Migrating from Persona to Naive

// Server-side REST. Persona's featured SDKs are client-side; the server flow is HTTP.
const PERSONA = "https://api.withpersona.com/api/v1";
const headers = {
  Authorization: `Bearer ${process.env.PERSONA_API_KEY!}`,
  "Persona-Version": "2025-10-27",
  "Content-Type": "application/json",
};

// 1. Create an inquiry against a template you authored (one subject).
const created = await fetch(`${PERSONA}/inquiries`, {
  method: "POST",
  headers,
  body: JSON.stringify({
    data: {
      attributes: {
        "inquiry-template-id": "itmpl_XXXXXXXX",
        "reference-id": dbUser.id, // tag back to YOUR user row
        fields: { name_first: "Alice", name_last: "Smith" },
      },
    },
  }),
}).then((r) => r.json());
const inquiryId = created.data.id; // "inq_..."

// 2. Generate the hosted KYC link and send it to the subject yourself.
const link = await fetch(`${PERSONA}/inquiries/${inquiryId}/generate-one-time-link`, {
  method: "POST",
  headers,
}).then((r) => r.json());
// → link.meta["one-time-link"] : "https://inquiry.withpersona.com/..."

// 3. Read the result (Persona recommends a webhook; polling shown for parity).
const got = await fetch(`${PERSONA}/inquiries/${inquiryId}`, { headers }).then((r) => r.json());
// → got.data.attributes.status : "completed" | "approved" | "declined" | ...

import { Naive } from "@usenaive-sdk/server";

const naive = new Naive({ apiKey: process.env.NAIVE_API_KEY! });
const client = naive.forUser(dbUser.id); // same id space as your own users

// 1. Start KYC for the founders (a set, with ownership + responsible party).
//    The SDK exposes verification.start; status/complete are REST endpoints.
const verification = await client.verification.start({
  members: [
    {
      first_name: "Alice",
      last_name: "Smith",
      email: "alice@example.com",
      ownership_percentage: 100,
      role: "primary",
      is_responsible_party: true,
    },
  ],
});
// → verification.id, verification.primary_link (hand to the primary founder),
//   verification.members[].status. Secondary members are emailed automatically.

const nv = {
  Authorization: `Bearer ${process.env.NAIVE_API_KEY!}`,
  "Content-Type": "application/json",
};

// 2. Confirm the primary instantly with the validation token from the hosted flow.
const member = await fetch(
  `https://api.usenaive.ai/v1/verification/members/${verification.members[0].id}/complete`,
  { method: "POST", headers: nv, body: JSON.stringify({ validation_token: "valtok_xxx" }) },
).then((r) => r.json());
// → member.status : "pass" | "fail"

// 3. Read the result + the formation gate (poll; no KYC webhook to subscribe to today).
const status = await fetch(
  `https://api.usenaive.ai/v1/verification/${verification.id}`,
  { headers: nv },
).then((r) => r.json());
// → status.ready_for_formation : true only when EVERY member is "pass"

// Webhook handler (Persona-Signature HMAC). Persona recommends this over polling.
app.post("/webhooks/persona", (req, res) => {
  const evt = req.body; // verify Persona-Signature first
  if (evt.data.attributes.name === "inquiry.approved") {
    const inquiryId = evt.data.attributes.payload.data.id;
    // mark the user verified in YOUR system
  }
  res.sendStatus(200);
});

const nv = { Authorization: `Bearer ${process.env.NAIVE_API_KEY!}`, "Content-Type": "application/json" };

// Primary founder: confirm instantly from the hosted flow's validation token.
await fetch(`https://api.usenaive.ai/v1/verification/members/${memberId}/complete`, {
  method: "POST", headers: nv, body: JSON.stringify({ validation_token: "valtok_xxx" }),
});

// Everyone else: poll GET /v1/verification/:id until the formation gate opens.
const v = await fetch(`https://api.usenaive.ai/v1/verification/${verification.id}`, { headers: nv })
  .then((r) => r.json());
if (v.ready_for_formation) {
  // every member is "pass" — proceed to formation
}
// Confirm any future KYC webhook via GET /v1/webhooks/event-types before relying on it.

// Verify the founder...
const inq = await createInquiry({ referenceId: dbUser.id });
// → status "approved"

// ...then incorporate with Stripe Atlas / doola, open a bank account, issue a card,
//    and buy a phone number in ENTIRELY separate systems, each re-keyed to dbUser.id
//    by hand. Persona never knows the verified person became this company.

const acme = await naive.users.create({ external_id: dbCompany.id, email: founder.email });
const client = naive.forUser(acme.id);

// 1. KYC the founders.
const v = await client.verification.start({ members: [/* founders */] });

// 2. Same identity → form the company once everyone passes (PII pulled from the
//    encrypted vault at submission time; it never touches your DB). Pick a
//    naics_code_id from GET /v1/formation/naics-codes.
await client.formation.submit({
  verification_id: v.id,
  entity_type: "LLC",
  state: "WY",
  naics_code_id: "<naics-code-id>",
  description: "AI-powered business automation",
  name_options: [{ name: "Acme Tech", entity_type_ending: "LLC" }],
});

// 3. Same identity → it now owns the company's card, phone, email, and vault
//    (provision the number with the company EIN once formation has issued it).
await client.cards.create({ spending_limit_cents: 25_000 });
await client.phone.provision({ ein: "12-3456789", area_code: "415" });
await client.email.createInbox({ local_part: "founders" });