@incodetech/core 2.1.1 → 2.2.0-rc.0

package/dist/{electronicSignatureManager-DESRgObX.esm.js → electronicSignatureManager-DRYlHPjT.esm.js}

@@ -1,10 +1,11 @@
-import { t as api } from "./api-DsbUi7TO.esm.js";
-import { n as eventModuleNames, o as topLevelStateName, s as createManagerInstrumentation } from "./events-1wxZ97yf.esm.js";
-import { t as endpoints } from "./endpoints-CwrFQfW7.esm.js";
-import { a as fromPromise, l as createManager, r as assign, s as createActor, t as setup } from "./xstate.esm-nY3M5UYm.esm.js";
-import { t as externalFetch } from "./externalFetch-hvmz_npP.esm.js";
-import { n as toIncodeApiError } from "./apiError-DkOXfFBu.esm.js";
-
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CxfNJVZW.esm.js";
+import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
+import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { r as toIncodeApiError } from "./apiError-DZfAyExM.esm.js";
+import { c as createManager, o as createActor, r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
+import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
+import { t as externalFetch } from "./externalFetch-BKBThAUC.esm.js";
 //#region src/modules/electronic-signature/electronicSignatureServices.ts
 async function fetchUnsignedDocuments(signal) {
 	const res = await api.get(endpoints.aesUnsignedDocuments, { signal });
@@ -39,7 +40,6 @@ async function uploadDocumentFile(presignedUrl, data, signal) {
 		signal
 	});
 }
-
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureActors.ts
 const fetchUnsignedDocsActor = fromPromise(async ({ signal }) => fetchUnsignedDocuments(signal));
@@ -56,11 +56,10 @@ const signDocumentsActor = fromPromise(async ({ input, signal }) => {
 */
 const generateUploadUrlActor = fromPromise(async ({ signal }) => generateUploadUrl(signal));
 const uploadFileActor = fromPromise(async ({ input, signal }) => {
-	const fileData = input.getFileData();
+	const fileData = input.fileDataHolder.current;
 	if (!fileData) throw new Error("No file data available for upload");
 	await uploadDocumentFile(input.preSignedUrl, fileData, signal);
 });
-
 //#endregion
 //#region src/modules/electronic-signature/types.ts
 const AE_CONSENT_KEYS = [
@@ -85,9 +84,20 @@ function getDefaultConsentChecks(variant) {
 function areAllConsented(checks) {
 	return Object.values(checks).every(Boolean);
 }
-
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureStateMachine.ts
+function resolveFileDataHolder(input) {
+	if (input.fileDataHolder !== void 0) return input.fileDataHolder;
+	let selectedFileData;
+	return {
+		get current() {
+			return selectedFileData === void 0 ? input.getFileData() : selectedFileData;
+		},
+		set current(fileData) {
+			selectedFileData = fileData;
+		}
+	};
+}
 const electronicSignatureMachine = setup({
 	types: {
 		context: {},
@@ -154,7 +164,7 @@ const electronicSignatureMachine = setup({
 	initial: "idle",
 	context: ({ input }) => ({
 		config: input.config,
-		getFileData: input.getFileData,
+		fileDataHolder: resolveFileDataHolder(input),
 		documents: [],
 		signedDocuments: [],
 		fileName: null,
@@ -213,7 +223,7 @@ const electronicSignatureMachine = setup({
 			src: "uploadFile",
 			input: ({ context }) => ({
 				preSignedUrl: context.preSignedUrl,
-				getFileData: context.getFileData
+				fileDataHolder: context.fileDataHolder
 			}),
 			onDone: { target: "fetchingDocs" },
 			onError: {
@@ -320,16 +330,11 @@ const electronicSignatureMachine = setup({
 		closed: { type: "final" }
 	}
 });
-
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureActor.ts
