node 1.0.1 → 2.0.0

package/dist/index.cjs

@@ -282,7 +282,7 @@ function decodeDates(value, plan, named, depth = 0) {
 }
 
 // src/core/version.ts
-var VERSION = "1.0.1";
+var VERSION = "2.0.0";
 
 // src/core/runtime.ts
 function processLike() {
@@ -1192,6 +1192,7 @@ var DATE_PLANS = {
       updated_at: 1
     }
   },
+  BiometricRetention: { p: { deletes_at: 1 } },
   BiometricTemplatesListResponse: {
     p: { results: { i: { p: { retained_at: 1, expires_at: 1, purged_at: 1 } } } }
   },
@@ -1304,6 +1305,10 @@ var DATE_PLANS = {
   },
   FeatureStatusOverride: { p: { requested_at: 1, applied_at: 1, cancelled_at: 1 } },
   FraudCheckResponse: { p: { created_at: 1, completed_at: 1 } },
+  GeolocationAttempt: {
+    p: { measured_at: 1, consent: { p: { accepted_at: 1 } }, received_at: 1, created_at: 1 }
+  },
+  GeolocationCheck: { p: { measured_at: 1, consent: { p: { accepted_at: 1 } } } },
   IPRiskResponse: { p: { created_at: 1 } },
   IdVerificationVerifyResponse: { p: { created_at: 1 } },
   ImportJobSummary: { p: { resumes_at: 1, created_at: 1, started_at: 1, completed_at: 1 } },
@@ -1325,32 +1330,67 @@ var DATE_PLANS = {
   InvestigatorSettings: { p: { stage_changed_at: 1 } },
   KybListShareholdersResponse: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   },
   KybListShareholdersResponse202: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   },
   KybListUbosResponse: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   },
   KybListUbosResponse202: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   },
   KybSearchResponse: { p: { created_at: 1 } },
   KybSelectResponse: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   },
@@ -1436,6 +1476,8 @@ var DATE_PLANS = {
   RoutingPublicationPolicyRevision: { p: { published_at: 1 } },
   SessionDecision: {
     p: {
+      status_override: { p: { overridden_at: 1 } },
+      decision_trace: { p: { decided_at: 1 } },
       id_verifications: {
         i: {
           p: {
@@ -1484,13 +1526,25 @@ var DATE_PLANS = {
       signatures: { i: "SignatureResult" },
       aml_screenings: { i: "AMLScreening" },
       ip_analyses: { i: { p: { matches: { i: { p: { verification_date: 1 } } } } } },
+      geolocation_checks: { i: "GeolocationCheck" },
+      geolocation_attempts: { i: "GeolocationAttempt" },
       reviews: { i: { p: { created_at: 1 } } },
+      assignee: { p: { assigned_at: 1 } },
+      waiting_since: 1,
+      sla_due_at: 1,
       created_at: 1,
       expires_at: 1,
       registry_checks: {
         i: {
           p: {
-            company: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } }
+            company: {
+              p: {
+                vat_checked_at: 1,
+                confirmed_by_user_at: 1,
+                last_console_edit_at: 1,
+                registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+              }
+            }
           }
         }
       },
@@ -1509,11 +1563,14 @@ var DATE_PLANS = {
       document_verifications: { i: { p: { items: { i: { p: { created_at: 1 } } } } } },
       resubmissions: { i: { p: { created_at: 1 } } },
       biometric_consent: { p: { given_at: 1, declined_at: 1, face_data_deleted_at: 1 } },
-      investigator: "InvestigatorBlock"
+      investigator: "InvestigatorBlock",
+      biometric_retention: "BiometricRetention",
+      full_session_video_recorded_at: 1
     }
   },
   SessionDeletionJob: { p: { created_at: 1, completed_at: 1 } },
   SessionEvent: { p: { created_at: 1 } },
+  SessionFilesExport: { p: { expires_at: 1, created_at: 1, completed_at: 1 } },
   SessionImportError: { p: { created_at: 1 } },
   SessionImportJob: {
     p: {
@@ -1530,6 +1587,7 @@ var DATE_PLANS = {
   SessionsBatchDeleteResponse: {
     p: { results: { i: { p: { biometric_template_expires_at: 1 } } } }
   },
+  SessionsCreateKybPartyDraftResponse: { p: { created_at: 1, updated_at: 1 } },
   SessionsDeleteResponse: { p: { biometric_template_expires_at: 1 } },
   SessionsImportsListActiveJobsResponse: { p: { results: { i: "ImportJobSummary" } } },
   SessionsImportsListErrorsResponse: { p: { results: { i: "SessionImportError" } } },
@@ -1539,7 +1597,23 @@ var DATE_PLANS = {
   SessionsListFeatureOverridesResponse: {
     p: { flow_finished_at: 1, overrides: { i: "FeatureStatusOverride" } }
   },
-  SessionsListResponse: { p: { results: { i: { p: { created_at: 1 } } } } },
+  SessionsListKybPartyDraftsResponse: {
+    p: { parties: { i: { p: { created_at: 1, updated_at: 1 } } } }
+  },
+  SessionsListResponse: {
+    p: {
+      results: {
+        i: {
+          p: {
+            created_at: 1,
+            assignee: { p: { assigned_at: 1 } },
+            waiting_since: 1,
+            sla_due_at: 1
+          }
+        }
+      }
+    }
+  },
   SessionsReviewsCreateResponse: { p: { created_at: 1 } },
   SessionsReviewsListResponse: { p: { results: { i: "ReviewItem" } } },
   SessionsSignaturesValidateResponse: { p: { signatures: { i: "SignatureResult" } } },
@@ -1547,6 +1621,7 @@ var DATE_PLANS = {
   SessionsUpdateKybCompanyDataResponse: {
     p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 }
   },
+  SessionsUpdateKybPartyDraftResponse: { p: { created_at: 1, updated_at: 1 } },
   SignatureFieldResult: { p: { filled_at: 1 } },
   SignatureResult: {
     p: {
@@ -1633,6 +1708,9 @@ var DATE_PLANS = {
   TravelRuleDiscoveryStep: { p: { at: 1 } },
   TravelRuleInboundResponse: { p: { travel_rule: "TravelRuleTransferDetail" } },
   TravelRuleListVaspsResponse: { p: { results: { i: "VaspDirectoryEntry" } } },
+  TravelRuleManualMatchResponse: {
+    p: { deposit: "TravelRuleTransferRow", message: "TravelRuleTransferRow" }
+  },
   TravelRuleMessage: {
     p: { fulfilled_at: 1, attachment: "TravelRuleMessageAttachment", created_at: 1 }
   },
@@ -1691,6 +1769,7 @@ var DATE_PLANS = {
   },
   TravelRuleTransferRow: { p: { txn_date: 1, deadline_at: 1, created_at: 1 } },
   TravelRuleTransfersListResponse: { p: { results: { i: "TravelRuleTransferRow" } } },
+  TravelRuleUnmatchedDepositsListResponse: { p: { results: { i: "TravelRuleTransferRow" } } },
   TravelRuleWalletAddressesListResponse: { p: { results: { i: "WalletAddressEntry" } } },
   TravelRuleWalletProofReview: { p: { method_chosen_at: 1, decided_at: 1, created_at: 1 } },
   TravelRuleWalletProofsListResponse: { p: { results: { i: "TravelRuleWalletProofReview" } } },
@@ -1718,7 +1797,9 @@ var DATE_PLANS = {
   UserListItem: {
     p: { last_session_at: 1, first_session_at: 1, last_activity_at: 1, created_at: 1 }
   },
-  UserSessionListItem: { p: { created_at: 1 } },
+  UserSessionListItem: {
+    p: { created_at: 1, assignee: { p: { assigned_at: 1 } }, waiting_since: 1, sla_due_at: 1 }
+  },
   UsersCreateResponse: {
     p: {
       last_session_at: 1,
@@ -1997,7 +2078,7 @@ var AddressValidation = class extends APIResource {
    *
    * **Authentication.** Send your application's API key in `x-api-key`. Missing or invalid credentials return `403` - this API never returns `401`.
