@smileid/usesmileid 12.0.1 → 12.1.0

package/dist/presentation/flow/use_smile_id_flow.js

@@ -1,270 +1 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useEffect, useMemo, useReducer, useRef } from "react";
-import { Text, useColorScheme, View } from "react-native";
-import { FlowNavigationManager, } from "./flow_navigation_manager";
-import { FlowNavigationProvider } from "./flow_navigation_context";
-import { ScreenRenderer } from "./graph/screen_renderer";
-import { defaultDarkTheme, defaultLightTheme } from "../theme/theme";
-import { UseSmileIDThemeProvider } from "../theme/theme_context";
-import { useUseSmileIDFonts } from "../theme/use_use_smile_id_fonts";
-import { UseSmileIDCrashReporting } from "@smileid/usesmileid_bridge";
-import { generateSessionId } from "../../metadata/use_smile_id_metadata_factory";
-import { UseSmileIDLocalizationsProvider } from "../../l10n/use_smile_id_localizations_provider";
-import { UseSmileIDLocalizations } from "../../l10n/use_smile_id_localizations";
-import { cancelled, failure, success, } from "../../core/models/result";
-import { ValidationErrorScreen } from "./screen/validation_error_screen";
-import { BuilderValidationException } from "../../core/exception/builder_validation_exception";
-import { makeNetworkingFactory } from "../../data/factory/networking_factory";
-import { UseSmileIDRepositoryImpl } from "../../data/repository/use_smile_id_repository_impl";
-import { RetryStrategy, } from "../../core/models/network_config";
-/**
- * Default retry policy when partner omits `b.network((n) => n.retry(...))`.
- * Matches the `RetryConfigBuilder` defaults so behaviour stays consistent
- * whether the partner constructs `network.retry` explicitly or not.
- */
-const DEFAULT_RETRY = Object.freeze({
-    maxAttempts: 1,
-    strategy: RetryStrategy.none,
-    initialDelay: 1,
-    multiplier: 2,
-    maxDelay: 32,
-    jitter: 0.2,
-    fixedDelay: 1,
-});
-/**
- * Routes the validation failure through the partner's `onResult`
- * after first paint. When `enableDebugMode` is set on the builder,
- * additionally renders [ValidationErrorScreen] with every failed
- * rule so the partner has a complete picture during development.
- * Production renders nothing — `onResult.failure` is the only
- * surface partners see.
- *
- * `onResult` and `enableDebugMode` are passed in as separate props
- * (sourced from the builder reference by `<UseSmileIDBuilder>`) rather
- * than embedded on the `result`.
- *
- * @internal Used by `<UseSmileIDBuilder>`.
- */
-export function FlowInvalidDispatcher({ result, onResult, enableDebugMode, }) {
-    const onResultRef = useRef(onResult);
-    onResultRef.current = onResult;
-    const validationRef = useRef(result.validation);
-    validationRef.current = result.validation;
-    useEffect(() => {
-        // Wrap the typed validation state in a BuilderValidationException
-        // so partner code receiving the failure via onResult.failure can
-        // inspect every rule that failed via `error.validationState.issues`,
-        // not only the first. The exception itself extends Error, so
-        // `instanceof Error` checks keep working.
-        const error = new BuilderValidationException(validationRef.current);
-        try {
-            onResultRef.current(failure(error));
-        }
-        catch (handlerError) {
-            UseSmileIDCrashReporting.captureException(handlerError);
-        }
-    }, []);
-    if (enableDebugMode) {
-        return _jsx(ValidationErrorScreen, { validationState: result.validation });
-    }
-    return null;
-}
-/**
- * Walks the partner through the configured screen list, dispatches
- * frames to the chosen analyzer, submits the resulting artifacts, and
- * notifies the partner via `configuration.onResult`.
- *
- * **What's wired today:**
- *   - `FlowNavigationManager` cursor — `navigateToNext()` /
- *     `navigateBack()` advance the screen index and subscribers re-render.
- *   - Crash reporting lifecycle — `enable()` on mount when
- *     `configuration.config.enableCrashReporting !== false`, `disable()`
- *     on unmount.
- *   - Localizations resolution — explicit override → device-locale
- *     auto-resolve → English defaults.
- *   - Exit handling — converts `FlowExitReason` to `UseSmileIDResult`
- *     and calls `configuration.onResult` (wrapped in try/catch routing
- *     partner-handler exceptions through crash reporting).
- *
- * **Still stub:** the screen visuals themselves (see `screens/*.tsx`)
- * and the analyzer-dispatch + job-submission pipeline. Cursor moves
- * end-to-end today; analyzer wire-up is the next milestone.
- *
- * @internal Used by `<UseSmileIDBuilder>`.
- */
-export function FlowSuccessRenderer({ configuration, }) {
-    // System color-scheme picks the variant. The partner-supplied theme
-    // bundle carries both light and dark resolved tokens; SDK defaults
-    // are used when the partner skips `b.theme((t) => …)`.
