@splitin/verification-adapter-plaid-idv 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SplitInTech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,32 @@
+Verification Adapter SDK
+Copyright (c) 2026 SplitInTech
+
+This product is licensed under the MIT License. See LICENSE.
+
+Third-party notices
+===================
+
+This project redistributes no vendor identity SDKs in its core or server
+packages. Optional peer dependencies used by browser plugins:
+
+- `@stripe/stripe-js` — Stripe, Inc. (MIT). Used only by the Stripe Identity
+  browser plugin via dynamic import. Stripe is a trademark of Stripe, Inc.
+- `persona` — Persona Identities, Inc. Used only by the Persona browser plugin
+  via dynamic import.
+- `react-plaid-link` — Plaid Inc. (MIT). Used only by the Plaid Identity
+  Verification browser plugin via dynamic import. Plaid is a trademark of
+  Plaid Inc.
+
+Server adapters speak HTTPS to provider APIs with an injected Fetch
+implementation. They do not bundle Stripe, Persona, or Plaid Node SDKs.
+
+Runtime and tooling (declared in package.json; not vendored):
+
+- `ajv` — MIT
+- `jose` — MIT (Plaid webhook JWT verification)
+- `pg` — MIT (optional PostgreSQL executor)
+- TypeScript, tsup, vitest, Changesets — Apache-2.0 / MIT as published by
+  their authors
+
+This project provides engineering primitives. It is not a legal, KYC, KYB, or
+regulatory compliance certification.

package/README.md

@@ -0,0 +1,46 @@
+# `@splitin/verification-adapter-plaid-idv`
+
+Official Plaid **Identity Verification** plugin for the Universal Open-Source
+Verification Adapter SDK.
+
+This adapter is IDV-only. It does not implement Auth, Identity (non-IDV),
+Monitor, payments, or bank account products. Redaction is advertised as
+`notApplicable` because Plaid does not expose an IDV redaction API.
+
+## Install
+
+```bash
+npm install @splitin/verification-adapter-plaid-idv @splitin/verification-adapter-sdk
+```
+
+Optional browser peer: `react-plaid-link`.
+
+## Usage
+
+Construct with an injected `ProviderRuntimeContext`. API hosts are code-owned:
+`sandbox.plaid.com` and `production.plaid.com`. Configuration cannot supply an
+arbitrary production origin.
+
+```ts
+import { createDefaultRuntime } from '@splitin/verification-adapter-sdk';
+import {
+  PlaidIdvVerificationAdapter,
+  createPlaidIdvConfiguration,
+  plaidIdvProviderManifest,
+} from '@splitin/verification-adapter-plaid-idv';
+
+const configuration = createPlaidIdvConfiguration(process.env, 'sandbox');
+const runtime = createDefaultRuntime('sandbox', configuration, {
+  allowedHosts: plaidIdvProviderManifest.apiHosts,
+});
+const adapter = new PlaidIdvVerificationAdapter(runtime);
+```
+
+Creates use `is_idempotent: true`. Retries that allocate a new Plaid resource
+preserve lineage through `linkedResources`. Webhooks are verified with Plaid's
+ES256 JWT (`jose`) over the unmodified request body.
+
+The browser entry (`@splitin/verification-adapter-plaid-idv/browser`) exports a
+`plaid_link` plugin that dynamically imports `react-plaid-link`.
+
+This package is not a compliance certification.

package/dist/browser.cjs

@@ -0,0 +1,19 @@
+'use strict';
+
+// src/browser.ts
+var plaidLinkLauncherKey = "plaid_link";
+var plaidIdvBrowserPlugin = Object.freeze({
+  launcherKey: plaidLinkLauncherKey,
+  async loadReactPlaidLink() {
+    try {
+      return await import('react-plaid-link');
+    } catch {
+      throw new Error("Optional peer dependency react-plaid-link is not installed.");
+    }
+  }
+});
+
+exports.plaidIdvBrowserPlugin = plaidIdvBrowserPlugin;
+exports.plaidLinkLauncherKey = plaidLinkLauncherKey;
+//# sourceMappingURL=browser.cjs.map
+//# sourceMappingURL=browser.cjs.map

package/dist/browser.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";;;AAQO,IAAM,oBAAA,GAAuB;AAE7B,IAAM,qBAAA,GAAwB,OAAO,MAAA,CAAO;AAAA,EACjD,WAAA,EAAa,oBAAA;AAAA,EACb,MAAM,kBAAA,GAAoD;AACxD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,OAAO,kBAAkB,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,IAC/E;AAAA,EACF;AACF,CAAC","file":"browser.cjs","sourcesContent":["/**\n * Browser launcher for Plaid Identity Verification Link.\n *\n * Dynamically imports optional peer `react-plaid-link`. Hosts pass the\n * memory-only `transientSecret` (Link token) from the V1 launch envelope.\n * Browser callbacks are UX signals only.\n */\n\nexport const plaidLinkLauncherKey = 'plaid_link' as const;\n\nexport const plaidIdvBrowserPlugin = Object.freeze({\n  launcherKey: plaidLinkLauncherKey,\n  async loadReactPlaidLink(): Promise<ReactPlaidLinkModule> {\n    try {\n      return await import('react-plaid-link') as ReactPlaidLinkModule;\n    } catch {\n      throw new Error('Optional peer dependency react-plaid-link is not installed.');\n    }\n  },\n});\n\ninterface ReactPlaidLinkModule {\n  usePlaidLink: (config: {\n    token: string | null;\n    onSuccess: () => void;\n    onExit?: () => void;\n    onEvent?: (eventName: string) => void;\n  }) => { open: () => void; ready: boolean; error: Error | null; exit: () => void };\n}\n"]}

