vesant-sdk 1.8.0-dev.9f7204d → 1.8.0-dev.a26e5ed

package/dist/kyc/index.d.mts

@@ -1,4 +1,4 @@
-import { P as ProfileFilters, b as ProfileListResponse, C as CustomerProfile, a as CreateProfileRequest } from '../types-DfbnIaW_.mjs';
+import { C as CustomerProfile, P as ProfileFilters, b as ProfileListResponse, a as CreateProfileRequest } from '../types-DbvVph_0.mjs';
 import { c as Reason, R as RiskLevel, P as PaginationParams } from '../types-CBQRNL-l.mjs';
 import { B as BaseClient, R as RequestOptions } from '../client-q9fN8Hhf.mjs';
 
@@ -15,7 +15,7 @@ type KycStatus =
 /** Submit link issued but the customer has not submitted documents yet — not "in progress". */
 'awaiting_kyc'
 /** Documents submitted, verification in progress. */
- | 'pending' | 'accepted' | 'declined' | 'review.pending' | 'unknown';
+ | 'pending' | 'accepted' | 'declined' | 'review.pending';
 type KycDeclinedCode = 'KYC_DOCUMENT_EXPIRED' | 'KYC_DOCUMENT_INVALID' | 'KYC_FACE_MISMATCH' | 'KYC_AGE_REQUIREMENT' | 'KYC_DUPLICATE_IDENTITY' | 'KYC_ADDRESS_MISMATCH' | 'KYC_NAME_MISMATCH' | 'KYC_PROVIDER_REJECTED' | 'KYC_DECLINED';
 declare const KYC_DECLINED_DESCRIPTIONS: Record<KycDeclinedCode, string>;
 type KycAlertStatus = 'pending' | 'in_progress' | 'resolved' | 'closed' | 'escalated';
@@ -111,7 +111,8 @@ interface KycRequest {
     block_reason?: string;
     proofs?: Proof[];
     alerts?: KycAlert[];
-    risk_profile?: KycCustomerProfile;
+    /** The customer's risk profile (`risk_category`, `risk_score`, `kyc_status`, ...). */
+    risk_profile?: CustomerProfile;
     created_at: string;
     updated_at: string;
 }
@@ -136,21 +137,17 @@ interface ProofDownloadURL {
     /** Not sent by the platform; the link itself is short-lived. */
     expires_at?: string;
 }
-interface KycCustomerProfile {
-    id: string;
-    tenant_id: string;
-    customer_id: string;
-    first_name?: string;
-    last_name?: string;
-    email?: string;
-    risk_score: number;
-    risk_level: RiskLevel;
-    kyc_status?: string;
-    pep_status?: boolean;
-    sanctions_status?: boolean;
-    created_at: string;
-    updated_at: string;
-}
+/**
+ * The customer's risk profile as embedded on a KYC record
+ * (`additional_data.risk_profile`). The platform preloads the full
+ * `customer_profiles` row, so this is the same shape as
+ * {@link CustomerProfile}: read `risk_category` / `risk_score`, `kyc_status`,
+ * `is_pep`, `has_sanctions`. There is no `risk_level` field on the wire.
+ *
+ * @deprecated Use {@link CustomerProfile}; this alias is kept for existing
+ * imports and will be removed in a future major.
+ */
+type KycCustomerProfile = CustomerProfile;
 interface KycAlert {
     id: string;
     kyc_id: string;
@@ -269,6 +266,16 @@ interface KycVerificationTriggers {
     first_purchase: boolean;
     /** Re-trigger verification once the customer's identity document has expired. */
     auto_trigger_on_id_expiration: boolean;
+    /**
+     * Manual KYC Verification: whether customers may start a verification
+     * themselves (`trigger_event: "manual"`), independent of the event
+     * triggers and of their status. On by default. When on, a `manual`
+     * request always returns a link — an already verified customer included.
+     * When off, it answers `kyc_required: false` with reason
+     * `KYC_NOT_REQUIRED_TRIGGER_DISABLED`; hide your Verification option in
+     * that case.