-    const systemScheme = useColorScheme();
-    const isDark = systemScheme === "dark";
-    const theme = configuration.theme
-        ? isDark
-            ? configuration.theme.dark
-            : configuration.theme.light
-        : isDark
-            ? defaultDarkTheme
-            : defaultLightTheme;
-    // Registers the bundled DM Sans faces (no-op after the first flow).
-    // Rendering does not wait on this — text re-renders into DM Sans the
-    // moment registration completes.
-    useUseSmileIDFonts();
-    const enableCrashReporting = configuration.config?.enableCrashReporting !== false;
-    // Sandbox sessions are test traffic and must not pollute the production
-    // Sentry project; the reporter also drops debug bundles internally.
-    const useSandbox = configuration.network?.config?.partnerConfig?.useSandbox === true;
-    // Per-flow session id used as the Sentry user-id so every event
-    // captured during this verification flow correlates under one issue
-    // thread. Generated once per mount; survives re-renders via `useRef`
-    // — useMemo would re-run if React decided to swap the inner element
-    // identity, but the id must outlive any render churn.
-    const flowSessionIdRef = useRef(null);
-    if (flowSessionIdRef.current === null) {
-        flowSessionIdRef.current = generateSessionId();
-    }
-    useEffect(() => {
-        if (enableCrashReporting) {
-            // Tear down any prior client first so a changed useSandbox flag takes
-            // effect — enable() short-circuits when already enabled.
-            UseSmileIDCrashReporting.disable();
-            UseSmileIDCrashReporting.enable({ useSandbox });
-            UseSmileIDCrashReporting.setUserId(flowSessionIdRef.current);
-            UseSmileIDCrashReporting.captureBreadcrumb({
-                category: "flow.navigation",
-                message: "flow mounted",
-            });
-        }
-        return () => {
-            UseSmileIDCrashReporting.disable();
-        };
-    }, [enableCrashReporting, useSandbox]);
-    // `onResult` lives in a ref so the manager's `onExit` closure
-    // captures the latest partner callback without recreating the
-    // manager on every parent render.
-    const onResultRef = useRef(configuration.onResult);
-    onResultRef.current = configuration.onResult;
-    // Force-update reducer drives re-renders when the manager's cursor
-    // or captured artifacts change. Cheaper than mirroring state into
-    // React state — the manager is the single source of truth.
-    const [, forceUpdate] = useReducer((x) => x + 1, 0);
-    // Repository is built once per `network` config — partner-supplied
-    // `partnerConfig` is required (the auth interceptor stamps the
-    // partner-supplied `token` and `partnerId` onto every request).
-    // When omitted, the
-    // manager surfaces a `failure` state from `_assembleJob` rather
-    // than crashing on construction; this lets capture-only / UI-only
-    // smoke harnesses mount `<UseSmileIDBuilder>` without network.
-    // Repository + the per-flow metadata provider are built together
-    // from a single `makeNetworkingFactory` call so they share one
-    // metadata factory (stable `session_id` across every submission).
-    // The provider is handed to the manager, which stamps a fresh
-    // snapshot onto each assembled `JobRequest`; the repository's API
-    // layer then serializes `request.metadata` as the `metadata`
-    // multipart part.
-    const submission = useMemo(() => {
-        const network = configuration.network;
-        if (!network?.config?.partnerConfig)
-            return undefined;
-        const { api, metadata } = makeNetworkingFactory(network);
-        const retry = network.retry ?? DEFAULT_RETRY;
-        return {
-            repository: new UseSmileIDRepositoryImpl(api, retry),
-            metadataProvider: metadata,
-        };
-    }, [configuration.network]);
-    const manager = useMemo(() => {
-        const handleExit = (reason) => {
-            const onResult = onResultRef.current;
-            try {
-                if (reason.kind === "completed") {
-                    // `reason.job` carries the full `JobSubmissionResponse` from
-                    // the successful submission. When the flow completes without
-                    // a successful submission (e.g. no processing screen wired),
-                    // string fields are empty.
-                    onResult(success(reason.job));
-                }
-                else if (reason.kind === "cancelled") {
-                    // User deliberately exited (e.g. back out of the first screen).
-                    // A distinct cancelled result — not a failure.
-                    onResult(cancelled());
-                }
-                else {
-                    onResult(failure(reason.error));
-                }
-            }
-            catch (handlerError) {
-                // Concrete scenario: partner's `onResult` throws (e.g. their
-                // navigation stack is in an invalid state). Don't let that
-                // crash the SDK — capture and continue.
-                UseSmileIDCrashReporting.captureException(handlerError);
-            }
-        };
-        return new FlowNavigationManager({
-            configuration,
-            onExit: handleExit,
-            // Conditional spread — `exactOptionalPropertyTypes: true` rejects
-            // an explicit `undefined` for the optional `repository` /
-            // `metadataProvider` fields. Both come from the same memoized
-            // `submission` object so the metadata factory backing requests
-            // is the same one the API serializes.
