@incodetech/core 2.4.0 → 2.4.1-agentic.1

package/dist/resolveForm-O7-r79VA.esm.js

@@ -0,0 +1,351 @@
+//#region src/shared/usStates.ts
+const usStates = {
+	AL: {
+		code: "AL",
+		name: "Alabama"
+	},
+	AK: {
+		code: "AK",
+		name: "Alaska"
+	},
+	AZ: {
+		code: "AZ",
+		name: "Arizona"
+	},
+	AR: {
+		code: "AR",
+		name: "Arkansas"
+	},
+	CA: {
+		code: "CA",
+		name: "California"
+	},
+	CO: {
+		code: "CO",
+		name: "Colorado"
+	},
+	CT: {
+		code: "CT",
+		name: "Connecticut"
+	},
+	DE: {
+		code: "DE",
+		name: "Delaware"
+	},
+	FL: {
+		code: "FL",
+		name: "Florida"
+	},
+	GA: {
+		code: "GA",
+		name: "Georgia"
+	},
+	HI: {
+		code: "HI",
+		name: "Hawaii"
+	},
+	ID: {
+		code: "ID",
+		name: "Idaho"
+	},
+	IL: {
+		code: "IL",
+		name: "Illinois"
+	},
+	IN: {
+		code: "IN",
+		name: "Indiana"
+	},
+	IA: {
+		code: "IA",
+		name: "Iowa"
+	},
+	KS: {
+		code: "KS",
+		name: "Kansas"
+	},
+	KY: {
+		code: "KY",
+		name: "Kentucky"
+	},
+	LA: {
+		code: "LA",
+		name: "Louisiana"
+	},
+	ME: {
+		code: "ME",
+		name: "Maine"
+	},
+	MD: {
+		code: "MD",
+		name: "Maryland"
+	},
+	MA: {
+		code: "MA",
+		name: "Massachusetts"
+	},
+	MI: {
+		code: "MI",
+		name: "Michigan"
+	},
+	MN: {
+		code: "MN",
+		name: "Minnesota"
+	},
+	MS: {
+		code: "MS",
+		name: "Mississippi"
+	},
+	MO: {
+		code: "MO",
+		name: "Missouri"
+	},
+	MT: {
+		code: "MT",
+		name: "Montana"
+	},
+	NE: {
+		code: "NE",
+		name: "Nebraska"
+	},
+	NV: {
+		code: "NV",
+		name: "Nevada"
+	},
+	NH: {
+		code: "NH",
+		name: "New Hampshire"
+	},
+	NJ: {
+		code: "NJ",
+		name: "New Jersey"
+	},
+	NM: {
+		code: "NM",
+		name: "New Mexico"
+	},
+	NY: {
+		code: "NY",
+		name: "New York"
+	},
+	NC: {
+		code: "NC",
+		name: "North Carolina"
+	},
+	ND: {
+		code: "ND",
+		name: "North Dakota"
+	},
+	OH: {
+		code: "OH",
+		name: "Ohio"
+	},
+	OK: {
+		code: "OK",
+		name: "Oklahoma"
+	},
+	OR: {
+		code: "OR",
+		name: "Oregon"
+	},
+	PA: {
+		code: "PA",
+		name: "Pennsylvania"
+	},
+	RI: {
+		code: "RI",
+		name: "Rhode Island"
+	},
+	SC: {
+		code: "SC",
+		name: "South Carolina"
+	},
+	SD: {
+		code: "SD",
+		name: "South Dakota"
+	},
+	TN: {
+		code: "TN",
+		name: "Tennessee"
+	},
+	TX: {
+		code: "TX",
+		name: "Texas"
+	},
+	UT: {
+		code: "UT",
+		name: "Utah"
+	},
+	VT: {
+		code: "VT",
+		name: "Vermont"
+	},
+	VA: {
+		code: "VA",
+		name: "Virginia"
+	},
+	WA: {
+		code: "WA",
+		name: "Washington"
+	},
+	WV: {
+		code: "WV",
+		name: "West Virginia"
+	},
+	WI: {
+		code: "WI",
+		name: "Wisconsin"
+	},
+	WY: {
+		code: "WY",
+		name: "Wyoming"
+	}
+};
+const usStateOptions = Object.values(usStates).map((state) => ({
+	value: state.code,
+	label: state.name
+}));
+//#endregion
+//#region src/shared/displayErrors.ts
+const DYNAMIC_REQUIRED_KEY = "verification.errors.fieldRequiredDynamic";
+//#endregion
+//#region src/internal/forms/checkSupport.ts
+const GROUP_POLICIES = /* @__PURE__ */ new Set(["hide", "forceShow"]);
+/**
+* Compares `major.minor` vocabulary versions. The compiler's twin is
+* `compareVersions` in `packages/form-definitions/scripts/lib/checks.mjs`;
+* both are tested against that package's `fixtures/vocabularyVersions.json`.
+*/
+function compareVocabulary(a, b) {
+	const [aMajor = 0, aMinor = 0] = a.split(".").map(Number);
+	const [bMajor = 0, bMinor = 0] = b.split(".").map(Number);
+	return aMajor - bMajor || aMinor - bMinor;
+}
+/**
+* Whether this build can use a definition. Any id it doesn't implement makes
+* the definition unsupported, so the caller falls back to its bundled
+* definition or current form. Presentation hints (widget, keyboard, autofill)
+* never fail: an unknown hint falls back to the platform default.
+*/
+function checkSupport(definition, ids) {
+	const problems = [];
+	const need = (category, known, id, path) => {
+		if (!known.has(id)) problems.push({
+			category,
+			id,
+			path
+		});
+	};
+	if (!ids.schemaVersions.includes(definition.schemaVersion)) problems.push({
+		category: "schemaVersion",
+		id: String(definition.schemaVersion),
+		path: "schemaVersion"
+	});
+	if (compareVocabulary(definition.vocabulary, ids.vocabulary) > 0) problems.push({
+		category: "vocabulary",
+		id: definition.vocabulary,
+		path: "vocabulary"
+	});
+	const checkField = (field, path) => {
+		need("kind", ids.kinds, field.kind, `${path}.kind`);
+		need("group", ids.groups, field.group, `${path}.group`);
+		field.rules?.forEach((rule, i) => need("rule", ids.rules, rule.id, `${path}.rules[${i}]`));
+		field.input?.format?.forEach((t, i) => need("transform", ids.transforms, t.id, `${path}.input.format[${i}]`));
