@incodetech/core 0.0.0-dev-20260924-9aba82df → 0.0.0-dev-20260924-e9f5a050

package/dist/{idCaptureManager-BWzWmvEc.d.ts → idCaptureManager-BwCRMOUG.d.ts}

@@ -12,7 +12,7 @@ import "./types-CfuWgAi-.js";
 import { n as DeepsightService } from "./StreamCanvasCapture-CeBBJ_RC.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 import { i as Pdf417DecodeResult, n as IIdCaptureCapability, t as DetectionOrientation } from "./IIdCaptureCapability-DBsv9-7M.js";
-import { E as IdErrorCode, G as FailureReason, M as DeviceWalletFailReason, O as UploadIdResponse, P as DeviceWalletPlatform, W as DigitalIdProviderId, b as IdCaptureOnlyConfig, c as DetectionStatus, d as IdCaptureContext, f as IdCaptureDependencies, g as IdCaptureEvent, h as IdCaptureDigitalIdRedirectOption, i as CaptureIdResponse, k as IAnalyticsCapability, r as AddBarcodeV3Response, s as DetectionArea, t as AcceptedDocument, u as IdCaptureConfig, v as IdCaptureInput, w as IdDocumentType, x as IdCaptureOutput, y as IdCaptureMode } from "./types-Vh9cUnOR2.js";
+import { A as DeviceWalletDecision, E as IdErrorCode, F as DeviceWalletProvider, G as DigitalIdProviderId, I as DeviceWalletServices, J as IDigitalCredentialsCapability, K as FailureReason, M as DeviceWalletFailReason, O as UploadIdResponse, P as DeviceWalletPlatform, b as IdCaptureOnlyConfig, c as DetectionStatus, d as IdCaptureContext, f as IdCaptureDependencies, g as IdCaptureEvent, h as IdCaptureDigitalIdRedirectOption, i as CaptureIdResponse, j as DeviceWalletDecryptResponse, k as IAnalyticsCapability, r as AddBarcodeV3Response, s as DetectionArea, t as AcceptedDocument, u as IdCaptureConfig, v as IdCaptureInput, w as IdDocumentType, x as IdCaptureOutput, y as IdCaptureMode } from "./types-H6yoTrWC2.js";
 //#region ../infra/src/providers/wasm/WasmUtilProvider.d.ts
 declare class WasmUtilProvider extends BaseWasmProvider implements IWasmUtilCapability {
   private static instance;
@@ -197,6 +197,164 @@ declare function createIdCaptureOnlyActor(options: CreateIdCaptureOnlyActorOptio
 //#region src/modules/id/digitalUpload/types.d.ts
 type DigitalUploadFailReason = 'DIGITAL_ID_REQUESTED_BUT_OTHER_PROVIDED' | 'ID_TYPE_UNACCEPTABLE' | 'FILE_CHANGED_ERROR' | 'INVALID_FILE_TYPE' | 'NETWORK_ERROR' | 'GENERIC';
 //#endregion
+//#region src/modules/id/deviceWallet/deviceWalletActor.d.ts
+type CreateDeviceWalletActorOptions = {
+  /**
+   * Force a wallet backend. Omit to auto-detect from the device
+   * (`apple_web` on iOS/iPadOS and macOS Safari, `google` elsewhere).
+   */
+  provider?: DeviceWalletProvider;
+  /** Override the Digital Credentials capability (tests, custom hosts). */
+  credentials?: IDigitalCredentialsCapability;
+  /** Override the request/decrypt services (tests, custom backends). */
+  services?: DeviceWalletServices;
+};
+//#endregion
+//#region src/modules/id/deviceWallet/deviceWalletManager.d.ts
+/** The backend wallet-request payload is being fetched. */
+type DeviceWalletRequestingState = {
+  status: 'requesting';
+  platform: DeviceWalletPlatform;
+};
+/**
+ * The OS wallet sheet is open. Reached only from a user gesture — iOS Safari
+ * requires transient user activation for `navigator.credentials.get()`.
+ */
+type DeviceWalletPresentingState = {
+  status: 'presenting';
+  platform: DeviceWalletPlatform;
+};
+/** The opaque wallet response is being decrypted server-side. */
+type DeviceWalletDecryptingState = {
+  status: 'decrypting';
+  platform: DeviceWalletPlatform;
+};
+/**
+ * The handshake completed. A `REJECTED` decision is still a completed
+ * handshake — the decision is data, not a failure.
+ *
+ * The verified ID attributes are NOT here: they land in the session and are
+ * read back through the standard OCR / score APIs.
+ */
+type DeviceWalletFinishedState = {
+  status: 'finished';
+  platform: DeviceWalletPlatform;
+  decision: DeviceWalletDecision | undefined;
+  response: DeviceWalletDecryptResponse;
+};
+/** Recoverable failure — call `retry()` or `useAnotherMethod()`. */
+type DeviceWalletFailedState = {
+  status: 'failed';
+  platform: DeviceWalletPlatform;
+  reason: DeviceWalletFailReason;
+};
+/** The consumer gave up on the wallet (`useAnotherMethod()`). */
+type DeviceWalletClosedState = {
+  status: 'closed';
+  platform: DeviceWalletPlatform;
+};
+/**
+ * Union of every public device-wallet state.
+ *
+ * @example
+ * ```typescript
+ * const state = manager.getState();
+ * if (state.status === 'finished') console.log(state.decision);
+ * if (state.status === 'failed') console.log(state.reason);
+ * ```
+ */
+type DeviceWalletState = DeviceWalletRequestingState | DeviceWalletPresentingState | DeviceWalletDecryptingState | DeviceWalletFinishedState | DeviceWalletFailedState | DeviceWalletClosedState;
+/**
+ * Creates a headless device-wallet (mDL) manager — the V2 equivalent of V1's
+ * `renderWallet`, with the intermediate states observable.
+ *
+ * Runs the Apple Wallet (web) / Google Wallet handshake with zero Incode UI,
+ * so integrators trigger it from their own button and render their own UX.
+ * Call it from a user gesture: iOS Safari requires transient user activation
+ * for `navigator.credentials.get()`.
+ *
+ * Requires an initialized session (`setup({ apiURL, token })`) — the request
+ * and decrypt calls are session-scoped.
+ *
+ * @example
+ * ```typescript
+ * import { setup } from '@incodetech/core';
+ * import { createDeviceWalletManager } from '@incodetech/core/id';
