@incodetech/core 2.2.0 → 2.3.0-rc.1

package/dist/{trueSightService---iW2KKJ.esm.js → trueSightService-BN-Hzw82.esm.js}

@@ -1,9 +1,9 @@
-import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-DM8lkb0z.esm.js";
+import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-B7baE-Wf.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { S as subscribeEvent, n as eventModuleNames } from "./events-DYiyoSlx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-D1Bm59g6.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-BZh6dj53.esm.js";
+import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 //#region ../infra/src/http/createApi.ts
 var FetchHttpError = class extends Error {
 	constructor(status, statusText, url, method, headers, data) {
@@ -323,7 +323,7 @@ const createWasmApi = async (config) => {
 	const headers = buildWasmDefaultHeaders(config.customHeaders);
 	const isEncryptionEnabled = config.isEncryptionEnabled ?? (() => false);
 	const useSha256 = config.mgf1 === "sha256";
-	await initializeWasmWebClient(config.wasm.wasmPath, config.wasm.wasmSimdPath ?? config.wasm.wasmPath, config.wasm.glueCodePath, config.wasm.glueCodeSimdPath ?? "", config.wasm.useSimd ?? true);
+	await initializeWasmWebClient(config.wasm);
 	await setupWasmConnection(config.apiURL, "", config.encryptionEnabled ?? false, headers, useSha256);
 	const defaults = {
 		baseURL: config.apiURL,
@@ -1320,7 +1320,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-B8vorxN5.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-CU6kBvqv.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**
@@ -1889,4 +1889,4 @@ function modulePosition(payload) {
 	return `${typeof moduleIndex === "number" ? ` index=${moduleIndex}` : ""}${typeof totalModules === "number" ? ` total=${totalModules}` : ""}`;
 }
 //#endregion
-export { createApi as C, upgradeToWasmHttpClient as S, noteTokenActivated as _, notifyTrueSightManagerStopped as a, installFreshHttpClient as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteTestingSignals as g, noteSessionCreated as h, notifyTrueSightFlowEvent as i, trueSightLog as l, noteEnvironment as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, randomUUID as v, resetHttpClientState as x, getStoredHttpConfig as y };
+export { upgradeToWasmHttpClient as C, resetHttpClientState as S, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };

package/dist/trust-graph.esm.js

@@ -1,4 +1,4 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-DYiyoSlx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 //#region src/modules/trust-graph/trustGraphStateMachine.ts
 /**

package/dist/{types-BX_XkMsQ2.d.ts → types-9_esGTPj.d.ts}

@@ -1,4 +1,4 @@
-import { a as RegulationTypes } from "./types-KPvmag_B.js";
+import { a as RegulationTypes } from "./types-Do5rEXij.js";
 //#region src/modules/mandatory-consent/types.d.ts
 type RegulatoryConsentType = 'MANDATORY' | 'ML';
 type MandatoryConsentConfig = {

package/dist/types-BT_Oalip.d.ts

@@ -0,0 +1 @@
+import "./createFaceAvatar-BlcTYgJv.js";

package/dist/{types-DelMqZLe.d.ts → types-BjSly8cp.d.ts}

@@ -1,5 +1,5 @@
-import { t as CameraStream } from "./camera-9wWD-pwg.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
+import { t as CameraStream } from "./camera-9wWD-pwg.js";
 //#region src/modules/document-capture/types.d.ts
 type DocumentType = 'addressStatement' | 'otherDocument1' | 'otherDocument2' | 'otherDocument3' | 'v5cMultiPageLogbook' | 'circulationCard' | 'financeSettlement' | 'carInvoice' | 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement' | 'processW8BenOcr' | 'processW8BenEOcr' | 'w8Ben' | 'w8BenE';
 declare const DOCUMENT_CAPTURE_ERROR_CODES: {

