@incodetech/core 0.0.0-dev-20261019-85aedbc6 → 0.0.0-dev-20261020-4fdb6e30

package/dist/{identityReuseStateMachine-DfV81wQC.esm.js → identityReuseStateMachine-B4e6VCrG.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/identity-reuse/identityReuseServices.ts

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import { i as reset, r as isConfigured, s as setup } from "./setup-B4md_lth.esm.js";
+import { i as reset, r as isConfigured, s as setup } from "./setup-Bn3e6ZFS.esm.js";
 export { isConfigured, reset, setup };

package/dist/{invokeOnCaptureCallback-DYrkOXO6.esm.js → invokeOnCaptureCallback-DraeGfc2.esm.js}

@@ -1,4 +1,4 @@
-import { y as addEvent } from "./events-Du2A4-Qr.esm.js";
+import { y as addEvent } from "./events-D98twgMK.esm.js";
 //#region src/internal/captureOnly/invokeOnCaptureCallback.ts
 /**
 * Invokes an integrator-provided `onCapture` callback with the assembled

package/dist/mandatory-consent.d.ts

@@ -1,3 +1,3 @@
 import { r as MandatoryConsentConfig } from "./types-Ckir_BEs.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-okPILEru.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-BQ43yndC.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/mandatory-consent.esm.js

@@ -1,3 +1,3 @@
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-pXWqAHo_.esm.js";
-import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-Cwqx1nK7.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-DsjIqvJ9.esm.js";
+import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-CAqIt6wt.esm.js";
 export { createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-okPILEru.d.ts → mandatoryConsentManager-BQ43yndC.d.ts}

@@ -56,14 +56,14 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
     type: "setError";
     params: NonReducibleUnknown;
   };
-  clearError: {
-    type: "clearError";
-    params: NonReducibleUnknown;
-  };
   toggleSigned: {
     type: "toggleSigned";
     params: NonReducibleUnknown;
   };
+  clearError: {
+    type: "clearError";
+    params: NonReducibleUnknown;
+  };
   resetContext: {
     type: "resetContext";
     params: NonReducibleUnknown;

package/dist/{mandatoryConsentManager-Cwqx1nK7.esm.js → mandatoryConsentManager-CAqIt6wt.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-D98twgMK.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-pXWqAHo_.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-DsjIqvJ9.esm.js";
 //#region src/modules/mandatory-consent/mandatoryConsentActor.ts
 function createMandatoryConsentActor(options) {
 	return createActor(mandatoryConsentMachine, { input: { config: options.config } }).start();

package/dist/{mandatoryConsentStateMachine-pXWqAHo_.esm.js → mandatoryConsentStateMachine-DsjIqvJ9.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/mandatory-consent/mandatoryConsentServices.ts

package/dist/{multipartRecordingService-DQSNXWnJ.esm.js → multipartRecordingService-CtTauPSp.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { a as isIOS } from "./platform-DkcRc9JV.esm.js";
 import { o as BrowserNetworkStatusProvider } from "./connectivity-HSl0diCx.esm.js";

package/dist/phone.esm.js

@@ -1,3 +1,3 @@
-import { t as phoneMachine } from "./phoneStateMachine-BdkpVdC_.esm.js";
-import { t as createPhoneManager } from "./phoneManager-D606jJ0_.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-gXJD8NRW.esm.js";
+import { t as createPhoneManager } from "./phoneManager-CQBXuOex.esm.js";
 export { createPhoneManager, phoneMachine };

package/dist/{phoneManager-D606jJ0_.esm.js → phoneManager-CQBXuOex.esm.js}

@@ -1,8 +1,8 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-D98twgMK.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as loadPhoneValidation, t as getPhoneValidation } from "./phoneValidation-DnBcNUNh.esm.js";
 import { n as isOtpComplete } from "./otp-D2k3PeSL.esm.js";
-import { t as phoneMachine } from "./phoneStateMachine-BdkpVdC_.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-gXJD8NRW.esm.js";
 //#region src/modules/phone/phoneActor.ts
 function createPhoneActor(options) {
 	return createActor(phoneMachine, { input: { config: options.config } }).start();

package/dist/{phoneStateMachine-BdkpVdC_.esm.js → phoneStateMachine-gXJD8NRW.esm.js}

