@didit-protocol/sdk-node 2.11.1 → 2.13.0

package/dist/index.cjs

@@ -282,7 +282,7 @@ function decodeDates(value, plan, named, depth = 0) {
 }
 
 // src/core/version.ts
-var VERSION = "2.11.1";
+var VERSION = "2.13.0";
 
 // src/core/runtime.ts
 function processLike() {
@@ -1669,6 +1669,14 @@ var DATE_PLANS = {
       action_required: "TransactionWalletOwnershipAction"
     }
   },
+  TransactionListTravelRule: {
+    p: {
+      data_unmasked: "TravelRuleDataUnmasked",
+      counterparty_vasp: { p: { dd_assessed_at: 1 } },
+      delivery: "TravelRuleDelivery",
+      discovery: { i: "TravelRuleDiscoveryStep" }
+    }
+  },
   TransactionNote: { p: { created_at: 1 } },
   TransactionRuleDetail: { p: { latest_triggered_at: 1, created_at: 1, updated_at: 1 } },
   TransactionSummary: { p: { txn_date: 1, created_at: 1 } },
@@ -1677,7 +1685,8 @@ var DATE_PLANS = {
       data_unmasked: "TravelRuleDataUnmasked",
       counterparty_vasp: { p: { dd_assessed_at: 1 } },
       delivery: "TravelRuleDelivery",
-      discovery: { i: "TravelRuleDiscoveryStep" }
+      discovery: { i: "TravelRuleDiscoveryStep" },
+      deliveries: { i: "TravelRuleDeliveryLogEntry" }
     }
   },
   TransactionWalletOwnershipAction: { p: { expires_at: 1 } },
@@ -1685,7 +1694,9 @@ var DATE_PLANS = {
   TransactionsListRelatedResponse: { p: { results: { i: "TransactionSummary" } } },
   TransactionsListResponse: {
     p: {
-      results: { i: { p: { txn_date: 1, created_at: 1, travel_rule: "TransactionTravelRule" } } }
+      results: {
+        i: { p: { txn_date: 1, created_at: 1, travel_rule: "TransactionListTravelRule" } }
+      }
     }
   },
   TransactionsNotesListResponse: { p: { results: { i: "TransactionNote" } } },
@@ -1707,6 +1718,8 @@ var DATE_PLANS = {
   TravelRuleCounterpartyScreeningStatus: { p: { screening: "TravelRuleCounterpartyScreening" } },
   TravelRuleDataUnmasked: { p: { at: 1 } },
   TravelRuleDelivery: { p: { next_attempt_at: 1, delivered_at: 1 } },
+  TravelRuleDeliveryLogEntry: { p: { created_at: 1, delivered_at: 1 } },
+  TravelRuleDeliveryLogPage: { p: { results: { i: "TravelRuleDeliveryLogEntry" } } },
   TravelRuleDiscoveryStep: { p: { at: 1 } },
   TravelRuleInboundResponse: { p: { travel_rule: "TravelRuleTransferDetail" } },
   TravelRuleListVaspsResponse: { p: { results: { i: "VaspDirectoryEntry" } } },
@@ -1766,7 +1779,8 @@ var DATE_PLANS = {
       data_unmasked: "TravelRuleDataUnmasked",
       created_at: 1,
       delivery: "TravelRuleDelivery",
-      discovery: { i: "TravelRuleDiscoveryStep" }
+      discovery: { i: "TravelRuleDiscoveryStep" },
+      deliveries: { i: "TravelRuleDeliveryLogEntry" }
     }
   },
   TravelRuleTransferRow: { p: { txn_date: 1, deadline_at: 1, created_at: 1 } },
@@ -1952,7 +1966,7 @@ var AccountApplications = class extends APIResource {
    *
    * Create an application inside an organization, in the data location you choose (`data_location`, the European Union by default; it can't be changed afterwards). The response includes `api_key`; persist it now (recoverable via GET). Requires owner/admin JWT.
    *
-   * Set initiate_login_uri to your HTTPS sign-in page on the exact website_url hostname, or an empty string to disable admin-sent sign-in links. Changing website_url also revalidates the saved sign-in URI. Invalid values return 400 with an initiate_login_uri field error; hostname and URI policy failures use https_url_on_registered_website_required.
+   * Set initiate_login_uri to your HTTPS sign-in page on the exact website_url hostname, or an empty string to disable admin-sent sign-in links. Changing website_url also revalidates the saved sign-in URI. Invalid values return 400 with an initiate_login_uri field error; hostname and URI policy failures use https_url_on_registered_website_required. An MCP token (a "Log in with Didit" grant, `token_use` `mcp`) also needs the `didit:management` scope, which carries the `applications` resource; a grant limited to `didit:verification` is refused with 403 before anything is created.
