@incodetech/web 2.3.2-rc.4 → 2.4.0-rc.0

package/dist/types/geolocation.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { GeolocationConfig } from '@incodetech/core/geolocation';
 import { GeolocationManager } from '@incodetech/core/geolocation';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -82,6 +83,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -95,7 +105,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -115,8 +128,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -131,6 +146,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -142,6 +164,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -173,6 +197,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-geolocation': HTMLElement & IncodeModuleProps<GeolocationConfig>;
+        'incode-geolocation': HTMLElement & import('preact').ComponentProps<typeof Geolocation_2>;
     }
 }

package/dist/types/government-validation.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { GovernmentValidationConfig } from '@incodetech/core/government-validation';
 import { GovernmentValidationManager } from '@incodetech/core/government-validation';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -79,6 +80,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -92,7 +102,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -112,8 +125,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -128,6 +143,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -139,6 +161,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -167,3 +191,9 @@ declare type SpinnerSize = 'small' | 'medium' | 'large';
 declare type SvgComponent = FunctionComponent<SVGProps<SVGSVGElement>>;
 
 export { }
+
+declare global {
+    interface HTMLElementTagNameMap {
+        'incode-government-validation': HTMLElement & import('preact').ComponentProps<typeof GovernmentValidation>;
+    }
+}

package/dist/types/id-selfie-flow.d.ts

@@ -2,6 +2,7 @@ import { FC } from 'preact/compat';
 import { FinishStatus } from '@incodetech/core/flow';
 import { FunctionComponent } from 'preact';
 import { IdSelfieFlowConfig } from '@incodetech/core/id-selfie-flow';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -54,17 +55,6 @@ declare type AssetOverrides = Partial<Record<AssetKey, AssetOverride>>;
  */
 declare type ConfigWithOverrides<TConfig> = TConfig & InstanceOverrides;
 
-/**
- * ID + Selfie flow UI component (PoC). Runs the regular ID + selfie capture
- * pipeline behind the Video Selfie continuous-camera UX.
- *
- * Config is resolved from the active session's FLOW configuration (the same
- * dashboard config the regular ID and SELFIE modules read — steps, attempts,
- * tutorial, selfie validations); any `config` prop values win over the
- * flow-derived ones.
- *
- * @see {@link createIdSelfieFlowManager} for headless usage.
- */
 export declare const IdSelfieFlow: FC<IdSelfieFlowProps>;
 
 /** Props for the {@link IdSelfieFlow} component. */
@@ -91,6 +81,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -104,7 +103,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -124,8 +126,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -140,6 +144,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -151,6 +162,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -182,6 +195,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-id-selfie-flow': HTMLElement & IncodeModuleProps<IdSelfieFlowConfig>;
+        'incode-id-selfie-flow': HTMLElement & import('preact').ComponentProps<typeof IdSelfieFlow>;
     }
 }

package/dist/types/id-verification.d.ts

@@ -2,6 +2,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { IdVerificationConfig } from '@incodetech/core/id-verification';
 import { IdVerificationManager } from '@incodetech/core/id-verification';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -76,6 +77,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -89,7 +99,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -109,8 +122,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -125,6 +140,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -136,6 +158,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -167,8 +191,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-id-verification': HTMLElement & IncodeModuleProps<IdVerificationConfig,
-  void,
-  IdVerificationManager>;
+        'incode-id-verification': HTMLElement & import('preact').ComponentProps<typeof IdVerification>;
     }
 }

package/dist/types/id.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { IdCaptureConfig } from '@incodetech/core/id';
 import { IdCaptureManager } from '@incodetech/core/id';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -79,6 +80,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -92,7 +102,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -112,8 +125,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -128,6 +143,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -139,6 +161,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -170,6 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-id': HTMLElement & IncodeModuleProps<IdCaptureConfig, unknown, IdCaptureManager>;
+        'incode-id': HTMLElement & import('preact').ComponentProps<typeof Id>;
     }
 }

package/dist/types/identity-reuse.d.ts

@@ -2,6 +2,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { IdentityReuseConfig } from '@incodetech/core/identity-reuse';
 import { IdentityReuseManager } from '@incodetech/core/identity-reuse';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -76,6 +77,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -89,7 +99,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -109,8 +122,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -125,6 +140,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -136,6 +158,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -167,8 +191,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-identity-reuse': HTMLElement & IncodeModuleProps<IdentityReuseConfig,
-  void,
-  IdentityReuseManagerType>;
+        'incode-identity-reuse': HTMLElement & import('preact').ComponentProps<typeof IdentityReuse>;
     }
 }

package/dist/types/index.d.ts

@@ -47,6 +47,9 @@ export declare type AssetOverride = string | {
 
 export declare type AssetOverrides = Partial<Record<AssetKey, AssetOverride>>;
 
+/** Corner the close button renders in. Defaults to `topRight`. */
+export declare type CloseButtonPosition = 'topRight' | 'topLeft';
+
 export declare function createI18n(options?: I18nOptions): TranslationInstance;
 
 export { DEFAULT_WASM_VERSION }
@@ -68,6 +71,13 @@ declare type FlowSetup = false | {
     mergeConfig?: boolean;
 };
 
+/**
+ * Where the capture help button renders. `topLeft`/`topRight` float outside
+ * the footer — the footer's own box only covers the bottom of the screen, so
+ * a top offset inside it would land mid-screen, not near the header.
+ */
+export declare type HelpButtonPosition = 'bottomRight' | 'topRight' | 'topLeft';
+
 export declare type I18nOptions = {
     lang?: string;
     loadPath?: string;
@@ -86,6 +96,16 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+/**
+ * How the realtime feedback message (the live capture cues — not aligned, too
+ * blurry, glare, show front, show back) presents itself.
+ *
+ * - `standard` — the full message: Lottie animation beside the copy.
+ * - `minimal` — compact: no animation, copy centred. More legible on small
+ *   screens, where the animation crowds the text out of the frame.
+ */
+export declare type RealtimeFeedbackMessageUIFlavor = 'standard' | 'minimal';
+
 export declare function setI18nInstance(instance: TranslationInstance): void;
 
 /**
@@ -96,7 +116,7 @@ export declare function setI18nInstance(instance: TranslationInstance): void;
  */
 export declare function setUiConfig(next: UiConfig): void;
 
-export declare function setup({ apiURL, token, customHeaders, timeout, wasm, ipLookup, hostingApp, fingerprint, devMode, featureManagement, environment, i18n, uiConfig, flow, theme, }: SetupOptions): Promise<void>;
+export declare function setup({ apiURL, token, customHeaders, timeout, wasm, ipLookup, hostingApp, fingerprint, devMode, deviceWallet, featureManagement, environment, i18n, uiConfig, flow, theme, }: SetupOptions): Promise<void>;
 
 declare type SetupOptions = {
     apiURL: string;
@@ -126,6 +146,14 @@ declare type SetupOptions = {
      * `SetupOptions.devMode` docs. WASM logging is controlled via `wasm.showLogs`.
      */
     devMode?: boolean;
+    /**
+     * Device wallet (mDL) options. Forwarded to core `setup()` — see the core
+     * `SetupOptions.deviceWallet` docs. Pass `{ googleSignedRequests: false }`
+     * to always use unsigned Google Wallet requests (testing).
+     */
+    deviceWallet?: {
+        googleSignedRequests?: boolean;
+    };
     /**
      * Enables feature management. Forwarded to core `setup()` — see the core
      * `SetupOptions.featureManagement` docs for the full behavior (identity
@@ -236,6 +264,29 @@ export declare type UiConfig = {
      * {@link SpinnerPresentation}.
      */
     spinner?: SpinnerPresentation;
+    /** Where the capture help button renders. Defaults to `'bottomRight'`. */
+    helpButtonPosition?: HelpButtonPosition;
+    /** Shows an X close button that cancels the current module. Off by default. */
+    showCloseButton?: boolean;
+    /**
+     * Close button corner when `showCloseButton` is true. Defaults to
+     * `'topRight'`. Can't match `helpButtonPosition` — on a collision the help
+     * button falls back to its own default and a dev warning is logged.
+     */
+    closeButtonPosition?: CloseButtonPosition;
+    /**
+     * How the ID-capture realtime feedback message (live cues) renders.
+     * Defaults to `'standard'` — see {@link RealtimeFeedbackMessageUIFlavor}.
+     */
+    realtimeFeedbackMessageUIFlavor?: RealtimeFeedbackMessageUIFlavor;
+    /**
+     * `true` hides the unsupported-browser screen in standalone modules; `false`
+     * forces it on. A per-element `config.disableUnsupportedBrowserScreen` wins
+     * over this. When both are omitted, the session Flow's setting applies.
+     * `<incode-flow>` and `<incode-workflow>` ignore it and always use their
+     * server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 export { }

package/dist/types/phone.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { PhoneConfig } from '@incodetech/core/phone';
 import { PhoneManager } from '@incodetech/core/phone';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Phone: FC<Omit<PhoneProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -173,6 +197,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-phone': HTMLElement & IncodeModuleProps<PhoneConfig, void, PhoneManager>;
+        'incode-phone': HTMLElement & import('preact').ComponentProps<typeof Phone>;
     }
 }