@checktiv/sdk-web 1.6.1 → 1.7.1

package/README.md

@@ -33,13 +33,13 @@ token-lifecycle code.
 **Backend** - your server holds the secret key and returns a `clientToken`:
 
 ```js
-import { sessions } from '@checktiv/sdk-web';
+import { sessions, regionToApiBase } from '@checktiv/sdk-web';
 
 // POST /kyc/session (your backend)
 const { clientToken } = await sessions.create(
   { templateId: 'wt_...', applicant: { externalId: user.id } },
   {
-    apiBase: 'https://api.us.checktiv.com',
+    apiBase: regionToApiBase('us'), // or 'eu' for your account's region
     secretKey: process.env.CHECKTIV_SECRET_KEY, // ah_sk_* - never in the browser
     idempotencyKey: user.id, // retries and new-device re-entry never double-mint
   },
@@ -51,6 +51,24 @@ const { clientToken } = await sessions.create(
 it only from your server. The `clientToken` it returns can resume the applicant's own
 session; it never reads verification results or applicant data.
 
+On failure it throws a typed error you can discriminate on `.code` (`unauthorized`,
+`invalid_template`, `rate_limited`, `network`, `server_error`):
+
+```js
+import { sessions, isSessionsCreateError } from '@checktiv/sdk-web';
+
+try {
+  const { clientToken } = await sessions.create(input, options);
+  return Response.json({ clientToken });
+} catch (err) {
+  if (isSessionsCreateError(err) && err.code === 'unauthorized') {
+    // Wrong or wrong-region secret key. Do NOT surface err.message to the browser.
+    return new Response('Server misconfigured', { status: 500 });
+  }
+  throw err;
+}
+```
+
 **Frontend** - mount and forget:
 
 ```js
@@ -60,7 +78,7 @@ import '@checktiv/sdk-web/fraud'; // omit if the workflow never declares fraud
 import '@checktiv/sdk-web/capture-ui/style.css'; // REQUIRED: styles the capture surface
 
 const handle = mount(document.getElementById('checktiv-container'), {
-  publishableKey: 'ah_pk_us_test_...', // safe to expose - origin-pinned, no scopes
+  publishableKey: 'ah_pk_us_live_...', // safe to expose - origin-pinned, no scopes
   // Called ONCE for the cold start (or a new device), never on every expiry.
   fetchToken: () =>
     fetch('/kyc/session', { method: 'POST' })
@@ -68,6 +86,13 @@ const handle = mount(document.getElementById('checktiv-container'), {
       .then((data) => data.clientToken),
   onConsent: () => showConsentPrompt(), // required only if the session declares fraud
   onEvent: (event) => console.log(event),
+  onError: (error) => {
+    // Fires for any failure the journey emits, across every module (identity
+    // verification, fraud, custom forms). `error.code` is a stable discriminant.
+    if (error.recovery === 'refresh_session')
+      showMessage('Your session expired. Please start again.');
+    else showMessage(error.message);
+  },
   onComplete: ({ sessionId }) => {
     // Capture is complete. Wait for the webhook verdict before acting.
     showMessage('Verification submitted. You will hear from us shortly.');
@@ -149,7 +174,7 @@ import '@checktiv/sdk-web/idv';
 import '@checktiv/sdk-web/capture-ui/style.css'; // REQUIRED for the managed capture surface
 
 const client = init({
-  publishableKey: 'ah_pk_us_test_...',
+  publishableKey: 'ah_pk_us_live_...',
   getSessionToken: async (ctx) => {
     // Your server mints a short-lived browser token from its secret key.
     const res = await fetch('/api/checktiv/token', {
@@ -177,21 +202,21 @@ side effect so `mount()` / `mountProvisioned()` / `mount('idv')` can resolve tha
 module. If a session needs a module you did not import, the SDK throws a clear,
 actionable error telling you which subpath to add, instead of failing silently.
 
-| Subpath                   | Purpose                                                                                                                                    |
-| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
-| `.` / `@checktiv/sdk-web` | Core entry: the zero-lifecycle `mount(target, opts)` + `sessions.create`, plus the `init(opts)` client. Tree-shakeable and lightweight.    |
-| `./idv`                   | Managed identity-verification module. Import for its self-registration side effect so `mount()` / `mount('idv')` resolve it.               |
-| `./fraud`                 | Consent-gated fraud-signal collection. Import for its self-registration side effect.                                                       |
-| `./custom-form`           | Custom intake-form module (server-authored field definitions). Import for its self-registration side effect.                               |
-| `./custom-form/style.css` | Stylesheet for the custom-form module. `<link>` or `import` this into the host page.                                                       |
-| `./collect-user-info`     | `collectUserInfo({ session })` - satisfy a `collect_user_info` step from your own form. No UI, no registration import. Zero-lifecycle.     |
-| `./capture-ui/style.css`  | Stylesheet for the managed IDV capture surface. Import it (the managed module renders through it) or the capture screen is unstyled.       |
-| `./react`                 | React wrappers: `ChecktivJourney` (zero-lifecycle `mount`), plus `ChecktivProvider` / `useChecktiv()` / `ChecktivIdv` (the `init()` path). |
-| `./capture`               | Advanced: headless host-side capture controller (`createCaptureController`). No default UI.                                                |
-| `./capture-ui`            | Advanced: batteries-included capture renderer (`mount()`), built on `./capture`.                                                           |
-| `./cross-device`          | Cross-device QR / copy-link handoff overlay (`mountCrossDevice`).                                                                          |
-| `./idv/cross-device`      | Cross-device wiring for the managed IDV module.                                                                                            |
-| `./agents`                | Machine-readable steering manifest (JSON) for coding-agent tooling.                                                                        |
+| Subpath                   | Purpose                                                                                                                                                                              |
+| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `.` / `@checktiv/sdk-web` | Core entry: the zero-lifecycle `mount(target, opts)` + `sessions.create`, plus the `init(opts)` client. Tree-shakeable and lightweight.                                              |
+| `./idv`                   | Managed identity-verification module. Import for its self-registration side effect so `mount()` / `mount('idv')` resolve it. Heavier than `.` / `./react` (see "Bundle size" below). |
+| `./fraud`                 | Consent-gated fraud-signal collection. Import for its self-registration side effect.                                                                                                 |
+| `./custom-form`           | Custom intake-form module (server-authored field definitions). Import for its self-registration side effect.                                                                         |
+| `./custom-form/style.css` | Stylesheet for the custom-form module. `<link>` or `import` this into the host page.                                                                                                 |
+| `./collect-user-info`     | `collectUserInfo({ session })` - satisfy a `collect_user_info` step from your own form. No UI, no registration import. Zero-lifecycle.                                               |
+| `./capture-ui/style.css`  | Stylesheet for the managed IDV capture surface. Import it (the managed module renders through it) or the capture screen is unstyled.                                                 |
+| `./react`                 | React wrappers: `ChecktivJourney` (zero-lifecycle `mount`), plus `ChecktivProvider` / `useChecktiv()` / `ChecktivIdv` (the `init()` path).                                           |
+| `./capture`               | Advanced: headless host-side capture controller (`createCaptureController`). No default UI.                                                                                          |
+| `./capture-ui`            | Advanced: batteries-included capture renderer (`mount()`), built on `./capture`.                                                                                                     |
+| `./cross-device`          | Cross-device QR / copy-link handoff overlay (`mountCrossDevice`).                                                                                                                    |
+| `./idv/cross-device`      | Cross-device wiring for the managed IDV module.                                                                                                                                      |
+| `./agents`                | Machine-readable steering manifest (JSON) for coding-agent tooling.                                                                                                                  |
 
 ## Managed IDV module (`./idv`)
 
@@ -209,6 +234,17 @@ stream is forward-open: new event types can appear over time, so handle the ones
 care about and ignore the rest - do not write an exhaustive switch that assumes a
 fixed set.
 
+### Bundle size
+
+`./idv` is heavier than the `.` and `./react` entries: importing it adds a runtime
+schema-validation layer, about 70 KiB gzipped, that those entries do not carry. It
+exists because `./idv` parses capture result messages that cross an origin boundary
+(the capture surface posting results back to your page), and that boundary carries
+untrusted input, so it is validated at runtime rather than trusted to a compile-time
+type alone. Every real identity-verification integration imports `./idv`, so plan
+for this when sizing your bundle; it is called out here so it is not a surprise when
+you inspect your bundle analyzer output.
+
 ## Fraud module (`./fraud`)
 
 Fraud-signal collection is **consent-gated and default-deny**: it collects nothing
@@ -257,7 +293,7 @@ import { collectUserInfo } from '@checktiv/sdk-web/collect-user-info';
 
 const collector = collectUserInfo({
   session: {
-    publishableKey: 'ah_pk_us_test_...',
+    publishableKey: 'ah_pk_us_live_...',
     fetchToken: () =>
       fetch('/kyc/session', { method: 'POST' })
         .then((res) => res.json())
@@ -311,7 +347,7 @@ In React, the `./react` subpath exposes the same collector through the
 ```jsx
 import { useCollectUserInfo } from '@checktiv/sdk-web/react';
 
-const collector = useCollectUserInfo({ publishableKey: 'ah_pk_us_test_...', fetchToken });
+const collector = useCollectUserInfo({ publishableKey: 'ah_pk_us_live_...', fetchToken });
 // collector.describe() and collector.submit(...) work exactly as above.
 ```
 
@@ -339,7 +375,7 @@ import '@checktiv/sdk-web/capture-ui/style.css';
 export function CheckIn() {
   return (
     <ChecktivJourney
-      publishableKey="ah_pk_us_test_..."
+      publishableKey="ah_pk_us_live_..."
       fetchToken={() => fetchClientToken()} // returns your durable clientToken
       onConsent={() => showConsent()} // required only if the session declares fraud
       onEvent={(e) => console.log(e)}
@@ -367,7 +403,7 @@ import '@checktiv/sdk-web/capture-ui/style.css';
 export function App() {
   return (
     <ChecktivProvider
-      publishableKey="ah_pk_us_test_..."
+      publishableKey="ah_pk_us_live_..."
       getSessionToken={async (ctx) => fetchToken(ctx)}
     >
       <ChecktivIdv onEvent={(e) => console.log(e)} />

package/dist/{api-DWWQGjxL.d.ts → api-Cjh51lsw.d.ts}

@@ -8,10 +8,12 @@ declare const DataRegions: readonly ["us", "eu"];
 type DataRegion = (typeof DataRegions)[number];
 
 type ChecktivErrorCode = 'origin_not_allowed' | 'token_expired' | 'session_expired' | 'wrong_token_type' | 'protocol_mismatch' | 'camera_denied' | 'camera_unsupported' | 'cv_gate_failed' | 'upload_failed' | 'sdk_load_failed' | 'biometric_unsupported' | 'isolation_required';
+declare const CHECKTIV_RECOVERY_STRATEGIES: readonly ["retry", "cross_device", "refresh_session", "contact_operator"];
+type ChecktivRecovery = (typeof CHECKTIV_RECOVERY_STRATEGIES)[number];
 interface ChecktivError {
     code: ChecktivErrorCode;
     recoverable: boolean;
-    recovery: 'retry' | 'cross_device' | 'refresh_session' | 'contact_operator';
+    recovery: ChecktivRecovery;
     message: string;
 }
 
@@ -273,6 +275,7 @@ type MountOptions = MountScope & {
     readonly fetchToken: () => Promise<string>;
     readonly onComplete?: (result: MountCompleteResult) => void;
     readonly onEvent?: (e: ChecktivEvent) => void;
+    readonly onError?: (e: ChecktivError) => void;
     readonly onConsent?: () => boolean | Promise<boolean>;
     readonly apiBase?: string;
     readonly fetchImpl?: typeof fetch;
@@ -334,4 +337,4 @@ declare class InvalidPublishableKeyError extends Error {
 }
 declare function parsePublishableKey(key: string): ParsedPublishableKey;
 
