@trustchex/react-native-sdk 1.495.6 → 1.495.8

package/lib/module/Screens/Dynamic/IdentityDocumentScanningScreen.js

@@ -35,11 +35,23 @@ const IdentityDocumentScanningScreen = () => {
   }, []);
   useEffect(() => {
     if ((idFrontSideData && idBackSideData || passportData) && appContext.identificationInfo && !appContext.identificationInfo.scannedDocument) {
+      const mrzFields = idBackSideData?.mrzFields || passportData?.mrzFields;
+
+      // A document can complete capture (face/hologram/images) without ever
+      // reaching a stable MRZ consensus, in which case mrzFields is undefined.
+      // Bail out cleanly here: setting the scannedDocument guard below and THEN
+      // dereferencing mrzFields would throw mid-effect, leaving the guard set so
+      // re-entry is blocked forever — the user would be stranded on this screen
+      // with no error and no way forward. Reset and surface the failure instead.
+      if (!mrzFields) {
+        appContext.onError?.(t('general.error'));
+        navigationManagerRef.current?.reset();
+        return;
+      }
       appContext.identificationInfo.scannedDocument = {
         documentType: 'UNKNOWN',
         dataSource: 'UNKNOWN'
       };
-      const mrzFields = idBackSideData?.mrzFields || passportData?.mrzFields;
       const mrzText = idBackSideData?.mrzText || passportData?.mrzText;
       appContext.identificationInfo.scannedDocument.dataSource = 'MRZ';
       appContext.identificationInfo.scannedDocument.mrzFields = mrzFields;

package/lib/module/Shared/Components/EIDScanner.js

@@ -20,7 +20,14 @@ import { getLocalizedCountryName } from "../Libs/country-display.utils.js";
 import { useKeepAwake } from "../Libs/native-keep-awake.utils.js";
 import { speak, resetLastMessage } from "../Libs/tts.utils.js";
 import { trackEIDScanStart, trackEIDScanComplete, trackEIDScanFailed } from "../Libs/analytics.utils.js";
+
+// Hard ceiling for a single NFC read attempt. A healthy read — even a passport
+// with a slow curve (brainpoolP512r1 ECDH) plus a full DG2 face image — finishes
+// well within this; the watchdog only trips on a genuine stall so the user never
+// sits on the "reading document" spinner indefinitely. Deliberately generous to
+// avoid aborting slow-but-progressing reads.
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+const NFC_READ_TIMEOUT_MS = 90_000;
 const EIDScanner = ({
   documentNumber,
   dateOfBirth,
@@ -173,7 +180,13 @@ const EIDScanner = ({
     await trackEIDScanStart(docType, hasNfc, isEnabled, currentAttempt).catch(() => {});
     try {
       if (documentNumber && dateOfBirth && dateOfExpiry) {
-        const passportData = await eidReader(documentNumber, dateOfBirth, dateOfExpiry, progressValue => {
+        // Watchdog: a chip that stalls mid-read (card slips, RF field drops in a
+        // way the per-APDU transceive timeout doesn't catch, or session open/
+        // close hangs) would otherwise leave eidReader pending forever — the
+        // "reading document" spinner never clears and the user is stuck with no
+        // error. Cap the whole read; on timeout we throw a categorized error so
+        // the catch below surfaces a retry prompt and finally resets the UI.
+        const readPromise = eidReader(documentNumber, dateOfBirth, dateOfExpiry, progressValue => {
           setProgress(progressValue);
           // Update stage message based on progress
           if (progressValue <= 20) {
@@ -186,6 +199,23 @@ const EIDScanner = ({
             setProgressStage(t('eidScannerScreen.completing'));
           }
         });
+        let watchdog;
+        const watchdogPromise = new Promise((_, reject) => {
+          watchdog = setTimeout(() => {
+            reject(Object.assign(new Error('NFC read timed out'), {
+              nfcCategory: 'timeout',
+              nfcCode: 'NFC-TIMEOUT'
+            }));
+          }, NFC_READ_TIMEOUT_MS);
+        });
+        let passportData;
+        try {
+          passportData = await Promise.race([readPromise, watchdogPromise]);
+        } finally {
+          if (watchdog) {
+            clearTimeout(watchdog);
+          }
+        }
         if (passportData) {
           const scanDuration = Date.now() - startTime;
           const documentData = normalizeFromMRZInfo(passportData.mrz);
@@ -214,6 +244,16 @@ const EIDScanner = ({
             setIsScanned(true);
           }
           await trackEIDScanComplete(docType, scanDuration, currentAttempt).catch(() => {});
+        } else {
+          // eidReader resolved without throwing but produced no data. Without
+          // this branch the success path is skipped silently and the user is
+          // left staring at the spinner until finally{} clears it — with no
+          // explanation. Treat it as a read failure so the catch surfaces a
+          // retry prompt.
+          throw Object.assign(new Error('NFC read returned no data'), {
+            nfcCategory: 'unknown',
+            nfcCode: 'NFC-EMPTY'
+          });
         }
       } else {
         const scanDuration = Date.now() - startTime;

