vesant-sdk 1.7.1-dev.afc5a32 → 1.7.1-dev.c2ac5a5

package/dist/index.d.ts

@@ -3,13 +3,13 @@ export { A as AuthCredential, B as BaseClient, a as BaseClientConfig, C as CGSCo
 import { a as PaginatedResponse } from './types-CBQRNL-l.js';
 export { A as APIResponse, B as BlockReason, C as CustomerStatus, E as EntityType, b as ErrorResponse, L as LocationCompliance, P as PaginationParams, c as Reason, d as Result, R as RiskLevel, S as SuccessResponse, T as Timestamp, U as UUID, V as VerificationEventType } from './types-CBQRNL-l.js';
 export { B as BaseWebhookEvent, C as ComplianceCheckFailedPayload, D as DecisionRecordedPayload, G as GeolocationBlockedPayload, a as GeolocationVerifiedPayload, I as InMemoryDedupStore, b as InMemoryDedupStoreOptions, K as KycStatusChangedPayload, L as LabelAppliedPayload, c as LocationRequestCompletedPayload, N as NotificationWebhookEvent, P as ProfileCreatedPayload, d as ProfileUpdatedPayload, R as RiskCategoryChangedPayload, e as RiskScoreChangedPayload, T as TaxReminderSentPayload, V as VerifyWebhookSignatureOptions, W as WebhookAnyHandler, f as WebhookDedupStore, g as WebhookEvent, h as WebhookEventHandler, i as WebhookEventType, j as WebhookHandler, k as WebhookHandlerConfig, l as WebhookMiddlewareOptions, m as WebhookNotification, n as createNextWebhookHandler, o as createWebhookMiddleware, v as verifyWebhookSignature } from './index-DSDgS09k.js';
-export { A as APIError, d as AlertFilters, e as AlertListResponse, f as AlertSeverity, g as AlertStatus, h as AlertType, C as CipherTextCustomerData, i as CipherTextOptions, j as CipherTextPayload, k as CipherTextReason, l as CipherTextResult, m as ComplianceCheckResponse, n as CreateGeofenceRuleRequest, o as CreateJurisdictionRequest, p as CreateLocationRequestRequest, q as DashboardMetrics, r as DecryptedCipherText, s as DeviceFingerprint, D as DeviceFingerprintRequest, t as DeviceSignalsEnvelope, u as DeviceTrustResult, v as GeoIPResult, w as GeofenceAction, x as GeofenceEvaluation, y as GeofenceRule, z as GeofenceRuleType, B as GeolocationAlert, G as GeolocationClient, E as GeolocationClientConfig, F as GeolocationConfigResponse, H as GeolocationRecord, J as JurisdictionConfig, I as LocationCaptureRequest, K as LocationCaptureResponse, a as LocationRequest, M as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, N as LocationRequestResult, O as LocationRequestStatus, P as LocationShareInfo, L as LocationVerification, R as ResendLocationRequestRequest, S as SignalsNonce, U as UpdateDeviceTrustRequest, Q as UpdateGeofenceRuleRequest, T as UpdateJurisdictionRequest, W as UseAlertsOptions, X as UseAlertsResult, Y as UseGeolocationOptions, Z as UseGeolocationResult, _ as UseLocationCaptureOptions, $ as UseLocationCaptureResult, a0 as UseLocationRequestsOptions, a1 as UseLocationRequestsResult, a2 as ValidateCipherTextRequest, V as ValidateCipherTextResponse, a3 as VerifyIPRequest } from './client-fy3trF2K.js';
+export { A as APIError, d as AlertFilters, e as AlertListResponse, f as AlertSeverity, g as AlertStatus, h as AlertType, C as CipherTextCustomerData, i as CipherTextOptions, j as CipherTextPayload, k as CipherTextReason, l as CipherTextResult, m as ComplianceCheckResponse, n as CreateGeofenceRuleRequest, o as CreateJurisdictionRequest, p as CreateLocationRequestRequest, q as DashboardMetrics, r as DecryptedCipherText, s as DeviceFingerprint, D as DeviceFingerprintRequest, t as DeviceSignalsEnvelope, u as DeviceTrustResult, v as GeoIPResult, w as GeofenceAction, x as GeofenceEvaluation, y as GeofenceRule, z as GeofenceRuleType, B as GeolocationAlert, G as