@splitin/verification-web 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SplitInTech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,32 @@
+Verification Adapter SDK
+Copyright (c) 2026 SplitInTech
+
+This product is licensed under the MIT License. See LICENSE.
+
+Third-party notices
+===================
+
+This project redistributes no vendor identity SDKs in its core or server
+packages. Optional peer dependencies used by browser plugins:
+
+- `@stripe/stripe-js` — Stripe, Inc. (MIT). Used only by the Stripe Identity
+  browser plugin via dynamic import. Stripe is a trademark of Stripe, Inc.
+- `persona` — Persona Identities, Inc. Used only by the Persona browser plugin
+  via dynamic import.
+- `react-plaid-link` — Plaid Inc. (MIT). Used only by the Plaid Identity
+  Verification browser plugin via dynamic import. Plaid is a trademark of
+  Plaid Inc.
+
+Server adapters speak HTTPS to provider APIs with an injected Fetch
+implementation. They do not bundle Stripe, Persona, or Plaid Node SDKs.
+
+Runtime and tooling (declared in package.json; not vendored):
+
+- `ajv` — MIT
+- `jose` — MIT (Plaid webhook JWT verification)
+- `pg` — MIT (optional PostgreSQL executor)
+- TypeScript, tsup, vitest, Changesets — Apache-2.0 / MIT as published by
+  their authors
+
+This project provides engineering primitives. It is not a legal, KYC, KYB, or
+regulatory compliance certification.

package/README.md

@@ -0,0 +1,18 @@
+# `@splitin/verification-web`
+
+Framework-neutral browser controller for verification V1 launch and status
+envelopes. Browser completion only requests an authoritative status refresh.
+
+```ts
+import { createVerificationWebController } from '@splitin/verification-web';
+
+const controller = createVerificationWebController({
+  plugins: {
+    test_embedded: () => import('./my-plugin.js'),
+  },
+  refreshStatus: (attemptId) => client.getSession(attemptId),
+});
+```
+
+Transient launch secrets stay in module memory. They are never written to
+`localStorage` or `sessionStorage`.

package/dist/index.cjs

@@ -0,0 +1,289 @@
+'use strict';
+
+// src/environment.ts
+function isBrowserOnline() {
+  if (typeof navigator === "undefined") return true;
+  return navigator.onLine !== false;
+}
+function isInstalledPwa() {
+  if (typeof window === "undefined") return false;
+  const standalone = window.matchMedia?.("(display-mode: standalone)")?.matches;
+  const iosStandalone = "standalone" in navigator && Boolean(navigator.standalone);
+  return Boolean(standalone || iosStandalone);
+}
+function prefersReducedMotion() {
+  if (typeof window === "undefined") return false;
+  return Boolean(window.matchMedia?.("(prefers-reduced-motion: reduce)")?.matches);
+}
+function clientSurface(width) {
+  if (isInstalledPwa()) return "installed-pwa";
+  if (typeof window === "undefined") return "desktop";
+  const viewport = width ?? window.innerWidth;
+  if (viewport <= 640 || Boolean(window.matchMedia?.("(max-width: 640px)")?.matches)) return "mobile-web";
+  return "desktop";
+}
+function subscribeOnlineStatus(listener) {
+  if (typeof window === "undefined") return () => void 0;
+  const onOnline = () => listener(true);
+  const onOffline = () => listener(false);
+  window.addEventListener("online", onOnline);
+  window.addEventListener("offline", onOffline);
+  return () => {
+    window.removeEventListener("online", onOnline);
+    window.removeEventListener("offline", onOffline);
+  };
+}
+async function createQrDataUrl(value, renderer) {
+  if (!renderer) return null;
+  try {
+    return await renderer(value);
+  } catch {
+    return null;
+  }
+}
+
+// src/plugins.ts
+var loaded = /* @__PURE__ */ new Map();
+async function loadBrowserPlugin(launcherKey, registry) {
+  const cached = loaded.get(launcherKey);
+  if (cached) return cached;
+  const entry = registry[launcherKey];
+  if (!entry) return null;
+  const plugin = typeof entry === "function" ? unwrap(await entry()) : entry;
+  loaded.set(launcherKey, plugin);
+  return plugin;
+}
+function clearPluginCache() {
+  loaded.clear();
+}
+function unwrap(value) {
+  return "present" in value ? value : value.default;
+}
+
+// src/secrets.ts
+var secrets = /* @__PURE__ */ new Map();
+function rememberTransientSecret(attemptId, secret, expiresAt) {
+  secrets.set(attemptId, {
+    secret,
+    expiresAt: expiresAt ? Date.parse(expiresAt) : Date.now() + 5 * 6e4
+  });
+}
+function peekTransientSecret(attemptId, now = Date.now()) {
+  const row = secrets.get(attemptId);
+  if (!row) return void 0;
+  if (row.expiresAt <= now) {
+    secrets.delete(attemptId);
+    return void 0;
+  }
+  return row.secret;
+}
+function takeTransientSecret(attemptId, now = Date.now()) {
+  const secret = peekTransientSecret(attemptId, now);
+  secrets.delete(attemptId);
+  return secret;
+}
+function forgetTransientSecret(attemptId) {
+  secrets.delete(attemptId);
+}
+function forgetAllTransientSecrets() {
+  secrets.clear();
+}
+function rememberLaunchSecrets(attemptId, launch) {
+  if (!launch?.transientSecret) return;
+  rememberTransientSecret(attemptId, launch.transientSecret, launch.transientSecretExpiresAt);
+}
+
+// src/types.ts
+var STATUS_CONTRACT_VERSION = "1.0.0";
+var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
+  "verified",
+  "declined",
+  "failed",
+  "expired",
+  "canceled",
+  "redacted"
+]);
+
+// src/controller.ts
+function createVerificationWebController(options) {
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  async function refresh(attemptId) {
+    const envelope = await options.refreshStatus(attemptId);
+    rememberLaunchSecrets(attemptId, envelope.launch);
+    return envelope;
+  }
+  async function present(input) {
+    let envelope = input.envelope;
+    rememberLaunchSecrets(envelope.attemptId, envelope.launch);
+    const abort = new AbortController();
+    let handle = null;
+    let continuationUrl = continuationLink(envelope);
+    const unsubscribe = subscribeOnlineStatus((online) => {
+      if (!online) input.onMessage?.("You are offline. Your place is saved. Reconnect to resume verification.");
+      else void refreshAndEmit();
+    });
+    const emit = (next, message) => {
+      envelope = next;
+      input.onEnvelopeChange?.(next);
+      if (message) input.onMessage?.(message);
+    };
+    const refreshAndEmit = async () => {
+      const next = await refresh(envelope.attemptId);
+      const verified = next.status === "verified";
+      emit(next, verified ? "Verified. Returning to your saved action." : "Your status is not approved yet. The protected action stays saved.");
+      return next;
+    };
+    const presentPlugin = async () => {
+      handle?.destroy();
+      handle = null;
+      const launch = envelope.launch;
+      if (!launch || envelope.presentation === "none" || TERMINAL_STATUSES.has(envelope.status)) return;
+      if (envelope.status === "processing" || envelope.status === "manual_review_required") return;
+      if (!isBrowserOnline()) return;
+      if (launch.transientSecretExpiresAt && Date.parse(launch.transientSecretExpiresAt) <= now().getTime()) {
+        forgetTransientSecret(envelope.attemptId);
+        input.onMessage?.("The secure launch credential expired. Checking status.");
+        await refreshAndEmit();
+        return;
+      }
+      if (envelope.presentation === "hosted" && launch.hostedUrl) {
+        handle = presentHosted(input.container, launch.hostedUrl, () => {
+          void refreshAndEmit();
+        });
+        return;
+      }
+      if (envelope.presentation === "qr" && continuationUrl) {
+        handle = await presentQr(input.container, continuationUrl, options.renderQr);
+        return;
+      }
+      const plugin = await loadBrowserPlugin(launch.launcherKey, options.plugins);
+      if (!plugin) {
+        if (launch.hostedUrl) {
+          handle = presentHosted(input.container, launch.hostedUrl, () => {
+            void refreshAndEmit();
+          });
+        }
+        return;
+      }
+      handle = await plugin.present({
+        container: input.container,
+        launch: {
+          ...launch,
+          transientSecret: peekTransientSecret(envelope.attemptId) ?? launch.transientSecret
+        },
+        signal: abort.signal,
+        onComplete: () => {
+          input.onMessage?.("Verification was submitted. Checking the server-side result now.");
+          void refreshAndEmit();
+        },
+        onPause: () => {
+          void pause();
+        },
+        onError: (message) => input.onMessage?.(message),
+        onOpened: () => void 0
+      });
+    };
+    async function pause() {
+      if (!options.pause) return;
+      const result = await options.pause(envelope.attemptId);
+      const next = "attemptId" in result ? result : { ...envelope, status: result.status, canResume: true };
+      emit(next);
+    }
+    async function resume() {
+      if (!options.resume) return;
+      const next = await options.resume(envelope.attemptId);
+      emit(next);
+      continuationUrl = continuationLink(next);
+      await presentPlugin();
+    }
+    await presentPlugin();
+    return {
+      continuationUrl,
+      destroy() {
+        abort.abort();
+        unsubscribe();
+        handle?.destroy();
+        forgetTransientSecret(envelope.attemptId);
+      },
+      open() {
+        handle?.open?.();
+      },
+      refresh: refreshAndEmit,
+      pause,
+      resume,
+      async retry() {
+        if (!options.retry || !envelope.canRetry || !isBrowserOnline()) return;
+        const next = await options.retry(envelope.attemptId);
+        emit(next);
+        continuationUrl = continuationLink(next);
+        await presentPlugin();
+      },
+      async cancel() {
+        if (!options.cancel) return;
+        const result = await options.cancel(envelope.attemptId);
+        const next = "attemptId" in result ? result : { ...envelope, status: result.status, canResume: false, canRetry: true };
+        emit(next);
+      }
+    };
+  }
+  function continuationLink(envelope) {