+     */
+    manual: boolean;
     /** Hold sensitive profile changes (name, DOB, address) behind KYC. */
     account_sensitive_action?: AccountSensitiveActionTrigger;
 }
@@ -438,8 +445,9 @@ interface UpdateKycStatusRequest {
 }
 /**
  * Events that can trigger a KYC request. Each maps to a per-event toggle in
- * the tenant's KYC verification trigger preferences, except `manual` (always
- * required) and `login` (only for an expired identity document).
+ * the tenant's KYC verification trigger preferences (`manual` to the Manual
+ * KYC Verification toggle), except `login` (only for an expired identity
+ * document).
  */
 type KycTriggerEvent = 'onboarding' | 'first_withdrawal' | 'first_purchase'
 /** Aliases of `first_withdrawal` / `first_purchase` — same tenant toggles. */
@@ -501,8 +509,12 @@ interface RequestKycSubmitLinkRequest {
     /**
      * Event that triggered the KYC request. The tenant's KYC verification
      * trigger preferences decide, per event, whether KYC is required
-     * (`kyc_required` in the response). "manual" always requires KYC and
-     * honors the tenant's allow-skip-on-manual option (`can_skip`). "login"
+     * (`kyc_required` in the response). "manual" — the customer starting
+     * verification themselves — is governed by the tenant's Manual KYC
+     * Verification toggle (on by default): when on it always returns a link,
+     * even for an already verified customer, and honors the
+     * allow-skip-on-manual option (`can_skip`); when off it answers
+     * `kyc_required: false` with `KYC_NOT_REQUIRED_TRIGGER_DISABLED`. "login"
      * answers for any customer state — never verified (asked, not skippable),
      * document expired (asked, skippable so you can offer "Remind me later"),
      * or verified and valid (not asked) — so a platform that gates entry on KYC
@@ -627,7 +639,8 @@ interface RequestKycSubmitLinkResponse {
      * Whether the user may skip verification. `true` for
      * `trigger_event: "manual"` when the tenant enables allow-skip-on-manual,
      * for `"login"` when an expired identity document triggered the request
-     * (offer "Remind me later"), and when the customer is already verified.
+     * (offer "Remind me later"), and when the customer is already verified
+     * (except on `"manual"`, which always issues a link while enabled).
      * Always `false` at `"withdrawal"` / `"purchase"` — that is where a
      * postponed re-verification becomes mandatory.
      */
@@ -648,9 +661,9 @@ interface RequestKycSubmitLinkResponse {
  * is the only signal for it — nothing the customer does triggers it. Delivered
  * once per customer, when the document first becomes expired.
  *
- * It is sent regardless of the tenant's auto-trigger-on-ID-expiration setting:
- * that setting governs whether verification is *enforced*, not whether you are
- * *told*.
+ * It is sent only while the tenant's auto-trigger-on-ID-expiration setting is
+ * enabled; with the setting off the document is still flagged as expired, but
+ * no webhook is sent.
  */
 interface KycDocumentExpiredCallbackEvent {
     /** Always `"kyc_document_expired"` — dispatch on this. */
@@ -692,10 +705,49 @@ interface KycCallbackReactions {
     trigger_alert: boolean;
     block: boolean;
     freeze_account: boolean;
-    /** Set when `freeze_account` is true: the tenant's default freeze window. */
+    /** Set when `freeze_account` is true: the freeze window the tenant set for the rules that fired. */
     freeze_duration_minutes?: number;
     enforce_logout: boolean;
 }
+/**
+ * Body POSTed to your KYC `callback_url` whenever a document verification
+ * reaches an outcome (`accepted`, `declined`, `review.pending`). This is a flat
+ * callback, not a platform event envelope: there is no `event_type`, `id` or
+ * `timestamp`, so it cannot go through `WebhookHandler`. Verify it with
+ * `verifyWebhookSignature`, narrow it with {@link isKycStatusCallbackEvent},
+ * and deduplicate on `resource_id` + `status` yourself.
