npm - vesant-sdk - Versions diffs - 1.7.2-dev.617dd44 → 1.7.2 - Mend

vesant-sdk 1.7.2-dev.617dd44 → 1.7.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (26) hide show

package/dist/kyc/index.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../src/core/auth.ts","../../src/core/errors.ts","../../src/core/circuit-breaker.ts","../../src/core/rate-limiter.ts","../../src/core/logger.ts","../../src/core/version.ts","../../src/shared/browser-utils.ts","../../src/core/client.ts","../../src/kyc/client.ts","../../src/kyc/types.ts"],"names":[],"mappings":";AAmCO,IAAM,uBAAN,MAAoD;AAAA,EACzD,YAA6B,MAAA,EAAgB;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAAiB;AAAA,EAE9C,MAAM,aAAA,GAAgD;AACpD,IAAA,OAAO,IAAA,CAAK,SAAS,EAAE,MAAA,EAAQ,UAAU,KAAA,EAAO,IAAA,CAAK,QAAO,GAAI,IAAA;AAAA,EAClE;AAAA,EAEA,UAAA,GAAsB;AACpB,IAAA,OAAO,KAAA;AAAA,EACT;AACF,CAAA;;;ACtCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EAGrC,WAAA,CACE,OAAA,EACO,IAAA,EACA,UAAA,EACA,OAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAJN,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;AAOO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,WAAA,CAAY;AAAA,EAC5C,WAAA,CAAY,SAAwB,aAAA,EAAyB;AAC3D,IAAA,KAAA,CAAM,SAAS,eAAe,CAAA;AADI,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AAElC,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF,CAAA;AAEO,IAAM,eAAA,GAAN,MAAM,gBAAA,SAAwB,WAAA,CAAY;AAAA,EAC/C,WAAA,CAAY,SAAiB,MAAA,EAAmB;AAC9C,IAAA,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,GAAA,EAAK,EAAE,QAAQ,CAAA;AAClD,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,gBAAA,CAAgB,SAAS,CAAA;AAAA,EACvD;AACF,CAAA;AAEO,IAAM,uBAAA,GAAN,MAAM,wBAAA,SAAgC,WAAA,CAAY;AAAA,EACvD,WAAA,CAAY,UAAkB,qBAAA,EAAuB;AACnD,IAAA,KAAA,CAAM,OAAA,EAAS,uBAAuB,GAAG,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,wBAAA,CAAwB,SAAS,CAAA;AAAA,EAC/D;AACF,CAAA;AAUO,IAAM,mBAAA,GAAN,MAAM,oBAAA,SAA4B,WAAA,CAAY;AAAA,EACnD,WAAA,CAAY,UAAkB,uBAAA,EAAyB;AACrD,IAAA,KAAA,CAAM,OAAA,EAAS,wBAAwB,GAAG,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,oBAAA,CAAoB,SAAS,CAAA;AAAA,EAC3D;AACF,CAAA;AAEO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuB,WAAA,CAAY;AAAA,EAC9C,YAAmB,UAAA,EAAqB;AACtC,IAAA,KAAA,CAAM,qBAAA,EAAuB,qBAAA,EAAuB,GAAA,EAAK,EAAE,YAAY,CAAA;AADtD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAEjB,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,eAAA,CAAe,SAAS,CAAA;AAAA,EACtD;AACF,CAAA;AAEO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,WAAA,CAAY;AAAA,EAC5C,YAAmB,OAAA,EAAiB;AAClC,IAAA,KAAA,CAAM,yBAAyB,OAAO,CAAA,EAAA,CAAA,EAAM,WAAW,GAAA,EAAK,EAAE,SAAS,CAAA;AADtD,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAEjB,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF,CAAA;AAcO,IAAM,uBAAA,GAAN,MAAM,wBAAA,SAAgC,WAAA,CAAY;AAAA,EACvD,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,iEAAA,EAA8D,wBAAwB,GAAG,CAAA;AAC/F,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,wBAAA,CAAwB,SAAS,CAAA;AAAA,EAC/D;AACF,CAAA;;;AC5EO,IAAM,iBAAN,MAAqB;AAAA,EAU1B,WAAA,CAAY,MAAA,GAA+B,EAAC,EAAG;AAT/C,IAAA,IAAA,CAAQ,KAAA,GAA6B,QAAA;AACrC,IAAA,IAAA,CAAQ,QAAA,GAAW,CAAA;AACnB,IAAA,IAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,IAAA,CAAQ,eAAA,GAAiC,IAAA;AAOvC,IAAA,IAAA,CAAK,gBAAA,GAAmB,OAAO,gBAAA,IAAoB,CAAA;AACnD,IAAA,IAAA,CAAK,YAAA,GAAe,OAAO,YAAA,IAAgB,GAAA;AAC3C,IAAA,IAAA,CAAK,gBAAA,GAAmB,OAAO,gBAAA,IAAoB,CAAA;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAsB;AACpB,IAAA,IAAI,IAAA,CAAK,UAAU,QAAA,EAAU;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,IAAI,IAAA,CAAK,UAAU,MAAA,EAAQ;AACzB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,IAAI,KAAK,eAAA,IAAmB,GAAA,GAAM,IAAA,CAAK,eAAA,IAAmB,KAAK,YAAA,EAAc;AAC3E,QAAA,IAAA,CAAK,KAAA,GAAQ,WAAA;AACb,QAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkB;AAChB,IAAA,IAAI,IAAA,CAAK,UAAU,WAAA,EAAa;AAC9B,MAAA,IAAA,CAAK,SAAA,EAAA;AACL,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,gBAAA,EAAkB;AAC3C,QAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AACb,QAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,QAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,QAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AAAA,MACzB;AAAA,IACF,CAAA,MAAA,IAAW,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU;AAClC,MAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAAA,IAClB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkB;AAChB,IAAA,IAAA,CAAK,QAAA,EAAA;AACL,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAK,GAAA,EAAI;AAEhC,IAAA,IAAI,IAAA,CAAK,UAAU,WAAA,EAAa;AAC9B,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AACb,MAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AAAA,IACnB,WAAW,IAAA,CAAK,KAAA,KAAU,YAAY,IAAA,CAAK,QAAA,IAAY,KAAK,gBAAA,EAAkB;AAC5E,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AAAA,IACf;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkC;AAChC,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,iBAAiB,IAAA,CAAK,eAAA;AAAA,MACtB,aAAA,EACE,KAAK,KAAA,KAAU,MAAA,IAAU,KAAK,eAAA,GAC1B,IAAA,CAAK,eAAA,GAAkB,IAAA,CAAK,YAAA,GAC5B;AAAA,KACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AACb,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AAAA,EACzB;AACF,CAAA;;;ACtGO,IAAM,mBAAN,MAAuB;AAAA,EAAvB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAAuB,IAAA;AAC/B,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,KAAA,GAAuB,IAAA;AAC/B,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,kBAAkB,OAAA,EAAwB;AACxC,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,CAAA;AAC7C,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACrD,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,CAAA;AAC7C,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAE5C,IAAA,IAAI,UAAU,IAAA,EAAM,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,OAAO,EAAE,CAAA;AACnD,IAAA,IAAI,cAAc,IAAA,EAAM,IAAA,CAAK,SAAA,GAAY,QAAA,CAAS,WAAW,EAAE,CAAA;AAC/D,IAAA,IAAI,UAAU,IAAA,EAAM,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,OAAO,EAAE,CAAA;AACnD,IAAA,IAAI,eAAe,IAAA,EAAM,IAAA,CAAK,UAAA,GAAa,QAAA,CAAS,YAAY,EAAE,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,GAA2B;AACzB,IAAA,IAAI,IAAA,CAAK,SAAA,KAAc,IAAA,IAAQ,IAAA,CAAK,aAAa,CAAA,EAAG;AAElD,MAAA,IAAI,IAAA,CAAK,UAAU,IAAA,EAAM;AACvB,QAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,QAAA,IAAI,GAAA,IAAO,KAAK,KAAA,EAAO;AAErB,UAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,UAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,UAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAA6B;AAC3B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,YAAY,IAAA,CAAK;AAAA,KACnB;AAAA,EACF;AACF,CAAA;;;ACrEO,SAAS,mBAAA,GAA8B;AAC5C,EAAA,OAAO;AAAA,IACL,KAAA,CAAM,SAAiB,IAAA,EAAgC;AACrD,MAAA,OAAA,CAAQ,IAAI,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACvE,CAAA;AAAA,IACA,IAAA,CAAK,SAAiB,IAAA,EAAgC;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACxE,CAAA;AAAA,IACA,IAAA,CAAK,SAAiB,IAAA,EAAgC;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACxE,CAAA;AAAA,IACA,KAAA,CAAM,SAAiB,IAAA,EAAgC;AACrD,MAAA,OAAA,CAAQ,MAAM,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACzE;AAAA,GACF;AACF;;;ACdO,IAAM,WAAA,GAAc,OAAA;;;ACOpB,SAAS,YAAA,GAAuB;AACrC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACtD,IAAA,OAAO,OAAO,UAAA,EAAW;AAAA,EAC3B;AAGA,EAAA,OAAO,sCAAA,CAAuC,OAAA,CAAQ,OAAA,EAAS,CAAC,CAAA,KAAM;AACpE,IAAA,MAAM,CAAA,GAAK,IAAA,CAAK,MAAA,EAAO,GAAI,EAAA,GAAM,CAAA;AACjC,IAAA,MAAM,CAAA,GAAI,CAAA,KAAM,GAAA,GAAM,CAAA,GAAK,IAAI,CAAA,GAAO,CAAA;AACtC,IAAA,OAAO,CAAA,CAAE,SAAS,EAAE,CAAA;AAAA,EACtB,CAAC,CAAA;AACH;;;ACQO,IAAe,aAAf,MAA0B;AAAA,EAQ/B,YAAY,MAAA,EAA0B;AAJtC,IAAA,IAAA,CAAQ,cAAA,GAAwC,IAAA;AAChD,IAAA,IAAA,CAAQ,gBAAA,GAA4C,IAAA;AAIlD,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,IAAA,EAAK,EAAG;AAC3B,MAAA,MAAM,IAAI,eAAA,CAAgB,oDAAA,EAAsD,CAAC,SAAS,CAAC,CAAA;AAAA,IAC7F;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,IAAA,EAAK,EAAG;AAC5B,MAAA,MAAM,IAAI,eAAA,CAAgB,qDAAA,EAAuD,CAAC,UAAU,CAAC,CAAA;AAAA,IAC/F;AAIA,IAAA,IAAI,OAAO,UAAU,WAAA,EAAa;AAChC,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,mGAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,YAAA,GAAe,MAAA,CAAO,YAAA,IAAgB,EAAC;AAC5C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA,CAAO,MAAA,IAAU,mBAAA,EAAoB;AAGnD,IAAA,IAAI,cAAc,MAAA,CAAO,WAAA;AACzB,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,EAAA;AAChC,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA,EAAG;AACjC,MAAA,IAAI,gBAAgB,YAAA,EAAc;AAChC,QAAA,IAAA,CAAK,MAAA,CAAO,KAAK,gGAA2F,CAAA;AAAA,MAC9G;AACA,MAAA,WAAA,GAAc,SAAA;AAAA,IAChB,WAAW,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA,IAAK,gBAAgB,SAAA,EAAW;AACrE,MAAA,IAAA,CAAK,MAAA,CAAO,KAAK,2IAAsI,CAAA;AAAA,IACzJ;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,MAAA;AAAA,MACA,WAAA;AAAA,MACA,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,EAAC;AAAA,MAC5B,OAAA,EAAS,OAAO,OAAA,IAAW,GAAA;AAAA,MAC3B,OAAA,EAAS,OAAO,OAAA,IAAW,CAAA;AAAA,MAC3B,KAAA,EAAO,OAAO,KAAA,IAAS,KAAA;AAAA,MACvB,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,QAAQ,IAAA,CAAK;AAAA,KACf;AAIA,IAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA,KAAiB,SAAS,IAAI,oBAAA,CAAqB,MAAM,CAAA,GAAI,MAAA,CAAA;AAExF,IAAA,IAAI,OAAO,cAAA,EAAgB;AACzB,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAI,cAAA,CAAe,MAAA,CAAO,cAAc,CAAA;AAAA,IAChE;AACA,IAAA,IAAI,OAAO,uBAAA,EAAyB;AAClC,MAAA,IAAA,CAAK,gBAAA,GAAmB,IAAI,gBAAA,EAAiB;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,qBAAA,CAAsB,QAAgB,cAAA,EAAqD;AACjG,IAAA,MAAM,UAAA,GAAa,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,EAAE,QAAA,CAAA,CAAU,MAAA,IAAU,KAAA,EAAO,WAAA,EAAa,CAAA;AACpF,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,cAAA,EAAgB,kBAAkB,YAAA,EAAa;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,QAAA,EACA,UAAuB,EAAC,EACxB,YACA,cAAA,EACY;AACZ,IAAA,MAAM,YAAY,YAAA,EAAa;AAG/B,IAAA,IAAI,KAAK,cAAA,IAAkB,CAAC,IAAA,CAAK,cAAA,CAAe,YAAW,EAAG;AAC5D,MAAA,MAAM,KAAA,GAAQ,IAAI,uBAAA,EAAwB;AAC1C,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAClB,MAAA,MAAM,KAAA;AAAA,IACR;AAGA,IAAA,IAAI,IAAA,CAAK,gBAAA,IAAoB,IAAA,CAAK,gBAAA,CAAiB,iBAAgB,EAAG;AACpE,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,gBAAA,CAAiB,SAAA,EAAU;AAC/C,MAAA,MAAM,KAAA,GAAQ,IAAI,cAAA,CAAe,MAAA,CAAO,cAAc,MAAS,CAAA;AAC/D,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAClB,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,MAAM,MAAM,CAAA,EAAG,UAAA,IAAc,KAAK,MAAA,CAAO,OAAO,GAAG,QAAQ,CAAA,CAAA;AAE3D,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,KAAK,MAAA,CAAO,QAAA;AAAA,MAC3B,eAAA,EAAiB,iBAAiB,WAAW,CAAA,CAAA;AAAA,MAC7C,cAAA,EAAgB,SAAA;AAAA,MAChB,GAAG,KAAK,MAAA,CAAO,OAAA;AAAA,MACf,GAAK,OAAA,CAAQ,OAAA,IAAsC;AAAC,KACtD;AAIA,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,YAAA,EAAc,aAAA,CAAc;AAAA,MACxD,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB;AAAA,KACD,CAAA;AACD,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,OAAA,CAAQ,eAAe,IAAI,CAAA,EAAG,UAAA,CAAW,UAAU,QAAQ,CAAA,CAAA,EAAI,WAAW,KAAK,CAAA,CAAA;AAAA,IACjF;AAGA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,WAAA,KAAgB,SAAA,EAAW;AACzC,MAAA,OAAA,CAAQ,WAAW,CAAA,GAAI,MAAA;AAAA,IACzB;AAKA,IAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AACrD,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,qBAAA,CAAsB,MAAA,EAAQ,cAAc,CAAA;AACxE,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,cAAA;AAAA,IAC/B;AAEA,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,SAAA,GAAY,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,CAAK,OAAO,OAAO,CAAA;AAG1E,IAAA,IAAI,gBAAgB,MAAA,EAAQ;AAC1B,MAAA,IAAI,cAAA,CAAe,OAAO,OAAA,EAAS;AACjC,QAAA,UAAA,CAAW,KAAA,EAAM;AAAA,MACnB,CAAA,MAAO;AACL,QAAA,cAAA,CAAe,MAAA,CAAO,gBAAA,CAAiB,OAAA,EAAS,MAAM,UAAA,CAAW,OAAM,EAAG,EAAE,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,MAC1F;AAAA,IACF;AAEA,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,GAA4B,EAAE,GAAG,OAAA,EAAS,OAAA,EAAQ;AACtD,MAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,QAAA,IAAI,YAAY,SAAA,EAAW;AACzB,UAAA,YAAA,GAAe,MAAM,WAAA,CAAY,SAAA,CAAU,GAAA,EAAK,YAAY,CAAA;AAAA,QAC9D;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,EAAG,YAAA,CAAa,UAAU,KAAK,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE,CAAA;AAAA,MACjE;AAEA,MAAA,IAAI,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC9B,GAAG,YAAA;AAAA,QACH,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAKD,MAAA,IAAI,SAAS,MAAA,KAAW,GAAA,IAAO,IAAA,CAAK,YAAA,EAAc,cAAa,EAAG;AAChE,QAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc;AAAA,UACtD,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,UACtB,SAAA;AAAA,UACA,YAAA,EAAc;AAAA,SACf,CAAA;AACD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,IAAA,CAAK,MAAA,CAAO,mBAAA,GAAsB,EAAE,MAAA,EAAQ,gBAAgB,CAAA;AAC5D,UAAA,YAAA,GAAe;AAAA,YACb,GAAG,YAAA;AAAA,YACH,OAAA,EAAS;AAAA,cACP,GAAI,YAAA,CAAa,OAAA;AAAA,cACjB,eAAe,CAAA,EAAG,SAAA,CAAU,UAAU,QAAQ,CAAA,CAAA,EAAI,UAAU,KAAK,CAAA;AAAA;AACnE,WACF;AACA,UAAA,QAAA,GAAW,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,YAAA,EAAc,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,QAC5E;AAAA,MACF;AAEA,MAAA,YAAA,CAAa,SAAS,CAAA;AAGtB,MAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,QAAA,IAAA,CAAK,gBAAA,CAAiB,iBAAA,CAAkB,QAAA,CAAS,OAAO,CAAA;AAAA,MAC1D;AAGA,MAAA,IAAI,cAAA,EAAgB,iBAAiB,aAAA,EAAe;AAClD,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,IAAI,UAAmC,EAAC;AACxC,UAAA,IAAI;AAAE,YAAA,OAAA,GAAU,MAAM,SAAS,IAAA,EAAK;AAAA,UAAG,CAAA,CAAA,MAAQ;AAAA,UAAe;AAC9D,UAAA,IAAA,CAAK,mBAAA,CAAoB,QAAA,CAAS,MAAA,EAAQ,OAAA,EAAS,SAAS,CAAA;AAAA,QAC9D;AACA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,QAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,WAAA,EAAY;AAC1C,QAAA,OAAO,MAAA;AAAA,MACT;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,MAC7B,CAAA,CAAA,MAAQ;AAEN,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,IAAA,CAAK,mBAAA,CAAoB,SAAS,MAAA,EAAQ;AAAA,YACxC,KAAA,EAAO,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,YAC9B,SAAS,QAAA,CAAS;AAAA,aACjB,SAAS,CAAA;AAAA,QACd;AAEA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,QAAA,OAAO,KAAA,CAAA;AAAA,MACT;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAA,CAAK,oBAAoB,QAAA,CAAS,MAAA,EAAQ,IAAA,IAAQ,IAAI,SAAS,CAAA;AAAA,MACjE;AAGA,MAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAG/B,MAAA,IAAI,MAAA,GAAkB,IAAA;AACtB,MAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,QAAA,IAAI,YAAY,UAAA,EAAY;AAC1B,UAAA,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,GAAA,EAAK,MAAM,CAAA;AAAA,QACnD;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,UAAA,EAAa,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,MAClD;AAEA,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,YAAA,CAAa,SAAS,CAAA;AAGtB,MAAA,IACE,iBAAiB,WAAA,IACjB,KAAA,CAAM,UAAA,IACN,KAAA,CAAM,cAAc,GAAA,EACpB;AACA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAAA,MACjC,CAAA,MAAA,IAAW,KAAA,YAAiB,YAAA,IAAgB,KAAA,YAAiB,YAAA,EAAc;AACzE,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAAA,MACjC;AAGA,MAAA,IAAI,KAAA,YAAiB,WAAA,IAAe,CAAC,KAAA,CAAM,SAAA,EAAW;AACpD,QAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAAA,MACpB;AAGA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,UAAA,IAAI,YAAY,OAAA,EAAS;AACvB,YAAA,MAAM,WAAA,CAAY,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAE/B,UAAA,IAAI,cAAA,EAAgB,QAAQ,OAAA,EAAS;AACnC,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,iBAAA,EAAmB,iBAAiB,CAAA;AACvE,YAAA,UAAA,CAAW,SAAA,GAAY,SAAA;AACvB,YAAA,MAAM,UAAA;AAAA,UACR;AACA,UAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,UAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,IAAA,CAAK,OAAO,OAAO,CAAA;AACzD,UAAA,YAAA,CAAa,SAAA,GAAY,SAAA;AACzB,UAAA,MAAM,YAAA;AAAA,QACR;AACA,QAAA,IAAI,iBAAiB,WAAA,EAAa;AAChC,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAEA,MAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,wBAAA,EAA0B,KAAK,CAAA;AACrE,MAAA,YAAA,CAAa,SAAA,GAAY,SAAA;AACzB,MAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,MAAA,MAAM,YAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,gBAAA,CACd,QAAA,EACA,OAAA,GAAuB,EAAC,EACxB,UAAA,EACA,OAAA,GAAkB,IAAA,CAAK,MAAA,CAAO,OAAA,EAC9B,cAAA,EACY;AACZ,IAAA,IAAI,SAAA;AAIJ,IAAA,MAAM,iBAAiB,IAAA,CAAK,qBAAA,CAAsB,OAAA,CAAQ,MAAA,IAAU,OAAO,cAAc,CAAA;AACzF,IAAA,MAAM,iBAA6C,cAAA,GAC/C,EAAE,GAAG,cAAA,EAAgB,gBAAe,GACpC,cAAA;AAEJ,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,OAAA,EAAS,OAAA,EAAA,EAAW;AACnD,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,OAAA,EAAS,YAAY,cAAc,CAAA;AAAA,MAC5E,SAAS,KAAA,EAAO;AACd,QAAA,SAAA,GAAY,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,MAAM,eAAe,CAAA;AAGtE,QAAA,IAAI,cAAA,EAAgB,QAAQ,OAAA,EAAS;AACnC,UAAA,MAAM,SAAA;AAAA,QACR;AAGA,QAAA,IACE,SAAA,YAAqB,WAAA,IACrB,SAAA,CAAU,UAAA,IACV,SAAA,CAAU,UAAA,IAAc,GAAA,IACxB,SAAA,CAAU,UAAA,GAAa,GAAA,IACvB,SAAA,CAAU,UAAA,KAAe,GAAA,EACzB;AACA,UAAA,MAAM,SAAA;AAAA,QACR;AAGA,QAAA,IAAI,YAAY,OAAA,EAAS;AACvB,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI,SAAA,YAAqB,cAAA,IAAkB,SAAA,CAAU,UAAA,EAAY;AAC/D,UAAA,KAAA,GAAQ,UAAU,UAAA,GAAa,GAAA;AAAA,QACjC,CAAA,MAAO;AACL,UAAA,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,GAAA,GAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAO,CAAA,GAAI,IAAA,CAAK,MAAA,EAAO,GAAI,GAAA,EAAM,GAAK,CAAA;AAAA,QAC5E;AACA,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,KAAK,CAAC,CAAA;AAEzD,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,cAAA,EAAiB,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,OAAO,CAAA,OAAA,EAAU,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAC,CAAA,EAAA,CAAI,CAAA;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,IAAA,MAAM,IAAI,YAAA,CAAa,CAAA,qBAAA,EAAwB,OAAO,YAAY,SAAS,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA,EAKU,mBAAA,CAAoB,MAAA,EAAgB,IAAA,EAA+B,SAAA,EAA2B;AACtG,IAAA,MAAM,UAAW,IAAA,CAAK,KAAA,IAAqB,IAAA,CAAK,OAAA,IAAsB,QAAQ,MAAM,CAAA,CAAA;AAEpF,IAAA,MAAM,cAAc,MAAmB;AACrC,MAAA,QAAQ,MAAA;AAAQ,QACd,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,aAAA,EAAe,GAAG,CAAA;AAAA,QACpD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,oBAAoB,OAAO,CAAA;AAAA,QACxC,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,WAAA,EAAa,GAAG,CAAA;AAAA,QAClD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,WAAA,EAAa,GAAG,CAAA;AAAA,QAClD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,mBAAA,EAAqB,GAAG,CAAA;AAAA,QAC1D,KAAK,GAAA,EAAK;AACR,UAAA,MAAM,UAAA,GAAc,IAAA,CAAK,WAAA,IAAuC,IAAA,CAAK,UAAA;AACrE,UAAA,OAAO,IAAI,eAAe,UAAU,CAAA;AAAA,QACtC;AAAA,QACA,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,wBAAwB,OAAO,CAAA;AAAA,QAC5C;AACE,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,eAAA,EAAiB,MAAM,CAAA;AAAA;AAC3D,IACF,CAAA;AAEA,IAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAAA,IACpB;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAiB,MAAA,EAAyC;AAClE,IAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,EAAgB;AAElC,IAAA,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAC/C,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AACzC,QAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,UAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,KAAS,KAAA,CAAM,OAAO,GAAA,EAAK,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,KAAA,CAAM,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,QACjC;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,IAAA,OAAO,WAAA,GAAc,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,GAAK,EAAA;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,MAAA,EAAyC;AACpD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,IAAA,CAAK,MAAA;AAAA,MACR,GAAG,MAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,KAAK,MAAA,CAAO,OAAA;AAAA,QACf,GAAI,MAAA,CAAO,OAAA,IAAW;AAAC;AACzB,KACF;AACA,IAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,MAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AAAA,IACvB;AACA,IAAA,IAAI,OAAO,YAAA,EAAc;AACvB,MAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA;AAAA,IAC7B;AAGA,IAAA,IAAI,MAAA,CAAO,YAAA,KAAiB,MAAA,IAAa,MAAA,CAAO,WAAW,MAAA,EAAW;AACpE,MAAA,IAAA,CAAK,YAAA,GACH,IAAA,CAAK,MAAA,CAAO,YAAA,KACX,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,IAAI,oBAAA,CAAqB,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,GAAI,MAAA,CAAA;AAAA,IACzE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAwC;AACtC,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,MAAA,EAAO;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAA,GAA6C;AAC3C,IAAA,OAAO,IAAA,CAAK,gBAAA,EAAkB,SAAA,EAAU,IAAK,IAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAA,GAAuD;AACrD,IAAA,OAAO,IAAA,CAAK,cAAA,EAAgB,SAAA,EAAU,IAAK,IAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAA,GAA8D;AAClE,IAAA,OAAO,IAAA,CAAK,QAAQ,gBAAgB,CAAA;AAAA,EACtC;AACF,CAAA;;;AC7cA,SAAS,cAAA,CACP,MAAA,EACA,GAAA,EACA,KAAA,EACM;AACN,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,MAAA,CAAO,GAAG,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACzD;AACF;AAGA,SAAS,eAAA,CACP,MAAA,EACA,MAAA,EACA,IAAA,EACM;AACN,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,MAAA,CAAO,GAAG,CAAA,KAAM,MAAA,EAAW;AAC7B,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,MAAA,CAAO,GAAG,CAAA;AAAA,IAC1B;AAAA,EACF;AACF;AAYO,IAAM,SAAA,GAAN,cAAwB,UAAA,CAAW;AAAA,EAIxC,YAAY,MAAA,EAAyB;AAEnC,IAAA,MAAM,UAAA,GAA+B;AAAA,MACnC,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAA,EAAS,CAAA;AAAA;AAAA,MACT,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO;AAAA,KACtB;AACA,IAAA,KAAA,CAAM,UAAU,CAAA;AAChB,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACrB,IAAA,IAAA,CAAK,qBAAqB,MAAA,CAAO,kBAAA;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,MAAA,EAAsB;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAA,GAAyC;AAC/C,IAAA,MAAM,UAAkC,EAAC;AACzC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,WAAW,IAAI,IAAA,CAAK,MAAA;AAAA,IAC9B;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwCA,MAAM,oBAAA,CACJ,OAAA,EACA,cAAA,EACuC;AACvC,IAAA,OAAO,IAAA,CAAK,iBAA+C,qBAAA,EAAuB;AAAA,MAChF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,MAAA,EAAW,MAAA,EAAW,cAAc,CAAA;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,wCAAwC,OAAA,EAAmH;AAK/J,IAAA,OAAO,IAAA,CAAK,QAAyD,0BAAA,EAA4B;AAAA,MAC/F,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,uCAAA,CAAwC,OAAA,EAAyD,cAAA,EAA8E;AAQnL,IAAA,OAAO,IAAA,CAAK,QAA4C,yBAAA,EAA2B;AAAA,MACjF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,QAAW,cAAc,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,2CAA2C,KAAA,EAA4D;AAC3G,IAAA,OAAO,KAAK,gBAAA,CAAqD,CAAA,wBAAA,EAA2B,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA,EAAI;AAAA,MACvH,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,kBAAkB,KAAA,EAA2C;AACjE,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,sBAAsB,IAAA,CAAK,gBAAA,CAAiB,EAAE,KAAA,EAAO,CAAC,CAAA,CAAA;AAAA,MACtD,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,CAAqB,KAAA,EAAe,YAAA,GAAe,KAAA,EAA+C;AACtG,IAAA,OAAO,IAAA,CAAK,QAAuC,6BAAA,EAA+B;AAAA,MAChF,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,aAAA,EAAe,cAAc,CAAA;AAAA,MAC3D,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA6BA,MAAM,eACJ,OAAA,EACiC;AACjC,IAAA,MAAM,MAAA,GAAS;AAAA,MACb,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,QAAQ,OAAA,CAAQ;AAAA,KAClB;AAEA,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,MACV,CAAA,0BAAA,EAA6B,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA,CAAA;AAAA,MAC1D;AAAA,QACE,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,KAAK,cAAA;AAAe;AAC/B,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BA,MAAM,kBAAA,CACJ,OAAA,EACA,cAAA,EACuC;AACvC,IAAA,OAAO,IAAA,CAAK,iBAA+C,oBAAA,EAAsB;AAAA,MAC/E,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,MAAA,EAAW,MAAA,EAAW,cAAc,CAAA;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,cAAc,EAAA,EAAiC;AACnD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAoB,CAAA,qBAAA,EAAwB,EAAE,CAAA,CAAE,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,eAAA,CACJ,OAAA,EACA,UAAA,EACiC;AACjC,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,eAAA,CAAgB,MAAA,EAAQ,SAA+C,CAAC,QAAA,EAAU,YAAY,QAAA,EAAU,QAAA,EAAU,OAAO,CAAC,CAAA;AAAA,IAC5H;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,IAAI,UAAA,CAAW,IAAA,EAAM,MAAA,CAAO,IAAA,GAAO,UAAA,CAAW,IAAA;AAC9C,MAAA,IAAI,UAAA,CAAW,SAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,UAAA,CAAW,SAAA;AAAA,IACtD;AAEA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,oBAAA,EAAuB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA,CAAA;AAAA,MACpD,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,MAAM,gBAAgB,OAAA,EAAgD;AACpE,IAAA,MAAM,IAAA,CAAK,QAAQ,oBAAA,EAAsB;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,2BACJ,OAAA,EACe;AACf,IAAA,MAAM,IAAA,CAAK,QAAQ,sBAAA,EAAwB;AAAA,MACzC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,qBAAqB,KAAA,EAA4C;AACrE,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,sBAAsB,KAAK,CAAA,CAAA;AAAA,MAC3B,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBA,MAAM,WAAA,CAAY,QAAA,EAAmB,MAAA,EAAuC;AAC1E,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,IAAI,QAAA,SAAiB,QAAA,GAAW,QAAA;AAChC,IAAA,IAAI,MAAA,SAAe,MAAA,GAAS,MAAA;AAE5B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,oBAAA,EAAuB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,SAAS,OAAA,EAAoC;AACjD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAkB,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAE,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,UAAA,CACJ,OAAA,EACA,UAAA,EAC+B;AAC/B,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AAEX,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,cAAA,CAAe,MAAA,EAAQ,YAAA,EAAc,OAAA,CAAQ,UAAU,CAAA;AACvD,MAAA,cAAA,CAAe,MAAA,EAAQ,cAAA,EAAgB,OAAA,CAAQ,YAAY,CAAA;AAC3D,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,cAAA,CAAe,MAAA,EAAQ,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AAE3C,MAAA,eAAA,CAAgB,MAAA,EAAQ,SAA+C,CAAC,QAAA,EAAU,YAAY,QAAA,EAAU,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,IAC7H;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,IAAI,UAAA,CAAW,IAAA,EAAM,MAAA,CAAO,IAAA,GAAO,UAAA,CAAW,IAAA;AAC9C,MAAA,IAAI,UAAA,CAAW,SAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,UAAA,CAAW,SAAA;AAAA,IACtD;AAEA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,kBAAA,EAAqB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACpD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BA,MAAM,WAAA,CAAY,OAAA,EAAiB,MAAA,EAA8C;AAC/E,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAA,EAAI;AAAA,MAClD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAAA,MAC3B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,cAAA,GAA0C;AAC9C,IAAA,OAAO,IAAA,CAAK,QAAwB,yBAAyB,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,kBACJ,MAAA,EACyB;AACzB,IAAA,OAAO,IAAA,CAAK,QAAwB,yBAAA,EAA2B;AAAA,MAC7D,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA,KAC5B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAc,kBAAA,CACZ,IAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,gGAAA;AAAA,QACA,CAAC,oBAAoB;AAAA,OACvB;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,QAAW,IAAA,EAAM;AAAA,MAC3B,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,KAAK,cAAA,EAAe;AAAA,QACvB,GAAI,OAAA,CAAQ;AAAA;AACd,KACF,EAAG,KAAK,kBAAkB,CAAA;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAM,oBAAA,CACJ,OAAA,EACA,UAAA,EACsC;AACtC,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AAEX,MAAA,IAAI,QAAQ,aAAA,EAAe;AACzB,QAAA,MAAA,CAAO,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,aAAa,IACtD,OAAA,CAAQ,aAAA,GACR,CAAC,OAAA,CAAQ,aAAa,CAAA;AAAA,MAC5B;AACA,MAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,QAAA,MAAA,CAAO,WAAA,GAAc,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,IAClD,OAAA,CAAQ,WAAA,GACR,CAAC,OAAA,CAAQ,WAAW,CAAA;AAAA,MAC1B;AACA,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,MAAA,CAAO,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,IACxC,OAAA,CAAQ,MAAA,GACR,CAAC,OAAA,CAAQ,MAAM,CAAA;AAAA,MACrB;AAEA,MAAA,eAAA,CAAgB,QAAQ,OAAA,EAA+C;AAAA,QACrE,QAAA;AAAA,QAAU,QAAA;AAAA,QAAU,eAAA;AAAA,QAAiB,cAAA;AAAA,QAAgB,SAAA;AAAA,QAAW;AAAA,OACjE,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,eAAA,CAAgB,MAAA,EAAQ,UAAA,EAAY,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,IACzD;AAEA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACV,CAAA,+BAAA,EAAkC,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACjE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,mBAAmB,SAAA,EAA6C;AACpE,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACV,mCAAmC,SAAS,CAAA;AAAA,KAC9C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BA,MAAM,sBACJ,OAAA,EAC0B;AAC1B,IAAA,OAAO,IAAA,CAAK,mBAAoC,kBAAA,EAAoB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,KAC7B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAKF;;;AClwBO,IAAM,yBAAA,GAA6D;AAAA,EACxE,oBAAA,EAAsB,oCAAA;AAAA,EACtB,oBAAA,EAAsB,8CAAA;AAAA,EACtB,iBAAA,EAAmB,uDAAA;AAAA,EACnB,mBAAA,EAAqB,yBAAA;AAAA,EACrB,sBAAA,EAAwB,+DAAA;AAAA,EACxB,oBAAA,EAAsB,6BAAA;AAAA,EACtB,iBAAA,EAAmB,qDAAA;AAAA,EACnB,qBAAA,EAAuB,iEAAA;AAAA,EACvB,YAAA,EAAc;AAChB","file":"index.mjs","sourcesContent":["/*\n Pluggable authentication for BaseClient.\n \n A TokenProvider supplies the credential used for the Authorization header on\n * every request, resolved per-request (async) so callers can source short-lived\n * or rotating credentials (OAuth2 client-credentials, STS, Vault / Secrets\n * Manager) instead of a single static API key. The default StaticApiKeyProvider\n * preserves the original `apiKey` behavior with zero change for existing callers.\n /\n\nexport interface AuthCredential {\n /* Authorization scheme (e.g. 'Bearer'); defaults to 'Bearer' when omitted. /\n scheme?: string;\n /* The credential value (bearer token / API key). /\n token: string;\n}\n\nexport interface TokenProviderContext {\n tenantId: string;\n requestId: string;\n /* When true, bypass any cache and obtain a fresh credential (e.g. after a 401). /\n forceRefresh?: boolean;\n}\n\nexport interface TokenProvider {\n /* Resolve the credential for a request, or null to send no Authorization header. /\n getCredential(ctx: TokenProviderContext): Promise<AuthCredential \| null>;\n /* Whether this provider can obtain a fresh credential on demand (drives 401 retry). /\n canRefresh?(): boolean;\n}\n\n/\n Default provider: wraps a static API key. Returns null when the key is empty\n * so the client sends no Authorization header, matching the pre-provider behavior.\n /\nexport class StaticApiKeyProvider implements TokenProvider {\n constructor(private readonly apiKey: string) {}\n\n async getCredential(): Promise<AuthCredential \| null> {\n return this.apiKey ? { scheme: 'Bearer', token: this.apiKey } : null;\n }\n\n canRefresh(): boolean {\n return false;\n }\n}\n\ninterface CachedToken {\n token: string;\n expiresAt?: number;\n}\n\nexport interface RefreshingTokenProviderOptions {\n /* Fetches a fresh token. `expiresAt` is epoch milliseconds (optional). /\n fetchToken: () => Promise<CachedToken>;\n /* Refresh this many ms before expiry (default: 30_000). /\n skewMs?: number;\n /* Authorization scheme to emit (default: 'Bearer'). /\n scheme?: string;\n /* Observe each successful (re)fetch — for logging / metrics. /\n onRotate?: (meta: { expiresAt?: number }) => void;\n /* Injectable clock (default: Date.now). /\n now?: () => number;\n}\n\n/\n Caches a fetched token and refreshes it when it is within the skew window of\n * expiry or when `forceRefresh` is requested. Concurrent refreshes are de-duped\n * into a single in-flight fetch.