@incodetech/core 2.3.2-rc.4 → 2.4.0-rc.0

package/dist/trust-graph.d.ts

@@ -1,6 +1,5 @@
 import { A as StateMachine, c as AnyEventObject, p as EventObject, v as MetaObject, y as NonReducibleUnknown } from "./spawn-D9jgw9pW.js";
-import "./StateMachine-EDpYWy0i.js";
-import { t as Manager } from "./Manager-CQQ99QOI.js";
+import { t as Manager } from "./Manager-C9T5amUN.js";
 //#region src/modules/trust-graph/trustGraphManager.d.ts
 type TrustGraphIdleState = {
   status: 'idle';

package/dist/trust-graph.esm.js

@@ -1,5 +1,5 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
-import { s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CAgFE-k3.esm.js";
+import { s as createActor, t as setup, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 //#region src/modules/trust-graph/trustGraphStateMachine.ts
 /**
 * Trust-graph is a headless "skip" module: it has no UI and the SDK performs no

package/dist/{types-C0oWGUzg.d.ts → types-0L-eFDmr.d.ts}

@@ -1,4 +1,4 @@
-import { l as FieldDef } from "./types-Cx-1zo-i.js";
+import { l as FieldDef } from "./types-BvLo3U4u.js";
 //#region src/modules/ekyb/types.d.ts
 type UboEntry = {
   id: string;

package/dist/{types-C1g9itHE.d.ts → types-BGXxRwQM.d.ts}

@@ -1,5 +1,5 @@
-import { s as RiskAddon } from "./types-Cx-1zo-i.js";
-import "./createFaceAvatar-BlcTYgJv.js";
+import { s as RiskAddon } from "./types-BvLo3U4u.js";
+import "./createFaceAvatar-DXgmQmQy.js";
 //#region src/internal/avatar/concealment.d.ts
 /**
  * Backend-aligned selfie/auth face-concealment options. The backend returns a
@@ -38,7 +38,6 @@ type TutorialIdConfig = {
   autoCaptureTimeout: number;
   deviceIdleTimeout: number;
   captureAttempts: number;
-  manualUploadIdCapture: boolean;
   digitalIdsUpload: boolean;
   showDocumentChooserScreen: boolean;
   enableIdRecording: boolean;
@@ -47,8 +46,8 @@ type TutorialIdConfig = {
   alwaysCaptureBackOfId?: boolean;
   /**
    * [ENG-44176] When `false`, the SDK forwards `extractIdFace=false` to
-   * `POST /omni/add/front-id/v2` (and to the manual-upload + digital-upload
-   * variants), so the backend skips biometric face extraction and no
+   * `POST /omni/add/front-id/v2` (and to the digital-upload variant), so the
+   * backend skips biometric face extraction and no
    * biometric template is created. Omitted / `true` preserves current
    * behavior. Use in jurisdictions with biometric-consent restrictions
    * (e.g. Quebec / Law 25); downstream face-match will not be available
@@ -111,7 +110,7 @@ type FlowModuleConfig = {
     }[];
   };
   DOCUMENT_CAPTURE: {
-    processingType: 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement';
+    processingType: 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processIneMex' | 'processColombiaRutForm' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement';
     title: string;
     text: string;
     allowSkipDocumentCapture: boolean;
@@ -248,7 +247,6 @@ type FlowModuleConfig = {
     validateClosedEyes: boolean;
     validateBrightness: boolean;
     deepsightLiveness: 'SINGLE_FRAME' | 'MULTIMODAL' | 'VIDEOLIVENESS';
-    manualUploadSelfieCapture?: boolean;
     /**
      * When true, the SELFIE module runs face analysis on-device via the
      * OnDevice WASM workflow and POSTs only the results JSON to
@@ -386,6 +384,7 @@ type Flow = {
   enableFraudAi?: boolean;
   getEnableIdOnlyIdentity?: boolean;
   ds?: boolean;
+  oauth2Secured?: boolean;
 };
 //#endregion
 export { RegulationTypes as a, FlowModuleConfig as i, Flow as n, TutorialIdConfig as o, FlowModule as r, SelfieConcealmentOption as s, EmptyConfig as t };