-export { type ChecktivInitScope as A, type SubstrateContext as B, type ChecktivInitOptions as C, REMINT_READY_TIMEOUT_MS as D, createIdv as E, type FraudHandle as F, type GetSessionToken as G, type ChecktivCustomFormEvent as H, type InitOptions as I, type CustomFormCopy as J, type CustomFormFieldCopy as K, type CustomFormHandle as L, type MountOptions as M, type CustomFormMountOptions as N, createCustomForm as O, type ProvisionedHandle as P, createFraud as Q, type ResolvedIdvConfig as R, type SdkMode as S, type TokenManager as T, type ChecktivClient as a, type ChecktivSessions as b, type ChecktivError as c, type ChecktivErrorCode as d, type ChecktivEvent as e, type ChecktivFraudEvent as f, type ChecktivIdvEvent as g, type CrossDeviceHandoffHook as h, type FraudMountOptions as i, type GetSessionTokenContext as j, type IdvCoachingHint as k, type IdvHandle as l, type IdvMountOptions as m, InvalidPublishableKeyError as n, type MountCompleteResult as o, type MountProvisionedOptions as p, type MountScope as q, type ParsedPublishableKey as r, type SdkRegion as s, type SessionsCreateApplicant as t, type SessionsCreateApplicantAddress as u, type SessionsCreateInput as v, type SessionsCreateOptions as w, type SessionsCreateResult as x, type SyntheticIdvScript as y, parsePublishableKey as z };
+export { parsePublishableKey as A, type ChecktivInitScope as B, type ChecktivInitOptions as C, type SubstrateContext as D, REMINT_READY_TIMEOUT_MS as E, type FraudHandle as F, type GetSessionToken as G, createIdv as H, type InitOptions as I, type ChecktivCustomFormEvent as J, type CustomFormCopy as K, type CustomFormFieldCopy as L, type MountOptions as M, type CustomFormHandle as N, type CustomFormMountOptions as O, type ProvisionedHandle as P, createCustomForm as Q, type ResolvedIdvConfig as R, type SdkRegion as S, type TokenManager as T, createFraud as U, type ChecktivClient as a, type ChecktivSessions as b, type ChecktivError as c, type ChecktivErrorCode as d, type ChecktivEvent as e, type ChecktivFraudEvent as f, type ChecktivIdvEvent as g, type ChecktivRecovery as h, type CrossDeviceHandoffHook as i, type FraudMountOptions as j, type GetSessionTokenContext as k, type IdvCoachingHint as l, type IdvHandle as m, type IdvMountOptions as n, InvalidPublishableKeyError as o, type MountCompleteResult as p, type MountProvisionedOptions as q, type MountScope as r, type ParsedPublishableKey as s, type SdkMode as t, type SessionsCreateApplicant as u, type SessionsCreateApplicantAddress as v, type SessionsCreateInput as w, type SessionsCreateOptions as x, type SessionsCreateResult as y, type SyntheticIdvScript as z };

package/dist/{chunk-CGSNIVQF.js → chunk-CSNKMUIP.js}

@@ -1,4 +1,4 @@
-import { createChecktivError } from './chunk-OC5N6W7T.js';
+import { createChecktivError } from './chunk-JS3Y6T76.js';
 
 function createChecktivErrorEvent(code){return {type:"checktiv.idv.error",error:createChecktivError(code)}}var CAPTURE_ERROR_CODE={cv_gate_failed:"cv_gate_failed",upload_failed:"upload_failed",sdk_load_failed:"sdk_load_failed",biometric_unsupported:"biometric_unsupported",camera_unsupported:"camera_unsupported",selfie_camera_denied:"camera_denied",liveness_camera_denied:"camera_denied",liveness_runtime_error:"sdk_load_failed",liveness_timeout:"sdk_load_failed",liveness_server_error:"sdk_load_failed",liveness_cancelled:"sdk_load_failed",protocol_mismatch:"protocol_mismatch"};function mapStateToEvent(state,ctx){switch(state.kind){case "minting":case "waiting_for_init":case "submitting":return null;case "ready":return {type:"checktiv.idv.ready",config:ctx.config};case "capturing":if(state.phase==="coaching"&&state.coaching!==null){return {type:"checktiv.idv.coaching",hint:state.coaching}}return {type:"checktiv.idv.phase",phase:state.phase};case "mint_error":return createChecktivErrorEvent("session_expired");case "submit_error":return createChecktivErrorEvent("upload_failed");case "submit_pending":return {type:"checktiv.idv.processing",reason:"signal_pending"};case "capture_superseded":return {type:"checktiv.idv.capture_superseded"};case "token_expired":return createChecktivErrorEvent("token_expired");case "capture_error":return createChecktivErrorEvent(CAPTURE_ERROR_CODE[state.errorKind]);default:return null}}var opener=null;function registerCrossDeviceOpener(fn){opener=fn;}function getCrossDeviceOpener(){return opener}
 

package/dist/{chunk-7F7ZMYB7.js → chunk-DRNEDARS.js}

@@ -1,5 +1,5 @@
 import { withTokenRetry } from './chunk-S2OOEDJS.js';
-import { sdkPublicSettings, SESSIONS_ME_PATH, dataPlaneHeaders } from './chunk-KK66RKPI.js';
+import { sdkPublicSettings, SESSIONS_ME_PATH, dataPlaneHeaders } from './chunk-HFQJYEGZ.js';
 import { IDV_DOCUMENT_TYPES } from './chunk-IQKHRPJR.js';
 
 var SDK_MODULES=["idv","fraud","custom_form"];var BIOMETRIC_MODES=["none","selfie","liveness"];var DOCUMENT_TYPES=IDV_DOCUMENT_TYPES;var SDK_MODES=["live","test"];var DATA_REGIONS=Object.keys(sdkPublicSettings.regions);var COLLECT_USER_INFO_FIELD_VALUES=["email","phone","dob","address"];function isRecord(v){return typeof v==="object"&&v!==null}function isNonEmptyString(v){return typeof v==="string"&&v.length>0}function isSdkModule(v){return typeof v==="string"&&SDK_MODULES.includes(v)}function isBiometricMode(v){return typeof v==="string"&&BIOMETRIC_MODES.includes(v)}function isSdkMode(v){return typeof v==="string"&&SDK_MODES.includes(v)}function isSdkRegion(v){return typeof v==="string"&&DATA_REGIONS.includes(v)}function isDocumentType(v){return typeof v==="string"&&DOCUMENT_TYPES.includes(v)}function isCollectUserInfoField(v){return typeof v==="string"&&COLLECT_USER_INFO_FIELD_VALUES.includes(v)}function parseCollectUserInfoConfig(value){if(!isRecord(value))return null;const fields=value.fields;const captureStructuredName=value.capture_structured_name;if(!Array.isArray(fields))return null;const parsedFields=[];for(const f of fields){if(!isCollectUserInfoField(f))return null;parsedFields.push(f);}if(typeof captureStructuredName!=="boolean")return null;return {fields:parsedFields,captureStructuredName}}function parseIdvConfig(value){if(!isRecord(value))return null;const documentTypes=value.document_types;const biometricMode=value.biometric_mode;const minAge=value.min_age;if(!Array.isArray(documentTypes)||documentTypes.length<1)return null;const types=[];for(const t of documentTypes){if(!isDocumentType(t))return null;types.push(t);}if(!isBiometricMode(biometricMode))return null;if(minAge!==void 0&&typeof minAge!=="number")return null;const config={documentTypes:types,biometricMode};if(typeof minAge==="number")config.minAge=minAge;return config}function parseSessionData(body){if(!isRecord(body)||!isRecord(body.data))return null;const d=body.data;const sessionId=d.session_id;const stepId=d.step_id;const stepType=d.step_type;if(!isNonEmptyString(sessionId)||!isNonEmptyString(stepId)||!isNonEmptyString(stepType)||!isSdkMode(d.mode)||!isSdkRegion(d.region)){return null}if(!Array.isArray(d.modules)||!d.modules.every(isSdkModule))return null;const modules=d.modules;const wantsIdv=stepType==="id_verification";let config=null;if(wantsIdv){config=parseIdvConfig(d.config);if(config===null)return null}const collectUserInfoConfig=stepType==="collect_user_info"?parseCollectUserInfoConfig(d.config)??void 0:void 0;return {sessionId,stepId,stepType,config,mode:d.mode,region:d.region,modules,...collectUserInfoConfig!==void 0?{collectUserInfoConfig}:{}}}function isJourneyPlaneBody(body){if(!isRecord(body)||!isRecord(body.data))return false;const d=body.data;if("session_id"in d)return false;return isRecord(d.session)||isRecord(d.snapshot)}function isNonRenderableMarker(body){if(!isRecord(body)||!isRecord(body.data))return false;return body.data.renderable===false}function warnWrongTokenPlane(){console.warn("[Checktiv] The session token reached the wrong data plane. For the zero-lifecycle APIs (Checktiv.mount() or collectUserInfo), fetchToken must return your durable client token, which the SDK exchanges for a working token. For a customer-embed Checktiv.init(), getSessionToken must return a browser token.");}async function resolveSession(ctx,fetchImpl){const origin=ctx.apiBaseOrigin;let res;try{res=await withTokenRetry(ctx.tokens,token=>fetchImpl(origin+SESSIONS_ME_PATH,{method:"GET",headers:dataPlaneHeaders(ctx,token)}),result=>result?.status===401);}catch{return {kind:"unresolved"}}if(!res.ok)return {kind:"unresolved"};let body;try{body=await res.json();}catch{return {kind:"unresolved"}}if(isNonRenderableMarker(body))return {kind:"nothing_to_render"};const data=parseSessionData(body);if(data!==null){ctx.setSessionId(data.sessionId);return {kind:"ok",session:data}}if(isJourneyPlaneBody(body))return {kind:"wrong_token"};return {kind:"unresolved"}}