+ *
+ * setup({ apiURL, token });
+ *
+ * button.addEventListener('click', () => {
+ *   const manager = createDeviceWalletManager();
+ *   manager.subscribe((state) => {
+ *     if (state.status === 'finished') manager.stop();
+ *     if (state.status === 'failed') console.error(state.reason);
+ *   });
+ * });
+ * ```
+ */
+declare function createDeviceWalletManager(options?: CreateDeviceWalletActorOptions): Manager<DeviceWalletState> & {
+  /** Restarts the handshake after a failure. Needs a fresh user gesture. */
+  retry(): void;
+  /**
+   * Abandons the wallet path from a failure and moves the manager to
+   * `closed`, so the consumer can fall back to a camera ID capture.
+   */
+  useAnotherMethod(): void;
+};
+type DeviceWalletManager = ReturnType<typeof createDeviceWalletManager>;
+//#endregion
+//#region src/modules/id/deviceWallet/renderWallet.d.ts
+/**
+ * Failure handed to `onError`. Mirrors V1's `DigitalIdWalletError` — `code`
+ * carries the same three values V1 used (`UNSUPPORTED_PLATFORM`,
+ * `NO_CREDENTIAL`, `WALLET_ERROR`).
+ */
+type RenderWalletError = {
+  code: DeviceWalletFailReason;
+  message: string;
+};
+type RenderWalletParams = CreateDeviceWalletActorOptions & {
+  /**
+   * The handshake completed. Carries the decrypt response (with its
+   * `decision`), never `null` — an empty wallet is reported through
+   * `onError(NO_CREDENTIAL)`.
+   */
+  onSuccess: (result: DeviceWalletDecryptResponse) => void;
+  onError: (error: RenderWalletError) => void;
+};
+/**
+ * Headless device-wallet (mDL) API — the V1 `renderWallet` shape, ported.
+ *
+ * Runs the Apple Wallet (web) / Google Wallet handshake with zero Incode UI,
+ * so integrators trigger it from their own button and render their own UX.
+ * Resolves once the handshake settles; the outcome arrives through
+ * `onSuccess` / `onError` exactly as in V1.
+ *
+ * MUST be called from a user gesture (e.g. a click handler) — iOS/Safari
+ * requires transient user activation for `navigator.credentials.get()` to
+ * present the wallet sheet.
+ *
+ * Requires an initialized session (`setup({ apiURL, token })`). The verified
+ * attributes are NOT returned here: they land in the session and are read back
+ * through the standard OCR / score APIs. `onSuccess` receives the submission
+ * decision/status.
+ *
+ * Prefer {@link createDeviceWalletManager} for new integrations — it exposes
+ * the intermediate `requesting` / `presenting` / `decrypting` states (and a
+ * `retry()`), which this one-shot wrapper collapses.
+ *
+ * @example
+ * ```typescript
+ * button.addEventListener('click', () => {
+ *   void renderWallet({
+ *     onSuccess: (result) => console.log(result.decision),
+ *     onError: (error) => console.error(error.code, error.message),
+ *   });
+ * });
+ * ```
+ */
+declare function renderWallet({ onSuccess, onError, ...actorOptions }: RenderWalletParams): Promise<void>;
+//#endregion
 //#region src/internal/idCapture/idCaptureManagerFactory.d.ts
 type CaptureStatus = 'initializing' | 'detecting' | 'capturing' | 'holdOn' | 'optimizing' | 'uploading' | 'uploadError' | 'success';
 type IdCaptureIdleState = {
@@ -583,4 +741,4 @@ declare function createIdCaptureManager(options: CreateIdCaptureActorOptions): M
   deviceWalletUseAnotherMethod(): void;
 };
 //#endregion
-export { processId as A, barcodeToBase64 as C, initializeIdCapture as D, getRealQualityValue as E, validateUploadResponse as F, WasmUtilProvider as I, stopRecording as M, stopStream as N, pauseRecordingForAttempt as O, uploadIdImage as P, addBarcode as S, finalizeRecordingSession as T, IdCaptureInitResult as _, CreateIdCaptureOnlyActorOptions as a, UploadIdImageParams as b, IdCaptureOnlyMachine as c, IdCaptureActor as d, createIdCaptureActor as f, FinalizedIdRecording as g, AddBarcodeParams as h, createIdCaptureManagerFromActor as i, startRecordingSession as j, prepareRecordingForCameraRetry as k, idCaptureOnlyMachine as l, idCaptureMachine as m, IdCaptureManager as n, IdCaptureOnlyActor as o, IdCaptureMachine as p, IdCaptureState as r, createIdCaptureOnlyActor as s, createIdCaptureManager as t, CreateIdCaptureActorOptions as u, InitializeIdCaptureParams as v, disposeRecordingSession as w, ValidationError as x, StartRecordingParams as y };
+export { barcodeToBase64 as A, stopStream as B, FinalizedIdRecording as C, UploadIdImageParams as D, StartRecordingParams as E, pauseRecordingForAttempt as F, validateUploadResponse as H, prepareRecordingForCameraRetry as I, processId as L, finalizeRecordingSession as M, getRealQualityValue as N, ValidationError as O, initializeIdCapture as P, startRecordingSession as R, AddBarcodeParams as S, InitializeIdCaptureParams as T, WasmUtilProvider as U, uploadIdImage as V, CreateIdCaptureActorOptions as _, RenderWalletError as a, IdCaptureMachine as b, DeviceWalletManager as c, CreateDeviceWalletActorOptions as d, CreateIdCaptureOnlyActorOptions as f, idCaptureOnlyMachine as g, IdCaptureOnlyMachine as h, createIdCaptureManagerFromActor as i, disposeRecordingSession as j, addBarcode as k, DeviceWalletState as l, createIdCaptureOnlyActor as m, IdCaptureManager as n, RenderWalletParams as o, IdCaptureOnlyActor as p, IdCaptureState as r, renderWallet as s, createIdCaptureManager as t, createDeviceWalletManager as u, IdCaptureActor as v, IdCaptureInitResult as w, idCaptureMachine as x, createIdCaptureActor as y, stopRecording as z };

