@transmitsecurity/platform-web-sdk 2.5.1 → 2.6.1

package/dist/drs.d.ts

@@ -60,6 +60,7 @@ type AvsMatchLevel = 'none' | 'postal' | 'street' | 'full' | 'unknown';
 type ActionResult = "success" | "failure" | "incomplete";
 /** Type of challenge presented to the user, when a challenge was recommended for the action */
 type ChallengeType = "sms_otp" | "email_otp" | "totp" | "push_otp" | "voice_otp" | "idv" | "captcha" | "password" | "passkey";
+type AuthMethodType = 'password' | 'webauthn' | 'totp' | 'email_otp' | 'sms_otp' | 'direct_otp' | 'voice_otp' | 'push_otp' | 'idv' | 'email_magic_link' | 'mobile_biometric' | 'face' | 'pin_authenticator' | 'google' | 'facebook' | 'apple' | 'line' | 'saml' | 'oidc';
 interface ActionResultOptions {
     /** Identifier containing sensitive user data. Mosaic will encrypt and securely store this data. */
     privateUserIdentifier?: string;
@@ -98,6 +99,8 @@ interface ConstructorOptions {
     hasOwnClientId?: boolean;
     /** Tier mode for the SDK: 'standard' (default) or 'lightweight' (server-to-server) */
     tier?: 'standard' | 'lightweight';
+    /** Agentic mode for CDN-injected integrations: enables agentic identity collection and artificial action triggering. Not supported with the lightweight tier. */
+    agenticCollect?: boolean;
     /** @internal
      * Optional configuration for crypto-binding key scoping.
      * Use only when instructed by Transmit Security. */
@@ -175,6 +178,24 @@ interface TransactionData {
         matchLevel?: AvsMatchLevel;
     };
 }
+interface AuthContext {
+    /**
+     * Opaque identifier of the authenticated user in your system. Required — providing an auth
+     * context signals the user is already authenticated (e.g. they logged in through a flow
+     * outside this SDK before reaching this action).
+     */
+    userId: string;
+    /** Unix timestamp (ms) of when the login happened. */
+    loginTimestamp?: number;
+    /** The challenge type used for the authentication action (e.g. sms_otp, password, passkey). */
+    challengeType?: ChallengeType;
+    /** The number of failed attempts for the authentication action. */
+    failedAttempts?: number;
+    /** The authentication method used for the authentication action (e.g. password, biometric, sso). */
+    authMethod?: AuthMethodType;
+    /** The origin url of the page the user logged in from. */
+    loginOrigin?: string;
+}
 interface ActionEventOptions {
     /** Any ID that could help relate the action with external context or session */
     correlationId?: string;
@@ -195,6 +216,16 @@ interface ActionEventOptions {
      * Custom attributes matching the schema previously defined in the Admin Portal
      */
     customAttributes?: Record<string, string | number | boolean>;
+    /** @internal Set only by AgenticManager, never by customer code. @ignore */
+    triggerSource?: 'page_load' | 'interaction_interval';
+    /** @internal Per-type tally of interactions counted toward this checkpoint. Set only by AgenticManager. @ignore */
+    agenticCountedInteractions?: Record<string, number>;
+    /**
+     * Authentication context for an already-authenticated user. Providing it signals the user is
+     * authenticated (userId is required) and registers them like {@link TSAccountProtection.setAuthenticatedUser}.
+     * Useful when the login happened outside this SDK (e.g. a different site).
+     */
+    authContext?: AuthContext;
     /**
      * The fields below are supported for Enterprise-IAM sdk usage actions, added `ignore` for avoiding preseting this attribute in the docs
      * @ignore
@@ -227,6 +258,7 @@ interface ActionEventOptions {
 }
 declare class TSAccountProtection {
     private static initializedInstance;
+    private static initializedAgenticInstance;
     private initializationPromise;
     private disabledReason;
     private enableSessionToken;
@@ -234,10 +266,16 @@ declare class TSAccountProtection {
     private firstPartyMigrationUrl;
     private hasOwnClientId;
     private tier;
+    private agenticCollect;
+    private agenticActive;
+    private agenticManager;
+    private agenticInitStartedAt;
+    private lastCascadePath;
     private validationManager;
     private storageManager;
     private eventsManager;
     private deviceDataManager;
+    private agenticSignalsManager;
     private configManager;
     private requestsManager;
     private identityManager;
@@ -255,6 +293,14 @@ declare class TSAccountProtection {
     constructor(clientId: string, options: ConstructorOptions);
     /** @ignore */
     constructor(serverPath: string, clientId: string);
+    private standDownCalled;
+    private standDown;
+    private runDetectionCascade;
+    private standardInitListenerRegistered;
+    private trafficWatchStarted;
+    private startTrafficWatch;
+    private spaRouteHooksRegistered;
+    private registerSpaRouteHooks;
     private generateDisabledToken;
     /**
      * @ignore
@@ -278,6 +324,7 @@ declare class TSAccountProtection {
      * @param deviceId - The JWT deviceId returned from citadel backend
      */
     setDeviceId(deviceId: string): void;
+    private resolveAgenticActive;
     /**
      * Initializes the AccountProtection SDK, which starts automatically tracking and submitting info of the user journey
      * @param options Init options
@@ -384,4 +431,4 @@ declare const __internal: {
 declare const PACKAGE_VERSION: string;
 declare function initialize(config: any): void;
 
-export { ActionEventOptions, ActionResponse, ActionResultOptions, LightweightPayload, PACKAGE_VERSION, __internal, clearUser, getActions, getPayload, getSecureSessionToken, getSessionToken, initialize, reportActionResult, setAuthenticatedUser, setDeviceId, triggerActionEvent };
+export { ActionEventOptions, ActionResponse, ActionResultOptions, AuthContext, LightweightPayload, PACKAGE_VERSION, __internal, clearUser, getActions, getPayload, getSecureSessionToken, getSessionToken, initialize, reportActionResult, setAuthenticatedUser, setDeviceId, triggerActionEvent };