GeolocationClient, E as GeolocationClientConfig, F as GeolocationConfigResponse, H as GeolocationRecord, J as JurisdictionConfig, I as LocationCaptureRequest, K as LocationCaptureResponse, a as LocationRequest, M as LocationRequestChannel, b as LocationRequestFilters, c as LocationRequestListResponse, N as LocationRequestResult, O as LocationRequestStatus, P as LocationShareInfo, L as LocationVerification, R as ResendLocationRequestRequest, S as SignalsNonce, U as UpdateDeviceTrustRequest, Q as UpdateGeofenceRuleRequest, T as UpdateJurisdictionRequest, W as UseAlertsOptions, X as UseAlertsResult, Y as UseGeolocationOptions, Z as UseGeolocationResult, _ as UseLocationCaptureOptions, $ as UseLocationCaptureResult, a0 as UseLocationRequestsOptions, a1 as UseLocationRequestsResult, a2 as ValidateCipherTextRequest, V as ValidateCipherTextResponse, a3 as VerifyIPRequest } from './client-BaUekQT8.js';
 export { GpsIntegrityInput, GpsIntegrityOptions, GpsIntegrityResult, assessGpsIntegrity, collectDeviceSignals, decodeCipherText, generateCipherText, gpsIntegrityInputFromPosition, isCipherTextExpired, probeGeolocationPermission } from './geolocation/index.js';
 export { RiskProfileClient } from './risk-profile/index.js';
 export { a as CreateCustomerProfileRequest, a as CreateProfileRequest, C as CustomerProfile, P as CustomerProfileFilters, b as CustomerProfileListResponse, E as EmploymentType, L as LegalForm, c as ProfileDetailsResponse, P as ProfileFilters, b as ProfileListResponse, R as RiskCategory, d as RiskConfiguration, e as RiskDashboardMetrics, f as RiskFactor, g as RiskFactorType, h as RiskHistory, S as ScreeningStatus, U as UpdateProfileRequest } from './types-UGyDl1fd.js';
 export { sdkReasons } from './compliance/index.js';
-export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from './client-B3DCAHlg.js';
-export { CheckKycStatusRequest, CheckKycStatusResponse, CreateEventBasedFaceVerificationSessionRequest, CreateEventBasedFaceVerificationSessionResponse, DocumentType, DocumentVerificationRequest, DocumentVerificationResponse, EventBasedFaceVerificationCallback, EventBasedFaceVerificationDeviceType, EventBasedFaceVerificationEvent, EventBasedFaceVerificationFrequencyTrigger, EventBasedFaceVerificationReactionResult, EventBasedFaceVerificationReactions, EventBasedFaceVerificationThresholdTrigger, EventBasedFaceVerificationTriggers, FaceProof, KYC_DECLINED_DESCRIPTIONS, KycAlert, KycAlertFilters, KycAlertListResponse, KycAlertStatus, KycAlertType, KycClient, KycClientConfig, KycCustomerData, KycCustomerProfile, KycDeclinedCode, KycDocumentExpiredCallbackEvent, KycHandoffSession, KycOverview, KycPagination, KycPreferences, KycRequest, KycRequestFilters, KycRequestListResponse, KycRequestReason, KycRequestReasonCode, KycStatus, KycTriggerEvent, Name, Proof, ProofDownloadURL, ProofType, RequestAdditionalDocumentsRequest, RequestKycSubmitLinkRequest, RequestKycSubmitLinkResponse, SubmitEventBasedFaceVerificationSessionRequest, SubmittedDocument, SupportedDocumentType, UpdateKycAlertRequest, UpdateKycPreferencesRequest, UpdateKycStatusRequest, UseKycAlertsOptions, UseKycAlertsResult, UseKycOverviewOptions, UseKycOverviewResult, UseKycPreferencesResult, UseKycRequestsOptions, UseKycRequestsResult, UseKycSubmissionOptions, UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent } from './kyc/index.js';
+export { C as ComplianceClient, a as ComplianceLocationRequestInput, b as ComplianceLocationRequestResult, c as CurrencyRates, D as DEFAULT_CURRENCY_RATES, E as EventVerificationRequest, d as EventVerificationResponse, L as LoginVerificationRequest, e as LoginVerificationResponse, R as RegistrationVerificationRequest, f as RegistrationVerificationResponse, T as TransactionRiskResult, g as TransactionVerificationRequest, h as TransactionVerificationResponse } from './client-DUHC-68_.js';
