@incodetech/core 2.2.0 → 2.3.0-rc.0

package/dist/{electronicSignatureManager-DGbAJ00W.esm.js → electronicSignatureManager-DzulxM4_.esm.js}

@@ -1,16 +1,38 @@
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-DYiyoSlx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
-import { r as toIncodeApiError } from "./apiError-BA1d_au0.esm.js";
+import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
+import { i as toIncodeApiError, n as isConnectivityError, t as IncodeApiError } from "./apiError-D0v5hFyN.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 import { t as externalFetch } from "./externalFetch-BKBThAUC.esm.js";
 //#region src/modules/electronic-signature/electronicSignatureServices.ts
 async function fetchUnsignedDocuments(signal) {
-	const res = await api.get(endpoints.aesUnsignedDocuments, { signal });
-	if (!res.ok) throw new Error(`GET ${endpoints.aesUnsignedDocuments} failed: ${res.status} ${res.statusText}`);
-	return res.data;
+	try {
+		const res = await api.get(endpoints.aesUnsignedDocuments, { signal });
+		if (!res.ok) throw res;
+		return res.data;
+	} catch (error) {
+		toIncodeApiError(endpoints.aesUnsignedDocuments, error);
+	}
+}
+async function fetchSignedDocuments(signal) {
+	try {
+		const res = await api.get(endpoints.esSignedDocuments, { signal });
+		if (!res.ok) throw res;
+		return res.data;
+	} catch (error) {
+		toIncodeApiError(endpoints.esSignedDocuments, error);
+	}
+}
+async function fetchQesTerms(languageCode, signal) {
+	try {
+		const res = await api.post(endpoints.qesTerms, { languageCode }, { signal });
+		if (!res.ok) throw res;
+		return res.data;
+	} catch (error) {
+		toIncodeApiError(endpoints.qesTerms, error);
+	}
 }
 function getSignEndpoint(variant) {
 	return variant === "qe" ? endpoints.qesSignDocument : endpoints.aesSignDocument;
@@ -43,8 +65,13 @@ async function uploadDocumentFile(presignedUrl, data, signal) {
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureActors.ts
 const fetchUnsignedDocsActor = fromPromise(async ({ signal }) => fetchUnsignedDocuments(signal));
+const fetchSignedDocsActor = fromPromise(async ({ signal }) => fetchSignedDocuments(signal));
+const fetchQesTermsActor = fromPromise(async ({ input, signal }) => fetchQesTerms(input.languageCode, signal));
 const signDocumentsActor = fromPromise(async ({ input, signal }) => {
-	return (await Promise.all(input.documents.map((doc) => signDocument(doc.documentRef, input.variant, signal)))).map((r) => ({
+	const results = [];
+	if (input.variant === "qe" && input.sequential) for (const signatureDocument of input.documents) results.push(await signDocument(signatureDocument.documentRef, input.variant, signal));
+	else results.push(...await Promise.all(input.documents.map((signatureDocument) => signDocument(signatureDocument.documentRef, input.variant, signal))));
+	return results.map((r) => ({
 		signed: r.success === true || !!r.signedDocumentUrl,
 		signedDocumentUrl: r.signedDocumentUrl
 	}));
@@ -61,7 +88,45 @@ const uploadFileActor = fromPromise(async ({ input, signal }) => {
 	await uploadDocumentFile(input.preSignedUrl, fileData, signal);
 });
 //#endregion
+//#region src/modules/electronic-signature/electronicSignatureErrors.ts
+const QES_ERROR_TYPES = [
+	"MISSING_REQUIRED_IDENTITY_DATA",
