@incodetech/web 2.3.2 → 2.4.0-rc.0

package/dist/types/workflow.d.ts

@@ -3,6 +3,8 @@ import { CustomModuleCallback } from '@incodetech/core/workflow';
 import { FC } from 'preact/compat';
 import { FinishStatus } from '@incodetech/core/flow';
 import { FunctionComponent } from 'preact';
+import { RedirectReturnParams } from '@incodetech/core/id';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 import { WasmConfig } from '@incodetech/core/wasm';
 
@@ -84,6 +86,15 @@ export declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -97,7 +108,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -117,8 +131,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 export declare const IncodeWorkflow: FC<IncodeWorkflowProps>;
@@ -137,6 +153,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -163,8 +186,14 @@ declare type MapModuleConfigOptions = {
     lang?: string;
     mergeSessionRecordings?: boolean;
     ageAssurance?: boolean;
+    digitalIdReturn?: {
+        returnParams: RedirectReturnParams;
+    };
+    digitalIdReturnUrl?: string;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 declare type SelfLoadingSessionOptions = Pick<CreateSessionOptions, 'configurationId' | 'externalId' | 'externalCustomerId' | 'customFields' | 'uuid' | 'urlUuid' | 'loginHint'>;
 
 declare type SelfLoadingWorkflowRuntimeConfig = WorkflowBaseConfig & SelfLoadingSessionOptions & (ApiKeySessionBootstrap | ClientIdSessionBootstrap) & {
@@ -237,6 +266,8 @@ declare type TokenWorkflowRuntimeConfig = WorkflowBaseConfig & {
      * initialization and surface via the SDK's terminal error screen.
      */
     urlUuid?: string;
+    endScreenTitle?: string | null;
+    endScreenText?: string | null;
     apiKey?: never;
     clientId?: never;
     configurationId?: never;
@@ -264,6 +295,22 @@ declare type WorkflowBaseConfig = {
     authHint?: string;
     /** Login-hint prefill forwarded to the DYNAMIC_FORMS module's `prefillValue`. Distinct from `authHint`. */
     loginHintPrefill?: string;
+    /**
+     * Digital-ID web-redirect return leg (Trinsic iDIN/FTN). On the return from
+     * the identity provider the host parses `success` / `sessionId` /
+     * `resultsAccessKey` from the URL and passes them here. The workflow hands
+     * them to the ID Capture node, which resumes the verification instead of
+     * starting the step over. Same contract as the flow's `digitalIdReturn`.
+     */
+    digitalIdReturn?: {
+        returnParams: RedirectReturnParams;
+    };
+    /**
+     * https route the identity provider sends the user back to after the bank
+     * login. Defaults to the current page without its query string. Same
+     * contract as the flow's `digitalIdReturnUrl`.
+     */
+    digitalIdReturnUrl?: string;
     onModuleLoading?: (moduleKey: string) => void;
     onModuleLoaded?: (moduleKey: string) => void;
     onUrlUuidRefreshed?: (urlUuid: string) => void;
@@ -275,7 +322,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-workflow': HTMLElement & IncodeModuleProps<WorkflowComponentConfig,
-  FinishStatus>;
+        'incode-workflow': HTMLElement & import('preact').ComponentProps<typeof IncodeWorkflow>;
     }
 }

package/dist/{typography-Ck7V6DNZ.js → typography-CVggEHuL.js}

@@ -1,5 +1,5 @@
 import { i as D, v as u } from "./vendor-preact-C0jX1Cbq.js";
-import { d as cn } from "./spacer-Csi6kZZI.js";
+import { d as cn } from "./spacer-CRMb016O.js";
 //#region src/shared/typography/typography.tsx
 var Title = D(({ children, className, ...rest }, ref) => {
 	return /* @__PURE__ */ u("h2", {