vesant-sdk 1.7.2 → 1.8.0-dev.00f6233

package/dist/compliance/index.mjs

@@ -310,7 +310,7 @@ function createConsoleLogger() {
 }
 
 // src/core/version.ts
-var SDK_VERSION = "1.7.2";
+var SDK_VERSION = "1.8.0";
 
 // src/shared/browser-utils.ts
 function generateUUID() {
@@ -645,19 +645,20 @@ var BaseClient = class {
    * Handle error responses from API
    */
   handleErrorResponse(status, data, requestId) {
-    const message = data.error || data.message || `HTTP ${status}`;
+    const structured = data.error && typeof data.error === "object" && !Array.isArray(data.error) ? data.error : void 0;
+    const message = typeof data.error === "string" && data.error || typeof structured?.message === "string" && structured.message || typeof data.message === "string" && data.message || `HTTP ${status}`;
     const createError = () => {
       switch (status) {
         case 400:
-          return new VesantError(message, "BAD_REQUEST", 400);
+          return new VesantError(message, "BAD_REQUEST", 400, structured);
         case 401:
           return new AuthenticationError(message);
         case 403:
-          return new VesantError(message, "FORBIDDEN", 403);
+          return new VesantError(message, "FORBIDDEN", 403, structured);
         case 404:
-          return new VesantError(message, "NOT_FOUND", 404);
+          return new VesantError(message, "NOT_FOUND", 404, structured);
         case 409:
-          return new VesantError(message, "DUPLICATE_PROFILE", 409);
+          return new VesantError(message, "DUPLICATE_PROFILE", 409, structured);
         case 429: {
           const retryAfter = data.retry_after || data.retryAfter;
           return new RateLimitError(retryAfter);
@@ -668,7 +669,7 @@ var BaseClient = class {
         case 504:
           return new ServiceUnavailableError(message);
         default:
-          return new VesantError(message, "UNKNOWN_ERROR", status);
+          return new VesantError(message, "UNKNOWN_ERROR", status, structured);
       }
     };
     const error = createError();
@@ -967,6 +968,7 @@ async function generateCipherText(options, config) {
 }
 
 // src/geolocation/client.ts
+var DEFAULT_GPS_CONFIG_TTL_MS = 5 * 60 * 1e3;
 var GeolocationClient = class extends BaseClient {
   constructor(config) {
     const baseConfig = {
@@ -982,6 +984,8 @@ var GeolocationClient = class extends BaseClient {
       environment: config.environment
     };
     super(baseConfig);
+    this.gpsConfigCache = null;
+    this.gpsConfigTtlMs = config.gpsConfigTtlMs ?? DEFAULT_GPS_CONFIG_TTL_MS;
   }
   // ============================================================================
   // IP Verification & Compliance
@@ -1067,7 +1071,42 @@ var GeolocationClient = class extends BaseClient {
    * ```
    */
   async getGPSConfig(requestOptions) {
-    return this.requestWithRetry("/api/v1/geo/config", void 0, void 0, void 0, requestOptions);
+    const cached = this.gpsConfigCache;
+    if (cached && cached.expiresAt > Date.now()) {
+      return cached.value;
+    }
+    return this.refreshGPSConfig(requestOptions);
+  }
+  /**
+   * Re-read the tenant's GPS requirement configuration, ignoring any copy held
+   * from an earlier read.
+   *
+   * These requirements are edited in the compliance console while your
+   * application is running. `getGPSConfig` reuses a fetched copy for a short
+   * period so a long-lived session does not call the API on every event; call
+   * this when you need a change to take effect immediately — for example right
+   * after an administrator saves new settings.
+   *
+   * @returns The current GPS requirement config per event type
+   *
+   * @example
+   * ```typescript
+   * const config = await client.refreshGPSConfig();
+   * if (config.require_gps.login) {
+   *   // GPS is now required for login
+   * }
+   * ```
+   */
+  async refreshGPSConfig(requestOptions) {
+    const value = await this.requestWithRetry(
+      "/api/v1/geo/config",
+      void 0,
+      void 0,
+      void 0,
+      requestOptions
+    );
+    this.gpsConfigCache = { value, expiresAt: Date.now() + this.gpsConfigTtlMs };
+    return value;
   }
   /**
    * Mint a short-lived, single-use device-signals nonce.
@@ -1484,17 +1523,27 @@ var RiskProfileClient = class extends BaseClient {
   /**
    * Update customer profile
    *
+   * Omitted fields keep their stored values. When the tenant has the
+   * **On Account Sensitive Action** KYC trigger enabled and the update changes
+   * the customer's name, date of birth or residential address, Vesant applies
+   * the other fields, holds the sensitive ones and answers `202` with a
+   * {@link ProfileUpdateHeldResponse} instead of the profile. Narrow with
+   * {@link isProfileUpdateHeld}, then request a `profile_change` submit link.
+   *
    * @param profileId - Profile UUID
    * @param updates - Fields to update
-   * @returns Updated customer profile
+   * @returns Updated customer profile, or the held change
    *
    * @example
    * ```typescript
-   * const updated = await client.updateProfile(profileId, {
+   * const result = await client.updateProfile(profileId, {
    *   location: 'New York, USA',
    *   location_compliance: 'compliant',
    *   last_recorded_activity: new Date().toISOString()
    * });
+   * if (isProfileUpdateHeld(result)) {
+   *   // name / DOB / address held: start KYC with trigger_event 'profile_change'
+   * }
    * ```
    */
   async updateProfile(profileId, updates, requestOptions) {
@@ -1534,6 +1583,11 @@ var RiskProfileClient = class extends BaseClient {
   }
 };
 
+// src/risk-profile/types.ts
+function isProfileUpdateHeld(result) {
+  return typeof result === "object" && result !== null && result.status === "kyc_required" && result.kyc_required === true;
+}
+
 // src/compliance/types.ts
 var DEFAULT_CURRENCY_RATES = {
   USD: 1,
@@ -1989,11 +2043,12 @@ var ComplianceClient = class {
       if (profileResult) {
         profile = profileResult;
         if (!isBlocked && this.shouldUpdateProfile(profile, geoVerification.location.city)) {
-          profile = await this.riskClient.updateProfile(profile.id, {
+          const updated = await this.riskClient.updateProfile(profile.id, {
             last_recorded_activity: (/* @__PURE__ */ new Date()).toISOString(),
             location: `${geoVerification.location.city}, ${geoVerification.location.country}`,
             location_compliance: geoVerification.is_compliant ? "compliant" : "non-compliant"
           }, requestOptions);
+          profile = isProfileUpdateHeld(updated) ? updated.profile : updated;
         }
       } else {
         if (this.config.autoCreateProfiles && this.config.debug) {