+		field.payload?.transforms?.forEach((t, i) => need("transform", ids.transforms, t.id, `${path}.payload.transforms[${i}]`));
+		if (field.optionsRef) need("optionList", ids.optionLists, field.optionsRef, `${path}.optionsRef`);
+		if (field.suggestionsRef) need("optionList", ids.optionLists, field.suggestionsRef, `${path}.suggestionsRef`);
+		field.requiredWhen?.forEach((condition, i) => {
+			const keys = Object.keys(condition);
+			if (keys.length !== 1) problems.push({
+				category: "condition",
+				id: keys.join("+") || "(empty)",
+				path: `${path}.requiredWhen[${i}]`
+			});
+			for (const key of keys) need("condition", ids.conditions, key, `${path}.requiredWhen[${i}]`);
+		});
+		field.prefill?.forEach((id, i) => need("prefillSource", ids.prefillSources, id, `${path}.prefill[${i}]`));
+		const lock = field.phone?.lockCountry;
+		if (typeof lock === "string" && lock !== "whenPhoneRisk") problems.push({
+			category: "phoneLock",
+			id: lock,
+			path: `${path}.phone`
+		});
+	};
+	definition.fields.forEach((field) => checkField(field, `fields.${field.name}`));
+	definition.groups?.forEach((policy) => {
+		need("group", ids.groups, policy.group, `groups.${policy.group}`);
+		if (!GROUP_POLICIES.has(policy.whenDisabled)) problems.push({
+			category: "groupPolicy",
+			id: policy.whenDisabled,
+			path: `groups.${policy.group}`
+		});
+	});
+	definition.groupRules?.forEach((rule, i) => {
+		need("groupRule", ids.groupRules, rule.id, `groupRules[${i}]`);
+		const cases = rule.id === "rulesByOption" ? rule.params?.cases : void 0;
+		if (cases && typeof cases === "object" && !Array.isArray(cases)) for (const [value, rules] of Object.entries(cases)) {
+			if (!Array.isArray(rules)) continue;
+			rules.forEach((ref, j) => {
+				const id = ref?.id;
+				need("rule", ids.rules, typeof id === "string" ? id : "(missing)", `groupRules[${i}].params.cases.${value}[${j}]`);
+			});
+		}
+	});
+	definition.collections?.forEach((collection) => {
+		need("group", ids.groups, collection.group, `collections.${collection.id}`);
+		collection.fields.forEach((field) => checkField(field, `collections.${collection.id}.fields.${field.name}`));
+	});
+	return problems.length === 0 ? { supported: true } : {
+		supported: false,
+		problems
+	};
+}
+//#endregion
+//#region src/internal/forms/resolveForm.ts
+const FORCE_SHOW = "forceShow";
+const WHEN_PHONE_RISK = "whenPhoneRisk";
+/**
+* Resolves a definition against module configuration: which fields show,
+* which are required, whether the phone is locked, and which group rules and
+* collections apply. Pure and synchronous, so it runs inside an assign action.
+*
+* Call `checkSupport` first for any definition that wasn't bundled with this
+* build; `resolveForm` ignores ids it doesn't know.
+*/
+function resolveForm(definition, context) {
+	const forcedGroups = new Set((definition.groups ?? []).filter((policy) => policy.whenDisabled === FORCE_SHOW).map((policy) => policy.group));
+	const isOn = (group) => context.groups[group] === true;
+	const isShown = (group) => isOn(group) || forcedGroups.has(group);
+	const riskAddons = new Set(context.riskAddons ?? []);
+	const shownFields = definition.fields.filter((field) => isShown(field.group));
+	const shownNames = new Set(shownFields.map((field) => field.name));
+	const fields = shownFields.map((field) => {
+		const conditions = field.requiredWhen ?? [];
+		const addonRequired = conditions.some((condition) => condition.riskAddon !== void 0 && riskAddons.has(condition.riskAddon));
+		const requiredIfFilled = conditions.map((condition) => condition.fieldFilled).filter((name) => name !== void 0 && shownNames.has(name));
+		const lock = field.phone?.lockCountry;
+		return {
+			field,
+			required: field.required === true || addonRequired,
+			requiredIfFilled,
+			forced: !isOn(field.group),
+			phoneLocked: field.kind === "phone" && (lock === true || lock === WHEN_PHONE_RISK && context.phoneRisk === true)
+		};
+	});
+	const order = shownFields.map((field) => field.name);
+	return {
+		definition,
+		fields,
+		groupRules: (definition.groupRules ?? []).map((rule) => ({
+			rule,
+			fields: order.filter((name) => rule.fields.includes(name))
+		})).filter((resolved) => resolved.fields.length > 0),
+		collections: (definition.collections ?? []).filter((collection) => isShown(collection.group)).map((collection) => ({
+			collection,
+			min: collection.min ?? 0,
+			max: collection.max
+		}))
+	};
+}
+//#endregion
+export { usStates as a, usStateOptions as i, checkSupport as n, DYNAMIC_REQUIRED_KEY as r, resolveForm as t };