+	"MISSING_EXTERNAL_OTP_EVIDENCE",
+	"HOLDER_DATA_MISMATCH",
+	"CERTIFICATE_EXPIRED",
+	"PROVIDER_AUTHENTICATION_ERROR",
+	"PROVIDER_CONFIGURATION_ERROR",
+	"UNKNOWN_PROVIDER_ERROR"
+];
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function qesErrorTypeFromCause(cause) {
+	if (!isRecord(cause) || !isRecord(cause.data)) return null;
+	const rawType = (isRecord(cause.data.details) ? cause.data.details : null)?.qesErrorType ?? cause.data.qesErrorType;
+	if (typeof rawType !== "string") return null;
+	return QES_ERROR_TYPES.includes(rawType) ? rawType : "UNKNOWN_PROVIDER_ERROR";
+}
+function hasSignatureFailedMessage(error) {
+	if (error.message.toLowerCase().includes("signature failed")) return true;
+	if (!isRecord(error.cause) || !isRecord(error.cause.data)) return false;
+	const { message, error: errorMessage } = error.cause.data;
+	return [message, errorMessage].some((value) => typeof value === "string" && value.toLowerCase().includes("signature failed"));
+}
+function getQesErrorType(error) {
+	return error instanceof IncodeApiError ? qesErrorTypeFromCause(error.cause) : null;
+}
+function isRetryableQesFailure(error) {
+	if (isConnectivityError(error) || error instanceof IncodeApiError && isConnectivityError(error.cause)) return true;
+	const qesErrorType = getQesErrorType(error);
+	if (qesErrorType !== null) return qesErrorType === "CERTIFICATE_EXPIRED" || qesErrorType === "MISSING_EXTERNAL_OTP_EVIDENCE" || qesErrorType === "MISSING_REQUIRED_IDENTITY_DATA";
+	if (!(error instanceof IncodeApiError)) return false;
+	if (error.httpStatus === 500 || error.httpStatus === 409) return true;
+	return error.httpStatus === 400 && hasSignatureFailedMessage(error);
+}
+//#endregion
 //#region src/modules/electronic-signature/types.ts
+const NAMIRIAL_QES_PROVIDER_CODE = "QES_3";
 const AE_CONSENT_KEYS = [
 	"terms",
 	"signElectronically",
@@ -74,6 +139,7 @@ const QE_CONSENT_KEYS = [
 	"termsAgreement",
 	"documentsReviewed"
 ];
+const NAMIRIAL_QES_CONSENT_KEYS = ["providerTerm0", "providerTerm1"];
 function getConsentKeys(variant) {
 	return variant === "qe" ? QE_CONSENT_KEYS : AE_CONSENT_KEYS;
 }
@@ -81,9 +147,42 @@ function getDefaultConsentChecks(variant) {
 	const keys = getConsentKeys(variant);
 	return Object.fromEntries(keys.map((k) => [k, false]));
 }
+function isNamirialQesConfig(config) {
+	return config.variant === "qe" && config.providerCode === "QES_3";
+}
+function getInitialConsentChecks(config) {
+	const keys = isNamirialQesConfig(config) ? NAMIRIAL_QES_CONSENT_KEYS : getConsentKeys(config.variant ?? "ae");
+	return Object.fromEntries(keys.map((key) => [key, false]));
+}
 function areAllConsented(checks) {
 	return Object.values(checks).every(Boolean);
 }
+const SUPPORTED_QES_TERM_LANGUAGES = /* @__PURE__ */ new Set([
+	"en",
+	"it",
+	"de"
+]);
+function resolveQesTermsLanguage(language) {
+	const baseLanguage = language?.split(/[-_]/u)[0]?.trim().toLowerCase();
+	return baseLanguage && SUPPORTED_QES_TERM_LANGUAGES.has(baseLanguage) ? baseLanguage : "en";
+}
+/**
+* Converts both the temporary three-item backend response (intro + two
+* controls) and the final two-item response into the exact two labels the UI
+* must render. Labels and contract text are validated without modifying their
+* provider-supplied content.
