@incodetech/core 0.0.0-dev-20260604-edfbb573 → 0.0.0-dev-20260604-0577f678

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import "./warmup-L_VrEKjj.js";
-import { a as reset, i as isConfigured, s as setup, t as SetupOptions } from "./setup-VFySrRdV.js";
+import "./warmup-C-Me8RNj.js";
+import { a as reset, i as isConfigured, s as setup, t as SetupOptions } from "./setup-DASS8vHb.js";
 export { type SetupOptions, isConfigured, reset, setup };

package/dist/index.esm.js

@@ -1,5 +1,5 @@
 import "./WasmUtilProvider-CeyOvhU2.esm.js";
-import { a as setup, n as isConfigured, r as reset } from "./setup-Cl42jOa1.esm.js";
+import { a as setup, n as isConfigured, r as reset } from "./setup-6QUffFnD.esm.js";
 import "./BrowserTimerProvider-BESs49g_.esm.js";
 import "./api-YxPMtty2.esm.js";
 import "./events-Bsw1l0pH.esm.js";
@@ -7,7 +7,7 @@ import "./endpoints-BPHddOTi.esm.js";
 import "./stats-AwLva7-C.esm.js";
 import "./IpifyProvider-BQKB2PR-.esm.js";
 import "./browserSimulation-CHpyEI-W.esm.js";
-import "./sessionInitializer-CBZGnMbc.esm.js";
+import "./sessionInitializer-RsPNFUZW.esm.js";
 import "./platform-D871crJL.esm.js";
 import "./getBrowser-CMJJeBF8.esm.js";
 

package/dist/mandatory-consent.d.ts

@@ -1,8 +1,8 @@
-import "./Manager-C6PZlp2a.js";
-import "./Actor-CcQ_EteO.js";
-import "./camera-BCAbwFy2.js";
-import "./types-DGzov-rE.js";
-import "./types-CURk4uNi.js";
-import "./types-BPTRiryB.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, s as MandatoryConsentConfig, t as MandatoryConsentManager } from "./mandatoryConsentManager-CoAu8yf4.js";
+import "./Manager-BtbwDUTY.js";
+import "./Actor-JBsgjVQJ.js";
+import "./camera-BDklS02l.js";
+import "./types-D2CwpM2b.js";
+import "./types-BG62yJk8.js";
+import "./types-DVwRlm7y.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, s as MandatoryConsentConfig, t as MandatoryConsentManager } from "./mandatoryConsentManager-DvtPF0wk.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/mandatory-consent.esm.js

@@ -2,7 +2,7 @@ import "./api-YxPMtty2.esm.js";
 import "./events-Bsw1l0pH.esm.js";
 import "./endpoints-BPHddOTi.esm.js";
 import "./xstate.esm-CWoFJOio.esm.js";
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-BvRq9XtS.esm.js";
-import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-DaV3Kasq.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-BSqA6UaU.esm.js";
+import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-vRY1lhnH.esm.js";
 
 export { createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-CoAu8yf4.d.ts → mandatoryConsentManager-DvtPF0wk.d.ts}

@@ -1,7 +1,7 @@
-import { t as Manager } from "./Manager-C6PZlp2a.js";
-import { t as ActorRefFrom } from "./Actor-CcQ_EteO.js";
-import { a as RegulationTypes } from "./types-BPTRiryB.js";
-import * as xstate732 from "xstate";
+import { t as Manager } from "./Manager-BtbwDUTY.js";
+import { t as ActorRefFrom } from "./Actor-JBsgjVQJ.js";
+import { a as RegulationTypes } from "./types-DVwRlm7y.js";
+import * as xstate991 from "xstate";
 
