@dossier-wiki/cloud-sdk 0.1.0

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from './types';
+export * from './api';
+export { DossiersWebhookRouter } from './webhooks';
+export { DossiersAPIService, DossiersAPIError, DOSSIERS_API_BASE_URL } from './service';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,OAAO,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC"}

package/dist/service.d.ts

@@ -0,0 +1,39 @@
+import type { CreateKycSessionDTO, CreateKycSessionOutputDTO, CreateScreeningRequestDto, CreateScreeningRequestResponseDto, DeleteSessionOutputDTO, DocumentProcessingDeleteResponse, DocumentProcessingExtractedSchema, DocumentProcessingInstance, DocumentProcessingStageResponse, DocumentProcessorTypeDTO, DossierSearchInput, DossierSearchResponse, InitiateDocumentProcessingInput, KycSessionFiltersDTO, KycSessionOutputDTO, ListDocumentProcessingInstancesQuery, ListDocumentProcessingInstancesResponse, PaginatedKycSessionsDTO, SanctionSearchInput, SanctionSearchResponse } from './api';
+export declare const DOSSIERS_API_BASE_URL = "https://api.dossiers.wiki";
+export interface DossiersAPIServiceOptions {
+    apiKey: string;
+    baseUrl?: string;
+    fetch?: typeof fetch;
+}
+export declare class DossiersAPIError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, message: string, body: unknown);
+}
+export declare class DossiersAPIService {
+    private readonly apiKey;
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    constructor(options: DossiersAPIServiceOptions);
+    searchSanctions(input: SanctionSearchInput): Promise<SanctionSearchResponse>;
+    searchDossiers(input: DossierSearchInput): Promise<DossierSearchResponse>;
+    createScreeningRequest(input: CreateScreeningRequestDto): Promise<CreateScreeningRequestResponseDto>;
+    createKycSession(input: CreateKycSessionDTO): Promise<CreateKycSessionOutputDTO>;
+    listKycSessions(filters?: KycSessionFiltersDTO): Promise<PaginatedKycSessionsDTO>;
+    getKycSession(id: string): Promise<KycSessionOutputDTO>;
+    deleteKycSession(id: string): Promise<DeleteSessionOutputDTO>;
+    initiateDocumentProcessing<TSchema extends DocumentProcessingExtractedSchema = DocumentProcessingExtractedSchema>(input: InitiateDocumentProcessingInput): Promise<DocumentProcessingInstance<TSchema>>;
+    listDocumentProcessingInstances(query?: ListDocumentProcessingInstancesQuery): Promise<ListDocumentProcessingInstancesResponse>;
+    listDocumentProcessors(): Promise<DocumentProcessorTypeDTO[]>;
+    getDocumentProcessingInstance<TSchema extends DocumentProcessingExtractedSchema = DocumentProcessingExtractedSchema>(id: string): Promise<DocumentProcessingInstance<TSchema>>;
+    getDocumentProcessingStage(id: string, stageId: string): Promise<DocumentProcessingStageResponse>;
+    deleteDocumentProcessingInstance(id: string): Promise<DocumentProcessingDeleteResponse>;
+    /**
+     * Server-Sent Events stream for a document processing instance.
+     * Returns the raw `Response` so the caller can consume `response.body`
+     * (a `ReadableStream`) directly.
+     */
+    streamDocumentProcessingEvents(id: string, init?: RequestInit): Promise<Response>;
+    private request;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,iCAAiC,EACjC,sBAAsB,EACtB,gCAAgC,EAChC,iCAAiC,EACjC,0BAA0B,EAC1B,+BAA+B,EAC/B,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EACrB,+BAA+B,EAC/B,oBAAoB,EACpB,mBAAmB,EACnB,oCAAoC,EACpC,uCAAuC,EACvC,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACzB,MAAM,OAAO,CAAC;AAEf,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE,MAAM,WAAW,yBAAyB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,IAAI,EAAE,OAAO,CAAC;gBAElB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO;CAM7D;AAED,qBAAa,kBAAkB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,yBAAyB;IAWvC,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQ5E,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQzE,sBAAsB,CACzB,KAAK,EAAE,yBAAyB,GACjC,OAAO,CAAC,iCAAiC,CAAC;IAUtC,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIhF,eAAe,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAIrF,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIvD,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW7D,0BAA0B,CAC7B,OAAO,SAAS,iCAAiC,GAAG,iCAAiC,EACvF,KAAK,EAAE,+BAA+B,GAAG,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAMhF,+BAA+B,CAClC,KAAK,GAAE,oCAAyC,GACjD,OAAO,CAAC,uCAAuC,CAAC;IAU5C,sBAAsB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAI7D,6BAA6B,CAChC,OAAO,SAAS,iCAAiC,GAAG,iCAAiC,EACvF,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAOpD,0BAA0B,CAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,+BAA+B,CAAC;IAOpC,gCAAgC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gCAAgC,CAAC;IAO9F;;;;OAIG;IACI,8BAA8B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;YAiB1E,OAAO;CA4CxB"}

package/dist/service.js

@@ -0,0 +1,150 @@
+export const DOSSIERS_API_BASE_URL = 'https://api.dossiers.wiki';
+export class DossiersAPIError extends Error {
