@upshiftfinance/sdk 0.3.0 → 0.5.0

package/lib/evm/methods/crossChainVault.js

@@ -8,39 +8,6 @@
  *
  * @module evm/methods/crossChainVault
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LAYERZERO_ENDPOINT_IDS = void 0;
 exports.buildCrossChainVaultTx = buildCrossChainVaultTx;
@@ -59,6 +26,7 @@ exports.getAvailableChains = getAvailableChains;
 exports.formatCrossChainError = formatCrossChainError;
 exports.getLayerZeroScanUrl = getLayerZeroScanUrl;
 const attribution_1 = require("../../core/attribution");
+const ethers_1 = require("ethers");
 const core_1 = require("../../core");
 const crossChain_1 = require("../types/crossChain");
 const OFT_1 = require("../../abis/OFT");
@@ -369,19 +337,33 @@ async function buildCrossChainVaultTx(props) {
         const hubRpc = hubChain?.rpcUrls;
         const hubRpcUrl = hubRpc?.default?.http?.[0];
         let hubPublicClient;
-        try {
-            // Dynamic import to keep viem optional at the module level
-            const viem = await Promise.resolve().then(() => __importStar(require('viem')));
-            hubPublicClient = viem.createPublicClient({
-                chain: hubChain,
-                transport: viem.http(hubRpcUrl),
-            });
+        if (hubRpcUrl) {
+            // Hub reads (multi-asset previews) go through ethers, which is a hard
+            // dependency. This used to dynamically import the optional `viem` peer, which tsc
+            // compiles to a literal CJS require that bundlers resolve at build time
+            // and fail on when `viem` is not installed.
+            // `createProvider` is cached per (url, chainId) and uses a static
+            // network, so each readContract costs exactly one `eth_call`.
+            const hubChainId = hubChain?.id;
+            const provider = (0, core_1.createProvider)(hubRpcUrl, hubChainId);
+            hubPublicClient = {
+                readContract: async (args) => {
+                    const { address, abi, functionName, args: callArgs = [], } = args;
+                    const result = await new ethers_1.Contract(address, abi, provider)
+                        .getFunction(functionName)
+                        .staticCallResult(...callArgs);
+                    // Match viem's readContract shape: a single output is returned
+                    // bare; multiple outputs as a positional array.
+                    return result.length === 1 ? result[0] : result.toArray();
+                },
+            };
         }
-        catch {
-            // If viem is not available, provide a stub that will fail on multi-asset only
+        else {
+            // No hub RPC on the chain object: only multi-asset paths read the hub,
+            // so fail those (redeem previews fall back to 1:1, as before).
             hubPublicClient = {
                 readContract: async () => {
-                    throw new Error('viem is required for multi-asset vault operations. Install viem as a peer dependency.');
+                    throw new core_1.UpshiftValidationError('INVALID_INPUT', 'hubChain.rpcUrls.default.http[0] is required for multi-asset vault operations.');
                 },
             };
         }

package/lib/index.d.ts

@@ -22,6 +22,10 @@ export * from './adapters/solana';
  * Stellar export
  */
 export * from './adapters/stellar';
+/**
+ * Sui export
+ */
+export * from './adapters/sui';
 export declare const VAULT_ADDRESSES: Record<"musd" | "predlp" | "sentusd" | "pregrid" | "repouscc" | "earnxrp" | "tivkbtc" | "tivusdt0" | "supermon" | "earnmon" | "k3europ" | "wmon/ausd" | "wbtc/ausd" | "earnausd_monad" | "sausd" | "farmbold" | "sentuscc" | "sentbtc" | "svusdc" | "apusdc" | "testwethtsa" | "tacusr" | "upinjusdt" | "tac-teth" | "upausd" | "taccbbtc" | "xupusdc" | "uptbtc" | "gteth" | "ageth" | "upusdc" | "hgeth" | "upssylva" | "hbbtc" | "hbhype" | "upazt" | "susdt" | "upedge" | "coreusdc" | "upcusdo" | "shifteth" | "upsusde" | "uplbtc" | "upavax" | "tacrseth" | "earnausd" | "alpineusdcflagship" | "alpinecoinshiftusdc" | "upbtc" | "upstrbtc" | "maxiusr" | "upgammausdc" | "xhype" | "wildusd" | "alpinebtc" | "prenusd" | "upyzusd" | "upnusd" | "hlpe" | "nemo eth yield", `0x${string}`>;
 /**
  * Export the SDK class as default