+ */
+interface KycStatusCallbackEvent {
+    /** Always `"kyc"` — dispatch on this. */
+    event: 'kyc';
+    /** The verification reference (your customer identifier). */
+    reference: string;
+    /** Vesant KYC record ID (`kyc_id`). */
+    resource_id: string;
+    /** Verification outcome. `awaiting_kyc` / `pending` are never sent. */
+    status: 'accepted' | 'declined' | 'review.pending';
+    /**
+     * `true` when your app should block the triggering action. Set when a
+     * failed verification matched a per-event alert rule with the `block`
+     * reaction. Sticky once set on the record. Omitted when `false`.
+     */
+    block?: boolean;
+    /** The event that triggered the block; omitted when not blocked. */
+    block_reason?: string;
+    /** Comma-joined decline text; the structured list is `data.declined_reasons`. */
+    declined_reason?: string;
+    /** @deprecated Legacy category → message map; use `data.warning_reasons`. */
+    warnings?: Record<string, Record<string, string>>;
+    /** Present only when a rule with reactions matched (On Account Sensitive Action). */
+    reactions?: KycCallbackReactions;
+    /** The full KYC record, with `risk_profile` and proof download links. */
+    data: KycRequest;
+}
+/**
+ * Type guard for the KYC status callback. Narrows an already
+ * signature-verified, parsed payload to {@link KycStatusCallbackEvent}.
+ */
+declare function isKycStatusCallbackEvent(value: unknown): value is KycStatusCallbackEvent;
 /**
  * Body POSTed to your `callback_url` when a held sensitive profile change is
  * settled. Signed with `X-Webhook-Signature: sha256=<hex>` (HMAC-SHA256 of the
@@ -803,7 +855,11 @@ interface EventBasedFaceVerificationReactionResult {
     /** Tenant app should block the action/account when true. */
     block: boolean;
     freeze_duration_minutes: number;
-    /** Set when an alert was raised on the dashboard. */
+    /**
+     * Reserved. The dashboard alert is raised after the submit response and
+     * the webhook have been built, so neither carries the alert id today;
+     * read it from `listAlerts()` / the console instead.
+     */
     alert_id?: string;
 }
 /**
@@ -817,12 +873,12 @@ interface EventBasedFaceVerificationCallback {
     resource_id: string;
     status: KycStatus;
     /**
-     * True when the tenant app should block the action/account. Mirrors the
-     * `block` reaction on {@link data} at the top level of the callback so
-     * consumers can branch without inspecting `data`. Omitted when false.
+     * Reserved and not populated on face verification callbacks: the block
+     * decision is `data.block`. Only the document-KYC `kyc` callback sets a
+     * top-level `block`.