\n /\nexport class RefreshingTokenProvider implements TokenProvider {\n private cached: CachedToken \| null = null;\n private inFlight: Promise<CachedToken> \| null = null;\n private readonly skewMs: number;\n private readonly scheme: string;\n private readonly now: () => number;\n\n constructor(private readonly opts: RefreshingTokenProviderOptions) {\n this.skewMs = opts.skewMs ?? 30_000;\n this.scheme = opts.scheme ?? 'Bearer';\n this.now = opts.now ?? (() => Date.now());\n }\n\n canRefresh(): boolean {\n return true;\n }\n\n async getCredential(ctx?: TokenProviderContext): Promise<AuthCredential \| null> {\n const forceRefresh = ctx?.forceRefresh ?? false;\n if (!forceRefresh && this.cached && !this.isExpiring(this.cached)) {\n return { scheme: this.scheme, token: this.cached.token };\n }\n const fresh = await this.refresh();\n return { scheme: this.scheme, token: fresh.token };\n }\n\n private isExpiring(token: CachedToken): boolean {\n if (token.expiresAt === undefined) {\n return false;\n }\n return this.now() >= token.expiresAt - this.skewMs;\n }\n\n private refresh(): Promise<CachedToken> {\n if (this.inFlight) {\n return this.inFlight;\n }\n this.inFlight = (async () => {\n try {\n const fresh = await this.opts.fetchToken();\n this.cached = fresh;\n this.opts.onRotate?.({ expiresAt: fresh.expiresAt });\n return fresh;\n } finally {\n this.inFlight = null;\n }\n })();\n return this.inFlight;\n }\n}\n","/\n Error hierarchy for Vesant SDK\n \n Provides structured error handling with specific error types\n * for different failure scenarios.\n /\n\nexport class VesantError extends Error {\n public requestId?: string;\n\n constructor(\n message: string,\n public code: string,\n public statusCode?: number,\n public details?: Record<string, unknown>\n ) {\n super(message);\n this.name = 'VesantError';\n Object.setPrototypeOf(this, VesantError.prototype);\n }\n}\n\n/* @deprecated Use VesantError instead /\nexport const CGSError = VesantError;\n/* @deprecated Use VesantError instead /\nexport type CGSError = VesantError;\n\nexport class NetworkError extends VesantError {\n constructor(message: string, public originalError?: unknown) {\n super(message, 'NETWORK_ERROR');\n this.name = 'NetworkError';\n Object.setPrototypeOf(this, NetworkError.prototype);\n }\n}\n\nexport class ValidationError extends VesantError {\n constructor(message: string, fields?: string[]) {\n super(message, 'VALIDATION_ERROR', 400, { fields });\n this.name = 'ValidationError';\n Object.setPrototypeOf(this, ValidationError.prototype);\n }\n}\n\nexport class ServiceUnavailableError extends VesantError {\n constructor(message: string = 'Service unavailable') {\n super(message, 'SERVICE_UNAVAILABLE', 503);\n this.name = 'ServiceUnavailableError';\n Object.setPrototypeOf(this, ServiceUnavailableError.prototype);\n }\n}\n\nexport class ComplianceBlockedError extends VesantError {\n constructor(reasons: string[]) {\n super('Access blocked due to compliance rules', 'COMPLIANCE_BLOCKED', 403, { reasons });\n this.name = 'ComplianceBlockedError';\n Object.setPrototypeOf(this, ComplianceBlockedError.prototype);\n }\n}\n\nexport class AuthenticationError extends VesantError {\n constructor(message: string = 'Authentication failed') {\n super(message, 'AUTHENTICATION_ERROR', 401);\n this.name = 'AuthenticationError';\n Object.setPrototypeOf(this, AuthenticationError.prototype);\n }\n}\n\nexport class RateLimitError extends VesantError {\n constructor(public retryAfter?: number) {\n super('Rate limit exceeded', 'RATE_LIMIT_EXCEEDED', 429, { retryAfter });\n this.name = 'RateLimitError';\n Object.setPrototypeOf(this, RateLimitError.prototype);\n }\n}\n\nexport class TimeoutError extends VesantError {\n constructor(public timeout: number) {\n super(`Request timeout after ${timeout}ms`, 'TIMEOUT', 408, { timeout });\n this.name = 'TimeoutError';\n Object.setPrototypeOf(this, TimeoutError.prototype);\n }\n}\n\nexport class ComplianceError extends VesantError {\n constructor(\n message: string,\n public originalError?: unknown,\n code: string = 'COMPLIANCE_ERROR'\n ) {\n super(message, code);\n this.name = 'ComplianceError';\n Object.setPrototypeOf(this, ComplianceError.prototype);\n }\n}\n\nexport class CircuitBreakerOpenError extends VesantError {\n constructor() {\n super('Circuit breaker is open — requests are temporarily blocked', 'CIRCUIT_BREAKER_OPEN', 503);\n this.name = 'CircuitBreakerOpenError';\n Object.setPrototypeOf(this, CircuitBreakerOpenError.prototype);\n }\n}\n","/\n Circuit breaker pattern for resilient HTTP requests.\n \n States: closed (normal) -> open (failing) -> half-open (testing) -> closed\n /\n\nexport type CircuitBreakerState = 'closed' \| 'open' \| 'half-open';\n\nexport interface CircuitBreakerConfig {\n /* Number of consecutive failures before opening the circuit (default: 5) /\n failureThreshold?: number;\n /* Time in ms to wait before transitioning from open to half-open (default: 30000) /\n resetTimeout?: number;\n /* Number of successes in half-open state before closing (default: 1) /\n successThreshold?: number;\n}\n\nexport interface CircuitBreakerStatus {\n state: CircuitBreakerState;\n failures: number;\n successes: number;\n lastFailureTime: number \| null;\n nextRetryTime: number \| null;\n}\n\nexport class CircuitBreaker {\n private state: CircuitBreakerState = 'closed';\n private failures = 0;\n private successes = 0;\n private lastFailureTime: number \| null = null;\n\n private readonly failureThreshold: number;\n private readonly resetTimeout: number;\n private readonly successThreshold: number;\n\n constructor(config: CircuitBreakerConfig = {}) {\n this.failureThreshold = config.failureThreshold ?? 5;\n this.resetTimeout = config.resetTimeout ?? 30000;\n this.successThreshold = config.successThreshold ?? 1;\n }\n\n /\n Check if a request can proceed through the circuit breaker.\n /\n canExecute(): boolean {\n if (this.state === 'closed') {\n return true;\n }\n\n if (this.state === 'open') {\n const now = Date.now();\n if (this.lastFailureTime && now - this.lastFailureTime >= this.resetTimeout) {\n this.state = 'half-open';\n this.successes = 0;\n return true;\n }\n return false;\n }\n\n // half-open: allow requests through for testing\n return true;\n }\n\n /\n Record a successful request.\n /\n onSuccess(): void {\n if (this.state === 'half-open') {\n this.successes++;\n if (this.successes >= this.successThreshold) {\n this.state = 'closed';\n this.failures = 0;\n this.successes = 0;\n this.lastFailureTime = null;\n }\n } else if (this.state === 'closed') {\n this.failures = 0;\n }\n }\n\n /\n Record a failed request.\n /\n onFailure(): void {\n this.failures++;\n this.lastFailureTime = Date.now();\n\n if (this.state === 'half-open') {\n this.state = 'open';\n this.successes = 0;\n } else if (this.state === 'closed' && this.failures >= this.failureThreshold) {\n this.state = 'open';\n }\n }\n\n /\n Get current circuit breaker status.\n /\n getStatus(): CircuitBreakerStatus {\n return {\n state: this.state,\n failures: this.failures,\n successes: this.successes,\n lastFailureTime: this.lastFailureTime,\n nextRetryTime:\n this.state === 'open' && this.lastFailureTime\n ? this.lastFailureTime + this.resetTimeout\n : null,\n };\n }\n\n /\n Reset the circuit breaker to its initial closed state.\n /\n reset(): void {\n this.state = 'closed';\n this.failures = 0;\n this.successes = 0;\n this.lastFailureTime = null;\n }\n}\n","/\n Rate limit tracking from API response headers.\n \n Tracks X-RateLimit-* headers to enable pre-flight checks\n * before making requests.\n /\n\nexport interface RateLimitStatus {\n /* Maximum requests allowed in the window /\n limit: number \| null;\n /* Remaining requests in the current window /\n remaining: number \| null;\n /* Unix timestamp (seconds) when the rate limit resets /\n reset: number \| null;\n /* Seconds until the rate limit resets /\n retryAfter: number \| null;\n}\n\nexport class RateLimitTracker {\n private limit: number \| null = null;\n private remaining: number \| null = null;\n private reset: number \| null = null;\n private retryAfter: number \| null = null;\n\n /\n Extract rate limit information from response headers.\n /\n updateFromHeaders(headers: Headers): void {\n const limit = headers.get('x-ratelimit-limit');\n const remaining = headers.get('x-ratelimit-remaining');\n const reset = headers.get('x-ratelimit-reset');\n const retryAfter = headers.get('retry-after');\n\n if (limit !== null) this.limit = parseInt(limit, 10);\n if (remaining !== null) this.remaining = parseInt(remaining, 10);\n if (reset !== null) this.reset = parseInt(reset, 10);\n if (retryAfter !== null) this.retryAfter = parseInt(retryAfter, 10);\n }\n\n /\n Check if the rate limit has been exceeded based on tracked headers.\n /\n isLimitExceeded(): boolean {\n if (this.remaining !== null && this.remaining <= 0) {\n // Check if the reset time has passed\n if (this.reset !== null) {\n const now = Math.floor(Date.now() / 1000);\n if (now >= this.reset) {\n // Reset window has passed, allow requests\n this.remaining = null;\n this.reset = null;\n this.retryAfter = null;\n return false;\n }\n }\n return true;\n }\n return false;\n }\n\n /\n Get current rate limit status.\n /\n getStatus(): RateLimitStatus {\n return {\n limit: this.limit,\n remaining: this.remaining,\n reset: this.reset,\n retryAfter: this.retryAfter,\n };\n }\n}\n","import type { Logger } from './config';\n\nexport function createConsoleLogger(): Logger {\n return {\n debug(message: string, meta?: Record<string, unknown>) {\n console.log(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n info(message: string, meta?: Record<string, unknown>) {\n console.info(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n warn(message: string, meta?: Record<string, unknown>) {\n console.warn(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n error(message: string, meta?: Record<string, unknown>) {\n console.error(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n };\n}\n\nexport const noopLogger: Logger = {\n debug() {},\n info() {},\n warn() {},\n error() {},\n};\n","/\n Single source of truth for the SDK version.\n /\nexport const SDK_VERSION = '1.7.2';\n","/\n Shared browser utility functions.\n \n Extracted from ciphertext.ts and hooks.ts to avoid duplication.\n * All functions include SSR guards for safe server-side rendering.\n /\n\n/\n Generate a UUID v4\n /\nexport function generateUUID(): string {\n if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n return crypto.randomUUID();\n }\n\n // Fallback for older browsers\n return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {\n const r = (Math.random() 16) \| 0;\n const v = c === 'x' ? r : (r & 0x3) \| 0x8;\n return v.toString(16);\n });\n}\n\n/*\n Generate a unique device ID that persists across sessions.\n * Falls back to a random UUID when localStorage is unavailable (SSR).\n /\nexport function generateDeviceId(): string {\n if (typeof window === 'undefined' \|\| typeof localStorage === 'undefined') {\n return generateUUID();\n }\n\n const storageKey = 'vesant_device_id';\n let deviceId = localStorage.getItem(storageKey);\n\n if (!deviceId) {\n deviceId = generateUUID();\n localStorage.setItem(storageKey, deviceId);\n }\n\n return deviceId;\n}\n\n/\n Detect browser information from user agent.\n * Returns safe defaults when running server-side.\n /\nexport function getBrowserInfo(): {\n browser: string;\n browser_version: string;\n os: string;\n os_version: string;\n} {\n if (typeof navigator === 'undefined') {\n return { browser: 'unknown', browser_version: '', os: 'unknown', os_version: '' };\n }\n\n const ua = navigator.userAgent;\n let browser = 'unknown';\n let browserVersion = '';\n let os = 'unknown';\n let osVersion = '';\n\n // Detect browser\n if (ua.includes('Firefox/')) {\n browser = 'Firefox';\n browserVersion = ua.match(/Firefox\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Edg/')) {\n browser = 'Edge';\n browserVersion = ua.match(/Edg\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Chrome/')) {\n browser = 'Chrome';\n browserVersion = ua.match(/Chrome\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Safari/') && !ua.includes('Chrome')) {\n browser = 'Safari';\n browserVersion = ua.match(/Version\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Opera') \|\| ua.includes('OPR/')) {\n browser = 'Opera';\n browserVersion = ua.match(/(?:Opera\|OPR)\\/([\\d.]+)/)?.[1] \|\| '';\n }\n\n // Detect OS\n if (ua.includes('Windows')) {\n os = 'Windows';\n if (ua.includes('Windows NT 10.0')) osVersion = '10';\n else if (ua.includes('Windows NT 6.3')) osVersion = '8.1';\n else if (ua.includes('Windows NT 6.2')) osVersion = '8';\n else if (ua.includes('Windows NT 6.1')) osVersion = '7';\n } else if (ua.includes('Mac OS X')) {\n os = 'macOS';\n osVersion = ua.match(/Mac OS X ([\\d_]+)/)?.[1]?.replace(/_/g, '.') \|\| '';\n } else if (ua.includes('Linux')) {\n os = 'Linux';\n } else if (ua.includes('Android')) {\n os = 'Android';\n osVersion = ua.match(/Android ([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('iOS') \|\| ua.includes('iPhone') \|\| ua.includes('iPad')) {\n os = 'iOS';\n osVersion = ua.match(/OS ([\\d_]+)/)?.[1]?.replace(/_/g, '.') \|\| '';\n }\n\n return { browser, browser_version: browserVersion, os, os_version: osVersion };\n}\n","/\n Base HTTP client for all Vesant SDK clients\n \n Provides common functionality:\n * - Request/response handling\n * - Error handling\n * - Retry logic with exponential backoff\n * - Timeout management\n * - Debug logging\n /\n\nimport type { BaseClientConfig, Logger, RequestInterceptor, RequestOptions } from './config';\nimport { type TokenProvider, StaticApiKeyProvider } from './auth';\nimport {\n VesantError,\n NetworkError,\n TimeoutError,\n AuthenticationError,\n RateLimitError,\n ServiceUnavailableError,\n ValidationError,\n CircuitBreakerOpenError,\n} from './errors';\nimport { CircuitBreaker, type CircuitBreakerStatus } from './circuit-breaker';\nimport { RateLimitTracker, type RateLimitStatus } from './rate-limiter';\nimport { createConsoleLogger } from './logger';\nimport { SDK_VERSION } from './version';\nimport { generateUUID } from '../shared/browser-utils';\n\nexport abstract class BaseClient {\n protected config: BaseClientConfig & { timeout: number; retries: number };\n protected logger: Logger;\n private interceptors: RequestInterceptor[];\n private circuitBreaker: CircuitBreaker \| null = null;\n private rateLimitTracker: RateLimitTracker \| null = null;\n private authProvider: TokenProvider \| undefined;\n\n constructor(config: BaseClientConfig) {\n if (!config.baseURL?.trim()) {\n throw new ValidationError('baseURL is required and must be a non-empty string', ['baseURL']);\n }\n if (!config.tenantId?.trim()) {\n throw new ValidationError('tenantId is required and must be a non-empty string', ['tenantId']);\n }\n\n // The SDK relies on a global fetch (Node.js >= 18). Fail fast with a clear\n // message rather than a later \"fetch is not defined\" ReferenceError.\n if (typeof fetch === 'undefined') {\n throw new VesantError(\n 'The Vesant SDK requires a global fetch (Node.js >= 18). Upgrade Node or provide a fetch polyfill.',\n 'RUNTIME_UNSUPPORTED'\n );\n }\n\n this.interceptors = config.interceptors \|\| [];\n this.logger = config.logger \|\| createConsoleLogger();\n\n // Auto-detect environment from API key prefix\n let environment = config.environment;\n const apiKey = config.apiKey \|\| '';\n if (apiKey.startsWith('pk_test_')) {\n if (environment === 'production') {\n this.logger.warn('Sandbox API key (pk_test_) used with environment: \"production\" — overriding to \"sandbox\"');\n }\n environment = 'sandbox';\n } else if (apiKey.startsWith('pk_live_') && environment === 'sandbox') {\n this.logger.warn('Production API key (pk_live_) used with environment: \"sandbox\" — sandbox isolation will still be applied for backward compatibility');\n }\n\n this.config = {\n ...config,\n apiKey,\n environment,\n headers: config.headers \|\| {},\n timeout: config.timeout \|\| 10000,\n retries: config.retries ?? 3,\n debug: config.debug \|\| false,\n interceptors: this.interceptors,\n logger: this.logger,\n };\n\n // Default to a static-apiKey provider so the apiKey path is unchanged; an\n // explicit authProvider (OAuth2 / rotating secrets) takes precedence.\n this.authProvider = config.authProvider ?? (apiKey ? new StaticApiKeyProvider(apiKey) : undefined);\n\n if (config.circuitBreaker) {\n this.circuitBreaker = new CircuitBreaker(config.circuitBreaker);\n }\n if (config.enableRateLimitTracking) {\n this.rateLimitTracker = new RateLimitTracker();\n }\n }\n\n /\n Resolve the Idempotency-Key for a request. Mutating methods (POST/PUT/PATCH)\n * get the caller-supplied key or a freshly minted UUID; non-mutating methods get\n * none. requestWithRetry resolves this once and injects it so every retry reuses\n * one key (letting the server dedup replays); a direct request() resolves per call.\n /\n private resolveIdempotencyKey(method: string, requestOptions?: RequestOptions): string \| undefined {\n const isMutating = ['POST', 'PUT', 'PATCH'].includes((method \|\| 'GET').toUpperCase());\n if (!isMutating) {\n return undefined;\n }\n return requestOptions?.idempotencyKey ?? generateUUID();\n }\n\n /\n Make an HTTP request with timeout and error handling\n /\n protected async request<T>(\n endpoint: string,\n options: RequestInit = {},\n serviceURL?: string,\n requestOptions?: RequestOptions\n ): Promise<T> {\n const requestId = generateUUID();\n\n // Circuit breaker check\n if (this.circuitBreaker && !this.circuitBreaker.canExecute()) {\n const error = new CircuitBreakerOpenError();\n error.requestId = requestId;\n throw error;\n }\n\n // Rate limit pre-check\n if (this.rateLimitTracker && this.rateLimitTracker.isLimitExceeded()) {\n const status = this.rateLimitTracker.getStatus();\n const error = new RateLimitError(status.retryAfter ?? undefined);\n error.requestId = requestId;\n throw error;\n }\n\n const url = `${serviceURL \|\| this.config.baseURL}${endpoint}`;\n\n const headers: Record<string, string> = {\n 'Content-Type': 'application/json',\n 'X-Tenant-ID': this.config.tenantId,\n 'X-SDK-Version': `vesant-sdk-ts/${SDK_VERSION}`,\n 'X-Request-ID': requestId,\n ...this.config.headers,\n ...((options.headers as Record<string, string>) \|\| {}),\n };\n\n // Resolve the auth credential per-request via the token provider (async, so a\n // provider can fetch/refresh short-lived credentials). No credential = no header.\n const credential = await this.authProvider?.getCredential({\n tenantId: this.config.tenantId,\n requestId,\n });\n if (credential) {\n headers['Authorization'] = `${credential.scheme ?? 'Bearer'} ${credential.token}`;\n }\n\n // Sandbox header\n if (this.config.environment === 'sandbox') {\n headers['X-Sandbox'] = 'true';\n }\n\n // Idempotency key for mutating methods. Via requestWithRetry the key arrives\n // pre-resolved in requestOptions so all attempts share one; a direct request()\n // falls back to minting one here.\n const method = (options.method \|\| 'GET').toUpperCase();\n const idempotencyKey = this.resolveIdempotencyKey(method, requestOptions);\n if (idempotencyKey) {\n headers['Idempotency-Key'] = idempotencyKey;\n }\n\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n // Link consumer AbortSignal to internal controller\n if (requestOptions?.signal) {\n if (requestOptions.signal.aborted) {\n controller.abort();\n } else {\n requestOptions.signal.addEventListener('abort', () => controller.abort(), { once: true });\n }\n }\n\n try {\n // Run onRequest interceptors\n let finalOptions: RequestInit = { ...options, headers };\n for (const interceptor of this.interceptors) {\n if (interceptor.onRequest) {\n finalOptions = await interceptor.onRequest(url, finalOptions);\n }\n }\n\n if (this.config.debug) {\n this.logger.debug(`${finalOptions.method \|\| 'GET'} ${endpoint}`);\n }\n\n let response = await fetch(url, {\n ...finalOptions,\n signal: controller.signal,\n });\n\n // Single-shot 401 re-auth: if the provider can refresh, a 401 forces one\n // credential refresh and retry, reusing the same headers (incl. the\n // Idempotency-Key) so a mutating request is not double-submitted.\n if (response.status === 401 && this.authProvider?.canRefresh?.()) {\n const refreshed = await this.authProvider.getCredential({\n tenantId: this.config.tenantId,\n requestId,\n forceRefresh: true,\n });\n if (refreshed) {\n this.config.onCredentialRotated?.({ reason: 'unauthorized' });\n finalOptions = {\n ...finalOptions,\n headers: {\n ...(finalOptions.headers as Record<string, string>),\n Authorization: `${refreshed.scheme ?? 'Bearer'} ${refreshed.token}`,\n },\n };\n response = await fetch(url, { ...finalOptions, signal: controller.signal });\n }\n }\n\n clearTimeout(timeoutId);\n\n // Track rate limit headers\n if (this.rateLimitTracker) {\n this.rateLimitTracker.updateFromHeaders(response.headers);\n }\n\n // Binary download path\n if (requestOptions?.responseType === 'arraybuffer') {\n if (!response.ok) {\n let errData: Record<string, unknown> = {};\n try { errData = await response.json(); } catch { / ignore / }\n this.handleErrorResponse(response.status, errData, requestId);\n }\n this.circuitBreaker?.onSuccess();\n const buffer = await response.arrayBuffer();\n return buffer as unknown as T;\n }\n\n let data: Record<string, unknown> \| undefined;\n try {\n data = await response.json();\n } catch {\n // Non-JSON response (HTML error pages, 204 No Content, etc.)\n if (!response.ok) {\n this.handleErrorResponse(response.status, {\n error: `HTTP ${response.status}`,\n message: response.statusText,\n }, requestId);\n }\n // OK response but no JSON body (e.g., 204)\n this.circuitBreaker?.onSuccess();\n return undefined as unknown as T;\n }\n\n if (!response.ok) {\n this.handleErrorResponse(response.status, data \|\| {}, requestId);\n }\n\n // Record success for circuit breaker\n this.circuitBreaker?.onSuccess();\n\n // Run onResponse interceptors\n let result: unknown = data;\n for (const interceptor of this.interceptors) {\n if (interceptor.onResponse) {\n result = await interceptor.onResponse(url, result);\n }\n }\n\n if (this.config.debug) {\n this.logger.debug(`Response: ${response.status}`);\n }\n\n return result as T;\n } catch (error) {\n clearTimeout(timeoutId);\n\n // Record failure for circuit breaker (skip for client errors)\n if (\n error instanceof VesantError &&\n error.statusCode &&\n error.statusCode >= 500\n ) {\n this.circuitBreaker?.onFailure();\n } else if (error instanceof NetworkError \|\| error instanceof TimeoutError) {\n this.circuitBreaker?.onFailure();\n }\n\n // Attach requestId to VesantError instances\n if (error instanceof VesantError && !error.requestId) {\n error.requestId = requestId;\n }\n\n // Run onError interceptors\n if (error instanceof Error) {\n for (const interceptor of this.interceptors) {\n if (interceptor.onError) {\n await interceptor.onError(url, error);\n }\n }\n }\n\n if (error instanceof Error) {\n if (error.name === 'AbortError') {\n // Distinguish consumer abort from timeout\n if (requestOptions?.signal?.aborted) {\n const abortError = new VesantError('Request aborted', 'REQUEST_ABORTED');\n abortError.requestId = requestId;\n throw abortError;\n }\n this.circuitBreaker?.onFailure();\n const timeoutError = new TimeoutError(this.config.timeout);\n timeoutError.requestId = requestId;\n throw timeoutError;\n }\n if (error instanceof VesantError) {\n throw error;\n }\n }\n\n const networkError = new NetworkError('Network request failed', error);\n networkError.requestId = requestId;\n this.circuitBreaker?.onFailure();\n throw networkError;\n }\n }\n\n /\n Make an HTTP request with retry logic\n /\n protected async requestWithRetry<T>(\n endpoint: string,\n options: RequestInit = {},\n serviceURL?: string,\n retries: number = this.config.retries,\n requestOptions?: RequestOptions\n ): Promise<T> {\n let lastError: Error \| undefined;\n\n // Resolve the idempotency key once so every retry attempt reuses it, letting\n // the server dedup replays instead of re-processing (and re-billing) each try.\n const idempotencyKey = this.resolveIdempotencyKey(options.method \|\| 'GET', requestOptions);\n const attemptOptions: RequestOptions \| undefined = idempotencyKey\n ? { ...requestOptions, idempotencyKey }\n : requestOptions;\n\n for (let attempt = 0; attempt <= retries; attempt++) {\n try {\n return await this.request<T>(endpoint, options, serviceURL, attemptOptions);\n } catch (error) {\n lastError = error instanceof Error ? error : new Error('Unknown error');\n\n // Don't retry on consumer abort\n if (requestOptions?.signal?.aborted) {\n throw lastError;\n }\n\n // Don't retry on client errors (4xx), except 429 (rate limit)\n if (\n lastError instanceof VesantError &&\n lastError.statusCode &&\n lastError.statusCode >= 400 &&\n lastError.statusCode < 500 &&\n lastError.statusCode !== 429\n ) {\n throw lastError;\n }\n\n // Don't retry on last attempt\n if (attempt === retries) {\n break;\n }\n\n // Use Retry-After for 429, otherwise exponential backoff with jitter\n let delay: number;\n if (lastError instanceof RateLimitError && lastError.retryAfter) {\n delay = lastError.retryAfter 1000;\n } else {\n delay = Math.min(1000 * Math.pow(2, attempt) + Math.random() * 1000, 10000);\n }\n await new Promise((resolve) => setTimeout(resolve, delay));\n\n if (this.config.debug) {\n this.logger.debug(`Retry attempt ${attempt + 1}/${retries} after ${delay.toFixed(0)}ms`);\n }\n }\n }\n\n throw new NetworkError(`Request failed after ${retries} retries`, lastError);\n }\n\n /*\n Handle error responses from API\n /\n protected handleErrorResponse(status: number, data: Record<string, unknown>, requestId?: string): never {\n const message = (data.error as string) \|\| (data.message as string) \|\| `HTTP ${status}`;\n\n const createError = (): VesantError => {\n switch (status) {\n case 400:\n return new VesantError(message, 'BAD_REQUEST', 400);\n case 401:\n return new AuthenticationError(message);\n case 403:\n return new VesantError(message, 'FORBIDDEN', 403);\n case 404:\n return new VesantError(message, 'NOT_FOUND', 404);\n case 409:\n return new VesantError(message, 'DUPLICATE_PROFILE', 409);\n case 429: {\n const retryAfter = (data.retry_after as number \| undefined) \|\| (data.retryAfter as number \| undefined);\n return new RateLimitError(retryAfter);\n }\n case 500:\n case 502:\n case 503:\n case 504:\n return new ServiceUnavailableError(message);\n default:\n return new VesantError(message, 'UNKNOWN_ERROR', status);\n }\n };\n\n const error = createError();\n if (requestId) {\n error.requestId = requestId;\n }\n throw error;\n }\n\n /\n Build query string from parameters\n /\n protected buildQueryString(params: Record<string, unknown>): string {\n const query = new URLSearchParams();\n\n Object.entries(params).forEach(([key, value]) => {\n if (value !== undefined && value !== null) {\n if (Array.isArray(value)) {\n value.forEach((item) => query.append(key, String(item)));\n } else {\n query.append(key, String(value));\n }\n }\n });\n\n const queryString = query.toString();\n return queryString ? `?${queryString}` : '';\n }\n\n /\n Update client configuration\n /\n updateConfig(config: Partial<BaseClientConfig>): void {\n this.config = {\n ...this.config,\n ...config,\n headers: {\n ...this.config.headers,\n ...(config.headers \|\| {}),\n },\n };\n if (config.logger) {\n this.logger = config.logger;\n }\n if (config.interceptors) {\n this.interceptors = config.interceptors;\n }\n // Rebuild the auth provider when auth-related config changes so a rotated key\n // or a swapped provider takes effect on subsequent requests.\n if (config.authProvider !== undefined \|\| config.apiKey !== undefined) {\n this.authProvider =\n this.config.authProvider ??\n (this.config.apiKey ? new StaticApiKeyProvider(this.config.apiKey) : undefined);\n }\n }\n\n /\n Get current configuration (readonly)\n /\n getConfig(): Readonly<BaseClientConfig> {\n return { ...this.config };\n }\n\n /\n Get rate limit status from tracked response headers.\n /\n getRateLimitStatus(): RateLimitStatus \| null {\n return this.rateLimitTracker?.getStatus() ?? null;\n }\n\n /\n Get circuit breaker status.\n /\n getCircuitBreakerStatus(): CircuitBreakerStatus \| null {\n return this.circuitBreaker?.getStatus() ?? null;\n }\n\n /\n Health check endpoint\n /\n async healthCheck(): Promise<{ status: string; timestamp: string }> {\n return this.request('/api/v1/health');\n }\n}\n","/\n KycClient - TypeScript SDK for Vesant KYC (Know Your Customer) Service\n \n Provides type-safe methods to interact with the KYC service API.\n * Extends BaseClient for consistent retry logic, timeout handling, and error management.\n /\n\nimport { BaseClient } from '../core/client';\nimport { ValidationError } from '../core/errors';\nimport type { BaseClientConfig, RequestOptions } from '../core/config';\nimport type {\n KycClientConfig,\n KycRequest,\n KycRequestFilters,\n KycRequestListResponse,\n DocumentVerificationRequest,\n DocumentVerificationResponse,\n UpdateKycStatusRequest,\n RequestAdditionalDocumentsRequest,\n RequestKycSubmitLinkRequest,\n RequestKycSubmitLinkResponse,\n CheckKycStatusRequest,\n CheckKycStatusResponse,\n ProofDownloadURL,\n KycOverview,\n KycAlert,\n KycAlertFilters,\n KycAlertListResponse,\n UpdateKycAlertRequest,\n KycPreferences,\n UpdateKycPreferencesRequest,\n PaginationParams,\n CustomerProfile,\n CustomerProfileFilters,\n CustomerProfileListResponse,\n CreateCustomerProfileRequest,\n CreateEventBasedFaceVerificationSessionRequest,\n CreateEventBasedFaceVerificationSessionResponse,\n SubmitEventBasedFaceVerificationSessionRequest,\n EventBasedFaceVerificationCallback,\n KycHandoffSession,\n} from './types';\n\n/* Helper to add filter value to params, joining arrays with commas /\nfunction addFilterParam(\n params: Record<string, unknown>,\n key: string,\n value: string \| string[] \| undefined\n): void {\n if (value !