@splitin/verification-adapter-stripe-identity 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SplitInTech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,32 @@
+Verification Adapter SDK
+Copyright (c) 2026 SplitInTech
+
+This product is licensed under the MIT License. See LICENSE.
+
+Third-party notices
+===================
+
+This project redistributes no vendor identity SDKs in its core or server
+packages. Optional peer dependencies used by browser plugins:
+
+- `@stripe/stripe-js` — Stripe, Inc. (MIT). Used only by the Stripe Identity
+  browser plugin via dynamic import. Stripe is a trademark of Stripe, Inc.
+- `persona` — Persona Identities, Inc. Used only by the Persona browser plugin
+  via dynamic import.
+- `react-plaid-link` — Plaid Inc. (MIT). Used only by the Plaid Identity
+  Verification browser plugin via dynamic import. Plaid is a trademark of
+  Plaid Inc.
+
+Server adapters speak HTTPS to provider APIs with an injected Fetch
+implementation. They do not bundle Stripe, Persona, or Plaid Node SDKs.
+
+Runtime and tooling (declared in package.json; not vendored):
+
+- `ajv` — MIT
+- `jose` — MIT (Plaid webhook JWT verification)
+- `pg` — MIT (optional PostgreSQL executor)
+- TypeScript, tsup, vitest, Changesets — Apache-2.0 / MIT as published by
+  their authors
+
+This project provides engineering primitives. It is not a legal, KYC, KYB, or
+regulatory compliance certification.

package/README.md

@@ -0,0 +1,49 @@
+# `@splitin/verification-adapter-stripe-identity`
+
+Official Stripe Identity plugin for the Universal Open-Source Verification
+Adapter SDK. This package covers **human document verification only**. Stripe
+Connect, Payments, bank accounts, and payouts are out of scope.
+
+## Install
+
+```bash
+npm install @splitin/verification-adapter-stripe-identity @splitin/verification-adapter-sdk
+```
+
+Optional browser peer: `@stripe/stripe-js`.
+
+## Usage
+
+The adapter is constructed with an injected `ProviderRuntimeContext`. It never
+reads environment variables, databases, or sessions. API calls always go to
+`api.stripe.com` (code-owned). Configuration cannot override the production API
+origin.
+
+```ts
+import { createDefaultRuntime } from '@splitin/verification-adapter-sdk';
+import {
+  StripeIdentityVerificationAdapter,
+  createStripeIdentityConfiguration,
+  stripeIdentityProviderManifest,
+} from '@splitin/verification-adapter-stripe-identity';
+
+const configuration = createStripeIdentityConfiguration(process.env);
+const runtime = createDefaultRuntime('sandbox', configuration, {
+  allowedHosts: stripeIdentityProviderManifest.apiHosts,
+});
+const adapter = new StripeIdentityVerificationAdapter(runtime);
+```
+
+Restricted keys must match the runtime environment (`rk_test_` sandbox,
+`rk_live_` production). The API version is pinned to `2025-08-27.basil`.
+Set `requireMatchingSelfie: true` to require a matching selfie in addition to
+the identity document.
+
+Launch envelopes follow contract V1: `transientSecret` is memory-only and is
+never logged or persisted. Hosted fallback URLs use `verify.stripe.com`.
+
+The browser entry (`@splitin/verification-adapter-stripe-identity/browser`)
+exports a `stripe_identity` launcher plugin that dynamically imports
+`@stripe/stripe-js`. Browser callbacks are UX signals only.
+
+This package is not a compliance certification.

