vesant-sdk 1.7.0-dev.ab7ff29 → 1.7.0-dev.b2c9ecf

package/dist/{client-BolQlL5e.d.mts → client-6sSaxufk.d.mts}

@@ -196,6 +196,13 @@ declare abstract class BaseClient {
     private circuitBreaker;
     private rateLimitTracker;
     constructor(config: BaseClientConfig);
+    /**
+     * Resolve the Idempotency-Key for a request. Mutating methods (POST/PUT/PATCH)
+     * get the caller-supplied key or a freshly minted UUID; non-mutating methods get
+     * none. requestWithRetry resolves this once and injects it so every retry reuses
+     * one key (letting the server dedup replays); a direct request() resolves per call.
+     */
+    private resolveIdempotencyKey;
     /**
      * Make an HTTP request with timeout and error handling
      */

package/dist/{client-BolQlL5e.d.ts → client-6sSaxufk.d.ts}

@@ -196,6 +196,13 @@ declare abstract class BaseClient {
     private circuitBreaker;
     private rateLimitTracker;
     constructor(config: BaseClientConfig);
+    /**
+     * Resolve the Idempotency-Key for a request. Mutating methods (POST/PUT/PATCH)
+     * get the caller-supplied key or a freshly minted UUID; non-mutating methods get
+     * none. requestWithRetry resolves this once and injects it so every retry reuses
+     * one key (letting the server dedup replays); a direct request() resolves per call.
+     */
+    private resolveIdempotencyKey;
     /**
      * Make an HTTP request with timeout and error handling
      */

package/dist/{client-DoMSYMMR.d.ts → client-B32yBt1b.d.ts}

@@ -1,4 +1,4 @@
-import { L as Logger, B as BaseClient, R as RequestOptions } from './client-BolQlL5e.js';
+import { L as Logger, B as BaseClient, R as RequestOptions } from './client-6sSaxufk.js';
 import { B as BlockReason, P as PaginationParams } from './types-CBQRNL-l.js';
 
 interface DeviceFingerprintRequest {
@@ -212,6 +212,19 @@ interface ValidateCipherTextResponse {
     geofence_evaluation?: GeofenceEvaluation;
     record_id?: string;
     gps_required?: boolean;
+    /**
+     * IP-derived location the GPS coordinates were cross-validated against.
+     * `location` carries the GPS-derived city when GPS was provided, so this is
+     * what explains a gps_ip_location_mismatch risk factor.
+     */
+    ip_location?: {
+        country?: string;
+        country_iso?: string;
+        city?: string;
+        region?: string;
+        latitude: number;
+        longitude: number;
+    };
 }
 interface VerifyIPRequest {
     ip_address: string;

package/dist/{client-DMIRx7Tu.d.mts → client-BqPVh5jH.d.mts}

@@ -1,4 +1,4 @@
-import { L as Logger, B as BaseClient, R as RequestOptions } from './client-BolQlL5e.mjs';
+import { L as Logger, B as BaseClient, R as RequestOptions } from './client-6sSaxufk.mjs';
 import { B as BlockReason, P as PaginationParams } from './types-CBQRNL-l.mjs';
 
 interface DeviceFingerprintRequest {
@@ -212,6 +212,19 @@ interface ValidateCipherTextResponse {
     geofence_evaluation?: GeofenceEvaluation;
     record_id?: string;
     gps_required?: boolean;
+    /**
+     * IP-derived location the GPS coordinates were cross-validated against.
+     * `location` carries the GPS-derived city when GPS was provided, so this is
+     * what explains a gps_ip_location_mismatch risk factor.
+     */
+    ip_location?: {
+        country?: string;
+        country_iso?: string;
+        city?: string;
+        region?: string;
+        latitude: number;
+        longitude: number;
+    };
 }
 interface VerifyIPRequest {
     ip_address: string;

package/dist/{client-ZNdnpWe7.d.mts → client-CHPEgasE.d.mts}

@@ -1,6 +1,6 @@
-import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-DMIRx7Tu.mjs';
+import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-BqPVh5jH.mjs';
 import { RiskProfileClient } from './risk-profile/index.mjs';
-import { V as VesantConfig, R as RequestOptions } from './client-BolQlL5e.mjs';
+import { V as VesantConfig, R as RequestOptions } from './client-6sSaxufk.mjs';
 import { C as CustomerProfile } from './types-BOFaMQxI.mjs';
 import { E as EntityType, B as BlockReason, P as PaginationParams } from './types-CBQRNL-l.mjs';
 