package/dist/{runChildModule-BF_atgNx.esm.js → runChildModule-BffFArwl.esm.js}

@@ -1,6 +1,6 @@
-import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { w as createEventBus } from "./events-Du2A4-Qr.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-BMT-TubT.esm.js";
+import { n as getTimestamp } from "./IBrowserEnvironmentCapability-D7JG7ML3.esm.js";
+import { w as createEventBus } from "./events-ggpBBaZ8.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-GuLthUVK.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/internal/flow-events/flowEvents.ts

package/dist/{sdkVersion-CsIbltJF.esm.js → sdkVersion-CDd_gaR7.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "2.4.0";
+const SDK_VERSION = "2.4.1-agentic.1";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.d.ts

@@ -1,10 +1,10 @@
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-1hzeS_rB.js";
+import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-DV2ULUYS.js";
 import { n as PermissionStatus, t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types-yPH8lAH-.js";
-import { n as DeepsightService } from "./StreamCanvasCapture-7JRf-2ck.js";
+import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types-BEVHQbbC.js";
+import { n as DeepsightService } from "./StreamCanvasCapture-C3xNfOsv.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-BJdNu_nd.js";
+import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-DmZFzs1-.js";
 //#region src/modules/selfie/selfieCaptureOnlyManager.d.ts
 type SelfieCaptureOnlyState = FaceCaptureManagerState;
 type SelfieCaptureOnlyManager = FaceCaptureManager;