package/dist/{types-Hmd7U0JA.d.ts → types-Bnl58jUQ.d.ts}

@@ -1,82 +1,6 @@
-import { n as WasmPipeline } from "./warmup-Dv2alr2-.js";
-import { a as MLProviderConfig, n as IRecordingCapability, t as IStorageCapability } from "./IStorageCapability-ORkQfK3F.js";
-import { t as AvatarAssetsOverrides } from "./IFaceAvatarCapability-BrL19G0s.js";
-import { n as Flow, s as SelfieConcealmentOption } from "./types-KPvmag_B.js";
-//#region ../infra/src/capabilities/IWasmUtilCapability.d.ts
-type WasmUtilConfig = MLProviderConfig & {
-  pipelines?: WasmPipeline[];
-};
-type VirtualCameraCheckOutput = {
-  canvas: HTMLCanvasElement | null;
-  itr: boolean | null;
-  skipped: boolean | null;
-};
-type IWasmUtilCapability = {
-  /**
-   * Whether the provider has been initialized and is ready to be used.
-   */
-  readonly initialized: boolean;
-  /**
-   * Initializes the provider with the given configuration.
-   * If WASM was already warmed up via `warmupWasm()`, this returns almost instantly.
-   * @param config - Provider configuration including WASM paths
-   */
-  initialize(config: WasmUtilConfig): Promise<void>;
-  /**
-   * Encrypts a base64 image using the WASM utility API.
-   * @param image - Base64 image string (no data URL prefix)
-   * @returns Encrypted string
-   */
-  encryptImage(image: string): string;
-  setSdkVersion(version: string): void;
-  setSdkPlatform(platform: string): void;
-  setDeviceInfo(deviceInfo: object, overrideExisting?: boolean): void;
-  setBrowserInfo(browserInfo: object, overrideExisting?: boolean): void;
-  setCameraInfo(cameraInfo: object, overrideExisting?: boolean): void;
-  setMotionStatus(status: string): void;
-  setBackgroundMode(backgroundMode: boolean): void;
-  /**
-   * Enables on-device mode: the native WASM module skips full fingerprint
-   * collection and keeps only the device-detection DTO. Additive; default off.
-   */
-  setOnDeviceMode(enabled: boolean): void;
-  setZc(zc: string): void;
-  setInspectorOpened(opened: boolean): void;
-  /**
-   * Returns whether the DevTools inspector has been detected as open.
-   * Safe to call before WASM initialization (returns the in-memory flag).
-   */
-  getInspectorOpened(): boolean;
-  /**
-   * Toggles the WASM module's production mode. When `true`, the native module
-   * suppresses its verbose debug logging/console output.
-   */
-  setProductionMode(productionMode: boolean): Promise<void>;
-  getMetadata(): string;
-  analyzeFrame(image: ImageData): Promise<void>;
-  getCheck(): string;
-  /**
-   * Gets the current pipeline state. Must be called before setMotionStatus(),
-   * getCheck(), setBackgroundMode(), and getMetadata() for proper metadata generation.
-   */
-  getPipelineState(): string;
-  estimatePerformance(): string;
-  isVirtualCamera(label: string | null): boolean;
-  prc(): Promise<void>;
-  poc(output: VirtualCameraCheckOutput): Promise<void>;
-  rsp(): Promise<void>;
-  ssl(): void;
-  stl(): void;
-  osv(): void;
-  oev(): void;
-  ckvcks(data: ArrayBuffer): void;
-  getVersions(): Promise<unknown>;
-  /**
-   * Disposes of resources and resets initialization state.
-   */
-  dispose(): Promise<void>;
-};
-//#endregion
+import { a as AvatarAssetsOverrides } from "./createFaceAvatar-BlcTYgJv.js";
+import { n as Flow, s as SelfieConcealmentOption } from "./types-Do5rEXij.js";
+import { i as IStorageCapability, t as IWasmUtilCapability } from "./IWasmUtilCapability-CNWRl7jr.js";
 //#region src/internal/faceCapture/types.d.ts
 type CameraResolution = {
   width?: number;
@@ -94,8 +18,7 @@ type FaceCapturedImageData = {
   /**
    * Populated when local video recording is active
    * (`enableFaceRecording === true` with `LocalRecordingService`).
-   * `undefined` when video recording is disabled, when the provider is
-   * OpenVidu (remote server-side recording), or when video assembly fails.
+   * `undefined` when video recording is disabled or video assembly fails.
    *
    * Delivered as raw base64 (not encrypted via WASM `ens()` like the regular
    * flow). Integrators receiving this are responsible for handling it as
@@ -125,10 +48,8 @@ type BaseFaceCaptureConfig = {
   deepsightLiveness?: 'SINGLE_FRAME' | 'MULTIMODAL' | 'VIDEOLIVENESS';
   cameraResolution?: CameraResolution;
   ageAssurance?: boolean;
-  recording?: {
-    capability?: IRecordingCapability;
-  };
   ds?: Flow['ds'];
+  manualUploadSelfieCapture?: boolean;
   /**
    * When true, face analysis runs on-device via the OnDevice WASM workflow
    * (6 models) and only the results JSON is submitted to the backend
@@ -203,4 +124,4 @@ declare const FACE_ERROR_CODES: {
 };
 type FaceErrorCode = (typeof FACE_ERROR_CODES)[keyof typeof FACE_ERROR_CODES];
 //#endregion
-export { FaceCapturedImageData as a, VirtualCameraCheckOutput as c, FaceCaptureOnlyResponse as i, WasmUtilConfig as l, DetectionStatus as n, FaceErrorCode as o, FaceCaptureDependencies as r, IWasmUtilCapability as s, BaseFaceCaptureConfig as t };
+export { FaceCapturedImageData as a, FaceCaptureOnlyResponse as i, DetectionStatus as n, FaceErrorCode as o, FaceCaptureDependencies as r, BaseFaceCaptureConfig as t };

