@nexeraid/identity-schemas 2.225.0-dev → 2.226.0-atlas-dev

package/dist/{vault.schema-3b31068c.esm.mjs → vault.schema-240efc8f.esm.mjs}

@@ -519,10 +519,65 @@ var AbiItem = z.object({
   }).array().optional()
 });
 
-var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod"];
+var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod", "onprem"];
 var EnvironmentSchema = z["enum"](ENVS);
 var UuidString = z.string().uuid();
 var OtpCode = z.string().regex(/^\d{6}$/, "OtpCode must be a 6-digit number");
+/**
+ * `APP_ENV=onprem` (on-prem delivery, fork issue #55): a customer install's
+ * URLs cannot be known at build/publish time, so every `onprem` entry resolves
+ * lazily (property getter, evaluated on access) in this order:
+ *   1. server-side env override — `SERVICE_URL_<KEY>`, read at access time;
+ *   2. the gateway build-arg for browser bundles — `NEXT_PUBLIC_ONPREM_*`,
+ *      inlined by Next.js at `next build` (the token must stay a literal
+ *      `process.env.NEXT_PUBLIC_X` member expression for that to happen);
+ *   3. a sane in-cluster default matching `deploy/<svc>` (Service DNS + port).
+ * All other profiles are static and unchanged.
+ */
+var onpremOverride = function onpremOverride(key) {
+  var _process$env;
+  return typeof process !== "undefined" ? (_process$env = process.env) === null || _process$env === void 0 ? void 0 : _process$env[key] : undefined;
+};
+
+/**
+ * Runtime browser config (on-prem delivery, fork issue: single-origin /
+ * build-once). The frontend Docker images write `public/__env.js` at container
+ * START from `ONPREM_PUBLIC_*` env vars; `_document.tsx` loads it as
+ * `<script src="/__env.js">` before the app bundle, populating
+ * `window.__ONPREM_ENV__`. That makes the gateway origins RUNTIME-configurable:
+ * one image boots against localhost, dashboard.onprem.example, or a customer
+ * domain by changing a container env var — no rebuild, no baked host.
+ *
+ * Resolution order for a browser origin getter:
+ *   1. `window.__ONPREM_ENV__.<key>` — the runtime value (empty = "unset");
+ *   2. `process.env.NEXT_PUBLIC_ONPREM_*` — the build-time bake (SSR / dev /
+ *      tests, and a back-compat fallback for images built the old way).
+ */
+var runtimeOnpremEnv = function runtimeOnpremEnv(key) {
+  var _g$__ONPREM_ENV__;
+  var g = globalThis;
+  var value = (_g$__ONPREM_ENV__ = g.__ONPREM_ENV__) === null || _g$__ONPREM_ENV__ === void 0 ? void 0 : _g$__ONPREM_ENV__[key];
+  return value != null && value !== "" ? value : undefined;
+};
+var buildTimeEnv = function buildTimeEnv(key) {
+  var _process$env2;
+  if (typeof process === "undefined") return undefined;
+  var value = (_process$env2 = process.env) === null || _process$env2 === void 0 ? void 0 : _process$env2[key];
+  return value != null && value !== "" ? value : undefined;
+};
+
+/** Browser-facing API gateway origin: runtime config first, build bake next. */
+var onpremApiGatewayUrl = function onpremApiGatewayUrl() {
+  var _runtimeOnpremEnv;
+  return (_runtimeOnpremEnv = runtimeOnpremEnv("apiUrl")) !== null && _runtimeOnpremEnv !== void 0 ? _runtimeOnpremEnv : buildTimeEnv("NEXT_PUBLIC_ONPREM_API_URL");
+};
+
+/** Browser-facing identity (identity-v2) origin: runtime then build bake. */
+var onpremIdentityUrl = function onpremIdentityUrl() {
+  var _runtimeOnpremEnv2;
+  return (_runtimeOnpremEnv2 = runtimeOnpremEnv("identityUrl")) !== null && _runtimeOnpremEnv2 !== void 0 ? _runtimeOnpremEnv2 : buildTimeEnv("NEXT_PUBLIC_ONPREM_IDENTITY_URL");
+};
+
 /**
  * All public services
  */
@@ -536,7 +591,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    get onprem() {
+      var _ref, _onpremOverride;
+      return (_ref = (_onpremOverride = onpremOverride("SERVICE_URL_API")) !== null && _onpremOverride !== void 0 ? _onpremOverride : onpremApiGatewayUrl()) !== null && _ref !== void 0 ? _ref : "http://api.api.svc.cluster.local:3000";
+    }
   },
   // No need for /identity suffix in path, handled in gateway
   identity_api: {
@@ -548,7 +607,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    get onprem() {
+      var _ref2, _onpremOverride2;
+      return (_ref2 = (_onpremOverride2 = onpremOverride("SERVICE_URL_IDENTITY_API")) !== null && _onpremOverride2 !== void 0 ? _onpremOverride2 : onpremApiGatewayUrl()) !== null && _ref2 !== void 0 ? _ref2 : "http://identity-api.identity-api.svc.cluster.local:3015";
+    }
   },
   identityV2: {
     cicd: "http://localhost:3009",
@@ -559,7 +622,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://identity-v2-test-dev-4.bjrcom.xyz",
     dev: "https://identity-v2.bjrcom.xyz",
     stage: "https://identity-v2.bjrpilot.xyz",
-    prod: "https://identity-v2.compilot.ai"
+    prod: "https://identity-v2.compilot.ai",
+    get onprem() {
+      var _ref3, _onpremOverride3;
+      return (_ref3 = (_onpremOverride3 = onpremOverride("SERVICE_URL_IDENTITY_V2")) !== null && _onpremOverride3 !== void 0 ? _onpremOverride3 : onpremIdentityUrl()) !== null && _ref3 !== void 0 ? _ref3 : "http://id.onprem.example";
+    }
   }
 };
 var IpAddress = z.string().optional().refine(function (val) {
@@ -2624,6 +2691,8 @@ var DepartmentPrefix_NEW = "dept";
 var TeamPrefix_NEW = "team";
 var TeamMemberPrefix_NEW = "tmem";
 var TeamRoleGrantPrefix_NEW = "tgrant";
+var TwoFactorPrefix_NEW = "twofactor";
+var SsoProviderPrefix_NEW = "ssoprovider";
 
 // Dataset
 var DatasetPrefix = "dataset";
@@ -2849,6 +2918,8 @@ var DepartmentId_NEW = createBrandedSchemaId("".concat(DepartmentPrefix_NEW, "_"
 var TeamId_NEW = createBrandedSchemaId("".concat(TeamPrefix_NEW, "_"));
 var TeamMemberId_NEW = createBrandedSchemaId("".concat(TeamMemberPrefix_NEW, "_"));
 var TeamRoleGrantId_NEW = createBrandedSchemaId("".concat(TeamRoleGrantPrefix_NEW, "_"));
+var TwoFactorId_NEW = createBrandedSchemaId("".concat(TwoFactorPrefix_NEW, "_"));
+var SsoProviderId_NEW = createBrandedSchemaId("".concat(SsoProviderPrefix_NEW, "_"));
 var generateId = function generateId(type) {
   return "".concat(type, "_").concat(nanoid(12));
 };
@@ -13547,4 +13618,4 @@ var TimeFrameCounters = z.object({
   yearly: z.number().optional()
 });
 
-export { POLKADOT_CHAIN_NAMES_LIST as $, ACTIVE_EVM_CHAIN_VALUES as A, BlockchainId as B, COSMOS_CHAIN_NAMES as C, DashboardChainId as D, EVM_BLOCK_TIME as E, SOLANA_CHAIN_IDS as F, ACTIVE_SOLANA_CHAIN_IDS as G, SolanaChainId as H, NEXERA_BITCOIN_CHAINS as I, BITCOIN_CHAIN_NAMES as J, BITCOIN_CHAIN_NAMES_LIST as K, BITCOIN_CHAIN_IDS as L, ACTIVE_BITCOIN_CHAIN_IDS as M, NonTestnetBlockchainId as N, BitcoinChainId as O, POLYGON_NETWORK_NAMES as P, NEXERA_APTOS_CHAINS as Q, APTOS_CHAIN_NAMES as R, StarknetChainId as S, TezosChainId as T, APTOS_CHAIN_NAMES_LIST as U, APTOS_CHAIN_IDS as V, ACTIVE_APTOS_CHAIN_IDS as W, AptosChainId as X, NEXERA_POLKADOT_CHAINS as Y, POLKADOT_CHAIN_NAMES as Z, _defineProperty as _, DashboardChainIdList as a, CurrencyCodes as a$, POLKADOT_CHAIN_IDS as a0, ACTIVE_POLKADOT_CHAIN_IDS as a1, PolkadotChainId as a2, NEXERA_CARDANO_CHAINS as a3, CARDANO_CHAIN_NAMES as a4, CARDANO_CHAIN_NAMES_LIST as a5, CARDANO_CHAIN_IDS as a6, ACTIVE_CARDANO_CHAIN_IDS as a7, CardanoChainId as a8, isValidAddress as a9, SUPPORTED_BLOCKCHAIN_NAMESPACES_FOR_SIGNATURE_AUTH as aA, SupportedBlockchainNamespaceForSignatureAuth as aB, DISPLAYED_BLOCKCHAIN_NAMESPACES as aC, DisplayedBlockchainNamespace as aD, BLOCKCHAIN_NAME_TO_NAMESPACE as aE, BLOCKCHAIN_NAMESPACE_TO_NAME as aF, BLOCKCHAIN_NAMESPACE_TO_ADDRESS_URL as aG, EIP155Signature as aH, AptosSignature as aI, StarknetSignature as aJ, PolkadotSignature as aK, CosmosSignature as aL, EdSignature as aM, SpSignature as aN, P2Signature as aO, TezosSignature as aP, CardanoSignature as aQ, BlockchainSignature as aR, FunctionCallData as aS, TezosEntrypointName as aT, AbiItem as aU, ENVS as aV, EnvironmentSchema as aW, UuidString as aX, OtpCode as aY, PUBLIC_SERVICES_SCHEMA_MAP as aZ, IpAddress as a_, PrivateKey as aa, PublicKey as ab, EvmAddress as ac, TxHash as ad, shortBlockchainAddress as ae, AptosAddress as af, StarknetAddress as ag, PolkadotAddress as ah, CosmosAddress as ai, TezosImplicitAddress as aj, TezosContractAddress as ak, TezosAddress as al, CardanoAddress as am, BitcoinP2PKHAddress as an, BitcoinP2SHAddress as ao, BitcoinBech32Address as ap, BitcoinTestnetP2PKHAddress as aq, BitcoinTestnetP2SHAddress as ar, BitcoinTestnetBech32Address as as, BitcoinAddress as at, BlockchainAddress as au, DashboardAddress as av, String0x as aw, HexadecimalSchema as ax, BLOCKCHAIN_NAMESPACES as ay, BlockchainNamespace as az, NEXERA_EVM_CHAINS as b, DatasetColumnPrefix as b$, CurrencyCode as b0, CryptoCodes as b1, CryptoCode as b2, ISO3CountryCode as b3, ALPHA_2_COUNTRIES as b4, Alpha2Country as b5, countryISO3toISO2Mapping as b6, countryISO2toISO3Mapping as b7, CountryName as b8, isoCountriesNameFromISO2 as b9, EmailPrefix as bA, WalletPrefix as bB, AppPrefix as bC, ChallengePrefix as bD, TestPrefix as bE, IndividualScreeningPrefix as bF, SigGatingPrefix as bG, TagPrefix as bH, ScorechainAnalysisPrefix as bI, UserPrefix_NEW as bJ, OrganizationPrefix_NEW as bK, MemberPrefix_NEW as bL, WorkspacePrefix_NEW