package/lib/index.js

@@ -39,6 +39,10 @@ __exportStar(require("./adapters/solana"), exports);
  * Stellar export
  */
 __exportStar(require("./adapters/stellar"), exports);
+/**
+ * Sui export
+ */
+__exportStar(require("./adapters/sui"), exports);
 /**
  * Upshift Vaults
  */

package/lib/main.d.ts

@@ -7,7 +7,7 @@ import SolanaAdapter from './adapters/solana';
 import SuiAdapter from './adapters/sui';
 import StellarAdapter from './adapters/stellar';
 import EVMAdapter from './adapters/evm';
-import type { IAddress, IChainId, IVaultHistoricalParams } from './types';
+import type { IAddress, IChainId, IKycRecord, IKycStatus, IKycWalletOptions, IVaultHistoricalParams } from './types';
 import { UpshiftBase, type IUpshiftBase } from './core';
 import { UpshiftVaults, type IGetVaultsOptions, type IVaultBaseOptions, type IVaultCustomOptions } from './modules/vaults';
 import type { Signer, Wallet } from 'ethers';
@@ -266,8 +266,10 @@ export declare class UpshiftSDK extends UpshiftBase {
         solanaWallet?: string;
         stellarWallet?: string;
         /**
-         * Sui wallet address (`0x` + 64 hex chars). Validated now; Sui positions
-         * are not read yet, so passing it does not add Sui vaults to the result.
+         * Sui wallet address (`0x` + 64 hex chars). Its share balance and its
+         * pending withdrawal requests (as redemptions) are read for each Sui vault:
+         * one balance read plus, when the SDK has the contract IDs, one object read
+         * (one more per further 25 requests the wallet has made on the vault).
          */
         suiWallet?: string;
         options?: IVaultBaseOptions;
@@ -388,6 +390,34 @@ export declare class UpshiftSDK extends UpshiftBase {
         chainId: number;
         originCode: `0x${string}`;
     }): Promise<import("./types").IOriginInfo>;
+    /**
+     * Read a wallet's status in `chainId`'s `KycRegistry`. Delegates to
+     * {@link UpshiftVaults.getKycStatus}.
+     * @param options - `chainId` and `wallet`.
+     * @returns `'none' | 'active' | 'expired' | 'blocked'`.
+     * @throws UpshiftValidationError when no provider is configured or no
+     *   registry is deployed for `chainId`, or `wallet` is malformed.
+     * @throws UpshiftSDKError when the read fails.
+     * @example
+     * ```ts
+     * const status = await upshiftSdk.getKycStatus({ chainId: 1, wallet });
+     * ```
+     */
+    getKycStatus(options: Omit<IKycWalletOptions, 'rpcUrl'>): Promise<IKycStatus>;
+    /**
+     * Read a wallet's raw `KycRegistry` record (blocked flag and Unix-second
+     * timestamps). Delegates to {@link UpshiftVaults.getKycRecord}.
+     * @param options - `chainId` and `wallet`.
+     * @returns {@link IKycRecord}.
+     * @throws UpshiftValidationError when no provider is configured or no
+     *   registry is deployed for `chainId`, or `wallet` is malformed.
+     * @throws UpshiftSDKError when the read fails.
+     * @example
+     * ```ts
+     * const { expiresAt } = await upshiftSdk.getKycRecord({ chainId: 1, wallet });
+     * ```
+     */
+    getKycRecord(options: Omit<IKycWalletOptions, 'rpcUrl'>): Promise<IKycRecord>;
     /**
      * Get lifetime PnL for a user in a specific vault.
      * Calculates realized and unrealized PnL based on deposit/withdrawal history and current position.