+    status;
+    body;
+    constructor(status, message, body) {
+        super(message);
+        this.name = 'DossiersAPIError';
+        this.status = status;
+        this.body = body;
+    }
+}
+export class DossiersAPIService {
+    apiKey;
+    baseUrl;
+    fetchImpl;
+    constructor(options) {
+        if (!options.apiKey)
+            throw new Error('DossiersAPIService: apiKey is required');
+        this.apiKey = options.apiKey;
+        this.baseUrl = (options.baseUrl ?? DOSSIERS_API_BASE_URL).replace(/\/$/, '');
+        this.fetchImpl = options.fetch ?? fetch;
+    }
+    // -----------------------------------------------------------------------
+    // Sanctions
+    // -----------------------------------------------------------------------
+    searchSanctions(input) {
+        return this.request('POST', '/sanctions/search', { body: input });
+    }
+    // -----------------------------------------------------------------------
+    // High-risk dossiers
+    // -----------------------------------------------------------------------
+    searchDossiers(input) {
+        return this.request('POST', '/high-risk/search', { body: input });
+    }
+    // -----------------------------------------------------------------------
+    // Screening
+    // -----------------------------------------------------------------------
+    createScreeningRequest(input) {
+        return this.request('POST', '/screening/request', {
+            body: input,
+        });
+    }
+    // -----------------------------------------------------------------------
+    // KYC sessions
+    // -----------------------------------------------------------------------
+    createKycSession(input) {
+        return this.request('POST', '/kyc-sessions', { body: input });
+    }
+    listKycSessions(filters = {}) {
+        return this.request('GET', '/kyc-sessions', { query: filters });
+    }
+    getKycSession(id) {
+        return this.request('GET', `/kyc-sessions/${encodeURIComponent(id)}`);
+    }
+    deleteKycSession(id) {
+        return this.request('DELETE', `/kyc-sessions/${encodeURIComponent(id)}`);
+    }
+    // -----------------------------------------------------------------------
+    // Document processing
+    // -----------------------------------------------------------------------
+    initiateDocumentProcessing(input) {
+        return this.request('POST', '/document-processing', {
+            body: input,
+        });
+    }
+    listDocumentProcessingInstances(query = {}) {
+        return this.request('GET', '/document-processing', {
+            query,
+        });
+    }
+    listDocumentProcessors() {
+        return this.request('GET', '/document-processing/processors');
+    }
+    getDocumentProcessingInstance(id) {
+        return this.request('GET', `/document-processing/${encodeURIComponent(id)}`);
+    }
+    getDocumentProcessingStage(id, stageId) {
+        return this.request('GET', `/document-processing/${encodeURIComponent(id)}/stages/${encodeURIComponent(stageId)}`);
+    }
+    deleteDocumentProcessingInstance(id) {
+        return this.request('DELETE', `/document-processing/${encodeURIComponent(id)}`);
+    }
+    /**
+     * Server-Sent Events stream for a document processing instance.
+     * Returns the raw `Response` so the caller can consume `response.body`
+     * (a `ReadableStream`) directly.
+     */
+    streamDocumentProcessingEvents(id, init) {
+        const url = `${this.baseUrl}/document-processing/${encodeURIComponent(id)}/events`;
+        return this.fetchImpl(url, {
+            ...init,
+            method: 'GET',
+            headers: {
+                ...(init?.headers ?? {}),
+                Authorization: `Bearer ${this.apiKey}`,
+                Accept: 'text/event-stream',
+            },
+        });
+    }
+    // -----------------------------------------------------------------------
+    // Internal
+    // -----------------------------------------------------------------------
+    async request(method, path, opts = {}) {
+        const url = new URL(`${this.baseUrl}${path}`);
+        if (opts.query) {
+            for (const [key, value] of Object.entries(opts.query)) {
+                if (value === undefined || value === null)
+                    continue;
+                if (Array.isArray(value)) {
+                    for (const v of value)
+                        url.searchParams.append(key, String(v));
+                }
+                else if (typeof value === 'object') {
+                    url.searchParams.append(key, JSON.stringify(value));
+                }
+                else {
+                    url.searchParams.append(key, String(value));
+                }
+            }
+        }
+        const headers = {
+            Authorization: `Bearer ${this.apiKey}`,
+            Accept: 'application/json',
+        };
+        let body;
+        if (opts.body !== undefined) {
