vesant-sdk 1.7.2 → 1.8.0-dev.00f6233

package/dist/kyc/index.d.mts

@@ -1,4 +1,4 @@
-import { P as ProfileFilters, b as ProfileListResponse, C as CustomerProfile, a as CreateProfileRequest } from '../types-BOFaMQxI.mjs';
+import { C as CustomerProfile, P as ProfileFilters, b as ProfileListResponse, a as CreateProfileRequest } from '../types-DbvVph_0.mjs';
 import { c as Reason, R as RiskLevel, P as PaginationParams } from '../types-CBQRNL-l.mjs';
 import { B as BaseClient, R as RequestOptions } from '../client-q9fN8Hhf.mjs';
 
@@ -15,7 +15,7 @@ type KycStatus =
 /** Submit link issued but the customer has not submitted documents yet — not "in progress". */
 'awaiting_kyc'
 /** Documents submitted, verification in progress. */
- | 'pending' | 'accepted' | 'declined' | 'review.pending' | 'unknown';
+ | 'pending' | 'accepted' | 'declined' | 'review.pending';
 type KycDeclinedCode = 'KYC_DOCUMENT_EXPIRED' | 'KYC_DOCUMENT_INVALID' | 'KYC_FACE_MISMATCH' | 'KYC_AGE_REQUIREMENT' | 'KYC_DUPLICATE_IDENTITY' | 'KYC_ADDRESS_MISMATCH' | 'KYC_NAME_MISMATCH' | 'KYC_PROVIDER_REJECTED' | 'KYC_DECLINED';
 declare const KYC_DECLINED_DESCRIPTIONS: Record<KycDeclinedCode, string>;
 type KycAlertStatus = 'pending' | 'in_progress' | 'resolved' | 'closed' | 'escalated';
@@ -111,7 +111,8 @@ interface KycRequest {
     block_reason?: string;
     proofs?: Proof[];
     alerts?: KycAlert[];
-    risk_profile?: KycCustomerProfile;
+    /** The customer's risk profile (`risk_category`, `risk_score`, `kyc_status`, ...). */
+    risk_profile?: CustomerProfile;
     created_at: string;
     updated_at: string;
 }
@@ -119,30 +120,34 @@ interface Proof {
     id: string;
     kyc_id: string;
     type: ProofType;
-    document: string;
+    /** Storage key. The platform never returns it; use `link` to download. */
+    document?: string;
     document_number?: string;
+    /** Document type the customer selected (e.g. `passport`). */
+    selected_type?: string;
+    /** Short-lived download URL, attached on `getKycRequest`. */
+    link?: string;
     created_at: string;
 }
 interface ProofDownloadURL {
+    /** Proof ID on the KYC record. */
+    id: string;
     type: ProofType;
     url: string;
-    expires_at: string;
-}
-interface KycCustomerProfile {
-    id: string;
-    tenant_id: string;
-    customer_id: string;
-    first_name?: string;
-    last_name?: string;
-    email?: string;
-    risk_score: number;
-    risk_level: RiskLevel;
-    kyc_status?: string;
-    pep_status?: boolean;
-    sanctions_status?: boolean;
-    created_at: string;
-    updated_at: string;
+    /** Not sent by the platform; the link itself is short-lived. */
+    expires_at?: string;
 }
+/**
+ * The customer's risk profile as embedded on a KYC record
+ * (`additional_data.risk_profile`). The platform preloads the full
+ * `customer_profiles` row, so this is the same shape as
+ * {@link CustomerProfile}: read `risk_category` / `risk_score`, `kyc_status`,
+ * `is_pep`, `has_sanctions`. There is no `risk_level` field on the wire.
+ *
+ * @deprecated Use {@link CustomerProfile}; this alias is kept for existing
+ * imports and will be removed in a future major.
+ */
+type KycCustomerProfile = CustomerProfile;
 interface KycAlert {
     id: string;
     kyc_id: string;
@@ -172,12 +177,6 @@ interface KycAlertListResponse {
     alerts: KycAlert[];
     pagination: KycPagination;
 }
-interface UpdateKycAlertRequest {
-    assigned_for?: string;
-    reason?: string;
-    alert_type?: KycAlertType;
-    status?: KycAlertStatus;
-}
 /**
  * Threshold-gated trigger for transaction events. Each rule is
  * self-contained — there is no umbrella flag.
