@nexeraid/identity-schemas 2.230.0-dev → 2.232.0-dev

package/dist/{tfhe-utilities-45a352cd.cjs.prod.cjs → tfhe-utilities-daf1c4fc.cjs.prod.cjs}

@@ -1,11 +1,12 @@
 'use strict';
 
-var vault_schema = require('./vault.schema-64532539.cjs.prod.cjs');
-var identityApi_schema = require('./identity-api.schema-a6837339.cjs.prod.cjs');
+var vault_schema = require('./vault.schema-f25c0d9b.cjs.prod.cjs');
+var identityApi_schema = require('./identity-api.schema-1d6c48b0.cjs.prod.cjs');
 
 var VC_JSON_SCHEMA_MAP = {
   ProofOfResidence: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmYTBPiU8rwEnGUPfqaX2PxayEDTdjXgNU8tHWoAknUrNs",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmYTBPiU8rwEnGUPfqaX2PxayEDTdjXgNU8tHWoAknUrNs",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmYTBPiU8rwEnGUPfqaX2PxayEDTdjXgNU8tHWoAknUrNs",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmYTBPiU8rwEnGUPfqaX2PxayEDTdjXgNU8tHWoAknUrNs",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmYTBPiU8rwEnGUPfqaX2PxayEDTdjXgNU8tHWoAknUrNs",
@@ -16,6 +17,7 @@ var VC_JSON_SCHEMA_MAP = {
   },
   ProofOfResidence_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmWEa2nNHLP3bsFYDGZbpLuM42J8krpEhjsuDkT4Q19VWf",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmWEa2nNHLP3bsFYDGZbpLuM42J8krpEhjsuDkT4Q19VWf",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmWEa2nNHLP3bsFYDGZbpLuM42J8krpEhjsuDkT4Q19VWf",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmWEa2nNHLP3bsFYDGZbpLuM42J8krpEhjsuDkT4Q19VWf",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmWEa2nNHLP3bsFYDGZbpLuM42J8krpEhjsuDkT4Q19VWf",
@@ -26,6 +28,7 @@ var VC_JSON_SCHEMA_MAP = {
   },
   IDInformation: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmWVcuCwuzYrFB9KCUapdSw9XJ9diAVCgKEX4rYGCUEzKc",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmWVcuCwuzYrFB9KCUapdSw9XJ9diAVCgKEX4rYGCUEzKc",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmWVcuCwuzYrFB9KCUapdSw9XJ9diAVCgKEX4rYGCUEzKc",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmWVcuCwuzYrFB9KCUapdSw9XJ9diAVCgKEX4rYGCUEzKc",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmWVcuCwuzYrFB9KCUapdSw9XJ9diAVCgKEX4rYGCUEzKc",
@@ -36,12 +39,14 @@ var VC_JSON_SCHEMA_MAP = {
   },
   AMLScreeningsResults: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmacioN1D6w8Pz1vzYKZotMESuNKu9kq5K3XWGA4SRrPyx",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmacioN1D6w8Pz1vzYKZotMESuNKu9kq5K3XWGA4SRrPyx",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmacioN1D6w8Pz1vzYKZotMESuNKu9kq5K3XWGA4SRrPyx",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmacioN1D6w8Pz1vzYKZotMESuNKu9kq5K3XWGA4SRrPyx",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmacioN1D6w8Pz1vzYKZotMESuNKu9kq5K3XWGA4SRrPyx"
   },
   IDImage: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmTiLZa6Yz2baC6rnUXhHiw5MsZwNBAdUuSw22B4rGGpV2",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmTiLZa6Yz2baC6rnUXhHiw5MsZwNBAdUuSw22B4rGGpV2",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmTiLZa6Yz2baC6rnUXhHiw5MsZwNBAdUuSw22B4rGGpV2",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmTiLZa6Yz2baC6rnUXhHiw5MsZwNBAdUuSw22B4rGGpV2",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmTiLZa6Yz2baC6rnUXhHiw5MsZwNBAdUuSw22B4rGGpV2",
@@ -52,6 +57,7 @@ var VC_JSON_SCHEMA_MAP = {
   },
   SelfieImage: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmURq8xRsfA6QUrMwYZ9nrFzFXm67wTSkN7hq82XiTrrxY",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmURq8xRsfA6QUrMwYZ9nrFzFXm67wTSkN7hq82XiTrrxY",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmURq8xRsfA6QUrMwYZ9nrFzFXm67wTSkN7hq82XiTrrxY",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmURq8xRsfA6QUrMwYZ9nrFzFXm67wTSkN7hq82XiTrrxY",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmURq8xRsfA6QUrMwYZ9nrFzFXm67wTSkN7hq82XiTrrxY",
@@ -62,6 +68,7 @@ var VC_JSON_SCHEMA_MAP = {
   },
   IDInformation_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmUFBpPnPanYZPcRKRnGFZeyYSpXx1L3XNngowjRtQFzrD",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmUFBpPnPanYZPcRKRnGFZeyYSpXx1L3XNngowjRtQFzrD",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmUFBpPnPanYZPcRKRnGFZeyYSpXx1L3XNngowjRtQFzrD",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmUFBpPnPanYZPcRKRnGFZeyYSpXx1L3XNngowjRtQFzrD",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmUFBpPnPanYZPcRKRnGFZeyYSpXx1L3XNngowjRtQFzrD",
@@ -72,12 +79,14 @@ var VC_JSON_SCHEMA_MAP = {
   },
   AMLScreeningsResults_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/Qma96fMaDmpdJMnVsRdAeVokyU7KBqRSuY8eZJkoLFdsvJ",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/Qma96fMaDmpdJMnVsRdAeVokyU7KBqRSuY8eZJkoLFdsvJ",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/Qma96fMaDmpdJMnVsRdAeVokyU7KBqRSuY8eZJkoLFdsvJ",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/Qma96fMaDmpdJMnVsRdAeVokyU7KBqRSuY8eZJkoLFdsvJ",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/Qma96fMaDmpdJMnVsRdAeVokyU7KBqRSuY8eZJkoLFdsvJ"
   },
   IDImage_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmTYHuqTLNRyfUjncDNwd1KKw9sc7DiewTm1FJ4RPHYqcW",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmTYHuqTLNRyfUjncDNwd1KKw9sc7DiewTm1FJ4RPHYqcW",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmTYHuqTLNRyfUjncDNwd1KKw9sc7DiewTm1FJ4RPHYqcW",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmTYHuqTLNRyfUjncDNwd1KKw9sc7DiewTm1FJ4RPHYqcW",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmTYHuqTLNRyfUjncDNwd1KKw9sc7DiewTm1FJ4RPHYqcW",
@@ -88,6 +97,7 @@ var VC_JSON_SCHEMA_MAP = {
   },
   SelfieImage_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmUV9bVQ433m5ejjgqodQ4kfWqMMzFCwJqcqRhzSfENEMX",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmUV9bVQ433m5ejjgqodQ4kfWqMMzFCwJqcqRhzSfENEMX",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmUV9bVQ433m5ejjgqodQ4kfWqMMzFCwJqcqRhzSfENEMX",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmUV9bVQ433m5ejjgqodQ4kfWqMMzFCwJqcqRhzSfENEMX",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmUV9bVQ433m5ejjgqodQ4kfWqMMzFCwJqcqRhzSfENEMX",
@@ -98,48 +108,56 @@ var VC_JSON_SCHEMA_MAP = {
   },
   ID3: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmSiv7jMN1mcatdnsG4kJkLPVYkT92tV3oKMWqE7dYqzwX",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmSiv7jMN1mcatdnsG4kJkLPVYkT92tV3oKMWqE7dYqzwX",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmSiv7jMN1mcatdnsG4kJkLPVYkT92tV3oKMWqE7dYqzwX",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmSiv7jMN1mcatdnsG4kJkLPVYkT92tV3oKMWqE7dYqzwX",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmSiv7jMN1mcatdnsG4kJkLPVYkT92tV3oKMWqE7dYqzwX"
   },
   IDScan: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmZHArC9SYXEvNLei7qJCQr5qapSYYhmAMmsh5r35AtcoY",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmZHArC9SYXEvNLei7qJCQr5qapSYYhmAMmsh5r35AtcoY",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmZHArC9SYXEvNLei7qJCQr5qapSYYhmAMmsh5r35AtcoY",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmZHArC9SYXEvNLei7qJCQr5qapSYYhmAMmsh5r35AtcoY",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmZHArC9SYXEvNLei7qJCQr5qapSYYhmAMmsh5r35AtcoY"
   },
   IDScanSelfie: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmQQX5t9ZHqGMY5qKrxApMjejw4bugGVae3HddrcShZaGe",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmQQX5t9ZHqGMY5qKrxApMjejw4bugGVae3HddrcShZaGe",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmQQX5t9ZHqGMY5qKrxApMjejw4bugGVae3HddrcShZaGe",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmQQX5t9ZHqGMY5qKrxApMjejw4bugGVae3HddrcShZaGe",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmQQX5t9ZHqGMY5qKrxApMjejw4bugGVae3HddrcShZaGe"
   },
   IDScanPassport: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmUej2eizQoJQXzo4fmoN6Eu3SMAbUjVXG1rE3GotRDfST",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmUej2eizQoJQXzo4fmoN6Eu3SMAbUjVXG1rE3GotRDfST",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmUej2eizQoJQXzo4fmoN6Eu3SMAbUjVXG1rE3GotRDfST",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmUej2eizQoJQXzo4fmoN6Eu3SMAbUjVXG1rE3GotRDfST",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmUej2eizQoJQXzo4fmoN6Eu3SMAbUjVXG1rE3GotRDfST"
   },
   ID3_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmSFao9JrbMKLvjuuWdUqhhkrPCUcVSaoMiPWKMUMsAx9a",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmSFao9JrbMKLvjuuWdUqhhkrPCUcVSaoMiPWKMUMsAx9a",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmSFao9JrbMKLvjuuWdUqhhkrPCUcVSaoMiPWKMUMsAx9a",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmSFao9JrbMKLvjuuWdUqhhkrPCUcVSaoMiPWKMUMsAx9a",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmSFao9JrbMKLvjuuWdUqhhkrPCUcVSaoMiPWKMUMsAx9a"
   },
   IDScan_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmaoyFJjwbkMSTwWurK4tYFxWd3CDnMLu2KustmWL8Ruks",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmaoyFJjwbkMSTwWurK4tYFxWd3CDnMLu2KustmWL8Ruks",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmaoyFJjwbkMSTwWurK4tYFxWd3CDnMLu2KustmWL8Ruks",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmaoyFJjwbkMSTwWurK4tYFxWd3CDnMLu2KustmWL8Ruks",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmaoyFJjwbkMSTwWurK4tYFxWd3CDnMLu2KustmWL8Ruks"
   },
   IDScanSelfie_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmYoDQKUHSMEZk2ZwaXWvdHbYoLXShVWxRdsu1jsXxhN6F",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmYoDQKUHSMEZk2ZwaXWvdHbYoLXShVWxRdsu1jsXxhN6F",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmYoDQKUHSMEZk2ZwaXWvdHbYoLXShVWxRdsu1jsXxhN6F",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmYoDQKUHSMEZk2ZwaXWvdHbYoLXShVWxRdsu1jsXxhN6F",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmYoDQKUHSMEZk2ZwaXWvdHbYoLXShVWxRdsu1jsXxhN6F"
   },
   IDScanPassport_LD: {
     prod: "https://quicknode.quicknode-ipfs.com/ipfs/QmRBfV9TboGRz42rT45mnMMK8VTtTc9r1mpLQjGfyXCgaf",
+    dzprivatbank: "https://quicknode.quicknode-ipfs.com/ipfs/QmRBfV9TboGRz42rT45mnMMK8VTtTc9r1mpLQjGfyXCgaf",
     stage: "https://quicknode.quicknode-ipfs.com/ipfs/QmRBfV9TboGRz42rT45mnMMK8VTtTc9r1mpLQjGfyXCgaf",
     dev: "https://quicknode.quicknode-ipfs.com/ipfs/QmRBfV9TboGRz42rT45mnMMK8VTtTc9r1mpLQjGfyXCgaf",
     local: "https://quicknode.quicknode-ipfs.com/ipfs/QmRBfV9TboGRz42rT45mnMMK8VTtTc9r1mpLQjGfyXCgaf"

