@sekyro/web 0.1.0-rc.5 → 0.1.0-rc.7

package/dist/client/index.cjs

@@ -1,357 +1 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/client/index.ts
-var client_exports = {};
-__export(client_exports, {
-  HostedApiError: () => HostedApiError,
-  HostedClient: () => HostedClient,
-  KNOWN_CODES: () => KNOWN_CODES,
-  isKnownCode: () => isKnownCode,
-  stripMimeParams: () => stripMimeParams
-});
-module.exports = __toCommonJS(client_exports);
-
-// src/client/errors.ts
-var KNOWN_CODES = [
-  // auth / addressing (session-token.guard, controllers' own-session guards)
-  "session_token_invalid",
-  // 401 — missing/invalid/expired/revoked token
-  "session_token_required",
-  // 403 — non-session-token principal on a hosted route (defensive)
-  "session_token_session_mismatch",
-  // 403 — route :id differs from the token's bound session
-  "session_not_found",
-  // 404 — token's session missing/foreign (findOwned)
-  // rate limiting (session-token.guard — per-token + per-IP buckets)
-  "rate_limit_exceeded",
-  // 429 + Retry-After header (seconds)
-  // consent gate (Task 0 — submit AND media presign/complete)
-  "consent_required",
-  // 409 — record consent before uploading/submitting
-  // submit flow (sessions.service.submitCheck)
-  "session_not_active",
-  // 409 — session is terminal/review; no further submissions
-  "check_not_found",
-  // 404 — session has no such checkType
-  "check_already_finalized",
-  // 409 — re-submit of a terminal/review check
-  "check_out_of_order",
-  // 409 — only the frontier check accepts a submission
-  "check_type_unsupported",
-  // 400 — no registered executor for the checkType
-  "force_outcome_forbidden",
-  // 403 — forceOutcome on a live session (plan D-C)
-  "attestation_invalid",
-  // 400 (Task 1) — Turnstile/attestation failed; reload and retry
-  "nni_locked",
-  // 409 (Plan A Task 2) — session is bound to a server-provided NNI; a different client NNI was sent
-  // media (media.service)
-  "media_content_type_not_allowed",
-  // 400 — outside the per-kind MIME allowlist
-  "media_too_large",
-  // 413 — over the per-kind byte cap
-  "media_key_invalid",
-  // 400 — not a well-formed pending key
-  "media_key_forbidden",
-  // 403 — key names another session's pending space
-  "media_not_found",
-  // 404 — no uploaded object behind the key
-  "media_unreadable",
-  // 422 — magic-byte sniff rejected the object
-  "media_session_invalid",
-  // 400 — sessionId unusable as a key segment (never in practice)
-  // idempotency (idempotency.interceptor — Task 2)
-  "idempotency_key_collision",
-  // 409 — same key, different body hash
-  "idempotency_in_progress",
-  // 409 — concurrent identical request mid-flight (client auto-retries)
-  "idempotency_key_required",
-  // 400 — only on @Idempotent({required:true}) routes (none hosted yet)
-  // validation + fallback
-  "validation_error",
-  // 400 — ValibotPipe rejection (camelToSnake of 'ValidationError')
-  "internal_error",
-  // 500 — unhandled server error
-  // client-synthesized (never sent by the backend)
-  "unknown_error",
-  // unparseable (non-JSON) response body — error OR 2xx (defensive)
-  "upload_failed",
-  // the bare Spaces PUT answered non-2xx
-  "network_error",
-  // fetch rejected: connection drop / DNS / CORS / mid-transfer (status 0)
-  "timeout"
-  // AbortSignal.timeout fired — API calls 30 s default, Spaces PUT 15 min (status 0)
-];
-function isKnownCode(code) {
-  return KNOWN_CODES.includes(code);
-}
-var HostedApiError = class extends Error {
-  constructor(args) {