as bM, SessionPrefix_NEW as bN, AccountPrefix_NEW as bO, VerificationPrefix_NEW as bP, ApiKeyPrefix_NEW as bQ, InvitationPrefix_NEW as bR, PasskeyPrefix_NEW as bS, WorkspaceMemberPrefix_NEW as bT, WorkspaceRolePrefix_NEW as bU, OrganizationRolePrefix_NEW as bV, DepartmentPrefix_NEW as bW, TeamPrefix_NEW as bX, TeamMemberPrefix_NEW as bY, TeamRoleGrantPrefix_NEW as bZ, DatasetPrefix as b_, isoCountriesNameFromISO3 as ba, parseISO3CountryCode as bb, ScorechainCountry as bc, scorechainCountriesNameFromISO2 as bd, RiskScoreTypes as be, RiskScoreType as bf, CustomerTypes as bg, CustomerType as bh, KycOnboardingLevels as bi, KycOnboardingLevel as bj, KybOnboardingLevels as bk, KybOnboardingLevel as bl, CustomerOnboardingLevels as bm, CustomerOnboardingLevel as bn, CustomerStatuses as bo, CustomerStatus as bp, BasicCustomerContactInformation as bq, CUSTOMERS_CHARTS as br, CustomersChartType as bs, CUSTOMER_TABLE_COLUMNS as bt, CustomerTableColumn as bu, CUSTOMER_AUTOMATION_REASONS as bv, CustomerPersonalInformation as bw, StoragePrefix as bx, IdentityPrefix as by, IdentitySessionPrefix as bz, NEXERA_EVM_CHAIN_NAMES as c, DatasetColumnId as c$, DatasetColumnTypePrefix as c0, DatasetColumnOptionPrefix as c1, DatasetRowPrefix as c2, DatasetRowValuePrefix as c3, DatasetViewPrefix as c4, DatasetViewFilterPrefix as c5, DatasetFormQuestionPrefix as c6, DatasetFolderPrefix as c7, DatasetJobPrefix as c8, DatasetFormInvitationPrefix as c9, SsssSharePrefix as cA, SsssChunkPrefix as cB, AiExecutionPrefix as cC, AiExecutionStepPrefix as cD, AiDocumentPrefix as cE, AiAgentPrefix as cF, AiStepPrefix as cG, ChatPrefix as cH, MessagePrefix as cI, ChatItemPrefix as cJ, AiMessagePrefix as cK, WorkflowSessionId as cL, createBrandedSchemaId as cM, createBrandedSchemaIdWithParams as cN, StorageId as cO, IdentityId as cP, IdentitySessionId as cQ, EmailId as cR, WalletId as cS, AppId as cT, ChallengeId as cU, TestId as cV, CustomerScreeningId as cW, SigGatingId as cX, TagId as cY, ActionId as cZ, DatasetId as c_, DatasetColumnDependencyPrefix as ca, DatasetFormulaExecutionLogPrefix as cb, DatasetChangeRequestPrefix as cc, DatasetChangeRequestApprovalPrefix as cd, MetaAlertPrefix as ce, TagsToEntityPrefix as cf, TransactionAddressesPrefix as cg, TransactionPrefix as ch, TransactionActivityPrefix as ci, TransactionFeesPrefix as cj, TransactionReviewPrefix as ck, TransactionPartiesPrefix as cl, TransactionInfosPrefix as cm, TransactionExtractedInfosPrefix as cn, TransactionMethodsPrefix as co, TransactionMethodExtractedInfosPrefix as cp, InstitutionPrefix as cq, InstitutionExtractedInfosPrefix as cr, TransactionAmountPrefix as cs, ScenarioPrefix as ct, QueryPrefix as cu, QueryGroupPrefix as cv, EvaluationMethodPrefix as cw, ActionPrefix as cx, WorkflowSessionAttributePrefix as cy, ComplyAdvantageSearchUpdatePrefix as cz, NEXERA_EVM_CHAIN_NAMES_LIST as d, VerificationModes as d$, DatasetColumnTypeId as d0, DatasetColumnOptionId as d1, DatasetRowId as d2, DatasetRowValueId as d3, DatasetViewId as d4, DatasetViewFilterId as d5, DatasetFormQuestionId as d6, DatasetFolderId as d7, DatasetJobId as d8, DatasetFormInvitationId as d9, WorkflowSessionAttributeId as dA, SsssShareId as dB, SsssChunkId as dC, ChatItemId as dD, UserId_NEW as dE, OrganizationId_NEW as dF, MemberId_NEW as dG, WorkspaceId_NEW as dH, SessionId_NEW as dI, AccountId_NEW as dJ, VerificationId_NEW as dK, ApiKeyId_NEW as dL, InvitationId_NEW as dM, PasskeyId_NEW as dN, WorkspaceMemberId_NEW as dO, WorkspaceRoleId_NEW as dP, OrganizationRoleId_NEW as dQ, DepartmentId_NEW as dR, TeamId_NEW as dS, TeamMemberId_NEW as dT, TeamRoleGrantId_NEW as dU, generateId as dV, MemberIdLegacy as dW, ChatId as dX, MessageId as dY, FLOW_TYPES as dZ, FlowType as d_, DatasetColumnDependencyId as da, DatasetFormulaExecutionLogId as db, DatasetChangeRequestId as dc, DatasetChangeRequestApprovalId as dd, MetaAlertId as de, TagsToEntityId as df, TransactionAddressesId as dg, TransactionId as dh, TransactionActivityId as di, TransactionFeesId as dj, TransactionReviewId as dk, TransactionPartiesId as dl, TransactionInfosId as dm, TransactionExtractedInfosId as dn, TransactionMethodsId as dp, TransactionMethodExtractedInfosId as dq, InstitutionId as dr, InstitutionExtractedInfosId as ds, TransactionAmountId as dt, ComplyAdvantageSearchUpdateId as du, ScenarioId as dv, QueryId as dw, QueryGroupId as dx, EvaluationMethodId as dy, ScorechainAnalysisId as dz, NEXERA_EVM_CHAINS_ID as e, TransactionRiskLevels as e$, VerificationMode as e0, IDENTITY_DOCUMENT_COUNTRY_LIST_OPTIONS as e1, IdentityDocumentCountryListOption as e2, IDENTITY_DOCUMENT_OPTIONS as e3, IdentityDocumentOptionsType as e4, PERSONAL_INFORMATION_FIELDS as e5, PersonalInformationFieldsIdentityDocuments as e6, Identifier as e7, AdditionalCustomerInformationParams as e8, OrganizationId as e9, IDInformationCredentialSchema as eA, IDImageCredentialSchema as eB, SelfieImageCredentialSchema as eC, ProofOfResidenceCredentialSchema as eD, ID3CredentialSchema as eE, IDScanCredentialSchema as eF, IDScanPassportCredentialSchema as eG, IDScanSelfieCredentialSchema as eH, OLD_IDImageCredentialSchema as eI, OLD_IDInformationCredentialSchema as eJ, OLD_ProofOfResidenceCredentialSchema as eK, OLD_SelfieImageCredentialSchema as eL, OLD_AMLScreeningsResultsCredentialSchema as eM, TypeTags as eN, TypeTag as eO, Tag as eP, TagTitle as eQ, getTagTypeFromEntityType as eR, WORKFLOW_TYPE_TO_TAG_TYPE as eS, TRANSACTION_CHARTS as eT, TransactionsChartType as eU, TRANSACTION_TABLE_COLUMNS as eV, TransactionTableColumn as eW, TransactionTypes as eX, TransactionType as eY, TransactionTypesWithAll as eZ, TransactionTypeWithAll as e_, WorkspaceId as ea, MemberId as eb, WorkflowId as ec, CustomerId as ed, ExternalCustomerId as ee, IdentityAppV2Web3JWT as ef, IdentityAppV2Web2JWT as eg, IdentityWidgetAccessToken_NEW as eh, IdentityWidgetSessionToken as ei, Web2CreateSessionParams as ej, ID3CredentialSubjectSchema as ek, IDScanCredentialSubjectSchema as el, IDScanPassportCredentialSubjectSchema as em, IDScanSelfieCredentialSubjectSchema as en, OLD_IDImageCredentialSubjectSchema as eo, OLD_IDInformationCredentialSubjectSchema as ep, OLD_ProofOfResidenceCredentialSubjectSchema as eq, OLD_SelfieImageCredentialSubjectSchema as er, OLD_AMLScreeningsResultsCredentialSubjectSchema as es, IDInformationTfheCredentialSubjectSchema as et, IDInformationCredentialSubjectSchema as eu, IDImageCredentialSubjectSchema as ev, SelfieImageCredentialSubjectSchema as ew, ProofOfResidenceCredentialSubjectSchema as ex, GenericVerifiableCredentialSchema as ey, IDInformationTfheCredentialSchema as ez, NexeraEvmChains as f, GetTransactionReviewOutput as f$, TransactionRiskLevel as f0, TransactionReviewStatuses as f1, TransactionReviewStatus as f2, HumanReadableTransactionReviewStatuses as f3, HumanReadableTransactionReviewStatus as f4, TransactionStatusMapping as f5, HumanReadableTransactionStatusMapping as f6, TransactionDirections as f7, TransactionDirection as f8, TransactionCurrencyCodes as f9, UpdateTransactionReviewOutput as fA, GetTransactionsForAlertParams as fB, GetTransactionsForAlertOutput as fC, GetTransactionParams as fD, GetTransactionByExternalIdParams as fE, CreateTransactionOutput as fF, CreateTransactionExtractedInfosOutput as fG, CreateTransactionMethodExtractedInfoOutput as fH, CreateInsitutionExtractedInfosOutput as fI, GetTransactionStatsParams as fJ, GetTransactionStatsOutput as fK, GetTransactionsCountParams as fL, GetTransactionsCountOutput as fM, initializeStatistics as fN, GetTransactionsParams as fO, GetOneTransactionOutput as fP, GetTransactionsOutputData as fQ, GetTransactionsOutput as fR, TransactionAmountsToConvert as fS, GetAverageHistoricalAmountParams as fT, GetAverageHistoricalAmountOutput as fU, GetDailyAggregatedAmountInboundParams as fV, GetDailyAggregatedAmountInboundOutput as fW, GetMedianHistoricalAmountParams as fX, GetMedianHistoricalAmountOutput as fY, GetTransactionHistoricalAveragesParams as fZ, GetTransactionReviewParams as f_, TransactionCurrencyCode as fa, TransactionProviders as fb, TransactionProvider as fc, PaymentTypes as fd, PaymentType as fe, TransactionPartiesTypes as ff, TransactionPartiesType as fg, TransactionAmountsFieldNames as fh, TransactionAmountsFieldName as fi, DEFAULT_FIAT_CURRENCY as fj, TRANSACTIONS_STATS_CURRENCIES as fk, TransactionStatsCurrency as fl, TransactionDataEventObject as fm, AuditAction as fn, GetTransactionAuditsParams as fo, PostValidatedCurrencyCode as fp, CreateTransactionFeesParams as fq, CreateBulkTransactionFeesParams as fr, GetTransactionFeesOutput as fs, CreateTransactionInfosOutput as ft, CreateTransactionMethodOutput as fu, CreateInsitutionOutput as fv, CreateTransactionPartiesOutput as fw, CreateTransactionReviewOutput as fx, UpdateTransactionReviewParams as fy, UpdateTransactionsReviewParams as fz, EVM_CHAINS_WITHOUT_DEDICATED_NODE_RPC as g, GetAddressAnalysis as g$, GetTransactionReviewsParams as g0, GetTransactionReviewsOutput as g1, AmlResults$1 as g2, DetectedDuplicates as g3, allDataLinkVersions as g4, DataLinkVersionZodSchema as g5, allDataLinkTypes as