@incodetech/core 2.4.1-agentic.4 → 2.4.1-agentic.6

package/dist/step-up.esm.js

@@ -8,13 +8,9 @@ function permissionsFirst(context) {
 function allScopeNames(permissions) {
 	return permissions.scopes.map((scope) => scope.name);
 }
-/** `auto-select` scopes are always approved: the person cannot untick them. */
-function isLockedScope(scope) {
-	return scope.selectionMode === "auto-select";
-}
-/** The scopes that start ticked (`autoSelect` or locked), in class order. */
+/** The scopes that start ticked (`autoSelect` or `auto-select`), in class order. */
 function preselectedScopes(permissions) {
-	return permissions.scopes.filter((scope) => scope.autoSelect === true || isLockedScope(scope)).map((scope) => scope.name);
+	return permissions.scopes.filter((scope) => scope.autoSelect === true || scope.selectionMode === "auto-select").map((scope) => scope.name);
 }
 /** The agent class's scopes that `approvedScopes` names, in the class order. */
 function knownScopes(permissions, approvedScopes) {
@@ -32,8 +28,8 @@ function knownScopes(permissions, approvedScopes) {
 *   (`HOSTED_FINISHED` / `HOSTED_DENIED`).
 * - `permissions` — the scope checkboxes; the ones Incode marked `autoSelect`
 *   start checked (from the agent class's scope selection modes), the rest
-*   unchecked, and Approve needs at least one. `auto-select` scopes are
-*   always approved, so they stay checked and cannot be toggled.
+*   unchecked. The person may untick any of them, and Approve needs at least
+*   one.
 * - `savingPermissions` — only when the host saves the choice: waits for it,
 *   then runs the face check (`beforeFaceCheck`) or finishes. A failed save
 *   is `error` (`VERIFICATION_ERROR`, `detail.code` `PERMISSIONS_NOT_SAVED`).
@@ -67,8 +63,7 @@ const stepUpMachine = setup({
 		toggleScope: assign(({ context, event }) => {
 			const { name } = event;
 			const known = allScopeNames(context.permissions);
-			const scope = context.permissions.scopes.find((candidate) => candidate.name === name);
-			if (!scope || isLockedScope(scope)) return {};
+			if (!context.permissions.scopes.find((candidate) => candidate.name === name)) return {};
 			const selected = new Set(context.selectedScopes);
 			if (selected.has(name)) selected.delete(name);
 			else selected.add(name);
@@ -248,7 +243,7 @@ function invalid(message, stepUpId) {
 	throw new StepUpError("INVALID_OPTIONS", message, stepUpId);
 }
 function normalizeScope(raw, index) {
-	if (!isRecord$1(raw) || !isNonEmptyString(raw.name)) invalid(`permissions.scopes[${index}].name must be a non-empty string`);
+	if (!isRecord$1(raw) || !isNonEmptyString(raw.name)) invalid(`consent.scopes[${index}].name must be a non-empty string`);
 	const displayName = optionalString(raw.displayName);
 	const description = optionalString(raw.description);
 	const autoSelect = typeof raw.autoSelect === "boolean" ? raw.autoSelect : void 0;
@@ -287,22 +282,21 @@ function normalizeLimits(raw, scopeNames) {
 	return Object.keys(limits).length > 0 ? limits : void 0;
 }
 /**
-* Checks the permissions block from the start response and fills in
+* Checks the consent block from the start response and fills in
 * `displayName` (falls back to the scope name). Keeps each scope's boolean
 * `autoSelect` and known `selectionMode`, and the valid limits of known
-* scopes. A missing or `null` `durationSeconds` is left out. Throws
-* `INVALID_OPTIONS` when a required field is missing, or `durationSeconds` is
-* given but not a positive number.
+* scopes. Throws `INVALID_OPTIONS` when a required field is missing, or
+* `durationSeconds` is not a positive number.
 */
 function normalizeStepUpPermissions(raw) {
-	if (!isRecord$1(raw)) invalid("permissions is required");
+	if (!isRecord$1(raw)) invalid("consent is required");
 	const scopesRaw = raw.scopes;
-	if (!Array.isArray(scopesRaw) || scopesRaw.length === 0) invalid("permissions.scopes must list at least one scope");
+	if (!Array.isArray(scopesRaw) || scopesRaw.length === 0) invalid("consent.scopes must list at least one scope");
 	const scopes = scopesRaw.map(normalizeScope);
 	const names = new Set(scopes.map((scope) => scope.name));
-	if (names.size !== scopes.length) invalid("permissions.scopes must not repeat a scope name");
+	if (names.size !== scopes.length) invalid("consent.scopes must not repeat a scope name");
 	const { durationSeconds } = raw;
-	if (durationSeconds !== void 0 && durationSeconds !== null && (typeof durationSeconds !== "number" || !Number.isFinite(durationSeconds) || durationSeconds <= 0)) invalid("permissions.durationSeconds must be a positive number when given");
+	if (typeof durationSeconds !== "number" || !Number.isFinite(durationSeconds) || durationSeconds <= 0) invalid("consent.durationSeconds must be a positive number");
 	const agentClassId = optionalString(raw.agentClassId);
 	const purpose = optionalString(raw.purpose);
 	const limits = normalizeLimits(raw.limits, names);
@@ -311,7 +305,7 @@ function normalizeStepUpPermissions(raw) {
 		...purpose ? { purpose } : {},
 		scopes,
 		...limits ? { limits } : {},
-		...typeof durationSeconds === "number" ? { durationSeconds } : {}
+		durationSeconds
 	};
 }
 /**
@@ -363,7 +357,7 @@ function validateStepUpOptions(raw) {
 	if (raw.disableDashboardTheme !== void 0 && typeof raw.disableDashboardTheme !== "boolean") invalid("disableDashboardTheme must be a boolean when given", stepUpId);
 	let permissions;
 	try {
-		permissions = normalizeStepUpPermissions(raw.permissions);
+		permissions = normalizeStepUpPermissions(raw.consent);
 	} catch (error) {
 		invalid(error instanceof Error ? error.message : String(error), stepUpId);
 	}
@@ -405,10 +399,9 @@ const UNITS = [
 * Picks the largest unit that divides the duration exactly, so
 * 36000 s → 10 hours, 5400 s → 90 minutes. A duration that is not a whole
 * number of minutes is rounded up to minutes (never shown shorter than it is),
-* and anything under a minute stays in seconds. No duration gives `undefined`.
+* and anything under a minute stays in seconds.
 */
 function describeStepUpDuration(durationSeconds) {
-	if (durationSeconds === void 0) return void 0;
 	const seconds = Math.ceil(durationSeconds);
 	for (const { unit, seconds: size } of UNITS) if (seconds >= size && seconds % size === 0) return {
 		unit,
@@ -440,7 +433,6 @@ function readWorkflowResult(result) {
 }
 function toPermissionsState(context, saving) {
 	const { permissions, selectedScopes } = context;
-	const duration = describeStepUpDuration(permissions.durationSeconds);
 	return {
 		status: "permissions",
 		...permissions.purpose ? { purpose: permissions.purpose } : {},
@@ -449,11 +441,10 @@ function toPermissionsState(context, saving) {
 			return {
 				...scope,
 				checked: selectedScopes.includes(scope.name),
-				locked: isLockedScope(scope),
 				...limit ? { limit } : {}
 			};
 		}),
-		...duration ? { duration } : {},
+		duration: describeStepUpDuration(permissions.durationSeconds),
 		canApprove: selectedScopes.length > 0,
 		saving
 	};

