vesant-sdk 1.6.1 → 1.6.3

package/dist/index.mjs

@@ -240,7 +240,7 @@ var noopLogger = {
 };
 
 // src/core/version.ts
-var SDK_VERSION = "1.6.1";
+var SDK_VERSION = "1.6.2";
 
 // src/shared/browser-utils.ts
 function generateUUID() {
@@ -1121,22 +1121,51 @@ var GeolocationClient = class extends BaseClient {
       void 0,
       requestOptions
     );
-    const locationResult = await this.verifyIP({
-      ip_address: ipAddress,
-      user_id: userId,
-      event_type: eventType,
-      device_fingerprint: cipherTextResult.valid && cipherTextResult.device ? {
-        device_id: cipherTextResult.device_uuid,
-        user_agent: "",
-        platform: cipherTextResult.device.platform,
-        browser: cipherTextResult.device.browser,
-        os: cipherTextResult.device.os
-      } : void 0
-    }, requestOptions);
+    const loc = cipherTextResult.location;
+    const risk = cipherTextResult.risk;
+    if (!risk) {
+      const locationResult = await this.verifyIP({
+        ip_address: ipAddress,
+        user_id: userId,
+        event_type: eventType
+      }, requestOptions);
+      return {
+        ciphertext_valid: cipherTextResult.valid,
+        ciphertext_result: cipherTextResult,
+        location: locationResult
+      };
+    }
+    const location = {
+      ip_address: cipherTextResult.ip_address,
+      location: {
+        country: loc?.country ?? "",
+        country_iso: loc?.country_iso ?? "",
+        city: loc?.city ?? "",
+        region: loc?.region ?? "",
+        postal_code: "",
+        latitude: loc?.latitude ?? 0,
+        longitude: loc?.longitude ?? 0,
+        timezone: "",
+        is_vpn: risk.is_vpn ?? false,
+        is_proxy: risk.is_proxy ?? false,
+        is_tor: risk.is_tor ?? false,
+        is_hosting: risk.is_hosting ?? false,
+        is_anonymizer: risk.is_vpn || risk.is_proxy || risk.is_tor
+      },
+      is_compliant: cipherTextResult.is_compliant ?? !risk.is_blocked,
+      is_blocked: risk.is_blocked ?? false,
+      risk_level: risk.level ?? "low",
+      risk_score: risk.score ?? 0,
+      risk_reasons: risk.is_blocked && risk.block_reasons ? risk.block_reasons : risk.factors ?? [],
+      jurisdiction: cipherTextResult.jurisdiction,
+      geofence_evaluation: cipherTextResult.geofence_evaluation,
+      record_id: cipherTextResult.record_id ?? "",
+      gps_required: cipherTextResult.gps_required
+    };
     return {
       ciphertext_valid: cipherTextResult.valid,
       ciphertext_result: cipherTextResult,
-      location: locationResult
+      location
     };
   }
   // ============================================================================
@@ -1541,28 +1570,34 @@ var ComplianceClient = class {
       if (this.config.debug) {
         this.logger.debug("Starting registration verification", { customerId: request.customerId });
       }
-      const customerData = request.cipherText ? {
-        full_name: request.fullName,
-        email: request.emailAddress,
-        phone: request.phoneNumber,
-        date_of_birth: request.dateOfBirth
-      } : void 0;
-      [cipherTextResult, geoVerification] = await Promise.all([
-        this.executeCipherTextValidation(
+      if (request.cipherText) {
+        cipherTextResult = await this.executeCipherTextValidation(
           request.cipherText,
           request.customerId,
           "registration",
           request.ipAddress,
-          customerData,
+          {
+            full_name: request.fullName,
+            email: request.emailAddress,
+            phone: request.phoneNumber,
+            date_of_birth: request.dateOfBirth
+          },
           requestOptions
-        ),
-        this.geoClient.verifyIP({
+        );
+        geoVerification = (cipherTextResult && this.buildLocationFromCipherText(cipherTextResult, request.ipAddress)) ?? await this.geoClient.verifyIP({
           ip_address: request.ipAddress,
           user_id: request.customerId,
           event_type: "registration",
           device_fingerprint: request.deviceFingerprint