package/dist/{types-BfgmV7s7.d.ts → types-BQA7lRDV.d.ts}

@@ -1,5 +1,5 @@
 import { l as AnyStateMachine } from "./spawn-D9jgw9pW.js";
-import "./StateMachine-EDpYWy0i.js";
+import "./Manager-C9T5amUN.js";
 //#region src/internal/orchestration/types.d.ts
 /** Eager module: a pre-imported state machine. */
 type EagerModule = AnyStateMachine;

package/dist/{types-CxGdmzxa.d.ts → types-BvFmYX5c.d.ts}

@@ -1,4 +1,4 @@
-import { a as RegulationTypes } from "./types-C1g9itHE.js";
+import { a as RegulationTypes } from "./types-BGXxRwQM.js";
 //#region src/modules/mandatory-consent/types.d.ts
 type RegulatoryConsentType = 'MANDATORY' | 'ML';
 type MandatoryConsentConfig = {

package/dist/{types-Cx-1zo-i.d.ts → types-BvLo3U4u.d.ts}

@@ -129,6 +129,6 @@ type EkycFieldDef = FieldDef & {
   source: EkycFieldSource;
   validation?: EkycValidationRule[];
 };
-type RiskAddon = 'phoneCheck' | 'advancedPhoneCheck' | 'emailCheck';
+type RiskAddon = 'phoneCheck' | 'advancedPhoneCheck' | 'emailCheck' | 'phoneProfile';
 //#endregion
 export { EkycValidationError as a, AddressSuggestion as c, EkycModuleConfig as i, FieldDef as l, EkycFieldDef as n, EkycValidationErrors as o, EkycFormValues as r, RiskAddon as s, EkycConfig as t };

package/dist/types-C71Zo6vl.d.ts

@@ -0,0 +1,6 @@
+import { i as FlowModuleConfig } from "./types-BGXxRwQM.js";
+import { t as BaseFaceCaptureConfig } from "./types-zpO4fU6a.js";
+//#region src/modules/authentication/types.d.ts
+type AuthenticationConfig = FlowModuleConfig['AUTHENTICATION'] & BaseFaceCaptureConfig;
+//#endregion
+export { AuthenticationConfig as t };