+    if (!envelope.continuation) return null;
+    if (options.createContinuationUrl) return options.createContinuationUrl(envelope.continuation, envelope);
+    return envelope.continuation.token;
+  }
+  return {
+    refresh,
+    present,
+    isOnline: isBrowserOnline,
+    isInstalledPwa,
+    peekSecret: peekTransientSecret
+  };
+}
+function presentHosted(container, url, onOpened) {
+  const anchor = document.createElement("a");
+  anchor.href = url;
+  anchor.target = "_blank";
+  anchor.rel = "noopener noreferrer";
+  anchor.textContent = "Open hosted verification";
+  anchor.addEventListener("click", onOpened);
+  container.replaceChildren(anchor);
+  return {
+    open() {
+      anchor.click();
+    },
+    destroy() {
+      container.replaceChildren();
+    }
+  };
+}
+async function presentQr(container, url, renderer) {
+  const image = document.createElement("img");
+  image.alt = "QR code to continue verification on another device";
+  const dataUrl = await createQrDataUrl(url, renderer);
+  if (dataUrl) image.src = dataUrl;
+  else image.dataset.continuation = url;
+  container.replaceChildren(image);
+  return { destroy() {
+    container.replaceChildren();
+  } };
+}
+
+exports.STATUS_CONTRACT_VERSION = STATUS_CONTRACT_VERSION;
+exports.TERMINAL_STATUSES = TERMINAL_STATUSES;
+exports.clearPluginCache = clearPluginCache;
+exports.clientSurface = clientSurface;
+exports.createQrDataUrl = createQrDataUrl;
+exports.createVerificationWebController = createVerificationWebController;
+exports.forgetAllTransientSecrets = forgetAllTransientSecrets;
+exports.forgetTransientSecret = forgetTransientSecret;
+exports.isBrowserOnline = isBrowserOnline;
+exports.isInstalledPwa = isInstalledPwa;
+exports.loadBrowserPlugin = loadBrowserPlugin;
+exports.peekTransientSecret = peekTransientSecret;
+exports.prefersReducedMotion = prefersReducedMotion;
+exports.rememberLaunchSecrets = rememberLaunchSecrets;
+exports.rememberTransientSecret = rememberTransientSecret;
+exports.subscribeOnlineStatus = subscribeOnlineStatus;
+exports.takeTransientSecret = takeTransientSecret;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/environment.ts","../src/plugins.ts","../src/secrets.ts","../src/types.ts","../src/controller.ts"],"names":[],"mappings":";;;AAAO,SAAS,eAAA,GAA2B;AACzC,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,EAAa,OAAO,IAAA;AAC7C,EAAA,OAAO,UAAU,MAAA,KAAW,KAAA;AAC9B;AAEO,SAAS,cAAA,GAA0B;AACxC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,GAAa,4BAA4B,CAAA,EAAG,OAAA;AACtE,EAAA,MAAM,aAAA,GAAgB,YAAA,IAAgB,SAAA,IAAa,OAAA,CAAS,UAAmD,UAAU,CAAA;AACzH,EAAA,OAAO,OAAA,CAAQ,cAAc,aAAa,CAAA;AAC5C;AAEO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,UAAA,GAAa,kCAAkC,GAAG,OAAO,CAAA;AACjF;AAIO,SAAS,cAAc,KAAA,EAA2C;AACvE,EAAA,IAAI,cAAA,IAAkB,OAAO,eAAA;AAC7B,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,SAAA;AAC1C,EAAA,MAAM,QAAA,GAAW,SAAS,MAAA,CAAO,UAAA;AACjC,EAAA,IAAI,QAAA,IAAY,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,oBAAoB,CAAA,EAAG,OAAO,CAAA,EAAG,OAAO,YAAA;AAC3F,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,sBAAsB,QAAA,EAAiD;AACrF,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAM,MAAA;AAChD,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,IAAI,CAAA;AACpC,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,KAAK,CAAA;AACtC,EAAA,MAAA,CAAO,gBAAA,CAAiB,UAAU,QAAQ,CAAA;AAC1C,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,EAAA,OAAO,MAAM;AACX,IAAA,MAAA,CAAO,mBAAA,CAAoB,UAAU,QAAQ,CAAA;AAC7C,IAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAAA,EACjD,CAAA;AACF;AAEA,eAAsB,eAAA,CACpB,OACA,QAAA,EACwB;AACxB,EAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AACtB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,SAAS,KAAK,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AC/CA,IAAM,MAAA,uBAAa,GAAA,EAA2B;AAE9C,eAAsB,iBAAA,CACpB,aACA,QAAA,EAC+B;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AACrC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,KAAA,GAAQ,SAAS,WAAW,CAAA;AAClC,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,KAAU,UAAA,GAAa,OAAO,MAAM,KAAA,EAAO,CAAA,GAAI,KAAA;AACrE,EAAA,MAAA,CAAO,GAAA,CAAI,aAAa,MAAM,CAAA;AAC9B,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,gBAAA,GAAyB;AACvC,EAAA,MAAA,CAAO,KAAA,EAAM;AACf;AAEA,SAAS,OAAO,KAAA,EAAkE;AAChF,EAAA,OAAO,SAAA,IAAa,KAAA,GAAQ,KAAA,GAAQ,KAAA,CAAM,OAAA;AAC5C;;;ACvBA,IAAM,OAAA,uBAAc,GAAA,EAAmD;AAOhE,SAAS,uBAAA,CAAwB,SAAA,EAAmB,MAAA,EAAgB,SAAA,EAAiC;AAE1G,EAAA,OAAA,CAAQ,IAAI,SAAA,EAAW;AAAA,IACrB,MAAA;AAAA,IACA,SAAA,EAAW,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI,GAAI,CAAA,GAAI;AAAA,GACjE,CAAA;AACH;AAEO,SAAS,mBAAA,CAAoB,SAAA,EAAmB,GAAA,GAAM,IAAA,CAAK,KAAI,EAAuB;AAC3F,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACjC,EAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,EAAA,IAAI,GAAA,CAAI,aAAa,GAAA,EAAK;AACxB,IAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAA,CAAI,MAAA;AACb;AAEO,SAAS,mBAAA,CAAoB,SAAA,EAAmB,GAAA,GAAM,IAAA,CAAK,KAAI,EAAuB;AAC3F,EAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,SAAA,EAAW,GAAG,CAAA;AACjD,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,sBAAsB,SAAA,EAAyB;AAC7D,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,SAAS,yBAAA,GAAkC;AAChD,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;AAEO,SAAS,qBAAA,CAAsB,WAAmB,MAAA,EAAsF;AAC7I,EAAA,IAAI,CAAC,QAAQ,eAAA,EAAiB;AAC9B,EAAA,uBAAA,CAAwB,SAAA,EAAW,MAAA,CAAO,eAAA,EAAiB,MAAA,CAAO,wBAAwB,CAAA;AAC5F;;;ACnCO,IAAM,uBAAA,GAA0B;AA8EhC,IAAM,iBAAA,uBAAwB,GAAA,CAAiC;AAAA,EACpE,UAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAC;;;AChFM,SAAS,gCAAgC,OAAA,EAA2C;AACzF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA;AAE3C,EAAA,eAAe,QAAQ,SAAA,EAAwD;AAC7E,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAA;AACtD,IAAA,qBAAA,CAAsB,SAAA,EAAW,SAAS,MAAM,CAAA;AAChD,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,eAAe,QAAQ,KAAA,EAAuD;AAC5E,IAAA,IAAI,WAAW,KAAA,CAAM,QAAA;AACrB,IAAA,qBAAA,CAAsB,QAAA,CAAS,SAAA,EAAW,QAAA,CAAS,MAAM,CAAA;AACzD,IAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,EAAgB;AAClC,IAAA,IAAI,MAAA,GAAqC,IAAA;AACzC,IAAA,IAAI,eAAA,GAAkB,iBAAiB,QAAQ,CAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,qBAAA,CAAsB,CAAC,MAAA,KAAW;AACpD,MAAA,IAAI,CAAC,MAAA,EAAQ,KAAA,CAAM,SAAA,GAAY,yEAAyE,CAAA;AAAA,gBAC9F,cAAA,EAAe;AAAA,IAC3B,CAAC,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAkC,OAAA,KAAqB;AACnE,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,KAAA,CAAM,mBAAmB,IAAI,CAAA;AAC7B,MAAA,IAAI,OAAA,EAAS,KAAA,CAAM,SAAA,GAAY,OAAO,CAAA;AAAA,IACxC,CAAA;AAEA,IAAA,MAAM,iBAAiB,YAAiD;AACtE,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,QAAA,CAAS,SAAS,CAAA;AAC7C,MAAA,MAAM,QAAA,GAAW,KAAK,MAAA,KAAW,UAAA;AACjC,MAAA,IAAA,CAAK,IAAA,EAAM,QAAA,GACP,2CAAA,GACA,oEAAoE,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAEA,IAAA,MAAM,gBAAgB,YAA2B;AAC/C,MAAA,MAAA,EAAQ,OAAA,EAAQ;AAChB,MAAA,MAAA,GAAS,IAAA;AACT,MAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AACxB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,YAAA,KAAiB,UAAU,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3F,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,YAAA,IAAgB,QAAA,CAAS,WAAW,wBAAA,EAA0B;AACtF,MAAA,IAAI,CAAC,iBAAgB,EAAG;AACxB,MAAA,IAAI,MAAA,CAAO,wBAAA,IAA4B,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,wBAAwB,CAAA,IAAK,GAAA,EAAI,CAAE,OAAA,EAAQ,EAAG;AACrG,QAAA,qBAAA,CAAsB,SAAS,SAAS,CAAA;AACxC,QAAA,KAAA,CAAM,YAAY,wDAAwD,CAAA;AAC1E,QAAA,MAAM,cAAA,EAAe;AACrB,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,YAAA,KAAiB,QAAA,IAAY,MAAA,CAAO,SAAA,EAAW;AAC1D,QAAA,MAAA,GAAS,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,MAAA,CAAO,WAAW,MAAM;AAAE,UAAA,KAAK,cAAA,EAAe;AAAA,QAAG,CAAC,CAAA;AAC1F,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,YAAA,KAAiB,IAAA,IAAQ,eAAA,EAAiB;AACrD,QAAA,MAAA,GAAS,MAAM,SAAA,CAAU,KAAA,CAAM,SAAA,EAAW,eAAA,EAAiB,QAAQ,QAAQ,CAAA;AAC3E,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAS,MAAM,iBAAA,CAAkB,MAAA,CAAO,WAAA,EAAa,QAAQ,OAAO,CAAA;AAC1E,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,IAAI,OAAO,SAAA,EAAW;AACpB,UAAA,MAAA,GAAS,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,MAAA,CAAO,WAAW,MAAM;AAAE,YAAA,KAAK,cAAA,EAAe;AAAA,UAAG,CAAC,CAAA;AAAA,QAC5F;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAA,GAAS,MAAM,OAAO,OAAA,CAAQ;AAAA,QAC5B,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,MAAA,EAAQ;AAAA,UACN,GAAG,MAAA;AAAA,UACH,eAAA,EAAiB,mBAAA,CAAoB,QAAA,CAAS,SAAS,KAAK,MAAA,CAAO;AAAA,SACrE;AAAA,QACA,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,YAAY,MAAM;AAChB,UAAA,KAAA,CAAM,YAAY,kEAAkE,CAAA;AACpF,UAAA,KAAK,cAAA,EAAe;AAAA,QACtB,CAAA;AAAA,QACA,SAAS,MAAM;AAAE,UAAA,KAAK,KAAA,EAAM;AAAA,QAAG,CAAA;AAAA,QAC/B,OAAA,EAAS,CAAC,OAAA,KAAY,KAAA,CAAM,YAAY,OAAO,CAAA;AAAA,QAC/C,UAAU,MAAM;AAAA,OACjB,CAAA;AAAA,IACH,CAAA;AAEA,IAAA,eAAe,KAAA,GAAuB;AACpC,MAAA,IAAI,CAAC,QAAQ,KAAA,EAAO;AACpB,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,SAAS,CAAA;AACrD,MAAA,MAAM,IAAA,GAAO,WAAA,IAAe,MAAA,GAAS,MAAA,GAAS,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,IAAA,EAAK;AACpG,MAAA,IAAA,CAAK,IAAkC,CAAA;AAAA,IACzC;AAEA,IAAA,eAAe,MAAA,GAAwB;AACrC,MAAA,IAAI,CAAC,QAAQ,MAAA,EAAQ;AACrB,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,SAAS,SAAS,CAAA;AACpD,MAAA,IAAA,CAAK,IAAI,CAAA;AACT,MAAA,eAAA,GAAkB,iBAAiB,IAAI,CAAA;AACvC,MAAA,MAAM,aAAA,EAAc;AAAA,IACtB;AAEA,IAAA,MAAM,aAAA,EAAc;AAEpB,IAAA,OAAO;AAAA,MACL,eAAA;AAAA,MACA,OAAA,GAAU;AACR,QAAA,KAAA,CAAM,KAAA,EAAM;AACZ,QAAA,WAAA,EAAY;AACZ,QAAA,MAAA,EAAQ,OAAA,EAAQ;AAChB,QAAA,qBAAA,CAAsB,SAAS,SAAS,CAAA;AAAA,MAC1C,CAAA;AAAA,MACA,IAAA,GAAO;AACL,QAAA,MAAA,EAAQ,IAAA,IAAO;AAAA,MACjB,CAAA;AAAA,MACA,OAAA,EAAS,cAAA;AAAA,MACT,KAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAM,KAAA,GAAQ;AACZ,QAAA,IAAI,CAAC,QAAQ,KAAA,IAAS,CAAC,SAAS,QAAA,IAAY,CAAC,iBAAgB,EAAG;AAChE,QAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,SAAS,CAAA;AACnD,QAAA,IAAA,CAAK,IAAI,CAAA;AACT,QAAA,eAAA,GAAkB,iBAAiB,IAAI,CAAA;AACvC,QAAA,MAAM,aAAA,EAAc;AAAA,MACtB,CAAA;AAAA,MACA,MAAM,MAAA,GAAS;AACb,QAAA,IAAI,CAAC,QAAQ,MAAA,EAAQ;AACrB