    *
-   * **Rate limit.** Shared write budget of 300 requests per minute per API key across all POST/PATCH/DELETE endpoints.
+   * **Rate limit.** Shared write budget of 300 requests per minute per API key across POST/PATCH/DELETE endpoints (transaction creates and event ingestion have a separate budget of 600).
    *
    * `POST /v3/address-validation/`
    */
@@ -2137,6 +2218,12 @@ var ANALYTICS_RETRIEVE = {
     "action_type"
   ]
 };
+var ANALYTICS_RETRIEVE_TODAY = {
+  method: "GET",
+  path: "/v3/organization/{organization_id}/application/{application_id}/analytics/today/",
+  scope: "application",
+  query: ["tz"]
+};
 var Analytics = class extends APIResource {
   /**
    * Get application analytics
@@ -2152,6 +2239,18 @@ var Analytics = class extends APIResource {
   retrieve(params = {}, options) {
     return this._client.request(ANALYTICS_RETRIEVE, [], params, options);
   }
+  /**
+   * Get today's verifications by hour
+   *
+   * Today's user verification (KYC) sessions, from local midnight in `tz`, counted per local hour they were created in, next to the same hours of the same weekday one week before, and split by the outcome each one holds now: approved, in review or declined. This is the volume card of the Business Console's Home.
+   *
+   * `total` is today so far. `previous_total_so_far` counts the comparison day only up to the same local time, so a change between them compares the same part of both days. The hours still to come today are `0`. A day on which the clocks change has 23 or 25 hours: the missing hour stays `0` and the repeated hour holds both.
+   *
+   * `GET /v3/organization/{organization_id}/application/{application_id}/analytics/today/`
+   */
+  retrieveToday(params = {}, options) {
+    return this._client.request(ANALYTICS_RETRIEVE_TODAY, [], params, options);
+  }
 };
 
 // src/resources/bank.ts
@@ -2165,6 +2264,8 @@ var Bank = class extends APIResource {
   /**
    * Check a bank account
    *
+   * **Not available in production yet.** Bank Verification is switched off in production, so until it is switched on this endpoint answers `404` with `bank_verification_not_available`. Do not build on it yet. The rest of this description is what the endpoint does once it is available.
+   *
    * Check that a bank account belongs to the person or company you name, before you send money to it. No session and no sign-in: send the name and the account, read the result. It is the [account check](/core-technology/bank-verification/account-check) of the Bank Verification step, run from your backend.
    *
    * **What you send.** The account's `country` (ISO 3166-1 alpha-3), the `account` the way that country writes it, and the `holder` name: `full_name` for a person or `business_name` for a company. A business name checks a business account.
@@ -2175,7 +2276,7 @@ var Bank = class extends APIResource {
    *
    * **Every request is a new check.** There is no idempotency key and no endpoint to read a check back, so a retried request runs, and is billed, again. Store the response.
    *
-   * **Sandbox.** A sandbox key calls no bank and is charged nothing. The last 4 characters of the IBAN, else of the account number, choose the answer: `0001` a `close_match` with a `holder_name`, `0002` a `close_match` without one, `0003` and `0006` a `no_match`, `0004` `cannot_verify`, `0005` a `503` and `0009` a `400`. Any other ending is a `match`.
+   * **Sandbox.** Where Bank Verification is available, a sandbox key calls no bank and is charged nothing. The last 4 characters of the IBAN, else of the account number, choose the answer: `0001` a `close_match` with a `holder_name`, `0002` a `close_match` without one, `0003` and `0006` a `no_match`, `0004` `cannot_verify`, `0005` a `503` and `0009` a `400`. Any other ending is a `match`.
    *
    * **API keys.** A scoped API key needs write access to sessions.
    *
@@ -4047,7 +4148,7 @@ var Email = class extends APIResource {
    *
    * **Authentication.** Send your application's API key in `x-api-key`. Missing or invalid credentials return `403` - this API never returns `401`.
    *
-   * **Rate limit.** Shared write budget of 300 requests per minute per API key across all POST/PATCH/DELETE endpoints.
+   * **Rate limit.** Shared write budget of 300 requests per minute per API key across POST/PATCH/DELETE endpoints (transaction creates and event ingestion have a separate budget of 600).
    *
    * **Social footprint.** Set `enable_social` to `true` to add a `email_social` block: the online platforms this address is registered on, with per-category counts and any profile details available. `profiles_registered: 0` means the platforms were checked and the address was found on none of them - a valid, billable answer. The block is absent when the add-on was not requested or the check could not be completed, and it is not billed in that case. Billing adds one `email_social` unit per request on top of this endpoint's own price.
    *
@@ -4259,7 +4360,7 @@ var IdVerification = class extends APIResource {
    *
    * **How it works.** Send the document's `front_image` (required) and, for two-sided documents, the `back_image`. Upload uncropped photos with all four corners of the document visible - the service detects, aligns, and crops the document itself, so do not pre-crop. The document is classified automatically (you never declare the country or document type), the visual zone is read with OCR, and the MRZ and any barcodes are decoded. Cross-checks then validate dates, number formats, and MRZ check digits, and compare the visual zone against the MRZ. With `perform_document_liveness=true`, the images are additionally screened for screen replays, printed copies, and portrait manipulation.
    *
-   * **Decision logic.** `status` is `Approved` unless at least one warning resolves to a decline. Fraud and hard-failure risks always decline: `DOCUMENT_EXPIRED`, `SCREEN_CAPTURE_DETECTED`, `PRINTED_COPY_DETECTED`, `PORTRAIT_MANIPULATION_DETECTED`, `PUBLIC_DOCUMENT_IMAGE_DETECTED`, plus extraction failures (`NAME_NOT_DETECTED`, `DATE_OF_BIRTH_NOT_DETECTED`, `DOCUMENT_NUMBER_NOT_DETECTED`). (`PORTRAIT_IMAGE_NOT_DETECTED`, `COULD_NOT_DETECT_DOCUMENT_TYPE`, `INVALID_DATE`, and `MRZ_NOT_DETECTED` exist in workflow sessions but are never produced by this standalone endpoint.) Three risk groups are configurable per request via `invalid_mrz_action`, `inconsistent_data_action`, and `expiration_date_not_detected_action` (`DECLINE` or `NO_ACTION`). All other warnings (e.g. `POSSIBLE_DUPLICATED_USER`) are informational and never decline on their own. When `perform_document_liveness=true` (the default) and the forgery check returns no usable score - the provider failed, answered non-200, or answered HTTP 200 with `status="ERR"` - the call returns `200` with `status: "In Review"` and a `DOCUMENT_LIVENESS_NOT_COMPUTED` warning (`log_type: "warning"`) instead of `Approved`: a check that did not run is not evidence that the document is genuine. This escalation is not configurable and never overrides a `Declined`; with `perform_document_liveness=false` the check is skipped and the status follows the remaining warnings as before. A document that cannot be processed at all returns `400` with `{"error": "COULD_NOT_RECOGNIZE_DOCUMENT"}`; a readable but problematic document returns `200` with `status: "Declined"` - always inspect `id_verification.status` and `id_verification.warnings`, not just the HTTP code.