== undefined) {\n params[key] = Array.isArray(value) ? value.join(',') : value;\n }\n}\n\n/* Helper to add simple filter values to params /\nfunction addSimpleParams(\n params: Record<string, unknown>,\n source: Record<string, unknown>,\n keys: string[]\n): void {\n for (const key of keys) {\n if (source[key] !== undefined) {\n params[key] = source[key];\n }\n }\n}\n\n/\n KycClient extends BaseClient for:\n * - Consistent retry logic with exponential backoff\n * - Unified error handling (VesantError, NetworkError, TimeoutError, etc.)\n * - Automatic timeout management\n * - Debug logging\n \n All KYC verification calls use requestWithRetry() to handle\n * transient failures gracefully.\n /\nexport class KycClient extends BaseClient {\n private userId?: string;\n private readonly riskProfileBaseURL?: string;\n\n constructor(config: KycClientConfig) {\n // Convert KycClientConfig to BaseClientConfig\n const baseConfig: BaseClientConfig = {\n baseURL: config.baseURL,\n tenantId: config.tenantId,\n apiKey: config.apiKey,\n headers: config.headers,\n timeout: config.timeout,\n retries: 3, // Default retry count for KYC calls\n debug: config.debug,\n environment: config.environment,\n };\n super(baseConfig);\n this.userId = config.userId;\n this.riskProfileBaseURL = config.riskProfileBaseURL;\n }\n\n /\n Set the user ID for operations requiring user context\n /\n setUserId(userId: string): void {\n this.userId = userId;\n }\n\n /\n Get current user ID\n /\n getUserId(): string \| undefined {\n return this.userId;\n }\n\n /\n Build headers including user ID if available\n /\n private getUserHeaders(): Record<string, string> {\n const headers: Record<string, string> = {};\n if (this.userId) {\n headers['X-User-ID'] = this.userId;\n }\n return headers;\n }\n\n // ============================================================================\n // Document Verification\n // ============================================================================\n\n /\n Request a KYC submission redirect URL for a user\n \n Generates a link that the user can visit to submit their KYC documents.\n \n Optionally pass the customer's registered identity data as\n * `customer_data` (same shape as the geolocation `customer_data` block).\n * It seeds the customer's risk profile so document verification can\n * cross-check the submitted document against trusted reference data;\n * fields never overwrite data already on the profile.\n \n @param request - Request containing the user ID, optional redirect URL, optional callback URL (receives POST requests), and optional customer identity data\n * @returns Response containing the redirect link and KYC ID\n \n @example\n * ```typescript\n * const result = await client.requestKycSubmitLink({\n * user_id: \"user_123\",\n * redirect_url: \"https://merchant.com/kyc-complete\", // optional\n * callback_url: \"https://merchant.com/api/kyc-webhook\", // optional - receives POST requests on status change\n * customer_data: { // optional - seeds the risk profile for document cross-checks\n * full_name: \"John Doe\",\n * date_of_birth: \"1999-06-02\", // ISO 8601\n * email: \"john@example.com\",\n * phone: \"+94771234567\",\n * address: \"12 Main St, Colombo\", // used for address verification\n * country: \"LK\"\n * }\n * });\n \n console.log(`Redirect user to: ${result.link}`);\n * console.log(`KYC ID: ${result.kyc_id}`);\n * ```\n /\n async requestKycSubmitLink(\n request: RequestKycSubmitLinkRequest,\n requestOptions?: RequestOptions\n ): Promise<RequestKycSubmitLinkResponse> {\n return this.requestWithRetry<RequestKycSubmitLinkResponse>('/api/v1/kyc/request', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, undefined, requestOptions);\n }\n\n /\n Create a Event-Based Face Verification session.\n \n Inspect the response before showing UI:\n * - `is_required === false` → skip face capture; `reason` explains why.\n * - `device_type === 'desktop'` → render `qr_payload` as a QR; the\n * mobile device picks up the session via the connect endpoint.\n * - `device_type === 'mobile'` → open the face capture modal directly.\n \n @param request - Reference, customer_id, event, amount (for threshold events), optional URLs.\n /\n async createEventBasedFaceVerificationSession(request: CreateEventBasedFaceVerificationSessionRequest): Promise<CreateEventBasedFaceVerificationSessionResponse> {\n // One-shot: do NOT use requestWithRetry. Creating a session is a\n // non-idempotent POST that allocates server-side state (DB row + Redis\n // handoff). Retrying on timeout would create duplicate sessions and\n // burn Shufti references on the follow-up submit.\n return this.request<CreateEventBasedFaceVerificationSessionResponse>('/api/v1/kyc/face/session', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Submit a real-time face capture for an active Event-Based Face Verification session.\n \n Mobile-only. The server rejects desktop User-Agents with HTTP\n * 400 (`face capture must be completed on a mobile device`). Use the\n * QR handoff from `createEventBasedFaceVerificationSession` for desktop callers.\n \n The `data` field on the response carries `retries_remaining`,\n * `retry_limit_exceeded`, and the reaction flags (`enforce_logout`,\n * `freeze_account`, etc.) so the tenant app can act on a final failure.\n \n @param request - Token from `createEventBasedFaceVerificationSession`, plus the base64 selfie.\n /\n async submitEventBasedFaceVerificationSession(request: SubmitEventBasedFaceVerificationSessionRequest, requestOptions?: RequestOptions): Promise<EventBasedFaceVerificationCallback> {\n // One-shot: do NOT use requestWithRetry. Submitting a selfie is a\n // non-idempotent POST — every call uploads to S3, calls Shufti\n // (billable), and increments the `attempts` counter on the session\n // row. Retries on transient errors would burn attempts and produce\n // multiple Shufti responses for one user action. Manual retries\n // (user clicks \"Try again\" in the modal) re-call this method\n // explicitly, which is the right surface for the retry decision.\n return this.request<EventBasedFaceVerificationCallback>('/api/v1/kyc/face/submit', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, requestOptions);\n }\n\n /\n Look up the current state of a Event-Based Face Verification session by its\n * session token. Useful for desktop pollers waiting on the mobile handoff.\n \n The lookup is scoped by the unguessable, server-issued session token (not\n * the enumerable forward reference): the endpoint is public/unauthenticated,\n * and scoping by the token is what prevents cross-tenant status reads.\n \n @param token - The session token returned by `createEventBasedFaceVerificationSession`.\n /\n async getEventBasedFaceVerificationSessionStatus(token: string): Promise<EventBasedFaceVerificationCallback> {\n return this.requestWithRetry<EventBasedFaceVerificationCallback>(`/api/v1/kyc/face/verify/${encodeURIComponent(token)}`, {\n method: 'GET',\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Fetch the Redis-backed handoff session for a token. Same backing\n * store as normal KYC (`kyc:session:<token>`, 15-minute TTL). Desktop\n * callers poll `mobile_connected` to detect when a mobile device has\n * scanned the QR and attached.\n \n @param token - The session token returned by `createEventBasedFaceVerificationSession`.\n /\n async getHandoffSession(token: string): Promise<KycHandoffSession> {\n return this.request<KycHandoffSession>(\n `/api/v1/kyc/session${this.buildQueryString({ token })}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n /\n Attach a mobile device to a desktop-initiated session. The mobile\n * client calls this after scanning the QR code. The desktop poller\n * sees `mobile_connected: true` on the next `getHandoffSession`.\n \n @param token - The session token transferred via the QR payload.\n * @param isDisconnect - Pass true to release the session (default false).\n /\n async connectMobileSession(token: string, isDisconnect = false): Promise<{ mobile_connected: boolean }> {\n return this.request<{ mobile_connected: boolean }>('/api/v1/kyc/session/connect', {\n method: 'PUT',\n body: JSON.stringify({ token, is_disconnect: isDisconnect }),\n headers: this.getUserHeaders(),\n });\n }\n /\n Check KYC status for a user\n \n Returns the current KYC status:\n * - \"complete\" → KYC verified, show \"Continue to Login\"\n * - \"processing\" → Under review, show \"Continue to Login\"\n * - \"failed\" / \"declined\" → Show error + retry option\n * - \"pending\" / \"in_progress\" → Keep polling\n \n @param request - Request containing user_id and token\n * @returns Response with kyc_status and message (reason)\n \n @example\n * ```typescript\n * const result = await client.checkKycStatus({\n * user_id: \"user_123\",\n * token: \"auth_token_xyz\"\n * });\n \n if (result.kyc_status === 'complete') {\n * // Show \"Continue to Login\"\n * } else if (result.kyc_status === 'failed' \|\| result.kyc_status === 'declined') {\n * // Show error + retry option\n * } else {\n * // Keep polling\n * }\n * ```\n /\n async checkKycStatus(\n request: CheckKycStatusRequest\n ): Promise<CheckKycStatusResponse> {\n const params = {\n user_id: request.user_id,\n kyc_id: request.kyc_id,\n };\n\n return this.requestWithRetry<CheckKycStatusResponse>(\n `/api/v1/kyc/request/status${this.buildQueryString(params)}`,\n {\n method: 'GET',\n headers: this.getUserHeaders(),\n }\n );\n }\n\n /\n Submit a document verification request with OCR\n \n Uses requestWithRetry() for automatic retry on transient failures.\n \n @param request - Document verification request with documents and customer info\n * @returns Verification response with status and reference\n \n @example\n * ```typescript\n * const result = await client.submitVerification({\n * reference: \"4d2aff34-ab86-422d-992e-50b1234a5b67\",\n * email: \"customer@example.com\",\n * country: \"US\",\n * document: {\n * proof: base64EncodedImage,\n * selected_type: [\"id_card\", \"passport\"],\n * name: { first_name: \"John\", last_name: \"Doe\" },\n * dob: \"1990-01-15\"\n * },\n * face: {\n * proof: base64EncodedSelfie\n * }\n * });\n \n console.log(`Verification submitted: ${result.reference}`);\n * ```\n /\n async submitVerification(\n request: DocumentVerificationRequest,\n requestOptions?: RequestOptions\n ): Promise<DocumentVerificationResponse> {\n return this.requestWithRetry<DocumentVerificationResponse>('/api/v1/kyc/submit', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, undefined, requestOptions);\n }\n\n /\n Get a KYC request by ID\n \n @param id - KYC request ID\n * @returns KYC request details including proofs and alerts\n \n @example\n * ```typescript\n * const kyc = await client.getKycRequest(\"550e8400-e29b-41d4-a716-446655440000\");\n * console.log(`Status: ${kyc.status}, ID Verified: ${kyc.id_verified}`);\n * ```\n /\n async getKycRequest(id: string): Promise<KycRequest> {\n return this.request<KycRequest>(`/api/v1/kyc/requests/${id}`);\n }\n\n /\n List KYC requests with filters and pagination\n \n @param filters - Optional filters (status, search, date range)\n * @param pagination - Optional pagination (page, page_size)\n * @returns Paginated list of KYC requests\n \n @example\n * ```typescript\n * const requests = await client.listKycRequests(\n * { status: \"pending\", search: \"john\" },\n * { page: 1, page_size: 20 }\n * );\n * console.log(`Found ${requests.total} pending requests`);\n * ```\n /\n async listKycRequests(\n filters?: KycRequestFilters,\n pagination?: PaginationParams\n ): Promise<KycRequestListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n addFilterParam(params, 'status', filters.status);\n addSimpleParams(params, filters as unknown as Record<string, unknown>, ['search', 'fromDate', 'toDate', 'sortBy', 'order']);\n }\n\n if (pagination) {\n if (pagination.page) params.page = pagination.page;\n if (pagination.page_size) params.limit = pagination.page_size;\n }\n\n return this.request<KycRequestListResponse>(\n `/api/v1/kyc/requests${this.buildQueryString(params)}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n /\n Update KYC request status (accept/decline)\n \n @param request - Status update request with reference, status, and reason\n \n @example\n * ```typescript\n * // Accept a KYC request\n * await client.updateKycStatus({\n * reference: \"shufti_ref_123\",\n * status: \"accepted\",\n * reason: \"All documents verified successfully\"\n * });\n \n // Decline a KYC request\n * await client.updateKycStatus({\n * reference: \"shufti_ref_456\",\n * status: \"declined\",\n * reason: \"Document expired\"\n * });\n * ```\n /\n async updateKycStatus(request: UpdateKycStatusRequest): Promise<void> {\n await this.request('/api/v1/kyc/status', {\n method: 'PUT',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Request additional documents from customer\n \n @param request - Request with KYC ID and document types needed\n \n @example\n * ```typescript\n * await client.requestAdditionalDocuments({\n * id: \"550e8400-e29b-41d4-a716-446655440000\",\n * document_types: [\"address\", \"document_two\"],\n * message: \"Please provide proof of address and secondary ID\"\n * });\n * ```\n /\n async requestAdditionalDocuments(\n request: RequestAdditionalDocumentsRequest\n ): Promise<void> {\n await this.request('/api/v1/kyc/requests', {\n method: 'PUT',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Get downloadable URLs for KYC proofs/documents\n \n @param kycId - KYC request ID\n * @returns Array of proof download URLs with expiration\n \n @example\n * ```typescript\n * const proofs = await client.getProofDownloadURLs(\"550e8400-e29b-41d4-a716-446655440000\");\n * proofs.forEach(proof => {\n * console.log(`${proof.type}: ${proof.url} (expires: ${proof.expires_at})`);\n * });\n * ```\n /\n async getProofDownloadURLs(kycId: string): Promise<ProofDownloadURL[]> {\n return this.request<ProofDownloadURL[]>(\n `/api/v1/kyc/proofs/${kycId}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n // ============================================================================\n // KYC Overview & Statistics\n // ============================================================================\n\n /\n Get KYC overview statistics\n \n @param fromDate - Optional start date (ISO 8601)\n * @param toDate - Optional end date (ISO 8601)\n * @returns KYC statistics including counts by status\n \n @example\n * ```typescript\n * const overview = await client.getOverview(\n * \"2024-01-01T00:00:00Z\",\n * \"2024-12-31T23:59:59Z\"\n * );\n * console.log(`Total: ${overview.total}, Pending: ${overview.pending}`);\n * console.log(`Approved: ${overview.approved}, Rejected: ${overview.rejected}`);\n * ```\n /\n async getOverview(fromDate?: string, toDate?: string): Promise<KycOverview> {\n const params: Record<string, unknown> = {};\n if (fromDate) params.fromDate = fromDate;\n if (toDate) params.toDate = toDate;\n\n return this.request<KycOverview>(\n `/api/v1/kyc/overview${this.buildQueryString(params)}`\n );\n }\n\n // ============================================================================\n // Alert Management\n // ============================================================================\n\n /\n Get a KYC alert by ID\n \n @param alertId - Alert ID\n * @returns Alert details\n /\n async getAlert(alertId: string): Promise<KycAlert> {\n return this.request<KycAlert>(`/api/v1/kyc/alerts/${alertId}`);\n }\n\n /\n List KYC alerts with filters and pagination\n \n @param filters - Optional filters (status, risk, alert_type, assigned_for, etc.)\n * @param pagination - Optional pagination (page, page_size)\n * @returns Paginated list of alerts\n \n @example\n * ```typescript\n * const alerts = await client.listAlerts(\n * {\n * status: [\"pending\", \"in_progress\"],\n * risk: \"critical\",\n * alert_type: \"kyc\"\n * },\n * { page: 1, page_size: 20 }\n * );\n * console.log(`Found ${alerts.total} alerts`);\n * ```\n /\n async listAlerts(\n filters?: KycAlertFilters,\n pagination?: PaginationParams\n ): Promise<KycAlertListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n // Array filters that need comma joining\n addFilterParam(params, 'kyc_id', filters.kyc_id);\n addFilterParam(params, 'alert_type', filters.alert_type);\n addFilterParam(params, 'assigned_for', filters.assigned_for);\n addFilterParam(params, 'status', filters.status);\n addFilterParam(params, 'risk', filters.risk);\n // Simple filters\n addSimpleParams(params, filters as unknown as Record<string, unknown>, ['search', 'fromDate', 'toDate', 'sort_by', 'order']);\n }\n\n if (pagination) {\n if (pagination.page) params.page = pagination.page;\n if (pagination.page_size) params.limit = pagination.page_size;\n }\n\n return this.request<KycAlertListResponse>(\n `/api/v1/kyc/alerts${this.buildQueryString(params)}`\n );\n }\n\n /\n Update a KYC alert\n \n @param alertId - Alert ID\n * @param update - Fields to update (status, assigned_for, reason, alert_type)\n \n @example\n * ```typescript\n * // Assign an alert\n * await client.updateAlert(\"alert_123\", {\n * assigned_for: \"analyst_user_id\",\n * status: \"in_progress\"\n * });\n \n // Resolve an alert\n * await client.updateAlert(\"alert_123\", {\n * status: \"resolved\",\n * reason: \"Customer verified via phone call\"\n * });\n \n // Escalate an alert\n * await client.updateAlert(\"alert_123\", {\n * status: \"escalated\",\n * assigned_for: \"manager_user_id\",\n * reason: \"Requires senior review - suspicious documents\"\n * });\n * ```\n /\n async updateAlert(alertId: string, update: UpdateKycAlertRequest): Promise<void> {\n await this.request(`/api/v1/kyc/alerts/${alertId}`, {\n method: 'PUT',\n body: JSON.stringify(update),\n headers: this.getUserHeaders(),\n });\n }\n\n // ============================================================================\n // KYC Preferences\n // ============================================================================\n\n /\n Get KYC preferences for the tenant\n \n @returns KYC preferences configuration\n \n @example\n * ```typescript\n * const prefs = await client.getPreferences();\n * console.log(`Face verification required: ${prefs.is_face_verification_required}`);\n * console.log(`Required documents: ${prefs.required_document_count}`);\n * ```\n /\n async getPreferences(): Promise<KycPreferences> {\n return this.request<KycPreferences>('/api/v1/kyc/preferences');\n }\n\n /\n Update KYC preferences for the tenant\n \n @param update - Fields to update\n * @returns Updated preferences\n \n @example\n * ```typescript\n * await client.updatePreferences({\n * is_face_verification_required: true,\n * is_address_verification_required: true,\n * required_document_count: 2,\n * reasons: [\n * \"Documents verified\",\n * \"Identity confirmed\",\n * \"Address matched\"\n * ]\n * });\n * ```\n /\n async updatePreferences(\n update: UpdateKycPreferencesRequest\n ): Promise<KycPreferences> {\n return this.request<KycPreferences>('/api/v1/kyc/preferences', {\n method: 'PUT',\n body: JSON.stringify(update),\n });\n }\n\n // ============================================================================\n // Customer Profile Management (Risk Profile Service)\n // ============================================================================\n\n /\n Make a request to the Risk Profile Service\n * Uses riskProfileBaseURL if configured, otherwise falls back to baseURL\n /\n private async riskProfileRequest<T>(\n path: string,\n options: RequestInit = {}\n ): Promise<T> {\n if (!this.riskProfileBaseURL) {\n throw new ValidationError(\n 'Risk Profile Service URL not configured. Please provide riskProfileBaseURL in KycClientConfig.',\n ['riskProfileBaseURL']\n );\n }\n\n return this.request<T>(path, {\n ...options,\n headers: {\n ...this.getUserHeaders(),\n ...(options.headers as Record<string, string>),\n },\n }, this.riskProfileBaseURL);\n }\n\n /\n List customer profiles for the tenant\n \n @param filters - Optional filters (risk_category, entity_type, status, search, etc.)\n * @param pagination - Optional pagination (limit, offset)\n * @returns Paginated list of customer profiles\n \n @example\n * ```typescript\n * const profiles = await client.listCustomerProfiles(\n * { risk_category: 'high', entity_type: 'individual' },\n * { limit: 20, offset: 0 }\n * );\n * console.log(`Found ${profiles.total} profiles`);\n * profiles.profiles.forEach(p => console.log(p.customer_id, p.full_name));\n * ```\n /\n async listCustomerProfiles(\n filters?: CustomerProfileFilters,\n pagination?: { limit?: number; offset?: number }\n ): Promise<CustomerProfileListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n // Array filters (keep as arrays for this API)\n if (filters.risk_category) {\n params.risk_category = Array.isArray(filters.risk_category)\n ? filters.risk_category\n : [filters.risk_category];\n }\n if (filters.entity_type) {\n params.entity_type = Array.isArray(filters.entity_type)\n ? filters.entity_type\n : [filters.entity_type];\n }\n if (filters.status) {\n params.status = Array.isArray(filters.status)\n ? filters.status\n : [filters.status];\n }\n // Simple filters\n addSimpleParams(params, filters as unknown as Record<string, unknown>, [\n 'search', 'is_pep', 'has_sanctions', 'requires_edd', 'sort_by', 'sort_order'\n ]);\n }\n\n if (pagination) {\n addSimpleParams(params, pagination, ['limit', 'offset']);\n }\n\n return this.riskProfileRequest<CustomerProfileListResponse>(\n `/api/v1/risk-dashboard/profiles${this.buildQueryString(params)}`\n );\n }\n\n /\n Get a customer profile by ID\n \n @param profileId - The profile UUID\n * @returns Customer profile details\n \n @example\n * ```typescript\n * const profile = await client.getCustomerProfile('uuid-here');\n * console.log(`Customer: ${profile.full_name}, Risk: ${profile.risk_category}`);\n * ```\n /\n async getCustomerProfile(profileId: string): Promise<CustomerProfile> {\n return this.riskProfileRequest<CustomerProfile>(\n `/api/v1/risk-dashboard/profiles/${profileId}`\n );\n }\n\n /\n Create a new customer profile\n \n A customer profile must exist before submitting KYC verification.\n * The customer_id field will be used as the 'reference' in KYC submissions.\n \n @param profile - Customer profile data\n * @returns Created customer profile\n \n @example\n * ```typescript\n * const profile = await client.createCustomerProfile({\n * customer_id: 'cust_123',\n * entity_type: 'individual',\n * full_name: 'John Doe',\n * email_address: 'john@example.com',\n * country_of_residence: 'US'\n * });\n * console.log(`Created profile: ${profile.id}`);\n \n // Now you can submit KYC using the customer_id as reference\n * await client.submitVerification({\n * reference: profile.customer_id, // 'cust_123'\n * email: 'john@example.com',\n * // ... other fields\n * });\n * ```\n /\n async createCustomerProfile(\n profile: CreateCustomerProfileRequest\n ): Promise<CustomerProfile> {\n return this.riskProfileRequest<CustomerProfile>('/api/v1/profiles', {\n method: 'POST',\n body: JSON.stringify(profile),\n });\n }\n\n // ============================================================================\n // Utility Methods (inherited from BaseClient: healthCheck, updateConfig, getConfig, buildQueryString)\n // ============================================================================\n}\n","/\n TypeScript type definitions for Vesant KYC Service API\n \n These types match the Go API structures in:\n * - services/kyc-service/internal/domain/\n * - services/kyc-service/internal/service/\n * - services/kyc-service/internal/handler/\n /\n\nimport type { PaginationParams, RiskLevel, Reason } from '../core/types';\n\n// Re-export commonly used types from core\nexport type { PaginationParams, RiskLevel };\n\n// ============================================================================\n// KYC Status & Enumerations\n// ============================================================================\n\nexport type KycStatus = 'pending' \| 'accepted' \| 'declined' \| 'review.pending' \| 'unknown';\n\nexport type KycDeclinedCode =\n \| 'KYC_DOCUMENT_EXPIRED'\n \| 'KYC_DOCUMENT_INVALID'\n \| 'KYC_FACE_MISMATCH'\n \| 'KYC_AGE_REQUIREMENT'\n \| 'KYC_DUPLICATE_IDENTITY'\n \| 'KYC_ADDRESS_MISMATCH'\n \| 'KYC_NAME_MISMATCH'\n \| 'KYC_PROVIDER_REJECTED'\n \| 'KYC_DECLINED';\n\nexport const KYC_DECLINED_DESCRIPTIONS: Record<KycDeclinedCode, string> = {\n KYC_DOCUMENT_EXPIRED: 'The submitted document has expired',\n KYC_DOCUMENT_INVALID: 'The submitted document could not be verified',\n KYC_FACE_MISMATCH: 'Face verification did not match the identity document',\n KYC_AGE_REQUIREMENT: 'Age requirement not met',\n KYC_DUPLICATE_IDENTITY: 'This identity has already been verified under another account',\n KYC_ADDRESS_MISMATCH: 'Address verification failed',\n KYC_NAME_MISMATCH: 'Name on document does not match the registered name',\n KYC_PROVIDER_REJECTED: 'Identity verification was rejected by the verification provider',\n KYC_DECLINED: 'Identity verification was declined',\n};\n\nexport type KycAlertStatus = 'pending' \| 'in_progress' \| 'resolved' \| 'closed' \| 'escalated';\n\nexport type KycAlertType = 'kyc' \| 'fraud';\n\nexport type DocumentType = 'id_card' \| 'driving_license' \| 'passport';\n\nexport type ProofType =\n \| 'document'\n \| 'document_two'\n \| 'face'\n \| 'address'\n \| 'additional_document';\n\nexport type SupportedDocumentType = 'id_card' \| 'passport' \| 'driving_license';\n\n// ============================================================================\n// KYC Request Types\n// ============================================================================\n\nexport interface KycRequest {\n id: string;\n reference: string;\n forward_reference?: string;\n tenant_id: string;\n first_name: string;\n middle_name?: string;\n last_name: string;\n dob?: string;\n full_address?: string;\n email?: string;\n\n // Verification Status Flags\n id_verified: boolean;\n address_verified: boolean;\n face_verified: boolean;\n age_verified: boolean;\n\n // Overall Status\n status: KycStatus;\n location?: string;\n identity_hash?: string;\n\n // Preferences at time of submission\n required_document_count: number;\n supported_document_types?: SupportedDocumentType[];\n is_id_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n\n // URLs\n callback_url: string;\n redirect_url?: string;\n\n // Reasons & Warnings\n /* Structured decline reasons. Present when status is `declined`. /\n declined_reasons?: Reason[];\n /* Structured, non-blocking warnings. /\n warning_reasons?: Reason[];\n /* @deprecated Use {@link declined_reasons}. Comma-joined message text. /\n declined_reason?: string;\n /* @deprecated Use the `code` on {@link declined_reasons}. /\n declined_code?: KycDeclinedCode;\n accepted_reason?: string;\n other_reason?: string;\n /* @deprecated Use {@link warning_reasons}. /\n warnings?: Record<string, Record<string, string>>;\n\n // Block Action\n /\n Tenant app should block onboarding/the action when true. Set when a\n * failed verification matches a per-event KYC alert rule with the `block`\n * reaction; sticky once set (a later non-blocking update won't clear it).\n /\n block: boolean;\n /\n Names the configured verification that triggered the block (e.g.\n * `document_verification`, `face_verification`, `address_verification`,\n * `age_verification`). Empty when {@link block} is false.\n /\n block_reason?: string;\n\n // Relationships\n proofs?: Proof[];\n alerts?: KycAlert[];\n risk_profile?: KycCustomerProfile;\n\n created_at: string;\n updated_at: string;\n}\n\nexport interface Proof {\n id: string;\n kyc_id: string;\n type: ProofType;\n document: string;\n document_number?: string;\n created_at: string;\n}\n\nexport interface ProofDownloadURL {\n type: ProofType;\n url: string;\n expires_at: string;\n}\n\n// ============================================================================\n// KYC Customer Profile (Risk Profile Reference)\n// ============================================================================\n\nexport interface KycCustomerProfile {\n id: string;\n tenant_id: string;\n customer_id: string;\n first_name?: string;\n last_name?: string;\n email?: string;\n risk_score: number;\n risk_level: RiskLevel;\n kyc_status?: string;\n pep_status?: boolean;\n sanctions_status?: boolean;\n created_at: string;\n updated_at: string;\n}\n\n// ============================================================================\n// KYC Alert Types\n// ============================================================================\n\nexport interface KycAlert {\n id: string;\n kyc_id: string;\n tenant_id: string;\n alert_type: KycAlertType;\n alert_text: string;\n risk: RiskLevel;\n assigned_for?: string;\n reason?: string;\n status: KycAlertStatus;\n created_at: string;\n updated_at: string;\n}\n\nexport interface KycAlertFilters {\n kyc_id?: string \| string[];\n alert_type?: KycAlertType \| KycAlertType[];\n assigned_for?: string \| string[];\n status?: KycAlertStatus \| KycAlertStatus[];\n risk?: RiskLevel \| RiskLevel[];\n search?: string;\n fromDate?: string;\n toDate?: string;\n sort_by?: string;\n order?: 'ASC' \| 'DESC';\n}\n\nexport interface KycAlertListResponse {\n alerts: KycAlert[];\n pagination: KycPagination;\n}\n\nexport interface UpdateKycAlertRequest {\n assigned_for?: string;\n reason?: string;\n alert_type?: KycAlertType;\n status?: KycAlertStatus;\n}\n\n// ============================================================================\n// KYC Preferences Types\n// ============================================================================\n\n/\n Threshold-gated trigger for transaction events. Each rule is\n * self-contained — there is no umbrella flag.\n \n - `enabled=false` → event blocked.\n * - `enabled=true`, `threshold=0` (or null/omitted) → every event of this\n * type triggers Event-Based Face Verification, regardless of amount.\n * - `enabled=true`, `threshold>0` → only amounts `>= threshold` trigger.\n /\nexport interface EventBasedFaceVerificationThresholdTrigger {\n enabled: boolean;\n /* USD threshold; 0 / null / omitted means \"any amount\". /\n threshold: number;\n}\n\n/\n Rate-of-occurrence trigger (used by `high_frequency_betting`). The\n * tenant tells the server how many events have happened over how many\n * minutes via the request body (`event_count`, `event_window_minutes`);\n * the server triggers when `event_count >= count` AND\n * `event_window_minutes <= window_minutes`. Either bound of 0 means\n * \"don't enforce that bound\".