-            ...(submission
-                ? {
-                    repository: submission.repository,
-                    metadataProvider: submission.metadataProvider,
-                }
-                : {}),
-        });
-        // Manager is intentionally instantiated once per `configuration` /
-        // `submission` reference. Partners should memoize `configuration` via
-        // `useMemo<FlowConfiguration>(...)`; if they swap to a new flow they
-        // should remount `<UseSmileIDBuilder>`.
-    }, [configuration, submission]);
-    useEffect(() => {
-        const unsubscribe = manager.subscribe(forceUpdate);
-        return () => {
-            unsubscribe();
-            manager.dispose();
-        };
-    }, [manager]);
-    // Resolve localizations:
-    //   1. Explicit `configuration.localizations` (partner-set on the
-    //      builder) — wins over everything.
-    //   2. Auto-resolved from the registry via the device locale
-    //      (`UseSmileIDLocalizations.forActiveLocale()`) when partners
-    //      registered locales with `UseSmileIDLocalizations.register(...)`.
-    //   3. English defaults — no provider mounted, screens read from
-    //      the context's default English-only instance.
-    const resolved = useMemo(() => {
-        if (configuration.localizations)
-            return configuration.localizations;
-        if (UseSmileIDLocalizations.hasRegisteredLocales()) {
-            return UseSmileIDLocalizations.forActiveLocale();
-        }
-        return null;
-    }, [configuration.localizations]);
-    const step = manager.currentScreen;
-    // Empty-screens sentinel: a partner who forgot to call
-    // `b.screens(...)` would otherwise see a blank screen with no clue
-    // why. Render an explicit hint instead.
-    const inner = step ? (_jsx(FlowNavigationProvider, { manager: manager, children: _jsx(ScreenRenderer, { step: step }, `${manager.currentDepth}:${step.kind}`) })) : (_jsxs(View, { style: {
-            flex: 1,
-            alignItems: "center",
-            justifyContent: "center",
-            backgroundColor: theme.colors.background,
-            padding: theme.spacing.large,
-        }, children: [_jsx(Text, { style: {
-                    ...theme.typography.pageHeading,
-                    color: theme.colors.titleText,
-                }, children: "UseSmileID" }), _jsx(Text, { style: { ...theme.typography.body, color: theme.colors.cardText }, children: "No screens configured — call `b.screens((screens) => screens.instructions(); ...)`" })] }));
-    // Theme provider always mounts so deep partner widgets can read
-    // via `useUseSmileIDTheme()` without having to wrap manually.
-    // Localizations provider only mounts when registered locales
-    // resolve — the context default (English) covers the no-provider
-    // path without an extra wrapper.
-    const themed = (_jsx(UseSmileIDThemeProvider, { value: theme, children: inner }));
-    if (resolved) {
-        return (_jsx(UseSmileIDLocalizationsProvider, { value: resolved, children: themed }));
-    }
-    return themed;
-}
-//# sourceMappingURL=use_smile_id_flow.js.map
+"use strict";import{jsx as n,jsxs as K}from"react/jsx-runtime";import{useEffect as c,useMemo as w,useReducer as F,useRef as m,useState as W}from"react";import{AppState as $,Text as _,useColorScheme as G,View as j}from"react-native";import{FlowNavigationManager as H}from"./flow_navigation_manager";import{FlowNavigationProvider as Y}from"./flow_navigation_context";import{ScreenRenderer as q}from"./graph/screen_renderer";import{ScreenTransition as J}from"./graph/screen_transition";import{defaultDarkTheme as Q,defaultLightTheme as X}from"../theme/theme";import{UseSmileIDThemeProvider as Z}from"../theme/theme_context";import{useUseSmileIDFonts as ee}from"../theme/use_use_smile_id_fonts";import{UseSmileIDCrashReporting as i}from"@smileid/usesmileid_bridge";import{generateSessionId as re}from"../../metadata/use_smile_id_metadata_factory";import{UseSmileIDLocalizationsProvider as te}from"../../l10n/use_smile_id_localizations_provider";import{UseSmileIDLocalizations as D}from"../../l10n/use_smile_id_localizations";import{cancelled as z,failure as I,success as oe}from"../../core/models/result";import{ValidationErrorScreen as ne}from"./screen/validation_error_screen";import{BuilderValidationException as N}from"../../core/exception/builder_validation_exception";import{UseSmileIDBuilderException as ie}from"../../core/exception/use_smile_id_builder_exception";import{ValidationState as se}from"./validation/validation_state";import{makeNetworkingFactory as