-    super(args.message);
-    this.name = "HostedApiError";
-    this.status = args.status;
-    this.code = args.code;
-    if (args.retryAfterSeconds !== void 0) this.retryAfterSeconds = args.retryAfterSeconds;
-  }
-};
-
-// src/client/hosted-client.ts
-var DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
-var SPACES_PUT_TIMEOUT_MS = 9e5;
-var UPLOAD_ERROR_SNIPPET_CHARS = 200;
-var IN_PROGRESS_RETRY_ATTEMPTS = 5;
-var IN_PROGRESS_RETRY_DELAY_MS = 400;
-function stripMimeParams(contentType) {
-  return (contentType.split(";")[0] ?? "").trim();
-}
-var MEDIA_INPUT_FIELD = {
-  liveness: "clipKey",
-  face_match: "imageKey",
-  doc_ocr: "imageKey"
-};
-var HostedClient = class {
-  constructor(opts) {
-    this.sessionId = null;
-    this.bootstrap = null;
-    this.apiOrigin = opts.apiOrigin.replace(/\/+$/, "");
-    this.sessionToken = opts.sessionToken;
-    const impl = opts.fetch;
-    this.fetchImpl = (input, init) => (impl ?? globalThis.fetch).call(globalThis, input, init);
-    this.requestTimeoutMs = opts.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS;
-    this.retryAttempts = opts.inProgressRetry?.attempts ?? IN_PROGRESS_RETRY_ATTEMPTS;
-    this.retryDelayMs = opts.inProgressRetry?.delayMs ?? IN_PROGRESS_RETRY_DELAY_MS;
-  }
-  /** Token-addressed bootstrap — the hosted page's first call. Caches the sessionId. */
-  async getSession() {
-    const view = await this.api("GET", "/hosted/session");
-    this.sessionId = view.sessionId;
-    return view;
-  }
-  /**
-   * Record consent once (201; an idempotent replay answers 200 with
-   * `alreadyRecorded: true`). Until recorded, media presign/complete AND check
-   * submission answer 409 `consent_required`.
-   */
-  async recordConsent(locale) {
-    return this.api("POST", "/hosted/consent", { body: { locale } });
-  }
-  /**
-   * Presign a Spaces PUT for a new pending object. `contentType` is stripped of
-   * MIME parameters defensively (the allowlist holds bare types; the engine's
-   * `clipMimeType` carries codec params) — PUT with the SAME bare type, or the
-   * signed-header check rejects the upload.
-   */
-  async presign(kind, contentType, contentLength) {
-    const id = await this.ensureSessionId();
-    const body = { kind, contentType: stripMimeParams(contentType), contentLength };
-    return this.api("POST", `/sessions/${id}/media`, { body });
-  }
-  /**
-   * Bare PUT to the presigned Spaces URL: EXACTLY the signed headers — the
-   * declared Content-Type and the blob body. NO `x-session-token` (the
-   * signature IS the credential; an extra header breaks nothing but leaks the
-   * token to a third-party host) and no JSON envelope.
-   *
-   * `contentType` is param-stripped here too (idempotent for bare types): the
-   * presign strips internally, so a caller composing manually with the engine's
-   * parameterful `clipMimeType` would otherwise sign `video/webm` but PUT
-   * `video/webm;codecs=…` — a signed-header mismatch S3 rejects at runtime.
-   *
-   * Timeout: 15 min (`AbortSignal.timeout(900_000)`, matching the presign TTL)
-   * rather than the API calls' 30 s — a 15 MB clip on a slow link legitimately
-   * exceeds 30 s, but a stalled in-flight socket must still be bounded (the TTL
-   * alone only bounds when a PUT can START).
-   *
-   * Failures are ALWAYS typed: non-2xx throws {@link HostedApiError} with the
-   * client-synthesized `upload_failed` (message carries a truncated S3 body
-   * snippet — e.g. SignatureDoesNotMatch); a mid-transfer drop → `network_error`;
-   * the timeout → `timeout`.