@@ -1,8 +1,8 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { t as carryAttempts } from "./attemptCarry-BMddDZ5A.esm.js";
+import { t as carryAttempts } from "./attemptCarry-D8p84a3b.esm.js";
 import { n as loadPhoneValidation } from "./phoneValidation-DnBcNUNh.esm.js";
 import { n as isOtpComplete, t as computeOtpValidationErrors } from "./otp-D2k3PeSL.esm.js";
 //#region src/modules/phone/phoneServices.ts

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-Bm-5veg1.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-G9vJ-4cT.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/redirect-to-mobile.esm.js

@@ -1,3 +1,3 @@
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-b-H-ipGM.esm.js";
-import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-uHW3dyuQ.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-DE95zYD3.esm.js";
+import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-u9c-GRQS.esm.js";
 export { createRedirectToMobileManager, createRedirectToMobileManagerFromActor, defaultRedirectToMobileServices, redirectToMobileMachine };

package/dist/{redirectToMobileManager-uHW3dyuQ.esm.js → redirectToMobileManager-u9c-GRQS.esm.js}

@@ -1,8 +1,8 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-D98twgMK.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-b-H-ipGM.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-DE95zYD3.esm.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileActor.ts
 const POLL_INTERVAL_MS = 5e3;
 const QR_REFRESH_INTERVAL_MS = 5e3;

package/dist/{redirectToMobileStateMachine-b-H-ipGM.esm.js → redirectToMobileStateMachine-DE95zYD3.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";

package/dist/{runChildModule-4t__a123.esm.js → runChildModule-DnpPfTcQ.esm.js}

@@ -1,6 +1,6 @@
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { w as createEventBus } from "./events-Du2A4-Qr.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-CivvaoYN.esm.js";
+import { w as createEventBus } from "./events-D98twgMK.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-8jhpuYdN.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/internal/flow-events/flowEvents.ts

package/dist/{sdkVersion-Q_L1l5zd.esm.js → sdkVersion-2pk-smMJ.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "0.0.0-dev-20261019-85aedbc6";
+const SDK_VERSION = "0.0.0-dev-20261020-4fdb6e30";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.esm.js

@@ -1,15 +1,15 @@
-import { u as BrowserStorageProvider } from "./setup-B4md_lth.esm.js";
+import { u as BrowserStorageProvider } from "./setup-Bn3e6ZFS.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames } from "./events-D98twgMK.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-7PPCUxmc.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CJXZNNRo.esm.js";
-import { c as processFace } from "./FaceDetectionProvider-Df4qmsXB.esm.js";
-import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-Dj_LHUvN.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CjM5rC07.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-BU6M3q44.esm.js";
-import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-DYrkOXO6.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-D13GSqvK.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CyKQqMpH.esm.js";
+import { c as processFace } from "./FaceDetectionProvider-BUzA3Xfz.esm.js";
+import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-DeOVMWUZ.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-Cvv2tql3.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-CAPsp6sB.esm.js";
+import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-DraeGfc2.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base
 * face-capture state tree; only the upload/process step is local instead of

package/dist/{selfieErrorUtils-Dl1sas9p.esm.js → selfieErrorUtils-oXui3FHr.esm.js}