+   * **Decision logic.** `status` is `Approved` unless at least one warning resolves to a decline. Fraud and hard-failure risks always decline: `DOCUMENT_EXPIRED`, `SCREEN_CAPTURE_DETECTED`, `PRINTED_COPY_DETECTED`, `PORTRAIT_MANIPULATION_DETECTED`, `PUBLIC_DOCUMENT_IMAGE_DETECTED`, plus extraction failures (`NAME_NOT_DETECTED`, `DATE_OF_BIRTH_NOT_DETECTED`, `DOCUMENT_NUMBER_NOT_DETECTED`). (`PORTRAIT_IMAGE_NOT_DETECTED`, `INVALID_DATE`, and `MRZ_NOT_DETECTED` exist in workflow sessions but are never produced by this standalone endpoint. `COULD_NOT_DETECT_DOCUMENT_TYPE` is returned here when the front image does not match a known official document design with high confidence, and declines the request.) Three risk groups are configurable per request via `invalid_mrz_action`, `inconsistent_data_action`, and `expiration_date_not_detected_action` (`DECLINE` or `NO_ACTION`). All other warnings (e.g. `POSSIBLE_DUPLICATED_USER`) are informational and never decline on their own. When `perform_document_liveness=true` (the default) and the forgery check returns no usable score - the provider failed, answered non-200, or answered HTTP 200 with `status="ERR"` - the call returns `200` with `status: "In Review"` and a `DOCUMENT_LIVENESS_NOT_COMPUTED` warning (`log_type: "warning"`) instead of `Approved`: a check that did not run is not evidence that the document is genuine. This escalation is not configurable and never overrides a `Declined`; with `perform_document_liveness=false` the check is skipped and the status follows the remaining warnings as before. A document that cannot be processed at all returns `400` with `{"error": "COULD_NOT_RECOGNIZE_DOCUMENT"}`; a readable but problematic document returns `200` with `status: "Declined"` - always inspect `id_verification.status` and `id_verification.warnings`, not just the HTTP code.
    *
    * **Billing.** Each `200` response consumes one ID Verification API credit (paid from your plan credit or top-up balance). When the organization's balance cannot cover the call, the endpoint returns `403` with the not-enough-credits error before any image processing.
    *
@@ -4367,6 +4468,12 @@ var ID_WALLETS_START_FTN = {
   body: "json",
   dates: "DigitalIdWalletApiWalletVerificationResponse"
 };
+var ID_WALLETS_START_GOOGLE_WALLET = {
+  method: "POST",
+  path: "/v3/id-verification/wallets/google-wallet/",
+  body: "json",
+  dates: "DigitalIdWalletApiWalletVerificationResponse"
+};
 var ID_WALLETS_START_GOVBR = {
   method: "POST",
   path: "/v3/id-verification/wallets/govbr/",
@@ -4445,6 +4552,12 @@ var ID_WALLETS_START_VIPPS = {
   body: "json",
   dates: "DigitalIdWalletApiWalletVerificationResponse"
 };
+var ID_WALLETS_SUBMIT_VERIFICATION_RESPONSE = {
+  method: "POST",
+  path: "/v3/id-verification/wallets/verifications/{request_id}/response/",
+  body: "json",
+  dates: "DigitalIdWalletApiWalletVerificationResponse"
+};
 var IdWallets = class extends APIResource {
   /**
    * Cancel a wallet verification
@@ -4636,6 +4749,18 @@ var IdWallets = class extends APIResource {
   startFtn(params, options) {
     return this._client.request(ID_WALLETS_START_FTN, [], params, options);
   }
+  /**
+   * Start Google Wallet verification
+   *
+   * Start a Google Wallet sign-in (Google Wallet (ID pass) and US state issuers (mobile driving licence); USA, GBR, BRA, SGP, TWN) without any workflow. Billed once, only when the identity is verified. The response carries next_action.type=request_digital_credential with a request Didit signed for your application, usable only from origin. In a user gesture there, pass next_action.digital_credentials.request to navigator.credentials.get({digital: ...}) (or to Android Credential Manager as GetDigitalCredentialOption requestJson), then POST what the wallet returns to /v3/id-verification/wallets/verifications/{request_id}/response/. The browser offers its own QR code when the wallet is on another device. Sandbox applications get a deterministic simulation (simulated: true) that never contacts the provider.
+   *
+   * `POST /v3/id-verification/wallets/google-wallet/`
+   *
+   * Accepts `options.idempotencyKey` (header `Idempotency-Key`).
+   */
+  startGoogleWallet(params, options) {
+    return this._client.request(ID_WALLETS_START_GOOGLE_WALLET, [], params, options);
+  }
   /**
    * Start gov.br verification
    *
@@ -4792,6 +4917,23 @@ var IdWallets = class extends APIResource {
   startVipps(params, options) {
     return this._client.request(ID_WALLETS_START_VIPPS, [], params, options);
   }
+  /**
+   * Submit a wallet response
+   *
+   * Digital Credentials API wallets (Google Wallet): send what the wallet returned to your page or app for a verification whose next_action is request_digital_credential. Didit decrypts it, checks the issuer's signature against the trusted issuer roots, every returned value against its signed digest, and the device signature over your origin and this request, then decides the verification: verified (billed once) or declined with the error code. Single use: a second submit returns the decided verification.
+   *
+   * `POST /v3/id-verification/wallets/verifications/{request_id}/response/`
+   *
+   * @param requestId The request_id the start endpoint returned.
+   */
+  submitVerificationResponse(requestId, params, options) {
+    return this._client.request(
+      ID_WALLETS_SUBMIT_VERIFICATION_RESPONSE,
+      [requestId],
+      params,
+      options
+    );
+  }
 };
 
 // src/resources/investigator.ts
@@ -5060,7 +5202,7 @@ var Ip = class extends APIResource {
    *
    * **Authentication.** Send your application's API key in `x-api-key`. Missing or invalid credentials return `403` - this API never returns `401`.
    *
-   * **Rate limit.** Shared write budget of 300 requests per minute per API key across all POST/PATCH/DELETE endpoints.
+   * **Rate limit.** Shared write budget of 300 requests per minute per API key across POST/PATCH/DELETE endpoints (transaction creates and event ingestion have a separate budget of 600).
    *
    * `POST /v3/ip/risk/`
    */
@@ -5076,7 +5218,14 @@ var KYB_LIST_SHAREHOLDERS = {
   body: "json",
   dates: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   }
@@ -5087,7 +5236,14 @@ var KYB_LIST_UBOS = {
   body: "json",
   dates: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   }
@@ -5104,7 +5260,14 @@ var KYB_SELECT = {
   body: "json",
   dates: {
     p: {
-      kyb_registry: { p: { vat_checked_at: 1, confirmed_by_user_at: 1, last_console_edit_at: 1 } },
+      kyb_registry: {
+        p: {
+          vat_checked_at: 1,
+          confirmed_by_user_at: 1,
+          last_console_edit_at: 1,
+          registry_monitoring: { p: { enrolled_at: 1, cancelled_at: 1, last_event_at: 1 } }
+        }
+      },
       created_at: 1
     }
   }
@@ -5115,7 +5278,7 @@ var Kyb = class extends APIResource {
    *
    * Retrieve the Lite profile **plus the direct shareholders** (natural persons and corporate entities, with their ownership bands) of one candidate returned by `POST /v3/kyb/search/`.
    *
-   * **Pairing with search.** Pass the candidate's `kyb_response_id` exactly as returned by a search of the same application. The search runs on the Lite registry chain; when the country's ownership data lives at another registry Didit re-finds the company there by registration number, at no extra cost.
+   * **Pairing with search.** Pass the candidate's `kyb_response_id` exactly as returned by a search of the same application. Search at the tier you intend to buy (`tier` on `POST /v3/kyb/search/`), because the search runs on the registry chain that serves that tier and an empty Lite search is not proof that the registry does not hold the company. When the country's ownership data lives at another registry, Didit re-finds the company there by registration number, at no extra cost.
    *
    * **Billing.** Billed at the country's Shareholders price - see [KYB registry pricing](/getting-started/kyb-registry-pricing). When the registry holds no shareholder record for the company (or the country offers no ownership data at all) the Lite profile is delivered and billed instead: read `registry_tier_delivered` and `registry_ownership_status`. The balance is checked against the Shareholders price before any registry call (`403` when short).
    *
@@ -5133,7 +5296,7 @@ var Kyb = class extends APIResource {
    *
    * Retrieve the Lite profile, the direct shareholders **and the ultimate beneficial owners** resolved through the ownership chain (`registry_data.ubo_resolution` carries the corporate parent chain) of one candidate returned by `POST /v3/kyb/search/`.
    *
-   * **Pairing with search.** Pass the candidate's `kyb_response_id` exactly as returned by a search of the same application. The search runs on the Lite registry chain; when the country's ownership data lives at another registry Didit re-finds the company there by registration number, at no extra cost.