+            headers['Content-Type'] = 'application/json';
+            body = JSON.stringify(opts.body);
+        }
+        const response = await this.fetchImpl(url.toString(), { method, headers, body });
+        const raw = await response.text();
+        const parsed = raw.length > 0 ? safeJsonParse(raw) : undefined;
+        if (!response.ok) {
+            const message = (parsed && typeof parsed === 'object' && 'message' in parsed
+                ? String(parsed.message)
+                : null) ?? `Dossiers API ${method} ${path} failed: ${response.status}`;
+            throw new DossiersAPIError(response.status, message, parsed ?? raw);
+        }
+        return parsed;
+    }
+}
+function safeJsonParse(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAuBA,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAQjE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACvB,MAAM,CAAS;IACf,IAAI,CAAU;IAE9B,YAAY,MAAc,EAAE,OAAe,EAAE,IAAa;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;CACJ;AAED,MAAM,OAAO,kBAAkB;IACV,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,SAAS,CAAe;IAEzC,YAAY,OAAkC;QAC1C,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAEnE,eAAe,CAAC,KAA0B;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAyB,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,0EAA0E;IAC1E,qBAAqB;IACrB,0EAA0E;IAEnE,cAAc,CAAC,KAAyB;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAwB,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAEnE,sBAAsB,CACzB,KAAgC;QAEhC,OAAO,IAAI,CAAC,OAAO,CAAoC,MAAM,EAAE,oBAAoB,EAAE;YACjF,IAAI,EAAE,KAAK;SACd,CAAC,CAAC;IACP,CAAC;IAED,0EAA0E;IAC1E,eAAe;IACf,0EAA0E;IAEnE,gBAAgB,CAAC,KAA0B;QAC9C,OAAO,IAAI,CAAC,OAAO,CAA4B,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IAEM,eAAe,CAAC,UAAgC,EAAE;QACrD,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7F,CAAC;IAEM,aAAa,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAEM,gBAAgB,CAAC,EAAU;QAC9B,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,EACR,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAC5C,CAAC;IACN,CAAC;IAED,0EAA0E;IAC1E,sBAAsB;IACtB,0EAA0E;IAEnE,0BAA0B,CAE/B,KAAsC;QACpC,OAAO,IAAI,CAAC,OAAO,CAAsC,MAAM,EAAE,sBAAsB,EAAE;YACrF,IAAI,EAAE,KAAK;SACd,CAAC,CAAC;IACP,CAAC;IAEM,+BAA+B,CAClC,QAA8C,EAAE;QAEhD,OAAO,IAAI,CAAC,OAAO,CACf,KAAK,EACL,sBAAsB,EACtB;YACI,KAAK;SACR,CACJ,CAAC;IACN,CAAC;IAEM,sBAAsB;QACzB,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAC9F,CAAC;IAEM,6BAA6B,CAElC,EAAU;QACR,OAAO,IAAI,CAAC,OAAO,CACf,KAAK,EACL,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACnD,CAAC;IACN,CAAC;IAEM,0BAA0B,CAC7B,EAAU,EACV,OAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CACf,KAAK,EACL,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CACzF,CAAC;IACN,CAAC;IAEM,gCAAgC,CAAC,EAAU;QAC9C,OAAO,IAAI,CAAC,OAAO,CACf,QAAQ,EACR,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACnD,CAAC;IACN,CAAC;IAED;;;;OAIG;IACI,8BAA8B,CAAC,EAAU,EAAE,IAAkB;QAChE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,wBAAwB,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC;QACnF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,GAAG,IAAI;YACP,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACL,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;gBACxB,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,MAAM,EAAE,mBAAmB;aAC9B;SACJ,CAAC,CAAC;IACP,CAAC;IAED,0EAA0E;IAC1E,WAAW;IACX,0EAA0E;IAElE,KAAK,CAAC,OAAO,CACjB,MAAiC,EACjC,IAAY,EACZ,OAAqE,EAAE;QAEvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC/E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS;gBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,KAAK,MAAM,CAAC,IAAI,KAAK;wBAAE,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnE,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACnC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxD,CAAC;qBAAM,CAAC;oBACJ,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChD,CAAC;YACL,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAA2B;YACpC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;YACtC,MAAM,EAAE,kBAAkB;SAC7B,CAAC;QACF,IAAI,IAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,MAAM,GAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,OAAO,GACT,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;gBACxD,CAAC,CAAC,MAAM,CAAE,MAA+B,CAAC,OAAO,CAAC;gBAClD,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,MAAM,IAAI,IAAI,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/E,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAW,CAAC;IACvB,CAAC;CACJ;AAED,SAAS,aAAa,CAAC,GAAW;IAC9B,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,GAAG,CAAC;IACf,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,101 @@
+export declare enum DossiersWebhookEventTypes {
+    DOCUMENT_VERIFICATION_INSTANCE_CREATED = "documentVerification.instance.created",
+    DOCUMENT_VERIFICATION_INSTANCE_UPDATED = "documentVerification.instance.updated",
+    DOCUMENT_VERIFICATION_INSTANCE_COMPLETED = "documentVerification.instance.completed",