g6, DataLinkTypeZodSchema as g7, VaultJsonSchemas as g8, VaultZodSchema as g9, _iterableToArray as gA, _nonIterableRest as gB, ANALYSIS_TYPES as gC, AnalysisType as gD, OBJECT_TYPES as gE, ObjectType as gF, ScorechainBlockchain as gG, NonMinimalScorechainBlockchain as gH, ScorechainBlockchainToNamespace as gI, getRiskLevelByRiskScore as gJ, compareRiskLevels as gK, Coin as gL, RiskSeverity as gM, ScorechainEntityType as gN, RiskExplanation as gO, EntityRiskDefaultsValues as gP, EntityRiskDefaultsMap as gQ, ScorechainErrorResponse as gR, ScorechainError as gS, ScorechainAnalysis as gT, ScoringAnalysisResponse as gU, GetActiveBlockchainsRequest as gV, GetActiveBlockchains as gW, GetActiveBlockchainsResponse as gX, GetAddressAnalysisRequest as gY, GetTransactionAnalysisRequest as gZ, ScorechainEntity as g_, VaultSchemaIdZodSchema as ga, VaultSchemaPathsZodSchema as gb, VaultPointerKeyMapZodSchema as gc, VaultQueryMapZodSchema as gd, VaultMetadataLinkZodSchema as ge, GenericVaultPointerLinkZodSchema as gf, GenericVaultSearchLinkZodSchema as gg, GenericVaultEmbeddedLinkZodSchema as gh, GenericVaultDataLinkZodSchema as gi, TimeFrameCounters as gj, ScorechainEntityRecord as gk, WalletScreeningData as gl, WalletScreeningProviders as gm, WalletScreeningProvider as gn, WalletScreeningProviderName as go, Web3ArgsType as gp, Web3TransactionData as gq, TransactionScreeningData as gr, TransactionScreeningProviders as gs, TransactionScreeningProvider as gt, _toConsumableArray as gu, _unsupportedIterableToArray as gv, _slicedToArray as gw, ScoringAnalysisRequest as gx, WorkflowsScoringAnalysisRequest as gy, _arrayWithHoles as gz, EvmChainId as h, GetTransactionAnalysis as h0, GetAddressAnalysisResponse as h1, GetTransactionAnalysisResponse as h2, ScoringAnalysisApiRequest as h3, RawScorechainResult as h4, ScorechainRiskToRiskLevel as h5, ScorechainWalletRiskLevels as h6, ScorechainWalletRiskLevel as h7, ScorechainTransactionRiskLevel as h8, NEXERA_COSMOS_CHAINS as i, COSMOS_CHAIN_NAMES_LIST as j, COSMOS_CHAIN_IDS as k, ACTIVE_COSMOS_CHAIN_IDS as l, CosmosChainId as m, NEXERA_TEZOS_CHAINS as n, NEXERA_TEZOS_CHAIN_NAMES as o, NEXERA_TEZOS_CHAIN_NAMES_LIST as p, NEXERA_TEZOS_CHAIN_IDS as q, ACTIVE_TEZOS_CHAIN_IDS as r, PolygonNetworkNames as s, NEXERA_STARKNET_CHAINS as t, NEXERA_STARKNET_CHAIN_NAMES as u, NEXERA_STARKNET_CHAIN_IDS as v, NEXERA_ACTIVE_STARKNET_CHAIN_IDS as w, NEXERA_SOLANA_CHAINS as x, SOLANA_CHAIN_NAMES as y, SOLANA_CHAIN_NAMES_LIST as z };
+export { POLKADOT_CHAIN_NAMES_LIST as $, ACTIVE_EVM_CHAIN_VALUES as A, BlockchainId as B, COSMOS_CHAIN_NAMES as C, DashboardChainId as D, EVM_BLOCK_TIME as E, SOLANA_CHAIN_IDS as F, ACTIVE_SOLANA_CHAIN_IDS as G, SolanaChainId as H, NEXERA_BITCOIN_CHAINS as I, BITCOIN_CHAIN_NAMES as J, BITCOIN_CHAIN_NAMES_LIST as K, BITCOIN_CHAIN_IDS as L, ACTIVE_BITCOIN_CHAIN_IDS as M, NonTestnetBlockchainId as N, BitcoinChainId as O, POLYGON_NETWORK_NAMES as P, NEXERA_APTOS_CHAINS as Q, APTOS_CHAIN_NAMES as R, StarknetChainId as S, TezosChainId as T, APTOS_CHAIN_NAMES_LIST as U, APTOS_CHAIN_IDS as V, ACTIVE_APTOS_CHAIN_IDS as W, AptosChainId as X, NEXERA_POLKADOT_CHAINS as Y, POLKADOT_CHAIN_NAMES as Z, _defineProperty as _, DashboardChainIdList as a, CurrencyCodes as a$, POLKADOT_CHAIN_IDS as a0, ACTIVE_POLKADOT_CHAIN_IDS as a1, PolkadotChainId as a2, NEXERA_CARDANO_CHAINS as a3, CARDANO_CHAIN_NAMES as a4, CARDANO_CHAIN_NAMES_LIST as a5, CARDANO_CHAIN_IDS as a6, ACTIVE_CARDANO_CHAIN_IDS as a7, CardanoChainId as a8, isValidAddress as a9, SUPPORTED_BLOCKCHAIN_NAMESPACES_FOR_SIGNATURE_AUTH as aA, SupportedBlockchainNamespaceForSignatureAuth as aB, DISPLAYED_BLOCKCHAIN_NAMESPACES as aC, DisplayedBlockchainNamespace as aD, BLOCKCHAIN_NAME_TO_NAMESPACE as aE, BLOCKCHAIN_NAMESPACE_TO_NAME as aF, BLOCKCHAIN_NAMESPACE_TO_ADDRESS_URL as aG, EIP155Signature as aH, AptosSignature as aI, StarknetSignature as aJ, PolkadotSignature as aK, CosmosSignature as aL, EdSignature as aM, SpSignature as aN, P2Signature as aO, TezosSignature as aP, CardanoSignature as aQ, BlockchainSignature as aR, FunctionCallData as aS, TezosEntrypointName as aT, AbiItem as aU, ENVS as aV, EnvironmentSchema as aW, UuidString as aX, OtpCode as aY, PUBLIC_SERVICES_SCHEMA_MAP as aZ, IpAddress as a_, PrivateKey as aa, PublicKey as ab, EvmAddress as ac, TxHash as ad, shortBlockchainAddress as ae, AptosAddress as af, StarknetAddress as ag, PolkadotAddress as ah, CosmosAddress as ai, TezosImplicitAddress as aj, TezosContractAddress as ak, TezosAddress as al, CardanoAddress as am, BitcoinP2PKHAddress as an, BitcoinP2SHAddress as ao, BitcoinBech32Address as ap, BitcoinTestnetP2PKHAddress as aq, BitcoinTestnetP2SHAddress as ar, BitcoinTestnetBech32Address as as, BitcoinAddress as at, BlockchainAddress as au, DashboardAddress as av, String0x as aw, HexadecimalSchema as ax, BLOCKCHAIN_NAMESPACES as ay, BlockchainNamespace as az, NEXERA_EVM_CHAINS as b, SsoProviderPrefix_NEW as b$, CurrencyCode as b0, CryptoCodes as b1, CryptoCode as b2, ISO3CountryCode as b3, ALPHA_2_COUNTRIES as b4, Alpha2Country as b5, countryISO3toISO2Mapping as b6, countryISO2toISO3Mapping as b7, CountryName as b8, isoCountriesNameFromISO2 as b9, EmailPrefix as bA, WalletPrefix as bB, AppPrefix as bC, ChallengePrefix as bD, TestPrefix as bE, IndividualScreeningPrefix as bF, SigGatingPrefix as bG, TagPrefix as bH, ScorechainAnalysisPrefix as bI, UserPrefix_NEW as bJ, OrganizationPrefix_NEW as bK, MemberPrefix_NEW as bL, WorkspacePrefix_NEW as bM, SessionPrefix_NEW as bN, AccountPrefix_NEW as bO, VerificationPrefix_NEW as bP, ApiKeyPrefix_NEW as bQ, InvitationPrefix_NEW as bR, PasskeyPrefix_NEW as bS, WorkspaceMemberPrefix_NEW as bT, WorkspaceRolePrefix_NEW as bU, OrganizationRolePrefix_NEW as bV, DepartmentPrefix_NEW as bW, TeamPrefix_NEW as bX, TeamMemberPrefix_NEW as bY, TeamRoleGrantPrefix_NEW as bZ, TwoFactorPrefix_NEW as b_, isoCountriesNameFromISO3 as ba, parseISO3CountryCode as bb, ScorechainCountry as bc, scorechainCountriesNameFromISO2 as bd, RiskScoreTypes as be, RiskScoreType as bf, CustomerTypes as bg, CustomerType as bh, KycOnboardingLevels as bi, KycOnboardingLevel as bj, KybOnboardingLevels as bk, KybOnboardingLevel as bl, CustomerOnboardingLevels as bm, CustomerOnboardingLevel as bn, CustomerStatuses as bo, CustomerStatus as bp, BasicCustomerContactInformation as bq, CUSTOMERS_CHARTS as br, CustomersChartType as bs, CUSTOMER_TABLE_COLUMNS as bt, CustomerTableColumn as bu, CUSTOMER_AUTOMATION_REASONS as bv, CustomerPersonalInformation as bw, StoragePrefix as bx, IdentityPrefix as by, IdentitySessionPrefix as bz, NEXERA_EVM_CHAIN_NAMES as c, ActionId as c$, DatasetPrefix as c0, DatasetColumnPrefix as c1, DatasetColumnTypePrefix as c2, DatasetColumnOptionPrefix as c3, DatasetRowPrefix as c4, DatasetRowValuePrefix as c5, DatasetViewPrefix as c6, DatasetViewFilterPrefix as c7, DatasetFormQuestionPrefix as c8, DatasetFolderPrefix as c9, WorkflowSessionAttributePrefix as cA, ComplyAdvantageSearchUpdatePrefix as cB, SsssSharePrefix as cC, SsssChunkPrefix as cD, AiExecutionPrefix as cE, AiExecutionStepPrefix as cF, AiDocumentPrefix as cG, AiAgentPrefix as cH, AiStepPrefix as cI, ChatPrefix as cJ, MessagePrefix as cK, ChatItemPrefix as cL, AiMessagePrefix as cM, WorkflowSessionId as cN, createBrandedSchemaId as cO, createBrandedSchemaIdWithParams as cP, StorageId as cQ, IdentityId as cR, IdentitySessionId as cS, EmailId as cT, WalletId as cU, AppId as cV, ChallengeId as cW, TestId as cX, CustomerScreeningId as cY, SigGatingId as cZ, TagId as c_, DatasetJobPrefix as ca, DatasetFormInvitationPrefix as cb, DatasetColumnDependencyPrefix as cc, DatasetFormulaExecutionLogPrefix as cd, DatasetChangeRequestPrefix as ce, DatasetChangeRequestApprovalPrefix as cf, MetaAlertPrefix as cg, TagsToEntityPrefix as ch, TransactionAddressesPrefix as ci, TransactionPrefix as cj, TransactionActivityPrefix as ck, TransactionFeesPrefix as cl, TransactionReviewPrefix as cm, TransactionPartiesPrefix as cn, TransactionInfosPrefix as co, TransactionExtractedInfosPrefix as cp, TransactionMethodsPrefix as cq, TransactionMethodExtractedInfosPrefix as cr, InstitutionPrefix as cs, InstitutionExtractedInfosPrefix as ct, TransactionAmountPrefix as cu, ScenarioPrefix as cv, QueryPrefix as cw, QueryGroupPrefix as cx, EvaluationMethodPrefix as cy, ActionPrefix as cz, NEXERA_EVM_CHAIN_NAMES_LIST as d, ChatId as d$, DatasetId as d0, DatasetColumnId as d1, DatasetColumnTypeId as d2, DatasetColumnOptionId as d3, DatasetRowId as d4, DatasetRowValueId as d5, DatasetViewId as d6, DatasetViewFilterId as d7, DatasetFormQuestionId as d8, DatasetFolderId as d9, EvaluationMethodId as dA, ScorechainAnalysisId as dB, WorkflowSessionAttributeId as dC, SsssShareId as dD, SsssChunkId as dE, ChatItemId as dF, UserId_NEW as dG, OrganizationId_NEW as dH, MemberId_NEW as dI, WorkspaceId_NEW as dJ, SessionId_NEW as dK, AccountId_NEW as dL, VerificationId_NEW as dM, ApiKeyId_NEW as dN, InvitationId_NEW as dO, PasskeyId_NEW as dP, WorkspaceMemberId_NEW as dQ, WorkspaceRoleId_NEW as dR, OrganizationRoleId_NEW as dS, DepartmentId_NEW as dT, TeamId_NEW as dU, TeamMemberId_NEW as