+export { CheckKycStatusRequest, CheckKycStatusResponse, CreateEventBasedFaceVerificationSessionRequest, CreateEventBasedFaceVerificationSessionResponse, DocumentType, DocumentVerificationRequest, DocumentVerificationResponse, EventBasedFaceVerificationCallback, EventBasedFaceVerificationDeviceType, EventBasedFaceVerificationEvent, EventBasedFaceVerificationFrequencyTrigger, EventBasedFaceVerificationReactionResult, EventBasedFaceVerificationReactions, EventBasedFaceVerificationThresholdTrigger, EventBasedFaceVerificationTriggers, FaceProof, KYC_DECLINED_DESCRIPTIONS, KycAlert, KycAlertFilters, KycAlertListResponse, KycAlertStatus, KycAlertType, KycClient, KycClientConfig, KycCustomerData, KycCustomerProfile, KycDeclinedCode, KycDisclosureConsent, KycDocumentExpiredCallbackEvent, KycHandoffSession, KycOtherReason, KycOverview, KycPagination, KycPreferences, KycRequest, KycRequestFilters, KycRequestListResponse, KycRequestReason, KycRequestReasonCode, KycSkipOptions, KycStatus, KycTriggerEvent, KycVerificationTriggers, Name, Proof, ProofDownloadURL, ProofType, RequestAdditionalDocumentsRequest, RequestKycSubmitLinkRequest, RequestKycSubmitLinkResponse, SubmitEventBasedFaceVerificationSessionRequest, SubmittedDocument, SupportedAddressDocumentType, SupportedDocumentType, UpdateKycAlertRequest, UpdateKycPreferencesRequest, UpdateKycStatusRequest, UseKycAlertsOptions, UseKycAlertsResult, UseKycOverviewOptions, UseKycOverviewResult, UseKycPreferencesResult, UseKycRequestsOptions, UseKycRequestsResult, UseKycSubmissionOptions, UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent } from './kyc/index.js';
 export { CTPFormStatus, CTPTINStatus, ComplianceStats, ComplianceStatsFilters, CustomerTaxProfileDocuments, CustomerTaxProfileRecord, CustomerType, DocumentRequestBreakdown, EmailSendingMethod, EnableWithholdingInput, EnableWithholdingResponse, GlobalTaxRule, ReRequestTaxFormInput, RemindersRunResult, TINCheckResult, TINStatusBreakdown, TaxClient, TaxClientConfig, TaxRuleApprovalStatus, TaxRuleVersion, TaxRules, TransactionAction, TreatyCountry, TreatyCountryListResponse, UpdateTaxRulesInput, WFormCountBreakdown, WFormStatusBreakdown } from './tax/index.js';
 
 /**

package/dist/index.js

@@ -1104,6 +1104,7 @@ function isCipherTextExpired(cipherText) {
 }
 
 // src/geolocation/client.ts
+var DEFAULT_GPS_CONFIG_TTL_MS = 5 * 60 * 1e3;
 var GeolocationClient = class extends BaseClient {
   constructor(config) {
     const baseConfig = {
@@ -1119,6 +1120,8 @@ var GeolocationClient = class extends BaseClient {
       environment: config.environment
     };
     super(baseConfig);
+    this.gpsConfigCache = null;
+    this.gpsConfigTtlMs = config.gpsConfigTtlMs ?? DEFAULT_GPS_CONFIG_TTL_MS;
   }
   // ============================================================================
   // IP Verification & Compliance
@@ -1204,7 +1207,42 @@ var GeolocationClient = class extends BaseClient {
    * ```
    */
   async getGPSConfig(requestOptions) {
-    return this.requestWithRetry("/api/v1/geo/config", void 0, void 0, void 0, requestOptions);
+    const cached = this.gpsConfigCache;
+    if (cached && cached.expiresAt > Date.now()) {
+      return cached.value;
+    }
+    return this.refreshGPSConfig(requestOptions);
+  }
+  /**
+   * Re-read the tenant's GPS requirement configuration, ignoring any copy held
+   * from an earlier read.