package/dist/chunk-DXW36O3Q.js

@@ -0,0 +1,13 @@
+import { getModule } from './chunk-GFHNOZVO.js';
+import { createChecktivError, isChecktivError } from './chunk-JS3Y6T76.js';
+import { parsePublishableKey, createWorkingTokenSource, createWorkingTokenManager } from './chunk-EXC2ZRUH.js';
+import { resolveSession, warnWrongTokenPlane } from './chunk-DRNEDARS.js';
+import { assertNever } from './chunk-UBQTPS5J.js';
+import { createTokenManager } from './chunk-S2OOEDJS.js';
+import { resolveApiBaseOrigin, sdkPublicSettings, shortCodeRefreshPath, PUBLISHABLE_KEY_HEADER, SESSIONS_ME_REFRESH_LINK_PATH } from './chunk-HFQJYEGZ.js';
+import { R, k } from './chunk-XOGHMNBX.js';
+import { getServiceOrigin } from './chunk-QFA3K5ZV.js';
+
+var HOST_TAG="checktiv-root";var MOUNTED_FLAG="__checktivMounted";var LEGACY_HOST_ATTR="data-autohost-kyc-host";var HOST_ATTR="data-checktiv-host";var shadowCache=new WeakMap;function mountShadowHost(target){const existing=findExistingHost(target);if(existing){const cached=shadowCache.get(existing);if(cached)return cached}const host=document.createElement("div");host.setAttribute(HOST_ATTR,HOST_TAG);host.setAttribute(LEGACY_HOST_ATTR,HOST_TAG);host[MOUNTED_FLAG]=true;target.appendChild(host);const shadow=host.attachShadow({mode:"closed"});shadowCache.set(host,shadow);return shadow}function findExistingHost(target){for(const child of Array.from(target.children)){if(!(child instanceof HTMLElement))continue;const candidate=child;if(candidate[MOUNTED_FLAG]===true)return candidate}return null}function moduleErrorEvent(name,error){switch(name){case "idv":return {type:"checktiv.idv.error",error};case "fraud":return {type:"checktiv.fraud.error",error};case "custom_form":return {type:"checktiv.custom_form.error",error}}}function missingModuleMessage(name){return `This session requires the '${name}' module. Import '@checktiv/sdk-web/${name}' in your app.`}function missingModuleError(name){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent(name,{...base,message:missingModuleMessage(name)})}function consentGateRequiredError(){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("fraud",{...base,message:"This session includes the 'fraud' module, which needs a consent gate. Pass onConsent to mountProvisioned() to enable it."})}function customFormConfigRequiredError(){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("custom_form",{...base,message:"This session includes the 'custom_form' module, which needs its form config. Pass customFormConfig to mountProvisioned() to enable it."})}function unmappedStepTypeError(stepType){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("idv",{...base,message:`This session's current step ('${stepType}') has no matching visual module in this SDK build. Upgrade '@checktiv/sdk-web' to a version that renders this step.`})}var MODULE_IS_VISUAL={idv:true,fraud:false,custom_form:true};var STEP_TYPE_TO_VISUAL_MODULE={id_verification:"idv",custom_form:"custom_form"};var stepTypeToVisualModuleView=STEP_TYPE_TO_VISUAL_MODULE;function resolveCurrentStepVisualModule(stepType){return stepTypeToVisualModuleView[stepType]}function defaultLoadModule(name){if(name==="idv"){const factory2=getModule("idv");if(factory2===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>factory2(ctx,{target:opts.target,onEvent:opts.onEvent,copy:opts.copy,layout:opts.layout,maxWidth:opts.maxWidth,onBeforeSubmit:opts.onBeforeSubmit,onBehaviorSegment:opts.onBehaviorSegment,synthetic:opts.synthetic,crossDeviceCopy:opts.crossDeviceCopy,onOpenCrossDevice:opts.onOpenCrossDevice})})}if(name==="custom_form"){const factory2=getModule("custom_form");if(factory2===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>{if(opts.customFormConfig===void 0){opts.onEvent?.(customFormConfigRequiredError());return {destroy:()=>void 0}}return factory2(ctx,{target:opts.target,config:opts.customFormConfig,copy:opts.customFormCopy,onEvent:opts.onEvent,session:opts.session})}})}const factory=getModule("fraud");if(factory===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>{const onConsent=opts.onConsent;if(onConsent===void 0){opts.onEvent?.(consentGateRequiredError());return {destroy:()=>void 0}}return factory(ctx,{onConsent,onEvent:opts.onEvent})}})}function moduleErrorFor(name,code){return moduleErrorEvent(name,createChecktivError(code))}function createMountProvisioned(ctx,opts,deps={}){const emit=e=>opts.onEvent?.(e);const fetchImpl=opts.fetchImpl??fetch;const resolveSession2=deps.resolveSession??(()=>resolveSession(ctx,fetchImpl));const loadModule=deps.loadModule??defaultLoadModule;const handles=[];let destroyed=false;let idvOpenCrossDevice=null;void(async()=>{try{await composeModules();}catch(err){if(destroyed)return;console.warn("[Checktiv] mountProvisioned composition failed.",err);emit(moduleErrorFor("idv","sdk_load_failed"));}})();async function composeModules(){const resolution=await resolveSession2();if(destroyed)return;let session;switch(resolution.kind){case "ok":session=resolution.session;break;case "wrong_token":warnWrongTokenPlane();emit(moduleErrorFor("idv","wrong_token_type"));return;case "unresolved":emit(moduleErrorFor("idv","session_expired"));return;case "nothing_to_render":emit({type:"checktiv.idv.processing",reason:"no_renderable_step"});return;default:return assertNever(resolution)}const currentStepVisualModule=resolveCurrentStepVisualModule(session.stepType);if(currentStepVisualModule===void 0&&session.modules.some(m=>MODULE_IS_VISUAL[m])){emit(unmappedStepTypeError(session.stepType));return}for(const name of session.modules){if(destroyed)return;if(MODULE_IS_VISUAL[name]&&name!==currentStepVisualModule){continue}if(name==="fraud"&&opts.onConsent===void 0){emit(consentGateRequiredError());continue}const mod=await loadModule(name);if(destroyed)return;if(mod===null){emit(missingModuleError(name));continue}let moduleTarget;let containerToRemove=null;if(MODULE_IS_VISUAL[name]){const resolvedParent=typeof opts.target==="string"?typeof document!=="undefined"?document.querySelector(opts.target):null:opts.target;if(resolvedParent!==null){const container=document.createElement("div");resolvedParent.appendChild(container);containerToRemove=container;moduleTarget=container;}else {moduleTarget=opts.target;}}else {moduleTarget=opts.target;}let innerHandle;try{innerHandle=mod.mount(ctx,{target:moduleTarget,onEvent:opts.onEvent,onConsent:opts.onConsent,copy:opts.copy,layout:opts.layout,maxWidth:opts.maxWidth,onBeforeSubmit:opts.onBeforeSubmit,onBehaviorSegment:opts.onBehaviorSegment,synthetic:opts.synthetic,crossDeviceCopy:opts.crossDeviceCopy,onOpenCrossDevice:opts.onOpenCrossDevice,customFormConfig:opts.customFormConfig,customFormCopy:opts.customFormCopy,session:{sessionId:session.sessionId,stepId:session.stepId}});}catch(err){containerToRemove?.remove();throw err}if(name==="idv"){idvOpenCrossDevice=innerHandle.openCrossDevice??null;}const capturedContainer=containerToRemove;const handle={destroy(){try{innerHandle.destroy();}finally{capturedContainer?.remove();}}};if(destroyed){handle.destroy();return}handles.push(handle);}}return {destroy(){destroyed=true;while(handles.length>0){const handle=handles.pop();handle?.destroy();}},openCrossDevice(){idvOpenCrossDevice?.();}}}function init(opts,deps={}){const scope="publishableKey"in opts?{...parsePublishableKey(opts.publishableKey),publishableKey:opts.publishableKey}:{region:opts.region,mode:opts.mode,publishableKey:void 0};let sessionId="";const apiBaseOrigin=resolveApiBaseOrigin(opts.apiBase,scope.region,scope.mode);const ctx={region:scope.region,mode:scope.mode,publishableKey:scope.publishableKey,apiBaseOrigin,theme:opts.theme,locale:opts.locale??"en",betas:opts.betas??[],...opts.selfiePromptMap!==void 0?{selfiePromptMap:opts.selfiePromptMap}:{},...opts.selfieChromeCopy!==void 0?{selfieChromeCopy:opts.selfieChromeCopy}:{},tokens:deps.tokens??createTokenManager(opts.getSessionToken,()=>sessionId),getSessionId:()=>sessionId,setSessionId:id=>{sessionId=id;}};function mount2(...args){if(args[0]==="idv"){const factory2=getModule("idv");if(factory2===void 0)return missingIdvHandle(args[1]);return factory2(ctx,args[1])}if(args[0]==="custom_form"){const factory2=getModule("custom_form");if(factory2===void 0)return missingCustomFormHandle(args[1]);return factory2(ctx,args[1])}const factory=getModule("fraud");if(factory===void 0)return missingFraudHandle(args[1]);return factory(ctx,args[1])}return {mountProvisioned:provOpts=>createMountProvisioned(ctx,provOpts),mount:mount2}}function missingIdvHandle(opts){const base=createChecktivError("sdk_load_failed");opts.onEvent?.({type:"checktiv.idv.error",error:{...base,message:missingModuleMessage("idv")}});return {destroy:()=>void 0,unmount:()=>void 0}}function missingFraudHandle(opts){const base=createChecktivError("sdk_load_failed");opts.onEvent?.({type:"checktiv.fraud.error",error:{...base,message:missingModuleMessage("fraud")}});return {destroy:()=>void 0}}function missingCustomFormHandle(opts){const base=createChecktivError("sdk_load_failed");const error={type:"checktiv.custom_form.error",error:{...base,message:missingModuleMessage("custom_form")}};opts.onEvent?.(error);return {destroy:()=>void 0}}var RESUME_CLIENT_TOKEN_KEY_PREFIX="checktiv.rct.";function safeLocalStorage(){try{return globalThis.localStorage??null}catch{return null}}function createClientTokenStore(resumeKey,storage=safeLocalStorage()){const key=RESUME_CLIENT_TOKEN_KEY_PREFIX+resumeKey;return {read(){if(storage===null)return null;try{const raw=storage.getItem(key);return raw!==null&&raw.length>0?raw:null}catch{return null}},write(token){if(storage===null)return;try{storage.setItem(key,token);}catch{}},clear(){if(storage===null)return;try{storage.removeItem(key);}catch{}}}}var SESSIONS_CREATE_ERROR_CODES=["unauthorized","invalid_template","rate_limited","network","server_error"];function createSessionsCreateError(code,message){return {code,message}}function mapHttpStatusToSessionsCreateError(status){if(status===401||status===403)return "unauthorized";if(status===429)return "rate_limited";if(status===400||status===404||status===422)return "invalid_template";return "server_error"}function isSessionsCreateErrorCode(value){return SESSIONS_CREATE_ERROR_CODES.some(code=>code===value)}function isSessionsCreateError(value){if(typeof value!=="object"||value===null)return false;if(!("code"in value)||!("message"in value))return false;const{code,message}=value;return typeof code==="string"&&isSessionsCreateErrorCode(code)&&typeof message==="string"}async function requestSelfServiceResend(params){const fetchImpl=params.fetchImpl??fetch;const body=JSON.stringify({confirmEmail:params.confirmEmail});try{let res;if(params.mode==="short_code"){res=await fetchImpl(params.origin+shortCodeRefreshPath(params.shortCode),{method:"POST",headers:{"content-type":"application/json"},body});}return {requested:res.ok}}catch{return {requested:false}}}var version="1.7.1";var initialised=new WeakSet;function resolveVerifyOrigin(parsed){return getServiceOrigin(sdkPublicSettings.apps.verify.subdomain,"prod",parsed.region,sdkPublicSettings)}function buildPopupUrl(parsed,opts){const origin=resolveVerifyOrigin(parsed);if(opts.applicantLinkToken){return `${origin}/start?lt=${encodeURIComponent(opts.applicantLinkToken)}`}return `${origin}/`}function launchPopup(url){const w=460;const h=760;const left=Math.max(0,Math.floor((window.screen.width-w)/2));const top=Math.max(0,Math.floor((window.screen.height-h)/2));const features=`popup=yes,width=${w},height=${h},left=${left},top=${top}`;const popup=window.open(url,"checktiv",features);if(!popup){window.location.href=url;return null}return popup}var COMPLETE_EVENT_TYPE="autohost.kyc.complete";function isCompletionMessage(data){if(typeof data!=="object"||data===null)return false;if(!("type"in data))return false;return data.type===COMPLETE_EVENT_TYPE}function listenForCompletion(expectedOrigin,onComplete){if(!onComplete)return;const handler=event=>{if(event.origin!==expectedOrigin)return;const data=event.data;if(!isCompletionMessage(data))return;onComplete(data);};window.addEventListener("message",handler);}function buildButton(onClick){const children="Start verification";return k("button",{type:"button",onClick,style:'display: inline-flex; align-items: center; justify-content: center; padding: 10px 20px; font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", sans-serif; font-size: 14px; font-weight: 600; color: #fff; background: #0b5fff; border: none; border-radius: 6px; cursor: pointer;'},children)}function resolveTarget(opts){if(opts.target)return opts.target;return document.querySelector("[data-checktiv]")??document.querySelector("[data-autohost-kyc]")}function mountButton(opts){const parsed=parsePublishableKey(opts.publishableKey);const target=resolveTarget(opts);if(!target){console.warn("[Checktiv] No mount target found. Either pass `target` explicitly or add `<div data-checktiv>` to your page.");return}if(initialised.has(target))return;initialised.add(target);const shadow=mountShadowHost(target);const verifyOrigin=resolveVerifyOrigin(parsed);listenForCompletion(verifyOrigin,opts.onComplete);const onClick=()=>{const popupUrl=buildPopupUrl(parsed,opts);launchPopup(popupUrl);};R(buildButton(onClick),shadow);}function completionSessionId(e){if(e.type!=="checktiv.idv.submitted"&&e.type!=="checktiv.custom_form.submitted"){return null}const sid="sessionId"in e?e.sessionId:void 0;return typeof sid==="string"&&sid.length>0?sid:null}function isSessionExpiredEvent(e){if(!e.type.endsWith(".error")||!("error"in e))return false;const err=e.error;if(typeof err!=="object"||err===null||!("code"in err))return false;return err.code==="session_expired"}function checktivErrorFromEvent(e){if(!e.type.endsWith(".error")||!("error"in e))return null;const err=e.error;return isChecktivError(err)?err:null}function mount(target,opts){const fetchImpl=opts.fetchImpl??fetch;const scope="publishableKey"in opts?{...parsePublishableKey(opts.publishableKey),publishableKey:opts.publishableKey}:{region:opts.region,mode:opts.mode,publishableKey:void 0};const mintOrigin=resolveApiBaseOrigin(opts.apiBase,scope.region,scope.mode);const store=opts.resumeKey!==void 0?createClientTokenStore(opts.resumeKey):null;let clientTokenPromise=null;const getClientToken=()=>{if(clientTokenPromise!==null)return clientTokenPromise;const persisted=store?.read()??null;if(persisted!==null){clientTokenPromise=Promise.resolve(persisted);return clientTokenPromise}const p=opts.fetchToken();clientTokenPromise=p;void p.then(tok=>store?.write(tok),()=>{if(clientTokenPromise===p)clientTokenPromise=null;});return p};const mintWorkingToken=createWorkingTokenSource(mintOrigin,getClientToken,scope.publishableKey,fetchImpl);const tokens=createWorkingTokenManager(mintWorkingToken);const base={getSessionToken:()=>tokens.get(),...opts.apiBase!==void 0?{apiBase:opts.apiBase}:{},...opts.theme!==void 0?{theme:opts.theme}:{}};const initOptions=scope.publishableKey!==void 0?{...base,publishableKey:scope.publishableKey}:{...base,region:scope.region,mode:scope.mode};const needsChannel=opts.onEvent!==void 0||opts.onError!==void 0||opts.onComplete!==void 0||store!==null;const safeCall=fn=>{try{fn();}catch{}};const onEvent=needsChannel?e=>{safeCall(()=>opts.onEvent?.(e));const error=checktivErrorFromEvent(e);if(error!==null)safeCall(()=>opts.onError?.(error));const sessionId=completionSessionId(e);if(sessionId!==null){store?.clear();safeCall(()=>opts.onComplete?.({sessionId}));}else if(isSessionExpiredEvent(e)){store?.clear();}}:void 0;const client=init(initOptions,{tokens});const handle=client.mountProvisioned({target,fetchImpl,onEvent,onConsent:opts.onConsent,...opts.layout!==void 0?{layout:opts.layout}:{},...opts.maxWidth!==void 0?{maxWidth:opts.maxWidth}:{},...opts.copy!==void 0?{copy:opts.copy}:{},...opts.crossDeviceCopy!==void 0?{crossDeviceCopy:opts.crossDeviceCopy}:{},...opts.onOpenCrossDevice!==void 0?{onOpenCrossDevice:opts.onOpenCrossDevice}:{}});const requestResend=confirmEmail=>{if(opts.shortCode===void 0)return Promise.resolve({requested:false});return requestSelfServiceResend({mode:"short_code",origin:mintOrigin,shortCode:opts.shortCode,confirmEmail,fetchImpl})};return {destroy(){handle.destroy();tokens.stop();},openCrossDevice:()=>handle.openCrossDevice?.(),requestResend}}function applicantToWire(a){const wire={};if(a.externalId!==void 0)wire.external_id=a.externalId;if(a.email!==void 0)wire.email=a.email;if(a.phone!==void 0)wire.phone=a.phone;if(a.firstName!==void 0)wire.first_name=a.firstName;if(a.middleName!==void 0)wire.middle_name=a.middleName;if(a.lastName!==void 0)wire.last_name=a.lastName;if(a.legalName!==void 0)wire.legal_name=a.legalName;if(a.dateOfBirth!==void 0)wire.date_of_birth=a.dateOfBirth;if(a.address!==void 0)wire.address=a.address;if(a.referenceName!==void 0)wire.reference_name=a.referenceName;return wire}function readCreatedClientToken(body){if(typeof body!=="object"||body===null||!("data"in body))return null;const data=body.data;if(typeof data!=="object"||data===null||!("client_token"in data))return null;const clientToken=data.client_token;return typeof clientToken==="string"&&clientToken.length>0?clientToken:null}var SESSIONS_CREATE_STATUS_HINT={unauthorized:"Verify your secret key (ah_sk_*) and that it matches the apiBase region.",invalid_template:"Verify the templateId (wt_*) and the request body.",rate_limited:"You have hit the rate ceiling. Retry after a short backoff.",network:"Check the apiBase origin and your network connectivity.",server_error:"This looks like a transient server error. Retry after a short backoff."};function sessionsCreateStatusHint(code){return SESSIONS_CREATE_STATUS_HINT[code]}var sessions={async create(input,options){if(typeof window!=="undefined"||typeof document!=="undefined"){throw new Error("checktiv.sessions.create must run on your server: it needs your secret key. Never call it in the browser.")}const fetchImpl=options.fetchImpl??fetch;const headers={Authorization:`Bearer ${options.secretKey}`,"content-type":"application/json"};if(options.idempotencyKey!==void 0)headers["Idempotency-Key"]=options.idempotencyKey;const body=JSON.stringify({workflow_template_id:input.templateId,applicant:applicantToWire(input.applicant)});let res;try{res=await fetchImpl(`${options.apiBase}/v1/sessions`,{method:"POST",headers,body});}catch{throw createSessionsCreateError("network","Checktiv sessions.create could not reach the API. Check the apiBase origin and your network connectivity.")}if(!res.ok){const code=mapHttpStatusToSessionsCreateError(res.status);throw createSessionsCreateError(code,`Checktiv sessions.create failed (status ${res.status}). ${sessionsCreateStatusHint(code)}`)}let parsed;try{parsed=await res.json();}catch{throw createSessionsCreateError("network","Checktiv sessions.create returned a non-JSON response.")}const clientToken=readCreatedClientToken(parsed);if(clientToken===null){throw createSessionsCreateError("server_error","Checktiv sessions.create response carried no client token. Enable the working-token capability for this environment, then retry.")}return {clientToken}}};
+
+export { init, isSessionsCreateError, mount, mountButton, sessions, version };