dV, TeamRoleGrantId_NEW as dW, TwoFactorId_NEW as dX, SsoProviderId_NEW as dY, generateId as dZ, MemberIdLegacy as d_, DatasetJobId as da, DatasetFormInvitationId as db, DatasetColumnDependencyId as dc, DatasetFormulaExecutionLogId as dd, DatasetChangeRequestId as de, DatasetChangeRequestApprovalId as df, MetaAlertId as dg, TagsToEntityId as dh, TransactionAddressesId as di, TransactionId as dj, TransactionActivityId as dk, TransactionFeesId as dl, TransactionReviewId as dm, TransactionPartiesId as dn, TransactionInfosId as dp, TransactionExtractedInfosId as dq, TransactionMethodsId as dr, TransactionMethodExtractedInfosId as ds, InstitutionId as dt, InstitutionExtractedInfosId as du, TransactionAmountId as dv, ComplyAdvantageSearchUpdateId as dw, ScenarioId as dx, QueryId as dy, QueryGroupId as dz, NEXERA_EVM_CHAINS_ID as e, TransactionTypes as e$, MessageId as e0, FLOW_TYPES as e1, FlowType as e2, VerificationModes as e3, VerificationMode as e4, IDENTITY_DOCUMENT_COUNTRY_LIST_OPTIONS as e5, IdentityDocumentCountryListOption as e6, IDENTITY_DOCUMENT_OPTIONS as e7, IdentityDocumentOptionsType as e8, PERSONAL_INFORMATION_FIELDS as e9, SelfieImageCredentialSubjectSchema as eA, ProofOfResidenceCredentialSubjectSchema as eB, GenericVerifiableCredentialSchema as eC, IDInformationTfheCredentialSchema as eD, IDInformationCredentialSchema as eE, IDImageCredentialSchema as eF, SelfieImageCredentialSchema as eG, ProofOfResidenceCredentialSchema as eH, ID3CredentialSchema as eI, IDScanCredentialSchema as eJ, IDScanPassportCredentialSchema as eK, IDScanSelfieCredentialSchema as eL, OLD_IDImageCredentialSchema as eM, OLD_IDInformationCredentialSchema as eN, OLD_ProofOfResidenceCredentialSchema as eO, OLD_SelfieImageCredentialSchema as eP, OLD_AMLScreeningsResultsCredentialSchema as eQ, TypeTags as eR, TypeTag as eS, Tag as eT, TagTitle as eU, getTagTypeFromEntityType as eV, WORKFLOW_TYPE_TO_TAG_TYPE as eW, TRANSACTION_CHARTS as eX, TransactionsChartType as eY, TRANSACTION_TABLE_COLUMNS as eZ, TransactionTableColumn as e_, PersonalInformationFieldsIdentityDocuments as ea, Identifier as eb, AdditionalCustomerInformationParams as ec, OrganizationId as ed, WorkspaceId as ee, MemberId as ef, WorkflowId as eg, CustomerId as eh, ExternalCustomerId as ei, IdentityAppV2Web3JWT as ej, IdentityAppV2Web2JWT as ek, IdentityWidgetAccessToken_NEW as el, IdentityWidgetSessionToken as em, Web2CreateSessionParams as en, ID3CredentialSubjectSchema as eo, IDScanCredentialSubjectSchema as ep, IDScanPassportCredentialSubjectSchema as eq, IDScanSelfieCredentialSubjectSchema as er, OLD_IDImageCredentialSubjectSchema as es, OLD_IDInformationCredentialSubjectSchema as et, OLD_ProofOfResidenceCredentialSubjectSchema as eu, OLD_SelfieImageCredentialSubjectSchema as ev, OLD_AMLScreeningsResultsCredentialSubjectSchema as ew, IDInformationTfheCredentialSubjectSchema as ex, IDInformationCredentialSubjectSchema as ey, IDImageCredentialSubjectSchema as ez, NexeraEvmChains as f, GetMedianHistoricalAmountParams as f$, TransactionType as f0, TransactionTypesWithAll as f1, TransactionTypeWithAll as f2, TransactionRiskLevels as f3, TransactionRiskLevel as f4, TransactionReviewStatuses as f5, TransactionReviewStatus as f6, HumanReadableTransactionReviewStatuses as f7, HumanReadableTransactionReviewStatus as f8, TransactionStatusMapping as f9, CreateTransactionPartiesOutput as fA, CreateTransactionReviewOutput as fB, UpdateTransactionReviewParams as fC, UpdateTransactionsReviewParams as fD, UpdateTransactionReviewOutput as fE, GetTransactionsForAlertParams as fF, GetTransactionsForAlertOutput as fG, GetTransactionParams as fH, GetTransactionByExternalIdParams as fI, CreateTransactionOutput as fJ, CreateTransactionExtractedInfosOutput as fK, CreateTransactionMethodExtractedInfoOutput as fL, CreateInsitutionExtractedInfosOutput as fM, GetTransactionStatsParams as fN, GetTransactionStatsOutput as fO, GetTransactionsCountParams as fP, GetTransactionsCountOutput as fQ, initializeStatistics as fR, GetTransactionsParams as fS, GetOneTransactionOutput as fT, GetTransactionsOutputData as fU, GetTransactionsOutput as fV, TransactionAmountsToConvert as fW, GetAverageHistoricalAmountParams as fX, GetAverageHistoricalAmountOutput as fY, GetDailyAggregatedAmountInboundParams as fZ, GetDailyAggregatedAmountInboundOutput as f_, HumanReadableTransactionStatusMapping as fa, TransactionDirections as fb, TransactionDirection as fc, TransactionCurrencyCodes as fd, TransactionCurrencyCode as fe, TransactionProviders as ff, TransactionProvider as fg, PaymentTypes as fh, PaymentType as fi, TransactionPartiesTypes as fj, TransactionPartiesType as fk, TransactionAmountsFieldNames as fl, TransactionAmountsFieldName as fm, DEFAULT_FIAT_CURRENCY as fn, TRANSACTIONS_STATS_CURRENCIES as fo, TransactionStatsCurrency as fp, TransactionDataEventObject as fq, AuditAction as fr, GetTransactionAuditsParams as fs, PostValidatedCurrencyCode as ft, CreateTransactionFeesParams as fu, CreateBulkTransactionFeesParams as fv, GetTransactionFeesOutput as fw, CreateTransactionInfosOutput as fx, CreateTransactionMethodOutput as fy, CreateInsitutionOutput as fz, EVM_CHAINS_WITHOUT_DEDICATED_NODE_RPC as g, GetActiveBlockchainsResponse as g$, GetMedianHistoricalAmountOutput as g0, GetTransactionHistoricalAveragesParams as g1, GetTransactionReviewParams as g2, GetTransactionReviewOutput as g3, GetTransactionReviewsParams as g4, GetTransactionReviewsOutput as g5, AmlResults$1 as g6, DetectedDuplicates as g7, allDataLinkVersions as g8, DataLinkVersionZodSchema as g9, _slicedToArray as gA, ScoringAnalysisRequest as gB, WorkflowsScoringAnalysisRequest as gC, _arrayWithHoles as gD, _iterableToArray as gE, _nonIterableRest as gF, ANALYSIS_TYPES as gG, AnalysisType as gH, OBJECT_TYPES as gI, ObjectType as gJ, ScorechainBlockchain as gK, NonMinimalScorechainBlockchain as gL, ScorechainBlockchainToNamespace as gM, getRiskLevelByRiskScore as gN, compareRiskLevels as gO, Coin as gP, RiskSeverity as gQ, ScorechainEntityType as gR, RiskExplanation as gS, EntityRiskDefaultsValues as gT, EntityRiskDefaultsMap as gU, ScorechainErrorResponse as gV, ScorechainError as gW, ScorechainAnalysis as gX, ScoringAnalysisResponse as gY, GetActiveBlockchainsRequest as gZ, GetActiveBlockchains as g_, allDataLinkTypes as ga, DataLinkTypeZodSchema as gb, VaultJsonSchemas as gc, VaultZodSchema as gd, VaultSchemaIdZodSchema as ge, VaultSchemaPathsZodSchema as gf, VaultPointerKeyMapZodSchema as gg, VaultQueryMapZodSchema as gh, VaultMetadataLinkZodSchema as gi, GenericVaultPointerLinkZodSchema as gj, GenericVaultSearchLinkZodSchema as gk, GenericVaultEmbeddedLinkZodSchema as gl, GenericVaultDataLinkZodSchema as gm, TimeFrameCounters as gn, ScorechainEntityRecord as go, WalletScreeningData as gp, WalletScreeningProviders as gq, WalletScreeningProvider as gr, WalletScreeningProviderName as gs, Web3ArgsType as gt, Web3TransactionData as gu, TransactionScreeningData as gv, TransactionScreeningProviders as gw, TransactionScreeningProvider as gx, _toConsumableArray as gy, _unsupportedIterableToArray as gz, EvmChainId as h, GetAddressAnalysisRequest as h0, GetTransactionAnalysisRequest as h1, ScorechainEntity as h2, GetAddressAnalysis as h3, GetTransactionAnalysis as h4, GetAddressAnalysisResponse as h5, GetTransactionAnalysisResponse as h6, ScoringAnalysisApiRequest as h7, RawScorechainResult as h8, ScorechainRiskToRiskLevel as h9, ScorechainWalletRiskLevels as ha, ScorechainWalletRiskLevel as hb, ScorechainTransactionRiskLevel as hc, NEXERA_COSMOS_CHAINS as i, COSMOS_CHAIN_NAMES_LIST as j, COSMOS_CHAIN_IDS as k, ACTIVE_COSMOS_CHAIN_IDS as l, CosmosChainId as m, NEXERA_TEZOS_CHAINS as n, NEXERA_TEZOS_CHAIN_NAMES as o, NEXERA_TEZOS_CHAIN_NAMES_LIST as p, NEXERA_TEZOS_CHAIN_IDS as q, ACTIVE_TEZOS_CHAIN_IDS as r, PolygonNetworkNames as s, NEXERA_STARKNET_CHAINS as t, NEXERA_STARKNET_CHAIN_NAMES as u, NEXERA_STARKNET_CHAIN_IDS as v, NEXERA_ACTIVE_STARKNET_CHAIN_IDS as w, NEXERA_SOLANA_CHAINS as x, SOLANA_CHAIN_NAMES as y, SOLANA_CHAIN_NAMES_LIST as z };

package/dist/{vault.schema-b7bd8197.cjs.dev.cjs → vault.schema-3f345e7f.cjs.dev.cjs}

@@ -525,10 +525,65 @@ var AbiItem = z.z.object({
   }).array().optional()
 });
 
-var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod"];
+var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod", "onprem"];
 var EnvironmentSchema = z.z["enum"](ENVS);
 var UuidString = z.z.string().uuid();
 var OtpCode = z.z.string().regex(/^\d{6}$/, "OtpCode must be a 6-digit number");
+/**
+ * `APP_ENV=onprem` (on-prem delivery, fork issue #55): a customer install's
+ * URLs cannot be known at build/publish time, so every `onprem` entry resolves
+ * lazily (property getter, evaluated on access) in this order:
+ *   1. server-side env override — `SERVICE_URL_<KEY>`, read at access time;
+ *   2. the gateway build-arg for browser bundles — `NEXT_PUBLIC_ONPREM_*`,
+ *      inlined by Next.js at `next build` (the token must stay a literal
+ *      `process.env.NEXT_PUBLIC_X` member expression for that to happen);
+ *   3. a sane in-cluster default matching `deploy/<svc>` (Service DNS + port).
