@memberjunction/ng-conversations 6.2.0-edge.3 → 6.2.0-edge.5

package/dist/lib/components/realtime/identity-verification/identity-verification-model.d.ts

@@ -0,0 +1,129 @@
+import { Observable } from 'rxjs';
+import type { JSONObject } from '@memberjunction/ai';
+import type { IdentityVerifiedEventPayload, RealtimeChannelActor } from '@memberjunction/ai-core-plus';
+import type { RealtimeChannelVerbResult } from '@memberjunction/realtime-runtime';
+import type { RealtimeSessionVerificationResult } from '@memberjunction/graphql-dataprovider';
+/** Where a field's current value came from. */
+export type IdentityFieldSource = 'user' | 'agent' | 'host';
+/** The two things a person is asked for. */
+export type IdentityField = 'name' | 'email';
+/** The channel's lifecycle. `collecting` covers "still getting the values" and "must send (again)". */
+export type IdentityVerificationStatus = 'collecting' | 'sending' | 'code_sent' | 'verifying' | 'verified';
+/** What the channel needs from the server — the two calls it makes. `GraphQLRealtimeSessionClient` fits. */
+export interface IdentityVerificationService {
+    Request(input: {
+        Name: string;
+        Email: string;
+    }): Promise<RealtimeSessionVerificationResult>;
+    SubmitCode(code: string): Promise<RealtimeSessionVerificationResult>;
+}
+/** One field as the surface renders it. */
+export interface IdentityFieldView {
+    Value: string;
+    /** Who supplied the value; `null` while empty. */
+    Source: IdentityFieldSource | null;
+    /** The user wrote it, or approved it. Anything else must not be sent. */
+    Confirmed: boolean;
+}
+/** Everything the surface renders — an immutable snapshot, replaced on every change. */
+export interface IdentityVerificationView {
+    Status: IdentityVerificationStatus;
+    Name: IdentityFieldView;
+    Email: IdentityFieldView;
+    /** The latest problem, in words a person can act on; `''` when there is none. */
+    Problem: string;
+    /** The server's machine-readable code for {@link Problem}, when it gave one. */
+    ProblemCode: string;
+    /** Both values present and confirmed, and nothing in flight or already sent for them. */
+    CanSubmit: boolean;
+    /** Epoch ms before which another send is refused (server back-off); `0` when none. */
+    ResendAvailableAt: number;
+    /** Sends the server will still allow for this session, when it said. */
+    SendsRemaining: number | null;
+    /** Code attempts left, when the server said. */
+    AttemptsRemaining: number | null;
+    /** The address the code went to (`code_sent`/`verifying`), or the verified one. */
+    Destination: string;
+}
+/** A change the model reports so the channel can record it (events + coalesced perception). */
+export interface IdentityVerificationChange {
+    /** Who caused it (`system` for the server's answer / event). */
+    Author: RealtimeChannelActor | 'system';
+    /** The channel event this change is announced as, with its payload. */
+    Event?: {
+        Name: string;
+        Payload: JSONObject;
+    };
+}
+/**
+ * The identity-verification state machine — framework-free, so it is testable without Angular and shared
+ * by the channel (which adds the descriptor, events and perception) and the surface (which only renders
+ * {@link View$} and sends the user's actions back through the channel).
+ *
+ * The invariants it exists to hold:
+ *  - **The user is the author or the approver of everything that is sent.** A value the user typed is
+ *    confirmed by being theirs; a value the agent (or the host) supplied is NOT, until the user confirms
+ *    it — and only the user can ({@link Confirm} refuses any other actor). Changing a value un-sends it.
+ *  - **The server's `identity.verified` event is what makes a session verified.** A successful code
+ *    submission also applies it, but only as a fallback for a transport without events, and idempotently.
+ *  - **A code is never stored, echoed or put in a result** — it passes through {@link EnterCode} to the
+ *    server and no further.
+ */
+export declare class IdentityVerificationModel {
+    private readonly service;
+    private readonly now;
+    private view;
+    private readonly viewSubject;
+    private changeListener;
+    /** The values the live code was sent for, so a later change can tell it is stale. */
+    private sentFor;
+    /**
+     * @param service The server calls.
+     * @param now Clock, injectable for tests.
+     */
+    constructor(service: IdentityVerificationService | null, now?: () => number);
+    /** The current view, then every change. */
+    get View$(): Observable<IdentityVerificationView>;
+    get View(): IdentityVerificationView;
+    /** Registers the (single) listener told about every change — the channel. */
+    OnChange(listener: ((change: IdentityVerificationChange) => void) | null): void;
+    /** The channel's `GetState` snapshot (the descriptor's nouns). */
+    ToState(): JSONObject;
+    /** Seeds values the HOST knows (open inputs). They are unconfirmed — the user still has to approve them. */
+    Seed(inputs: JSONObject): void;
+    /** `fill` — set a field. A value the user types is confirmed by being theirs; anyone else's is not. */
+    Fill(args: JSONObject, actor: RealtimeChannelActor): RealtimeChannelVerbResult;
+    /** `confirm` — the user approves what is shown. Refused for anyone but the user, whatever the schema says. */
+    Confirm(args: JSONObject, actor: RealtimeChannelActor): RealtimeChannelVerbResult;
+    /** `submit` — send the code to the confirmed address. */
+    Submit(): Promise<RealtimeChannelVerbResult>;
+    /** `resend` — send a fresh code to the same, already-confirmed address. */
+    Resend(): Promise<RealtimeChannelVerbResult>;
+    /** `enter_code` — hand the code the person received to the server. The code is never kept. */
+    EnterCode(args: JSONObject): Promise<RealtimeChannelVerbResult>;
+    /**
+     * The server says the person is verified (the `identity.verified` event). Idempotent. Returns whether
+     * this call made the change, so the channel completes exactly once.