+   * **Pairing with search.** Pass the candidate's `kyb_response_id` exactly as returned by a search of the same application. Search at the tier you intend to buy (`tier` on `POST /v3/kyb/search/`), because the search runs on the registry chain that serves that tier and an empty Lite search is not proof that the registry does not hold the company. When the country's ownership data lives at another registry, Didit re-finds the company there by registration number, at no extra cost.
    *
    * **Billing.** Billed at the country's UBO price - see [KYB registry pricing](/getting-started/kyb-registry-pricing). The tier delivered is the highest the country and the registry can serve: Shareholders when the resolved report names no natural person as a beneficial owner, Lite when there is no ownership record at all; `registry_tier_delivered` names what was billed. The balance is checked against the UBO price before any registry call (`403` when short).
    *
@@ -5873,7 +6036,7 @@ var Phone = class extends APIResource {
    *
    * **Authentication.** Send your application's API key in `x-api-key`. Missing or invalid credentials return `403` - this API never returns `401`.
    *
-   * **Rate limit.** Shared write budget of 300 requests per minute per API key across all POST/PATCH/DELETE endpoints.
+   * **Rate limit.** Shared write budget of 300 requests per minute per API key across POST/PATCH/DELETE endpoints (transaction creates and event ingestion have a separate budget of 600).
    *
    * **Social footprint.** Set `enable_social` to `true` to add a `phone_social` block: the online platforms this number is registered on, with per-category counts and any profile details available. `profiles_registered: 0` means the platforms were checked and the number was found on none of them - a valid, billable answer. The block is absent when the add-on was not requested or the check could not be completed, and it is not billed in that case. Billing adds one `phone_social` unit per request on top of this endpoint's own price.
    *
@@ -5952,7 +6115,7 @@ var Pricing = class extends APIResource {
   /**
    * Get bank verification prices (public, unauthenticated)
    *
-   * Returns the list price of each Bank Verification method in every country: bank sign-in with its balance and transactions add-ons, and the account check. Use it to quote a bank step before you build a workflow, or to show bank prices in your own product.
+   * Returns the list price of each Bank Verification method in every country: bank sign-in with its balance and transactions add-ons, and the account check. Bank Verification is not enabled in production yet, so a bank step is refused on production workflows until it is; treat these prices as a list price, not as an offer you can buy today. Use it to quote a bank step before you build a workflow, or to show bank prices in your own product.
    *
    * Public: send no auth header. The response contains no organization data and is the same for every caller. It is cached publicly for one hour and carries an `ETag`, so send `If-None-Match` to get a `304 Not Modified` when nothing changed.
    *
@@ -6491,25 +6654,48 @@ var SESSIONS_CANCEL_FEATURE_OVERRIDE = {
   dates: "FeatureStatusOverride"
 };
 var SESSIONS_CREATE = { method: "POST", path: "/v3/session/", body: "json" };
+var SESSIONS_CREATE_KYB_PARTY_DRAFT = {
+  method: "POST",
+  path: "/v3/session/{sessionId}/kyb/parties/drafts/",
+  query: ["node_id"],
+  body: "json",
+  dates: { p: { created_at: 1, updated_at: 1 } }
+};
 var SESSIONS_DELETE = {
   method: "DELETE",
   path: "/v3/session/{sessionId}/delete/",
   body: "json",
   dates: { p: { biometric_template_expires_at: 1 } }
 };
+var SESSIONS_DELETE_KYB_PARTY_DRAFT = {
+  method: "DELETE",
+  path: "/v3/session/{sessionId}/kyb/parties/drafts/{draftId}/",
+  query: ["node_id"],
+  response: "none"
+};
 var SESSIONS_EXPORT_AML_SCREENING_HISTORY = {
   method: "GET",
   path: "/v3/session/{sessionId}/aml-screening-history/export/",
-  query: ["node_id"],
+  query: ["node_id", "month"],
   response: "binary",
   accept: "text/csv"
 };
+var SESSIONS_EXPORT_FILES = {
+  method: "POST",
+  path: "/v3/session/{sessionId}/files-export/",
+  dates: "SessionFilesExport"
+};
 var SESSIONS_GENERATE_PDF = {
   method: "GET",
   path: "/v3/session/{sessionId}/generate-pdf/",
   response: "binary",
   accept: "application/pdf"
 };
+var SESSIONS_GET_FILES_EXPORT = {
+  method: "GET",
+  path: "/v3/session/{sessionId}/files-export/{exportId}/",
+  dates: "SessionFilesExport"
+};
 var SESSIONS_IMPORT_SHARED = {
   method: "POST",
   path: "/v3/session/import-shared/",
@@ -6529,6 +6715,9 @@ var SESSIONS_LIST = {
     "workflow_id",
     "date_from",
     "date_to",
+    "tags",
+    "decided_from",
+    "decided_to",
     "country",
     "document_type",
     "document_name",
@@ -6543,12 +6732,25 @@ var SESSIONS_LIST = {
     "euuid",
     "organization_name"
   ],
-  dates: { p: { results: { i: { p: { created_at: 1 } } } } }
+  dates: {
+    p: {
+      results: {
+        i: {
+          p: {
+            created_at: 1,
+            assignee: { p: { assigned_at: 1 } },
+            waiting_since: 1,
+            sla_due_at: 1
+          }
+        }
+      }
+    }
+  }
 };
 var SESSIONS_LIST_AML_SCREENING_HISTORY = {
   method: "GET",
   path: "/v3/session/{sessionId}/aml-screening-history/",
-  query: ["node_id", "limit", "offset", "ordering"],
+  query: ["node_id", "month", "limit", "offset", "ordering"],
   dates: { p: { results: { i: "AMLScreeningRun" } } }
 };
 var SESSIONS_LIST_EVENTS = {
@@ -6562,6 +6764,17 @@ var SESSIONS_LIST_FEATURE_OVERRIDES = {
   path: "/v3/session/{sessionId}/features/overrides/",
   dates: { p: { flow_finished_at: 1, overrides: { i: "FeatureStatusOverride" } } }
 };
+var SESSIONS_LIST_KYB_EXTRACTED_PARTIES = {
+  method: "GET",
+  path: "/v3/session/{sessionId}/kyb/extracted-parties/",
+  query: ["node_id"]
+};
+var SESSIONS_LIST_KYB_PARTY_DRAFTS = {
+  method: "GET",
+  path: "/v3/session/{sessionId}/kyb/parties/drafts/",
+  query: ["node_id"],
+  dates: { p: { parties: { i: { p: { created_at: 1, updated_at: 1 } } } } }
+};
 var SESSIONS_LIST_NETWORKS = {
   method: "GET",
   path: "/v3/organization/{organization_id}/application/{application_id}/sessions/{session_id}/networks/",
@@ -6603,6 +6816,12 @@ var SESSIONS_SIMULATE = {
   path: "/v3/session/{sessionId}/simulate/",
   body: "json"
 };
+var SESSIONS_SUBMIT_KYB_PARTIES = {
+  method: "POST",
+  path: "/v3/session/{sessionId}/kyb/parties/submit/",
+  query: ["node_id"],
+  body: "json"
+};
 var SESSIONS_UPDATE_AML_HIT_STATUS = {
   method: "PATCH",
   path: "/v3/session/{sessionId}/update-aml-hit-status/",
@@ -6643,6 +6862,13 @@ var SESSIONS_UPDATE_KYB_PARTY = {
   path: "/v3/session/{sessionId}/kyb/parties/{partyUuid}/",
   body: "json"
 };
+var SESSIONS_UPDATE_KYB_PARTY_DRAFT = {
+  method: "PATCH",
+  path: "/v3/session/{sessionId}/kyb/parties/drafts/{draftId}/",
+  query: ["node_id"],
+  body: "json",
+  dates: { p: { created_at: 1, updated_at: 1 } }
+};
 var SESSIONS_UPDATE_POA_DATA = {
   method: "PATCH",
   path: "/v3/session/{sessionId}/update-poa-data/",
@@ -6654,6 +6880,13 @@ var SESSIONS_UPDATE_STATUS = {
   path: "/v3/session/{sessionId}/update-status/",
   body: "json"
 };
+var SESSIONS_UPLOAD_KYB_DOCUMENTS = {
+  method: "POST",
+  path: "/v3/session/{sessionId}/kyb/documents/",
+  query: ["node_id"],
+  body: "multipart",
+  files: ["documents"]
+};
 var SessionsImports = class extends APIResource {
   /**
    * Cancel an import job
@@ -6680,7 +6913,7 @@ var SessionsImports = class extends APIResource {
   /**
    * Create a verification import job
    *
-   * Create an asynchronous import job for historical User Verification sessions, Business Verification sessions, transaction monitoring records, or workflow custom status rules. Set `source=provider` to migrate from another provider: Didit reads Sumsub, Onfido, Persona and ComplyCube with your read-only key, reads Veriff, iDenfy and MetaMap records by the IDs you upload in `file`, and imports an export file in Didit's format for the other providers. Record IDs are namespaced by provider (`sumsub:<id>`) so a re-run skips everything already in Didit. Imports are disabled by default and must be enabled per organization by Didit.