+*/
+function normalizeNamirialQesTerms(response, fallbackLanguage) {
+	const labels = response.checkBoxes?.length === 3 ? response.checkBoxes.slice(1) : response.checkBoxes;
+	const [firstLabel, secondLabel] = labels ?? [];
+	const contractText = response.contractText;
+	if (labels?.length !== 2 || firstLabel === void 0 || secondLabel === void 0 || firstLabel.trim().length === 0 || secondLabel.trim().length === 0 || contractText === void 0 || contractText.trim().length === 0) return null;
+	return {
+		consentLabels: [firstLabel, secondLabel],
+		contractText,
+		languageCode: resolveQesTermsLanguage(response.languageCode ?? fallbackLanguage)
+	};
+}
 //#endregion
 //#region src/modules/electronic-signature/electronicSignatureStateMachine.ts
 function resolveFileDataHolder(input) {
@@ -105,6 +204,8 @@ const electronicSignatureMachine = setup({
 		input: {}
 	},
 	actors: {
+		fetchQesTerms: fetchQesTermsActor,
+		fetchSignedDocs: fetchSignedDocsActor,
 		fetchUnsignedDocs: fetchUnsignedDocsActor,
 		signDocuments: signDocumentsActor,
 		generateUploadUrl: generateUploadUrlActor,
@@ -119,6 +220,18 @@ const electronicSignatureMachine = setup({
 			const { output } = event;
 			return { signedDocuments: output };
 		}),
+		setSignedDocumentsFromResponse: assign(({ event }) => {
+			const { output } = event;
+			return { signedDocuments: output.documents.map((signatureDocument) => ({
+				signed: true,
+				signedDocumentUrl: signatureDocument.documentUrl
+			})) };
+		}),
+		setProviderTerms: assign(({ context, event }) => {
+			const { output } = event;
+			const providerTerms = normalizeNamirialQesTerms(output, context.config.language);
+			return providerTerms === null ? {} : { providerTerms };
+		}),
 		setFile: assign(({ event }) => {
 			const { fileName, fileSize, fileUrl } = event;
 			return {
@@ -139,21 +252,50 @@ const electronicSignatureMachine = setup({
 			} };
 		}),
 		setViewingDocument: assign(({ event }) => ({ viewingDocumentUrl: event.url })),
-		clearViewingDocument: assign({ viewingDocumentUrl: () => null })
+		clearViewingDocument: assign({ viewingDocumentUrl: () => null }),
+		showApplicationForm: assign({ viewingApplicationForm: () => true }),
+		hideApplicationForm: assign({ viewingApplicationForm: () => false })
 	},
 	guards: {
 		errorFromUpload: ({ context }) => context.errorSource === "upload",
+		errorFromTerms: ({ context }) => context.errorSource === "terms",
+		errorFromSigning: ({ context }) => context.errorSource === "signing",
+		errorFromSignedDocs: ({ context }) => context.errorSource === "signedDocs",
 		shouldUpload: ({ context }) => context.config.uploadDocument === true,
+		shouldFetchProviderTerms: ({ context }) => isNamirialQesConfig(context.config),
+		hasProviderTerms: ({ context }) => context.providerTerms !== null,
 		hasUploadUrl: ({ context }) => context.preSignedUrl !== null,
 		allConsented: ({ context }) => areAllConsented(context.consentChecks),
 		hasDocuments: ({ event }) => {
 			const { output } = event;
 			return (output.documents?.length ?? 0) > 0;
 		},
+		hasSignedDocuments: ({ event }) => {
+			const { output } = event;
+			return (output.documents?.length ?? 0) > 0 && output.documents.every((signatureDocument) => signatureDocument.documentUrl.trim().length > 0);
+		},
+		hasSignedDocumentsAndDownload: ({ context, event }) => {
+			const { output } = event;
+			return context.config.downloadDocument === true && (output.documents?.length ?? 0) > 0 && output.documents.every((signatureDocument) => signatureDocument.documentUrl.trim().length > 0);
+		},
+		hasValidProviderTerms: ({ event }) => {
+			const { output } = event;
+			return normalizeNamirialQesTerms(output) !== null;
+		},
+		isProviderTermsFlow: ({ context }) => isNamirialQesConfig(context.config),
+		isRetryableProviderFailure: ({ context, event }) => {
+			if (!isNamirialQesConfig(context.config)) return false;