ce}from"../../data/factory/networking_factory";import{UseSmileIDRepositoryImpl as ae}from"../../data/repository/use_smile_id_repository_impl";import{RetryStrategy as le}from"../../core/models/network_config";const de=Object.freeze({maxAttempts:1,strategy:le.none,initialDelay:1,multiplier:2,maxDelay:32,jitter:.2,fixedDelay:1});export function FlowInvalidDispatcher({result:e,onResult:S,enableDebugMode:p}){const o=m(S);o.current=S;const a=m(e.validation);return a.current=e.validation,c(()=>{const v=new N(a.current);try{o.current(I(v))}catch(E){i.captureException(E)}},[]),p?n(ne,{validationState:e.validation}):null}const me=1e3;export function FlowSuccessRenderer({configuration:e}){const p=G()==="dark",o=e.theme?p?e.theme.dark:e.theme.light:p?Q:X,a=ee(),[v,E]=W(!1);c(()=>{if(a)return;const r=setTimeout(()=>E(!0),me);return()=>clearTimeout(r)},[a]);const k=e.config?.enableCrashReporting!==!1,T=e.network?.config?.partnerConfig?.useSandbox===!0,b=m(null);b.current===null&&(b.current=re()),c(()=>(k&&(i.disable(),i.enable({useSandbox:T}),i.setUserId(b.current),i.captureBreadcrumb({category:"flow.navigation",message:"flow mounted"})),()=>{i.disable()}),[k,T]);const h=m(e.onResult);h.current=e.onResult;const u=m(!1),[,P]=F(r=>r+1,0),l=w(()=>{const r=e.network;if(r?.config?.partnerConfig)try{const{api:t,metadata:s}=ce(r),R=r.retry??de;return{repository:new ae(t,R),metadataProvider:s}}catch(t){if(t instanceof ie)return{configError:t};throw t}},[e.network]),f=l!==void 0&&"configError"in l?l.configError:void 0,y=l!==void 0&&"repository"in l?l:void 0;c(()=>{if(f===void 0||u.current)return;u.current=!0;const r=se.invalid([f]),t=r.valid?f:new N(r);try{h.current(I(t))}catch(s){i.captureException(s)}},[f]);const d=w(()=>{const r=t=>{u.current=!0;const s=h.current;try{t.kind==="completed"?s(oe(t.job)):t.kind==="cancelled"?s(z()):s(I(t.error))}catch(R){i.captureException(R)}};return new H({configuration:e,onExit:r,...y?{repository:y.repository,metadataProvider:y.metadataProvider}:{}})},[e,y]);c(()=>{const r=d.subscribe(P);return()=>{r(),d.dispose()}},[d]),c(()=>()=>{u.current||(u.current=!0,h.current(z()))},[]);const[A,M]=F(r=>r+1,0);c(()=>{const r=$.addEventListener("change",t=>{t==="active"&&M()});return()=>r.remove()},[]);const O=D.activeLocaleKey,U=w(()=>e.localizations?e.localizations:D.hasRegisteredLocales()?D.forActiveLocale():null,[e.localizations,O,A]),x=d.currentScreen,g=d.currentDepth,L=m(g),V=g>=L.current;L.current=g;const B=x?n(Y,{manager:d,children:n(J,{forward:V,children:n(q,{step:x})},`${g}:${x.kind}`)}):K(j,{style:{flex:1,alignItems:"center",justifyContent:"center",backgroundColor:o.colors.background,padding:o.spacing.large},children:[n(_,{style:{...o.typography.pageHeading,color:o.colors.titleText},children:"UseSmileID"}),n(_,{style:{...o.typography.body,color:o.colors.cardText},children:"No screens configured \u2014 call `b.screens((screens) => screens.instructions(); ...)`"})]}),C=n(Z,{value:o,children:a||v?B:n(j,{style:{flex:1,backgroundColor:o.colors.background},testID:"si_flow_font_gate"})});return f!==void 0?null:U?n(te,{value:U,children:C}):C}

package/dist/presentation/flow/validation/flow_validator.d.ts

@@ -2,7 +2,8 @@ import type { MLConfig } from "../../../core/models/ml_config";
 import type { NetworkConfig } from "../../../core/models/network_config";
 import type { BiometricKYCParams, ConsentInformation, DocumentVerificationParams, EnhancedDocumentVerificationParams, EnhancedKYCParams, UserDetails } from "../../../core/models/params";
 import type { ScreenSpec } from "../dsl/builder/screens_builder";
-import { ValidationState, type ValidationIssue } from "./validation_state";
+import type { TokenPayload } from "../../../data/model/token_payload";
+import { type ValidationIssue } from "./validation_state";
 /**
  * Pure flow validator — returns typed `UseSmileIDValidationException`
  * instances. The same instances are exposed via `b.validate()` and
@@ -27,6 +28,7 @@ import { ValidationState, type ValidationIssue } from "./validation_state";
  */
 type FlowValidatorInput = {
     readonly steps: readonly ScreenSpec[];
+    readonly userId?: string | undefined;
     readonly network?: NetworkConfig | undefined;
     readonly ml?: MLConfig | undefined;
     readonly consentInformation?: ConsentInformation | undefined;
@@ -35,6 +37,12 @@ type FlowValidatorInput = {
     readonly documentVerificationParams?: DocumentVerificationParams | undefined;
     readonly enhancedDocumentVerificationParams?: EnhancedDocumentVerificationParams | undefined;
     readonly userDetails?: UserDetails | undefined;
+    /**
+     * User-detail/consent bindings decoded from the JWT `payload` claim.