-   */
-  async uploadToSpaces(uploadUrl, blob, contentType) {
-    let res;
-    try {
-      res = await this.fetchImpl(uploadUrl, {
-        method: "PUT",
-        headers: { "content-type": stripMimeParams(contentType) },
-        body: blob,
-        signal: AbortSignal.timeout(SPACES_PUT_TIMEOUT_MS)
-      });
-    } catch (err) {
-      throw asTransportError(err);
-    }
-    if (!res.ok) {
-      const snippet = (await res.text().catch(() => "")).slice(0, UPLOAD_ERROR_SNIPPET_CHARS);
-      throw new HostedApiError({
-        status: res.status,
-        code: "upload_failed",
-        message: `media upload failed (HTTP ${res.status})${snippet ? `: ${snippet}` : ""}`
-      });
-    }
-  }
-  /** Finalize an upload: the backend sniffs + promotes; returns the PROMOTED key to submit. */
-  async completeMedia(key) {
-    const id = await this.ensureSessionId();
-    return this.api("POST", `/sessions/${id}/media/complete`, {
-      body: { key }
-    });
-  }
-  /**
-   * Submit one check. Sends `{input, forceOutcome?}` (SubmitCheckSchema) and the
-   * optional `x-idempotency-key` header. Returns the whitelisted SessionView.
-   */
-  async submitCheck(checkType, input, opts = {}) {
-    const id = await this.ensureSessionId();
-    const body = {
-      input,
-      ...opts.forceOutcome !== void 0 ? { forceOutcome: opts.forceOutcome } : {}
-    };
-    return this.api("POST", `/sessions/${id}/checks/${checkType}`, {
-      body,
-      ...opts.idempotencyKey !== void 0 ? { idempotencyKey: opts.idempotencyKey } : {}
-    });
-  }
-  /**
-   * Convenience composition: presign → PUT → complete → submit, passing the
-   * PROMOTED key (from complete's response — never the pending presign key)
-   * into the check's media input field (`clipKey` for liveness, `imageKey` for
-   * face_match/doc_ocr). `extraInput` carries the remaining input fields
-   * (liveness `attestation`, doc_ocr `side`). The media content type is
-   * param-stripped ONCE and used for both presign and PUT, so the signed
-   * header always matches.
-   */
-  async uploadAndSubmit(checkType, media, extraInput, opts = {}) {
-    const bareType = stripMimeParams(media.contentType);
-    const presigned = await this.presign(media.kind, bareType, media.blob.size);
-    await this.uploadToSpaces(presigned.uploadUrl, media.blob, bareType);
-    const completed = await this.completeMedia(presigned.key);
-    const input = {
-      ...extraInput,
-      [MEDIA_INPUT_FIELD[checkType]]: completed.key
-    };
-    return this.submitCheck(checkType, input, opts);
-  }
-  // ── transport ──────────────────────────────────────────────────────────────
-  /** The token's own sessionId — cached from getSession(), lazily bootstrapped. */
-  async ensureSessionId() {
-    if (this.sessionId !== null) return this.sessionId;
-    this.bootstrap ?? (this.bootstrap = this.getSession().finally(() => {
-      this.bootstrap = null;
-    }));
-    return (await this.bootstrap).sessionId;
-  }
-  /**
-   * One API request: `${apiOrigin}/api/v2${path}`, `x-session-token` always,
-   * AbortSignal timeout (30 s default), `{success, data}` unwrap on 2xx, flat
-   * `{code, message}` → {@link HostedApiError} on non-2xx. EVERY failure is
-   * typed: a rejected fetch → `network_error`, the timeout → `timeout`, an
-   * unparseable 2xx body → `unknown_error` — the page never sees a raw
-   * TypeError/DOMException. The ONLY automatic retry is 409
-   * `idempotency_in_progress` (bounded, short delay).