+     */
+    MarkVerified(payload: IdentityVerifiedEventPayload): boolean;
+    private sendCode;
+    private applySent;
+    private applySendFailure;
+    private applyCodeFailure;
+    private applyVerifiedFromResult;
+    /** Why a send must not go ahead, as a ready-made failure; `null` when it may. */
+    private blockReasonForSend;
+    /** A change to the values a code was sent for makes that code stale: back to collecting. */
+    private dropStaleCodeIfChanged;
+    private setField;
+    private setConfirmed;
+    private key;
+    private readField;
+    private problemFor;
+    private ok;
+    private fail;
+    private initialView;
+    /** Recomputes the derived flag, publishes the snapshot, and tells the channel. */
+    private publish;
+}
+//# sourceMappingURL=identity-verification-model.d.ts.map

package/dist/lib/components/realtime/identity-verification/identity-verification-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-verification-model.d.ts","sourceRoot":"","sources":["../../../../../src/lib/components/realtime/identity-verification/identity-verification-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,UAAU,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACvG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAE9F,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAE5D,4CAA4C;AAC5C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7C,uGAAuG;AACvG,MAAM,MAAM,0BAA0B,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAE3G,4GAA4G;AAC5G,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC5F,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;CACtE;AAED,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wFAAwF;AACxF,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,0BAA0B,CAAC;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,iBAAiB,CAAC;IACzB,iFAAiF;IACjF,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,SAAS,EAAE,OAAO,CAAC;IACnB,sFAAsF;IACtF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gDAAgD;IAChD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,+FAA+F;AAC/F,MAAM,WAAW,0BAA0B;IACzC,gEAAgE;IAChE,MAAM,EAAE,oBAAoB,GAAG,QAAQ,CAAC;IACxC,uEAAuE;IACvE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,UAAU,CAAA;KAAE,CAAC;CAC/C;AAuCD;;;;;;;;;;;;;GAaG;AACH,qBAAa,yBAAyB;IAYlC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAZtB,OAAO,CAAC,IAAI,CAAgD;IAC5D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4D;IACxF,OAAO,CAAC,cAAc,CAA+D;IACrF,qFAAqF;IACrF,OAAO,CAAC,OAAO,CAAgD;IAE/D;;;OAGG;gBAEgB,OAAO,EAAE,2BAA2B,GAAG,IAAI,EAC3C,GAAG,GAAE,MAAM,MAAyB;IAGvD,2CAA2C;IAC3C,IAAW,KAAK,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAEvD;IAED,IAAW,IAAI,IAAI,wBAAwB,CAE1C;IAED,6EAA6E;IACtE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAItF,kEAAkE;IAC3D,OAAO,IAAI,UAAU;IAa5B,4GAA4G;IACrG,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAUrC,uGAAuG;IAChG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,GAAG,yBAAyB;IAoCrF,8GAA8G;IACvG,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,oBAAoB,GAAG,yBAAyB;IAwBxF,yDAAyD;IAC5C,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAQzD,2EAA2E;IAC9D,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC;IAWzD,8FAA8F;IACjF,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAyB5E;;;OAGG;IACI,YAAY,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO;YAuBrD,QAAQ;IActB,OAAO,CAAC,SAAS;IAgBjB,OAAO,CAAC,gBAAgB;IAcxB,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,uBAAuB;IAY/B,iFAAiF;IACjF,OAAO,CAAC,kBAAkB;IA2B1B,4FAA4F;IAC5F,OAAO,CAAC,sBAAsB;IAO9B,OAAO,CAAC,QAAQ;IAKhB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,EAAE;IAIV,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,WAAW;IAenB,kFAAkF;IAClF,OAAO,CAAC,OAAO;CAShB"}

package/dist/lib/components/realtime/identity-verification/identity-verification-model.js

@@ -0,0 +1,373 @@
+import { BehaviorSubject } from 'rxjs';
+const MAX_FIELD_LENGTH = 200;
+const MAX_CODE_LENGTH = 16;
+/** A deliberately permissive shape check — the server owns real validation; this only catches "not an email". */
+const EMAIL_SHAPE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+/** Server error codes whose cause the person cannot fix by retrying the same code: they must request a new one. */
+const NEEDS_NEW_CODE = new Set(['code_expired', 'attempts_exhausted', 'no_pending_verification']);
+/** What to say for an error code when the server gave no message of its own. */
+const DEFAULT_PROBLEMS = {
+    verification_unavailable: 'Email verification is not available right now.',
+    invalid_input: 'Please check the details and try again.',
+    invalid_email: 'That does not look like a valid email address.',
+    session_not_found: 'This call is no longer active.',
+    session_closed: 'This call has ended.',
+    domain_blocked: 'That email address cannot be used here.',
+    consumer_domain: 'Please use your work email address.',
+    send_limit_reached: 'No more codes can be sent for this call.',
+    rate_limited: 'Too many attempts. Please wait a moment and try again.',
+    email_send_failed: 'We could not send the email. Please check the address and try again.',
+    no_pending_verification: 'There is no code waiting. Please request a new one.',
+    code_expired: 'That code has expired. Please request a new one.',
+    invalid_code: 'That code is not right. Please check it and try again.',
+    attempts_exhausted: 'Too many wrong codes. Please request a new one.',
+    invalid_link: 'That link is no longer valid.',
+    persist_failed: 'Something went wrong on our side. Please try again.',
+    transport_error: 'We could not reach the server. Please try again.'
+};
+function clean(value, max) {
+    return typeof value === 'string' ? value.trim().slice(0, max) : '';
+}
+function emptyField() {
+    return { Value: '', Source: null, Confirmed: false };
+}
+/**
+ * The identity-verification state machine — framework-free, so it is testable without Angular and shared
+ * by the channel (which adds the descriptor, events and perception) and the surface (which only renders
+ * {@link View$} and sends the user's actions back through the channel).
+ *
+ * The invariants it exists to hold:
+ *  - **The user is the author or the approver of everything that is sent.** A value the user typed is
+ *    confirmed by being theirs; a value the agent (or the host) supplied is NOT, until the user confirms
+ *    it — and only the user can ({@link Confirm} refuses any other actor). Changing a value un-sends it.
+ *  - **The server's `identity.verified` event is what makes a session verified.** A successful code
+ *    submission also applies it, but only as a fallback for a transport without events, and idempotently.
+ *  - **A code is never stored, echoed or put in a result** — it passes through {@link EnterCode} to the
+ *    server and no further.
+ */
+export class IdentityVerificationModel {
+    service;
+    now;
+    view = this.initialView();
+    viewSubject = new BehaviorSubject(this.view);
+    changeListener = null;
+    /** The values the live code was sent for, so a later change can tell it is stale. */
+    sentFor = null;
+    /**
+     * @param service The server calls.
+     * @param now Clock, injectable for tests.
