@incodetech/core 2.2.0 → 2.3.0-rc.0

package/dist/{trueSightService---iW2KKJ.esm.js → trueSightService-CKrrfV0Q.esm.js}

@@ -1,9 +1,9 @@
-import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-DM8lkb0z.esm.js";
+import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-B7baE-Wf.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { S as subscribeEvent, n as eventModuleNames } from "./events-DYiyoSlx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-D1Bm59g6.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CLxKvdyz.esm.js";
+import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 //#region ../infra/src/http/createApi.ts
 var FetchHttpError = class extends Error {
 	constructor(status, statusText, url, method, headers, data) {
@@ -323,7 +323,7 @@ const createWasmApi = async (config) => {
 	const headers = buildWasmDefaultHeaders(config.customHeaders);
 	const isEncryptionEnabled = config.isEncryptionEnabled ?? (() => false);
 	const useSha256 = config.mgf1 === "sha256";
-	await initializeWasmWebClient(config.wasm.wasmPath, config.wasm.wasmSimdPath ?? config.wasm.wasmPath, config.wasm.glueCodePath, config.wasm.glueCodeSimdPath ?? "", config.wasm.useSimd ?? true);
+	await initializeWasmWebClient(config.wasm);
 	await setupWasmConnection(config.apiURL, "", config.encryptionEnabled ?? false, headers, useSha256);
 	const defaults = {
 		baseURL: config.apiURL,
@@ -1320,7 +1320,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-B8vorxN5.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-C_9o3L2L.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**
@@ -1889,4 +1889,4 @@ function modulePosition(payload) {
 	return `${typeof moduleIndex === "number" ? ` index=${moduleIndex}` : ""}${typeof totalModules === "number" ? ` total=${totalModules}` : ""}`;
 }
 //#endregion
-export { createApi as C, upgradeToWasmHttpClient as S, noteTokenActivated as _, notifyTrueSightManagerStopped as a, installFreshHttpClient as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteTestingSignals as g, noteSessionCreated as h, notifyTrueSightFlowEvent as i, trueSightLog as l, noteEnvironment as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, randomUUID as v, resetHttpClientState as x, getStoredHttpConfig as y };
+export { upgradeToWasmHttpClient as C, resetHttpClientState as S, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };

package/dist/trust-graph.esm.js

@@ -1,4 +1,4 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-DYiyoSlx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 //#region src/modules/trust-graph/trustGraphStateMachine.ts
 /**

package/dist/{types-BX_XkMsQ2.d.ts → types-9_esGTPj.d.ts}

@@ -1,4 +1,4 @@
-import { a as RegulationTypes } from "./types-KPvmag_B.js";
+import { a as RegulationTypes } from "./types-Do5rEXij.js";
 //#region src/modules/mandatory-consent/types.d.ts
 type RegulatoryConsentType = 'MANDATORY' | 'ML';
 type MandatoryConsentConfig = {

package/dist/types-BT_Oalip.d.ts

@@ -0,0 +1 @@
+import "./createFaceAvatar-BlcTYgJv.js";

package/dist/{types-DelMqZLe.d.ts → types-BjSly8cp.d.ts}

@@ -1,5 +1,5 @@
-import { t as CameraStream } from "./camera-9wWD-pwg.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
+import { t as CameraStream } from "./camera-9wWD-pwg.js";
 //#region src/modules/document-capture/types.d.ts
 type DocumentType = 'addressStatement' | 'otherDocument1' | 'otherDocument2' | 'otherDocument3' | 'v5cMultiPageLogbook' | 'circulationCard' | 'financeSettlement' | 'carInvoice' | 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement' | 'processW8BenOcr' | 'processW8BenEOcr' | 'w8Ben' | 'w8BenE';
 declare const DOCUMENT_CAPTURE_ERROR_CODES: {