+   *
+   * These requirements are edited in the compliance console while your
+   * application is running. `getGPSConfig` reuses a fetched copy for a short
+   * period so a long-lived session does not call the API on every event; call
+   * this when you need a change to take effect immediately — for example right
+   * after an administrator saves new settings.
+   *
+   * @returns The current GPS requirement config per event type
+   *
+   * @example
+   * ```typescript
+   * const config = await client.refreshGPSConfig();
+   * if (config.require_gps.login) {
+   *   // GPS is now required for login
+   * }
+   * ```
+   */
+  async refreshGPSConfig(requestOptions) {
+    const value = await this.requestWithRetry(
+      "/api/v1/geo/config",
+      void 0,
+      void 0,
+      void 0,
+      requestOptions
+    );
+    this.gpsConfigCache = { value, expiresAt: Date.now() + this.gpsConfigTtlMs };
+    return value;
   }
   /**
    * Mint a short-lived, single-use device-signals nonce.
@@ -2923,19 +2961,27 @@ var KycClient = class extends BaseClient {
    *
    * Generates a link that the user can visit to submit their KYC documents.
    *
+   * Pass the `trigger_event` that matches the user action so the tenant's
+   * trigger preferences decide whether verification is required; inspect
+   * `kyc_required` and `reason` on the response before redirecting.
+   *
    * Optionally pass the customer's registered identity data as
    * `customer_data` (same shape as the geolocation `customer_data` block).
    * It seeds the customer's risk profile so document verification can
    * cross-check the submitted document against trusted reference data;
    * fields never overwrite data already on the profile.
    *
-   * @param request - Request containing the user ID, optional redirect URL, optional callback URL (receives POST requests), and optional customer identity data
-   * @returns Response containing the redirect link and KYC ID
+   * The call is made once and is not retried: each request creates a new
+   * KYC record and link, so a retry after a timeout would leave duplicates.
+   *
+   * @param request - Request containing the user ID, trigger event, optional redirect URL, optional callback URL (receives POST requests), and optional customer identity data
+   * @returns Response containing the redirect link, KYC ID, `kyc_required`, `can_skip` and `reason`
    *
    * @example
    * ```typescript
    * const result = await client.requestKycSubmitLink({
    *   user_id: "user_123",
+   *   trigger_event: "onboarding",
    *   redirect_url: "https://merchant.com/kyc-complete", // optional
    *   callback_url: "https://merchant.com/api/kyc-webhook", // optional - receives POST requests on status change
    *   customer_data: { // optional - seeds the risk profile for document cross-checks
@@ -2948,16 +2994,17 @@ var KycClient = class extends BaseClient {
    *   }
    * });
    *
+   * if (!result.kyc_required) return proceed();
    * console.log(`Redirect user to: ${result.link}`);
    * console.log(`KYC ID: ${result.kyc_id}`);
    * ```
    */
   async requestKycSubmitLink(request, requestOptions) {
-    return this.requestWithRetry("/api/v1/kyc/request", {
+    return this.request("/api/v1/kyc/request", {
       method: "POST",
       body: JSON.stringify(request),
       headers: this.getUserHeaders()
-    }, void 0, void 0, requestOptions);
+    }, void 0, requestOptions);
   }
   /**
    * Create a Event-Based Face Verification session.
@@ -2979,9 +3026,9 @@ var KycClient = class extends BaseClient {
   /**
    * Submit a real-time face capture for an active Event-Based Face Verification session.
    *
-   * **Mobile-only.** The server rejects desktop User-Agents with HTTP
-   * 400 (`face capture must be completed on a mobile device`). Use the
-   * QR handoff from `createEventBasedFaceVerificationSession` for desktop callers.
+   * Works from any device: the platform does not inspect the User-Agent.
+   * `FaceCaptureModal` decides between direct capture and the QR handoff
+   * on the client; custom UIs may submit from desktop or mobile alike.
