@dossier-wiki/cloud-sdk 0.1.0 → 0.2.0-staging.568b313

package/dist/cjs/session.js

@@ -0,0 +1,379 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DossiersKycSession = void 0;
+const error_js_1 = require("./error.js");
+/**
+ * Customer-facing KYC session client.
+ *
+ * Use this in onboarding / customer applications to drive the KYC flow.
+ * Handles payload encryption, multipart media uploads, and the session JWT
+ * automatically — so callers work with plain TypeScript objects.
+ *
+ * Unlike `DossiersAPIService` (which uses an org-level API key), this class
+ * authenticates as the session's customer using a short-lived JWT.
+ *
+ * @example
+ * // Server side: create a session and get the token
+ * const result = await adminService.kyc.sessions.create({ workflowId: 'wf_abc' });
+ *
+ * // Client side (onboarding app)
+ * const session = DossiersKycSession.from(result, {
+ *   encryptionKey: process.env.KYC_PAYLOAD_ENCRYPTION_KEY,
+ * });
+ *
+ * const state = await session.getState();
+ * const attempt = await session.createAttempt();
+ * await session.uploadMedia(attempt.id, {
+ *   file: capturedBlob,
+ *   mediaType: 'document-front',
+ *   mimeType: 'image/jpeg',
+ *   filename: 'front.jpg',
+ * });
+ */
+class DossiersKycSession {
+    constructor(options) {
+        this.sessionId = options.sessionId;
+        this.token = options.token;
+        this.encryptionKey = options.encryptionKey;
+        this.baseUrl = options.baseUrl ?? 'https://api.dossiers.wiki';
+        this.fetchImpl = options.fetch ?? globalThis.fetch;
+    }
+    /**
+     * Create a `DossiersKycSession` from the result of
+     * `DossiersAPIService.kyc.sessions.create()`.
+     */
+    static from(result, opts) {
+        return new DossiersKycSession({
+            sessionId: result.session.id,
+            token: result.token,
+            encryptionKey: opts.encryptionKey,
+            baseUrl: opts.baseUrl,
+            fetch: opts.fetch,
+        });
+    }
+    // ── Internal helpers ──────────────────────────────────────────────────────
+    sessionUrl(suffix = '', params) {
+        const u = new URL(`${this.baseUrl}/api/session/${this.sessionId}${suffix}`);
+        u.searchParams.set('token', this.token);
+        if (params) {
+            for (const [k, v] of Object.entries(params))
+                u.searchParams.set(k, v);
+        }
+        return u.toString();
+    }
+    attemptUrl(attemptId, suffix = '') {
+        const u = new URL(`${this.baseUrl}/api/session/${this.sessionId}/attempt/${attemptId}${suffix}`);
+        u.searchParams.set('token', this.token);
+        return u.toString();
+    }
+    get authHeaders() {
+        return { Authorization: `Bearer ${this.token}` };
+    }
+    async doFetch(url, init) {
+        const res = await this.fetchImpl(url, init);
+        const raw = await res.text();
+        const parsed = raw.length > 0 ? safeJsonParse(raw) : undefined;
+        if (!res.ok) {
+            const message = (parsed && typeof parsed === 'object' && 'message' in parsed
+                ? String(parsed.message)
+                : null) ?? `KYC session ${init.method ?? 'GET'} failed: ${res.status}`;
+            throw new error_js_1.DossiersAPIError(res.status, message, parsed ?? raw);
+        }
+        return parsed;
+    }
+    get(url) {
+        return this.doFetch(url, {
+            method: 'GET',
+            headers: { ...this.authHeaders, Accept: 'application/json' },
+        });
+    }
+    post(url, body) {
+        return this.doFetch(url, {
+            method: 'POST',
+            headers: {
+                ...this.authHeaders,
+                Accept: 'application/json',
+                ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+            },
+            body,
+        });
+    }
+    patch(url, body) {
+        return this.doFetch(url, {
+            method: 'PATCH',
+            headers: {
+                ...this.authHeaders,
+                'Content-Type': 'application/json',
+                Accept: 'application/json',
+            },
+            body,
+        });
+    }
+    async postEncrypted(url, data) {
+        const payload = await aesEncrypt(data, this.encryptionKey);
+        return this.post(url, JSON.stringify({ payload }));
+    }
+    // ── Session state ─────────────────────────────────────────────────────────
+    /**
+     * Retrieve the full session state: workflow snapshot, step preview data,
+     * and user progress checkpoint.
