@incodetech/web 2.3.2 → 2.4.0-rc.1

package/dist/types/identity-reuse.d.ts

@@ -2,6 +2,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { IdentityReuseConfig } from '@incodetech/core/identity-reuse';
 import { IdentityReuseManager } from '@incodetech/core/identity-reuse';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -76,6 +77,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -89,7 +99,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -109,8 +122,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -125,6 +140,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -136,6 +158,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -167,8 +191,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-identity-reuse': HTMLElement & IncodeModuleProps<IdentityReuseConfig,
-  void,
-  IdentityReuseManagerType>;
+        'incode-identity-reuse': HTMLElement & import('preact').ComponentProps<typeof IdentityReuse>;
     }
 }

package/dist/types/index.d.ts

@@ -47,6 +47,9 @@ export declare type AssetOverride = string | {
 
 export declare type AssetOverrides = Partial<Record<AssetKey, AssetOverride>>;
 
+/** Corner the close button renders in. Defaults to `topRight`. */
+export declare type CloseButtonPosition = 'topRight' | 'topLeft';
+
 export declare function createI18n(options?: I18nOptions): TranslationInstance;
 
 export { DEFAULT_WASM_VERSION }
@@ -68,6 +71,13 @@ declare type FlowSetup = false | {
     mergeConfig?: boolean;
 };
 
+/**
+ * Where the capture help button renders. `topLeft`/`topRight` float outside
+ * the footer — the footer's own box only covers the bottom of the screen, so
+ * a top offset inside it would land mid-screen, not near the header.
+ */
+export declare type HelpButtonPosition = 'bottomRight' | 'topRight' | 'topLeft';
+
 export declare type I18nOptions = {
     lang?: string;
     loadPath?: string;
@@ -86,6 +96,16 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+/**
+ * How the realtime feedback message (the live capture cues — not aligned, too
+ * blurry, glare, show front, show back) presents itself.
+ *
+ * - `standard` — the full message: Lottie animation beside the copy.
+ * - `minimal` — compact: no animation, copy centred. More legible on small
+ *   screens, where the animation crowds the text out of the frame.
+ */
+export declare type RealtimeFeedbackMessageUIFlavor = 'standard' | 'minimal';
+
 export declare function setI18nInstance(instance: TranslationInstance): void;
 
 /**
@@ -96,7 +116,7 @@ export declare function setI18nInstance(instance: TranslationInstance): void;
  */
 export declare function setUiConfig(next: UiConfig): void;
 
-export declare function setup({ apiURL, token, customHeaders, timeout, wasm, ipLookup, hostingApp, fingerprint, devMode, featureManagement, environment, i18n, uiConfig, flow, theme, }: SetupOptions): Promise<void>;
+export declare function setup({ apiURL, token, customHeaders, timeout, wasm, ipLookup, hostingApp, fingerprint, devMode, deviceWallet, featureManagement, environment, i18n, uiConfig, flow, theme, }: SetupOptions): Promise<void>;
 
 declare type SetupOptions = {
     apiURL: string;
@@ -126,6 +146,14 @@ declare type SetupOptions = {
      * `SetupOptions.devMode` docs. WASM logging is controlled via `wasm.showLogs`.
      */
     devMode?: boolean;
+    /**
+     * Device wallet (mDL) options. Forwarded to core `setup()` — see the core
+     * `SetupOptions.deviceWallet` docs. Pass `{ googleSignedRequests: false }`
+     * to always use unsigned Google Wallet requests (testing).
+     */
+    deviceWallet?: {
+        googleSignedRequests?: boolean;
+    };
     /**
      * Enables feature management. Forwarded to core `setup()` — see the core
      * `SetupOptions.featureManagement` docs for the full behavior (identity
@@ -236,6 +264,29 @@ export declare type UiConfig = {
      * {@link SpinnerPresentation}.
      */
     spinner?: SpinnerPresentation;
+    /** Where the capture help button renders. Defaults to `'bottomRight'`. */
+    helpButtonPosition?: HelpButtonPosition;
+    /** Shows an X close button that cancels the current module. Off by default. */
+    showCloseButton?: boolean;
+    /**
+     * Close button corner when `showCloseButton` is true. Defaults to
+     * `'topRight'`. Can't match `helpButtonPosition` — on a collision the help
+     * button falls back to its own default and a dev warning is logged.
+     */
+    closeButtonPosition?: CloseButtonPosition;
+    /**
+     * How the ID-capture realtime feedback message (live cues) renders.
+     * Defaults to `'standard'` — see {@link RealtimeFeedbackMessageUIFlavor}.
+     */
+    realtimeFeedbackMessageUIFlavor?: RealtimeFeedbackMessageUIFlavor;
+    /**
+     * `true` hides the unsupported-browser screen in standalone modules; `false`
+     * forces it on. A per-element `config.disableUnsupportedBrowserScreen` wins
+     * over this. When both are omitted, the session Flow's setting applies.
+     * `<incode-flow>` and `<incode-workflow>` ignore it and always use their
+     * server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 export { }