+    DOCUMENT_VERIFICATION_INSTANCE_DELETED = "documentVerification.instance.deleted",
+    AML_SCREENING_REQUEST_CREATED = "amlScreening.screeningRequest.created",
+    AML_SCREENING_REQUEST_COMPLETED = "amlScreening.screeningRequest.completed",
+    AML_SCREENING_ALERT_TRIGGERED = "amlScreening.screeningAlert.triggered",
+    AML_SCREENING_ALERT_STATUS_CHANGED = "amlScreening.screeningAlert.statusChanged",
+    AML_SCREENING_ALERT_COMMENT_ADDED = "amlScreening.screeningAlert.commentAdded",
+    AML_SCREENING_ALERT_COMMENT_DELETED = "amlScreening.screeningAlert.commentDeleted",
+    AML_SCREENING_ALERT_DELETED = "amlScreening.screeningAlert.deleted",
+    SYSTEM_TEST_EVENT = "system.testEvent",
+    SYSTEM_PRODUCT_ACCESS_GRANTED = "system.product.accessGranted",
+    SYSTEM_PRODUCT_ACCESS_REVOKED = "system.product.accessRevoked",
+    SYSTEM_API_KEY_CREATED = "system.apiKey.created",
+    SYSTEM_API_KEY_INVALIDATED = "system.apiKey.invalidated",
+    SYSTEM_USAGE_LIMIT_REACHED = "system.usage.limitReached",
+    SYSTEM_USAGE_LIMIT_WARNING = "system.usage.limitWarning"
+}
+export interface DossiersWebhookContext {
+    eventId: string | null;
+    retryCount: string | null;
+}
+export interface DossiersWebhookEvent<TType extends DossiersWebhookEventTypes = DossiersWebhookEventTypes, TData = unknown> {
+    id: string;
+    type: TType;
+    organizationId: string;
+    createdAt: string;
+    data: TData;
+}
+export type DocumentVerificationInstanceStatus = 'pending' | 'running' | 'completed' | 'failed' | 'error';
+export type DocumentVerificationStageStatus = 'pending' | 'running' | 'success' | 'failed';
+export interface DocumentVerificationStageProgress {
+    stageId: string;
+    label: string;
+    status: DocumentVerificationStageStatus;
+}
+export interface DocumentVerificationInstanceCreatedData {
+    processorId: string;
+    documentProcessorInstanceId: string;
+}
+export interface DocumentVerificationInstanceUpdatedData {
+    processorId: string;
+    documentProcessorInstanceId: string;
+    status: DocumentVerificationInstanceStatus;
+    statusLabel: string;
+    stageProgress: DocumentVerificationStageProgress[];
+    error: string | null;
+}
+/** Fires when processing finishes successfully — terminal variant of the updated event. */
+export interface DocumentVerificationInstanceCompletedData {
+    processorId: string;
+    documentProcessorInstanceId: string;
+    status: DocumentVerificationInstanceStatus;
+    statusLabel: string;
+    stageProgress: DocumentVerificationStageProgress[];
+    error: string | null;
+}
+export interface DocumentVerificationInstanceDeletedData {
+    deletedDocumentProcessorInstanceId: string;
+}
+export type AmlScreeningRequestCreatedData = Record<string, unknown>;
+export type AmlScreeningRequestCompletedData = Record<string, unknown>;
+export type AmlScreeningAlertTriggeredData = Record<string, unknown>;
+export type AmlScreeningAlertStatusChangedData = Record<string, unknown>;
+export type AmlScreeningAlertCommentAddedData = Record<string, unknown>;
+export type AmlScreeningAlertCommentDeletedData = Record<string, unknown>;
+export type AmlScreeningAlertDeletedData = Record<string, unknown>;
+export type SystemTestEventData = Record<string, unknown>;
+export type SystemProductAccessGrantedData = Record<string, unknown>;
+export type SystemProductAccessRevokedData = Record<string, unknown>;
+export type SystemApiKeyCreatedData = Record<string, unknown>;
+export type SystemApiKeyInvalidatedData = Record<string, unknown>;
+export type SystemUsageLimitReachedData = Record<string, unknown>;
+export type SystemUsageLimitWarningData = Record<string, unknown>;
+export interface DossiersWebhookEventDataMap {
+    [DossiersWebhookEventTypes.DOCUMENT_VERIFICATION_INSTANCE_CREATED]: DocumentVerificationInstanceCreatedData;
+    [DossiersWebhookEventTypes.DOCUMENT_VERIFICATION_INSTANCE_UPDATED]: DocumentVerificationInstanceUpdatedData;
+    [DossiersWebhookEventTypes.DOCUMENT_VERIFICATION_INSTANCE_COMPLETED]: DocumentVerificationInstanceCompletedData;
+    [DossiersWebhookEventTypes.DOCUMENT_VERIFICATION_INSTANCE_DELETED]: DocumentVerificationInstanceDeletedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_REQUEST_CREATED]: AmlScreeningRequestCreatedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_REQUEST_COMPLETED]: AmlScreeningRequestCompletedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_ALERT_TRIGGERED]: AmlScreeningAlertTriggeredData;
+    [DossiersWebhookEventTypes.AML_SCREENING_ALERT_STATUS_CHANGED]: AmlScreeningAlertStatusChangedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_ALERT_COMMENT_ADDED]: AmlScreeningAlertCommentAddedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_ALERT_COMMENT_DELETED]: AmlScreeningAlertCommentDeletedData;
+    [DossiersWebhookEventTypes.AML_SCREENING_ALERT_DELETED]: AmlScreeningAlertDeletedData;
+    [DossiersWebhookEventTypes.SYSTEM_TEST_EVENT]: SystemTestEventData;
+    [DossiersWebhookEventTypes.SYSTEM_PRODUCT_ACCESS_GRANTED]: SystemProductAccessGrantedData;