 //#region src/modules/mandatory-consent/types.d.ts
 type MandatoryConsentConfig = {
@@ -29,7 +29,7 @@ type MandatoryConsentContext = {
 type MandatoryConsentInput = {
   config: MandatoryConsentConfig;
 };
-declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentContext, {
+declare const mandatoryConsentMachine: xstate991.StateMachine<MandatoryConsentContext, {
   type: "LOAD";
 } | {
   type: "TOGGLE";
@@ -42,53 +42,53 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
 } | {
   type: "RESET";
 }, {
-  [x: string]: xstate732.ActorRefFromLogic<xstate732.PromiseActorLogic<FetchMandatoryConsentResponse, {
+  [x: string]: xstate991.ActorRefFromLogic<xstate991.PromiseActorLogic<FetchMandatoryConsentResponse, {
     config: MandatoryConsentConfig;
-  }, xstate732.EventObject>> | xstate732.ActorRefFromLogic<xstate732.PromiseActorLogic<void, {
+  }, xstate991.EventObject>> | xstate991.ActorRefFromLogic<xstate991.PromiseActorLogic<void, {
     consentId: string;
     isSigned: boolean;
-  }, xstate732.EventObject>> | undefined;
-}, xstate732.Values<{
+  }, xstate991.EventObject>> | undefined;
+}, xstate991.Values<{
   fetchConsent: {
     src: "fetchConsent";
-    logic: xstate732.PromiseActorLogic<FetchMandatoryConsentResponse, {
+    logic: xstate991.PromiseActorLogic<FetchMandatoryConsentResponse, {
       config: MandatoryConsentConfig;
-    }, xstate732.EventObject>;
+    }, xstate991.EventObject>;
     id: string | undefined;
   };
   submitConsent: {
     src: "submitConsent";
-    logic: xstate732.PromiseActorLogic<void, {
+    logic: xstate991.PromiseActorLogic<void, {
       consentId: string;
       isSigned: boolean;
-    }, xstate732.EventObject>;
+    }, xstate991.EventObject>;
     id: string | undefined;
   };
-}>, xstate732.Values<{
+}>, xstate991.Values<{
   setConsent: {
     type: "setConsent";
-    params: xstate732.NonReducibleUnknown;
+    params: xstate991.NonReducibleUnknown;
   };
   setError: {
     type: "setError";
-    params: xstate732.NonReducibleUnknown;
+    params: xstate991.NonReducibleUnknown;
   };
   clearError: {
     type: "clearError";
-    params: xstate732.NonReducibleUnknown;
+    params: xstate991.NonReducibleUnknown;
   };
   resetContext: {
     type: "resetContext";
-    params: xstate732.NonReducibleUnknown;
+    params: xstate991.NonReducibleUnknown;
   };
   toggleSigned: {
     type: "toggleSigned";
-    params: xstate732.NonReducibleUnknown;
+    params: xstate991.NonReducibleUnknown;
   };
 }>, {
   type: "canSubmit";
   params: unknown;
-}, never, "error" | "idle" | "closed" | "finished" | "loading" | "display" | "submitting", string, MandatoryConsentInput, xstate732.NonReducibleUnknown, xstate732.EventObject, xstate732.MetaObject, {
+}, never, "error" | "idle" | "closed" | "finished" | "loading" | "submitting" | "display", string, MandatoryConsentInput, xstate991.NonReducibleUnknown, xstate991.EventObject, xstate991.MetaObject, {
   readonly id: "mandatoryConsent";
   readonly initial: "idle";
   readonly context: ({
@@ -97,70 +97,70 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
     spawn: {
       <TSrc extends "fetchConsent" | "submitConsent">(logic: TSrc, ...[options]: ({
         src: "fetchConsent";
-        logic: xstate732.PromiseActorLogic<FetchMandatoryConsentResponse, {
+        logic: xstate991.PromiseActorLogic<FetchMandatoryConsentResponse, {
           config: MandatoryConsentConfig;
-        }, xstate732.EventObject>;
+        }, xstate991.EventObject>;
         id: string | undefined;
       } extends infer T ? T extends {
         src: "fetchConsent";
-        logic: xstate732.PromiseActorLogic<FetchMandatoryConsentResponse, {
+        logic: xstate991.PromiseActorLogic<FetchMandatoryConsentResponse, {
           config: MandatoryConsentConfig;
-        }, xstate732.EventObject>;
+        }, xstate991.EventObject>;
         id: string | undefined;
       } ? T extends {
         src: TSrc;
-      } ? xstate732.ConditionalRequired<[options?: ({
+      } ? xstate991.ConditionalRequired<[options?: ({
         id?: T["id"] | undefined;
         systemId?: string;
-        input?: xstate732.InputFrom<T["logic"]> | undefined;
+        input?: xstate991.InputFrom<T["logic"]> | undefined;
         syncSnapshot?: boolean;
-      } & { [K in xstate732.RequiredActorOptions<T>]: unknown }) | undefined], xstate732.IsNotNever<xstate732.RequiredActorOptions<T>>> : never : never : never) | ({
+      } & { [K in xstate991.RequiredActorOptions<T>]: unknown }) | undefined], xstate991.IsNotNever<xstate991.RequiredActorOptions<T>>> : never : never : never) | ({
         src: "submitConsent";
-        logic: xstate732.PromiseActorLogic<void, {
+        logic: xstate991.PromiseActorLogic<void, {
           consentId: string;
           isSigned: boolean;
-        }, xstate732.EventObject>;
+        }, xstate991.EventObject>;
         id: string | undefined;
       } extends infer T_1 ? T_1 extends {
         src: "submitConsent";
-        logic: xstate732.PromiseActorLogic<void, {
+        logic: xstate991.PromiseActorLogic<void, {
           consentId: string;
           isSigned: boolean;
-        }, xstate732.EventObject>;
+        }, xstate991.EventObject>;
         id: string | undefined;
       } ? T_1 extends {
         src: TSrc;
-      } ? xstate732.ConditionalRequired<[options?: ({
+      } ? xstate991.ConditionalRequired<[options?: ({
         id?: T_1["id"] | undefined;