package/dist/{toArray-f7901f4f.esm.mjs → toArray-04d6373a.esm.mjs}

@@ -1,4 +1,4 @@
-import { gG as _arrayWithHoles, gH as _iterableToArray, gC as _unsupportedIterableToArray, gI as _nonIterableRest } from './vault.schema-34d810f5.esm.mjs';
+import { gK as _arrayWithHoles, gL as _iterableToArray, gG as _unsupportedIterableToArray, gM as _nonIterableRest } from './vault.schema-ac945548.esm.mjs';
 
 function _toArray(r) {
   return _arrayWithHoles(r) || _iterableToArray(r) || _unsupportedIterableToArray(r) || _nonIterableRest();

package/dist/{toArray-1c7c1e87.cjs.dev.cjs → toArray-72daad14.cjs.dev.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var vault_schema = require('./vault.schema-774651f4.cjs.dev.cjs');
+var vault_schema = require('./vault.schema-fc13f09a.cjs.dev.cjs');
 
 function _toArray(r) {
   return vault_schema._arrayWithHoles(r) || vault_schema._iterableToArray(r) || vault_schema._unsupportedIterableToArray(r) || vault_schema._nonIterableRest();

package/dist/{toArray-384a37b6.cjs.prod.cjs → toArray-bf51f0a4.cjs.prod.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var vault_schema = require('./vault.schema-64532539.cjs.prod.cjs');
+var vault_schema = require('./vault.schema-f25c0d9b.cjs.prod.cjs');
 
 function _toArray(r) {
   return vault_schema._arrayWithHoles(r) || vault_schema._iterableToArray(r) || vault_schema._unsupportedIterableToArray(r) || vault_schema._nonIterableRest();

package/dist/{vault.schema-34d810f5.esm.mjs → vault.schema-ac945548.esm.mjs}

@@ -519,7 +519,10 @@ var AbiItem = z.object({
   }).array().optional()
 });
 
-var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod"];
+var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod",
+// Dedicated single-tenant environment (DZ PRIVATBANK) on its own portals-dzprivatbank EKS
+// cluster. Isolated domains (*.dzprivatbank.compilot.ai) and dedicated svix/openmeter/S3.
+"dzprivatbank"];
 var EnvironmentSchema = z["enum"](ENVS);
 var UuidString = z.string().uuid();
 var OtpCode = z.string().regex(/^\d{6}$/, "OtpCode must be a 6-digit number");
@@ -536,7 +539,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   // No need for /identity suffix in path, handled in gateway
   identity_api: {
@@ -548,7 +552,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   identityV2: {
     cicd: "http://localhost:3009",
@@ -559,7 +564,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://identity-v2-test-dev-4.bjrcom.xyz",
     dev: "https://identity-v2.bjrcom.xyz",
     stage: "https://identity-v2.bjrpilot.xyz",
-    prod: "https://identity-v2.compilot.ai"
+    prod: "https://identity-v2.compilot.ai",
+    dzprivatbank: "https://identity-v2.dzprivatbank.compilot.ai"
   }
 };
 var IpAddress = z.string().optional().refine(function (val) {
@@ -2642,6 +2648,15 @@ var DatasetFormEdgeBindingPrefix = "datasetfeb";
 var DatasetFolderPrefix = "datasetf";
 var DatasetJobPrefix = "datasetj";
 var DatasetFormInvitationPrefix = "datasetfi";
+// F-PUBLIC-LINK - reusable public onboarding link id prefix.
+var FormShareLinkPrefix = "formsl";
+// Email-OTP gate challenge id prefix (public onboarding).
+var FormOtpChallengePrefix = "formotp";
+// Onboarding-review staging store: a pending form submission held for officer
+// validation before it commits to the dataset(s).
+var FormSubmissionPrefix = "formsub";
+// The RFI / flagged-items row (officer requests changes on a submission).
+var FormSubmissionChangeRequestPrefix = "fsubcr";
 var DatasetColumnDependencyPrefix = "datasetcd";
 var DatasetFormulaExecutionLogPrefix = "datasetfel";
 var DatasetChangeRequestPrefix = "datasetchr";
@@ -2967,7 +2982,53 @@ var IdentityAppV2BaseJWT = z.object({
   timestamp: z.number(),
   iat: z.number(),
   hosts: z.array(z.string()),
-  identitySessionId: IdentitySessionId.optional()
+  identitySessionId: IdentitySessionId.optional(),
+  /**
+   * F-PUBLIC-LINK: when present, this token was minted for ONE specific reusable
+   * public share link and is LINK-scoped, not merely workspace-scoped. The
+   * dataset-form question-read / resolve path treats this signed claim as the
+   * AUTHORITATIVE link id (a client-sent id must match it or is rejected) and
+   * enforces the link lifecycle (enabled / revoked / expired / cap) + view
+   * binding against it. This closes the omit-the-id bypass: a still-valid JWT
+   * for a revoked/disabled/expired link can no longer read the form definition
+   * by simply not sending formShareLinkId. Optional: invitation / member / kyc
+   * tokens omit it and are entirely unchanged.
+   */
+  formShareLinkId: z.string().optional(),
+  /**
+   * DZ email-OTP gate: set true only after the recipient proved control of their
+   * email via the one-time code (minted by the OTP verify endpoint). For tenants
+   * that REQUIRE email verification, the dataset-form questions / submit / data
+   * chokepoints reject a share-link token WITHOUT this claim. The resolve
+   * response's requiresEmailVerification flag is UX only; THIS signed claim is
+   * the authorization boundary. Optional: every other token omits it, unchanged.
+   */
+  formOtpVerified: z["boolean"]().optional(),
+  /**
+   * The email address the recipient proved control of at OTP verification. Signed
+   * alongside formOtpVerified and recorded in the created record's provenance, so
+   * every OTP-gated onboarding is traceable to a verified address. Optional.
+   */
+  verifiedEmail: z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B/D (onboarding-review RESUME origin): set only on a widget
+   * token minted by the submitter re-entry bootstrap (startFormResume) for a
+   * staged CHANGES_REQUESTED submission. Its PRESENCE marks the request as a
+   * RESUME (an in-flight remediation), NOT a new share-link submission, so the
+   * questions/OTP chokepoints do NOT block it on the NEW-SUBMISSION link
+   * lifecycle caps (capReached/enabled/expired) - the resume-token binding + OTP
+   * + tenant binding remain the authorization. Carries the staged submission id
+   * for audit. Optional: every non-resume token omits it, entirely unchanged.
+   */
+  formResumeSubmissionId: z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B: the staged submission's section-scope snapshot (pinned at
+   * the original submit), signed onto the resume widget token so the resume
+   * questions load scopes to it instead of the CURRENT share link's (possibly
+   * narrowed) sections. Absent = the submission was whole-form. Only ever set
+   * alongside formResumeSubmissionId.
+   */
+  formResumeSections: z.array(z.string()).optional()
 });
 var IdentityAppV2Web3JWT = IdentityAppV2BaseJWT.extend({
   flowType: z.literal(FlowType.Values.web3),
@@ -13554,4 +13615,4 @@ var TimeFrameCounters = z.object({
   yearly: z.number().optional()
 });
 