package/dist/{chunk-EYSE7JJ4.js → chunk-EXC2ZRUH.js}

@@ -1,4 +1,4 @@
-import { WORKING_TOKEN_MINT_PATH, PUBLISHABLE_KEY_HEADER } from './chunk-KK66RKPI.js';
+import { WORKING_TOKEN_MINT_PATH, PUBLISHABLE_KEY_HEADER } from './chunk-HFQJYEGZ.js';
 
 var PUBLISHABLE_KEY_REGEX=/^ah_pk_(us|eu)_(live|test)_[A-Za-z0-9_-]{8,}$/;var InvalidPublishableKeyError=class extends Error{constructor(message){super(message);this.name="InvalidPublishableKeyError";}};function parsePublishableKey(key){const match=PUBLISHABLE_KEY_REGEX.exec(key);if(!match){throw new InvalidPublishableKeyError(`Invalid publishable key format. Expected ah_pk_<us|eu>_<live|test>_<token>, got: ${maskKey(key)}`)}const region=match[1];const mode=match[2];if(region!=="us"&&region!=="eu"){throw new InvalidPublishableKeyError(`Invalid region in publishable key: ${maskKey(key)}`)}if(mode!=="test"&&mode!=="live"){throw new InvalidPublishableKeyError(`Invalid mode in publishable key: ${maskKey(key)}`)}return {region,mode}}function maskKey(key){if(key.length<=8)return "***";return `${key.slice(0,6)}...${key.slice(-2)}`}var DEFAULT_REFRESH_MARGIN_MS=6e4;function createWorkingTokenManager(source,deps={}){const now=deps.now??(()=>Date.now());const setTimer=deps.setTimer??((fn,ms)=>setTimeout(fn,ms));const clearTimer=deps.clearTimer??(handle=>clearTimeout(handle));const marginMs=deps.marginMs??DEFAULT_REFRESH_MARGIN_MS;const onProactiveError=deps.onProactiveError;let cached=null;let pending=null;let timer=null;let stopped=false;const clearScheduled=()=>{if(timer!==null){clearTimer(timer);timer=null;}};const scheduleProactive=expiresAt=>{clearScheduled();if(stopped)return;const expiryMs=Date.parse(expiresAt);if(Number.isNaN(expiryMs))return;const delay=expiryMs-now()-marginMs;if(delay<=0)return;timer=setTimer(()=>{timer=null;void doRefresh("expired").catch(err=>onProactiveError?.(err));},delay);};const mintOnce=reason=>source(reason).then(minted=>{scheduleProactive(minted.expiresAt);return minted.token});const doRefresh=reason=>{if(pending!==null)return pending;const p=mintOnce(reason);pending=p;cached=p;void p.then(()=>{if(pending===p)pending=null;},()=>{if(pending===p)pending=null;if(cached===p)cached=null;});return p};return {get(){if(cached!==null)return cached;const p=mintOnce("initial");cached=p;void p.catch(()=>{if(cached===p)cached=null;});return p},refresh(reason){return doRefresh(reason)},stop(){stopped=true;clearScheduled();}}}function parseWorkingTokenMintResponse(body){if(typeof body!=="object"||body===null)return null;if(!("workingToken"in body)||!("expiresAt"in body))return null;const workingToken=body.workingToken;const expiresAt=body.expiresAt;if(typeof workingToken!=="string"||workingToken.length===0)return null;if(typeof expiresAt!=="string"||expiresAt.length===0)return null;return {workingToken,expiresAt}}async function mintWorkingTokenFacet(origin,clientToken,publishableKey,fetchImpl){const headers={Authorization:`Bearer ${clientToken}`};if(publishableKey!==void 0)headers[PUBLISHABLE_KEY_HEADER]=publishableKey;const res=await fetchImpl(origin+WORKING_TOKEN_MINT_PATH,{method:"POST",headers});if(!res.ok){throw new Error(`Checktiv working-token mint failed (status ${res.status}).`)}let body;try{body=await res.json();}catch{throw new Error("Checktiv working-token mint returned a non-JSON body.")}const parsed=parseWorkingTokenMintResponse(body);if(parsed===null)throw new Error("Checktiv working-token mint returned a malformed body.");return parsed}function createWorkingTokenSource(origin,getClientToken,publishableKey,fetchImpl){return async()=>{const clientToken=await getClientToken();const minted=await mintWorkingTokenFacet(origin,clientToken,publishableKey,fetchImpl);return {token:minted.workingToken,expiresAt:minted.expiresAt}}}
 

package/dist/{chunk-YPYFPHOH.js → chunk-F2BDZRAX.js}

@@ -1,8 +1,8 @@
-import { parsePublishableKey, createWorkingTokenSource, createWorkingTokenManager } from './chunk-EYSE7JJ4.js';
-import { resolveSession, warnWrongTokenPlane } from './chunk-7F7ZMYB7.js';
+import { parsePublishableKey, createWorkingTokenSource, createWorkingTokenManager } from './chunk-EXC2ZRUH.js';
+import { resolveSession, warnWrongTokenPlane } from './chunk-DRNEDARS.js';
 import { assertNever } from './chunk-UBQTPS5J.js';
 import { withTokenRetry } from './chunk-S2OOEDJS.js';
-import { stepSubmitPath, dataPlaneHeaders, resolveApiBaseOrigin } from './chunk-KK66RKPI.js';
+import { stepSubmitPath, dataPlaneHeaders, resolveApiBaseOrigin } from './chunk-HFQJYEGZ.js';
 
 var ERROR_MESSAGES={not_collect_step:"The current step does not collect user info. Mount the verification journey to continue.",validation_failed:"The submitted information was rejected. Check the required fields and try again.",token_expired:"The verification session expired. Create a new session so fetchToken returns a fresh client token, then try again.",origin_not_allowed:"This origin is not allowed for the publishable key. Add it to the allowed origins list in the Checktiv console.",rate_limited:"Too many requests. Wait a moment and try again.",service_unavailable:"The service is temporarily unavailable. Try again in a few seconds.",session_expired:"The verification session is no longer valid. Start a new verification from your backend.",wrong_token_type:"This verification could not start. Make sure fetchToken returns the client token, the same one you pass to Checktiv.mount().",network_error:"The request could not be completed. Check the connection and try again."};function fail(code){return {ok:false,code,message:ERROR_MESSAGES[code]}}function mapSubmitStatus(status){if(status===400||status===422)return "validation_failed";if(status===401)return "token_expired";if(status===403)return "origin_not_allowed";if(status===404)return "session_expired";if(status===429)return "rate_limited";if(status>=500)return "service_unavailable";return "session_expired"}function buildSubmitBody(input){const body={legalName:input.legalName};if(input.name!==void 0)body.name=input.name;if(input.email!==void 0)body.email=input.email;if(input.phone!==void 0)body.phone=input.phone;if(input.dateOfBirth!==void 0)body.dateOfBirth=input.dateOfBirth;if(input.address!==void 0)body.address=input.address;return body}function buildContext(session,fetchImpl){const scope="publishableKey"in session?{...parsePublishableKey(session.publishableKey),publishableKey:session.publishableKey}:{region:session.region,mode:session.mode,publishableKey:void 0};const apiBaseOrigin=resolveApiBaseOrigin(session.apiBase,scope.region,scope.mode);let clientTokenPromise=null;const getClientToken=()=>{if(clientTokenPromise!==null)return clientTokenPromise;const p=session.fetchToken();clientTokenPromise=p;void p.catch(()=>{if(clientTokenPromise===p)clientTokenPromise=null;});return p};const mintWorkingToken=createWorkingTokenSource(apiBaseOrigin,getClientToken,scope.publishableKey,fetchImpl);const tokens=createWorkingTokenManager(mintWorkingToken);let sessionId="";const ctx={region:scope.region,mode:scope.mode,publishableKey:scope.publishableKey,apiBaseOrigin,locale:"en",betas:[],tokens,getSessionId:()=>sessionId,setSessionId:id=>{sessionId=id;}};return {ctx,tokens}}function collectUserInfo(opts){const{session}=opts;const fetchImpl=session.fetchImpl??fetch;const{ctx,tokens}=buildContext(session,fetchImpl);return {async submit(input){try{const resolution=await resolveSession(ctx,fetchImpl);switch(resolution.kind){case "wrong_token":warnWrongTokenPlane();return fail("wrong_token_type");case "unresolved":return fail("session_expired");case "nothing_to_render":return fail("not_collect_step");case "ok":break;default:return assertNever(resolution)}const resolved=resolution.session;if(resolved.stepType!=="collect_user_info"){return fail("not_collect_step")}const body=buildSubmitBody(input);let res;try{res=await withTokenRetry(ctx.tokens,token=>fetchImpl(ctx.apiBaseOrigin+stepSubmitPath(resolved.sessionId,resolved.stepId),{method:"POST",headers:dataPlaneHeaders(ctx,token,{withJsonBody:true}),body:JSON.stringify(body)}),result=>result?.status===401);}catch{return fail("network_error")}if(res.ok)return {ok:true};return fail(mapSubmitStatus(res.status))}finally{tokens.stop();}},async describe(){const fresh=buildContext(session,fetchImpl);try{const resolution=await resolveSession(fresh.ctx,fetchImpl);switch(resolution.kind){case "wrong_token":warnWrongTokenPlane();return {ok:false,code:"wrong_token_type"};case "unresolved":return {ok:false,code:"session_expired"};case "nothing_to_render":return {ok:false,code:"not_collect_step"};case "ok":break;default:return assertNever(resolution)}const resolved=resolution.session;if(resolved.stepType!=="collect_user_info"){return {ok:false,code:"not_collect_step"}}const config=resolved.collectUserInfoConfig;if(config===void 0){return {ok:true,fields:[],captureStructuredName:false}}return {ok:true,fields:config.fields,captureStructuredName:config.captureStructuredName}}finally{fresh.tokens.stop();}}}}
 

package/dist/chunk-HFQJYEGZ.js

@@ -0,0 +1,5 @@
+import { getServiceOrigin } from './chunk-QFA3K5ZV.js';
+
+var sdkPublicSettings={"project":{"marketingApex":"checktiv.com"},"apps":{"verify":{"subdomain":"verify"},"workspace-embed":{"subdomain":"workspace"}},"services":{"sdk-api":{"subdomain":"sdk-api"},"sdk-cdn":{"subdomain":"sdk"},"public-api":{"subdomain":"api"}},"regions":{"us":{"apex":"us.checktiv.com"},"eu":{"apex":"eu.checktiv.com"}}};var PUBLISHABLE_KEY_HEADER="X-Publishable-Key";function dataPlaneHeaders(ctx,token,opts={}){const headers={Authorization:`Bearer ${token}`};if(ctx.publishableKey!==void 0){headers[PUBLISHABLE_KEY_HEADER]=ctx.publishableKey;}if(opts.withJsonBody)headers["content-type"]="application/json";return headers}function resolveSdkApiOrigin(region,_mode,_hostname){return getServiceOrigin(sdkPublicSettings.services["sdk-api"].subdomain,"prod",region,sdkPublicSettings)}function regionToApiBase(region){return getServiceOrigin(sdkPublicSettings.services["public-api"].subdomain,"prod",region,sdkPublicSettings)}function isCanonicalOrigin(value){if(typeof value!=="string"||value.length===0)return false;try{return new URL(value).origin===value}catch{return false}}function resolveApiBaseOrigin(apiBase,region,mode,hostname){if(isCanonicalOrigin(apiBase))return apiBase;return resolveSdkApiOrigin(region)}var SESSIONS_ME_PATH="/sdk/v1/sessions/me";var SESSIONS_CROSS_DEVICE_STATUS_PATH=`${SESSIONS_ME_PATH}/cross-device-status`;var WORKING_TOKEN_MINT_PATH="/sdk/v1/working-token";var CAPTURE_TOKEN_MINT_PATH="/sdk/v1/idv/capture-token";function stepSubmitPath(_sessionId,stepId){return `${SESSIONS_ME_PATH}/steps/${encodeURIComponent(stepId)}/submit`}var TELEMETRY_PATH="/sdk/v1/telemetry";var SESSIONS_ME_REFRESH_LINK_PATH="/sdk/v1/sessions/me/refresh-link";function shortCodeRefreshPath(code){return `/sdk/v1/short-codes/${encodeURIComponent(code)}/refresh`}function formUploadUrlPath(stepId){return `${SESSIONS_ME_PATH}/steps/${encodeURIComponent(stepId)}/form-upload-url`}
+
+export { CAPTURE_TOKEN_MINT_PATH, PUBLISHABLE_KEY_HEADER, SESSIONS_CROSS_DEVICE_STATUS_PATH, SESSIONS_ME_PATH, SESSIONS_ME_REFRESH_LINK_PATH, TELEMETRY_PATH, WORKING_TOKEN_MINT_PATH, dataPlaneHeaders, formUploadUrlPath, isCanonicalOrigin, regionToApiBase, resolveApiBaseOrigin, sdkPublicSettings, shortCodeRefreshPath, stepSubmitPath };