         systemId?: string;
-        input?: xstate732.InputFrom<T_1["logic"]> | undefined;
+        input?: xstate991.InputFrom<T_1["logic"]> | undefined;
         syncSnapshot?: boolean;
-      } & { [K_1 in xstate732.RequiredActorOptions<T_1>]: unknown }) | undefined], xstate732.IsNotNever<xstate732.RequiredActorOptions<T_1>>> : never : never : never)): xstate732.ActorRefFromLogic<xstate732.GetConcreteByKey<xstate732.Values<{
+      } & { [K_1 in xstate991.RequiredActorOptions<T_1>]: unknown }) | undefined], xstate991.IsNotNever<xstate991.RequiredActorOptions<T_1>>> : never : never : never)): xstate991.ActorRefFromLogic<xstate991.GetConcreteByKey<xstate991.Values<{
         fetchConsent: {
           src: "fetchConsent";
-          logic: xstate732.PromiseActorLogic<FetchMandatoryConsentResponse, {
+          logic: xstate991.PromiseActorLogic<FetchMandatoryConsentResponse, {
             config: MandatoryConsentConfig;
-          }, xstate732.EventObject>;
+          }, xstate991.EventObject>;
           id: string | undefined;
         };
         submitConsent: {
           src: "submitConsent";
-          logic: xstate732.PromiseActorLogic<void, {
+          logic: xstate991.PromiseActorLogic<void, {
             consentId: string;
             isSigned: boolean;
-          }, xstate732.EventObject>;
+          }, xstate991.EventObject>;
           id: string | undefined;
         };
       }>, "src", TSrc>["logic"]>;
-      <TLogic extends xstate732.AnyActorLogic>(src: TLogic, ...[options]: xstate732.ConditionalRequired<[options?: ({
+      <TLogic extends xstate991.AnyActorLogic>(src: TLogic, ...[options]: xstate991.ConditionalRequired<[options?: ({
         id?: never;
         systemId?: string;
-        input?: xstate732.InputFrom<TLogic> | undefined;
+        input?: xstate991.InputFrom<TLogic> | undefined;
         syncSnapshot?: boolean;
-      } & { [K in xstate732.RequiredLogicInput<TLogic>]: unknown }) | undefined], xstate732.IsNotNever<xstate732.RequiredLogicInput<TLogic>>>): xstate732.ActorRefFromLogic<TLogic>;
+      } & { [K in xstate991.RequiredLogicInput<TLogic>]: unknown }) | undefined], xstate991.IsNotNever<xstate991.RequiredLogicInput<TLogic>>>): xstate991.ActorRefFromLogic<TLogic>;
     };
     input: MandatoryConsentInput;
-    self: xstate732.ActorRef<xstate732.MachineSnapshot<MandatoryConsentContext, {
+    self: xstate991.ActorRef<xstate991.MachineSnapshot<MandatoryConsentContext, {
       type: "LOAD";
     } | {
       type: "TOGGLE";
@@ -172,7 +172,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
       type: "RETRY";
     } | {
       type: "RESET";
-    }, Record<string, xstate732.AnyActorRef | undefined>, xstate732.StateValue, string, unknown, any, any>, {
+    }, Record<string, xstate991.AnyActorRef | undefined>, xstate991.StateValue, string, unknown, any, any>, {
       type: "LOAD";
     } | {
       type: "TOGGLE";
@@ -184,7 +184,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
       type: "RETRY";
     } | {
       type: "RESET";
-    }, xstate732.AnyEventObject>;
+    }, xstate991.AnyEventObject>;
   }) => {
     config: MandatoryConsentConfig;
     consent: undefined;
@@ -221,7 +221,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
           } | {
             type: "RESET";
           };
-          self: xstate732.ActorRef<xstate732.MachineSnapshot<MandatoryConsentContext, {
+          self: xstate991.ActorRef<xstate991.MachineSnapshot<MandatoryConsentContext, {
             type: "LOAD";
           } | {
             type: "TOGGLE";
@@ -233,7 +233,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
             type: "RETRY";
           } | {
             type: "RESET";
-          }, Record<string, xstate732.AnyActorRef>, xstate732.StateValue, string, unknown, any, any>, {
+          }, Record<string, xstate991.AnyActorRef>, xstate991.StateValue, string, unknown, any, any>, {
             type: "LOAD";
           } | {
             type: "TOGGLE";
@@ -245,7 +245,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
             type: "RETRY";
           } | {
             type: "RESET";
-          }, xstate732.AnyEventObject>;
+          }, xstate991.AnyEventObject>;
         }) => {
           config: MandatoryConsentConfig;
         };
@@ -298,7 +298,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
           } | {
             type: "RESET";
           };
-          self: xstate732.ActorRef<xstate732.MachineSnapshot<MandatoryConsentContext, {
+          self: xstate991.ActorRef<xstate991.MachineSnapshot<MandatoryConsentContext, {
             type: "LOAD";
           } | {
             type: "TOGGLE";
@@ -310,7 +310,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
             type: "RETRY";
           } | {
             type: "RESET";
-          }, Record<string, xstate732.AnyActorRef>, xstate732.StateValue, string, unknown, any, any>, {
+          }, Record<string, xstate991.AnyActorRef>, xstate991.StateValue, string, unknown, any, any>, {
             type: "LOAD";
           } | {
             type: "TOGGLE";
@@ -322,7 +322,7 @@ declare const mandatoryConsentMachine: xstate732.StateMachine<MandatoryConsentCo
             type: "RETRY";
           } | {
             type: "RESET";
-          }, xstate732.AnyEventObject>;
+          }, xstate991.AnyEventObject>;
         }) => {
           consentId: string;
           isSigned: boolean;