      */
     block?: boolean;
-    /** Names the event/verification that triggered the block. Omitted when not blocked. */
+    /** Reserved and not populated; see `data.block`. */
     block_reason?: string;
     /**
      * Structured decline reasons. Returned by
@@ -1559,4 +1615,4 @@ declare class KycClient extends BaseClient {
     createCustomerProfile(profile: CreateProfileRequest): Promise<CustomerProfile>;
 }
 
-export { type AccountSensitiveActionTrigger, type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, type KycCallbackReactions, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycOverview, type KycPagination, type KycPreferences, type KycRequest, type KycRequestFilters, type KycRequestListResponse, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type ProfileChangeCallbackEvent, type ProfileChangeField, type ProfileChangeStatus, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycAlertRequest, type UpdateKycPreferencesRequest, type UpdateKycStatusRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycOverviewOptions, type UseKycOverviewResult, type UseKycPreferencesResult, type UseKycRequestsOptions, type UseKycRequestsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent, isProfileChangeCallbackEvent };
+export { type AccountSensitiveActionTrigger, type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, type KycCallbackReactions, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycOverview, type KycPagination, type KycPreferences, type KycRequest, type KycRequestFilters, type KycRequestListResponse, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycStatusCallbackEvent, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type ProfileChangeCallbackEvent, type ProfileChangeField, type ProfileChangeStatus, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycAlertRequest, type UpdateKycPreferencesRequest, type UpdateKycStatusRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycOverviewOptions, type UseKycOverviewResult, type UseKycPreferencesResult, type UseKycRequestsOptions, type UseKycRequestsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent, isKycStatusCallbackEvent, isProfileChangeCallbackEvent };

package/dist/kyc/index.d.ts

@@ -1,4 +1,4 @@
-import { P as ProfileFilters, b as ProfileListResponse, C as CustomerProfile, a as CreateProfileRequest } from '../types-1kI4SsKB.js';
+import { C as CustomerProfile, P as ProfileFilters, b as ProfileListResponse, a as CreateProfileRequest } from '../types-qXamJr2q.js';
 import { c as Reason, R as RiskLevel, P as PaginationParams } from '../types-CBQRNL-l.js';
 import { B as BaseClient, R as RequestOptions } from '../client-q9fN8Hhf.js';
 
@@ -15,7 +15,7 @@ type KycStatus =
 /** Submit link issued but the customer has not submitted documents yet — not "in progress". */
 'awaiting_kyc'
 /** Documents submitted, verification in progress. */
- | 'pending' | 'accepted' | 'declined' | 'review.pending' | 'unknown';
+ | 'pending' | 'accepted' | 'declined' | 'review.pending';
 type KycDeclinedCode = 'KYC_DOCUMENT_EXPIRED' | 'KYC_DOCUMENT_INVALID' | 'KYC_FACE_MISMATCH' | 'KYC_AGE_REQUIREMENT' | 'KYC_DUPLICATE_IDENTITY' | 'KYC_ADDRESS_MISMATCH' | 'KYC_NAME_MISMATCH' | 'KYC_PROVIDER_REJECTED' | 'KYC_DECLINED';
 declare const KYC_DECLINED_DESCRIPTIONS: Record<KycDeclinedCode, string>;
 type KycAlertStatus = 'pending' | 'in_progress' | 'resolved' | 'closed' | 'escalated';
@@ -111,7 +111,8 @@ interface KycRequest {
     block_reason?: string;
     proofs?: Proof[];
     alerts?: KycAlert[];
-    risk_profile?: KycCustomerProfile;
+    /** The customer's risk profile (`risk_category`, `risk_score`, `kyc_status`, ...). */
+    risk_profile?: CustomerProfile;
     created_at: string;
     updated_at: string;
 }
@@ -136,21 +137,17 @@ interface ProofDownloadURL {
     /** Not sent by the platform; the link itself is short-lived. */
     expires_at?: string;
 }
-interface KycCustomerProfile {
-    id: string;
-    tenant_id: string;
-    customer_id: string;
-    first_name?: string;
-    last_name?: string;
-    email?: string;
-    risk_score: number;
-    risk_level: RiskLevel;
-    kyc_status?: string;
-    pep_status?: boolean;
-    sanctions_status?: boolean;
-    created_at: string;
-    updated_at: string;
-}
+/**
+ * The customer's risk profile as embedded on a KYC record
+ * (`additional_data.risk_profile`). The platform preloads the full
+ * `customer_profiles` row, so this is the same shape as
+ * {@link CustomerProfile}: read `risk_category` / `risk_score`, `kyc_status`,
+ * `is_pep`, `has_sanctions`. There is no `risk_level` field on the wire.
+ *
+ * @deprecated Use {@link CustomerProfile}; this alias is kept for existing
+ * imports and will be removed in a future major.
+ */
+type KycCustomerProfile = CustomerProfile;
 interface KycAlert {
     id: string;
     kyc_id: string;
@@ -269,6 +266,16 @@ interface KycVerificationTriggers {
     first_purchase: boolean;
     /** Re-trigger verification once the customer's identity document has expired. */
     auto_trigger_on_id_expiration: boolean;
+    /**
+     * Manual KYC Verification: whether customers may start a verification
+     * themselves (`trigger_event: "manual"`), independent of the event
+     * triggers and of their status. On by default. When on, a `manual`
+     * request always returns a link — an already verified customer included.