-        }, requestOptions)
-      ]);
+        }, requestOptions);
+      } else {
+        geoVerification = await this.geoClient.verifyIP({
+          ip_address: request.ipAddress,
+          user_id: request.customerId,
+          event_type: "registration",
+          device_fingerprint: request.deviceFingerprint
+        }, requestOptions);
+      }
       const blockReasons = this.evaluateRegistrationBlock(geoVerification, cipherTextResult);
       if (blockReasons.length > 0) {
         if (this.config.debug) {
@@ -1643,7 +1678,7 @@ var ComplianceClient = class {
   evaluateRegistrationBlock(geoVerification, cipherTextResult) {
     const blockReasons = [];
     if (geoVerification.is_blocked) {
-      blockReasons.push(...geoVerification.risk_reasons);
+      blockReasons.push(...geoVerification.risk_reasons ?? []);
     }
     if (!geoVerification.is_compliant) {
       if (!blockReasons.includes("non_compliant_jurisdiction")) {
@@ -1667,7 +1702,7 @@ var ComplianceClient = class {
       }
     }
     if (geoVerification.geofence_evaluation?.blocked) {
-      blockReasons.push(...geoVerification.geofence_evaluation.reasons);
+      blockReasons.push(...geoVerification.geofence_evaluation.reasons ?? []);
     }
     if (geoVerification.risk_level === "critical") {
       if (!blockReasons.includes("critical_risk_level")) {
@@ -1818,23 +1853,39 @@ var ComplianceClient = class {
       if (this.config.debug) {
         this.logger.debug("Starting login verification", { customerId: request.customerId });
       }
-      const [cipherTextResult, geoVerification, profileResult] = await Promise.all([
-        this.executeCipherTextValidation(
-          request.cipherText,
-          request.customerId,
-          "login",
-          request.ipAddress,
-          void 0,
-          requestOptions
-        ),
-        this.geoClient.verifyIP({
+      let cipherTextResult;
+      let geoVerification;
+      let profileResult;
+      if (request.cipherText) {
+        [cipherTextResult, profileResult] = await Promise.all([
+          this.executeCipherTextValidation(
+            request.cipherText,
+            request.customerId,
+            "login",
+            request.ipAddress,
+            void 0,
+            requestOptions
+          ),
+          this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
+        ]);
+        geoVerification = (cipherTextResult && this.buildLocationFromCipherText(cipherTextResult, request.ipAddress)) ?? await this.geoClient.verifyIP({
           ip_address: request.ipAddress,
           user_id: request.customerId,
           event_type: "login",
           device_fingerprint: request.deviceFingerprint
-        }, requestOptions),
-        this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
-      ]);
+        }, requestOptions);
+      } else {
+        [, geoVerification, profileResult] = await Promise.all([
+          Promise.resolve(void 0),
+          this.geoClient.verifyIP({
+            ip_address: request.ipAddress,
+            user_id: request.customerId,
+            event_type: "login",
+            device_fingerprint: request.deviceFingerprint
+          }, requestOptions),
+          this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
+        ]);
+      }
       const loginBlockReasons = this.getBlockReasons(geoVerification, profileResult, cipherTextResult);
       const isBlocked = !geoVerification.is_compliant || geoVerification.is_blocked || !!cipherTextResult?.risk?.is_blocked || cipherTextResult?.valid === false || geoVerification.gps_required && !cipherTextResult;
       if (isBlocked && !profileResult) {
@@ -1919,23 +1970,39 @@ var ComplianceClient = class {
           currency: request.currency
         });
       }
-      const [cipherTextResult, geoVerification, profileResult] = await Promise.all([
-        this.executeCipherTextValidation(
-          request.cipherText,
-          request.customerId,
-          "transaction",
-          request.ipAddress,
-          void 0,
-          requestOptions
-        ),