+   * Create an asynchronous import job for historical User Verification sessions, Business Verification sessions, transaction monitoring records, or workflow custom status rules. Set `source=provider` to migrate from another provider: Didit reads Sumsub, Onfido, Persona and ComplyCube with your read-only key, reads Veriff, iDenfy and MetaMap records by the IDs you upload in `file`, and imports an export file in Didit's format for the other providers. Record IDs are namespaced by provider (`sumsub:<id>`) so a re-run skips everything already in Didit, and a record imported through a file with the provider's bare ID is recognised too, in both directions, so moving between a file import and a provider migration never imports a record twice. An application can run up to 4 import jobs at once; a job interrupted by a deploy or a worker restart continues from its last imported row by itself. Imports are disabled by default and must be enabled per organization by Didit.
    *
    * `POST /v3/session/imports/`
    */
@@ -6838,14 +7071,14 @@ var SessionsSignatures = class extends APIResource {
   /**
    * Download a signed document
    *
-   * Download the signed PDF of one document of an Electronic Signature step. Use the `signed_file` path of `signatures[].documents[]` in the decision. The PDF holds the document the signer was shown with their field values stamped, the evidence page (unless `signature_evidence_page` is off) and the PAdES signature with its timestamp. Didit checks the file against `sha256_signed` before returning it.
+   * Download the signed PDF of one document of an E-signature step. Use the `signed_file` path of `signatures[].documents[]` in the decision. The PDF holds the document the signer was shown with their field values stamped and the evidence page (unless `signature_evidence_page` is off). An Advanced (AES) PDF also carries the PAdES signature with its timestamp; a Simple PDF has no digital signature, seal or timestamp. Didit checks the file against `sha256_signed` before returning it.
    *
-   * Works for User Verification (KYC) and Business Verification (KYB) sessions. Needs `read:sessions`; your API key works. See the [Electronic Signature report](/core-technology/electronic-signature/report-electronic-signature#download-the-signed-documents).
+   * Works for User Verification (KYC) and Business Verification (KYB) sessions. Needs `read:sessions`; your API key works. See the [E-signature report](/core-technology/electronic-signature/report-electronic-signature#download-the-signed-documents).
    *
    * `GET /v3/session/{sessionId}/signatures/{nodeId}/documents/{documentId}/file/`
    *
    * @param sessionId The User Verification (KYC) or Business Verification (KYB) session.
-   * @param nodeId The Electronic Signature step: `node_id` of the item in `signatures[]`.
+   * @param nodeId The E-signature step: `node_id` of the item in `signatures[]`.
    * @param documentId `id` of the document in `signatures[].documents[]`.
    */
   downloadDocument(sessionId, nodeId, documentId, options) {
@@ -6859,14 +7092,14 @@ var SessionsSignatures = class extends APIResource {
   /**
    * Download the signature evidence
    *
-   * Download a signer's evidence PDF: the level and format, the signer and their verified identity session, the code confirmation, the IP address, each document with its original SHA-256 and field values, the certificate, the timestamp and the SHA-256 of every signed file. Use the `evidence_file` path of the signer's item in `signatures[]`.
+   * Download a signer's evidence PDF: the level and format, the signer, the IP address, each document with its original SHA-256 and field values and the SHA-256 of every signed file, plus, for an Advanced (AES) signature, the verified identity session, the code confirmation, the certificate and the timestamp. Use the `evidence_file` path of the signer's item in `signatures[]`.
    *
    * Always pass `signature_id` when a Business Verification step has several signers: without it, the route picks one of the step's signers. Needs `read:sessions`; your API key works.
    *
    * `GET /v3/session/{sessionId}/signatures/{nodeId}/evidence/`
    *
    * @param sessionId The User Verification (KYC) or Business Verification (KYB) session.
-   * @param nodeId The Electronic Signature step: `node_id` of the item in `signatures[]`.
+   * @param nodeId The E-signature step: `node_id` of the item in `signatures[]`.
    */
   downloadEvidence(sessionId, nodeId, params = {}, options) {
     return this._client.request(
@@ -6884,7 +7117,7 @@ var SessionsSignatures = class extends APIResource {
    * `GET /v3/session/{sessionId}/signatures/{nodeId}/fields/{fieldId}/image/`
    *
    * @param sessionId The User Verification (KYC) or Business Verification (KYB) session.
-   * @param nodeId The Electronic Signature step: `node_id` of the item in `signatures[]`.
+   * @param nodeId The E-signature step: `node_id` of the item in `signatures[]`.
    * @param fieldId The field on this signer's copy, as in the field's `image_url`.
    */
   downloadFieldImage(sessionId, nodeId, fieldId, options) {
@@ -6898,14 +7131,14 @@ var SessionsSignatures = class extends APIResource {
   /**
    * Validate signatures again
    *
-   * Re-check the signed documents of an Electronic Signature step. Didit re-reads every signed PDF, checks its SHA-256 and validates the PAdES signature, the certificate, the revocation data and the timestamp, then saves the result in each signer's `validation` and returns the updated items. Nothing is signed again. Send `signature_id` to check one signer; without it, every signer of the step is checked, and the call fails if any of them hasn't signed.
+   * Re-check the signed documents of an E-signature step. Didit re-reads every signed PDF, checks its SHA-256 and, for an Advanced (AES) signature, validates the PAdES signature, the certificate, the revocation data and the timestamp (a Simple signature has no digital signature, so only the file integrity is checked), then saves the result in each signer's `validation` and returns the updated items. Nothing is signed again. Send `signature_id` to check one signer; without it, every signer of the step is checked, and the call fails if any of them hasn't signed.
    *
    * Needs `write:sessions`; your API key works. In the console it's the **Validate again** button.
    *
    * `POST /v3/session/{sessionId}/signatures/{nodeId}/validate/`
    *
    * @param sessionId The User Verification (KYC) or Business Verification (KYB) session.
-   * @param nodeId The Electronic Signature step: `node_id` of the item in `signatures[]`.
+   * @param nodeId The E-signature step: `node_id` of the item in `signatures[]`.
    */
   validate(sessionId, nodeId, params = {}, options) {
     return this._client.request(SESSIONS_SIGNATURES_VALIDATE, [sessionId, nodeId], params, options);
@@ -7074,6 +7307,18 @@ var Sessions = class extends APIResource {
   create(params, options) {
     return this._client.request(SESSIONS_CREATE, [], params, options);
   }
+  /**
+   * Create a KYB party draft
+   *
+   * Add a party (a person or a company) to the list you are preparing for this KYB session. The same fields and rules as the hosted Key People screen apply: a person needs `full_name` or `first_name` and `last_name`, at least one role and a nationality; a company needs `company_name` and the country of incorporation in `nationality`. Nothing is declared or billed until `POST /v3/session/{sessionId}/kyb/parties/submit/`. Requires `write:businesses`.