@@ -243,6 +242,17 @@ interface EventBasedFaceVerificationReactions {
     /** @deprecated Never populated; read `data.freeze_duration_minutes` on the callback instead. */
     freeze_duration_minutes?: number;
 }
+/**
+ * On Account Sensitive Action: hold a change to the customer's name, date of
+ * birth or residential address behind a full KYC verification. Configured in
+ * the Vesant console; off by default. See {@link ProfileUpdateHeldResponse}.
+ */
+interface AccountSensitiveActionTrigger {
+    enabled: boolean;
+    full_name: boolean;
+    date_of_birth: boolean;
+    residential_address: boolean;
+}
 /** Per-event toggles that decide when a submit-link request requires KYC. */
 interface KycVerificationTriggers {
     onboarding: boolean;
@@ -250,6 +260,18 @@ interface KycVerificationTriggers {
     first_purchase: boolean;
     /** Re-trigger verification once the customer's identity document has expired. */
     auto_trigger_on_id_expiration: boolean;
+    /**
+     * Manual KYC Verification: whether customers may start a verification
+     * themselves (`trigger_event: "manual"`), independent of the event
+     * triggers and of their status. On by default. When on, a `manual`
+     * request always returns a link — an already verified customer included.
+     * When off, it answers `kyc_required: false` with reason
+     * `KYC_NOT_REQUIRED_TRIGGER_DISABLED`; hide your Verification option in
+     * that case.
+     */
+    manual: boolean;
+    /** Hold sensitive profile changes (name, DOB, address) behind KYC. */
+    account_sensitive_action?: AccountSensitiveActionTrigger;
 }
 interface KycSkipOptions {
     /** Let a `manual` trigger be skipped (`can_skip` on the submit-link response). */
@@ -405,20 +427,11 @@ interface DocumentVerificationResponse {
     verification_url?: string;
     message?: string;
 }
-interface UpdateKycStatusRequest {
-    /** Provider reference or KYC ID */
-    reference: string;
-    /** Target status */
-    status: KycStatus;
-    /** Acceptance/decline reason */
-    reason?: string;
-    /** Provider warnings data */
-    warnings?: Record<string, Record<string, string>>;
-}
 /**
  * Events that can trigger a KYC request. Each maps to a per-event toggle in
- * the tenant's KYC verification trigger preferences, except `manual` (always
- * required) and `login` (only for an expired identity document).
+ * the tenant's KYC verification trigger preferences (`manual` to the Manual
+ * KYC Verification toggle), except `login` (only for an expired identity
+ * document).
  */
 type KycTriggerEvent = 'onboarding' | 'first_withdrawal' | 'first_purchase'
 /** Aliases of `first_withdrawal` / `first_purchase` — same tenant toggles. */
@@ -429,7 +442,16 @@ type KycTriggerEvent = 'onboarding' | 'first_withdrawal' | 'first_purchase'
  * (asked, skippable — "Remind me later"), or verified with a valid document
  * (not asked). One call covers every customer.
  */
- | 'login';
+ | 'login'
+/**
+ * The customer changed their name, date of birth or address and
+ * `updateProfile` answered `202` with `kyc_required: true`. Required — not
+ * skippable — while Vesant holds a pending change for the customer; not
+ * required when nothing is held or the tenant switched the trigger off.
+ * The verification is seeded with the requested identity and, on approval,
+ * releases the held change. See the `profile_change` webhook.
+ */
+ | 'profile_change';
 /**
  * Why verification is — or is not — being asked for. Codes are stable;
  * `message` is display-ready text you can show the customer as-is.
