@invonetwork/web-sdk 0.5.0 → 0.7.0

package/dist/index.cjs

@@ -19,6 +19,14 @@ var InvoError = class _InvoError extends Error {
   get isTokenExpired() {
     return this.code === "SDK_TOKEN_EXPIRED";
   }
+  /** True if `enrollPasskey()` needs the OTP-grant flow (`enrollmentBegin`/`enrollmentVerify`). */
+  get isEnrollmentAuthorizationRequired() {
+    return this.code === "ENROLLMENT_REQUIRES_AUTHORIZATION";
+  }
+  /** True if enrolling is blocked because another method exists — use `linkDevice`. */
+  get isEnrollmentProofRequired() {
+    return this.code === "ENROLLMENT_REQUIRES_PROOF";
+  }
   /**
    * True if an item purchase failed because the player's balance was too low (§4.8 → 400).
    * The backend carries `required_amount` + `current_balance` on the body for the UI.
@@ -332,6 +340,44 @@ function assertionToJSON(cred) {
 }
 
 // src/index.ts
+function toPendingCollectItem(row) {
+  return {
+    transferId: String(row["transfer_id"] ?? ""),
+    kind: String(row["kind"] ?? ""),
+    flow: String(row["flow"] ?? ""),
+    amount: row["amount"] ?? null,
+    currency: String(row["currency"] ?? ""),
+    counterpartyGame: String(row["counterparty_game"] ?? ""),
+    expiresAt: row["expires_at"] ?? null,
+    stepUpRequired: row["step_up_required"] === true,
+    held: row["held"] === true,
+    holdReason: row["hold_reason"] ?? null,
+    raw: row
+  };
+}
+function toDestinationGame(row) {
+  const s = (k) => row[k] === void 0 || row[k] === null ? void 0 : String(row[k]);
+  return {
+    gameId: row["game_id"] ?? "",
+    gameName: String(row["game_name"] ?? ""),
+    tenantType: s("tenant_type"),
+    developerName: s("developer_name"),
+    publisherName: s("publisher_name"),
+    genre: s("genre"),
+    platform: s("platform"),
+    gameStatus: s("game_status"),
+    gameIcon: s("game_icon"),
+    gamePoster: s("game_poster"),
+    gameUrl: s("game_url"),
+    gameDescription: s("game_description"),
+    currencyName: String(row["currency_name"] ?? ""),
+    currencySymbol: String(row["currency_symbol"] ?? ""),
+    currencySymbolUrl: s("currency_symbol_url"),
+    minimumTransfer: String(row["minimum_transfer"] ?? ""),
+    maximumTransfer: String(row["maximum_transfer"] ?? ""),
+    raw: row
+  };
+}
 var InvoClient = class {
   constructor(config) {
     if (!config.token) throw new Error("InvoClient requires a player `token`.");
@@ -424,12 +470,95 @@ var InvoClient = class {
       return { status: String(raw["status"] ?? ""), raw };
     });
   }
+  /**
+   * List the player's own pending items to collect (browser, player-token). Each row's
+   * `kind` tells you which action to call: `"identity_gate"` → `approve*` (you initiated);
+   * `"receiving_confirm"` → `confirmReceipt*` (a peer sent to you). PII-free — no claim
+   * code or phone (those are only on the server-side `getInboundPending`).
+   */
+  async getPendingCollect(opts) {
+    return this.withTokenRetry(async () => {
+      const raw = await this.get(
+        "/api/sdk/transfers/pending",
+        opts?.signal
+      );
+      const rows = Array.isArray(raw["pending"]) ? raw["pending"] : [];
+      return { pending: rows.map(toPendingCollectItem), raw };
+    });
+  }
+  /**
+   * List the games/tenants this player can send/transfer to, with display metadata
+   * inline (name, icon, currency, min/max limits) — one call, no per-game lookup.
+   * Source game is the token's own game. Player-token (browser).
+   */
+  async getDestinations(query, opts) {
+    const direction = query?.direction ?? "transfer";
+    return this.withTokenRetry(async () => {
+      const raw = await this.get(
+        `/api/sdk/destinations?direction=${encodeURIComponent(direction)}`,
+        opts?.signal
+      );
+      const games = Array.isArray(raw["available_games"]) ? raw["available_games"] : [];