+     */
+    constructor(service, now = () => Date.now()) {
+        this.service = service;
+        this.now = now;
+    }
+    /** The current view, then every change. */
+    get View$() {
+        return this.viewSubject.asObservable();
+    }
+    get View() {
+        return this.view;
+    }
+    /** Registers the (single) listener told about every change — the channel. */
+    OnChange(listener) {
+        this.changeListener = listener;
+    }
+    /** The channel's `GetState` snapshot (the descriptor's nouns). */
+    ToState() {
+        const v = this.view;
+        return {
+            name: v.Name.Value,
+            email: v.Email.Value,
+            status: v.Status,
+            confirmed: { name: v.Name.Confirmed, email: v.Email.Confirmed },
+            problem: v.Problem
+        };
+    }
+    // ── Verbs ──────────────────────────────────────────────────────────────────
+    /** Seeds values the HOST knows (open inputs). They are unconfirmed — the user still has to approve them. */
+    Seed(inputs) {
+        for (const field of ['name', 'email']) {
+            const value = clean(inputs[field], MAX_FIELD_LENGTH);
+            if (value.length > 0 && this.view[this.key(field)].Value.length === 0) {
+                this.setField(field, value, 'host');
+            }
+        }
+        this.publish({ Author: 'system' });
+    }
+    /** `fill` — set a field. A value the user types is confirmed by being theirs; anyone else's is not. */
+    Fill(args, actor) {
+        if (this.view.Status === 'verified') {
+            return this.fail('already_verified', 'This person is already verified; there is nothing to fill in.');
+        }
+        if (this.view.Status === 'sending' || this.view.Status === 'verifying') {
+            return this.fail('verb_failed', 'A request is in progress; wait for it to finish.');
+        }
+        const field = this.readField(args['field']);
+        const value = clean(args['value'], MAX_FIELD_LENGTH);
+        if (field === null) {
+            return this.fail('invalid_params', 'field must be "name" or "email".');
+        }
+        if (value.length === 0) {
+            return this.fail('invalid_params', 'value must not be empty.');
+        }
+        if (field === 'email' && !EMAIL_SHAPE.test(value)) {
+            return this.fail('invalid_params', 'That does not look like an email address. Ask the user to spell it out, then fill it again.');
+        }
+        const current = this.view[this.key(field)];
+        // The same value again changes nothing — in particular an agent repeating what the user typed must
+        // not un-confirm it. The one exception: the user typing exactly what the agent suggested IS them
+        // confirming it, so that falls through and records the user as the author.
+        if (current.Value === value && !(actor === 'user' && !current.Confirmed)) {
+            return this.ok(`The ${field} was already set to that.`);
+        }
+        this.setField(field, value, actor);
+        this.dropStaleCodeIfChanged();
+        this.view = { ...this.view, Status: 'collecting', Problem: '', ProblemCode: '' };
+        this.publish({ Author: actor, Event: { Name: 'field_filled', Payload: { field, actor, confirmed: this.view[this.key(field)].Confirmed } } });
+        return this.ok(actor === 'agent'
+            ? `The ${field} is filled in and shown to the user, who must confirm it before anything is sent.`
+            : `The user entered their ${field}.`);
+    }
+    /** `confirm` — the user approves what is shown. Refused for anyone but the user, whatever the schema says. */
+    Confirm(args, actor) {
+        if (actor !== 'user') {
+            return this.fail('not_invokable_by_agent', 'Only the user can confirm their own details. Ask them to check the form and confirm.');
+        }
+        const requested = args['field'] === undefined ? null : this.readField(args['field']);
+        if (args['field'] !== undefined && requested === null) {
+            return this.fail('invalid_params', 'field must be "name" or "email" (or omitted to confirm both).');
+        }
+        const fields = requested ? [requested] : ['name', 'email'];
+        const confirmed = [];
+        for (const field of fields) {
+            const f = this.view[this.key(field)];
+            if (f.Value.length > 0 && !f.Confirmed) {
+                this.setConfirmed(field);
+                confirmed.push(field);
+            }
+        }
+        if (confirmed.length === 0) {
+            return this.fail('verb_failed', 'There is nothing to confirm.');
+        }
+        this.publish({ Author: 'user', Event: { Name: 'confirmed', Payload: { fields: confirmed } } });
+        return this.ok('Confirmed.');
+    }
+    /** `submit` — send the code to the confirmed address. */
+    async Submit() {
+        const blocked = this.blockReasonForSend('submit');
+        if (blocked) {
+            return blocked;
+        }
+        return this.sendCode();
+    }
+    /** `resend` — send a fresh code to the same, already-confirmed address. */
+    async Resend() {
+        if (this.view.Status !== 'code_sent') {
+            return this.fail('verb_failed', 'No code has been sent yet. Use submit first.');
+        }
+        const blocked = this.blockReasonForSend('resend');
+        if (blocked) {
+            return blocked;
+        }
+        return this.sendCode();
+    }
+    /** `enter_code` — hand the code the person received to the server. The code is never kept. */
+    async EnterCode(args) {
+        if (this.view.Status === 'verified') {
+            return this.fail('already_verified', 'This person is already verified.');
+        }
+        if (this.view.Status !== 'code_sent') {
+            return this.fail('verb_failed', this.view.Status === 'verifying' ? 'A code is being checked; wait for the answer.' : 'No code has been sent yet. Send one first.');
+        }
+        const code = clean(args['code'], MAX_CODE_LENGTH);
+        if (code.length === 0) {
+            return this.fail('invalid_params', 'code must not be empty.');
+        }
+        if (!this.service) {
+            return this.fail('verb_failed', 'Verification is not available in this session.');
+        }
+        this.view = { ...this.view, Status: 'verifying', Problem: '', ProblemCode: '' };
+        this.publish({ Author: 'user', Event: { Name: 'code_entered', Payload: {} } });
+        const result = await this.service.SubmitCode(code);
+        if (this.view.Status === 'verified') {
+            return this.ok('Verified.'); // the server's event got there first
+        }
+        return result.Success && result.VerificationState === 'verified' ? this.applyVerifiedFromResult(result) : this.applyCodeFailure(result);
+    }
+    // ── Server's word ──────────────────────────────────────────────────────────
+    /**
+     * The server says the person is verified (the `identity.verified` event). Idempotent. Returns whether
+     * this call made the change, so the channel completes exactly once.
