@incodetech/core 2.1.0-rc.0 → 2.1.0-rc.2

package/dist/{setup-BbkprdVv.d.ts → setup-BJZAkajt.d.ts}

@@ -1,4 +1,5 @@
-import { n as WasmPipeline } from "./warmup-Dg8Lh-50.js";
+import { n as WasmPipeline } from "./warmup--6HA3yUR.js";
+import { s as TransactionalRiskIntelligenceSetupConfig } from "./index-52_qi4bd.js";
 
 //#region src/setup.d.ts
 
@@ -37,6 +38,14 @@ type WasmConfig = {
    * If not provided, models are expected in a 'models' subdirectory relative to the WASM binary.
    */
   modelsBasePath?: string;
+  /**
+   * Enables the WASM module's verbose debug logging/console output.
+   *
+   * Defaults to `false` — the SDK forces WASM into production mode, so the
+   * native module stays quiet. Set to `true` only when you need the WASM
+   * diagnostics while debugging.
+   */
+  showLogs?: boolean;
 };
 /**
  * Object form of the `encryption` option for {@link SetupOptions}. Reach for
@@ -154,6 +163,40 @@ type SetupOptions = {
    * (lookup enabled).
    */
   ipLookup?: boolean;
+  /**
+   * Disables the browser devtools detector for local development. When `true`,
+   * the detector is **not** started, so devtools no longer gets repeatedly
+   * paused on the detector's `debugger` statements.
+   *
+   * Leave this `false` (default) in production: the detector feeds an
+   * anti-fraud signal and should stay on for real users.
+   *
+   * Note: WASM console logging is controlled separately via `wasm.showLogs`
+   * (off by default).
+   */
+  devMode?: boolean;
+  /**
+   * Transactional Risk Intelligence (TRI) telemetry configuration.
+   *
+   * TRI starts during `setup()` only when **both** `token` and `apiURL` are
+   * present in the supplied config object. Omitting `tri`, or providing `tri`
+   * without either required field, is the implicit opt-out — no warning is
+   * emitted and no collectors are started.
+   *
+   * `setup()` emits a `[TRI]` console warning when `tri` is provided as an
+   * object but a required field is missing:
+   * - `token` absent — add `tri.token` (a short-lived SDK token obtained from
+   *   `createTRISession`; never pass the organization API key directly).
+   * - `apiURL` absent — add `tri.apiURL` (the TRI ingest endpoint URL).
+   *
+   * `autostart` controls whether `setup()` also calls `startTRI` after
+   * `setupTRI`. Omit it (or pass `true`) for the default boot-time start.
+   * Pass `autostart: false` when you need to defer collection — for example,
+   * until after a consent gate — `setup()` will still resolve the config and
+   * call `setupTRI` so the SDK is ready; call `startTRI()` yourself when
+   * collection should begin.
+   */
+  tri?: TransactionalRiskIntelligenceSetupConfig;
 };
 /**
  * Initializes the SDK with the provided configuration.
@@ -258,6 +301,38 @@ type SetupOptions = {
  *   ipLookup: false,
  * });
  * ```
+ *
+ * @example Local development: silence the devtools detector and surface WASM logs
+ * ```ts
+ * await setup({
+ *   apiURL: 'https://api.incode.com',
+ *   wasm: { showLogs: true }, // WASM logs are off by default
+ *   devMode: true, // skip the devtools detector (don't ship this in prod)
+ * });
+ * ```
+ * @example Enable TRI — exchange the API key for an SDK token first, then pass it to setup
+ * ```ts
+ * const session = await createTRISession(process.env.INCODE_API_KEY, {
+ *   apiURL: process.env.INCODE_TRI_API_URL,
+ * });
+ *
+ * await setup({
+ *   apiURL: 'https://api.incode.com',
+ *   tri: { token: session.token, apiURL: process.env.INCODE_TRI_API_URL },
+ * });
+ * ```
+ *
+ * @example Defer TRI collection until after a consent gate
+ * ```ts
+ * // Boot without starting collectors:
+ * await setup({
+ *   apiURL: 'https://api.incode.com',
+ *   tri: { token: session.token, apiURL: process.env.INCODE_TRI_API_URL, autostart: false },
+ * });
+ *
+ * // somewhere else in the code
+ * await startTRI();
+ * ```
  */
 declare function setup(options: SetupOptions): Promise<void>;
 /**

package/dist/{setup-BqEfrdja.esm.js → setup-C7tintPc.esm.js}

@@ -1,10 +1,11 @@