+      return {
+        status: String(raw["status"] ?? ""),
+        sourceGameId: raw["source_game_id"] ?? "",
+        sourceGameName: String(raw["source_game_name"] ?? ""),
+        sourceGameIcon: raw["source_game_icon"],
+        sourceCurrencyName: String(raw["source_currency_name"] ?? ""),
+        sourceCurrencyIcon: raw["source_currency_icon"],
+        universalTransfers: raw["universal_transfers"] === true,
+        transferMode: String(raw["transfer_mode"] ?? ""),
+        availableGames: games.map(toDestinationGame),
+        totalDestinations: Number(raw["total_destinations"] ?? games.length),
+        direction: String(raw["direction"] ?? direction),
+        linkedGameIds: Array.isArray(raw["linked_game_ids"]) ? raw["linked_game_ids"] : void 0,
+        raw
+      };
+    });
+  }
+  /**
+   * First-enrollment OTP grant (§4.2). When `enrollPasskey()` throws
+   * `ENROLLMENT_REQUIRES_AUTHORIZATION` (`err.isEnrollmentAuthorizationRequired`), call
+   * this to send a 6-digit code to the player's phone + email on file, collect the code,
+   * call `enrollmentVerify(code)`, then RETRY the SAME `enrollPasskey()` —
+   * `register/complete` auto-consumes the server-side grant (30-min TTL). For
+   * `ENROLLMENT_REQUIRES_PROOF` (`err.isEnrollmentProofRequired`) use `linkDevice` instead.
+   */
+  async enrollmentBegin(opts) {
+    return this.withTokenRetry(async () => {
+      const raw = await this.post(
+        "/api/sdk/device/enrollment/begin",
+        void 0,
+        opts?.signal
+      );
+      return {
+        status: String(raw["status"] ?? ""),
+        channels: Array.isArray(raw["channels"]) ? raw["channels"] : [],
+        raw
+      };
+    });
+  }
+  /** Verify the enrollment OTP (see {@link enrollmentBegin}); on success, retry `enrollPasskey()`. */
+  async enrollmentVerify(code, opts) {
+    if (!code) throw new Error("enrollmentVerify requires the OTP `code`.");
+    return this.withTokenRetry(async () => {
+      const raw = await this.post(
+        "/api/sdk/device/enrollment/verify",
+        { code },
+        opts?.signal
+      );
+      return { status: String(raw["status"] ?? ""), raw };
+    });
+  }
   // --- internals ---
   /** POST with the current player token. Token-expiry retry is handled one level
    *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
   async post(path, body, signal) {
     return this.http.post(path, body, this.auth, { signal });
   }
+  async get(path, signal) {
+    return this.http.get(path, this.auth, { signal });
+  }
   /**
    * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
    * and a `refreshToken` hook is configured. We re-run the entire begin→get→
@@ -483,12 +612,17 @@ var InvoClient = class {
         { webauthn_assertion: assertion },
         signal
       );
+      const holdReason = raw["error_code"] ?? raw["code"];
       return {
         status: String(raw["status"] ?? ""),
         next: String(raw["next"] ?? ""),
         transactionId: String(raw["transaction_id"] ?? transactionId),
         claimCode: raw["claim_code"],
         claimCodeExpiresAt: raw["claim_code_expires_at"],
+        holdReason: typeof holdReason === "string" ? holdReason : void 0,
+        risk: raw["risk"],
+        guardianApproval: raw["guardian_approval"] ?? void 0,
+        pollEndpoint: raw["poll_endpoint"],
         raw
       };
     });
@@ -507,7 +641,12 @@ var InvoClient = class {
         { webauthn_assertion: assertion },
         signal
       );
-      return { status: String(raw["status"] ?? ""), raw };
+      const holdReason = raw["error_code"] ?? raw["code"];
+      return {
+        status: String(raw["status"] ?? ""),
+        holdReason: typeof holdReason === "string" ? holdReason : void 0,
+        raw
+      };
     });
   }
 };

