@splitin/verification-adapter-persona 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SplitInTech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,32 @@
+Verification Adapter SDK
+Copyright (c) 2026 SplitInTech
+
+This product is licensed under the MIT License. See LICENSE.
+
+Third-party notices
+===================
+
+This project redistributes no vendor identity SDKs in its core or server
+packages. Optional peer dependencies used by browser plugins:
+
+- `@stripe/stripe-js` — Stripe, Inc. (MIT). Used only by the Stripe Identity
+  browser plugin via dynamic import. Stripe is a trademark of Stripe, Inc.
+- `persona` — Persona Identities, Inc. Used only by the Persona browser plugin
+  via dynamic import.
+- `react-plaid-link` — Plaid Inc. (MIT). Used only by the Plaid Identity
+  Verification browser plugin via dynamic import. Plaid is a trademark of
+  Plaid Inc.
+
+Server adapters speak HTTPS to provider APIs with an injected Fetch
+implementation. They do not bundle Stripe, Persona, or Plaid Node SDKs.
+
+Runtime and tooling (declared in package.json; not vendored):
+
+- `ajv` — MIT
+- `jose` — MIT (Plaid webhook JWT verification)
+- `pg` — MIT (optional PostgreSQL executor)
+- TypeScript, tsup, vitest, Changesets — Apache-2.0 / MIT as published by
+  their authors
+
+This project provides engineering primitives. It is not a legal, KYC, KYB, or
+regulatory compliance certification.

package/README.md

@@ -0,0 +1,45 @@
+# `@splitin/verification-adapter-persona`
+
+Official Persona plugin for the Universal Open-Source Verification Adapter SDK.
+
+Supported packages: `human_idv`, `business_kyb`, `associated_person_idv`,
+`ownership_review`. Documents remain at Persona; this adapter returns opaque
+evidence references only.
+
+## Install
+
+```bash
+npm install @splitin/verification-adapter-persona @splitin/verification-adapter-sdk
+```
+
+Optional browser peer: `persona`.
+
+## Usage
+
+Construct with an injected `ProviderRuntimeContext`. The adapter never reads
+environment variables. HTTP always targets `api.withpersona.com`.
+
+```ts
+import { createDefaultRuntime } from '@splitin/verification-adapter-sdk';
+import {
+  PersonaVerificationAdapter,
+  createPersonaConfiguration,
+  personaProviderManifest,
+} from '@splitin/verification-adapter-persona';
+
+const configuration = createPersonaConfiguration(process.env);
+const runtime = createDefaultRuntime('sandbox', configuration, {
+  allowedHosts: personaProviderManifest.apiHosts,
+});
+const adapter = new PersonaVerificationAdapter(runtime);
+```
+
+Published template and workflow versions are required. Production must supply
+HTTPS embedding origins. Webhook verification uses timestamped HMAC over the
+exact raw body and accepts current plus previous secrets.
+
+The browser entry (`@splitin/verification-adapter-persona/browser`) exports a
+`persona_embedded` launcher. Browser `onComplete` / `onCancel` callbacks are UX
+signals only; canonical status is owned by the engine.
+
+This package is not a compliance certification.

package/dist/browser.cjs

@@ -0,0 +1,42 @@
+'use strict';
+
+// src/browser.ts
+var personaEmbeddedLauncherKey = "persona_embedded";
+var personaBrowserPlugin = Object.freeze({
+  launcherKey: personaEmbeddedLauncherKey,
+  async launch(input) {
+    const persona = await loadPersona();
+    const Client = persona.Client ?? persona.default?.Client;
+    if (typeof Client !== "function") {
+      throw new Error("Persona browser SDK did not export Client.");
+    }
+    const client = new Client({
+      inquiryId: input.inquiryId,
+      sessionToken: input.transientSecret,
+      environment: input.environment,
+      onComplete: () => input.onUxSignal?.("complete"),
+      onCancel: () => input.onUxSignal?.("cancel"),
+      onError: () => input.onUxSignal?.("error"),
+      onEvent: () => input.onUxSignal?.("event")
+    });
+    client.open();
+    return {
+      unmount() {
+        client.destroy?.();
+        input.onUxSignal?.("cancel");
+      }
+    };
+  }
+});
+async function loadPersona() {
+  try {
+    return await import('persona');
+  } catch {
+    throw new Error("Optional peer dependency persona is not installed.");
+  }
+}
+
+exports.personaBrowserPlugin = personaBrowserPlugin;
+exports.personaEmbeddedLauncherKey = personaEmbeddedLauncherKey;
+//# sourceMappingURL=browser.cjs.map
+//# sourceMappingURL=browser.cjs.map

