@incodetech/core 2.4.1-agentic.3 → 2.4.1-agentic.5

package/dist/{index-BfSZvEHi.d.ts → index-bD4-zpjs.d.ts}

@@ -1,4 +1,4 @@
-//#region ../../node_modules/.pnpm/@incodetech+tri-sdk@0.6.0-dev-20261104212047-22ce035d6de3f090847e5c394becf4e7a3415970/node_modules/@incodetech/tri-sdk/dist/index.d.ts
+//#region ../../node_modules/.pnpm/@incodetech+tri-sdk@0.6.0-dev-20261105224144-22a4059ab471ae6b7ddc9d5b9bf1a84e1092a0cc/node_modules/@incodetech/tri-sdk/dist/index.d.ts
 type CollectorKey = 'pointer' | 'pointermove' | 'focus' | 'input' | 'keystroke' | 'clipboard' | 'form' | 'change' | 'selection' | 'tab' | 'visibility' | 'navigation' | 'viewportresize' | 'viewport' | 'scroll' | 'sensors' | 'network-request' | 'networkconnection' | 'screen' | 'wheel' | 'hover' | 'shinsei' | 'fpsignals';
 type CollectorEventMap = {
   /**
@@ -87,8 +87,9 @@ type TRIConfigBase = {
   apiURL: string;
   /**
    * SDK token obtained from a B2B server call or via `createSession`.
-   * This is the short-lived token that identifies a specific SDK session —
-   * the consumer's API key must never be passed here.
+   * It identifies the organization and lasts 7 days by default (`expiresAt`
+   * from `createSession` says when it ends). The consumer's API key must
+   * never be passed here.
    */
   token: string;
   /**

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { a as isConfigured, l as setup, o as reset, t as SetupOptions } from "./setup-CmqnkqsR.js";
+import { a as isConfigured, l as setup, o as reset, t as SetupOptions } from "./setup-Dyv1tJFj.js";
 export { type SetupOptions, isConfigured, reset, setup };

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import { i as reset, r as isConfigured, s as setup } from "./setup-CR-3VM37.esm.js";
+import { i as reset, r as isConfigured, s as setup } from "./setup-Bz4l-E3R.esm.js";
 export { isConfigured, reset, setup };

package/dist/kyb-checks.esm.js

@@ -1,3 +1,3 @@
-import { t as kybChecksMachine } from "./kybChecksStateMachine-BY_36-hd.esm.js";
-import { t as createKybChecksManager } from "./kybChecksManager-D99QhLQ4.esm.js";
+import { t as kybChecksMachine } from "./kybChecksStateMachine-B_GS-KmL.esm.js";
+import { t as createKybChecksManager } from "./kybChecksManager-CbqLrEox.esm.js";
 export { createKybChecksManager, kybChecksMachine };

package/dist/{kybChecksManager-D99QhLQ4.esm.js → kybChecksManager-CbqLrEox.esm.js}

@@ -1,5 +1,5 @@
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as kybChecksMachine } from "./kybChecksStateMachine-BY_36-hd.esm.js";
+import { t as kybChecksMachine } from "./kybChecksStateMachine-B_GS-KmL.esm.js";
 //#region src/modules/kyb-checks/kybChecksActor.ts
 /** Creates and starts a KYB Checks actor, idle until `LOAD`. */
 function createKybChecksActor(options = {}) {

package/dist/{kybChecksStateMachine-BY_36-hd.esm.js → kybChecksStateMachine-B_GS-KmL.esm.js}

@@ -1,5 +1,5 @@
 import { t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
-import { i as toIncodeApiError, t as IncodeApiError } from "./apiError-Cp00d-5I.esm.js";
+import { i as toIncodeApiError, t as IncodeApiError } from "./apiError-CeyLcwt3.esm.js";
 import { n as loadPhoneValidation } from "./phoneValidation-OggtfjRt.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";

package/dist/mandatory-consent.d.ts

@@ -1,3 +1,3 @@
 import { r as MandatoryConsentConfig } from "./types-Cd0J0F9D.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-CNDoNxm3.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-CEn59Ytw.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-CNDoNxm3.d.ts → mandatoryConsentManager-CEn59Ytw.d.ts}