package/dist/{mandatoryConsentManager-DaV3Kasq.esm.js → mandatoryConsentManager-vRY1lhnH.esm.js}

@@ -1,6 +1,6 @@
 import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Bsw1l0pH.esm.js";
 import { c as createManager, s as createActor } from "./xstate.esm-CWoFJOio.esm.js";
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-BvRq9XtS.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-BSqA6UaU.esm.js";
 
 //#region src/modules/mandatory-consent/mandatoryConsentActor.ts
 function createMandatoryConsentActor(options) {

package/dist/openviduLazy-Bys_w8LJ.esm.js

@@ -0,0 +1,3 @@
+import { t as loadOpenVidu } from "./openviduLazy-DjQv_EQK.esm.js";
+
+export { loadOpenVidu };

package/dist/{openviduLazy--WQ7S77K.esm.js → openviduLazy-DjQv_EQK.esm.js}

@@ -4,7 +4,7 @@ import { a as __toDynamicImportESM } from "./chunk-wtC55c3P.esm.js";
 let openViduImport;
 async function loadOpenVidu() {
 	if (openViduImport) return openViduImport;
-	openViduImport = import("./lib-Co05siK6.esm.js").then(__toDynamicImportESM(1));
+	openViduImport = import("./lib-Dhki73Gp.esm.js").then(__toDynamicImportESM(1));
 	return openViduImport;
 }
 