package/dist/{types-Hmd7U0JA.d.ts → types-CM-jtjJ2.d.ts}

@@ -1,82 +1,6 @@
-import { n as WasmPipeline } from "./warmup-Dv2alr2-.js";
-import { a as MLProviderConfig, n as IRecordingCapability, t as IStorageCapability } from "./IStorageCapability-ORkQfK3F.js";
-import { t as AvatarAssetsOverrides } from "./IFaceAvatarCapability-BrL19G0s.js";
-import { n as Flow, s as SelfieConcealmentOption } from "./types-KPvmag_B.js";
-//#region ../infra/src/capabilities/IWasmUtilCapability.d.ts
-type WasmUtilConfig = MLProviderConfig & {
-  pipelines?: WasmPipeline[];
-};
-type VirtualCameraCheckOutput = {
-  canvas: HTMLCanvasElement | null;
-  itr: boolean | null;
-  skipped: boolean | null;
-};
-type IWasmUtilCapability = {
-  /**
-   * Whether the provider has been initialized and is ready to be used.
-   */
-  readonly initialized: boolean;
-  /**
-   * Initializes the provider with the given configuration.
-   * If WASM was already warmed up via `warmupWasm()`, this returns almost instantly.
-   * @param config - Provider configuration including WASM paths
-   */
-  initialize(config: WasmUtilConfig): Promise<void>;
-  /**
-   * Encrypts a base64 image using the WASM utility API.
-   * @param image - Base64 image string (no data URL prefix)
-   * @returns Encrypted string
-   */
-  encryptImage(image: string): string;
-  setSdkVersion(version: string): void;
-  setSdkPlatform(platform: string): void;
-  setDeviceInfo(deviceInfo: object, overrideExisting?: boolean): void;
-  setBrowserInfo(browserInfo: object, overrideExisting?: boolean): void;
-  setCameraInfo(cameraInfo: object, overrideExisting?: boolean): void;
-  setMotionStatus(status: string): void;
-  setBackgroundMode(backgroundMode: boolean): void;
-  /**
-   * Enables on-device mode: the native WASM module skips full fingerprint
-   * collection and keeps only the device-detection DTO. Additive; default off.
-   */
-  setOnDeviceMode(enabled: boolean): void;
-  setZc(zc: string): void;
-  setInspectorOpened(opened: boolean): void;
-  /**
-   * Returns whether the DevTools inspector has been detected as open.
-   * Safe to call before WASM initialization (returns the in-memory flag).
-   */
-  getInspectorOpened(): boolean;
-  /**
-   * Toggles the WASM module's production mode. When `true`, the native module
-   * suppresses its verbose debug logging/console output.
-   */
-  setProductionMode(productionMode: boolean): Promise<void>;
-  getMetadata(): string;
-  analyzeFrame(image: ImageData): Promise<void>;
-  getCheck(): string;
-  /**
-   * Gets the current pipeline state. Must be called before setMotionStatus(),
-   * getCheck(), setBackgroundMode(), and getMetadata() for proper metadata generation.
-   */
-  getPipelineState(): string;
-  estimatePerformance(): string;
-  isVirtualCamera(label: string | null): boolean;
-  prc(): Promise<void>;
-  poc(output: VirtualCameraCheckOutput): Promise<void>;
-  rsp(): Promise<void>;
-  ssl(): void;
-  stl(): void;
-  osv(): void;
-  oev(): void;
-  ckvcks(data: ArrayBuffer): void;
-  getVersions(): Promise<unknown>;
-  /**
-   * Disposes of resources and resets initialization state.
-   */
-  dispose(): Promise<void>;
-};
-//#endregion
+import { a as AvatarAssetsOverrides } from "./createFaceAvatar-BlcTYgJv.js";
+import { n as Flow, s as SelfieConcealmentOption } from "./types-Do5rEXij.js";
+import { a as IRecordingCapability, i as IStorageCapability, t as IWasmUtilCapability } from "./IWasmUtilCapability-CXXDA5l1.js";
 //#region src/internal/faceCapture/types.d.ts
 type CameraResolution = {
   width?: number;
@@ -95,7 +19,7 @@ type FaceCapturedImageData = {
    * Populated when local video recording is active
    * (`enableFaceRecording === true` with `LocalRecordingService`).
    * `undefined` when video recording is disabled, when the provider is
-   * OpenVidu (remote server-side recording), or when video assembly fails.
+   * an injected remote recorder, or when video assembly fails.
    *
    * Delivered as raw base64 (not encrypted via WASM `ens()` like the regular
    * flow). Integrators receiving this are responsible for handling it as
@@ -129,6 +53,7 @@ type BaseFaceCaptureConfig = {
     capability?: IRecordingCapability;
   };
   ds?: Flow['ds'];
+  manualUploadSelfieCapture?: boolean;
   /**
    * When true, face analysis runs on-device via the OnDevice WASM workflow
    * (6 models) and only the results JSON is submitted to the backend
@@ -203,4 +128,4 @@ declare const FACE_ERROR_CODES: {
 };
 type FaceErrorCode = (typeof FACE_ERROR_CODES)[keyof typeof FACE_ERROR_CODES];
 //#endregion
-export { FaceCapturedImageData as a, VirtualCameraCheckOutput as c, FaceCaptureOnlyResponse as i, WasmUtilConfig as l, DetectionStatus as n, FaceErrorCode as o, FaceCaptureDependencies as r, IWasmUtilCapability as s, BaseFaceCaptureConfig as t };
+export { FaceCapturedImageData as a, FaceCaptureOnlyResponse as i, DetectionStatus as n, FaceErrorCode as o, FaceCaptureDependencies as r, BaseFaceCaptureConfig as t };