 function createElectronicSignatureActor(options) {
-	return createActor(electronicSignatureMachine, { input: {
-		config: options.config,
-		getFileData: options.getFileData
-	} }).start();
+	return createActor(electronicSignatureMachine, { input: options }).start();
 }
-
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureManager.ts
 /**
@@ -459,7 +464,7 @@ function mapState(snapshot) {
 	if (snapshot.matches("closed")) return { status: "closed" };
 	throw new Error(`Unhandled electronic-signature state: ${JSON.stringify(snapshot.value)}`);
 }
-function createApi({ actor, trackElementClicked, fileDataRef }) {
+function createApi({ actor, trackElementClicked, fileDataHolder }) {
 	return {
 		load() {
 			actor.send({ type: "LOAD" });
@@ -472,7 +477,7 @@ function createApi({ actor, trackElementClicked, fileDataRef }) {
 			});
 		},
 		selectFile(fileName, fileData, fileUrl) {
-			fileDataRef.current = fileData;
+			fileDataHolder.current = fileData;
 			actor.send({
 				type: "SELECT_FILE",
 				fileName,
@@ -481,7 +486,7 @@ function createApi({ actor, trackElementClicked, fileDataRef }) {
 			});
 		},
 		replaceFile() {
-			fileDataRef.current = null;
+			fileDataHolder.current = null;
 			actor.send({ type: "REPLACE_FILE" });
 		},
 		confirmFile() {
@@ -507,7 +512,7 @@ function createApi({ actor, trackElementClicked, fileDataRef }) {
 		},
 		retry() {
 			trackElementClicked?.("retry");
-			fileDataRef.current = null;
+			fileDataHolder.current = null;
 			actor.send({ type: "RETRY" });
 		},
 		close() {
@@ -516,23 +521,32 @@ function createApi({ actor, trackElementClicked, fileDataRef }) {
 		}
 	};
 }
-function createElectronicSignatureManager(options) {
-	const fileDataRef = { current: null };
-	const actor = createElectronicSignatureActor({
-		config: options.config,
-		getFileData: () => fileDataRef.current
-	});
-	const isQualified = options.config.variant === "qe";
+/**
+* Creates an electronic-signature manager around a pre-built actor.
+*
+* The manager reads the file-data holder from the actor's input-derived
+* context, guaranteeing that `selectFile()` and the upload actor use the same
+* in-memory bytes. This supports actors created from `.provide()` machine
+* variants without exposing the actor through the manager.
+*/
+function createElectronicSignatureManagerFromActor(actor) {
+	const { config, fileDataHolder } = actor.getSnapshot().context;
+	const isQualified = config.variant === "qe";
 	return createManager({
 		actor,
 		mapState,
 		createApi: (apiOptions) => createApi({
 			...apiOptions,
-			fileDataRef
+			fileDataHolder
 		}),
 		instrumentation: createManagerInstrumentation(isQualified ? eventModuleNames.qeSignature : eventModuleNames.aeSignature, { getEventScreenName: isQualified ? getQSignatureScreenName : getAdSignatureScreenName })
 	});
 }
-
+function createElectronicSignatureManager(options) {
+	return createElectronicSignatureManagerFromActor(createElectronicSignatureActor({
+		config: options.config,
+		fileDataHolder: { current: null }
+	}));
+}
 //#endregion
-export { areAllConsented as a, QE_CONSENT_KEYS as i, electronicSignatureMachine as n, getConsentKeys as o, AE_CONSENT_KEYS as r, getDefaultConsentChecks as s, createElectronicSignatureManager as t };
+export { QE_CONSENT_KEYS as a, getDefaultConsentChecks as c, AE_CONSENT_KEYS as i, createElectronicSignatureManagerFromActor as n, areAllConsented as o, electronicSignatureMachine as r, getConsentKeys as s, createElectronicSignatureManager as t };