-   */
-  async api(method, path, opts = {}) {
-    const url = `${this.apiOrigin}/api/v2${path}`;
-    const headers = { "x-session-token": this.sessionToken };
-    if (opts.body !== void 0) headers["content-type"] = "application/json";
-    if (opts.idempotencyKey !== void 0) headers["x-idempotency-key"] = opts.idempotencyKey;
-    for (let attempt = 0; ; attempt++) {
-      let res;
-      try {
-        res = await this.fetchImpl(url, {
-          method,
-          headers,
-          ...opts.body !== void 0 ? { body: JSON.stringify(opts.body) } : {},
-          signal: AbortSignal.timeout(this.requestTimeoutMs)
-        });
-      } catch (err2) {
-        throw asTransportError(err2);
-      }
-      if (res.ok) {
-        let raw;
-        try {
-          raw = await res.json();
-        } catch {
-          throw new HostedApiError({
-            status: res.status,
-            code: "unknown_error",
-            message: `response body was not valid JSON (HTTP ${res.status})`
-          });
-        }
-        return unwrap(raw);
-      }
-      const err = await parseErrorResponse(res);
-      if (err.code === "idempotency_in_progress" && attempt < this.retryAttempts) {
-        if (this.retryDelayMs > 0) await sleep(this.retryDelayMs);
-        continue;
-      }
-      throw err;
-    }
-  }
-};
-function asTransportError(err) {
-  const name = typeof err === "object" && err !== null ? err.name : void 0;
-  if (name === "TimeoutError") {
-    return new HostedApiError({ status: 0, code: "timeout", message: "request timed out" });
-  }
-  const detail = err instanceof Error ? err.message : String(err);
-  return new HostedApiError({
-    status: 0,
-    code: "network_error",
-    message: `network request failed: ${detail}`
-  });
-}
-function unwrap(raw) {
-  if (raw !== null && typeof raw === "object" && "success" in raw && "data" in raw) {
-    return raw.data;
-  }
-  return raw;
-}
-async function parseErrorResponse(res) {
-  let code = "unknown_error";
-  let message = `request failed (HTTP ${res.status})`;
-  try {
-    const body = await res.json();
-    if (body !== null && typeof body === "object") {
-      const env = body;
-      if (typeof env.code === "string" && env.code.length > 0) code = env.code;
-      if (typeof env.message === "string" && env.message.length > 0) message = env.message;
-    }
-  } catch {
-  }
-  const retryAfterRaw = res.headers.get("retry-after");
-  const retryAfter = retryAfterRaw === null ? Number.NaN : Number.parseInt(retryAfterRaw, 10);
-  return new HostedApiError({
-    status: res.status,
-    code,
-    message,
-    ...Number.isFinite(retryAfter) && retryAfter >= 0 ? { retryAfterSeconds: retryAfter } : {}
-  });
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  HostedApiError,
-  HostedClient,
-  KNOWN_CODES,
-  isKnownCode,
-  stripMimeParams
-});
-//# sourceMappingURL=index.cjs.map
+"use strict";var y=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var R=Object.getOwnPropertyNames;var I=Object.prototype.hasOwnProperty;var P=(t,e)=>{for(var n in e)y(t,n,{get:e[n],enumerable:!0})},O=(t,e,n,s)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of R(e))!I.call(t,o)&&o!==n&&y(t,o,{get:()=>e[o],enumerable:!(s=C(e,o))||s.enumerable});return t};var v=t=>O(y({},"__esModule",{value:!0}),t);var B={};P(B,{HostedApiError:()=>d,HostedClient:()=>p,KNOWN_CODES:()=>g,isKnownCode:()=>w,stripMimeParams:()=>c});module.exports=v(B);var _="0.1.0-rc.7";var b="sekyro.did",S;function T(){let t=globalThis.crypto;try{if(typeof t?.randomUUID=="function")return t.randomUUID()}catch{}try{if(typeof t?.getRandomValues=="function"){let e=t.getRandomValues(new Uint8Array(16));return Array.from(e,n=>n.toString(16).padStart(2,"0")).join("")}}catch{}}function M(){try{let t=localStorage.getItem(b);if(t)return t;let e=T();return e!