\n /\nexport interface EventBasedFaceVerificationFrequencyTrigger {\n enabled: boolean;\n /* Minimum number of events; 0 / null / omitted means \"any count\". /\n count: number;\n /* Maximum lookback window in minutes; 0 / null / omitted means \"any window\". /\n window_minutes: number;\n}\n\n/* Events that can trigger Event-Based Face Verification for a tenant. /\nexport interface EventBasedFaceVerificationTriggers {\n // Account-sensitive events\n login: boolean;\n password_change: boolean;\n name_change: boolean;\n phone_number_change: boolean;\n two_factor_auth_change: boolean;\n new_device_or_location: boolean;\n device_fingerprint_change: boolean;\n payment_method_change: boolean;\n\n // Transaction events — each rule is self-contained; there is no\n // umbrella flag. To enable a transaction event, set its `enabled`\n // field to true (and configure the relevant threshold / count /\n // window). To disable, set `enabled` to false.\n deposit: EventBasedFaceVerificationThresholdTrigger;\n withdrawal: EventBasedFaceVerificationThresholdTrigger;\n large_bet_placement: EventBasedFaceVerificationThresholdTrigger;\n high_frequency_betting: EventBasedFaceVerificationFrequencyTrigger;\n account_balance_transfer: boolean;\n}\n\n/\n Reactions taken when a customer exhausts the Event-Based Face Verification retry limit.\n * `trigger_alert` is enforced by the server (creates a KYC alert);\n * `enforce_logout` and `freeze_account` are forwarded to the tenant app\n * via the callback `data` field for it to enforce.\n /\nexport interface EventBasedFaceVerificationReactions {\n /* Retries after the first attempt; total submissions = this + 1. /\n max_retry_attempts: number;\n trigger_alert: boolean;\n enforce_logout: boolean;\n freeze_account: boolean;\n freeze_duration_minutes: number;\n}\n\nexport interface KycPreferences {\n id: string;\n tenant_id: string;\n approve_kyc_reasons: string[];\n is_document_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n /* Master switch for the Event-Based Face Verification feature. /\n is_reuse_kyc_enabled?: boolean;\n min_age: number;\n max_age: number;\n required_document_count: number;\n critical_risk_score: number;\n high_risk_score: number;\n medium_risk_score: number;\n supported_document_types: SupportedDocumentType[];\n /* Per-event triggers for Event-Based Face Verification. /\n reuse_kyc_triggers?: EventBasedFaceVerificationTriggers;\n /* Retry / reaction policy for Event-Based Face Verification. /\n reuse_kyc_reactions?: EventBasedFaceVerificationReactions;\n created_at: string;\n updated_at: string;\n}\n\nexport interface UpdateKycPreferencesRequest {\n reasons?: string[];\n is_document_verification_required?: boolean;\n is_face_verification_required?: boolean;\n is_address_verification_required?: boolean;\n is_age_verification_required?: boolean;\n is_reuse_kyc_enabled?: boolean;\n min_age?: number;\n max_age?: number;\n required_document_count?: number;\n critical_risk_score?: number;\n high_risk_score?: number;\n medium_risk_score?: number;\n supported_document_types?: SupportedDocumentType[];\n /* Partial update — only the events present here are changed. /\n reuse_kyc_triggers?: Partial<EventBasedFaceVerificationTriggers>;\n /* Partial update — only the keys present here are changed. /\n reuse_kyc_reactions?: Partial<EventBasedFaceVerificationReactions>;\n}\n\n// ============================================================================\n// Document Verification Request Types\n// ============================================================================\n\nexport interface Name {\n first_name?: string;\n middle_name?: string;\n last_name?: string;\n full_name?: string;\n}\n\nexport interface SubmittedDocument {\n /* Base64 encoded document image /\n proof: string;\n /* Base64 additional document image (back side, etc.) /\n additional_proof?: string;\n /* Document number for search/verification /\n document_number?: string;\n /* Document types to verify against /\n selected_type?: DocumentType[];\n /* Extracted/provided name /\n name?: Name;\n /* Date of birth (YYYY-MM-DD) /\n dob?: string;\n /* Issue date (YYYY-MM-DD) /\n issue_date?: string;\n /* Expiry date (YYYY-MM-DD) /\n expiry_date?: string;\n /* Gender /\n gender?: string;\n}\n\nexport interface FaceProof {\n /* Base64 encoded face image or selfie /\n proof: string;\n}\n\nexport interface DocumentVerificationRequest {\n /* Customer reference ID /\n reference: string;\n /* Callback URL for async verification results /\n callback_url: string;\n /* Customer email /\n email: string;\n /* Country code (ISO 3166-1 alpha-2) /\n country: string;\n /* Language code /\n language: string;\n /* Full address for verification /\n full_address?: string;\n /* Base64 encoded address proof document /\n address_proof?: string;\n /* Primary document /\n document: SubmittedDocument;\n /* Secondary document (optional) /\n document_two?: SubmittedDocument;\n /* Face verification proof (optional) /\n face?: FaceProof;\n /* Additional metadata /\n token?: string;\n}\n\nexport interface DocumentVerificationResponse {\n id: string;\n reference: string;\n status: KycStatus;\n verification_url?: string;\n message?: string;\n}\n\n// ============================================================================\n// KYC Status Update Types\n// ============================================================================\n\nexport interface UpdateKycStatusRequest {\n /* Shufti reference or KYC ID /\n reference: string;\n /* Target status /\n status: KycStatus;\n /* Acceptance/decline reason /\n reason?: string;\n /* Shufti warnings data /\n warnings?: Record<string, Record<string, string>>;\n}\n\n// ============================================================================\n// KYC Submit Link Request Types\n// ============================================================================\n\nexport interface RequestKycSubmitLinkRequest {\n /* User ID to generate KYC submission link for /\n user_id: string;\n /* URL to redirect user after KYC submission (optional) /\n redirect_url?: string;\n /* URL to receive callback notifications via POST request when KYC status changes (optional) /\n callback_url?: string;\n /\n Event that triggered the KYC request. Valid values: \"onboarding\",\n * \"first_withdrawal\", \"first_purchase\", \"manual\". The tenant's KYC\n * verification trigger preferences decide, per event, whether KYC is\n * required (`kyc_required` in the response). \"manual\" always requires\n * KYC and honors the tenant's allow-skip-on-manual option (`can_skip`).\n * Omitted or unknown values default to KYC required with no skip.\n /\n trigger_event?: string;\n /\n Registered customer identity data (optional). Seeds the customer's risk\n * profile so document verification can cross-check the submitted document\n * against trusted reference data (name/DOB match, address verification).\n * Fields never overwrite data already on the profile.\n /\n customer_data?: KycCustomerData;\n}\n\n/\n Customer identity data supplied by your platform on a submit-link request.\n * Mirrors the geolocation `customer_data` contract. Every field is optional\n * and never overwrites data already on the customer's risk profile.\n /\nexport interface KycCustomerData {\n /\n Customer's registered full name. Used to match the OCR-extracted name\n * on the submitted document.\n /\n full_name?: string;\n /\n Customer's registered date of birth. ISO 8601 date (\"1999-06-02\") or an\n * RFC 3339 timestamp (\"1986-09-06T18:30:00.000+00:00\", as produced by\n * `Date.prototype.toISOString()`) — for timestamps the date portion is\n * used. Used for DOB matching against the submitted document.\n /\n date_of_birth?: string;\n /* Customer's email address /\n email?: string;\n /* Customer's phone number /\n phone?: string;\n /* Customer's residential address. Used for address verification. /\n address?: string;\n /* Customer's country of residence /\n country?: string;\n}\n\n/\n Trigger events that can request Event-Based Face Verification.\n \n Account-sensitive: any sensitive change to the account profile.\n * Transaction events: covered by the per-event rules in\n * `EventBasedFaceVerificationTriggers` (`deposit`, `withdrawal`, `large_bet_placement`,\n * `high_frequency_betting`, `account_balance_transfer`).\n /\nexport type EventBasedFaceVerificationEvent =\n \| 'login'\n \| 'password_change'\n \| 'name_change'\n \| 'phone_number_change'\n \| 'two_factor_auth_change'\n \| 'new_device_or_location'\n \| 'device_fingerprint_change'\n \| 'payment_method_change'\n \| 'deposit'\n \| 'withdrawal'\n \| 'large_bet_placement'\n \| 'high_frequency_betting'\n \| 'account_balance_transfer';\n\nexport interface CreateEventBasedFaceVerificationSessionRequest {\n /* Unique reference for the KYC session (e.g., customer ID or transaction ID) /\n reference: string;\n /* Customer ID to associate with the KYC session /\n customer_id: string;\n /\n The triggering event. One of the `EventBasedFaceVerificationEvent` union members.\n * Required — when empty, the server falls through to the unknown-event\n * passthrough and allows the request silently.\n /\n event: EventBasedFaceVerificationEvent;\n /\n USD amount associated with the event. Required for threshold-gated\n * events (`deposit`, `withdrawal`, `large_bet_placement`); ignored for\n * everything else. Missing/zero with a non-zero threshold blocks the\n * session.\n /\n amount?: number;\n /\n Number of qualifying events the customer has performed in the\n * window described by `event_window_minutes`. Required for\n * frequency-gated events (`high_frequency_betting`); ignored for\n * everything else.\n /\n event_count?: number;\n /\n Lookback window (in minutes) the tenant counted `event_count` over.\n * Required for frequency-gated events alongside `event_count`. A\n * window larger than the tenant's configured `window_minutes`\n * implies a slower rate than \"high frequency\" and blocks the session.\n /\n event_window_minutes?: number;\n /* URL to redirect user after validate the facial submission (optional) /\n redirect_url?: string;\n /* URL to receive callback notifications via POST request when Event-Based Face Verification status changes (optional) /\n callback_url?: string;\n}\n\nexport interface SubmitEventBasedFaceVerificationSessionRequest {\n /* Event-Based Face Verification session token generated from createEventBasedFaceVerificationSession /\n token: string;\n /* Base64 encoded face image or selfie for verification /\n proof: string;\n /* Unique reference for the KYC session (e.g., customer ID or transaction ID) /\n reference?: string;\n /\n Optional capture telemetry (JSON string): the face-detection\n * bounding-box samples recorded in the moments before capture. Attached\n * automatically by `FaceCaptureModal` when in-modal detection is active;\n * omit when building a custom capture UI without detection. Stored\n * verbatim server-side for audit/review — a weak presence signal, not\n * certified anti-spoofing.\n /\n liveness_artifact?: string;\n}\n\nexport interface RequestKycSubmitLinkResponse {\n /* Generated KYC submission redirect URL /\n link: string;\n /* KYC request ID /\n kyc_id: string;\n /\n Whether KYC is required for the reported `trigger_event`, per the\n * tenant's verification trigger preferences. `false` when the trigger\n * is disabled for the tenant, or when the customer is already verified\n * (in that case `link` and `kyc_id` are empty).\n /\n kyc_required: boolean;\n /\n Whether the user may skip verification. Only `true` for\n * `trigger_event: \"manual\"` when the tenant enables allow-skip-on-manual,\n * or when the customer is already verified.\n /\n can_skip: boolean;\n}\n\n/* Device class detected by the SDK (purely client-side — server doesn't care). /\nexport type EventBasedFaceVerificationDeviceType = 'mobile' \| 'desktop';\n\nexport interface CreateEventBasedFaceVerificationSessionResponse {\n /* Event-Based Face Verification session reference (echo of the request reference) /\n reference: string;\n /* Generated Event-Based Face Verification session token, valid 10 minutes /\n token: string;\n /\n Empty string when Event-Based Face Verification is required. When `is_required` is\n * false, this contains the human-readable reason (e.g. feature\n * disabled, threshold not met, customer has no prior KYC).\n /\n reason: string;\n /* Whether the caller must complete the face capture before proceeding /\n is_required: boolean;\n /\n Public HTTPS handoff URL the SDK encodes into a QR code on desktop.\n * The mobile device scans it, lands on the tenant frontend's\n * /reuse-kyc-submit page, and completes the face capture there. Empty\n * when the server has no `BASE_URL_FRONTEND` configured — the SDK\n * falls back to building its own URL in that case.\n /\n link: string;\n /* Failed face-capture attempts so far on this session. 0 on a fresh session. /\n attempts: number;\n /\n Total submissions permitted before reactions fire\n * (`reuse_kyc_reactions.max_retry_attempts + 1`).\n /\n max_attempts: number;\n}\n\n/\n Reaction outcome returned on every face-submit callback. Tenant apps\n * use this to decide whether to allow another retry, end the session,\n * or freeze the account. Reaction flags are only populated when\n * `retry_limit_exceeded` is true.\n /\nexport interface EventBasedFaceVerificationReactionResult {\n /* Submissions the customer still has before the retry limit fires. /\n retries_remaining: number;\n /* True once the latest failed attempt exhausts the retry policy. /\n retry_limit_exceeded: boolean;\n trigger_alert: boolean;\n enforce_logout: boolean;\n freeze_account: boolean;\n /* Tenant app should block the action/account when true. /\n block: boolean;\n freeze_duration_minutes: number;\n /* Set when an alert was raised on the dashboard. /\n alert_id?: string;\n}\n\n/\n Shape of the webhook body POSTed to `callback_url` after a Event-Based Face Verification\n * submission completes (also returned synchronously from\n * `submitEventBasedFaceVerificationSession`).\n /\nexport interface EventBasedFaceVerificationCallback {\n event: 'reuse_kyc';\n reference: string;\n resource_id: string;\n status: KycStatus;\n /\n True when the tenant app should block the action/account. Mirrors the\n * `block` reaction on {@link data} at the top level of the callback so\n * consumers can branch without inspecting `data`. Omitted when false.\n /\n block?: boolean;\n /* Names the event/verification that triggered the block. Omitted when not blocked. /\n block_reason?: string;\n /* Structured decline reasons. /\n declined_reasons?: Reason[];\n /* @deprecated Use {@link declined_reasons}. /\n declined_reason?: string;\n /* @deprecated Use structured reasons. /\n warnings?: Record<string, Record<string, string>>;\n data: EventBasedFaceVerificationReactionResult;\n}\n\n/\n Server-side handoff session backed by Redis (TTL: 15 minutes). Shared\n * with the normal KYC mobile/desktop handoff. Desktop clients poll this\n * to detect when a mobile device has attached to the same token via QR.\n /\nexport interface KycHandoffSession {\n document: string;\n document_backside: string;\n document_two: string;\n document_two_backside: string;\n address: string;\n face: string;\n /* True after a mobile device hits PUT /api/v1/kyc/session/connect. /\n mobile_connected: boolean;\n /* True after the (normal-KYC) document submission completes; unused for Event-Based Face Verification. /\n is_submitted: boolean;\n}\n\n// ============================================================================\n// KYC Status Check Types\n// ============================================================================\n\nexport interface CheckKycStatusRequest {\n /* User ID to check KYC status for /\n user_id: string;\n /* Authentication token /\n kyc_id: string;\n}\n\n/\n Response from checkKycStatus. Always returns the same shape.\n \n `additional_data` is `null` when `status === 'pending'`.\n * When `status !== 'pending'`, `additional_data` contains the full KYC record\n * including document details, proofs, and the customer's risk profile.\n /\nexport interface CheckKycStatusResponse {\n id: string;\n forward_reference: string;\n status: KycStatus;\n id_verified: boolean;\n address_verified: boolean;\n face_verified: boolean;\n age_verified: boolean;\n /* Structured decline reasons. Present when status is `declined`. /\n declined_reasons?: Reason[];\n /* Structured, non-blocking warnings. /\n warning_reasons?: Reason[];\n /* @deprecated Use {@link declined_reasons}. /\n declined_reason?: string;\n /* @deprecated Use the `code` on {@link declined_reasons}. /\n declined_code?: KycDeclinedCode;\n other_reason?: string;\n accepted_reason?: string;\n /* @deprecated Use {@link warning_reasons}. /\n warnings?: Record<string, Record<string, string>>;\n required_document_count: number;\n supported_document_types?: SupportedDocumentType[];\n is_id_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n created_at: string;\n /* Full KYC record with document details, proofs, and risk profile. Null when status is 'pending'. /\n additional_data: KycRequest \| null;\n}\n\nexport interface RequestAdditionalDocumentsRequest {\n /* KYC request ID /\n id: string;\n /* Document types to request /\n document_types: ProofType[];\n /* Message to customer /\n message?: string;\n}\n\n// ============================================================================\n// KYC Overview & Statistics Types\n// ============================================================================\n\nexport interface KycOverview {\n total: number;\n pending: number;\n approved: number;\n high_risk: number;\n rejected: number;\n id_verified: number;\n address_verified: number;\n face_verified: number;\n rejections: number;\n total_alerts: number;\n pending_alerts: number;\n resolved_alerts: number;\n}\n\n// ============================================================================\n// KYC Request Listing Types\n// ============================================================================\n\nexport interface KycRequestFilters {\n status?: KycStatus \| KycStatus[];\n search?: string;\n fromDate?: string;\n toDate?: string;\n sortBy?: string;\n order?: 'ASC' \| 'DESC';\n}\n\nexport interface KycPagination {\n limit: number;\n page: number;\n total: number;\n totalPages: number;\n}\n\nexport interface KycRequestListResponse {\n data: KycRequest[];\n pagination: KycPagination;\n}\n\n// ============================================================================\n// Customer Profile Types (Re-exported from risk-profile module)\n// ============================================================================\n\n// Import types from risk-profile module for use in KYC client\nimport type {\n CustomerProfile as RiskProfileCustomerProfile,\n CreateProfileRequest,\n ProfileFilters,\n ProfileListResponse,\n} from '../risk-profile/types';\n\n// Export types for internal use in KYC client (aliased to avoid conflicts with main exports)\n// Users should import CustomerProfile, CreateProfileRequest, etc. from 'vesant-sdk/risk-profile'\nexport type {\n RiskProfileCustomerProfile as CustomerProfile,\n CreateProfileRequest as CreateCustomerProfileRequest,\n ProfileFilters as CustomerProfileFilters,\n ProfileListResponse as CustomerProfileListResponse,\n};\n\n// ============================================================================\n// SDK Configuration Types\n// ============================================================================\n\nexport interface KycClientConfig {\n /* Base URL of the KYC Service API (e.g., \"http://localhost:8088\") /\n baseURL: string;\n\n /* Base URL of the Customer Risk Profile Service API (e.g., \"http://localhost:8094\") /\n riskProfileBaseURL?: string;\n\n /* Tenant ID for multi-tenancy /\n tenantId: string;\n\n /* API key or JWT token for authentication /\n apiKey?: string;\n\n /* User ID for operations requiring user context /\n userId?: string;\n\n /* Custom headers to include in every request /\n headers?: Record<string, string>;\n\n /* Request timeout in milliseconds (default: 10000) /\n timeout?: number;\n\n /* Enable debug logging /\n debug?: boolean;\n\n /* Environment mode - 'sandbox' uses isolated sandbox data /\n environment?: 'production' \| 'sandbox';\n}\n\n// ============================================================================\n// React Hook Types\n// ============================================================================\n\n/* Base hook state with loading and error /\ninterface BaseHookState {\n loading: boolean;\n error: Error \| null;\n}\n\n/* Base options for hooks with auto-fetch capability /\ninterface BaseAutoFetchOptions {\n autoFetch?: boolean;\n}\n\n/* Base options for hooks with polling capability /\ninterface BasePollOptions extends BaseAutoFetchOptions {\n pollInterval?: number;\n}\n\n/* Base options for list hooks with filters and pagination */\ninterface BaseListOptions<TFilters> extends BasePollOptions {\n filters?: TFilters;\n pagination?: PaginationParams;\n}\n\nexport interface UseKycSubmissionOptions {\n onComplete?: (result: DocumentVerificationResponse) => void;\n onError?: (error: Error) => void;\n}\n\nexport interface UseKycSubmissionResult extends BaseHookState {\n submit: (request: DocumentVerificationRequest) => Promise<DocumentVerificationResponse>;\n submission: DocumentVerificationResponse \| null;\n reset: () => void;\n}\n\nexport type UseKycRequestsOptions = BaseListOptions<KycRequestFilters>;\n\nexport interface UseKycRequestsResult extends BaseHookState {\n requests: KycRequest[];\n pagination: KycPagination \| null;\n fetchRequests: (filters?: KycRequestFilters, pagination?: PaginationParams) => Promise<void>;\n getRequest: (id: string) => Promise<KycRequest>;\n updateStatus: (reference: string, status: KycStatus, reason?: string) => Promise<void>;\n refresh: () => Promise<void>;\n}\n\nexport type UseKycAlertsOptions = BaseListOptions<KycAlertFilters>;\n\nexport interface UseKycAlertsResult extends BaseHookState {\n alerts: KycAlert[];\n pagination: KycPagination \| null;\n fetchAlerts: (filters?: KycAlertFilters, pagination?: PaginationParams) => Promise<void>;\n getAlert: (id: string) => Promise<KycAlert>;\n updateAlert: (id: string, update: UpdateKycAlertRequest) => Promise<void>;\n refresh: () => Promise<void>;\n}\n\nexport interface UseKycOverviewOptions extends BaseAutoFetchOptions {\n fromDate?: string;\n toDate?: string;\n}\n\nexport interface UseKycOverviewResult extends BaseHookState {\n overview: KycOverview \| null;\n refresh: (fromDate?: string, toDate?: string) => Promise<void>;\n}\n\nexport interface UseKycPreferencesResult extends BaseHookState {\n preferences: KycPreferences \| null;\n updatePreferences: (update: UpdateKycPreferencesRequest) => Promise<void>;\n refresh: () => Promise<void>;\n}\n"]}
1	+ {"version":3,"sources":["../../src/core/auth.ts","../../src/core/errors.ts","../../src/core/circuit-breaker.ts","../../src/core/rate-limiter.ts","../../src/core/logger.ts","../../src/core/version.ts","../../src/shared/browser-utils.ts","../../src/core/client.ts","../../src/kyc/client.ts","../../src/kyc/types.ts"],"names":[],"mappings":";AAmCO,IAAM,uBAAN,MAAoD;AAAA,EACzD,YAA6B,MAAA,EAAgB;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAAiB;AAAA,EAE9C,MAAM,aAAA,GAAgD;AACpD,IAAA,OAAO,IAAA,CAAK,SAAS,EAAE,MAAA,EAAQ,UAAU,KAAA,EAAO,IAAA,CAAK,QAAO,GAAI,IAAA;AAAA,EAClE;AAAA,EAEA,UAAA,GAAsB;AACpB,IAAA,OAAO,KAAA;AAAA,EACT;AACF,CAAA;;;ACtCO,IAAM,WAAA,GAAN,MAAM,YAAA,SAAoB,KAAA,CAAM;AAAA,EAGrC,WAAA,CACE,OAAA,EACO,IAAA,EACA,UAAA,EACA,OAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAJN,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,YAAA,CAAY,SAAS,CAAA;AAAA,EACnD;AACF,CAAA;AAOO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,WAAA,CAAY;AAAA,EAC5C,WAAA,CAAY,SAAwB,aAAA,EAAyB;AAC3D,IAAA,KAAA,CAAM,SAAS,eAAe,CAAA;AADI,IAAA,IAAA,CAAA,aAAA,GAAA,aAAA;AAElC,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF,CAAA;AAEO,IAAM,eAAA,GAAN,MAAM,gBAAA,SAAwB,WAAA,CAAY;AAAA,EAC/C,WAAA,CAAY,SAAiB,MAAA,EAAmB;AAC9C,IAAA,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,GAAA,EAAK,EAAE,QAAQ,CAAA;AAClD,IAAA,IAAA,CAAK,IAAA,GAAO,iBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,gBAAA,CAAgB,SAAS,CAAA;AAAA,EACvD;AACF,CAAA;AAEO,IAAM,uBAAA,GAAN,MAAM,wBAAA,SAAgC,WAAA,CAAY;AAAA,EACvD,WAAA,CAAY,UAAkB,qBAAA,EAAuB;AACnD,IAAA,KAAA,CAAM,OAAA,EAAS,uBAAuB,GAAG,CAAA;AACzC,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,wBAAA,CAAwB,SAAS,CAAA;AAAA,EAC/D;AACF,CAAA;AAUO,IAAM,mBAAA,GAAN,MAAM,oBAAA,SAA4B,WAAA,CAAY;AAAA,EACnD,WAAA,CAAY,UAAkB,uBAAA,EAAyB;AACrD,IAAA,KAAA,CAAM,OAAA,EAAS,wBAAwB,GAAG,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,oBAAA,CAAoB,SAAS,CAAA;AAAA,EAC3D;AACF,CAAA;AAEO,IAAM,cAAA,GAAN,MAAM,eAAA,SAAuB,WAAA,CAAY;AAAA,EAC9C,YAAmB,UAAA,EAAqB;AACtC,IAAA,KAAA,CAAM,qBAAA,EAAuB,qBAAA,EAAuB,GAAA,EAAK,EAAE,YAAY,CAAA;AADtD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAEjB,IAAA,IAAA,CAAK,IAAA,GAAO,gBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,eAAA,CAAe,SAAS,CAAA;AAAA,EACtD;AACF,CAAA;AAEO,IAAM,YAAA,GAAN,MAAM,aAAA,SAAqB,WAAA,CAAY;AAAA,EAC5C,YAAmB,OAAA,EAAiB;AAClC,IAAA,KAAA,CAAM,yBAAyB,OAAO,CAAA,EAAA,CAAA,EAAM,WAAW,GAAA,EAAK,EAAE,SAAS,CAAA;AADtD,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAEjB,IAAA,IAAA,CAAK,IAAA,GAAO,cAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,aAAA,CAAa,SAAS,CAAA;AAAA,EACpD;AACF,CAAA;AAcO,IAAM,uBAAA,GAAN,MAAM,wBAAA,SAAgC,WAAA,CAAY;AAAA,EACvD,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,iEAAA,EAA8D,wBAAwB,GAAG,CAAA;AAC/F,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AACZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,wBAAA,CAAwB,SAAS,CAAA;AAAA,EAC/D;AACF,CAAA;;;AC5EO,IAAM,iBAAN,MAAqB;AAAA,EAU1B,WAAA,CAAY,MAAA,GAA+B,EAAC,EAAG;AAT/C,IAAA,IAAA,CAAQ,KAAA,GAA6B,QAAA;AACrC,IAAA,IAAA,CAAQ,QAAA,GAAW,CAAA;AACnB,IAAA,IAAA,CAAQ,SAAA,GAAY,CAAA;AACpB,IAAA,IAAA,CAAQ,eAAA,GAAiC,IAAA;AAOvC,IAAA,IAAA,CAAK,gBAAA,GAAmB,OAAO,gBAAA,IAAoB,CAAA;AACnD,IAAA,IAAA,CAAK,YAAA,GAAe,OAAO,YAAA,IAAgB,GAAA;AAC3C,IAAA,IAAA,CAAK,gBAAA,GAAmB,OAAO,gBAAA,IAAoB,CAAA;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKA,UAAA,GAAsB;AACpB,IAAA,IAAI,IAAA,CAAK,UAAU,QAAA,EAAU;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,IAAI,IAAA,CAAK,UAAU,MAAA,EAAQ;AACzB,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,IAAI,KAAK,eAAA,IAAmB,GAAA,GAAM,IAAA,CAAK,eAAA,IAAmB,KAAK,YAAA,EAAc;AAC3E,QAAA,IAAA,CAAK,KAAA,GAAQ,WAAA;AACb,QAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,QAAA,OAAO,IAAA;AAAA,MACT;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkB;AAChB,IAAA,IAAI,IAAA,CAAK,UAAU,WAAA,EAAa;AAC9B,MAAA,IAAA,CAAK,SAAA,EAAA;AACL,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,gBAAA,EAAkB;AAC3C,QAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AACb,QAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,QAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,QAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AAAA,MACzB;AAAA,IACF,CAAA,MAAA,IAAW,IAAA,CAAK,KAAA,KAAU,QAAA,EAAU;AAClC,MAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAAA,IAClB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkB;AAChB,IAAA,IAAA,CAAK,QAAA,EAAA;AACL,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAK,GAAA,EAAI;AAEhC,IAAA,IAAI,IAAA,CAAK,UAAU,WAAA,EAAa;AAC9B,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AACb,MAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AAAA,IACnB,WAAW,IAAA,CAAK,KAAA,KAAU,YAAY,IAAA,CAAK,QAAA,IAAY,KAAK,gBAAA,EAAkB;AAC5E,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AAAA,IACf;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAkC;AAChC,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,iBAAiB,IAAA,CAAK,eAAA;AAAA,MACtB,aAAA,EACE,KAAK,KAAA,KAAU,MAAA,IAAU,KAAK,eAAA,GAC1B,IAAA,CAAK,eAAA,GAAkB,IAAA,CAAK,YAAA,GAC5B;AAAA,KACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AACb,IAAA,IAAA,CAAK,QAAA,GAAW,CAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,CAAA;AACjB,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAA;AAAA,EACzB;AACF,CAAA;;;ACtGO,IAAM,mBAAN,MAAuB;AAAA,EAAvB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAAuB,IAAA;AAC/B,IAAA,IAAA,CAAQ,SAAA,GAA2B,IAAA;AACnC,IAAA,IAAA,CAAQ,KAAA,GAAuB,IAAA;AAC/B,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,kBAAkB,OAAA,EAAwB;AACxC,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,CAAA;AAC7C,IAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,uBAAuB,CAAA;AACrD,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,CAAA;AAC7C,IAAA,MAAM,UAAA,GAAa,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAA;AAE5C,IAAA,IAAI,UAAU,IAAA,EAAM,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,OAAO,EAAE,CAAA;AACnD,IAAA,IAAI,cAAc,IAAA,EAAM,IAAA,CAAK,SAAA,GAAY,QAAA,CAAS,WAAW,EAAE,CAAA;AAC/D,IAAA,IAAI,UAAU,IAAA,EAAM,IAAA,CAAK,KAAA,GAAQ,QAAA,CAAS,OAAO,EAAE,CAAA;AACnD,IAAA,IAAI,eAAe,IAAA,EAAM,IAAA,CAAK,UAAA,GAAa,QAAA,CAAS,YAAY,EAAE,CAAA;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,GAA2B;AACzB,IAAA,IAAI,IAAA,CAAK,SAAA,KAAc,IAAA,IAAQ,IAAA,CAAK,aAAa,CAAA,EAAG;AAElD,MAAA,IAAI,IAAA,CAAK,UAAU,IAAA,EAAM;AACvB,QAAA,MAAM,MAAM,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI,CAAA;AACxC,QAAA,IAAI,GAAA,IAAO,KAAK,KAAA,EAAO;AAErB,UAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,UAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,UAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,UAAA,OAAO,KAAA;AAAA,QACT;AAAA,MACF;AACA,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAA6B;AAC3B,IAAA,OAAO;AAAA,MACL,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,YAAY,IAAA,CAAK;AAAA,KACnB;AAAA,EACF;AACF,CAAA;;;ACrEO,SAAS,mBAAA,GAA8B;AAC5C,EAAA,OAAO;AAAA,IACL,KAAA,CAAM,SAAiB,IAAA,EAAgC;AACrD,MAAA,OAAA,CAAQ,IAAI,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACvE,CAAA;AAAA,IACA,IAAA,CAAK,SAAiB,IAAA,EAAgC;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACxE,CAAA;AAAA,IACA,IAAA,CAAK,SAAiB,IAAA,EAAgC;AACpD,MAAA,OAAA,CAAQ,KAAK,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACxE,CAAA;AAAA,IACA,KAAA,CAAM,SAAiB,IAAA,EAAgC;AACrD,MAAA,OAAA,CAAQ,MAAM,CAAA,aAAA,EAAgB,OAAO,IAAI,IAAA,KAAS,MAAA,GAAY,OAAO,EAAE,CAAA;AAAA,IACzE;AAAA,GACF;AACF;;;ACdO,IAAM,WAAA,GAAc,OAAA;;;ACOpB,SAAS,YAAA,GAAuB;AACrC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,CAAO,UAAA,EAAY;AACtD,IAAA,OAAO,OAAO,UAAA,EAAW;AAAA,EAC3B;AAGA,EAAA,OAAO,sCAAA,CAAuC,OAAA,CAAQ,OAAA,EAAS,CAAC,CAAA,KAAM;AACpE,IAAA,MAAM,CAAA,GAAK,IAAA,CAAK,MAAA,EAAO,GAAI,EAAA,GAAM,CAAA;AACjC,IAAA,MAAM,CAAA,GAAI,CAAA,KAAM,GAAA,GAAM,CAAA,GAAK,IAAI,CAAA,GAAO,CAAA;AACtC,IAAA,OAAO,CAAA,CAAE,SAAS,EAAE,CAAA;AAAA,EACtB,CAAC,CAAA;AACH;;;ACQO,IAAe,aAAf,MAA0B;AAAA,EAQ/B,YAAY,MAAA,EAA0B;AAJtC,IAAA,IAAA,CAAQ,cAAA,GAAwC,IAAA;AAChD,IAAA,IAAA,CAAQ,gBAAA,GAA4C,IAAA;AAIlD,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,IAAA,EAAK,EAAG;AAC3B,MAAA,MAAM,IAAI,eAAA,CAAgB,oDAAA,EAAsD,CAAC,SAAS,CAAC,CAAA;AAAA,IAC7F;AACA,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,IAAA,EAAK,EAAG;AAC5B,MAAA,MAAM,IAAI,eAAA,CAAgB,qDAAA,EAAuD,CAAC,UAAU,CAAC,CAAA;AAAA,IAC/F;AAIA,IAAA,IAAI,OAAO,UAAU,WAAA,EAAa;AAChC,MAAA,MAAM,IAAI,WAAA;AAAA,QACR,mGAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,YAAA,GAAe,MAAA,CAAO,YAAA,IAAgB,EAAC;AAC5C,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA,CAAO,MAAA,IAAU,mBAAA,EAAoB;AAGnD,IAAA,IAAI,cAAc,MAAA,CAAO,WAAA;AACzB,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,EAAA;AAChC,IAAA,IAAI,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA,EAAG;AACjC,MAAA,IAAI,gBAAgB,YAAA,EAAc;AAChC,QAAA,IAAA,CAAK,MAAA,CAAO,KAAK,gGAA2F,CAAA;AAAA,MAC9G;AACA,MAAA,WAAA,GAAc,SAAA;AAAA,IAChB,WAAW,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA,IAAK,gBAAgB,SAAA,EAAW;AACrE,MAAA,IAAA,CAAK,MAAA,CAAO,KAAK,2IAAsI,CAAA;AAAA,IACzJ;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,MAAA;AAAA,MACH,MAAA;AAAA,MACA,WAAA;AAAA,MACA,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,EAAC;AAAA,MAC5B,OAAA,EAAS,OAAO,OAAA,IAAW,GAAA;AAAA,MAC3B,OAAA,EAAS,OAAO,OAAA,IAAW,CAAA;AAAA,MAC3B,KAAA,EAAO,OAAO,KAAA,IAAS,KAAA;AAAA,MACvB,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,QAAQ,IAAA,CAAK;AAAA,KACf;AAIA,IAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA,KAAiB,SAAS,IAAI,oBAAA,CAAqB,MAAM,CAAA,GAAI,MAAA,CAAA;AAExF,IAAA,IAAI,OAAO,cAAA,EAAgB;AACzB,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAI,cAAA,CAAe,MAAA,CAAO,cAAc,CAAA;AAAA,IAChE;AACA,IAAA,IAAI,OAAO,uBAAA,EAAyB;AAClC,MAAA,IAAA,CAAK,gBAAA,GAAmB,IAAI,gBAAA,EAAiB;AAAA,IAC/C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,qBAAA,CAAsB,QAAgB,cAAA,EAAqD;AACjG,IAAA,MAAM,UAAA,GAAa,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,EAAE,QAAA,CAAA,CAAU,MAAA,IAAU,KAAA,EAAO,WAAA,EAAa,CAAA;AACpF,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,cAAA,EAAgB,kBAAkB,YAAA,EAAa;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,OAAA,CACd,QAAA,EACA,UAAuB,EAAC,EACxB,YACA,cAAA,EACY;AACZ,IAAA,MAAM,YAAY,YAAA,EAAa;AAG/B,IAAA,IAAI,KAAK,cAAA,IAAkB,CAAC,IAAA,CAAK,cAAA,CAAe,YAAW,EAAG;AAC5D,MAAA,MAAM,KAAA,GAAQ,IAAI,uBAAA,EAAwB;AAC1C,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAClB,MAAA,MAAM,KAAA;AAAA,IACR;AAGA,IAAA,IAAI,IAAA,CAAK,gBAAA,IAAoB,IAAA,CAAK,gBAAA,CAAiB,iBAAgB,EAAG;AACpE,MAAA,MAAM,MAAA,GAAS,IAAA,CAAK,gBAAA,CAAiB,SAAA,EAAU;AAC/C,MAAA,MAAM,KAAA,GAAQ,IAAI,cAAA,CAAe,MAAA,CAAO,cAAc,MAAS,CAAA;AAC/D,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAClB,MAAA,MAAM,KAAA;AAAA,IACR;AAEA,IAAA,MAAM,MAAM,CAAA,EAAG,UAAA,IAAc,KAAK,MAAA,CAAO,OAAO,GAAG,QAAQ,CAAA,CAAA;AAE3D,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,KAAK,MAAA,CAAO,QAAA;AAAA,MAC3B,eAAA,EAAiB,iBAAiB,WAAW,CAAA,CAAA;AAAA,MAC7C,cAAA,EAAgB,SAAA;AAAA,MAChB,GAAG,KAAK,MAAA,CAAO,OAAA;AAAA,MACf,GAAK,OAAA,CAAQ,OAAA,IAAsC;AAAC,KACtD;AAIA,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,YAAA,EAAc,aAAA,CAAc;AAAA,MACxD,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB;AAAA,KACD,CAAA;AACD,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,OAAA,CAAQ,eAAe,IAAI,CAAA,EAAG,UAAA,CAAW,UAAU,QAAQ,CAAA,CAAA,EAAI,WAAW,KAAK,CAAA,CAAA;AAAA,IACjF;AAGA,IAAA,IAAI,IAAA,CAAK,MAAA,CAAO,WAAA,KAAgB,SAAA,EAAW;AACzC,MAAA,OAAA,CAAQ,WAAW,CAAA,GAAI,MAAA;AAAA,IACzB;AAKA,IAAA,MAAM,MAAA,GAAA,CAAU,OAAA,CAAQ,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AACrD,IAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,qBAAA,CAAsB,MAAA,EAAQ,cAAc,CAAA;AACxE,IAAA,IAAI,cAAA,EAAgB;AAClB,MAAA,OAAA,CAAQ,iBAAiB,CAAA,GAAI,cAAA;AAAA,IAC/B;AAEA,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,SAAA,GAAY,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,CAAK,OAAO,OAAO,CAAA;AAG1E,IAAA,IAAI,gBAAgB,MAAA,EAAQ;AAC1B,MAAA,IAAI,cAAA,CAAe,OAAO,OAAA,EAAS;AACjC,QAAA,UAAA,CAAW,KAAA,EAAM;AAAA,MACnB,CAAA,MAAO;AACL,QAAA,cAAA,CAAe,MAAA,CAAO,gBAAA,CAAiB,OAAA,EAAS,MAAM,UAAA,CAAW,OAAM,EAAG,EAAE,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,MAC1F;AAAA,IACF;AAEA,IAAA,IAAI;AAEF,MAAA,IAAI,YAAA,GAA4B,EAAE,GAAG,OAAA,EAAS,OAAA,EAAQ;AACtD,MAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,QAAA,IAAI,YAAY,SAAA,EAAW;AACzB,UAAA,YAAA,GAAe,MAAM,WAAA,CAAY,SAAA,CAAU,GAAA,EAAK,YAAY,CAAA;AAAA,QAC9D;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,QAAA,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,EAAG,YAAA,CAAa,UAAU,KAAK,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAE,CAAA;AAAA,MACjE;AAEA,MAAA,IAAI,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,QAC9B,GAAG,YAAA;AAAA,QACH,QAAQ,UAAA,CAAW;AAAA,OACpB,CAAA;AAKD,MAAA,IAAI,SAAS,MAAA,KAAW,GAAA,IAAO,IAAA,CAAK,YAAA,EAAc,cAAa,EAAG;AAChE,QAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,YAAA,CAAa,aAAA,CAAc;AAAA,UACtD,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,UACtB,SAAA;AAAA,UACA,YAAA,EAAc;AAAA,SACf,CAAA;AACD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,IAAA,CAAK,MAAA,CAAO,mBAAA,GAAsB,EAAE,MAAA,EAAQ,gBAAgB,CAAA;AAC5D,UAAA,YAAA,GAAe;AAAA,YACb,GAAG,YAAA;AAAA,YACH,OAAA,EAAS;AAAA,cACP,GAAI,YAAA,CAAa,OAAA;AAAA,cACjB,eAAe,CAAA,EAAG,SAAA,CAAU,UAAU,QAAQ,CAAA,CAAA,EAAI,UAAU,KAAK,CAAA;AAAA;AACnE,WACF;AACA,UAAA,QAAA,GAAW,MAAM,MAAM,GAAA,EAAK,EAAE,GAAG,YAAA,EAAc,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AAAA,QAC5E;AAAA,MACF;AAEA,MAAA,YAAA,CAAa,SAAS,CAAA;AAGtB,MAAA,IAAI,KAAK,gBAAA,EAAkB;AACzB,QAAA,IAAA,CAAK,gBAAA,CAAiB,iBAAA,CAAkB,QAAA,CAAS,OAAO,CAAA;AAAA,MAC1D;AAGA,MAAA,IAAI,cAAA,EAAgB,iBAAiB,aAAA,EAAe;AAClD,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,IAAI,UAAmC,EAAC;AACxC,UAAA,IAAI;AAAE,YAAA,OAAA,GAAU,MAAM,SAAS,IAAA,EAAK;AAAA,UAAG,CAAA,CAAA,MAAQ;AAAA,UAAe;AAC9D,UAAA,IAAA,CAAK,mBAAA,CAAoB,QAAA,CAAS,MAAA,EAAQ,OAAA,EAAS,SAAS,CAAA;AAAA,QAC9D;AACA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,QAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,WAAA,EAAY;AAC1C,QAAA,OAAO,MAAA;AAAA,MACT;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAA,GAAO,MAAM,SAAS,IAAA,EAAK;AAAA,MAC7B,CAAA,CAAA,MAAQ;AAEN,QAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,UAAA,IAAA,CAAK,mBAAA,CAAoB,SAAS,MAAA,EAAQ;AAAA,YACxC,KAAA,EAAO,CAAA,KAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAA;AAAA,YAC9B,SAAS,QAAA,CAAS;AAAA,aACjB,SAAS,CAAA;AAAA,QACd;AAEA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,QAAA,OAAO,KAAA,CAAA;AAAA,MACT;AAEA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,IAAA,CAAK,oBAAoB,QAAA,CAAS,MAAA,EAAQ,IAAA,IAAQ,IAAI,SAAS,CAAA;AAAA,MACjE;AAGA,MAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAG/B,MAAA,IAAI,MAAA,GAAkB,IAAA;AACtB,MAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,QAAA,IAAI,YAAY,UAAA,EAAY;AAC1B,UAAA,MAAA,GAAS,MAAM,WAAA,CAAY,UAAA,CAAW,GAAA,EAAK,MAAM,CAAA;AAAA,QACnD;AAAA,MACF;AAEA,MAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,QAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,UAAA,EAAa,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,MAClD;AAEA,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,YAAA,CAAa,SAAS,CAAA;AAGtB,MAAA,IACE,iBAAiB,WAAA,IACjB,KAAA,CAAM,UAAA,IACN,KAAA,CAAM,cAAc,GAAA,EACpB;AACA,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAAA,MACjC,CAAA,MAAA,IAAW,KAAA,YAAiB,YAAA,IAAgB,KAAA,YAAiB,YAAA,EAAc;AACzE,QAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAAA,MACjC;AAGA,MAAA,IAAI,KAAA,YAAiB,WAAA,IAAe,CAAC,KAAA,CAAM,SAAA,EAAW;AACpD,QAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAAA,MACpB;AAGA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,KAAA,MAAW,WAAA,IAAe,KAAK,YAAA,EAAc;AAC3C,UAAA,IAAI,YAAY,OAAA,EAAS;AACvB,YAAA,MAAM,WAAA,CAAY,OAAA,CAAQ,GAAA,EAAK,KAAK,CAAA;AAAA,UACtC;AAAA,QACF;AAAA,MACF;AAEA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAE/B,UAAA,IAAI,cAAA,EAAgB,QAAQ,OAAA,EAAS;AACnC,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,iBAAA,EAAmB,iBAAiB,CAAA;AACvE,YAAA,UAAA,CAAW,SAAA,GAAY,SAAA;AACvB,YAAA,MAAM,UAAA;AAAA,UACR;AACA,UAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,UAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,IAAA,CAAK,OAAO,OAAO,CAAA;AACzD,UAAA,YAAA,CAAa,SAAA,GAAY,SAAA;AACzB,UAAA,MAAM,YAAA;AAAA,QACR;AACA,QAAA,IAAI,iBAAiB,WAAA,EAAa;AAChC,UAAA,MAAM,KAAA;AAAA,QACR;AAAA,MACF;AAEA,MAAA,MAAM,YAAA,GAAe,IAAI,YAAA,CAAa,wBAAA,EAA0B,KAAK,CAAA;AACrE,MAAA,YAAA,CAAa,SAAA,GAAY,SAAA;AACzB,MAAA,IAAA,CAAK,gBAAgB,SAAA,EAAU;AAC/B,MAAA,MAAM,YAAA;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAgB,gBAAA,CACd,QAAA,EACA,OAAA,GAAuB,EAAC,EACxB,UAAA,EACA,OAAA,GAAkB,IAAA,CAAK,MAAA,CAAO,OAAA,EAC9B,cAAA,EACY;AACZ,IAAA,IAAI,SAAA;AAIJ,IAAA,MAAM,iBAAiB,IAAA,CAAK,qBAAA,CAAsB,OAAA,CAAQ,MAAA,IAAU,OAAO,cAAc,CAAA;AACzF,IAAA,MAAM,iBAA6C,cAAA,GAC/C,EAAE,GAAG,cAAA,EAAgB,gBAAe,GACpC,cAAA;AAEJ,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,OAAA,EAAS,OAAA,EAAA,EAAW;AACnD,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,OAAA,EAAS,YAAY,cAAc,CAAA;AAAA,MAC5E,SAAS,KAAA,EAAO;AACd,QAAA,SAAA,GAAY,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,MAAM,eAAe,CAAA;AAGtE,QAAA,IAAI,cAAA,EAAgB,QAAQ,OAAA,EAAS;AACnC,UAAA,MAAM,SAAA;AAAA,QACR;AAGA,QAAA,IACE,SAAA,YAAqB,WAAA,IACrB,SAAA,CAAU,UAAA,IACV,SAAA,CAAU,UAAA,IAAc,GAAA,IACxB,SAAA,CAAU,UAAA,GAAa,GAAA,IACvB,SAAA,CAAU,UAAA,KAAe,GAAA,EACzB;AACA,UAAA,MAAM,SAAA;AAAA,QACR;AAGA,QAAA,IAAI,YAAY,OAAA,EAAS;AACvB,UAAA;AAAA,QACF;AAGA,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI,SAAA,YAAqB,cAAA,IAAkB,SAAA,CAAU,UAAA,EAAY;AAC/D,UAAA,KAAA,GAAQ,UAAU,UAAA,GAAa,GAAA;AAAA,QACjC,CAAA,MAAO;AACL,UAAA,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,GAAA,GAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAO,CAAA,GAAI,IAAA,CAAK,MAAA,EAAO,GAAI,GAAA,EAAM,GAAK,CAAA;AAAA,QAC5E;AACA,QAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,KAAK,CAAC,CAAA;AAEzD,QAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO;AACrB,UAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,cAAA,EAAiB,OAAA,GAAU,CAAC,CAAA,CAAA,EAAI,OAAO,CAAA,OAAA,EAAU,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAC,CAAA,EAAA,CAAI,CAAA;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAEA,IAAA,MAAM,IAAI,YAAA,CAAa,CAAA,qBAAA,EAAwB,OAAO,YAAY,SAAS,CAAA;AAAA,EAC7E;AAAA;AAAA;AAAA;AAAA,EAKU,mBAAA,CAAoB,MAAA,EAAgB,IAAA,EAA+B,SAAA,EAA2B;AACtG,IAAA,MAAM,UAAW,IAAA,CAAK,KAAA,IAAqB,IAAA,CAAK,OAAA,IAAsB,QAAQ,MAAM,CAAA,CAAA;AAEpF,IAAA,MAAM,cAAc,MAAmB;AACrC,MAAA,QAAQ,MAAA;AAAQ,QACd,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,aAAA,EAAe,GAAG,CAAA;AAAA,QACpD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,oBAAoB,OAAO,CAAA;AAAA,QACxC,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,WAAA,EAAa,GAAG,CAAA;AAAA,QAClD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,WAAA,EAAa,GAAG,CAAA;AAAA,QAClD,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,mBAAA,EAAqB,GAAG,CAAA;AAAA,QAC1D,KAAK,GAAA,EAAK;AACR,UAAA,MAAM,UAAA,GAAc,IAAA,CAAK,WAAA,IAAuC,IAAA,CAAK,UAAA;AACrE,UAAA,OAAO,IAAI,eAAe,UAAU,CAAA;AAAA,QACtC;AAAA,QACA,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AAAA,QACL,KAAK,GAAA;AACH,UAAA,OAAO,IAAI,wBAAwB,OAAO,CAAA;AAAA,QAC5C;AACE,UAAA,OAAO,IAAI,WAAA,CAAY,OAAA,EAAS,eAAA,EAAiB,MAAM,CAAA;AAAA;AAC3D,IACF,CAAA;AAEA,IAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,KAAA,CAAM,SAAA,GAAY,SAAA;AAAA,IACpB;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKU,iBAAiB,MAAA,EAAyC;AAClE,IAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,EAAgB;AAElC,IAAA,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AAC/C,MAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AACzC,QAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,UAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,KAAS,KAAA,CAAM,OAAO,GAAA,EAAK,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AAAA,QACzD,CAAA,MAAO;AACL,UAAA,KAAA,CAAM,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,QACjC;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAM,WAAA,GAAc,MAAM,QAAA,EAAS;AACnC,IAAA,OAAO,WAAA,GAAc,CAAA,CAAA,EAAI,WAAW,CAAA,CAAA,GAAK,EAAA;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,MAAA,EAAyC;AACpD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,GAAG,IAAA,CAAK,MAAA;AAAA,MACR,GAAG,MAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,KAAK,MAAA,CAAO,OAAA;AAAA,QACf,GAAI,MAAA,CAAO,OAAA,IAAW;AAAC;AACzB,KACF;AACA,IAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,MAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AAAA,IACvB;AACA,IAAA,IAAI,OAAO,YAAA,EAAc;AACvB,MAAA,IAAA,CAAK,eAAe,MAAA,CAAO,YAAA;AAAA,IAC7B;AAGA,IAAA,IAAI,MAAA,CAAO,YAAA,KAAiB,MAAA,IAAa,MAAA,CAAO,WAAW,MAAA,EAAW;AACpE,MAAA,IAAA,CAAK,YAAA,GACH,IAAA,CAAK,MAAA,CAAO,YAAA,KACX,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,IAAI,oBAAA,CAAqB,IAAA,CAAK,MAAA,CAAO,MAAM,CAAA,GAAI,MAAA,CAAA;AAAA,IACzE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAwC;AACtC,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,MAAA,EAAO;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAKA,kBAAA,GAA6C;AAC3C,IAAA,OAAO,IAAA,CAAK,gBAAA,EAAkB,SAAA,EAAU,IAAK,IAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,uBAAA,GAAuD;AACrD,IAAA,OAAO,IAAA,CAAK,cAAA,EAAgB,SAAA,EAAU,IAAK,IAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,WAAA,GAA8D;AAClE,IAAA,OAAO,IAAA,CAAK,QAAQ,gBAAgB,CAAA;AAAA,EACtC;AACF,CAAA;;;AC7cA,SAAS,cAAA,CACP,MAAA,EACA,GAAA,EACA,KAAA,EACM;AACN,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,MAAA,CAAO,GAAG,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,GAAG,CAAA,GAAI,KAAA;AAAA,EACzD;AACF;AAGA,SAAS,eAAA,CACP,MAAA,EACA,MAAA,EACA,IAAA,EACM;AACN,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,MAAA,CAAO,GAAG,CAAA,KAAM,MAAA,EAAW;AAC7B,MAAA,MAAA,CAAO,GAAG,CAAA,GAAI,MAAA,CAAO,GAAG,CAAA;AAAA,IAC1B;AAAA,EACF;AACF;AAaO,IAAM,SAAA,GAAN,cAAwB,UAAA,CAAW;AAAA,EAIxC,YAAY,MAAA,EAAyB;AAEnC,IAAA,MAAM,UAAA,GAA+B;AAAA,MACnC,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,OAAA,EAAS,CAAA;AAAA;AAAA,MACT,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO;AAAA,KACtB;AACA,IAAA,KAAA,CAAM,UAAU,CAAA;AAChB,IAAA,IAAA,CAAK,SAAS,MAAA,CAAO,MAAA;AACrB,IAAA,IAAA,CAAK,qBAAqB,MAAA,CAAO,kBAAA;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,MAAA,EAAsB;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAgC;AAC9B,IAAA,OAAO,IAAA,CAAK,MAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAA,GAAyC;AAC/C,IAAA,MAAM,UAAkC,EAAC;AACzC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,OAAA,CAAQ,WAAW,IAAI,IAAA,CAAK,MAAA;AAAA,IAC9B;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAiDA,MAAM,oBAAA,CACJ,OAAA,EACA,cAAA,EACuC;AAIvC,IAAA,OAAO,IAAA,CAAK,QAAsC,qBAAA,EAAuB;AAAA,MACvE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,QAAW,cAAc,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,wCAAwC,OAAA,EAAmH;AAK/J,IAAA,OAAO,IAAA,CAAK,QAAyD,0BAAA,EAA4B;AAAA,MAC/F,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,uCAAA,CAAwC,OAAA,EAAyD,cAAA,EAA8E;AAQnL,IAAA,OAAO,IAAA,CAAK,QAA4C,yBAAA,EAA2B;AAAA,MACjF,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,QAAW,cAAc,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,2CAA2C,KAAA,EAA4D;AAC3G,IAAA,OAAO,KAAK,gBAAA,CAAqD,CAAA,wBAAA,EAA2B,kBAAA,CAAmB,KAAK,CAAC,CAAA,CAAA,EAAI;AAAA,MACvH,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,uCAAuC,KAAA,EAAyE;AACpH,IAAA,OAAO,IAAA,CAAK,QAAyD,iCAAA,EAAmC;AAAA,MACtG,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,EAAE,OAAO,CAAA;AAAA,MAC9B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,kBAAkB,KAAA,EAA2C;AACjE,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,sBAAsB,IAAA,CAAK,gBAAA,CAAiB,EAAE,KAAA,EAAO,CAAC,CAAA,CAAA;AAAA,MACtD,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,oBAAA,CAAqB,KAAA,EAAe,YAAA,GAAe,KAAA,EAA+C;AACtG,IAAA,OAAO,IAAA,CAAK,QAAuC,6BAAA,EAA+B;AAAA,MAChF,MAAA,EAAQ,KAAA;AAAA,MACR,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,aAAA,EAAe,cAAc,CAAA;AAAA,MAC3D,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkCA,MAAM,eACJ,OAAA,EACiC;AACjC,IAAA,MAAM,MAAA,GAAS;AAAA,MACb,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,QAAQ,OAAA,CAAQ;AAAA,KAClB;AAEA,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,MACV,CAAA,0BAAA,EAA6B,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA,CAAA;AAAA,MAC1D;AAAA,QACE,MAAA,EAAQ,KAAA;AAAA,QACR,OAAA,EAAS,KAAK,cAAA;AAAe;AAC/B,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgCA,MAAM,kBAAA,CACJ,OAAA,EACA,cAAA,EACuC;AAEvC,IAAA,OAAO,IAAA,CAAK,QAAsC,oBAAA,EAAsB;AAAA,MACtE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC/B,EAAG,QAAW,cAAc,CAAA;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,cAAc,EAAA,EAAiC;AACnD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAoB,CAAA,qBAAA,EAAwB,EAAE,CAAA,CAAE,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,eAAA,CACJ,OAAA,EACA,UAAA,EACiC;AACjC,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,eAAA,CAAgB,MAAA,EAAQ,SAA+C,CAAC,QAAA,EAAU,YAAY,QAAA,EAAU,QAAA,EAAU,OAAO,CAAC,CAAA;AAAA,IAC5H;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,IAAI,UAAA,CAAW,IAAA,EAAM,MAAA,CAAO,IAAA,GAAO,UAAA,CAAW,IAAA;AAC9C,MAAA,IAAI,UAAA,CAAW,SAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,UAAA,CAAW,SAAA;AAAA,IACtD;AAEA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,oBAAA,EAAuB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA,CAAA;AAAA,MACpD,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAwBA,MAAM,gBAAgB,OAAA,EAAgD;AACpE,IAAA,MAAM,IAAA,CAAK,QAAQ,oBAAA,EAAsB;AAAA,MACvC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBA,MAAM,2BACJ,OAAA,EACe;AACf,IAAA,MAAM,IAAA,CAAK,QAAQ,sBAAA,EAAwB;AAAA,MACzC,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA;AAAA,MAC5B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAM,qBAAqB,KAAA,EAA4C;AACrE,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,sBAAsB,KAAK,CAAA,CAAA;AAAA,MAC3B,EAAE,OAAA,EAAS,IAAA,CAAK,cAAA,EAAe;AAAE,KACnC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAuBA,MAAM,WAAA,CAAY,QAAA,EAAmB,MAAA,EAAuC;AAC1E,IAAA,MAAM,SAAkC,EAAC;AACzC,IAAA,IAAI,QAAA,SAAiB,QAAA,GAAW,QAAA;AAChC,IAAA,IAAI,MAAA,SAAe,MAAA,GAAS,MAAA;AAE5B,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,oBAAA,EAAuB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACtD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,SAAS,OAAA,EAAoC;AACjD,IAAA,OAAO,IAAA,CAAK,OAAA,CAAkB,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAE,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,MAAM,UAAA,CACJ,OAAA,EACA,UAAA,EAC+B;AAC/B,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AAEX,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,cAAA,CAAe,MAAA,EAAQ,YAAA,EAAc,OAAA,CAAQ,UAAU,CAAA;AACvD,MAAA,cAAA,CAAe,MAAA,EAAQ,cAAA,EAAgB,OAAA,CAAQ,YAAY,CAAA;AAC3D,MAAA,cAAA,CAAe,MAAA,EAAQ,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA;AAC/C,MAAA,cAAA,CAAe,MAAA,EAAQ,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AAE3C,MAAA,eAAA,CAAgB,MAAA,EAAQ,SAA+C,CAAC,QAAA,EAAU,YAAY,QAAA,EAAU,SAAA,EAAW,OAAO,CAAC,CAAA;AAAA,IAC7H;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,IAAI,UAAA,CAAW,IAAA,EAAM,MAAA,CAAO,IAAA,GAAO,UAAA,CAAW,IAAA;AAC9C,MAAA,IAAI,UAAA,CAAW,SAAA,EAAW,MAAA,CAAO,KAAA,GAAQ,UAAA,CAAW,SAAA;AAAA,IACtD;AAEA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,MACV,CAAA,kBAAA,EAAqB,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACpD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BA,MAAM,WAAA,CAAY,OAAA,EAAiB,MAAA,EAA8C;AAC/E,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAA,EAAI;AAAA,MAClD,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AAAA,MAC3B,OAAA,EAAS,KAAK,cAAA;AAAe,KAC9B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAM,cAAA,GAA0C;AAC9C,IAAA,OAAO,IAAA,CAAK,QAAwB,yBAAyB,CAAA;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA2BA,MAAM,kBACJ,MAAA,EACyB;AACzB,IAAA,OAAO,IAAA,CAAK,QAAwB,yBAAA,EAA2B;AAAA,MAC7D,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,MAAM;AAAA,KAC5B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAc,kBAAA,CACZ,IAAA,EACA,OAAA,GAAuB,EAAC,EACZ;AACZ,IAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,MAAA,MAAM,IAAI,eAAA;AAAA,QACR,gGAAA;AAAA,QACA,CAAC,oBAAoB;AAAA,OACvB;AAAA,IACF;AAEA,IAAA,OAAO,IAAA,CAAK,QAAW,IAAA,EAAM;AAAA,MAC3B,GAAG,OAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,KAAK,cAAA,EAAe;AAAA,QACvB,GAAI,OAAA,CAAQ;AAAA;AACd,KACF,EAAG,KAAK,kBAAkB,CAAA;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAmBA,MAAM,oBAAA,CACJ,OAAA,EACA,UAAA,EACsC;AACtC,IAAA,MAAM,SAAkC,EAAC;AAEzC,IAAA,IAAI,OAAA,EAAS;AAEX,MAAA,IAAI,QAAQ,aAAA,EAAe;AACzB,QAAA,MAAA,CAAO,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,aAAa,IACtD,OAAA,CAAQ,aAAA,GACR,CAAC,OAAA,CAAQ,aAAa,CAAA;AAAA,MAC5B;AACA,MAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,QAAA,MAAA,CAAO,WAAA,GAAc,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,WAAW,IAClD,OAAA,CAAQ,WAAA,GACR,CAAC,OAAA,CAAQ,WAAW,CAAA;AAAA,MAC1B;AACA,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,MAAA,CAAO,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,IACxC,OAAA,CAAQ,MAAA,GACR,CAAC,OAAA,CAAQ,MAAM,CAAA;AAAA,MACrB;AAEA,MAAA,eAAA,CAAgB,QAAQ,OAAA,EAA+C;AAAA,QACrE,QAAA;AAAA,QAAU,QAAA;AAAA,QAAU,eAAA;AAAA,QAAiB,cAAA;AAAA,QAAgB,SAAA;AAAA,QAAW;AAAA,OACjE,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,eAAA,CAAgB,MAAA,EAAQ,UAAA,EAAY,CAAC,OAAA,EAAS,QAAQ,CAAC,CAAA;AAAA,IACzD;AAEA,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACV,CAAA,+BAAA,EAAkC,IAAA,CAAK,gBAAA,CAAiB,MAAM,CAAC,CAAA;AAAA,KACjE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,mBAAmB,SAAA,EAA6C;AACpE,IAAA,OAAO,IAAA,CAAK,kBAAA;AAAA,MACV,mCAAmC,SAAS,CAAA;AAAA,KAC9C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BA,MAAM,sBACJ,OAAA,EAC0B;AAC1B,IAAA,OAAO,IAAA,CAAK,mBAAoC,kBAAA,EAAoB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,KAC7B,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAKF;;;ACzyBO,IAAM,yBAAA,GAA6D;AAAA,EACxE,oBAAA,EAAsB,oCAAA;AAAA,EACtB,oBAAA,EAAsB,8CAAA;AAAA,EACtB,iBAAA,EAAmB,uDAAA;AAAA,EACnB,mBAAA,EAAqB,yBAAA;AAAA,EACrB,sBAAA,EAAwB,+DAAA;AAAA,EACxB,oBAAA,EAAsB,6BAAA;AAAA,EACtB,iBAAA,EAAmB,qDAAA;AAAA,EACnB,qBAAA,EAAuB,iEAAA;AAAA,EACvB,YAAA,EAAc;AAChB;AAyvBO,SAAS,kCACd,KAAA,EAC0C;AAC1C,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,KAAA,KAAU,IAAA,IACT,MAA8B,KAAA,KAAU,sBAAA;AAE7C","file":"index.mjs","sourcesContent":["/*\n Pluggable authentication for BaseClient.\n \n A TokenProvider supplies the credential used for the Authorization header on\n * every request, resolved per-request (async) so callers can source short-lived\n * or rotating credentials (OAuth2 client-credentials, STS, Vault / Secrets\n * Manager) instead of a single static API key. The default StaticApiKeyProvider\n * preserves the original `apiKey` behavior with zero change for existing callers.\n /\n\nexport interface AuthCredential {\n /* Authorization scheme (e.g. 'Bearer'); defaults to 'Bearer' when omitted. /\n scheme?: string;\n /* The credential value (bearer token / API key). /\n token: string;\n}\n\nexport interface TokenProviderContext {\n tenantId: string;\n requestId: string;\n /* When true, bypass any cache and obtain a fresh credential (e.g. after a 401). /\n forceRefresh?: boolean;\n}\n\nexport interface TokenProvider {\n /* Resolve the credential for a request, or null to send no Authorization header. /\n getCredential(ctx: TokenProviderContext): Promise<AuthCredential \| null>;\n /* Whether this provider can obtain a fresh credential on demand (drives 401 retry). /\n canRefresh?(): boolean;\n}\n\n/\n Default provider: wraps a static API key. Returns null when the key is empty\n * so the client sends no Authorization header, matching the pre-provider behavior.\n /\nexport class StaticApiKeyProvider implements TokenProvider {\n constructor(private readonly apiKey: string) {}\n\n async getCredential(): Promise<AuthCredential \| null> {\n return this.apiKey ? { scheme: 'Bearer', token: this.apiKey } : null;\n }\n\n canRefresh(): boolean {\n return false;\n }\n}\n\ninterface CachedToken {\n token: string;\n expiresAt?: number;\n}\n\nexport interface RefreshingTokenProviderOptions {\n /* Fetches a fresh token. `expiresAt` is epoch milliseconds (optional). /\n fetchToken: () => Promise<CachedToken>;\n /* Refresh this many ms before expiry (default: 30_000). /\n skewMs?: number;\n /* Authorization scheme to emit (default: 'Bearer'). /\n scheme?: string;\n /* Observe each successful (re)fetch — for logging / metrics. /\n onRotate?: (meta: { expiresAt?: number }) => void;\n /* Injectable clock (default: Date.now). /\n now?: () => number;\n}\n\n/\n Caches a fetched token and refreshes it when it is within the skew window of\n * expiry or when `forceRefresh` is requested. Concurrent refreshes are de-duped\n * into a single in-flight fetch.\n /\nexport class RefreshingTokenProvider implements TokenProvider {\n private cached: CachedToken \| null = null;\n private inFlight: Promise<CachedToken> \| null = null;\n private readonly skewMs: number;\n private readonly scheme: string;\n private readonly now: () => number;\n\n constructor(private readonly opts: RefreshingTokenProviderOptions) {\n this.skewMs = opts.skewMs ?? 30_000;\n this.scheme = opts.scheme ?? 'Bearer';\n this.now = opts.now ?? (() => Date.now());\n }\n\n canRefresh(): boolean {\n return true;\n }\n\n async getCredential(ctx?: TokenProviderContext): Promise<AuthCredential \| null> {\n const forceRefresh = ctx?.forceRefresh ?? false;\n if (!forceRefresh && this.cached && !this.isExpiring(this.cached)) {\n return { scheme: this.scheme, token: this.cached.token };\n }\n const fresh = await this.refresh();\n return { scheme: this.scheme, token: fresh.token };\n }\n\n private isExpiring(token: CachedToken): boolean {\n if (token.expiresAt === undefined) {\n return false;\n }\n return this.now() >= token.expiresAt - this.skewMs;\n }\n\n private refresh(): Promise<CachedToken> {\n if (this.inFlight) {\n return this.inFlight;\n }\n this.inFlight = (async () => {\n try {\n const fresh = await this.opts.fetchToken();\n this.cached = fresh;\n this.opts.onRotate?.({ expiresAt: fresh.expiresAt });\n return fresh;\n } finally {\n this.inFlight = null;\n }\n })();\n return this.inFlight;\n }\n}\n","/\n Error hierarchy for Vesant SDK\n \n Provides structured error handling with specific error types\n * for different failure scenarios.\n /\n\nexport class VesantError extends Error {\n public requestId?: string;\n\n constructor(\n message: string,\n public code: string,\n public statusCode?: number,\n public details?: Record<string, unknown>\n ) {\n super(message);\n this.name = 'VesantError';\n Object.setPrototypeOf(this, VesantError.prototype);\n }\n}\n\n/* @deprecated Use VesantError instead /\nexport const CGSError = VesantError;\n/* @deprecated Use VesantError instead /\nexport type CGSError = VesantError;\n\nexport class NetworkError extends VesantError {\n constructor(message: string, public originalError?: unknown) {\n super(message, 'NETWORK_ERROR');\n this.name = 'NetworkError';\n Object.setPrototypeOf(this, NetworkError.prototype);\n }\n}\n\nexport class ValidationError extends VesantError {\n constructor(message: string, fields?: string[]) {\n super(message, 'VALIDATION_ERROR', 400, { fields });\n this.name = 'ValidationError';\n Object.setPrototypeOf(this, ValidationError.prototype);\n }\n}\n\nexport class ServiceUnavailableError extends VesantError {\n constructor(message: string = 'Service unavailable') {\n super(message, 'SERVICE_UNAVAILABLE', 503);\n this.name = 'ServiceUnavailableError';\n Object.setPrototypeOf(this, ServiceUnavailableError.prototype);\n }\n}\n\nexport class ComplianceBlockedError extends VesantError {\n constructor(reasons: string[]) {\n super('Access blocked due to compliance rules', 'COMPLIANCE_BLOCKED', 403, { reasons });\n this.name = 'ComplianceBlockedError';\n Object.setPrototypeOf(this, ComplianceBlockedError.prototype);\n }\n}\n\nexport class AuthenticationError extends VesantError {\n constructor(message: string = 'Authentication failed') {\n super(message, 'AUTHENTICATION_ERROR', 401);\n this.name = 'AuthenticationError';\n Object.setPrototypeOf(this, AuthenticationError.prototype);\n }\n}\n\nexport class RateLimitError extends VesantError {\n constructor(public retryAfter?: number) {\n super('Rate limit exceeded', 'RATE_LIMIT_EXCEEDED', 429, { retryAfter });\n this.name = 'RateLimitError';\n Object.setPrototypeOf(this, RateLimitError.prototype);\n }\n}\n\nexport class TimeoutError extends VesantError {\n constructor(public timeout: number) {\n super(`Request timeout after ${timeout}ms`, 'TIMEOUT', 408, { timeout });\n this.name = 'TimeoutError';\n Object.setPrototypeOf(this, TimeoutError.prototype);\n }\n}\n\nexport class ComplianceError extends VesantError {\n constructor(\n message: string,\n public originalError?: unknown,\n code: string = 'COMPLIANCE_ERROR'\n ) {\n super(message, code);\n this.name = 'ComplianceError';\n Object.setPrototypeOf(this, ComplianceError.prototype);\n }\n}\n\nexport class CircuitBreakerOpenError extends VesantError {\n constructor() {\n super('Circuit breaker is open — requests are temporarily blocked', 'CIRCUIT_BREAKER_OPEN', 503);\n this.name = 'CircuitBreakerOpenError';\n Object.setPrototypeOf(this, CircuitBreakerOpenError.prototype);\n }\n}\n","/\n Circuit breaker pattern for resilient HTTP requests.\n \n States: closed (normal) -> open (failing) -> half-open (testing) -> closed\n /\n\nexport type CircuitBreakerState = 'closed' \| 'open' \| 'half-open';\n\nexport interface CircuitBreakerConfig {\n /* Number of consecutive failures before opening the circuit (default: 5) /\n failureThreshold?: number;\n /* Time in ms to wait before transitioning from open to half-open (default: 30000) /\n resetTimeout?: number;\n /* Number of successes in half-open state before closing (default: 1) /\n successThreshold?: number;\n}\n\nexport interface CircuitBreakerStatus {\n state: CircuitBreakerState;\n failures: number;\n successes: number;\n lastFailureTime: number \| null;\n nextRetryTime: number \| null;\n}\n\nexport class CircuitBreaker {\n private state: CircuitBreakerState = 'closed';\n private failures = 0;\n private successes = 0;\n private lastFailureTime: number \| null = null;\n\n private readonly failureThreshold: number;\n private readonly resetTimeout: number;\n private readonly successThreshold: number;\n\n constructor(config: CircuitBreakerConfig = {}) {\n this.failureThreshold = config.failureThreshold ?? 5;\n this.resetTimeout = config.resetTimeout ?? 30000;\n this.successThreshold = config.successThreshold ?? 1;\n }\n\n /\n Check if a request can proceed through the circuit breaker.