+     * `undefined` (no token, offline mode, legacy token) keeps every rule
+     * exactly as strict as before token support existed.
+     */
+    readonly tokenPayload?: TokenPayload | undefined;
 };
 /**
  * Quick triage of the in-progress builder state. Today the only rule
@@ -86,22 +94,17 @@ export declare function runConsentValidation(consent: ConsentInformation): Valid
  * keep working unchanged after the consolidation away from nesting
  * `userDetails` inside the KYC param shapes.
  *
+ * Each field requirement is evaluated against the union of builder
+ * input and token bindings: a field the token binds (see
+ * `TokenPayload`) never has to be supplied locally — the server
+ * injects it, and the SDK drops the local value from the wire. With
+ * no `tokenPayload` the behavior is exactly the pre-token rule set.
+ *
  * Exposed via `b.validateUserDetails(payload)` so partners can
  * pre-flight a payload before assigning to `b.userDetails`, mirroring
  * the existing `b.validateConsent` / `b.validateEnhancedKYCParams`
- * pattern.
- */
-export declare function runUserDetailsValidation(userDetails: UserDetails): ValidationIssue[];
-/**
- * Find the first `error`-severity issue in a state. Returns
- * `undefined` for a valid state, or for a state whose only issues
- * are `warning`-severity (which never block `build()`).
- *
- * `build()` calls this to convert validator output into a thrown
- * `Error` (the issue itself, since every issue is also an exception
- * class). Partner regex on the message keeps working across the
- * refactor.
+ * pattern (the pre-flight helper always validates strictly, without
+ * token context).
  */
-export declare function firstErrorIssue(state: ValidationState): ValidationIssue | undefined;
+export declare function runUserDetailsValidation(userDetails: UserDetails, tokenPayload?: TokenPayload): ValidationIssue[];
 export {};
-//# sourceMappingURL=flow_validator.d.ts.map

package/dist/presentation/flow/validation/flow_validator.js

@@ -1,308 +1 @@
-import { CaptureType } from "../../../core/models/ml_config";
-import { JobType } from "../../../core/models/job_type";
-import { IssueSeverity } from "../../../core/exception/issue_severity";
-import { InvalidConsentConfigException, InvalidConsentInformationException, } from "../../../core/exception/consent_validation_exceptions";
-import { InvalidFieldValueException, MissingJobTypeException, MissingMLConfigurationBlockException, MissingNetworkConfigurationBlockException, } from "../../../core/exception/job_validation_exceptions";
-import { AgentModeWithEnhancedLivenessException, InvalidDocumentCaptureConfigException, InvalidMissingCaptureTypeException, } from "../../../core/exception/capture_validation_exceptions";
-import { EmptyScreensBlockException } from "../../../core/exception/screen_config_validation_exceptions";
-import { collectJobTypeIssues } from "./job_type_validator";
-/**
- * Agent mode captures on the rear lens while the head-turn challenge is only
- * validated for front-camera framing, so the pair is refused rather than
- * silently dropping one of them.
- */
-function selfieConfigIssues(config) {
-    if (config?.allowAgentMode && config.enableEnhancedLiveness) {
-        return [new AgentModeWithEnhancedLivenessException()];
-    }
-    return [];
-}
-/** Surfaces at most one issue: missing block > missing type > bad aspect ratio. */
-function documentConfigIssues(config) {
-    if (config === undefined) {
-        return [
-            new InvalidDocumentCaptureConfigException({
-                reason: "document is required when mode is Document",
-            }),
-        ];
-    }
-    if (config.documentType === undefined) {
-        return [
-            new InvalidDocumentCaptureConfigException({
-                reason: "documentType is required for document capture",
-            }),
-        ];
-    }
-    if (config.knownIdAspectRatio !== undefined &&
-        config.knownIdAspectRatio <= 0) {
-        return [
-            new InvalidDocumentCaptureConfigException({
-                reason: "knownIdAspectRatio must be > 0 if provided",
-            }),
-        ];
-    }
-    return [];
-}
-/**
- * Quick triage of the in-progress builder state. Today the only rule
- * surfaced is the empty-screens-block error — `b.screens(...)` must
- * register at least one screen before the builder can produce a flow.
- * `b.validate()` calls this; the full rule set runs inside `build()`.
- */
-export function runBuilderValidation(steps) {
-    const issues = [];
-    if (steps.length === 0) {
-        issues.push(new EmptyScreensBlockException());
-    }
-    return issues;
-}
-/**
- * Run every flow-level validation rule and return the collected
- * issues. Empty array means valid.