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CZdmipNK.cjs';
-export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CZdmipNK.cjs';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult, P as PendingCollectResult, D as DestinationsQuery, c as DestinationsResult, E as EnrollmentBeginResult, d as EnrollmentVerifyResult } from './types-Bi_NMSkN.cjs';
+export { e as DestinationGame, I as InvoError, f as InvoErrorInfo, g as InvoHooks, h as InvoRequestInfo, i as InvoResponseInfo, j as PendingCollectItem, R as Rail, V as VerificationMethod } from './types-Bi_NMSkN.cjs';
 
 declare class InvoClient {
     private readonly http;
@@ -32,9 +32,34 @@ declare class InvoClient {
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
     linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
+    /**
+     * List the player's own pending items to collect (browser, player-token). Each row's
+     * `kind` tells you which action to call: `"identity_gate"` → `approve*` (you initiated);
+     * `"receiving_confirm"` → `confirmReceipt*` (a peer sent to you). PII-free — no claim
+     * code or phone (those are only on the server-side `getInboundPending`).
+     */
+    getPendingCollect(opts?: CallOptions): Promise<PendingCollectResult>;
+    /**
+     * List the games/tenants this player can send/transfer to, with display metadata
+     * inline (name, icon, currency, min/max limits) — one call, no per-game lookup.
+     * Source game is the token's own game. Player-token (browser).
+     */
+    getDestinations(query?: DestinationsQuery, opts?: CallOptions): Promise<DestinationsResult>;
+    /**
+     * First-enrollment OTP grant (§4.2). When `enrollPasskey()` throws
+     * `ENROLLMENT_REQUIRES_AUTHORIZATION` (`err.isEnrollmentAuthorizationRequired`), call
+     * this to send a 6-digit code to the player's phone + email on file, collect the code,
+     * call `enrollmentVerify(code)`, then RETRY the SAME `enrollPasskey()` —
+     * `register/complete` auto-consumes the server-side grant (30-min TTL). For
+     * `ENROLLMENT_REQUIRES_PROOF` (`err.isEnrollmentProofRequired`) use `linkDevice` instead.
+     */
+    enrollmentBegin(opts?: CallOptions): Promise<EnrollmentBeginResult>;
+    /** Verify the enrollment OTP (see {@link enrollmentBegin}); on success, retry `enrollPasskey()`. */
+    enrollmentVerify(code: string, opts?: CallOptions): Promise<EnrollmentVerifyResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
+    private get;
     /**
      * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
      * and a `refreshToken` hook is configured. We re-run the entire begin→get→
@@ -49,4 +74,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, DestinationsQuery, DestinationsResult, EnrollmentBeginResult, EnrollmentVerifyResult, InvoClient, LinkDeviceResult, PendingCollectResult };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult } from './types-CZdmipNK.js';
-export { I as InvoError, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CZdmipNK.js';
+import { C as ClientConfig, a as CallOptions, A as ApproveResult, b as ConfirmReceiptResult, L as LinkDeviceResult, P as PendingCollectResult, D as DestinationsQuery, c as DestinationsResult, E as EnrollmentBeginResult, d as EnrollmentVerifyResult } from './types-Bi_NMSkN.js';
+export { e as DestinationGame, I as InvoError, f as InvoErrorInfo, g as InvoHooks, h as InvoRequestInfo, i as InvoResponseInfo, j as PendingCollectItem, R as Rail, V as VerificationMethod } from './types-Bi_NMSkN.js';
 
 declare class InvoClient {
     private readonly http;
@@ -32,9 +32,34 @@ declare class InvoClient {
      * begin -> navigator.credentials.get() -> complete with { link_id, webauthn_assertion }.
      */
     linkDevice(linkId: string, opts?: CallOptions): Promise<LinkDeviceResult>;
+    /**
+     * List the player's own pending items to collect (browser, player-token). Each row's
+     * `kind` tells you which action to call: `"identity_gate"` → `approve*` (you initiated);
+     * `"receiving_confirm"` → `confirmReceipt*` (a peer sent to you). PII-free — no claim
+     * code or phone (those are only on the server-side `getInboundPending`).
+     */
+    getPendingCollect(opts?: CallOptions): Promise<PendingCollectResult>;
+    /**
+     * List the games/tenants this player can send/transfer to, with display metadata
+     * inline (name, icon, currency, min/max limits) — one call, no per-game lookup.
+     * Source game is the token's own game. Player-token (browser).
+     */
+    getDestinations(query?: DestinationsQuery, opts?: CallOptions): Promise<DestinationsResult>;
+    /**
+     * First-enrollment OTP grant (§4.2). When `enrollPasskey()` throws
+     * `ENROLLMENT_REQUIRES_AUTHORIZATION` (`err.isEnrollmentAuthorizationRequired`), call
+     * this to send a 6-digit code to the player's phone + email on file, collect the code,
+     * call `enrollmentVerify(code)`, then RETRY the SAME `enrollPasskey()` —
+     * `register/complete` auto-consumes the server-side grant (30-min TTL). For
+     * `ENROLLMENT_REQUIRES_PROOF` (`err.isEnrollmentProofRequired`) use `linkDevice` instead.
+     */
+    enrollmentBegin(opts?: CallOptions): Promise<EnrollmentBeginResult>;
+    /** Verify the enrollment OTP (see {@link enrollmentBegin}); on success, retry `enrollPasskey()`. */
+    enrollmentVerify(code: string, opts?: CallOptions): Promise<EnrollmentVerifyResult>;
     /** POST with the current player token. Token-expiry retry is handled one level
      *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
     private post;
+    private get;
     /**
      * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
      * and a `refreshToken` hook is configured. We re-run the entire begin→get→
@@ -49,4 +74,4 @@ declare class InvoClient {
     private confirmReceipt;
 }
 