package/dist/{types-DEGVXwsk2.d.ts → types-CyPUIpzf.d.ts}

@@ -1,10 +1,10 @@
-import { y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
-import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-C1g9itHE.js";
-import { i as IStorageCapability } from "./IWasmUtilCapability-CNWRl7jr.js";
+import { y as IncodeCanvas } from "./createFaceAvatar-DXgmQmQy.js";
+import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-BGXxRwQM.js";
+import { a as IStorageCapability } from "./IWasmUtilCapability-CPX0RGdQ.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-_8gdW5Lk.js";
+import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-DVmzJux5.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-RNiFhvXR.js";
+import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-DBsv9-7M.js";
 //#region ../infra/src/capabilities/IDigitalCredentialsCapability.d.ts
 /**
  * Digital Credentials capability — wraps the W3C Digital Credentials API
@@ -16,8 +16,12 @@ import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSetti
  * opaque to the SDK; the wallet's response is likewise an opaque string that
  * is forwarded to the backend for decryption.
  */
-/** Wallet protocols the SDK requests credentials with. */
-type DigitalCredentialProtocol = 'org-iso-mdoc' | 'openid4vp-v1-unsigned';
+/**
+ * Wallet protocols known to the SDK. The backend decides the protocol for
+ * Google Wallet (unsigned / signed / multisigned), so any other string the
+ * backend sends is passed through untouched.
+ */
+type DigitalCredentialProtocol = 'org-iso-mdoc' | 'openid4vp-v1-unsigned' | 'openid4vp-v1-signed' | 'openid4vp-v1-multisigned' | (string & {});
 /** One entry of the Digital Credentials API `digital.requests` array. */
 type DigitalCredentialRequest = {
   protocol: DigitalCredentialProtocol;
@@ -25,9 +29,18 @@ type DigitalCredentialRequest = {
    * Opaque protocol payload, built by the backend.
    * Apple (`org-iso-mdoc`): `{ deviceRequest, encryptionInfo }` base64 strings.
    * Google (`openid4vp-v1-unsigned`): the whole OIDC4VP/DCQL request object.
+   * Google (`openid4vp-v1-signed`): `{ request: <JWS> }` — covered by the
+   * signature, so it must never be modified.
    */
   data: unknown;
 };
+/**
+ * The W3C `DigitalCredentialRequestOptions` shape — the `digital` member of
+ * `navigator.credentials.get()`. Handed to the API as-is.
+ */
+type DigitalCredentialRequestOptions = {
+  requests: DigitalCredentialRequest[];
+};
 type DigitalCredentialResult = {
   /**
    * Opaque wallet response (Apple: encrypted deviceResponse; Google: a JWE).
@@ -44,16 +57,23 @@ interface IDigitalCredentialsCapability {
    */
   isAvailable(): boolean;
   /**
-   * Presents the OS wallet sheet for the given request and resolves with the
+   * Presents the OS wallet sheet for the given request options (passed as the
+   * `digital` member verbatim) and resolves with the
    * wallet's opaque response. Must be reached from a user gesture — iOS
    * Safari requires transient user activation for `navigator.credentials.get()`.
    * Rejects when the underlying API rejects (blocked, aborted, protocol error).
    */
-  get(request: DigitalCredentialRequest, options?: {
+  get(request: DigitalCredentialRequestOptions, options?: {
     signal?: AbortSignal;
   }): Promise<DigitalCredentialResult>;
 }
 //#endregion
+//#region src/modules/id/idCaptureOnlyConfig.d.ts
+/**
+ * The `IdCaptureConfig` keys the captureOnly flow supports.
+ */
+declare const ID_CAPTURE_ONLY_CONFIG_KEYS: readonly ["showTutorial", "captureAttempts", "autoCaptureTimeout", "deviceIdleTimeout", "enableId", "enablePassport", "onlyFront", "onlyBack", "showDocumentChooserScreen"];
+//#endregion
 //#region src/modules/digital-id-redirect/types.d.ts
 /**
  * Trinsic web-redirect Digital ID — module contracts.
@@ -88,12 +108,16 @@ declare function isRedirectFlowType(flowType: string): boolean;
 type DigitalIdDocumentType = 'mDL' | 'iDIN' | 'FTN';
 /** One way to fulfil a `DigitalIdDocumentType`, in funnel priority order. */
 type DigitalIdFunnelEntry = {
-  /** Incode-native device-wallet handshake (Apple Wallet web / Google Wallet). */
+  /**
+   * Incode-native device-wallet handshake (Apple Wallet web / Google
+   * Wallet). Activation is computed by `isDeviceWalletEnabled` — the