+ * All other profiles are static and unchanged.
+ */
+var onpremOverride = function onpremOverride(key) {
+  var _process$env;
+  return typeof process !== "undefined" ? (_process$env = process.env) === null || _process$env === void 0 ? void 0 : _process$env[key] : undefined;
+};
+
+/**
+ * Runtime browser config (on-prem delivery, fork issue: single-origin /
+ * build-once). The frontend Docker images write `public/__env.js` at container
+ * START from `ONPREM_PUBLIC_*` env vars; `_document.tsx` loads it as
+ * `<script src="/__env.js">` before the app bundle, populating
+ * `window.__ONPREM_ENV__`. That makes the gateway origins RUNTIME-configurable:
+ * one image boots against localhost, dashboard.onprem.example, or a customer
+ * domain by changing a container env var — no rebuild, no baked host.
+ *
+ * Resolution order for a browser origin getter:
+ *   1. `window.__ONPREM_ENV__.<key>` — the runtime value (empty = "unset");
+ *   2. `process.env.NEXT_PUBLIC_ONPREM_*` — the build-time bake (SSR / dev /
+ *      tests, and a back-compat fallback for images built the old way).
+ */
+var runtimeOnpremEnv = function runtimeOnpremEnv(key) {
+  var _g$__ONPREM_ENV__;
+  var g = globalThis;
+  var value = (_g$__ONPREM_ENV__ = g.__ONPREM_ENV__) === null || _g$__ONPREM_ENV__ === void 0 ? void 0 : _g$__ONPREM_ENV__[key];
+  return value != null && value !== "" ? value : undefined;
+};
+var buildTimeEnv = function buildTimeEnv(key) {
+  var _process$env2;
+  if (typeof process === "undefined") return undefined;
+  var value = (_process$env2 = process.env) === null || _process$env2 === void 0 ? void 0 : _process$env2[key];
+  return value != null && value !== "" ? value : undefined;
+};
+
+/** Browser-facing API gateway origin: runtime config first, build bake next. */
+var onpremApiGatewayUrl = function onpremApiGatewayUrl() {
+  var _runtimeOnpremEnv;
+  return (_runtimeOnpremEnv = runtimeOnpremEnv("apiUrl")) !== null && _runtimeOnpremEnv !== void 0 ? _runtimeOnpremEnv : buildTimeEnv("NEXT_PUBLIC_ONPREM_API_URL");
+};
+
+/** Browser-facing identity (identity-v2) origin: runtime then build bake. */
+var onpremIdentityUrl = function onpremIdentityUrl() {
+  var _runtimeOnpremEnv2;
+  return (_runtimeOnpremEnv2 = runtimeOnpremEnv("identityUrl")) !== null && _runtimeOnpremEnv2 !== void 0 ? _runtimeOnpremEnv2 : buildTimeEnv("NEXT_PUBLIC_ONPREM_IDENTITY_URL");
+};
+
 /**
  * All public services
  */
@@ -542,7 +597,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    get onprem() {
+      var _ref, _onpremOverride;
+      return (_ref = (_onpremOverride = onpremOverride("SERVICE_URL_API")) !== null && _onpremOverride !== void 0 ? _onpremOverride : onpremApiGatewayUrl()) !== null && _ref !== void 0 ? _ref : "http://api.api.svc.cluster.local:3000";
+    }
   },
   // No need for /identity suffix in path, handled in gateway
   identity_api: {
@@ -554,7 +613,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    get onprem() {
+      var _ref2, _onpremOverride2;
+      return (_ref2 = (_onpremOverride2 = onpremOverride("SERVICE_URL_IDENTITY_API")) !== null && _onpremOverride2 !== void 0 ? _onpremOverride2 : onpremApiGatewayUrl()) !== null && _ref2 !== void 0 ? _ref2 : "http://identity-api.identity-api.svc.cluster.local:3015";
+    }
   },
   identityV2: {
     cicd: "http://localhost:3009",
@@ -565,7 +628,11 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://identity-v2-test-dev-4.bjrcom.xyz",
     dev: "https://identity-v2.bjrcom.xyz",
     stage: "https://identity-v2.bjrpilot.xyz",
-    prod: "https://identity-v2.compilot.ai"
+    prod: "https://identity-v2.compilot.ai",
+    get onprem() {
+      var _ref3, _onpremOverride3;
+      return (_ref3 = (_onpremOverride3 = onpremOverride("SERVICE_URL_IDENTITY_V2")) !== null && _onpremOverride3 !== void 0 ? _onpremOverride3 : onpremIdentityUrl()) !== null && _ref3 !== void 0 ? _ref3 : "http://id.onprem.example";
+    }
   }
 };
 var IpAddress = z.z.string().optional().refine(function (val) {
@@ -2630,6 +2697,8 @@ var DepartmentPrefix_NEW = "dept";
 var TeamPrefix_NEW = "team";
 var TeamMemberPrefix_NEW = "tmem";
 var TeamRoleGrantPrefix_NEW = "tgrant";
+var TwoFactorPrefix_NEW = "twofactor";
+var SsoProviderPrefix_NEW = "ssoprovider";
 
 // Dataset
 var DatasetPrefix = "dataset";
@@ -2855,6 +2924,8 @@ var DepartmentId_NEW = createBrandedSchemaId("".concat(DepartmentPrefix_NEW, "_"
 var TeamId_NEW = createBrandedSchemaId("".concat(TeamPrefix_NEW, "_"));
 var TeamMemberId_NEW = createBrandedSchemaId("".concat(TeamMemberPrefix_NEW, "_"));
 var TeamRoleGrantId_NEW = createBrandedSchemaId("".concat(TeamRoleGrantPrefix_NEW, "_"));
+var TwoFactorId_NEW = createBrandedSchemaId("".concat(TwoFactorPrefix_NEW, "_"));
+var SsoProviderId_NEW = createBrandedSchemaId("".concat(SsoProviderPrefix_NEW, "_"));
 var generateId = function generateId(type) {
   return "".concat(type, "_").concat(nanoid.nanoid(12));
 };
@@ -13913,6 +13984,8 @@ exports.SigGatingId = SigGatingId;
 exports.SigGatingPrefix = SigGatingPrefix;
 exports.SolanaChainId = SolanaChainId;
 exports.SpSignature = SpSignature;
+exports.SsoProviderId_NEW = SsoProviderId_NEW;
+exports.SsoProviderPrefix_NEW = SsoProviderPrefix_NEW;
 exports.SsssChunkId = SsssChunkId;
 exports.SsssChunkPrefix = SsssChunkPrefix;
 exports.SsssShareId = SsssShareId;
@@ -13997,6 +14070,8 @@ exports.TransactionTypeWithAll = TransactionTypeWithAll;
 exports.TransactionTypes = TransactionTypes;
 exports.TransactionTypesWithAll = TransactionTypesWithAll;
 exports.TransactionsChartType = TransactionsChartType;
+exports.TwoFactorId_NEW = TwoFactorId_NEW;
+exports.TwoFactorPrefix_NEW = TwoFactorPrefix_NEW;
 exports.TxHash = TxHash;
 exports.TypeTag = TypeTag;
 exports.TypeTags = TypeTags;

package/dist/{notabene.schema-a795a036.esm.mjs → veriff-webhook.schema-041f06e0.esm.mjs}

@@ -1,6 +1,6 @@
 import z$1, { z } from 'zod';
-import { b5 as Alpha2Country, aX as UuidString, gu as _toConsumableArray, gx as ScoringAnalysisRequest, gy as WorkflowsScoringAnalysisRequest, b3 as ISO3CountryCode, gw as _slicedToArray, cP as IdentityId, au as BlockchainAddress, az as BlockchainNamespace, cL as WorkflowSessionId, ea as WorkspaceId, e9 as OrganizationId, bp as CustomerStatus, _ as _defineProperty, ex as ProofOfResidenceCredentialSubjectSchema, bq as BasicCustomerContactInformation, e0 as VerificationMode } from './vault.schema-3b31068c.esm.mjs';
-import { _ as SdkVerificationOutput, aV as QrCodeLinkWithSchemaType, cd as CredentialType } from './identity-api.schema-f69c9758.esm.mjs';
+import { b5 as Alpha2Country, aX as UuidString, gy as _toConsumableArray, gB as ScoringAnalysisRequest, gC as WorkflowsScoringAnalysisRequest, b3 as ISO3CountryCode, gA as _slicedToArray, cR as IdentityId, au as BlockchainAddress, az as BlockchainNamespace, cN as WorkflowSessionId, ee as WorkspaceId, ed as OrganizationId, bp as CustomerStatus, _ as _defineProperty, eB as ProofOfResidenceCredentialSubjectSchema, bq as BasicCustomerContactInformation, e4 as VerificationMode } from './vault.schema-240efc8f.esm.mjs';
+import { _ as SdkVerificationOutput, aV as QrCodeLinkWithSchemaType, cd as CredentialType } from './identity-api.schema-5fcf143b.esm.mjs';
 
 var IpQualityAnalysisRequest = z.object({
   apiKey: z.string().nullish(),
@@ -1436,7 +1436,7 @@ var TRMLabsAddressesScreeningResponse = z$1.union([TRMLabsAddressesScreening, TR
 var ProviderWithoutConfig = ["chainalysis", "scorechain", "integratedScorechain", "trmLabs"];
 var IdentityProviderOptions = ["nexeraIdSSID", "nexeraIdKYB", "synaps", "ondato"];
 var IdentityProvider = z["enum"](IdentityProviderOptions);
-var DataProviderOptions = ["complyAdvantage", "big", "scorechain", "merkleScience", "chainalysis", "trmLabs", "crystal", "notabene", "ipQualityScore", "integratedComplyAdvantage", "integratedScorechain", "integratedIpqualityscore", "notabene", "integratedWalletMonitoring"];
+var DataProviderOptions = ["complyAdvantage", "big", "scorechain", "merkleScience", "chainalysis", "trmLabs", "crystal", "notabene", "ipQualityScore", "integratedComplyAdvantage", "integratedScorechain", "integratedIpqualityscore", "notabene", "integratedWalletMonitoring", "veriff"];
 var DataProvider = z["enum"](DataProviderOptions);
 var MergedProviders = z["enum"]([].concat(_toConsumableArray(IdentityProvider.options), _toConsumableArray(DataProvider.options)));
 var MerkleScienceConfig = z.object({
@@ -2561,7 +2561,9 @@ var SelectKycSession = z.object({
   workflowSessionId: WorkflowSessionId.nullable(),
   workspaceId: WorkspaceId.nullish(),
   organizationId: OrganizationId.nullish(),
-  applicantCheckStatus: ApplicantCheckStatus
+  applicantCheckStatus: ApplicantCheckStatus,
+  kycProvider: z.string()["default"]("sumsub"),
+  providerPersonData: z.unknown().nullish()
 });
 var SelectKycSessionWithCompletedSteps = SelectKycSession.extend({
   stepsCompleted: z.array(SelectKycSessionStep)
@@ -2642,6 +2644,8 @@ var ApiSuccessCommandResponse = function ApiSuccessCommandResponse(dataSchema) {
   });
 };
 var GetKycSessionsOutput = z.discriminatedUnion("isOk", [ApiErrorCommandResponse, ApiSuccessCommandResponse(z.array(GetKycSessionResponseWithCredentialsMetadata))]);
+var KYC_PROVIDER_NAMES = ["sumsub", "veriff"];
+var KycProviderName = z["enum"](KYC_PROVIDER_NAMES);
 
 var KYB_STEP_TYPES = ["Started"];
 var KybStep = z["enum"](KYB_STEP_TYPES);
@@ -3258,4 +3262,159 @@ var NotabeneWebhookSchema = z.object({
   status: NotabeneTxCreateStatus
 });
 