package/dist/browser.d.cts

@@ -0,0 +1,27 @@
+/**
+ * Browser launcher for Plaid Identity Verification Link.
+ *
+ * Dynamically imports optional peer `react-plaid-link`. Hosts pass the
+ * memory-only `transientSecret` (Link token) from the V1 launch envelope.
+ * Browser callbacks are UX signals only.
+ */
+declare const plaidLinkLauncherKey: "plaid_link";
+declare const plaidIdvBrowserPlugin: Readonly<{
+    launcherKey: "plaid_link";
+    loadReactPlaidLink(): Promise<ReactPlaidLinkModule>;
+}>;
+interface ReactPlaidLinkModule {
+    usePlaidLink: (config: {
+        token: string | null;
+        onSuccess: () => void;
+        onExit?: () => void;
+        onEvent?: (eventName: string) => void;
+    }) => {
+        open: () => void;
+        ready: boolean;
+        error: Error | null;
+        exit: () => void;
+    };
+}
+
+export { plaidIdvBrowserPlugin, plaidLinkLauncherKey };

package/dist/browser.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Browser launcher for Plaid Identity Verification Link.
+ *
+ * Dynamically imports optional peer `react-plaid-link`. Hosts pass the
+ * memory-only `transientSecret` (Link token) from the V1 launch envelope.
+ * Browser callbacks are UX signals only.
+ */
+declare const plaidLinkLauncherKey: "plaid_link";
+declare const plaidIdvBrowserPlugin: Readonly<{
+    launcherKey: "plaid_link";
+    loadReactPlaidLink(): Promise<ReactPlaidLinkModule>;
+}>;
+interface ReactPlaidLinkModule {
+    usePlaidLink: (config: {
+        token: string | null;
+        onSuccess: () => void;
+        onExit?: () => void;
+        onEvent?: (eventName: string) => void;
+    }) => {
+        open: () => void;
+        ready: boolean;
+        error: Error | null;
+        exit: () => void;
+    };
+}
+
+export { plaidIdvBrowserPlugin, plaidLinkLauncherKey };

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sources":["browser.d.ts"],"names":[],"mappings":"AAAA"}

package/dist/browser.js

@@ -0,0 +1,16 @@
+// src/browser.ts
+var plaidLinkLauncherKey = "plaid_link";
+var plaidIdvBrowserPlugin = Object.freeze({
+  launcherKey: plaidLinkLauncherKey,
+  async loadReactPlaidLink() {
+    try {
+      return await import('react-plaid-link');
+    } catch {
+      throw new Error("Optional peer dependency react-plaid-link is not installed.");
+    }
+  }
+});
+
+export { plaidIdvBrowserPlugin, plaidLinkLauncherKey };
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";AAQO,IAAM,oBAAA,GAAuB;AAE7B,IAAM,qBAAA,GAAwB,OAAO,MAAA,CAAO;AAAA,EACjD,WAAA,EAAa,oBAAA;AAAA,EACb,MAAM,kBAAA,GAAoD;AACxD,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,OAAO,kBAAkB,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,MAAM,6DAA6D,CAAA;AAAA,IAC/E;AAAA,EACF;AACF,CAAC","file":"browser.js","sourcesContent":["/**\n * Browser launcher for Plaid Identity Verification Link.\n *\n * Dynamically imports optional peer `react-plaid-link`. Hosts pass the\n * memory-only `transientSecret` (Link token) from the V1 launch envelope.\n * Browser callbacks are UX signals only.\n */\n\nexport const plaidLinkLauncherKey = 'plaid_link' as const;\n\nexport const plaidIdvBrowserPlugin = Object.freeze({\n  launcherKey: plaidLinkLauncherKey,\n  async loadReactPlaidLink(): Promise<ReactPlaidLinkModule> {\n    try {\n      return await import('react-plaid-link') as ReactPlaidLinkModule;\n    } catch {\n      throw new Error('Optional peer dependency react-plaid-link is not installed.');\n    }\n  },\n});\n\ninterface ReactPlaidLinkModule {\n  usePlaidLink: (config: {\n    token: string | null;\n    onSuccess: () => void;\n    onExit?: () => void;\n    onEvent?: (eventName: string) => void;\n  }) => { open: () => void; ready: boolean; error: Error | null; exit: () => void };\n}\n"]}