+			const { error } = event;
+			return isRetryableQesFailure(error);
+		},
 		allSigned: ({ event }) => {
 			const { output } = event;
 			return output.every((d) => d.signed);
 		},
+		allSignedAndProviderTerms: ({ context, event }) => {
+			const { output } = event;
+			return isNamirialQesConfig(context.config) && output.every((signatureDocument) => signatureDocument.signed);
+		},
 		allSignedAndDownload: ({ context, event }) => {
 			const { output } = event;
 			return output.every((d) => d.signed && !!d.signedDocumentUrl) && context.config.downloadDocument === true;
@@ -171,16 +313,25 @@ const electronicSignatureMachine = setup({
 		fileSize: null,
 		fileUrl: null,
 		preSignedUrl: null,
-		consentChecks: getDefaultConsentChecks(input.config.variant ?? "ae"),
+		consentChecks: getInitialConsentChecks(input.config),
+		providerTerms: null,
 		viewingDocumentUrl: null,
+		viewingApplicationForm: false,
 		errorMessage: "",
 		errorSource: null
 	}),
 	states: {
-		idle: { on: { LOAD: [{
-			target: "uploading",
-			guard: "shouldUpload"
-		}, { target: "fetchingDocs" }] } },
+		idle: { on: { LOAD: [
+			{
+				target: "uploading",
+				guard: "shouldUpload"
+			},
+			{
+				target: "fetchingTerms",
+				guard: "shouldFetchProviderTerms"
+			},
+			{ target: "fetchingDocs" }
+		] } },
 		uploading: { on: {
 			SELECT_FILE: {
 				target: "reviewing",
@@ -225,7 +376,10 @@ const electronicSignatureMachine = setup({
 				preSignedUrl: context.preSignedUrl,
 				fileDataHolder: context.fileDataHolder
 			}),
-			onDone: { target: "fetchingDocs" },
+			onDone: [{
+				target: "fetchingTerms",
+				guard: "shouldFetchProviderTerms"
+			}, { target: "fetchingDocs" }],
 			onError: {
 				target: "error",
 				actions: assign(({ event }) => ({
@@ -234,32 +388,96 @@ const electronicSignatureMachine = setup({
 				}))
 			}
 		} },
-		fetchingDocs: { invoke: {
-			id: "fetchUnsignedDocs",
-			src: "fetchUnsignedDocs",
+		fetchingTerms: { invoke: {
+			id: "fetchQesTerms",
+			src: "fetchQesTerms",
+			input: ({ context }) => ({ languageCode: resolveQesTermsLanguage(context.config.language) }),
 			onDone: [{
-				target: "signing",
-				guard: "hasDocuments",
-				actions: "setDocuments"
+				target: "fetchingDocs",
+				guard: "hasValidProviderTerms",
+				actions: "setProviderTerms"
 			}, {
-				target: "error",
+				target: "signError",
 				actions: assign({
-					errorMessage: () => "aes.noDocuments",
-					errorSource: () => "fetchDocs"
+					errorMessage: () => "qes.invalidProviderTerms",
+					errorSource: () => "terms"
 				})
 			}],
-			onError: {
+			onError: [{
 				target: "error",
+				guard: "isRetryableProviderFailure",
 				actions: assign(({ event }) => ({
 					errorMessage: String(event.error ?? "aes.error"),
-					errorSource: "fetchDocs"
+					errorSource: "terms"
 				}))
-			}
+			}, {
+				target: "signError",
+				actions: assign(({ event }) => ({
+					errorMessage: String(event.error ?? "aes.error"),
+					errorSource: "terms"
+				}))
+			}]
+		} },
+		fetchingDocs: { invoke: {
+			id: "fetchUnsignedDocs",
+			src: "fetchUnsignedDocs",
+			onDone: [
+				{
+					target: "signing",
+					guard: "hasDocuments",
+					actions: "setDocuments"
+				},
+				{
+					target: "signError",
+					guard: "isProviderTermsFlow",
+					actions: assign({
+						errorMessage: () => "aes.noDocuments",
+						errorSource: () => "fetchDocs"
+					})
+				},
+				{
+					target: "error",
+					actions: assign({
+						errorMessage: () => "aes.noDocuments",
+						errorSource: () => "fetchDocs"
+					})
+				}
+			],
+			onError: [
+				{
+					target: "error",
+					guard: "isRetryableProviderFailure",
+					actions: assign(({ event }) => ({
+						errorMessage: String(event.error ?? "aes.error"),
+						errorSource: "fetchDocs"
+					}))
+				},
+				{
+					target: "signError",