package/dist/browser.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";;;AAQO,IAAM,0BAAA,GAA6B;AAUnC,IAAM,oBAAA,GAAuB,OAAO,MAAA,CAAO;AAAA,EAChD,WAAA,EAAa,0BAAA;AAAA,EACb,MAAM,OAAO,KAAA,EAAgE;AAC3E,IAAA,MAAM,OAAA,GAAU,MAAM,WAAA,EAAY;AAClC,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,OAAA,CAAQ,OAAA,EAAS,MAAA;AAClD,IAAA,IAAI,OAAO,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO;AAAA,MACxB,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,cAAc,KAAA,CAAM,eAAA;AAAA,MACpB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,UAAA,EAAY,MAAM,KAAA,CAAM,UAAA,GAAa,UAAU,CAAA;AAAA,MAC/C,QAAA,EAAU,MAAM,KAAA,CAAM,UAAA,GAAa,QAAQ,CAAA;AAAA,MAC3C,OAAA,EAAS,MAAM,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,MACzC,OAAA,EAAS,MAAM,KAAA,CAAM,UAAA,GAAa,OAAO;AAAA,KAC1C,CAAA;AACD,IAAA,MAAA,CAAO,IAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,OAAA,GAAU;AACR,QAAA,MAAA,CAAO,OAAA,IAAU;AACjB,QAAA,KAAA,CAAM,aAAa,QAAQ,CAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AACF,CAAC;AAED,eAAe,WAAA,GAAsC;AACnD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,SAAS,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACF","file":"browser.cjs","sourcesContent":["/**\n * Browser launcher for Persona embedded inquiries.\n *\n * Dynamically imports optional peer `persona`. Browser callbacks are UX\n * signals only — they must not be treated as canonical verification decisions.\n * Documents stay at Persona; this plugin never receives document bytes.\n */\n\nexport const personaEmbeddedLauncherKey = 'persona_embedded' as const;\n\nexport interface PersonaBrowserLaunchInput {\n  container?: HTMLElement;\n  inquiryId?: string;\n  transientSecret?: string;\n  environment?: 'sandbox' | 'production';\n  onUxSignal?: (signal: 'complete' | 'cancel' | 'error' | 'event') => void;\n}\n\nexport const personaBrowserPlugin = Object.freeze({\n  launcherKey: personaEmbeddedLauncherKey,\n  async launch(input: PersonaBrowserLaunchInput): Promise<{ unmount(): void }> {\n    const persona = await loadPersona();\n    const Client = persona.Client ?? persona.default?.Client;\n    if (typeof Client !== 'function') {\n      throw new Error('Persona browser SDK did not export Client.');\n    }\n    const client = new Client({\n      inquiryId: input.inquiryId,\n      sessionToken: input.transientSecret,\n      environment: input.environment,\n      onComplete: () => input.onUxSignal?.('complete'),\n      onCancel: () => input.onUxSignal?.('cancel'),\n      onError: () => input.onUxSignal?.('error'),\n      onEvent: () => input.onUxSignal?.('event'),\n    });\n    client.open();\n    return {\n      unmount() {\n        client.destroy?.();\n        input.onUxSignal?.('cancel');\n      },\n    };\n  },\n});\n\nasync function loadPersona(): Promise<PersonaModule> {\n  try {\n    return await import('persona') as PersonaModule;\n  } catch {\n    throw new Error('Optional peer dependency persona is not installed.');\n  }\n}\n\ninterface PersonaClient {\n  open(): void;\n  destroy?: () => void;\n}\n\ninterface PersonaModule {\n  Client?: new (options: Record<string, unknown>) => PersonaClient;\n  default?: { Client?: new (options: Record<string, unknown>) => PersonaClient };\n}\n"]}