@@ -1,4 +1,4 @@
-import { d as FACE_ERROR_CODES } from "./FaceDetectionProvider-Df4qmsXB.esm.js";
+import { d as FACE_ERROR_CODES } from "./FaceDetectionProvider-BUzA3Xfz.esm.js";
 //#region src/modules/selfie/selfieErrorUtils.ts
 const FACE_ERROR_CODE_VALUES = Object.values(FACE_ERROR_CODES);
 const isFaceErrorCode = (value) => {

package/dist/{selfieManager-BU6M3q44.esm.js → selfieManager-CAPsp6sB.esm.js}

@@ -1,9 +1,9 @@
-import { u as BrowserStorageProvider } from "./setup-B4md_lth.esm.js";
+import { u as BrowserStorageProvider } from "./setup-Bn3e6ZFS.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames } from "./events-D98twgMK.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CJXZNNRo.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CjM5rC07.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CyKQqMpH.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-Cvv2tql3.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-CjM5rC07.esm.js → selfieStateMachine-Cvv2tql3.esm.js}

@@ -1,8 +1,8 @@
 import { i as assign } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-7PPCUxmc.esm.js";
-import { c as processFace, d as FACE_ERROR_CODES, f as isOnDeviceMode } from "./FaceDetectionProvider-Df4qmsXB.esm.js";
-import { n as validateUploadResponse } from "./selfieErrorUtils-Dl1sas9p.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-D13GSqvK.esm.js";
+import { c as processFace, d as FACE_ERROR_CODES, f as isOnDeviceMode } from "./FaceDetectionProvider-BUzA3Xfz.esm.js";
+import { n as validateUploadResponse } from "./selfieErrorUtils-oXui3FHr.esm.js";
 /**
 * The selfie capture state machine.
 *