+					guard: "isProviderTermsFlow",
+					actions: assign(({ event }) => ({
+						errorMessage: String(event.error ?? "aes.error"),
+						errorSource: "fetchDocs"
+					}))
+				},
+				{
+					target: "error",
+					actions: assign(({ event }) => ({
+						errorMessage: String(event.error ?? "aes.error"),
+						errorSource: "fetchDocs"
+					}))
+				}
+			]
 		} },
 		signing: { on: {
 			SET_CONSENT: { actions: "updateConsent" },
 			VIEW_DOCUMENT: { actions: "setViewingDocument" },
 			CLOSE_DOCUMENT_VIEW: { actions: "clearViewingDocument" },
+			VIEW_APPLICATION_FORM: {
+				guard: "hasProviderTerms",
+				actions: "showApplicationForm"
+			},
+			CLOSE_APPLICATION_FORM: { actions: "hideApplicationForm" },
 			SIGN: {
 				target: "processing",
 				guard: "allConsented"
@@ -271,9 +489,14 @@ const electronicSignatureMachine = setup({
 			src: "signDocuments",
 			input: ({ context }) => ({
 				documents: context.documents,
+				sequential: isNamirialQesConfig(context.config),
 				variant: context.config.variant ?? "ae"
 			}),
 			onDone: [
+				{
+					target: "fetchingSignedDocs",
+					guard: "allSignedAndProviderTerms"
+				},
 				{
 					target: "successDownload",
 					guard: "allSignedAndDownload",
@@ -292,13 +515,57 @@ const electronicSignatureMachine = setup({
 					})
 				}
 			],
-			onError: {
+			onError: [{
+				target: "error",
+				guard: "isRetryableProviderFailure",
+				actions: assign(({ event }) => ({
+					errorMessage: String(event.error ?? "aes.error"),
+					errorSource: "signing"
+				}))
+			}, {
 				target: "signError",
 				actions: assign(({ event }) => ({
 					errorMessage: String(event.error ?? "aes.error"),
 					errorSource: "signing"
 				}))
-			}
+			}]
+		} },
+		fetchingSignedDocs: { invoke: {
+			id: "fetchSignedDocs",
+			src: "fetchSignedDocs",
+			onDone: [
+				{
+					target: "successDownload",
+					guard: "hasSignedDocumentsAndDownload",
+					actions: "setSignedDocumentsFromResponse"
+				},
+				{
+					target: "success",
+					guard: "hasSignedDocuments",
+					actions: "setSignedDocumentsFromResponse"
+				},
+				{
+					target: "signError",
+					actions: assign({
+						errorMessage: () => "aes.noDocuments",
+						errorSource: () => "signedDocs"
+					})
+				}
+			],
+			onError: [{
+				target: "error",
+				guard: "isRetryableProviderFailure",
+				actions: assign(({ event }) => ({
+					errorMessage: String(event.error ?? "aes.error"),
+					errorSource: "signedDocs"
+				}))
+			}, {
+				target: "signError",
+				actions: assign(({ event }) => ({
+					errorMessage: String(event.error ?? "aes.error"),
+					errorSource: "signedDocs"
+				}))
+			}]
 		} },
 		success: { after: { 3e3: "finished" } },
 		successDownload: { on: {
@@ -307,23 +574,50 @@ const electronicSignatureMachine = setup({
 		} },
 		signError: { after: { 3e3: "finished" } },
 		error: { on: {
-			RETRY: [{
-				target: "uploading",
-				guard: "errorFromUpload",
-				actions: assign({
-					errorMessage: () => "",
-					errorSource: () => null,
-					fileName: () => null,
-					fileSize: () => null,
-					fileUrl: () => null
-				})
-			}, {
-				target: "fetchingDocs",
-				actions: assign({
-					errorMessage: () => "",
-					errorSource: () => null
-				})
-			}],
+			RETRY: [
+				{
+					target: "uploading",
+					guard: "errorFromUpload",
+					actions: assign({
+						errorMessage: () => "",
+						errorSource: () => null,
+						fileName: () => null,
+						fileSize: () => null,
+						fileUrl: () => null
+					})
+				},
+				{
+					target: "fetchingTerms",
+					guard: "errorFromTerms",
+					actions: assign({
+						errorMessage: () => "",
+						errorSource: () => null
+					})
+				},
+				{
+					target: "processing",
+					guard: "errorFromSigning",
+					actions: assign({
+						errorMessage: () => "",
+						errorSource: () => null
+					})
+				},
+				{