-        this.geoClient.verifyIP({
+      let cipherTextResult;
+      let geoVerification;
+      let profileResult;
+      if (request.cipherText) {
+        [cipherTextResult, profileResult] = await Promise.all([
+          this.executeCipherTextValidation(
+            request.cipherText,
+            request.customerId,
+            "transaction",
+            request.ipAddress,
+            void 0,
+            requestOptions
+          ),
+          this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
+        ]);
+        geoVerification = (cipherTextResult && this.buildLocationFromCipherText(cipherTextResult, request.ipAddress)) ?? await this.geoClient.verifyIP({
           ip_address: request.ipAddress,
           user_id: request.customerId,
           event_type: "transaction",
           device_fingerprint: request.deviceFingerprint
-        }, requestOptions),
-        this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
-      ]);
+        }, requestOptions);
+      } else {
+        [, geoVerification, profileResult] = await Promise.all([
+          Promise.resolve(void 0),
+          this.geoClient.verifyIP({
+            ip_address: request.ipAddress,
+            user_id: request.customerId,
+            event_type: "transaction",
+            device_fingerprint: request.deviceFingerprint
+          }, requestOptions),
+          this.riskClient.getProfile(request.customerId, requestOptions).catch(() => null)
+        ]);
+      }
       const geoBlocked = !geoVerification.is_compliant || geoVerification.is_blocked || !!cipherTextResult?.risk?.is_blocked || cipherTextResult?.valid === false || geoVerification.gps_required && !cipherTextResult;
       if (geoBlocked && !profileResult) {
         return {
@@ -1999,22 +2066,31 @@ var ComplianceClient = class {
   async verifyEvent(request, requestOptions) {
     const startTime = Date.now();
     this.validateEventRequest(request);
-    const [cipherTextResult, geoVerification] = await Promise.all([
-      this.executeCipherTextValidation(
+    let cipherTextResult;
+    let geoVerification;
+    if (request.cipherText) {
+      cipherTextResult = await this.executeCipherTextValidation(
         request.cipherText,
         request.customerId,
         request.eventType,
         request.ipAddress,
         void 0,
         requestOptions
-      ),
-      this.geoClient.verifyIP({
+      );
+      geoVerification = (cipherTextResult && this.buildLocationFromCipherText(cipherTextResult, request.ipAddress)) ?? await this.geoClient.verifyIP({
+        ip_address: request.ipAddress,
+        user_id: request.customerId,
+        event_type: request.eventType,
+        device_fingerprint: request.deviceFingerprint
+      }, requestOptions);
+    } else {
+      geoVerification = await this.geoClient.verifyIP({
         ip_address: request.ipAddress,
         user_id: request.customerId,
         event_type: request.eventType,
         device_fingerprint: request.deviceFingerprint
-      }, requestOptions)
-    ]);
+      }, requestOptions);
+    }
     if (this.config.autoCreateProfiles) {
       try {
         const profile = await this.riskClient.getProfile(request.customerId, requestOptions);
@@ -2028,7 +2104,7 @@ var ComplianceClient = class {
       }
     }
     const cipherTextBlocked = cipherTextResult ? !cipherTextResult.valid || cipherTextResult.risk?.is_blocked === true : false;
-    const blockReasons = [...geoVerification.risk_reasons];
+    const blockReasons = [...geoVerification.risk_reasons ?? []];
     if (cipherTextResult) {
       if (!cipherTextResult.valid) {
         blockReasons.push("ciphertext_validation_failed");
@@ -2097,6 +2173,44 @@ var ComplianceClient = class {
       return void 0;
     }
   }
+  /**
+   * Build a LocationVerification from a ValidateCipherTextResponse.
+   * The validate-ciphertext endpoint now returns the full geo-verification data
+   * (is_compliant, jurisdiction, geofence_evaluation, record_id, gps_required),
+   * so a separate verifyIP call is unnecessary.