-export { SynapsSessionErrorResponse as $, ProofOfAddressDocumentTypes as A, BigCryptoChain as B, ComplyAdvantageSearchResponse as C, DocumentIdTypes as D, EmailVerificationAnalysisResponse as E, File$1 as F, ProofOfAddressDocumentType as G, ProofOfAddressMetadata as H, IpQualityServiceAnalysisResponse as I, PhoneMetadata as J, EmailMetadata as K, LivenessMetadata as L, MergedProviders as M, NotabeneTxCreateStatus as N, AMLMetadata as O, PhoneVerificationAnalysisResponse as P, Step as Q, RequestProperty as R, Statuses as S, SynapsSessionEvent as T, SynapsStepEvent as U, typeToHumanReadable as V, WrappedIpQualityServiceErrorResponse as W, SynapsSessionRequest as X, SESSION_NOT_FOUND as Y, UNKNOWN_ERROR as Z, RESULT_PARSER_ERROR as _, ComplyAdvantageSearchErrorResponse as a, MerkleScienceConfig as a$, SynapsSessionResponse as a0, SynapsStepRequest as a1, STEP_NOT_FOUND as a2, SynapsStepErrorResponse as a3, SynapsStepResponse as a4, CoerceDateUTC as a5, SEARCH_FILTER_SANCTION_TYPE as a6, SearchFilterSanctionType as a7, SEARCH_FILTER_PEP_TYPE as a8, SearchFilterPepType as a9, UpdateSearchEntitiesInput as aA, ComplyAdvantageUser as aB, MatchTypeDetail as aC, ComplyAdvantageMedia as aD, ComplyAdvantageSearchDataResponseHit as aE, ComplyAdvantageSearchDataResponse as aF, ComplyAdvantageKeyInformation as aG, ComplyAdvantageAmlItemSource as aH, ComplyAdvantageAmlFullListing as aI, ComplyAdvantageSearchEntitiesDataResponse as aJ, ComplyAdvantageSearchEntitiesSuccessResponse as aK, ComplyAdvantageSearchEntitiesResponse as aL, ComplyAdvantageSearchRequest as aM, ComplyAdvantageSearchRequests as aN, ComplyAdvantageUpdateSearchRequest as aO, ComplyAdvantageUpdateSearchEntitiesRequest as aP, ComplyAdvantageUpdateSearchEntitiesSuccessResponse as aQ, ComplyAdvantageUpdateSearchEntitiesResponse as aR, ComplyAdvantageMonitorSearchDataResponse as aS, ComplyAdvantageMonitorSearchSuccessResponse as aT, ComplyAdvantageMonitorSearchResponse as aU, ComplyAdvantageMonitoredSearchUpdate as aV, ProviderWithoutConfig as aW, IdentityProviderOptions as aX, IdentityProvider as aY, DataProviderOptions as aZ, DataProvider as a_, SEARCH_FILTER_ADVERSE_MEDIA_TYPE as aa, SearchFilterAdverseMediaType as ab, HIGH_RISK_TYPES as ac, MEDIUM_RISK_TYPES as ad, COMPLY_ADVANTAGE_RESPONSE_MATCH_TYPE as ae, ComplyAdvantageResponseMatchType as af, mappingMatchTypeToLabel as ag, COMPLY_ADVANTAGE_RESPONSE_MATCH_STATUS as ah, ComplyAdvantageReponseMatchStatus as ai, SEARCH_FILTER_TYPES as aj, SearchFilterType as ak, SearchEntityTypes as al, SearchEntityType as am, SearchFilters as an, COMPLY_ADVANTAGE_NATIONALITY_FIELD_SOURCES as ao, ComplyAdvantageNationalityFieldSources as ap, COMPLY_ADVANTAGE_COUNTRY_FIELD_SOURCES as aq, ComplyAdvantageCountryFieldSources as ar, COMPLY_ADVANTAGE_DATE_OF_BIRTH_FIELD_SOURCES as as, ComplyAdvantageDateOfBirthFieldSources as at, CreateSearchInput as au, MatchStatuses as av, MatchStatus as aw, RiskLevels as ax, RiskLevel as ay, UpdateSearchInput as az, ComplyAdvantageSearchSuccessResponse as b, SUMSUB_REVIEW_STATUSES as b$, ChainalysisConfig as b0, TRMLabsConfig as b1, CrystalIntelligenceConfig as b2, ScorechainConfig as b3, WorkflowsScorechainConfig as b4, BigConfig as b5, IpQualityConfig as b6, NotabeneConfig as b7, ProviderIntegrationTypeOptions as b8, ProviderIntegrationType as b9, DeleteProviderResponse as bA, WEBHOOK_TYPES as bB, WebhookType as bC, ApplicantMemberOfSchema as bD, SumSubWebhookSchema as bE, BaseApplicantActionSchema as bF, SUMSUB_STEPS as bG, SumSubStep as bH, SUMSUB_APPLICANT_TYPES as bI, SumSubApplicantType as bJ, SUMSUB_REVIEW_ANSWERS as bK, SumSubReviewAnswer as bL, SUMSUB_REVIEW_REJECT_TYPES as bM, SumSubReviewRejectType as bN, SumsubReviewDecision as bO, SumsubCountryCode as bP, SumSubAddress as bQ, SumSubApplicantInfo as bR, INDIVIDUAL_BENEFICIARY_RELATIONS as bS, IndividualBeneficiaryRelation as bT, BENEFICIARY_TYPES as bU, BeneficiaryType as bV, BeneficiaryCompanyCustomerClaims as bW, BeneficiaryCompanyCustomerClaimsArray as bX, SumSubCompanyApplicantInfo as bY, SUMSUB_WEBHOOK_INTERNAL_STATUS as bZ, SumsubWebhookInternalStatus as b_, BaseProvider as ba, NexeraIdSSIDProvider as bb, NexeraIdKYBProvider as bc, BigProvider as bd, ScorechainProvider as be, MerkleScienceProvider as bf, ChainalysisProvider as bg, TRMLabsProvider as bh, CrystalIntelligenceProvider as bi, NotabeneProvider as bj, IpqualityscoreProvider as bk, ComplyAdvantageProviderConfigTypes as bl, ComplyAdvantageProviderConfigFilters as bm, ComplyAdvantageProviderConfigElement as bn, ComplyAdvantageProvider as bo, SynapsProvider as bp, ProviderData as bq, ProviderDataProject as br, GetProvidersResponse as bs, GetProviderResponse as bt, CreateProviderInput as bu, CreateProviderResponse as bv, UpdateProviderInput as bw, UpdateProviderResponse as bx, ToggleProviderInput as by, DeleteProviderInput as bz, IpQualityAnalysisRequest as c, ProofOfResidenceMetaData as c$, SumSubReviewStatus as c0, SUMSUB_DOC_TYPES as c1, SUMSUB_DOC_TYPES_ARRAY as c2, SumSubDocType as c3, SUMSUB_KYC_DOC_TYPES as c4, SumSubKycDocType as c5, KYC_DOC_SIDES as c6, KycDocSide as c7, SUMSUB_FLOW_LEVEL as c8, SumSubFlowLevel as c9, SUMSUB_KYB_SESSION_FLOW_SECTION_STATUS as cA, SumsubKybSessionFlowSectionStatus as cB, SumsubKybSessionFlowSectionItem as cC, SumsubKybSessionFlowSection as cD, SumSubSimilarApplicantsSchema as cE, ApplicantImages as cF, SUMSUB_REVIEW_REJECT_LABELS as cG, SumSubReviewRejectLabel as cH, SUMSUB_REVIEW_REJECT_LABELS_DESCRIPTION as cI, KYC_STEP_TYPES as cJ, KycStep as cK, KycStepStatuses as cL, KycStepStatus as cM, KYC_RESULTS as cN, KycResult as cO, KYC_SESSION_STATUSES as cP, KycSessionStatus as cQ, EmailVerificationResponse as cR, SelectKycSessionStep as cS, APPLICANT_CHECK_STATUSES as cT, ApplicantCheckStatus as cU, SelectKycSession as cV, SelectKycSessionWithCompletedSteps as cW, GetKycSessionInput as cX, GetKycSessionResponse as cY, UpdateKycSessionOutput as cZ, VideoKycMetaData as c_, SumSubRequiredIdDoc as ca, UploadDocumentRequest as cb, SumSubReviewResultSchema as cc, SumSubImageReviewResultSchema as cd, SumSubImageStatus as ce, SumsubApplicantTypes as cf, SumsubApplicantType as cg, SumSubIndividualApplicantSchema as ch, SumSubCompanyApplicantSchema as ci, SumSubImageId as cj, SUMSUB_COMPANY_BENEFICIARY_GROUP as ck, SumsubCompanyBeneficiaryGroup as cl, SumsubStepStatus as cm, SumSubVerificationStepSchema as cn, SumSubApplicantVerificationStepSchema as co, SUMSUB_MEDIA_CONTENT_TYPES as cp, SumSubMediaContentType as cq, DocumentMetadataSchema as cr, DocumentSubmitResponse as cs, SumSubApplicantReviewStatusSchema as ct, SumSubApplicantResetSchema as cu, SumSubGenerateExternalWebSdkLinkSchema as cv, SumsubVideoCallData as cw, SumsubKycDataSchema as cx, SumsubKybDataSchema as cy, SumSubApplicantSchema as cz, IpQualityAnalysisResponse as d, AuthTokenResponse as d$, ProofOfResidenceDocumentType as d0, GetCredentialsOutput as d1, CustomerContactInformationOutput as d2, CredentialMetadata as d3, GetKycSessionResponseWithCredentialsMetadata as d4, IDImageMetaData as d5, SelfieImageMetaData as d6, ApiErrorResponse as d7, ApiErrorCommandResponse as d8, ApiSuccessCommandResponse as d9, MerkleAddressApiError as dA, MerkleAddressResponse as dB, ChainalysisRequest as dC, ChainalysisRegisterApiResponse as dD, ChainalysisRiskLevel as dE, ChainalysisErrorCodes as dF, ChainalysisRiskAssessmentApiResponse as dG, ChainalysisApiError as dH, ChainalysisRegisterResponse as dI, ChainalysisRiskAssessmentResponse as dJ, CoinMarketCapRequest as dK, CoinMarketCapQuote as dL, CoinMarketCapQuotes as dM, CoinMarketCapApiResponse as dN, CoinMarketCapFiatId as dO, TRMLabsAddressesScreeningApiRequest as dP, TRM_RISK_SCORE_LEVEL as dQ, TRM_RISK_SCORE_LEVEL_LABEL as dR, TRMLabsRiskScoreToScorechainRiskMapping as dS, TRMLabsAddressesScreening as dT, TRMLabsAddressesScreeningResponse as dU, CrystalWalletScreeningApiRequest as dV, CrystalWalletScreeningResponse as dW, NotabeneAudience as dX, AuthTokenRequest as dY, AuthToken as dZ, AuthTokenError as d_, GetKycSessionsOutput as da, KYB_STEP_TYPES as db, KybStep as dc, KYB_RESULTS as dd, KybResult as de, KYB_SESSION_STATUSES as df, KybSessionStatus as dg, COMPANY_DOCUMENT_STATUS as dh, CompanyDocumentStatus as di, CompanyDocumentMetaData as dj, BeneficiaryAttestationDocumentMetaData as dk, TopographRegistryDocumentMetaData as dl, BeneficiaryVerificationStatus as dm, BeneficiaryVerificationStatusArray as dn, SelectKybSession as dp, GetKybSessionInput as dq, GetKybSessionResponse as dr, UpdateKybSessionOutput as ds, CustomerDocumentMetaData as dt, CustomerStatusResults as du, MerkleBlockChainTypes as dv, MerkleBlockChainName as dw, MerkleBlockChainCodes as dx, MerkleAddressRequest as dy, MerkleAddressApiResponse as dz, IpQualityServiceAnalysis as e, NotabeneAssetResponse as e0, NameIdentifierType as e1, NationalIdentifierType as e2, LegalPersonNameIdentifierType as e3, NotabeneTxCreateRequest as e4, NOTABENE_TX_CREATE_STATUS as e5, NotabeneTxCreateResponse as e6, NotabeneErrorCode as e7, NotabeneTxCreateError as e8, NotabeneTxValidateFullResponse as e9, NotabeneJurisdictionsRequest as ea, NotabeneJurisdictionsCondition as eb, NotabeneJurisdictionsUnitaryResponse as ec, NotabeneJurisdictionsResponse as ed, NotabeneWebhookPayload as ee, NotabeneWebhookSchema as ef, IpQualityServiceErrorResponse as f, BigPropertiesLiteral as g, BigProperties as h, BigProperty as i, BigCSErrorCodes as j, BitRankRequest as k, BitRankVerified as l, BitRankVerifiedErrorResponse as m, BitRankVerifiedError as n, BitRankVerifiedResponse as o, Status$3 as p, WebhookPayload as q, NestedSession as r, Session as s, SessionWithoutSteps as t, StepTypes as u, StepType as v, ReasonCodes as w, ReasonCode as x, DocumentIdType as y, DocumentIdMetadata as z };
+var VERIFF_DECISION_STATUSES = ["approved", "declined", "resubmission_requested", "expired", "abandoned"];
+var VeriffDecisionStatus = z["enum"](VERIFF_DECISION_STATUSES);
+var VERIFF_DECISION_CODES = [9001, 9102, 9103, 9104];
+var VeriffDecisionCode = z.union([z.literal(9001),
+// approved
+z.literal(9102),
+// declined
+z.literal(9103),
+// resubmission_requested
+z.literal(9104),
+// expired
+z.number() // fallback for unknown codes — do not reject valid webhooks
+]);
+
+// .passthrough() — see veriff-webhook.schema.ts.