+     * When off, it answers `kyc_required: false` with reason
+     * `KYC_NOT_REQUIRED_TRIGGER_DISABLED`; hide your Verification option in
+     * that case.
+     */
+    manual: boolean;
     /** Hold sensitive profile changes (name, DOB, address) behind KYC. */
     account_sensitive_action?: AccountSensitiveActionTrigger;
 }
@@ -438,8 +445,9 @@ interface UpdateKycStatusRequest {
 }
 /**
  * Events that can trigger a KYC request. Each maps to a per-event toggle in
- * the tenant's KYC verification trigger preferences, except `manual` (always
- * required) and `login` (only for an expired identity document).
+ * the tenant's KYC verification trigger preferences (`manual` to the Manual
+ * KYC Verification toggle), except `login` (only for an expired identity
+ * document).
  */
 type KycTriggerEvent = 'onboarding' | 'first_withdrawal' | 'first_purchase'
 /** Aliases of `first_withdrawal` / `first_purchase` — same tenant toggles. */
@@ -501,8 +509,12 @@ interface RequestKycSubmitLinkRequest {
     /**
      * Event that triggered the KYC request. The tenant's KYC verification
      * trigger preferences decide, per event, whether KYC is required
-     * (`kyc_required` in the response). "manual" always requires KYC and
-     * honors the tenant's allow-skip-on-manual option (`can_skip`). "login"
+     * (`kyc_required` in the response). "manual" — the customer starting
+     * verification themselves — is governed by the tenant's Manual KYC
+     * Verification toggle (on by default): when on it always returns a link,
+     * even for an already verified customer, and honors the
+     * allow-skip-on-manual option (`can_skip`); when off it answers
+     * `kyc_required: false` with `KYC_NOT_REQUIRED_TRIGGER_DISABLED`. "login"
      * answers for any customer state — never verified (asked, not skippable),
      * document expired (asked, skippable so you can offer "Remind me later"),
      * or verified and valid (not asked) — so a platform that gates entry on KYC
@@ -627,7 +639,8 @@ interface RequestKycSubmitLinkResponse {
      * Whether the user may skip verification. `true` for
      * `trigger_event: "manual"` when the tenant enables allow-skip-on-manual,
      * for `"login"` when an expired identity document triggered the request
-     * (offer "Remind me later"), and when the customer is already verified.
+     * (offer "Remind me later"), and when the customer is already verified
+     * (except on `"manual"`, which always issues a link while enabled).
      * Always `false` at `"withdrawal"` / `"purchase"` — that is where a
      * postponed re-verification becomes mandatory.
      */
@@ -648,9 +661,9 @@ interface RequestKycSubmitLinkResponse {
  * is the only signal for it — nothing the customer does triggers it. Delivered
  * once per customer, when the document first becomes expired.
  *
- * It is sent regardless of the tenant's auto-trigger-on-ID-expiration setting:
- * that setting governs whether verification is *enforced*, not whether you are
- * *told*.
+ * It is sent only while the tenant's auto-trigger-on-ID-expiration setting is
+ * enabled; with the setting off the document is still flagged as expired, but
+ * no webhook is sent.
  */
 interface KycDocumentExpiredCallbackEvent {
     /** Always `"kyc_document_expired"` — dispatch on this. */
@@ -692,10 +705,49 @@ interface KycCallbackReactions {
     trigger_alert: boolean;
     block: boolean;
     freeze_account: boolean;
-    /** Set when `freeze_account` is true: the tenant's default freeze window. */
+    /** Set when `freeze_account` is true: the freeze window the tenant set for the rules that fired. */
     freeze_duration_minutes?: number;
     enforce_logout: boolean;
 }
+/**
+ * Body POSTed to your KYC `callback_url` whenever a document verification
+ * reaches an outcome (`accepted`, `declined`, `review.pending`). This is a flat
+ * callback, not a platform event envelope: there is no `event_type`, `id` or
+ * `timestamp`, so it cannot go through `WebhookHandler`. Verify it with
+ * `verifyWebhookSignature`, narrow it with {@link isKycStatusCallbackEvent},
+ * and deduplicate on `resource_id` + `status` yourself.