+     */
+    MarkVerified(payload) {
+        if (this.view.Status === 'verified') {
+            return false;
+        }
+        const email = clean(payload.VerifiedEmail, MAX_FIELD_LENGTH);
+        const name = clean(payload.VerifiedName, MAX_FIELD_LENGTH);
+        this.view = {
+            ...this.view,
+            Status: 'verified',
+            Name: name.length > 0 ? { Value: name, Source: this.view.Name.Source ?? 'user', Confirmed: true } : this.view.Name,
+            Email: { Value: email, Source: this.view.Email.Source ?? 'user', Confirmed: true },
+            Destination: email,
+            Problem: '',
+            ProblemCode: '',
+            ResendAvailableAt: 0
+        };
+        this.sentFor = null;
+        this.publish({ Author: 'system', Event: { Name: 'verified', Payload: { email, name, method: payload.Method } } });
+        return true;
+    }
+    // ── Internals ──────────────────────────────────────────────────────────────
+    async sendCode() {
+        if (!this.service) {
+            return this.fail('verb_failed', 'Verification is not available in this session.');
+        }
+        const { Name, Email } = { Name: this.view.Name.Value, Email: this.view.Email.Value };
+        this.view = { ...this.view, Status: 'sending', Problem: '', ProblemCode: '' };
+        this.publish({ Author: 'system' });
+        const result = await this.service.Request({ Name, Email });
+        if (this.view.Status === 'verified') {
+            return this.ok('Verified.');
+        }
+        return result.Success ? this.applySent(result, Name, Email) : this.applySendFailure(result);
+    }
+    applySent(result, name, email) {
+        this.sentFor = { Name: name, Email: email };
+        this.view = {
+            ...this.view,
+            Status: 'code_sent',
+            Destination: email,
+            Problem: '',
+            ProblemCode: '',
+            SendsRemaining: result.SendsRemaining ?? null,
+            AttemptsRemaining: result.AttemptsRemaining ?? null,
+            ResendAvailableAt: result.RetryAfterSeconds ? this.now() + result.RetryAfterSeconds * 1000 : 0
+        };
+        this.publish({ Author: 'system', Event: { Name: 'code_sent', Payload: { email } } });
+        return this.ok(`A code was emailed to ${email}. The user can type it in, or open the link in the email. Do not ask them to read the code aloud.`);
+    }
+    applySendFailure(result) {
+        const problem = this.problemFor(result);
+        this.view = {
+            ...this.view,
+            Status: 'collecting',
+            Problem: problem,
+            ProblemCode: result.ErrorCode ?? '',
+            ResendAvailableAt: result.RetryAfterSeconds ? this.now() + result.RetryAfterSeconds * 1000 : this.view.ResendAvailableAt,
+            SendsRemaining: result.SendsRemaining ?? this.view.SendsRemaining
+        };
+        this.publish({ Author: 'system', Event: { Name: 'error', Payload: { code: result.ErrorCode ?? 'unknown', stage: 'send' } } });
+        return this.fail(result.ErrorCode ?? 'verb_failed', problem);
+    }
+    applyCodeFailure(result) {
+        const problem = this.problemFor(result);
+        const code = result.ErrorCode ?? '';
+        this.view = {
+            ...this.view,
+            Status: NEEDS_NEW_CODE.has(code) ? 'collecting' : 'code_sent',
+            Problem: problem,
+            ProblemCode: code,
+            AttemptsRemaining: result.AttemptsRemaining ?? this.view.AttemptsRemaining
+        };
+        if (NEEDS_NEW_CODE.has(code)) {
+            this.sentFor = null;
+        }
+        this.publish({ Author: 'system', Event: { Name: 'error', Payload: { code: code || 'unknown', stage: 'code' } } });
+        return this.fail(code || 'verb_failed', problem);
+    }
+    applyVerifiedFromResult(result) {
+        const email = result.VerifiedEmail ?? this.view.Email.Value;
+        this.MarkVerified({
+            VerifiedEmail: email,
+            VerifiedName: this.view.Name.Value,
+            VerifiedAt: result.VerifiedAt ?? new Date(this.now()).toISOString(),
+            Method: 'code',
+            ...(result.MaxSessionDeadlineIso ? { MaxSessionDeadlineIso: result.MaxSessionDeadlineIso } : {})
+        });
+        return this.ok('Verified.');
+    }
+    /** Why a send must not go ahead, as a ready-made failure; `null` when it may. */
+    blockReasonForSend(verb) {
+        const v = this.view;
+        if (v.Status === 'verified') {
+            return this.fail('already_verified', 'This person is already verified.');
+        }
+        if (v.Status === 'sending' || v.Status === 'verifying') {
+            return this.fail('verb_failed', 'A request is in progress; wait for it to finish.');
+        }
+        if (verb === 'submit' && v.Status === 'code_sent') {
+            return this.fail('verb_failed', 'A code was already sent to this address. Wait for the user to enter it, or use resend.');
+        }
+        if (v.Name.Value.length === 0 || v.Email.Value.length === 0) {
+            return this.fail('verb_failed', 'Both the name and the email are needed first. Fill in what is missing.');
+        }
+        if (!v.Name.Confirmed || !v.Email.Confirmed) {
+            return this.fail('verb_failed', 'The user has not confirmed their details yet. Ask them to check the form and confirm; you cannot confirm for them.');
+        }
+        if (v.SendsRemaining === 0) {
+            return this.fail('send_limit_reached', DEFAULT_PROBLEMS['send_limit_reached']);
+        }
+        const wait = v.ResendAvailableAt - this.now();
+        if (wait > 0) {
+            return this.fail('rate_limited', `Another code can be sent in ${Math.ceil(wait / 1000)} seconds.`);
+        }
+        return null;
+    }
+    /** A change to the values a code was sent for makes that code stale: back to collecting. */
+    dropStaleCodeIfChanged() {
+        if (this.sentFor && (this.sentFor.Name !== this.view.Name.Value || this.sentFor.Email !== this.view.Email.Value)) {
+            this.sentFor = null;
+            this.view = { ...this.view, Destination: '', AttemptsRemaining: null };
+        }
+    }
+    setField(field, value, source) {
+        const next = { Value: value, Source: source, Confirmed: source === 'user' };
+        this.view = { ...this.view, [this.key(field)]: next };
+    }
+    setConfirmed(field) {
+        const key = this.key(field);
+        this.view = { ...this.view, [key]: { ...this.view[key], Confirmed: true } };
+    }
+    key(field) {
+        return field === 'name' ? 'Name' : 'Email';
+    }
+    readField(raw) {
+        return raw === 'name' || raw === 'email' ? raw : null;
+    }
+    problemFor(result) {
+        return (result.Message && result.Message.trim()) || DEFAULT_PROBLEMS[result.ErrorCode ?? ''] || 'Something went wrong. Please try again.';
+    }
+    ok(message, extra = {}) {
+        return { Success: true, Result: { message, status: this.view.Status, ...extra } };
+    }
+    fail(code, message) {
+        return { Success: false, ErrorCode: code, Error: message };
+    }
+    initialView() {
+        return {
+            Status: 'collecting',
+            Name: emptyField(),
+            Email: emptyField(),
+            Problem: '',
+            ProblemCode: '',