package/dist/browser.cjs

@@ -0,0 +1,43 @@
+'use strict';
+
+// src/browser.ts
+var stripeIdentityLauncherKey = "stripe_identity";
+var stripeIdentityBrowserPlugin = Object.freeze({
+  launcherKey: stripeIdentityLauncherKey,
+  async launch(input) {
+    if (!input.transientSecret) {
+      throw new Error("Stripe Identity embedded launch requires a memory-only transient secret.");
+    }
+    const stripeJs = await loadStripeJs();
+    const stripe = await stripeJs.loadStripe(input.publishableKey);
+    if (!stripe || typeof stripe.verifyIdentity !== "function") {
+      throw new Error("Stripe.js did not return an Identity-capable instance.");
+    }
+    let cancelled = false;
+    void stripe.verifyIdentity(input.transientSecret).then((result) => {
+      if (cancelled) return;
+      if (result?.error) input.onUxSignal?.("error");
+      else input.onUxSignal?.("complete");
+    }).catch(() => {
+      if (!cancelled) input.onUxSignal?.("error");
+    });
+    return {
+      unmount() {
+        cancelled = true;
+        input.onUxSignal?.("cancel");
+      }
+    };
+  }
+});
+async function loadStripeJs() {
+  try {
+    return await import('@stripe/stripe-js');
+  } catch {
+    throw new Error("Optional peer dependency @stripe/stripe-js is not installed.");
+  }
+}
+
+exports.stripeIdentityBrowserPlugin = stripeIdentityBrowserPlugin;
+exports.stripeIdentityLauncherKey = stripeIdentityLauncherKey;
+//# sourceMappingURL=browser.cjs.map
+//# sourceMappingURL=browser.cjs.map

package/dist/browser.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";;;AAQO,IAAM,yBAAA,GAA4B;AAQlC,IAAM,2BAAA,GAA8B,OAAO,MAAA,CAAO;AAAA,EACvD,WAAA,EAAa,yBAAA;AAAA,EACb,MAAM,OAAO,KAAA,EAAuE;AAClF,IAAA,IAAI,CAAC,MAAM,eAAA,EAAiB;AAC1B,MAAA,MAAM,IAAI,MAAM,0EAA0E,CAAA;AAAA,IAC5F;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,IAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,UAAA,CAAW,MAAM,cAAc,CAAA;AAC7D,IAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,CAAO,mBAAmB,UAAA,EAAY;AAC1D,MAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,IAC1E;AACA,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,KAAK,OAAO,cAAA,CAAe,KAAA,CAAM,eAAe,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,KAAW;AACjE,MAAA,IAAI,SAAA,EAAW;AACf,MAAA,IAAI,MAAA,EAAQ,KAAA,EAAO,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,WACxC,KAAA,CAAM,aAAa,UAAU,CAAA;AAAA,IACpC,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM;AACb,MAAA,IAAI,CAAC,SAAA,EAAW,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,IAC5C,CAAC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,OAAA,GAAU;AACR,QAAA,SAAA,GAAY,IAAA;AACZ,QAAA,KAAA,CAAM,aAAa,QAAQ,CAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AACF,CAAC;AAED,eAAe,YAAA,GAAwC;AACrD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,mBAAmB,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,EAChF;AACF","file":"browser.cjs","sourcesContent":["/**\n * Browser launcher for Stripe Identity embedded verification.\n *\n * Dynamically imports optional peer `@stripe/stripe-js`. Hosts must pass a\n * publishable key; restricted keys never leave the server adapter.\n * Browser callbacks are UX signals only — canonical status comes from the engine.\n */\n\nexport const stripeIdentityLauncherKey = 'stripe_identity' as const;\n\nexport interface StripeIdentityBrowserLaunchInput {\n  publishableKey: string;\n  transientSecret: string;\n  onUxSignal?: (signal: 'complete' | 'cancel' | 'error') => void;\n}\n\nexport const stripeIdentityBrowserPlugin = Object.freeze({\n  launcherKey: stripeIdentityLauncherKey,\n  async launch(input: StripeIdentityBrowserLaunchInput): Promise<{ unmount(): void }> {\n    if (!input.transientSecret) {\n      throw new Error('Stripe Identity embedded launch requires a memory-only transient secret.');\n    }\n    const stripeJs = await loadStripeJs();\n    const stripe = await stripeJs.loadStripe(input.publishableKey);\n    if (!stripe || typeof stripe.verifyIdentity !== 'function') {\n      throw new Error('Stripe.js did not return an Identity-capable instance.');\n    }\n    let cancelled = false;\n    void stripe.verifyIdentity(input.transientSecret).then((result) => {\n      if (cancelled) return;\n      if (result?.error) input.onUxSignal?.('error');\n      else input.onUxSignal?.('complete');\n    }).catch(() => {\n      if (!cancelled) input.onUxSignal?.('error');\n    });\n    return {\n      unmount() {\n        cancelled = true;\n        input.onUxSignal?.('cancel');\n      },\n    };\n  },\n});\n\nasync function loadStripeJs(): Promise<StripeJsModule> {\n  try {\n    return await import('@stripe/stripe-js') as StripeJsModule;\n  } catch {\n    throw new Error('Optional peer dependency @stripe/stripe-js is not installed.');\n  }\n}\n\ninterface StripeJsModule {\n  loadStripe(key: string): Promise<{\n    verifyIdentity(clientSecret: string): Promise<{ error?: { type?: string } | null }>;\n  } | null>;\n}\n"]}