-export { POLKADOT_CHAIN_NAMES_LIST as $, ACTIVE_EVM_CHAIN_VALUES as A, BlockchainId as B, COSMOS_CHAIN_NAMES as C, DashboardChainId as D, EVM_BLOCK_TIME as E, SOLANA_CHAIN_IDS as F, ACTIVE_SOLANA_CHAIN_IDS as G, SolanaChainId as H, NEXERA_BITCOIN_CHAINS as I, BITCOIN_CHAIN_NAMES as J, BITCOIN_CHAIN_NAMES_LIST as K, BITCOIN_CHAIN_IDS as L, ACTIVE_BITCOIN_CHAIN_IDS as M, NonTestnetBlockchainId as N, BitcoinChainId as O, POLYGON_NETWORK_NAMES as P, NEXERA_APTOS_CHAINS as Q, APTOS_CHAIN_NAMES as R, StarknetChainId as S, TezosChainId as T, APTOS_CHAIN_NAMES_LIST as U, APTOS_CHAIN_IDS as V, ACTIVE_APTOS_CHAIN_IDS as W, AptosChainId as X, NEXERA_POLKADOT_CHAINS as Y, POLKADOT_CHAIN_NAMES as Z, _defineProperty as _, DashboardChainIdList as a, CurrencyCodes as a$, POLKADOT_CHAIN_IDS as a0, ACTIVE_POLKADOT_CHAIN_IDS as a1, PolkadotChainId as a2, NEXERA_CARDANO_CHAINS as a3, CARDANO_CHAIN_NAMES as a4, CARDANO_CHAIN_NAMES_LIST as a5, CARDANO_CHAIN_IDS as a6, ACTIVE_CARDANO_CHAIN_IDS as a7, CardanoChainId as a8, isValidAddress as a9, SUPPORTED_BLOCKCHAIN_NAMESPACES_FOR_SIGNATURE_AUTH as aA, SupportedBlockchainNamespaceForSignatureAuth as aB, DISPLAYED_BLOCKCHAIN_NAMESPACES as aC, DisplayedBlockchainNamespace as aD, BLOCKCHAIN_NAME_TO_NAMESPACE as aE, BLOCKCHAIN_NAMESPACE_TO_NAME as aF, BLOCKCHAIN_NAMESPACE_TO_ADDRESS_URL as aG, EIP155Signature as aH, AptosSignature as aI, StarknetSignature as aJ, PolkadotSignature as aK, CosmosSignature as aL, EdSignature as aM, SpSignature as aN, P2Signature as aO, TezosSignature as aP, CardanoSignature as aQ, BlockchainSignature as aR, FunctionCallData as aS, TezosEntrypointName as aT, AbiItem as aU, ENVS as aV, EnvironmentSchema as aW, UuidString as aX, OtpCode as aY, PUBLIC_SERVICES_SCHEMA_MAP as aZ, IpAddress as a_, PrivateKey as aa, PublicKey as ab, EvmAddress as ac, TxHash as ad, shortBlockchainAddress as ae, AptosAddress as af, StarknetAddress as ag, PolkadotAddress as ah, CosmosAddress as ai, TezosImplicitAddress as aj, TezosContractAddress as ak, TezosAddress as al, CardanoAddress as am, BitcoinP2PKHAddress as an, BitcoinP2SHAddress as ao, BitcoinBech32Address as ap, BitcoinTestnetP2PKHAddress as aq, BitcoinTestnetP2SHAddress as ar, BitcoinTestnetBech32Address as as, BitcoinAddress as at, BlockchainAddress as au, DashboardAddress as av, String0x as aw, HexadecimalSchema as ax, BLOCKCHAIN_NAMESPACES as ay, BlockchainNamespace as az, NEXERA_EVM_CHAINS as b, SsoProviderPrefix_NEW as b$, CurrencyCode as b0, CryptoCodes as b1, CryptoCode as b2, ISO3CountryCode as b3, ALPHA_2_COUNTRIES as b4, Alpha2Country as b5, countryISO3toISO2Mapping as b6, countryISO2toISO3Mapping as b7, CountryName as b8, isoCountriesNameFromISO2 as b9, EmailPrefix as bA, WalletPrefix as bB, AppPrefix as bC, ChallengePrefix as bD, TestPrefix as bE, IndividualScreeningPrefix as bF, SigGatingPrefix as bG, TagPrefix as bH, ScorechainAnalysisPrefix as bI, UserPrefix_NEW as bJ, OrganizationPrefix_NEW as bK, MemberPrefix_NEW as bL, WorkspacePrefix_NEW as bM, SessionPrefix_NEW as bN, AccountPrefix_NEW as bO, VerificationPrefix_NEW as bP, ApiKeyPrefix_NEW as bQ, InvitationPrefix_NEW as bR, PasskeyPrefix_NEW as bS, WorkspaceMemberPrefix_NEW as bT, WorkspaceRolePrefix_NEW as bU, OrganizationRolePrefix_NEW as bV, DepartmentPrefix_NEW as bW, TeamPrefix_NEW as bX, TeamMemberPrefix_NEW as bY, TeamRoleGrantPrefix_NEW as bZ, TwoFactorPrefix_NEW as b_, isoCountriesNameFromISO3 as ba, parseISO3CountryCode as bb, ScorechainCountry as bc, scorechainCountriesNameFromISO2 as bd, RiskScoreTypes as be, RiskScoreType as bf, CustomerTypes as bg, CustomerType as bh, KycOnboardingLevels as bi, KycOnboardingLevel as bj, KybOnboardingLevels as bk, KybOnboardingLevel as bl, CustomerOnboardingLevels as bm, CustomerOnboardingLevel as bn, CustomerStatuses as bo, CustomerStatus as bp, BasicCustomerContactInformation as bq, CUSTOMERS_CHARTS as br, CustomersChartType as bs, CUSTOMER_TABLE_COLUMNS as bt, CustomerTableColumn as bu, CUSTOMER_AUTOMATION_REASONS as bv, CustomerPersonalInformation as bw, StoragePrefix as bx, IdentityPrefix as by, IdentitySessionPrefix as bz, NEXERA_EVM_CHAIN_NAMES as c, SigGatingId as c$, SessionRevocationAuditPrefix_NEW as c0, DatasetPrefix as c1, DatasetColumnPrefix as c2, DatasetColumnTypePrefix as c3, DatasetColumnOptionPrefix as c4, DatasetRowPrefix as c5, DatasetRowValuePrefix as c6, DatasetViewPrefix as c7, DatasetViewFilterPrefix as c8, DatasetFormQuestionPrefix as c9, EvaluationMethodPrefix as cA, ActionPrefix as cB, WorkflowSessionAttributePrefix as cC, ComplyAdvantageSearchUpdatePrefix as cD, SsssSharePrefix as cE, SsssChunkPrefix as cF, AiExecutionPrefix as cG, AiExecutionStepPrefix as cH, AiDocumentPrefix as cI, AiAgentPrefix as cJ, AiStepPrefix as cK, ChatPrefix as cL, MessagePrefix as cM, ChatItemPrefix as cN, AiMessagePrefix as cO, WorkflowSessionId as cP, createBrandedSchemaId as cQ, createBrandedSchemaIdWithParams as cR, StorageId as cS, IdentityId as cT, IdentitySessionId as cU, EmailId as cV, WalletId as cW, AppId as cX, ChallengeId as cY, TestId as cZ, CustomerScreeningId as c_, DatasetFormEdgeBindingPrefix as ca, DatasetFolderPrefix as cb, DatasetJobPrefix as cc, DatasetFormInvitationPrefix as cd, DatasetColumnDependencyPrefix as ce, DatasetFormulaExecutionLogPrefix as cf, DatasetChangeRequestPrefix as cg, DatasetChangeRequestApprovalPrefix as ch, MetaAlertPrefix as ci, TagsToEntityPrefix as cj, TransactionAddressesPrefix as ck, TransactionPrefix as cl, TransactionActivityPrefix as cm, TransactionFeesPrefix as cn, TransactionReviewPrefix as co, TransactionPartiesPrefix as cp, TransactionInfosPrefix as cq, TransactionExtractedInfosPrefix as cr, TransactionMethodsPrefix as cs, TransactionMethodExtractedInfosPrefix as ct, InstitutionPrefix as cu, InstitutionExtractedInfosPrefix as cv, TransactionAmountPrefix as cw, ScenarioPrefix as cx, QueryPrefix as cy, QueryGroupPrefix as cz, NEXERA_EVM_CHAIN_NAMES_LIST as d, SsoProviderId_NEW as d$, TagId as d0, ActionId as d1, DatasetId as d2, DatasetColumnId as d3, DatasetColumnTypeId as d4, DatasetColumnOptionId as d5, DatasetRowId as d6, DatasetRowValueId as d7, DatasetViewId as d8, DatasetViewFilterId as d9, ScenarioId as dA, QueryId as dB, QueryGroupId as dC, EvaluationMethodId as dD, ScorechainAnalysisId as dE, WorkflowSessionAttributeId as dF, SsssShareId as dG, SsssChunkId as dH, ChatItemId as dI, UserId_NEW as dJ, OrganizationId_NEW as dK, MemberId_NEW as dL, WorkspaceId_NEW as dM, SessionId_NEW as dN, AccountId_NEW as dO, VerificationId_NEW as dP, ApiKeyId_NEW as dQ, InvitationId_NEW as dR, PasskeyId_NEW as dS, WorkspaceMemberId_NEW as dT, WorkspaceRoleId_NEW as dU, OrganizationRoleId_NEW as dV, DepartmentId_NEW as dW, TeamId_NEW as dX, TeamMemberId_NEW as dY, TeamRoleGrantId_NEW as dZ, TwoFactorId_NEW as d_, DatasetFormQuestionId as da, DatasetFormEdgeBindingId as db, DatasetFolderId as dc, DatasetJobId as dd, DatasetFormInvitationId as de, DatasetColumnDependencyId as df, DatasetFormulaExecutionLogId as dg, DatasetChangeRequestId as dh, DatasetChangeRequestApprovalId as di, MetaAlertId as dj, TagsToEntityId as dk, TransactionAddressesId as dl, TransactionId as dm, TransactionActivityId as dn, TransactionFeesId as dp, TransactionReviewId as dq, TransactionPartiesId as dr, TransactionInfosId as ds, TransactionExtractedInfosId as dt, TransactionMethodsId as du, TransactionMethodExtractedInfosId as dv, InstitutionId as dw, InstitutionExtractedInfosId