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,CAAO,SAAS,SAAS,CAAA;AACtD,QAAA,MAAM,IAAA,GAAO,WAAA,IAAe,MAAA,GAAS,MAAA,GAAS,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAO,UAAU,IAAA,EAAK;AACrH,QAAA,IAAA,CAAK,IAAkC,CAAA;AAAA,MACzC;AAAA,KACF;AAAA,EACF;AAEA,EAAA,SAAS,iBAAiB,QAAA,EAAqD;AAC7E,IAAA,IAAI,CAAC,QAAA,CAAS,YAAA,EAAc,OAAO,IAAA;AACnC,IAAA,IAAI,QAAQ,qBAAA,EAAuB,OAAO,QAAQ,qBAAA,CAAsB,QAAA,CAAS,cAAc,QAAQ,CAAA;AACvG,IAAA,OAAO,SAAS,YAAA,CAAa,KAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA,EAAU,eAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,EAAY;AAAA,GACd;AACF;AAEA,SAAS,aAAA,CAAc,SAAA,EAAwB,GAAA,EAAa,QAAA,EAA2C;AACrG,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,GAAG,CAAA;AACzC,EAAA,MAAA,CAAO,IAAA,GAAO,GAAA;AACd,EAAA,MAAA,CAAO,MAAA,GAAS,QAAA;AAChB,EAAA,MAAA,CAAO,GAAA,GAAM,qBAAA;AACb,EAAA,MAAA,CAAO,WAAA,GAAc,0BAAA;AACrB,EAAA,MAAA,CAAO,gBAAA,CAAiB,SAAS,QAAQ,CAAA;AACzC,EAAA,SAAA,CAAU,gBAAgB,MAAM,CAAA;AAChC,EAAA,OAAO;AAAA,IACL,IAAA,GAAO;AAAE,MAAA,MAAA,CAAO,KAAA,EAAM;AAAA,IAAG,CAAA;AAAA,IACzB,OAAA,GAAU;AAAE,MAAA,SAAA,CAAU,eAAA,EAAgB;AAAA,IAAG;AAAA,GAC3C;AACF;AAEA,eAAe,SAAA,CACb,SAAA,EACA,GAAA,EACA,QAAA,EAC8B;AAC9B,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AAC1C,EAAA,KAAA,CAAM,GAAA,GAAM,oDAAA;AACZ,EAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB,GAAA,EAAK,QAAQ,CAAA;AACnD,EAAA,IAAI,OAAA,QAAe,GAAA,GAAM,OAAA;AAAA,OACpB,KAAA,CAAM,QAAQ,YAAA,GAAe,GAAA;AAClC,EAAA,SAAA,CAAU,gBAAgB,KAAK,CAAA;AAC/B,EAAA,OAAO,EAAE,OAAA,GAAU;AAAE,IAAA,SAAA,CAAU,eAAA,EAAgB;AAAA,EAAG,CAAA,EAAE;AACtD","file":"index.cjs","sourcesContent":["export function isBrowserOnline(): boolean {\n  if (typeof navigator === 'undefined') return true;\n  return navigator.onLine !== false;\n}\n\nexport function isInstalledPwa(): boolean {\n  if (typeof window === 'undefined') return false;\n  const standalone = window.matchMedia?.('(display-mode: standalone)')?.matches;\n  const iosStandalone = 'standalone' in navigator && Boolean((navigator as Navigator & { standalone?: boolean }).standalone);\n  return Boolean(standalone || iosStandalone);\n}\n\nexport function prefersReducedMotion(): boolean {\n  if (typeof window === 'undefined') return false;\n  return Boolean(window.matchMedia?.('(prefers-reduced-motion: reduce)')?.matches);\n}\n\nexport type VerificationClientSurface = 'desktop' | 'mobile-web' | 'installed-pwa';\n\nexport function clientSurface(width?: number): VerificationClientSurface {\n  if (isInstalledPwa()) return 'installed-pwa';\n  if (typeof window === 'undefined') return 'desktop';\n  const viewport = width ?? window.innerWidth;\n  if (viewport <= 640 || Boolean(window.matchMedia?.('(max-width: 640px)')?.matches)) return 'mobile-web';\n  return 'desktop';\n}\n\nexport function subscribeOnlineStatus(listener: (online: boolean) => void): () => void {\n  if (typeof window === 'undefined') return () => undefined;\n  const onOnline = () => listener(true);\n  const onOffline = () => listener(false);\n  window.addEventListener('online', onOnline);\n  window.addEventListener('offline', onOffline);\n  return () => {\n    window.removeEventListener('online', onOnline);\n    window.removeEventListener('offline', onOffline);\n  };\n}\n\nexport async function createQrDataUrl(\n  value: string,\n  renderer?: (text: string) => Promise<string>,\n): Promise<string | null> {\n  if (!renderer) return null;\n  try {\n    return await renderer(value);\n  } catch {\n    return null;\n  }\n}\n","import type { BrowserPlugin, BrowserPluginLoader } from './types.ts';\n\nconst loaded = new Map<string, BrowserPlugin>();\n\nexport async function loadBrowserPlugin(\n  launcherKey: string,\n  registry: Record<string, BrowserPlugin | BrowserPluginLoader>,\n): Promise<BrowserPlugin | null> {\n  const cached = loaded.get(launcherKey);\n  if (cached) return cached;\n  const entry = registry[launcherKey];\n  if (!entry) return null;\n  const plugin = typeof entry === 'function' ? unwrap(await entry()) : entry;\n  loaded.set(launcherKey, plugin);\n  return plugin;\n}\n\nexport function clearPluginCache(): void {\n  loaded.clear();\n}\n\nfunction unwrap(value: BrowserPlugin | { default: BrowserPlugin }): BrowserPlugin {\n  return 'present' in value ? value : value.default;\n}\n","const secrets = new Map<string, { secret: string; expiresAt: number }>();\n\nfunction storageBlocked(): void {\n  // Transient secrets must never enter Web Storage. This function exists so\n  // tests can assert the controller never writes launch credentials.\n}\n\nexport function rememberTransientSecret(attemptId: string, secret: string, expiresAt?: string | null): void {\n  storageBlocked();\n  secrets.set(attemptId, {\n    secret,\n    expiresAt: expiresAt ? Date.parse(expiresAt) : Date.now() + 5 * 60_000,\n  });\n}\n\nexport function peekTransientSecret(attemptId: string, now = Date.now()): string | undefined {\n  const row = secrets.get(attemptId);\n  if (!row) return undefined;\n  if (row.expiresAt <= now) {\n    secrets.delete(attemptId);\n    return undefined;\n  }\n  return row.secret;\n}\n\nexport function takeTransientSecret(attemptId: string, now = Date.now()): string | undefined {\n  const secret = peekTransientSecret(attemptId, now);\n  secrets.delete(attemptId);\n  return secret;\n}\n\nexport function forgetTransientSecret(attemptId: string): void {\n  secrets.delete(attemptId);\n}\n\nexport function forgetAllTransientSecrets(): void {\n  secrets.clear();\n}\n\nexport function rememberLaunchSecrets(attemptId: string, launch: { transientSecret?: string; transientSecretExpiresAt?: string } | null): void {\n  if (!launch?.transientSecret) return;\n  rememberTransientSecret(attemptId, launch.transientSecret, launch.transientSecretExpiresAt);\n}\n","import type {\n  ProviderLaunchEnvelope,\n  VerificationCanonicalStatus,\n  VerificationLaunchPresentation,\n  VerificationPackageCode,\n} from '@splitin/verification-adapter-sdk';\n\nexport const STATUS_CONTRACT_VERSION = '1.0.0' as const;\n\nexport interface StatusContinuation {\n  key: string;\n  token: string;\n  expiresAt: string;\n}\n\nexport interface VerificationStatusEnvelope {\n  contractVersion?: typeof STATUS_CONTRACT_VERSION | string;\n  attemptId: string;\n  packageCode: VerificationPackageCode;\n  status: VerificationCanonicalStatus;\n  presentation: VerificationLaunchPresentation;\n  launch: ProviderLaunchEnvelope | null;\n  launcherKey: string | null;\n  providerDisclosure: string | null;\n  safeErrorCode: string | null;\n  retryAfter: string | null;\n  supportPath: string | null;\n  expiresAt: string | null;\n  canResume: boolean;\n  canRetry: boolean;\n  continuation: StatusContinuation | null;\n}\n\nexport interface BrowserPluginHandle {\n  open?(): void;\n  destroy(): void;\n}\n\nexport interface BrowserPluginPresentInput {\n  container: HTMLElement;\n  launch: ProviderLaunchEnvelope;\n  onComplete: () => void;\n  onPause: () => void;\n  onError: (message: string) => void;\n  onOpened: () => void;\n  signal?: AbortSignal;\n}\n\nexport interface BrowserPlugin {\n  launcherKey: string;\n  present(input: BrowserPluginPresentInput): Promise<BrowserPluginHandle>;\n}\n\nexport type BrowserPluginLoader = () => Promise<BrowserPlugin | { default: BrowserPlugin }>;\n\nexport interface VerificationWebControllerOptions {\n  plugins: Record<string, BrowserPlugin | BrowserPluginLoader>;\n  refreshStatus: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  pause?: (attemptId: string) => Promise<VerificationStatusEnvelope | { status: VerificationCanonicalStatus }>;\n  resume?: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  retry?: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  cancel?: (attemptId: string) => Promise<VerificationStatusEnvelope | { status: VerificationCanonicalStatus }>;\n  createContinuationUrl?: (continuation: StatusContinuation, envelope: VerificationStatusEnvelope) => string;\n  renderQr?: (value: string) => Promise<string>;\n  now?: () => Date;\n}\n\nexport interface PresentSessionInput {\n  envelope: VerificationStatusEnvelope;\n  container: HTMLElement;\n  onEnvelopeChange?: (envelope: VerificationStatusEnvelope) => void;\n  onMessage?: (message: string) => void;\n}\n\nexport interface PresentedSession {\n  destroy(): void;\n  open(): void;\n  refresh(): Promise<VerificationStatusEnvelope>;\n  pause(): Promise<void>;\n  resume(): Promise<void>;\n  retry(): Promise<void>;\n  cancel(): Promise<void>;\n  continuationUrl: string | null;\n}\n\nexport const TERMINAL_STATUSES = new Set<VerificationCanonicalStatus>([\n  'verified',\n  'declined',\n  'failed',\n  'expired',\n  'canceled',\n  'redacted',\n]);\n","import { createQrDataUrl, isBrowserOnline, isInstalledPwa, subscribeOnlineStatus } from './environment.ts';\nimport { loadBrowserPlugin } from './plugins.ts';\nimport { forgetTransientSecret, peekTransientSecret, rememberLaunchSecrets } from './secrets.ts';\nimport {\n  TERMINAL_STATUSES,\n  type BrowserPluginHandle,\n  type PresentedSession,\n  type PresentSessionInput,\n  type VerificationStatusEnvelope,\n  type VerificationWebControllerOptions,\n} from './types.ts';\n\nexport function createVerificationWebController(options: VerificationWebControllerOptions) {\n  const now = options.now ?? (() => new Date());\n\n  async function refresh(attemptId: string): Promise<VerificationStatusEnvelope> {\n    const envelope = await options.refreshStatus(attemptId);\n    rememberLaunchSecrets(attemptId, envelope.launch);\n    return envelope;\n  }\n\n  async function present(input: PresentSessionInput): Promise<PresentedSession> {\n    let envelope = input.envelope;\n    rememberLaunchSecrets(envelope.attemptId, envelope.launch);\n    const abort = new AbortController();\n    let handle: BrowserPluginHandle | null = null;\n    let continuationUrl = continuationLink(envelope);\n    const unsubscribe = subscribeOnlineStatus((online) => {\n      if (!online) input.onMessage?.('You are offline. Your place is saved. Reconnect to resume verification.');\n      else void refreshAndEmit();\n    });\n\n    const emit = (next: VerificationStatusEnvelope, message?: string) => {\n      envelope = next;\n      input.onEnvelopeChange?.