+    [DossiersWebhookEventTypes.SYSTEM_PRODUCT_ACCESS_REVOKED]: SystemProductAccessRevokedData;
+    [DossiersWebhookEventTypes.SYSTEM_API_KEY_CREATED]: SystemApiKeyCreatedData;
+    [DossiersWebhookEventTypes.SYSTEM_API_KEY_INVALIDATED]: SystemApiKeyInvalidatedData;
+    [DossiersWebhookEventTypes.SYSTEM_USAGE_LIMIT_REACHED]: SystemUsageLimitReachedData;
+    [DossiersWebhookEventTypes.SYSTEM_USAGE_LIMIT_WARNING]: SystemUsageLimitWarningData;
+}
+export type DossiersWebhookEventDataFor<T extends DossiersWebhookEventTypes> = DossiersWebhookEventDataMap[T];
+export type DossiersWebhookPayload = {
+    [T in DossiersWebhookEventTypes]: DossiersWebhookEvent<T, DossiersWebhookEventDataMap[T]>;
+}[DossiersWebhookEventTypes];
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA4BA,oBAAY,yBAAyB;IACjC,sCAAsC,0CAA0C;IAChF,sCAAsC,0CAA0C;IAChF,wCAAwC,4CAA4C;IACpF,sCAAsC,0CAA0C;IAEhF,6BAA6B,0CAA0C;IACvE,+BAA+B,4CAA4C;IAC3E,6BAA6B,0CAA0C;IACvE,kCAAkC,8CAA8C;IAChF,iCAAiC,6CAA6C;IAC9E,mCAAmC,+CAA+C;IAClF,2BAA2B,wCAAwC;IAEnE,iBAAiB,qBAAqB;IACtC,6BAA6B,iCAAiC;IAC9D,6BAA6B,iCAAiC;IAC9D,sBAAsB,0BAA0B;IAChD,0BAA0B,8BAA8B;IACxD,0BAA0B,8BAA8B;IACxD,0BAA0B,8BAA8B;CAC3D;AAED,MAAM,WAAW,sBAAsB;IACnC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAMD,MAAM,WAAW,oBAAoB,CACjC,KAAK,SAAS,yBAAyB,GAAG,yBAAyB,EACnE,KAAK,GAAG,OAAO;IAEf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,KAAK,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,CAAC;CACf;AAMD,MAAM,MAAM,kCAAkC,GACxC,SAAS,GACT,SAAS,GACT,WAAW,GACX,QAAQ,GACR,OAAO,CAAC;AAEd,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3F,MAAM,WAAW,iCAAiC;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,+BAA+B,CAAC;CAC3C;AAED,MAAM,WAAW,uCAAuC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,uCAAuC;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,MAAM,EAAE,kCAAkC,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,iCAAiC,EAAE,CAAC;IACnD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,2FAA2F;AAC3F,MAAM,WAAW,yCAAyC;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B,EAAE,MAAM,CAAC;IACpC,MAAM,EAAE,kCAAkC,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,iCAAiC,EAAE,CAAC;IACnD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,uCAAuC;IACpD,kCAAkC,EAAE,MAAM,CAAC;CAC9C;AAUD,MAAM,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrE,MAAM,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACvE,MAAM,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrE,MAAM,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACzE,MAAM,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACxE,MAAM,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1E,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAMnE,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1D,MAAM,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrE,MAAM,MAAM,8BAA8B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrE,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC9D,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClE,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAClE,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAMlE,MAAM,WAAW,2BAA2B;IACxC,CAAC,yBAAyB,CAAC,sCAAsC,CAAC,EAAE,uCAAuC,CAAC;IAC5G,CAAC,yBAAyB,CAAC,sCAAsC,CAAC,EAAE,uCAAuC,CAAC;IAC5G,CAAC,yBAAyB,CAAC,wCAAwC,CAAC,EAAE,yCAAyC,CAAC;IAChH,CAAC,yBAAyB,CAAC,sCAAsC,CAAC,EAAE,uCAAuC,CAAC;IAE5G,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B,CAAC;IAC1F,CAAC,yBAAyB,CAAC,+BAA+B,CAAC,EAAE,gCAAgC,CAAC;IAC9F,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B,CAAC;IAC1F,CAAC,yBAAyB,CAAC,kCAAkC,CAAC,EAAE,kCAAkC,CAAC;IACnG,CAAC,yBAAyB,CAAC,iCAAiC,CAAC,EAAE,iCAAiC,CAAC;IACjG,CAAC,yBAAyB,CAAC,mCAAmC,CAAC,EAAE,mCAAmC,CAAC;IACrG,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,EAAE,4BAA4B,CAAC;IAEtF,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACnE,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B,CAAC;IAC1F,CAAC,yBAAyB,CAAC,6BAA6B,CAAC,EAAE,8BAA8B,CAAC;IAC1F,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,EAAE,uBAAuB,CAAC;IAC5E,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,EAAE,2BAA2B,CAAC;IACpF,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,EAAE,2BAA2B,CAAC;IACpF,CAAC,yBAAyB,CAAC,0BAA0B,CAAC,EAAE,2BAA2B,CAAC;CACvF;AAED,MAAM,MAAM,2BAA2B,CAAC,CAAC,SAAS,yBAAyB,IACvE,2BAA2B,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,MAAM,sBAAsB,GAAG;KAChC,CAAC,IAAI,yBAAyB,GAAG,oBAAoB,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC,CAAC;CAC5F,CAAC,yBAAyB,CAAC,CAAC"}

package/dist/types.js

@@ -0,0 +1,49 @@
+/*
+WEBHOOK EVENTS (https://docs.dossiers.wiki/webhooks):
+
+// document verification
+documentVerification.instance.created     A new processing instance has been created
+documentVerification.instance.updated     The instance status or result has changed
+documentVerification.instance.completed   Processing finished successfully (terminal updated)
+documentVerification.instance.deleted     The instance has been deleted
+
+// aml screening