+     */
+    getState() {
+        return this.get(this.sessionUrl());
+    }
+    /**
+     * Retrieve lightweight session status. Cheaper than `getState()` — use this
+     * to poll session validity, completion, and expiry without fetching all data.
+     */
+    getStatus() {
+        return this.get(this.sessionUrl('/status'));
+    }
+    /**
+     * Retrieve which tab or user currently holds the session activation lock.
+     */
+    getOwner() {
+        return this.get(this.sessionUrl('/owner'));
+    }
+    // ── Tab activation ────────────────────────────────────────────────────────
+    /**
+     * Claim the session for the given tab. Throws `DossiersAPIError` with status
+     * 409 if the session is already active in another tab (unless `force` is true).
+     *
+     * @param tabId  Unique identifier for this browser tab or device.
+     * @param force  Evict the current holder and take ownership.
+     */
+    async activate(tabId, force = false) {
+        await this.postEncrypted(this.sessionUrl('/activate', force ? { force: 'true' } : undefined), { tabId });
+    }
+    /**
+     * Release the session activation lock for the given tab.
+     *
+     * @param tabId  The tab ID to deactivate (passed as a query parameter).
+     */
+    deactivate(tabId) {
+        return this.post(this.sessionUrl('/deactivate', { tabId }));
+    }
+    // ── Session mutations ─────────────────────────────────────────────────────
+    /**
+     * Update the session's user progress checkpoint.
+     *
+     * @example
+     * await session.update({ checkpoint: 'dv-document-selection' });
+     */
+    async update(data) {
+        const payload = await aesEncrypt(data, this.encryptionKey);
+        return this.patch(this.sessionUrl(), JSON.stringify({ payload }));
+    }
+    /**
+     * Mark the session as complete. Call this after all required workflow steps pass.
+     */
+    complete() {
+        return this.post(this.sessionUrl('/complete'));
+    }
+    /**
+     * Submit form data for a form collection workflow step.
+     *
+     * @param stepId     Workflow step ID (from the workflow snapshot).
+     * @param formData   Key-value map of form field IDs to submitted values.
+     * @param unordered  Skip step-ordering enforcement when `true`.
+     */
+    submitFormStep(stepId, formData, unordered = false) {
+        return this.postEncrypted(this.sessionUrl('/form-step', unordered ? { unordered: 'true' } : undefined), { stepId, formData });
+    }
+    // ── Attempts ──────────────────────────────────────────────────────────────
+    /**
+     * Create a new verification attempt. Each document capture or liveness check
+     * starts a fresh attempt.
+     */
+    createAttempt() {
+        return this.post(this.sessionUrl('/attempt'));
+    }
+    /**
+     * Append telemetry events to an attempt. Used to record UI events, errors,
+     * and timing data for fraud detection and audit logs.
+     *
+     * @param attemptId  The attempt ID from `createAttempt()`.
+     * @param events     Array of event objects with `category`, `description`,
+     *                   `timestamp` (Unix ms), and optionally `currentState`.
+     */
+    appendEvents(attemptId, events) {
+        return this.postEncrypted(this.attemptUrl(attemptId, '/events'), events);
+    }
+    /**
+     * Upload a media file to an attempt using `multipart/form-data`.
+     *
+     * Do not set `Content-Type` manually — it is set automatically by
+     * `FormData` with the correct boundary.
+     *
+     * @example
+     * const attempt = await session.createAttempt();
+     * const media = await session.uploadMedia(attempt.id, {
+     *   file: capturedBlob,
+     *   mediaType: 'document-front',
+     *   mimeType: 'image/jpeg',
+     *   filename: 'front.jpg',
+     *   stepId: 'id-verification',
+     * });
+     */
+    async uploadMedia(attemptId, input) {
+        const form = new FormData();
+        form.append('file', input.file, input.filename);
+        form.append('mediaType', input.mediaType);
+        if (input.selectedDocumentTypeId) {
+            form.append('selectedDocumentTypeId', input.selectedDocumentTypeId);
+        }
+        if (input.stepId)
+            form.append('stepId', input.stepId);
+        if (input.metadata)
+            form.append('metadata', JSON.stringify(input.metadata));
+        return this.doFetch(this.attemptUrl(attemptId, '/media'), {
+            method: 'POST',
+            headers: this.authHeaders,
+            body: form,
+        });
+    }
+    /**
+     * Upload random liveness frames for anti-spoofing checks.