+
+var VeriffCreateSessionRequest = z.object({
+  verification: z.object({
+    person: z.object({
+      firstName: z.string(),
+      lastName: z.string()
+    }).passthrough(),
+    vendorData: z.string(),
+    // our internal customerId
+    callback: z.string().url(),
+    timestamp: z.string() // ISO 8601
+  }).passthrough()
+}).passthrough();
+var VeriffCreateSessionResponse = z.object({
+  status: z.string(),
+  verification: z.object({
+    id: z.string().uuid(),
+    url: z.string().url(),
+    sessionToken: z.string(),
+    baseUrl: z.string().optional()
+  }).passthrough()
+}).passthrough();
+
+/** Veriff watchlist webhook (initial_result | updated_result).
+ *  Strict (no passthrough) so it satisfies MessageBrokerEvent's ZodSchema<T>
+ *  — passthrough breaks that via the inferred index signature. */
+
+var VeriffWatchlistCheckType = z["enum"](["initial_result", "updated_result"]);
+var VeriffWatchlistMatchStatus = z["enum"](["possible_match", "no_match"]);
+var VeriffWatchlistSearchTerm = z.object({
+  name: z.string().nullable().optional(),
+  // Veriff sends `year` as a string in practice; coerce handles both.
+  year: z.coerce.number().nullable().optional(),
+  lists: z.array(z.string()).nullable().optional(),
+  countries: z.array(z.string()).nullable().optional(),
+  exactMatch: z["boolean"]().nullable().optional(),
+  matchThreshold: z.number().nullable().optional(),
+  excludeDeceased: z["boolean"]().nullable().optional()
+});
+/** Listing entry per category; passthrough preserves undocumented fields. */
+var VeriffWatchlistListingEntry = z.object({
+  sourceName: z.string().nullable().optional(),
+  sourceUrl: z.string().nullable().optional(),
+  snippet: z.string().nullable().optional(),
+  date: z.string().nullable().optional()
+}).passthrough();
+/** Five hit categories; passthrough for future buckets. */
+var VeriffWatchlistListingsByCategory = z.object({
+  warnings: z.array(VeriffWatchlistListingEntry).nullable().optional(),
+  sanctions: z.array(VeriffWatchlistListingEntry).nullable().optional(),
+  fitnessProbity: z.array(VeriffWatchlistListingEntry).nullable().optional(),
+  pep: z.array(VeriffWatchlistListingEntry).nullable().optional(),
+  adverseMedia: z.array(VeriffWatchlistListingEntry).nullable().optional()
+}).passthrough();
+/** Per-hit schema. aka/associates/matchTypes use z.unknown() — Veriff sometimes
+ *  returns objects instead of strings; UI handles both shapes at render time. */
+var VeriffWatchlistHit = z.object({
+  matchedName: z.string().nullable().optional(),
+  countries: z.array(z.string()).nullable().optional(),
+  dateOfBirth: z.string().nullable().optional(),
+  dateOfDeath: z.string().nullable().optional(),
+  matchTypes: z.array(z.unknown()).nullable().optional(),
+  aka: z.array(z.unknown()).nullable().optional(),
+  associates: z.array(z.unknown()).nullable().optional(),
+  listingsRelatedToMatch: VeriffWatchlistListingsByCategory.nullable().optional()
+}).passthrough();
+// Top-level strict so it's assignable to MessageBrokerEvent's ZodSchema<T>;
+// passthrough lives on nested objects.
+var VeriffWatchlistWebhook = z.object({
+  checkType: VeriffWatchlistCheckType,
+  attemptId: z.string(),
+  sessionId: z.string(),
+  vendorData: z.string().nullable().optional(),
+  endUserId: z.string().nullable().optional(),
+  matchStatus: VeriffWatchlistMatchStatus,
+  // Diverges from matchStatus when operator marks hits on Veriff's side.
+  reviewStatus: z.string().nullable().optional(),
+  // Veriff-side flag for unseen monitoring updates; surfaced in dashboard.
+  hasUnacknowledgedChanges: z["boolean"]().nullable().optional(),
+  createdAt: z.string(),
+  totalHits: z.number(),
+  hits: z.array(VeriffWatchlistHit),
+  searchTerm: VeriffWatchlistSearchTerm.nullable().optional()
+});
+
+// .passthrough() everywhere — strict shapes silently drop fields Veriff adds
+// in some flows (yearOfBirth, pepSanctionMatch, etc.), same trap as Topograph.
+
+var VeriffPerson = z.object({
+  firstName: z.string().nullable().optional(),
+  lastName: z.string().nullable().optional(),
+  dateOfBirth: z.string().nullable().optional(),
+  // YYYY-MM-DD
+  gender: z.string().nullable().optional(),
+  nationality: z.string().nullable().optional(),
+  placeOfBirth: z.string().nullable().optional(),
+  idNumber: z.string().nullable().optional()
+}).passthrough();
+var VeriffDocument = z.object({
+  number: z.string().nullable().optional(),
+  type: z.string().nullable().optional(),
+  country: z.string().nullable().optional(),
+  validFrom: z.string().nullable().optional(),
+  validUntil: z.string().nullable().optional()
+}).passthrough();
+var VeriffEventWebhook = z.object({
+  id: z.string().uuid(),
+  attemptId: z.string().uuid().optional(),
+  feature: z.string().optional(),
+  code: z.number(),
+  action: z.string(),
+  vendorData: z.string().nullable().optional(),
+  // our customerId
+  endUserId: z.string().nullable().optional()
+}).passthrough();
+var VeriffDecisionWebhook = z.object({
+  status: z.string(),
+  verification: z.object({
+    id: z.string().uuid(),
+    // providerSessionId
+    attemptId: z.string().uuid().optional(),
+    vendorData: z.string().optional(),
+    // our customerId
+    status: VeriffDecisionStatus,
+    code: VeriffDecisionCode,
+    reason: z.string().nullable().optional(),
+    reasonCode: z.number().nullable().optional(),
+    acceptanceTime: z.string().optional(),
+    decisionTime: z.string().nullable().optional(),
+    person: VeriffPerson.optional(),
+    document: VeriffDocument.optional(),
+    riskScore: z.object({
+      score: z.number()
+    }).optional()
+  }).passthrough().nullable(),
+  technicalData: z.object({
+    ip: z.string().nullable().optional()
+  }).passthrough().optional()
+}).passthrough();
+
+export { SynapsSessionErrorResponse as $, ProofOfAddressDocumentTypes as A, BigCryptoChain as B, ComplyAdvantageSearchResponse as C, DocumentIdTypes as D, EmailVerificationAnalysisResponse as E, File$1 as F, ProofOfAddressDocumentType as G, ProofOfAddressMetadata as H, IpQualityServiceAnalysisResponse as I, PhoneMetadata as J, EmailMetadata as K, LivenessMetadata as L, MergedProviders as M, NotabeneTxCreateStatus as N, AMLMetadata as O, PhoneVerificationAnalysisResponse as P, Step as Q, RequestProperty as R, Statuses as S, SynapsSessionEvent as T, SynapsStepEvent as U, typeToHumanReadable as V, WrappedIpQualityServiceErrorResponse as W, SynapsSessionRequest as X, SESSION_NOT_FOUND as Y, UNKNOWN_ERROR as Z, RESULT_PARSER_ERROR as _, ComplyAdvantageSearchErrorResponse as a, MerkleScienceConfig as a$, SynapsSessionResponse as a0, SynapsStepRequest as a1, STEP_NOT_FOUND as a2, SynapsStepErrorResponse as a3, SynapsStepResponse as a4, CoerceDateUTC as a5, SEARCH_FILTER_SANCTION_TYPE as a6, SearchFilterSanctionType as a7, SEARCH_FILTER_PEP_TYPE as a8, SearchFilterPepType as a9, UpdateSearchEntitiesInput as aA, ComplyAdvantageUser as aB, MatchTypeDetail as aC, ComplyAdvantageMedia as aD, ComplyAdvantageSearchDataResponseHit as aE, ComplyAdvantageSearchDataResponse as aF, ComplyAdvantageKeyInformation as aG, ComplyAdvantageAmlItemSource as aH, ComplyAdvantageAmlFullListing as aI, ComplyAdvantageSearchEntitiesDataResponse as aJ, ComplyAdvantageSearchEntitiesSuccessResponse as aK, ComplyAdvantageSearchEntitiesResponse as aL, ComplyAdvantageSearchRequest as aM, ComplyAdvantageSearchRequests as aN, ComplyAdvantageUpdateSearchRequest as aO, ComplyAdvantageUpdateSearchEntitiesRequest as aP, ComplyAdvantageUpdateSearchEntitiesSuccessResponse as aQ, ComplyAdvantageUpdateSearchEntitiesResponse as aR, ComplyAdvantageMonitorSearchDataResponse as aS, ComplyAdvantageMonitorSearchSuccessResponse as aT, ComplyAdvantageMonitorSearchResponse as aU, ComplyAdvantageMonitoredSearchUpdate as aV, ProviderWithoutConfig as aW, IdentityProviderOptions as aX, IdentityProvider as aY, DataProviderOptions as aZ, DataProvider as a_, SEARCH_FILTER_ADVERSE_MEDIA_TYPE as aa, SearchFilterAdverseMediaType as ab, HIGH_RISK_TYPES as ac, MEDIUM_RISK_TYPES as