+amlScreening.screeningRequest.created       Screening request submitted
+amlScreening.screeningRequest.completed     Screening finished
+amlScreening.screeningAlert.triggered       High-risk match found
+amlScreening.screeningAlert.statusChanged   Alert status updated
+amlScreening.screeningAlert.commentAdded    Comment added to an alert
+amlScreening.screeningAlert.commentDeleted  Comment removed from an alert
+amlScreening.screeningAlert.deleted         Alert deleted
+
+// system
+system.testEvent                Test event for verifying webhook connectivity
+system.product.accessGranted    Product enabled for the organization
+system.product.accessRevoked    Product disabled for the organization
+system.apiKey.created           API key created
+system.apiKey.invalidated       API key revoked
+system.usage.limitReached       Credit limit reached
+system.usage.limitWarning       Approaching credit limit
+*/
+export var DossiersWebhookEventTypes;
+(function (DossiersWebhookEventTypes) {
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_CREATED"] = "documentVerification.instance.created";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_UPDATED"] = "documentVerification.instance.updated";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_COMPLETED"] = "documentVerification.instance.completed";
+    DossiersWebhookEventTypes["DOCUMENT_VERIFICATION_INSTANCE_DELETED"] = "documentVerification.instance.deleted";
+    DossiersWebhookEventTypes["AML_SCREENING_REQUEST_CREATED"] = "amlScreening.screeningRequest.created";
+    DossiersWebhookEventTypes["AML_SCREENING_REQUEST_COMPLETED"] = "amlScreening.screeningRequest.completed";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_TRIGGERED"] = "amlScreening.screeningAlert.triggered";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_STATUS_CHANGED"] = "amlScreening.screeningAlert.statusChanged";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_COMMENT_ADDED"] = "amlScreening.screeningAlert.commentAdded";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_COMMENT_DELETED"] = "amlScreening.screeningAlert.commentDeleted";
+    DossiersWebhookEventTypes["AML_SCREENING_ALERT_DELETED"] = "amlScreening.screeningAlert.deleted";
+    DossiersWebhookEventTypes["SYSTEM_TEST_EVENT"] = "system.testEvent";
+    DossiersWebhookEventTypes["SYSTEM_PRODUCT_ACCESS_GRANTED"] = "system.product.accessGranted";
+    DossiersWebhookEventTypes["SYSTEM_PRODUCT_ACCESS_REVOKED"] = "system.product.accessRevoked";
+    DossiersWebhookEventTypes["SYSTEM_API_KEY_CREATED"] = "system.apiKey.created";
+    DossiersWebhookEventTypes["SYSTEM_API_KEY_INVALIDATED"] = "system.apiKey.invalidated";
+    DossiersWebhookEventTypes["SYSTEM_USAGE_LIMIT_REACHED"] = "system.usage.limitReached";
+    DossiersWebhookEventTypes["SYSTEM_USAGE_LIMIT_WARNING"] = "system.usage.limitWarning";
+})(DossiersWebhookEventTypes || (DossiersWebhookEventTypes = {}));
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BE;AAEF,MAAM,CAAN,IAAY,yBAqBX;AArBD,WAAY,yBAAyB;IACjC,6GAAgF,CAAA;IAChF,6GAAgF,CAAA;IAChF,iHAAoF,CAAA;IACpF,6GAAgF,CAAA;IAEhF,oGAAuE,CAAA;IACvE,wGAA2E,CAAA;IAC3E,oGAAuE,CAAA;IACvE,6GAAgF,CAAA;IAChF,2GAA8E,CAAA;IAC9E,+GAAkF,CAAA;IAClF,gGAAmE,CAAA;IAEnE,mEAAsC,CAAA;IACtC,2FAA8D,CAAA;IAC9D,2FAA8D,CAAA;IAC9D,6EAAgD,CAAA;IAChD,qFAAwD,CAAA;IACxD,qFAAwD,CAAA;IACxD,qFAAwD,CAAA;AAC5D,CAAC,EArBW,yBAAyB,KAAzB,yBAAyB,QAqBpC"}

package/dist/webhooks.d.ts

@@ -0,0 +1,34 @@
+import type { DossiersWebhookContext, DossiersWebhookEvent, DossiersWebhookEventDataFor } from './types';
+import { DossiersWebhookEventTypes } from './types';
+export type DossiersWebhookHandler<T extends DossiersWebhookEventTypes = DossiersWebhookEventTypes> = (body: DossiersWebhookEvent<T, DossiersWebhookEventDataFor<T>>, ctx: DossiersWebhookContext) => Promise<void> | void;
+export declare class DossiersWebhookRouter {
+    private static readonly encoder;
+    private static readonly SIGNATURE_HEADER;
+    private static readonly EVENT_ID_HEADER;
+    private static readonly EVENT_TYPE_HEADER;
+    private static readonly RETRY_COUNT_HEADER;
+    private keyPromise;
+    private handlers;
+    constructor(secret: string);
+    on<T extends DossiersWebhookEventTypes>(eventType: T, handler: DossiersWebhookHandler<T>): this;
+    /**
+     * Verify the signature and acknowledge the webhook with `200 ok` *before*
+     * the handler runs. The handler is dispatched asynchronously so a slow
+     * downstream call cannot cause Dossiers to time out the webhook and retry.
+     *
+     * Trade-off: because we ack before the handler executes, a handler that
+     * throws will NOT trigger an automatic Dossiers retry — you own retries
+     * inside the handler. Failures are logged via `console.error`.
+     *
+     * On serverless runtimes that freeze execution after the response is sent
+     * (Vercel Functions, Cloudflare Workers), pass `opts.waitUntil` so the
+     * runtime keeps the handler alive past the response.