package/dist/{types-Bdf8_LYB2.d.ts → types-CjKBS37a2.d.ts}

@@ -1,15 +1,177 @@
-import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { n as IRecordingCapability, o as IncodeCanvas, r as RecordingConnection, t as IStorageCapability } from "./IStorageCapability-ORkQfK3F.js";
-import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-KPvmag_B.js";
+import { y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
+import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-Do5rEXij.js";
+import { a as IRecordingCapability, i as IStorageCapability, o as RecordingConnection } from "./IWasmUtilCapability-CXXDA5l1.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { n as StreamCanvasCapture, t as DeepsightService } from "./deepsightService-DLVQS_RH.js";
-import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-DHTT3FC2.js";
+import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-B3YT2Bt6.js";
+import { t as CameraStream } from "./camera-9wWD-pwg.js";
+import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-RNiFhvXR.js";
+//#region ../infra/src/capabilities/IDigitalCredentialsCapability.d.ts
+/**
+ * Digital Credentials capability — wraps the W3C Digital Credentials API
+ * (`navigator.credentials.get()` with a `digital` request) used to pull a
+ * verified credential (e.g. an mDL) from an OS wallet such as Apple Wallet
+ * (web) or Google Wallet.
+ *
+ * The request payloads are built entirely by the Incode backend and are
+ * opaque to the SDK; the wallet's response is likewise an opaque string that
+ * is forwarded to the backend for decryption.
+ */
+/** Wallet protocols the SDK requests credentials with. */
+type DigitalCredentialProtocol = 'org-iso-mdoc' | 'openid4vp-v1-unsigned';
+/** One entry of the Digital Credentials API `digital.requests` array. */
+type DigitalCredentialRequest = {
+  protocol: DigitalCredentialProtocol;
+  /**
+   * Opaque protocol payload, built by the backend.
+   * Apple (`org-iso-mdoc`): `{ deviceRequest, encryptionInfo }` base64 strings.
+   * Google (`openid4vp-v1-unsigned`): the whole OIDC4VP/DCQL request object.
+   */
+  data: unknown;
+};
+type DigitalCredentialResult = {
+  /**
+   * Opaque wallet response (Apple: encrypted deviceResponse; Google: a JWE).
+   * `undefined` when the OS sheet completed without producing a credential
+   * (user dismissed, or no eligible digital ID on the device) — that outcome
+   * is data, not an error.
+   */
+  response: string | undefined;
+};
+interface IDigitalCredentialsCapability {
+  /**
+   * Whether the environment exposes Digital Credentials, not just the generic
+   * Credentials API used by passwords/WebAuthn.
+   */
+  isAvailable(): boolean;
+  /**
+   * Presents the OS wallet sheet for the given request and resolves with the
+   * wallet's opaque response. Must be reached from a user gesture — iOS
+   * Safari requires transient user activation for `navigator.credentials.get()`.
+   * Rejects when the underlying API rejects (blocked, aborted, protocol error).
+   */
+  get(request: DigitalCredentialRequest, options?: {
+    signal?: AbortSignal;
+  }): Promise<DigitalCredentialResult>;
+}
+//#endregion
+//#region src/modules/digital-id-redirect/types.d.ts
+/**
+ * Trinsic web-redirect Digital ID — module contracts.
+ *
+ * DRAFT (P1 core scaffolding) — shape for review before implementation.
+ * Ticket: Phase 1 "Integrate with Trinsic for Digital IDs - Web Redirect" (1509).
+ * API: "Digital ID Verification API — Frozen Definition v2.0"
+ *   base /omni/v2/digital-id, auth x-api-key + X-Incode-Hardware-Id.
+ */
+/** Catalog-driven provider id (open set), e.g. `trinsic_netherlands_idin`. */
+type DigitalIdProviderId = string;
+type FlowType = 'REDIRECT' | 'DEEPLINK' | 'QR' | 'NATIVE_CHALLENGE' | 'PUSH';
+/** Mapped from Trinsic `failCode` by the backend (Phase 1 §4.1). */
+type FailureReason = 'USER_CANCELED' | 'AUTHENTICATION_FAILED' | 'SESSION_EXPIRED' | 'VERIFICATION_FAILED' | 'PROVIDER_INTERNAL_ERROR' | 'RESULTS_EXCHANGE_FAILED' | 'RP_CANCELED' | 'INVALID_REDIRECT_RESULT' | 'SESSION_TOKEN_EXPIRED';
+/** Query params the provider appends to the return URL (open list — read these three, ignore the rest). */