+   *
+   * `POST /v3/session/{sessionId}/kyb/parties/drafts/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   */
+  createKybPartyDraft(sessionId, params, options) {
+    return this._client.request(SESSIONS_CREATE_KYB_PARTY_DRAFT, [sessionId], params, options);
+  }
   /**
    * Delete a verification session (KYC or KYB)
    *
@@ -7081,7 +7326,7 @@ var Sessions = class extends APIResource {
    *
    * **What is deleted:**
    * - The session and every verification attempt it holds, including results that a resubmission replaced: the decision, extracted data, all related feature records (ID verification, face, liveness, face match, AML, registry checks, IP analysis, and so on), its reviews and its activity log.
-   * - All stored files owned by the session: document front/back photos (full, cropped, and privacy-blurred variants), document-capture videos, portrait crops, NFC chip portrait and signature images, face reference images, liveness videos, face-match source/target images, Proof of Address documents, and any extra uploaded files (KYC); uploaded company documents and extra files (KYB). Electronic Signature documents, signed PDFs, evidence PDFs and signature images (KYC and KYB): their download paths stop working. Previously issued media URLs (`https://<media-host>/...`) stop resolving.
+   * - All stored files owned by the session: document front/back photos (full, cropped, and privacy-blurred variants), document-capture videos, portrait crops, NFC chip portrait and signature images, face reference images, liveness videos, face-match source/target images, Proof of Address documents, and any extra uploaded files (KYC); uploaded company documents and extra files (KYB). E-signature documents, signed PDFs, evidence PDFs and signature images (KYC and KYB): their download paths stop working. Previously issued media URLs (`https://<media-host>/...`) stop resolving.
    * - The session's face data. Its face embedding is deleted too, unless you choose to keep an image-free template (see **Face biometric data**).
    * - Webhook deliveries still queued for the session, and their retries. Webhooks already delivered are not affected.
    * - For a Business Verification (KYB) session: the verifications it created for its key people (KYC) and its corporate owners (KYB), recursively, reported as `deleted_child_verifications`. A verification it only links to, such as an existing approved KYC it reused, is not deleted.
@@ -7115,10 +7360,28 @@ var Sessions = class extends APIResource {
   delete(sessionId, params = {}, options) {
     return this._client.request(SESSIONS_DELETE, [sessionId], params, options);
   }
+  /**
+   * Delete a KYB party draft
+   *
+   * Drop one party draft. Declared parties are not affected. Requires `write:businesses`.
+   *
+   * `DELETE /v3/session/{sessionId}/kyb/parties/drafts/{draftId}/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   * @param draftId UUID of the party draft (`draft_id` returned when it was created).
+   */
+  deleteKybPartyDraft(sessionId, draftId, params = {}, options) {
+    return this._client.request(
+      SESSIONS_DELETE_KYB_PARTY_DRAFT,
+      [sessionId, draftId],
+      params,
+      options
+    );
+  }
   /**
    * Export AML screening history as CSV
    *
-   * Download the same ongoing-monitoring history as `GET /v3/session/{sessionId}/aml-screening-history/` as a CSV file, one line per completed re-screen, newest first, ready to hand to an auditor. The file is streamed whole (no pagination) and starts with a header line; an empty cell means unknown, dataset dates are never estimated, and a value that would start a spreadsheet formula is prefixed with an apostrophe. Works for KYC and KYB session IDs; pass `node_id` when the session ran more than one AML step. Errors are returned as JSON, not CSV. A scoped API key needs `decisions: read` and `media: read`: the response is a file, so a key without `media: read` gets `403`.
+   * Download the same ongoing-monitoring history as `GET /v3/session/{sessionId}/aml-screening-history/` as a CSV file, one line per completed re-screen, newest first, ready to hand to an auditor. The file is streamed whole (no pagination) and starts with a header line; an empty cell means unknown, dataset dates are never estimated, and a value that would start a spreadsheet formula is prefixed with an apostrophe. Works for KYC and KYB session IDs; pass `node_id` when the session ran more than one AML step. Pass `month` to export one calendar month. Errors are returned as JSON, not CSV. A scoped API key needs `decisions: read` and `media: read`: the response is a file, so a key without `media: read` gets `403`.
    *
    * `GET /v3/session/{sessionId}/aml-screening-history/export/`
    *
@@ -7132,6 +7395,20 @@ var Sessions = class extends APIResource {
       options
     );
   }
+  /**
+   * Export every file of a session
+   *
+   * Start preparing one ZIP with every image, video and document of a User Verification (KYC) or Business Verification (KYB) session, in original quality: the files are stored in the ZIP as they were captured, never recompressed. Answers `202` with the export; read it with `GET /v3/session/{sessionId}/files-export/{exportId}/` until `status` is `READY`, then download `download_url`. While an export of the same session is still being prepared, that export is returned instead of a new one.
+   *
+   * The ZIP is deleted 24 hours after it is ready, and at once when the session is deleted. A deleted session cannot be exported. Every export and every download link handed out is written to the session's audit log. A scoped API key needs `media: read` and `decisions: read`; a console user needs the privilege to read sessions.
+   *
+   * `POST /v3/session/{sessionId}/files-export/`
+   *
+   * @param sessionId UUID of the verification session (the `session_id` returned by `POST /v3/session/`). Accepts both User Verification (KYC) and Business Verification (KYB) session IDs. A deleted session returns `404`.
+   */
+  exportFiles(sessionId, options) {
+    return this._client.request(SESSIONS_EXPORT_FILES, [sessionId], void 0, options);
+  }
   /**
    * Download a PDF report for a verification session
    *
@@ -7166,6 +7443,24 @@ var Sessions = class extends APIResource {
   generatePdf(sessionId, options) {
     return this._client.request(SESSIONS_GENERATE_PDF, [sessionId], void 0, options);
   }
+  /**
+   * Get a session files export
+   *
+   * Progress of an export started with `POST /v3/session/{sessionId}/files-export/`. Once `status` is `READY`, `download_url` is a signed URL of the ZIP that stays valid for a short time; read the export again for a new one until `expires_at`. Each read that hands out a download link is written to the session's audit log. An export of a deleted session returns `404`.
+   *
+   * `GET /v3/session/{sessionId}/files-export/{exportId}/`
+   *
+   * @param sessionId UUID of the verification session (the `session_id` returned by `POST /v3/session/`). Accepts both User Verification (KYC) and Business Verification (KYB) session IDs. A deleted session returns `404`.
+   * @param exportId The `export_id` returned by `POST /v3/session/{sessionId}/files-export/`.
+   */
+  getFilesExport(sessionId, exportId, options) {
+    return this._client.request(
+      SESSIONS_GET_FILES_EXPORT,
+      [sessionId, exportId],
+      void 0,
+      options
+    );
+  }
   /**
    * Redeem a share token to clone a verification session into your application
    *
@@ -7208,7 +7503,7 @@ var Sessions = class extends APIResource {
   /**
    * List AML screening history
    *
-   * List every completed ongoing-monitoring re-screen of a session's AML check, newest first by `completed_at`, including the runs where nothing changed: alerts, activity entries and webhooks fire only when a result moves, so this history is the evidence that a clean subject was still being screened. Works for KYC and KYB session IDs; pass `node_id` when the session ran more than one AML step. Only ongoing-monitoring re-screens are listed (the first screening is part of the session decision) and runs from before this history existed are not reconstructed, so a session without ongoing monitoring returns an empty list. `count` is exact up to 100 and capped at 100 above that, so follow `next` until it is `null`. A scoped API key needs `decisions: read`; see [Continuous AML monitoring](https://docs.didit.me/core-technology/aml-screening/continuous-monitoring-aml-screening).