package/dist/{tri-6laLcIfQ.esm.js → tri-B9aoyV2Z.esm.js}

@@ -1,4 +1,4 @@
-import { t as SDK_VERSION } from "./sdkVersion-D0wnG9m1.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-BNA7_9wn.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
 //#region ../infra/src/providers/browser/TransactionalRiskIntelligenceProvider.ts
@@ -8,7 +8,7 @@ const LAZY_IMPORT_OPTIONS = {
 	timeoutMs: 1e4,
 	disabledMessage: "TRI will be disabled for this session."
 };
-const importSdk = () => import("./tri.esm-DgTlfPhR.esm.js");
+const importSdk = () => import("./tri.esm-DgtAka_v.esm.js");
 /**
 * Concrete implementation of {@link ITransactionalRiskIntelligenceCapability}.
 *
@@ -266,40 +266,11 @@ async function initializeTRI(config, options = {}) {
 		return isTRIStarted() ? "started" : "ready";
 	}
 	sdkOwnsTRI = true;
-	const state = await setupTRI(options.fpSignalsFromSdk ? withoutFpSignals(resolvedTriConfig) : resolvedTriConfig);
+	const state = await setupTRI(resolvedTriConfig);
 	if (isTRIStarted() && options.sessionToken) await linkSessionWithTRI(options.sessionToken);
 	return state;
 }
 /**
-* SDK 2 first: its runtime already collects the fingerprint, so TRI does not
-* load a second fpSignals module, and the SDK passes its own results to TRI
-* (`addTRIFpSignals`). The host's `layers` or `collectors` choice is kept.
-*/
-function withoutFpSignals(config) {
-	if (config.layers) return {
-		...config,
-		layers: {
-			...config.layers,
-			"device-fingerprinting": false
-		}
-	};
-	if (config.collectors) return {
-		...config,
-		collectors: {
-			...config.collectors,
-			fpsignals: { enabled: false }
-		}
-	};
-	return {
-		...config,
-		layers: {
-			session: true,
-			behavioral: true,
-			"device-fingerprinting": false
-		}
-	};
-}
-/**
 * TRI's fpSignals PID and DEVICE results, waiting at most
 * {@link FP_SIGNALS_WAIT_MS} for the module to finish. Resolves `null` when
 * TRI is not started, its `fpsignals` collector is off or failed (CSP, load

package/dist/tri.d.ts

@@ -1,2 +1,2 @@
-import { a as setupTRI, c as TransactionalRiskIntelligenceSetupConfig, i as resetTRI, n as getTRIActivityId, o as startTRI, r as isTRIStarted, s as stopTRI, t as createTRISession } from "./index-BfSZvEHi.js";
+import { a as setupTRI, c as TransactionalRiskIntelligenceSetupConfig, i as resetTRI, n as getTRIActivityId, o as startTRI, r as isTRIStarted, s as stopTRI, t as createTRISession } from "./index-DlVDVTcf.js";
 export { type TransactionalRiskIntelligenceSetupConfig, createTRISession, getTRIActivityId, isTRIStarted, resetTRI, setupTRI, startTRI, stopTRI };