@@ -453,10 +475,14 @@ type KycRequestReasonCode =
  | 'KYC_REQUIRED_ID_EXPIRED'
 /** Verification was explicitly requested by the tenant. */
  | 'KYC_REQUIRED_MANUAL'
+/** Required before a held name / date of birth / address change is applied. */
+ | 'KYC_REQUIRED_PROFILE_CHANGE'
 /** Not required — the customer already has an accepted verification. */
  | 'KYC_NOT_REQUIRED_ALREADY_VERIFIED'
 /** Not required — the tenant has this trigger event switched off. */
- | 'KYC_NOT_REQUIRED_TRIGGER_DISABLED';
+ | 'KYC_NOT_REQUIRED_TRIGGER_DISABLED'
+/** Not required — `profile_change` was sent but Vesant holds no pending change for the customer. */
+ | 'KYC_NOT_REQUIRED_NO_PENDING_CHANGE';
 interface RequestKycSubmitLinkRequest {
     /** User ID to generate KYC submission link for */
     user_id: string;
@@ -467,8 +493,12 @@ interface RequestKycSubmitLinkRequest {
     /**
      * Event that triggered the KYC request. The tenant's KYC verification
      * trigger preferences decide, per event, whether KYC is required
-     * (`kyc_required` in the response). "manual" always requires KYC and
-     * honors the tenant's allow-skip-on-manual option (`can_skip`). "login"
+     * (`kyc_required` in the response). "manual" — the customer starting
+     * verification themselves — is governed by the tenant's Manual KYC
+     * Verification toggle (on by default): when on it always returns a link,
+     * even for an already verified customer, and honors the
+     * allow-skip-on-manual option (`can_skip`); when off it answers
+     * `kyc_required: false` with `KYC_NOT_REQUIRED_TRIGGER_DISABLED`. "login"
      * answers for any customer state — never verified (asked, not skippable),
      * document expired (asked, skippable so you can offer "Remind me later"),
      * or verified and valid (not asked) — so a platform that gates entry on KYC
@@ -593,7 +623,8 @@ interface RequestKycSubmitLinkResponse {
      * Whether the user may skip verification. `true` for
      * `trigger_event: "manual"` when the tenant enables allow-skip-on-manual,
      * for `"login"` when an expired identity document triggered the request
-     * (offer "Remind me later"), and when the customer is already verified.
+     * (offer "Remind me later"), and when the customer is already verified
+     * (except on `"manual"`, which always issues a link while enabled).
      * Always `false` at `"withdrawal"` / `"purchase"` — that is where a
      * postponed re-verification becomes mandatory.
      */
@@ -614,9 +645,9 @@ interface RequestKycSubmitLinkResponse {
  * is the only signal for it — nothing the customer does triggers it. Delivered
  * once per customer, when the document first becomes expired.
  *
- * It is sent regardless of the tenant's auto-trigger-on-ID-expiration setting:
- * that setting governs whether verification is *enforced*, not whether you are
- * *told*.
+ * It is sent only while the tenant's auto-trigger-on-ID-expiration setting is
+ * enabled; with the setting off the document is still flagged as expired, but
+ * no webhook is sent.
  */
 interface KycDocumentExpiredCallbackEvent {
     /** Always `"kyc_document_expired"` — dispatch on this. */
@@ -641,6 +672,118 @@ interface KycDocumentExpiredCallbackEvent {
  * signature-verified, parsed payload to {@link KycDocumentExpiredCallbackEvent}.
  */
 declare function isKycDocumentExpiredCallbackEvent(value: unknown): value is KycDocumentExpiredCallbackEvent;
+/** Sensitive profile field held behind KYC by On Account Sensitive Action. */
+type ProfileChangeField = 'full_name' | 'date_of_birth' | 'residential_address';
+/** How a held profile change ended. */
+type ProfileChangeStatus = 'approved' | 'rejected' | 'expired';
+/**
+ * Reactions a verification fired, mirrored from the tenant's KYC alert
+ * configuration. Vesant holds no account state on your platform: these flags
+ * tell you what the tenant configured, they do not do it. Present on the
+ * `kyc` status callback only when a rule with reactions matched — today the
+ * On Account Sensitive Action rules.