\n /\n canExecute(): boolean {\n if (this.state === 'closed') {\n return true;\n }\n\n if (this.state === 'open') {\n const now = Date.now();\n if (this.lastFailureTime && now - this.lastFailureTime >= this.resetTimeout) {\n this.state = 'half-open';\n this.successes = 0;\n return true;\n }\n return false;\n }\n\n // half-open: allow requests through for testing\n return true;\n }\n\n /\n Record a successful request.\n /\n onSuccess(): void {\n if (this.state === 'half-open') {\n this.successes++;\n if (this.successes >= this.successThreshold) {\n this.state = 'closed';\n this.failures = 0;\n this.successes = 0;\n this.lastFailureTime = null;\n }\n } else if (this.state === 'closed') {\n this.failures = 0;\n }\n }\n\n /\n Record a failed request.\n /\n onFailure(): void {\n this.failures++;\n this.lastFailureTime = Date.now();\n\n if (this.state === 'half-open') {\n this.state = 'open';\n this.successes = 0;\n } else if (this.state === 'closed' && this.failures >= this.failureThreshold) {\n this.state = 'open';\n }\n }\n\n /\n Get current circuit breaker status.\n /\n getStatus(): CircuitBreakerStatus {\n return {\n state: this.state,\n failures: this.failures,\n successes: this.successes,\n lastFailureTime: this.lastFailureTime,\n nextRetryTime:\n this.state === 'open' && this.lastFailureTime\n ? this.lastFailureTime + this.resetTimeout\n : null,\n };\n }\n\n /\n Reset the circuit breaker to its initial closed state.\n /\n reset(): void {\n this.state = 'closed';\n this.failures = 0;\n this.successes = 0;\n this.lastFailureTime = null;\n }\n}\n","/\n Rate limit tracking from API response headers.\n \n Tracks X-RateLimit-* headers to enable pre-flight checks\n * before making requests.\n /\n\nexport interface RateLimitStatus {\n /* Maximum requests allowed in the window /\n limit: number \| null;\n /* Remaining requests in the current window /\n remaining: number \| null;\n /* Unix timestamp (seconds) when the rate limit resets /\n reset: number \| null;\n /* Seconds until the rate limit resets /\n retryAfter: number \| null;\n}\n\nexport class RateLimitTracker {\n private limit: number \| null = null;\n private remaining: number \| null = null;\n private reset: number \| null = null;\n private retryAfter: number \| null = null;\n\n /\n Extract rate limit information from response headers.\n /\n updateFromHeaders(headers: Headers): void {\n const limit = headers.get('x-ratelimit-limit');\n const remaining = headers.get('x-ratelimit-remaining');\n const reset = headers.get('x-ratelimit-reset');\n const retryAfter = headers.get('retry-after');\n\n if (limit !== null) this.limit = parseInt(limit, 10);\n if (remaining !== null) this.remaining = parseInt(remaining, 10);\n if (reset !== null) this.reset = parseInt(reset, 10);\n if (retryAfter !== null) this.retryAfter = parseInt(retryAfter, 10);\n }\n\n /\n Check if the rate limit has been exceeded based on tracked headers.\n /\n isLimitExceeded(): boolean {\n if (this.remaining !== null && this.remaining <= 0) {\n // Check if the reset time has passed\n if (this.reset !== null) {\n const now = Math.floor(Date.now() / 1000);\n if (now >= this.reset) {\n // Reset window has passed, allow requests\n this.remaining = null;\n this.reset = null;\n this.retryAfter = null;\n return false;\n }\n }\n return true;\n }\n return false;\n }\n\n /\n Get current rate limit status.\n /\n getStatus(): RateLimitStatus {\n return {\n limit: this.limit,\n remaining: this.remaining,\n reset: this.reset,\n retryAfter: this.retryAfter,\n };\n }\n}\n","import type { Logger } from './config';\n\nexport function createConsoleLogger(): Logger {\n return {\n debug(message: string, meta?: Record<string, unknown>) {\n console.log(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n info(message: string, meta?: Record<string, unknown>) {\n console.info(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n warn(message: string, meta?: Record<string, unknown>) {\n console.warn(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n error(message: string, meta?: Record<string, unknown>) {\n console.error(`[Vesant SDK] ${message}`, meta !== undefined ? meta : '');\n },\n };\n}\n\nexport const noopLogger: Logger = {\n debug() {},\n info() {},\n warn() {},\n error() {},\n};\n","/\n Single source of truth for the SDK version.\n /\nexport const SDK_VERSION = '1.7.2';\n","/\n Shared browser utility functions.\n \n Extracted from ciphertext.ts and hooks.ts to avoid duplication.\n * All functions include SSR guards for safe server-side rendering.\n /\n\n/\n Generate a UUID v4\n /\nexport function generateUUID(): string {\n if (typeof crypto !== 'undefined' && crypto.randomUUID) {\n return crypto.randomUUID();\n }\n\n // Fallback for older browsers\n return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {\n const r = (Math.random() 16) \| 0;\n const v = c === 'x' ? r : (r & 0x3) \| 0x8;\n return v.toString(16);\n });\n}\n\n/*\n Generate a unique device ID that persists across sessions.\n * Falls back to a random UUID when localStorage is unavailable (SSR).\n /\nexport function generateDeviceId(): string {\n if (typeof window === 'undefined' \|\| typeof localStorage === 'undefined') {\n return generateUUID();\n }\n\n const storageKey = 'vesant_device_id';\n let deviceId = localStorage.getItem(storageKey);\n\n if (!deviceId) {\n deviceId = generateUUID();\n localStorage.setItem(storageKey, deviceId);\n }\n\n return deviceId;\n}\n\n/\n Detect browser information from user agent.\n * Returns safe defaults when running server-side.\n /\nexport function getBrowserInfo(): {\n browser: string;\n browser_version: string;\n os: string;\n os_version: string;\n} {\n if (typeof navigator === 'undefined') {\n return { browser: 'unknown', browser_version: '', os: 'unknown', os_version: '' };\n }\n\n const ua = navigator.userAgent;\n let browser = 'unknown';\n let browserVersion = '';\n let os = 'unknown';\n let osVersion = '';\n\n // Detect browser\n if (ua.includes('Firefox/')) {\n browser = 'Firefox';\n browserVersion = ua.match(/Firefox\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Edg/')) {\n browser = 'Edge';\n browserVersion = ua.match(/Edg\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Chrome/')) {\n browser = 'Chrome';\n browserVersion = ua.match(/Chrome\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Safari/') && !ua.includes('Chrome')) {\n browser = 'Safari';\n browserVersion = ua.match(/Version\\/([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('Opera') \|\| ua.includes('OPR/')) {\n browser = 'Opera';\n browserVersion = ua.match(/(?:Opera\|OPR)\\/([\\d.]+)/)?.[1] \|\| '';\n }\n\n // Detect OS\n if (ua.includes('Windows')) {\n os = 'Windows';\n if (ua.includes('Windows NT 10.0')) osVersion = '10';\n else if (ua.includes('Windows NT 6.3')) osVersion = '8.1';\n else if (ua.includes('Windows NT 6.2')) osVersion = '8';\n else if (ua.includes('Windows NT 6.1')) osVersion = '7';\n } else if (ua.includes('Mac OS X')) {\n os = 'macOS';\n osVersion = ua.match(/Mac OS X ([\\d_]+)/)?.[1]?.replace(/_/g, '.') \|\| '';\n } else if (ua.includes('Linux')) {\n os = 'Linux';\n } else if (ua.includes('Android')) {\n os = 'Android';\n osVersion = ua.match(/Android ([\\d.]+)/)?.[1] \|\| '';\n } else if (ua.includes('iOS') \|\| ua.includes('iPhone') \|\| ua.includes('iPad')) {\n os = 'iOS';\n osVersion = ua.match(/OS ([\\d_]+)/)?.[1]?.replace(/_/g, '.') \|\| '';\n }\n\n return { browser, browser_version: browserVersion, os, os_version: osVersion };\n}\n","/\n Base HTTP client for all Vesant SDK clients\n \n Provides common functionality:\n * - Request/response handling\n * - Error handling\n * - Retry logic with exponential backoff\n * - Timeout management\n * - Debug logging\n /\n\nimport type { BaseClientConfig, Logger, RequestInterceptor, RequestOptions } from './config';\nimport { type TokenProvider, StaticApiKeyProvider } from './auth';\nimport {\n VesantError,\n NetworkError,\n TimeoutError,\n AuthenticationError,\n RateLimitError,\n ServiceUnavailableError,\n ValidationError,\n CircuitBreakerOpenError,\n} from './errors';\nimport { CircuitBreaker, type CircuitBreakerStatus } from './circuit-breaker';\nimport { RateLimitTracker, type RateLimitStatus } from './rate-limiter';\nimport { createConsoleLogger } from './logger';\nimport { SDK_VERSION } from './version';\nimport { generateUUID } from '../shared/browser-utils';\n\nexport abstract class BaseClient {\n protected config: BaseClientConfig & { timeout: number; retries: number };\n protected logger: Logger;\n private interceptors: RequestInterceptor[];\n private circuitBreaker: CircuitBreaker \| null = null;\n private rateLimitTracker: RateLimitTracker \| null = null;\n private authProvider: TokenProvider \| undefined;\n\n constructor(config: BaseClientConfig) {\n if (!config.baseURL?.trim()) {\n throw new ValidationError('baseURL is required and must be a non-empty string', ['baseURL']);\n }\n if (!config.tenantId?.trim()) {\n throw new ValidationError('tenantId is required and must be a non-empty string', ['tenantId']);\n }\n\n // The SDK relies on a global fetch (Node.js >= 18). Fail fast with a clear\n // message rather than a later \"fetch is not defined\" ReferenceError.\n if (typeof fetch === 'undefined') {\n throw new VesantError(\n 'The Vesant SDK requires a global fetch (Node.js >= 18). Upgrade Node or provide a fetch polyfill.',\n 'RUNTIME_UNSUPPORTED'\n );\n }\n\n this.interceptors = config.interceptors \|\| [];\n this.logger = config.logger \|\| createConsoleLogger();\n\n // Auto-detect environment from API key prefix\n let environment = config.environment;\n const apiKey = config.apiKey \|\| '';\n if (apiKey.startsWith('pk_test_')) {\n if (environment === 'production') {\n this.logger.warn('Sandbox API key (pk_test_) used with environment: \"production\" — overriding to \"sandbox\"');\n }\n environment = 'sandbox';\n } else if (apiKey.startsWith('pk_live_') && environment === 'sandbox') {\n this.logger.warn('Production API key (pk_live_) used with environment: \"sandbox\" — sandbox isolation will still be applied for backward compatibility');\n }\n\n this.config = {\n ...config,\n apiKey,\n environment,\n headers: config.headers \|\| {},\n timeout: config.timeout \|\| 10000,\n retries: config.retries ?? 3,\n debug: config.debug \|\| false,\n interceptors: this.interceptors,\n logger: this.logger,\n };\n\n // Default to a static-apiKey provider so the apiKey path is unchanged; an\n // explicit authProvider (OAuth2 / rotating secrets) takes precedence.\n this.authProvider = config.authProvider ?? (apiKey ? new StaticApiKeyProvider(apiKey) : undefined);\n\n if (config.circuitBreaker) {\n this.circuitBreaker = new CircuitBreaker(config.circuitBreaker);\n }\n if (config.enableRateLimitTracking) {\n this.rateLimitTracker = new RateLimitTracker();\n }\n }\n\n /\n Resolve the Idempotency-Key for a request. Mutating methods (POST/PUT/PATCH)\n * get the caller-supplied key or a freshly minted UUID; non-mutating methods get\n * none. requestWithRetry resolves this once and injects it so every retry reuses\n * one key (letting the server dedup replays); a direct request() resolves per call.\n /\n private resolveIdempotencyKey(method: string, requestOptions?: RequestOptions): string \| undefined {\n const isMutating = ['POST', 'PUT', 'PATCH'].includes((method \|\| 'GET').toUpperCase());\n if (!isMutating) {\n return undefined;\n }\n return requestOptions?.idempotencyKey ?? generateUUID();\n }\n\n /\n Make an HTTP request with timeout and error handling\n /\n protected async request<T>(\n endpoint: string,\n options: RequestInit = {},\n serviceURL?: string,\n requestOptions?: RequestOptions\n ): Promise<T> {\n const requestId = generateUUID();\n\n // Circuit breaker check\n if (this.circuitBreaker && !this.circuitBreaker.canExecute()) {\n const error = new CircuitBreakerOpenError();\n error.requestId = requestId;\n throw error;\n }\n\n // Rate limit pre-check\n if (this.rateLimitTracker && this.rateLimitTracker.isLimitExceeded()) {\n const status = this.rateLimitTracker.getStatus();\n const error = new RateLimitError(status.retryAfter ?? undefined);\n error.requestId = requestId;\n throw error;\n }\n\n const url = `${serviceURL \|\| this.config.baseURL}${endpoint}`;\n\n const headers: Record<string, string> = {\n 'Content-Type': 'application/json',\n 'X-Tenant-ID': this.config.tenantId,\n 'X-SDK-Version': `vesant-sdk-ts/${SDK_VERSION}`,\n 'X-Request-ID': requestId,\n ...this.config.headers,\n ...((options.headers as Record<string, string>) \|\| {}),\n };\n\n // Resolve the auth credential per-request via the token provider (async, so a\n // provider can fetch/refresh short-lived credentials). No credential = no header.\n const credential = await this.authProvider?.getCredential({\n tenantId: this.config.tenantId,\n requestId,\n });\n if (credential) {\n headers['Authorization'] = `${credential.scheme ?? 'Bearer'} ${credential.token}`;\n }\n\n // Sandbox header\n if (this.config.environment === 'sandbox') {\n headers['X-Sandbox'] = 'true';\n }\n\n // Idempotency key for mutating methods. Via requestWithRetry the key arrives\n // pre-resolved in requestOptions so all attempts share one; a direct request()\n // falls back to minting one here.\n const method = (options.method \|\| 'GET').toUpperCase();\n const idempotencyKey = this.resolveIdempotencyKey(method, requestOptions);\n if (idempotencyKey) {\n headers['Idempotency-Key'] = idempotencyKey;\n }\n\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), this.config.timeout);\n\n // Link consumer AbortSignal to internal controller\n if (requestOptions?.signal) {\n if (requestOptions.signal.aborted) {\n controller.abort();\n } else {\n requestOptions.signal.addEventListener('abort', () => controller.abort(), { once: true });\n }\n }\n\n try {\n // Run onRequest interceptors\n let finalOptions: RequestInit = { ...options, headers };\n for (const interceptor of this.interceptors) {\n if (interceptor.onRequest) {\n finalOptions = await interceptor.onRequest(url, finalOptions);\n }\n }\n\n if (this.config.debug) {\n this.logger.debug(`${finalOptions.method \|\| 'GET'} ${endpoint}`);\n }\n\n let response = await fetch(url, {\n ...finalOptions,\n signal: controller.signal,\n });\n\n // Single-shot 401 re-auth: if the provider can refresh, a 401 forces one\n // credential refresh and retry, reusing the same headers (incl. the\n // Idempotency-Key) so a mutating request is not double-submitted.\n if (response.status === 401 && this.authProvider?.canRefresh?.()) {\n const refreshed = await this.authProvider.getCredential({\n tenantId: this.config.tenantId,\n requestId,\n forceRefresh: true,\n });\n if (refreshed) {\n this.config.onCredentialRotated?.({ reason: 'unauthorized' });\n finalOptions = {\n ...finalOptions,\n headers: {\n ...(finalOptions.headers as Record<string, string>),\n Authorization: `${refreshed.scheme ?? 'Bearer'} ${refreshed.token}`,\n },\n };\n response = await fetch(url, { ...finalOptions, signal: controller.signal });\n }\n }\n\n clearTimeout(timeoutId);\n\n // Track rate limit headers\n if (this.rateLimitTracker) {\n this.rateLimitTracker.updateFromHeaders(response.headers);\n }\n\n // Binary download path\n if (requestOptions?.responseType === 'arraybuffer') {\n if (!response.ok) {\n let errData: Record<string, unknown> = {};\n try { errData = await response.json(); } catch { / ignore / }\n this.handleErrorResponse(response.status, errData, requestId);\n }\n this.circuitBreaker?.onSuccess();\n const buffer = await response.arrayBuffer();\n return buffer as unknown as T;\n }\n\n let data: Record<string, unknown> \| undefined;\n try {\n data = await response.json();\n } catch {\n // Non-JSON response (HTML error pages, 204 No Content, etc.)\n if (!response.ok) {\n this.handleErrorResponse(response.status, {\n error: `HTTP ${response.status}`,\n message: response.statusText,\n }, requestId);\n }\n // OK response but no JSON body (e.g., 204)\n this.circuitBreaker?.onSuccess();\n return undefined as unknown as T;\n }\n\n if (!response.ok) {\n this.handleErrorResponse(response.status, data \|\| {}, requestId);\n }\n\n // Record success for circuit breaker\n this.circuitBreaker?.onSuccess();\n\n // Run onResponse interceptors\n let result: unknown = data;\n for (const interceptor of this.interceptors) {\n if (interceptor.onResponse) {\n result = await interceptor.onResponse(url, result);\n }\n }\n\n if (this.config.debug) {\n this.logger.debug(`Response: ${response.status}`);\n }\n\n return result as T;\n } catch (error) {\n clearTimeout(timeoutId);\n\n // Record failure for circuit breaker (skip for client errors)\n if (\n error instanceof VesantError &&\n error.statusCode &&\n error.statusCode >= 500\n ) {\n this.circuitBreaker?.onFailure();\n } else if (error instanceof NetworkError \|\| error instanceof TimeoutError) {\n this.circuitBreaker?.onFailure();\n }\n\n // Attach requestId to VesantError instances\n if (error instanceof VesantError && !error.requestId) {\n error.requestId = requestId;\n }\n\n // Run onError interceptors\n if (error instanceof Error) {\n for (const interceptor of this.interceptors) {\n if (interceptor.onError) {\n await interceptor.onError(url, error);\n }\n }\n }\n\n if (error instanceof Error) {\n if (error.name === 'AbortError') {\n // Distinguish consumer abort from timeout\n if (requestOptions?.signal?.aborted) {\n const abortError = new VesantError('Request aborted', 'REQUEST_ABORTED');\n abortError.requestId = requestId;\n throw abortError;\n }\n this.circuitBreaker?.onFailure();\n const timeoutError = new TimeoutError(this.config.timeout);\n timeoutError.requestId = requestId;\n throw timeoutError;\n }\n if (error instanceof VesantError) {\n throw error;\n }\n }\n\n const networkError = new NetworkError('Network request failed', error);\n networkError.requestId = requestId;\n this.circuitBreaker?.onFailure();\n throw networkError;\n }\n }\n\n /\n Make an HTTP request with retry logic\n /\n protected async requestWithRetry<T>(\n endpoint: string,\n options: RequestInit = {},\n serviceURL?: string,\n retries: number = this.config.retries,\n requestOptions?: RequestOptions\n ): Promise<T> {\n let lastError: Error \| undefined;\n\n // Resolve the idempotency key once so every retry attempt reuses it, letting\n // the server dedup replays instead of re-processing (and re-billing) each try.\n const idempotencyKey = this.resolveIdempotencyKey(options.method \|\| 'GET', requestOptions);\n const attemptOptions: RequestOptions \| undefined = idempotencyKey\n ? { ...requestOptions, idempotencyKey }\n : requestOptions;\n\n for (let attempt = 0; attempt <= retries; attempt++) {\n try {\n return await this.request<T>(endpoint, options, serviceURL, attemptOptions);\n } catch (error) {\n lastError = error instanceof Error ? error : new Error('Unknown error');\n\n // Don't retry on consumer abort\n if (requestOptions?.signal?.aborted) {\n throw lastError;\n }\n\n // Don't retry on client errors (4xx), except 429 (rate limit)\n if (\n lastError instanceof VesantError &&\n lastError.statusCode &&\n lastError.statusCode >= 400 &&\n lastError.statusCode < 500 &&\n lastError.statusCode !== 429\n ) {\n throw lastError;\n }\n\n // Don't retry on last attempt\n if (attempt === retries) {\n break;\n }\n\n // Use Retry-After for 429, otherwise exponential backoff with jitter\n let delay: number;\n if (lastError instanceof RateLimitError && lastError.retryAfter) {\n delay = lastError.retryAfter 1000;\n } else {\n delay = Math.min(1000 * Math.pow(2, attempt) + Math.random() * 1000, 10000);\n }\n await new Promise((resolve) => setTimeout(resolve, delay));\n\n if (this.config.debug) {\n this.logger.debug(`Retry attempt ${attempt + 1}/${retries} after ${delay.toFixed(0)}ms`);\n }\n }\n }\n\n throw new NetworkError(`Request failed after ${retries} retries`, lastError);\n }\n\n /*\n Handle error responses from API\n /\n protected handleErrorResponse(status: number, data: Record<string, unknown>, requestId?: string): never {\n const message = (data.error as string) \|\| (data.message as string) \|\| `HTTP ${status}`;\n\n const createError = (): VesantError => {\n switch (status) {\n case 400:\n return new VesantError(message, 'BAD_REQUEST', 400);\n case 401:\n return new AuthenticationError(message);\n case 403:\n return new VesantError(message, 'FORBIDDEN', 403);\n case 404:\n return new VesantError(message, 'NOT_FOUND', 404);\n case 409:\n return new VesantError(message, 'DUPLICATE_PROFILE', 409);\n case 429: {\n const retryAfter = (data.retry_after as number \| undefined) \|\| (data.retryAfter as number \| undefined);\n return new RateLimitError(retryAfter);\n }\n case 500:\n case 502:\n case 503:\n case 504:\n return new ServiceUnavailableError(message);\n default:\n return new VesantError(message, 'UNKNOWN_ERROR', status);\n }\n };\n\n const error = createError();\n if (requestId) {\n error.requestId = requestId;\n }\n throw error;\n }\n\n /\n Build query string from parameters\n /\n protected buildQueryString(params: Record<string, unknown>): string {\n const query = new URLSearchParams();\n\n Object.entries(params).forEach(([key, value]) => {\n if (value !== undefined && value !== null) {\n if (Array.isArray(value)) {\n value.forEach((item) => query.append(key, String(item)));\n } else {\n query.append(key, String(value));\n }\n }\n });\n\n const queryString = query.toString();\n return queryString ? `?${queryString}` : '';\n }\n\n /\n Update client configuration\n /\n updateConfig(config: Partial<BaseClientConfig>): void {\n this.config = {\n ...this.config,\n ...config,\n headers: {\n ...this.config.headers,\n ...(config.headers \|\| {}),\n },\n };\n if (config.logger) {\n this.logger = config.logger;\n }\n if (config.interceptors) {\n this.interceptors = config.interceptors;\n }\n // Rebuild the auth provider when auth-related config changes so a rotated key\n // or a swapped provider takes effect on subsequent requests.\n if (config.authProvider !== undefined \|\| config.apiKey !== undefined) {\n this.authProvider =\n this.config.authProvider ??\n (this.config.apiKey ? new StaticApiKeyProvider(this.config.apiKey) : undefined);\n }\n }\n\n /\n Get current configuration (readonly)\n /\n getConfig(): Readonly<BaseClientConfig> {\n return { ...this.config };\n }\n\n /\n Get rate limit status from tracked response headers.\n /\n getRateLimitStatus(): RateLimitStatus \| null {\n return this.rateLimitTracker?.getStatus() ?? null;\n }\n\n /\n Get circuit breaker status.\n /\n getCircuitBreakerStatus(): CircuitBreakerStatus \| null {\n return this.circuitBreaker?.getStatus() ?? null;\n }\n\n /\n Health check endpoint\n /\n async healthCheck(): Promise<{ status: string; timestamp: string }> {\n return this.request('/api/v1/health');\n }\n}\n","/\n KycClient - TypeScript SDK for Vesant KYC (Know Your Customer) Service\n \n Provides type-safe methods to interact with the KYC service API.\n * Extends BaseClient for consistent retry logic, timeout handling, and error management.\n /\n\nimport { BaseClient } from '../core/client';\nimport { ValidationError } from '../core/errors';\nimport type { BaseClientConfig, RequestOptions } from '../core/config';\nimport type {\n KycClientConfig,\n KycRequest,\n KycRequestFilters,\n KycRequestListResponse,\n DocumentVerificationRequest,\n DocumentVerificationResponse,\n UpdateKycStatusRequest,\n RequestAdditionalDocumentsRequest,\n RequestKycSubmitLinkRequest,\n RequestKycSubmitLinkResponse,\n CheckKycStatusRequest,\n CheckKycStatusResponse,\n ProofDownloadURL,\n KycOverview,\n KycAlert,\n KycAlertFilters,\n KycAlertListResponse,\n UpdateKycAlertRequest,\n KycPreferences,\n UpdateKycPreferencesRequest,\n PaginationParams,\n CustomerProfile,\n CustomerProfileFilters,\n CustomerProfileListResponse,\n CreateCustomerProfileRequest,\n CreateEventBasedFaceVerificationSessionRequest,\n CreateEventBasedFaceVerificationSessionResponse,\n SubmitEventBasedFaceVerificationSessionRequest,\n EventBasedFaceVerificationCallback,\n KycHandoffSession,\n} from './types';\n\n/* Helper to add filter value to params, joining arrays with commas /\nfunction addFilterParam(\n params: Record<string, unknown>,\n key: string,\n value: string \| string[] \| undefined\n): void {\n if (value !== undefined) {\n params[key] = Array.isArray(value) ? value.join(',') : value;\n }\n}\n\n/* Helper to add simple filter values to params /\nfunction addSimpleParams(\n params: Record<string, unknown>,\n source: Record<string, unknown>,\n keys: string[]\n): void {\n for (const key of keys) {\n if (source[key] !== undefined) {\n params[key] = source[key];\n }\n }\n}\n\n/\n KycClient extends BaseClient for:\n * - Consistent retry logic with exponential backoff\n * - Unified error handling (VesantError, NetworkError, TimeoutError, etc.)\n * - Automatic timeout management\n * - Debug logging\n \n Read calls use requestWithRetry() to ride out transient failures.\n * Calls that create or bill something (submit link, document submit,\n * face session, face submit, hosted journey retry) are made exactly once.\n /\nexport class KycClient extends BaseClient {\n private userId?: string;\n private readonly riskProfileBaseURL?: string;\n\n constructor(config: KycClientConfig) {\n // Convert KycClientConfig to BaseClientConfig\n const baseConfig: BaseClientConfig = {\n baseURL: config.baseURL,\n tenantId: config.tenantId,\n apiKey: config.apiKey,\n headers: config.headers,\n timeout: config.timeout,\n retries: 3, // Default retry count for KYC calls\n debug: config.debug,\n environment: config.environment,\n };\n super(baseConfig);\n this.userId = config.userId;\n this.riskProfileBaseURL = config.riskProfileBaseURL;\n }\n\n /\n Set the user ID for operations requiring user context\n /\n setUserId(userId: string): void {\n this.userId = userId;\n }\n\n /\n Get current user ID\n /\n getUserId(): string \| undefined {\n return this.userId;\n }\n\n /\n Build headers including user ID if available\n /\n private getUserHeaders(): Record<string, string> {\n const headers: Record<string, string> = {};\n if (this.userId) {\n headers['X-User-ID'] = this.userId;\n }\n return headers;\n }\n\n // ============================================================================\n // Document Verification\n // ============================================================================\n\n /\n Request a KYC submission redirect URL for a user\n \n Generates a link that the user can visit to submit their KYC documents.\n \n Pass the `trigger_event` that matches the user action so the tenant's\n * trigger preferences decide whether verification is required; inspect\n * `kyc_required` and `reason` on the response before redirecting.\n \n Optionally pass the customer's registered identity data as\n * `customer_data` (same shape as the geolocation `customer_data` block).\n * It seeds the customer's risk profile so document verification can\n * cross-check the submitted document against trusted reference data;\n * fields never overwrite data already on the profile.\n \n The call is made once and is not retried: each request creates a new\n * KYC record and link, so a retry after a timeout would leave duplicates.\n \n @param request - Request containing the user ID, trigger event, optional redirect URL, optional callback URL (receives POST requests), and optional customer identity data\n * @returns Response containing the redirect link, KYC ID, `kyc_required`, `can_skip` and `reason`\n \n @example\n * ```typescript\n * const result = await client.requestKycSubmitLink({\n * user_id: \"user_123\",\n * trigger_event: \"onboarding\",\n * redirect_url: \"https://merchant.com/kyc-complete\", // optional\n * callback_url: \"https://merchant.com/api/kyc-webhook\", // optional - receives POST requests on status change\n * customer_data: { // optional - seeds the risk profile for document cross-checks\n * full_name: \"John Doe\",\n * date_of_birth: \"1999-06-02\", // ISO 8601\n * email: \"john@example.com\",\n * phone: \"+94771234567\",\n * address: \"12 Main St, Colombo\", // used for address verification\n * country: \"LK\"\n * }\n * });\n \n if (!result.kyc_required) return proceed();\n * console.log(`Redirect user to: ${result.link}`);\n * console.log(`KYC ID: ${result.kyc_id}`);\n * ```\n /\n async requestKycSubmitLink(\n request: RequestKycSubmitLinkRequest,\n requestOptions?: RequestOptions\n ): Promise<RequestKycSubmitLinkResponse> {\n // One-shot: creating a submit link inserts a KYC row and issues a link\n // on every call, and the platform does not replay this route from an\n // idempotency key, so an automatic retry would create duplicates.\n return this.request<RequestKycSubmitLinkResponse>('/api/v1/kyc/request', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, requestOptions);\n }\n\n /\n Create a Event-Based Face Verification session.\n \n Inspect the response before showing UI:\n * - `is_required === false` → skip face verification; `reason` explains why.\n * - `verification_url` present → embed the hosted journey and poll status.\n * - `verification_url` absent → use the local camera / QR fallback.\n \n @param request - Reference, customer_id, event, amount (for threshold events), optional URLs.\n /\n async createEventBasedFaceVerificationSession(request: CreateEventBasedFaceVerificationSessionRequest): Promise<CreateEventBasedFaceVerificationSessionResponse> {\n // One-shot: do NOT use requestWithRetry. Creating a session is a\n // non-idempotent POST that allocates server-side state (DB row + Redis\n // handoff). Retrying on timeout would create duplicate sessions and\n // burn provider references on the follow-up submit.\n return this.request<CreateEventBasedFaceVerificationSessionResponse>('/api/v1/kyc/face/session', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Submit a real-time face capture for an active Event-Based Face Verification session.\n \n Works from any device: the platform does not inspect the User-Agent.\n * `FaceCaptureModal` decides between direct capture and the QR handoff\n * on the client; custom UIs may submit from desktop or mobile alike.\n \n The `data` field on the response carries `retries_remaining`,\n * `retry_limit_exceeded`, and the reaction flags (`enforce_logout`,\n * `freeze_account`, etc.) so the tenant app can act on a final failure.\n \n @param request - Token from `createEventBasedFaceVerificationSession`, plus the base64 selfie.