-import { a as WasmWebClientError, c as setWebApiHttpTransport, f as deriveSiblingJsPath, l as setupWasmConnection, o as executeWasmRequest, r as warmupWasm, s as initializeWasmWebClient, t as WasmUtilProvider } from "./WasmUtilProvider-CiEN7Gjn.esm.js";
-import { t as BrowserTimerProvider } from "./BrowserTimerProvider-DhNc_x02.esm.js";
-import { a as resetApi, i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-CESGtpbH.esm.js";
-import { _ as resetAnalyticsBatcher, g as getAnalyticsBatcher, m as createAnalyticsBatchingService, v as setAnalyticsBatcher } from "./events-Dvvriq9l.esm.js";
-import { t as endpoints } from "./endpoints-BeTK0Mlt.esm.js";
-import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BMNUG1AU.esm.js";
-import { a as setClientIpLookupEnabled, i as resetSessionInit, r as initializeSession } from "./sessionInitializer-B8H5MsXM.esm.js";
+import { a as WasmWebClientError, c as setWebApiHttpTransport, f as deriveSiblingJsPath, l as setupWasmConnection, o as executeWasmRequest, r as warmupWasm, s as initializeWasmWebClient, t as WasmUtilProvider } from "./WasmUtilProvider-CIu373BZ.esm.js";
+import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BVgutW_b.esm.js";
+import { a as resetApi, i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-DUZwyz0o.esm.js";
+import { _ as getAnalyticsBatcher, h as createAnalyticsBatchingService, v as resetAnalyticsBatcher, y as setAnalyticsBatcher } from "./events-DN-u67gb.esm.js";
+import { t as endpoints } from "./endpoints-BM2_j_IE.esm.js";
+import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DntyIiGr.esm.js";
+import { a as setClientIpLookupEnabled, i as resetSessionInit, r as initializeSession } from "./sessionInitializer-CaiGA8GP.esm.js";
+import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-CtxWthxz.esm.js";
 
 //#region ../infra/src/wasm/wasmDefaults.ts
 const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
@@ -913,6 +914,38 @@ let configured = false;
 *   ipLookup: false,
 * });
 * ```
+*
+* @example Local development: silence the devtools detector and surface WASM logs
+* ```ts
+* await setup({
+*   apiURL: 'https://api.incode.com',
+*   wasm: { showLogs: true }, // WASM logs are off by default
+*   devMode: true, // skip the devtools detector (don't ship this in prod)
+* });
+* ```
+* @example Enable TRI — exchange the API key for an SDK token first, then pass it to setup
+* ```ts
+* const session = await createTRISession(process.env.INCODE_API_KEY, {
+*   apiURL: process.env.INCODE_TRI_API_URL,
+* });
+*
+* await setup({
+*   apiURL: 'https://api.incode.com',
+*   tri: { token: session.token, apiURL: process.env.INCODE_TRI_API_URL },
+* });
+* ```
+*
+* @example Defer TRI collection until after a consent gate
+* ```ts
+* // Boot without starting collectors:
+* await setup({
+*   apiURL: 'https://api.incode.com',
+*   tri: { token: session.token, apiURL: process.env.INCODE_TRI_API_URL, autostart: false },
+* });
+*
+* // somewhere else in the code
+* await startTRI();
+* ```
 */
 async function setup(options) {
 	if (options.ipLookup !== void 0) setClientIpLookupEnabled(options.ipLookup);
@@ -945,12 +978,16 @@ async function setup(options) {
 	configured = true;
 	if (effectiveWasm) {
 		await warmupWasm(effectiveWasm);
-		await (await WasmUtilProvider.getInstance()).initialize({
+		const provider = await WasmUtilProvider.getInstance();
+		await provider.initialize({
 			...effectiveWasm,
 			pipelines: effectiveWasm.pipelines ? [...effectiveWasm.pipelines] : void 0
 		});
-		startDevtoolsDetector();
+		const showWasmLogs = typeof options.wasm === "object" && options.wasm.showLogs === true;
+		await provider.setProductionMode(!showWasmLogs);
+		if (!options.devMode) startDevtoolsDetector();
 	}
+	if (options.tri) await initializeTRI(options.tri, { sessionToken: options.token });
 }
 /**
 * Sets the WASM configuration without performing warmup.
@@ -1016,9 +1053,11 @@ function reset() {
 	setClientIpLookupEnabled(true);
 	resetAnalyticsBatcher();
 	resetHttpClientState();
+	resetTRI();
 	configured = false;
 	wasmConfig = void 0;
 	WasmUtilProvider.resetInstance();
+	resetTRIProviderInstance();
 }
 