+   * `deviceWallet` flag or an enabled wallet method in
+   * `config.digitalIds` — so this entry carries no config-field name of
+   * its own.
+   */
   kind: 'incodeWallet';
   /** Chooser tile this entry surfaces as. */
   documentType: Extract<IdDocumentType, 'digitalId'>;
-  /** Config flag that activates this entry. */
-  configFlag: 'deviceWallet';
 } | {
   /** Trinsic web-redirect flow (existing `digitalIdRedirect` child). */
   kind: 'trinsicRedirect';
@@ -151,6 +175,13 @@ type DeviceWalletDecryptResponse = {
   decision?: DeviceWalletDecision;
   [key: string]: unknown;
 };
+/** Injectable service seam (mirrors digital-id-redirect's services pattern). */
+type DeviceWalletServices = {
+  /** Builds the wallet request payload for the platform. */
+  requestWalletData: (platform: DeviceWalletPlatform, signal?: AbortSignal) => Promise<DigitalCredentialRequestOptions>;
+  /** Forwards the opaque wallet response for backend decryption. */
+  decryptWalletResponse: (platform: DeviceWalletPlatform, walletResponse: string, signal?: AbortSignal) => Promise<DeviceWalletDecryptResponse>;
+};
 /**
  * Terminal machine output read by the ID-Capture parent (`onDone`).
  * Projected by the machine's ROOT `output` — a top-level final node's own
@@ -164,37 +195,6 @@ type DeviceWalletOutput = {
   result: 'dismissed';
 };
 //#endregion
-//#region src/modules/id/manualUpload/types.d.ts
-type ManualUploadTab = 'id' | 'passport';
-type ManualUploadSide = 'front' | 'back' | 'passport';
-type ManualUploadContext = {
-  /** Passed from parent machine input — used by guards and actor inputs. */
-  onlyFront: boolean;
-  /** Back-only takes precedence when both side-only flags are supplied. */
-  onlyBack: boolean;
-  isSecondId: boolean;
-  /** Retry budget for this manual upload (sourced from `config.captureAttempts`). */
-  captureAttempts: number;
-  /** [ENG-44176] Forwarded to front / passport manual uploads when explicitly false. */
-  extractIdFace?: boolean;
-  frontFile: File | null;
-  backFile: File | null;
-  passportFile: File | null;
-  activeTab: ManualUploadTab;
-  retriesLeft: number;
-  errorMessage: string | null;
-  errorSide: ManualUploadSide | null;
-  /** Set from the front upload response; when true the back slot is auto-completed */
-  skipBackFromServer: boolean;
-  /** Whether each side has been successfully uploaded (for Continue gating) */
-  frontUploaded: boolean;
-  backUploaded: boolean;
-  passportUploaded: boolean;
-};
-declare const MANUAL_UPLOAD_MAX_RETRIES = 3;
-declare const MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES: number;
-declare const MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS = 5000;
-//#endregion
 //#region ../infra/src/capabilities/IAnalyticsCapability.d.ts
 interface IAnalyticsCapability {
   analyzeFrame(image: ImageData): Promise<void>;
@@ -207,13 +207,13 @@ interface IAnalyticsCapability {
 //#region src/modules/id/types.d.ts
 type IdCaptureMode = 'front' | 'back' | 'passport';
 /**
- * Document type options for the ID capture chooser (ID, passport, manual ID
- * upload, digital ID upload (PDF), digital ID from device wallet, digital ID
- * web-redirect (Trinsic iDIN/FTN)).
+ * Document type options for the ID capture chooser (ID, passport, digital ID
+ * upload (PDF), digital ID from device wallet, digital ID web-redirect
+ * (Trinsic iDIN/FTN)).
  * Used for selection and for the list of available options derived from config.
  */
-type IdDocumentType = 'id' | 'passport' | 'manualIdUpload' | 'digitalIdUpload' | 'digitalId' | 'digitalIdRedirect';
-type IdFlowStep = 'chooser' | 'ageVerification' | 'tutorial' | 'permissions' | 'capture' | 'mandatoryConsent' | 'frontFinished' | 'backFinished' | 'success' | 'processing' | 'expired' | 'finished' | 'error' | 'closed' | 'manualIdUpload' | 'digitalIdUpload' | 'digitalIdRedirect';
+type IdDocumentType = 'id' | 'passport' | 'digitalIdUpload' | 'digitalId' | 'digitalIdRedirect';
+type IdFlowStep = 'chooser' | 'ageVerification' | 'tutorial' | 'permissions' | 'capture' | 'mandatoryConsent' | 'frontFinished' | 'backFinished' | 'success' | 'processing' | 'expired' | 'finished' | 'error' | 'closed' | 'digitalIdUpload' | 'digitalIdRedirect';