+type RedirectReturnParams = {
+  success: boolean;
+  sessionId: string;
+  resultsAccessKey: string;
+};
+//#endregion
+//#region src/modules/id/digitalIdRegistry.d.ts
+/**
+ * True when a digital-ID method uses a full-page web-redirect flow (Trinsic
+ * iDIN/FTN). Accepts both the module `FlowType` value (`REDIRECT`) and the
+ * backend value (`WEB_REDIRECT`). (Lives here rather than in
+ * `idCaptureHelpers` to keep the registry free of circular imports; the
+ * helpers re-export it.)
+ */
+declare function isRedirectFlowType(flowType: string): boolean;
+/** Digital-ID document schemes the SDK knows how to verify. */
+type DigitalIdDocumentType = 'mDL' | 'iDIN' | 'FTN';
+/** One way to fulfil a `DigitalIdDocumentType`, in funnel priority order. */
+type DigitalIdFunnelEntry = {
+  /** Incode-native device-wallet handshake (Apple Wallet web / Google Wallet). */
+  kind: 'incodeWallet';
+  /** Chooser tile this entry surfaces as. */
+  documentType: Extract<IdDocumentType, 'digitalId'>;
+  /** Config flag that activates this entry. */
+  configFlag: 'deviceWallet';
+} | {
+  /** Trinsic web-redirect flow (existing `digitalIdRedirect` child). */
+  kind: 'trinsicRedirect';
+  documentType: Extract<IdDocumentType, 'digitalIdRedirect'>;
+  /** Catalog provider id passed to the `digitalIdRedirectMachine`. */
+  providerId: DigitalIdProviderId;
+  /**
+   * Persisted backend method name in `config.digitalIds.methods[]` that
+   * activates this entry (e.g. `IDIN`).
+   */
+  method: string;
+};
+declare const DIGITAL_ID_REGISTRY: Record<DigitalIdDocumentType, readonly DigitalIdFunnelEntry[]>;
+declare const DIGITAL_ID_DOCUMENT_TYPES: DigitalIdDocumentType[];
+/** What the chooser routing actually launches for a document type. */
+type ResolvedDigitalIdRoute = {
+  kind: 'incodeWallet';
+} | {
+  kind: 'trinsicRedirect';
+  providerId: DigitalIdProviderId;
+  method?: IdCaptureDigitalIdMethod;
+};
+/** Platform capabilities consulted by the funnel. */
+type DigitalIdPlatformSupport = {
+  /** `IDigitalCredentialsCapability.isAvailable()`. */
+  credentialsAvailable: boolean;
+};
+/**
+ * Resolves the implementation that should fulfil a digital-ID document type:
+ * the first funnel entry that is active under the given config and platform.
+ * `undefined` when nothing can run it (the chooser then shows no tile for it).
+ */
+declare function resolveDigitalIdImplementation(docType: DigitalIdDocumentType, config: Pick<IdCaptureConfig, 'deviceWallet' | 'digitalIds'>, platform: DigitalIdPlatformSupport): ResolvedDigitalIdRoute | undefined;
+//#endregion
+//#region src/modules/id/deviceWallet/types.d.ts
+/** Which wallet backend the handshake talks to. */
+type DeviceWalletPlatform = 'ios' | 'android';
+/** Explicit provider override, mirroring V1's `DigitalIdWalletProvider`. */
+type DeviceWalletProvider = 'apple_web' | 'google';
+type DeviceWalletDecision = 'ACCEPTED' | 'REJECTED';
+/**
+ * Failure classification.
+ * - `UNSUPPORTED_PLATFORM` — no Credentials API. The digital-ID funnel
+ *   resolves this away before the machine is invoked; kept for the defensive
+ *   path when the machine is started on an unsupported environment anyway.
+ * - `NO_CREDENTIAL` — the wallet sheet completed without a credential (user
+ *   dismissed, or no eligible digital ID on the device).
+ * - `WALLET_ERROR` — anything else (request/decrypt HTTP failure, the
+ *   Credentials API rejecting, missing activation, protocol errors).
+ */
+type DeviceWalletFailReason = 'UNSUPPORTED_PLATFORM' | 'NO_CREDENTIAL' | 'WALLET_ERROR';
+/** Response of both decrypt endpoints. Attributes are not inline (see above). */
+type DeviceWalletDecryptResponse = {
+  success: boolean;
+  decision?: DeviceWalletDecision;
+  [key: string]: unknown;
+};
+/**
+ * Terminal machine output read by the ID-Capture parent (`onDone`).
+ * Projected by the machine's ROOT `output` — a top-level final node's own
+ * `output` does not propagate in this XState version.
+ */
+type DeviceWalletOutput = {
+  result: 'success';
+  decision: DeviceWalletDecision | undefined;
+  response: DeviceWalletDecryptResponse;
+} | {
+  result: 'dismissed';
+};
+//#endregion