+            CanSubmit: false,
+            ResendAvailableAt: 0,
+            SendsRemaining: null,
+            AttemptsRemaining: null,
+            Destination: ''
+        };
+    }
+    /** Recomputes the derived flag, publishes the snapshot, and tells the channel. */
+    publish(change) {
+        const v = this.view;
+        this.view = {
+            ...v,
+            CanSubmit: v.Status === 'collecting' && v.Name.Value.length > 0 && v.Email.Value.length > 0 && v.Name.Confirmed && v.Email.Confirmed
+        };
+        this.viewSubject.next(this.view);
+        this.changeListener?.(change);
+    }
+}
+//# sourceMappingURL=identity-verification-model.js.map

package/dist/lib/components/realtime/identity-verification/identity-verification-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-verification-model.js","sourceRoot":"","sources":["../../../../../src/lib/components/realtime/identity-verification/identity-verification-model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAc,MAAM,MAAM,CAAC;AA2DnD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,iHAAiH;AACjH,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAEjD,mHAAmH;AACnH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAEvH,gFAAgF;AAChF,MAAM,gBAAgB,GAAqC;IACzD,wBAAwB,EAAE,gDAAgD;IAC1E,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,gDAAgD;IAC/D,iBAAiB,EAAE,gCAAgC;IACnD,cAAc,EAAE,sBAAsB;IACtC,cAAc,EAAE,yCAAyC;IACzD,eAAe,EAAE,qCAAqC;IACtD,kBAAkB,EAAE,0CAA0C;IAC9D,YAAY,EAAE,wDAAwD;IACtE,iBAAiB,EAAE,sEAAsE;IACzF,uBAAuB,EAAE,qDAAqD;IAC9E,YAAY,EAAE,kDAAkD;IAChE,YAAY,EAAE,wDAAwD;IACtE,kBAAkB,EAAE,iDAAiD;IACrE,YAAY,EAAE,+BAA+B;IAC7C,cAAc,EAAE,qDAAqD;IACrE,eAAe,EAAE,kDAAkD;CACpE,CAAC;AAEF,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,yBAAyB;IAYjB;IACA;IAZX,IAAI,GAA6B,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,WAAW,GAAG,IAAI,eAAe,CAA2B,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,cAAc,GAA0D,IAAI,CAAC;IACrF,qFAAqF;IAC7E,OAAO,GAA2C,IAAI,CAAC;IAE/D;;;OAGG;IACH,YACmB,OAA2C,EAC3C,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QADpC,YAAO,GAAP,OAAO,CAAoC;QAC3C,QAAG,GAAH,GAAG,CAAiC;IACpD,CAAC;IAEJ,2CAA2C;IAC3C,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;IACzC,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,6EAA6E;IACtE,QAAQ,CAAC,QAA+D;QAC7E,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;IACjC,CAAC;IAED,kEAAkE;IAC3D,OAAO;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;YAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE;YAC/D,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,4GAA4G;IACrG,IAAI,CAAC,MAAkB;QAC5B,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,uGAAuG;IAChG,IAAI,CAAC,IAAgB,EAAE,KAA2B;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,+DAA+D,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kDAAkD,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,6FAA6F,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,mGAAmG;QACnG,iGAAiG;QACjG,2EAA2E;QAC3E,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,KAAK,2BAA2B,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QACjF,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7I,OAAO,IAAI,CAAC,EAAE,CACZ,KAAK,KAAK,OAAO;YACf,CAAC,CAAC,OAAO,KAAK,mFAAmF;YACjG,CAAC,CAAC,0BAA0B,KAAK,GAAG,CACvC,CAAC;IACJ,CAAC;IAED,8GAA8G;IACvG,OAAO,CAAC,IAAgB,EAAE,KAA2B;QAC1D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,sFAAsF,CAAC,CAAC;QACrI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,+DAA+D,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,MAAM,GAAoB,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;gBACvC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACzB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/F,OAAO,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;IAED,yDAAyD;IAClD,KAAK,CAAC,MAAM;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,2EAA2E;IACpE,KAAK,CAAC,MAAM;QACjB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,8FAA8F;IACvF,KAAK,CAAC,SAAS,CAAC,IAAgB;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACrK,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,qCAAqC;QACpE,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC1I,CAAC;IAED,8EAA8E;IAE9E;;;OAGG;IACI,YAAY,CAAC,OAAqC;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,IAAI,CAAC,IAAI;YACZ,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClH,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;YAClF,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,CAAC;SACrB,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrF,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC;IAEO,SAAS,CAAC,MAAyC,EAAE,IAAY,EAAE,KAAa;QACtF,IAAI,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,IAAI,CAAC,IAAI;YACZ,MAAM,EAAE,WAAW;YACnB,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;YACnD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;SAC/F,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,EAAE,CAAC,yBAAyB,KAAK,mGAAmG,CAAC,CAAC;IACpJ,CAAC;IAEO,gBAAgB,CAAC,MAAyC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,IAAI,CAAC,IAAI;YACZ,MAAM,EAAE,YAAY;YACpB,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACnC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;YACxH,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc;SAClE,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9H,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAEO,gBAAgB,CAAC,MAAyC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,IAAI,CAAC,IAAI;YACZ,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;YAC7D,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB;SAC3E,CAAC;QACF,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAEO,uBAAuB,CAAC,MAAyC;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC;YAChB,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjG,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAED,iFAAiF;IACzE,kBAAkB,CAAC,IAAyB;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kDAAkD,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,wFAAwF,CAAC,CAAC;QAC5H,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,wEAAwE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,oHAAoH,CAAC,CAAC;QACxJ,CAAC;QACD,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,+BAA+B,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4FAA4F;IACpF,sBAAsB;QAC5B,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,KAAoB,EAAE,KAAa,EAAE,MAA2B;QAC/E,MAAM,IAAI,GAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/F,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IAEO,YAAY,CAAC,KAAoB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;IAC9E,CAAC;IAEO,GAAG,CAAC,KAAoB;QAC9B,OAAO,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7C,CAAC;IAEO,SAAS,CAAC,GAAY;QAC5B,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAEO,UAAU,CAAC,MAAyC;QAC1D,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,yCAAyC,CAAC;IAC5I,CAAC;IAEO,EAAE,CAAC,OAAe,EAAE,QAAoB,EAAE;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC;IACpF,CAAC;IAEO,IAAI,CAAC,IAAY,EAAE,OAAe;QACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC7D,CAAC;IAEO,WAAW;QACjB,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,UAAU,EAAE;YAClB,KAAK,EAAE,UAAU,EAAE;YACnB,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK;YAChB,iBAAiB,EAAE,CAAC;YACpB,cAAc,EAAE,IAAI;YACpB,iBAAiB,EAAE,IAAI;YACvB,WAAW,EAAE,EAAE;SAChB,CAAC;IACJ,CAAC;IAED,kFAAkF;IAC1E,OAAO,CAAC,MAAkC;QAChD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG;YACV,GAAG,CAAC;YACJ,SAAS,EAAE,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS;SACrI,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;CACF","sourcesContent":["import { BehaviorSubject, Observable } from 'rxjs';\nimport type { JSONObject } from '@memberjunction/ai';\nimport type { IdentityVerifiedEventPayload, RealtimeChannelActor } from '@memberjunction/ai-core-plus';\nimport type { RealtimeChannelVerbResult } from '@memberjunction/realtime-runtime';\nimport type { RealtimeSessionVerificationResult } from '@memberjunction/graphql-dataprovider';\n\n/** Where a field's current value came from. */\nexport type IdentityFieldSource = 'user' | 'agent' | 'host';\n\n/** The two things a person is asked for. */\nexport type IdentityField = 'name' | 'email';\n\n/** The channel's lifecycle. `collecting` covers \"still getting the values\" and \"must send (again)\". */\nexport type IdentityVerificationStatus = 'collecting' | 'sending' | 'code_sent' | 'verifying' | 'verified';\n\n/** What the channel needs from the server — the two calls it makes. `GraphQLRealtimeSessionClient` fits. */\nexport interface IdentityVerificationService {\n  Request(input: { Name: string; Email: string }): Promise<RealtimeSessionVerificationResult>;\n  SubmitCode(code: string): Promise<RealtimeSessionVerificationResult>;\n}\n\n/** One field as the surface renders it. */\nexport interface IdentityFieldView {\n  Value: string;\n  /** Who supplied the value; `null` while empty. */\n  Source: IdentityFieldSource | null;\n  /** The user wrote it, or approved it. Anything else must not be sent. */\n  Confirmed: boolean;\n}\n\n/** Everything the surface renders — an immutable snapshot, replaced on every change. */\nexport interface IdentityVerificationView {\n  Status: IdentityVerificationStatus;\n  Name: IdentityFieldView;\n  Email: IdentityFieldView;\n  /** The latest problem, in words a person can act on; `''` when there is none. */\n  Problem: string;\n  /** The server's machine-readable code for {@link Problem}, when it gave one. */\n  ProblemCode: string;\n  /** Both values present and confirmed, and nothing in flight or already sent for them. */\n  CanSubmit: boolean;\n  /** Epoch ms before which another send is refused (server back-off); `0` when none. */\n  ResendAvailableAt: number;\n  /** Sends the server will still allow for this session, when it said. */\n  SendsRemaining: number | null;\n  /** Code attempts left, when the server said. */\n  AttemptsRemaining: number | null;\n  /** The address the code went to (`code_sent`/`verifying`), or the verified one. */\n  Destination: string;\n}\n\n/** A change the model reports so the channel can record it (events + coalesced perception). */\nexport interface IdentityVerificationChange {\n  /** Who caused it (`system` for the server's answer / event). */\n  Author: RealtimeChannelActor | 'system';\n  /** The channel event this change is announced as, with its payload. */\n  Event?: { Name: string; Payload: JSONObject };\n}\n\nconst MAX_FIELD_LENGTH = 200;\nconst MAX_CODE_LENGTH = 16;\n/** A deliberately permissive shape check — the server owns real validation; this only catches \"not an email\". */\nconst EMAIL_SHAPE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\n/** Server error codes whose cause the person cannot fix by retrying the same code: they must request a new one. */\nconst NEEDS_NEW_CODE: ReadonlySet<string> = new Set(['code_expired', 'attempts_exhausted', 'no_pending_verification']);\n\n/** What to say for an error code when the server gave no message of its own. */\nconst DEFAULT_PROBLEMS: Readonly<Record<string, string>> = {\n  verification_unavailable: 'Email verification is not available right now.',\n  invalid_input: 'Please check the details and try again.',\n  invalid_email: 'That does not look like a valid email address.',\n  session_not_found: 'This call is no longer active.',\n  session_closed: 'This call has ended.',\n  domain_blocked: 'That email address cannot be used here.',\n  consumer_domain: 'Please use your work email address.',\n  send_limit_reached: 'No more codes can be sent for this call.',\n  rate_limited: 'Too many attempts. Please wait a moment and try again.',\n  email_send_failed: 'We could not send the email. Please check the address and try again.',\n  no_pending_verification: 'There is no code waiting. Please request a new one.',\n  code_expired: 'That code has expired. Please request a new one.',\n  invalid_code: 'That code is not right. Please check it and try again.',\n  attempts_exhausted: 'Too many wrong codes. Please request a new one.',\n  invalid_link: 'That link is no longer valid.',\n  persist_failed: 'Something went wrong on our side. Please try again.',\n  transport_error: 'We could not reach the server. Please try again.'\n};\n\nfunction clean(value: unknown, max: number): string {\n  return typeof value === 'string' ? value.trim().slice(0, max) : '';\n}\n\nfunction emptyField(): IdentityFieldView {\n  return { Value: '', Source: null, Confirmed: false };\n}\n\n/**\n * The identity-verification state machine — framework-free, so it is testable without Angular and shared\n * by the channel (which adds the descriptor, events and perception) and the surface (which only renders\n * {@link View$} and sends the user's actions back through the channel).\n *\n * The invariants it exists to hold:\n *  - **The user is the author or the approver of everything that is sent.** A value the user typed is\n *    confirmed by being theirs; a value the agent (or the host) supplied is NOT, until the user confirms\n *    it — and only the user can ({@link Confirm} refuses any other actor). Changing a value un-sends it.\n *  - **The server's `identity.verified` event is what makes a session verified.** A successful code\n *    submission also applies it, but only as a fallback for a transport without events, and idempotently.\n *  - **A code is never stored, echoed or put in a result** — it passes through {@link EnterCode} to the\n *    server and no further.\n */\nexport class IdentityVerificationModel {\n  private view: IdentityVerificationView = this.initialView();\n  private readonly viewSubject = new BehaviorSubject<IdentityVerificationView>(this.view);\n  private changeListener: ((change: IdentityVerificationChange) => void) | null = null;\n  /** The values the live code was sent for, so a later change can tell it is stale. */\n  private sentFor: { Name: string; Email: string } | null = null;\n\n  /**\n   * @param service The server calls.\n   * @param now Clock, injectable for tests.