package/dist/types-ChAowIxT.d.ts

@@ -0,0 +1,6 @@
+import { i as FlowModuleConfig } from "./types-Do5rEXij.js";
+import { t as BaseFaceCaptureConfig } from "./types-Bnl58jUQ.js";
+//#region src/modules/authentication/types.d.ts
+type AuthenticationConfig = FlowModuleConfig['AUTHENTICATION'] & BaseFaceCaptureConfig;
+//#endregion
+export { AuthenticationConfig as t };

package/dist/{types-DVmXIdzW.d.ts → types-D0gekt4U.d.ts}

@@ -1,9 +1,22 @@
 //#region src/modules/electronic-signature/types.d.ts
 type ElectronicSignatureVariant = 'ae' | 'qe';
+declare const NAMIRIAL_QES_PROVIDER_CODE = "QES_3";
 type ElectronicSignatureConfig = {
   variant?: ElectronicSignatureVariant;
   uploadDocument?: boolean;
   downloadDocument?: boolean;
+  /**
+   * Opaque provider code returned by the onboarding flow configuration.
+   * `QES_3` enables the provider-terms QES flow; omitted and unknown values
+   * preserve the legacy consent flow.
+   */
+  providerCode?: string;
+  /**
+   * Locale requested by the SDK host (for example `en` or `de-DE`). The QES
+   * terms request normalizes supported values to `en`, `it`, or `de` and
+   * falls back to English.
+   */
+  language?: string;
 };
 type ElectronicSignatureDocument = {
   documentRef: string;
@@ -17,16 +30,18 @@ type SignedDocument = {
   signed: boolean;
   /**
    * URL of the signed PDF when the endpoint returns one (AES `/process/sign`).
-   * QES `/process/signQes` returns only `{ success: true }` with no document
-   * URL, so this is absent for the QE variant.
+   * QES `/process/signQes` initially returns only `{ success: true }`; the
+   * machine fills this URL after retrieving `/documents/signed`.
    */
   signedDocumentUrl?: string;
 };
 declare const AE_CONSENT_KEYS: readonly ["terms", "signElectronically", "signDisplayed"];
 declare const QE_CONSENT_KEYS: readonly ["issuance", "qesAcknowledgement", "qscdConfirmation", "termsAgreement", "documentsReviewed"];
+declare const NAMIRIAL_QES_CONSENT_KEYS: readonly ["providerTerm0", "providerTerm1"];
 type AeConsentKey = (typeof AE_CONSENT_KEYS)[number];
 type QeConsentKey = (typeof QE_CONSENT_KEYS)[number];
-type ConsentKey = AeConsentKey | QeConsentKey;
+type NamirialQesConsentKey = (typeof NAMIRIAL_QES_CONSENT_KEYS)[number];
+type ConsentKey = AeConsentKey | QeConsentKey | NamirialQesConsentKey;
 type ConsentChecks = Partial<Record<ConsentKey, boolean>>;
 declare function getConsentKeys(variant: ElectronicSignatureVariant): readonly ConsentKey[];
 declare function getDefaultConsentChecks(variant: ElectronicSignatureVariant): ConsentChecks;
@@ -34,7 +49,23 @@ declare function areAllConsented(checks: ConsentChecks): boolean;
 type UnsignedDocsResponse = {
   documents: ElectronicSignatureDocument[];
 };
-type ElectronicSignatureErrorSource = 'upload' | 'fetchDocs' | 'signing';
+type QesTermsResponse = {
+  languageCode?: string;
+  contentType?: string;
+  contractText?: string;
+  checkBoxes?: string[];
+};
+/**
+ * The provider-supplied content required by the Namirial Review and Sign
+ * screen. This value is intentionally ephemeral and may contain personal
+ * holder information. Callers must not log, persist, or emit it as telemetry.
+ */
+type ElectronicSignatureProviderTerms = {
+  consentLabels: readonly [string, string];
+  contractText: string;
+  languageCode: string;
+};
+type ElectronicSignatureErrorSource = 'upload' | 'terms' | 'fetchDocs' | 'signing' | 'signedDocs';
 /**
  * Mutable in-memory holder for the document selected for upload.
  *
@@ -61,7 +92,9 @@ type ElectronicSignatureContext = {
    */
   preSignedUrl: string | null;
   consentChecks: ConsentChecks;
+  providerTerms: ElectronicSignatureProviderTerms | null;
   viewingDocumentUrl: string | null;
+  viewingApplicationForm: boolean;
   errorMessage: string;
   errorSource: ElectronicSignatureErrorSource | null;
 };
@@ -79,4 +112,4 @@ type ElectronicSignatureInput = {
   fileDataHolder?: never;
 };
 //#endregion
-export { getDefaultConsentChecks as _, ElectronicSignatureConfig as a, ElectronicSignatureFileDataHolder as c, QE_CONSENT_KEYS as d, QeConsentKey as f, getConsentKeys as g, areAllConsented as h, ConsentKey as i, ElectronicSignatureInput as l, UnsignedDocsResponse as m, AeConsentKey as n, ElectronicSignatureContext as o, SignedDocument as p, ConsentChecks as r, ElectronicSignatureDocument as s, AE_CONSENT_KEYS as t, ElectronicSignatureVariant as u };
+export { getDefaultConsentChecks as S, QesTermsResponse as _, ElectronicSignatureConfig as a, areAllConsented as b, ElectronicSignatureFileDataHolder as c, ElectronicSignatureVariant as d, NAMIRIAL_QES_CONSENT_KEYS as f, QeConsentKey as g, QE_CONSENT_KEYS as h, ConsentKey as i, ElectronicSignatureInput as l, NamirialQesConsentKey as m, AeConsentKey as n, ElectronicSignatureContext as o, NAMIRIAL_QES_PROVIDER_CODE as p, ConsentChecks as r, ElectronicSignatureDocument as s, AE_CONSENT_KEYS as t, ElectronicSignatureProviderTerms as u, SignedDocument as v, getConsentKeys as x, UnsignedDocsResponse as y };