as dx, TransactionAmountId as dy, ComplyAdvantageSearchUpdateId as dz, NEXERA_EVM_CHAINS_ID as e, TransactionsChartType as e$, generateId as e0, MemberIdLegacy as e1, ChatId as e2, MessageId as e3, FLOW_TYPES as e4, FlowType as e5, VerificationModes as e6, VerificationMode as e7, IDENTITY_DOCUMENT_COUNTRY_LIST_OPTIONS as e8, IdentityDocumentCountryListOption as e9, IDInformationTfheCredentialSubjectSchema as eA, IDInformationCredentialSubjectSchema as eB, IDImageCredentialSubjectSchema as eC, SelfieImageCredentialSubjectSchema as eD, ProofOfResidenceCredentialSubjectSchema as eE, GenericVerifiableCredentialSchema as eF, IDInformationTfheCredentialSchema as eG, IDInformationCredentialSchema as eH, IDImageCredentialSchema as eI, SelfieImageCredentialSchema as eJ, ProofOfResidenceCredentialSchema as eK, ID3CredentialSchema as eL, IDScanCredentialSchema as eM, IDScanPassportCredentialSchema as eN, IDScanSelfieCredentialSchema as eO, OLD_IDImageCredentialSchema as eP, OLD_IDInformationCredentialSchema as eQ, OLD_ProofOfResidenceCredentialSchema as eR, OLD_SelfieImageCredentialSchema as eS, OLD_AMLScreeningsResultsCredentialSchema as eT, TypeTags as eU, TypeTag as eV, Tag as eW, TagTitle as eX, getTagTypeFromEntityType as eY, WORKFLOW_TYPE_TO_TAG_TYPE as eZ, TRANSACTION_CHARTS as e_, IDENTITY_DOCUMENT_OPTIONS as ea, IdentityDocumentOptionsType as eb, PERSONAL_INFORMATION_FIELDS as ec, PersonalInformationFieldsIdentityDocuments as ed, Identifier as ee, AdditionalCustomerInformationParams as ef, OrganizationId as eg, WorkspaceId as eh, MemberId as ei, WorkflowId as ej, CustomerId as ek, ExternalCustomerId as el, IdentityAppV2Web3JWT as em, IdentityAppV2Web2JWT as en, IdentityWidgetAccessToken_NEW as eo, IdentityWidgetSessionToken as ep, Web2CreateSessionParams as eq, ID3CredentialSubjectSchema as er, IDScanCredentialSubjectSchema as es, IDScanPassportCredentialSubjectSchema as et, IDScanSelfieCredentialSubjectSchema as eu, OLD_IDImageCredentialSubjectSchema as ev, OLD_IDInformationCredentialSubjectSchema as ew, OLD_ProofOfResidenceCredentialSubjectSchema as ex, OLD_SelfieImageCredentialSubjectSchema as ey, OLD_AMLScreeningsResultsCredentialSubjectSchema as ez, NexeraEvmChains as f, GetAverageHistoricalAmountOutput as f$, TRANSACTION_TABLE_COLUMNS as f0, TransactionTableColumn as f1, TransactionTypes as f2, TransactionType as f3, TransactionTypesWithAll as f4, TransactionTypeWithAll as f5, TransactionRiskLevels as f6, TransactionRiskLevel as f7, TransactionReviewStatuses as f8, TransactionReviewStatus as f9, CreateTransactionInfosOutput as fA, CreateTransactionMethodOutput as fB, CreateInsitutionOutput as fC, CreateTransactionPartiesOutput as fD, CreateTransactionReviewOutput as fE, UpdateTransactionReviewParams as fF, UpdateTransactionsReviewParams as fG, UpdateTransactionReviewOutput as fH, GetTransactionsForAlertParams as fI, GetTransactionsForAlertOutput as fJ, GetTransactionParams as fK, GetTransactionByExternalIdParams as fL, CreateTransactionOutput as fM, CreateTransactionExtractedInfosOutput as fN, CreateTransactionMethodExtractedInfoOutput as fO, CreateInsitutionExtractedInfosOutput as fP, GetTransactionStatsParams as fQ, GetTransactionStatsOutput as fR, GetTransactionsCountParams as fS, GetTransactionsCountOutput as fT, initializeStatistics as fU, GetTransactionsParams as fV, GetOneTransactionOutput as fW, GetTransactionsOutputData as fX, GetTransactionsOutput as fY, TransactionAmountsToConvert as fZ, GetAverageHistoricalAmountParams as f_, HumanReadableTransactionReviewStatuses as fa, HumanReadableTransactionReviewStatus as fb, TransactionStatusMapping as fc, HumanReadableTransactionStatusMapping as fd, TransactionDirections as fe, TransactionDirection as ff, TransactionCurrencyCodes as fg, TransactionCurrencyCode as fh, TransactionProviders as fi, TransactionProvider as fj, PaymentTypes as fk, PaymentType as fl, TransactionPartiesTypes as fm, TransactionPartiesType as fn, TransactionAmountsFieldNames as fo, TransactionAmountsFieldName as fp, DEFAULT_FIAT_CURRENCY as fq, TRANSACTIONS_STATS_CURRENCIES as fr, TransactionStatsCurrency as fs, TransactionDataEventObject as ft, AuditAction as fu, GetTransactionAuditsParams as fv, PostValidatedCurrencyCode as fw, CreateTransactionFeesParams as fx, CreateBulkTransactionFeesParams as fy, GetTransactionFeesOutput as fz, EVM_CHAINS_WITHOUT_DEDICATED_NODE_RPC as g, ScoringAnalysisResponse as g$, GetDailyAggregatedAmountInboundParams as g0, GetDailyAggregatedAmountInboundOutput as g1, GetMedianHistoricalAmountParams as g2, GetMedianHistoricalAmountOutput as g3, GetTransactionHistoricalAveragesParams as g4, GetTransactionReviewParams as g5, GetTransactionReviewOutput as g6, GetTransactionReviewsParams as g7, GetTransactionReviewsOutput as g8, AmlResults$1 as g9, TransactionScreeningProvider as gA, _toConsumableArray as gB, _unsupportedIterableToArray as gC, _slicedToArray as gD, ScoringAnalysisRequest as gE, WorkflowsScoringAnalysisRequest as gF, _arrayWithHoles as gG, _iterableToArray as gH, _nonIterableRest as gI, ANALYSIS_TYPES as gJ, AnalysisType as gK, OBJECT_TYPES as gL, ObjectType as gM, ScorechainBlockchain as gN, NonMinimalScorechainBlockchain as gO, ScorechainBlockchainToNamespace as gP, getRiskLevelByRiskScore as gQ, compareRiskLevels as gR, Coin as gS, RiskSeverity as gT, ScorechainEntityType as gU, RiskExplanation as gV, EntityRiskDefaultsValues as gW, EntityRiskDefaultsMap as gX, ScorechainErrorResponse as gY, ScorechainError as gZ, ScorechainAnalysis as g_, DetectedDuplicates as ga, allDataLinkVersions as gb, DataLinkVersionZodSchema as gc, allDataLinkTypes as gd, DataLinkTypeZodSchema as ge, VaultJsonSchemas as gf, VaultZodSchema as gg, VaultSchemaIdZodSchema as gh, VaultSchemaPathsZodSchema as gi, VaultPointerKeyMapZodSchema as gj, VaultQueryMapZodSchema as gk, VaultMetadataLinkZodSchema as gl, GenericVaultPointerLinkZodSchema as gm, GenericVaultSearchLinkZodSchema as gn, GenericVaultEmbeddedLinkZodSchema as go, GenericVaultDataLinkZodSchema as gp, TimeFrameCounters as gq, ScorechainEntityRecord as gr, WalletScreeningData as gs, WalletScreeningProviders as gt, WalletScreeningProvider as gu, WalletScreeningProviderName as gv, Web3ArgsType as gw, Web3TransactionData as gx, TransactionScreeningData as gy, TransactionScreeningProviders as gz, EvmChainId as h, GetActiveBlockchainsRequest as h0, GetActiveBlockchains as h1, GetActiveBlockchainsResponse as h2, GetAddressAnalysisRequest as h3, GetTransactionAnalysisRequest as h4, ScorechainEntity as h5, GetAddressAnalysis as h6, GetTransactionAnalysis as h7, GetAddressAnalysisResponse as h8, GetTransactionAnalysisResponse as h9, ScoringAnalysisApiRequest as ha, RawScorechainResult as hb, ScorechainRiskToRiskLevel as hc, ScorechainWalletRiskLevels as hd, ScorechainWalletRiskLevel as he, ScorechainTransactionRiskLevel as hf, NEXERA_COSMOS_CHAINS as i, COSMOS_CHAIN_NAMES_LIST as j, COSMOS_CHAIN_IDS as k, ACTIVE_COSMOS_CHAIN_IDS as l, CosmosChainId as m, NEXERA_TEZOS_CHAINS as n, NEXERA_TEZOS_CHAIN_NAMES as o, NEXERA_TEZOS_CHAIN_NAMES_LIST as p, NEXERA_TEZOS_CHAIN_IDS as q, ACTIVE_TEZOS_CHAIN_IDS as r, PolygonNetworkNames as s, NEXERA_STARKNET_CHAINS as t, NEXERA_STARKNET_CHAIN_NAMES as u, NEXERA_STARKNET_CHAIN_IDS as v, NEXERA_ACTIVE_STARKNET_CHAIN_IDS as w, NEXERA_SOLANA_CHAINS as x, SOLANA_CHAIN_NAMES as y, SOLANA_CHAIN_NAMES_LIST as z };