package/dist/otp-B33JDqfa.esm.js

@@ -0,0 +1,33 @@
+//#region src/shared/otp.ts
+/**
+* Expected length of an OTP verification code.
+*
+* Owned by Core so the phone, email, and government-validation modules — and
+* the UI (via each manager's exposed `otpLength`) — agree on a single value.
+* This is a pure leaf utility: modules import it independently, so it never
+* introduces a dependency between them.
+*/
+const OTP_CODE_LENGTH = 6;
+/** Validation-error code for an OTP code that is not yet complete. */
+const OTP_INCOMPLETE_ERROR = "incompleteOtp";
+/**
+* Returns true when the code has exactly the expected number of characters.
+* Normalization (casing, stripping separators) is the caller's responsibility.
+*/
+function isOtpComplete(code, length = OTP_CODE_LENGTH) {
+	return code.length === length;
+}
+/**
+* Computes client-side OTP validation errors for the given code.
+*
+* Returns `{ otp: OTP_INCOMPLETE_ERROR }` when the code is incomplete (including
+* empty), or an empty object when complete. Mirrors the phone/email
+* `computeValidationErrors` shape so state machines can treat it identically.
+*/
+function computeOtpValidationErrors(code, length = OTP_CODE_LENGTH) {
+	if (!isOtpComplete(code, length)) return { otp: OTP_INCOMPLETE_ERROR };
+	return {};
+}
+
+//#endregion
+export { computeOtpValidationErrors as n, isOtpComplete as r, OTP_CODE_LENGTH as t };

package/dist/otp-BEvNq7gp.d.ts

@@ -0,0 +1,8 @@
+//#region src/shared/otp.d.ts
+
+/** Client-side OTP validation errors, keyed by field. Empty when valid. */
+type OtpValidationErrors = {
+  otp?: string;
+};
+//#endregion
+export { OtpValidationErrors as t };

package/dist/phone.d.ts

@@ -1,4 +1,5 @@
-import "./Manager-C6PZlp2a.js";
-import "./Actor-CcQ_EteO.js";
-import { n as PhoneState, o as phoneMachine, r as createPhoneManager, s as PhoneConfig, t as PhoneManager } from "./phoneManager-eEOZV-Ag.js";
+import "./Manager-BtbwDUTY.js";
+import "./Actor-JBsgjVQJ.js";
+import "./otp-BEvNq7gp.js";
+import { n as PhoneState, o as phoneMachine, r as createPhoneManager, s as PhoneConfig, t as PhoneManager } from "./phoneManager-pvDvZ_gv.js";
 export { type PhoneConfig, type PhoneManager, type PhoneState, createPhoneManager, phoneMachine };

package/dist/phone.esm.js

@@ -3,7 +3,8 @@ import "./api-YxPMtty2.esm.js";
 import "./events-Bsw1l0pH.esm.js";
 import "./endpoints-BPHddOTi.esm.js";
 import "./xstate.esm-CWoFJOio.esm.js";
-import { t as phoneMachine } from "./phoneStateMachine-XdnP18Rl.esm.js";
-import { t as createPhoneManager } from "./phoneManager-CkcMvwa6.esm.js";
+import "./otp-B33JDqfa.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-BfcrU9Ge.esm.js";
+import { t as createPhoneManager } from "./phoneManager-BAuNvs-i.esm.js";
 
 export { createPhoneManager, phoneMachine };

package/dist/{phoneManager-CkcMvwa6.esm.js → phoneManager-BAuNvs-i.esm.js}

@@ -1,6 +1,7 @@
 import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Bsw1l0pH.esm.js";
 import { c as createManager, s as createActor } from "./xstate.esm-CWoFJOio.esm.js";
-import { t as phoneMachine } from "./phoneStateMachine-XdnP18Rl.esm.js";
+import { t as OTP_CODE_LENGTH } from "./otp-B33JDqfa.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-BfcrU9Ge.esm.js";
 