 //#region src/modules/id/manualUpload/types.d.ts
 type ManualUploadTab = 'id' | 'passport';
 type ManualUploadSide = 'front' | 'back' | 'passport';
 type ManualUploadContext = {
   /** Passed from parent machine input — used by guards and actor inputs. */
   onlyFront: boolean;
+  /** Back-only takes precedence when both side-only flags are supplied. */
+  onlyBack: boolean;
   isSecondId: boolean;
   /** Retry budget for this manual upload (sourced from `config.captureAttempts`). */
   captureAttempts: number;
@@ -45,11 +207,13 @@ interface IAnalyticsCapability {
 //#region src/modules/id/types.d.ts
 type IdCaptureMode = 'front' | 'back' | 'passport';
 /**
- * Document type options for the ID capture chooser (ID, passport, manual ID upload, digital ID upload, digital ID from device wallet).
+ * Document type options for the ID capture chooser (ID, passport, manual ID
+ * upload, digital ID upload (PDF), digital ID from device wallet, digital ID
+ * web-redirect (Trinsic iDIN/FTN)).
  * Used for selection and for the list of available options derived from config.
  */
-type IdDocumentType = 'id' | 'passport' | 'manualIdUpload' | 'digitalIdUpload' | 'digitalId';
-type IdFlowStep = 'chooser' | 'ageVerification' | 'tutorial' | 'permissions' | 'capture' | 'mandatoryConsent' | 'frontFinished' | 'backFinished' | 'success' | 'processing' | 'expired' | 'finished' | 'error' | 'closed' | 'manualIdUpload' | 'digitalIdUpload';
+type IdDocumentType = 'id' | 'passport' | 'manualIdUpload' | 'digitalIdUpload' | 'digitalId' | 'digitalIdRedirect';
+type IdFlowStep = 'chooser' | 'ageVerification' | 'tutorial' | 'permissions' | 'capture' | 'mandatoryConsent' | 'frontFinished' | 'backFinished' | 'success' | 'processing' | 'expired' | 'finished' | 'error' | 'closed' | 'manualIdUpload' | 'digitalIdUpload' | 'digitalIdRedirect';
 type DetectionStatus = 'idle' | 'detecting' | 'farAway' | 'blur' | 'glare' | 'wrongSide' | 'capturing' | 'manualCapture' | 'idNotDetected' | 'offline';
 /**
  * Represents the detection area dimensions in pixels.
@@ -86,6 +250,31 @@ type IdCaptureThresholds = {
   idDetectedTimeout: number;
   autocaptureTimeout: number;
 };
+/**
+ * Flow shape a digital-ID method uses. iDIN/FTN are `WEB_REDIRECT` (the backend
+ * value) / `REDIRECT` (the digital-id-redirect module's `FlowType`). Only the
+ * redirect variants are handled by the ID-Capture `digitalIdRedirect` child;
+ * the other shapes are declared for forward-compatibility with the catalog.
+ */
+type IdCaptureDigitalIdFlowType = FlowType | 'WEB_REDIRECT';
+/**
+ * One digital-ID verification method offered inside ID-Capture, threaded from
+ * the backend flow node's `configuration.digitalIds` (unified path — same rails
+ * as Apple/Google Wallet). A `REDIRECT`/`WEB_REDIRECT` method surfaces the
+ * `digitalIdRedirect` chooser option and drives the `digitalIdRedirectMachine`
+ * child. iDIN-only for now (FTN is BE-blocked).
+ */
+type IdCaptureDigitalIdMethod = {
+  /** Persisted method name, e.g. `IDIN` / `FTN`. */
+  method?: string;
+  /** Catalog provider id passed to the child, e.g. `trinsic_netherlands_idin`. */
+  provider: DigitalIdProviderId;
+  /** Redirect vs. other flow shapes. Only the redirect variants are handled. */
+  flowType: IdCaptureDigitalIdFlowType;
+  /** ISO alpha-2 to bias provider ordering / prefill. */
+  country?: string;
+  displayName?: string;
+};
 type IdCaptureConfig = TutorialIdConfig & {
   recording?: {
     capability?: IRecordingCapability;
@@ -127,6 +316,30 @@ type IdCaptureConfig = TutorialIdConfig & {
    * parameter-store read, no Statsig exposure, and no assignment event.
    */
   supportsOptimizingStatus?: boolean;
+  /**
+   * Digital-ID methods offered inside ID-Capture (from the backend flow node's
+   * `configuration.digitalIds`). A `REDIRECT`/`WEB_REDIRECT` method surfaces the
+   * `digitalIdRedirect` chooser option and drives the `digitalIdRedirectMachine`
+   * child (Trinsic iDIN/FTN). Absent / empty → no redirect option shown.
+   */
+  digitalIds?: IdCaptureDigitalIdMethod[];
+  /**
+   * https page the identity provider redirects back to on the digital-ID
+   * web-redirect return leg. The host onboarding app owns this route and passes