package/dist/chunk-JS3Y6T76.js

@@ -0,0 +1,3 @@
+var CHECKTIV_RECOVERY_STRATEGIES=["retry","cross_device","refresh_session","contact_operator"];var ERROR_TABLE={origin_not_allowed:{recoverable:false,recovery:"contact_operator",message:"This origin is not allowed for the publishable key. Add it to the allowed origins list in the Checktiv console."},token_expired:{recoverable:true,recovery:"retry",message:"The session token expired. The SDK is refreshing it; if this persists, mint a new token from your backend."},session_expired:{recoverable:false,recovery:"refresh_session",message:"The verification session is no longer valid. Start a new verification from your backend."},wrong_token_type:{recoverable:false,recovery:"contact_operator",message:"This verification could not start. Contact the site operator."},protocol_mismatch:{recoverable:false,recovery:"contact_operator",message:"The SDK version is out of date. Update to the latest published version."},camera_denied:{recoverable:true,recovery:"cross_device",message:"Camera access was blocked. Allow camera access, or continue on another device."},camera_unsupported:{recoverable:true,recovery:"cross_device",message:"Your camera does not meet the minimum resolution needed for capture. Try another device, or continue on your phone."},cv_gate_failed:{recoverable:true,recovery:"retry",message:"We could not read the image clearly. Try again with better lighting and a steady hand."},upload_failed:{recoverable:true,recovery:"retry",message:"The upload did not complete. Check the connection and try again."},sdk_load_failed:{recoverable:true,recovery:"cross_device",message:"Verification could not start on this device. Try again, or continue on another device."},biometric_unsupported:{recoverable:false,recovery:"contact_operator",message:"This capture is not supported on this page. Contact the site operator."},isolation_required:{recoverable:false,recovery:"contact_operator",message:"This page configuration is not supported. Contact the site operator."}};var CHECKTIV_ERROR_CODES=Object.keys(ERROR_TABLE).filter(key=>key in ERROR_TABLE);function createChecktivError(code){const entry=ERROR_TABLE[code];return {code,...entry}}function mapHttpStatusToError(status){if(status===401)return "token_expired";if(status===403)return "origin_not_allowed";if(status===429)return "upload_failed";if(status>=500)return "upload_failed";return "session_expired"}function isChecktivErrorCode(value){return CHECKTIV_ERROR_CODES.some(code=>code===value)}function isChecktivRecovery(value){return CHECKTIV_RECOVERY_STRATEGIES.some(recovery=>recovery===value)}function isChecktivError(value){if(typeof value!=="object"||value===null)return false;if(!("code"in value)||!("message"in value)||!("recoverable"in value)||!("recovery"in value)){return false}const{code,message,recoverable,recovery}=value;return typeof code==="string"&&isChecktivErrorCode(code)&&typeof message==="string"&&typeof recoverable==="boolean"&&typeof recovery==="string"&&isChecktivRecovery(recovery)}
+
+export { createChecktivError, isChecktivError, mapHttpStatusToError };

package/dist/collect-user-info.d.ts

@@ -1,4 +1,4 @@
-import { A as ChecktivInitScope } from './api-DWWQGjxL.js';
+import { B as ChecktivInitScope } from './api-Cjh51lsw.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
 import './copy-DCeQ4JKx.js';

package/dist/collect-user-info.js

@@ -1,9 +1,9 @@
-export { collectUserInfo } from './chunk-YPYFPHOH.js';
-import './chunk-EYSE7JJ4.js';
-import './chunk-7F7ZMYB7.js';
+export { collectUserInfo } from './chunk-F2BDZRAX.js';
+import './chunk-EXC2ZRUH.js';
+import './chunk-DRNEDARS.js';
 import './chunk-UBQTPS5J.js';
 import './chunk-S2OOEDJS.js';
-import './chunk-KK66RKPI.js';
+import './chunk-HFQJYEGZ.js';
 import './chunk-IQKHRPJR.js';
 import './chunk-QFA3K5ZV.js';
 import './chunk-AIK7CDV6.js';

package/dist/custom-form.d.ts

@@ -1,4 +1,4 @@
-export { H as ChecktivCustomFormEvent, J as CustomFormCopy, K as CustomFormFieldCopy, L as CustomFormHandle, N as CustomFormMountOptions, O as createCustomForm } from './api-DWWQGjxL.js';
+export { J as ChecktivCustomFormEvent, K as CustomFormCopy, L as CustomFormFieldCopy, N as CustomFormHandle, O as CustomFormMountOptions, Q as createCustomForm } from './api-Cjh51lsw.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
 import './copy-DCeQ4JKx.js';

package/dist/custom-form.js

@@ -1,9 +1,9 @@
 import { registerModule } from './chunk-GFHNOZVO.js';
-import { createChecktivError, mapHttpStatusToError } from './chunk-OC5N6W7T.js';
-import { warnWrongTokenPlane, isRecord, isJourneyPlaneBody } from './chunk-7F7ZMYB7.js';
+import { createChecktivError, mapHttpStatusToError } from './chunk-JS3Y6T76.js';
+import { warnWrongTokenPlane, isRecord, isJourneyPlaneBody } from './chunk-DRNEDARS.js';
 import { assertNever } from './chunk-UBQTPS5J.js';
 import { withTokenRetry } from './chunk-S2OOEDJS.js';
-import { SESSIONS_ME_PATH, dataPlaneHeaders, stepSubmitPath, formUploadUrlPath } from './chunk-KK66RKPI.js';
+import { SESSIONS_ME_PATH, dataPlaneHeaders, stepSubmitPath, formUploadUrlPath } from './chunk-HFQJYEGZ.js';
 import { u } from './chunk-HV2QKVJX.js';
 import { R, k, S } from './chunk-XOGHMNBX.js';
 import './chunk-IQKHRPJR.js';

package/dist/fraud.d.ts

@@ -1,4 +1,4 @@
-export { f as ChecktivFraudEvent, F as FraudHandle, i as FraudMountOptions, Q as createFraud } from './api-DWWQGjxL.js';
+export { f as ChecktivFraudEvent, F as FraudHandle, j as FraudMountOptions, U as createFraud } from './api-Cjh51lsw.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
 import './copy-DCeQ4JKx.js';

package/dist/fraud.js

@@ -1,9 +1,9 @@
 import { registerModule } from './chunk-GFHNOZVO.js';
-import { createChecktivError } from './chunk-OC5N6W7T.js';
-import { resolveSession, warnWrongTokenPlane } from './chunk-7F7ZMYB7.js';
+import { createChecktivError } from './chunk-JS3Y6T76.js';
+import { resolveSession, warnWrongTokenPlane } from './chunk-DRNEDARS.js';
 import { assertNever } from './chunk-UBQTPS5J.js';
 import { withTokenRetry } from './chunk-S2OOEDJS.js';
-import { TELEMETRY_PATH, dataPlaneHeaders } from './chunk-KK66RKPI.js';
+import { TELEMETRY_PATH, dataPlaneHeaders } from './chunk-HFQJYEGZ.js';
 import './chunk-IQKHRPJR.js';
 import './chunk-QFA3K5ZV.js';
 import { __publicField } from './chunk-AIK7CDV6.js';

package/dist/idv/cross-device.d.ts

@@ -1,5 +1,5 @@
 import { S as SdkCrossDeviceStatusResponse } from '../machine-DZPN-A44.js';
-import { B as SubstrateContext, h as CrossDeviceHandoffHook, g as ChecktivIdvEvent } from '../api-DWWQGjxL.js';
+import { D as SubstrateContext, i as CrossDeviceHandoffHook, g as ChecktivIdvEvent } from '../api-Cjh51lsw.js';
 import { C as CrossDeviceCopy } from '../copy-DCeQ4JKx.js';
 import { CrossDevicePanelProps, CrossDeviceHandle } from '../cross-device.js';
 import '../copy-CC_mrlVV.js';

package/dist/idv/cross-device.js

@@ -1,7 +1,7 @@
-import { registerCrossDeviceOpener, createChecktivErrorEvent } from '../chunk-CGSNIVQF.js';
-import { createChecktivError } from '../chunk-OC5N6W7T.js';
+import { registerCrossDeviceOpener, createChecktivErrorEvent } from '../chunk-CSNKMUIP.js';
+import { createChecktivError } from '../chunk-JS3Y6T76.js';
 import { withTokenRetry } from '../chunk-S2OOEDJS.js';
-import { SESSIONS_ME_PATH, dataPlaneHeaders, SESSIONS_CROSS_DEVICE_STATUS_PATH } from '../chunk-KK66RKPI.js';
+import { SESSIONS_ME_PATH, dataPlaneHeaders, SESSIONS_CROSS_DEVICE_STATUS_PATH } from '../chunk-HFQJYEGZ.js';
 import '../chunk-QFA3K5ZV.js';
 import '../chunk-AIK7CDV6.js';
 

package/dist/idv.d.ts

@@ -1,4 +1,4 @@
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
-export { h as CrossDeviceHandoffHook, l as IdvHandle, m as IdvMountOptions, D as REMINT_READY_TIMEOUT_MS, E as createIdv } from './api-DWWQGjxL.js';
+export { i as CrossDeviceHandoffHook, m as IdvHandle, n as IdvMountOptions, E as REMINT_READY_TIMEOUT_MS, H as createIdv } from './api-Cjh51lsw.js';
 import './copy-DCeQ4JKx.js';

package/dist/idv.js

@@ -1,10 +1,10 @@
-import { createChecktivErrorEvent, mapStateToEvent, getCrossDeviceOpener } from './chunk-CGSNIVQF.js';
+import { createChecktivErrorEvent, mapStateToEvent, getCrossDeviceOpener } from './chunk-CSNKMUIP.js';
 import { registerModule } from './chunk-GFHNOZVO.js';
-import { createChecktivError, mapHttpStatusToError } from './chunk-OC5N6W7T.js';
-import { resolveSession, warnWrongTokenPlane } from './chunk-7F7ZMYB7.js';
+import { createChecktivError, mapHttpStatusToError } from './chunk-JS3Y6T76.js';
+import { resolveSession, warnWrongTokenPlane } from './chunk-DRNEDARS.js';
 import { assertNever } from './chunk-UBQTPS5J.js';
 import { withTokenRetry } from './chunk-S2OOEDJS.js';
-import { stepSubmitPath, dataPlaneHeaders, CAPTURE_TOKEN_MINT_PATH, isCanonicalOrigin } from './chunk-KK66RKPI.js';
+import { stepSubmitPath, dataPlaneHeaders, CAPTURE_TOKEN_MINT_PATH, isCanonicalOrigin } from './chunk-HFQJYEGZ.js';
 import { mount } from './chunk-5BFT2P4R.js';
 import './chunk-HV2QKVJX.js';
 import './chunk-XOGHMNBX.js';

package/dist/{index-B9Gc_xWl.d.ts → index-9vcErEYX.d.ts}

@@ -1,7 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ReactElement } from 'react';
 import { CollectUserInfoSession, CollectUserInfoCollector } from './collect-user-info.js';
-import { g as ChecktivIdvEvent, M as MountOptions, C as ChecktivInitOptions, A as ChecktivInitScope, a as ChecktivClient } from './api-DWWQGjxL.js';
+import { g as ChecktivIdvEvent, M as MountOptions, C as ChecktivInitOptions, B as ChecktivInitScope, a as ChecktivClient } from './api-Cjh51lsw.js';
 import { C as CaptureLayout, a as CaptureBehaviorMessage } from './machine-DZPN-A44.js';
 import { M as MountCopy } from './copy-CC_mrlVV.js';
 

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { C as ChecktivInitOptions, T as TokenManager, a as ChecktivClient, P as ProvisionedHandle, M as MountOptions, I as InitOptions, b as ChecktivSessions } from './api-DWWQGjxL.js';
-export { c as ChecktivError, d as ChecktivErrorCode, e as ChecktivEvent, f as ChecktivFraudEvent, g as ChecktivIdvEvent, h as CrossDeviceHandoffHook, F as FraudHandle, i as FraudMountOptions, G as GetSessionToken, j as GetSessionTokenContext, k as IdvCoachingHint, l as IdvHandle, m as IdvMountOptions, n as InvalidPublishableKeyError, o as MountCompleteResult, p as MountProvisionedOptions, q as MountScope, r as ParsedPublishableKey, R as ResolvedIdvConfig, S as SdkMode, s as SdkRegion, t as SessionsCreateApplicant, u as SessionsCreateApplicantAddress, v as SessionsCreateInput, w as SessionsCreateOptions, x as SessionsCreateResult, y as SyntheticIdvScript, z as parsePublishableKey } from './api-DWWQGjxL.js';
-import { S as SelfServiceResendResult } from './index-B9Gc_xWl.js';
-export { C as ChecktivIdvProps, a as ChecktivJourneyHandle, b as ChecktivJourneyProps, c as ChecktivProviderProps } from './index-B9Gc_xWl.js';
+import { C as ChecktivInitOptions, T as TokenManager, a as ChecktivClient, S as SdkRegion, P as ProvisionedHandle, M as MountOptions, I as InitOptions, b as ChecktivSessions } from './api-Cjh51lsw.js';
+export { c as ChecktivError, d as ChecktivErrorCode, e as ChecktivEvent, f as ChecktivFraudEvent, g as ChecktivIdvEvent, h as ChecktivRecovery, i as CrossDeviceHandoffHook, F as FraudHandle, j as FraudMountOptions, G as GetSessionToken, k as GetSessionTokenContext, l as IdvCoachingHint, m as IdvHandle, n as IdvMountOptions, o as InvalidPublishableKeyError, p as MountCompleteResult, q as MountProvisionedOptions, r as MountScope, s as ParsedPublishableKey, R as ResolvedIdvConfig, t as SdkMode, u as SessionsCreateApplicant, v as SessionsCreateApplicantAddress, w as SessionsCreateInput, x as SessionsCreateOptions, y as SessionsCreateResult, z as SyntheticIdvScript, A as parsePublishableKey } from './api-Cjh51lsw.js';
+import { S as SelfServiceResendResult } from './index-9vcErEYX.js';
+export { C as ChecktivIdvProps, a as ChecktivJourneyHandle, b as ChecktivJourneyProps, c as ChecktivProviderProps } from './index-9vcErEYX.js';
 export { C as CrossDeviceCopy } from './copy-DCeQ4JKx.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
@@ -13,6 +13,16 @@ interface InitDeps {
 }
 declare function init(opts: ChecktivInitOptions, deps?: InitDeps): ChecktivClient;
 