==void 0&&localStorage.setItem(b,e),e}catch{return S??(S=T()),S}}async function E(){let t=globalThis.crypto?.subtle;if(!t)return"";let e=navigator,n=JSON.stringify([e.userAgent,e.platform,e.hardwareConcurrency??null,e.deviceMemory??null,e.maxTouchPoints??0,screen.width,screen.height,screen.colorDepth,globalThis.devicePixelRatio??1,Intl.DateTimeFormat().resolvedOptions().timeZone,e.languages?.join(",")??e.language]),s=await t.digest("SHA-256",new TextEncoder().encode(n));return Array.from(new Uint8Array(s),o=>o.toString(16).padStart(2,"0")).join("").slice(0,32)}function A(t){let e=new TextEncoder().encode(t),n="";for(let s of e)n+=String.fromCharCode(s);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function x(t){let e,n;return{timezone(){try{return Intl.DateTimeFormat().resolvedOptions().timeZone?.slice(0,64)||void 0}catch{return}},noteCameraLabel(s){s&&(e=s.slice(0,128))},async deviceHeader(){try{n??(n=E().catch(()=>""));let s=[];navigator.webdriver&&s.push("webdriver"),/HeadlessChrome/.test(navigator.userAgent)&&s.push("headless");let o=await n,i=M(),r={v:1,platform:"web",sdk:t.sdk.slice(0,64),ids:[...i?[{kind:"web_local",value:i.slice(0,128)}]:[],...o?[{kind:"web_fp",value:o}]:[]],screen:{w:screen.width,h:screen.height,dpr:globalThis.devicePixelRatio??1},...e?{cameraLabel:e}:{},...s.length?{signals:s}:{}};return A(JSON.stringify(r))}catch{return}}}}var m=Symbol.for("sekyro.web.clientContext"),f=globalThis,h=f[m]??(f[m]=x({sdk:`@sekyro/web@${_}`}));var g=["session_token_invalid","session_token_required","session_token_session_mismatch","session_not_found","rate_limit_exceeded","consent_required","session_not_active","check_not_found","check_already_finalized","check_out_of_order","check_type_unsupported","force_outcome_forbidden","attestation_invalid","inference_unavailable","mobile_required","nni_locked","method_required","method_locked","document_nni_mismatch","media_content_type_not_allowed","media_too_large","media_key_invalid","media_key_forbidden","media_not_found","media_unreadable","media_session_invalid","idempotency_key_collision","idempotency_in_progress","idempotency_key_required","validation_error","internal_error","unknown_error","upload_failed","network_error","timeout"];function w(t){return g.includes(t)}var d=class extends Error{constructor(e){super(e.message),this.name="HostedApiError",this.status=e.status,this.code=e.code,e.retryAfterSeconds!==void 0&&(this.retryAfterSeconds=e.retryAfterSeconds)}};var D=3e4,K=9e5,N=200,V=5,H=400;function c(t){return(t.split(";")[0]??"").trim()}var U={liveness:"clipKey",face_match:"imageKey",doc_ocr:"imageKey"},p=class{constructor(e){this.sessionId=null;this.bootstrap=null;this.apiOrigin=e.apiOrigin.replace(/\/+$/,""),this.sessionToken=e.sessionToken;let n=e.fetch;this.fetchImpl=(s,o)=>(n??globalThis.fetch).call(globalThis,s,o),this.requestTimeoutMs=e.requestTimeoutMs??D,this.retryAttempts=e.inProgressRetry?.attempts??V,this.retryDelayMs=e.inProgressRetry?.delayMs??H}async getSession(){let e=await this.api("GET","/hosted/session");return this.sessionId=e.sessionId,e}async recordConsent(e){return this.api("POST","/hosted/consent",{body:{locale:e}})}async selectMethod(e){let n=await this.api("POST","/hosted/method",{body:{method:e}});return this.sessionId=n.sessionId,n}async presign(e,n,s){let o=await this.ensureSessionId(),i={kind:e,contentType:c(n),contentLength:s};return this.api("POST",`/sessions/${o}/media`,{body:i})}async uploadToSpaces(e,n,s){let o;try{o=await this.fetchImpl(e,{method:"PUT",headers:{"content-type":c(s)},body:n,signal:AbortSignal.timeout(K)})}catch(i){throw k(i)}if(!o.ok){let i=(await o.text().catch(()=>"")).slice(0,N);throw new d({status:o.status,code:"upload_failed",message:`media upload failed (HTTP ${o.status})${i?