+export { POLKADOT_CHAIN_NAMES_LIST as $, ACTIVE_EVM_CHAIN_VALUES as A, BlockchainId as B, COSMOS_CHAIN_NAMES as C, DashboardChainId as D, EVM_BLOCK_TIME as E, SOLANA_CHAIN_IDS as F, ACTIVE_SOLANA_CHAIN_IDS as G, SolanaChainId as H, NEXERA_BITCOIN_CHAINS as I, BITCOIN_CHAIN_NAMES as J, BITCOIN_CHAIN_NAMES_LIST as K, BITCOIN_CHAIN_IDS as L, ACTIVE_BITCOIN_CHAIN_IDS as M, NonTestnetBlockchainId as N, BitcoinChainId as O, POLYGON_NETWORK_NAMES as P, NEXERA_APTOS_CHAINS as Q, APTOS_CHAIN_NAMES as R, StarknetChainId as S, TezosChainId as T, APTOS_CHAIN_NAMES_LIST as U, APTOS_CHAIN_IDS as V, ACTIVE_APTOS_CHAIN_IDS as W, AptosChainId as X, NEXERA_POLKADOT_CHAINS as Y, POLKADOT_CHAIN_NAMES as Z, _defineProperty as _, DashboardChainIdList as a, CurrencyCodes as a$, POLKADOT_CHAIN_IDS as a0, ACTIVE_POLKADOT_CHAIN_IDS as a1, PolkadotChainId as a2, NEXERA_CARDANO_CHAINS as a3, CARDANO_CHAIN_NAMES as a4, CARDANO_CHAIN_NAMES_LIST as a5, CARDANO_CHAIN_IDS as a6, ACTIVE_CARDANO_CHAIN_IDS as a7, CardanoChainId as a8, isValidAddress as a9, SUPPORTED_BLOCKCHAIN_NAMESPACES_FOR_SIGNATURE_AUTH as aA, SupportedBlockchainNamespaceForSignatureAuth as aB, DISPLAYED_BLOCKCHAIN_NAMESPACES as aC, DisplayedBlockchainNamespace as aD, BLOCKCHAIN_NAME_TO_NAMESPACE as aE, BLOCKCHAIN_NAMESPACE_TO_NAME as aF, BLOCKCHAIN_NAMESPACE_TO_ADDRESS_URL as aG, EIP155Signature as aH, AptosSignature as aI, StarknetSignature as aJ, PolkadotSignature as aK, CosmosSignature as aL, EdSignature as aM, SpSignature as aN, P2Signature as aO, TezosSignature as aP, CardanoSignature as aQ, BlockchainSignature as aR, FunctionCallData as aS, TezosEntrypointName as aT, AbiItem as aU, ENVS as aV, EnvironmentSchema as aW, UuidString as aX, OtpCode as aY, PUBLIC_SERVICES_SCHEMA_MAP as aZ, IpAddress as a_, PrivateKey as aa, PublicKey as ab, EvmAddress as ac, TxHash as ad, shortBlockchainAddress as ae, AptosAddress as af, StarknetAddress as ag, PolkadotAddress as ah, CosmosAddress as ai, TezosImplicitAddress as aj, TezosContractAddress as ak, TezosAddress as al, CardanoAddress as am, BitcoinP2PKHAddress as an, BitcoinP2SHAddress as ao, BitcoinBech32Address as ap, BitcoinTestnetP2PKHAddress as aq, BitcoinTestnetP2SHAddress as ar, BitcoinTestnetBech32Address as as, BitcoinAddress as at, BlockchainAddress as au, DashboardAddress as av, String0x as aw, HexadecimalSchema as ax, BLOCKCHAIN_NAMESPACES as ay, BlockchainNamespace as az, NEXERA_EVM_CHAINS as b, SsoProviderPrefix_NEW as b$, CurrencyCode as b0, CryptoCodes as b1, CryptoCode as b2, ISO3CountryCode as b3, ALPHA_2_COUNTRIES as b4, Alpha2Country as b5, countryISO3toISO2Mapping as b6, countryISO2toISO3Mapping as b7, CountryName as b8, isoCountriesNameFromISO2 as b9, EmailPrefix as bA, WalletPrefix as bB, AppPrefix as bC, ChallengePrefix as bD, TestPrefix as bE, IndividualScreeningPrefix as bF, SigGatingPrefix as bG, TagPrefix as bH, ScorechainAnalysisPrefix as bI, UserPrefix_NEW as bJ, OrganizationPrefix_NEW as bK, MemberPrefix_NEW as bL, WorkspacePrefix_NEW as bM, SessionPrefix_NEW as bN, AccountPrefix_NEW as bO, VerificationPrefix_NEW as bP, ApiKeyPrefix_NEW as bQ, InvitationPrefix_NEW as bR, PasskeyPrefix_NEW as bS, WorkspaceMemberPrefix_NEW as bT, WorkspaceRolePrefix_NEW as bU, OrganizationRolePrefix_NEW as bV, DepartmentPrefix_NEW as bW, TeamPrefix_NEW as bX, TeamMemberPrefix_NEW as bY, TeamRoleGrantPrefix_NEW as bZ, TwoFactorPrefix_NEW as b_, isoCountriesNameFromISO3 as ba, parseISO3CountryCode as bb, ScorechainCountry as bc, scorechainCountriesNameFromISO2 as bd, RiskScoreTypes as be, RiskScoreType as bf, CustomerTypes as bg, CustomerType as bh, KycOnboardingLevels as bi, KycOnboardingLevel as bj, KybOnboardingLevels as bk, KybOnboardingLevel as bl, CustomerOnboardingLevels as bm, CustomerOnboardingLevel as bn, CustomerStatuses as bo, CustomerStatus as bp, BasicCustomerContactInformation as bq, CUSTOMERS_CHARTS as br, CustomersChartType as bs, CUSTOMER_TABLE_COLUMNS as bt, CustomerTableColumn as bu, CUSTOMER_AUTOMATION_REASONS as bv, CustomerPersonalInformation as bw, StoragePrefix as bx, IdentityPrefix as by, IdentitySessionPrefix as bz, NEXERA_EVM_CHAIN_NAMES as c, AppId as c$, SessionRevocationAuditPrefix_NEW as c0, DatasetPrefix as c1, DatasetColumnPrefix as c2, DatasetColumnTypePrefix as c3, DatasetColumnOptionPrefix as c4, DatasetRowPrefix as c5, DatasetRowValuePrefix as c6, DatasetViewPrefix as c7, DatasetViewFilterPrefix as c8, DatasetFormQuestionPrefix as c9, TransactionAmountPrefix as cA, ScenarioPrefix as cB, QueryPrefix as cC, QueryGroupPrefix as cD, EvaluationMethodPrefix as cE, ActionPrefix as cF, WorkflowSessionAttributePrefix as cG, ComplyAdvantageSearchUpdatePrefix as cH, SsssSharePrefix as cI, SsssChunkPrefix as cJ, AiExecutionPrefix as cK, AiExecutionStepPrefix as cL, AiDocumentPrefix as cM, AiAgentPrefix as cN, AiStepPrefix as cO, ChatPrefix as cP, MessagePrefix as cQ, ChatItemPrefix as cR, AiMessagePrefix as cS, WorkflowSessionId as cT, createBrandedSchemaId as cU, createBrandedSchemaIdWithParams as cV, StorageId as cW, IdentityId as cX, IdentitySessionId as cY, EmailId as cZ, WalletId as c_, DatasetFormEdgeBindingPrefix as ca, DatasetFolderPrefix as cb, DatasetJobPrefix as cc, DatasetFormInvitationPrefix as cd, FormShareLinkPrefix as ce, FormOtpChallengePrefix as cf, FormSubmissionPrefix as cg, FormSubmissionChangeRequestPrefix as ch, DatasetColumnDependencyPrefix as ci, DatasetFormulaExecutionLogPrefix as cj, DatasetChangeRequestPrefix as ck, DatasetChangeRequestApprovalPrefix as cl, MetaAlertPrefix as cm, TagsToEntityPrefix as cn, TransactionAddressesPrefix as co, TransactionPrefix as cp, TransactionActivityPrefix as cq, TransactionFeesPrefix as cr, TransactionReviewPrefix as cs, TransactionPartiesPrefix as ct, TransactionInfosPrefix as cu, TransactionExtractedInfosPrefix as cv, TransactionMethodsPrefix as cw, TransactionMethodExtractedInfosPrefix as cx, InstitutionPrefix as cy, InstitutionExtractedInfosPrefix as cz, NEXERA_EVM_CHAIN_NAMES_LIST as d, TeamId_NEW as d$, ChallengeId as d0, TestId as d1, CustomerScreeningId as d2, SigGatingId as d3, TagId as d4, ActionId as d5, DatasetId as d6, DatasetColumnId as d7, DatasetColumnTypeId as d8, DatasetColumnOptionId as d9, InstitutionId as dA, InstitutionExtractedInfosId as dB, TransactionAmountId as dC, ComplyAdvantageSearchUpdateId as dD, ScenarioId as dE, QueryId as dF, QueryGroupId as dG, EvaluationMethodId as dH, ScorechainAnalysisId as dI, WorkflowSessionAttributeId as dJ, SsssShareId as dK, SsssChunkId as dL, ChatItemId as dM, UserId_NEW as dN, OrganizationId_NEW as dO, MemberId_NEW as dP, WorkspaceId_NEW as dQ, SessionId_NEW as dR, AccountId_NEW as dS, VerificationId_NEW as dT, ApiKeyId_NEW as dU, InvitationId_NEW as dV, PasskeyId_NEW as dW, WorkspaceMemberId_NEW as dX, WorkspaceRoleId_NEW as dY, OrganizationRoleId_NEW as dZ, DepartmentId_NEW as d_, DatasetRowId as da, DatasetRowValueId as db, DatasetViewId as dc, DatasetViewFilterId as dd, DatasetFormQuestionId as de, DatasetFormEdgeBindingId as df, DatasetFolderId as dg, DatasetJobId as dh, DatasetFormInvitationId as di, DatasetColumnDependencyId as dj, DatasetFormulaExecutionLogId as dk, DatasetChangeRequestId as dl, DatasetChangeRequestApprovalId as dm, MetaAlertId as dn, TagsToEntityId as dp, TransactionAddressesId as dq, TransactionId as dr, TransactionActivityId as ds, TransactionFeesId as dt, TransactionReviewId as du, TransactionPartiesId as dv, TransactionInfosId as dw, TransactionExtractedInfosId as dx, TransactionMethodsId as