+   * it here; forwarded to the `digitalIdRedirectMachine` as its `returnUrl`.
+   */
+  digitalIdReturnUrl?: string;
+  /**
+   * Digital-ID web-redirect RETURN leg. When present, ID-Capture skips the
+   * chooser and resumes straight into the `digitalIdRedirect` child in resume
+   * mode: the persisted `verificationId` is recovered from storage and the
+   * host-parsed `returnParams` are submitted. Set by the host on the return
+   * route (mirrors the old top-level `FlowConfig.digitalIdReturn`, re-targeted
+   * to the ID-Capture module).
+   */
+  digitalIdReturn?: {
+    returnParams: RedirectReturnParams;
+  };
 };
 /**
  * Public ID capture configuration for the captureOnly flow.
@@ -152,6 +365,23 @@ type IdError = {
   message: string;
   messageDescription?: string;
 };
+/**
+ * Document types the backend is known to report in
+ * `UploadIdResponse.acceptedDocuments` (`add-front-id-v2`: the list of document
+ * types accepted for the detected country when `failReason` is
+ * `ID_TYPE_UNACCEPTABLE`).
+ *
+ * The wire format is `array[string]`, so this union documents the known values
+ * rather than constraining them — see `AcceptedDocument`, which is what the
+ * response is actually typed as. Consumers must handle unknown values.
+ */
+type AcceptedDocumentType = 'IdentificationCard' | 'Passport' | 'DriversLicense' | 'ResidenceDocument' | 'BirthCertificate' | 'TravelDocument' | 'WeaponLicense' | 'MedicalCard' | 'TribalIdentification' | 'Currency' | 'VehicleRegistration' | 'TaxIdentification' | 'Visa' | 'Permit' | 'Military' | 'VoterIdentification' | 'FederalID' | 'Unknown' | 'Other';
+/**
+ * A single entry of `UploadIdResponse.acceptedDocuments`. Widened to `string`
+ * so that a document type the backend adds later still type-checks, while
+ * `AcceptedDocumentType` keeps autocomplete for the known values.
+ */
+type AcceptedDocument = AcceptedDocumentType | (string & {});
 type UploadIdResponse = {
   sharpness: number;
   correctSharpness: boolean;
@@ -171,10 +401,11 @@ type UploadIdResponse = {
   skipGlareFront?: boolean;
   skipGlareBack?: boolean;
   documentIsOnTheEdge?: boolean;
-  acceptedDocuments?: Array<{
-    type: string;
-    name: string;
-  }>;
+  /**
+   * List of document types accepted for the detected country when
+   * `failReason` is `ID_TYPE_UNACCEPTABLE`. BE-documented as `array[string]`.
+   */
+  acceptedDocuments?: Array<AcceptedDocument>;
   forceFrontIdCapture?: boolean;
   /**
    * US Smart Capture: when `true`, the backend has already validated the ID
@@ -377,6 +608,35 @@ type IdCaptureContext = {
    * for the workflow orchestrator.
    */
   isDigitalUpload: boolean;
+  /**
+   * `true` once a Digital ID web-redirect (Trinsic iDIN/FTN) has COMPLETED for
+   * this session. Like a digital upload, it is single-side (no back capture).
+   * Combined with `portraitPresent` it drives the downstream Face Match skip
+   * (iDIN returns no portrait → nothing to match) via `computeIdCaptureOutput`.
+   */
+  isDigitalIdRedirect: boolean;
+  /**
+   * Whether the completed digital-ID web-redirect scheme returned a portrait.
+   * iDIN/FTN → `false`. When `false`, the ID has no face → the downstream Face
+   * Match step is skipped (`computeIdCaptureOutput.skipFaceMatch`).
+   */
+  portraitPresent: boolean;
+  /**
+   * The digital-ID implementation resolved by the funnel when the user picked
+   * the Digital ID chooser tile (`resolveDigitalIdImplementation`). Stored so
+   * the `digitalIdRouting` state can branch on it and the Trinsic fallback can
+   * preset its provider on the `digitalIdRedirect` child input.
+   */
+  digitalIdRoute: ResolvedDigitalIdRoute | undefined;
+  /**
+   * `true` once a device-wallet (mDL) handshake has completed for this
+   * session. Wallet credentials are single-side and carry no client-side
+   * image; the mDL portrait lands in the session server-side, so the
+   * downstream Face Match is NOT skipped (unlike a portrait-less redirect).
+   */
+  isDeviceWallet: boolean;
+  /** Backend decision of the completed device-wallet handshake. */
+  deviceWalletDecision: DeviceWalletDecision | undefined;