@@ -57,26 +57,26 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
     type: "setError";
     params: NonReducibleUnknown;
   };
-  setLoadError: {
-    type: "setLoadError";
-    params: NonReducibleUnknown;
-  };
   clearError: {
     type: "clearError";
     params: NonReducibleUnknown;
   };
-  resetContext: {
-    type: "resetContext";
+  setLoadError: {
+    type: "setLoadError";
     params: NonReducibleUnknown;
   };
   toggleSigned: {
     type: "toggleSigned";
     params: NonReducibleUnknown;
   };
+  resetContext: {
+    type: "resetContext";
+    params: NonReducibleUnknown;
+  };
 }>, {
   type: "canSubmit";
   params: unknown;
-}, never, "error" | "idle" | "closed" | "finished" | "submitting" | "loading" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
+}, never, "error" | "idle" | "closed" | "finished" | "loading" | "submitting" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
   readonly id: "mandatoryConsent";
   readonly initial: "idle";
   readonly context: ({ input }: {

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-qCul2Oix.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-CHe4KM2h.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{runChildModule-DY7Gxw3g.esm.js → runChildModule-DHDczcGZ.esm.js}

@@ -1,6 +1,6 @@
 import { n as getTimestamp } from "./IBrowserEnvironmentCapability-D7JG7ML3.esm.js";
 import { w as createEventBus } from "./events-ggpBBaZ8.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-C96uqLaj.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-DDdJ8TrY.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/internal/flow-events/flowEvents.ts

package/dist/{sdkVersion-sD_Jpwep.esm.js → sdkVersion-CxaRTa9r.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "2.4.1-agentic.3";
+const SDK_VERSION = "2.4.1-agentic.5";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.esm.js

@@ -1,14 +1,14 @@
-import { u as BrowserStorageProvider } from "./setup-CR-3VM37.esm.js";
+import { u as BrowserStorageProvider } from "./setup-Bz4l-E3R.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
 import { n as eventModuleNames } from "./events-ggpBBaZ8.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-DimauotJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CAUH7R1T.esm.js";
-import { s as processFace } from "./FaceDetectionProvider-CV1N6-wL.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup--MEv7wIJ.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-GmZMp6TR.esm.js";
+import { s as processFace } from "./FaceDetectionProvider-ZiDiL_hY.esm.js";
 import { s as PROTECTED_CAPTURE_TARGET } from "./desktopCameraElection-BGMtYwk3.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BzR8y4pn.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-BrUM1zP0.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-B8pBvum8.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-EgnSX_Hu.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BJ0GVHGr.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base

package/dist/{selfieErrorUtils-DiUk0Spe.esm.js → selfieErrorUtils-Dk0ofKio.esm.js}

@@ -1,4 +1,4 @@
-import { u as FACE_ERROR_CODES } from "./FaceDetectionProvider-CV1N6-wL.esm.js";
+import { u as FACE_ERROR_CODES } from "./FaceDetectionProvider-ZiDiL_hY.esm.js";
 //#region src/modules/selfie/selfieErrorUtils.ts
 const FACE_ERROR_CODE_VALUES = Object.values(FACE_ERROR_CODES);
 const isFaceErrorCode = (value) => {

package/dist/{selfieManager-BrUM1zP0.esm.js → selfieManager-EgnSX_Hu.esm.js}

@@ -1,9 +1,9 @@
-import { u as BrowserStorageProvider } from "./setup-CR-3VM37.esm.js";
+import { u as BrowserStorageProvider } from "./setup-Bz4l-E3R.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
 import { n as eventModuleNames } from "./events-ggpBBaZ8.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CAUH7R1T.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BzR8y4pn.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-GmZMp6TR.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-B8pBvum8.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-BzR8y4pn.esm.js → selfieStateMachine-B8pBvum8.esm.js}

@@ -1,8 +1,8 @@
 import { i as assign } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-DimauotJ.esm.js";
-import { d as isOnDeviceMode, s as processFace, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-CV1N6-wL.esm.js";
-import { n as validateUploadResponse } from "./selfieErrorUtils-DiUk0Spe.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup--MEv7wIJ.esm.js";
+import { d as isOnDeviceMode, s as processFace, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-ZiDiL_hY.esm.js";
+import { n as validateUploadResponse } from "./selfieErrorUtils-Dk0ofKio.esm.js";
 /**
 * The selfie capture state machine.
 *