(next);\n      if (message) input.onMessage?.(message);\n    };\n\n    const refreshAndEmit = async (): Promise<VerificationStatusEnvelope> => {\n      const next = await refresh(envelope.attemptId);\n      const verified = next.status === 'verified';\n      emit(next, verified\n        ? 'Verified. Returning to your saved action.'\n        : 'Your status is not approved yet. The protected action stays saved.');\n      return next;\n    };\n\n    const presentPlugin = async (): Promise<void> => {\n      handle?.destroy();\n      handle = null;\n      const launch = envelope.launch;\n      if (!launch || envelope.presentation === 'none' || TERMINAL_STATUSES.has(envelope.status)) return;\n      if (envelope.status === 'processing' || envelope.status === 'manual_review_required') return;\n      if (!isBrowserOnline()) return;\n      if (launch.transientSecretExpiresAt && Date.parse(launch.transientSecretExpiresAt) <= now().getTime()) {\n        forgetTransientSecret(envelope.attemptId);\n        input.onMessage?.('The secure launch credential expired. Checking status.');\n        await refreshAndEmit();\n        return;\n      }\n      if (envelope.presentation === 'hosted' && launch.hostedUrl) {\n        handle = presentHosted(input.container, launch.hostedUrl, () => { void refreshAndEmit(); });\n        return;\n      }\n      if (envelope.presentation === 'qr' && continuationUrl) {\n        handle = await presentQr(input.container, continuationUrl, options.renderQr);\n        return;\n      }\n      const plugin = await loadBrowserPlugin(launch.launcherKey, options.plugins);\n      if (!plugin) {\n        if (launch.hostedUrl) {\n          handle = presentHosted(input.container, launch.hostedUrl, () => { void refreshAndEmit(); });\n        }\n        return;\n      }\n      handle = await plugin.present({\n        container: input.container,\n        launch: {\n          ...launch,\n          transientSecret: peekTransientSecret(envelope.attemptId) ?? launch.transientSecret,\n        },\n        signal: abort.signal,\n        onComplete: () => {\n          input.onMessage?.('Verification was submitted. Checking the server-side result now.');\n          void refreshAndEmit();\n        },\n        onPause: () => { void pause(); },\n        onError: (message) => input.onMessage?.(message),\n        onOpened: () => undefined,\n      });\n    };\n\n    async function pause(): Promise<void> {\n      if (!options.pause) return;\n      const result = await options.pause(envelope.attemptId);\n      const next = 'attemptId' in result ? result : { ...envelope, status: result.status, canResume: true };\n      emit(next as VerificationStatusEnvelope);\n    }\n\n    async function resume(): Promise<void> {\n      if (!options.resume) return;\n      const next = await options.resume(envelope.attemptId);\n      emit(next);\n      continuationUrl = continuationLink(next);\n      await presentPlugin();\n    }\n\n    await presentPlugin();\n\n    return {\n      continuationUrl,\n      destroy() {\n        abort.abort();\n        unsubscribe();\n        handle?.destroy();\n        forgetTransientSecret(envelope.attemptId);\n      },\n      open() {\n        handle?.open?.();\n      },\n      refresh: refreshAndEmit,\n      pause,\n      resume,\n      async retry() {\n        if (!options.retry || !envelope.canRetry || !isBrowserOnline()) return;\n        const next = await options.retry(envelope.attemptId);\n        emit(next);\n        continuationUrl = continuationLink(next);\n        await presentPlugin();\n      },\n      async cancel() {\n        if (!options.cancel) return;\n        const result = await options.cancel(envelope.attemptId);\n        const next = 'attemptId' in result ? result : { ...envelope, status: result.status, canResume: false, canRetry: true };\n        emit(next as VerificationStatusEnvelope);\n      },\n    };\n  }\n\n  function continuationLink(envelope: VerificationStatusEnvelope): string | null {\n    if (!envelope.continuation) return null;\n    if (options.createContinuationUrl) return options.createContinuationUrl(envelope.continuation, envelope);\n    return envelope.continuation.token;\n  }\n\n  return {\n    refresh,\n    present,\n    isOnline: isBrowserOnline,\n    isInstalledPwa,\n    peekSecret: peekTransientSecret,\n  };\n}\n\nfunction presentHosted(container: HTMLElement, url: string, onOpened: () => void): BrowserPluginHandle {\n  const anchor = document.createElement('a');\n  anchor.href = url;\n  anchor.target = '_blank';\n  anchor.rel = 'noopener noreferrer';\n  anchor.textContent = 'Open hosted verification';\n  anchor.addEventListener('click', onOpened);\n  container.replaceChildren(anchor);\n  return {\n    open() { anchor.click(); },\n    destroy() { container.replaceChildren(); },\n  };\n}\n\nasync function presentQr(\n  container: HTMLElement,\n  url: string,\n  renderer?: (value: string) => Promise<string>,\n): Promise<BrowserPluginHandle> {\n  const image = document.createElement('img');\n  image.alt = 'QR code to continue verification on another device';\n  const dataUrl = await createQrDataUrl(url, renderer);\n  if (dataUrl) image.src = dataUrl;\n  else image.dataset.continuation = url;\n  container.replaceChildren(image);\n  return { destroy() { container.replaceChildren(); } };\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,108 @@
+import { ProviderLaunchEnvelope, VerificationPackageCode, VerificationCanonicalStatus, VerificationLaunchPresentation } from '@splitin/verification-adapter-sdk';
+
+declare function isBrowserOnline(): boolean;
+declare function isInstalledPwa(): boolean;
+declare function prefersReducedMotion(): boolean;
+type VerificationClientSurface = 'desktop' | 'mobile-web' | 'installed-pwa';
+declare function clientSurface(width?: number): VerificationClientSurface;
+declare function subscribeOnlineStatus(listener: (online: boolean) => void): () => void;
+declare function createQrDataUrl(value: string, renderer?: (text: string) => Promise<string>): Promise<string | null>;
+
+declare function rememberTransientSecret(attemptId: string, secret: string, expiresAt?: string | null): void;
+declare function peekTransientSecret(attemptId: string, now?: number): string | undefined;
+declare function takeTransientSecret(attemptId: string, now?: number): string | undefined;
+declare function forgetTransientSecret(attemptId: string): void;
+declare function forgetAllTransientSecrets(): void;
+declare function rememberLaunchSecrets(attemptId: string, launch: {
+    transientSecret?: string;
+    transientSecretExpiresAt?: string;
+} | null): void;
+
+declare const STATUS_CONTRACT_VERSION: "1.0.0";
+interface StatusContinuation {
+    key: string;
+    token: string;
+    expiresAt: string;
+}
+interface VerificationStatusEnvelope {
+    contractVersion?: typeof STATUS_CONTRACT_VERSION | string;
+    attemptId: string;
+    packageCode: VerificationPackageCode;
+    status: VerificationCanonicalStatus;
+    presentation: VerificationLaunchPresentation;
+    launch: ProviderLaunchEnvelope | null;
+    launcherKey: string | null;
+    providerDisclosure: string | null;
+    safeErrorCode: string | null;
+    retryAfter: string | null;
+    supportPath: string | null;
+    expiresAt: string | null;
+    canResume: boolean;
+    canRetry: boolean;
+    continuation: StatusContinuation | null;
+}
+interface BrowserPluginHandle {
+    open?(): void;
+    destroy(): void;
+}
+interface BrowserPluginPresentInput {
+    container: HTMLElement;
+    launch: ProviderLaunchEnvelope;
+    onComplete: () => void;
+    onPause: () => void;
+    onError: (message: string) => void;
+    onOpened: () => void;
+    signal?: AbortSignal;
+}
+interface BrowserPlugin {
+    launcherKey: string;
+    present(input: BrowserPluginPresentInput): Promise<BrowserPluginHandle>;
+}
+type BrowserPluginLoader = () => Promise<BrowserPlugin | {
+    default: BrowserPlugin;
+}>;
+interface VerificationWebControllerOptions {
+    plugins: Record<string, BrowserPlugin | BrowserPluginLoader>;
+    refreshStatus: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    pause?: (attemptId: string) => Promise<VerificationStatusEnvelope | {
+        status: VerificationCanonicalStatus;
+    }>;
+    resume?: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    retry?: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    cancel?: (attemptId: string) => Promise<VerificationStatusEnvelope | {
+        status: VerificationCanonicalStatus;
+    }>;
+    createContinuationUrl?: (continuation: StatusContinuation, envelope: VerificationStatusEnvelope) => string;
+    renderQr?: (value: string) => Promise<string>;
+    now?: () => Date;
+}
+interface PresentSessionInput {
+    envelope: VerificationStatusEnvelope;
+    container: HTMLElement;
+    onEnvelopeChange?: (envelope: VerificationStatusEnvelope) => void;
+    onMessage?: (message: string) => void;
+}
+interface PresentedSession {
+    destroy(): void;
+    open(): void;
+    refresh(): Promise<VerificationStatusEnvelope>;
+    pause(): Promise<void>;
+    resume(): Promise<void>;
+    retry(): Promise<void>;
+    cancel(): Promise<void>;
+    continuationUrl: string | null;
+}
+declare const TERMINAL_STATUSES: Set<"created" | "pending_user_input" | "paused" | "processing" | "manual_review_required" | "verified" | "declined" | "failed" | "expired" | "canceled" | "provider_unavailable" | "redacted">;
+
+declare function createVerificationWebController(options: VerificationWebControllerOptions): {
+    refresh: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    present: (input: PresentSessionInput) => Promise<PresentedSession>;
+    isOnline: typeof isBrowserOnline;
+    isInstalledPwa: typeof isInstalledPwa;
+    peekSecret: typeof peekTransientSecret;
+};
+
+declare function loadBrowserPlugin(launcherKey: string, registry: Record<string, BrowserPlugin | BrowserPluginLoader>): Promise<BrowserPlugin | null>;