   /**
    * Set when `expiredExhausted` was reached via the per-upload (camera)
    * exhaustion path. Used by `CONTINUE_EXHAUSTED` to decide whether to run
@@ -467,6 +727,18 @@ type IdCaptureContext = {
   captureResolution?: string;
   /** Android camera access fallback level that succeeded */
   cameraFallbackLevel?: number;
+  /**
+   * Digital-ID web-redirect RETURN leg (recovered on start from
+   * `config.digitalIdReturn`). Present only when re-mounting after the provider
+   * redirect; drives the direct route into the `digitalIdRedirect` child in
+   * resume mode. `verificationId`/`providerId` are read back from storage
+   * (persisted before the redirect); `returnParams` come from the host.
+   */
+  digitalIdReturnParams: RedirectReturnParams | undefined;
+  digitalIdResumeVerificationId: string | undefined;
+  digitalIdResumeProviderId: DigitalIdProviderId | undefined;
+  /** Whether the live `stream` is genuinely the rear camera. */
+  usingBackCamera?: boolean;
 };
 type IdCaptureEvent = {
   type: 'LOAD';
@@ -596,9 +868,27 @@ type IdCaptureEvent = {
   type: 'DIGITAL_UPLOAD_SCAN_INSTEAD';
 } | {
   type: 'DIGITAL_UPLOAD_CHOOSE_ANOTHER';
+} | {
+  type: 'DIGITAL_ID_REDIRECT_RETRY';
+} | {
+  type: 'DIGITAL_ID_REDIRECT_USE_ANOTHER_METHOD';
+} | {
+  type: 'DIGITAL_ID_REDIRECT_CONTINUE';
+} | {
+  type: 'DIGITAL_ID_REDIRECT_REFRESH';
+} | {
+  type: 'DEVICE_WALLET_RETRY';
+} | {
+  type: 'DEVICE_WALLET_USE_ANOTHER_METHOD';
 };
 type IdCaptureDependencies = {
   storage: IStorageCapability;
+  /**
+   * W3C Digital Credentials API access for the device-wallet (mDL) child.
+   * Optional for backward compatibility; defaults to
+   * `BrowserDigitalCredentialsProvider` at the composition points.
+   */
+  credentials?: IDigitalCredentialsCapability;
   trackCaptureAttemptFinished?: (payload: {
     logs: string;
     resolution?: string;
@@ -642,4 +932,4 @@ type IdCaptureOutput = {
   skipFaceMatch: boolean;
 } | undefined;
 //#endregion
-export { ManualUploadSide as A, RecordingSession as C, MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES as D, MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS as E, MANUAL_UPLOAD_MAX_RETRIES as O, IdFlowStep as S, IAnalyticsCapability as T, IdCaptureThresholds as _, DetectionArea as a, IdError as b, IdCaptureConfig as c, IdCaptureEvent as d, IdCaptureGeometry as f, IdCaptureOutput as g, IdCaptureOnlyConfig as h, CapturedImage as i, ManualUploadTab as j, ManualUploadContext as k, IdCaptureContext as l, IdCaptureMode as m, CaptureIdResponse as n, DetectionStatus as o, IdCaptureInput as p, CaptureOnlyResponse as r, ID_ERROR_CODES as s, AddBarcodeV3Response as t, IdCaptureDependencies as u, IdCapturedImageData as v, UploadIdResponse as w, IdErrorCode as x, IdDocumentType as y };
+export { MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS as A, DeviceWalletPlatform as B, IdDocumentType as C, RecordingSession as D, IdFlowStep as E, ManualUploadTab as F, DigitalIdFunnelEntry as G, DIGITAL_ID_DOCUMENT_TYPES as H, DeviceWalletDecision as I, isRedirectFlowType as J, DigitalIdPlatformSupport as K, DeviceWalletDecryptResponse as L, MANUAL_UPLOAD_MAX_RETRIES as M, ManualUploadContext as N, UploadIdResponse as O, ManualUploadSide as P, RedirectReturnParams as Q, DeviceWalletFailReason as R, IdCapturedImageData as S, IdErrorCode as T, DIGITAL_ID_REGISTRY as U, DeviceWalletProvider as V, DigitalIdDocumentType as W, DigitalIdProviderId as X, resolveDigitalIdImplementation as Y, FailureReason as Z, IdCaptureInput as _, CaptureOnlyResponse as a, IdCaptureOutput as b, DetectionStatus as c, IdCaptureContext as d, IdCaptureDependencies as f, IdCaptureGeometry as g, IdCaptureEvent as h, CaptureIdResponse as i, MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES as j, IAnalyticsCapability as k, ID_ERROR_CODES as l, IdCaptureDigitalIdMethod as m, AcceptedDocumentType as n, CapturedImage as o, IdCaptureDigitalIdFlowType as p, ResolvedDigitalIdRoute as q, AddBarcodeV3Response as r, DetectionArea as s, AcceptedDocument as t, IdCaptureConfig as u, IdCaptureMode as v, IdError as w, IdCaptureThresholds as x, IdCaptureOnlyConfig as y, DeviceWalletOutput as z };