+declare const SESSIONS_CREATE_ERROR_CODES: readonly ["unauthorized", "invalid_template", "rate_limited", "network", "server_error"];
+type SessionsCreateErrorCode = (typeof SESSIONS_CREATE_ERROR_CODES)[number];
+interface SessionsCreateError {
+    readonly code: SessionsCreateErrorCode;
+    readonly message: string;
+}
+declare function isSessionsCreateError(value: unknown): value is SessionsCreateError;
+
+declare function regionToApiBase(region: SdkRegion): string;
+
 declare const version: string;
 declare function mountButton(opts: InitOptions): void;
 interface MountHandle extends ProvisionedHandle {
@@ -22,4 +32,4 @@ interface MountHandle extends ProvisionedHandle {
 declare function mount(target: HTMLElement | string, opts: MountOptions): MountHandle;
 declare const sessions: ChecktivSessions;
 
-export { ChecktivClient, ChecktivInitOptions, ChecktivSessions, InitOptions, type MountHandle, MountOptions, ProvisionedHandle, SelfServiceResendResult, init, mount, mountButton, sessions, version };
+export { ChecktivClient, ChecktivInitOptions, ChecktivSessions, InitOptions, type MountHandle, MountOptions, ProvisionedHandle, SdkRegion, SelfServiceResendResult, type SessionsCreateError, type SessionsCreateErrorCode, init, isSessionsCreateError, mount, mountButton, regionToApiBase, sessions, version };

package/dist/index.js

@@ -1,11 +1,11 @@
-export { init, mount, mountButton, sessions, version } from './chunk-VUBKYUVM.js';
+export { init, isSessionsCreateError, mount, mountButton, sessions, version } from './chunk-DXW36O3Q.js';
 import './chunk-GFHNOZVO.js';
-import './chunk-OC5N6W7T.js';
-export { InvalidPublishableKeyError, parsePublishableKey } from './chunk-EYSE7JJ4.js';
-import './chunk-7F7ZMYB7.js';
+import './chunk-JS3Y6T76.js';
+export { InvalidPublishableKeyError, parsePublishableKey } from './chunk-EXC2ZRUH.js';
+import './chunk-DRNEDARS.js';
 import './chunk-UBQTPS5J.js';
 import './chunk-S2OOEDJS.js';
-import './chunk-KK66RKPI.js';
+export { regionToApiBase } from './chunk-HFQJYEGZ.js';
 import './chunk-XOGHMNBX.js';
 import './chunk-IQKHRPJR.js';
 import './chunk-QFA3K5ZV.js';

package/dist/react.d.ts

@@ -1,7 +1,7 @@
 import 'react';
 import './collect-user-info.js';
-import './api-DWWQGjxL.js';
+import './api-Cjh51lsw.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
-export { d as ChecktivIdv, C as ChecktivIdvProps, e as ChecktivJourney, a as ChecktivJourneyHandle, b as ChecktivJourneyProps, f as ChecktivProvider, c as ChecktivProviderProps, g as ChecktivProviderPropsBase, u as useChecktiv, h as useCollectUserInfo } from './index-B9Gc_xWl.js';
+export { d as ChecktivIdv, C as ChecktivIdvProps, e as ChecktivJourney, a as ChecktivJourneyHandle, b as ChecktivJourneyProps, f as ChecktivProvider, c as ChecktivProviderProps, g as ChecktivProviderPropsBase, u as useChecktiv, h as useCollectUserInfo } from './index-9vcErEYX.js';
 import './copy-DCeQ4JKx.js';

package/dist/react.js

@@ -1,12 +1,12 @@
-import { mount, init } from './chunk-VUBKYUVM.js';
+import { mount, init } from './chunk-DXW36O3Q.js';
 import './chunk-GFHNOZVO.js';
-import './chunk-OC5N6W7T.js';
-import { collectUserInfo } from './chunk-YPYFPHOH.js';
-import './chunk-EYSE7JJ4.js';
-import './chunk-7F7ZMYB7.js';
+import './chunk-JS3Y6T76.js';
+import { collectUserInfo } from './chunk-F2BDZRAX.js';
+import './chunk-EXC2ZRUH.js';
+import './chunk-DRNEDARS.js';
 import './chunk-UBQTPS5J.js';
 import './chunk-S2OOEDJS.js';
-import './chunk-KK66RKPI.js';
+import './chunk-HFQJYEGZ.js';
 import './chunk-XOGHMNBX.js';
 import './chunk-IQKHRPJR.js';
 import './chunk-QFA3K5ZV.js';

package/dist/workspace.d.ts

@@ -1,4 +1,4 @@
-import { s as SdkRegion } from './api-DWWQGjxL.js';
+import { S as SdkRegion } from './api-Cjh51lsw.js';
 import './machine-DZPN-A44.js';
 import './copy-CC_mrlVV.js';
 import './copy-DCeQ4JKx.js';

package/dist/workspace.js

@@ -1,4 +1,4 @@
-import { isCanonicalOrigin, sdkPublicSettings } from './chunk-KK66RKPI.js';
+import { isCanonicalOrigin, sdkPublicSettings } from './chunk-HFQJYEGZ.js';
 import { getServiceOrigin } from './chunk-QFA3K5ZV.js';
 import './chunk-AIK7CDV6.js';
 

package/package.json

@@ -1,18 +1,13 @@
 {
   "name": "@checktiv/sdk-web",
-  "version": "1.6.1",
+  "version": "1.7.1",
   "private": false,
   "license": "Apache-2.0",
-  "//publishConfigNameNote": "pnpm does NOT apply `publishConfig.name` (the publishConfig override list at https://pnpm.io/package_json#publishconfig excludes `name`; `pnpm pack` leaves the tarball `name` as the workspace name). The published `name` rewrite to `@checktiv/sdk-web` happens in the root `.pnpmfile.cjs` `beforePacking` hook (pnpm >= 10.28) instead — see that file's header. This field is retained ONLY as documentation of intent; the hook deletes it from the packed manifest. The packed-name gate in __tests__/dist-shape.test.ts reads the REAL extracted tarball, not this field.",
   "publishConfig": {
     "access": "public"
   },
-  "//publishConfigExportsNote": "pnpm applies this `publishConfig.exports` override on `pnpm pack`/`pnpm publish` (NOT `npm pack`), so it defines the PUBLISHED npm shape while the top-level `exports` stays the in-repo (workspace) shape. Differences, both required: (1) every `types` target points at the built `./dist/*.d.ts` (the workspace map points `types` at `./src/*.ts` so in-repo consumers type-check against source with no build; those `.ts` files are NOT in the `files: [dist]` tarball, so publint --strict --pack would error on them). (2) `./agent` is OMITTED: it is a workspace-only export (not a customer API; keystone §5.1) that pulls the licensed, publishable-key-bound `@fingerprint/agent`, which must NEVER ship in the npm tarball (the C3 tarball guard's FORBIDDEN list proves it). `./agents` (the C13 machine-readable steering manifest -> ./dist/agents/manifest.json) IS published: C13's `scripts/generate-agent-steering.mjs` (chained into `build` after tsup) generates `dist/agents/manifest.json`, so it resolves in both the workspace map and this override; the dist-shape tarball test asserts `dist/agents/{AGENTS.md,manifest.json}` ship. publint --strict + attw (esm-only, against the pnpm-packed tarball) both validate THIS map.",
   "description": "Customer-embed Web SDK (Checktiv): tsup dual build — (A) ESM npm package (`@checktiv/sdk-web`) with per-subpath tree-shaking and Checktiv.init substrate for managed IDV / fraud modules, React wrapper; (B) CDN IIFE assigned to window.Checktiv (with legacy window.AutohostKyc alias for existing snippets). Published dist/ is built by tsup; CDN IIFE lands at services/sdk-cdn/public/v1/sdk.js.",
   "type": "module",
-  "//exportsNote": "Dual conditions: `types` resolves to the source `.ts` file so in-repo consumers (verify, console) type-check against source without a build step (mirrors @rf/schemas pattern). `import` resolves to the compiled `dist/*.js` for the published npm package. `./agent` is a SOURCE-ONLY interim export (tsup profile A does not build a dist/agent.js yet; the verify app consumes it via its own bundler). `./agents` ships the C13 machine-readable steering manifest; `AGENTS.md` lives alongside it in dist/agents/ (discoverable via the file tree, no export entry to avoid publint resolution warnings). `src/cdn.ts` is the CDN-IIFE-only entry (tsup profile B) and is NOT a published subpath.",
-  "//customFormStyleNote": "`./custom-form/style.css` exports the custom-form module's field stylesheet so the verify host can `import '@rf/sdk-web/custom-form/style.css'` from its island: the module renders REAL DOM field controls into the host document (unlike the IDV iframe), so its CSS must be injected into the host page. The workspace map points at the SOURCE css so verify's Vite processes + injects it WITHOUT a prior sdk-web dist build (dev-friendly); the publishConfig override points at the extracted `dist/custom-form.css` for CDN customers (who `<link>` it, like `capture-ui.css`). ONE stylesheet, single-sourced in `src/custom-form/custom-form.css`, theme-aware via `@rf/theme` tokens.",
-  "//captureUiStyleNote": "`./capture-ui/style.css` exports the Tier-2 capture-frame stylesheet (`src/capture-ui/capture-ui.css`: frame sizing, biometric height, the C6 landscape clamp, and the phone immersive `layout` overlay) for the SAME reason as `./custom-form/style.css`. tsup EXTRACTS `capture-ui.css` to `dist/capture-ui.css` and STRIPS the source `import './capture-ui.css'` from the built JS, so an in-repo consumer bundling the `import`-condition `dist/*.js` (verify's PROD build) never auto-pulls the stylesheet and the frame ships UNSTYLED on deployed cells (local dev resolves the `types`/source condition, where the import IS followed — which is why it only regressed on a deployed cell). Verify imports `@rf/sdk-web/capture-ui/style.css` from `SdkIdVerificationIsland` (workspace map -> SOURCE, so Vite bundles it build-independently); the publishConfig override points at `dist/capture-ui.css` for CDN customers who `<link>` it.",
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
@@ -63,8 +58,6 @@
     "./agents": "./dist/agents/manifest.json",
     "./package.json": "./package.json"
   },
-  "//challengeExportNote": "The `./challenge` subpath (top-level `exports` only, ABSENT from `publishConfig.exports`) is the generic parent-side challenge relay kernel consumed by `apps/verify` (ChallengeIframe). It stays OFF the npm-publish boundary (no schema-mirror / dist-shape / bundle-budget / CDN build), like `./agent`. tsup emits `dist/challenge.js` from the entry map for the in-repo `import` condition.",
-  "//sideEffectsNote": "The module-load seam (src/substrate/module-registry.ts) makes the `./idv`, `./fraud`, and `./custom-form` entries SIDE-EFFECTFUL: each calls registerModule(...) at import-eval time so the substrate's mount('idv'|'fraud'|'custom_form')/mountProvisioned can resolve it. `./idv/cross-device` is ALSO side-effectful: it calls registerCrossDeviceOpener(...) (src/idv/cross-device-registry.ts) so createIdv().openCrossDevice() (S13/B2) resolves the overlay WITHOUT idv/index.ts importing the heavy orchestrator (keeps the CDN sdk.js flat). `src/idv/cross-device-cdn.ts` is the CDN-ONLY counterpart (imported for its side effect by src/cdn.ts, NOT a published subpath so it has no dist form): it registers a wrapper opener that injects a runtime chunk-URL importer so the CDN IIFE (window.Checktiv.mount) resolves the overlay by loading the pre-built /v1/cross-device.js chunk by URL instead of inlining the QR panel into sdk.js. Its registration side effect MUST be listed here or esbuild tree-shakes the side-effect-only `import './idv/cross-device-cdn.js'` in src/cdn.ts, leaving getCrossDeviceOpener() null in the IIFE. A blanket `sideEffects: false` would let a consumer's bundler tree-shake those registrations away (breaking the seams), so this lists ONLY the side-effectful entry files (src + published dist forms). Everything else still tree-shakes, so the `.` and `./react` entries stay Zod-free and per-subpath tree-shaking holds. When plan-C rewrites this manifest, KEEP this array (do NOT replace it with `false`).",
   "sideEffects": [
     "./src/idv/index.ts",
     "./src/idv/cross-device.ts",
@@ -96,32 +89,6 @@
       "optional": true
     }
   },
-  "devDependencies": {
-    "@arethetypeswrong/cli": "^0.18.0",
-    "@aws-amplify/core": "6.16.4",
-    "@aws-amplify/ui-react": "6.15.4",
-    "@aws-amplify/ui-react-liveness": "3.6.7",
-    "@fingerprint/agent": "4.1.0",
-    "@microblink/capture": "^1.2.3",
-    "@tensorflow/tfjs-backend-wasm": "4.11.0",
-    "@tensorflow/tfjs-converter": "4.11.0",
-    "@tensorflow/tfjs-core": "4.11.0",
-    "@types/node": "^25.9.3",
-    "@types/react": "^19.2.17",
-    "@types/react-dom": "^19.2.3",
-    "aws-amplify": "6.18.0",
-    "esbuild": "^0.28.1",
-    "jsdom": "^29.1.1",
-    "preact": "^10.29.2",
-    "publint": "^0.3.0",
-    "tsup": "^8.5.0",
-    "typescript": "5.9.3",
-    "vitest": "^4.1.9",
-    "@rf/config": "0.0.0",
-    "@rf/iam-core": "0.0.1",
-    "@rf/theme": "0.1.0",
-    "@rf/schemas": "0.1.0"
-  },
   "scripts": {
     "build": "tsup && node scripts/generate-agent-steering.mjs && pnpm run build:embed-capture && pnpm run build:embed-challenge && pnpm run build:host-capture && pnpm run build:cross-device",
     "build:embed-capture": "node scripts/build-embed-capture.mjs",
@@ -132,10 +99,8 @@
     "typecheck": "tsc --noEmit",
     "lint": "echo 'lint via tsc'",
     "size": "node ../../scripts/audit-bundle-size.mjs ../../services/sdk-cdn/public/v1/sdk.js 106496",
-    "//sizeNote:host-capture": "MIRROR of the canonical gate scripts/audit-bundle-sizes.mjs (run by `pnpm audit:bundle-sizes` in the pre-push battery) - keep the limits in sync. Both host bundles rose one KiB to the next clean ceiling (capture.js 79->80, capture-ui.js 85->86) for the IDV branch: the new capture:biometric_camera_live wire-schema member is validated by safeParse in BOTH bundles (the controller ships in both) - an irreducible shared @rf/schemas/sdk contract - plus the controller's onBeforeSubmit SOC 2 fraud-flush hook (capture.js) and the biometric loading skeleton + MountCopy copy-seam + submit_pending render (capture-ui.js). The controller dispatch is already gzip-optimal (restructuring measurably worsens gzip).",
     "size:host-capture": "node ../../scripts/audit-bundle-size.mjs ../../services/sdk-cdn/public/v1/capture.js 82944",
     "size:host-capture-ui": "node ../../scripts/audit-bundle-size.mjs ../../services/sdk-cdn/public/v1/capture-ui.js 89088",
-    "//sizeNote:cross-device": "MIRROR of the canonical gate scripts/audit-bundle-sizes.mjs cross-device line. The cross-device chunk is hash-named by esbuild; this script globs for the current artifact. The limit (20 KiB = 20480 B) is a headroom-padded ceiling over the qrcode-generator + Preact fragment weight at gzip.",
     "size:cross-device": "node ../../scripts/audit-bundle-size.mjs ../../services/sdk-cdn/public/v1/cross-device.js 20480",
     "size:npm": "node ../../scripts/audit-sdk-entry-size.mjs",
     "validate:publint": "publint --strict",