-export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, InvoClient, LinkDeviceResult };
+export { ApproveResult, CallOptions, ClientConfig, ConfirmReceiptResult, DestinationsQuery, DestinationsResult, EnrollmentBeginResult, EnrollmentVerifyResult, InvoClient, LinkDeviceResult, PendingCollectResult };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { assertSecureBaseUrl, Http, InvoError } from './chunk-JOVATUDY.js';
-export { InvoError } from './chunk-JOVATUDY.js';
+import { assertSecureBaseUrl, Http, InvoError } from './chunk-D3XBTH4C.js';
+export { InvoError } from './chunk-D3XBTH4C.js';
 
 // src/shared/webauthn.ts
 function b64urlToBuffer(value) {
@@ -83,6 +83,44 @@ function assertionToJSON(cred) {
 }
 
 // src/index.ts
+function toPendingCollectItem(row) {
+  return {
+    transferId: String(row["transfer_id"] ?? ""),
+    kind: String(row["kind"] ?? ""),
+    flow: String(row["flow"] ?? ""),
+    amount: row["amount"] ?? null,
+    currency: String(row["currency"] ?? ""),
+    counterpartyGame: String(row["counterparty_game"] ?? ""),
+    expiresAt: row["expires_at"] ?? null,
+    stepUpRequired: row["step_up_required"] === true,
+    held: row["held"] === true,
+    holdReason: row["hold_reason"] ?? null,
+    raw: row
+  };
+}
+function toDestinationGame(row) {
+  const s = (k) => row[k] === void 0 || row[k] === null ? void 0 : String(row[k]);
+  return {
+    gameId: row["game_id"] ?? "",
+    gameName: String(row["game_name"] ?? ""),
+    tenantType: s("tenant_type"),
+    developerName: s("developer_name"),
+    publisherName: s("publisher_name"),
+    genre: s("genre"),
+    platform: s("platform"),
+    gameStatus: s("game_status"),
+    gameIcon: s("game_icon"),
+    gamePoster: s("game_poster"),
+    gameUrl: s("game_url"),
+    gameDescription: s("game_description"),
+    currencyName: String(row["currency_name"] ?? ""),
+    currencySymbol: String(row["currency_symbol"] ?? ""),
+    currencySymbolUrl: s("currency_symbol_url"),
+    minimumTransfer: String(row["minimum_transfer"] ?? ""),
+    maximumTransfer: String(row["maximum_transfer"] ?? ""),
+    raw: row
+  };
+}
 var InvoClient = class {
   constructor(config) {
     if (!config.token) throw new Error("InvoClient requires a player `token`.");
@@ -175,12 +213,95 @@ var InvoClient = class {
       return { status: String(raw["status"] ?? ""), raw };
     });
   }
+  /**
+   * List the player's own pending items to collect (browser, player-token). Each row's
+   * `kind` tells you which action to call: `"identity_gate"` → `approve*` (you initiated);
+   * `"receiving_confirm"` → `confirmReceipt*` (a peer sent to you). PII-free — no claim
+   * code or phone (those are only on the server-side `getInboundPending`).
+   */
+  async getPendingCollect(opts) {
+    return this.withTokenRetry(async () => {
+      const raw = await this.get(
+        "/api/sdk/transfers/pending",
+        opts?.signal
+      );
+      const rows = Array.isArray(raw["pending"]) ? raw["pending"] : [];
+      return { pending: rows.map(toPendingCollectItem), raw };
+    });
+  }
+  /**
+   * List the games/tenants this player can send/transfer to, with display metadata
+   * inline (name, icon, currency, min/max limits) — one call, no per-game lookup.
+   * Source game is the token's own game. Player-token (browser).
+   */
+  async getDestinations(query, opts) {
+    const direction = query?.direction ?? "transfer";
+    return this.withTokenRetry(async () => {
+      const raw = await this.get(
+        `/api/sdk/destinations?direction=${encodeURIComponent(direction)}`,
+        opts?.signal
+      );
+      const games = Array.isArray(raw["available_games"]) ? raw["available_games"] : [];
+      return {
+        status: String(raw["status"] ?? ""),