package/dist/{session-DW-AKxI9.esm.js → session-BeOhtQJt.esm.js}

@@ -1,7 +1,7 @@
-import { n as getApi, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-CivvaoYN.esm.js";
-import "./sessionInitializer-CbqzkPea.esm.js";
-import { i as toIncodeApiError } from "./apiError-CQHIP6hu.esm.js";
+import { n as getApi, u as endpoints } from "./api-DibA_Spu.esm.js";
+import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-8jhpuYdN.esm.js";
+import "./sessionInitializer-BN6B9VSX.esm.js";
+import { i as toIncodeApiError } from "./apiError-DQX-8xf0.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic
@@ -14,6 +14,18 @@ const QR_VALIDATION_ERROR_CODES = {
 	invalidQRuuid: 4081,
 	onboardingUrlAlreadyUsed: 4083
 };
+/**
+* Incode status codes `POST /omni/session/continue` rejects a handoff link
+* with (as `IncodeApiError.status`). Trying again does not help: the same link
+* fails the same way.
+*/
+const SESSION_CONTINUE_ERROR_CODES = {
+	invalidUuid: 4026,
+	invalidQrValidation: 4081,
+	continuationPeriodExpired: 4086,
+	continuationLimitReached: 4087,
+	sessionNotActive: 4088
+};
 var QrValidationError = class extends Error {
 	constructor(status, statusText) {
 		super(`POST ${endpoints.qrValidateUuid} failed: ${status} ${statusText}`);
@@ -23,7 +35,14 @@ var QrValidationError = class extends Error {
 	}
 };
 /**
-* Creates a new onboarding session.
+* Creates a new onboarding session, or continues an existing one when
+* `options.uuid` is set (see {@link CreateSessionOptions.uuid}).
+*
+* The server allows a limited number of continues (a server setting, two by
+* default), within 48 hours of the session start. Each successful call with a
+* `uuid` spends one, a reload of the handoff link included. A refused continue
+* throws an `IncodeApiError` whose `status` is one of
+* {@link SESSION_CONTINUE_ERROR_CODES}.
 *
 * @param apiKey - The API key from the Incode dashboard
 * @param options - Session creation options
@@ -40,6 +59,17 @@ var QrValidationError = class extends Error {
 * ```
 */
 async function createSession(apiKey, options, signal) {
+	if (options.uuid) {
+		const session = await continueSession(apiKey, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid
+		}, signal);
+		noteSessionCreated(session, {
+			configurationId: options.configurationId,
+			language: options.language
+		});
+		return session;
+	}
 	try {
 		const session = (await getApi().post(endpoints.createSession, {
 			configurationId: options.configurationId,
@@ -47,7 +77,6 @@ async function createSession(apiKey, options, signal) {
 			externalCustomerId: options.externalCustomerId,
 			language: options.language ?? "en-US",
 			customFields: options.customFields,
-			uuid: options.uuid ?? null,
 			urlUuid: options.urlUuid ?? null,
 			interviewId: options.interviewId ?? null,
 			...options.loginHint != null && options.loginHint !== "" ? { loginHint: options.loginHint } : {}
@@ -71,6 +100,45 @@ async function createSession(apiKey, options, signal) {
 	}
 }
 /**
+* Continues the session behind a desktop→mobile handoff link through
+* `POST /omni/session/continue`. Only `uuid` and `urlUuid` are sent, and the
+* response `sessionId` is returned as `interviewId`. `createSession` and
+* `bootstrapSession` call it when `uuid` is set.
+*
+* Each successful call spends one continue. A refused continue throws an
+* `IncodeApiError` whose `status` is one of {@link SESSION_CONTINUE_ERROR_CODES}.
+*
+* @param apiKey - The API key from the Incode dashboard
+* @param options - The handoff link's `uuid` and `urlUuid`
+* @param signal - Optional AbortSignal for request cancellation
+* @returns The continued session with token
+*/
+async function continueSession(apiKey, options, signal) {
+	try {
+		const { sessionId, token, endScreenTitle, endScreenText } = (await getApi().post(endpoints.sessionContinue, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid ?? null
+		}, {
+			headers: {
+				"x-api-key": apiKey,
+				"api-version": "1.0"
+			},
+			signal
+		})).data;
+		const session = {
+			token,
+			interviewId: sessionId,
+			endScreenTitle,
+			endScreenText
+		};
+		noteSessionCreated(session);
+		trueSightLog("info", "session", "orchestration", "session continued");
+		return session;
+	} catch (error) {
+		toIncodeApiError(endpoints.sessionContinue, error);
+	}
+}
+/**
 * Validates and rotates a QR anti-phishing URL UUID before creating a session.
 *
 * This call is unauthenticated; the `{ onboardingId, urlUuid }` pair itself
@@ -121,8 +189,8 @@ async function refreshQrUrlUuid(options, signal) {
 }
 /**
 * Validates and rotates a QR anti-phishing `urlUuid` (when present), then
-* creates a session bound to the refreshed value. When `urlUuid` is absent,
-* behaves identically to {@link createSession}.
+* creates (or, with `uuid`, continues) a session bound to the refreshed value.
+* When `urlUuid` is absent, behaves identically to {@link createSession}.
 *
 * Use this when the host owns session creation and wants the SDK to handle
 * phishing-resistance rotation in a single call. For raw control, compose
@@ -156,4 +224,4 @@ async function bootstrapSession(apiKey, options, signal) {
 	}, signal);
 }
 //#endregion
-export { refreshQrUrlUuid as a, createSession as i, QrValidationError as n, validateQrUuid as o, bootstrapSession as r, QR_VALIDATION_ERROR_CODES as t };
+export { continueSession as a, validateQrUuid as c, bootstrapSession as i, QrValidationError as n, createSession as o, SESSION_CONTINUE_ERROR_CODES as r, refreshQrUrlUuid as s, QR_VALIDATION_ERROR_CODES as t };

package/dist/session.d.ts

@@ -4,7 +4,10 @@ import { n as FinishStatus, r as GetFinishStatusFn, s as getFinishStatus } from
 type CreateSessionOptions = {
   /** The configuration/flow ID from the Incode dashboard */
   configurationId: string;
-  /** External ID to associate with this session */
+  /**
+   * External ID to associate with this session.
+   * @deprecated
+   */
   externalId?: string;
   /** External customer ID */
   externalCustomerId?: string;