package/dist/email.d.ts

@@ -1,6 +1,2 @@
-import "./StateMachine-D5WO6lHS.js";
-import "./Manager-goNPc_h_.js";
-import "./Actor-BwgmOPkb.js";
-import { n as EmailState, o as emailMachine, r as createEmailManager, s as EmailConfig, t as EmailManager } from "./emailManager-CMS4q_r6.js";
-import "./otp-B1YeyRXu.js";
+import { n as EmailState, o as emailMachine, r as createEmailManager, s as EmailConfig, t as EmailManager } from "./emailManager-CADXW_9X.js";
 export { type EmailConfig, type EmailManager, type EmailState, createEmailManager, emailMachine };

package/dist/email.esm.js

@@ -1,10 +1,3 @@
-import "./BrowserTimerProvider-CHloo0eQ.esm.js";
-import "./api-DsbUi7TO.esm.js";
-import "./events-1wxZ97yf.esm.js";
-import "./endpoints-CwrFQfW7.esm.js";
-import "./xstate.esm-nY3M5UYm.esm.js";
-import { t as emailMachine } from "./emailStateMachine-CbmKFVSi.esm.js";
-import "./otp-uaXiKt_R.esm.js";
-import { t as createEmailManager } from "./emailManager-B9Vrv3Ma.esm.js";
-
-export { createEmailManager, emailMachine };
+import { t as emailMachine } from "./emailStateMachine-Bm894MHB.esm.js";
+import { t as createEmailManager } from "./emailManager-tE-YvNtS.esm.js";
+export { createEmailManager, emailMachine };

package/dist/{emailManager-CMS4q_r6.d.ts → emailManager-CADXW_9X.d.ts}

@@ -1,9 +1,8 @@
-import { t as Manager } from "./Manager-goNPc_h_.js";
-import { t as ActorRefFrom } from "./Actor-BwgmOPkb.js";
-import { t as OtpValidationErrors } from "./otp-B1YeyRXu.js";
-
+import { i as ActorRefFrom } from "./spawn-D9jgw9pW.js";
+import { t as Manager } from "./Manager-CQQ99QOI.js";
+import "./Actor-iTq7YY48.js";
+import { t as OtpValidationErrors } from "./otp-CEWfTj9v.js";
 //#region src/modules/email/types.d.ts
-
 /**
  * Configuration options for email verification.
  *
@@ -55,7 +54,6 @@ type EmailValidationErrors = {
 };
 //#endregion
 //#region src/modules/email/emailStateMachine.d.ts
-
 declare const emailMachine: any;
 type EmailMachine = typeof emailMachine;
 //#endregion
@@ -66,7 +64,6 @@ type CreateEmailActorOptions = {
 type EmailActor = ActorRefFrom<EmailMachine>;
 //#endregion
 //#region src/modules/email/emailManager.d.ts
-
 /** Email manager is in initial state, waiting for `load()` to be called */
 type EmailIdleState = {
   status: 'idle';