dy, TransactionMethodExtractedInfosId as dz, NEXERA_EVM_CHAINS_ID as e, TagTitle as e$, TeamMemberId_NEW as e0, TeamRoleGrantId_NEW as e1, TwoFactorId_NEW as e2, SsoProviderId_NEW as e3, generateId as e4, MemberIdLegacy as e5, ChatId as e6, MessageId as e7, FLOW_TYPES as e8, FlowType as e9, OLD_IDInformationCredentialSubjectSchema as eA, OLD_ProofOfResidenceCredentialSubjectSchema as eB, OLD_SelfieImageCredentialSubjectSchema as eC, OLD_AMLScreeningsResultsCredentialSubjectSchema as eD, IDInformationTfheCredentialSubjectSchema as eE, IDInformationCredentialSubjectSchema as eF, IDImageCredentialSubjectSchema as eG, SelfieImageCredentialSubjectSchema as eH, ProofOfResidenceCredentialSubjectSchema as eI, GenericVerifiableCredentialSchema as eJ, IDInformationTfheCredentialSchema as eK, IDInformationCredentialSchema as eL, IDImageCredentialSchema as eM, SelfieImageCredentialSchema as eN, ProofOfResidenceCredentialSchema as eO, ID3CredentialSchema as eP, IDScanCredentialSchema as eQ, IDScanPassportCredentialSchema as eR, IDScanSelfieCredentialSchema as eS, OLD_IDImageCredentialSchema as eT, OLD_IDInformationCredentialSchema as eU, OLD_ProofOfResidenceCredentialSchema as eV, OLD_SelfieImageCredentialSchema as eW, OLD_AMLScreeningsResultsCredentialSchema as eX, TypeTags as eY, TypeTag as eZ, Tag as e_, VerificationModes as ea, VerificationMode as eb, IDENTITY_DOCUMENT_COUNTRY_LIST_OPTIONS as ec, IdentityDocumentCountryListOption as ed, IDENTITY_DOCUMENT_OPTIONS as ee, IdentityDocumentOptionsType as ef, PERSONAL_INFORMATION_FIELDS as eg, PersonalInformationFieldsIdentityDocuments as eh, Identifier as ei, AdditionalCustomerInformationParams as ej, OrganizationId as ek, WorkspaceId as el, MemberId as em, WorkflowId as en, CustomerId as eo, ExternalCustomerId as ep, IdentityAppV2Web3JWT as eq, IdentityAppV2Web2JWT as er, IdentityWidgetAccessToken_NEW as es, IdentityWidgetSessionToken as et, Web2CreateSessionParams as eu, ID3CredentialSubjectSchema as ev, IDScanCredentialSubjectSchema as ew, IDScanPassportCredentialSubjectSchema as ex, IDScanSelfieCredentialSubjectSchema as ey, OLD_IDImageCredentialSubjectSchema as ez, NexeraEvmChains as f, GetTransactionsOutputData as f$, getTagTypeFromEntityType as f0, WORKFLOW_TYPE_TO_TAG_TYPE as f1, TRANSACTION_CHARTS as f2, TransactionsChartType as f3, TRANSACTION_TABLE_COLUMNS as f4, TransactionTableColumn as f5, TransactionTypes as f6, TransactionType as f7, TransactionTypesWithAll as f8, TransactionTypeWithAll as f9, PostValidatedCurrencyCode as fA, CreateTransactionFeesParams as fB, CreateBulkTransactionFeesParams as fC, GetTransactionFeesOutput as fD, CreateTransactionInfosOutput as fE, CreateTransactionMethodOutput as fF, CreateInsitutionOutput as fG, CreateTransactionPartiesOutput as fH, CreateTransactionReviewOutput as fI, UpdateTransactionReviewParams as fJ, UpdateTransactionsReviewParams as fK, UpdateTransactionReviewOutput as fL, GetTransactionsForAlertParams as fM, GetTransactionsForAlertOutput as fN, GetTransactionParams as fO, GetTransactionByExternalIdParams as fP, CreateTransactionOutput as fQ, CreateTransactionExtractedInfosOutput as fR, CreateTransactionMethodExtractedInfoOutput as fS, CreateInsitutionExtractedInfosOutput as fT, GetTransactionStatsParams as fU, GetTransactionStatsOutput as fV, GetTransactionsCountParams as fW, GetTransactionsCountOutput as fX, initializeStatistics as fY, GetTransactionsParams as fZ, GetOneTransactionOutput as f_, TransactionRiskLevels as fa, TransactionRiskLevel as fb, TransactionReviewStatuses as fc, TransactionReviewStatus as fd, HumanReadableTransactionReviewStatuses as fe, HumanReadableTransactionReviewStatus as ff, TransactionStatusMapping as fg, HumanReadableTransactionStatusMapping as fh, TransactionDirections as fi, TransactionDirection as fj, TransactionCurrencyCodes as fk, TransactionCurrencyCode as fl, TransactionProviders as fm, TransactionProvider as fn, PaymentTypes as fo, PaymentType as fp, TransactionPartiesTypes as fq, TransactionPartiesType as fr, TransactionAmountsFieldNames as fs, TransactionAmountsFieldName as ft, DEFAULT_FIAT_CURRENCY as fu, TRANSACTIONS_STATS_CURRENCIES as fv, TransactionStatsCurrency as fw, TransactionDataEventObject as fx, AuditAction as fy, GetTransactionAuditsParams as fz, EVM_CHAINS_WITHOUT_DEDICATED_NODE_RPC as g, EntityRiskDefaultsMap as g$, GetTransactionsOutput as g0, TransactionAmountsToConvert as g1, GetAverageHistoricalAmountParams as g2, GetAverageHistoricalAmountOutput as g3, GetDailyAggregatedAmountInboundParams as g4, GetDailyAggregatedAmountInboundOutput as g5, GetMedianHistoricalAmountParams as g6, GetMedianHistoricalAmountOutput as g7, GetTransactionHistoricalAveragesParams as g8, GetTransactionReviewParams as g9, Web3ArgsType as gA, Web3TransactionData as gB, TransactionScreeningData as gC, TransactionScreeningProviders as gD, TransactionScreeningProvider as gE, _toConsumableArray as gF, _unsupportedIterableToArray as gG, _slicedToArray as gH, ScoringAnalysisRequest as gI, WorkflowsScoringAnalysisRequest as gJ, _arrayWithHoles as gK, _iterableToArray as gL, _nonIterableRest as gM, ANALYSIS_TYPES as gN, AnalysisType as gO, OBJECT_TYPES as gP, ObjectType as gQ, ScorechainBlockchain as gR, NonMinimalScorechainBlockchain as gS, ScorechainBlockchainToNamespace as gT, getRiskLevelByRiskScore as gU, compareRiskLevels as gV, Coin as gW, RiskSeverity as gX, ScorechainEntityType as gY, RiskExplanation as gZ, EntityRiskDefaultsValues as g_, GetTransactionReviewOutput as ga, GetTransactionReviewsParams as gb, GetTransactionReviewsOutput as gc, AmlResults$1 as gd, DetectedDuplicates as ge, allDataLinkVersions as gf, DataLinkVersionZodSchema as gg, allDataLinkTypes as gh, DataLinkTypeZodSchema as gi, VaultJsonSchemas as gj, VaultZodSchema as gk, VaultSchemaIdZodSchema as gl, VaultSchemaPathsZodSchema as gm, VaultPointerKeyMapZodSchema as gn, VaultQueryMapZodSchema as go, VaultMetadataLinkZodSchema as gp, GenericVaultPointerLinkZodSchema as gq, GenericVaultSearchLinkZodSchema as gr, GenericVaultEmbeddedLinkZodSchema as gs, GenericVaultDataLinkZodSchema as gt, TimeFrameCounters as gu, ScorechainEntityRecord as gv, WalletScreeningData as gw, WalletScreeningProviders as gx, WalletScreeningProvider as gy, WalletScreeningProviderName as gz, EvmChainId as h, ScorechainErrorResponse as h0, ScorechainError as h1, ScorechainAnalysis as h2, ScoringAnalysisResponse as h3, GetActiveBlockchainsRequest as h4, GetActiveBlockchains as h5, GetActiveBlockchainsResponse as h6, GetAddressAnalysisRequest as h7, GetTransactionAnalysisRequest as h8, ScorechainEntity as h9, GetAddressAnalysis as ha, GetTransactionAnalysis as hb, GetAddressAnalysisResponse as hc, GetTransactionAnalysisResponse as hd, ScoringAnalysisApiRequest as he, RawScorechainResult as hf, ScorechainRiskToRiskLevel as hg, ScorechainWalletRiskLevels as hh, ScorechainWalletRiskLevel as hi, ScorechainTransactionRiskLevel as hj, NEXERA_COSMOS_CHAINS as i, COSMOS_CHAIN_NAMES_LIST as j, COSMOS_CHAIN_IDS as k, ACTIVE_COSMOS_CHAIN_IDS as l, CosmosChainId as m, NEXERA_TEZOS_CHAINS as n, NEXERA_TEZOS_CHAIN_NAMES as o, NEXERA_TEZOS_CHAIN_NAMES_LIST as p, NEXERA_TEZOS_CHAIN_IDS as q, ACTIVE_TEZOS_CHAIN_IDS as r, PolygonNetworkNames as s, NEXERA_STARKNET_CHAINS as t, NEXERA_STARKNET_CHAIN_NAMES as u, NEXERA_STARKNET_CHAIN_IDS as v, NEXERA_ACTIVE_STARKNET_CHAIN_IDS as w, NEXERA_SOLANA_CHAINS as x, SOLANA_CHAIN_NAMES as y, SOLANA_CHAIN_NAMES_LIST as z };