 //#endregion

package/dist/signature.d.ts

@@ -1,5 +1,5 @@
-import { t as Manager } from "./Manager-BHn8wH8K.js";
-import "./Actor-Y0_Fj-KL.js";
+import { t as Manager } from "./Manager-B2OEDYqf.js";
+import "./Actor-fIPLXfoi.js";
 
 //#region src/modules/signature/types.d.ts
 /**
@@ -59,6 +59,7 @@ type CreateSignatureActorOptions = {
 };
 //#endregion
 //#region src/modules/signature/signatureManager.d.ts
+
 type SignatureIdleState = {
   status: 'idle';
 };

package/dist/signature.esm.js

@@ -1,8 +1,8 @@
-import "./api-CESGtpbH.esm.js";
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dvvriq9l.esm.js";
-import "./endpoints-BeTK0Mlt.esm.js";
-import { c as createManager, s as createActor } from "./xstate.esm-C9wncMQa.esm.js";
-import { t as signatureMachine } from "./signatureStateMachine-C5qqYLRz.esm.js";
+import "./api-DUZwyz0o.esm.js";
+import { n as eventModuleNames, o as topLevelStateName, s as createManagerInstrumentation } from "./events-DN-u67gb.esm.js";
+import "./endpoints-BM2_j_IE.esm.js";
+import { c as createManager, s as createActor } from "./xstate.esm-Dkm1jy5u.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-DAxXmMrk.esm.js";
 
 //#region src/modules/signature/signatureActor.ts
 function createSignatureActor(options) {
@@ -11,6 +11,48 @@ function createSignatureActor(options) {
 
 //#endregion
 //#region src/modules/signature/signatureManager.ts
+/**
+* Maps a signature state-machine snapshot to the exact Figma "Tracked
+* Events" screen name. Returned strings are the Figma-verbatim absolute
+* analytics path (module prefix included), emitted as-is on `event.screen`
+* by `createManagerInstrumentation`'s `getEventScreenName` path. See
+* `docs/patterns/INSTRUMENTATION.md`.
+*
+* Source of truth: Electronic Signature Figma file → Tracked Events canvas
+* (`https://www.figma.com/design/kUsDigsC8Mq1WobTewF0R6/Electronic-Signature---Latest-Design?node-id=4268-3602`).
+* Section names are taken as canonical — note the canvas mixes
+* `eSign.writeSignature.*` for the `default`/`completed` screens with
+* `eSign.writeYourSignature.success` (without the `Signature` collapse) for
+* the success surface; both spellings are preserved verbatim.
+*
+* State → screen mapping rationale:
+*
+* - `idle`/`captureSignature` collapse to `eSign.writeSignature.default` —
+*   the state machine stays in `captureSignature` throughout drawing (stroke
+*   validity changes via `SIGNATURE_CHANGED` are context-only and don't fire
+*   a new `screenOpened`). The `eSign.writeSignature.completed` Figma surface
+*   is therefore the post-submit "signed canvas while we wait for the API"
+*   surface, mapped to `submittingSignature`.
+* - `success`/`finished` both map to `eSign.writeYourSignature.success` so
+*   the terminal `finished` state stays on the visible success canvas rather
+*   than falling back to the generic `<module>.finished` default.
+* - `error` is intentionally unmapped — the Figma canvas does not define a
+*   dedicated error screen yet. The adapter falls back to the generic
+*   `eSign.error` default, which `errorTriggered` consumers can still
+*   correlate against the error payload.
+*/
+function getSignatureScreenName(snapshot) {
+	const stateName = topLevelStateName(snapshot.value);
+	if (stateName === void 0) return void 0;
+	switch (stateName) {
+		case "idle":
+		case "captureSignature": return "eSign.writeSignature.default";
+		case "submittingSignature": return "eSign.writeSignature.completed";
+		case "success":
+		case "finished": return "eSign.writeYourSignature.success";
+		default: return;
+	}
+}
 function mapState(snapshot) {
 	const typedSnapshot = snapshot;
 	const { context } = typedSnapshot;
@@ -58,7 +100,7 @@ function createSignatureManager(options) {
 		actor: createSignatureActor(options),
 		mapState,
 		createApi,
-		instrumentation: createManagerInstrumentation(eventModuleNames.signature)
+		instrumentation: createManagerInstrumentation(eventModuleNames.signature, { getEventScreenName: getSignatureScreenName })
 	});
 }
 

package/dist/{signatureStateMachine-C5qqYLRz.esm.js → signatureStateMachine-DAxXmMrk.esm.js}