package/dist/types/phone.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { PhoneConfig } from '@incodetech/core/phone';
 import { PhoneManager } from '@incodetech/core/phone';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Phone: FC<Omit<PhoneProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -173,6 +197,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-phone': HTMLElement & IncodeModuleProps<PhoneConfig, void, PhoneManager>;
+        'incode-phone': HTMLElement & import('preact').ComponentProps<typeof Phone>;
     }
 }

package/dist/types/qe-signature.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { QeSignatureConfig } from '@incodetech/core/qe-signature';
 import { QeSignatureManager } from '@incodetech/core/qe-signature';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const QeSignature: FC<Omit<QeSignatureModuleProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-qe-signature': HTMLElement & IncodeModuleProps<QeSignatureConfig,
-  void,
-  QeSignatureManager>;
+        'incode-qe-signature': HTMLElement & import('preact').ComponentProps<typeof QeSignature>;
     }
 }

package/dist/types/selfie.d.ts

@@ -3,6 +3,7 @@ import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
 import { SelfieConfig } from '@incodetech/core/selfie';
 import { SelfieManager } from '@incodetech/core/selfie';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 
 /**
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Selfie: FC<Omit<SelfieProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,6 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-selfie': HTMLElement & IncodeModuleProps<SelfieConfig, void, SelfieManager>;
+        'incode-selfie': HTMLElement & import('preact').ComponentProps<typeof Selfie>;
     }
 }

package/dist/types/signature.d.ts

@@ -1,6 +1,7 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SignatureConfig } from '@incodetech/core/signature';
 import { SignatureManager } from '@incodetech/core/signature';
 import { SVGProps } from 'preact/compat';
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const Signature: FC<Omit<SignatureProps, "config"> & {
     config?: (Omit<unknown, never> & DeepPartial<Pick<unknown, never>>) | undefined;
 }>;
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-signature': HTMLElement & IncodeModuleProps<SignatureConfig,
-  void,
-  SignatureManager>;
+        'incode-signature': HTMLElement & import('preact').ComponentProps<typeof Signature>;
     }
 }

package/dist/types/video-selfie.d.ts

@@ -1,12 +1,15 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { VideoSelfieConfig } from '@incodetech/core/video-selfie';
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 export declare const VideoSelfie: FC<Omit<{
     config?: VideoSelfieConfig | undefined;
     manager?: unknown;
     onFinish?: ((result?: void | undefined) => void) | undefined;
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 }, "config"> & {
     config?: (Omit<VideoSelfieConfig, "validateClosedEyes" | "validateFaceMask" | "validateHeadCover" | "validateLenses" | "speechToTextCheck" | "numberOfTries" | "useAsSelfie" | "showTutorials" | "companyName" | "checkLiveness" | "checkIdScan" | "checkDocumentScan" | "compareIdEnabled" | "compareOcrEnabled" | "compareBackIdEnabled" | "compareBackOcrEnabled" | "checkVoiceConsent" | "voiceConsentQuestions" | "selfieQualityAffectsScore" | "maxWaitingVideoSelfieFile" | "lastSecondsVideoQualityCheck" | "lastSecondsVideoQualityCheckDuration"> & DeepPartial<Pick<VideoSelfieConfig, "validateClosedEyes" | "validateFaceMask" | "validateHeadCover" | "validateLenses" | "speechToTextCheck" | "numberOfTries" | "useAsSelfie" | "showTutorials" | "companyName" | "checkLiveness" | "checkIdScan" | "checkDocumentScan" | "compareIdEnabled" | "compareOcrEnabled" | "compareBackIdEnabled" | "compareBackOcrEnabled" | "checkVoiceConsent" | "voiceConsentQuestions" | "selfieQualityAffectsScore" | "maxWaitingVideoSelfieFile" | "lastSecondsVideoQualityCheck" | "lastSecondsVideoQualityCheckDuration">>) | undefined;
 }>;
@@ -15,6 +18,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-video-selfie': HTMLElement & IncodeModuleProps<VideoSelfieConfig>;
+        'incode-video-selfie': HTMLElement & import('preact').ComponentProps<typeof VideoSelfie>;
     }
 }