+ */
+interface KycCallbackReactions {
+    /** The alert rules that fired, e.g. `["profile_change_name"]`. */
+    events: string[];
+    trigger_alert: boolean;
+    block: boolean;
+    freeze_account: boolean;
+    /** Set when `freeze_account` is true: the freeze window the tenant set for the rules that fired. */
+    freeze_duration_minutes?: number;
+    enforce_logout: boolean;
+}
+/**
+ * Body POSTed to your KYC `callback_url` whenever a document verification
+ * reaches an outcome (`accepted`, `declined`, `review.pending`). This is a flat
+ * callback, not a platform event envelope: there is no `event_type`, `id` or
+ * `timestamp`, so it cannot go through `WebhookHandler`. Verify it with
+ * `verifyWebhookSignature`, narrow it with {@link isKycStatusCallbackEvent},
+ * and deduplicate on `resource_id` + `status` yourself.
+ */
+interface KycStatusCallbackEvent {
+    /** Always `"kyc"` — dispatch on this. */
+    event: 'kyc';
+    /** The verification reference (your customer identifier). */
+    reference: string;
+    /** Vesant KYC record ID (`kyc_id`). */
+    resource_id: string;
+    /** Verification outcome. `awaiting_kyc` / `pending` are never sent. */
+    status: 'accepted' | 'declined' | 'review.pending';
+    /**
+     * `true` when your app should block the triggering action. Set when a
+     * failed verification matched a per-event alert rule with the `block`
+     * reaction. Sticky once set on the record. Omitted when `false`.
+     */
+    block?: boolean;
+    /** The event that triggered the block; omitted when not blocked. */
+    block_reason?: string;
+    /** Comma-joined decline text; the structured list is `data.declined_reasons`. */
+    declined_reason?: string;
+    /** @deprecated Legacy category → message map; use `data.warning_reasons`. */
+    warnings?: Record<string, Record<string, string>>;
+    /** Present only when a rule with reactions matched (On Account Sensitive Action). */
+    reactions?: KycCallbackReactions;
+    /** The full KYC record, with `risk_profile` and proof download links. */
+    data: KycRequest;
+}
+/**
+ * Type guard for the KYC status callback. Narrows an already
+ * signature-verified, parsed payload to {@link KycStatusCallbackEvent}.
+ */
+declare function isKycStatusCallbackEvent(value: unknown): value is KycStatusCallbackEvent;
+/**
+ * Body POSTed to your `callback_url` when a held sensitive profile change is
+ * settled. Signed with `X-Webhook-Signature: sha256=<hex>` (HMAC-SHA256 of the
+ * raw body), like every other Vesant callback.
+ *
+ * Sent once per held change: `approved` after the customer's `profile_change`
+ * verification was accepted and the verified values were written to the
+ * profile; `rejected` after it was declined and the profile was left as it
+ * was; `expired` when no verification arrived within the hold window (seven
+ * days by default). On `rejected`, show the customer `declined_reasons` — this
+ * is the "KYC decline message" for the change.
+ */
+interface ProfileChangeCallbackEvent {
+    /** Always `"profile_change"` — dispatch on this. */
+    event: 'profile_change';
+    /** Your customer identifier (the `user_id` you supplied). */
+    reference: string;
+    /** The pending change id returned by `updateProfile`. */
+    resource_id: string;
+    status: ProfileChangeStatus;
+    /** First decline message, `rejected` only. */
+    declined_reason?: string;
+    /** Structured decline, `rejected` only. */
+    declined_reasons?: Reason[];
+    data: {
+        customer_id: string;
+        profile_id: string;
+        pending_change_id: string;
+        /** The verification that settled the change; empty if it expired unverified. */
+        kyc_id: string;
+        changed_fields: ProfileChangeField[];
+        /** What the customer asked for. */
+        requested_values: Partial<Record<ProfileChangeField, string>>;
+        /** What the profile held before the change. */
+        previous_values: Partial<Record<ProfileChangeField, string>>;
+        /**
+         * What the document verified, `approved` only. The verified values are
+         * what was written to the profile — when they differ from
+         * `requested_values` (`values_match: false`) the document wins and a
+         * review alert is raised in the Vesant console.
+         */
+        verified_values?: Partial<Record<ProfileChangeField, string>>;
+        values_match?: boolean | null;
+        expires_at: string;
+        resolved_at?: string | null;
+    };
+}
+/**
+ * Type guard for the held-profile-change webhook. Narrows an already
+ * signature-verified, parsed payload to {@link ProfileChangeCallbackEvent}.