package/dist/{idCaptureServices-gm3rsyKd.esm.js → idCaptureServices-BzTcreOa.esm.js}

@@ -1,5 +1,5 @@
-import { t as ensureWasmPipelines } from "./setup-DdHWj_DR.esm.js";
-import { i as numberParam, n as defineExperimentParams, t as booleanParam, u as resolveExperimentOnce } from "./feature-management-DN4TxMxc.esm.js";
+import { t as ensureWasmPipelines } from "./setup-CBwTvRhV.esm.js";
+import { i as numberParam, n as defineExperimentParams, t as booleanParam, u as resolveExperimentOnce } from "./feature-management-DC2LJ0ZF.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { i as isDesktop } from "./platform-DkcRc9JV.esm.js";
@@ -9,7 +9,7 @@ import { l as queryCameraPermission } from "./permissionServices-DIaG8BlW.esm.js
 import { a as isBackFacingTrack, n as getBackCameraStream } from "./backCameraStream-B0-YgP_y.esm.js";
 import { t as getDeviceClass } from "./getDeviceClass-5NYZg9s6.esm.js";
 import { t as MultipartRecordingService } from "./multipartRecordingService-OEgIRvqC.esm.js";
-import { i as CameraCompositor, n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider } from "./idCaptureDefaults-0fKD_ZnW.esm.js";
+import { i as CameraCompositor, n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider } from "./idCaptureDefaults-DoeRxHF8.esm.js";
 //#region src/internal/camera/cameraServices.ts
 function createCameraServices(camera) {
 	return {

package/dist/{idCaptureStateMachine-BRFeInDT.esm.js → idCaptureStateMachine-BaB3MsWL.esm.js}