+     * Frames are appended to the attempt — existing frames are never replaced.
+     *
+     * @param attemptId  The attempt ID.
+     * @param frames     Base64-encoded JPEG strings (data URLs or raw base64).
+     */
+    uploadRandomFrames(attemptId, frames) {
+        return this.postEncrypted(this.attemptUrl(attemptId, '/random-frames'), { frames });
+    }
+    /**
+     * Retrieve all media items associated with an attempt.
+     */
+    getAttemptMedia(attemptId) {
+        return this.get(this.attemptUrl(attemptId, '/media'));
+    }
+    // ── Aadhaar verification ──────────────────────────────────────────────────
+    /**
+     * Initiate Aadhaar OTP generation for a 12-digit Aadhaar number.
+     * Returns a `referenceId` to pass to `verifyAadhaarOtp()`.
+     */
+    generateAadhaarOtp(aadhaarNumber) {
+        return this.postEncrypted(this.sessionUrl('/aadhaar/generate-otp'), { aadhaarNumber });
+    }
+    /**
+     * Verify the OTP received on the Aadhaar-registered mobile number.
+     *
+     * @param otp          The 6-digit OTP from the SMS.
+     * @param referenceId  The `referenceId` returned by `generateAadhaarOtp()`.
+     */
+    verifyAadhaarOtp(otp, referenceId) {
+        return this.postEncrypted(this.sessionUrl('/aadhaar/verify-otp'), { otp, referenceId });
+    }
+}
+exports.DossiersKycSession = DossiersKycSession;
+// ── CryptoJS-compatible AES-CBC encryption ────────────────────────────────
+//
+// Produces output matching CryptoJS.AES.encrypt(JSON.stringify(data), passphrase).toString()
+// so the server can decrypt with CryptoJS.AES.decrypt(payload, KYC_PAYLOAD_DECRYPTION_KEY).
+//
+// Uses Web Crypto (available in Node.js 18+ and all modern browsers) plus an
+// inline MD5 implementation for EVP_BytesToKey — no additional dependencies.
+//
+// Output format: base64("Salted__" + 8-byte-salt + AES-256-CBC-ciphertext)
+async function aesEncrypt(data, passphrase) {
+    const enc = new TextEncoder();
+    const salt = globalThis.crypto.getRandomValues(new Uint8Array(8));
+    const { key, iv } = evpBytesToKey(enc.encode(passphrase), salt);
+    const cryptoKey = await globalThis.crypto.subtle.importKey('raw', key, { name: 'AES-CBC' }, false, ['encrypt']);
+    const ciphertext = new Uint8Array(await globalThis.crypto.subtle.encrypt({ name: 'AES-CBC', iv }, cryptoKey, enc.encode(JSON.stringify(data))));
+    const out = new Uint8Array(16 + ciphertext.length);
+    out.set([83, 97, 108, 116, 101, 100, 95, 95], 0); // "Salted__"
+    out.set(salt, 8);
+    out.set(ciphertext, 16);
+    return btoa(Array.from(out, b => String.fromCharCode(b)).join(''));
+}
+// EVP_BytesToKey: CryptoJS's key+IV derivation from a passphrase and salt.
+// Iterates: D_n = MD5(D_{n-1} || passphrase || salt) until 48 bytes collected.
+// key = first 32 bytes, iv = next 16 bytes.
+function evpBytesToKey(pass, salt) {
+    const material = [];
+    let prev = new Uint8Array(0);
+    while (material.length < 48) {
+        const block = new Uint8Array([...prev, ...pass, ...salt]);
+        prev = md5(block);
+        material.push(...prev);
+    }
+    return {
+        key: new Uint8Array(material.slice(0, 32)),
+        iv: new Uint8Array(material.slice(32, 48)),
+    };
+}
+// RFC 1321 MD5 — compact implementation for EVP_BytesToKey.
+// Only used internally; not exported.