`: ${i}`:""}`})}}async completeMedia(e){let n=await this.ensureSessionId();return this.api("POST",`/sessions/${n}/media/complete`,{body:{key:e}})}async submitCheck(e,n,s={}){let o=await this.ensureSessionId(),i={input:n,...s.forceOutcome!==void 0?{forceOutcome:s.forceOutcome}:{}};return this.api("POST",`/sessions/${o}/checks/${e}`,{body:i,...s.idempotencyKey!==void 0?{idempotencyKey:s.idempotencyKey}:{}})}async uploadAndSubmit(e,n,s,o={}){let i=c(n.contentType),r=await this.presign(n.kind,i,n.blob.size);await this.uploadToSpaces(r.uploadUrl,n.blob,i);let a=await this.completeMedia(r.key),u={...s,[U[e]]:a.key};return this.submitCheck(e,u,o)}async ensureSessionId(){return this.sessionId!==null?this.sessionId:(this.bootstrap??(this.bootstrap=this.getSession().finally(()=>{this.bootstrap=null})),(await this.bootstrap).sessionId)}async api(e,n,s={}){let o=`${this.apiOrigin}/api/v2${n}`,i={"x-session-token":this.sessionToken};s.body!==void 0&&(i["content-type"]="application/json"),s.idempotencyKey!==void 0&&(i["x-idempotency-key"]=s.idempotencyKey);try{let r=h.timezone();r!==void 0&&(i["sekyro-client-timezone"]=r)}catch{}try{let r=await h.deviceHeader();r!==void 0&&(i["sekyro-client-device"]=r)}catch{}for(let r=0;;r++){let a;try{a=await this.fetchImpl(o,{method:e,headers:i,...s.body!==void 0?{body:JSON.stringify(s.body)}:{},signal:AbortSignal.timeout(this.requestTimeoutMs)})}catch(l){throw k(l)}if(a.ok){let l;try{l=await a.json()}catch{throw new d({status:a.status,code:"unknown_error",message:`response body was not valid JSON (HTTP ${a.status})`})}return L(l)}let u=await q(a);if(u.code==="idempotency_in_progress"&&r<this.retryAttempts){this.retryDelayMs>0&&await $(this.retryDelayMs);continue}throw u}}};function k(t){if((typeof t=="object"&&t!==null?t.name:void 0)==="TimeoutError")return new d({status:0,code:"timeout",message:"request timed out"});let n=t instanceof Error?t.message:String(t);return new d({status:0,code:"network_error",message:`network request failed: ${n}`})}function L(t){return t!==null&&typeof t=="object"&&"success"in t&&"data"in t?t.data:t}async function q(t){let e="unknown_error",n=`request failed (HTTP ${t.status})`,s=Number.NaN;try{let r=await t.json();if(r!==null&&typeof r=="object"){let a=r;typeof a.code=="string"&&a.code.length>0&&(e=a.code),typeof a.message=="string"&&a.message.length>0&&(n=a.message),typeof a.retryAfterSeconds=="number"&&(s=a.retryAfterSeconds)}}catch{}let o=t.headers.get("retry-after"),i=o===null?Math.floor(s):Number.parseInt(o,10);return new d({status:t.status,code:e,message:n,...Number.isFinite(i)&&i>=0?{retryAfterSeconds:i}:{}})}function $(t){return new Promise(e=>setTimeout(e,t))}0&&(module.exports={HostedApiError,HostedClient,KNOWN_CODES,isKnownCode,stripMimeParams});

package/dist/client/index.d.cts

@@ -1,11 +1,11 @@
-export { A as AttestationInput, i as CheckInputByType, C as CheckReason, a as CheckState, b as CheckType, j as CompleteMediaResult, k as ConsentLocale, l as DocOcrInput, D as DocReason, m as DocSide, n as FaceMatchInput, F as FaceMatchReason, g as HostedClient, o as HostedClientOptions, H as HostedOtpView, c as HostedSessionView, d as HostedStepView, p as LivenessCaptureInput, q as LivenessInput, L as LivenessReason, M as MediaCheckType, r as MediaKind, s as PhoneOtpInput, P as PhoneOtpReason, t as PopulationInput, e as PopulationReason, u as PresignRequest, v as PresignUploadResult, R as RecordConsentResult, S as SessionOutcome, f as SessionStatus, w as SessionStepView, h as SessionView, x as SubmitCheckBody, y as SubmitOptions, U as UploadMedia, z as stripMimeParams } from '../hosted-client-DWzCRYJK.cjs';