@@ -1,17 +1,17 @@
-import { c as trueSightHintTransition, l as trueSightLog, m as isTrueSightTesting, r as noteTrueSightCaptureActivity } from "./trueSightService-BY4OYH9f.esm.js";
+import { c as trueSightHintTransition, l as trueSightLog, m as isTrueSightTesting, r as noteTrueSightCaptureActivity } from "./trueSightService-DdGN8biX.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
-import { l as BrowserStorageProvider } from "./setup-DdHWj_DR.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CBwTvRhV.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { s as exposeExperimentOnce } from "./feature-management-DN4TxMxc.esm.js";
+import { s as exposeExperimentOnce } from "./feature-management-DC2LJ0ZF.esm.js";
 import { n as revokeObjectURL, t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { n as eventModuleNames, s as recordExperimentAssignmentOnce } from "./events-ijlbX_Wx.esm.js";
-import { t as getDisableIpify } from "./sessionInitializer-DNyFwDBo.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation, s as recordExperimentAssignmentOnce } from "./events-ijlbX_Wx.esm.js";
+import { t as getDisableIpify } from "./sessionInitializer-Do2m7gBN.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
 import { a as isIOS, s as isIPad, t as isAndroid, u as isMacOsSafari } from "./platform-DkcRc9JV.esm.js";
-import "./session-4d1MA6e0.esm.js";
-import { c as not, i as assign, l as raise, n as enqueueActions, o as and, r as sendTo, t as setup } from "./xstate.esm-Bg3FuvIs.esm.js";
+import "./session-CCmW6Mvk.esm.js";
+import { c as not, i as assign, l as raise, n as enqueueActions, o as and, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
 import { n as getUrlSearchParam, t as buildUrlWithSearchParams } from "./urlUtils-D6phjq1-.esm.js";
 import { r as getCameraReacquisitionConstraints } from "./camera-sIa9ceW2.esm.js";
@@ -24,8 +24,8 @@ import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as getBrowser } from "./getBrowser-Cbe1C4Tn.esm.js";
 import { n as getWindowDimensions } from "./getDeviceClass-CeBiEayS.esm.js";
 import { n as runVirtualCameraCheck, t as frameSources } from "./virtualCameraCheck-Cjab7FTI.esm.js";
-import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider } from "./idCaptureDefaults-0fKD_ZnW.esm.js";
-import { _ as resolveIdCaptureThresholds, a as getRealQualityValue, b as getIdCameraStream, c as prepareRecordingForCameraRetry, d as stopRecording, f as stopStream, h as ID_ERROR_CODES, i as finalizeRecordingSession, l as processId, m as validateUploadResponse, o as initializeIdCapture, p as uploadIdImage, r as disposeRecordingSession, t as addBarcode, u as startRecordingSession, v as CAPTURE_OPTIMIZING, y as OPTIMIZING_WATCHDOG_MARGIN_MS } from "./idCaptureServices-gm3rsyKd.esm.js";
+import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider } from "./idCaptureDefaults-DoeRxHF8.esm.js";
+import { _ as resolveIdCaptureThresholds, a as getRealQualityValue, b as getIdCameraStream, c as prepareRecordingForCameraRetry, d as stopRecording, f as stopStream, h as ID_ERROR_CODES, i as finalizeRecordingSession, l as processId, m as validateUploadResponse, o as initializeIdCapture, p as uploadIdImage, r as disposeRecordingSession, t as addBarcode, u as startRecordingSession, v as CAPTURE_OPTIMIZING, y as OPTIMIZING_WATCHDOG_MARGIN_MS } from "./idCaptureServices-BzTcreOa.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/id/digitalUpload/digitalUploadErrors.ts
 const TERMINAL_FAIL_REASONS = /* @__PURE__ */ new Set(["DIGITAL_ID_REQUESTED_BUT_OTHER_PROVIDED", "ID_TYPE_UNACCEPTABLE"]);
@@ -529,6 +529,222 @@ function resolveWalletPlatform(provider) {
 	return isIOS() || isMacOsSafari() || isIPad() ? "ios" : "android";
 }
 //#endregion
+//#region src/modules/id/deviceWallet/instrumentation.ts
+/**
+* Maps a device-wallet child-machine snapshot to a tracked screen name.
+* Family is `deviceWallet.*` — emitted cross-family under the parent
+* `idCapture` module token, same as `mapDigitalIdScreenName`. See
+* `docs/patterns/INSTRUMENTATION.md`.
+*/
+function mapDeviceWalletScreenName(value, failReason) {
+	if (value === "presenting") return "deviceWallet.wallet.default";
+	if (value === "failed") {
+		if (failReason === "NO_CREDENTIAL") return "deviceWallet.error.nocredential";
+		if (failReason === "UNSUPPORTED_PLATFORM") return "deviceWallet.error.unsupported";
+		return "deviceWallet.error.default";
+	}
+	return "deviceWallet.loading.default";
+}
+//#endregion