+        sourceGameId: raw["source_game_id"] ?? "",
+        sourceGameName: String(raw["source_game_name"] ?? ""),
+        sourceGameIcon: raw["source_game_icon"],
+        sourceCurrencyName: String(raw["source_currency_name"] ?? ""),
+        sourceCurrencyIcon: raw["source_currency_icon"],
+        universalTransfers: raw["universal_transfers"] === true,
+        transferMode: String(raw["transfer_mode"] ?? ""),
+        availableGames: games.map(toDestinationGame),
+        totalDestinations: Number(raw["total_destinations"] ?? games.length),
+        direction: String(raw["direction"] ?? direction),
+        linkedGameIds: Array.isArray(raw["linked_game_ids"]) ? raw["linked_game_ids"] : void 0,
+        raw
+      };
+    });
+  }
+  /**
+   * First-enrollment OTP grant (§4.2). When `enrollPasskey()` throws
+   * `ENROLLMENT_REQUIRES_AUTHORIZATION` (`err.isEnrollmentAuthorizationRequired`), call
+   * this to send a 6-digit code to the player's phone + email on file, collect the code,
+   * call `enrollmentVerify(code)`, then RETRY the SAME `enrollPasskey()` —
+   * `register/complete` auto-consumes the server-side grant (30-min TTL). For
+   * `ENROLLMENT_REQUIRES_PROOF` (`err.isEnrollmentProofRequired`) use `linkDevice` instead.
+   */
+  async enrollmentBegin(opts) {
+    return this.withTokenRetry(async () => {
+      const raw = await this.post(
+        "/api/sdk/device/enrollment/begin",
+        void 0,
+        opts?.signal
+      );
+      return {
+        status: String(raw["status"] ?? ""),
+        channels: Array.isArray(raw["channels"]) ? raw["channels"] : [],
+        raw
+      };
+    });
+  }
+  /** Verify the enrollment OTP (see {@link enrollmentBegin}); on success, retry `enrollPasskey()`. */
+  async enrollmentVerify(code, opts) {
+    if (!code) throw new Error("enrollmentVerify requires the OTP `code`.");
+    return this.withTokenRetry(async () => {
+      const raw = await this.post(
+        "/api/sdk/device/enrollment/verify",
+        { code },
+        opts?.signal
+      );
+      return { status: String(raw["status"] ?? ""), raw };
+    });
+  }
   // --- internals ---
   /** POST with the current player token. Token-expiry retry is handled one level
    *  up by withTokenRetry (which re-runs the whole ceremony, not a single call). */
   async post(path, body, signal) {
     return this.http.post(path, body, this.auth, { signal });
   }
+  async get(path, signal) {
+    return this.http.get(path, this.auth, { signal });
+  }
   /**
    * Run a whole flow, retrying it ONCE if any call fails with SDK_TOKEN_EXPIRED
    * and a `refreshToken` hook is configured. We re-run the entire begin→get→
@@ -234,12 +355,17 @@ var InvoClient = class {
         { webauthn_assertion: assertion },
         signal
       );
+      const holdReason = raw["error_code"] ?? raw["code"];
       return {
         status: String(raw["status"] ?? ""),
         next: String(raw["next"] ?? ""),
         transactionId: String(raw["transaction_id"] ?? transactionId),
         claimCode: raw["claim_code"],
         claimCodeExpiresAt: raw["claim_code_expires_at"],
+        holdReason: typeof holdReason === "string" ? holdReason : void 0,
+        risk: raw["risk"],
+        guardianApproval: raw["guardian_approval"] ?? void 0,
+        pollEndpoint: raw["poll_endpoint"],
         raw
       };
     });
@@ -258,7 +384,12 @@ var InvoClient = class {
         { webauthn_assertion: assertion },
         signal
       );
-      return { status: String(raw["status"] ?? ""), raw };
+      const holdReason = raw["error_code"] ?? raw["code"];
+      return {
+        status: String(raw["status"] ?? ""),
+        holdReason: typeof holdReason === "string" ? holdReason : void 0,
+        raw
+      };
     });
   }
 };