- *
- * Rule order is deterministic so callers diffing two outputs see
- * stable output. `build()` returns `{kind: 'invalid'}` carrying these
- * issues when any are `error`-severity.
- */
-export function runFlowValidation(input) {
-    const issues = [];
-    if (input.steps.length === 0) {
-        issues.push(new EmptyScreensBlockException());
-        // Without screens, every other rule is vacuous — short-circuit
-        // to avoid producing follow-on noise.
-        return issues;
-    }
-    // Capture screens must declare a captureType. Partners set this inside
-    // the configure block; if they forget, surface the typed exception so
-    // it routes through `onResult.failure` like every other validation issue.
-    for (const step of input.steps) {
-        if (step.kind === "capture") {
-            if (step.config.captureType === undefined) {
-                issues.push(new InvalidMissingCaptureTypeException());
-            }
-            if (step.config.captureType === CaptureType.selfie) {
-                issues.push(...selfieConfigIssues(step.config.selfieConfig));
-            }
-            if (step.config.captureType === CaptureType.document) {
-                issues.push(...documentConfigIssues(step.config.documentConfig));
-            }
-        }
-    }
-    const hasCaptureScreen = input.steps.some((s) => s.kind === "capture");
-    const hasProcessingScreen = input.steps.some((s) => s.kind === "processing");
-    if (hasCaptureScreen && !input.ml) {
-        issues.push(new MissingMLConfigurationBlockException());
-    }
-    if (hasProcessingScreen && !input.network) {
-        issues.push(new MissingNetworkConfigurationBlockException());
-    }
-    // A processing screen always requires a resolved jobType. Fail the
-    // build (ERROR) whenever it's missing — whether or not a network
-    // block was provided. The missing-network WARNING above still fires
-    // alongside this when the block is absent.
-    if (hasProcessingScreen) {
-        const jobType = input.network?.config?.jobType;
-        if (jobType === undefined || jobType === JobType.unknown) {
-            issues.push(new MissingJobTypeException());
-        }
-    }
-    // Consent screen config validation — partnerName must be non-empty
-    // when a consent screen is in the flow. The consent screen's
-    // attribution line renders blank without it, which partners
-    // typically don't notice until QA.
-    const consentStep = input.steps.find((s) => s.kind === "consent");
-    if (consentStep &&
-        (!consentStep.config.partnerName || !consentStep.config.partnerName.trim())) {
-        issues.push(new InvalidConsentConfigException({
-            reason: "partnerName cannot be empty",
-        }));
-    }
-    if (consentStep && consentStep.config.partnerIcon === undefined) {
-        issues.push(new InvalidConsentConfigException({
-            reason: "partnerIcon is required for the consent screen",
-        }));
-    }
-    if (consentStep &&
-        (consentStep.config.partnerPrivacyPolicyUrl === undefined ||
-            !consentStep.config.partnerPrivacyPolicyUrl.trim())) {
-        issues.push(new InvalidConsentConfigException({
-            reason: "partnerPrivacyPolicyUrl is required for the consent screen",
-        }));
-    }
-    const hasConsentScreen = consentStep !== undefined;
-    if (hasConsentScreen && input.consentInformation !== undefined) {
-        issues.push(new InvalidConsentConfigException({
-            reason: "Exactly one form of consent is required — remove the consent { } screen if using consentInformation, or clear consentInformation if using the consent screen",
-        }));
-    }
-    if (input.consentInformation) {
-        issues.push(...runConsentValidation(input.consentInformation));
-    }
-    if (input.enhancedKYCParams) {
-        issues.push(...runEnhancedKYCParamsValidation(input.enhancedKYCParams));
-    }
-    if (input.biometricKYCParams) {
-        issues.push(...runBiometricKYCParamsValidation(input.biometricKYCParams));
-    }
-    if (input.documentVerificationParams) {
-        issues.push(...runDocumentVerificationParamsValidation(input.documentVerificationParams));
-    }
-    if (input.enhancedDocumentVerificationParams) {
-        issues.push(...runEnhancedDocumentVerificationParamsValidation(input.enhancedDocumentVerificationParams));
-    }
-    if (input.userDetails) {
-        issues.push(...runUserDetailsValidation(input.userDetails));
-    }
-    // Every flow-composition rule (screen ordering, duplicate screens,
-    // preview placement, analyzer dependencies, per-job field
-    // requirements) lives in job_type_validator.ts. FlowValidator owns
-    // only the builder / job-agnostic concerns above and delegates the
-    // per-jobType pass here. The dispatch resolves a validator from the
-    // configured jobType, falling back to a generic structural validator
-    // when the jobType is unknown so prototyping flows still get
-    // ordering / duplicate / preview feedback.