+//#region ../infra/src/providers/browser/BrowserDigitalCredentialsProvider.ts
+var BrowserDigitalCredentialsProvider = class {
+	isAvailable() {
+		return typeof navigator !== "undefined" && typeof navigator.credentials?.get === "function" && typeof globalThis.DigitalCredential !== "undefined";
+	}
+	async get(request, options) {
+		return { response: (await navigator.credentials.get({
+			mediation: "required",
+			signal: options?.signal,
+			digital: { requests: [request] }
+		}))?.data?.response };
+	}
+};
+//#endregion
+//#region src/modules/id/deviceWallet/deviceWalletActor.ts
+/**
+* Starts a device-wallet actor for headless use. The ID-Capture parent invokes
+* `deviceWalletMachine` itself (and resolves the platform through the
+* digital-ID funnel); this factory is the standalone entry point for
+* integrators driving the wallet handshake on their own.
+*/
+function createDeviceWalletActor(options = {}) {
+	return createActor(deviceWalletMachine, { input: {
+		platform: resolveWalletPlatform(options.provider),
+		credentials: options.credentials ?? new BrowserDigitalCredentialsProvider(),
+		services: options.services
+	} }).start();
+}
+//#endregion
+//#region src/modules/id/deviceWallet/deviceWalletManager.ts
+/**
+* Absolute tracked-screen name for a device-wallet snapshot. Emitted verbatim
+* on `event.screen` under the parent `idCapture` module token — the wallet is
+* an ID-Capture sub-flow, so it does not own an analytics module of its own
+* (see `docs/patterns/INSTRUMENTATION.md`).
+*/
+function getDeviceWalletScreenName(snapshot) {
+	return mapDeviceWalletScreenName(snapshot.value, snapshot.context?.failReason ?? null);
+}
+function mapState(snapshot) {
+	const typedSnapshot = snapshot;
+	const { context } = typedSnapshot;
+	const { platform } = context;
+	if (typedSnapshot.matches("presenting")) return {
+		status: "presenting",
+		platform
+	};
+	if (typedSnapshot.matches("decrypting")) return {
+		status: "decrypting",
+		platform
+	};
+	if (typedSnapshot.matches("finished") && context.response) return {
+		status: "finished",
+		platform,
+		decision: context.response.decision,
+		response: context.response
+	};
+	if (typedSnapshot.matches("failed")) return {
+		status: "failed",
+		platform,
+		reason: context.failReason ?? "WALLET_ERROR"
+	};
+	if (typedSnapshot.matches("closed")) return {
+		status: "closed",
+		platform
+	};
+	return {
+		status: "requesting",
+		platform
+	};
+}
+function createApi({ actor, trackElementClicked }) {
+	return {
+		/** Restarts the handshake after a failure. Needs a fresh user gesture. */
+		retry() {
+			trackElementClicked?.("retry");
+			actor.send({ type: "RETRY" });
+		},
+		/**
+		* Abandons the wallet path from a failure and moves the manager to
+		* `closed`, so the consumer can fall back to a camera ID capture.
+		*/
+		useAnotherMethod() {
+			trackElementClicked?.("useAnotherMethod");
+			actor.send({ type: "USE_ANOTHER_METHOD" });
+		}
+	};
+}
+/**
+* Creates a headless device-wallet (mDL) manager — the V2 equivalent of V1's
+* `renderWallet`, with the intermediate states observable.
+*
+* Runs the Apple Wallet (web) / Google Wallet handshake with zero Incode UI,
+* so integrators trigger it from their own button and render their own UX.
+* Call it from a user gesture: iOS Safari requires transient user activation
+* for `navigator.credentials.get()`.
+*
+* Requires an initialized session (`setup({ apiURL, token })`) — the request
+* and decrypt calls are session-scoped.
+*
+* @example
+* ```typescript
+* import { setup } from '@incodetech/core';
+* import { createDeviceWalletManager } from '@incodetech/core/id';
+*
+* setup({ apiURL, token });
+*
+* button.addEventListener('click', () => {
+*   const manager = createDeviceWalletManager();
+*   manager.subscribe((state) => {
+*     if (state.status === 'finished') manager.stop();
+*     if (state.status === 'failed') console.error(state.reason);
+*   });
+* });
+* ```
+*/
+function createDeviceWalletManager(options = {}) {
+	return createDeviceWalletManagerFromActor(createDeviceWalletActor(options));
+}
+/**
+* Creates a device-wallet manager from a pre-built actor. Use this when
+* overriding the machine via `.provide()` for custom backends or tests.
+*/
+function createDeviceWalletManagerFromActor(actor) {
+	return createManager({
+		actor,
+		mapState,
+		createApi,
+		instrumentation: createManagerInstrumentation(eventModuleNames.idCapture, { getEventScreenName: getDeviceWalletScreenName })