package/dist/browser.d.cts

@@ -0,0 +1,21 @@
+/**
+ * Browser launcher for Stripe Identity embedded verification.
+ *
+ * Dynamically imports optional peer `@stripe/stripe-js`. Hosts must pass a
+ * publishable key; restricted keys never leave the server adapter.
+ * Browser callbacks are UX signals only — canonical status comes from the engine.
+ */
+declare const stripeIdentityLauncherKey: "stripe_identity";
+interface StripeIdentityBrowserLaunchInput {
+    publishableKey: string;
+    transientSecret: string;
+    onUxSignal?: (signal: 'complete' | 'cancel' | 'error') => void;
+}
+declare const stripeIdentityBrowserPlugin: Readonly<{
+    launcherKey: "stripe_identity";
+    launch(input: StripeIdentityBrowserLaunchInput): Promise<{
+        unmount(): void;
+    }>;
+}>;
+
+export { type StripeIdentityBrowserLaunchInput, stripeIdentityBrowserPlugin, stripeIdentityLauncherKey };

package/dist/browser.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Browser launcher for Stripe Identity embedded verification.
+ *
+ * Dynamically imports optional peer `@stripe/stripe-js`. Hosts must pass a
+ * publishable key; restricted keys never leave the server adapter.
+ * Browser callbacks are UX signals only — canonical status comes from the engine.
+ */
+declare const stripeIdentityLauncherKey: "stripe_identity";
+interface StripeIdentityBrowserLaunchInput {
+    publishableKey: string;
+    transientSecret: string;
+    onUxSignal?: (signal: 'complete' | 'cancel' | 'error') => void;
+}
+declare const stripeIdentityBrowserPlugin: Readonly<{
+    launcherKey: "stripe_identity";
+    launch(input: StripeIdentityBrowserLaunchInput): Promise<{
+        unmount(): void;
+    }>;
+}>;
+
+export { type StripeIdentityBrowserLaunchInput, stripeIdentityBrowserPlugin, stripeIdentityLauncherKey };

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sources":["browser.d.ts"],"names":[],"mappings":"AAAA"}