+     */
+    handle(req: Request, opts?: {
+        waitUntil?: (promise: Promise<unknown>) => void;
+    }): Promise<Response>;
+    private verify;
+    private verifyHmacSha256;
+    private static timingSafeEqual;
+}
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC9B,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEpD,MAAM,MAAM,sBAAsB,CAC9B,CAAC,SAAS,yBAAyB,GAAG,yBAAyB,IAC/D,CACA,IAAI,EAAE,oBAAoB,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAC7D,GAAG,EAAE,sBAAsB,KAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAE1B,qBAAa,qBAAqB;IAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAqB;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IACjE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAwB;IAC/D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAA2B;IAErE,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,QAAQ,CAGZ;gBAEQ,MAAM,EAAE,MAAM;IAUnB,EAAE,CAAC,CAAC,SAAS,yBAAyB,EACzC,SAAS,EAAE,CAAC,EACZ,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC,GACnC,IAAI;IAKP;;;;;;;;;;;;OAYG;IACU,MAAM,CACf,GAAG,EAAE,OAAO,EACZ,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;KAAO,GAC/D,OAAO,CAAC,QAAQ,CAAC;YAgDN,MAAM;YAQN,gBAAgB;IAc9B,OAAO,CAAC,MAAM,CAAC,eAAe;CAQjC"}

package/dist/webhooks.js

@@ -0,0 +1,90 @@
+import { DossiersWebhookEventTypes } from './types';
+export class DossiersWebhookRouter {
+    static encoder = new TextEncoder();
+    static SIGNATURE_HEADER = 'x-webhook-signature';
+    static EVENT_ID_HEADER = 'x-webhook-event-id';
+    static EVENT_TYPE_HEADER = 'x-webhook-event-type';
+    static RETRY_COUNT_HEADER = 'x-webhook-retry-count';
+    keyPromise;
+    handlers = new Map();
+    constructor(secret) {
+        this.keyPromise = crypto.subtle.importKey('raw', DossiersWebhookRouter.encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    }
+    on(eventType, handler) {
+        this.handlers.set(eventType, handler);
+        return this;
+    }
+    /**
+     * Verify the signature and acknowledge the webhook with `200 ok` *before*
+     * the handler runs. The handler is dispatched asynchronously so a slow
+     * downstream call cannot cause Dossiers to time out the webhook and retry.
+     *
+     * Trade-off: because we ack before the handler executes, a handler that
+     * throws will NOT trigger an automatic Dossiers retry — you own retries
+     * inside the handler. Failures are logged via `console.error`.
+     *
+     * On serverless runtimes that freeze execution after the response is sent
+     * (Vercel Functions, Cloudflare Workers), pass `opts.waitUntil` so the
+     * runtime keeps the handler alive past the response.
+     */
+    async handle(req, opts = {}) {
+        const { valid, raw } = await this.verify(req);
+        if (!valid)
+            return new Response('Invalid signature', { status: 401 });
+        const eventId = req.headers.get(DossiersWebhookRouter.EVENT_ID_HEADER);
+        const eventType = req.headers.get(DossiersWebhookRouter.EVENT_TYPE_HEADER);
+        const retryCount = req.headers.get(DossiersWebhookRouter.RETRY_COUNT_HEADER);
+        console.log(`Event ID: ${eventId}, Event Type: ${eventType}, Retry Count: ${retryCount}`);
+        if (!eventType ||
+            !Object.values(DossiersWebhookEventTypes).includes(eventType)) {
+            console.error('Invalid event type', eventType);
+            return new Response('Invalid event type', { status: 400 });
+        }
+        const handler = this.handlers.get(eventType);
+        if (!handler)
+            return new Response('ok');
+        let body;
+        try {
+            body = JSON.parse(raw);
+        }
+        catch (error) {
+            console.error('Webhook body is not valid JSON', error);
+            return new Response('Invalid body', { status: 400 });
+        }
+        const work = Promise.resolve()
+            .then(() => handler(body, { eventId, retryCount }))
+            .catch((error) => {
+            console.error(`Webhook handler for ${eventType} (event ${eventId ?? 'unknown'}) failed`, error);
+        });
+        if (opts.waitUntil)
+            opts.waitUntil(work);
+        return new Response('ok');
+    }
+    async verify(req) {
+        const raw = await req.text();
+        const signature = req.headers.get(DossiersWebhookRouter.SIGNATURE_HEADER);
+        if (!signature)
+            return { valid: false, raw };
+        const valid = await this.verifyHmacSha256(raw, signature);
+        return { valid, raw };
+    }
+    async verifyHmacSha256(payload, signature) {
+        const key = await this.keyPromise;
+        const sigBuf = await crypto.subtle.sign('HMAC', key, DossiersWebhookRouter.encoder.encode(payload));
+        const expected = Array.from(new Uint8Array(sigBuf))
+            .map((b) => b.toString(16).padStart(2, '0'))
+            .join('');
+        const provided = signature.replace(/^sha256=/, '').toLowerCase();
+        return DossiersWebhookRouter.timingSafeEqual(expected, provided);
+    }
+    static timingSafeEqual(a, b) {
+        if (a.length !== b.length)
+            return false;
+        let mismatch = 0;
+        for (let i = 0; i < a.length; i++) {
+            mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+        }
+        return mismatch === 0;
+    }
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AASpD,MAAM,OAAO,qBAAqB;IACtB,MAAM,CAAU,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAC5C,MAAM,CAAU,gBAAgB,GAAG,qBAAqB,CAAC;IACzD,MAAM,CAAU,eAAe,GAAG,oBAAoB,CAAC;IACvD,MAAM,CAAU,iBAAiB,GAAG,sBAAsB,CAAC;IAC3D,MAAM,CAAU,kBAAkB,GAAG,uBAAuB,CAAC;IAE7D,UAAU,CAAqB;IAC/B,QAAQ,GAAG,IAAI,GAAG,EAGvB,CAAC;IAEJ,YAAY,MAAc;QACtB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CACrC,KAAK,EACL,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACX,CAAC;IACN,CAAC;IAEM,EAAE,CACL,SAAY,EACZ,OAAkC;QAElC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAA4D,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,MAAM,CACf,GAAY,EACZ,OAA4D,EAAE;QAE9D,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAE7E,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,iBAAiB,SAAS,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAE1F,IACI,CAAC,SAAS;YACV,CAAE,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC7E,CAAC;YACC,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YAC/C,OAAO,IAAI,QAAQ,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAsC,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE;aACzB,IAAI,CAAC,GAAG,EAAE,CACP,OAAO,CACH,IAAwE,EACxE,EAAE,OAAO,EAAE,UAAU,EAAE,CAC1B,CACJ;aACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CACT,uBAAuB,SAAS,WAAW,OAAO,IAAI,SAAS,UAAU,EACzE,KAAK,CACR,CAAC;QACN,CAAC,CAAC,CAAC;QAEP,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAEzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAY;QAC7B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,SAAiB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACnC,MAAM,EACN,GAAG,EACH,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAChD,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjE,OAAO,qBAAqB,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,eAAe,CAAC,CAAS,EAAE,CAAS;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,QAAQ,KAAK,CAAC,CAAC;IAC1B,CAAC"}

package/docs/REFERENCE.md

@@ -0,0 +1,114 @@
+# `@dossier-wiki/cloud-sdk` reference
+
+All methods on `DossiersAPIService` return a `Promise` and throw `DossiersAPIError` on non-2xx responses.