+ */
+declare function isProfileChangeCallbackEvent(value: unknown): value is ProfileChangeCallbackEvent;
 /** Device class detected by the SDK (purely client-side — server doesn't care). */
 type EventBasedFaceVerificationDeviceType = 'mobile' | 'desktop';
 interface CreateEventBasedFaceVerificationSessionResponse {
@@ -696,7 +839,11 @@ interface EventBasedFaceVerificationReactionResult {
     /** Tenant app should block the action/account when true. */
     block: boolean;
     freeze_duration_minutes: number;
-    /** Set when an alert was raised on the dashboard. */
+    /**
+     * Reserved. The dashboard alert is raised after the submit response and
+     * the webhook have been built, so neither carries the alert id today;
+     * read it from `listAlerts()` / the console instead.
+     */
     alert_id?: string;
 }
 /**
@@ -710,12 +857,12 @@ interface EventBasedFaceVerificationCallback {
     resource_id: string;
     status: KycStatus;
     /**
-     * True when the tenant app should block the action/account. Mirrors the
-     * `block` reaction on {@link data} at the top level of the callback so
-     * consumers can branch without inspecting `data`. Omitted when false.
+     * Reserved and not populated on face verification callbacks: the block
+     * decision is `data.block`. Only the document-KYC `kyc` callback sets a
+     * top-level `block`.
      */
     block?: boolean;
-    /** Names the event/verification that triggered the block. Omitted when not blocked. */
+    /** Reserved and not populated; see `data.block`. */
     block_reason?: string;
     /**
      * Structured decline reasons. Returned by
@@ -821,38 +968,12 @@ interface RequestAdditionalDocumentsRequest {
     /** Message to customer */
     message?: string;
 }
-interface KycOverview {
-    total: number;
-    pending: number;
-    approved: number;
-    high_risk: number;
-    rejected: number;
-    id_verified: number;
-    address_verified: number;
-    face_verified: number;
-    rejections: number;
-    total_alerts: number;
-    pending_alerts: number;
-    resolved_alerts: number;
-}
-interface KycRequestFilters {
-    status?: KycStatus | KycStatus[];
-    search?: string;
-    fromDate?: string;
-    toDate?: string;
-    sortBy?: string;
-    order?: 'ASC' | 'DESC';
-}
 interface KycPagination {
     limit: number;
     page: number;
     total: number;
     totalPages: number;
 }
-interface KycRequestListResponse {
-    data: KycRequest[];
-    pagination: KycPagination;
-}
 
 interface KycClientConfig {
     /** Base URL of the KYC Service API (e.g., "http://localhost:8088") */
@@ -901,36 +1022,11 @@ interface UseKycSubmissionResult extends BaseHookState {
     submission: DocumentVerificationResponse | null;
     reset: () => void;
 }
-type UseKycRequestsOptions = BaseListOptions<KycRequestFilters>;
-interface UseKycRequestsResult extends BaseHookState {
-    requests: KycRequest[];
-    pagination: KycPagination | null;
-    fetchRequests: (filters?: KycRequestFilters, pagination?: PaginationParams) => Promise<void>;
-    getRequest: (id: string) => Promise<KycRequest>;
-    updateStatus: (reference: string, status: KycStatus, reason?: string) => Promise<void>;
-    refresh: () => Promise<void>;
-}
 type UseKycAlertsOptions = BaseListOptions<KycAlertFilters>;
 interface UseKycAlertsResult extends BaseHookState {
     alerts: KycAlert[];
     pagination: KycPagination | null;
     fetchAlerts: (filters?: KycAlertFilters, pagination?: PaginationParams) => Promise<void>;
-    getAlert: (id: string) => Promise<KycAlert>;
-    updateAlert: (id: string, update: UpdateKycAlertRequest) => Promise<void>;
-    refresh: () => Promise<void>;
-}
-interface UseKycOverviewOptions extends BaseAutoFetchOptions {
-    fromDate?: string;
-    toDate?: string;
-}
-interface UseKycOverviewResult extends BaseHookState {
-    overview: KycOverview | null;
-    refresh: (fromDate?: string, toDate?: string) => Promise<void>;
-}
-interface UseKycPreferencesResult extends BaseHookState {
-    preferences: KycPreferences | null;
-    /** @deprecated The platform exposes no preference-update operation; this call always fails. */
-    updatePreferences: (update: UpdateKycPreferencesRequest) => Promise<void>;
     refresh: () => Promise<void>;
 }
 
@@ -1145,58 +1241,23 @@ declare class KycClient extends BaseClient {
      */
     submitVerification(request: DocumentVerificationRequest, requestOptions?: RequestOptions): Promise<DocumentVerificationResponse>;
     /**
-     * Get a KYC request by ID
+     * Get a KYC record by ID
      *
-     * @param id - KYC request ID
-     * @returns KYC request details including proofs and alerts
+     * Works with your tenant API key. Each entry in `proofs` carries a
+     * short-lived `link` for downloading that document, and `reference` holds
+     * your own customer reference (the `forward_reference`).