@@ -12,15 +15,28 @@ type CreateSessionOptions = {
   language?: string;
   /** Custom fields to attach to the session */
   customFields?: Record<string, unknown>;
-  /** UUID for continuing an existing session */
+  /**
+   * Onboarding-link UUID (the `uuid` of a desktop→mobile handoff link). When
+   * set, the session is continued through `POST /omni/session/continue`
+   * instead of started, and only `uuid` and `urlUuid` are sent.
+   */
   uuid?: string;
   /** QR anti-phishing token for continuing a phishing-resistant session from a mobile link */
   urlUuid?: string;
-  /** Interview ID for continuing an existing interview */
+  /**
+   * Interview ID for continuing an existing interview.
+   * @deprecated
+   */
   interviewId?: string;
   /** Hint forwarded to POST /omni/start as `loginHint` (e.g. from `auth_hint` URL param for identity search). */
   loginHint?: string;
 };
+type ContinueSessionOptions = {
+  /** Onboarding-link UUID: the `uuid` of a desktop→mobile handoff link. */
+  uuid: string;
+  /** QR anti-phishing token from the link, already rotated by {@link refreshQrUrlUuid}. */
+  urlUuid?: string;
+};
 type Session = {
   token: string;
   interviewId: string;
@@ -49,6 +65,18 @@ declare const QR_VALIDATION_ERROR_CODES: {
   readonly onboardingUrlAlreadyUsed: 4083;
 };
 type QrValidationErrorCode = (typeof QR_VALIDATION_ERROR_CODES)[keyof typeof QR_VALIDATION_ERROR_CODES];
+/**
+ * Incode status codes `POST /omni/session/continue` rejects a handoff link
+ * with (as `IncodeApiError.status`). Trying again does not help: the same link
+ * fails the same way.
+ */
+declare const SESSION_CONTINUE_ERROR_CODES: {
+  readonly invalidUuid: 4026;
+  readonly invalidQrValidation: 4081;
+  readonly continuationPeriodExpired: 4086;
+  readonly continuationLimitReached: 4087;
+  readonly sessionNotActive: 4088;
+};
 type RefreshQrUrlUuidOptions = {
   /** QR anti-phishing token from the incoming URL. When empty/undefined, the call is a no-op. */
   urlUuid?: string;
@@ -68,7 +96,14 @@ declare class QrValidationError extends Error {
   constructor(status: number, statusText: string);
 }
 /**
- * Creates a new onboarding session.
+ * Creates a new onboarding session, or continues an existing one when
+ * `options.uuid` is set (see {@link CreateSessionOptions.uuid}).
+ *
+ * The server allows a limited number of continues (a server setting, two by
+ * default), within 48 hours of the session start. Each successful call with a
+ * `uuid` spends one, a reload of the handoff link included. A refused continue
+ * throws an `IncodeApiError` whose `status` is one of
+ * {@link SESSION_CONTINUE_ERROR_CODES}.
  *
  * @param apiKey - The API key from the Incode dashboard
  * @param options - Session creation options
@@ -85,6 +120,21 @@ declare class QrValidationError extends Error {
  * ```
  */
 declare function createSession(apiKey: string, options: CreateSessionOptions, signal?: AbortSignal): Promise<Session>;
+/**
+ * Continues the session behind a desktop→mobile handoff link through
+ * `POST /omni/session/continue`. Only `uuid` and `urlUuid` are sent, and the
+ * response `sessionId` is returned as `interviewId`. `createSession` and
+ * `bootstrapSession` call it when `uuid` is set.
+ *
+ * Each successful call spends one continue. A refused continue throws an
+ * `IncodeApiError` whose `status` is one of {@link SESSION_CONTINUE_ERROR_CODES}.
+ *
+ * @param apiKey - The API key from the Incode dashboard
+ * @param options - The handoff link's `uuid` and `urlUuid`
+ * @param signal - Optional AbortSignal for request cancellation
+ * @returns The continued session with token
+ */
+declare function continueSession(apiKey: string, options: ContinueSessionOptions, signal?: AbortSignal): Promise<Session>;
 /**
  * Validates and rotates a QR anti-phishing URL UUID before creating a session.
  *
@@ -115,8 +165,8 @@ declare function validateQrUuid(options: ValidateQrUuidOptions, signal?: AbortSi
 declare function refreshQrUrlUuid(options: RefreshQrUrlUuidOptions, signal?: AbortSignal): Promise<string | undefined>;
 /**
  * Validates and rotates a QR anti-phishing `urlUuid` (when present), then
- * creates a session bound to the refreshed value. When `urlUuid` is absent,
- * behaves identically to {@link createSession}.
+ * creates (or, with `uuid`, continues) a session bound to the refreshed value.
+ * When `urlUuid` is absent, behaves identically to {@link createSession}.
  *
  * Use this when the host owns session creation and wants the SDK to handle
  * phishing-resistance rotation in a single call. For raw control, compose
@@ -291,4 +341,4 @@ declare function isConnectivityLost(): boolean;
  */
 declare function resumeConnectivity(): boolean;
 //#endregion
-export { type BootstrapSessionOptions, type CreateSessionOptions, type DeviceFingerprintResult, type FinishStatus, type GetFinishStatusFn, IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, type QrValidationErrorCode, type QrValidationResult, type RefreshQrUrlUuidOptions, type Session, SessionExpiredError, type SessionInitOptions, type SessionInitResult, type ValidateQrUuidOptions, bootstrapSession, createSession, getFinishStatus, initializeSession, isConnectivityLost, onConnectivityChange, onSessionExpired, refreshQrUrlUuid, resumeConnectivity, validateQrUuid, whenSessionFingerprintSettled };
+export { type BootstrapSessionOptions, type ContinueSessionOptions, type CreateSessionOptions, type DeviceFingerprintResult, type FinishStatus, type GetFinishStatusFn, IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, type QrValidationErrorCode, type QrValidationResult, type RefreshQrUrlUuidOptions, SESSION_CONTINUE_ERROR_CODES, type Session, SessionExpiredError, type SessionInitOptions, type SessionInitResult, type ValidateQrUuidOptions, bootstrapSession, continueSession, createSession, getFinishStatus, initializeSession, isConnectivityLost, onConnectivityChange, onSessionExpired, refreshQrUrlUuid, resumeConnectivity, validateQrUuid, whenSessionFingerprintSettled };