package/lib/module/Shared/Components/IdentityDocumentCamera.flows.js

@@ -262,16 +262,26 @@ export function handleIDBackFlow(mrzText, mrzFields, mrzValid, mrzStableAndValid
  * PASSPORT: → COMPLETED (no back side)
  * ID CARD: → SCAN_ID_BACK
  *
- * Routing is PASSPORT-BIASED on purpose: a passport has no back side, so if we
- * route it to SCAN_ID_BACK it deadlocks forever waiting for a back that will
- * never appear. We therefore only go to SCAN_ID_BACK when there is POSITIVE
- * evidence the document is an ID card (a parsed MRZ document code that is
- * present and not 'P'). When the type is ambiguous — e.g. the passport MRZ was
- * never read as 'P' so the front step locked `detectedDocumentType` as
- * 'ID_FRONT' (the torch/tilt during hologram capture makes the MRZ unreadable),
- * or no MRZ code survived at all — we COMPLETE rather than wait for a
- * non-existent back side. A two-sided ID card always yields an 'I'/'A'/'C'
- * (non-'P') MRZ code, so genuine ID cards still route to SCAN_ID_BACK.
+ * Routing is PASSPORT-BIASED for safety — a passport has no back side, so any
+ * positive passport signal (a locked/current PASSPORT classification, or an MRZ
+ * document code of 'P') COMPLETES immediately and never routes to SCAN_ID_BACK
+ * (which would deadlock waiting for a back that never appears).
+ *
+ * For ID cards, we route to SCAN_ID_BACK on POSITIVE ID-card evidence, which is
+ * EITHER:
+ *   (a) a parsed MRZ document code that is present and not 'P' ('I'/'A'/'C'), OR
+ *   (b) the front was classified as ID_FRONT (and there is no passport signal).
+ *
+ * Case (b) is essential: an ID card's FRONT has no MRZ at all (the MRZ lives on
+ * the back), so by the time we finish the front + hologram there is usually NO
+ * MRZ code to key on. Requiring a code (the old behaviour) sent every ordinary
+ * ID card straight to COMPLETED and silently skipped the back-side scan.
+ * Conversely a passport's front DOES carry the MRZ, so a genuine passport that
+ * reached this point almost always exposes a 'P' code (or a PASSPORT lock) and
+ * is caught by the passport guard above. The residual ambiguous case — a
+ * passport misread/locked as ID_FRONT with no surviving 'P' — is rare and
+ * self-corrects: SCAN_ID_BACK simply won't find an ID-back MRZ/barcode and the
+ * user can cancel, which is far better than skipping the back of every real ID.
  */
 export function getNextStepAfterHologram(detectedDocumentType, currentFrameDocType, mrzDocCode) {
   // Any positive passport signal → done (no back side).
@@ -280,12 +290,12 @@ export function getNextStepAfterHologram(detectedDocumentType, currentFrameDocTy
     return 'COMPLETED';
   }
 