+	});
+}
+//#endregion
+//#region src/modules/id/deviceWallet/renderWallet.ts
+const FAIL_MESSAGES = {
+	UNSUPPORTED_PLATFORM: "Device wallet is not supported on this platform/browser",
+	NO_CREDENTIAL: "The wallet returned no digital ID credential",
+	WALLET_ERROR: "Device wallet request failed"
+};
+/**
+* Headless device-wallet (mDL) API — the V1 `renderWallet` shape, ported.
+*
+* Runs the Apple Wallet (web) / Google Wallet handshake with zero Incode UI,
+* so integrators trigger it from their own button and render their own UX.
+* Resolves once the handshake settles; the outcome arrives through
+* `onSuccess` / `onError` exactly as in V1.
+*
+* MUST be called from a user gesture (e.g. a click handler) — iOS/Safari
+* requires transient user activation for `navigator.credentials.get()` to
+* present the wallet sheet.
+*
+* Requires an initialized session (`setup({ apiURL, token })`). The verified
+* attributes are NOT returned here: they land in the session and are read back
+* through the standard OCR / score APIs. `onSuccess` receives the submission
+* decision/status.
+*
+* Prefer {@link createDeviceWalletManager} for new integrations — it exposes
+* the intermediate `requesting` / `presenting` / `decrypting` states (and a
+* `retry()`), which this one-shot wrapper collapses.
+*
+* @example
+* ```typescript
+* button.addEventListener('click', () => {
+*   void renderWallet({
+*     onSuccess: (result) => console.log(result.decision),
+*     onError: (error) => console.error(error.code, error.message),
+*   });
+* });
+* ```
+*/
+function renderWallet({ onSuccess, onError, ...actorOptions }) {
+	return new Promise((resolve) => {
+		const manager = createDeviceWalletManager(actorOptions);
+		const subscription = {};
+		let settled = false;
+		const settle = (state) => {
+			if (state.status === "requesting" || state.status === "presenting" || state.status === "decrypting") return false;
+			settled = true;
+			subscription.unsubscribe?.();
+			manager.stop();
+			if (state.status === "finished") onSuccess(state.response);
+			else if (state.status === "failed") onError({
+				code: state.reason,
+				message: FAIL_MESSAGES[state.reason]
+			});
+			else onError({
+				code: "WALLET_ERROR",
+				message: FAIL_MESSAGES.WALLET_ERROR
+			});
+			resolve();
+			return true;
+		};
+		if (settle(manager.getState())) return;
+		subscription.unsubscribe = manager.subscribe((state) => {
+			if (settled) return;
+			settle(state);
+		});
+	});
+}
+//#endregion
 //#region src/modules/id/idCaptureGuards.ts
 function getPermissionOutput(event) {
 	if (!("output" in event)) return;
@@ -1180,7 +1396,7 @@ fromPromise(async ({ input }) => {
 });
 fromPromise(async ({ input }) => {
 	if (!input.dependencies) return;
-	const { loadDeepsightSession } = await import("./deepsightLoader-CKSBVjR-.esm.js");
+	const { loadDeepsightSession } = await import("./deepsightLoader-DZ5jfHnI.esm.js");
 	return loadDeepsightSession({
 		ds: input.ds,
 		storage: input.dependencies.storage,
@@ -1623,7 +1839,7 @@ function cleanup(service) {
 		service.cleanup();
 	} catch {}
 }
-function createIdMetadataPreparationCoordinator(load = async (input) => (await import("./deepsightLoader-CKSBVjR-.esm.js")).loadDeepsightSession(input)) {
+function createIdMetadataPreparationCoordinator(load = async (input) => (await import("./deepsightLoader-DZ5jfHnI.esm.js")).loadDeepsightSession(input)) {
 	let disposed = false;
 	let preparation;
 	let service;
@@ -5061,4 +5277,4 @@ function provideIdProtectedCaptureController(machine, controller) {
 	});
 }
 //#endregion
-export { isRedirectFlowType as a, createIdCaptureOnlyDeliveryActor as c, resolveWalletPlatform as d, DIGITAL_ID_REGISTRY as i, createIdProtectedCaptureController as l, provideIdProtectedCaptureController as n, resolveDigitalIdImplementation as o, DIGITAL_ID_DOCUMENT_TYPES as r, attachIdProtectedCaptureController as s, idCaptureMachine as t, findIdProtectedCaptureController as u };
+export { isRedirectFlowType as a, createIdCaptureOnlyDeliveryActor as c, renderWallet as d, createDeviceWalletManager as f, resolveWalletPlatform as h, DIGITAL_ID_REGISTRY as i, createIdProtectedCaptureController as l, mapDeviceWalletScreenName as m, provideIdProtectedCaptureController as n, resolveDigitalIdImplementation as o, BrowserDigitalCredentialsProvider as p, DIGITAL_ID_DOCUMENT_TYPES as r, attachIdProtectedCaptureController as s, idCaptureMachine as t, findIdProtectedCaptureController as u };