+ */
+interface KycStatusCallbackEvent {
+    /** Always `"kyc"` — dispatch on this. */
+    event: 'kyc';
+    /** The verification reference (your customer identifier). */
+    reference: string;
+    /** Vesant KYC record ID (`kyc_id`). */
+    resource_id: string;
+    /** Verification outcome. `awaiting_kyc` / `pending` are never sent. */
+    status: 'accepted' | 'declined' | 'review.pending';
+    /**
+     * `true` when your app should block the triggering action. Set when a
+     * failed verification matched a per-event alert rule with the `block`
+     * reaction. Sticky once set on the record. Omitted when `false`.
+     */
+    block?: boolean;
+    /** The event that triggered the block; omitted when not blocked. */
+    block_reason?: string;
+    /** Comma-joined decline text; the structured list is `data.declined_reasons`. */
+    declined_reason?: string;
+    /** @deprecated Legacy category → message map; use `data.warning_reasons`. */
+    warnings?: Record<string, Record<string, string>>;
+    /** Present only when a rule with reactions matched (On Account Sensitive Action). */
+    reactions?: KycCallbackReactions;
+    /** The full KYC record, with `risk_profile` and proof download links. */
+    data: KycRequest;
+}
+/**
+ * Type guard for the KYC status callback. Narrows an already
+ * signature-verified, parsed payload to {@link KycStatusCallbackEvent}.
+ */
+declare function isKycStatusCallbackEvent(value: unknown): value is KycStatusCallbackEvent;
 /**
  * Body POSTed to your `callback_url` when a held sensitive profile change is
  * settled. Signed with `X-Webhook-Signature: sha256=<hex>` (HMAC-SHA256 of the
@@ -803,7 +855,11 @@ interface EventBasedFaceVerificationReactionResult {
     /** Tenant app should block the action/account when true. */
     block: boolean;
     freeze_duration_minutes: number;
-    /** Set when an alert was raised on the dashboard. */
+    /**
+     * Reserved. The dashboard alert is raised after the submit response and
+     * the webhook have been built, so neither carries the alert id today;
+     * read it from `listAlerts()` / the console instead.
+     */
     alert_id?: string;
 }
 /**
@@ -817,12 +873,12 @@ interface EventBasedFaceVerificationCallback {
     resource_id: string;
     status: KycStatus;
     /**
-     * True when the tenant app should block the action/account. Mirrors the
-     * `block` reaction on {@link data} at the top level of the callback so
-     * consumers can branch without inspecting `data`. Omitted when false.
+     * Reserved and not populated on face verification callbacks: the block
+     * decision is `data.block`. Only the document-KYC `kyc` callback sets a
+     * top-level `block`.