package/dist/{session-CkCdOGrY.esm.js → session-CaliXPVw.esm.js}

@@ -1,7 +1,7 @@
 import { n as getApi, u as endpoints } from "./api-CpP4PS4S.esm.js";
-import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-C96uqLaj.esm.js";
-import "./sessionInitializer-DaX5j_g9.esm.js";
-import { i as toIncodeApiError } from "./apiError-Cp00d-5I.esm.js";
+import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-DDdJ8TrY.esm.js";
+import "./sessionInitializer-Tr_ZkaSs.esm.js";
+import { i as toIncodeApiError } from "./apiError-CeyLcwt3.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic

package/dist/session.esm.js

@@ -1,10 +1,10 @@
 import { r as getToken } from "./api-CpP4PS4S.esm.js";
 import { r as subscribeHttpErrors } from "./HttpRequestError-Bh0pNGSC.esm.js";
-import { a as initializeSession, f as whenSessionFingerprintSettled } from "./sessionInitializer-DaX5j_g9.esm.js";
+import { a as initializeSession, f as whenSessionFingerprintSettled } from "./sessionInitializer-Tr_ZkaSs.esm.js";
 import { n as onConnectivityChange, r as resumeConnectivity, t as isConnectivityLost } from "./connectivity-BCuEoQ-n.esm.js";
-import { t as IncodeApiError } from "./apiError-Cp00d-5I.esm.js";
-import { a as continueSession, c as validateQrUuid, i as bootstrapSession, n as QrValidationError, o as createSession, r as SESSION_CONTINUE_ERROR_CODES, s as refreshQrUrlUuid, t as QR_VALIDATION_ERROR_CODES } from "./session-CkCdOGrY.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-BUv4Reay.esm.js";
+import { t as IncodeApiError } from "./apiError-CeyLcwt3.esm.js";
+import { a as continueSession, c as validateQrUuid, i as bootstrapSession, n as QrValidationError, o as createSession, r as SESSION_CONTINUE_ERROR_CODES, s as refreshQrUrlUuid, t as QR_VALIDATION_ERROR_CODES } from "./session-CaliXPVw.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-E8ipjpAG.esm.js";
 //#region src/internal/session/sessionExpired.ts
 var SessionExpiredError = class extends Error {
 	constructor() {

package/dist/{sessionInitializer-DaX5j_g9.esm.js → sessionInitializer-Tr_ZkaSs.esm.js}

@@ -2,15 +2,15 @@ import { n as getTimestamp } from "./IBrowserEnvironmentCapability-D7JG7ML3.esm.
 import { n as setWasmMetadataV2Enabled } from "./wasmMetadataVersionSync-U8EFUr1T.esm.js";
 import { C as subscribeEvent, b as getAnalyticsBatcher, y as addEvent } from "./events-ggpBBaZ8.esm.js";
 import { c as setToken, r as getToken, t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
-import { C as noteTokenActivated, _ as isFeatureEnabled, b as noteEnvironment, c as startTrueSightCollection, g as fetchFeatureConfig, u as trueSightLog, v as resetFeatureConfigCache } from "./trueSightService-C96uqLaj.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-sD_Jpwep.esm.js";
+import { C as noteTokenActivated, _ as isFeatureEnabled, b as noteEnvironment, c as startTrueSightCollection, g as fetchFeatureConfig, u as trueSightLog, v as resetFeatureConfigCache } from "./trueSightService-DDdJ8TrY.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CxaRTa9r.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { E as updateFeatureManagementUser } from "./feature-management-CvdrPdpa.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-hZhfjdAu.esm.js";
 import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-CatA2dea.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-DhQPeKqw.esm.js";
 import { a as isIOS } from "./platform-aPh7gTWh.esm.js";
 import { t as getUserAgent } from "./getBrowser-CBiibsL-.esm.js";
-import { a as isTRIStarted, o as linkSessionWithTRI, s as readTRIFpSignals } from "./tri-__fK_lJT.esm.js";
+import { a as isTRIStarted, o as linkSessionWithTRI, s as readTRIFpSignals } from "./tri-CKUbuky5.esm.js";
 import { i as retryAfterReconnect } from "./connectivity-BCuEoQ-n.esm.js";
 //#region src/internal/version/sdkPlatform.ts
 /**