\n   */\n  constructor(\n    private readonly service: IdentityVerificationService | null,\n    private readonly now: () => number = () => Date.now()\n  ) {}\n\n  /** The current view, then every change. */\n  public get View$(): Observable<IdentityVerificationView> {\n    return this.viewSubject.asObservable();\n  }\n\n  public get View(): IdentityVerificationView {\n    return this.view;\n  }\n\n  /** Registers the (single) listener told about every change — the channel. */\n  public OnChange(listener: ((change: IdentityVerificationChange) => void) | null): void {\n    this.changeListener = listener;\n  }\n\n  /** The channel's `GetState` snapshot (the descriptor's nouns). */\n  public ToState(): JSONObject {\n    const v = this.view;\n    return {\n      name: v.Name.Value,\n      email: v.Email.Value,\n      status: v.Status,\n      confirmed: { name: v.Name.Confirmed, email: v.Email.Confirmed },\n      problem: v.Problem\n    };\n  }\n\n  // ── Verbs ──────────────────────────────────────────────────────────────────\n\n  /** Seeds values the HOST knows (open inputs). They are unconfirmed — the user still has to approve them. */\n  public Seed(inputs: JSONObject): void {\n    for (const field of ['name', 'email'] as const) {\n      const value = clean(inputs[field], MAX_FIELD_LENGTH);\n      if (value.length > 0 && this.view[this.key(field)].Value.length === 0) {\n        this.setField(field, value, 'host');\n      }\n    }\n    this.publish({ Author: 'system' });\n  }\n\n  /** `fill` — set a field. A value the user types is confirmed by being theirs; anyone else's is not. */\n  public Fill(args: JSONObject, actor: RealtimeChannelActor): RealtimeChannelVerbResult {\n    if (this.view.Status === 'verified') {\n      return this.fail('already_verified', 'This person is already verified; there is nothing to fill in.');\n    }\n    if (this.view.Status === 'sending' || this.view.Status === 'verifying') {\n      return this.fail('verb_failed', 'A request is in progress; wait for it to finish.');\n    }\n    const field = this.readField(args['field']);\n    const value = clean(args['value'], MAX_FIELD_LENGTH);\n    if (field === null) {\n      return this.fail('invalid_params', 'field must be \"name\" or \"email\".');\n    }\n    if (value.length === 0) {\n      return this.fail('invalid_params', 'value must not be empty.');\n    }\n    if (field === 'email' && !EMAIL_SHAPE.test(value)) {\n      return this.fail('invalid_params', 'That does not look like an email address. Ask the user to spell it out, then fill it again.');\n    }\n    const current = this.view[this.key(field)];\n    // The same value again changes nothing — in particular an agent repeating what the user typed must\n    // not un-confirm it. The one exception: the user typing exactly what the agent suggested IS them\n    // confirming it, so that falls through and records the user as the author.\n    if (current.Value === value && !(actor === 'user' && !current.Confirmed)) {\n      return this.ok(`The ${field} was already set to that.`);\n    }\n    this.setField(field, value, actor);\n    this.dropStaleCodeIfChanged();\n    this.view = { ...this.view, Status: 'collecting', Problem: '', ProblemCode: '' };\n    this.publish({ Author: actor, Event: { Name: 'field_filled', Payload: { field, actor, confirmed: this.view[this.key(field)].Confirmed } } });\n    return this.ok(\n      actor === 'agent'\n        ? `The ${field} is filled in and shown to the user, who must confirm it before anything is sent.`\n        : `The user entered their ${field}.`\n    );\n  }\n\n  /** `confirm` — the user approves what is shown. Refused for anyone but the user, whatever the schema says. */\n  public Confirm(args: JSONObject, actor: RealtimeChannelActor): RealtimeChannelVerbResult {\n    if (actor !== 'user') {\n      return this.fail('not_invokable_by_agent', 'Only the user can confirm their own details. Ask them to check the form and confirm.');\n    }\n    const requested = args['field'] === undefined ? null : this.readField(args['field']);\n    if (args['field'] !== undefined && requested === null) {\n      return this.fail('invalid_params', 'field must be \"name\" or \"email\" (or omitted to confirm both).');\n    }\n    const fields: IdentityField[] = requested ? [requested] : ['name', 'email'];\n    const confirmed: IdentityField[] = [];\n    for (const field of fields) {\n      const f = this.view[this.key(field)];\n      if (f.Value.length > 0 && !f.Confirmed) {\n        this.setConfirmed(field);\n        confirmed.push(field);\n      }\n    }\n    if (confirmed.length === 0) {\n      return this.fail('verb_failed', 'There is nothing to confirm.');\n    }\n    this.publish({ Author: 'user', Event: { Name: 'confirmed', Payload: { fields: confirmed } } });\n    return this.ok('Confirmed.');\n  }\n\n  /** `submit` — send the code to the confirmed address. */\n  public async Submit(): Promise<RealtimeChannelVerbResult> {\n    const blocked = this.blockReasonForSend('submit');\n    if (blocked) {\n      return blocked;\n    }\n    return this.sendCode();\n  }\n\n  /** `resend` — send a fresh code to the same, already-confirmed address. */\n  public async Resend(): Promise<RealtimeChannelVerbResult> {\n    if (this.view.Status !== 'code_sent') {\n      return this.fail('verb_failed', 'No code has been sent yet. Use submit first.');\n    }\n    const blocked = this.blockReasonForSend('resend');\n    if (blocked) {\n      return blocked;\n    }\n    return this.sendCode();\n  }\n\n  /** `enter_code` — hand the code the person received to the server. The code is never kept. */\n  public async EnterCode(args: JSONObject): Promise<RealtimeChannelVerbResult> {\n    if (this.view.Status === 'verified') {\n      return this.fail('already_verified', 'This person is already verified.');\n    }\n    if (this.view.Status !== 'code_sent') {\n      return this.fail('verb_failed', this.view.Status === 'verifying' ? 'A code is being checked; wait for the answer.' : 'No code has been sent yet. Send one first.');\n    }\n    const code = clean(args['code'], MAX_CODE_LENGTH);\n    if (code.length === 0) {\n      return this.fail('invalid_params', 'code must not be empty.');\n    }\n    if (!this.service) {\n      return this.fail('verb_failed', 'Verification is not available in this session.');\n    }\n    this.view = { ...this.view, Status: 'verifying', Problem: '', ProblemCode: '' };\n    this.publish({ Author: 'user', Event: { Name: 'code_entered', Payload: {} } });\n    const result = await this.service.SubmitCode(code);\n    if (this.view.Status === 'verified') {\n      return this.ok('Verified.'); // the server's event got there first\n    }\n    return result.Success && result.VerificationState === 'verified' ? this.applyVerifiedFromResult(result) : this.applyCodeFailure(result);\n  }\n\n  // ── Server's word ──────────────────────────────────────────────────────────\n\n  /**\n   * The server says the person is verified (the `identity.verified` event). Idempotent. Returns whether\n   * this call made the change, so the channel completes exactly once.\n   */\n  public MarkVerified(payload: IdentityVerifiedEventPayload): boolean {\n    if (this.view.Status === 'verified') {\n      return false;\n    }\n    const email = clean(payload.VerifiedEmail, MAX_FIELD_LENGTH);\n    const name = clean(payload.VerifiedName, MAX_FIELD_LENGTH);\n    this.view = {\n      ...this.view,\n      Status: 'verified',\n      Name: name.length > 0 ? { Value: name, Source: this.view.Name.Source ?? 'user', Confirmed: true } : this.view.Name,\n      Email: { Value: email, Source: this.view.Email.Source ?? 