package/dist/identity-reuse.d.ts

@@ -1,2 +1,2 @@
-import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-x2QG6QAm.js";
+import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-D30b2UEC.js";
 export { type FetchDocumentsResponse, type IdentityReuseConfig, type IdentityReuseManager, type IdentityReuseState, type ReusableDocument, SCAN_NEW_DOCUMENT, type SelectedDocumentId, type SubmitResponse, createIdentityReuseManager, createIdentityReuseManagerFromActor, identityReuseMachine };

package/dist/{identityReuseManager-x2QG6QAm.d.ts → identityReuseManager-D30b2UEC.d.ts}

@@ -107,14 +107,14 @@ declare const identityReuseMachine: StateMachine<IdentityReuseContext, {
     type: "setError";
     params: NonReducibleUnknown;
   };
-  setSelectedDocument: {
-    type: "setSelectedDocument";
-    params: NonReducibleUnknown;
-  };
   clearError: {
     type: "clearError";
     params: NonReducibleUnknown;
   };
+  setSelectedDocument: {
+    type: "setSelectedDocument";
+    params: NonReducibleUnknown;
+  };
 }>, Values<{
   hasDocuments: {
     type: "hasDocuments";

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import { i as reset, r as isConfigured, s as setup } from "./setup-DdHWj_DR.esm.js";
+import { i as reset, r as isConfigured, s as setup } from "./setup-CBwTvRhV.esm.js";
 export { isConfigured, reset, setup };

package/dist/mandatory-consent.d.ts

@@ -1,3 +1,3 @@
 import { r as MandatoryConsentConfig } from "./types-C--rKe_Y.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-CTAa9lBQ.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-CMAyZpNe.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-CTAa9lBQ.d.ts → mandatoryConsentManager-CMAyZpNe.d.ts}