package/dist/{setup-CR-3VM37.esm.js → setup-Bz4l-E3R.esm.js}

@@ -3,14 +3,14 @@ import { a as setWasmOnDeviceMode, f as drainWasmDiagnostics, i as isWasmReady,
 import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
 import { S as setAnalyticsBatcher, b as getAnalyticsBatcher, c as resetExperimentAssignments, v as createAnalyticsBatchingService, x as resetAnalyticsBatcher } from "./events-ggpBBaZ8.esm.js";
 import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
-import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-C96uqLaj.esm.js";
-import { C as fingerprintSignalsReporter, S as BrowserEnvironmentProvider, _ as setStandaloneFlowPolicy, a as initializeSession, c as setClientHostingApp, d as setClientWasmDisabled, g as resolveStandaloneFlowPolicy, h as resetStandaloneFlowPolicy, l as setClientIpLookupEnabled, m as registerFlowPreloader, o as resetSessionInit, s as setClientFingerprintEnabled, u as setClientWasmConfig } from "./sessionInitializer-DaX5j_g9.esm.js";
+import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-DDdJ8TrY.esm.js";
+import { C as fingerprintSignalsReporter, S as BrowserEnvironmentProvider, _ as setStandaloneFlowPolicy, a as initializeSession, c as setClientHostingApp, d as setClientWasmDisabled, g as resolveStandaloneFlowPolicy, h as resetStandaloneFlowPolicy, l as setClientIpLookupEnabled, m as registerFlowPreloader, o as resetSessionInit, s as setClientFingerprintEnabled, u as setClientWasmConfig } from "./sessionInitializer-Tr_ZkaSs.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as resolveLocalStorage } from "./safeStorage-UxDrnjwa.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-CvdrPdpa.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-hZhfjdAu.esm.js";
 import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-CatA2dea.esm.js";
-import { a as isTRIStarted, c as resetSdkOwnedTRI, i as initializeTRI, s as readTRIFpSignals, t as addTRIFpSignals } from "./tri-__fK_lJT.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-CeSh3IZR.esm.js";
+import { a as isTRIStarted, c as resetSdkOwnedTRI, i as initializeTRI, s as readTRIFpSignals, t as addTRIFpSignals } from "./tri-CKUbuky5.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-Co77kn9L.esm.js";
 //#region ../infra/src/wasm/wasmRuntimeProfile.ts
 /**
 * The WASM facts TrueSight reports as `session.webProfile.wasm`

package/dist/{setup-CmqnkqsR.d.ts → setup-Dyv1tJFj.d.ts}

@@ -1,5 +1,5 @@
 import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-BO57syF6.js";
-import { c as TransactionalRiskIntelligenceSetupConfig } from "./index-BfSZvEHi.js";
+import { c as TransactionalRiskIntelligenceSetupConfig } from "./index-bD4-zpjs.js";
 import { c as FeatureManagementRedactedUserInfo } from "./IFeatureManagementCapability-De8wpbGh.js";
 //#region src/internal/environment/environment.d.ts
 /**