package/dist/{vault.schema-64532539.cjs.prod.cjs → vault.schema-f25c0d9b.cjs.prod.cjs}

@@ -525,7 +525,10 @@ var AbiItem = z.z.object({
   }).array().optional()
 });
 
-var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod"];
+var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod",
+// Dedicated single-tenant environment (DZ PRIVATBANK) on its own portals-dzprivatbank EKS
+// cluster. Isolated domains (*.dzprivatbank.compilot.ai) and dedicated svix/openmeter/S3.
+"dzprivatbank"];
 var EnvironmentSchema = z.z["enum"](ENVS);
 var UuidString = z.z.string().uuid();
 var OtpCode = z.z.string().regex(/^\d{6}$/, "OtpCode must be a 6-digit number");
@@ -542,7 +545,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   // No need for /identity suffix in path, handled in gateway
   identity_api: {
@@ -554,7 +558,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   identityV2: {
     cicd: "http://localhost:3009",
@@ -565,7 +570,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://identity-v2-test-dev-4.bjrcom.xyz",
     dev: "https://identity-v2.bjrcom.xyz",
     stage: "https://identity-v2.bjrpilot.xyz",
-    prod: "https://identity-v2.compilot.ai"
+    prod: "https://identity-v2.compilot.ai",
+    dzprivatbank: "https://identity-v2.dzprivatbank.compilot.ai"
   }
 };
 var IpAddress = z.z.string().optional().refine(function (val) {
@@ -2648,6 +2654,15 @@ var DatasetFormEdgeBindingPrefix = "datasetfeb";
 var DatasetFolderPrefix = "datasetf";
 var DatasetJobPrefix = "datasetj";
 var DatasetFormInvitationPrefix = "datasetfi";
+// F-PUBLIC-LINK - reusable public onboarding link id prefix.
+var FormShareLinkPrefix = "formsl";
+// Email-OTP gate challenge id prefix (public onboarding).
+var FormOtpChallengePrefix = "formotp";
+// Onboarding-review staging store: a pending form submission held for officer
+// validation before it commits to the dataset(s).
+var FormSubmissionPrefix = "formsub";
+// The RFI / flagged-items row (officer requests changes on a submission).
+var FormSubmissionChangeRequestPrefix = "fsubcr";
 var DatasetColumnDependencyPrefix = "datasetcd";
 var DatasetFormulaExecutionLogPrefix = "datasetfel";
 var DatasetChangeRequestPrefix = "datasetchr";
@@ -2973,7 +2988,53 @@ var IdentityAppV2BaseJWT = z.z.object({
   timestamp: z.z.number(),
   iat: z.z.number(),
   hosts: z.z.array(z.z.string()),
-  identitySessionId: IdentitySessionId.optional()
+  identitySessionId: IdentitySessionId.optional(),
+  /**
+   * F-PUBLIC-LINK: when present, this token was minted for ONE specific reusable
+   * public share link and is LINK-scoped, not merely workspace-scoped. The
+   * dataset-form question-read / resolve path treats this signed claim as the
+   * AUTHORITATIVE link id (a client-sent id must match it or is rejected) and
+   * enforces the link lifecycle (enabled / revoked / expired / cap) + view
+   * binding against it. This closes the omit-the-id bypass: a still-valid JWT
+   * for a revoked/disabled/expired link can no longer read the form definition
+   * by simply not sending formShareLinkId. Optional: invitation / member / kyc
+   * tokens omit it and are entirely unchanged.
+   */
+  formShareLinkId: z.z.string().optional(),
+  /**
+   * DZ email-OTP gate: set true only after the recipient proved control of their
+   * email via the one-time code (minted by the OTP verify endpoint). For tenants
+   * that REQUIRE email verification, the dataset-form questions / submit / data
+   * chokepoints reject a share-link token WITHOUT this claim. The resolve
+   * response's requiresEmailVerification flag is UX only; THIS signed claim is
+   * the authorization boundary. Optional: every other token omits it, unchanged.
+   */
+  formOtpVerified: z.z["boolean"]().optional(),
+  /**
+   * The email address the recipient proved control of at OTP verification. Signed
+   * alongside formOtpVerified and recorded in the created record's provenance, so
+   * every OTP-gated onboarding is traceable to a verified address. Optional.
+   */
+  verifiedEmail: z.z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B/D (onboarding-review RESUME origin): set only on a widget
+   * token minted by the submitter re-entry bootstrap (startFormResume) for a
+   * staged CHANGES_REQUESTED submission. Its PRESENCE marks the request as a
+   * RESUME (an in-flight remediation), NOT a new share-link submission, so the
+   * questions/OTP chokepoints do NOT block it on the NEW-SUBMISSION link
+   * lifecycle caps (capReached/enabled/expired) - the resume-token binding + OTP
+   * + tenant binding remain the authorization. Carries the staged submission id
+   * for audit. Optional: every non-resume token omits it, entirely unchanged.
+   */
+  formResumeSubmissionId: z.z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B: the staged submission's section-scope snapshot (pinned at
+   * the original submit), signed onto the resume widget token so the resume
+   * questions load scopes to it instead of the CURRENT share link's (possibly
+   * narrowed) sections. Absent = the submission was whole-form. Only ever set
+   * alongside formResumeSubmissionId.
+   */
+  formResumeSections: z.z.array(z.z.string()).optional()
 });
 var IdentityAppV2Web3JWT = IdentityAppV2BaseJWT.extend({
   flowType: z.z.literal(FlowType.Values.web3),
@@ -13729,6 +13790,10 @@ exports.EvmChainId = EvmChainId;
 exports.ExternalCustomerId = ExternalCustomerId;
 exports.FLOW_TYPES = FLOW_TYPES;
 exports.FlowType = FlowType;
+exports.FormOtpChallengePrefix = FormOtpChallengePrefix;
+exports.FormShareLinkPrefix = FormShareLinkPrefix;
+exports.FormSubmissionChangeRequestPrefix = FormSubmissionChangeRequestPrefix;
+exports.FormSubmissionPrefix = FormSubmissionPrefix;
 exports.FunctionCallData = FunctionCallData;
 exports.GenericVaultDataLinkZodSchema = GenericVaultDataLinkZodSchema;
 exports.GenericVaultEmbeddedLinkZodSchema = GenericVaultEmbeddedLinkZodSchema;