+declare function clearPluginCache(): void;
+
+export { type BrowserPlugin, type BrowserPluginHandle, type BrowserPluginLoader, type BrowserPluginPresentInput, type PresentSessionInput, type PresentedSession, STATUS_CONTRACT_VERSION, type StatusContinuation, TERMINAL_STATUSES, type VerificationClientSurface, type VerificationStatusEnvelope, type VerificationWebControllerOptions, clearPluginCache, clientSurface, createQrDataUrl, createVerificationWebController, forgetAllTransientSecrets, forgetTransientSecret, isBrowserOnline, isInstalledPwa, loadBrowserPlugin, peekTransientSecret, prefersReducedMotion, rememberLaunchSecrets, rememberTransientSecret, subscribeOnlineStatus, takeTransientSecret };

package/dist/index.d.ts

@@ -0,0 +1,108 @@
+import { ProviderLaunchEnvelope, VerificationPackageCode, VerificationCanonicalStatus, VerificationLaunchPresentation } from '@splitin/verification-adapter-sdk';
+
+declare function isBrowserOnline(): boolean;
+declare function isInstalledPwa(): boolean;
+declare function prefersReducedMotion(): boolean;
+type VerificationClientSurface = 'desktop' | 'mobile-web' | 'installed-pwa';
+declare function clientSurface(width?: number): VerificationClientSurface;
+declare function subscribeOnlineStatus(listener: (online: boolean) => void): () => void;
+declare function createQrDataUrl(value: string, renderer?: (text: string) => Promise<string>): Promise<string | null>;
+
+declare function rememberTransientSecret(attemptId: string, secret: string, expiresAt?: string | null): void;
+declare function peekTransientSecret(attemptId: string, now?: number): string | undefined;
+declare function takeTransientSecret(attemptId: string, now?: number): string | undefined;
+declare function forgetTransientSecret(attemptId: string): void;
+declare function forgetAllTransientSecrets(): void;
+declare function rememberLaunchSecrets(attemptId: string, launch: {
+    transientSecret?: string;
+    transientSecretExpiresAt?: string;
+} | null): void;
+
+declare const STATUS_CONTRACT_VERSION: "1.0.0";
+interface StatusContinuation {
+    key: string;
+    token: string;
+    expiresAt: string;
+}
+interface VerificationStatusEnvelope {
+    contractVersion?: typeof STATUS_CONTRACT_VERSION | string;
+    attemptId: string;
+    packageCode: VerificationPackageCode;
+    status: VerificationCanonicalStatus;
+    presentation: VerificationLaunchPresentation;
+    launch: ProviderLaunchEnvelope | null;
+    launcherKey: string | null;
+    providerDisclosure: string | null;
+    safeErrorCode: string | null;
+    retryAfter: string | null;
+    supportPath: string | null;
+    expiresAt: string | null;
+    canResume: boolean;
+    canRetry: boolean;
+    continuation: StatusContinuation | null;
+}
+interface BrowserPluginHandle {
+    open?(): void;
+    destroy(): void;
+}
+interface BrowserPluginPresentInput {
+    container: HTMLElement;
+    launch: ProviderLaunchEnvelope;
+    onComplete: () => void;
+    onPause: () => void;
+    onError: (message: string) => void;
+    onOpened: () => void;
+    signal?: AbortSignal;
+}
+interface BrowserPlugin {
+    launcherKey: string;
+    present(input: BrowserPluginPresentInput): Promise<BrowserPluginHandle>;
+}
+type BrowserPluginLoader = () => Promise<BrowserPlugin | {
+    default: BrowserPlugin;
+}>;
+interface VerificationWebControllerOptions {
+    plugins: Record<string, BrowserPlugin | BrowserPluginLoader>;
+    refreshStatus: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    pause?: (attemptId: string) => Promise<VerificationStatusEnvelope | {
+        status: VerificationCanonicalStatus;
+    }>;
+    resume?: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    retry?: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    cancel?: (attemptId: string) => Promise<VerificationStatusEnvelope | {
+        status: VerificationCanonicalStatus;
+    }>;
+    createContinuationUrl?: (continuation: StatusContinuation, envelope: VerificationStatusEnvelope) => string;
+    renderQr?: (value: string) => Promise<string>;
+    now?: () => Date;
+}
+interface PresentSessionInput {
+    envelope: VerificationStatusEnvelope;
+    container: HTMLElement;
+    onEnvelopeChange?: (envelope: VerificationStatusEnvelope) => void;
+    onMessage?: (message: string) => void;
+}
+interface PresentedSession {
+    destroy(): void;
+    open(): void;
+    refresh(): Promise<VerificationStatusEnvelope>;
+    pause(): Promise<void>;
+    resume(): Promise<void>;
+    retry(): Promise<void>;
+    cancel(): Promise<void>;
+    continuationUrl: string | null;
+}
+declare const TERMINAL_STATUSES: Set<"created" | "pending_user_input" | "paused" | "processing" | "manual_review_required" | "verified" | "declined" | "failed" | "expired" | "canceled" | "provider_unavailable" | "redacted">;
+
+declare function createVerificationWebController(options: VerificationWebControllerOptions): {
+    refresh: (attemptId: string) => Promise<VerificationStatusEnvelope>;
+    present: (input: PresentSessionInput) => Promise<PresentedSession>;
+    isOnline: typeof isBrowserOnline;
+    isInstalledPwa: typeof isInstalledPwa;
+    peekSecret: typeof peekTransientSecret;
+};
+
+declare function loadBrowserPlugin(launcherKey: string, registry: Record<string, BrowserPlugin | BrowserPluginLoader>): Promise<BrowserPlugin | null>;
+declare function clearPluginCache(): void;
+
+export { type BrowserPlugin, type BrowserPluginHandle, type BrowserPluginLoader, type BrowserPluginPresentInput, type PresentSessionInput, type PresentedSession, STATUS_CONTRACT_VERSION, type StatusContinuation, TERMINAL_STATUSES, type VerificationClientSurface, type VerificationStatusEnvelope, type VerificationWebControllerOptions, clearPluginCache, clientSurface, createQrDataUrl, createVerificationWebController, forgetAllTransientSecrets, forgetTransientSecret, isBrowserOnline, isInstalledPwa, loadBrowserPlugin, peekTransientSecret, prefersReducedMotion, rememberLaunchSecrets, rememberTransientSecret, subscribeOnlineStatus, takeTransientSecret };

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sources":["index.d.ts"],"names":[],"mappings":"AAAA"}

package/dist/index.js

@@ -0,0 +1,271 @@
+// src/environment.ts
+function isBrowserOnline() {
+  if (typeof navigator === "undefined") return true;
+  return navigator.onLine !== false;
+}
+function isInstalledPwa() {
+  if (typeof window === "undefined") return false;
+  const standalone = window.matchMedia?.("(display-mode: standalone)")?.matches;
+  const iosStandalone = "standalone" in navigator && Boolean(navigator.standalone);
+  return Boolean(standalone || iosStandalone);
+}
+function prefersReducedMotion() {
+  if (typeof window === "undefined") return false;
+  return Boolean(window.matchMedia?.("(prefers-reduced-motion: reduce)")?.matches);
+}
+function clientSurface(width) {
+  if (isInstalledPwa()) return "installed-pwa";
+  if (typeof window === "undefined") return "desktop";
+  const viewport = width ?? window.innerWidth;
+  if (viewport <= 640 || Boolean(window.matchMedia?.("(max-width: 640px)")?.matches)) return "mobile-web";
+  return "desktop";
+}
+function subscribeOnlineStatus(listener) {
+  if (typeof window === "undefined") return () => void 0;
+  const onOnline = () => listener(true);
+  const onOffline = () => listener(false);
+  window.addEventListener("online", onOnline);
+  window.addEventListener("offline", onOffline);
+  return () => {
+    window.removeEventListener("online", onOnline);
+    window.removeEventListener("offline", onOffline);
+  };
+}
+async function createQrDataUrl(value, renderer) {
+  if (!renderer) return null;
+  try {
+    return await renderer(value);
+  } catch {
+    return null;
+  }
+}
+
+// src/plugins.ts
+var loaded = /* @__PURE__ */ new Map();
+async function loadBrowserPlugin(launcherKey, registry) {
+  const cached = loaded.get(launcherKey);
+  if (cached) return cached;
+  const entry = registry[launcherKey];
+  if (!entry) return null;
+  const plugin = typeof entry === "function" ? unwrap(await entry()) : entry;
+  loaded.set(launcherKey, plugin);
+  return plugin;
+}
+function clearPluginCache() {
+  loaded.clear();
+}
+function unwrap(value) {
+  return "present" in value ? value : value.default;
+}
+
+// src/secrets.ts
+var secrets = /* @__PURE__ */ new Map();
+function rememberTransientSecret(attemptId, secret, expiresAt) {
+  secrets.set(attemptId, {
+    secret,
+    expiresAt: expiresAt ? Date.parse(expiresAt) : Date.now() + 5 * 6e4
+  });
+}
+function peekTransientSecret(attemptId, now = Date.now()) {
+  const row = secrets.get(attemptId);
+  if (!row) return void 0;
+  if (row.expiresAt <= now) {
+    secrets.delete(attemptId);
+    return void 0;
+  }
+  return row.secret;
+}
+function takeTransientSecret(attemptId, now = Date.now()) {
+  const secret = peekTransientSecret(attemptId, now);
+  secrets.delete(attemptId);
+  return secret;
+}
+function forgetTransientSecret(attemptId) {
+  secrets.delete(attemptId);
+}
+function forgetAllTransientSecrets() {
+  secrets.clear();
+}
+function rememberLaunchSecrets(attemptId, launch) {
+  if (!launch?.transientSecret) return;
+  rememberTransientSecret(attemptId, launch.transientSecret, launch.transientSecretExpiresAt);
+}
+
+// src/types.ts
+var STATUS_CONTRACT_VERSION = "1.0.0";
+var TERMINAL_STATUSES = /* @__PURE__ */ new Set([
+  "verified",
+  "declined",
+  "failed",
+  "expired",
+  "canceled",
+  "redacted"
+]);
+
+// src/controller.ts
+function createVerificationWebController(options) {
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  async function refresh(attemptId) {
+    const envelope = await options.refreshStatus(attemptId);
+    rememberLaunchSecrets(attemptId, envelope.launch);
+    return envelope;
+  }
+  async function present(input) {
+    let envelope = input.envelope;
+    rememberLaunchSecrets(envelope.attemptId, envelope.launch);
+    const abort = new AbortController();
+    let handle = null;
+    let continuationUrl = continuationLink(envelope);