package/dist/selfie.esm.js

@@ -1,15 +1,15 @@
-import { u as BrowserStorageProvider } from "./setup-BInNAvQw.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { u as BrowserStorageProvider } from "./setup-DDahygZs.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
+import { n as eventModuleNames } from "./events-ggpBBaZ8.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-TY8RXc2N.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BlGvXzXA.esm.js";
-import { c as processFace } from "./FaceDetectionProvider-DcPOC2gS.esm.js";
-import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-Dj_LHUvN.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BFVp3ElQ.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-vAAwzsHk.esm.js";
-import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-DYrkOXO6.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-ZfiWg0fo.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-Dp90bedH.esm.js";
+import { s as processFace } from "./FaceDetectionProvider-CAY43vSI.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./desktopCameraElection-BGMtYwk3.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-DaZIVv3Q.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-hopelYEk.esm.js";
+import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BJ0GVHGr.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base
 * face-capture state tree; only the upload/process step is local instead of

package/dist/{selfieErrorUtils-BY0-YbPW.esm.js → selfieErrorUtils-f4MgAG2A.esm.js}

@@ -1,4 +1,4 @@
-import { d as FACE_ERROR_CODES } from "./FaceDetectionProvider-DcPOC2gS.esm.js";
+import { u as FACE_ERROR_CODES } from "./FaceDetectionProvider-CAY43vSI.esm.js";
 //#region src/modules/selfie/selfieErrorUtils.ts
 const FACE_ERROR_CODE_VALUES = Object.values(FACE_ERROR_CODES);
 const isFaceErrorCode = (value) => {

package/dist/{selfieManager-BJdNu_nd.d.ts → selfieManager-DmZFzs1-.d.ts}

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-C9T5amUN.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-1hzeS_rB.js";
+import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-DV2ULUYS.js";
 //#region src/modules/selfie/selfieManager.d.ts
 type SelfieState = FaceCaptureManagerState;
 /**

package/dist/{selfieManager-vAAwzsHk.esm.js → selfieManager-hopelYEk.esm.js}

@@ -1,9 +1,9 @@
-import { u as BrowserStorageProvider } from "./setup-BInNAvQw.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { u as BrowserStorageProvider } from "./setup-DDahygZs.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
+import { n as eventModuleNames } from "./events-ggpBBaZ8.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BlGvXzXA.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BFVp3ElQ.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-Dp90bedH.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-DaZIVv3Q.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-BFVp3ElQ.esm.js → selfieStateMachine-DaZIVv3Q.esm.js}

@@ -1,8 +1,8 @@
 import { i as assign } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-TY8RXc2N.esm.js";
-import { c as processFace, d as FACE_ERROR_CODES, f as isOnDeviceMode } from "./FaceDetectionProvider-DcPOC2gS.esm.js";
-import { n as validateUploadResponse } from "./selfieErrorUtils-BY0-YbPW.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-ZfiWg0fo.esm.js";
+import { d as isOnDeviceMode, s as processFace, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-CAY43vSI.esm.js";
+import { n as validateUploadResponse } from "./selfieErrorUtils-f4MgAG2A.esm.js";
 /**
 * The selfie capture state machine.
 *