    *
    * `POST /organizations/me/{org_id}/applications/`
    *
@@ -1964,7 +1978,7 @@ var AccountApplications = class extends APIResource {
   /**
    * List the organization's applications
    *
-   * List the organization's applications, 50 per page by default. Use this to discover `app_id` values when recovering credentials from a new machine, then call `GET /organizations/me/{org_id}/applications/{app_id}/` for the API key. Requires an owner or admin Bearer token.
+   * List the organization's applications, 50 per page by default. Use this to discover `app_id` values when recovering credentials from a new machine, then call `GET /organizations/me/{org_id}/applications/{app_id}/` for the API key. Requires an owner or admin Bearer token. An MCP token (a "Log in with Didit" grant, `token_use` `mcp`) also needs the `didit:management` scope, which carries the `applications` resource; a grant limited to `didit:verification` is refused with 403 before any application is listed.
    *
    * `GET /organizations/me/{org_id}/applications/`
    *
@@ -1976,7 +1990,7 @@ var AccountApplications = class extends APIResource {
   /**
    * Get Application Credentials
    *
-   * Read one application's full record including `client_id` and `api_key`. Use this to recover a lost `api_key`.
+   * Read one application's full record including `client_id` and `api_key`. Use this to recover a lost `api_key`. An MCP token (a "Log in with Didit" grant, `token_use` `mcp`) also needs the `didit:management` scope, which carries the `applications` resource; a grant limited to `didit:verification` is refused with 403 before the application is read.
    *
    * `GET /organizations/me/{org_id}/applications/{app_id}/`
    *
@@ -1991,7 +2005,7 @@ var AccountApplications = class extends APIResource {
    *
    * Update application metadata (name, URLs, redirect URIs). `api_key` and `client_id` are never rotated. `products` is read-only: a `products` key in the body is ignored. `data_location` can't be changed after the application is created, except once on the live application created with your organization, while it is unused (see the request body). Requires owner/admin JWT.
    *
-   * Set initiate_login_uri to your HTTPS sign-in page on the exact website_url hostname, or an empty string to disable admin-sent sign-in links. Changing website_url also revalidates the saved sign-in URI. Invalid values return 400 with an initiate_login_uri field error; hostname and URI policy failures use https_url_on_registered_website_required.
+   * Set initiate_login_uri to your HTTPS sign-in page on the exact website_url hostname, or an empty string to disable admin-sent sign-in links. Changing website_url also revalidates the saved sign-in URI. Invalid values return 400 with an initiate_login_uri field error; hostname and URI policy failures use https_url_on_registered_website_required. An MCP token (a "Log in with Didit" grant, `token_use` `mcp`) also needs the `didit:management` scope, which carries the `applications` resource; a grant limited to `didit:verification` is refused with 403 before anything is changed.
    *
    * `PATCH /organizations/me/{org_id}/applications/{app_id}/`
    *
@@ -5113,7 +5127,7 @@ var Investigator = class extends APIResource {
   /**
    * Override a recommendation
    *
-   * Takes another action with a category and a reason. Also overrides a decision the Investigator took on its own while it still stands. Restricted keys need the `decisions` scope (write); transaction alerts also need `transactions` (write). Escalating a verification or transaction opens a case.
+   * Takes another action with a category and a reason. Also overrides a decision the Investigator took on its own while it still stands. Restricted keys need the `decisions` scope (write); transaction alerts also need `transactions` (write). Escalating a verification or transaction opens a case. Automated transaction decisions can be overridden only while the original decision still stands. The original decision remains unchanged, the override is recorded separately, and an immediate policy question is raised for its recorded situations with the original policy action. The override does not charge for another automated decision.