package/lib/main.js

@@ -463,6 +463,38 @@ class UpshiftSDK extends core_1.UpshiftBase {
     async getOriginInfo(options) {
         return await this.vaults.getOriginInfo(options);
     }
+    /**
+     * Read a wallet's status in `chainId`'s `KycRegistry`. Delegates to
+     * {@link UpshiftVaults.getKycStatus}.
+     * @param options - `chainId` and `wallet`.
+     * @returns `'none' | 'active' | 'expired' | 'blocked'`.
+     * @throws UpshiftValidationError when no provider is configured or no
+     *   registry is deployed for `chainId`, or `wallet` is malformed.
+     * @throws UpshiftSDKError when the read fails.
+     * @example
+     * ```ts
+     * const status = await upshiftSdk.getKycStatus({ chainId: 1, wallet });
+     * ```
+     */
+    async getKycStatus(options) {
+        return await this.vaults.getKycStatus(options);
+    }
+    /**
+     * Read a wallet's raw `KycRegistry` record (blocked flag and Unix-second
+     * timestamps). Delegates to {@link UpshiftVaults.getKycRecord}.
+     * @param options - `chainId` and `wallet`.
+     * @returns {@link IKycRecord}.
+     * @throws UpshiftValidationError when no provider is configured or no
+     *   registry is deployed for `chainId`, or `wallet` is malformed.
+     * @throws UpshiftSDKError when the read fails.
+     * @example
+     * ```ts
+     * const { expiresAt } = await upshiftSdk.getKycRecord({ chainId: 1, wallet });
+     * ```
+     */
+    async getKycRecord(options) {
+        return await this.vaults.getKycRecord(options);
+    }
     /**
      * Get lifetime PnL for a user in a specific vault.
      * Calculates realized and unrealized PnL based on deposit/withdrawal history and current position.

package/lib/modules/api/kyc.d.ts

@@ -0,0 +1,4 @@
+import type { IAddress, ICreateKycSessionOptions, IKycChallenge, IKycSession } from '../../types';
+export declare function fetchKycChallenge(wallet: IAddress, chainId: number): Promise<IKycChallenge>;
+export declare function postKycSession(options: ICreateKycSessionOptions): Promise<IKycSession>;
+export declare function postKycSessionRefresh(sessionToken: string): Promise<string>;