package/dist/{emailManager-B9Vrv3Ma.esm.js → emailManager-tE-YvNtS.esm.js}

@@ -1,13 +1,10 @@
-import { n as eventModuleNames, s as createManagerInstrumentation } from "./events-1wxZ97yf.esm.js";
-import { l as createManager, s as createActor } from "./xstate.esm-nY3M5UYm.esm.js";
-import { t as emailMachine } from "./emailStateMachine-CbmKFVSi.esm.js";
-import { t as OTP_CODE_LENGTH } from "./otp-uaXiKt_R.esm.js";
-
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CxfNJVZW.esm.js";
+import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
+import { t as emailMachine } from "./emailStateMachine-Bm894MHB.esm.js";
 //#region src/modules/email/emailActor.ts
 function createEmailActor(options) {
 	return createActor(emailMachine, { input: { config: options.config } }).start();
 }
-
 //#endregion
 //#region src/modules/email/emailManager.ts
 /**
@@ -154,7 +151,7 @@ function mapState(snapshot) {
 	if (typedSnapshot.matches("resendingOtp")) return {
 		status: "resendingOtp",
 		otpCode: context.otpCode,
-		otpLength: OTP_CODE_LENGTH
+		otpLength: 6
 	};
 	if (typedSnapshot.matches("sendingInitialOtp")) return { status: "sendingInitialOtp" };
 	if (typedSnapshot.matches("awaitingOtp")) return {
@@ -163,7 +160,7 @@ function mapState(snapshot) {
 		canResend: !context.resendTimerActive,
 		attemptsRemaining: context.attemptsRemaining,
 		otpCode: context.otpCode,
-		otpLength: OTP_CODE_LENGTH,
+		otpLength: 6,
 		otpValidationErrors: context.otpValidationErrors,
 		isOtpValid: Object.keys(context.otpValidationErrors ?? {}).length === 0
 	};
@@ -172,7 +169,7 @@ function mapState(snapshot) {
 		resendTimer: context.resendTimer,
 		canResend: !context.resendTimerActive,
 		otpCode: context.otpCode,
-		otpLength: OTP_CODE_LENGTH
+		otpLength: 6
 	};
 	if (typedSnapshot.matches("otpError")) return {
 		status: "otpError",
@@ -181,7 +178,7 @@ function mapState(snapshot) {
 		resendTimer: context.resendTimer,
 		canResend: !context.resendTimerActive,
 		otpCode: context.otpCode,
-		otpLength: OTP_CODE_LENGTH,
+		otpLength: 6,
 		otpValidationErrors: context.otpValidationErrors,
 		isOtpValid: Object.keys(context.otpValidationErrors ?? {}).length === 0
 	};
@@ -194,9 +191,29 @@ function mapState(snapshot) {
 }
 function createApi({ actor, trackElementClicked }) {
 	return {
+		/**
+		* Initializes the email verification flow.
+		* Transitions from 'idle' to 'loadingPrefill' or 'inputting'.
+		* Must be called before any other method.
+		*/
 		load() {
 			actor.send({ type: "LOAD" });
 		},
+		/**
+		* Sets the email address for verification.
+		* Should be called when state is 'inputting'.
+		*
+		* @param email - Email address (e.g., 'user@example.com')
+		* @param isValid - Whether the email address passes validation
+		*
+		* @example
+		* ```typescript
+		* // Using regex for validation
+		* const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]{2,}$/;
+		* const email = 'user@example.com';
+		* emailManager.setEmail(email, emailRegex.test(email));
+		* ```
+		*/
 		setEmail(email, isValid) {
 			actor.send({
 				type: "EMAIL_CHANGED",
@@ -204,22 +221,55 @@ function createApi({ actor, trackElementClicked }) {
 				isValid
 			});
 		},
+		/**
+		* Validates the current email address (e.g., on blur).
+		* Populates or clears `validationErrors.email` on the 'inputting' state.
+		*/
 		validateEmail() {
 			actor.send({ type: "VALIDATE_EMAIL" });
 		},
+		/**
+		* Submits the email address for verification.
+		* Runs full validation first: if the email is empty or invalid, populates
+		* `validationErrors` and stays on 'inputting'; otherwise transitions to
+		* 'submitting', then to 'sendingInitialOtp' or 'finished' (if no OTP).
+		*/
 		submit() {
 			trackElementClicked?.("submit");
 			actor.send({ type: "SUBMIT" });
 		},
+		/**
+		* Sets the OTP code without submitting.
+		* Use this for controlled input components.
+		*
+		* @param code - The OTP code entered by the user
+		*/
 		setOtpCode(code) {
 			actor.send({
 				type: "OTP_CHANGED",
 				code
 			});
 		},
+		/**
+		* Validates the current OTP code (e.g. on blur), without submitting.
+		* Populates or clears `otpValidationErrors.otp` on the 'awaitingOtp' /
+		* 'otpError' states (incomplete code → `isOtpValid` becomes false).
+		*/
 		validateOtp() {
 			actor.send({ type: "VALIDATE_OTP" });
 		},
+		/**
+		* Sets and submits the OTP code in one call.
+		* Should be called when state is 'awaitingOtp' or 'otpError'.
+		*
+		* @param code - The complete OTP code (typically 6 alphanumeric characters)
+		*
+		* @example
+		* ```typescript
+		* // Submit OTP when user completes entry
+		* emailManager.submitOtp('HH36LP');
+		* ```
+		*/
 		submitOtp(code) {
 			trackElementClicked?.("submitOtp");
 			actor.send({
@@ -228,14 +278,29 @@ function createApi({ actor, trackElementClicked }) {
 			});
 			actor.send({ type: "VERIFY_OTP" });
 		},
+		/**
+		* Requests a new OTP code to be sent.
+		* Only works when state is 'awaitingOtp' and `canResend` is true.
+		* Resets the resend timer.
+		*/
 		resendOtp() {
 			trackElementClicked?.("resendOtp");
 			actor.send({ type: "RESEND_OTP" });
 		},
+		/**
+		* Returns to the email input screen from OTP entry.
+		* Allows the user to change their email address.
+		* Transitions from 'awaitingOtp' or 'otpError' back to 'inputting'.
+		*/
 		back() {
 			trackElementClicked?.("back");
 			actor.send({ type: "BACK" });
 		},
+		/**
+		* Resets the manager to initial state.
+		* Can be called from 'success' or 'error' states to start over.
+		* Clears all stored data including email address and OTP.
+		*/
 		reset() {
 			actor.send({ type: "RESET" });
 		}
@@ -296,6 +361,5 @@ function createEmailManagerFromActor(actor) {
 		instrumentation: createManagerInstrumentation(eventModuleNames.email, { getEventScreenName: getEmailScreenName })
 	});
 }
-
 //#endregion
-export { createEmailManagerFromActor as n, createEmailManager as t };
+export { createEmailManagerFromActor as n, createEmailManager as t };