+					target: "fetchingSignedDocs",
+					guard: "errorFromSignedDocs",
+					actions: assign({
+						errorMessage: () => "",
+						errorSource: () => null
+					})
+				},
+				{
+					target: "fetchingDocs",
+					actions: assign({
+						errorMessage: () => "",
+						errorSource: () => null
+					})
+				}
+			],
 			CLOSE: { target: "closed" }
 		} },
 		finished: { type: "final" },
@@ -372,9 +666,11 @@ function getAdSignatureScreenName(snapshot) {
 		case "reviewing":
 		case "generatingUploadUrl":
 		case "uploadingFile": return "AdSign.reviewDoc.default";
+		case "fetchingTerms":
 		case "fetchingDocs":
 		case "signing": return "AdSign.AcceptSign.default";
-		case "processing": return "AdSign.AcceptSign.processing";
+		case "processing":
+		case "fetchingSignedDocs": return "AdSign.AcceptSign.processing";
 		case "success":
 		case "successDownload":
 		case "finished": return "AdSign.success";
@@ -415,9 +711,11 @@ function getQSignatureScreenName(snapshot) {
 		case "reviewing":
 		case "generatingUploadUrl":
 		case "uploadingFile": return "QSign.review.default";
+		case "fetchingTerms":
 		case "fetchingDocs":
 		case "signing": return "QSign.AcceptSign.default";
-		case "processing": return "QSign.AcceptSign.processing";
+		case "processing":
+		case "fetchingSignedDocs": return "QSign.AcceptSign.processing";
 		case "success":
 		case "successDownload":
 		case "finished": return "QSign.success";
@@ -428,7 +726,7 @@ function getQSignatureScreenName(snapshot) {
 }
 function mapState(snapshot) {
 	const { context } = snapshot;
-	if (snapshot.matches("idle") || snapshot.matches("fetchingDocs") || snapshot.matches("generatingUploadUrl") || snapshot.matches("uploadingFile")) return { status: "loading" };
+	if (snapshot.matches("idle") || snapshot.matches("fetchingTerms") || snapshot.matches("fetchingDocs") || snapshot.matches("generatingUploadUrl") || snapshot.matches("uploadingFile")) return { status: "loading" };
 	if (snapshot.matches("uploading")) return {
 		status: "uploading",
 		fileName: context.fileName
@@ -444,9 +742,11 @@ function mapState(snapshot) {
 		documents: context.documents,
 		consentChecks: context.consentChecks,
 		allConsented: areAllConsented(context.consentChecks),
-		viewingDocumentUrl: context.viewingDocumentUrl
+		providerTerms: context.providerTerms,
+		viewingDocumentUrl: context.viewingDocumentUrl,
+		viewingApplicationForm: context.viewingApplicationForm
 	};
-	if (snapshot.matches("processing")) return { status: "processing" };
+	if (snapshot.matches("processing") || snapshot.matches("fetchingSignedDocs")) return { status: "processing" };
 	if (snapshot.matches("success") || snapshot.matches("successDownload")) return {
 		status: "success",
 		signedDocuments: context.signedDocuments,
@@ -502,6 +802,12 @@ function createApi({ actor, trackElementClicked, fileDataHolder }) {
 		closeDocumentView() {
 			actor.send({ type: "CLOSE_DOCUMENT_VIEW" });
 		},
+		viewApplicationForm() {
+			actor.send({ type: "VIEW_APPLICATION_FORM" });
+		},
+		closeApplicationForm() {
+			actor.send({ type: "CLOSE_APPLICATION_FORM" });
+		},
 		sign() {
 			trackElementClicked?.("sign");
 			actor.send({ type: "SIGN" });
@@ -549,4 +855,4 @@ function createElectronicSignatureManager(options) {
 	}));
 }
 //#endregion
-export { QE_CONSENT_KEYS as a, getDefaultConsentChecks as c, AE_CONSENT_KEYS as i, createElectronicSignatureManagerFromActor as n, areAllConsented as o, electronicSignatureMachine as r, getConsentKeys as s, createElectronicSignatureManager as t };
+export { NAMIRIAL_QES_CONSENT_KEYS as a, areAllConsented as c, AE_CONSENT_KEYS as i, getConsentKeys as l, createElectronicSignatureManagerFromActor as n, NAMIRIAL_QES_PROVIDER_CODE as o, electronicSignatureMachine as r, QE_CONSENT_KEYS as s, createElectronicSignatureManager as t, getDefaultConsentChecks as u };

package/dist/email.esm.js