package/dist/step-up.d.ts

@@ -26,8 +26,8 @@ type StepUpScope = {
   selectionMode?: 'auto-select' | 'dynamic-select';
 };
 /**
- * The permissions block of a step-up, exactly as the Decision API start
- * response returns it (contract v0.2 §6.1: camelCase everywhere).
+ * The step-up's `consent`, exactly as the Decision API start response
+ * returns it (contract v0.2 §6.1: camelCase everywhere).
  */
 type StepUpPermissions = {
   agentClassId?: string;
@@ -35,11 +35,8 @@ type StepUpPermissions = {
   scopes: StepUpScope[];
   /** Limits keyed by scope name; only scopes that have one are listed. */
   limits?: Record<string, StepUpLimit>;
-  /**
-   * How long the approval lasts, in seconds. The Decision API omits it when it
-   * has none; the permissions screen then shows no duration.
-   */
-  durationSeconds?: number;
+  /** How long the approval lasts, in seconds. */
+  durationSeconds: number;
 };
 /** The agent class's limit on one scope. Amounts carry no currency. */
 type StepUpLimit = {
@@ -105,25 +102,23 @@ type StepUpOptionsInput = {
   stepUpId: string;
   sessionToken: string;
   interviewId?: string;
-  permissions: StepUpPermissions;
+  /** The start response's `consent`, passed on unchanged. */
+  consent: StepUpPermissions;
   mode?: StepUpMode;
   onboardingUrl?: string;
   permissionsUi?: StepUpPermissionsUi;
   /**
    * Embedded mode: show the permissions screen before the face check
-   * (default) or after it. Ignored with `permissionsUi: 'none'`.
-   *
-   * `'afterFaceCheck'` with `onPermissionsApproved` needs Incode to accept the
-   * scope choice after the face check, which it does not yet: the bank gets
-   * 409 `STEP_UP_NOT_PENDING`, so the step-up ends with `VERIFICATION_ERROR`
-   * (`detail.code` `PERMISSIONS_NOT_SAVED`).
+   * (default) or after it. Ignored with `permissionsUi: 'none'`. Incode
+   * activates the mandate once it has both the scope choice and a passed face
+   * check, in either order.
    */
   permissionsOrder?: StepUpPermissionsOrder;
   /**
    * Embedded mode: called when the person approves, with the scopes they kept.
    * The step-up waits for the returned promise, then runs the face check (or
-   * finishes, after it). Use it to record the choice on the bank server
-   * before the interview finishes. A rejection ends the step-up with
+   * finishes, after it). Use it to have the bank server record the choice
+   * (`POST /api/v1/step-ups/{id}/scopes`). A rejection ends the step-up with
    * `VERIFICATION_ERROR`, `detail.code` `PERMISSIONS_NOT_SAVED`.
    */
   onPermissionsApproved?: (result: StepUpResult) => void | Promise<unknown>;
@@ -206,8 +201,7 @@ type StepUpPermissionsState = {
     locked: boolean;
     limit?: StepUpLimit;
   }>;
-  /** Missing when the step-up has no `durationSeconds`. */
-  duration?: StepUpDuration;
+  duration: StepUpDuration;
   /** False when no scope is checked: Approve needs at least one. */
   canApprove: boolean;
   /** Approved; the host is saving the choice before the step-up goes on. */
@@ -298,12 +292,11 @@ declare function isStepUpError(error: unknown): error is StepUpError;
 //#endregion
 //#region src/modules/step-up/stepUpOptions.d.ts
 /**
- * Checks the permissions block from the start response and fills in
+ * Checks the consent block from the start response and fills in
  * `displayName` (falls back to the scope name). Keeps each scope's boolean
  * `autoSelect` and known `selectionMode`, and the valid limits of known
- * scopes. A missing or `null` `durationSeconds` is left out. Throws
- * `INVALID_OPTIONS` when a required field is missing, or `durationSeconds` is
- * given but not a positive number.
+ * scopes. Throws `INVALID_OPTIONS` when a required field is missing, or
+ * `durationSeconds` is not a positive number.
  */
 declare function normalizeStepUpPermissions(raw: unknown): StepUpPermissions;
 /**
@@ -326,9 +319,9 @@ declare function validateStepUpOptions(raw: unknown): NormalizedStepUpOptions;
  * Picks the largest unit that divides the duration exactly, so
  * 36000 s → 10 hours, 5400 s → 90 minutes. A duration that is not a whole
  * number of minutes is rounded up to minutes (never shown shorter than it is),
- * and anything under a minute stays in seconds. No duration gives `undefined`.
+ * and anything under a minute stays in seconds.
  */
-declare function describeStepUpDuration(durationSeconds: number | undefined): StepUpDuration | undefined;
+declare function describeStepUpDuration(durationSeconds: number): StepUpDuration;
 //#endregion
 //#region src/modules/step-up/stepUpHostedMessage.d.ts
 /**