 type DetectionStatus = 'idle' | 'detecting' | 'farAway' | 'blur' | 'glare' | 'wrongSide' | 'capturing' | 'manualCapture' | 'idNotDetected' | 'offline';
 /**
  * Represents the detection area dimensions in pixels.
@@ -274,6 +274,32 @@ type IdCaptureDigitalIdMethod = {
   /** ISO alpha-2 to bias provider ordering / prefill. */
   country?: string;
   displayName?: string;
+  /**
+   * Dashboard toggle for this method on the flow / workflow node. `false`
+   * hides the method; absent counts as enabled.
+   */
+  enabled?: boolean;
+  /** Provider logo shown on the method's chooser card (absolute URL). */
+  logoUrl?: string;
+};
+/**
+ * One digital-ID web-redirect provider offered as its own card on the ID
+ * capture chooser — one card per enabled `REDIRECT` method in
+ * `config.digitalIds` (iDIN, FTN, …). Selecting a card sends
+ * `SELECT_DOCUMENT` with `documentType: 'digitalIdRedirect'` and this
+ * `providerId`, which the `digitalIdRedirect` child launches directly.
+ */
+type IdCaptureDigitalIdRedirectOption = {
+  /** Catalog provider id, e.g. `trinsic_netherlands_idin`. */
+  providerId: DigitalIdProviderId;
+  /** Persisted backend method name, e.g. `IDIN`. */
+  method?: string;
+  /** Provider display name from the catalog, e.g. `iDIN`. */
+  displayName?: string;
+  /** Provider logo (absolute URL) for the card; the generic icon is used when absent. */
+  logoUrl?: string;
+  /** ISO alpha-2 country the provider serves. */
+  country?: string;
 };
 type IdCaptureConfig = TutorialIdConfig & {
   ageAssurance?: boolean;
@@ -288,7 +314,7 @@ type IdCaptureConfig = TutorialIdConfig & {
   ds?: Flow['ds'];
   /**
    * When true, the capture machine reaches `finished` immediately after
-   * back-side / manual-upload completion instead of invoking `/process/id`.
+   * back-side completion instead of invoking `/process/id`.
    * Used by engines where verification is owned by a downstream node — the
    * Workflow engine's `ID` node (handled by `idVerificationMachine`). Flow and
    * any other single-step caller leave this `false` so the inline verification
@@ -353,7 +379,7 @@ type IdCaptureConfig = TutorialIdConfig & {
  * the factory (see `DEFAULT_ID_CAPTURE_ONLY_CONFIG`); set only what you care
  * about, e.g. `{ onCapture, captureAttempts: 5, showDocumentChooserScreen: true }`.
  */
-type IdCaptureOnlyConfig = Partial<Pick<IdCaptureConfig, 'showTutorial' | 'captureAttempts' | 'autoCaptureTimeout' | 'deviceIdleTimeout' | 'enableId' | 'enablePassport' | 'onlyFront' | 'onlyBack' | 'showDocumentChooserScreen'>> & {
+type IdCaptureOnlyConfig = Partial<Pick<IdCaptureConfig, (typeof ID_CAPTURE_ONLY_CONFIG_KEYS)[number]>> & {
   onCapture: (response: CaptureOnlyResponse) => void | Promise<void>;
 };
 type IdErrorCode = 'UPLOAD_ERROR' | 'CLASSIFICATION_FAILED' | 'LOW_SHARPNESS' | 'GLARE_DETECTED' | 'WRONG_DOCUMENT_SIDE' | 'ID_TYPE_UNACCEPTABLE' | 'READABILITY_ISSUE' | 'RETRY_EXHAUSTED_CONTINUE_TO_BACK' | 'RETRY_EXHAUSTED_SKIP_BACK' | 'NO_MORE_TRIES' | 'UNEXPECTED_ERROR' | 'NO_TOKEN' | 'PERMISSION_DENIED' | 'USER_CANCELLED' | 'SERVER_ERROR';
@@ -471,10 +497,16 @@ type IdCapturedImageData = {
 };
 /**
  * Payload delivered to `IdCaptureConfig.onCapture` when `captureOnly` is enabled.
+ *
+ * `frontImage` is `undefined` only for a back-only capture (`onlyBack: true`),
+ * where no front side is captured. Check it before use.
  */
 type CaptureOnlyResponse = {
   frontImage: IdCapturedImageData;
   backImage: IdCapturedImageData | undefined;
+} | {
+  frontImage: undefined;
+  backImage: IdCapturedImageData;
 };
 declare const ID_ERROR_CODES: {
   readonly UPLOAD_ERROR: "UPLOAD_ERROR";
@@ -713,6 +745,19 @@ type IdCaptureContext = {
   disableIpify: boolean;
   deepsightInitAttempted: boolean;
   availableDocumentTypes: IdDocumentType[];
+  /**
+   * One entry per enabled digital-ID web-redirect provider in
+   * `config.digitalIds` (`getAvailableDigitalIdRedirectOptions`). The chooser
+   * renders each as its own card; `digitalIdRedirect` appears in
+   * `availableDocumentTypes` whenever this list is non-empty.
+   */
+  digitalIdRedirectOptions: IdCaptureDigitalIdRedirectOption[];
+  /**
+   * Provider picked on the chooser (`SELECT_DOCUMENT` with `providerId`).
+   * Preset on the `digitalIdRedirect` child so the verification is created for