package/dist/types/watchlist.d.ts

@@ -1,6 +1,7 @@
 import { DeepPartial } from '@incodetech/core/flow';
 import { FC } from 'preact/compat';
 import { FunctionComponent } from 'preact';
+import { SessionExpiredError } from '@incodetech/core/session';
 import { SVGProps } from 'preact/compat';
 import { WatchlistConfig } from '@incodetech/core/watchlist';
 import { WatchlistManager } from '@incodetech/core/watchlist';
@@ -73,6 +74,15 @@ declare type IncodeFinishMeta = {
      * replace the SDK screen. Not a guarantee.
      */
     sdkOwnsTerminalScreen?: boolean;
+    /**
+     * True when the workflow is OAuth2-secured. The OAuth authorization server
+     * owns the redirect back to the client's `redirect_uri`, so the host must not
+     * navigate to `redirectionUrl` itself. A host redirect drops the `error` and
+     * `state` parameters, and the client reads a failed authentication as a
+     * success. The workflow always sets it on finish; treat a missing value as
+     * unknown.
+     */
+    oauth2Secured?: boolean;
 };
 
 declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TConfigInput = ConfigWithOverrides<TConfig>> = {
@@ -86,7 +96,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      */
     config?: TConfigInput;
     /**
-     * Optional pre-built manager. When provided, the module does not create or manage the manager lifecycle.
+     * Optional pre-built manager. The host owns its ordinary lifecycle.
+     * Session expiry always stops it to release capture resources, even when
+     * supplied by the host. Create a new manager for a replacement session;
+     * do not reuse the stopped instance in another mounted module.
      */
     manager?: TManager;
     /**
@@ -106,8 +119,10 @@ declare type IncodeModuleProps<TConfig, TResult = void, TManager = unknown, TCon
      * @param moduleErrorCode - Optional machine-readable error code (e.g. a
      *   `FaceErrorCode` such as `NONEXISTENT_CUSTOMER`). Lets an orchestrator
      *   branch on the specific terminal error without parsing the message string.
+     * @param details - Structured session-expiry error with statusCode 401 and
+     *   code/type SESSION_EXPIRED. The first three arguments stay compatible.
      */
-    onError?: (error: string | undefined, errorCode?: number, moduleErrorCode?: string) => void;
+    onError?: ModuleErrorHandler;
 };
 
 /**
@@ -122,6 +137,13 @@ declare type InstanceOverrides = {
     assets?: AssetOverrides;
     animations?: AnimationOverrides;
     spinner?: SpinnerPresentation;
+    /**
+     * `true` hides the unsupported-browser screen for this element; `false`
+     * forces it on. Wins over `setup({ uiConfig })`. When both are omitted, the
+     * session Flow's setting applies. `<incode-flow>` and `<incode-workflow>`
+     * ignore it and always use their server setting.
+     */
+    disableUnsupportedBrowserScreen?: boolean;
 };
 
 declare type LottieAnimationData = {
@@ -133,6 +155,8 @@ declare type LottieAnimationData = {
     h: number;
 };
 
+declare type ModuleErrorHandler = (message: string | undefined, errorCode?: number, moduleErrorCode?: string, details?: SessionExpiredError) => void;
+
 /**
  * Host-facing loader presentation, settable globally via
  * `setup({ uiConfig: { spinner } })` or per element via `config.spinner`.
@@ -170,8 +194,6 @@ export { }
 
 declare global {
     interface HTMLElementTagNameMap {
-        'incode-watchlist': HTMLElement & IncodeModuleProps<WatchlistConfig,
-  void,
-  WatchlistManager>;
+        'incode-watchlist': HTMLElement & import('preact').ComponentProps<typeof Watchlist>;
     }
 }