+   * List every completed ongoing-monitoring re-screen of a session's AML check, newest first by `completed_at`, including the runs where nothing changed: alerts, activity entries and webhooks fire only when a result moves, so this history is the evidence that a clean subject was still being screened. Works for KYC and KYB session IDs; pass `node_id` when the session ran more than one AML step. Only ongoing-monitoring re-screens are listed (the first screening is part of the session decision) and runs from before this history existed are not reconstructed, so a session without ongoing monitoring returns an empty list. `count` is exact up to 100 and capped at 100 above that, so follow `next` until it is `null`. Pass `month` to read one calendar month at a time. A scoped API key needs `decisions: read`; see [Continuous AML monitoring](https://docs.didit.me/core-technology/aml-screening/continuous-monitoring-aml-screening).
    *
    * `GET /v3/session/{sessionId}/aml-screening-history/`
    *
@@ -7250,6 +7545,30 @@ var Sessions = class extends APIResource {
   listFeatureOverrides(sessionId, options) {
     return this._client.request(SESSIONS_LIST_FEATURE_OVERRIDES, [sessionId], void 0, options);
   }
+  /**
+   * List the parties named by the uploaded documents
+   *
+   * Return the shareholders and directors that the documents uploaded to this KYB session name, merged per person and attributed to the documents that named them. Show them to your applicant to confirm, then declare them with the party draft endpoints. A range stays a range: `ownership_percent.text` keeps the verbatim figure and `min` / `max` the numbers read from it. Nobody is labelled a UBO here; that is decided when the parties are submitted, from the role settings and ownership thresholds of the workflow. The same list is in the session decision as `document_verifications[].extracted_parties`. Requires `read:businesses` or `read:sessions`.
+   *
+   * `GET /v3/session/{sessionId}/kyb/extracted-parties/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   */
+  listKybExtractedParties(sessionId, params = {}, options) {
+    return this._client.request(SESSIONS_LIST_KYB_EXTRACTED_PARTIES, [sessionId], params, options);
+  }
+  /**
+   * List the KYB party drafts
+   *
+   * List the parties you are preparing for this KYB session, oldest first. A draft is not a declared party: it does not appear in the decision or the console and creates no verification session until you submit it with `POST /v3/session/{sessionId}/kyb/parties/submit/`. Requires `write:businesses`.
+   *
+   * `GET /v3/session/{sessionId}/kyb/parties/drafts/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   */
+  listKybPartyDrafts(sessionId, params = {}, options) {
+    return this._client.request(SESSIONS_LIST_KYB_PARTY_DRAFTS, [sessionId], params, options);
+  }
   /**
    * List networks for a session
    *
@@ -7321,7 +7640,7 @@ var Sessions = class extends APIResource {
    *
    * Retrieve the complete decision report for a verification session - the rolled-up session `status` plus one report per verification feature the workflow executed. This is the canonical read endpoint for both User Verification (KYC) and Business Verification (KYB) sessions: the same path serves both, and the top-level `session_kind` discriminator tells you which shape you received (`"user"` or `"business"`).
    *
-   * **Every feature report is a plural array.** V3 workflows are graphs that can run the same feature more than once, so each block (`id_verifications`, `nfc_verifications`, `liveness_checks`, `face_matches`, `poa_verifications`, `document_ai_documents`, `phone_verifications`, `email_verifications`, `aml_screenings`, `ip_analyses`, `database_validations`, `questionnaire_responses`) is a JSON array whose items each carry a `node_id` identifying the workflow graph node that produced them. Read NFC as `response.nfc_verifications[0]` - never as a singular `nfc` field. A block is `null` until the workflow has run that feature at least once; features the workflow does not include never appear with data. Electronic Signature results are in `signatures`, which is present only when the workflow has an Electronic Signature step.
+   * **Every feature report is a plural array.** V3 workflows are graphs that can run the same feature more than once, so each block (`id_verifications`, `nfc_verifications`, `liveness_checks`, `face_matches`, `poa_verifications`, `document_ai_documents`, `phone_verifications`, `email_verifications`, `aml_screenings`, `ip_analyses`, `database_validations`, `questionnaire_responses`) is a JSON array whose items each carry a `node_id` identifying the workflow graph node that produced them. Read NFC as `response.nfc_verifications[0]` - never as a singular `nfc` field. A block is `null` until the workflow has run that feature at least once; features the workflow does not include never appear with data. E-signature results are in `signatures`, which is present only when the workflow has an E-signature step.
    *
    * **When to call.** The recommended pattern is event-driven: wait for the `status.updated` webhook that fires when the session reaches a decision (`Approved`, `Declined`, `In Review`), then call this endpoint once to fetch the full report. Polling also works - the endpoint can be called at any point in the session lifecycle and returns the data produced so far - but webhook-then-fetch is cheaper and faster. Media URLs in the response (document images, videos, PDFs) are short-lived presigned links: fetch them promptly or re-request the decision to get fresh ones, and do not persist them as long-term references.
    *
@@ -7384,10 +7703,22 @@ var Sessions = class extends APIResource {
   simulate(sessionId, params = {}, options) {
     return this._client.request(SESSIONS_SIMULATE, [sessionId], params, options);
   }
+  /**
+   * Submit the KYB party drafts
+   *
+   * Declare the stored drafts as the company's key people. This is the hosted Key People step under your API key: Didit decides from the role settings and ownership thresholds of the workflow which parties must be verified, creates one individual KYC session (or a KYB sub-session for a corporate owner) for each of them, sends the emails the workflow asks for, and advances the session. Each child session is billed like in the hosted flow. The drafts are consumed. Repeating the call after a successful submit changes nothing and answers `200` with `already_submitted: true` and the parties that already exist. The session must be on the Key People step. Send each person's `kyc_session_url` to them, or embed it. Requires `write:businesses`.
+   *
+   * `POST /v3/session/{sessionId}/kyb/parties/submit/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   */
+  submitKybParties(sessionId, params = {}, options) {
+    return this._client.request(SESSIONS_SUBMIT_KYB_PARTIES, [sessionId], params, options);
+  }
   /**
    * Update an AML hit review status
    *
-   * Set the review status of a **single AML hit** (a potential sanction / PEP / watchlist / adverse-media match) returned by AML screening, without changing the overall session decision. Identify the hit by its `hit_id` (the `id` of an entry in the AML check's `hits` array - see the session decision).
+   * Set the review status of a **single AML hit** (a potential sanction / PEP / watchlist / adverse-media match) returned by AML screening, without changing the overall session decision. Identify the hit by its `hit_id` (the `id` of an entry in the AML check's `hits` array - see the session decision). A hit id returned in the earlier format is still accepted; the response always names the hit by its current `id`.
    *
    * `review_status` is one of `Unreviewed`, `Confirmed Match`, `False Positive`, or `Inconclusive`. Reviewer decisions are preserved across ongoing-monitoring updates, so a hit you mark `False Positive` stays that way when the provider re-screens.
    *
@@ -7529,6 +7860,24 @@ var Sessions = class extends APIResource {
   updateKybParty(sessionId, partyUuid, params, options) {
     return this._client.request(SESSIONS_UPDATE_KYB_PARTY, [sessionId, partyUuid], params, options);
   }
+  /**
+   * Edit a KYB party draft
+   *
+   * Change fields of one party draft. The edit is merged into the stored draft and the merged party is validated as a whole, so an edit that would leave the party incomplete is rejected. Changing `first_name` or `last_name` replaces the stored full name. Requires `write:businesses`.
+   *
+   * `PATCH /v3/session/{sessionId}/kyb/parties/drafts/{draftId}/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   * @param draftId UUID of the party draft (`draft_id` returned when it was created).
+   */
+  updateKybPartyDraft(sessionId, draftId, params = {}, options) {
+    return this._client.request(
+      SESSIONS_UPDATE_KYB_PARTY_DRAFT,
+      [sessionId, draftId],
+      params,
+      options
+    );
+  }
   /**
    * Update Proof of Address data extracted from the POA document on a verification session
    *
@@ -7571,6 +7920,18 @@ var Sessions = class extends APIResource {
   updateStatus(sessionId, params, options) {
     return this._client.request(SESSIONS_UPDATE_STATUS, [sessionId], params, options);
   }
+  /**
+   * Upload KYB documents to a session
+   *
+   * Upload one or more corporate documents (articles of incorporation, shareholder register, certificate of incorporation, ...) to the KYB Documents step of a Business Verification session, from your own server instead of the hosted page. Didit runs the hosted pipeline: compression, OCR, tampering and cross-document checks, document grouping, and advances the session when the required document groups are satisfied. The step costs one flat fee however many files you send. The session must be open and on the KYB Documents step, and the company chosen at the registry step must exist. Read the people the documents name with `GET /v3/session/{sessionId}/kyb/extracted-parties/`. Requires `write:businesses`.