+const MD5_S = [
+    7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22,
+    5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20,
+    4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23,
+    6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21,
+];
+const MD5_K = Array.from({ length: 64 }, (_, i) => Math.floor(Math.abs(Math.sin(i + 1)) * 2 ** 32) >>> 0);
+function md5(data) {
+    const r = data.length % 64;
+    const padZeros = (55 - r + 64) % 64;
+    const padded = new Uint8Array(data.length + 1 + padZeros + 8);
+    padded.set(data);
+    padded[data.length] = 0x80;
+    const dv = new DataView(padded.buffer);
+    const bitLen = data.length * 8;
+    dv.setUint32(padded.length - 8, bitLen >>> 0, true);
+    dv.setUint32(padded.length - 4, Math.floor(bitLen / 2 ** 32), true);
+    let h0 = 0x67452301;
+    let h1 = 0xefcdab89;
+    let h2 = 0x98badcfe;
+    let h3 = 0x10325476;
+    for (let i = 0; i < padded.length; i += 64) {
+        const M = Array.from({ length: 16 }, (_, j) => dv.getUint32(i + j * 4, true));
+        let a = h0, b = h1, c = h2, d = h3;
+        for (let j = 0; j < 64; j++) {
+            let f, g;
+            if (j < 16) {
+                f = (b & c) | (~b & d);
+                g = j;
+            }
+            else if (j < 32) {
+                f = (d & b) | (~d & c);
+                g = (5 * j + 1) % 16;
+            }
+            else if (j < 48) {
+                f = b ^ c ^ d;
+                g = (3 * j + 5) % 16;
+            }
+            else {
+                f = c ^ (b | ~d);
+                g = (7 * j) % 16;
+            }
+            const t = (a + (f >>> 0) + MD5_K[j] + M[g]) >>> 0;
+            const s = MD5_S[j];
+            a = d;
+            d = c;
+            c = b;
+            b = (b + ((t << s) | (t >>> (32 - s)))) >>> 0;
+        }
+        h0 = (h0 + a) >>> 0;
+        h1 = (h1 + b) >>> 0;
+        h2 = (h2 + c) >>> 0;
+        h3 = (h3 + d) >>> 0;
+    }
+    const result = new Uint8Array(16);
+    const rv = new DataView(result.buffer);
+    rv.setUint32(0, h0, true);
+    rv.setUint32(4, h1, true);
+    rv.setUint32(8, h2, true);
+    rv.setUint32(12, h3, true);
+    return result;
+}
+function safeJsonParse(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/cjs/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/session.ts"],"names":[],"mappings":";;;AAAA,yCAA8C;AA6B9C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAa,kBAAkB;IAO3B,YAAY,OAAkC;QAC1C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,CACP,MAAiC,EACjC,IAAuE;QAEvE,OAAO,IAAI,kBAAkB,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SACpB,CAAC,CAAC;IACP,CAAC;IAED,6EAA6E;IAErE,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,MAA+B;QAC3D,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,gBAAgB,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,UAAU,CAAC,SAAiB,EAAE,MAAM,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,IAAI,GAAG,CACb,GAAG,IAAI,CAAC,OAAO,gBAAgB,IAAI,CAAC,SAAS,YAAY,SAAS,GAAG,MAAM,EAAE,CAChF,CAAC;QACF,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,IAAY,WAAW;QACnB,OAAO,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,GAAW,EAAE,IAAiB;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,OAAO,GACT,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;gBACxD,CAAC,CAAC,MAAM,CAAE,MAA+B,CAAC,OAAO,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC,MAAM,IAAI,KAAK,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/E,MAAM,IAAI,2BAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAW,CAAC;IACvB,CAAC;IAEO,GAAG,CAAI,GAAW;QACtB,OAAO,IAAI,CAAC,OAAO,CAAI,GAAG,EAAE;YACxB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC/D,CAAC,CAAC;IACP,CAAC;IAEO,IAAI,CAAI,GAAW,EAAE,IAAa;QACtC,OAAO,IAAI,CAAC,OAAO,CAAI,GAAG,EAAE;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,GAAG,IAAI,CAAC,WAAW;gBACnB,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE;YACD,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAI,GAAW,EAAE,IAAY;QACtC,OAAO,IAAI,CAAC,OAAO,CAAI,GAAG,EAAE;YACxB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE;gBACL,GAAG,IAAI,CAAC,WAAW;gBACnB,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC7B;YACD,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,aAAa,CAAI,GAAW,EAAE,IAAa;QACrD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAI,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,QAAQ;QACJ,OAAO,IAAI,CAAC,GAAG,CAA4B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,SAAS;QACL,OAAO,IAAI,CAAC,GAAG,CAA2B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,QAAQ;QACJ,OAAO,IAAI,CAAC,GAAG,CAA0B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,KAAK,GAAG,KAAK;QACvC,MAAM,IAAI,CAAC,aAAa,CACpB,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EACnE,EAAE,KAAK,EAAE,CACZ,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,IAAI,CAAuB,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,6EAA6E;IAE7E;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,IAA6B;QACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,KAAK,CACb,IAAI,CAAC,UAAU,EAAE,EACjB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAC9B,CAAC;IACN,CAAC;IAED;;OAEG;IACH,QAAQ;QACJ,OAAO,IAAI,CAAC,IAAI,CAA4B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CACV,MAAc,EACd,QAAiC,EACjC,SAAS,GAAG,KAAK;QAEjB,OAAO,IAAI,CAAC,aAAa,CACrB,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAC5E,EAAE,MAAM,EAAE,QAAQ,EAAE,CACvB,CAAC;IACN,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,aAAa;QACT,OAAO,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,SAAiB,EAAE,MAAiB;QAC7C,OAAO,IAAI,CAAC,aAAa,CACrB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,EACrC,MAAM,CACT,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAA0B;QAC3D,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC,OAAO,CAAkB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,IAAI,EAAE,IAAI;SACb,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,SAAiB,EAAE,MAAgB;QAClD,OAAO,IAAI,CAAC,aAAa,CACrB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAC5C,EAAE,MAAM,EAAE,CACb,CAAC;IACN,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAoB,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,6EAA6E;IAE7E;;;OAGG;IACH,kBAAkB,CAAC,aAAqB;QACpC,OAAO,IAAI,CAAC,aAAa,CACrB,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EACxC,EAAE,aAAa,EAAE,CACpB,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CAAC,GAAW,EAAE,WAAmB;QAC7C,OAAO,IAAI,CAAC,aAAa,CACrB,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,EAAE,GAAG,EAAE,WAAW,EAAE,CACvB,CAAC;IACN,CAAC;CACJ;AA5SD,gDA4SC;AAED,6EAA6E;AAC7E,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,2EAA2E;AAE3E,KAAK,UAAU,UAAU,CAAC,IAAa,EAAE,UAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACtD,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CACtD,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,UAAU,CAC7B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAClC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,SAAS,EACT,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CACnC,CACJ,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa;IAC/D,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAExB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,4CAA4C;AAC5C,SAAS,aAAa,CAAC,IAAgB,EAAE,IAAgB;IACrD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO;QACH,GAAG,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,EAAE,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;KAC7C,CAAC;AACN,CAAC;AAED,4DAA4D;AAC5D,sCAAsC;AACt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pB,EAAE,MAAM,EAAE,EAAE,EAAE,EACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAClE,CAAC;AAEF,SAAS,GAAG,CAAC,IAAgB;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAEpE,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IACpB,IAAI,EAAE,GAAG,UAAU,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAS,EAAE,CAAS,CAAC;YACzB,IAAI,CAAC,GAAG,EAAE,EAAO,CAAC;gBAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;iBAC9C,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;iBAC7D,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;iBACjD,CAAC;gBAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAEhE,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QAED,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACpB,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAC9B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC;AACzD,CAAC"}

package/dist/cjs/types.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DossiersWebhookEventTypes = void 0;
+var DossiersWebhookEventTypes;
+(function (DossiersWebhookEventTypes) {