package/dist/step-up.esm.js

@@ -248,7 +248,7 @@ function invalid(message, stepUpId) {
 	throw new StepUpError("INVALID_OPTIONS", message, stepUpId);
 }
 function normalizeScope(raw, index) {
-	if (!isRecord$1(raw) || !isNonEmptyString(raw.name)) invalid(`permissions.scopes[${index}].name must be a non-empty string`);
+	if (!isRecord$1(raw) || !isNonEmptyString(raw.name)) invalid(`consent.scopes[${index}].name must be a non-empty string`);
 	const displayName = optionalString(raw.displayName);
 	const description = optionalString(raw.description);
 	const autoSelect = typeof raw.autoSelect === "boolean" ? raw.autoSelect : void 0;
@@ -287,22 +287,21 @@ function normalizeLimits(raw, scopeNames) {
 	return Object.keys(limits).length > 0 ? limits : void 0;
 }
 /**
-* Checks the permissions block from the start response and fills in
+* Checks the consent block from the start response and fills in
 * `displayName` (falls back to the scope name). Keeps each scope's boolean
 * `autoSelect` and known `selectionMode`, and the valid limits of known
-* scopes. A missing or `null` `durationSeconds` is left out. Throws
-* `INVALID_OPTIONS` when a required field is missing, or `durationSeconds` is
-* given but not a positive number.
+* scopes. Throws `INVALID_OPTIONS` when a required field is missing, or
+* `durationSeconds` is not a positive number.
 */
 function normalizeStepUpPermissions(raw) {
-	if (!isRecord$1(raw)) invalid("permissions is required");
+	if (!isRecord$1(raw)) invalid("consent is required");
 	const scopesRaw = raw.scopes;
-	if (!Array.isArray(scopesRaw) || scopesRaw.length === 0) invalid("permissions.scopes must list at least one scope");
+	if (!Array.isArray(scopesRaw) || scopesRaw.length === 0) invalid("consent.scopes must list at least one scope");
 	const scopes = scopesRaw.map(normalizeScope);
 	const names = new Set(scopes.map((scope) => scope.name));
-	if (names.size !== scopes.length) invalid("permissions.scopes must not repeat a scope name");
+	if (names.size !== scopes.length) invalid("consent.scopes must not repeat a scope name");
 	const { durationSeconds } = raw;
-	if (durationSeconds !== void 0 && durationSeconds !== null && (typeof durationSeconds !== "number" || !Number.isFinite(durationSeconds) || durationSeconds <= 0)) invalid("permissions.durationSeconds must be a positive number when given");
+	if (typeof durationSeconds !== "number" || !Number.isFinite(durationSeconds) || durationSeconds <= 0) invalid("consent.durationSeconds must be a positive number");
 	const agentClassId = optionalString(raw.agentClassId);
 	const purpose = optionalString(raw.purpose);
 	const limits = normalizeLimits(raw.limits, names);
@@ -311,7 +310,7 @@ function normalizeStepUpPermissions(raw) {
 		...purpose ? { purpose } : {},
 		scopes,
 		...limits ? { limits } : {},
-		...typeof durationSeconds === "number" ? { durationSeconds } : {}
+		durationSeconds
 	};
 }
 /**
@@ -363,7 +362,7 @@ function validateStepUpOptions(raw) {
 	if (raw.disableDashboardTheme !== void 0 && typeof raw.disableDashboardTheme !== "boolean") invalid("disableDashboardTheme must be a boolean when given", stepUpId);
 	let permissions;
 	try {
-		permissions = normalizeStepUpPermissions(raw.permissions);
+		permissions = normalizeStepUpPermissions(raw.consent);
 	} catch (error) {
 		invalid(error instanceof Error ? error.message : String(error), stepUpId);
 	}
@@ -405,10 +404,9 @@ const UNITS = [
 * Picks the largest unit that divides the duration exactly, so
 * 36000 s → 10 hours, 5400 s → 90 minutes. A duration that is not a whole
 * number of minutes is rounded up to minutes (never shown shorter than it is),
-* and anything under a minute stays in seconds. No duration gives `undefined`.
+* and anything under a minute stays in seconds.
 */
 function describeStepUpDuration(durationSeconds) {
-	if (durationSeconds === void 0) return void 0;
 	const seconds = Math.ceil(durationSeconds);
 	for (const { unit, seconds: size } of UNITS) if (seconds >= size && seconds % size === 0) return {
 		unit,
@@ -440,7 +438,6 @@ function readWorkflowResult(result) {
 }
 function toPermissionsState(context, saving) {
 	const { permissions, selectedScopes } = context;
-	const duration = describeStepUpDuration(permissions.durationSeconds);
 	return {
 		status: "permissions",
 		...permissions.purpose ? { purpose: permissions.purpose } : {},
@@ -453,7 +450,7 @@ function toPermissionsState(context, saving) {
 				...limit ? { limit } : {}
 			};
 		}),
-		...duration ? { duration } : {},
+		duration: describeStepUpDuration(permissions.durationSeconds),
 		canApprove: selectedScopes.length > 0,
 		saving
 	};