-  // Only continue to the back side when we have POSITIVE proof it's an ID card:
-  // a real MRZ document code that is present and not a passport. Without that
-  // proof, default to COMPLETED so a misclassified passport can't hang waiting
-  // for a back side that doesn't exist.
+  // Positive ID-card evidence → scan the back. Either a non-'P' MRZ code, or a
+  // front classified as ID_FRONT (an ID front legitimately has no MRZ, so the
+  // classification is the only signal we get).
   const hasIdCardMrzCode = !!mrzDocCode && mrzDocCode !== 'P';
-  if (hasIdCardMrzCode) {
+  const isIdFront = detectedDocumentType === 'ID_FRONT' || currentFrameDocType === 'ID_FRONT';
+  if (hasIdCardMrzCode || isIdFront) {
     return 'SCAN_ID_BACK';
   }
   return 'COMPLETED';

package/lib/module/Shared/Components/IdentityDocumentCamera.js

@@ -1168,10 +1168,15 @@ const IdentityDocumentCamera = ({
       // Fall back to the previously locked face (ref) when the live frame's face
       // was rejected — the torch is on during hologram capture, so faceImageToUse
       // is frequently null even though a valid face was locked during the front
-      // scan. Without this the gate's face requirement could never be satisfied.
+      // scan.
       const faceForCompletion = faceImageToUse ?? currentFaceImageRef.current;
-      const stepComplete = (!!scannedData.hologramImage || maxRetriesReached && !isCollecting) && !!faceForCompletion; // Require face before completing
-
+      // The face must NOT gate completion: if the front-scan face capture
+      // failed, currentFaceImageRef is null and the live frame's face is
+      // routinely rejected under the hologram torch — requiring a face here
+      // would wedge the user on the hologram step forever even after a valid
+      // hologram is captured or retries are exhausted. Attach the face if we
+      // have one (below), but advance regardless.
+      const stepComplete = !!scannedData.hologramImage || maxRetriesReached && !isCollecting;
       if (stepComplete) {
         // Make sure the locked face rides along even if this frame's face was
         // rejected.

package/lib/module/Shared/Components/NavigationManager.js

@@ -26,6 +26,10 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
   const {
     t
   } = useTranslation();
+  // Track the lock-release timer so we can cancel it on unmount. Without this
+  // the timer is orphaned, and the shared module-level navigationLock relies
+  // solely on the focus/unmount resets below to clear `isNavigating`.
+  const lockReleaseTimer = React.useRef(null);
   const routes = {
     VERIFICATION_SESSION_CHECK: 'VerificationSessionCheckScreen',
     DYNAMIC_ROUTES: {
@@ -45,10 +49,18 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
     navigation.addListener('focus', handleFocus);
     return () => {
       navigation.removeListener('focus', handleFocus);
+      // Fully release the shared lock on unmount so a navigation started by
+      // this (now gone) screen can never strand the next screen: clear both
+      // the flag and the rate-limit timestamp, and cancel the pending timer.
       navigationLock.isNavigating = false;
+      navigationLock.lastNavigationTime = 0;
+      if (lockReleaseTimer.current) {
+        clearTimeout(lockReleaseTimer.current);
+        lockReleaseTimer.current = null;
+      }
     };
   }, [navigation]);
-  const getNextRoute = useCallback((workflowSteps, currentWorkFlowStep) => {
+  const getNextRoute = useCallback((workflowSteps, currentWorkFlowStep, outcome = 'success') => {
     // If this was a debug navigation, go directly to result screen
     if (appContext.isDebugNavigated) {
       appContext.isDebugNavigated = false;
@@ -58,12 +70,13 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
     const currentStepIndex = workflowSteps?.findIndex(step => step.id ? step.id === currentWorkFlowStep?.id : step.type === currentWorkFlowStep?.type) ?? -1;
     const nextStep = workflowSteps && currentStepIndex < workflowSteps.length ? workflowSteps[currentStepIndex + 1] : null;
 