package/dist/session.esm.js

@@ -1,10 +1,10 @@
-import { r as getToken } from "./api-Cz90EHyu.esm.js";
+import { r as getToken } from "./api-DibA_Spu.esm.js";
 import { r as subscribeHttpErrors } from "./HttpRequestError-Bh0pNGSC.esm.js";
-import { i as initializeSession, l as whenSessionFingerprintSettled } from "./sessionInitializer-CbqzkPea.esm.js";
+import { i as initializeSession, l as whenSessionFingerprintSettled } from "./sessionInitializer-BN6B9VSX.esm.js";
 import { n as onConnectivityChange, r as resumeConnectivity, t as isConnectivityLost } from "./connectivity-HSl0diCx.esm.js";
-import { t as IncodeApiError } from "./apiError-CQHIP6hu.esm.js";
-import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-DW-AKxI9.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-BeNd5fI4.esm.js";
+import { t as IncodeApiError } from "./apiError-DQX-8xf0.esm.js";
+import { a as continueSession, c as validateQrUuid, i as bootstrapSession, n as QrValidationError, o as createSession, r as SESSION_CONTINUE_ERROR_CODES, s as refreshQrUrlUuid, t as QR_VALIDATION_ERROR_CODES } from "./session-BeOhtQJt.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-ko1tsdfm.esm.js";
 //#region src/internal/session/sessionExpired.ts
 var SessionExpiredError = class extends Error {
 	constructor() {
@@ -28,4 +28,4 @@ function onSessionExpired(listener) {
 	return unsubscribe;
 }
 //#endregion
-export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, SessionExpiredError, bootstrapSession, createSession, getFinishStatus, initializeSession, isConnectivityLost, onConnectivityChange, onSessionExpired, refreshQrUrlUuid, resumeConnectivity, validateQrUuid, whenSessionFingerprintSettled };
+export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, SESSION_CONTINUE_ERROR_CODES, SessionExpiredError, bootstrapSession, continueSession, createSession, getFinishStatus, initializeSession, isConnectivityLost, onConnectivityChange, onSessionExpired, refreshQrUrlUuid, resumeConnectivity, validateQrUuid, whenSessionFingerprintSettled };