+   */
+  buildLocationFromCipherText(ct, ipAddress) {
+    const loc = ct.location;
+    const risk = ct.risk;
+    if (!risk) return null;
+    return {
+      ip_address: ct.ip_address || ipAddress,
+      location: {
+        country: loc?.country ?? "",
+        country_iso: loc?.country_iso ?? "",
+        city: loc?.city ?? "",
+        region: loc?.region ?? "",
+        postal_code: "",
+        latitude: loc?.latitude ?? 0,
+        longitude: loc?.longitude ?? 0,
+        timezone: "",
+        is_vpn: risk.is_vpn,
+        is_proxy: risk.is_proxy,
+        is_tor: risk.is_tor,
+        is_hosting: risk.is_hosting ?? false,
+        is_anonymizer: risk.is_vpn || risk.is_proxy || risk.is_tor
+      },
+      is_compliant: ct.is_compliant ?? !risk.is_blocked,
+      is_blocked: risk.is_blocked,
+      risk_level: risk.level,
+      risk_score: risk.score,
+      risk_reasons: risk.is_blocked && risk.block_reasons ? risk.block_reasons : risk.factors ?? [],
+      jurisdiction: ct.jurisdiction,
+      geofence_evaluation: ct.geofence_evaluation,
+      record_id: ct.record_id ?? "",
+      gps_required: ct.gps_required
+    };
+  }
   calculateTransactionRisk(amount, currency, geoVerification, profile, cipherTextResult) {
     if (!this._currencyRatesCustomized && !this._currencyRatesWarned) {
       this._currencyRatesWarned = true;
@@ -2167,7 +2281,7 @@ var ComplianceClient = class {
   getBlockReasons(geoVerification, profile, cipherTextResult) {
     const reasons = [];
     if (geoVerification.is_blocked) {
-      reasons.push(...geoVerification.risk_reasons);
+      reasons.push(...geoVerification.risk_reasons ?? []);
     }
     if (profile) {
       if (profile.customer_status === "suspended") {
@@ -2490,19 +2604,23 @@ var KycClient = class extends BaseClient {
    *
    * Generates a link that the user can visit to submit their KYC documents.
    *
-   * @param request - Request containing the user ID, optional redirect URL, and optional callback URL (receives POST requests)
-   * @returns Response containing the redirect link and KYC ID
+   * @param request - Request containing the user ID, redirect URL, callback URL, and trigger event
+   * @returns Response containing kyc_required, can_skip, and optionally the redirect link and KYC ID
    *
    * @example
    * ```typescript
    * const result = await client.requestKycSubmitLink({
    *   user_id: "user_123",
-   *   redirect_url: "https://merchant.com/kyc-complete", // optional
-   *   callback_url: "https://merchant.com/api/kyc-webhook" // optional - receives POST requests on status change
+   *   redirect_url: "https://merchant.com/kyc-complete",
+   *   callback_url: "https://merchant.com/api/kyc-webhook",
+   *   trigger_event: "onboarding"
    * });
    *
-   * console.log(`Redirect user to: ${result.link}`);
-   * console.log(`KYC ID: ${result.kyc_id}`);
+   * if (result.kyc_required && result.link) {
+   *   console.log(`Redirect user to: ${result.link}`);
+   * } else if (result.can_skip) {
+   *   console.log("KYC not required, user can proceed");
+   * }
    * ```
    */
   async requestKycSubmitLink(request) {
@@ -3079,6 +3197,41 @@ var TaxClient = class extends BaseClient {
       { ...requestOptions, responseType: "arraybuffer" }
     );
   }
+  async runReminders() {
+    return this.request("/api/v1/tax/reminders/run", {
+      method: "POST"
+    });
+  }
+  /**
+   * Update only the reminder configuration (frequency + max count) without
+   * touching any other tax rule settings. Fetches current rules first and
+   * merges the reminder fields before sending the update.
+   *
+   * Requires the caller to be authenticated as a Tenant Super Admin.
+   * Throws VesantError with status 403 if the role requirement is not met.