+     *
+     * @param id - KYC record ID (the `kyc_id` returned by `requestKycSubmitLink`)
+     * @returns KYC record including proofs (with download links) and alerts
      *
      * @example
      * ```typescript
      * const kyc = await client.getKycRequest("550e8400-e29b-41d4-a716-446655440000");
      * console.log(`Status: ${kyc.status}, ID Verified: ${kyc.id_verified}`);
+     * kyc.proofs?.forEach(proof => console.log(`${proof.type}: ${proof.link}`));
      * ```
      */
     getKycRequest(id: string): Promise<KycRequest>;
-    /**
-     * List KYC requests with filters and pagination
-     *
-     * @param filters - Optional filters (status, search, date range)
-     * @param pagination - Optional pagination (page, page_size)
-     * @returns Paginated list of KYC requests
-     *
-     * @example
-     * ```typescript
-     * const requests = await client.listKycRequests(
-     *   { status: "pending", search: "john" },
-     *   { page: 1, page_size: 20 }
-     * );
-     * console.log(`Found ${requests.total} pending requests`);
-     * ```
-     */
-    listKycRequests(filters?: KycRequestFilters, pagination?: PaginationParams): Promise<KycRequestListResponse>;
-    /**
-     * Update KYC request status (accept/decline)
-     *
-     * @param request - Status update request with reference, status, and reason
-     *
-     * @example
-     * ```typescript
-     * // Accept a KYC request
-     * await client.updateKycStatus({
-     *   reference: "kyc-ref-123",
-     *   status: "accepted",
-     *   reason: "All documents verified successfully"
-     * });
-     *
-     * // Decline a KYC request
-     * await client.updateKycStatus({
-     *   reference: "kyc-ref-456",
-     *   status: "declined",
-     *   reason: "Document expired"
-     * });
-     * ```
-     */
-    updateKycStatus(request: UpdateKycStatusRequest): Promise<void>;
     /**
      * Request additional documents from customer
      *
@@ -1219,43 +1280,22 @@ declare class KycClient extends BaseClient {
     /**
      * Get downloadable URLs for KYC proofs/documents
      *
-     * @param kycId - KYC request ID
-     * @returns Array of proof download URLs with expiration
+     * Derived from the `proofs` of `getKycRequest`: the platform attaches a
+     * short-lived download link to every proof on the KYC record, so no
+     * separate endpoint is needed. Proofs without a link are omitted.