package/dist/{sessionInitializer-CbqzkPea.esm.js → sessionInitializer-BN6B9VSX.esm.js}

@@ -1,9 +1,9 @@
-import { C as subscribeEvent, b as getAnalyticsBatcher, y as addEvent } from "./events-Du2A4-Qr.esm.js";
-import { c as setToken, r as getToken, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { C as noteTokenActivated, _ as isFeatureEnabled, b as noteEnvironment, c as startTrueSightCollection, g as fetchFeatureConfig, u as trueSightLog, v as resetFeatureConfigCache } from "./trueSightService-CivvaoYN.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-Q_L1l5zd.esm.js";
-import { E as updateFeatureManagementUser } from "./feature-management-CYKUe07p.esm.js";
-import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-BEvexnKC.esm.js";
+import { C as subscribeEvent, b as getAnalyticsBatcher, y as addEvent } from "./events-D98twgMK.esm.js";
+import { c as setToken, r as getToken, t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
+import { C as noteTokenActivated, _ as isFeatureEnabled, b as noteEnvironment, c as startTrueSightCollection, g as fetchFeatureConfig, u as trueSightLog, v as resetFeatureConfigCache } from "./trueSightService-8jhpuYdN.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-2pk-smMJ.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-BlPsdK6I.esm.js";
+import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-BJO0RcTZ.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-DhQPeKqw.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
 import { a as isIOS } from "./platform-DkcRc9JV.esm.js";

package/dist/{setup-B4md_lth.esm.js → setup-Bn3e6ZFS.esm.js}

@@ -1,16 +1,16 @@
 import { P as setWasmIntegrityObserver, _ as setWasmDiagnosticsHandler, w as resolveWasmConfig, y as DEFAULT_WASM_VERSION } from "./wasmWebClient-BjZw_7OB.esm.js";
 import { a as setWasmOnDeviceMode, d as drainWasmDiagnostics, f as getWasmDiagnosticsMode, n as getWarmupFacts, p as rearmWasmDiagnostics, s as warmupWasm } from "./warmup-BElYWRh7.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { S as setAnalyticsBatcher, b as getAnalyticsBatcher, c as resetExperimentAssignments, v as createAnalyticsBatchingService, x as resetAnalyticsBatcher } from "./events-Du2A4-Qr.esm.js";
-import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-CivvaoYN.esm.js";
-import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp, x as fingerprintSignalsReporter } from "./sessionInitializer-CbqzkPea.esm.js";
+import { S as setAnalyticsBatcher, b as getAnalyticsBatcher, c as resetExperimentAssignments, v as createAnalyticsBatchingService, x as resetAnalyticsBatcher } from "./events-D98twgMK.esm.js";
+import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
+import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-8jhpuYdN.esm.js";
+import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp, x as fingerprintSignalsReporter } from "./sessionInitializer-BN6B9VSX.esm.js";
 import { t as resolveLocalStorage } from "./safeStorage-UxDrnjwa.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-CYKUe07p.esm.js";
-import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-BlPsdK6I.esm.js";
+import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BJO0RcTZ.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-xzRLIIMN.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-DMHy0Gy0.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-Df-LxNoR.esm.js";
 //#region ../infra/src/wasm/wasmRuntimeProfile.ts
 /**
 * The WASM facts TrueSight reports as `session.webProfile.wasm`