+   * exactly that provider instead of the first configured redirect method.
+   */
+  selectedDigitalIdProviderId: DigitalIdProviderId | undefined;
   /** Negotiated camera resolution (e.g. "1920x1080") for telemetry */
   captureResolution?: string;
   /** Android camera access fallback level that succeeded */
@@ -735,8 +780,16 @@ type IdCaptureEvent = {
 } | {
   type: 'SELECT_DOCUMENT';
   documentType: IdDocumentType;
+  /**
+   * With `documentType: 'digitalIdRedirect'`: the redirect provider card
+   * the user picked (one of `digitalIdRedirectOptions[].providerId`).
+   * Omitted → the first configured redirect method is launched.
+   */
+  providerId?: DigitalIdProviderId;
 } | {
   type: 'NEXT_STEP';
+} | {
+  type: 'CONTINUE_TO_PERMISSION';
 } |
 /**
  * IDC-05: the phase boundary. Raised by `runDetection` `captureWindowMs` after
@@ -761,6 +814,12 @@ type IdCaptureEvent = {
   type: 'MANUAL_CAPTURE';
 } | {
   type: 'SWITCH_TO_MANUAL_CAPTURE';
+} | {
+  type: 'SWITCH_TO_AUTO_CAPTURE';
+} | {
+  type: 'OPEN_HELP';
+} | {
+  type: 'CLOSE_HELP';
 } | {
   type: 'DETECTION_UPDATE';
   status: DetectionStatus;
@@ -832,17 +891,6 @@ type IdCaptureEvent = {
     width: number;
     height: number;
   };
-} | {
-  type: 'MANUAL_UPLOAD_TAB_CHANGED';
-  tab: ManualUploadTab;
-} | {
-  type: 'MANUAL_UPLOAD_FILE_SELECTED';
-  side: ManualUploadSide;
-  file: File;
-} | {
-  type: 'MANUAL_UPLOAD_CONTINUE';
-} | {
-  type: 'MANUAL_UPLOAD_RESET';
 } | {
   type: 'DIGITAL_UPLOAD_NEXT_STEP';
 } | {
@@ -922,4 +970,4 @@ type IdCaptureOutput = {
   skipFaceMatch: boolean;
 } | undefined;
 //#endregion
-export { MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES as A, DeviceWalletProvider as B, IdDocumentType as C, UploadIdResponse as D, IdFlowStep as E, DeviceWalletDecision as F, DigitalIdPlatformSupport as G, DIGITAL_ID_REGISTRY as H, DeviceWalletDecryptResponse as I, resolveDigitalIdImplementation as J, ResolvedDigitalIdRoute as K, DeviceWalletFailReason as L, ManualUploadContext as M, ManualUploadSide as N, IAnalyticsCapability as O, ManualUploadTab as P, DeviceWalletOutput as R, IdCapturedImageData as S, IdErrorCode as T, DigitalIdDocumentType as U, DIGITAL_ID_DOCUMENT_TYPES as V, DigitalIdFunnelEntry as W, FailureReason as X, DigitalIdProviderId as Y, RedirectReturnParams as Z, IdCaptureInput as _, CaptureOnlyResponse as a, IdCaptureOutput as b, DetectionStatus as c, IdCaptureContext as d, IdCaptureDependencies as f, IdCaptureGeometry as g, IdCaptureEvent as h, CaptureIdResponse as i, MANUAL_UPLOAD_MAX_RETRIES as j, MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS as k, ID_ERROR_CODES as l, IdCaptureDigitalIdMethod as m, AcceptedDocumentType as n, CapturedImage as o, IdCaptureDigitalIdFlowType as p, isRedirectFlowType as q, AddBarcodeV3Response as r, DetectionArea as s, AcceptedDocument as t, IdCaptureConfig as u, IdCaptureMode as v, IdError as w, IdCaptureThresholds as x, IdCaptureOnlyConfig as y, DeviceWalletPlatform as z };
+export { DeviceWalletDecision as A, DigitalIdFunnelEntry as B, IdCapturedImageData as C, IdFlowStep as D, IdErrorCode as E, DeviceWalletProvider as F, DigitalIdProviderId as G, ResolvedDigitalIdRoute as H, DeviceWalletServices as I, IDigitalCredentialsCapability as J, FailureReason as K, DIGITAL_ID_DOCUMENT_TYPES as L, DeviceWalletFailReason as M, DeviceWalletOutput as N, UploadIdResponse as O, DeviceWalletPlatform as P, DIGITAL_ID_REGISTRY as R, IdCaptureThresholds as S, IdError as T, isRedirectFlowType as U, DigitalIdPlatformSupport as V, resolveDigitalIdImplementation as W, IdCaptureGeometry as _, CaptureOnlyResponse as a, IdCaptureOnlyConfig as b, DetectionStatus as c, IdCaptureContext as d, IdCaptureDependencies as f, IdCaptureEvent as g, IdCaptureDigitalIdRedirectOption as h, CaptureIdResponse as i, DeviceWalletDecryptResponse as j, IAnalyticsCapability as k, ID_ERROR_CODES as l, IdCaptureDigitalIdMethod as m, AcceptedDocumentType as n, CapturedImage as o, IdCaptureDigitalIdFlowType as p, RedirectReturnParams as q, AddBarcodeV3Response as r, DetectionArea as s, AcceptedDocument as t, IdCaptureConfig as u, IdCaptureInput as v, IdDocumentType as w, IdCaptureOutput as x, IdCaptureMode as y, DigitalIdDocumentType as z };