package/dist/server.cjs

@@ -21,6 +21,14 @@ var InvoError = class _InvoError extends Error {
   get isTokenExpired() {
     return this.code === "SDK_TOKEN_EXPIRED";
   }
+  /** True if `enrollPasskey()` needs the OTP-grant flow (`enrollmentBegin`/`enrollmentVerify`). */
+  get isEnrollmentAuthorizationRequired() {
+    return this.code === "ENROLLMENT_REQUIRES_AUTHORIZATION";
+  }
+  /** True if enrolling is blocked because another method exists — use `linkDevice`. */
+  get isEnrollmentProofRequired() {
+    return this.code === "ENROLLMENT_REQUIRES_PROOF";
+  }
   /**
    * True if an item purchase failed because the player's balance was too low (§4.8 → 400).
    * The backend carries `required_amount` + `current_balance` on the body for the UI.

package/dist/server.d.cts

@@ -1,5 +1,5 @@
-import { I as InvoError, S as ServerConfig, a as CallOptions, P as PlayerToken, g as InitiateSendInput, h as InitiateResult, i as InitiateTransferInput, j as CreateCheckoutInput, k as CreateCheckoutResult, l as PurchaseInput, m as PurchaseResult, n as ConfirmPaymentResult, O as OrderDetailsResult, o as PurchaseItemInput, p as PurchaseItemResult, q as ItemHistoryQuery, r as ItemHistoryResult, s as ItemOrderQuery, t as PlayerBalanceQuery, u as PlayerBalanceResult, v as InboundPendingQuery, w as InboundPendingResult } from './types-CZdmipNK.cjs';
-export { x as CurrencyBalance, y as InboundPendingItem, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CZdmipNK.cjs';
+import { I as InvoError, S as ServerConfig, a as CallOptions, k as PlayerToken, l as InitiateSendInput, m as InitiateResult, n as InitiateTransferInput, o as CreateCheckoutInput, p as CreateCheckoutResult, q as PurchaseInput, r as PurchaseResult, s as ConfirmPaymentResult, O as OrderDetailsResult, t as PurchaseItemInput, u as PurchaseItemResult, v as ItemHistoryQuery, w as ItemHistoryResult, x as ItemOrderQuery, y as PlayerBalanceQuery, z as PlayerBalanceResult, B as InboundPendingQuery, F as InboundPendingResult } from './types-Bi_NMSkN.cjs';
+export { G as CurrencyBalance, H as InboundPendingItem, f as InvoErrorInfo, g as InvoHooks, h as InvoRequestInfo, i as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-Bi_NMSkN.cjs';
 
 interface VerifyWebhookOptions {
     /** Max age of the signed timestamp, in seconds. Default 300 (5 min). */

package/dist/server.d.ts

@@ -1,5 +1,5 @@
-import { I as InvoError, S as ServerConfig, a as CallOptions, P as PlayerToken, g as InitiateSendInput, h as InitiateResult, i as InitiateTransferInput, j as CreateCheckoutInput, k as CreateCheckoutResult, l as PurchaseInput, m as PurchaseResult, n as ConfirmPaymentResult, O as OrderDetailsResult, o as PurchaseItemInput, p as PurchaseItemResult, q as ItemHistoryQuery, r as ItemHistoryResult, s as ItemOrderQuery, t as PlayerBalanceQuery, u as PlayerBalanceResult, v as InboundPendingQuery, w as InboundPendingResult } from './types-CZdmipNK.js';
-export { x as CurrencyBalance, y as InboundPendingItem, c as InvoErrorInfo, d as InvoHooks, e as InvoRequestInfo, f as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-CZdmipNK.js';
+import { I as InvoError, S as ServerConfig, a as CallOptions, k as PlayerToken, l as InitiateSendInput, m as InitiateResult, n as InitiateTransferInput, o as CreateCheckoutInput, p as CreateCheckoutResult, q as PurchaseInput, r as PurchaseResult, s as ConfirmPaymentResult, O as OrderDetailsResult, t as PurchaseItemInput, u as PurchaseItemResult, v as ItemHistoryQuery, w as ItemHistoryResult, x as ItemOrderQuery, y as PlayerBalanceQuery, z as PlayerBalanceResult, B as InboundPendingQuery, F as InboundPendingResult } from './types-Bi_NMSkN.js';
+export { G as CurrencyBalance, H as InboundPendingItem, f as InvoErrorInfo, g as InvoHooks, h as InvoRequestInfo, i as InvoResponseInfo, R as Rail, V as VerificationMethod } from './types-Bi_NMSkN.js';
 