+   */
+  async updateReminderConfig(input) {
+    const current = await this.getTaxRules();
+    return this.updateTaxRules({
+      trigger_account_creation: current.trigger_account_creation,
+      trigger_first_withdrawal: current.trigger_first_withdrawal,
+      trigger_threshold: current.trigger_threshold,
+      trigger_manual: current.trigger_manual,
+      trigger_tin_invalid: current.trigger_tin_invalid,
+      trigger_w8ben_expiry: current.trigger_w8ben_expiry,
+      trigger_tin_expired: current.trigger_tin_expired,
+      us_withholding_enabled: current.us_withholding_enabled,
+      non_us_withholding_enabled: current.non_us_withholding_enabled,
+      transaction_action: current.transaction_action,
+      w8ben_expiry_warning_days: current.w8ben_expiry_warning_days,
+      tin_verification_due_date: current.tin_verification_due_date,
+      email_sending_method: current.email_sending_method,
+      display_tin_links_on_platform: current.display_tin_links_on_platform,
+      tax_treaty_support: current.tax_treaty_support,
+      reminder_frequency_days: input.reminder_frequency_days,
+      reminder_max_count: input.reminder_max_count
+    });
+  }
   // ==========================================================================
   // P2 — Tenant Tax Rules
   // ==========================================================================
@@ -3187,6 +3340,64 @@ var TransactionClient = class extends BaseClient {
   }
 };
 
+// src/fraud/client.ts
+var FraudClient = class extends BaseClient {
+  /**
+   * Submit a single fraud event for scoring.
+   */
+  async scoreEvent(request, requestOptions) {
+    this.validateScoreRequest(request);
+    return this.requestWithRetry(
+      "/api/v1/fraud/score",
+      {
+        method: "POST",
+        body: JSON.stringify(request)
+      },
+      void 0,
+      void 0,
+      requestOptions
+    );
+  }
+  /**
+   * Submit multiple fraud events for scoring.
+   */
+  async scoreEventsBulk(requests, requestOptions) {
+    if (!Array.isArray(requests) || requests.length === 0) {
+      throw new ValidationError(
+        "Invalid bulk score request: at least one score request is required",
+        ["requests"]
+      );
+    }
+    requests.forEach((request, index) => this.validateScoreRequest(request, index));
+    return this.requestWithRetry(
+      "/api/v1/fraud/score/bulk",
+      {
+        method: "POST",
+        body: JSON.stringify(requests)
+      },
+      void 0,
+      void 0,
+      requestOptions
+    );
+  }
+  validateScoreRequest(request, index) {
+    const errors = [];
+    const prefix = index === void 0 ? "" : `requests[${index}].`;
+    if (!request.customer_id?.trim()) {
+      errors.push(`${prefix}customer_id is required`);
+    }
+    if (!request.sift_user_id?.trim()) {
+      errors.push(`${prefix}sift_user_id is required`);
+    }
+    if (!request.event_type?.trim()) {
+      errors.push(`${prefix}event_type is required`);
+    }
+    if (errors.length > 0) {
+      throw new ValidationError(`Invalid fraud score request: ${errors.join(", ")}`, errors);
+    }
+  }
+};
+
 // src/webhooks/handler.ts
 var WebhookHandler = class {
   constructor(config) {
@@ -3330,6 +3541,6 @@ function buildHandler(options) {
   return handler;
 }
 
-export { AuthenticationError, BaseClient, CGSError, CircuitBreaker, CircuitBreakerOpenError, ComplianceBlockedError, ComplianceClient, ComplianceError, DEFAULT_CURRENCY_RATES, GeolocationClient, KycClient, NetworkError, RateLimitError, RateLimitTracker, RiskProfileClient, SDK_VERSION, ServiceUnavailableError, TaxClient, TimeoutError, TransactionClient, ValidationError, VesantError, WebhookHandler, createConsoleLogger, createNextWebhookHandler, createWebhookMiddleware, decodeCipherText, generateCipherText, isCipherTextExpired, noopLogger, verifyWebhookSignature };
+export { AuthenticationError, BaseClient, CGSError, CircuitBreaker, CircuitBreakerOpenError, ComplianceBlockedError, ComplianceClient, ComplianceError, DEFAULT_CURRENCY_RATES, FraudClient, GeolocationClient, KycClient, NetworkError, RateLimitError, RateLimitTracker, RiskProfileClient, SDK_VERSION, ServiceUnavailableError, TaxClient, TimeoutError, TransactionClient, ValidationError, VesantError, WebhookHandler, createConsoleLogger, createNextWebhookHandler, createWebhookMiddleware, decodeCipherText, generateCipherText, isCipherTextExpired, noopLogger, verifyWebhookSignature };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map