+   *
+   * `POST /v3/session/{sessionId}/kyb/documents/`
+   *
+   * @param sessionId UUID of the Business Verification (KYB) session. It must belong to the application of the API key.
+   */
+  uploadKybDocuments(sessionId, params, options) {
+    return this._client.request(SESSIONS_UPLOAD_KYB_DOCUMENTS, [sessionId], params, options);
+  }
 };
 
 // src/resources/transactions.ts
@@ -7692,7 +8053,7 @@ var TRANSACTIONS_GENERATE_PDF = {
 var TRANSACTIONS_LIST = {
   method: "GET",
   path: "/v3/transactions/",
-  query: ["limit", "offset", "travel_rule_status"],
+  query: ["limit", "offset", "travel_rule_status", "assignee"],
   dates: {
     p: {
       results: { i: { p: { txn_date: 1, created_at: 1, travel_rule: "TransactionTravelRule" } } }
@@ -8124,6 +8485,29 @@ var TRAVEL_RULE_TRANSFERS_LIST = {
   ],
   dates: { p: { results: { i: "TravelRuleTransferRow" } } }
 };
+var TRAVEL_RULE_UNMATCHED_DEPOSITS_LIST = {
+  method: "GET",
+  path: "/v3/travel-rule/unmatched/",
+  query: [
+    "direction",
+    "status",
+    "rail",
+    "kind",
+    "currency",
+    "start_date",
+    "end_date",
+    "counterparty",
+    "limit",
+    "offset"
+  ],
+  dates: { p: { results: { i: "TravelRuleTransferRow" } } }
+};
+var TRAVEL_RULE_UNMATCHED_DEPOSITS_MATCH = {
+  method: "POST",
+  path: "/v3/travel-rule/unmatched/{transaction_uuid}/match/",
+  body: "json",
+  dates: "TravelRuleManualMatchResponse"
+};
 var TRAVEL_RULE_WALLET_ADDRESSES_BULK_IMPORT = {
   method: "POST",
   path: "/v3/travel-rule/wallet-addresses/import/",
@@ -8392,6 +8776,35 @@ var TravelRuleTransfers = class extends APIResource {
     return this._client.requestPage(TRAVEL_RULE_TRANSFERS_LIST, [], params, options);
   }
 };
+var TravelRuleUnmatchedDeposits = class extends APIResource {
+  /**
+   * List unmatched Travel Rule deposits
+   *
+   * Inbound deposits that are still waiting for the originating VASP's Travel Rule data: their transfer is `AWAITING_COUNTERPARTY`, `NOT_ENOUGH_COUNTERPARTY_DATA` or `COUNTERPARTY_VASP_NOT_FOUND`, no received message is paired with them, and nobody matched them by hand. The rows and the filters are the same as in `GET /v3/travel-rule/transfers/`, newest first, paginated with `limit` (default 50) and `offset`. Pair a deposit with the message the originating VASP sent with `POST /v3/travel-rule/unmatched/{transaction_uuid}/match/`.
+   *
+   * `GET /v3/travel-rule/unmatched/`
+   */
+  list(params = {}, options) {
+    return this._client.requestPage(TRAVEL_RULE_UNMATCHED_DEPOSITS_LIST, [], params, options);
+  }
+  /**
+   * Match a Travel Rule deposit to a received message
+   *
+   * Pair an inbound deposit that is still waiting for originator data with the Travel Rule message the originating VASP sent for it. The deposit takes the message's originator data, counterparty VASP and rail, and both transfers record the match on their timelines. `transaction_uuid` is the deposit's `transaction_id` from `GET /v3/travel-rule/unmatched/`. `transaction_id` in the body is the received message's `transaction_id`, from a row of `GET /v3/travel-rule/transfers/?kind=message`; the transfer's own `id` is not found. The message must be for the same asset as the deposit. A deposit or message deleted from the Console answers `404`; one that has already moved on (matched, or no longer waiting) answers `409`.
+   *
+   * `POST /v3/travel-rule/unmatched/{transaction_uuid}/match/`
+   *
+   * @param transactionUuid The `transaction_id` of the unmatched deposit.
+   */
+  match(transactionUuid, params, options) {
+    return this._client.request(
+      TRAVEL_RULE_UNMATCHED_DEPOSITS_MATCH,
+      [transactionUuid],
+      params,
+      options
+    );
+  }
+};
 var TravelRuleWalletAddresses = class extends APIResource {
   /**
    * Import wallet addresses in bulk
@@ -8543,6 +8956,9 @@ var TravelRule = class extends APIResource {
   counterpartyContacts = new TravelRuleCounterpartyContacts(this._client);
   networks = new TravelRuleNetworks(this._client);
   transfers = new TravelRuleTransfers(this._client);
+  unmatchedDeposits = new TravelRuleUnmatchedDeposits(
+    this._client
+  );
   walletAddresses = new TravelRuleWalletAddresses(this._client);
   walletProofs = new TravelRuleWalletProofs(this._client);
   workspace = new TravelRuleWorkspaceResource(this._client);
@@ -8796,7 +9212,7 @@ var Users = class extends APIResource {
    *
    * **Permanently delete** users: the user records are removed permanently. For everyday blocking prefer [Update User Status](#patch-/v3/users/-vendor_data-/update-status/) with `BLOCKED`. Select users with `vendor_data_list`, with `didit_internal_id_list`, or with both at once; or pass `delete_all: true`. This endpoint never narrows `delete_all` with filters. The Console's People filters are refused with a `400` (see the `400` response), so a narrowed intent does not turn into a full wipe. Two exceptions: `filter_has_approved_sessions` and `filter_has_declined_sessions` are not refused and not applied, so with `delete_all: true` they still delete every user; do not send them.
    *
-   * **Biometric templates:** every image-free biometric template retained for these users after session deletion (see `/v3/biometric-templates/`) is purged before the user is deleted, so the person stops matching in duplicate detection and Face Search. If a template cannot be purged because a biometric store is unavailable, the call returns `503`, no user in the request is deleted, and repeating the request finishes the job.
+   * **Biometric templates:** unless you set `retain_face_embeddings` to `true`, every image-free biometric template retained for these users after session deletion (see `/v3/biometric-templates/`) is purged before the user is deleted, so the person stops matching in duplicate detection and Face Search. With `retain_face_embeddings: true` and `face_retention_days`, you choose to keep one image-free biometric template per person for that many days, and nothing else about the person is kept. If a template cannot be purged because a biometric store is unavailable, the call returns `503`, no user in the request is deleted, and repeating the request finishes the job.
    *
    * **Filed regulatory reports:** if the selected data is in a finalized regulatory report, the whole request is refused with `409` and nothing is deleted. The body uses `code: in_filed_report` and names each report with `uuid`, `report_number`, `report_type` and `case_uuid`. Delete the reports, then repeat the request.
    *
@@ -11338,6 +11754,7 @@ exports.TravelRule = TravelRule;
 exports.TravelRuleCounterpartyContacts = TravelRuleCounterpartyContacts;
 exports.TravelRuleNetworks = TravelRuleNetworks;
 exports.TravelRuleTransfers = TravelRuleTransfers;
+exports.TravelRuleUnmatchedDeposits = TravelRuleUnmatchedDeposits;
 exports.TravelRuleWalletAddresses = TravelRuleWalletAddresses;
 exports.TravelRuleWalletProofs = TravelRuleWalletProofs;
 exports.TravelRuleWorkspaceResource = TravelRuleWorkspaceResource;