package/dist/chunk-KK66RKPI.js

@@ -1,5 +0,0 @@
-import { getServiceOrigin } from './chunk-QFA3K5ZV.js';
-
-var sdkPublicSettings={"project":{"marketingApex":"checktiv.com"},"apps":{"verify":{"subdomain":"verify"},"workspace-embed":{"subdomain":"workspace"}},"services":{"sdk-api":{"subdomain":"sdk-api"},"sdk-cdn":{"subdomain":"sdk"}},"regions":{"us":{"apex":"us.checktiv.com"},"eu":{"apex":"eu.checktiv.com"}}};var PUBLISHABLE_KEY_HEADER="X-Publishable-Key";function dataPlaneHeaders(ctx,token,opts={}){const headers={Authorization:`Bearer ${token}`};if(ctx.publishableKey!==void 0){headers[PUBLISHABLE_KEY_HEADER]=ctx.publishableKey;}if(opts.withJsonBody)headers["content-type"]="application/json";return headers}function resolveSdkApiOrigin(region,_mode,_hostname){return getServiceOrigin(sdkPublicSettings.services["sdk-api"].subdomain,"prod",region,sdkPublicSettings)}function isCanonicalOrigin(value){if(typeof value!=="string"||value.length===0)return false;try{return new URL(value).origin===value}catch{return false}}function resolveApiBaseOrigin(apiBase,region,mode,hostname){if(isCanonicalOrigin(apiBase))return apiBase;return resolveSdkApiOrigin(region)}var SESSIONS_ME_PATH="/sdk/v1/sessions/me";var SESSIONS_CROSS_DEVICE_STATUS_PATH=`${SESSIONS_ME_PATH}/cross-device-status`;var WORKING_TOKEN_MINT_PATH="/sdk/v1/working-token";var CAPTURE_TOKEN_MINT_PATH="/sdk/v1/idv/capture-token";function stepSubmitPath(_sessionId,stepId){return `${SESSIONS_ME_PATH}/steps/${encodeURIComponent(stepId)}/submit`}var TELEMETRY_PATH="/sdk/v1/telemetry";var SESSIONS_ME_REFRESH_LINK_PATH="/sdk/v1/sessions/me/refresh-link";function shortCodeRefreshPath(code){return `/sdk/v1/short-codes/${encodeURIComponent(code)}/refresh`}function formUploadUrlPath(stepId){return `${SESSIONS_ME_PATH}/steps/${encodeURIComponent(stepId)}/form-upload-url`}
-
-export { CAPTURE_TOKEN_MINT_PATH, PUBLISHABLE_KEY_HEADER, SESSIONS_CROSS_DEVICE_STATUS_PATH, SESSIONS_ME_PATH, SESSIONS_ME_REFRESH_LINK_PATH, TELEMETRY_PATH, WORKING_TOKEN_MINT_PATH, dataPlaneHeaders, formUploadUrlPath, isCanonicalOrigin, resolveApiBaseOrigin, sdkPublicSettings, shortCodeRefreshPath, stepSubmitPath };

package/dist/chunk-OC5N6W7T.js

@@ -1,3 +0,0 @@
-var ERROR_TABLE={origin_not_allowed:{recoverable:false,recovery:"contact_operator",message:"This origin is not allowed for the publishable key. Add it to the allowed origins list in the Checktiv console."},token_expired:{recoverable:true,recovery:"retry",message:"The session token expired. The SDK is refreshing it; if this persists, mint a new token from your backend."},session_expired:{recoverable:false,recovery:"refresh_session",message:"The verification session is no longer valid. Start a new verification from your backend."},wrong_token_type:{recoverable:false,recovery:"contact_operator",message:"This verification could not start. Contact the site operator."},protocol_mismatch:{recoverable:false,recovery:"contact_operator",message:"The SDK version is out of date. Update to the latest published version."},camera_denied:{recoverable:true,recovery:"cross_device",message:"Camera access was blocked. Allow camera access, or continue on another device."},camera_unsupported:{recoverable:true,recovery:"cross_device",message:"Your camera does not meet the minimum resolution needed for capture. Try another device, or continue on your phone."},cv_gate_failed:{recoverable:true,recovery:"retry",message:"We could not read the image clearly. Try again with better lighting and a steady hand."},upload_failed:{recoverable:true,recovery:"retry",message:"The upload did not complete. Check the connection and try again."},sdk_load_failed:{recoverable:true,recovery:"cross_device",message:"Verification could not start on this device. Try again, or continue on another device."},biometric_unsupported:{recoverable:false,recovery:"contact_operator",message:"This capture is not supported on this page. Contact the site operator."},isolation_required:{recoverable:false,recovery:"contact_operator",message:"This page configuration is not supported. Contact the site operator."}};Object.keys(ERROR_TABLE).filter(key=>key in ERROR_TABLE);function createChecktivError(code){const entry=ERROR_TABLE[code];return {code,...entry}}function mapHttpStatusToError(status){if(status===401)return "token_expired";if(status===403)return "origin_not_allowed";if(status===429)return "upload_failed";if(status>=500)return "upload_failed";return "session_expired"}
-
-export { createChecktivError, mapHttpStatusToError };