package/dist/{types-DVmXIdzW.d.ts → types-D0gekt4U.d.ts}

@@ -1,9 +1,22 @@
 //#region src/modules/electronic-signature/types.d.ts
 type ElectronicSignatureVariant = 'ae' | 'qe';
+declare const NAMIRIAL_QES_PROVIDER_CODE = "QES_3";
 type ElectronicSignatureConfig = {
   variant?: ElectronicSignatureVariant;
   uploadDocument?: boolean;
   downloadDocument?: boolean;
+  /**
+   * Opaque provider code returned by the onboarding flow configuration.
+   * `QES_3` enables the provider-terms QES flow; omitted and unknown values
+   * preserve the legacy consent flow.
+   */
+  providerCode?: string;
+  /**
+   * Locale requested by the SDK host (for example `en` or `de-DE`). The QES
+   * terms request normalizes supported values to `en`, `it`, or `de` and
+   * falls back to English.
+   */
+  language?: string;
 };
 type ElectronicSignatureDocument = {
   documentRef: string;
@@ -17,16 +30,18 @@ type SignedDocument = {
   signed: boolean;
   /**
    * URL of the signed PDF when the endpoint returns one (AES `/process/sign`).
-   * QES `/process/signQes` returns only `{ success: true }` with no document
-   * URL, so this is absent for the QE variant.
+   * QES `/process/signQes` initially returns only `{ success: true }`; the
+   * machine fills this URL after retrieving `/documents/signed`.
    */
   signedDocumentUrl?: string;
 };
 declare const AE_CONSENT_KEYS: readonly ["terms", "signElectronically", "signDisplayed"];
 declare const QE_CONSENT_KEYS: readonly ["issuance", "qesAcknowledgement", "qscdConfirmation", "termsAgreement", "documentsReviewed"];
+declare const NAMIRIAL_QES_CONSENT_KEYS: readonly ["providerTerm0", "providerTerm1"];
 type AeConsentKey = (typeof AE_CONSENT_KEYS)[number];
 type QeConsentKey = (typeof QE_CONSENT_KEYS)[number];
-type ConsentKey = AeConsentKey | QeConsentKey;
+type NamirialQesConsentKey = (typeof NAMIRIAL_QES_CONSENT_KEYS)[number];
+type ConsentKey = AeConsentKey | QeConsentKey | NamirialQesConsentKey;
 type ConsentChecks = Partial<Record<ConsentKey, boolean>>;
 declare function getConsentKeys(variant: ElectronicSignatureVariant): readonly ConsentKey[];
 declare function getDefaultConsentChecks(variant: ElectronicSignatureVariant): ConsentChecks;
@@ -34,7 +49,23 @@ declare function areAllConsented(checks: ConsentChecks): boolean;
 type UnsignedDocsResponse = {
   documents: ElectronicSignatureDocument[];
 };
-type ElectronicSignatureErrorSource = 'upload' | 'fetchDocs' | 'signing';
+type QesTermsResponse = {
+  languageCode?: string;
+  contentType?: string;
+  contractText?: string;
+  checkBoxes?: string[];
+};
+/**
+ * The provider-supplied content required by the Namirial Review and Sign
+ * screen. This value is intentionally ephemeral and may contain personal
+ * holder information. Callers must not log, persist, or emit it as telemetry.
+ */
+type ElectronicSignatureProviderTerms = {
+  consentLabels: readonly [string, string];
+  contractText: string;
+  languageCode: string;
+};
+type ElectronicSignatureErrorSource = 'upload' | 'terms' | 'fetchDocs' | 'signing' | 'signedDocs';
 /**
  * Mutable in-memory holder for the document selected for upload.
  *
@@ -61,7 +92,9 @@ type ElectronicSignatureContext = {
    */
   preSignedUrl: string | null;
   consentChecks: ConsentChecks;
+  providerTerms: ElectronicSignatureProviderTerms | null;
   viewingDocumentUrl: string | null;
+  viewingApplicationForm: boolean;
   errorMessage: string;
   errorSource: ElectronicSignatureErrorSource | null;
 };
@@ -79,4 +112,4 @@ type ElectronicSignatureInput = {
   fileDataHolder?: never;
 };
 //#endregion
-export { getDefaultConsentChecks as _, ElectronicSignatureConfig as a, ElectronicSignatureFileDataHolder as c, QE_CONSENT_KEYS as d, QeConsentKey as f, getConsentKeys as g, areAllConsented as h, ConsentKey as i, ElectronicSignatureInput as l, UnsignedDocsResponse as m, AeConsentKey as n, ElectronicSignatureContext as o, SignedDocument as p, ConsentChecks as r, ElectronicSignatureDocument as s, AE_CONSENT_KEYS as t, ElectronicSignatureVariant as u };
+export { getDefaultConsentChecks as S, QesTermsResponse as _, ElectronicSignatureConfig as a, areAllConsented as b, ElectronicSignatureFileDataHolder as c, ElectronicSignatureVariant as d, NAMIRIAL_QES_CONSENT_KEYS as f, QeConsentKey as g, QE_CONSENT_KEYS as h, ConsentKey as i, ElectronicSignatureInput as l, NamirialQesConsentKey as m, AeConsentKey as n, ElectronicSignatureContext as o, NAMIRIAL_QES_PROVIDER_CODE as p, ConsentChecks as r, ElectronicSignatureDocument as s, AE_CONSENT_KEYS as t, ElectronicSignatureProviderTerms as u, SignedDocument as v, getConsentKeys as x, UnsignedDocsResponse as y };