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_CREATED"] = "documentVerification.instance.created";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_UPDATED"] = "documentVerification.instance.updated";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_COMPLETED"] = "documentVerification.instance.completed";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_DELETED"] = "documentVerification.instance.deleted";
+    DossiersWebhookEventTypes["AML_SCREENING_REQUEST_CREATED"] = "amlScreening.screeningRequest.created";
+    DossiersWebhookEventTypes["AML_SCREENING_REQUEST_COMPLETED"] = "amlScreening.screeningRequest.completed";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_TRIGGERED"] = "amlScreening.screeningAlert.triggered";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_STATUS_CHANGED"] = "amlScreening.screeningAlert.statusChanged";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_COMMENT_ADDED"] = "amlScreening.screeningAlert.commentAdded";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_COMMENT_UPDATED"] = "amlScreening.screeningAlert.commentUpdated";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_COMMENT_DELETED"] = "amlScreening.screeningAlert.commentDeleted";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_DELETED"] = "amlScreening.screeningAlert.deleted";
+    DossiersWebhookEventTypes["KYC_SESSION_CREATED"] = "kycSessions.session.created";
+    DossiersWebhookEventTypes["KYC_SESSION_UPDATED"] = "kycSessions.session.updated";
+    DossiersWebhookEventTypes["KYC_SESSION_COMPLETED"] = "kycSessions.session.completed";
+    DossiersWebhookEventTypes["KYC_SESSION_REVIEWED"] = "kycSessions.session.reviewed";
+    DossiersWebhookEventTypes["KYC_SESSION_DELETED"] = "kycSessions.session.deleted";
+    DossiersWebhookEventTypes["KYC_STEP_COMPLETED"] = "kycSessions.step.completed";
+    DossiersWebhookEventTypes["KYC_STEP_FAILED"] = "kycSessions.step.failed";
+    DossiersWebhookEventTypes["KYC_SESSION_COMMENT_ADDED"] = "kycSessions.session.commentAdded";
+    DossiersWebhookEventTypes["KYC_SESSION_COMMENT_UPDATED"] = "kycSessions.session.commentUpdated";
+    DossiersWebhookEventTypes["KYC_SESSION_COMMENT_DELETED"] = "kycSessions.session.commentDeleted";
+    DossiersWebhookEventTypes["SYSTEM_TEST_EVENT"] = "system.testEvent";
+    DossiersWebhookEventTypes["SYSTEM_PRODUCT_ACCESS_GRANTED"] = "system.product.accessGranted";
+    DossiersWebhookEventTypes["SYSTEM_PRODUCT_ACCESS_REVOKED"] = "system.product.accessRevoked";
+    DossiersWebhookEventTypes["SYSTEM_API_KEY_CREATED"] = "system.apiKey.created";
+    DossiersWebhookEventTypes["SYSTEM_API_KEY_INVALIDATED"] = "system.apiKey.invalidated";
+    DossiersWebhookEventTypes["SYSTEM_USAGE_LIMIT_REACHED"] = "system.usage.limitReached";
+    DossiersWebhookEventTypes["SYSTEM_USAGE_LIMIT_WARNING"] = "system.usage.limitWarning";
+})(DossiersWebhookEventTypes || (exports.DossiersWebhookEventTypes = DossiersWebhookEventTypes = {}));
+//# sourceMappingURL=types.js.map

package/dist/cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";;;AAAA,IAAY,yBAiCX;AAjCD,WAAY,yBAAyB;IACjC,6GAAgF,CAAA;IAChF,6GAAgF,CAAA;IAChF,iHAAoF,CAAA;IACpF,6GAAgF,CAAA;IAEhF,oGAAuE,CAAA;IACvE,wGAA2E,CAAA;IAC3E,oGAAuE,CAAA;IACvE,6GAAgF,CAAA;IAChF,2GAA8E,CAAA;IAC9E,+GAAkF,CAAA;IAClF,+GAAkF,CAAA;IAClF,gGAAmE,CAAA;IAEnE,gFAAmD,CAAA;IACnD,gFAAmD,CAAA;IACnD,oFAAuD,CAAA;IACvD,kFAAqD,CAAA;IACrD,gFAAmD,CAAA;IACnD,8EAAiD,CAAA;IACjD,wEAA2C,CAAA;IAC3C,2FAA8D,CAAA;IAC9D,+FAAkE,CAAA;IAClE,+FAAkE,CAAA;IAElE,mEAAsC,CAAA;IACtC,2FAA8D,CAAA;IAC9D,2FAA8D,CAAA;IAC9D,6EAAgD,CAAA;IAChD,qFAAwD,CAAA;IACxD,qFAAwD,CAAA;IACxD,qFAAwD,CAAA;AAC5D,CAAC,EAjCW,yBAAyB,yCAAzB,yBAAyB,QAiCpC"}

package/dist/cjs/webhooks.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DossiersWebhookRouter = void 0;
+const types_js_1 = require("./types.js");
+class DossiersWebhookRouter {
+    constructor(secret) {
+        this.handlers = new Map();
+        this.keyPromise = crypto.subtle.importKey('raw', DossiersWebhookRouter.encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    }
+    on(eventType, handler) {
+        this.handlers.set(eventType, handler);
+        return this;
+    }
+    /**
+     * Verify the signature and acknowledge the webhook with `200 ok` *before*
+     * the handler runs. The handler is dispatched asynchronously so a slow
+     * downstream call cannot cause a timeout and retry.