package/dist/browser.js

@@ -0,0 +1,40 @@
+// src/browser.ts
+var stripeIdentityLauncherKey = "stripe_identity";
+var stripeIdentityBrowserPlugin = Object.freeze({
+  launcherKey: stripeIdentityLauncherKey,
+  async launch(input) {
+    if (!input.transientSecret) {
+      throw new Error("Stripe Identity embedded launch requires a memory-only transient secret.");
+    }
+    const stripeJs = await loadStripeJs();
+    const stripe = await stripeJs.loadStripe(input.publishableKey);
+    if (!stripe || typeof stripe.verifyIdentity !== "function") {
+      throw new Error("Stripe.js did not return an Identity-capable instance.");
+    }
+    let cancelled = false;
+    void stripe.verifyIdentity(input.transientSecret).then((result) => {
+      if (cancelled) return;
+      if (result?.error) input.onUxSignal?.("error");
+      else input.onUxSignal?.("complete");
+    }).catch(() => {
+      if (!cancelled) input.onUxSignal?.("error");
+    });
+    return {
+      unmount() {
+        cancelled = true;
+        input.onUxSignal?.("cancel");
+      }
+    };
+  }
+});
+async function loadStripeJs() {
+  try {
+    return await import('@stripe/stripe-js');
+  } catch {
+    throw new Error("Optional peer dependency @stripe/stripe-js is not installed.");
+  }
+}
+
+export { stripeIdentityBrowserPlugin, stripeIdentityLauncherKey };
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/browser.ts"],"names":[],"mappings":";AAQO,IAAM,yBAAA,GAA4B;AAQlC,IAAM,2BAAA,GAA8B,OAAO,MAAA,CAAO;AAAA,EACvD,WAAA,EAAa,yBAAA;AAAA,EACb,MAAM,OAAO,KAAA,EAAuE;AAClF,IAAA,IAAI,CAAC,MAAM,eAAA,EAAiB;AAC1B,MAAA,MAAM,IAAI,MAAM,0EAA0E,CAAA;AAAA,IAC5F;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,IAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,UAAA,CAAW,MAAM,cAAc,CAAA;AAC7D,IAAA,IAAI,CAAC,MAAA,IAAU,OAAO,MAAA,CAAO,mBAAmB,UAAA,EAAY;AAC1D,MAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,IAC1E;AACA,IAAA,IAAI,SAAA,GAAY,KAAA;AAChB,IAAA,KAAK,OAAO,cAAA,CAAe,KAAA,CAAM,eAAe,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,KAAW;AACjE,MAAA,IAAI,SAAA,EAAW;AACf,MAAA,IAAI,MAAA,EAAQ,KAAA,EAAO,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,WACxC,KAAA,CAAM,aAAa,UAAU,CAAA;AAAA,IACpC,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM;AACb,MAAA,IAAI,CAAC,SAAA,EAAW,KAAA,CAAM,UAAA,GAAa,OAAO,CAAA;AAAA,IAC5C,CAAC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,OAAA,GAAU;AACR,QAAA,SAAA,GAAY,IAAA;AACZ,QAAA,KAAA,CAAM,aAAa,QAAQ,CAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AACF,CAAC;AAED,eAAe,YAAA,GAAwC;AACrD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,OAAO,mBAAmB,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,8DAA8D,CAAA;AAAA,EAChF;AACF","file":"browser.js","sourcesContent":["/**\n * Browser launcher for Stripe Identity embedded verification.\n *\n * Dynamically imports optional peer `@stripe/stripe-js`. Hosts must pass a\n * publishable key; restricted keys never leave the server adapter.\n * Browser callbacks are UX signals only — canonical status comes from the engine.\n */\n\nexport const stripeIdentityLauncherKey = 'stripe_identity' as const;\n\nexport interface StripeIdentityBrowserLaunchInput {\n  publishableKey: string;\n  transientSecret: string;\n  onUxSignal?: (signal: 'complete' | 'cancel' | 'error') => void;\n}\n\nexport const stripeIdentityBrowserPlugin = Object.freeze({\n  launcherKey: stripeIdentityLauncherKey,\n  async launch(input: StripeIdentityBrowserLaunchInput): Promise<{ unmount(): void }> {\n    if (!input.transientSecret) {\n      throw new Error('Stripe Identity embedded launch requires a memory-only transient secret.');\n    }\n    const stripeJs = await loadStripeJs();\n    const stripe = await stripeJs.loadStripe(input.publishableKey);\n    if (!stripe || typeof stripe.verifyIdentity !== 'function') {\n      throw new Error('Stripe.js did not return an Identity-capable instance.');\n    }\n    let cancelled = false;\n    void stripe.verifyIdentity(input.transientSecret).then((result) => {\n      if (cancelled) return;\n      if (result?.error) input.onUxSignal?.('error');\n      else input.onUxSignal?.('complete');\n    }).catch(() => {\n      if (!cancelled) input.onUxSignal?.('error');\n    });\n    return {\n      unmount() {\n        cancelled = true;\n        input.onUxSignal?.('cancel');\n      },\n    };\n  },\n});\n\nasync function loadStripeJs(): Promise<StripeJsModule> {\n  try {\n    return await import('@stripe/stripe-js') as StripeJsModule;\n  } catch {\n    throw new Error('Optional peer dependency @stripe/stripe-js is not installed.');\n  }\n}\n\ninterface StripeJsModule {\n  loadStripe(key: string): Promise<{\n    verifyIdentity(clientSecret: string): Promise<{ error?: { type?: string } | null }>;\n  } | null>;\n}\n"]}