@@ -1,7 +1,6 @@
-import { t as api } from "./api-CESGtpbH.esm.js";
-import { h as addEvent, n as eventModuleNames, r as eventScreenNames } from "./events-Dvvriq9l.esm.js";
-import { t as endpoints } from "./endpoints-BeTK0Mlt.esm.js";
-import { a as fromPromise, r as assign, t as setup } from "./xstate.esm-C9wncMQa.esm.js";
+import { t as api } from "./api-DUZwyz0o.esm.js";
+import { t as endpoints } from "./endpoints-BM2_j_IE.esm.js";
+import { a as fromPromise, r as assign, t as setup } from "./xstate.esm-Dkm1jy5u.esm.js";
 
 //#region src/modules/signature/signatureServices.ts
 /**
@@ -68,21 +67,7 @@ const signatureMachine = setup({
 			isValid: () => false,
 			image: () => void 0,
 			error: () => void 0
-		}),
-		trackSubmitAttempt: () => {
-			addEvent({
-				code: "continue",
-				module: eventModuleNames.signature,
-				screen: eventScreenNames.signatureInput
-			});
-		},
-		trackError: ({ context }) => {
-			addEvent({
-				code: "verificationError",
-				module: eventModuleNames.signature,
-				payload: context.error ? { error: context.error } : void 0
-			});
-		}
+		})
 	},
 	guards: { canContinue: ({ context, event }) => context.isValid && event.type === "CONTINUE" && !!event.image }
 }).createMachine({
@@ -102,29 +87,26 @@ const signatureMachine = setup({
 				actions: "assignImageForSubmit"
 			}
 		} },
-		submittingSignature: {
-			entry: "trackSubmitAttempt",
-			invoke: {
-				id: "submitSignature",
-				src: "submitSignature",
-				input: ({ context }) => ({
-					image: context.image,
-					type: context.config.type,
-					sendBase64: context.config.sendBase64 ?? false
-				}),
-				onDone: {
-					target: "success",
-					actions: "setSignatureSubmitResult"
-				},
-				onError: {
-					target: "error",
-					actions: "setErrorFromInvoke"
-				}
+		submittingSignature: { invoke: {
+			id: "submitSignature",
+			src: "submitSignature",
+			input: ({ context }) => ({
+				image: context.image,
+				type: context.config.type,
+				sendBase64: context.config.sendBase64 ?? false
+			}),
+			onDone: {
+				target: "success",
+				actions: "setSignatureSubmitResult"
+			},
+			onError: {
+				target: "error",
+				actions: "setErrorFromInvoke"
 			}
-		},
+		} },
 		success: { after: { 3e3: "finished" } },
 		finished: { type: "final" },
-		error: { entry: "trackError" }
+		error: {}
 	}
 });
 

package/dist/{stats-BMNUG1AU.esm.js → stats-DntyIiGr.esm.js}

@@ -1,5 +1,5 @@
-import { r as getToken, t as api } from "./api-CESGtpbH.esm.js";
-import { t as endpoints } from "./endpoints-BeTK0Mlt.esm.js";
+import { r as getToken, t as api } from "./api-DUZwyz0o.esm.js";
+import { t as endpoints } from "./endpoints-BM2_j_IE.esm.js";
 
 //#region src/modules/stats/statsServices.ts
 const deviceStatsQueue = [];

package/dist/stats.esm.js

@@ -1,5 +1,5 @@
-import "./api-CESGtpbH.esm.js";
-import "./endpoints-BeTK0Mlt.esm.js";
-import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BMNUG1AU.esm.js";
+import "./api-DUZwyz0o.esm.js";
+import "./endpoints-BM2_j_IE.esm.js";
+import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DntyIiGr.esm.js";
 
 export { addDeviceStats, flushDeviceStatsQueue, resetDeviceStatsQueue };