ad, COMPLY_ADVANTAGE_RESPONSE_MATCH_TYPE as ae, ComplyAdvantageResponseMatchType as af, mappingMatchTypeToLabel as ag, COMPLY_ADVANTAGE_RESPONSE_MATCH_STATUS as ah, ComplyAdvantageReponseMatchStatus as ai, SEARCH_FILTER_TYPES as aj, SearchFilterType as ak, SearchEntityTypes as al, SearchEntityType as am, SearchFilters as an, COMPLY_ADVANTAGE_NATIONALITY_FIELD_SOURCES as ao, ComplyAdvantageNationalityFieldSources as ap, COMPLY_ADVANTAGE_COUNTRY_FIELD_SOURCES as aq, ComplyAdvantageCountryFieldSources as ar, COMPLY_ADVANTAGE_DATE_OF_BIRTH_FIELD_SOURCES as as, ComplyAdvantageDateOfBirthFieldSources as at, CreateSearchInput as au, MatchStatuses as av, MatchStatus as aw, RiskLevels as ax, RiskLevel as ay, UpdateSearchInput as az, ComplyAdvantageSearchSuccessResponse as b, SUMSUB_REVIEW_STATUSES as b$, ChainalysisConfig as b0, TRMLabsConfig as b1, CrystalIntelligenceConfig as b2, ScorechainConfig as b3, WorkflowsScorechainConfig as b4, BigConfig as b5, IpQualityConfig as b6, NotabeneConfig as b7, ProviderIntegrationTypeOptions as b8, ProviderIntegrationType as b9, DeleteProviderResponse as bA, WEBHOOK_TYPES as bB, WebhookType as bC, ApplicantMemberOfSchema as bD, SumSubWebhookSchema as bE, BaseApplicantActionSchema as bF, SUMSUB_STEPS as bG, SumSubStep as bH, SUMSUB_APPLICANT_TYPES as bI, SumSubApplicantType as bJ, SUMSUB_REVIEW_ANSWERS as bK, SumSubReviewAnswer as bL, SUMSUB_REVIEW_REJECT_TYPES as bM, SumSubReviewRejectType as bN, SumsubReviewDecision as bO, SumsubCountryCode as bP, SumSubAddress as bQ, SumSubApplicantInfo as bR, INDIVIDUAL_BENEFICIARY_RELATIONS as bS, IndividualBeneficiaryRelation as bT, BENEFICIARY_TYPES as bU, BeneficiaryType as bV, BeneficiaryCompanyCustomerClaims as bW, BeneficiaryCompanyCustomerClaimsArray as bX, SumSubCompanyApplicantInfo as bY, SUMSUB_WEBHOOK_INTERNAL_STATUS as bZ, SumsubWebhookInternalStatus as b_, BaseProvider as ba, NexeraIdSSIDProvider as bb, NexeraIdKYBProvider as bc, BigProvider as bd, ScorechainProvider as be, MerkleScienceProvider as bf, ChainalysisProvider as bg, TRMLabsProvider as bh, CrystalIntelligenceProvider as bi, NotabeneProvider as bj, IpqualityscoreProvider as bk, ComplyAdvantageProviderConfigTypes as bl, ComplyAdvantageProviderConfigFilters as bm, ComplyAdvantageProviderConfigElement as bn, ComplyAdvantageProvider as bo, SynapsProvider as bp, ProviderData as bq, ProviderDataProject as br, GetProvidersResponse as bs, GetProviderResponse as bt, CreateProviderInput as bu, CreateProviderResponse as bv, UpdateProviderInput as bw, UpdateProviderResponse as bx, ToggleProviderInput as by, DeleteProviderInput as bz, IpQualityAnalysisRequest as c, ProofOfResidenceMetaData as c$, SumSubReviewStatus as c0, SUMSUB_DOC_TYPES as c1, SUMSUB_DOC_TYPES_ARRAY as c2, SumSubDocType as c3, SUMSUB_KYC_DOC_TYPES as c4, SumSubKycDocType as c5, KYC_DOC_SIDES as c6, KycDocSide as c7, SUMSUB_FLOW_LEVEL as c8, SumSubFlowLevel as c9, SUMSUB_KYB_SESSION_FLOW_SECTION_STATUS as cA, SumsubKybSessionFlowSectionStatus as cB, SumsubKybSessionFlowSectionItem as cC, SumsubKybSessionFlowSection as cD, SumSubSimilarApplicantsSchema as cE, ApplicantImages as cF, SUMSUB_REVIEW_REJECT_LABELS as cG, SumSubReviewRejectLabel as cH, SUMSUB_REVIEW_REJECT_LABELS_DESCRIPTION as cI, KYC_STEP_TYPES as cJ, KycStep as cK, KycStepStatuses as cL, KycStepStatus as cM, KYC_RESULTS as cN, KycResult as cO, KYC_SESSION_STATUSES as cP, KycSessionStatus as cQ, EmailVerificationResponse as cR, SelectKycSessionStep as cS, APPLICANT_CHECK_STATUSES as cT, ApplicantCheckStatus as cU, SelectKycSession as cV, SelectKycSessionWithCompletedSteps as cW, GetKycSessionInput as cX, GetKycSessionResponse as cY, UpdateKycSessionOutput as cZ, VideoKycMetaData as c_, SumSubRequiredIdDoc as ca, UploadDocumentRequest as cb, SumSubReviewResultSchema as cc, SumSubImageReviewResultSchema as cd, SumSubImageStatus as ce, SumsubApplicantTypes as cf, SumsubApplicantType as cg, SumSubIndividualApplicantSchema as ch, SumSubCompanyApplicantSchema as ci, SumSubImageId as cj, SUMSUB_COMPANY_BENEFICIARY_GROUP as ck, SumsubCompanyBeneficiaryGroup as cl, SumsubStepStatus as cm, SumSubVerificationStepSchema as cn, SumSubApplicantVerificationStepSchema as co, SUMSUB_MEDIA_CONTENT_TYPES as cp, SumSubMediaContentType as cq, DocumentMetadataSchema as cr, DocumentSubmitResponse as cs, SumSubApplicantReviewStatusSchema as ct, SumSubApplicantResetSchema as cu, SumSubGenerateExternalWebSdkLinkSchema as cv, SumsubVideoCallData as cw, SumsubKycDataSchema as cx, SumsubKybDataSchema as cy, SumSubApplicantSchema as cz, IpQualityAnalysisResponse as d, AuthToken as d$, ProofOfResidenceDocumentType as d0, GetCredentialsOutput as d1, CustomerContactInformationOutput as d2, CredentialMetadata as d3, GetKycSessionResponseWithCredentialsMetadata as d4, IDImageMetaData as d5, SelfieImageMetaData as d6, ApiErrorResponse as d7, ApiErrorCommandResponse as d8, ApiSuccessCommandResponse as d9, MerkleAddressRequest as dA, MerkleAddressApiResponse as dB, MerkleAddressApiError as dC, MerkleAddressResponse as dD, ChainalysisRequest as dE, ChainalysisRegisterApiResponse as dF, ChainalysisRiskLevel as dG, ChainalysisErrorCodes as dH, ChainalysisRiskAssessmentApiResponse as dI, ChainalysisApiError as dJ, ChainalysisRegisterResponse as dK, ChainalysisRiskAssessmentResponse as dL, CoinMarketCapRequest as dM, CoinMarketCapQuote as dN, CoinMarketCapQuotes as dO, CoinMarketCapApiResponse as dP, CoinMarketCapFiatId as dQ, TRMLabsAddressesScreeningApiRequest as dR, TRM_RISK_SCORE_LEVEL as dS, TRM_RISK_SCORE_LEVEL_LABEL as dT, TRMLabsRiskScoreToScorechainRiskMapping as dU, TRMLabsAddressesScreening as dV, TRMLabsAddressesScreeningResponse as dW, CrystalWalletScreeningApiRequest as dX, CrystalWalletScreeningResponse as dY, NotabeneAudience as dZ, AuthTokenRequest as d_, GetKycSessionsOutput as da, KYC_PROVIDER_NAMES as db, KycProviderName as dc, KYB_STEP_TYPES as dd, KybStep as de, KYB_RESULTS as df, KybResult as dg, KYB_SESSION_STATUSES as dh, KybSessionStatus as di, COMPANY_DOCUMENT_STATUS as dj, CompanyDocumentStatus as dk, CompanyDocumentMetaData as dl, BeneficiaryAttestationDocumentMetaData as dm, TopographRegistryDocumentMetaData as dn, BeneficiaryVerificationStatus as dp, BeneficiaryVerificationStatusArray as dq, SelectKybSession as dr, GetKybSessionInput as ds, GetKybSessionResponse as dt, UpdateKybSessionOutput as du, CustomerDocumentMetaData as dv, CustomerStatusResults as dw, MerkleBlockChainTypes as dx, MerkleBlockChainName as dy, MerkleBlockChainCodes as dz, IpQualityServiceAnalysis as e, AuthTokenError as e0, AuthTokenResponse as e1, NotabeneAssetResponse as e2, NameIdentifierType as e3, NationalIdentifierType as e4, LegalPersonNameIdentifierType as e5, NotabeneTxCreateRequest as e6, NOTABENE_TX_CREATE_STATUS as e7, NotabeneTxCreateResponse as e8, NotabeneErrorCode as e9, NotabeneTxCreateError as ea, NotabeneTxValidateFullResponse as eb, NotabeneJurisdictionsRequest as ec, NotabeneJurisdictionsCondition as ed, NotabeneJurisdictionsUnitaryResponse as ee, NotabeneJurisdictionsResponse as ef, NotabeneWebhookPayload as eg, NotabeneWebhookSchema as eh, VERIFF_DECISION_STATUSES as ei, VeriffDecisionStatus as ej, VERIFF_DECISION_CODES as ek, VeriffDecisionCode as el, VeriffCreateSessionRequest as em, VeriffCreateSessionResponse as en, VeriffWatchlistCheckType as eo, VeriffWatchlistMatchStatus as ep, VeriffWatchlistSearchTerm as eq, VeriffWatchlistListingEntry as er, VeriffWatchlistListingsByCategory as es, VeriffWatchlistHit as et, VeriffWatchlistWebhook as eu, VeriffPerson as ev, VeriffDocument as ew, VeriffEventWebhook as ex, VeriffDecisionWebhook as ey, IpQualityServiceErrorResponse as f, BigPropertiesLiteral as g, BigProperties as h, BigProperty as i, BigCSErrorCodes as j, BitRankRequest as k, BitRankVerified as l, BitRankVerifiedErrorResponse as m, BitRankVerifiedError as n, BitRankVerifiedResponse as o, Status$3 as p, WebhookPayload as q, NestedSession as r, Session as s, SessionWithoutSteps as t, StepTypes as u, StepType as v, ReasonCodes as w, ReasonCode as x, DocumentIdType as y, DocumentIdMetadata as z };