\n /\n async submitEventBasedFaceVerificationSession(request: SubmitEventBasedFaceVerificationSessionRequest, requestOptions?: RequestOptions): Promise<EventBasedFaceVerificationCallback> {\n // One-shot: do NOT use requestWithRetry. Submitting a selfie is a\n // non-idempotent POST — every call uploads the image, calls the\n // provider (billable), and increments the `attempts` counter on the\n // session row. Retries on transient errors would burn attempts and\n // produce multiple provider responses for one user action. Manual retries\n // (user clicks \"Try again\" in the modal) re-call this method\n // explicitly, which is the right surface for the retry decision.\n return this.request<EventBasedFaceVerificationCallback>('/api/v1/kyc/face/submit', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, requestOptions);\n }\n\n /\n Look up the current state of a Event-Based Face Verification session by its\n * session token. Useful for desktop pollers waiting on the mobile handoff.\n \n The lookup is scoped by the unguessable, server-issued session token (not\n * the enumerable forward reference): the endpoint is public/unauthenticated,\n * and scoping by the token is what prevents cross-tenant status reads.\n \n @param token - The session token returned by `createEventBasedFaceVerificationSession`.\n /\n async getEventBasedFaceVerificationSessionStatus(token: string): Promise<EventBasedFaceVerificationCallback> {\n return this.requestWithRetry<EventBasedFaceVerificationCallback>(`/api/v1/kyc/face/verify/${encodeURIComponent(token)}`, {\n method: 'GET',\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Mint a fresh hosted verification journey for the next attempt on an\n * active session whose previous hosted-journey attempt was declined.\n * Only valid while the session is active and attempts remain; the\n * response carries the new `verification_url` to embed. Used internally\n * by `FaceCaptureModal`'s Try Again flow in hosted-journey mode.\n \n @param token - The session token returned by `createEventBasedFaceVerificationSession`.\n /\n async retryEventBasedFaceVerificationJourney(token: string): Promise<CreateEventBasedFaceVerificationSessionResponse> {\n return this.request<CreateEventBasedFaceVerificationSessionResponse>('/api/v1/kyc/face/onsite/journey', {\n method: 'POST',\n body: JSON.stringify({ token }),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Fetch the Redis-backed handoff session for a token. Same backing\n * store as normal KYC (`kyc:session:<token>`, 15-minute TTL). The\n * Event-Based Face Verification database session still expires after\n * 10 minutes. Desktop callers poll `mobile_connected` to detect when a\n * mobile device has scanned the QR and attached.\n \n @param token - The session token returned by `createEventBasedFaceVerificationSession`.\n /\n async getHandoffSession(token: string): Promise<KycHandoffSession> {\n return this.request<KycHandoffSession>(\n `/api/v1/kyc/session${this.buildQueryString({ token })}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n /\n Attach a mobile device to a desktop-initiated session. The mobile\n * client calls this after scanning the QR code. The desktop poller\n * sees `mobile_connected: true` on the next `getHandoffSession`.\n \n @param token - The session token transferred via the QR payload.\n * @param isDisconnect - Pass true to release the session (default false).\n /\n async connectMobileSession(token: string, isDisconnect = false): Promise<{ mobile_connected: boolean }> {\n return this.request<{ mobile_connected: boolean }>('/api/v1/kyc/session/connect', {\n method: 'PUT',\n body: JSON.stringify({ token, is_disconnect: isDisconnect }),\n headers: this.getUserHeaders(),\n });\n }\n /\n Check KYC status for a user\n \n Returns the current KYC status:\n * - \"accepted\" / \"review.pending\" → verified (limited access while under review)\n * - \"pending\" → documents submitted, verification running: keep polling\n * - \"awaiting_kyc\" → nothing submitted yet; check `link_expired` before\n * re-surfacing or re-requesting the link. Never treat as in progress.\n * - \"declined\" → show `additional_data.declined_reasons` (fallback\n * `declined_reason`) with a retry option\n \n @param request - Request containing user_id and kyc_id\n * @returns Response with status, verification flags and, once terminal, the full record in `additional_data`\n \n @example\n * ```typescript\n * const result = await client.checkKycStatus({\n * user_id: \"user_123\",\n * kyc_id: \"550e8400-e29b-41d4-a716-446655440000\"\n * });\n \n if (result.status === 'accepted' \|\| result.status === 'review.pending') {\n * // Grant access\n * } else if (result.status === 'declined') {\n * const reasons = result.additional_data?.declined_reasons;\n * // Show error + retry option\n * } else if (result.status === 'awaiting_kyc') {\n * // Prompt to verify; request a new link when result.link_expired is true\n * } else {\n * // Keep polling\n * }\n * ```\n /\n async checkKycStatus(\n request: CheckKycStatusRequest\n ): Promise<CheckKycStatusResponse> {\n const params = {\n user_id: request.user_id,\n kyc_id: request.kyc_id,\n };\n\n return this.requestWithRetry<CheckKycStatusResponse>(\n `/api/v1/kyc/request/status${this.buildQueryString(params)}`,\n {\n method: 'GET',\n headers: this.getUserHeaders(),\n }\n );\n }\n\n /\n Submit a document verification request with OCR\n \n The call is made once and is not retried: every submission is processed\n * and billed, and the platform does not replay this route from an\n * idempotency key. Retry explicitly if the request fails.\n \n @param request - Document verification request with documents and customer info\n * @returns Verification response with status and reference\n \n @example\n * ```typescript\n * const result = await client.submitVerification({\n * reference: \"4d2aff34-ab86-422d-992e-50b1234a5b67\",\n * email: \"customer@example.com\",\n * country: \"US\",\n * document: {\n * proof: base64EncodedImage,\n * selected_type: [\"id_card\", \"passport\"],\n * name: { first_name: \"John\", last_name: \"Doe\" },\n * dob: \"1990-01-15\"\n * },\n * face: {\n * proof: base64EncodedSelfie\n * }\n * });\n \n console.log(`Verification submitted: ${result.reference}`);\n * ```\n /\n async submitVerification(\n request: DocumentVerificationRequest,\n requestOptions?: RequestOptions\n ): Promise<DocumentVerificationResponse> {\n // One-shot: a document submission is billable and non-idempotent.\n return this.request<DocumentVerificationResponse>('/api/v1/kyc/submit', {\n method: 'POST',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n }, undefined, requestOptions);\n }\n\n /\n Get a KYC request by ID\n \n @param id - KYC request ID\n * @returns KYC request details including proofs and alerts\n \n @example\n * ```typescript\n * const kyc = await client.getKycRequest(\"550e8400-e29b-41d4-a716-446655440000\");\n * console.log(`Status: ${kyc.status}, ID Verified: ${kyc.id_verified}`);\n * ```\n /\n async getKycRequest(id: string): Promise<KycRequest> {\n return this.request<KycRequest>(`/api/v1/kyc/requests/${id}`);\n }\n\n /\n List KYC requests with filters and pagination\n \n @param filters - Optional filters (status, search, date range)\n * @param pagination - Optional pagination (page, page_size)\n * @returns Paginated list of KYC requests\n \n @example\n * ```typescript\n * const requests = await client.listKycRequests(\n * { status: \"pending\", search: \"john\" },\n * { page: 1, page_size: 20 }\n * );\n * console.log(`Found ${requests.total} pending requests`);\n * ```\n /\n async listKycRequests(\n filters?: KycRequestFilters,\n pagination?: PaginationParams\n ): Promise<KycRequestListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n addFilterParam(params, 'status', filters.status);\n addSimpleParams(params, filters as unknown as Record<string, unknown>, ['search', 'fromDate', 'toDate', 'sortBy', 'order']);\n }\n\n if (pagination) {\n if (pagination.page) params.page = pagination.page;\n if (pagination.page_size) params.limit = pagination.page_size;\n }\n\n return this.request<KycRequestListResponse>(\n `/api/v1/kyc/requests${this.buildQueryString(params)}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n /\n Update KYC request status (accept/decline)\n \n @param request - Status update request with reference, status, and reason\n \n @example\n * ```typescript\n * // Accept a KYC request\n * await client.updateKycStatus({\n * reference: \"kyc-ref-123\",\n * status: \"accepted\",\n * reason: \"All documents verified successfully\"\n * });\n \n // Decline a KYC request\n * await client.updateKycStatus({\n * reference: \"kyc-ref-456\",\n * status: \"declined\",\n * reason: \"Document expired\"\n * });\n * ```\n /\n async updateKycStatus(request: UpdateKycStatusRequest): Promise<void> {\n await this.request('/api/v1/kyc/status', {\n method: 'PUT',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Request additional documents from customer\n \n @deprecated The platform does not expose this operation; the call always\n * fails. Request additional documents from the Vesant console instead.\n * This method will be removed in a future release.\n \n @param request - Request with KYC ID and document types needed\n \n @example\n * ```typescript\n * await client.requestAdditionalDocuments({\n * id: \"550e8400-e29b-41d4-a716-446655440000\",\n * document_types: [\"address\", \"document_two\"],\n * message: \"Please provide proof of address and secondary ID\"\n * });\n * ```\n /\n async requestAdditionalDocuments(\n request: RequestAdditionalDocumentsRequest\n ): Promise<void> {\n await this.request('/api/v1/kyc/requests', {\n method: 'PUT',\n body: JSON.stringify(request),\n headers: this.getUserHeaders(),\n });\n }\n\n /\n Get downloadable URLs for KYC proofs/documents\n \n @param kycId - KYC request ID\n * @returns Array of proof download URLs with expiration\n \n @example\n * ```typescript\n * const proofs = await client.getProofDownloadURLs(\"550e8400-e29b-41d4-a716-446655440000\");\n * proofs.forEach(proof => {\n * console.log(`${proof.type}: ${proof.url} (expires: ${proof.expires_at})`);\n * });\n * ```\n /\n async getProofDownloadURLs(kycId: string): Promise<ProofDownloadURL[]> {\n return this.request<ProofDownloadURL[]>(\n `/api/v1/kyc/proofs/${kycId}`,\n { headers: this.getUserHeaders() }\n );\n }\n\n // ============================================================================\n // KYC Overview & Statistics\n // ============================================================================\n\n /\n Get KYC overview statistics\n \n @param fromDate - Optional start date (ISO 8601)\n * @param toDate - Optional end date (ISO 8601)\n * @returns KYC statistics including counts by status\n \n @example\n * ```typescript\n * const overview = await client.getOverview(\n * \"2024-01-01T00:00:00Z\",\n * \"2024-12-31T23:59:59Z\"\n * );\n * console.log(`Total: ${overview.total}, Pending: ${overview.pending}`);\n * console.log(`Approved: ${overview.approved}, Rejected: ${overview.rejected}`);\n * ```\n /\n async getOverview(fromDate?: string, toDate?: string): Promise<KycOverview> {\n const params: Record<string, unknown> = {};\n if (fromDate) params.fromDate = fromDate;\n if (toDate) params.toDate = toDate;\n\n return this.request<KycOverview>(\n `/api/v1/kyc/overview${this.buildQueryString(params)}`\n );\n }\n\n // ============================================================================\n // Alert Management\n // ============================================================================\n\n /\n Get a KYC alert by ID\n \n @param alertId - Alert ID\n * @returns Alert details\n /\n async getAlert(alertId: string): Promise<KycAlert> {\n return this.request<KycAlert>(`/api/v1/kyc/alerts/${alertId}`);\n }\n\n /\n List KYC alerts with filters and pagination\n \n @param filters - Optional filters (status, risk, alert_type, assigned_for, etc.)\n * @param pagination - Optional pagination (page, page_size)\n * @returns Paginated list of alerts\n \n @example\n * ```typescript\n * const alerts = await client.listAlerts(\n * {\n * status: [\"pending\", \"in_progress\"],\n * risk: \"critical\",\n * alert_type: \"kyc\"\n * },\n * { page: 1, page_size: 20 }\n * );\n * console.log(`Found ${alerts.total} alerts`);\n * ```\n /\n async listAlerts(\n filters?: KycAlertFilters,\n pagination?: PaginationParams\n ): Promise<KycAlertListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n // Array filters that need comma joining\n addFilterParam(params, 'kyc_id', filters.kyc_id);\n addFilterParam(params, 'alert_type', filters.alert_type);\n addFilterParam(params, 'assigned_for', filters.assigned_for);\n addFilterParam(params, 'status', filters.status);\n addFilterParam(params, 'risk', filters.risk);\n // Simple filters\n addSimpleParams(params, filters as unknown as Record<string, unknown>, ['search', 'fromDate', 'toDate', 'sort_by', 'order']);\n }\n\n if (pagination) {\n if (pagination.page) params.page = pagination.page;\n if (pagination.page_size) params.limit = pagination.page_size;\n }\n\n return this.request<KycAlertListResponse>(\n `/api/v1/kyc/alerts${this.buildQueryString(params)}`\n );\n }\n\n /\n Update a KYC alert\n \n @param alertId - Alert ID\n * @param update - Fields to update (status, assigned_for, reason, alert_type)\n \n @example\n * ```typescript\n * // Assign an alert\n * await client.updateAlert(\"alert_123\", {\n * assigned_for: \"analyst_user_id\",\n * status: \"in_progress\"\n * });\n \n // Resolve an alert\n * await client.updateAlert(\"alert_123\", {\n * status: \"resolved\",\n * reason: \"Customer verified via phone call\"\n * });\n \n // Escalate an alert\n * await client.updateAlert(\"alert_123\", {\n * status: \"escalated\",\n * assigned_for: \"manager_user_id\",\n * reason: \"Requires senior review - suspicious documents\"\n * });\n * ```\n /\n async updateAlert(alertId: string, update: UpdateKycAlertRequest): Promise<void> {\n await this.request(`/api/v1/kyc/alerts/${alertId}`, {\n method: 'PUT',\n body: JSON.stringify(update),\n headers: this.getUserHeaders(),\n });\n }\n\n // ============================================================================\n // KYC Preferences\n // ============================================================================\n\n /\n Get KYC preferences for the tenant\n \n @returns KYC preferences configuration\n \n @example\n * ```typescript\n * const prefs = await client.getPreferences();\n * console.log(`Face verification required: ${prefs.is_face_verification_required}`);\n * console.log(`Required documents: ${prefs.required_document_count}`);\n * ```\n /\n async getPreferences(): Promise<KycPreferences> {\n return this.request<KycPreferences>('/api/v1/kyc/preferences');\n }\n\n /\n Update KYC preferences for the tenant\n \n @deprecated KYC preferences are managed in the Vesant console; the\n * platform exposes no update operation to the SDK, so this call always\n * fails. Use `getPreferences()` to read them. This method will be removed\n * in a future release.\n \n @param update - Fields to update\n * @returns Updated preferences\n \n @example\n * ```typescript\n * await client.updatePreferences({\n * is_face_verification_required: true,\n * is_address_verification_required: true,\n * required_document_count: 2,\n * reasons: [\n * \"Documents verified\",\n * \"Identity confirmed\",\n * \"Address matched\"\n * ]\n * });\n * ```\n /\n async updatePreferences(\n update: UpdateKycPreferencesRequest\n ): Promise<KycPreferences> {\n return this.request<KycPreferences>('/api/v1/kyc/preferences', {\n method: 'PUT',\n body: JSON.stringify(update),\n });\n }\n\n // ============================================================================\n // Customer Profile Management (Risk Profile Service)\n // ============================================================================\n\n /\n Make a request to the Risk Profile Service\n * Uses riskProfileBaseURL if configured, otherwise falls back to baseURL\n /\n private async riskProfileRequest<T>(\n path: string,\n options: RequestInit = {}\n ): Promise<T> {\n if (!this.riskProfileBaseURL) {\n throw new ValidationError(\n 'Risk Profile Service URL not configured. Please provide riskProfileBaseURL in KycClientConfig.',\n ['riskProfileBaseURL']\n );\n }\n\n return this.request<T>(path, {\n ...options,\n headers: {\n ...this.getUserHeaders(),\n ...(options.headers as Record<string, string>),\n },\n }, this.riskProfileBaseURL);\n }\n\n /\n List customer profiles for the tenant\n \n @param filters - Optional filters (risk_category, entity_type, status, search, etc.)\n * @param pagination - Optional pagination (limit, offset)\n * @returns Paginated list of customer profiles\n \n @example\n * ```typescript\n * const profiles = await client.listCustomerProfiles(\n * { risk_category: 'high', entity_type: 'individual' },\n * { limit: 20, offset: 0 }\n * );\n * console.log(`Found ${profiles.total} profiles`);\n * profiles.profiles.forEach(p => console.log(p.customer_id, p.full_name));\n * ```\n /\n async listCustomerProfiles(\n filters?: CustomerProfileFilters,\n pagination?: { limit?: number; offset?: number }\n ): Promise<CustomerProfileListResponse> {\n const params: Record<string, unknown> = {};\n\n if (filters) {\n // Array filters (keep as arrays for this API)\n if (filters.risk_category) {\n params.risk_category = Array.isArray(filters.risk_category)\n ? filters.risk_category\n : [filters.risk_category];\n }\n if (filters.entity_type) {\n params.entity_type = Array.isArray(filters.entity_type)\n ? filters.entity_type\n : [filters.entity_type];\n }\n if (filters.status) {\n params.status = Array.isArray(filters.status)\n ? filters.status\n : [filters.status];\n }\n // Simple filters\n addSimpleParams(params, filters as unknown as Record<string, unknown>, [\n 'search', 'is_pep', 'has_sanctions', 'requires_edd', 'sort_by', 'sort_order'\n ]);\n }\n\n if (pagination) {\n addSimpleParams(params, pagination, ['limit', 'offset']);\n }\n\n return this.riskProfileRequest<CustomerProfileListResponse>(\n `/api/v1/risk-dashboard/profiles${this.buildQueryString(params)}`\n );\n }\n\n /\n Get a customer profile by ID\n \n @param profileId - The profile UUID\n * @returns Customer profile details\n \n @example\n * ```typescript\n * const profile = await client.getCustomerProfile('uuid-here');\n * console.log(`Customer: ${profile.full_name}, Risk: ${profile.risk_category}`);\n * ```\n /\n async getCustomerProfile(profileId: string): Promise<CustomerProfile> {\n return this.riskProfileRequest<CustomerProfile>(\n `/api/v1/risk-dashboard/profiles/${profileId}`\n );\n }\n\n /\n Create a new customer profile\n \n A customer profile must exist before submitting KYC verification.\n * The customer_id field will be used as the 'reference' in KYC submissions.\n \n @param profile - Customer profile data\n * @returns Created customer profile\n \n @example\n * ```typescript\n * const profile = await client.createCustomerProfile({\n * customer_id: 'cust_123',\n * entity_type: 'individual',\n * full_name: 'John Doe',\n * email_address: 'john@example.com',\n * country_of_residence: 'US'\n * });\n * console.log(`Created profile: ${profile.id}`);\n \n // Now you can submit KYC using the customer_id as reference\n * await client.submitVerification({\n * reference: profile.customer_id, // 'cust_123'\n * email: 'john@example.com',\n * // ... other fields\n * });\n * ```\n /\n async createCustomerProfile(\n profile: CreateCustomerProfileRequest\n ): Promise<CustomerProfile> {\n return this.riskProfileRequest<CustomerProfile>('/api/v1/profiles', {\n method: 'POST',\n body: JSON.stringify(profile),\n });\n }\n\n // ============================================================================\n // Utility Methods (inherited from BaseClient: healthCheck, updateConfig, getConfig, buildQueryString)\n // ============================================================================\n}\n","/\n TypeScript type definitions for Vesant KYC Service API\n \n These types match the Go API structures in:\n * - services/kyc-service/internal/domain/\n * - services/kyc-service/internal/service/\n * - services/kyc-service/internal/handler/\n /\n\nimport type { PaginationParams, RiskLevel, Reason } from '../core/types';\n\n// Re-export commonly used types from core\nexport type { PaginationParams, RiskLevel };\n\n// ============================================================================\n// KYC Status & Enumerations\n// ============================================================================\n\nexport type KycStatus =\n /* Submit link issued but the customer has not submitted documents yet — not \"in progress\". /\n \| 'awaiting_kyc'\n /* Documents submitted, verification in progress. /\n \| 'pending'\n \| 'accepted'\n \| 'declined'\n \| 'review.pending'\n \| 'unknown';\n\nexport type KycDeclinedCode =\n \| 'KYC_DOCUMENT_EXPIRED'\n \| 'KYC_DOCUMENT_INVALID'\n \| 'KYC_FACE_MISMATCH'\n \| 'KYC_AGE_REQUIREMENT'\n \| 'KYC_DUPLICATE_IDENTITY'\n \| 'KYC_ADDRESS_MISMATCH'\n \| 'KYC_NAME_MISMATCH'\n \| 'KYC_PROVIDER_REJECTED'\n \| 'KYC_DECLINED';\n\nexport const KYC_DECLINED_DESCRIPTIONS: Record<KycDeclinedCode, string> = {\n KYC_DOCUMENT_EXPIRED: 'The submitted document has expired',\n KYC_DOCUMENT_INVALID: 'The submitted document could not be verified',\n KYC_FACE_MISMATCH: 'Face verification did not match the identity document',\n KYC_AGE_REQUIREMENT: 'Age requirement not met',\n KYC_DUPLICATE_IDENTITY: 'This identity has already been verified under another account',\n KYC_ADDRESS_MISMATCH: 'Address verification failed',\n KYC_NAME_MISMATCH: 'Name on document does not match the registered name',\n KYC_PROVIDER_REJECTED: 'Identity verification was rejected by the verification provider',\n KYC_DECLINED: 'Identity verification was declined',\n};\n\nexport type KycAlertStatus = 'pending' \| 'in_progress' \| 'resolved' \| 'closed' \| 'escalated';\n\nexport type KycAlertType = 'kyc' \| 'fraud';\n\nexport type DocumentType = 'id_card' \| 'driving_license' \| 'passport';\n\nexport type ProofType =\n \| 'document'\n \| 'document_two'\n \| 'face'\n \| 'address'\n \| 'additional_document';\n\nexport type SupportedDocumentType = 'id_card' \| 'passport' \| 'driving_license';\n\n/* Document types a tenant can accept as proof of address. /\nexport type SupportedAddressDocumentType =\n \| 'id_card'\n \| 'passport'\n \| 'driving_license'\n \| 'utility_bill'\n \| 'bank_statement'\n \| 'rent_agreement'\n \| 'employer_letter'\n \| 'insurance_agreement'\n \| 'tax_bill'\n \| 'envelope'\n \| 'cpr_smart_card_reader_copy'\n \| 'property_tax'\n \| 'lease_agreement'\n \| 'insurance_card'\n \| 'permanent_residence_permit'\n \| 'credit_card_statement'\n \| 'insurance_policy'\n \| 'e_commerce_receipt'\n \| 'bank_letter_receipt'\n \| 'birth_certificate'\n \| 'salary_slip';\n\n// ============================================================================\n// KYC Request Types\n// ============================================================================\n\nexport interface KycRequest {\n id: string;\n reference: string;\n forward_reference?: string;\n tenant_id: string;\n first_name: string;\n middle_name?: string;\n last_name: string;\n dob?: string;\n full_address?: string;\n email?: string;\n\n // Details extracted from the primary document (present once verification has run)\n gender?: string;\n height?: string;\n country?: string;\n country_code?: string;\n nationality?: string;\n authority?: string;\n document_type?: string;\n document_number?: string;\n personal_number?: string;\n place_of_birth?: string;\n issue_date?: string;\n expiry_date?: string;\n age?: number;\n\n // Details extracted from the secondary document, when one was required\n document_two_type?: string;\n document_two_number?: string;\n document_two_first_name?: string;\n document_two_middle_name?: string;\n document_two_last_name?: string;\n document_two_dob?: string;\n document_two_gender?: string;\n document_two_height?: string;\n document_two_country?: string;\n document_two_country_code?: string;\n document_two_nationality?: string;\n document_two_authority?: string;\n document_two_personal_number?: string;\n document_two_place_of_birth?: string;\n document_two_issue_date?: string;\n document_two_expiry_date?: string;\n\n // Verification Status Flags\n id_verified: boolean;\n address_verified: boolean;\n face_verified: boolean;\n age_verified: boolean;\n\n // Overall Status\n status: KycStatus;\n location?: string;\n identity_hash?: string;\n /* True when verification could not run because of an internal failure. /\n is_internal_error?: boolean;\n /* The `trigger_event` the submit link was requested with. /\n event?: string;\n\n // Preferences at time of submission\n required_document_count: number;\n supported_document_types?: SupportedDocumentType[];\n supported_address_document_types?: SupportedAddressDocumentType[];\n is_id_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n\n // URLs\n callback_url: string;\n redirect_url?: string;\n\n // Reasons & Warnings\n /* Structured decline reasons. Present when status is `declined`. /\n declined_reasons?: Reason[];\n /* Structured, non-blocking warnings. /\n warning_reasons?: Reason[];\n /* @deprecated Use {@link declined_reasons}. Comma-joined message text. /\n declined_reason?: string;\n /* @deprecated Use the `code` on {@link declined_reasons}. /\n declined_code?: KycDeclinedCode;\n accepted_reason?: string;\n other_reason?: string;\n /* @deprecated Use {@link warning_reasons}. /\n warnings?: Record<string, Record<string, string>>;\n\n // Block Action\n /\n Tenant app should block onboarding/the action when true. Set when a\n * failed verification matches a per-event KYC alert rule with the `block`\n * reaction; sticky once set (a later non-blocking update won't clear it).\n /\n block: boolean;\n /\n Names the configured verification that triggered the block (e.g.\n * `document_verification`, `face_verification`, `address_verification`,\n * `age_verification`). Empty when {@link block} is false.\n /\n block_reason?: string;\n\n // Relationships\n proofs?: Proof[];\n alerts?: KycAlert[];\n risk_profile?: KycCustomerProfile;\n\n created_at: string;\n updated_at: string;\n}\n\nexport interface Proof {\n id: string;\n kyc_id: string;\n type: ProofType;\n document: string;\n document_number?: string;\n created_at: string;\n}\n\nexport interface ProofDownloadURL {\n type: ProofType;\n url: string;\n expires_at: string;\n}\n\n// ============================================================================\n// KYC Customer Profile (Risk Profile Reference)\n// ============================================================================\n\nexport interface KycCustomerProfile {\n id: string;\n tenant_id: string;\n customer_id: string;\n first_name?: string;\n last_name?: string;\n email?: string;\n risk_score: number;\n risk_level: RiskLevel;\n kyc_status?: string;\n pep_status?: boolean;\n sanctions_status?: boolean;\n created_at: string;\n updated_at: string;\n}\n\n// ============================================================================\n// KYC Alert Types\n// ============================================================================\n\nexport interface KycAlert {\n id: string;\n kyc_id: string;\n tenant_id: string;\n alert_type: KycAlertType;\n alert_text: string;\n risk: RiskLevel;\n assigned_for?: string;\n reason?: string;\n status: KycAlertStatus;\n created_at: string;\n updated_at: string;\n}\n\nexport interface KycAlertFilters {\n kyc_id?: string \| string[];\n alert_type?: KycAlertType \| KycAlertType[];\n assigned_for?: string \| string[];\n status?: KycAlertStatus \| KycAlertStatus[];\n risk?: RiskLevel \| RiskLevel[];\n search?: string;\n fromDate?: string;\n toDate?: string;\n sort_by?: string;\n order?: 'ASC' \| 'DESC';\n}\n\nexport interface KycAlertListResponse {\n alerts: KycAlert[];\n pagination: KycPagination;\n}\n\nexport interface UpdateKycAlertRequest {\n assigned_for?: string;\n reason?: string;\n alert_type?: KycAlertType;\n status?: KycAlertStatus;\n}\n\n// ============================================================================\n// KYC Preferences Types\n// ============================================================================\n\n/\n Threshold-gated trigger for transaction events. Each rule is\n * self-contained — there is no umbrella flag.\n \n - `enabled=false` → event blocked.\n * - `enabled=true`, `threshold=0` (or null/omitted) → every event of this\n * type triggers Event-Based Face Verification, regardless of amount.\n * - `enabled=true`, `threshold>0` → only amounts `>= threshold` trigger.\n /\nexport interface EventBasedFaceVerificationThresholdTrigger {\n enabled: boolean;\n /* USD threshold; 0 / null / omitted means \"any amount\". /\n threshold: number;\n}\n\n/\n Rate-of-occurrence trigger (used by `high_frequency_betting`). The\n * tenant tells the server how many events have happened over how many\n * minutes via the request body (`event_count`, `event_window_minutes`);\n * the server triggers when `event_count >= count` AND\n * `event_window_minutes <= window_minutes`. Either bound of 0 means\n * \"don't enforce that bound\".\n /\nexport interface EventBasedFaceVerificationFrequencyTrigger {\n enabled: boolean;\n /* Minimum number of events; 0 / null / omitted means \"any count\". /\n count: number;\n /* Maximum lookback window in minutes; 0 / null / omitted means \"any window\". /\n window_minutes: number;\n}\n\n/* Events that can trigger Event-Based Face Verification for a tenant. /\nexport interface EventBasedFaceVerificationTriggers {\n // Account-sensitive events\n login: boolean;\n password_change: boolean;\n name_change: boolean;\n phone_number_change: boolean;\n two_factor_auth_change: boolean;\n new_device_or_location: boolean;\n device_fingerprint_change: boolean;\n payment_method_change: boolean;\n\n // Transaction events — each rule is self-contained; there is no\n // umbrella flag. To enable a transaction event, set its `enabled`\n // field to true (and configure the relevant threshold / count /\n // window). To disable, set `enabled` to false.\n deposit: EventBasedFaceVerificationThresholdTrigger;\n withdrawal: EventBasedFaceVerificationThresholdTrigger;\n large_bet_placement: EventBasedFaceVerificationThresholdTrigger;\n high_frequency_betting: EventBasedFaceVerificationFrequencyTrigger;\n account_balance_transfer: boolean;\n}\n\n/\n Retry budget for Event-Based Face Verification. This is the only field the\n * platform stores here; the reactions taken when the budget is exhausted\n * (`trigger_alert`, `enforce_logout`, `freeze_account`, `block`,\n * `freeze_duration_minutes`) come from the tenant's per-event KYC alert\n * configuration and are reported on\n * {@link EventBasedFaceVerificationReactionResult}.