+    const unsubscribe = subscribeOnlineStatus((online) => {
+      if (!online) input.onMessage?.("You are offline. Your place is saved. Reconnect to resume verification.");
+      else void refreshAndEmit();
+    });
+    const emit = (next, message) => {
+      envelope = next;
+      input.onEnvelopeChange?.(next);
+      if (message) input.onMessage?.(message);
+    };
+    const refreshAndEmit = async () => {
+      const next = await refresh(envelope.attemptId);
+      const verified = next.status === "verified";
+      emit(next, verified ? "Verified. Returning to your saved action." : "Your status is not approved yet. The protected action stays saved.");
+      return next;
+    };
+    const presentPlugin = async () => {
+      handle?.destroy();
+      handle = null;
+      const launch = envelope.launch;
+      if (!launch || envelope.presentation === "none" || TERMINAL_STATUSES.has(envelope.status)) return;
+      if (envelope.status === "processing" || envelope.status === "manual_review_required") return;
+      if (!isBrowserOnline()) return;
+      if (launch.transientSecretExpiresAt && Date.parse(launch.transientSecretExpiresAt) <= now().getTime()) {
+        forgetTransientSecret(envelope.attemptId);
+        input.onMessage?.("The secure launch credential expired. Checking status.");
+        await refreshAndEmit();
+        return;
+      }
+      if (envelope.presentation === "hosted" && launch.hostedUrl) {
+        handle = presentHosted(input.container, launch.hostedUrl, () => {
+          void refreshAndEmit();
+        });
+        return;
+      }
+      if (envelope.presentation === "qr" && continuationUrl) {
+        handle = await presentQr(input.container, continuationUrl, options.renderQr);
+        return;
+      }
+      const plugin = await loadBrowserPlugin(launch.launcherKey, options.plugins);
+      if (!plugin) {
+        if (launch.hostedUrl) {
+          handle = presentHosted(input.container, launch.hostedUrl, () => {
+            void refreshAndEmit();
+          });
+        }
+        return;
+      }
+      handle = await plugin.present({
+        container: input.container,
+        launch: {
+          ...launch,
+          transientSecret: peekTransientSecret(envelope.attemptId) ?? launch.transientSecret
+        },
+        signal: abort.signal,
+        onComplete: () => {
+          input.onMessage?.("Verification was submitted. Checking the server-side result now.");
+          void refreshAndEmit();
+        },
+        onPause: () => {
+          void pause();
+        },
+        onError: (message) => input.onMessage?.(message),
+        onOpened: () => void 0
+      });
+    };
+    async function pause() {
+      if (!options.pause) return;
+      const result = await options.pause(envelope.attemptId);
+      const next = "attemptId" in result ? result : { ...envelope, status: result.status, canResume: true };
+      emit(next);
+    }
+    async function resume() {
+      if (!options.resume) return;
+      const next = await options.resume(envelope.attemptId);
+      emit(next);
+      continuationUrl = continuationLink(next);
+      await presentPlugin();
+    }
+    await presentPlugin();
+    return {
+      continuationUrl,
+      destroy() {
+        abort.abort();
+        unsubscribe();
+        handle?.destroy();
+        forgetTransientSecret(envelope.attemptId);
+      },
+      open() {
+        handle?.open?.();
+      },
+      refresh: refreshAndEmit,
+      pause,
+      resume,
+      async retry() {
+        if (!options.retry || !envelope.canRetry || !isBrowserOnline()) return;
+        const next = await options.retry(envelope.attemptId);
+        emit(next);
+        continuationUrl = continuationLink(next);
+        await presentPlugin();
+      },
+      async cancel() {
+        if (!options.cancel) return;
+        const result = await options.cancel(envelope.attemptId);
+        const next = "attemptId" in result ? result : { ...envelope, status: result.status, canResume: false, canRetry: true };
+        emit(next);
+      }
+    };
+  }
+  function continuationLink(envelope) {
+    if (!envelope.continuation) return null;
+    if (options.createContinuationUrl) return options.createContinuationUrl(envelope.continuation, envelope);
+    return envelope.continuation.token;
+  }
+  return {
+    refresh,
+    present,
+    isOnline: isBrowserOnline,
+    isInstalledPwa,
+    peekSecret: peekTransientSecret
+  };
+}
+function presentHosted(container, url, onOpened) {
+  const anchor = document.createElement("a");
+  anchor.href = url;
+  anchor.target = "_blank";
+  anchor.rel = "noopener noreferrer";
+  anchor.textContent = "Open hosted verification";
+  anchor.addEventListener("click", onOpened);
+  container.replaceChildren(anchor);
+  return {
+    open() {
+      anchor.click();
+    },
+    destroy() {
+      container.replaceChildren();
+    }
+  };
+}
+async function presentQr(container, url, renderer) {
+  const image = document.createElement("img");
+  image.alt = "QR code to continue verification on another device";
+  const dataUrl = await createQrDataUrl(url, renderer);
+  if (dataUrl) image.src = dataUrl;
+  else image.dataset.continuation = url;
+  container.replaceChildren(image);
+  return { destroy() {
+    container.replaceChildren();
+  } };
+}
+
+export { STATUS_CONTRACT_VERSION, TERMINAL_STATUSES, clearPluginCache, clientSurface, createQrDataUrl, createVerificationWebController, forgetAllTransientSecrets, forgetTransientSecret, isBrowserOnline, isInstalledPwa, loadBrowserPlugin, peekTransientSecret, prefersReducedMotion, rememberLaunchSecrets, rememberTransientSecret, subscribeOnlineStatus, takeTransientSecret };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/environment.ts","../src/plugins.ts","../src/secrets.ts","../src/types.ts","../src/controller.ts"],"names":[],"mappings":";AAAO,SAAS,eAAA,GAA2B;AACzC,EAAA,IAAI,OAAO,SAAA,KAAc,WAAA,EAAa,OAAO,IAAA;AAC7C,EAAA,OAAO,UAAU,MAAA,KAAW,KAAA;AAC9B;AAEO,SAAS,cAAA,GAA0B;AACxC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,UAAA,GAAa,4BAA4B,CAAA,EAAG,OAAA;AACtE,EAAA,MAAM,aAAA,GAAgB,YAAA,IAAgB,SAAA,IAAa,OAAA,CAAS,UAAmD,UAAU,CAAA;AACzH,EAAA,OAAO,OAAA,CAAQ,cAAc,aAAa,CAAA;AAC5C;AAEO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,KAAA;AAC1C,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,UAAA,GAAa,kCAAkC,GAAG,OAAO,CAAA;AACjF;AAIO,SAAS,cAAc,KAAA,EAA2C;AACvE,EAAA,IAAI,cAAA,IAAkB,OAAO,eAAA;AAC7B,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,SAAA;AAC1C,EAAA,MAAM,QAAA,GAAW,SAAS,MAAA,CAAO,UAAA;AACjC,EAAA,IAAI,QAAA,IAAY,OAAO,OAAA,CAAQ,MAAA,CAAO,aAAa,oBAAoB,CAAA,EAAG,OAAO,CAAA,EAAG,OAAO,YAAA;AAC3F,EAAA,OAAO,SAAA;AACT;AAEO,SAAS,sBAAsB,QAAA,EAAiD;AACrF,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,MAAM,MAAA;AAChD,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,IAAI,CAAA;AACpC,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,KAAK,CAAA;AACtC,EAAA,MAAA,CAAO,gBAAA,CAAiB,UAAU,QAAQ,CAAA;AAC1C,EAAA,MAAA,CAAO,gBAAA,CAAiB,WAAW,SAAS,CAAA;AAC5C,EAAA,OAAO,MAAM;AACX,IAAA,MAAA,CAAO,mBAAA,CAAoB,UAAU,QAAQ,CAAA;AAC7C,IAAA,MAAA,CAAO,mBAAA,CAAoB,WAAW,SAAS,CAAA;AAAA,EACjD,CAAA;AACF;AAEA,eAAsB,eAAA,CACpB,OACA,QAAA,EACwB;AACxB,EAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AACtB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,SAAS,KAAK,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AC/CA,IAAM,MAAA,uBAAa,GAAA,EAA2B;AAE9C,eAAsB,iBAAA,CACpB,aACA,QAAA,EAC+B;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,GAAA,CAAI,WAAW,CAAA;AACrC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,KAAA,GAAQ,SAAS,WAAW,CAAA;AAClC,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,KAAU,UAAA,GAAa,OAAO,MAAM,KAAA,EAAO,CAAA,GAAI,KAAA;AACrE,EAAA,MAAA,CAAO,GAAA,CAAI,aAAa,MAAM,CAAA;AAC9B,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,gBAAA,GAAyB;AACvC,EAAA,MAAA,CAAO,KAAA,EAAM;AACf;AAEA,SAAS,OAAO,KAAA,EAAkE;AAChF,EAAA,OAAO,SAAA,IAAa,KAAA,GAAQ,KAAA,GAAQ,KAAA,CAAM,OAAA;AAC5C;;;ACvBA,IAAM,OAAA,uBAAc,GAAA,EAAmD;AAOhE,SAAS,uBAAA,CAAwB,SAAA,EAAmB,MAAA,EAAgB,SAAA,EAAiC;AAE1G,EAAA,OAAA,CAAQ,IAAI,SAAA,EAAW;AAAA,IACrB,MAAA;AAAA,IACA,SAAA,EAAW,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,GAAI,IAAA,CAAK,GAAA,EAAI,GAAI,CAAA,GAAI;AAAA,GACjE,CAAA;AACH;AAEO,SAAS,mBAAA,CAAoB,SAAA,EAAmB,GAAA,GAAM,IAAA,CAAK,KAAI,EAAuB;AAC3F,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACjC,EAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,EAAA,IAAI,GAAA,CAAI,aAAa,GAAA,EAAK;AACxB,IAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAA,CAAI,MAAA;AACb;AAEO,SAAS,mBAAA,CAAoB,SAAA,EAAmB,GAAA,GAAM,IAAA,CAAK,KAAI,EAAuB;AAC3F,EAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,SAAA,EAAW,GAAG,CAAA;AACjD,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,EAAA,OAAO,MAAA;AACT;AAEO,SAAS,sBAAsB,SAAA,EAAyB;AAC7D,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,SAAS,yBAAA,GAAkC;AAChD,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;AAEO,SAAS,qBAAA,CAAsB,WAAmB,MAAA,EAAsF;AAC7I,EAAA,IAAI,CAAC,QAAQ,eAAA,EAAiB;AAC9B,EAAA,uBAAA,CAAwB,SAAA,EAAW,MAAA,CAAO,eAAA,EAAiB,MAAA,CAAO,wBAAwB,CAAA;AAC5F;;;ACnCO,IAAM,uBAAA,GAA0B;AA8EhC,IAAM,iBAAA,uBAAwB,GAAA,CAAiC;AAAA,EACpE,UAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF,CAAC;;;AChFM,SAAS,gCAAgC,OAAA,EAA2C;AACzF,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,GAAA,KAAQ,0BAAU,IAAA,EAAK,CAAA;AAE3C,EAAA,eAAe,QAAQ,SAAA,EAAwD;AAC7E,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAA;AACtD,IAAA,qBAAA,CAAsB,SAAA,EAAW,SAAS,MAAM,CAAA;AAChD,IAAA,OAAO,QAAA;AAAA,EACT;AAEA,EAAA,eAAe,QAAQ,KAAA,EAAuD;AAC5E,IAAA,IAAI,WAAW,KAAA,CAAM,QAAA;AACrB,IAAA,qBAAA,CAAsB,QAAA,CAAS,SAAA,EAAW,QAAA,CAAS,MAAM,CAAA;AACzD,IAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,EAAgB;AAClC,IAAA,IAAI,MAAA,GAAqC,IAAA;AACzC,IAAA,IAAI,eAAA,GAAkB,iBAAiB,QAAQ,CAAA;AAC/C,IAAA,MAAM,WAAA,GAAc,qBAAA,CAAsB,CAAC,MAAA,KAAW;AACpD,MAAA,IAAI,CAAC,MAAA,EAAQ,KAAA,CAAM,SAAA,GAAY,yEAAyE,CAAA;AAAA,gBAC9F,cAAA,EAAe;AAAA,IAC3B,CAAC,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,EAAkC,OAAA,KAAqB;AACnE,MAAA,QAAA,GAAW,IAAA;AACX,MAAA,KAAA,CAAM,mBAAmB,IAAI,CAAA;AAC7B,MAAA,IAAI,OAAA,EAAS,KAAA,CAAM,SAAA,GAAY,OAAO,CAAA;AAAA,IACxC,CAAA;AAEA,IAAA,MAAM,iBAAiB,YAAiD;AACtE,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,QAAA,CAAS,SAAS,CAAA;AAC7C,MAAA,MAAM,QAAA,GAAW,KAAK,MAAA,KAAW,UAAA;AACjC,MAAA,IAAA,CAAK,IAAA,EAAM,QAAA,GACP,2CAAA,GACA,oEAAoE,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAEA,IAAA,MAAM,gBAAgB,YAA2B;AAC/C,MAAA,MAAA,EAAQ,OAAA,EAAQ;AAChB,MAAA,MAAA,GAAS,IAAA;AACT,MAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AACxB,MAAA,IAAI,CAAC,UAAU,QAAA,CAAS,YAAA,KAAiB,UAAU,iBAAA,CAAkB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC3F,MAAA,IAAI,QAAA,CAAS,MAAA,KAAW,YAAA,IAAgB,QAAA,CAAS,WAAW,wBAAA,EAA0B;AACtF,MAAA,IAAI,CAAC,iBAAgB,EAAG;AACxB,MAAA,IAAI,MAAA,CAAO,wBAAA,IAA4B,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,wBAAwB,CAAA,IAAK,GAAA,EAAI,CAAE,OAAA,EAAQ,EAAG;AACrG,QAAA,qBAAA,CAAsB,SAAS,SAAS,CAAA;AACxC,QAAA,KAAA,CAAM,YAAY,wDAAwD,CAAA;AAC1E,QAAA,MAAM,cAAA,EAAe;AACrB,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,YAAA,KAAiB,QAAA,IAAY,MAAA,CAAO,SAAA,EAAW;AAC1D,QAAA,MAAA,GAAS,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,MAAA,CAAO,WAAW,MAAM;AAAE,UAAA,KAAK,cAAA,EAAe;AAAA,QAAG,CAAC,CAAA;AAC1F,QAAA;AAAA,MACF;AACA,MAAA,IAAI,QAAA,CAAS,YAAA,KAAiB,IAAA,IAAQ,eAAA,EAAiB;AACrD,QAAA,MAAA,GAAS,MAAM,SAAA,CAAU,KAAA,CAAM,SAAA,EAAW,eAAA,EAAiB,QAAQ,QAAQ,CAAA;AAC3E,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAS,MAAM,iBAAA,CAAkB,MAAA,CAAO,WAAA,EAAa,QAAQ,OAAO,CAAA;AAC1E,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,IAAI,OAAO,SAAA,EAAW;AACpB,UAAA,MAAA,GAAS,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,MAAA,CAAO,WAAW,MAAM;AAAE,YAAA,KAAK,cAAA,EAAe;AAAA,UAAG,CAAC,CAAA;AAAA,QAC5F;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAA,GAAS,MAAM,OAAO,OAAA,CAAQ;AAAA,QAC5B,WAAW,KAAA,CAAM,SAAA;AAAA,QACjB,MAAA,EAAQ;AAAA,UACN,GAAG,MAAA;AAAA,UACH,eAAA,EAAiB,mBAAA,CAAoB,QAAA,CAAS,SAAS,KAAK,MAAA,CAAO;AAAA,SACrE;AAAA,QACA,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,YAAY,MAAM;AAChB,UAAA,KAAA,CAAM,YAAY,kEAAkE,CAAA;AACpF,UAAA,KAAK,cAAA,EAAe;AAAA,QACtB,CAAA;AAAA,QACA,SAAS,MAAM;AAAE,UAAA,KAAK,KAAA,EAAM;AAAA,QAAG,CAAA;AAAA,QAC/B,OAAA,EAAS,CAAC,OAAA,KAAY,KAAA,CAAM,YAAY,OAAO,CAAA;AAAA,QAC/C,UAAU,MAAM;AAAA,OACjB,CAAA;AAAA,IACH,CAAA;AAEA,IAAA,eAAe,KAAA,GAAuB;AACpC,MAAA,IAAI,CAAC,QAAQ,KAAA,EAAO;AACpB,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,SAAS,CAAA;AACrD,MAAA,MAAM,IAAA,GAAO,WAAA,IAAe,MAAA,GAAS,MAAA,GAAS,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,IAAA,EAAK;AACpG,MAAA,IAAA,CAAK,IAAkC,CAAA;AAAA,IACzC;AAEA,IAAA,eAAe,MAAA,GAAwB;AACrC,MAAA,IAAI,CAAC,QAAQ,MAAA,EAAQ;AACrB,MAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,SAAS,SAAS,CAAA;AACpD,MAAA,IAAA,CAAK,IAAI,CAAA;AACT,MAAA,eAAA,GAAkB,iBAAiB,IAAI,CAAA;AACvC,MAAA,MAAM,aAAA,EAAc;AAAA,IACtB;AAEA,IAAA,MAAM,aAAA,EAAc;AAEpB,IAAA,OAAO;AAAA,MACL,eAAA;AAAA,MACA,OAAA,GAAU;AACR,QAAA,KAAA,CAAM,KAAA,EAAM;AACZ,QAAA,WAAA,EAAY;AACZ,QAAA,MAAA,EAAQ,OAAA,EAAQ;AAChB,QAAA,qBAAA,CAAsB,SAAS,SAAS,CAAA;AAAA,MAC1C,CAAA;AAAA,MACA,IAAA,GAAO;AACL,QAAA,MAAA,EAAQ,IAAA,IAAO;AAAA,MACjB,CAAA;AAAA,MACA,OAAA,EAAS,cAAA;AAAA,MACT,KAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAM,KAAA,GAAQ;AACZ,QAAA,IAAI,CAAC,QAAQ,KAAA,IAAS,CAAC,SAAS,QAAA,IAAY,CAAC,iBAAgB,EAAG;AAChE,QAAA,MAAM,IAAA,GAAO,MAAM,OAAA,CAAQ,KAAA,CAAM,SAAS,SAAS,CAAA;AACnD,QAAA,IAAA,CAAK,IAAI,CAAA;AACT,QAAA,eAAA,GAAkB,iBAAiB,IAAI,CAAA;AACvC,QAAA,MAAM,aAAA,EAAc;AAAA,MACtB,CAAA;AAAA,MACA,MAAM,MAAA,GAAS;AACb,QAAA,IAAI,CAAC,QAAQ,MAAA,EAAQ;AACrB,QAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA,CAAO,SAAS,SAAS,CAAA;AACtD,QAAA,MAAM,IAAA,GAAO,WAAA,IAAe,MAAA,GAAS,MAAA,GAAS,EAAE,GAAG,QAAA,EAAU,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,SAAA,EAAW,KAAA,EAAO,UAAU,IAAA,EAAK;AACrH,QAAA,IAAA,CAAK,IAAkC,CAAA;AAAA,MACzC;AAAA,KACF;AAAA,EACF;AAEA,EAAA,SAAS,iBAAiB,QAAA,EAAqD;AAC7E,IAAA,IAAI,CAAC,QAAA,CAAS,YAAA,EAAc,OAAO,IAAA;AACnC,IAAA,IAAI,QAAQ,qBAAA,EAAuB,OAAO,QAAQ,qBAAA,CAAsB,QAAA,CAAS,cAAc,QAAQ,CAAA;AACvG,IAAA,OAAO,SAAS,YAAA,CAAa,KAAA;AAAA,EAC/B;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,QAAA,EAAU,eAAA;AAAA,IACV,cAAA;AAAA,IACA,UAAA,EAAY;AAAA,GACd;AACF;AAEA,SAAS,aAAA,CAAc,SAAA,EAAwB,GAAA,EAAa,QAAA,EAA2C;AACrG,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,aAAA,CAAc,GAAG,CAAA;AACzC,EAAA,MAAA,CAAO,IAAA,GAAO,GAAA;AACd,EAAA,MAAA,CAAO,MAAA,GAAS,QAAA;AAChB,EAAA,MAAA,CAAO,GAAA,GAAM,qBAAA;AACb,EAAA,MAAA,CAAO,WAAA,GAAc,0BAAA;AACrB,EAAA,MAAA,CAAO,gBAAA,CAAiB,SAAS,QAAQ,CAAA;AACzC,EAAA,SAAA,CAAU,gBAAgB,MAAM,CAAA;AAChC,EAAA,OAAO;AAAA,IACL,IAAA,GAAO;AAAE,MAAA,MAAA,CAAO,KAAA,EAAM;AAAA,IAAG,CAAA;AAAA,IACzB,OAAA,GAAU;AAAE,MAAA,SAAA,CAAU,eAAA,EAAgB;AAAA,IAAG;AAAA,GAC3C;AACF;AAEA,eAAe,SAAA,CACb,SAAA,EACA,GAAA,EACA,QAAA,EAC8B;AAC9B,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,aAAA,CAAc,KAAK,CAAA;AAC1C,EAAA,KAAA,CAAM,GAAA,GAAM,oDAAA;AACZ,EAAA,MAAM,OAAA,GAAU,MAAM,eAAA,CAAgB,GAAA,EAAK,QAAQ,CAAA;AACnD,EAAA,IAAI,OAAA,QAAe,GAAA,GAAM,OAAA;AAAA,OACpB,KAAA,CAAM,QAAQ,YAAA,GAAe,GAAA;AAClC,EAAA,SAAA,CAAU,gBAAgB,KAAK,CAAA;AAC/B,EAAA,OAAO,EAAE,OAAA,GAAU;AAAE,IAAA,SAAA,CAAU,eAAA,EAAgB;AAAA,EAAG,CAAA,EAAE;AACtD","file":"index.js","sourcesContent":["export function isBrowserOnline(): boolean {\n  if (typeof navigator === 'undefined') return true;\n  return navigator.onLine !== false;\n}\n\nexport function isInstalledPwa(): boolean {\n  if (typeof window === 'undefined') return false;\n  const standalone = window.matchMedia?.('(display-mode: standalone)')?.matches;\n  const iosStandalone = 'standalone' in navigator && Boolean((navigator as Navigator & { standalone?: boolean }).standalone);\n  return Boolean(standalone || iosStandalone);\n}\n\nexport function prefersReducedMotion(): boolean {\n  if (typeof window === 'undefined') return false;\n  return Boolean(window.matchMedia?.('(prefers-reduced-motion: reduce)')?.matches);\n}\n\nexport type VerificationClientSurface = 'desktop' | 'mobile-web' | 'installed-pwa';\n\nexport function clientSurface(width?: number): VerificationClientSurface {\n  if (isInstalledPwa()) return 'installed-pwa';\n  if (typeof window === 'undefined') return 'desktop';\n  const viewport = width ?? window.innerWidth;\n  if (viewport <= 640 || Boolean(window.matchMedia?.('(max-width: 640px)')?.matches)) return 'mobile-web';\n  return 'desktop';\n}\n\nexport function subscribeOnlineStatus(listener: (online: boolean) => void): () => void {\n  if (typeof window === 'undefined') return () => undefined;\n  const onOnline = () => listener(true);\n  const onOffline = () => listener(false);\n  window.addEventListener('online', onOnline);\n  window.addEventListener('offline', onOffline);\n  return () => {\n    window.removeEventListener('online', onOnline);\n    window.removeEventListener('offline', onOffline);\n  };\n}\n\nexport async function createQrDataUrl(\n  value: string,\n  renderer?: (text: string) => Promise<string>,\n): Promise<string | null> {\n  if (!renderer) return null;\n  try {\n    return await renderer(value);\n  } catch {\n    return null;\n  }\n}\n","import type { BrowserPlugin, BrowserPluginLoader } from './types.ts';\n\nconst loaded = new Map<string, BrowserPlugin>();\n\nexport async function loadBrowserPlugin(\n  launcherKey: string,\n  registry: Record<string, BrowserPlugin | BrowserPluginLoader>,\n): Promise<BrowserPlugin | null> {\n  const cached = loaded.get(launcherKey);\n  if (cached) return cached;\n  const entry = registry[launcherKey];\n  if (!entry) return null;\n  const plugin = typeof entry === 'function' ? unwrap(await entry()) : entry;\n  loaded.set(launcherKey, plugin);\n  return plugin;\n}\n\nexport function clearPluginCache(): void {\n  loaded.clear();\n}\n\nfunction unwrap(value: BrowserPlugin | { default: BrowserPlugin }): BrowserPlugin {\n  return 'present' in value ? value : value.default;\n}\n","const secrets = new Map<string, { secret: string; expiresAt: number }>();\n\nfunction storageBlocked(): void {\n  // Transient secrets must never enter Web Storage. This function exists so\n  // tests can assert the controller never writes launch credentials.\n}\n\nexport function rememberTransientSecret(attemptId: string, secret: string, expiresAt?: string | null): void {\n  storageBlocked();\n  secrets.set(attemptId, {\n    secret,\n    expiresAt: expiresAt ? Date.parse(expiresAt) : Date.now() + 5 * 60_000,\n  });\n}\n\nexport function peekTransientSecret(attemptId: string, now = Date.now()): string | undefined {\n  const row = secrets.get(attemptId);\n  if (!row) return undefined;\n  if (row.expiresAt <= now) {\n    secrets.delete(attemptId);\n    return undefined;\n  }\n  return row.secret;\n}\n\nexport function takeTransientSecret(attemptId: string, now = Date.now()): string | undefined {\n  const secret = peekTransientSecret(attemptId, now);\n  secrets.delete(attemptId);\n  return secret;\n}\n\nexport function forgetTransientSecret(attemptId: string): void {\n  secrets.delete(attemptId);\n}\n\nexport function forgetAllTransientSecrets(): void {\n  secrets.clear();\n}\n\nexport function rememberLaunchSecrets(attemptId: string, launch: { transientSecret?: string; transientSecretExpiresAt?: string } | null): void {\n  if (!launch?.transientSecret) return;\n  rememberTransientSecret(attemptId, launch.transientSecret, launch.transientSecretExpiresAt);\n}\n","import type {\n  ProviderLaunchEnvelope,\n  VerificationCanonicalStatus,\n  VerificationLaunchPresentation,\n  VerificationPackageCode,\n} from '@splitin/verification-adapter-sdk';\n\nexport const STATUS_CONTRACT_VERSION = '1.0.0' as const;\n\nexport interface StatusContinuation {\n  key: string;\n  token: string;\n  expiresAt: string;\n}\n\nexport interface VerificationStatusEnvelope {\n  contractVersion?: typeof STATUS_CONTRACT_VERSION | string;\n  attemptId: string;\n  packageCode: VerificationPackageCode;\n  status: VerificationCanonicalStatus;\n  presentation: VerificationLaunchPresentation;\n  launch: ProviderLaunchEnvelope | null;\n  launcherKey: string | null;\n  providerDisclosure: string | null;\n  safeErrorCode: string | null;\n  retryAfter: string | null;\n  supportPath: string | null;\n  expiresAt: string | null;\n  canResume: boolean;\n  canRetry: boolean;\n  continuation: StatusContinuation | null;\n}\n\nexport interface BrowserPluginHandle {\n  open?