@@ -1,3 +1,3 @@
-import { t as emailMachine } from "./emailStateMachine-Crw8QVmc.esm.js";
-import { t as createEmailManager } from "./emailManager-BY0jeYwR.esm.js";
+import { t as emailMachine } from "./emailStateMachine-CyPFZ7dW.esm.js";
+import { t as createEmailManager } from "./emailManager-B5ek_UfM.esm.js";
 export { createEmailManager, emailMachine };

package/dist/{emailManager-BY0jeYwR.esm.js → emailManager-B5ek_UfM.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-DYiyoSlx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as emailMachine } from "./emailStateMachine-Crw8QVmc.esm.js";
+import { t as emailMachine } from "./emailStateMachine-CyPFZ7dW.esm.js";
 //#region src/modules/email/emailActor.ts
 function createEmailActor(options) {
 	return createActor(emailMachine, { input: { config: options.config } }).start();

package/dist/{emailStateMachine-Crw8QVmc.esm.js → emailStateMachine-CyPFZ7dW.esm.js}

@@ -1,6 +1,6 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 import { n as isOtpComplete, t as computeOtpValidationErrors } from "./otp-D2k3PeSL.esm.js";

package/dist/{endpoints-CCzL3XD_.esm.js → endpoints-D3B9mUHh.esm.js}

@@ -11,12 +11,10 @@ const endpoints = {
 	deepsightVideoImport: "/omni/recordings/import",
 	/**
 	* Video-selfie multipart upload — served by the dedicated
-	* video-selfie-service. In production these paths resolve against the main
-	* `apiURL` like every other endpoint and the service mesh (Istio) routes
-	* them to the service; `setup({ videoSelfie: { apiURL } })` overrides the
-	* origin for testing/special envs where that routing doesn't exist (e.g.
-	* stage). Auth is the regular session token (`X-Incode-Hardware-Id`);
-	* no x-api-key.
+	* video-selfie-service. These paths resolve against the main `apiURL` like
+	* every other endpoint, and the service mesh (Istio) routes them to the
+	* service. Auth is the regular session token
+	* (`X-Incode-Hardware-Id`); no x-api-key.
 	*/
 	videoSelfieUploadInitiate: "/v1/video-upload/initiate",
 	videoSelfieUploadPart: "/v1/video-upload/part",
@@ -95,8 +93,10 @@ const endpoints = {
 	processWatchlist: "/omni/process/watchlist",
 	watchlistForBusinessSubmit: "/omni/businessWatchlist-result",
 	aesUnsignedDocuments: "/omni/es/documents/unsigned",
+	esSignedDocuments: "/omni/es/documents/signed",
 	aesSignDocument: "/omni/es/process/sign",
 	qesSignDocument: "/omni/es/process/signQes",
+	qesTerms: "/omni/es/qes/terms",
 	aesGenerateUploadUrl: "/omni/es/generateDocumentUploadUrl",
 	workflowCurrentNode: "/omni/workflow/current/node",
 	workflowProcessNode: "/omni/workflow/process/node",
@@ -148,7 +148,24 @@ const endpoints = {
 	* forwards the sealed envelope to the diagnostics backend. The request body
 	* is the bare envelope JSON; trailing slash is part of the contract.
 	*/
-	diagnosticsData: "/omni/add/diagnostics-data/"
+	diagnosticsData: "/omni/add/diagnostics-data/",
+	/**
+	* Trinsic digital-ID web-redirect (iDIN/FTN). Auth is `X-Api-Key` + the
+	* session token. The parameterized legs (`/{id}/response|status|refresh`)
+	* are built from `digitalIdVerifications` in `digitalIdRedirectServices`.
+	*/
+	digitalIdProviders: "/omni/v2/digital-id/providers",
+	digitalIdVerifications: "/omni/v2/digital-id/verifications",
+	/**
+	* Device-wallet (mDL) handshake — Apple Wallet (web) and Google Wallet via
+	* the W3C Digital Credentials API. Auth is the session token
+	* (X-Incode-Hardware-Id, auto-injected) plus an explicit `api-version: '1.0'`
+	* header. The request/decrypt payloads are opaque to the SDK.
+	*/
+	deviceWalletAppleRequest: "/omni/v1/device/wallet/apple/web/request",
+	deviceWalletAppleDecrypt: "/omni/v1/device/wallet/apple/web/decrypt",
+	deviceWalletGoogleRequest: "/omni/v1/device/wallet/google/request",
+	deviceWalletGoogleDecrypt: "/omni/v1/device/wallet/google/decrypt"
 };
 //#endregion
 export { endpoints as t };