package/dist/signature.esm.js

@@ -1,3 +1,3 @@
-import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
-import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-f_dPAGXn.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-D4-juDs9.esm.js";
+import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-N-SHTwT-.esm.js";
 export { createSignatureManager, createSignatureManagerFromActor, signatureMachine };

package/dist/{signatureManager-f_dPAGXn.esm.js → signatureManager-N-SHTwT-.esm.js}

@@ -1,7 +1,7 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-D98twgMK.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-D4-juDs9.esm.js";
 //#region src/modules/signature/signatureActor.ts
 function createSignatureActor(options) {
 	return createActor(signatureMachine, { input: { config: options.config } }).start();

package/dist/{signatureStateMachine-C-nUq_oq.esm.js → signatureStateMachine-D4-juDs9.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/signature/signatureServices.ts

package/dist/{stats-BEvexnKC.esm.js → stats-BJO0RcTZ.esm.js}

@@ -1,4 +1,4 @@
-import { r as getToken, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { r as getToken, t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
 //#region src/modules/stats/statsServices.ts
 const deviceStatsQueue = [];
 async function postDeviceStatsNow(stats) {

package/dist/stats.esm.js

@@ -1,2 +1,2 @@
-import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
+import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BJO0RcTZ.esm.js";
 export { addDeviceStats, flushDeviceStatsQueue, resetDeviceStatsQueue };

package/dist/{trueSightService-CivvaoYN.esm.js → trueSightService-8jhpuYdN.esm.js}

@@ -1,8 +1,8 @@
 import { a as setWebApiHttpTransport, g as emitWasmDiagnostic, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError, w as resolveWasmConfig } from "./wasmWebClient-BjZw_7OB.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { C as subscribeEvent, n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
-import { i as isApiConfigured, l as withTiming, n as getApi, o as setClient, r as getToken, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-Q_L1l5zd.esm.js";
+import { C as subscribeEvent, n as eventModuleNames } from "./events-D98twgMK.esm.js";
+import { i as isApiConfigured, l as withTiming, n as getApi, o as setClient, r as getToken, t as api, u as endpoints } from "./api-DibA_Spu.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-2pk-smMJ.esm.js";
 import { n as reportHttpError, t as HttpRequestError } from "./HttpRequestError-Bh0pNGSC.esm.js";
 /** Dirty-timer half of the interrupted-snapshot rebuild debounce (module boundaries + timer). */
 const SNAPSHOT_DIRTY_INTERVAL_MS = 15e3;
@@ -1389,7 +1389,7 @@ function categoryForEndpoint(endpoint) {
 	if (/\/omni\/es\//.test(endpoint)) return "other";
 	if (/face|selfie|video|speech|personhood|authenticate|recordings/.test(endpoint)) return "faceScan";
 	if (/front-id|back-id|second-id|process\/id|images|barcode|ocr|document|curp|cfdi|address-statement|digital-id|device\/wallet/.test(endpoint)) return "idScan";
-	if (/start|flow|workflow|feature-config|onboarding|finish-status/.test(endpoint)) return "orchestration";
+	if (/start|session\/continue|flow|workflow|feature-config|onboarding|finish-status/.test(endpoint)) return "orchestration";
 	return "other";
 }
 /** Coarse contract category from the RAW `event.module` value (plan rule). */

package/dist/trust-graph.esm.js

@@ -1,4 +1,4 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-D98twgMK.esm.js";
 import { s as createActor, t as setup, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 //#region src/modules/trust-graph/trustGraphStateMachine.ts
 /**