 //#region src/modules/phone/phoneActor.ts
 function createPhoneActor(options) {
@@ -120,25 +121,39 @@ function mapState(snapshot) {
 		optinEnabled: context.config.optinEnabled ?? false
 	};
 	if (typedSnapshot.matches("submitting")) return { status: "submitting" };
-	if (typedSnapshot.matches("resendingOtp")) return { status: "resendingOtp" };
+	if (typedSnapshot.matches("resendingOtp")) return {
+		status: "resendingOtp",
+		otpCode: context.otpCode,
+		otpLength: OTP_CODE_LENGTH
+	};
 	if (typedSnapshot.matches("sendingInitialOtp")) return { status: "sendingInitialOtp" };
 	if (typedSnapshot.matches("awaitingOtp")) return {
 		status: "awaitingOtp",
 		resendTimer: context.resendTimer,
 		canResend: !context.resendTimerActive,
-		attemptsRemaining: context.attemptsRemaining
+		attemptsRemaining: context.attemptsRemaining,
+		otpCode: context.otpCode,
+		otpLength: OTP_CODE_LENGTH,
+		otpValidationErrors: context.otpValidationErrors,
+		isOtpValid: Object.keys(context.otpValidationErrors ?? {}).length === 0
 	};
 	if (typedSnapshot.matches("verifyingOtp")) return {
 		status: "verifyingOtp",
 		resendTimer: context.resendTimer,
-		canResend: !context.resendTimerActive
+		canResend: !context.resendTimerActive,
+		otpCode: context.otpCode,
+		otpLength: OTP_CODE_LENGTH
 	};
 	if (typedSnapshot.matches("otpError")) return {
 		status: "otpError",
 		otpError: context.otpError ?? "otp.errorv2",
 		attemptsRemaining: context.attemptsRemaining,
 		resendTimer: context.resendTimer,
-		canResend: !context.resendTimerActive
+		canResend: !context.resendTimerActive,
+		otpCode: context.otpCode,
+		otpLength: OTP_CODE_LENGTH,
+		otpValidationErrors: context.otpValidationErrors,
+		isOtpValid: Object.keys(context.otpValidationErrors ?? {}).length === 0
 	};
 	if (typedSnapshot.matches("finished")) return { status: "finished" };
 	if (typedSnapshot.matches("error")) return {
@@ -178,6 +193,9 @@ function createApi({ actor, trackElementClicked }) {
 				code
 			});
 		},
+		validateOtp() {
+			actor.send({ type: "VALIDATE_OTP" });
+		},
 		submitOtp(code) {
 			trackElementClicked?.("submitOtp");
 			actor.send({

package/dist/{phoneManager-eEOZV-Ag.d.ts → phoneManager-pvDvZ_gv.d.ts}

@@ -1,5 +1,6 @@
-import { t as Manager } from "./Manager-C6PZlp2a.js";
-import { t as ActorRefFrom } from "./Actor-CcQ_EteO.js";
+import { t as Manager } from "./Manager-BtbwDUTY.js";
+import { t as ActorRefFrom } from "./Actor-JBsgjVQJ.js";
+import { t as OtpValidationErrors } from "./otp-BEvNq7gp.js";
 