package/dist/types-DgDvvzg0.d.ts

@@ -0,0 +1,10 @@
+import { a as RegulationTypes } from "./types-Do5rEXij.js";
+//#region src/internal/fingerprint/types.d.ts
+type DeviceFingerprintResult = {
+  success: boolean;
+  sessionStatus: string;
+  showMandatoryConsent?: boolean;
+  regulationType?: RegulationTypes;
+};
+//#endregion
+export { DeviceFingerprintResult as t };

package/dist/{types-KPvmag_B.d.ts → types-Do5rEXij.d.ts}

@@ -1,5 +1,5 @@
-import { t as DocumentUploadConfig } from "./types-Vb4P9ovf.js";
 import { s as RiskAddon } from "./types-Bk_6dmDa.js";
+import "./createFaceAvatar-BlcTYgJv.js";
 //#region src/internal/avatar/concealment.d.ts
 /**
  * Backend-aligned selfie/auth face-concealment options. The backend returns a
@@ -182,7 +182,6 @@ type FlowModuleConfig = {
     scrapingV3: boolean;
     failUnsupportedId: boolean;
     dataValidation: boolean;
-    backgroundExecution: boolean;
     mockConnectionError: boolean;
     mockUserNotFoundError: boolean;
     mockOK: boolean;
@@ -193,7 +192,6 @@ type FlowModuleConfig = {
     dataValidation: boolean;
     faceAndDataValidation: boolean;
     addressValidation: boolean;
-    backgroundExecution: boolean;
     faceMatchOverrideDataScore: boolean;
     useCroppedIdFacePhoto: boolean;
   };
@@ -201,7 +199,9 @@ type FlowModuleConfig = {
   ID: TutorialIdConfig;
   SECOND_ID: TutorialIdConfig;
   /** @deprecated Third ID step is deprecated; SDK skips this step and continues flow */
-  THIRD_ID: DocumentUploadConfig;
+  THIRD_ID: {
+    documentType: string;
+  };
   ID_OCR: {
     editableOcr: boolean;
     cpfOnly?: boolean;
@@ -248,6 +248,7 @@ type FlowModuleConfig = {
     validateClosedEyes: boolean;
     validateBrightness: boolean;
     deepsightLiveness: 'SINGLE_FRAME' | 'MULTIMODAL' | 'VIDEOLIVENESS';
+    manualUploadSelfieCapture?: boolean;
     /**
      * When true, the SELFIE module runs face analysis on-device via the
      * OnDevice WASM workflow and POSTs only the results JSON to
@@ -290,6 +291,7 @@ type FlowModuleConfig = {
     /** Whether the consent audio is validated by backend speech-to-text. Default true. */
     speechToTextCheck?: boolean;
     selfieQualityAffectsScore: boolean;
+    /** Maximum active Video Selfie recording duration, in seconds. */
     maxWaitingVideoSelfieFile: number;
     lastSecondsVideoQualityCheck: boolean;
     lastSecondsVideoQualityCheckDuration: number;
@@ -322,6 +324,7 @@ type FlowModuleConfig = {
   QE_SIGNATURE: {
     uploadDocument: boolean;
     downloadDocument: boolean;
+    providerCode?: string;
   };
   CERTIFICATE_ISSUANCE: {
     region: string;