+     *
+     * @param kycId - KYC record ID
+     * @returns Array of proof download URLs
      *
      * @example
      * ```typescript
      * const proofs = await client.getProofDownloadURLs("550e8400-e29b-41d4-a716-446655440000");
      * proofs.forEach(proof => {
-     *   console.log(`${proof.type}: ${proof.url} (expires: ${proof.expires_at})`);
+     *   console.log(`${proof.type}: ${proof.url}`);
      * });
      * ```
      */
     getProofDownloadURLs(kycId: string): Promise<ProofDownloadURL[]>;
-    /**
-     * Get KYC overview statistics
-     *
-     * @param fromDate - Optional start date (ISO 8601)
-     * @param toDate - Optional end date (ISO 8601)
-     * @returns KYC statistics including counts by status
-     *
-     * @example
-     * ```typescript
-     * const overview = await client.getOverview(
-     *   "2024-01-01T00:00:00Z",
-     *   "2024-12-31T23:59:59Z"
-     * );
-     * console.log(`Total: ${overview.total}, Pending: ${overview.pending}`);
-     * console.log(`Approved: ${overview.approved}, Rejected: ${overview.rejected}`);
-     * ```
-     */
-    getOverview(fromDate?: string, toDate?: string): Promise<KycOverview>;
-    /**
-     * Get a KYC alert by ID
-     *
-     * @param alertId - Alert ID
-     * @returns Alert details
-     */
-    getAlert(alertId: string): Promise<KycAlert>;
     /**
      * List KYC alerts with filters and pagination
      *
@@ -1275,57 +1315,18 @@ declare class KycClient extends BaseClient {
      * );
      * console.log(`Found ${alerts.total} alerts`);
      * ```
-     */
-    listAlerts(filters?: KycAlertFilters, pagination?: PaginationParams): Promise<KycAlertListResponse>;
-    /**
-     * Update a KYC alert
-     *
-     * @param alertId - Alert ID
-     * @param update - Fields to update (status, assigned_for, reason, alert_type)
-     *
-     * @example
-     * ```typescript
-     * // Assign an alert
-     * await client.updateAlert("alert_123", {
-     *   assigned_for: "analyst_user_id",
-     *   status: "in_progress"
-     * });
-     *
-     * // Resolve an alert
-     * await client.updateAlert("alert_123", {
-     *   status: "resolved",
-     *   reason: "Customer verified via phone call"
-     * });
-     *
-     * // Escalate an alert
-     * await client.updateAlert("alert_123", {
-     *   status: "escalated",
-     *   assigned_for: "manager_user_id",
-     *   reason: "Requires senior review - suspicious documents"
-     * });
-     * ```
-     */
-    updateAlert(alertId: string, update: UpdateKycAlertRequest): Promise<void>;
-    /**
-     * Get KYC preferences for the tenant
-     *
-     * @returns KYC preferences configuration
      *
-     * @example
-     * ```typescript
-     * const prefs = await client.getPreferences();
-     * console.log(`Face verification required: ${prefs.is_face_verification_required}`);
-     * console.log(`Required documents: ${prefs.required_document_count}`);
-     * ```
+     * @remarks Console session only. This endpoint accepts a Vesant console
+     * (dashboard login) token, not a tenant API key; called with an API key it
+     * fails with `AuthenticationError` or a permission error.
      */
-    getPreferences(): Promise<KycPreferences>;
+    listAlerts(filters?: KycAlertFilters, pagination?: PaginationParams): Promise<KycAlertListResponse>;
     /**
      * Update KYC preferences for the tenant
      *
      * @deprecated KYC preferences are managed in the Vesant console; the
      * platform exposes no update operation to the SDK, so this call always
-     * fails. Use `getPreferences()` to read them. This method will be removed
-     * in a future release.
+     * fails. This method will be removed in a future release.
      *
      * @param update - Fields to update
      * @returns Updated preferences
@@ -1415,4 +1416,4 @@ declare class KycClient extends BaseClient {
     createCustomerProfile(profile: CreateProfileRequest): Promise<CustomerProfile>;
 }
 
-export { type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycOverview, type KycPagination, type KycPreferences, type KycRequest, type KycRequestFilters, type KycRequestListResponse, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycAlertRequest, type UpdateKycPreferencesRequest, type UpdateKycStatusRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycOverviewOptions, type UseKycOverviewResult, type UseKycPreferencesResult, type UseKycRequestsOptions, type UseKycRequestsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent };
+export { type AccountSensitiveActionTrigger, type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, type KycCallbackReactions, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycPagination, type KycPreferences, type KycRequest, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycStatusCallbackEvent, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type ProfileChangeCallbackEvent, type ProfileChangeField, type ProfileChangeStatus, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycPreferencesRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent, isKycStatusCallbackEvent, isProfileChangeCallbackEvent };