package/dist/{tri-__fK_lJT.esm.js → tri-CKUbuky5.esm.js}

@@ -1,4 +1,4 @@
-import { t as SDK_VERSION } from "./sdkVersion-sD_Jpwep.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CxaRTa9r.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
 //#region ../infra/src/providers/browser/TransactionalRiskIntelligenceProvider.ts
@@ -8,7 +8,7 @@ const LAZY_IMPORT_OPTIONS = {
 	timeoutMs: 1e4,
 	disabledMessage: "TRI will be disabled for this session."
 };
-const importSdk = () => import("./tri.esm-DgTlfPhR.esm.js");
+const importSdk = () => import("./tri.esm-DvgaFxHR.esm.js");
 /**
 * Concrete implementation of {@link ITransactionalRiskIntelligenceCapability}.
 *

package/dist/tri.d.ts

@@ -1,2 +1,2 @@
-import { a as setupTRI, c as TransactionalRiskIntelligenceSetupConfig, i as resetTRI, n as getTRIActivityId, o as startTRI, r as isTRIStarted, s as stopTRI, t as createTRISession } from "./index-BfSZvEHi.js";
+import { a as setupTRI, c as TransactionalRiskIntelligenceSetupConfig, i as resetTRI, n as getTRIActivityId, o as startTRI, r as isTRIStarted, s as stopTRI, t as createTRISession } from "./index-bD4-zpjs.js";
 export { type TransactionalRiskIntelligenceSetupConfig, createTRISession, getTRIActivityId, isTRIStarted, resetTRI, setupTRI, startTRI, stopTRI };

package/dist/{tri.esm-DgTlfPhR.esm.js → tri.esm-DvgaFxHR.esm.js}

@@ -2867,7 +2867,7 @@ async function ui(t) {
 						return Promise.race([r, o]).finally(() => {
 							C(i);
 						});
-					}(() => import("./browser-pQZA35G2-C0fRj-ID.esm.js"), 1e4);
+					}(() => import("./browser-pQZA35G2-Bu4in9gN.esm.js"), 1e4);
 					ci = t, t.then((e) => {
 						null === e && D(() => {
 							ci === t && (ci = null);

package/dist/tri.esm.js

@@ -1,2 +1,2 @@
-import { a as isTRIStarted, d as startTRI, f as stopTRI, l as resetTRI, n as createTRISession, r as getTRIActivityId, u as setupTRI } from "./tri-__fK_lJT.esm.js";
+import { a as isTRIStarted, d as startTRI, f as stopTRI, l as resetTRI, n as createTRISession, r as getTRIActivityId, u as setupTRI } from "./tri-CKUbuky5.esm.js";
 export { createTRISession, getTRIActivityId, isTRIStarted, resetTRI, setupTRI, startTRI, stopTRI };

package/dist/{trueSightService-C96uqLaj.esm.js → trueSightService-DDdJ8TrY.esm.js}

@@ -2,7 +2,7 @@ import { T as resolveWasmConfig, _ as emitWasmDiagnostic, a as setWebApiHttpTran
 import { n as getTimestamp } from "./IBrowserEnvironmentCapability-D7JG7ML3.esm.js";
 import { C as subscribeEvent, n as eventModuleNames } from "./events-ggpBBaZ8.esm.js";
 import { i as isApiConfigured, l as withTiming, n as getApi, o as setClient, r as getToken, t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-sD_Jpwep.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CxaRTa9r.esm.js";
 import { n as reportHttpError, t as HttpRequestError } from "./HttpRequestError-Bh0pNGSC.esm.js";
 /** Dirty-timer half of the interrupted-snapshot rebuild debounce (module boundaries + timer). */
 const SNAPSHOT_DIRTY_INTERVAL_MS = 15e3;

package/dist/video-selfie.esm.js

@@ -1,15 +1,15 @@
-import { t as ensureWasmPipelines } from "./setup-CR-3VM37.esm.js";
+import { t as ensureWasmPipelines } from "./setup-Bz4l-E3R.esm.js";
 import { t as WasmUtilProvider } from "./WasmUtilProvider-Dp2V-Uct.esm.js";
 import { t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
-import { f as facingModeForStep, m as videoSelfieWasmPipelines, p as resolveVideoSelfieSteps } from "./flowServices-CeSh3IZR.esm.js";
+import { f as facingModeForStep, m as videoSelfieWasmPipelines, p as resolveVideoSelfieSteps } from "./flowServices-Co77kn9L.esm.js";
 import { i as assign, l as raise, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 import { t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-BrJN1B8A.esm.js";
 import { t as carryAttempts } from "./attemptCarry-WOkfvFMw.esm.js";
 import { t as VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE } from "./advanceableErrors-k-U-cL5m.esm.js";
-import { n as defaultAcquireCamera, r as createDefaultStepDetector, s as isConnectionError, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-B9FzTNcx.esm.js";
+import { n as defaultAcquireCamera, r as createDefaultStepDetector, s as isConnectionError, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-Dsk8JQNy.esm.js";
 import { r as createRecordingCompositor } from "./CameraCompositor-DN7NkJzV.esm.js";
 import { t as WorkerEncoderRecordingProvider } from "./WorkerEncoderRecordingProvider-B1ODYtgN.esm.js";
 import { t as MultipartRecordingService } from "./multipartRecordingService-BTqkHGG9.esm.js";

package/dist/{videoSelfieCameraWarmer-B9FzTNcx.esm.js → videoSelfieCameraWarmer-Dsk8JQNy.esm.js}

@@ -1,13 +1,13 @@
 import { t as api, u as endpoints } from "./api-CpP4PS4S.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { f as facingModeForStep, p as resolveVideoSelfieSteps } from "./flowServices-CeSh3IZR.esm.js";
+import { f as facingModeForStep, p as resolveVideoSelfieSteps } from "./flowServices-Co77kn9L.esm.js";
 import { i as requestCameraWithFallback, r as requestCameraAccess } from "./camera-E_Kcre4O.esm.js";
 import { t as checkPermission } from "./permissionServices-D190ATGD.esm.js";
-import { c as uploadSelfie, n as encryptSelfieImage, o as startDetection, s as processFace, t as FaceDetectionProvider, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-CV1N6-wL.esm.js";
+import { c as uploadSelfie, n as encryptSelfieImage, o as startDetection, s as processFace, t as FaceDetectionProvider, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-ZiDiL_hY.esm.js";
 import { t as StreamCanvasProcessingSession } from "./StreamCanvasProcessingSession-CBnbTnOr.esm.js";
 import { n as getBackCameraStream } from "./backCameraStream-DS1oDiUq.esm.js";
 import { n as getWindowDimensions } from "./getDeviceClass-CeBiEayS.esm.js";
-import { t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-DiUk0Spe.esm.js";
+import { t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-Dk0ofKio.esm.js";
 import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-Dszuq9ng.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/video-selfie/videoSelfieCompareService.ts

package/dist/wasm.d.ts

@@ -1,5 +1,5 @@
 import { a as WASM_MODEL_FILES, c as WasmPipeline, l as WasmSource, o as WasmGlueLoader, r as warmupWasm, s as WasmModelName, t as WarmupConfig } from "./warmup-BO57syF6.js";
-import { c as setWasmConfig, i as initializeWasmUtil, n as WasmConfig, r as ensureWasmPipelines, s as resolveWasmConfigForPipelines, u as upgradeToWasmHttpClient } from "./setup-CmqnkqsR.js";
+import { c as setWasmConfig, i as initializeWasmUtil, n as WasmConfig, r as ensureWasmPipelines, s as resolveWasmConfigForPipelines, u as upgradeToWasmHttpClient } from "./setup-Dyv1tJFj.js";
 //#region ../infra/src/wasm/wasmDefaults.d.ts
 /** The WASM version bundled and tested with this SDK release. */
 declare const DEFAULT_WASM_VERSION = "v2.14.54-pre6";

package/dist/wasm.esm.js

@@ -1,6 +1,6 @@
 import { D as WASM_PIPELINE_LAZY_MODEL_NAMES, E as WASM_MODEL_FILES, S as buildWasmConfigFromBasePath, T as resolveWasmConfig, b as DEFAULT_WASM_VERSION, k as WASM_PIPELINE_MODEL_NAMES, x as buildDefaultWasmConfig } from "./wasmWebClient-BDrax6Eu.esm.js";
 import { s as warmupWasm } from "./warmup-DtB0DJpl.esm.js";
-import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines } from "./setup-CR-3VM37.esm.js";
+import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines } from "./setup-Bz4l-E3R.esm.js";
 //#region src/defineWasm.ts
 function requiredModels(pipelines) {
 	const models = /* @__PURE__ */ new Set();