@pryzr/verify 0.3.0 → 0.3.1

package/README.md

@@ -42,3 +42,5 @@ The client also supports:
 The API key selects the correct workspace and environment automatically. You do not need to send workspace, environment, verification-provider, or workflow IDs in normal API requests.
 
 Webhook secrets are shown once. Save them in a server-side secret manager before continuing. Never log API keys, webhook secrets, player verification URLs, or identity data.
+
+The published package is native Node ESM. Release verification runs `npm run test:sdk:typescript-artifact` from the repository root to build, pack, install offline and import the actual package in plain Node, including its webhook helpers.

package/dist/index.d.ts

@@ -2,7 +2,7 @@
  * Server-side client for the Pryzr Verify API. API credentials must never be
  * shipped to browser code.
  */
-export { PRYZR_WEBHOOK_TOLERANCE_SECONDS, verifyPryzrWebhookSignature, verifyPryzrWebhookWithSecrets, } from "./webhooks";
+export { PRYZR_WEBHOOK_TOLERANCE_SECONDS, verifyPryzrWebhookSignature, verifyPryzrWebhookWithSecrets, } from "./webhooks.js";
 export type PryzrEnvironment = "sandbox" | "production";
 export declare const operatorApiOperationAvailability: {
     readonly createApplicant: "implemented";
@@ -107,6 +107,19 @@ export interface PlayPrintTelemetryEvent {
     consentReceiptRef?: string;
     signals: Readonly<Record<string, unknown>>;
 }
+export interface PlayPrintTelemetryAcceptance {
+    events: Array<{
+        eventId: string;
+        accepted: true;
+        replay: boolean;
+        stepUp?: {
+            outcome: "consent_required";
+            requestId: string;
+            /** Short-lived player bearer path. Never log or send to analytics. */
+            playerPath: string;
+        };
+    }>;
+}
 export type SigningSecret = {
     id: string;
     key_label: string;
@@ -258,8 +271,6 @@ export declare class PryzrVerifyClient {
             explanation: string;
         }>;
     }>;
-    submitTelemetry(events: PlayPrintTelemetryEvent[], idempotencyKey: string): Promise<{
-        events: unknown[];
-    }>;
+    submitTelemetry(events: PlayPrintTelemetryEvent[], idempotencyKey: string): Promise<PlayPrintTelemetryAcceptance>;
     private request;
 }

package/dist/index.js

@@ -2,7 +2,7 @@
  * Server-side client for the Pryzr Verify API. API credentials must never be
  * shipped to browser code.
  */
-export { PRYZR_WEBHOOK_TOLERANCE_SECONDS, verifyPryzrWebhookSignature, verifyPryzrWebhookWithSecrets, } from "./webhooks";
+export { PRYZR_WEBHOOK_TOLERANCE_SECONDS, verifyPryzrWebhookSignature, verifyPryzrWebhookWithSecrets, } from "./webhooks.js";
 export const operatorApiOperationAvailability = {
     createApplicant: "implemented",
     getApplicant: "implemented",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pryzr/verify",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Server-side TypeScript SDK for Pryzr Verify",
   "type": "module",
   "sideEffects": false,