@@ -60,14 +60,14 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
     type: "clearError";
     params: NonReducibleUnknown;
   };
-  toggleSigned: {
-    type: "toggleSigned";
-    params: NonReducibleUnknown;
-  };
   resetContext: {
     type: "resetContext";
     params: NonReducibleUnknown;
   };
+  toggleSigned: {
+    type: "toggleSigned";
+    params: NonReducibleUnknown;
+  };
 }>, {
   type: "canSubmit";
   params: unknown;

package/dist/personhood.esm.js

@@ -1,16 +1,16 @@
-import { b as getStoredHttpConfig, w as createApi$1, y as randomUUID } from "./trueSightService-BY4OYH9f.esm.js";
+import { b as getStoredHttpConfig, w as createApi$1, y as randomUUID } from "./trueSightService-DdGN8biX.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
-import { l as BrowserStorageProvider } from "./setup-DdHWj_DR.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CBwTvRhV.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { b as BrowserEnvironmentProvider, h as isBrowserSimulation, n as getFingerprintEnabled, v as getThumbmarkId, y as getDeviceFingerprintInfo } from "./sessionInitializer-DNyFwDBo.esm.js";
+import { b as BrowserEnvironmentProvider, h as isBrowserSimulation, n as getFingerprintEnabled, v as getThumbmarkId, y as getDeviceFingerprintInfo } from "./sessionInitializer-Do2m7gBN.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
 import { i as requestCameraAccess, o as stopCameraStream } from "./camera-sIa9ceW2.esm.js";
 import { a as requestPermission, t as checkPermission } from "./permissionServices-DIaG8BlW.esm.js";
-import { i as initializeDeepsightSession, o as startDetection, s as stopStream, t as FaceDetectionProvider } from "./FaceDetectionProvider-7UfeT1dY.esm.js";
+import { i as initializeDeepsightSession, o as startDetection, s as stopStream, t as FaceDetectionProvider } from "./FaceDetectionProvider-BuuArRWH.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/personhood/personhoodServices.ts

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-V4TYaSvS.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-CVhuhthS.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{runChildModule-Dr5CFawD.esm.js → runChildModule-BXmSYzH5.esm.js}

@@ -1,4 +1,4 @@
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-BY4OYH9f.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-DdGN8biX.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { C as createEventBus } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";

package/dist/{sdkVersion-CyhykVhu.esm.js → sdkVersion-BwSmsU1e.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "0.0.0-dev-20260924-9aba82df";
+const SDK_VERSION = "0.0.0-dev-20260924-e9f5a050";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.esm.js

@@ -1,14 +1,14 @@
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
-import { l as BrowserStorageProvider } from "./setup-DdHWj_DR.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CBwTvRhV.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-BelKNcJz.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-tDf-QZjq.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-DXZqcFhK.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-C7SVm_ws.esm.js";
 import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-BjoMVvya.esm.js";
 import { r as processFace } from "./selfieErrorUtils-yjRptLFi.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CL8gCuwx.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-tuvIeNF7.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-CsrGamdm.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-COimv2A_.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BjzPjJ_p.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base

package/dist/{selfieManager-tuvIeNF7.esm.js → selfieManager-COimv2A_.esm.js}

@@ -1,9 +1,9 @@
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
-import { l as BrowserStorageProvider } from "./setup-DdHWj_DR.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CBwTvRhV.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-tDf-QZjq.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CL8gCuwx.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-C7SVm_ws.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-CsrGamdm.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-CL8gCuwx.esm.js → selfieStateMachine-CsrGamdm.esm.js}

@@ -1,7 +1,7 @@
 import { i as assign } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-BelKNcJz.esm.js";
-import { c as isOnDeviceMode } from "./FaceDetectionProvider-7UfeT1dY.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-DXZqcFhK.esm.js";
+import { c as isOnDeviceMode } from "./FaceDetectionProvider-BuuArRWH.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 import { n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-yjRptLFi.esm.js";
 /**

package/dist/{session-4d1MA6e0.esm.js → session-CCmW6Mvk.esm.js}

@@ -1,8 +1,8 @@
-import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-BY4OYH9f.esm.js";
+import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-DdGN8biX.esm.js";
 import { n as getApi } from "./api-Bx3gKW_y.esm.js";
-import "./sessionInitializer-DNyFwDBo.esm.js";
+import "./sessionInitializer-Do2m7gBN.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { i as toIncodeApiError } from "./apiError-nVzKTbtn.esm.js";
+import { i as toIncodeApiError } from "./apiError-Ly5kgcPk.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic