@incodetech/web 2.3.2-rc.4 → 2.4.0-rc.0

package/dist/types/qe-signature.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { QeSignatureConfig } from '@incodetech/core/qe-signature';
 import { QeSignatureManager } from '@incodetech/core/qe-signature';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const QeSignature: FC<Omit<QeSignatureModuleProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-qe-signature': HTMLElement & IncodeModuleProps<QeSignatureConfig,
-  void,
-  QeSignatureManager>;
+        'incode-qe-signature': HTMLElement & import('preact').ComponentProps<typeof QeSignature>;
     }
 }

package/dist/types/selfie.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { SelfieConfig } from '@incodetech/core/selfie';
 import { SelfieManager } from '@incodetech/core/selfie';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Selfie: FC<Omit<SelfieProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,6 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-selfie': HTMLElement & IncodeModuleProps<SelfieConfig, void, SelfieManager>;
+        'incode-selfie': HTMLElement & import('preact').ComponentProps<typeof Selfie>;
     }
 }

package/dist/types/signature.d.ts

@@ -1,6 +1,7 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SignatureConfig } from '@incodetech/core/signature';
 import { SignatureManager } from '@incodetech/core/signature';
 import { SVGProps } from 'preact/compat';
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Signature: FC<Omit<SignatureProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-signature': HTMLElement & IncodeModuleProps<SignatureConfig,
-  void,
-  SignatureManager>;
+        'incode-signature': HTMLElement & import('preact').ComponentProps<typeof Signature>;
     }
 }

package/dist/types/video-selfie.d.ts

@@ -1,12 +1,15 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { VideoSelfieConfig } from '@incodetech/core/video-selfie';
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const VideoSelfie: FC<Omit<{
     config?: VideoSelfieConfig | undefined;
     manager?: unknown;
     onFinish?: ((result?: void | undefined) => void) | undefined;
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 }, "config"> & {
     config?: (Omit<VideoSelfieConfig, "validateClosedEyes" | "validateFaceMask" | "validateHeadCover" | "validateLenses" | "speechToTextCheck" | "numberOfTries" | "useAsSelfie" | "showTutorials" | "companyName" | "checkLiveness" | "checkIdScan" | "checkDocumentScan" | "compareIdEnabled" | "compareOcrEnabled" | "compareBackIdEnabled" | "compareBackOcrEnabled" | "checkVoiceConsent" | "voiceConsentQuestions" | "selfieQualityAffectsScore" | "maxWaitingVideoSelfieFile" | "lastSecondsVideoQualityCheck" | "lastSecondsVideoQualityCheckDuration"> & DeepPartial<Pick<VideoSelfieConfig, "validateClosedEyes" | "validateFaceMask" | "validateHeadCover" | "validateLenses" | "speechToTextCheck" | "numberOfTries" | "useAsSelfie" | "showTutorials" | "companyName" | "checkLiveness" | "checkIdScan" | "checkDocumentScan" | "compareIdEnabled" | "compareOcrEnabled" | "compareBackIdEnabled" | "compareBackOcrEnabled" | "checkVoiceConsent" | "voiceConsentQuestions" | "selfieQualityAffectsScore" | "maxWaitingVideoSelfieFile" | "lastSecondsVideoQualityCheck" | "lastSecondsVideoQualityCheckDuration">>) | undefined;
 }>;
@@ -15,6 +18,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-video-selfie': HTMLElement & IncodeModuleProps<VideoSelfieConfig>;
+        'incode-video-selfie': HTMLElement & import('preact').ComponentProps<typeof VideoSelfie>;
     }
 }

package/dist/types/watchlist.d.ts

@@ -1,6 +1,7 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 import { WatchlistConfig } from '@incodetech/core/watchlist';
 import { WatchlistManager } from '@incodetech/core/watchlist';
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-watchlist': HTMLElement & IncodeModuleProps<WatchlistConfig,
-  void,
-  WatchlistManager>;
+        'incode-watchlist': HTMLElement & import('preact').ComponentProps<typeof Watchlist>;
     }
 }

package/dist/types/workflow.d.ts

@@ -3,6 +3,8 @@ import { CustomModuleCallback } from '@incodetech/core/workflow';
 import { FC } from 'preact/compat';
 import { FinishStatus } from '@incodetech/core/flow';
 import { FunctionComponent } from 'preact';
+import { RedirectReturnParams } from '@incodetech/core/id';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 import { WasmConfig } from '@incodetech/core/wasm';
 
@@ -84,6 +86,15 @@ export declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -97,7 +108,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -117,8 +131,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 export declare const IncodeWorkflow: FC<IncodeWorkflowProps>;
@@ -137,6 +153,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -163,8 +186,14 @@ declare type MapModuleConfigOptions = {
     lang?: string;
     mergeSessionRecordings?: boolean;
     ageAssurance?: boolean;
+    digitalIdReturn?: {
+        returnParams: RedirectReturnParams;
+    };
+    digitalIdReturnUrl?: string;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 declare type SelfLoadingSessionOptions = Pick<CreateSessionOptions, 'configurationId' | 'externalId' | 'externalCustomerId' | 'customFields' | 'uuid' | 'urlUuid' | 'loginHint'>;
 
 declare type SelfLoadingWorkflowRuntimeConfig = WorkflowBaseConfig & SelfLoadingSessionOptions & (ApiKeySessionBootstrap | ClientIdSessionBootstrap) & {
@@ -237,6 +266,8 @@ declare type TokenWorkflowRuntimeConfig = WorkflowBaseConfig & {
      * initialization and surface via the SDK's terminal error screen.
      */
     urlUuid?: string;
+    endScreenTitle?: string | null;
+    endScreenText?: string | null;
     apiKey?: never;
     clientId?: never;
     configurationId?: never;
@@ -264,6 +295,22 @@ declare type WorkflowBaseConfig = {
     authHint?: string;
     /** Login-hint prefill forwarded to the DYNAMIC_FORMS module's `prefillValue`. Distinct from `authHint`. */
     loginHintPrefill?: string;
+    /**
+     * Digital-ID web-redirect return leg (Trinsic iDIN/FTN). On the return from
+     * the identity provider the host parses `success` / `sessionId` /
+     * `resultsAccessKey` from the URL and passes them here. The workflow hands
+     * them to the ID Capture node, which resumes the verification instead of
+     * starting the step over. Same contract as the flow's `digitalIdReturn`.
+     */
+    digitalIdReturn?: {
+        returnParams: RedirectReturnParams;
+    };
+    /**
+     * https route the identity provider sends the user back to after the bank
+     * login. Defaults to the current page without its query string. Same
+     * contract as the flow's `digitalIdReturnUrl`.
+     */
+    digitalIdReturnUrl?: string;
     onModuleLoading?: (moduleKey: string) => void;
     onModuleLoaded?: (moduleKey: string) => void;
     onUrlUuidRefreshed?: (urlUuid: string) => void;
@@ -275,7 +322,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-workflow': HTMLElement & IncodeModuleProps<WorkflowComponentConfig,
-  FinishStatus>;
+        'incode-workflow': HTMLElement & import('preact').ComponentProps<typeof IncodeWorkflow>;
     }
 }

package/dist/{typography-Cn7-Znpn.js → typography-CVggEHuL.js}

@@ -1,5 +1,5 @@
 import { i as D, v as u } from "./vendor-preact-C0jX1Cbq.js";
-import { d as cn } from "./spacer-BmQEPV3n.js";
+import { d as cn } from "./spacer-CRMb016O.js";
 //#region src/shared/typography/typography.tsx
 var Title = D(({ children, className, ...rest }, ref) => {
 	return /* @__PURE__ */ u("h2", {