package/dist/{client-C3DCmGe9.d.ts → client-pKE_gii_.d.ts}

@@ -1,6 +1,6 @@
-import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-DoMSYMMR.js';
+import { D as DeviceFingerprintRequest, L as LocationVerification, V as ValidateCipherTextResponse, a as LocationRequest, G as GeolocationClient, b as LocationRequestFilters, c as LocationRequestListResponse } from './client-B32yBt1b.js';
 import { RiskProfileClient } from './risk-profile/index.js';
-import { V as VesantConfig, R as RequestOptions } from './client-BolQlL5e.js';
+import { V as VesantConfig, R as RequestOptions } from './client-6sSaxufk.js';
 import { C as CustomerProfile } from './types-UGyDl1fd.js';
 import { E as EntityType, B as BlockReason, P as PaginationParams } from './types-CBQRNL-l.js';
 

package/dist/compliance/index.d.mts

@@ -1,8 +1,8 @@
 import { B as BlockReason } from '../types-CBQRNL-l.mjs';
-export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-ZNdnpWe7.mjs';
-export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-DMIRx7Tu.mjs';
+export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-CHPEgasE.mjs';
+export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-BqPVh5jH.mjs';
 import '../risk-profile/index.mjs';
-import '../client-BolQlL5e.mjs';
+import '../client-6sSaxufk.mjs';
 import '../types-BOFaMQxI.mjs';
 
 declare const sdkReasons: {

package/dist/compliance/index.d.ts

@@ -1,8 +1,8 @@
 import { B as BlockReason } from '../types-CBQRNL-l.js';
-export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-C3DCmGe9.js';
-export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-DoMSYMMR.js';
+export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from '../client-pKE_gii_.js';
+export { p as CreateLocationRequestRequest, H as LocationCaptureRequest, I as LocationCaptureResponse, a as LocationRequest, K as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, M as LocationRequestResult, N as LocationRequestStatus, O as LocationShareInfo, R as ResendLocationRequestRequest } from '../client-B32yBt1b.js';
 import '../risk-profile/index.js';
-import '../client-BolQlL5e.js';
+import '../client-6sSaxufk.js';
 import '../types-UGyDl1fd.js';
 
 declare const sdkReasons: {

package/dist/compliance/index.js

@@ -411,6 +411,19 @@ var BaseClient = class {
       this.rateLimitTracker = new RateLimitTracker();
     }
   }
+  /**
+   * Resolve the Idempotency-Key for a request. Mutating methods (POST/PUT/PATCH)
+   * get the caller-supplied key or a freshly minted UUID; non-mutating methods get
+   * none. requestWithRetry resolves this once and injects it so every retry reuses
+   * one key (letting the server dedup replays); a direct request() resolves per call.
+   */
+  resolveIdempotencyKey(method, requestOptions) {
+    const isMutating = ["POST", "PUT", "PATCH"].includes((method || "GET").toUpperCase());
+    if (!isMutating) {
+      return void 0;
+    }
+    return requestOptions?.idempotencyKey ?? generateUUID();
+  }
   /**
    * Make an HTTP request with timeout and error handling
    */
@@ -443,8 +456,9 @@ var BaseClient = class {
       headers["X-Sandbox"] = "true";
     }
     const method = (options.method || "GET").toUpperCase();
-    if (["POST", "PUT", "PATCH"].includes(method)) {
-      headers["Idempotency-Key"] = requestOptions?.idempotencyKey || generateUUID();
+    const idempotencyKey = this.resolveIdempotencyKey(method, requestOptions);
+    if (idempotencyKey) {
+      headers["Idempotency-Key"] = idempotencyKey;
     }
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);
@@ -557,9 +571,11 @@ var BaseClient = class {
    */
   async requestWithRetry(endpoint, options = {}, serviceURL, retries = this.config.retries, requestOptions) {
     let lastError;
+    const idempotencyKey = this.resolveIdempotencyKey(options.method || "GET", requestOptions);
+    const attemptOptions = idempotencyKey ? { ...requestOptions, idempotencyKey } : requestOptions;
     for (let attempt = 0; attempt <= retries; attempt++) {
       try {
-        return await this.request(endpoint, options, serviceURL, requestOptions);
+        return await this.request(endpoint, options, serviceURL, attemptOptions);
       } catch (error) {
         lastError = error instanceof Error ? error : new Error("Unknown error");
         if (requestOptions?.signal?.aborted) {
@@ -1714,9 +1730,6 @@ var ComplianceClient = class {
       if (cipherTextResult.risk?.is_blocked) {
         blockReasons.push(...cipherTextResult.risk.block_reasons_structured ?? []);
       }
-      if (cipherTextResult.risk?.location_mismatch) {
-        blockReasons.push(sdkReasons.gpsIPMismatch());
-      }
     }
     if (geoVerification.gps_required && !cipherTextResult) {
       blockReasons.push(sdkReasons.gpsRequired());