(): void;\n  destroy(): void;\n}\n\nexport interface BrowserPluginPresentInput {\n  container: HTMLElement;\n  launch: ProviderLaunchEnvelope;\n  onComplete: () => void;\n  onPause: () => void;\n  onError: (message: string) => void;\n  onOpened: () => void;\n  signal?: AbortSignal;\n}\n\nexport interface BrowserPlugin {\n  launcherKey: string;\n  present(input: BrowserPluginPresentInput): Promise<BrowserPluginHandle>;\n}\n\nexport type BrowserPluginLoader = () => Promise<BrowserPlugin | { default: BrowserPlugin }>;\n\nexport interface VerificationWebControllerOptions {\n  plugins: Record<string, BrowserPlugin | BrowserPluginLoader>;\n  refreshStatus: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  pause?: (attemptId: string) => Promise<VerificationStatusEnvelope | { status: VerificationCanonicalStatus }>;\n  resume?: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  retry?: (attemptId: string) => Promise<VerificationStatusEnvelope>;\n  cancel?: (attemptId: string) => Promise<VerificationStatusEnvelope | { status: VerificationCanonicalStatus }>;\n  createContinuationUrl?: (continuation: StatusContinuation, envelope: VerificationStatusEnvelope) => string;\n  renderQr?: (value: string) => Promise<string>;\n  now?: () => Date;\n}\n\nexport interface PresentSessionInput {\n  envelope: VerificationStatusEnvelope;\n  container: HTMLElement;\n  onEnvelopeChange?: (envelope: VerificationStatusEnvelope) => void;\n  onMessage?: (message: string) => void;\n}\n\nexport interface PresentedSession {\n  destroy(): void;\n  open(): void;\n  refresh(): Promise<VerificationStatusEnvelope>;\n  pause(): Promise<void>;\n  resume(): Promise<void>;\n  retry(): Promise<void>;\n  cancel(): Promise<void>;\n  continuationUrl: string | null;\n}\n\nexport const TERMINAL_STATUSES = new Set<VerificationCanonicalStatus>([\n  'verified',\n  'declined',\n  'failed',\n  'expired',\n  'canceled',\n  'redacted',\n]);\n","import { createQrDataUrl, isBrowserOnline, isInstalledPwa, subscribeOnlineStatus } from './environment.ts';\nimport { loadBrowserPlugin } from './plugins.ts';\nimport { forgetTransientSecret, peekTransientSecret, rememberLaunchSecrets } from './secrets.ts';\nimport {\n  TERMINAL_STATUSES,\n  type BrowserPluginHandle,\n  type PresentedSession,\n  type PresentSessionInput,\n  type VerificationStatusEnvelope,\n  type VerificationWebControllerOptions,\n} from './types.ts';\n\nexport function createVerificationWebController(options: VerificationWebControllerOptions) {\n  const now = options.now ?? (() => new Date());\n\n  async function refresh(attemptId: string): Promise<VerificationStatusEnvelope> {\n    const envelope = await options.refreshStatus(attemptId);\n    rememberLaunchSecrets(attemptId, envelope.launch);\n    return envelope;\n  }\n\n  async function present(input: PresentSessionInput): Promise<PresentedSession> {\n    let envelope = input.envelope;\n    rememberLaunchSecrets(envelope.attemptId, envelope.launch);\n    const abort = new AbortController();\n    let handle: BrowserPluginHandle | null = null;\n    let continuationUrl = continuationLink(envelope);\n    const unsubscribe = subscribeOnlineStatus((online) => {\n      if (!online) input.onMessage?.('You are offline. Your place is saved. Reconnect to resume verification.');\n      else void refreshAndEmit();\n    });\n\n    const emit = (next: VerificationStatusEnvelope, message?: string) => {\n      envelope = next;\n      input.onEnvelopeChange?.(next);\n      if (message) input.onMessage?.(message);\n    };\n\n    const refreshAndEmit = async (): Promise<VerificationStatusEnvelope> => {\n      const next = await refresh(envelope.attemptId);\n      const verified = next.status === 'verified';\n      emit(next, verified\n        ? 'Verified. Returning to your saved action.'\n        : 'Your status is not approved yet. The protected action stays saved.');\n      return next;\n    };\n\n    const presentPlugin = async (): Promise<void> => {\n      handle?.destroy();\n      handle = null;\n      const launch = envelope.launch;\n      if (!launch || envelope.presentation === 'none' || TERMINAL_STATUSES.has(envelope.status)) return;\n      if (envelope.status === 'processing' || envelope.status === 'manual_review_required') return;\n      if (!isBrowserOnline()) return;\n      if (launch.transientSecretExpiresAt && Date.parse(launch.transientSecretExpiresAt) <= now().getTime()) {\n        forgetTransientSecret(envelope.attemptId);\n        input.onMessage?.('The secure launch credential expired. Checking status.');\n        await refreshAndEmit();\n        return;\n      }\n      if (envelope.presentation === 'hosted' && launch.hostedUrl) {\n        handle = presentHosted(input.container, launch.hostedUrl, () => { void refreshAndEmit(); });\n        return;\n      }\n      if (envelope.presentation === 'qr' && continuationUrl) {\n        handle = await presentQr(input.container, continuationUrl, options.renderQr);\n        return;\n      }\n      const plugin = await loadBrowserPlugin(launch.launcherKey, options.plugins);\n      if (!plugin) {\n        if (launch.hostedUrl) {\n          handle = presentHosted(input.container, launch.hostedUrl, () => { void refreshAndEmit(); });\n        }\n        return;\n      }\n      handle = await plugin.present({\n        container: input.container,\n        launch: {\n          ...launch,\n          transientSecret: peekTransientSecret(envelope.attemptId) ?? launch.transientSecret,\n        },\n        signal: abort.signal,\n        onComplete: () => {\n          input.onMessage?.('Verification was submitted. Checking the server-side result now.');\n          void refreshAndEmit();\n        },\n        onPause: () => { void pause(); },\n        onError: (message) => input.onMessage?.(message),\n        onOpened: () => undefined,\n      });\n    };\n\n    async function pause(): Promise<void> {\n      if (!options.pause) return;\n      const result = await options.pause(envelope.attemptId);\n      const next = 'attemptId' in result ? result : { ...envelope, status: result.status, canResume: true };\n      emit(next as VerificationStatusEnvelope);\n    }\n\n    async function resume(): Promise<void> {\n      if (!options.resume) return;\n      const next = await options.resume(envelope.attemptId);\n      emit(next);\n      continuationUrl = continuationLink(next);\n      await presentPlugin();\n    }\n\n    await presentPlugin();\n\n    return {\n      continuationUrl,\n      destroy() {\n        abort.abort();\n        unsubscribe();\n        handle?.destroy();\n        forgetTransientSecret(envelope.attemptId);\n      },\n      open() {\n        handle?.open?.();\n      },\n      refresh: refreshAndEmit,\n      pause,\n      resume,\n      async retry() {\n        if (!options.retry || !envelope.canRetry || !isBrowserOnline()) return;\n        const next = await options.retry(envelope.attemptId);\n        emit(next);\n        continuationUrl = continuationLink(next);\n        await presentPlugin();\n      },\n      async cancel() {\n        if (!options.cancel) return;\n        const result = await options.cancel(envelope.attemptId);\n        const next = 'attemptId' in result ? result : { ...envelope, status: result.status, canResume: false, canRetry: true };\n        emit(next as VerificationStatusEnvelope);\n      },\n    };\n  }\n\n  function continuationLink(envelope: VerificationStatusEnvelope): string | null {\n    if (!envelope.continuation) return null;\n    if (options.createContinuationUrl) return options.createContinuationUrl(envelope.continuation, envelope);\n    return envelope.continuation.token;\n  }\n\n  return {\n    refresh,\n    present,\n    isOnline: isBrowserOnline,\n    isInstalledPwa,\n    peekSecret: peekTransientSecret,\n  };\n}\n\nfunction presentHosted(container: HTMLElement, url: string, onOpened: () => void): BrowserPluginHandle {\n  const anchor = document.createElement('a');\n  anchor.href = url;\n  anchor.target = '_blank';\n  anchor.rel = 'noopener noreferrer';\n  anchor.textContent = 'Open hosted verification';\n  anchor.addEventListener('click', onOpened);\n  container.replaceChildren(anchor);\n  return {\n    open() { anchor.click(); },\n    destroy() { container.replaceChildren(); },\n  };\n}\n\nasync function presentQr(\n  container: HTMLElement,\n  url: string,\n  renderer?: (value: string) => Promise<string>,\n): Promise<BrowserPluginHandle> {\n  const image = document.createElement('img');\n  image.alt = 'QR code to continue verification on another device';\n  const dataUrl = await createQrDataUrl(url, renderer);\n  if (dataUrl) image.src = dataUrl;\n  else image.dataset.continuation = url;\n  container.replaceChildren(image);\n  return { destroy() { container.replaceChildren(); } };\n}\n"]}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@splitin/verification-web",
+  "version": "0.1.0-beta.0",
+  "description": "Framework-neutral browser launcher and status controllers for verification V1 envelopes.",
+  "license": "MIT",
+  "author": "SplitInTech, @ojchavan",
+  "homepage": "https://github.com/splitintech/open-internal-tools/tree/main/verification-adapter-sdk/packages/verification-web#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/splitintech/open-internal-tools.git",
+    "directory": "verification-adapter-sdk/packages/verification-web"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "engines": { "node": ">=20" },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": ["dist", "LICENSE", "NOTICE", "README.md", "package.json"],
+  "publishConfig": { "access": "public" },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
+  },
+  "dependencies": {
+    "@splitin/verification-adapter-sdk": "0.1.0-beta.0"
+  },
+  "devDependencies": {
+    "jsdom": "^26.1.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
+  }
+}