package/dist/{types-Bx-BWveD.d.ts → types-DTYr9pCB.d.ts}

@@ -1,4 +1,4 @@
-import { a as RegulationTypes } from "./types-C1g9itHE.js";
+import { a as RegulationTypes } from "./types-BGXxRwQM.js";
 //#region src/internal/fingerprint/types.d.ts
 type DeviceFingerprintResult = {
   success: boolean;

package/dist/{types-BjSly8cp.d.ts → types-DUnFZ08M.d.ts}

@@ -1,7 +1,7 @@
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 //#region src/modules/document-capture/types.d.ts
-type DocumentType = 'addressStatement' | 'otherDocument1' | 'otherDocument2' | 'otherDocument3' | 'v5cMultiPageLogbook' | 'circulationCard' | 'financeSettlement' | 'carInvoice' | 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement' | 'processW8BenOcr' | 'processW8BenEOcr' | 'w8Ben' | 'w8BenE';
+type DocumentType = 'addressStatement' | 'otherDocument1' | 'otherDocument2' | 'otherDocument3' | 'v5cMultiPageLogbook' | 'circulationCard' | 'financeSettlement' | 'carInvoice' | 'capture' | 'processPoaOcr' | 'processLoaOcr' | 'processAsylumSeekerVisaZaf' | 'processBankStatementOCR' | 'processBankCheck' | 'processIneMex' | 'processColombiaRutForm' | 'processV5CLogbook' | 'processCarInvoice' | 'processCirculationCard' | 'processFinanceSettlement' | 'processW8BenOcr' | 'processW8BenEOcr' | 'w8Ben' | 'w8BenE';
 declare const DOCUMENT_CAPTURE_ERROR_CODES: {
   readonly FILE_TOO_LARGE: "FILE_TOO_LARGE";
   readonly UPLOAD_FAILED: "UPLOAD_FAILED";