'user', Confirmed: true },\n      Destination: email,\n      Problem: '',\n      ProblemCode: '',\n      ResendAvailableAt: 0\n    };\n    this.sentFor = null;\n    this.publish({ Author: 'system', Event: { Name: 'verified', Payload: { email, name, method: payload.Method } } });\n    return true;\n  }\n\n  // ── Internals ──────────────────────────────────────────────────────────────\n\n  private async sendCode(): Promise<RealtimeChannelVerbResult> {\n    if (!this.service) {\n      return this.fail('verb_failed', 'Verification is not available in this session.');\n    }\n    const { Name, Email } = { Name: this.view.Name.Value, Email: this.view.Email.Value };\n    this.view = { ...this.view, Status: 'sending', Problem: '', ProblemCode: '' };\n    this.publish({ Author: 'system' });\n    const result = await this.service.Request({ Name, Email });\n    if (this.view.Status === 'verified') {\n      return this.ok('Verified.');\n    }\n    return result.Success ? this.applySent(result, Name, Email) : this.applySendFailure(result);\n  }\n\n  private applySent(result: RealtimeSessionVerificationResult, name: string, email: string): RealtimeChannelVerbResult {\n    this.sentFor = { Name: name, Email: email };\n    this.view = {\n      ...this.view,\n      Status: 'code_sent',\n      Destination: email,\n      Problem: '',\n      ProblemCode: '',\n      SendsRemaining: result.SendsRemaining ?? null,\n      AttemptsRemaining: result.AttemptsRemaining ?? null,\n      ResendAvailableAt: result.RetryAfterSeconds ? this.now() + result.RetryAfterSeconds * 1000 : 0\n    };\n    this.publish({ Author: 'system', Event: { Name: 'code_sent', Payload: { email } } });\n    return this.ok(`A code was emailed to ${email}. The user can type it in, or open the link in the email. Do not ask them to read the code aloud.`);\n  }\n\n  private applySendFailure(result: RealtimeSessionVerificationResult): RealtimeChannelVerbResult {\n    const problem = this.problemFor(result);\n    this.view = {\n      ...this.view,\n      Status: 'collecting',\n      Problem: problem,\n      ProblemCode: result.ErrorCode ?? '',\n      ResendAvailableAt: result.RetryAfterSeconds ? this.now() + result.RetryAfterSeconds * 1000 : this.view.ResendAvailableAt,\n      SendsRemaining: result.SendsRemaining ?? this.view.SendsRemaining\n    };\n    this.publish({ Author: 'system', Event: { Name: 'error', Payload: { code: result.ErrorCode ?? 'unknown', stage: 'send' } } });\n    return this.fail(result.ErrorCode ?? 'verb_failed', problem);\n  }\n\n  private applyCodeFailure(result: RealtimeSessionVerificationResult): RealtimeChannelVerbResult {\n    const problem = this.problemFor(result);\n    const code = result.ErrorCode ?? '';\n    this.view = {\n      ...this.view,\n      Status: NEEDS_NEW_CODE.has(code) ? 'collecting' : 'code_sent',\n      Problem: problem,\n      ProblemCode: code,\n      AttemptsRemaining: result.AttemptsRemaining ?? this.view.AttemptsRemaining\n    };\n    if (NEEDS_NEW_CODE.has(code)) {\n      this.sentFor = null;\n    }\n    this.publish({ Author: 'system', Event: { Name: 'error', Payload: { code: code || 'unknown', stage: 'code' } } });\n    return this.fail(code || 'verb_failed', problem);\n  }\n\n  private applyVerifiedFromResult(result: RealtimeSessionVerificationResult): RealtimeChannelVerbResult {\n    const email = result.VerifiedEmail ?? this.view.Email.Value;\n    this.MarkVerified({\n      VerifiedEmail: email,\n      VerifiedName: this.view.Name.Value,\n      VerifiedAt: result.VerifiedAt ?? new Date(this.now()).toISOString(),\n      Method: 'code',\n      ...(result.MaxSessionDeadlineIso ? { MaxSessionDeadlineIso: result.MaxSessionDeadlineIso } : {})\n    });\n    return this.ok('Verified.');\n  }\n\n  /** Why a send must not go ahead, as a ready-made failure; `null` when it may. */\n  private blockReasonForSend(verb: 'submit' | 'resend'): RealtimeChannelVerbResult | null {\n    const v = this.view;\n    if (v.Status === 'verified') {\n      return this.fail('already_verified', 'This person is already verified.');\n    }\n    if (v.Status === 'sending' || v.Status === 'verifying') {\n      return this.fail('verb_failed', 'A request is in progress; wait for it to finish.');\n    }\n    if (verb === 'submit' && v.Status === 'code_sent') {\n      return this.fail('verb_failed', 'A code was already sent to this address. Wait for the user to enter it, or use resend.');\n    }\n    if (v.Name.Value.length === 0 || v.Email.Value.length === 0) {\n      return this.fail('verb_failed', 'Both the name and the email are needed first. Fill in what is missing.');\n    }\n    if (!v.Name.Confirmed || !v.Email.Confirmed) {\n      return this.fail('verb_failed', 'The user has not confirmed their details yet. Ask them to check the form and confirm; you cannot confirm for them.');\n    }\n    if (v.SendsRemaining === 0) {\n      return this.fail('send_limit_reached', DEFAULT_PROBLEMS['send_limit_reached']);\n    }\n    const wait = v.ResendAvailableAt - this.now();\n    if (wait > 0) {\n      return this.fail('rate_limited', `Another code can be sent in ${Math.ceil(wait / 1000)} seconds.`);\n    }\n    return null;\n  }\n\n  /** A change to the values a code was sent for makes that code stale: back to collecting. */\n  private dropStaleCodeIfChanged(): void {\n    if (this.sentFor && (this.sentFor.Name !== this.view.Name.Value || this.sentFor.Email !== this.view.Email.Value)) {\n      this.sentFor = null;\n      this.view = { ...this.view, Destination: '', AttemptsRemaining: null };\n    }\n  }\n\n  private setField(field: IdentityField, value: string, source: IdentityFieldSource): void {\n    const next: IdentityFieldView = { Value: value, Source: source, Confirmed: source === 'user' };\n    this.view = { ...this.view, [this.key(field)]: next };\n  }\n\n  private setConfirmed(field: IdentityField): void {\n    const key = this.key(field);\n    this.view = { ...this.view, [key]: { ...this.view[key], Confirmed: true } };\n  }\n\n  private key(field: IdentityField): 'Name' | 'Email' {\n    return field === 'name' ? 'Name' : 'Email';\n  }\n\n  private readField(raw: unknown): IdentityField | null {\n    return raw === 'name' || raw === 'email' ? raw : null;\n  }\n\n  private problemFor(result: RealtimeSessionVerificationResult): string {\n    return (result.Message && result.Message.trim()) || DEFAULT_PROBLEMS[result.ErrorCode ?? ''] || 'Something went wrong. Please try again.';\n  }\n\n  private ok(message: string, extra: JSONObject = {}): RealtimeChannelVerbResult {\n    return { Success: true, Result: { message, status: this.view.Status, ...extra } };\n  }\n\n  private fail(code: string, message: string): RealtimeChannelVerbResult {\n    return { Success: false, ErrorCode: code, Error: message };\n  }\n\n  private initialView(): IdentityVerificationView {\n    return {\n      Status: 'collecting',\n      Name: emptyField(),\n      Email: emptyField(),\n      Problem: '',\n      ProblemCode: '',\n      CanSubmit: false,\n      ResendAvailableAt: 0,\n      SendsRemaining: null,\n      AttemptsRemaining: null,\n      Destination: ''\n    };\n  }\n\n  /** Recomputes the derived flag, publishes the snapshot, and tells the channel. */\n  private publish(change: IdentityVerificationChange): void {\n    const v = this.view;\n    this.view = {\n      ...v,\n      CanSubmit: v.Status === 'collecting' && v.Name.Value.length > 0 && v.Email.Value.length > 0 && v.Name.Confirmed && v.Email.Confirmed\n    };\n    this.viewSubject.next(this.view);\n    this.changeListener?.(change);\n  }\n}\n"]}