+     *
+     * Trade-off: because we ack before the handler executes, a handler that
+     * throws will NOT trigger an automatic retry — you own retries inside the
+     * handler. Failures are logged via `console.error`.
+     *
+     * On serverless runtimes that freeze execution after the response is sent
+     * (Vercel Functions, Cloudflare Workers), pass `opts.waitUntil` so the
+     * runtime keeps the handler alive past the response.
+     */
+    async handle(req, opts = {}) {
+        const { valid, raw } = await this.verify(req);
+        if (!valid)
+            return new Response('Invalid signature', { status: 401 });
+        const eventId = req.headers.get(DossiersWebhookRouter.EVENT_ID_HEADER);
+        const eventType = req.headers.get(DossiersWebhookRouter.EVENT_TYPE_HEADER);
+        const retryCount = req.headers.get(DossiersWebhookRouter.RETRY_COUNT_HEADER);
+        console.log(`Event ID: ${eventId}, Event Type: ${eventType}, Retry Count: ${retryCount}`);
+        if (!eventType ||
+            !Object.values(types_js_1.DossiersWebhookEventTypes).includes(eventType)) {
+            console.error('Invalid event type', eventType);
+            return new Response('Invalid event type', { status: 400 });
+        }
+        const handler = this.handlers.get(eventType);
+        if (!handler)
+            return new Response('ok');
+        let body;
+        try {
+            body = JSON.parse(raw);
+        }
+        catch (error) {
+            console.error('Webhook body is not valid JSON', error);
+            return new Response('Invalid body', { status: 400 });
+        }
+        const work = Promise.resolve()
+            .then(() => handler(body, { eventId, retryCount }))
+            .catch((error) => {
+            console.error(`Webhook handler for ${eventType} (event ${eventId ?? 'unknown'}) failed`, error);
+        });
+        if (opts.waitUntil)
+            opts.waitUntil(work);
+        return new Response('ok');
+    }
+    async verify(req) {
+        const raw = await req.text();
+        const signature = req.headers.get(DossiersWebhookRouter.SIGNATURE_HEADER);
+        if (!signature)
+            return { valid: false, raw };
+        const valid = await this.verifyHmacSha256(raw, signature);
+        return { valid, raw };
+    }
+    async verifyHmacSha256(payload, signature) {
+        const key = await this.keyPromise;
+        const sigBuf = await crypto.subtle.sign('HMAC', key, DossiersWebhookRouter.encoder.encode(payload));
+        const expected = Array.from(new Uint8Array(sigBuf))
+            .map((b) => b.toString(16).padStart(2, '0'))
+            .join('');
+        const provided = signature.replace(/^sha256=/, '').toLowerCase();
+        return DossiersWebhookRouter.timingSafeEqual(expected, provided);
+    }
+    static timingSafeEqual(a, b) {
+        if (a.length !== b.length)
+            return false;
+        let mismatch = 0;
+        for (let i = 0; i < a.length; i++) {
+            mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+        }
+        return mismatch === 0;
+    }
+}
+exports.DossiersWebhookRouter = DossiersWebhookRouter;
+DossiersWebhookRouter.encoder = new TextEncoder();
+DossiersWebhookRouter.SIGNATURE_HEADER = 'x-webhook-signature';
+DossiersWebhookRouter.EVENT_ID_HEADER = 'x-webhook-event-id';
+DossiersWebhookRouter.EVENT_TYPE_HEADER = 'x-webhook-event-type';
+DossiersWebhookRouter.RETRY_COUNT_HEADER = 'x-webhook-retry-count';
+//# sourceMappingURL=webhooks.js.map

package/dist/cjs/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/webhooks.ts"],"names":[],"mappings":";;;AAKA,yCAAuD;AASvD,MAAa,qBAAqB;IAa9B,YAAY,MAAc;QALlB,aAAQ,GAAG,IAAI,GAAG,EAGvB,CAAC;QAGA,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACrC,KAAK,EACL,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACX,CAAC;IACN,CAAC;IAEM,EAAE,CACL,SAAY,EACZ,OAAkC;QAElC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAA4D,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,MAAM,CACf,GAAY,EACZ,OAA4D,EAAE;QAE9D,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,iBAAiB,SAAS,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAE1F,IACI,CAAC,SAAS;YACV,CAAE,MAAM,CAAC,MAAM,CAAC,oCAAyB,CAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC7E,CAAC;YACC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YAC/C,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAsC,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE;aACzB,IAAI,CAAC,GAAG,EAAE,CACP,OAAO,CACH,IAAwE,EACxE,EAAE,OAAO,EAAE,UAAU,EAAE,CAC1B,CACJ;aACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CACT,uBAAuB,SAAS,WAAW,OAAO,IAAI,SAAS,UAAU,EACzE,KAAK,CACR,CAAC;QACN,CAAC,CAAC,CAAC;QAEP,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAY;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,SAAiB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACnC,MAAM,EACN,GAAG,EACH,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAChD,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjE,OAAO,qBAAqB,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,CAAS,EAAE,CAAS;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,QAAQ,KAAK,CAAC,CAAC;IAC1B,CAAC;;AA5HL,sDA6HC;AA5H2B,6BAAO,GAAG,IAAI,WAAW,EAAE,AAApB,CAAqB;AAC5B,sCAAgB,GAAG,qBAAqB,AAAxB,CAAyB;AACzC,qCAAe,GAAG,oBAAoB,AAAvB,CAAwB;AACvC,uCAAiB,GAAG,sBAAsB,AAAzB,CAA0B;AAC3C,wCAAkB,GAAG,uBAAuB,AAA1B,CAA2B"}

package/dist/esm/api.js

@@ -0,0 +1,33 @@
+/*
+Dossiers REST API types.
+
+Endpoints:
+  POST   /sanctions/search                              searchSanctions
+  POST   /high-risk/search                              searchDossiers
+  POST   /screening/request                             createScreeningRequest
+  POST   /kyc-sessions                                  createKycSession
+  GET    /kyc-sessions                                  listKycSessions
+  GET    /kyc-sessions/{id}                             getKycSession
+  DELETE /kyc-sessions/{id}                             deleteKycSession
+  POST   /kyc-workflows                                 createKycWorkflow
+  GET    /kyc-workflows                                 listKycWorkflows
+  GET    /kyc-workflows/{id}                            getKycWorkflow
+  PUT    /kyc-workflows/{id}                            updateKycWorkflow
+  DELETE /kyc-workflows/{id}                            deleteKycWorkflow
+  GET    /kyc-workflows/step-defaults                   getWorkflowStepDefaults
+  POST   /document-processing                           initiateDocumentProcessing
+  GET    /document-processing                           listDocumentProcessingInstances
+  GET    /document-processing/processors                listDocumentProcessors
+  GET    /document-processing/{id}                      getDocumentProcessingInstance
+  GET    /document-processing/{id}/stages/{stageId}     getDocumentProcessingStage
+  GET    /document-processing/{id}/events               streamDocumentProcessingEvents (SSE)
+  DELETE /document-processing/{id}                      deleteDocumentProcessingInstance
+  POST   /form-templates                                createFormTemplate
+  GET    /form-templates                                listFormTemplates
+  GET    /form-templates/{id}                           getFormTemplate
+  PUT    /form-templates/{id}                           updateFormTemplate
+  DELETE /form-templates/{id}                           deleteFormTemplate
+  GET    /media/{token}                                 getMedia (binary stream)
+*/
+export {};
+//# sourceMappingURL=api.js.map

package/dist/esm/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BE"}

package/dist/esm/error.js

@@ -0,0 +1,25 @@
+/**
+ * Thrown by every SDK method when the Dossiers API returns a non-2xx status.
+ *
+ * @example
+ * ```ts
+ * import { DossiersAPIService, DossiersAPIError } from '@dossier-wiki/cloud-sdk';
+ *
+ * try {
+ *   await service.aml.searchSanctions({ fullName: 'John Doe' });
+ * } catch (err) {
+ *   if (err instanceof DossiersAPIError) {
+ *     console.error(err.status, err.message, err.body);
+ *   }
+ * }
+ * ```
+ */
+export class DossiersAPIError extends Error {
+    constructor(status, message, body) {
+        super(message);
+        this.name = 'DossiersAPIError';
+        this.status = status;
+        this.body = body;
+    }
+}
+//# sourceMappingURL=error.js.map

package/dist/esm/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAMvC,YAAY,MAAc,EAAE,OAAe,EAAE,IAAa;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;CACJ"}