 //#region src/modules/phone/types.d.ts
 
@@ -125,6 +126,10 @@ type PhoneSubmittingState = {
 /** OTP is being sent to the phone number on resend */
 type PhoneResendingOtpState = {
   status: 'resendingOtp';
+  /** The OTP code entered so far (controlled-input value, kept visible while disabled) */
+  otpCode: string;
+  /** Expected OTP length (owned by Core) */
+  otpLength: number;
 };
 /** OTP is being initialy sent to the phone number */
 type PhoneSendingInitialOtp = {
@@ -135,22 +140,34 @@ type PhoneSendingInitialOtp = {
  * @property resendTimer - Seconds remaining before resend is allowed
  * @property canResend - Whether the resend button should be enabled
  * @property attemptsRemaining - Number of OTP verification attempts left
+ * @property otpCode - The OTP code entered so far (controlled-input value)
+ * @property otpLength - Expected OTP length (owned by Core; the UI should not hardcode it)
+ * @property otpValidationErrors - Client-side OTP errors (e.g. incomplete code). Surfaced on blur and submit.
+ * @property isOtpValid - True iff `otpValidationErrors` is empty. Optimistic semantic: starts true.
  */
 type PhoneAwaitingOtpState = {
   status: 'awaitingOtp';
   resendTimer: number;
   canResend: boolean;
   attemptsRemaining: number;
+  otpCode: string;
+  otpLength: number;
+  otpValidationErrors?: OtpValidationErrors;
+  isOtpValid: boolean;
 };
 /**
  * OTP code is being verified against the backend
  * @property resendTimer - Seconds remaining on resend cooldown (unchanged while verifying)
  * @property canResend - Whether resend is allowed (cooldown finished)
+ * @property otpCode - The code being verified (controlled-input value, kept visible while disabled)
+ * @property otpLength - Expected OTP length (owned by Core)
  */
 type PhoneVerifyingOtpState = {
   status: 'verifyingOtp';
   resendTimer: number;
   canResend: boolean;
+  otpCode: string;
+  otpLength: number;
 };
 /**
  * OTP verification failed - user can retry with `submitOtp()`
@@ -158,6 +175,10 @@ type PhoneVerifyingOtpState = {
  * @property attemptsRemaining - Number of remaining attempts before lockout
  * @property resendTimer - Seconds remaining on resend cooldown (same as awaiting OTP)
  * @property canResend - Whether resend is allowed (cooldown finished)
+ * @property otpCode - The OTP code entered so far (controlled-input value)
+ * @property otpLength - Expected OTP length (owned by Core)
+ * @property otpValidationErrors - Client-side OTP errors (e.g. incomplete code). Server `otpError` takes precedence in the UI.
+ * @property isOtpValid - True iff `otpValidationErrors` is empty. Optimistic semantic: starts true.
  */
 type PhoneOtpErrorState = {
   status: 'otpError';
@@ -165,6 +186,10 @@ type PhoneOtpErrorState = {
   attemptsRemaining: number;
   resendTimer: number;
   canResend: boolean;
+  otpCode: string;
+  otpLength: number;
+  otpValidationErrors?: OtpValidationErrors;
+  isOtpValid: boolean;
 };
 /** Phone verification completed successfully */
 type PhoneFinishedState = {
@@ -282,6 +307,12 @@ declare function createPhoneManager(options: CreatePhoneActorOptions): Manager<P
    * @param code - The OTP code entered by the user
    */
   setOtpCode(code: string): void;
+  /**
+   * Validates the current OTP code (e.g. on blur), without submitting.
+   * Populates or clears `otpValidationErrors.otp` on the 'awaitingOtp' /
+   * 'otpError' states (incomplete code → `isOtpValid` becomes false).
+   */
+  validateOtp(): void;
   /**
    * Sets and submits the OTP code in one call.
    * Should be called when state is 'awaitingOtp' or 'otpError'.
@@ -363,6 +394,12 @@ declare function createPhoneManagerFromActor(actor: PhoneActor): Manager<PhoneSt
    * @param code - The OTP code entered by the user
    */
   setOtpCode(code: string): void;
+  /**
+   * Validates the current OTP code (e.g. on blur), without submitting.
+   * Populates or clears `otpValidationErrors.otp` on the 'awaitingOtp' /
+   * 'otpError' states (incomplete code → `isOtpValid` becomes false).
+   */
+  validateOtp(): void;
   /**
    * Sets and submits the OTP code in one call.
    * Should be called when state is 'awaitingOtp' or 'otpError'.
@@ -407,6 +444,7 @@ declare function createPhoneManagerFromActor(actor: PhoneActor): Manager<PhoneSt
  * @property setOptInGranted - Sets marketing opt-in preference
  * @property submit - Submits the phone number
  * @property setOtpCode - Sets OTP code without submitting
+ * @property validateOtp - Validates the current OTP (e.g. on blur)
  * @property submitOtp - Sets and submits OTP code
  * @property resendOtp - Requests new OTP code
  * @property back - Returns to phone input from OTP screen

package/dist/{phoneStateMachine-XdnP18Rl.esm.js → phoneStateMachine-BfcrU9Ge.esm.js}

@@ -2,6 +2,7 @@ import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BESs49g_.esm.j
 import { t as api } from "./api-YxPMtty2.esm.js";
 import { t as endpoints } from "./endpoints-BPHddOTi.esm.js";
 import { a as fromPromise, i as fromCallback, r as assign, t as setup } from "./xstate.esm-CWoFJOio.esm.js";
+import { n as computeOtpValidationErrors, r as isOtpComplete } from "./otp-B33JDqfa.esm.js";
 