\n /\nexport interface EventBasedFaceVerificationReactions {\n /* Retries after the first attempt; total submissions = this + 1. /\n max_retry_attempts: number;\n /* @deprecated Never populated; read `data.trigger_alert` on the callback instead. /\n trigger_alert?: boolean;\n /* @deprecated Never populated; read `data.enforce_logout` on the callback instead. /\n enforce_logout?: boolean;\n /* @deprecated Never populated; read `data.freeze_account` on the callback instead. /\n freeze_account?: boolean;\n /* @deprecated Never populated; read `data.freeze_duration_minutes` on the callback instead. /\n freeze_duration_minutes?: number;\n}\n\n/* Per-event toggles that decide when a submit-link request requires KYC. /\nexport interface KycVerificationTriggers {\n onboarding: boolean;\n first_withdrawal: boolean;\n first_purchase: boolean;\n /* Re-trigger verification once the customer's identity document has expired. /\n auto_trigger_on_id_expiration: boolean;\n}\n\nexport interface KycSkipOptions {\n /* Let a `manual` trigger be skipped (`can_skip` on the submit-link response). /\n allow_skip_on_manual: boolean;\n}\n\n/* Tenant-defined reasons available to reviewers for a given resource. /\nexport interface KycOtherReason {\n resource: string;\n reasons: string[];\n}\n\n/* Disclosure text shown to the customer on the hosted submission page. /\nexport interface KycDisclosureConsent {\n data_collected: string[];\n data_usage: string[];\n data_sharing: {\n third_party_providers: boolean;\n regulatory_authorities: boolean;\n internal_systems: boolean;\n provider_names?: string[];\n };\n data_retention_period: string;\n customer_rights: {\n can_access: boolean;\n can_correct: boolean;\n can_delete: boolean;\n contact_info?: string;\n };\n}\n\nexport interface KycPreferences {\n id: string;\n tenant_id: string;\n approve_kyc_reasons: string[];\n other_reasons?: KycOtherReason[];\n is_document_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n is_duplicate_verification_required?: boolean;\n /* Master switch for the Event-Based Face Verification feature. /\n is_reuse_kyc_enabled?: boolean;\n min_age: number;\n max_age: number;\n required_document_count: number;\n critical_risk_score: number;\n high_risk_score: number;\n medium_risk_score: number;\n supported_document_types: SupportedDocumentType[];\n supported_address_document_types?: SupportedAddressDocumentType[];\n /* Tenant-level callback URL used when a submit-link request passes none. /\n callback_url?: string;\n address_fuzzy_match?: boolean;\n document_fuzzy_match?: boolean;\n document_translate?: boolean;\n decline_on_single_step?: boolean;\n allow_warnings?: boolean;\n backside_proof_required?: boolean;\n document_two_backside_proof_required?: boolean;\n verification_mode?: string;\n document_upload_option?: boolean;\n disclosure_consent?: KycDisclosureConsent;\n /* Per-event toggles for document verification (`requestKycSubmitLink`). /\n kyc_triggers?: KycVerificationTriggers;\n kyc_skip_options?: KycSkipOptions;\n /* Per-event triggers for Event-Based Face Verification. /\n reuse_kyc_triggers?: EventBasedFaceVerificationTriggers;\n /* Retry budget for Event-Based Face Verification. /\n reuse_kyc_reactions?: EventBasedFaceVerificationReactions;\n created_at: string;\n updated_at: string;\n}\n\n/\n @deprecated KYC preferences are managed in the Vesant console; the platform\n * exposes no update operation to the SDK, so `updatePreferences` always fails.\n * This type will be removed in a future release.\n /\nexport interface UpdateKycPreferencesRequest {\n reasons?: string[];\n is_document_verification_required?: boolean;\n is_face_verification_required?: boolean;\n is_address_verification_required?: boolean;\n is_age_verification_required?: boolean;\n is_reuse_kyc_enabled?: boolean;\n min_age?: number;\n max_age?: number;\n required_document_count?: number;\n critical_risk_score?: number;\n high_risk_score?: number;\n medium_risk_score?: number;\n supported_document_types?: SupportedDocumentType[];\n /* Partial update — only the events present here are changed. /\n reuse_kyc_triggers?: Partial<EventBasedFaceVerificationTriggers>;\n /* Partial update — only the keys present here are changed. /\n reuse_kyc_reactions?: Partial<EventBasedFaceVerificationReactions>;\n}\n\n// ============================================================================\n// Document Verification Request Types\n// ============================================================================\n\nexport interface Name {\n first_name?: string;\n middle_name?: string;\n last_name?: string;\n full_name?: string;\n}\n\nexport interface SubmittedDocument {\n /* Base64 encoded document image /\n proof: string;\n /* Base64 additional document image (back side, etc.) /\n additional_proof?: string;\n /* Document number for search/verification /\n document_number?: string;\n /* Document types to verify against /\n selected_type?: DocumentType[];\n /* Extracted/provided name /\n name?: Name;\n /* Date of birth (YYYY-MM-DD) /\n dob?: string;\n /* Issue date (YYYY-MM-DD) /\n issue_date?: string;\n /* Expiry date (YYYY-MM-DD) /\n expiry_date?: string;\n /* Gender /\n gender?: string;\n}\n\nexport interface FaceProof {\n /* Base64 encoded face image or selfie /\n proof: string;\n}\n\nexport interface DocumentVerificationRequest {\n /* Customer reference ID /\n reference: string;\n /* Callback URL for async verification results /\n callback_url: string;\n /* Customer email /\n email: string;\n /* Country code (ISO 3166-1 alpha-2) /\n country: string;\n /* Language code /\n language: string;\n /* Full address for verification /\n full_address?: string;\n /* Base64 encoded address proof document /\n address_proof?: string;\n /* Primary document /\n document: SubmittedDocument;\n /* Secondary document (optional) /\n document_two?: SubmittedDocument;\n /* Face verification proof (optional) /\n face?: FaceProof;\n /* Additional metadata /\n token?: string;\n}\n\nexport interface DocumentVerificationResponse {\n id: string;\n reference: string;\n status: KycStatus;\n verification_url?: string;\n message?: string;\n}\n\n// ============================================================================\n// KYC Status Update Types\n// ============================================================================\n\nexport interface UpdateKycStatusRequest {\n /* Provider reference or KYC ID /\n reference: string;\n /* Target status /\n status: KycStatus;\n /* Acceptance/decline reason /\n reason?: string;\n /* Provider warnings data /\n warnings?: Record<string, Record<string, string>>;\n}\n\n// ============================================================================\n// KYC Submit Link Request Types\n// ============================================================================\n\n/\n Events that can trigger a KYC request. Each maps to a per-event toggle in\n * the tenant's KYC verification trigger preferences, except `manual` (always\n * required) and `login` (only for an expired identity document).\n /\nexport type KycTriggerEvent =\n \| 'onboarding'\n \| 'first_withdrawal'\n \| 'first_purchase'\n /* Aliases of `first_withdrawal` / `first_purchase` — same tenant toggles. /\n \| 'withdrawal'\n \| 'purchase'\n \| 'manual'\n /\n The customer is signing in. Answers for any state: never verified (asked,\n * not skippable, per the tenant's onboarding policy), document expired\n * (asked, skippable — \"Remind me later\"), or verified with a valid document\n * (not asked). One call covers every customer.\n /\n \| 'login';\n\n/\n Why verification is — or is not — being asked for. Codes are stable;\n * `message` is display-ready text you can show the customer as-is.\n /\nexport interface KycRequestReason {\n code: KycRequestReasonCode \| (string & Record<string, never>);\n message: string;\n}\n\n/\n Reason codes returned by `requestKycSubmitLink`. Treat unrecognised codes\n * as \"verification required\" and fall back to `message` for display.\n /\nexport type KycRequestReasonCode =\n /* Required to complete registration. /\n \| 'KYC_REQUIRED_ONBOARDING'\n /* Required before the customer's first withdrawal. /\n \| 'KYC_REQUIRED_FIRST_WITHDRAWAL'\n /* Required before the customer's first purchase. /\n \| 'KYC_REQUIRED_FIRST_PURCHASE'\n /* The customer's identity document has expired and must be re-verified. /\n \| 'KYC_REQUIRED_ID_EXPIRED'\n /* Verification was explicitly requested by the tenant. /\n \| 'KYC_REQUIRED_MANUAL'\n /* Not required — the customer already has an accepted verification. /\n \| 'KYC_NOT_REQUIRED_ALREADY_VERIFIED'\n /* Not required — the tenant has this trigger event switched off. /\n \| 'KYC_NOT_REQUIRED_TRIGGER_DISABLED';\n\nexport interface RequestKycSubmitLinkRequest {\n /* User ID to generate KYC submission link for /\n user_id: string;\n /* URL to redirect user after KYC submission (optional) /\n redirect_url?: string;\n /* URL to receive callback notifications via POST request when KYC status changes (optional) /\n callback_url?: string;\n /\n Event that triggered the KYC request. The tenant's KYC verification\n * trigger preferences decide, per event, whether KYC is required\n * (`kyc_required` in the response). \"manual\" always requires KYC and\n * honors the tenant's allow-skip-on-manual option (`can_skip`). \"login\"\n * answers for any customer state — never verified (asked, not skippable),\n * document expired (asked, skippable so you can offer \"Remind me later\"),\n * or verified and valid (not asked) — so a platform that gates entry on KYC\n * needs only this one call at sign-in. The same expired document is not\n * skippable on withdrawal / purchase events: it is enforced on\n * \"first_withdrawal\", \"withdrawal\", \"first_purchase\" and \"purchase\" alike,\n * so keep sending whichever of those you already send.\n * Omitted or unknown values default to KYC required with no skip.\n /\n trigger_event?: KycTriggerEvent \| (string & Record<string, never>);\n /\n Registered customer identity data (optional). Seeds the customer's risk\n * profile so document verification can cross-check the submitted document\n * against trusted reference data (name/DOB match, address verification).\n * Fields never overwrite data already on the profile.\n /\n customer_data?: KycCustomerData;\n}\n\n/\n Customer identity data supplied by your platform on a submit-link request.\n * Mirrors the geolocation `customer_data` contract. Every field is optional\n * and never overwrites data already on the customer's risk profile.\n /\nexport interface KycCustomerData {\n /\n Customer's registered full name. Used to match the OCR-extracted name\n * on the submitted document.\n /\n full_name?: string;\n /\n Customer's registered date of birth. ISO 8601 date (\"1999-06-02\") or an\n * RFC 3339 timestamp (\"1986-09-06T18:30:00.000+00:00\", as produced by\n * `Date.prototype.toISOString()`) — for timestamps the date portion is\n * used. Used for DOB matching against the submitted document.\n /\n date_of_birth?: string;\n /* Customer's email address /\n email?: string;\n /* Customer's phone number /\n phone?: string;\n /* Customer's residential address. Used for address verification. /\n address?: string;\n /* Customer's country of residence /\n country?: string;\n}\n\n/\n Trigger events that can request Event-Based Face Verification.\n \n Account-sensitive: any sensitive change to the account profile.\n * Transaction events: covered by the per-event rules in\n * `EventBasedFaceVerificationTriggers` (`deposit`, `withdrawal`, `large_bet_placement`,\n * `high_frequency_betting`, `account_balance_transfer`).\n /\nexport type EventBasedFaceVerificationEvent =\n \| 'login'\n \| 'password_change'\n \| 'name_change'\n \| 'phone_number_change'\n \| 'two_factor_auth_change'\n \| 'new_device_or_location'\n \| 'device_fingerprint_change'\n \| 'payment_method_change'\n \| 'deposit'\n \| 'withdrawal'\n \| 'large_bet_placement'\n \| 'high_frequency_betting'\n \| 'account_balance_transfer';\n\nexport interface CreateEventBasedFaceVerificationSessionRequest {\n /* Unique reference for the KYC session (e.g., customer ID or transaction ID) /\n reference: string;\n /* Customer ID to associate with the KYC session /\n customer_id: string;\n /\n The triggering event. One of the `EventBasedFaceVerificationEvent` union members.\n * Required — when empty, the server falls through to the unknown-event\n * passthrough and allows the request silently.\n /\n event: EventBasedFaceVerificationEvent;\n /\n USD amount associated with the event. Required for threshold-gated\n * events (`deposit`, `withdrawal`, `large_bet_placement`); ignored for\n * everything else. Missing/zero with a non-zero threshold blocks the\n * session.\n /\n amount?: number;\n /\n Number of qualifying events the customer has performed in the\n * window described by `event_window_minutes`. Required for\n * frequency-gated events (`high_frequency_betting`); ignored for\n * everything else.\n /\n event_count?: number;\n /\n Lookback window (in minutes) the tenant counted `event_count` over.\n * Required for frequency-gated events alongside `event_count`. A\n * window larger than the tenant's configured `window_minutes`\n * implies a slower rate than \"high frequency\" and blocks the session.\n /\n event_window_minutes?: number;\n /* URL to redirect user after validate the facial submission (optional) /\n redirect_url?: string;\n /* URL to receive callback notifications via POST request when Event-Based Face Verification status changes (optional) /\n callback_url?: string;\n}\n\nexport interface SubmitEventBasedFaceVerificationSessionRequest {\n /* Event-Based Face Verification session token generated from createEventBasedFaceVerificationSession /\n token: string;\n /* Base64 encoded face image or selfie for verification /\n proof: string;\n /* Unique reference for the KYC session (e.g., customer ID or transaction ID) /\n reference?: string;\n /\n Optional capture telemetry (JSON string): the face-detection\n * bounding-box samples recorded in the moments before capture. Attached\n * automatically by `FaceCaptureModal` when in-modal detection is active;\n * omit when building a custom capture UI without detection. Stored\n * verbatim server-side for audit/review — a weak presence signal, not\n * certified anti-spoofing.\n /\n liveness_artifact?: string;\n}\n\nexport interface RequestKycSubmitLinkResponse {\n /* Generated KYC submission redirect URL /\n link: string;\n /* KYC request ID /\n kyc_id: string;\n /\n Whether KYC is required for the reported `trigger_event`, per the\n * tenant's verification trigger preferences. `false` when the trigger\n * is disabled for the tenant, or when the customer is already verified\n * (in that case `link` and `kyc_id` are empty).\n /\n kyc_required: boolean;\n /\n Whether the user may skip verification. `true` for\n * `trigger_event: \"manual\"` when the tenant enables allow-skip-on-manual,\n * for `\"login\"` when an expired identity document triggered the request\n * (offer \"Remind me later\"), and when the customer is already verified.\n * Always `false` at `\"withdrawal\"` / `\"purchase\"` — that is where a\n * postponed re-verification becomes mandatory.\n /\n can_skip: boolean;\n /\n Why verification is — or is not — being asked for. Use `reason.code` to\n * branch (for example `KYC_REQUIRED_ID_EXPIRED` warrants a different prompt\n * than a first-time verification) and `reason.message` for display.\n /\n reason?: KycRequestReason;\n}\n\n/\n Body POSTed to your `callback_url` when a customer's identity document\n * passes its expiry date. Signed with `X-Webhook-Signature: sha256=<hex>`\n * (HMAC-SHA256 of the raw body), like every other Vesant callback.\n \n An expiry happens on a date, not on a customer action, so this webhook\n * is the only signal for it — nothing the customer does triggers it. Delivered\n * once per customer, when the document first becomes expired.\n \n It is sent regardless of the tenant's auto-trigger-on-ID-expiration setting:\n * that setting governs whether verification is enforced, not whether you are\n * told.\n /\nexport interface KycDocumentExpiredCallbackEvent {\n /* Always `\"kyc_document_expired\"` — dispatch on this. /\n event: 'kyc_document_expired';\n /* Your customer identifier (the `user_id` you supplied). /\n reference: string;\n /* The customer's risk-profile ID. /\n resource_id: string;\n /\n Always `\"expired\"`. Describes the document — not the customer's KYC\n * status, which remains `accepted` until they re-verify.\n /\n status: 'expired';\n data: {\n customer_id: string;\n /* The document's expiry date (ISO 8601 `YYYY-MM-DD`). /\n id_expiry_date: string;\n };\n}\n\n/\n Type guard for the identity-document expiry webhook. Narrows an already\n * signature-verified, parsed payload to {@link KycDocumentExpiredCallbackEvent}.\n /\nexport function isKycDocumentExpiredCallbackEvent(\n value: unknown\n): value is KycDocumentExpiredCallbackEvent {\n return (\n typeof value === 'object' &&\n value !== null &&\n (value as { event?: unknown }).event === 'kyc_document_expired'\n );\n}\n\n/* Device class detected by the SDK (purely client-side — server doesn't care). /\nexport type EventBasedFaceVerificationDeviceType = 'mobile' \| 'desktop';\n\nexport interface CreateEventBasedFaceVerificationSessionResponse {\n /* Event-Based Face Verification session reference (echo of the request reference) /\n reference: string;\n /* Generated Event-Based Face Verification session token, valid 10 minutes /\n token: string;\n /\n Empty string when Event-Based Face Verification is required. When `is_required` is\n * false, this contains the human-readable reason (e.g. feature\n * disabled, threshold not met, customer has no prior KYC).\n /\n reason: string;\n /* Whether the caller must complete the face capture before proceeding /\n is_required: boolean;\n /\n Public HTTPS handoff URL the SDK encodes into a QR code on desktop.\n * The mobile device scans it, lands on the tenant frontend's\n * /reuse-kyc-submit page, and completes the face capture there. Empty\n * when the server has no `BASE_URL_FRONTEND` configured — the SDK\n * falls back to building its own URL in that case.\n /\n link: string;\n /* Failed face-capture attempts so far on this session. 0 on a fresh session. /\n attempts: number;\n /\n Total submissions permitted before reactions fire\n * (`reuse_kyc_reactions.max_retry_attempts + 1`).\n /\n max_attempts: number;\n /\n Hosted verification journey URL. When present, the capture runs on a\n * hosted page (embedded by `FaceCaptureModal` in an iframe) instead of the\n * SDK's local camera; the verdict is read via the session status poll.\n * Absent when the platform runs the local-capture flow.\n /\n verification_url?: string;\n}\n\n/\n Reaction outcome returned on every face-submit callback. Tenant apps\n * use this to decide whether to allow another retry, end the session,\n * or freeze the account. Reaction flags are only populated when\n * `retry_limit_exceeded` is true.\n /\nexport interface EventBasedFaceVerificationReactionResult {\n /* Submissions the customer still has before the retry limit fires. /\n retries_remaining: number;\n /* True once the latest failed attempt exhausts the retry policy. /\n retry_limit_exceeded: boolean;\n trigger_alert: boolean;\n enforce_logout: boolean;\n freeze_account: boolean;\n /* Tenant app should block the action/account when true. /\n block: boolean;\n freeze_duration_minutes: number;\n /* Set when an alert was raised on the dashboard. /\n alert_id?: string;\n}\n\n/\n Shape of the webhook body POSTed to `callback_url` after a Event-Based Face Verification\n * submission completes (also returned synchronously from\n * `submitEventBasedFaceVerificationSession`).\n /\nexport interface EventBasedFaceVerificationCallback {\n event: 'reuse_kyc';\n reference: string;\n resource_id: string;\n status: KycStatus;\n /\n True when the tenant app should block the action/account. Mirrors the\n * `block` reaction on {@link data} at the top level of the callback so\n * consumers can branch without inspecting `data`. Omitted when false.\n /\n block?: boolean;\n /* Names the event/verification that triggered the block. Omitted when not blocked. /\n block_reason?: string;\n /\n Structured decline reasons. Returned by\n * `getEventBasedFaceVerificationSessionStatus`; the submit response and the\n * webhook carry {@link declined_reason} only.\n /\n declined_reasons?: Reason[];\n /* Decline text. Present on the submit response, the webhook, and status lookups. /\n declined_reason?: string;\n /* @deprecated Use structured reasons. /\n warnings?: Record<string, Record<string, string>>;\n data: EventBasedFaceVerificationReactionResult;\n}\n\n/\n Server-side handoff state backed by the normal KYC Redis store (15-minute\n * cache TTL). Event-Based Face Verification remains valid for 10 minutes;\n * this cache does not extend that session. Desktop clients poll it to detect\n * when a mobile device has attached to the same token via QR.\n /\nexport interface KycHandoffSession {\n document: string;\n document_backside: string;\n document_two: string;\n document_two_backside: string;\n address: string;\n face: string;\n /* True after a mobile device hits PUT /api/v1/kyc/session/connect. /\n mobile_connected: boolean;\n /* True after the (normal-KYC) document submission completes; unused for Event-Based Face Verification. /\n is_submitted: boolean;\n}\n\n// ============================================================================\n// KYC Status Check Types\n// ============================================================================\n\nexport interface CheckKycStatusRequest {\n /* Customer identifier. Sent for context only — the lookup is by kyc_id. /\n user_id: string;\n /* The KYC request ID returned by requestKycSubmitLink; drives the status lookup. /\n kyc_id: string;\n}\n\n/\n Response from checkKycStatus. Always returns the same shape.\n \n `additional_data` is absent or `null` while `status` is `'awaiting_kyc'` or\n * `'pending'` — the key is omitted on a newly created record, so guard with a\n * truthiness check (`if (result.additional_data)`), never `!== null`.\n * Otherwise it contains the full KYC record including document details,\n * proofs, and the customer's risk profile.\n \n `status === 'awaiting_kyc'` means the submit link was issued but the\n * customer has not submitted documents — treat it as \"not started\", never as\n * \"in progress\". Check `link_expired`: `false` → re-surface the existing\n * link; `true` → request a fresh one via `requestKycSubmitLink`.\n /\nexport interface CheckKycStatusResponse {\n id: string;\n forward_reference: string;\n status: KycStatus;\n id_verified: boolean;\n address_verified: boolean;\n face_verified: boolean;\n age_verified: boolean;\n /\n Structured decline reasons. The platform currently returns these only on\n * the full record: read `additional_data.declined_reasons` and fall back to\n * {@link declined_reason}. This top-level field is reserved and not populated.\n /\n declined_reasons?: Reason[];\n /\n Structured, non-blocking warnings. Currently returned only as\n * `additional_data.warning_reasons`; this top-level field is not populated.\n /\n warning_reasons?: Reason[];\n /* Comma-joined decline text. Always present on a declined response. /\n declined_reason?: string;\n /* Legacy decline code; prefer the `code` on `additional_data.declined_reasons`. /\n declined_code?: KycDeclinedCode;\n other_reason?: string;\n accepted_reason?: string;\n /* Legacy warning map; prefer `additional_data.warning_reasons`. /\n warnings?: Record<string, Record<string, string>>;\n required_document_count: number;\n supported_document_types?: SupportedDocumentType[];\n supported_address_document_types?: SupportedAddressDocumentType[];\n is_id_verification_required: boolean;\n is_face_verification_required: boolean;\n is_address_verification_required: boolean;\n is_age_verification_required: boolean;\n created_at: string;\n /\n Full KYC record with document details, proofs, and risk profile. Absent or\n * `null` while status is 'awaiting_kyc' or 'pending': the key is omitted on\n * a newly created record, so check truthiness rather than comparing to null.\n /\n additional_data?: KycRequest \| null;\n /* Present when status is 'awaiting_kyc': whether the submit link has expired (request a new one when true). /\n link_expired?: boolean;\n /* Present when status is 'awaiting_kyc': the submit link's expiry time (RFC 3339). /\n link_expires_at?: string;\n}\n\nexport interface RequestAdditionalDocumentsRequest {\n /* KYC request ID /\n id: string;\n /* Document types to request /\n document_types: ProofType[];\n /* Message to customer /\n message?: string;\n}\n\n// ============================================================================\n// KYC Overview & Statistics Types\n// ============================================================================\n\nexport interface KycOverview {\n total: number;\n pending: number;\n approved: number;\n high_risk: number;\n rejected: number;\n id_verified: number;\n address_verified: number;\n face_verified: number;\n rejections: number;\n total_alerts: number;\n pending_alerts: number;\n resolved_alerts: number;\n}\n\n// ============================================================================\n// KYC Request Listing Types\n// ============================================================================\n\nexport interface KycRequestFilters {\n status?: KycStatus \| KycStatus[];\n search?: string;\n fromDate?: string;\n toDate?: string;\n sortBy?: string;\n order?: 'ASC' \| 'DESC';\n}\n\nexport interface KycPagination {\n limit: number;\n page: number;\n total: number;\n totalPages: number;\n}\n\nexport interface KycRequestListResponse {\n data: KycRequest[];\n pagination: KycPagination;\n}\n\n// ============================================================================\n// Customer Profile Types (Re-exported from risk-profile module)\n// ============================================================================\n\n// Import types from risk-profile module for use in KYC client\nimport type {\n CustomerProfile as RiskProfileCustomerProfile,\n CreateProfileRequest,\n ProfileFilters,\n ProfileListResponse,\n} from '../risk-profile/types';\n\n// Export types for internal use in KYC client (aliased to avoid conflicts with main exports)\n// Users should import CustomerProfile, CreateProfileRequest, etc. from 'vesant-sdk/risk-profile'\nexport type {\n RiskProfileCustomerProfile as CustomerProfile,\n CreateProfileRequest as CreateCustomerProfileRequest,\n ProfileFilters as CustomerProfileFilters,\n ProfileListResponse as CustomerProfileListResponse,\n};\n\n// ============================================================================\n// SDK Configuration Types\n// ============================================================================\n\nexport interface KycClientConfig {\n /* Base URL of the KYC Service API (e.g., \"http://localhost:8088\") /\n baseURL: string;\n\n /* Base URL of the Customer Risk Profile Service API (e.g., \"http://localhost:8094\") /\n riskProfileBaseURL?: string;\n\n /* Tenant ID for multi-tenancy /\n tenantId: string;\n\n /* API key or JWT token for authentication /\n apiKey?: string;\n\n /* User ID for operations requiring user context /\n userId?: string;\n\n /* Custom headers to include in every request /\n headers?: Record<string, string>;\n\n /* Request timeout in milliseconds (default: 10000) /\n timeout?: number;\n\n /* Enable debug logging /\n debug?: boolean;\n\n /* Environment mode - 'sandbox' uses isolated sandbox data /\n environment?: 'production' \| 'sandbox';\n}\n\n// ============================================================================\n// React Hook Types\n// ============================================================================\n\n/* Base hook state with loading and error /\ninterface BaseHookState {\n loading: boolean;\n error: Error \| null;\n}\n\n/* Base options for hooks with auto-fetch capability /\ninterface BaseAutoFetchOptions {\n autoFetch?: boolean;\n}\n\n/* Base options for hooks with polling capability /\ninterface BasePollOptions extends BaseAutoFetchOptions {\n pollInterval?: number;\n}\n\n/* Base options for list hooks with filters and pagination /\ninterface BaseListOptions<TFilters> extends BasePollOptions {\n filters?: TFilters;\n pagination?: PaginationParams;\n}\n\nexport interface UseKycSubmissionOptions {\n onComplete?: (result: DocumentVerificationResponse) => void;\n onError?: (error: Error) => void;\n}\n\nexport interface UseKycSubmissionResult extends BaseHookState {\n submit: (request: DocumentVerificationRequest) => Promise<DocumentVerificationResponse>;\n submission: DocumentVerificationResponse \| null;\n reset: () => void;\n}\n\nexport type UseKycRequestsOptions = BaseListOptions<KycRequestFilters>;\n\nexport interface UseKycRequestsResult extends BaseHookState {\n requests: KycRequest[];\n pagination: KycPagination \| null;\n fetchRequests: (filters?: KycRequestFilters, pagination?: PaginationParams) => Promise<void>;\n getRequest: (id: string) => Promise<KycRequest>;\n updateStatus: (reference: string, status: KycStatus, reason?: string) => Promise<void>;\n refresh: () => Promise<void>;\n}\n\nexport type UseKycAlertsOptions = BaseListOptions<KycAlertFilters>;\n\nexport interface UseKycAlertsResult extends BaseHookState {\n alerts: KycAlert[];\n pagination: KycPagination \| null;\n fetchAlerts: (filters?: KycAlertFilters, pagination?: PaginationParams) => Promise<void>;\n getAlert: (id: string) => Promise<KycAlert>;\n updateAlert: (id: string, update: UpdateKycAlertRequest) => Promise<void>;\n refresh: () => Promise<void>;\n}\n\nexport interface UseKycOverviewOptions extends BaseAutoFetchOptions {\n fromDate?: string;\n toDate?: string;\n}\n\nexport interface UseKycOverviewResult extends BaseHookState {\n overview: KycOverview \| null;\n refresh: (fromDate?: string, toDate?: string) => Promise<void>;\n}\n\nexport interface UseKycPreferencesResult extends BaseHookState {\n preferences: KycPreferences \| null;\n /* @deprecated The platform exposes no preference-update operation; this call always fails. */\n updatePreferences: (update: UpdateKycPreferencesRequest) => Promise<void>;\n refresh: () => Promise<void>;\n}\n"]}