      */
     block?: boolean;
-    /** Names the event/verification that triggered the block. Omitted when not blocked. */
+    /** Reserved and not populated; see `data.block`. */
     block_reason?: string;
     /**
      * Structured decline reasons. Returned by
@@ -1559,4 +1615,4 @@ declare class KycClient extends BaseClient {
     createCustomerProfile(profile: CreateProfileRequest): Promise<CustomerProfile>;
 }
 
-export { type AccountSensitiveActionTrigger, type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, type KycCallbackReactions, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycOverview, type KycPagination, type KycPreferences, type KycRequest, type KycRequestFilters, type KycRequestListResponse, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type ProfileChangeCallbackEvent, type ProfileChangeField, type ProfileChangeStatus, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycAlertRequest, type UpdateKycPreferencesRequest, type UpdateKycStatusRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycOverviewOptions, type UseKycOverviewResult, type UseKycPreferencesResult, type UseKycRequestsOptions, type UseKycRequestsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent, isProfileChangeCallbackEvent };
+export { type AccountSensitiveActionTrigger, type CheckKycStatusRequest, type CheckKycStatusResponse, CreateProfileRequest as CreateCustomerProfileRequest, type CreateEventBasedFaceVerificationSessionRequest, type CreateEventBasedFaceVerificationSessionResponse, CustomerProfile, ProfileFilters as CustomerProfileFilters, ProfileListResponse as CustomerProfileListResponse, type DocumentType, type DocumentVerificationRequest, type DocumentVerificationResponse, type EventBasedFaceVerificationCallback, type EventBasedFaceVerificationDeviceType, type EventBasedFaceVerificationEvent, type EventBasedFaceVerificationFrequencyTrigger, type EventBasedFaceVerificationReactionResult, type EventBasedFaceVerificationReactions, type EventBasedFaceVerificationThresholdTrigger, type EventBasedFaceVerificationTriggers, type FaceProof, KYC_DECLINED_DESCRIPTIONS, type KycAlert, type KycAlertFilters, type KycAlertListResponse, type KycAlertStatus, type KycAlertType, type KycCallbackReactions, KycClient, type KycClientConfig, type KycCustomerData, type KycCustomerProfile, type KycDeclinedCode, type KycDisclosureConsent, type KycDocumentExpiredCallbackEvent, type KycHandoffSession, type KycOtherReason, type KycOverview, type KycPagination, type KycPreferences, type KycRequest, type KycRequestFilters, type KycRequestListResponse, type KycRequestReason, type KycRequestReasonCode, type KycSkipOptions, type KycStatus, type KycStatusCallbackEvent, type KycTriggerEvent, type KycVerificationTriggers, type Name, PaginationParams, type ProfileChangeCallbackEvent, type ProfileChangeField, type ProfileChangeStatus, type Proof, type ProofDownloadURL, type ProofType, type RequestAdditionalDocumentsRequest, type RequestKycSubmitLinkRequest, type RequestKycSubmitLinkResponse, RiskLevel, type SubmitEventBasedFaceVerificationSessionRequest, type SubmittedDocument, type SupportedAddressDocumentType, type SupportedDocumentType, type UpdateKycAlertRequest, type UpdateKycPreferencesRequest, type UpdateKycStatusRequest, type UseKycAlertsOptions, type UseKycAlertsResult, type UseKycOverviewOptions, type UseKycOverviewResult, type UseKycPreferencesResult, type UseKycRequestsOptions, type UseKycRequestsResult, type UseKycSubmissionOptions, type UseKycSubmissionResult, isKycDocumentExpiredCallbackEvent, isKycStatusCallbackEvent, isProfileChangeCallbackEvent };

package/dist/kyc/index.js

@@ -1348,6 +1348,9 @@ var KYC_DECLINED_DESCRIPTIONS = {
 function isKycDocumentExpiredCallbackEvent(value) {
   return typeof value === "object" && value !== null && value.event === "kyc_document_expired";
 }
+function isKycStatusCallbackEvent(value) {
+  return typeof value === "object" && value !== null && value.event === "kyc";
+}
 function isProfileChangeCallbackEvent(value) {
   return typeof value === "object" && value !== null && value.event === "profile_change";
 }
@@ -1355,6 +1358,7 @@ function isProfileChangeCallbackEvent(value) {
 exports.KYC_DECLINED_DESCRIPTIONS = KYC_DECLINED_DESCRIPTIONS;
 exports.KycClient = KycClient;
 exports.isKycDocumentExpiredCallbackEvent = isKycDocumentExpiredCallbackEvent;
+exports.isKycStatusCallbackEvent = isKycStatusCallbackEvent;
 exports.isProfileChangeCallbackEvent = isProfileChangeCallbackEvent;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map