package/dist/browser.d.cts

@@ -0,0 +1,23 @@
+/**
+ * Browser launcher for Persona embedded inquiries.
+ *
+ * Dynamically imports optional peer `persona`. Browser callbacks are UX
+ * signals only — they must not be treated as canonical verification decisions.
+ * Documents stay at Persona; this plugin never receives document bytes.
+ */
+declare const personaEmbeddedLauncherKey: "persona_embedded";
+interface PersonaBrowserLaunchInput {
+    container?: HTMLElement;
+    inquiryId?: string;
+    transientSecret?: string;
+    environment?: 'sandbox' | 'production';
+    onUxSignal?: (signal: 'complete' | 'cancel' | 'error' | 'event') => void;
+}
+declare const personaBrowserPlugin: Readonly<{
+    launcherKey: "persona_embedded";
+    launch(input: PersonaBrowserLaunchInput): Promise<{
+        unmount(): void;
+    }>;
+}>;
+
+export { type PersonaBrowserLaunchInput, personaBrowserPlugin, personaEmbeddedLauncherKey };

package/dist/browser.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Browser launcher for Persona embedded inquiries.
+ *
+ * Dynamically imports optional peer `persona`. Browser callbacks are UX
+ * signals only — they must not be treated as canonical verification decisions.
+ * Documents stay at Persona; this plugin never receives document bytes.
+ */
+declare const personaEmbeddedLauncherKey: "persona_embedded";
+interface PersonaBrowserLaunchInput {
+    container?: HTMLElement;
+    inquiryId?: string;
+    transientSecret?: string;
+    environment?: 'sandbox' | 'production';
+    onUxSignal?: (signal: 'complete' | 'cancel' | 'error' | 'event') => void;
+}
+declare const personaBrowserPlugin: Readonly<{
+    launcherKey: "persona_embedded";
+    launch(input: PersonaBrowserLaunchInput): Promise<{
+        unmount(): void;
+    }>;
+}>;
+
+export { type PersonaBrowserLaunchInput, personaBrowserPlugin, personaEmbeddedLauncherKey };

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sources":["browser.d.ts"],"names":[],"mappings":"AAAA"}