package/dist/chunk-VUBKYUVM.js

@@ -1,13 +0,0 @@
-import { getModule } from './chunk-GFHNOZVO.js';
-import { createChecktivError } from './chunk-OC5N6W7T.js';
-import { parsePublishableKey, createWorkingTokenSource, createWorkingTokenManager } from './chunk-EYSE7JJ4.js';
-import { resolveSession, warnWrongTokenPlane } from './chunk-7F7ZMYB7.js';
-import { assertNever } from './chunk-UBQTPS5J.js';
-import { createTokenManager } from './chunk-S2OOEDJS.js';
-import { resolveApiBaseOrigin, sdkPublicSettings, shortCodeRefreshPath, PUBLISHABLE_KEY_HEADER, SESSIONS_ME_REFRESH_LINK_PATH } from './chunk-KK66RKPI.js';
-import { R, k } from './chunk-XOGHMNBX.js';
-import { getServiceOrigin } from './chunk-QFA3K5ZV.js';
-
-var HOST_TAG="checktiv-root";var MOUNTED_FLAG="__checktivMounted";var LEGACY_HOST_ATTR="data-autohost-kyc-host";var HOST_ATTR="data-checktiv-host";var shadowCache=new WeakMap;function mountShadowHost(target){const existing=findExistingHost(target);if(existing){const cached=shadowCache.get(existing);if(cached)return cached}const host=document.createElement("div");host.setAttribute(HOST_ATTR,HOST_TAG);host.setAttribute(LEGACY_HOST_ATTR,HOST_TAG);host[MOUNTED_FLAG]=true;target.appendChild(host);const shadow=host.attachShadow({mode:"closed"});shadowCache.set(host,shadow);return shadow}function findExistingHost(target){for(const child of Array.from(target.children)){if(!(child instanceof HTMLElement))continue;const candidate=child;if(candidate[MOUNTED_FLAG]===true)return candidate}return null}function moduleErrorEvent(name,error){switch(name){case "idv":return {type:"checktiv.idv.error",error};case "fraud":return {type:"checktiv.fraud.error",error};case "custom_form":return {type:"checktiv.custom_form.error",error}}}function missingModuleMessage(name){return `This session requires the '${name}' module. Import '@checktiv/sdk-web/${name}' in your app.`}function missingModuleError(name){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent(name,{...base,message:missingModuleMessage(name)})}function consentGateRequiredError(){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("fraud",{...base,message:"This session includes the 'fraud' module, which needs a consent gate. Pass onConsent to mountProvisioned() to enable it."})}function customFormConfigRequiredError(){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("custom_form",{...base,message:"This session includes the 'custom_form' module, which needs its form config. Pass customFormConfig to mountProvisioned() to enable it."})}function unmappedStepTypeError(stepType){const base=createChecktivError("sdk_load_failed");return moduleErrorEvent("idv",{...base,message:`This session's current step ('${stepType}') has no matching visual module in this SDK build. Upgrade '@checktiv/sdk-web' to a version that renders this step.`})}var MODULE_IS_VISUAL={idv:true,fraud:false,custom_form:true};var STEP_TYPE_TO_VISUAL_MODULE={id_verification:"idv",custom_form:"custom_form"};var stepTypeToVisualModuleView=STEP_TYPE_TO_VISUAL_MODULE;function resolveCurrentStepVisualModule(stepType){return stepTypeToVisualModuleView[stepType]}function defaultLoadModule(name){if(name==="idv"){const factory2=getModule("idv");if(factory2===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>factory2(ctx,{target:opts.target,onEvent:opts.onEvent,copy:opts.copy,layout:opts.layout,maxWidth:opts.maxWidth,onBeforeSubmit:opts.onBeforeSubmit,onBehaviorSegment:opts.onBehaviorSegment,synthetic:opts.synthetic,crossDeviceCopy:opts.crossDeviceCopy,onOpenCrossDevice:opts.onOpenCrossDevice})})}if(name==="custom_form"){const factory2=getModule("custom_form");if(factory2===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>{if(opts.customFormConfig===void 0){opts.onEvent?.(customFormConfigRequiredError());return {destroy:()=>void 0}}return factory2(ctx,{target:opts.target,config:opts.customFormConfig,copy:opts.customFormCopy,onEvent:opts.onEvent,session:opts.session})}})}const factory=getModule("fraud");if(factory===void 0)return Promise.resolve(null);return Promise.resolve({mount:(ctx,opts)=>{const onConsent=opts.onConsent;if(onConsent===void 0){opts.onEvent?.(consentGateRequiredError());return {destroy:()=>void 0}}return factory(ctx,{onConsent,onEvent:opts.onEvent})}})}function moduleErrorFor(name,code){return moduleErrorEvent(name,createChecktivError(code))}function createMountProvisioned(ctx,opts,deps={}){const emit=e=>opts.onEvent?.(e);const fetchImpl=opts.fetchImpl??fetch;const resolveSession2=deps.resolveSession??(()=>resolveSession(ctx,fetchImpl));const loadModule=deps.loadModule??defaultLoadModule;const handles=[];let destroyed=false;let idvOpenCrossDevice=null;void(async()=>{try{await composeModules();}catch(err){if(destroyed)return;console.warn("[Checktiv] mountProvisioned composition failed.",err);emit(moduleErrorFor("idv","sdk_load_failed"));}})();async function composeModules(){const resolution=await resolveSession2();if(destroyed)return;let session;switch(resolution.kind){case "ok":session=resolution.session;break;case "wrong_token":warnWrongTokenPlane();emit(moduleErrorFor("idv","wrong_token_type"));return;case "unresolved":emit(moduleErrorFor("idv","session_expired"));return;case "nothing_to_render":emit({type:"checktiv.idv.processing",reason:"no_renderable_step"});return;default:return assertNever(resolution)}const currentStepVisualModule=resolveCurrentStepVisualModule(session.stepType);if(currentStepVisualModule===void 0&&session.modules.some(m=>MODULE_IS_VISUAL[m])){emit(unmappedStepTypeError(session.stepType));return}for(const name of session.modules){if(destroyed)return;if(MODULE_IS_VISUAL[name]&&name!==currentStepVisualModule){continue}if(name==="fraud"&&opts.onConsent===void 0){emit(consentGateRequiredError());continue}const mod=await loadModule(name);if(destroyed)return;if(mod===null){emit(missingModuleError(name));continue}let moduleTarget;let containerToRemove=null;if(MODULE_IS_VISUAL[name]){const resolvedParent=typeof opts.target==="string"?typeof document!=="undefined"?document.querySelector(opts.target):null:opts.target;if(resolvedParent!==null){const container=document.createElement("div");resolvedParent.appendChild(container);containerToRemove=container;moduleTarget=container;}else {moduleTarget=opts.target;}}else {moduleTarget=opts.target;}let innerHandle;try{innerHandle=mod.mount(ctx,{target:moduleTarget,onEvent:opts.onEvent,onConsent:opts.onConsent,copy:opts.copy,layout:opts.layout,maxWidth:opts.maxWidth,onBeforeSubmit:opts.onBeforeSubmit,onBehaviorSegment:opts.onBehaviorSegment,synthetic:opts.synthetic,crossDeviceCopy:opts.crossDeviceCopy,onOpenCrossDevice:opts.onOpenCrossDevice,customFormConfig:opts.customFormConfig,customFormCopy:opts.customFormCopy,session:{sessionId:session.sessionId,stepId:session.stepId}});}catch(err){containerToRemove?.remove();throw err}if(name==="idv"){idvOpenCrossDevice=innerHandle.openCrossDevice??null;}const capturedContainer=containerToRemove;const handle={destroy(){try{innerHandle.destroy();}finally{capturedContainer?.remove();}}};if(destroyed){handle.destroy();return}handles.push(handle);}}return {destroy(){destroyed=true;while(handles.length>0){const handle=handles.pop();handle?.destroy();}},openCrossDevice(){idvOpenCrossDevice?.();}}}function init(opts,deps={}){const scope="publishableKey"in opts?{...parsePublishableKey(opts.publishableKey),publishableKey:opts.publishableKey}:{region:opts.region,mode:opts.mode,publishableKey:void 0};let sessionId="";const apiBaseOrigin=resolveApiBaseOrigin(opts.apiBase,scope.region,scope.mode);const ctx={region:scope.region,mode:scope.mode,publishableKey:scope.publishableKey,apiBaseOrigin,theme:opts.theme,locale:opts.locale??"en",betas:opts.betas??[],...opts.selfiePromptMap!==void 0?{selfiePromptMap:opts.selfiePromptMap}:{},...opts.selfieChromeCopy!==void 0?{selfieChromeCopy:opts.selfieChromeCopy}:{},tokens:deps.tokens??createTokenManager(opts.getSessionToken,()=>sessionId),getSessionId:()=>sessionId,setSessionId:id=>{sessionId=id;}};function mount2(...args){if(args[0]==="idv"){const factory2=getModule("idv");if(factory2===void 0)return missingIdvHandle(args[1]);return factory2(ctx,args[1])}if(args[0]==="custom_form"){const factory2=getModule("custom_form");if(factory2===void 0)return missingCustomFormHandle(args[1]);return factory2(ctx,args[1])}const factory=getModule("fraud");if(factory===void 0)return missingFraudHandle(args[1]);return factory(ctx,args[1])}return {mountProvisioned:provOpts=>createMountProvisioned(ctx,provOpts),mount:mount2}}function missingIdvHandle(opts){const base=createChecktivError("sdk_load_failed");opts.onEvent?.({type:"checktiv.idv.error",error:{...base,message:missingModuleMessage("idv")}});return {destroy:()=>void 0,unmount:()=>void 0}}function missingFraudHandle(opts){const base=createChecktivError("sdk_load_failed");opts.onEvent?.({type:"checktiv.fraud.error",error:{...base,message:missingModuleMessage("fraud")}});return {destroy:()=>void 0}}function missingCustomFormHandle(opts){const base=createChecktivError("sdk_load_failed");const error={type:"checktiv.custom_form.error",error:{...base,message:missingModuleMessage("custom_form")}};opts.onEvent?.(error);return {destroy:()=>void 0}}var RESUME_CLIENT_TOKEN_KEY_PREFIX="checktiv.rct.";function safeLocalStorage(){try{return globalThis.localStorage??null}catch{return null}}function createClientTokenStore(resumeKey,storage=safeLocalStorage()){const key=RESUME_CLIENT_TOKEN_KEY_PREFIX+resumeKey;return {read(){if(storage===null)return null;try{const raw=storage.getItem(key);return raw!==null&&raw.length>0?raw:null}catch{return null}},write(token){if(storage===null)return;try{storage.setItem(key,token);}catch{}},clear(){if(storage===null)return;try{storage.removeItem(key);}catch{}}}}async function requestSelfServiceResend(params){const fetchImpl=params.fetchImpl??fetch;const body=JSON.stringify({confirmEmail:params.confirmEmail});try{let res;if(params.mode==="short_code"){res=await fetchImpl(params.origin+shortCodeRefreshPath(params.shortCode),{method:"POST",headers:{"content-type":"application/json"},body});}return {requested:res.ok}}catch{return {requested:false}}}var version="1.6.1";var initialised=new WeakSet;function resolveVerifyOrigin(parsed){return getServiceOrigin(sdkPublicSettings.apps.verify.subdomain,"prod",parsed.region,sdkPublicSettings)}function buildPopupUrl(parsed,opts){const origin=resolveVerifyOrigin(parsed);if(opts.applicantLinkToken){return `${origin}/start?lt=${encodeURIComponent(opts.applicantLinkToken)}`}return `${origin}/`}function launchPopup(url){const w=460;const h=760;const left=Math.max(0,Math.floor((window.screen.width-w)/2));const top=Math.max(0,Math.floor((window.screen.height-h)/2));const features=`popup=yes,width=${w},height=${h},left=${left},top=${top}`;const popup=window.open(url,"checktiv",features);if(!popup){window.location.href=url;return null}return popup}var COMPLETE_EVENT_TYPE="autohost.kyc.complete";function isCompletionMessage(data){if(typeof data!=="object"||data===null)return false;if(!("type"in data))return false;return data.type===COMPLETE_EVENT_TYPE}function listenForCompletion(expectedOrigin,onComplete){if(!onComplete)return;const handler=event=>{if(event.origin!==expectedOrigin)return;const data=event.data;if(!isCompletionMessage(data))return;onComplete(data);};window.addEventListener("message",handler);}function buildButton(onClick){const children="Start verification";return k("button",{type:"button",onClick,style:'display: inline-flex; align-items: center; justify-content: center; padding: 10px 20px; font-family: system-ui, -apple-system, "Segoe UI", Roboto, "Helvetica Neue", sans-serif; font-size: 14px; font-weight: 600; color: #fff; background: #0b5fff; border: none; border-radius: 6px; cursor: pointer;'},children)}function resolveTarget(opts){if(opts.target)return opts.target;return document.querySelector("[data-checktiv]")??document.querySelector("[data-autohost-kyc]")}function mountButton(opts){const parsed=parsePublishableKey(opts.publishableKey);const target=resolveTarget(opts);if(!target){console.warn("[Checktiv] No mount target found. Either pass `target` explicitly or add `<div data-checktiv>` to your page.");return}if(initialised.has(target))return;initialised.add(target);const shadow=mountShadowHost(target);const verifyOrigin=resolveVerifyOrigin(parsed);listenForCompletion(verifyOrigin,opts.onComplete);const onClick=()=>{const popupUrl=buildPopupUrl(parsed,opts);launchPopup(popupUrl);};R(buildButton(onClick),shadow);}function completionSessionId(e){if(e.type!=="checktiv.idv.submitted"&&e.type!=="checktiv.custom_form.submitted"){return null}const sid="sessionId"in e?e.sessionId:void 0;return typeof sid==="string"&&sid.length>0?sid:null}function isSessionExpiredEvent(e){if(!e.type.endsWith(".error")||!("error"in e))return false;const err=e.error;if(typeof err!=="object"||err===null||!("code"in err))return false;return err.code==="session_expired"}function mount(target,opts){const fetchImpl=opts.fetchImpl??fetch;const scope="publishableKey"in opts?{...parsePublishableKey(opts.publishableKey),publishableKey:opts.publishableKey}:{region:opts.region,mode:opts.mode,publishableKey:void 0};const mintOrigin=resolveApiBaseOrigin(opts.apiBase,scope.region,scope.mode);const store=opts.resumeKey!==void 0?createClientTokenStore(opts.resumeKey):null;let clientTokenPromise=null;const getClientToken=()=>{if(clientTokenPromise!==null)return clientTokenPromise;const persisted=store?.read()??null;if(persisted!==null){clientTokenPromise=Promise.resolve(persisted);return clientTokenPromise}const p=opts.fetchToken();clientTokenPromise=p;void p.then(tok=>store?.write(tok),()=>{if(clientTokenPromise===p)clientTokenPromise=null;});return p};const mintWorkingToken=createWorkingTokenSource(mintOrigin,getClientToken,scope.publishableKey,fetchImpl);const tokens=createWorkingTokenManager(mintWorkingToken);const base={getSessionToken:()=>tokens.get(),...opts.apiBase!==void 0?{apiBase:opts.apiBase}:{},...opts.theme!==void 0?{theme:opts.theme}:{}};const initOptions=scope.publishableKey!==void 0?{...base,publishableKey:scope.publishableKey}:{...base,region:scope.region,mode:scope.mode};const needsChannel=opts.onEvent!==void 0||opts.onComplete!==void 0||store!==null;const onEvent=needsChannel?e=>{opts.onEvent?.(e);const sessionId=completionSessionId(e);if(sessionId!==null){store?.clear();opts.onComplete?.({sessionId});}else if(isSessionExpiredEvent(e)){store?.clear();}}:void 0;const client=init(initOptions,{tokens});const handle=client.mountProvisioned({target,fetchImpl,onEvent,onConsent:opts.onConsent,...opts.layout!==void 0?{layout:opts.layout}:{},...opts.maxWidth!==void 0?{maxWidth:opts.maxWidth}:{},...opts.copy!==void 0?{copy:opts.copy}:{},...opts.crossDeviceCopy!==void 0?{crossDeviceCopy:opts.crossDeviceCopy}:{},...opts.onOpenCrossDevice!==void 0?{onOpenCrossDevice:opts.onOpenCrossDevice}:{}});const requestResend=confirmEmail=>{if(opts.shortCode===void 0)return Promise.resolve({requested:false});return requestSelfServiceResend({mode:"short_code",origin:mintOrigin,shortCode:opts.shortCode,confirmEmail,fetchImpl})};return {destroy(){handle.destroy();tokens.stop();},openCrossDevice:()=>handle.openCrossDevice?.(),requestResend}}function applicantToWire(a){const wire={};if(a.externalId!==void 0)wire.external_id=a.externalId;if(a.email!==void 0)wire.email=a.email;if(a.phone!==void 0)wire.phone=a.phone;if(a.firstName!==void 0)wire.first_name=a.firstName;if(a.middleName!==void 0)wire.middle_name=a.middleName;if(a.lastName!==void 0)wire.last_name=a.lastName;if(a.legalName!==void 0)wire.legal_name=a.legalName;if(a.dateOfBirth!==void 0)wire.date_of_birth=a.dateOfBirth;if(a.address!==void 0)wire.address=a.address;if(a.referenceName!==void 0)wire.reference_name=a.referenceName;return wire}function readCreatedClientToken(body){if(typeof body!=="object"||body===null||!("data"in body))return null;const data=body.data;if(typeof data!=="object"||data===null||!("client_token"in data))return null;const clientToken=data.client_token;return typeof clientToken==="string"&&clientToken.length>0?clientToken:null}var sessions={async create(input,options){if(typeof window!=="undefined"||typeof document!=="undefined"){throw new Error("checktiv.sessions.create must run on your server: it needs your secret key. Never call it in the browser.")}const fetchImpl=options.fetchImpl??fetch;const headers={Authorization:`Bearer ${options.secretKey}`,"content-type":"application/json"};if(options.idempotencyKey!==void 0)headers["Idempotency-Key"]=options.idempotencyKey;const body=JSON.stringify({workflow_template_id:input.templateId,applicant:applicantToWire(input.applicant)});const res=await fetchImpl(`${options.apiBase}/v1/sessions`,{method:"POST",headers,body});if(!res.ok){throw new Error(`Checktiv sessions.create failed (status ${res.status}). Verify the apiBase origin and secret key.`)}let parsed;try{parsed=await res.json();}catch{throw new Error("Checktiv sessions.create returned a non-JSON response.")}const clientToken=readCreatedClientToken(parsed);if(clientToken===null){throw new Error("Checktiv sessions.create response carried no client token. Enable the working-token capability for this environment, then retry.")}return {clientToken}}};
-
-export { init, mount, mountButton, sessions, version };