+export { A as AcceptedDocumentType, p as AttestationInput, r as CheckInputByType, C as CheckReason, a as CheckState, b as CheckType, s as CompleteMediaResult, t as ConsentLocale, D as DecisionReason, u as DocOcrInput, c as DocReason, v as DocSide, w as FaceMatchInput, F as FaceMatchReason, o as HostedClient, x as HostedClientOptions, e as HostedOtpView, f as HostedSessionView, g as HostedStepView, h as HostedVoiceLocale, i as HostedVoiceView, I as IdentityMethod, y as LivenessCaptureInput, z as LivenessInput, L as LivenessReason, M as MatchReason, B as MediaCheckType, E as MediaKind, j as MethodChoiceView, G as PhoneOtpInput, P as PhoneOtpReason, k as PolicyFailureReason, J as PopulationInput, l as PopulationReason, K as PresignRequest, N as PresignUploadResult, R as RecordConsentResult, S as SessionFailureReason, m as SessionOutcome, n as SessionStatus, O as SessionStepView, q as SessionView, Q as SubmitCheckBody, T as SubmitOptions, U as UploadMedia, V as stripMimeParams } from '../hosted-client-kBeq-mnJ.cjs';
 
 /**
  * Every error code the hosted page can receive from the session-token surface.
  * A closed string-literal union — switch over {@link KnownCode} with a `never`
  * default arm for compile-checked exhaustiveness.
  */
-declare const KNOWN_CODES: readonly ["session_token_invalid", "session_token_required", "session_token_session_mismatch", "session_not_found", "rate_limit_exceeded", "consent_required", "session_not_active", "check_not_found", "check_already_finalized", "check_out_of_order", "check_type_unsupported", "force_outcome_forbidden", "attestation_invalid", "nni_locked", "media_content_type_not_allowed", "media_too_large", "media_key_invalid", "media_key_forbidden", "media_not_found", "media_unreadable", "media_session_invalid", "idempotency_key_collision", "idempotency_in_progress", "idempotency_key_required", "validation_error", "internal_error", "unknown_error", "upload_failed", "network_error", "timeout"];
+declare const KNOWN_CODES: readonly ["session_token_invalid", "session_token_required", "session_token_session_mismatch", "session_not_found", "rate_limit_exceeded", "consent_required", "session_not_active", "check_not_found", "check_already_finalized", "check_out_of_order", "check_type_unsupported", "force_outcome_forbidden", "attestation_invalid", "inference_unavailable", "mobile_required", "nni_locked", "method_required", "method_locked", "document_nni_mismatch", "media_content_type_not_allowed", "media_too_large", "media_key_invalid", "media_key_forbidden", "media_not_found", "media_unreadable", "media_session_invalid", "idempotency_key_collision", "idempotency_in_progress", "idempotency_key_required", "validation_error", "internal_error", "unknown_error", "upload_failed", "network_error", "timeout"];
 /** Closed union of {@link KNOWN_CODES} — exhaustively switchable. */
 type KnownCode = (typeof KNOWN_CODES)[number];
 /** Narrow an arbitrary wire code to the known union (unknown codes stay `string`). */

package/dist/client/index.d.ts

@@ -1,11 +1,11 @@
-export { A as AttestationInput, i as CheckInputByType, C as CheckReason, a as CheckState, b as CheckType, j as CompleteMediaResult, k as ConsentLocale, l as DocOcrInput, D as DocReason, m as DocSide, n as FaceMatchInput, F as FaceMatchReason, g as HostedClient, o as HostedClientOptions, H as HostedOtpView, c as HostedSessionView, d as HostedStepView, p as LivenessCaptureInput, q as LivenessInput, L as LivenessReason, M as MediaCheckType, r as MediaKind, s as PhoneOtpInput, P as PhoneOtpReason, t as PopulationInput, e as PopulationReason, u as PresignRequest, v as PresignUploadResult, R as RecordConsentResult, S as SessionOutcome, f as SessionStatus, w as SessionStepView, h as SessionView, x as SubmitCheckBody, y as SubmitOptions, U as UploadMedia, z as stripMimeParams } from '../hosted-client-DWzCRYJK.js';