package/dist/browser.js

@@ -0,0 +1,39 @@
+// src/browser.ts
+var personaEmbeddedLauncherKey = "persona_embedded";
+var personaBrowserPlugin = Object.freeze({
+  launcherKey: personaEmbeddedLauncherKey,
+  async launch(input) {
+    const persona = await loadPersona();
+    const Client = persona.Client ?? persona.default?.Client;
+    if (typeof Client !== "function") {
+      throw new Error("Persona browser SDK did not export Client.");
+    }
+    const client = new Client({
+      inquiryId: input.inquiryId,
+      sessionToken: input.transientSecret,
+      environment: input.environment,
+      onComplete: () => input.onUxSignal?.("complete"),
+      onCancel: () => input.onUxSignal?.("cancel"),
+      onError: () => input.onUxSignal?.("error"),
+      onEvent: () => input.onUxSignal?.("event")
+    });
+    client.open();
+    return {
+      unmount() {
+        client.destroy?.();
+        input.onUxSignal?.("cancel");
+      }
+    };
+  }
+});
+async function loadPersona() {
+  try {
+    return await import('persona');
+  } catch {
+    throw new Error("Optional peer dependency persona is not installed.");
+  }
+}
+
+export { personaBrowserPlugin, personaEmbeddedLauncherKey };
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";AAQO,IAAM,0BAAA,GAA6B;AAUnC,IAAM,oBAAA,GAAuB,OAAO,MAAA,CAAO;AAAA,EAChD,WAAA,EAAa,0BAAA;AAAA,EACb,MAAM,OAAO,KAAA,EAAgE;AAC3E,IAAA,MAAM,OAAA,GAAU,MAAM,WAAA,EAAY;AAClC,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,OAAA,CAAQ,OAAA,EAAS,MAAA;AAClD,IAAA,IAAI,OAAO,WAAW,UAAA,EAAY;AAChC,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,MAAM,MAAA,GAAS,IAAI,MAAA,CAAO;AAAA,MACxB,WAAW,KAAA,CAAM,SAAA;AAAA,MACjB,cAAc,KAAA,CAAM,eAAA;AAAA,MACpB,aAAa,KAAA,CAAM,WAAA;AAAA,MACnB,UAAA,EAAY,MAAM,KAAA,CAAM,UAAA,GAAa,UAAU,CAAA;AAAA,MAC/C,QAAA,EAAU,MAAM,KAAA,CAAM,UAAA,GAAa,QAAQ,CAAA;AAAA,MAC3C,OAAA,EAAS,MAAM,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,MACzC,OAAA,EAAS,MAAM,KAAA,CAAM,UAAA,GAAa,OAAO;AAAA,KAC1C,CAAA;AACD,IAAA,MAAA,CAAO,IAAA,EAAK;AACZ,IAAA,OAAO;AAAA,MACL,OAAA,GAAU;AACR,QAAA,MAAA,CAAO,OAAA,IAAU;AACjB,QAAA,KAAA,CAAM,aAAa,QAAQ,CAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AACF,CAAC;AAED,eAAe,WAAA,GAAsC;AACnD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,SAAS,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAAA,EACtE;AACF","file":"browser.js","sourcesContent":["/**\n * Browser launcher for Persona embedded inquiries.\n *\n * Dynamically imports optional peer `persona`. Browser callbacks are UX\n * signals only — they must not be treated as canonical verification decisions.\n * Documents stay at Persona; this plugin never receives document bytes.\n */\n\nexport const personaEmbeddedLauncherKey = 'persona_embedded' as const;\n\nexport interface PersonaBrowserLaunchInput {\n  container?: HTMLElement;\n  inquiryId?: string;\n  transientSecret?: string;\n  environment?: 'sandbox' | 'production';\n  onUxSignal?: (signal: 'complete' | 'cancel' | 'error' | 'event') => void;\n}\n\nexport const personaBrowserPlugin = Object.freeze({\n  launcherKey: personaEmbeddedLauncherKey,\n  async launch(input: PersonaBrowserLaunchInput): Promise<{ unmount(): void }> {\n    const persona = await loadPersona();\n    const Client = persona.Client ?? persona.default?.Client;\n    if (typeof Client !== 'function') {\n      throw new Error('Persona browser SDK did not export Client.');\n    }\n    const client = new Client({\n      inquiryId: input.inquiryId,\n      sessionToken: input.transientSecret,\n      environment: input.environment,\n      onComplete: () => input.onUxSignal?.('complete'),\n      onCancel: () => input.onUxSignal?.('cancel'),\n      onError: () => input.onUxSignal?.('error'),\n      onEvent: () => input.onUxSignal?.('event'),\n    });\n    client.open();\n    return {\n      unmount() {\n        client.destroy?.();\n        input.onUxSignal?.('cancel');\n      },\n    };\n  },\n});\n\nasync function loadPersona(): Promise<PersonaModule> {\n  try {\n    return await import('persona') as PersonaModule;\n  } catch {\n    throw new Error('Optional peer dependency persona is not installed.');\n  }\n}\n\ninterface PersonaClient {\n  open(): void;\n  destroy?: () => void;\n}\n\ninterface PersonaModule {\n  Client?: new (options: Record<string, unknown>) => PersonaClient;\n  default?: { Client?: new (options: Record<string, unknown>) => PersonaClient };\n}\n"]}