 interface VerifyWebhookOptions {
     /** Max age of the signed timestamp, in seconds. Default 300 (5 min). */

package/dist/server.js

@@ -1,5 +1,5 @@
-import { InvoError, assertSecureBaseUrl, Http } from './chunk-JOVATUDY.js';
-export { InvoError } from './chunk-JOVATUDY.js';
+import { InvoError, assertSecureBaseUrl, Http } from './chunk-D3XBTH4C.js';
+export { InvoError } from './chunk-D3XBTH4C.js';
 import { createHmac } from 'crypto';
 
 var DEFAULT_TOLERANCE_SEC = 300;

package/dist/{types-CZdmipNK.d.cts → types-Bi_NMSkN.d.cts}

@@ -26,6 +26,10 @@ declare class InvoError extends Error {
     get isReceiverNotEnrolled(): boolean;
     /** True if the session/SDK token has expired and the caller should re-mint + retry. */
     get isTokenExpired(): boolean;
+    /** True if `enrollPasskey()` needs the OTP-grant flow (`enrollmentBegin`/`enrollmentVerify`). */
+    get isEnrollmentAuthorizationRequired(): boolean;
+    /** True if enrolling is blocked because another method exists — use `linkDevice`. */
+    get isEnrollmentProofRequired(): boolean;
     /**
      * True if an item purchase failed because the player's balance was too low (§4.8 → 400).
      * The backend carries `required_amount` + `current_balance` on the body for the UI.
@@ -308,9 +312,101 @@ interface ApproveResult {
     /** transfer-approve returns the sender's claim code; send-approve does not. */
     claimCode?: string;
     claimCodeExpiresAt?: string;
+    /**
+     * Present when the approve came back as an HTTP 202 **hold** rather than success —
+     * e.g. `"RISK_HOLD"`, `"GUARDIAN_APPROVAL_PENDING"`, `"STEP_UP_REQUIRED"` (the last
+     * only on non-passkey approvals). Success carries no holdReason. Terminal guardian
+     * outcomes (`GUARDIAN_APPROVAL_REJECTED`/`_EXPIRED` 410, `..._CHECK_UNAVAILABLE` 503)
+     * are thrown as `InvoError` instead.
+     */
+    holdReason?: string;
+    /** Risk-engine detail on a RISK_HOLD: `{ decision, reasons[] }`. */
+    risk?: Record<string, unknown>;
+    /** The guardian_approval audit object on GUARDIAN_APPROVAL_PENDING. */
+    guardianApproval?: unknown;
+    /** Poll endpoint for guardian status (transfer holds only). */
+    pollEndpoint?: string;
     raw: Record<string, unknown>;
 }
 interface ConfirmReceiptResult {
+    status: string;
+    /** Present on a 202 hold — e.g. `"RECIPIENT_IDENTITY_PENDING"`. */
+    holdReason?: string;
+    raw: Record<string, unknown>;
+}
+interface PendingCollectItem {
+    /** The transaction id — note the backend key is `transfer_id`. */
+    transferId: string;
+    /** "identity_gate" (you initiated → call approve*) | "receiving_confirm" (peer send → call confirmReceipt*). */
+    kind: string;
+    /** "transfer" | "send". */
+    flow: string;
+    amount: string | null;
+    /** Currency name (not id). */
+    currency: string;
+    /** Tenant name — destination (identity_gate) or source (receiving_confirm). */
+    counterpartyGame: string;
+    expiresAt: string | null;
+    stepUpRequired: boolean;
+    held: boolean;
+    /** "guardian_pending" | "device_requires_elevation" | null. */
+    holdReason: string | null;
+    raw: Record<string, unknown>;
+}
+interface PendingCollectResult {
+    pending: PendingCollectItem[];
+    raw: Record<string, unknown>;
+}
+interface DestinationsQuery {
+    /** "transfer" | "send". Defaults "transfer" (the set is identical for both today). */
+    direction?: "transfer" | "send";
+}
+/** A game/tenant this player can send/transfer to, with display metadata inline. */
+interface DestinationGame {
+    gameId: string | number;
+    gameName: string;
+    tenantType?: string;
+    developerName?: string;
+    publisherName?: string;
+    genre?: string;
+    platform?: string;
+    gameStatus?: string;
+    gameIcon?: string;
+    gamePoster?: string;
+    gameUrl?: string;
+    gameDescription?: string;
+    currencyName: string;
+    currencySymbol: string;
+    currencySymbolUrl?: string;
+    /** Limits are decimal strings. */
+    minimumTransfer: string;
+    maximumTransfer: string;
+    raw: Record<string, unknown>;
+}
+interface DestinationsResult {
+    status: string;
+    sourceGameId: string | number;
+    sourceGameName: string;
+    sourceGameIcon?: string;
+    sourceCurrencyName: string;
+    sourceCurrencyIcon?: string;
+    universalTransfers: boolean;
+    /** "universal" (every live tenant) | "linked" (intersect linkedGameIds). */
+    transferMode: string;
+    availableGames: DestinationGame[];
+    totalDestinations: number;
+    direction: string;
+    /** Present in "linked" mode. */
+    linkedGameIds?: (string | number)[];
+    raw: Record<string, unknown>;
+}
+interface EnrollmentBeginResult {
+    status: string;
+    /** Channels the OTP was sent to, e.g. ["sms","email"]. */
+    channels: string[];
+    raw: Record<string, unknown>;
+}
+interface EnrollmentVerifyResult {
     status: string;
     raw: Record<string, unknown>;
 }
@@ -320,4 +416,4 @@ interface LinkDeviceResult {
     raw: Record<string, unknown>;
 }
 