package/dist/{vault.schema-774651f4.cjs.dev.cjs → vault.schema-fc13f09a.cjs.dev.cjs}

@@ -525,7 +525,10 @@ var AbiItem = z.z.object({
   }).array().optional()
 });
 
-var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod"];
+var ENVS = ["cicd", "local", "test-dev-1", "test-dev-2", "test-dev-3", "test-dev-4", "dev", "stage", "prod",
+// Dedicated single-tenant environment (DZ PRIVATBANK) on its own portals-dzprivatbank EKS
+// cluster. Isolated domains (*.dzprivatbank.compilot.ai) and dedicated svix/openmeter/S3.
+"dzprivatbank"];
 var EnvironmentSchema = z.z["enum"](ENVS);
 var UuidString = z.z.string().uuid();
 var OtpCode = z.z.string().regex(/^\d{6}$/, "OtpCode must be a 6-digit number");
@@ -542,7 +545,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   // No need for /identity suffix in path, handled in gateway
   identity_api: {
@@ -554,7 +558,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://api-test-dev-4.bjrcom.xyz",
     dev: "https://api.bjrcom.xyz",
     stage: "https://api.bjrpilot.xyz",
-    prod: "https://api.compilot.ai"
+    prod: "https://api.compilot.ai",
+    dzprivatbank: "https://api.dzprivatbank.compilot.ai"
   },
   identityV2: {
     cicd: "http://localhost:3009",
@@ -565,7 +570,8 @@ var PUBLIC_SERVICES_SCHEMA_MAP = {
     "test-dev-4": "https://identity-v2-test-dev-4.bjrcom.xyz",
     dev: "https://identity-v2.bjrcom.xyz",
     stage: "https://identity-v2.bjrpilot.xyz",
-    prod: "https://identity-v2.compilot.ai"
+    prod: "https://identity-v2.compilot.ai",
+    dzprivatbank: "https://identity-v2.dzprivatbank.compilot.ai"
   }
 };
 var IpAddress = z.z.string().optional().refine(function (val) {
@@ -2648,6 +2654,15 @@ var DatasetFormEdgeBindingPrefix = "datasetfeb";
 var DatasetFolderPrefix = "datasetf";
 var DatasetJobPrefix = "datasetj";
 var DatasetFormInvitationPrefix = "datasetfi";
+// F-PUBLIC-LINK - reusable public onboarding link id prefix.
+var FormShareLinkPrefix = "formsl";
+// Email-OTP gate challenge id prefix (public onboarding).
+var FormOtpChallengePrefix = "formotp";
+// Onboarding-review staging store: a pending form submission held for officer
+// validation before it commits to the dataset(s).
+var FormSubmissionPrefix = "formsub";
+// The RFI / flagged-items row (officer requests changes on a submission).
+var FormSubmissionChangeRequestPrefix = "fsubcr";
 var DatasetColumnDependencyPrefix = "datasetcd";
 var DatasetFormulaExecutionLogPrefix = "datasetfel";
 var DatasetChangeRequestPrefix = "datasetchr";
@@ -2973,7 +2988,53 @@ var IdentityAppV2BaseJWT = z.z.object({
   timestamp: z.z.number(),
   iat: z.z.number(),
   hosts: z.z.array(z.z.string()),
-  identitySessionId: IdentitySessionId.optional()
+  identitySessionId: IdentitySessionId.optional(),
+  /**
+   * F-PUBLIC-LINK: when present, this token was minted for ONE specific reusable
+   * public share link and is LINK-scoped, not merely workspace-scoped. The
+   * dataset-form question-read / resolve path treats this signed claim as the
+   * AUTHORITATIVE link id (a client-sent id must match it or is rejected) and
+   * enforces the link lifecycle (enabled / revoked / expired / cap) + view
+   * binding against it. This closes the omit-the-id bypass: a still-valid JWT
+   * for a revoked/disabled/expired link can no longer read the form definition
+   * by simply not sending formShareLinkId. Optional: invitation / member / kyc
+   * tokens omit it and are entirely unchanged.
+   */
+  formShareLinkId: z.z.string().optional(),
+  /**
+   * DZ email-OTP gate: set true only after the recipient proved control of their
+   * email via the one-time code (minted by the OTP verify endpoint). For tenants
+   * that REQUIRE email verification, the dataset-form questions / submit / data
+   * chokepoints reject a share-link token WITHOUT this claim. The resolve
+   * response's requiresEmailVerification flag is UX only; THIS signed claim is
+   * the authorization boundary. Optional: every other token omits it, unchanged.
+   */
+  formOtpVerified: z.z["boolean"]().optional(),
+  /**
+   * The email address the recipient proved control of at OTP verification. Signed
+   * alongside formOtpVerified and recorded in the created record's provenance, so
+   * every OTP-gated onboarding is traceable to a verified address. Optional.
+   */
+  verifiedEmail: z.z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B/D (onboarding-review RESUME origin): set only on a widget
+   * token minted by the submitter re-entry bootstrap (startFormResume) for a
+   * staged CHANGES_REQUESTED submission. Its PRESENCE marks the request as a
+   * RESUME (an in-flight remediation), NOT a new share-link submission, so the
+   * questions/OTP chokepoints do NOT block it on the NEW-SUBMISSION link
+   * lifecycle caps (capReached/enabled/expired) - the resume-token binding + OTP
+   * + tenant binding remain the authorization. Carries the staged submission id
+   * for audit. Optional: every non-resume token omits it, entirely unchanged.
+   */
+  formResumeSubmissionId: z.z.string().optional(),
+  /**
+   * CODEX-R2 CLASS B: the staged submission's section-scope snapshot (pinned at
+   * the original submit), signed onto the resume widget token so the resume
+   * questions load scopes to it instead of the CURRENT share link's (possibly
+   * narrowed) sections. Absent = the submission was whole-form. Only ever set
+   * alongside formResumeSubmissionId.
+   */
+  formResumeSections: z.z.array(z.z.string()).optional()
 });
 var IdentityAppV2Web3JWT = IdentityAppV2BaseJWT.extend({
   flowType: z.z.literal(FlowType.Values.web3),
@@ -13729,6 +13790,10 @@ exports.EvmChainId = EvmChainId;
 exports.ExternalCustomerId = ExternalCustomerId;
 exports.FLOW_TYPES = FLOW_TYPES;
 exports.FlowType = FlowType;
+exports.FormOtpChallengePrefix = FormOtpChallengePrefix;
+exports.FormShareLinkPrefix = FormShareLinkPrefix;
+exports.FormSubmissionChangeRequestPrefix = FormSubmissionChangeRequestPrefix;
+exports.FormSubmissionPrefix = FormSubmissionPrefix;
 exports.FunctionCallData = FunctionCallData;
 exports.GenericVaultDataLinkZodSchema = GenericVaultDataLinkZodSchema;
 exports.GenericVaultEmbeddedLinkZodSchema = GenericVaultEmbeddedLinkZodSchema;

package/dist/{veriff-webhook.schema-9a3d17c7.esm.mjs → veriff-webhook.schema-2e01c2c7.esm.mjs}

@@ -1,6 +1,6 @@
 import z$1, { z } from 'zod';
-import { b5 as Alpha2Country, aX as UuidString, gB as _toConsumableArray, gE as ScoringAnalysisRequest, gF as WorkflowsScoringAnalysisRequest, b3 as ISO3CountryCode, gD as _slicedToArray, cT as IdentityId, au as BlockchainAddress, az as BlockchainNamespace, cP as WorkflowSessionId, eh as WorkspaceId, eg as OrganizationId, bp as CustomerStatus, _ as _defineProperty, eE as ProofOfResidenceCredentialSubjectSchema, bq as BasicCustomerContactInformation, e7 as VerificationMode } from './vault.schema-34d810f5.esm.mjs';
-import { _ as SdkVerificationOutput, aV as QrCodeLinkWithSchemaType, cd as CredentialType } from './identity-api.schema-e9f4a5e0.esm.mjs';
+import { b5 as Alpha2Country, aX as UuidString, gF as _toConsumableArray, gI as ScoringAnalysisRequest, gJ as WorkflowsScoringAnalysisRequest, b3 as ISO3CountryCode, gH as _slicedToArray, cX as IdentityId, au as BlockchainAddress, az as BlockchainNamespace, cT as WorkflowSessionId, el as WorkspaceId, ek as OrganizationId, bp as CustomerStatus, _ as _defineProperty, eI as ProofOfResidenceCredentialSubjectSchema, bq as BasicCustomerContactInformation, eb as VerificationMode } from './vault.schema-ac945548.esm.mjs';
+import { _ as SdkVerificationOutput, aV as QrCodeLinkWithSchemaType, cd as CredentialType } from './identity-api.schema-235de44b.esm.mjs';
 
 var IpQualityAnalysisRequest = z.object({
   apiKey: z.string().nullish(),

package/dist/{veriff-webhook.schema-11483ff2.cjs.dev.cjs → veriff-webhook.schema-7a0110f8.cjs.dev.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
 var z = require('zod');
-var vault_schema = require('./vault.schema-774651f4.cjs.dev.cjs');
-var identityApi_schema = require('./identity-api.schema-c8db8b2d.cjs.dev.cjs');
+var vault_schema = require('./vault.schema-fc13f09a.cjs.dev.cjs');
+var identityApi_schema = require('./identity-api.schema-ba410353.cjs.dev.cjs');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }
 

package/dist/{veriff-webhook.schema-4b8414cb.cjs.prod.cjs → veriff-webhook.schema-ebd3b5e3.cjs.prod.cjs}

@@ -1,8 +1,8 @@
 'use strict';
 
 var z = require('zod');
-var vault_schema = require('./vault.schema-64532539.cjs.prod.cjs');
-var identityApi_schema = require('./identity-api.schema-a6837339.cjs.prod.cjs');
+var vault_schema = require('./vault.schema-f25c0d9b.cjs.prod.cjs');
+var identityApi_schema = require('./identity-api.schema-1d6c48b0.cjs.prod.cjs');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { 'default': e }; }