package/dist/{emailStateMachine-CbmKFVSi.esm.js → emailStateMachine-Bm894MHB.esm.js}

@@ -1,9 +1,9 @@
-import { t as BrowserTimerProvider } from "./BrowserTimerProvider-CHloo0eQ.esm.js";
-import { t as api } from "./api-DsbUi7TO.esm.js";
-import { t as endpoints } from "./endpoints-CwrFQfW7.esm.js";
-import { a as fromPromise, i as fromCallback, r as assign, t as setup } from "./xstate.esm-nY3M5UYm.esm.js";
-import { n as computeOtpValidationErrors, r as isOtpComplete } from "./otp-uaXiKt_R.esm.js";
-
+import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
+import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
+import { n as isOtpComplete, t as computeOtpValidationErrors } from "./otp-D2k3PeSL.esm.js";
 //#region src/modules/email/emailServices.ts
 function getEmailServerFailureReason(error, invalidStatus) {
 	if (error.status === invalidStatus) return "invalidEmail";
@@ -35,7 +35,6 @@ async function verifyEmailOtp(code, signal) {
 		throw new Error(getEmailServerFailureReason(error));
 	}
 }
-
 //#endregion
 //#region src/modules/email/emailStateMachine.ts
 function getErrorMessage(error) {
@@ -322,6 +321,5 @@ const emailMachine = setup({
 		} } }
 	}
 });
-
 //#endregion
-export { emailMachine as t };
+export { emailMachine as t };