package/dist/{types-ESdtnHtg.d.ts → types-zpO4fU6a.d.ts}

@@ -1,6 +1,6 @@
-import { a as AvatarAssetsOverrides } from "./createFaceAvatar-BlcTYgJv.js";
-import { n as Flow, s as SelfieConcealmentOption } from "./types-C1g9itHE.js";
-import { i as IStorageCapability, t as IWasmUtilCapability } from "./IWasmUtilCapability-CNWRl7jr.js";
+import { a as AvatarAssetsOverrides } from "./createFaceAvatar-DXgmQmQy.js";
+import { n as Flow, s as SelfieConcealmentOption } from "./types-BGXxRwQM.js";
+import { a as IStorageCapability, n as IWasmUtilCapability } from "./IWasmUtilCapability-CPX0RGdQ.js";
 //#region src/internal/faceCapture/types.d.ts
 type CameraResolution = {
   width?: number;
@@ -49,7 +49,6 @@ type BaseFaceCaptureConfig = {
   cameraResolution?: CameraResolution;
   ageAssurance?: boolean;
   ds?: Flow['ds'];
-  manualUploadSelfieCapture?: boolean;
   /**
    * When true, face analysis runs on-device via the OnDevice WASM workflow
    * (6 models) and only the results JSON is submitted to the backend

package/dist/{urlUtils-D6phjq1-.esm.js → urlUtils-6jsE6rKp.esm.js}

@@ -11,5 +11,13 @@ function buildUrlWithSearchParams(baseUrl, params) {
 	for (const [key, value] of Object.entries(params)) if (value !== void 0) url.searchParams.set(key, value);
 	return url.href;
 }
+function stripUrlQueryAndFragment(url) {
+	try {
+		const { origin, pathname } = new URL(url);
+		return `${origin}${pathname}`;
+	} catch {
+		return url.split(/[?#]/, 1)[0];
+	}
+}
 //#endregion
-export { getUrlSearchParam as n, buildUrlWithSearchParams as t };
+export { getUrlSearchParam as n, stripUrlQueryAndFragment as r, buildUrlWithSearchParams as t };

package/dist/video-selfie.d.ts

@@ -1,11 +1,11 @@
-import { c as WasmPipeline } from "./warmup-Cis2p6O0.js";
+import { c as WasmPipeline } from "./warmup-BUPPRAA1.js";
 import { A as StateMachine, _ as MachineContext, c as AnyEventObject, p as EventObject, v as MetaObject, y as NonReducibleUnknown } from "./spawn-D9jgw9pW.js";
-import "./StateMachine-EDpYWy0i.js";
-import "./Actor-iTq7YY48.js";
+import { t as Manager } from "./Manager-C9T5amUN.js";
+import "./Actor-DpTj5PFb.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { t as DetectionOrientation } from "./IIdCaptureCapability-RNiFhvXR.js";
-import { a as FacingMode, i as CameraCompositor, n as VideoSelfieDetectionStatus, o as VideoSelfieConfig, r as VideoSelfieValidationFailure, s as VideoSelfieStep, t as StepDetector } from "./videoSelfieStepDetector-ChYgFM15.js";
+import { t as DetectionOrientation } from "./IIdCaptureCapability-DBsv9-7M.js";
+import { a as FacingMode, i as CameraCompositor, n as VideoSelfieDetectionStatus, o as VideoSelfieConfig, r as VideoSelfieValidationFailure, s as VideoSelfieStep, t as StepDetector } from "./videoSelfieStepDetector-C5QHOvWb.js";
 //#region ../infra/src/capabilities/ITimerCapability.d.ts
 type TimerHandle = ReturnType<typeof setTimeout>;
 type ITimerCapability = {
@@ -229,10 +229,7 @@ type VideoSelfieRecordingState = {
  * `subscribe()` (status, step, preview `stream`, `recordingId`) plus `start()`,
  * `nextStep()`, and `abort()`.
  */
-declare function createVideoSelfieRecordingManager(options?: CreateVideoSelfieRecordingActorOptions): {
-  stop(): void;
-  getState(): VideoSelfieRecordingState;
-  subscribe(listener: (state: VideoSelfieRecordingState) => void): () => void;
+declare function createVideoSelfieRecordingManager(options?: CreateVideoSelfieRecordingActorOptions): Manager<VideoSelfieRecordingState> & {
   /** Acquire the first camera, open the upload, and begin recording. */
   start(): void;
   retry(): void;