package/lib/modules/api/kyc.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchKycChallenge = fetchKycChallenge;
+exports.postKycSession = postKycSession;
+exports.postKycSessionRefresh = postKycSessionRefresh;
+const ethers_1 = require("ethers");
+const core_1 = require("../../core/constants/core");
+const errors_1 = require("../../core/errors");
+const fetcher_1 = require("../../core/fetcher");
+const REASONS = {
+    'challenge expired': 'challenge_expired',
+    'unknown or used challenge': 'challenge_used',
+    'invalid signature': 'invalid_signature',
+    'unknown or expired session': 'session_expired',
+    'session no longer valid': 'session_expired',
+    'identity blocked': 'identity_blocked',
+    'wallet is bound to another identity': 'wallet_bound',
+    'wallet limit reached for this identity': 'wallet_limit',
+    'wallet control was proven on another chain; verify again from there': 'other_chain',
+    'wallet is verified through another provider': 'other_provider',
+    'wallet is not verified for this chain': 'not_verified_for_chain',
+    'enrolment already in progress; retry shortly': 'enrolment_in_progress',
+    'a registry write for this wallet is in progress; retry shortly': 'registry_write_in_progress',
+    'enrolment timed out; retry shortly': 'enrolment_timed_out',
+    'chain has no kyc registry': 'no_registry',
+    'too many requests': 'rate_limited',
+};
+const IDENTITY_STATUSES = [
+    'pending',
+    'approved',
+    'rejected_retry',
+    'rejected_final',
+    'revoked',
+    'blocked',
+];
+function readDetail(body) {
+    const detail = body?.detail;
+    if (typeof detail === 'string')
+        return detail;
+    if (!Array.isArray(detail))
+        return '';
+    return detail
+        .map((d) => d?.msg)
+        .filter((m) => typeof m === 'string')
+        .join('; ');
+}
+function reasonFor(status, detail) {
+    const known = REASONS[detail.toLowerCase()];
+    if (known)
+        return known;
+    if (/has no KYC registry/i.test(detail))
+        return 'no_registry';
+    if (status === 429)
+        return 'rate_limited';
+    if (status >= 500)
+        return 'unavailable';
+    if (status === 422)
+        return 'invalid_request';
+    return 'unknown';
+}
+async function kycRequest(method, path, data) {
+    const res = await (0, fetcher_1.fetchUpshiftPublic)(path, {
+        method: data === undefined ? 'get' : 'post',
+        data,
+        returnErrorResponse: true,
+    });
+    const body = await res.json().catch(() => null);
+    if (res.ok) {
+        if (body && typeof body === 'object')
+            return body;
+        throw new errors_1.UpshiftServerError(res.status, `${method}: empty response body`);
+    }
+    const detail = readDetail(body);
+    const retryAfter = Number(res.headers.get('retry-after'));
+    throw new errors_1.UpshiftKycError(res.status, detail, reasonFor(res.status, detail), {
+        correlationId: res.headers.get('x-correlation-id') ?? undefined,
+        context: { method, status: res.status },
+        retryAfterMs: retryAfter > 0 ? retryAfter * 1000 : undefined,
+    });
+}
+function assertWalletAndChain(method, wallet, chainId) {
+    if (!(0, ethers_1.isAddress)(wallet)) {
+        throw new errors_1.UpshiftValidationError('INVALID_ADDRESS', `${method}: wallet is not a valid EVM address`);
+    }
+    if (!Number.isInteger(chainId) || chainId < 1) {
+        throw new errors_1.UpshiftValidationError('INVALID_CHAIN', `${method}: chainId must be a positive integer, got ${chainId}`);
+    }
+}
+function field(method, body, key, check) {
+    const value = body[key];
+    if (!check(value)) {
+        throw new errors_1.UpshiftServerError(200, `${method}: response field ${key} is malformed`);
+    }
+    return value;
+}
+const isString = (v) => typeof v === 'string' && v.length > 0;
+const isInteger = (v) => Number.isInteger(v);
+const isIdentityStatus = (v) => IDENTITY_STATUSES.includes(v);
+async function fetchKycChallenge(wallet, chainId) {
+    const method = 'getKycChallenge';
+    assertWalletAndChain(method, wallet, chainId);
+    const body = await kycRequest(method, core_1.WEBSERVER_ENDPOINTS.public.kyc.challenge(wallet, chainId));
+    return {
+        wallet: field(method, body, 'wallet', isString),
+        chainId: field(method, body, 'chain_id', isInteger),
+        nonce: field(method, body, 'nonce', isString),
+        issuedAt: field(method, body, 'issued_at', isInteger),
+        expiry: field(method, body, 'expiry', isInteger),
+        message: field(method, body, 'message', isString),
+    };
+}
+async function postKycSession(options) {
+    const method = 'createKycSession';
+    const { wallet, chainId, nonce, issuedAt, expiry, signature } = options;
+    assertWalletAndChain(method, wallet, chainId);
+    if (!/^0x[0-9a-fA-F]+$/.test(signature)) {
+        throw new errors_1.UpshiftValidationError('INVALID_INPUT', `${method}: signature must be 0x-prefixed hex`);
+    }
+    if (!isString(nonce) || !isInteger(issuedAt) || !isInteger(expiry)) {
+        throw new errors_1.UpshiftValidationError('INVALID_INPUT', `${method}: nonce, issuedAt and expiry must come from getKycChallenge`);
+    }
+    const body = await kycRequest(method, core_1.WEBSERVER_ENDPOINTS.public.kyc.session, {
+        wallet,
+        chain_id: chainId,
+        nonce,
+        issued_at: issuedAt,
+        expiry,
+        signature,
+    });
+    return {
+        accessToken: field(method, body, 'access_token', isString),
+        sessionToken: field(method, body, 'session_token', isString),
+        externalUserId: field(method, body, 'external_user_id', isString),
+        levelName: field(method, body, 'level_name', isString),
+        identityStatus: field(method, body, 'identity_status', isIdentityStatus),
+    };
+}
+async function postKycSessionRefresh(sessionToken) {
+    const method = 'refreshKycSession';
+    if (typeof sessionToken !== 'string' ||
+        sessionToken.length < 16 ||
+        sessionToken.length > 128) {
+        throw new errors_1.UpshiftValidationError('INVALID_INPUT', `${method}: sessionToken must come from createKycSession`);
+    }
+    const body = await kycRequest(method, core_1.WEBSERVER_ENDPOINTS.public.kyc.sessionRefresh, { session_token: sessionToken });
+    return field(method, body, 'access_token', isString);
+}
+//# sourceMappingURL=kyc.js.map