-    collectJobTypeIssues(input, issues);
-    return issues;
-}
-/**
- * Validate an `EnhancedKYCParams` payload in isolation. Used by
- * `b.validateEnhancedKYCParams(params)` so partners can pre-flight a
- * payload before assigning it to the builder.
- */
-export function runEnhancedKYCParamsValidation(params) {
-    return runKYCParamsValidation(params);
-}
-/**
- * Validate a `BiometricKYCParams` payload in isolation. Used by
- * `b.validateBiometricKYCParams(params)`.
- */
-export function runBiometricKYCParamsValidation(params) {
-    return runKYCParamsValidation(params);
-}
-/**
- * Validate a `DocumentVerificationParams` payload in isolation. `country`
- * must be non-blank; `idType` is optional, but a present-but-blank value
- * is rejected.
- */
-export function runDocumentVerificationParamsValidation(params) {
-    const issues = [];
-    if (!params.country || !params.country.trim()) {
-        issues.push(new InvalidFieldValueException({
-            fieldName: "country",
-            reason: "must not be blank",
-        }));
-    }
-    if (params.idType !== undefined && !params.idType.trim()) {
-        issues.push(new InvalidFieldValueException({
-            fieldName: "idType",
-            reason: "must not be blank",
-        }));
-    }
-    return issues;
-}
-/**
- * Validate an `EnhancedDocumentVerificationParams` payload in isolation.
- * Both `country` and `idType` are required and must be non-blank.
- */
-export function runEnhancedDocumentVerificationParamsValidation(params) {
-    const issues = [];
-    for (const field of ["country", "idType"]) {
-        const value = params[field];
-        if (!value || !value.trim()) {
-            issues.push(new InvalidFieldValueException({
-                fieldName: field,
-                reason: "must not be blank",
-            }));
-        }
-    }
-    return issues;
-}
-/**
- * Validate a `ConsentInformation` payload in isolation. Used by
- * `b.validateConsent(consent)` so partners can pre-flight a payload
- * pulled from their own storage before assigning it to the builder.
- */
-export function runConsentValidation(consent) {
-    const issues = [];
-    if (!consent.granted) {
-        issues.push(new InvalidConsentInformationException({
-            detail: "granted must be true",
-        }));
-    }
-    for (const field of [
-        "grantedAt",
-        "noticeLanguage",
-        "noticePrivacyPolicyUrl",
-    ]) {
-        if (!consent[field] || !consent[field].trim()) {
-            issues.push(new InvalidConsentInformationException({
-                detail: `${field} must not be blank`,
-            }));
-        }
-    }
-    return issues;
-}
-function runKYCParamsValidation(params) {
-    const issues = [];
-    // Top-level required fields on the params object.
-    for (const field of ["idType", "idNumber", "country"]) {
-        const value = params[field];
-        if (!value || !value.trim()) {
-            issues.push(new InvalidFieldValueException({
-                fieldName: field,
-                reason: "must not be blank",
-            }));
-        }
-    }
-    return issues;
-}
-/**
- * Validate a top-level `UserDetails` payload. Required fields use the
- * dotted path (`userDetails.givenNames`) so partner regex-matchers
- * keep working unchanged after the consolidation away from nesting
- * `userDetails` inside the KYC param shapes.
- *
- * Exposed via `b.validateUserDetails(payload)` so partners can
- * pre-flight a payload before assigning to `b.userDetails`, mirroring
- * the existing `b.validateConsent` / `b.validateEnhancedKYCParams`
- * pattern.
- */
-export function runUserDetailsValidation(userDetails) {
-    const issues = [];
-    for (const field of ["givenNames", "lastName"]) {
-        const value = userDetails[field];
-        if (!value || !value.trim()) {
-            issues.push(new InvalidFieldValueException({
-                fieldName: `userDetails.${field}`,
-                reason: "must not be blank",
-            }));
-        }
-    }
-    // At-least-one-of contact rule: email and phoneNumber are each
-    // optional, but the partner must supply one of them.
-    const hasEmail = !!userDetails.email && userDetails.email.trim().length > 0;
-    const hasPhone = !!userDetails.phoneNumber && userDetails.phoneNumber.trim().length > 0;
-    if (!hasEmail && !hasPhone) {
-        issues.push(new InvalidFieldValueException({
-            fieldName: "userDetails",
-            reason: "at least one of email or phoneNumber must be non blank",
-        }));
-    }
-    return issues;
-}
-/**
- * Find the first `error`-severity issue in a state. Returns
- * `undefined` for a valid state, or for a state whose only issues
- * are `warning`-severity (which never block `build()`).
- *
- * `build()` calls this to convert validator output into a thrown
- * `Error` (the issue itself, since every issue is also an exception
- * class). Partner regex on the message keeps working across the
- * refactor.