package/dist/{session-CpwfoVdH.esm.js → session-CdSX4wsZ.esm.js}

@@ -1,7 +1,7 @@
-import { n as getApi, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-BMT-TubT.esm.js";
-import "./sessionInitializer-BTjYgE-V.esm.js";
-import { i as toIncodeApiError } from "./apiError-DPwFas2f.esm.js";
+import { n as getApi, u as endpoints } from "./api-CpP4PS4S.esm.js";
+import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-GuLthUVK.esm.js";
+import "./sessionInitializer-DsL7X2j9.esm.js";
+import { i as toIncodeApiError } from "./apiError-DH-CH4Nz.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic
@@ -14,6 +14,18 @@ const QR_VALIDATION_ERROR_CODES = {
 	invalidQRuuid: 4081,
 	onboardingUrlAlreadyUsed: 4083
 };
+/**
+* Incode status codes `POST /omni/session/continue` rejects a handoff link
+* with (as `IncodeApiError.status`). Trying again does not help: the same link
+* fails the same way.
+*/
+const SESSION_CONTINUE_ERROR_CODES = {
+	invalidUuid: 4026,
+	invalidQrValidation: 4081,
+	continuationPeriodExpired: 4086,
+	continuationLimitReached: 4087,
+	sessionNotActive: 4088
+};
 var QrValidationError = class extends Error {
 	constructor(status, statusText) {
 		super(`POST ${endpoints.qrValidateUuid} failed: ${status} ${statusText}`);
@@ -23,7 +35,14 @@ var QrValidationError = class extends Error {
 	}
 };
 /**
-* Creates a new onboarding session.
+* Creates a new onboarding session, or continues an existing one when
+* `options.uuid` is set (see {@link CreateSessionOptions.uuid}).
+*
+* The server allows a limited number of continues (a server setting, two by
+* default), within 48 hours of the session start. Each successful call with a
+* `uuid` spends one, a reload of the handoff link included. A refused continue
+* throws an `IncodeApiError` whose `status` is one of
+* {@link SESSION_CONTINUE_ERROR_CODES}.
 *
 * @param apiKey - The API key from the Incode dashboard
 * @param options - Session creation options
@@ -40,6 +59,17 @@ var QrValidationError = class extends Error {
 * ```
 */
 async function createSession(apiKey, options, signal) {
+	if (options.uuid) {
+		const session = await continueSession(apiKey, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid
+		}, signal);
+		noteSessionCreated(session, {
+			configurationId: options.configurationId,
+			language: options.language
+		});
+		return session;
+	}
 	try {
 		const session = (await getApi().post(endpoints.createSession, {
 			configurationId: options.configurationId,
@@ -47,7 +77,6 @@ async function createSession(apiKey, options, signal) {
 			externalCustomerId: options.externalCustomerId,
 			language: options.language ?? "en-US",
 			customFields: options.customFields,
-			uuid: options.uuid ?? null,
 			urlUuid: options.urlUuid ?? null,
 			interviewId: options.interviewId ?? null,
 			...options.loginHint != null && options.loginHint !== "" ? { loginHint: options.loginHint } : {}
@@ -71,6 +100,45 @@ async function createSession(apiKey, options, signal) {
 	}
 }
 /**
+* Continues the session behind a desktop→mobile handoff link through
+* `POST /omni/session/continue`. Only `uuid` and `urlUuid` are sent, and the
+* response `sessionId` is returned as `interviewId`. `createSession` and
+* `bootstrapSession` call it when `uuid` is set.
+*
+* Each successful call spends one continue. A refused continue throws an
+* `IncodeApiError` whose `status` is one of {@link SESSION_CONTINUE_ERROR_CODES}.
+*
+* @param apiKey - The API key from the Incode dashboard
+* @param options - The handoff link's `uuid` and `urlUuid`
+* @param signal - Optional AbortSignal for request cancellation
+* @returns The continued session with token
+*/
+async function continueSession(apiKey, options, signal) {
+	try {
+		const { sessionId, token, endScreenTitle, endScreenText } = (await getApi().post(endpoints.sessionContinue, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid ?? null
+		}, {
+			headers: {
+				"x-api-key": apiKey,
+				"api-version": "1.0"
+			},
+			signal
+		})).data;
+		const session = {
+			token,
+			interviewId: sessionId,
+			endScreenTitle,
+			endScreenText
+		};
+		noteSessionCreated(session);
+		trueSightLog("info", "session", "orchestration", "session continued");
+		return session;
+	} catch (error) {
+		toIncodeApiError(endpoints.sessionContinue, error);
+	}
+}
+/**
 * Validates and rotates a QR anti-phishing URL UUID before creating a session.
 *
 * This call is unauthenticated; the `{ onboardingId, urlUuid }` pair itself
@@ -121,8 +189,8 @@ async function refreshQrUrlUuid(options, signal) {
 }
 /**
 * Validates and rotates a QR anti-phishing `urlUuid` (when present), then
-* creates a session bound to the refreshed value. When `urlUuid` is absent,
-* behaves identically to {@link createSession}.
+* creates (or, with `uuid`, continues) a session bound to the refreshed value.
+* When `urlUuid` is absent, behaves identically to {@link createSession}.
 *
 * Use this when the host owns session creation and wants the SDK to handle
 * phishing-resistance rotation in a single call. For raw control, compose
@@ -156,4 +224,4 @@ async function bootstrapSession(apiKey, options, signal) {
 	}, signal);
 }
 //#endregion
-export { refreshQrUrlUuid as a, createSession as i, QrValidationError as n, validateQrUuid as o, bootstrapSession as r, QR_VALIDATION_ERROR_CODES as t };
+export { continueSession as a, validateQrUuid as c, bootstrapSession as i, QrValidationError as n, createSession as o, SESSION_CONTINUE_ERROR_CODES as r, refreshQrUrlUuid as s, QR_VALIDATION_ERROR_CODES as t };