+
+## `DossiersAPIService`
+
+### Construction
+
+```ts
+new DossiersAPIService({ apiKey, baseUrl?, fetch? })
+```
+
+| Option | Type | Default | Notes |
+| --- | --- | --- | --- |
+| `apiKey` | `string` | — | Required. Bearer token sent on every request. |
+| `baseUrl` | `string` | `https://api.dossiers.wiki` | Override for self-hosted or staging. |
+| `fetch` | `typeof fetch` | global `fetch` | Inject for testing or custom transports. |
+
+### Sanctions
+
+| Method | Endpoint |
+| --- | --- |
+| `searchSanctions(input)` | `POST /sanctions/search` |
+
+### High-risk dossiers
+
+| Method | Endpoint |
+| --- | --- |
+| `searchDossiers(input)` | `POST /high-risk/search` |
+
+### Screening
+
+| Method | Endpoint |
+| --- | --- |
+| `createScreeningRequest(input)` | `POST /screening/request` |
+
+### KYC sessions
+
+| Method | Endpoint |
+| --- | --- |
+| `createKycSession(input)` | `POST /kyc-sessions` |
+| `listKycSessions(filters?)` | `GET /kyc-sessions` |
+| `getKycSession(id)` | `GET /kyc-sessions/{id}` |
+| `deleteKycSession(id)` | `DELETE /kyc-sessions/{id}` |
+
+### Document processing
+
+| Method | Endpoint |
+| --- | --- |
+| `initiateDocumentProcessing(input)` | `POST /document-processing` |
+| `listDocumentProcessingInstances(query?)` | `GET /document-processing` |
+| `listDocumentProcessors()` | `GET /document-processing/processors` |
+| `getDocumentProcessingInstance(id)` | `GET /document-processing/{id}` |
+| `getDocumentProcessingStage(id, stageId)` | `GET /document-processing/{id}/stages/{stageId}` |
+| `deleteDocumentProcessingInstance(id)` | `DELETE /document-processing/{id}` |
+| `streamDocumentProcessingEvents(id, init?)` | `GET /document-processing/{id}/events` (SSE — returns raw `Response`) |
+
+`initiateDocumentProcessing` and `getDocumentProcessingInstance` accept a generic schema parameter so you can type the extracted fields:
+
+```ts
+type SriLankaIdSchema = { fullName: string; nic: string; /* ... */ };
+
+const instance = await dossiers
+    .initiateDocumentProcessing<SriLankaIdSchema>({ /* ... */ });
+
+instance.result?.extracted.fullName; // typed
+```
+
+## `DossiersWebhookRouter`
+
+```ts
+new DossiersWebhookRouter(secret: string)
+```
+
+| Method | Description |
+| --- | --- |
+| `on(eventType, handler)` | Register a handler for a `DossiersWebhookEventTypes` value. Last registration wins. Returns `this` for chaining. |
+| `handle(req, opts?)` | Verify the HMAC signature, parse the body, **acknowledge with `200 ok` immediately**, and dispatch the handler asynchronously. Pass `opts.waitUntil` on serverless runtimes that freeze after the response (Vercel Functions, Cloudflare Workers). |
+
+Because the response is sent before the handler runs, a thrown handler **does not** trigger an automatic Dossiers retry — failures are logged via `console.error`. If you need at-least-once semantics, persist the event inside the handler before doing the work.
+
+### Headers consumed
+
+| Header | Purpose |
+| --- | --- |
+| `x-webhook-signature` | HMAC-SHA256 of the raw body, hex-encoded. May be prefixed with `sha256=`. |
+| `x-webhook-event-id` | Forwarded to handlers via the `ctx` argument. |
+| `x-webhook-event-type` | Selects the handler. |
+| `x-webhook-retry-count` | Forwarded to handlers via `ctx`. |
+
+### Status codes
+
+| Outcome | Status |
+| --- | --- |
+| Signature missing or invalid | `401` |
+| Body is not valid JSON | `400` |
+| Unknown event type | `400` |
+| No handler registered | `200 ok` |
+| Valid event (handler runs asynchronously) | `200 ok` |
+
+### Event types
+
+The `DossiersWebhookEventTypes` enum and the payload types are re-exported from the package root. See `types.ts` for the full list — each event has a strongly-typed `data` payload via `DossiersWebhookEventDataFor<T>`.
+
+## Errors
+
+```ts
+class DossiersAPIError extends Error {
+    status: number;     // HTTP status
+    body: unknown;      // parsed JSON, or raw text if not JSON
+}
+```
+
+Use `instanceof DossiersAPIError` to distinguish API errors from network errors (which surface as the underlying `fetch` rejection).