 //#region src/modules/phone/phoneServices.ts
 function getPhoneServerFailureReason(error, invalidStatus) {
@@ -145,8 +146,13 @@ const phoneMachine = setup({
 		clearPhoneError: assign({ phoneError: () => void 0 }),
 		setOtpCode: assign(({ event }) => ({
 			otpCode: event.code,
-			otpError: void 0
+			otpError: void 0,
+			otpValidationErrors: void 0
 		})),
+		validateOtpField: assign(({ context }) => {
+			const errors = computeOtpValidationErrors(context.otpCode);
+			return { otpValidationErrors: errors.otp ? errors : void 0 };
+		}),
 		setOtpError: assign(({ context, event }) => ({
 			otpError: getErrorMessage(event.error),
 			attemptsRemaining: context.attemptsRemaining - 1
@@ -154,7 +160,8 @@ const phoneMachine = setup({
 		setOtpRequestError: assign(({ event }) => ({ otpError: getErrorMessage(event.error) })),
 		clearOtpError: assign({
 			otpError: () => void 0,
-			otpCode: () => ""
+			otpCode: () => "",
+			otpValidationErrors: () => void 0
 		}),
 		startResendTimer: assign({
 			resendTimer: () => RESEND_TIMER_SECONDS,
@@ -181,6 +188,7 @@ const phoneMachine = setup({
 			error: void 0,
 			otpCode: "",
 			otpError: void 0,
+			otpValidationErrors: void 0,
 			attemptsRemaining: context.config.maxOtpAttempts ?? 3,
 			resendTimer: 0,
 			resendTimerActive: false
@@ -191,6 +199,7 @@ const phoneMachine = setup({
 		hasOtpVerification: ({ context }) => context.config.otpVerification,
 		hasNoValidationErrors: ({ context }) => !context.validationErrors || Object.keys(context.validationErrors).length === 0,
 		hasAttemptsRemaining: ({ context }) => context.attemptsRemaining > 1,
+		hasCompleteOtp: ({ context }) => isOtpComplete(context.otpCode),
 		canResend: ({ context }) => !context.resendTimerActive
 	}
 }).createMachine({
@@ -210,6 +219,7 @@ const phoneMachine = setup({
 		error: void 0,
 		otpCode: "",
 		otpError: void 0,
+		otpValidationErrors: void 0,
 		attemptsRemaining: input.config.maxOtpAttempts ?? 3,
 		resendTimer: 0,
 		resendTimerActive: false
@@ -301,7 +311,11 @@ const phoneMachine = setup({
 			on: {
 				TICK: { actions: "tickResendTimer" },
 				OTP_CHANGED: { actions: "setOtpCode" },
-				VERIFY_OTP: { target: "verifyingOtp" },
+				VALIDATE_OTP: { actions: "validateOtpField" },
+				VERIFY_OTP: [{
+					guard: "hasCompleteOtp",
+					target: "verifyingOtp"
+				}, { actions: "validateOtpField" }],
 				RESEND_OTP: {
 					target: "resendingOtp",
 					guard: "canResend"
@@ -352,6 +366,7 @@ const phoneMachine = setup({
 					target: "awaitingOtp",
 					actions: "setOtpCode"
 				},
+				VALIDATE_OTP: { actions: "validateOtpField" },
 				RESEND_OTP: {
 					target: "resendingOtp",
 					guard: "canResend"

package/dist/qe-signature.d.ts

@@ -1,6 +1,6 @@
-import { t as Manager } from "./Manager-C6PZlp2a.js";
-import "./Actor-CcQ_EteO.js";
-import { c as ConsentKey, f as QE_CONSENT_KEYS, g as getDefaultConsentChecks, i as electronicSignatureMachine, l as ElectronicSignatureConfig, m as areAllConsented, n as ElectronicSignatureState, s as ConsentChecks, u as ElectronicSignatureDocument } from "./index-F-xtscHn.js";
+import { t as Manager } from "./Manager-BtbwDUTY.js";
+import "./Actor-JBsgjVQJ.js";
+import { c as ConsentKey, f as QE_CONSENT_KEYS, g as getDefaultConsentChecks, i as electronicSignatureMachine, l as ElectronicSignatureConfig, m as areAllConsented, n as ElectronicSignatureState, s as ConsentChecks, u as ElectronicSignatureDocument } from "./index-Dlszx51Y.js";
 
 //#region src/modules/qe-signature/index.d.ts