- */
-export function firstErrorIssue(state) {
-    if (state.valid)
-        return undefined;
-    return state.issues.find((i) => i.severity === IssueSeverity.error);
-}
-//# sourceMappingURL=flow_validator.js.map
+"use strict";import{CaptureType as d}from"../../../core/models/ml_config";import{JobType as h,jobTypeFromValue as y}from"../../../core/models/job_type";import{InvalidConsentConfigException as s,InvalidConsentInformationException as m}from"../../../core/exception/consent_validation_exceptions";import{InvalidFieldValueException as a,MissingJobTypeException as g,MissingMLConfigurationBlockException as w,MissingNetworkConfigurationBlockException as b}from"../../../core/exception/job_validation_exceptions";import{AgentModeWithEnhancedLivenessException as C,InvalidDocumentCaptureConfigException as c,InvalidMissingCaptureTypeException as P}from"../../../core/exception/capture_validation_exceptions";import{EmptyScreensBlockException as p}from"../../../core/exception/screen_config_validation_exceptions";import{collectJobTypeIssues as k}from"./job_type_validator";import{missingUserDetailsFieldIssues as I}from"./user_details_validator";function x(e){return e?.allowAgentMode&&e.enableEnhancedLiveness?[new C]:[]}function T(e){return e===void 0?[new c({reason:"document is required when mode is Document"})]:e.documentType===void 0?[new c({reason:"documentType is required for document capture"})]:e.knownIdAspectRatio!==void 0&&e.knownIdAspectRatio<=0?[new c({reason:"knownIdAspectRatio must be > 0 if provided"})]:[]}export function runBuilderValidation(e){const n=[];return e.length===0&&n.push(new p),n}export function runFlowValidation(e){const n=[];if(e.steps.length===0)return n.push(new p),n;for(const o of e.steps)o.kind==="capture"&&(o.config.captureType===void 0&&n.push(new P),o.config.captureType===d.selfie&&n.push(...x(o.config.selfieConfig)),o.config.captureType===d.document&&n.push(...T(o.config.documentConfig)));const i=e.steps.some(o=>o.kind==="capture"),t=e.steps.some(o=>o.kind==="processing"),u=e.network?.config?.jobType,f=u===void 0||y(u)===h.unknown;i&&!e.ml&&f&&n.push(new w),t&&!e.network&&n.push(new b),t&&f&&n.push(new g);const r=e.steps.find(o=>o.kind==="consent");return r&&(!r.config.partnerName||!r.config.partnerName.trim())&&n.push(new s({reason:"partnerName cannot be empty"})),r&&r.config.partnerIcon===void 0&&n.push(new s({reason:"partnerIcon is required for the consent screen"})),r&&(r.config.partnerPrivacyPolicyUrl===void 0||!r.config.partnerPrivacyPolicyUrl.trim())&&n.push(new s({reason:"partnerPrivacyPolicyUrl is required for the consent screen"})),r!==void 0&&e.consentInformation!==void 0&&n.push(new s({reason:"Exactly one form of consent is required \u2014 remove the consent { } screen if using consentInformation, or clear consentInformation if using the consent screen"})),e.consentInformation&&e.tokenPayload?.consent===void 0&&n.push(...runConsentValidation(e.consentInformation)),e.enhancedKYCParams&&n.push(...runEnhancedKYCParamsValidation(e.enhancedKYCParams)),e.biometricKYCParams&&n.push(...runBiometricKYCParamsValidation(e.biometricKYCParams)),e.documentVerificationParams&&n.push(...runDocumentVerificationParamsValidation(e.documentVerificationParams)),e.enhancedDocumentVerificationParams&&n.push(...runEnhancedDocumentVerificationParamsValidation(e.enhancedDocumentVerificationParams)),e.userDetails&&n.push(...runUserDetailsValidation(e.userDetails,e.tokenPayload)),k(e,n),n}export function runEnhancedKYCParamsValidation(e){return l(e)}export function runBiometricKYCParamsValidation(e){return l(e)}export function runDocumentVerificationParamsValidation(e){const n=[];return(!e.country||!e.country.trim())&&n.push(new a({fieldName:"country",reason:"must not be blank"})),e.idType!==void 0&&!e.idType.trim()&&n.push(new a({fieldName:"idType",reason:"must not be blank"})),n}export function runEnhancedDocumentVerificationParamsValidation(e){const n=[];for(const i of["country","idType"]){const t=e[i];(!t||!t.trim())&&n.push(new a({fieldName:i,reason:"must not be blank"}))}return n}export function runConsentValidation(e){const n=[];e.granted||n.push(new m({detail:"granted must be true"}));for(const i of["grantedAt","noticeLanguage","noticePrivacyPolicyUrl"])(!e[i]||!e[i].trim())&&n.push(new m({detail:`${i} must not be blank`}));return n}function l(e){const n=[];for(const i of["idType","idNumber","country"]){const t=e[i];(!t||!t.trim())&&n.push(new a({fieldName:i,reason:"must not be blank"}))}return n}export function runUserDetailsValidation(e,n){return I(e,n)}