    *
    * `POST /v3/investigator/runs/{run_id}/override/`
    *
@@ -7950,7 +7964,11 @@ var Sessions = class extends APIResource {
    *
    * Every call that changes the status fires the `status.updated` [webhook](/integration/webhooks) once the change commits and appends an activity entry (with actor attribution and your `comment`) to the session's `reviews`, visible in [Get Decision](#get-/v3/session/-sessionId-/decision/) and in the console activity timeline. The user-profile aggregates linked to the session's `vendor_data` update as well. Declining disables ongoing AML monitoring for the session; re-approving re-enables it (from `Resubmitted`, `Declined`, or `Kyc Expired`) when the workflow has monitoring turned on. Approving or declining a child KYC that belongs to a KYB key-people check recomputes the parent business session's status. Set `send_email: true` (with `email_address`) to notify the user: a status notice for `Approved`/`Declined`, or a resubmission email containing the verification link and per-step reasons for `Resubmitted`. To check the email first, preview it with [Preview Decision Email](/sessions-api/preview-decision-email) (`Approved`, `Declined`) or [Preview Resubmission Email](/sessions-api/preview-resubmission) (`Resubmitted`) and pass its `preview_token` as `email_preview_token`: the update then sends exactly the previewed email, or returns `409` before changing anything when the email or the session changed since the preview or the receipt is older than 15 minutes.
    *
-   * Repeating `Approved` or `Declined` on a session that already has that status changes nothing and returns `200`: no webhook, no activity entry and no email. Repeating `Resubmitted` returns `400` (`The new status is the same as the current status.`). Missing or invalid credentials and missing permissions return `403`; an expired scoped API key returns `401`.
+   * Repeating `Approved` or `Declined` on a session that already has that status returns `200` without a status webhook, status activity entry or email. An `Approved` request can still create a same-person link as described below. Repeating `Resubmitted` returns `400` (`The new status is the same as the current status.`). Missing or invalid credentials and missing permissions return `403`; an expired scoped API key returns `401`.
+   *
+   * To record a reviewer decision that two verifications belong to the same person, send `new_status: "Approved"`, `link_to_session_id` and `link_reason`. Both sessions must be distinct, live KYC verifications in the same application. The target need not be approved or have a person profile. `link_reason` is separate from `comment`, must be nonblank after trimming and accepts at most 2000 characters. A reason without a target, linking with another status, an invalid or unavailable target, a self-link, or a KYB participant returns `400`. Approval and linking succeed together or neither changes. If either session already belongs to a group, their groups are joined. An already-approved source can be linked for the first time without another status event or email. A retry within the same group creates no additional link audit. Concurrent group edits return `409`; retry the request.
+   *
+   * Grouping does not merge person profiles, profile fields or biometric data. Each verification keeps its original profile association and deletion ownership. Deleting a verification removes it from the group. Link actions have a separate audit recording the actor, time and `link_reason`; they are not status-review entries. Group navigation and unlinking are console-only, with no public read or unlink endpoint.
    *
    * `PATCH /v3/session/{sessionId}/update-status/`
    *
@@ -8046,6 +8064,12 @@ var TRANSACTIONS_TRAVEL_RULE_CREATE_MESSAGE = {
   body: "json",
   dates: "TravelRuleMessage"
 };
+var TRANSACTIONS_TRAVEL_RULE_LIST_DELIVERIES = {
+  method: "GET",
+  path: "/v3/transactions/{transaction_id}/travel-rule/deliveries/",
+  query: ["limit", "offset"],
+  dates: "TravelRuleDeliveryLogPage"
+};
 var TRANSACTIONS_TRAVEL_RULE_LIST_MESSAGES = {
   method: "GET",
   path: "/v3/transactions/{transaction_id}/travel-rule/messages/",
@@ -8095,7 +8119,9 @@ var TRANSACTIONS_LIST = {
   query: ["limit", "offset", "travel_rule_status", "assignee"],
   dates: {
     p: {
-      results: { i: { p: { txn_date: 1, created_at: 1, travel_rule: "TransactionTravelRule" } } }
+      results: {
+        i: { p: { txn_date: 1, created_at: 1, travel_rule: "TransactionListTravelRule" } }
+      }
     }
   }
 };
@@ -8289,6 +8315,23 @@ var TransactionsTravelRule = class extends APIResource {
       options
     );
   }
+  /**
+   * List Travel Rule delivery history
+   *
+   * Read the complete delivery history for a transaction, oldest first. Requires transaction read permission. Unlike the newest 100 entries embedded in detail, this endpoint paginates the full history. See [delivery history](/management-api/travel-rule/list-deliveries).
+   *
+   * `GET /v3/transactions/{transaction_id}/travel-rule/deliveries/`
+   *
+   * @param transactionId Didit-stable transaction UUID that owns the transfer.
+   */
+  listDeliveries(transactionId, params = {}, options) {
+    return this._client.requestPage(
+      TRANSACTIONS_TRAVEL_RULE_LIST_DELIVERIES,
+      [transactionId],
+      params,
+      options
+    );
+  }
   /**
    * List Travel Rule messages
    *