-export { type ApproveResult as A, type ClientConfig as C, InvoError as I, type LinkDeviceResult as L, type OrderDetailsResult as O, type PlayerToken as P, type Rail as R, type ServerConfig as S, type VerificationMethod as V, type CallOptions as a, type ConfirmReceiptResult as b, type InvoErrorInfo as c, type InvoHooks as d, type InvoRequestInfo as e, type InvoResponseInfo as f, type InitiateSendInput as g, type InitiateResult as h, type InitiateTransferInput as i, type CreateCheckoutInput as j, type CreateCheckoutResult as k, type PurchaseInput as l, type PurchaseResult as m, type ConfirmPaymentResult as n, type PurchaseItemInput as o, type PurchaseItemResult as p, type ItemHistoryQuery as q, type ItemHistoryResult as r, type ItemOrderQuery as s, type PlayerBalanceQuery as t, type PlayerBalanceResult as u, type InboundPendingQuery as v, type InboundPendingResult as w, type CurrencyBalance as x, type InboundPendingItem as y };
+export { type ApproveResult as A, type InboundPendingQuery as B, type ClientConfig as C, type DestinationsQuery as D, type EnrollmentBeginResult as E, type InboundPendingResult as F, type CurrencyBalance as G, type InboundPendingItem as H, InvoError as I, type LinkDeviceResult as L, type OrderDetailsResult as O, type PendingCollectResult as P, type Rail as R, type ServerConfig as S, type VerificationMethod as V, type CallOptions as a, type ConfirmReceiptResult as b, type DestinationsResult as c, type EnrollmentVerifyResult as d, type DestinationGame as e, type InvoErrorInfo as f, type InvoHooks as g, type InvoRequestInfo as h, type InvoResponseInfo as i, type PendingCollectItem as j, type PlayerToken as k, type InitiateSendInput as l, type InitiateResult as m, type InitiateTransferInput as n, type CreateCheckoutInput as o, type CreateCheckoutResult as p, type PurchaseInput as q, type PurchaseResult as r, type ConfirmPaymentResult as s, type PurchaseItemInput as t, type PurchaseItemResult as u, type ItemHistoryQuery as v, type ItemHistoryResult as w, type ItemOrderQuery as x, type PlayerBalanceQuery as y, type PlayerBalanceResult as z };