+export { A as AcceptedDocumentType, p as AttestationInput, r as CheckInputByType, C as CheckReason, a as CheckState, b as CheckType, s as CompleteMediaResult, t as ConsentLocale, D as DecisionReason, u as DocOcrInput, c as DocReason, v as DocSide, w as FaceMatchInput, F as FaceMatchReason, o as HostedClient, x as HostedClientOptions, e as HostedOtpView, f as HostedSessionView, g as HostedStepView, h as HostedVoiceLocale, i as HostedVoiceView, I as IdentityMethod, y as LivenessCaptureInput, z as LivenessInput, L as LivenessReason, M as MatchReason, B as MediaCheckType, E as MediaKind, j as MethodChoiceView, G as PhoneOtpInput, P as PhoneOtpReason, k as PolicyFailureReason, J as PopulationInput, l as PopulationReason, K as PresignRequest, N as PresignUploadResult, R as RecordConsentResult, S as SessionFailureReason, m as SessionOutcome, n as SessionStatus, O as SessionStepView, q as SessionView, Q as SubmitCheckBody, T as SubmitOptions, U as UploadMedia, V as stripMimeParams } from '../hosted-client-kBeq-mnJ.js';
 
 /**
  * Every error code the hosted page can receive from the session-token surface.
  * A closed string-literal union — switch over {@link KnownCode} with a `never`
  * default arm for compile-checked exhaustiveness.
  */
-declare const KNOWN_CODES: readonly ["session_token_invalid", "session_token_required", "session_token_session_mismatch", "session_not_found", "rate_limit_exceeded", "consent_required", "session_not_active", "check_not_found", "check_already_finalized", "check_out_of_order", "check_type_unsupported", "force_outcome_forbidden", "attestation_invalid", "nni_locked", "media_content_type_not_allowed", "media_too_large", "media_key_invalid", "media_key_forbidden", "media_not_found", "media_unreadable", "media_session_invalid", "idempotency_key_collision", "idempotency_in_progress", "idempotency_key_required", "validation_error", "internal_error", "unknown_error", "upload_failed", "network_error", "timeout"];
+declare const KNOWN_CODES: readonly ["session_token_invalid", "session_token_required", "session_token_session_mismatch", "session_not_found", "rate_limit_exceeded", "consent_required", "session_not_active", "check_not_found", "check_already_finalized", "check_out_of_order", "check_type_unsupported", "force_outcome_forbidden", "attestation_invalid", "inference_unavailable", "mobile_required", "nni_locked", "method_required", "method_locked", "document_nni_mismatch", "media_content_type_not_allowed", "media_too_large", "media_key_invalid", "media_key_forbidden", "media_not_found", "media_unreadable", "media_session_invalid", "idempotency_key_collision", "idempotency_in_progress", "idempotency_key_required", "validation_error", "internal_error", "unknown_error", "upload_failed", "network_error", "timeout"];
 /** Closed union of {@link KNOWN_CODES} — exhaustively switchable. */
 type KnownCode = (typeof KNOWN_CODES)[number];
 /** Narrow an arbitrary wire code to the known union (unknown codes stay `string`). */

package/dist/client/index.js

@@ -1,15 +1 @@
-import {
-  HostedApiError,
-  HostedClient,
-  KNOWN_CODES,
-  isKnownCode,
-  stripMimeParams
-} from "../chunk-YVFF4Q4G.js";
-export {
-  HostedApiError,
-  HostedClient,
-  KNOWN_CODES,
-  isKnownCode,
-  stripMimeParams
-};
-//# sourceMappingURL=index.js.map
+import{a as e,b as t,c as o,d as s,e as n}from"../chunk-YOB4ZTYN.js";import"../chunk-IYUOYINS.js";export{o as HostedApiError,n as HostedClient,e as KNOWN_CODES,t as isKnownCode,s as stripMimeParams};