package/lib/modules/api/main.d.ts

@@ -1,5 +1,5 @@
 import { UpshiftBase, type IUpshiftBase } from '../../core/base.class';
-import type { ICollateralExcessOrDeficit, ICollateralSimulationInput, ICollateralSimulationResults, ICuratorWhitelistStatus, IDiscountFactorLadder, ILoanBookInfo, IOracleClassification, IOtcMarginRequirement, IOtcPositionRead, IRevertReason, ITimelockRequest, ITransparencyApySeries, ITransparencyAuditCategory, ITransparencyAuditLog, ITransparencyFees, ITransparencyGovernancePermissions, ITransparencyGovernanceRoles, ITransparencyHistoricalAllocations, ITransparencyPositions, ITransparencyRatioPoint, ITransparencyTimelocks, ITransparencyTimelockStatus, IUnrealizedPnlSnapshot, IVaultPerformanceFees, IWSSubaccountListItem } from '../../types';
+import type { IAddress, ICollateralExcessOrDeficit, ICollateralSimulationInput, ICollateralSimulationResults, ICreateKycSessionOptions, ICuratorWhitelistStatus, IDiscountFactorLadder, IKycChallenge, IKycSession, ILoanBookInfo, IOracleClassification, IOtcMarginRequirement, IOtcPositionRead, IRevertReason, ITimelockRequest, ITransparencyApySeries, ITransparencyAuditCategory, ITransparencyAuditLog, ITransparencyFees, ITransparencyGovernancePermissions, ITransparencyGovernanceRoles, ITransparencyHistoricalAllocations, ITransparencyPositions, ITransparencyRatioPoint, ITransparencyTimelocks, ITransparencyTimelockStatus, IUnrealizedPnlSnapshot, IVaultPerformanceFees, IWSSubaccountListItem } from '../../types';
 /**
  * Read-only client for Upshift backend REST endpoints that have no on-chain
  * equivalent: the unrealized-PnL series, the transparency dashboard
@@ -584,4 +584,66 @@ export declare class UpshiftApi extends UpshiftBase {
      *   const losing = all.filter((s) => s.unrealizedPnl < 0);
      */
     getLatestUnrealizedPnl(): Promise<IUnrealizedPnlSnapshot[]>;
+    /**
+     * Fetch a one-time SIWE challenge that proves the wallet is the user's
+     * before KYC starts (`GET /kyc/challenge`).
+     *
+     * Makes one HTTPS request to the public Upshift API; no RPC calls. Never
+     * cached: the nonce is single use and expires after 600 s.
+     *
+     * @param params - `wallet`, the EVM wallet that will sign `message`, and
+     *   `chainId`, the EVM chain whose `KycRegistry` the session activates.
+     * @returns {@link IKycChallenge}. Sign `message` verbatim with `personal_sign`.
+     * @throws UpshiftValidationError When `wallet` or `chainId` is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx: `no_registry` (400) or `unavailable` (503).
+     * @throws UpshiftServerError When the response body is malformed.
+     * @example
+     * ```ts
+     * const challenge = await sdk.apiModule.getKycChallenge({ wallet, chainId: 1 });
+     * const signature = await walletClient.signMessage({ message: challenge.message });
+     * ```
+     */
+    getKycChallenge(params: {
+        wallet: IAddress;
+        chainId: number;
+    }): Promise<IKycChallenge>;
+    /**
+     * Open a KYC session with a signed challenge (`POST /kyc/session`). The
+     * first call creates the user's Sumsub applicant; later calls resume it.
+     * Every call activates the identity on `chainId`.
+     *
+     * Makes one HTTPS request and never retries: the nonce is single use. On
+     * any failure, fetch a new challenge before trying again.
+     *
+     * @param options - The challenge fields exactly as returned, plus `signature`.
+     * @returns {@link IKycSession} with the Sumsub WebSDK `accessToken`.
+     * @throws UpshiftValidationError When an input is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx. `reason` names the
+     *   case; `retryable` is true for the in-progress and timed-out answers.
+     * @throws UpshiftServerError When the response body is malformed.
+     * @example
+     * ```ts
+     * const session = await sdk.apiModule.createKycSession({ ...challenge, signature });
+     * openSumsubWidget(session.accessToken);
+     * ```
+     */
+    createKycSession(options: ICreateKycSessionOptions): Promise<IKycSession>;
+    /**
+     * Get a fresh Sumsub WebSDK access token for an open session without a new
+     * signature (`POST /kyc/session/refresh`). A session lasts 4 h.
+     *
+     * Makes one HTTPS request; no RPC calls.
+     *
+     * @param params - `sessionToken` from {@link UpshiftApi.createKycSession}.
+     * @returns The new Sumsub access token.
+     * @throws UpshiftValidationError When `sessionToken` is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx: `session_expired` (401) once the session ends or the wallet is unbound.
+     * @example
+     * ```ts
+     * const expirationHandler = () => sdk.apiModule.refreshKycSession({ sessionToken });
+     * ```
+     */
+    refreshKycSession(params: {
+        sessionToken: string;
+    }): Promise<string>;
 }