    *
    * The `data` field on the response carries `retries_remaining`,
    * `retry_limit_exceeded`, and the reaction flags (`enforce_logout`,
@@ -3062,25 +3109,30 @@ var KycClient = class extends BaseClient {
    * Check KYC status for a user
    *
    * Returns the current KYC status:
-   * - "complete" → KYC verified, show "Continue to Login"
-   * - "processing" → Under review, show "Continue to Login"
-   * - "failed" / "declined" → Show error + retry option
-   * - "pending" / "in_progress" → Keep polling
+   * - "accepted" / "review.pending" → verified (limited access while under review)
+   * - "pending" → documents submitted, verification running: keep polling
+   * - "awaiting_kyc" → nothing submitted yet; check `link_expired` before
+   *   re-surfacing or re-requesting the link. Never treat as in progress.
+   * - "declined" → show `additional_data.declined_reasons` (fallback
+   *   `declined_reason`) with a retry option
    *
-   * @param request - Request containing user_id and token
-   * @returns Response with kyc_status and message (reason)
+   * @param request - Request containing user_id and kyc_id
+   * @returns Response with status, verification flags and, once terminal, the full record in `additional_data`
    *
    * @example
    * ```typescript
    * const result = await client.checkKycStatus({
    *   user_id: "user_123",
-   *   token: "auth_token_xyz"
+   *   kyc_id: "550e8400-e29b-41d4-a716-446655440000"
    * });
    *
-   * if (result.kyc_status === 'complete') {
-   *   // Show "Continue to Login"
-   * } else if (result.kyc_status === 'failed' || result.kyc_status === 'declined') {
+   * if (result.status === 'accepted' || result.status === 'review.pending') {
+   *   // Grant access
+   * } else if (result.status === 'declined') {
+   *   const reasons = result.additional_data?.declined_reasons;
    *   // Show error + retry option
+   * } else if (result.status === 'awaiting_kyc') {
+   *   // Prompt to verify; request a new link when result.link_expired is true
    * } else {
    *   // Keep polling
    * }
@@ -3102,7 +3154,9 @@ var KycClient = class extends BaseClient {
   /**
    * Submit a document verification request with OCR
    *
-   * Uses requestWithRetry() for automatic retry on transient failures.
+   * The call is made once and is not retried: every submission is processed
+   * and billed, and the platform does not replay this route from an
+   * idempotency key. Retry explicitly if the request fails.
    *
    * @param request - Document verification request with documents and customer info
    * @returns Verification response with status and reference
@@ -3128,11 +3182,11 @@ var KycClient = class extends BaseClient {
    * ```
    */
   async submitVerification(request, requestOptions) {
-    return this.requestWithRetry("/api/v1/kyc/submit", {
+    return this.request("/api/v1/kyc/submit", {
       method: "POST",
       body: JSON.stringify(request),
       headers: this.getUserHeaders()
-    }, void 0, void 0, requestOptions);
+    }, void 0, requestOptions);
   }
   /**
    * Get a KYC request by ID
@@ -3189,14 +3243,14 @@ var KycClient = class extends BaseClient {
    * ```typescript
    * // Accept a KYC request
    * await client.updateKycStatus({
-   *   reference: "shufti_ref_123",
+   *   reference: "kyc-ref-123",
    *   status: "accepted",
    *   reason: "All documents verified successfully"
    * });
    *
    * // Decline a KYC request
    * await client.updateKycStatus({
-   *   reference: "shufti_ref_456",
+   *   reference: "kyc-ref-456",
    *   status: "declined",
    *   reason: "Document expired"
    * });
@@ -3212,6 +3266,10 @@ var KycClient = class extends BaseClient {
   /**
    * Request additional documents from customer
    *
+   * @deprecated The platform does not expose this operation; the call always
+   * fails. Request additional documents from the Vesant console instead.
+   * This method will be removed in a future release.
+   *
    * @param request - Request with KYC ID and document types needed
    *
    * @example
@@ -3384,6 +3442,11 @@ var KycClient = class extends BaseClient {
   /**
    * Update KYC preferences for the tenant
    *
+   * @deprecated KYC preferences are managed in the Vesant console; the
+   * platform exposes no update operation to the SDK, so this call always
+   * fails. Use `getPreferences()` to read them. This method will be removed
+   * in a future release.
+   *
    * @param update - Fields to update
    * @returns Updated preferences
    *