package/dist/{endpoints-CwrFQfW7.esm.js → endpoints-CCzL3XD_.esm.js}

@@ -9,9 +9,19 @@ const endpoints = {
 	recordingStartV2: "/omni/recordings/record-start/v2",
 	recordingStopV2: "/omni/recordings/record-stop/v2",
 	deepsightVideoImport: "/omni/recordings/import",
-	videoSelfieUploadInitiate: "/omni/video-selfie/upload/initiate",
-	videoSelfieUploadPart: "/omni/video-selfie/upload/part",
-	videoSelfieUploadComplete: "/omni/video-selfie/upload/complete",
+	/**
+	* Video-selfie multipart upload — served by the dedicated
+	* video-selfie-service. In production these paths resolve against the main
+	* `apiURL` like every other endpoint and the service mesh (Istio) routes
+	* them to the service; `setup({ videoSelfie: { apiURL } })` overrides the
+	* origin for testing/special envs where that routing doesn't exist (e.g.
+	* stage). Auth is the regular session token (`X-Incode-Hardware-Id`);
+	* no x-api-key.
+	*/
+	videoSelfieUploadInitiate: "/v1/video-upload/initiate",
+	videoSelfieUploadPart: "/v1/video-upload/part",
+	videoSelfieUploadComplete: "/v1/video-upload/complete",
+	videoSelfieUploadAbort: "/v1/video-upload/abort",
 	videoSelfieCompareId: "/omni/videoselfie/compare-id/v2",
 	videoSelfieCompareOcr: "/omni/videoselfie/compare-ocr/v2",
 	videoSelfieCompareBackId: "/omni/videoselfie/compare-back-id/v2",
@@ -30,6 +40,7 @@ const endpoints = {
 	backId: "/omni/add/back-id/v2",
 	frontSecondId: "/omni/add/front-second-id/v2",
 	backSecondId: "/omni/add/back-second-id/v2",
+	addBarcode: "/omni/add/barcode/v3",
 	getImages: "/omni/get/images",
 	getImagesV2: "/omni/get/images/v2",
 	getScore: "/omni/get/score",
@@ -93,13 +104,51 @@ const endpoints = {
 	customModuleExecution: "/omni/custom-module/execution",
 	processCrossDocumentDataMatch: "/omni/cross-doc-data-check/process",
 	personhoodServerFallback: "/omni/personhood/fallback",
+	/**
+	* Authorization service token endpoint (OAuth2 client-credentials).
+	* `POST` an `application/x-www-form-urlencoded` body of
+	* `grant_type=client_credentials&scope=openid&client_id&client_secret`;
+	* the JSON response carries an `access_token` (a signed JWT) that the
+	* verify hop below attaches as `Authorization: Bearer`. Exposed on the
+	* omni base at `/omni/oauth2/token` (the authorization-server's own
+	* path is `/oauth2/token`). Replaces the removed
+	* `GET /omni/personhood/token` (ENG-45783).
+	*
+	* Used when NO dedicated `authBaseUrl` is configured — i.e. the omni
+	* gateway is expected to front the authorization server (topology A).
+	* When `PersonhoodConfig.authBaseUrl` IS set, the browser calls the
+	* auth server's own origin directly and the path below
+	* ({@link personhoodOAuthTokenDirect}) is used instead.
+	*/
 	personhoodOAuthToken: "/omni/oauth2/token",
+	/**
+	* The authorization server's OWN token path, appended to a configured
+	* `PersonhoodConfig.authBaseUrl` (e.g.
+	* `https://auth.<env>.incode.com` + `/oauth2/token`). Used when the
+	* browser calls the auth origin directly rather than via the omni
+	* gateway (topology B / Option 2). The omni-fronted equivalent is
+	* {@link personhoodOAuthToken}.
+	*/
 	personhoodOAuthTokenDirect: "/oauth2/token",
+	/**
+	* On-device personhood flow — verify hop. `POST` authenticated with
+	* `Authorization: Bearer <access_token>` (minted via
+	* `personhoodOAuthToken`). Body carries the Deepsight WASM metadata
+	* blob plus a derived `spoofCheckResults` array. The server's
+	* `isHuman` is the authoritative final verdict — replaces the local
+	* computation.
+	*/
 	personhoodOnDeviceVerify: "/omni/personhood/verify",
 	dynamicFormsSubmitAnswer: "/omni/form-answer/submit",
+	dynamicFormsPrefill: "/omni/onboarding/dynamic-form/prefill",
 	certificateIssuanceIssue: "/omni/es/process/issueCertificate",
-	addFiscalQrLink: "/omni/add/fiscal-qr-url"
+	addFiscalQrLink: "/omni/add/fiscal-qr-url",
+	/**
+	* TrueSight diagnostics ingest (ENG-48677) — user-service proxy that
+	* forwards the sealed envelope to the diagnostics backend. The request body
+	* is the bare envelope JSON; trailing slash is part of the contract.
+	*/
+	diagnosticsData: "/omni/add/diagnostics-data/"
 };
-
 //#endregion
-export { endpoints as t };
+export { endpoints as t };