package/lib/modules/api/main.js

@@ -10,6 +10,7 @@ exports.UpshiftApi = void 0;
  */
 const ethers_1 = require("ethers");
 const fetcher_1 = require("./fetcher");
+const kyc_1 = require("./kyc");
 const base_class_1 = require("../../core/base.class");
 const core_1 = require("../../core/constants/core");
 const errors_1 = require("../../core/errors");
@@ -906,6 +907,69 @@ class UpshiftApi extends base_class_1.UpshiftBase {
         assertSnapshotArray(data, method);
         return data.map(toUnrealizedPnlSnapshot);
     }
+    /**
+     * Fetch a one-time SIWE challenge that proves the wallet is the user's
+     * before KYC starts (`GET /kyc/challenge`).
+     *
+     * Makes one HTTPS request to the public Upshift API; no RPC calls. Never
+     * cached: the nonce is single use and expires after 600 s.
+     *
+     * @param params - `wallet`, the EVM wallet that will sign `message`, and
+     *   `chainId`, the EVM chain whose `KycRegistry` the session activates.
+     * @returns {@link IKycChallenge}. Sign `message` verbatim with `personal_sign`.
+     * @throws UpshiftValidationError When `wallet` or `chainId` is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx: `no_registry` (400) or `unavailable` (503).
+     * @throws UpshiftServerError When the response body is malformed.
+     * @example
+     * ```ts
+     * const challenge = await sdk.apiModule.getKycChallenge({ wallet, chainId: 1 });
+     * const signature = await walletClient.signMessage({ message: challenge.message });
+     * ```
+     */
+    async getKycChallenge(params) {
+        return (0, kyc_1.fetchKycChallenge)(params.wallet, params.chainId);
+    }
+    /**
+     * Open a KYC session with a signed challenge (`POST /kyc/session`). The
+     * first call creates the user's Sumsub applicant; later calls resume it.
+     * Every call activates the identity on `chainId`.
+     *
+     * Makes one HTTPS request and never retries: the nonce is single use. On
+     * any failure, fetch a new challenge before trying again.
+     *
+     * @param options - The challenge fields exactly as returned, plus `signature`.
+     * @returns {@link IKycSession} with the Sumsub WebSDK `accessToken`.
+     * @throws UpshiftValidationError When an input is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx. `reason` names the
+     *   case; `retryable` is true for the in-progress and timed-out answers.
+     * @throws UpshiftServerError When the response body is malformed.
+     * @example
+     * ```ts
+     * const session = await sdk.apiModule.createKycSession({ ...challenge, signature });
+     * openSumsubWidget(session.accessToken);
+     * ```
+     */
+    async createKycSession(options) {
+        return (0, kyc_1.postKycSession)(options);
+    }
+    /**
+     * Get a fresh Sumsub WebSDK access token for an open session without a new
+     * signature (`POST /kyc/session/refresh`). A session lasts 4 h.
+     *
+     * Makes one HTTPS request; no RPC calls.
+     *
+     * @param params - `sessionToken` from {@link UpshiftApi.createKycSession}.
+     * @returns The new Sumsub access token.
+     * @throws UpshiftValidationError When `sessionToken` is malformed.
+     * @throws UpshiftKycError When the backend answers non-2xx: `session_expired` (401) once the session ends or the wallet is unbound.
+     * @example
+     * ```ts
+     * const expirationHandler = () => sdk.apiModule.refreshKycSession({ sessionToken });
+     * ```
+     */
+    async refreshKycSession(params) {
+        return (0, kyc_1.postKycSessionRefresh)(params.sessionToken);
+    }
 }
 exports.UpshiftApi = UpshiftApi;
 //# sourceMappingURL=main.js.map

package/lib/modules/vaults/getters.d.ts

@@ -119,11 +119,13 @@ export { getSwapRouterDepositResult } from '../../core/helpers/swap-router';
 /**
  * Vault Positions
  */
-export declare function getVaultPositions({ vault, wallet, solanaWallet, stellarWallet, options, prefetchedReads, }: {
+export declare function getVaultPositions({ vault, wallet, solanaWallet, stellarWallet, suiWallet, options, prefetchedReads, }: {
     vault: IAddress;
     wallet?: IAddress;
     solanaWallet?: string;
     stellarWallet?: string;
+    /** Sui wallet whose share balance is read for Sui vaults. */
+    suiWallet?: string;
     options: IVaultBaseOptions;
     /**
      * Per-vault values already read via a Multicall3 batch at the fan-out call