-    // Diagnostics: advancing past the current step means it completed. Record
-    // its outcome (success — the user moved on) and start-time the next step,
-    // so the report captures the WHOLE flow, not just the NFC read.
+    // Diagnostics: advancing past the current step records its outcome —
+    // 'success' on a normal advance, 'skipped' when the user used the skip
+    // button — and start-times the next step, so the report captures the
+    // WHOLE flow, not just the NFC read.
     const now = Date.now();
     if (currentWorkFlowStep?.type) {
-      diagnostics.stepEnded(currentWorkFlowStep.type, 'success', now);
+      diagnostics.stepEnded(currentWorkFlowStep.type, outcome, now);
     }
     if (!nextStep) {
       appContext.currentWorkflowStep = undefined;
@@ -93,7 +106,7 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
     }
     return routes.VERIFICATION_SESSION_CHECK;
   }, [appContext, routes.VERIFICATION_SESSION_CHECK, routes.RESULT, routes.DYNAMIC_ROUTES.CONTRACT_ACCEPTANCE, routes.DYNAMIC_ROUTES.IDENTITY_DOCUMENT_SCAN, routes.DYNAMIC_ROUTES.IDENTITY_DOCUMENT_EID_SCAN, routes.DYNAMIC_ROUTES.LIVENESS_CHECK, routes.DYNAMIC_ROUTES.VIDEO_CALL, routes.DYNAMIC_ROUTES.VERBAL_CONSENT]);
-  const goToNextRoute = useCallback(() => {
+  const goToNextRoute = useCallback((outcome = 'success') => {
     const currentTime = Date.now();
     const minTimeBetweenNavigation = 1000;
     if (navigationLock.isNavigating || currentTime - navigationLock.lastNavigationTime < minTimeBetweenNavigation) {
@@ -102,7 +115,7 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
     navigationLock.isNavigating = true;
     navigationLock.lastNavigationTime = currentTime;
     try {
-      const nextRoute = getNextRoute(appContext.workflowSteps, appContext.currentWorkflowStep);
+      const nextRoute = getNextRoute(appContext.workflowSteps, appContext.currentWorkflowStep, outcome);
       navigation.dispatch(CommonActions.navigate({
         name: nextRoute,
         params: {
@@ -113,8 +126,12 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
       navigationLock.isNavigating = false;
       throw error;
     }
-    setTimeout(() => {
+    if (lockReleaseTimer.current) {
+      clearTimeout(lockReleaseTimer.current);
+    }
+    lockReleaseTimer.current = setTimeout(() => {
       navigationLock.isNavigating = false;
+      lockReleaseTimer.current = null;
     }, 1000);
   }, [getNextRoute, appContext.workflowSteps, appContext.currentWorkflowStep, navigation]);
   const goToNextRouteWithAlert = useCallback(() => {
@@ -126,7 +143,7 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
       style: 'cancel'
     }, {
       text: t('general.yes'),
-      onPress: goToNextRoute
+      onPress: () => goToNextRoute('skipped')
     }]);
   }, [goToNextRoute, t]);
   const reset = useCallback(() => {
@@ -178,8 +195,12 @@ const NavigationManager = /*#__PURE__*/forwardRef(({
       navigationLock.isNavigating = false;
       throw error;
     }
-    setTimeout(() => {
+    if (lockReleaseTimer.current) {
+      clearTimeout(lockReleaseTimer.current);
+    }
+    lockReleaseTimer.current = setTimeout(() => {
       navigationLock.isNavigating = false;
+      lockReleaseTimer.current = null;
     }, 1000);
   }, [appContext, navigation, routes.VERIFICATION_SESSION_CHECK]);
   usePreventRemove(true, ({

package/lib/module/Shared/Libs/diagnostics.js

@@ -105,7 +105,11 @@ export class DiagnosticsCollector {
 
   // ---- Workflow steps (whole-flow, not just NFC) ----
 
-  /** Mark a workflow step as started (records start time for duration). */
+  /**
+   * Mark a workflow step as started (records start time for duration).
+   * Re-starting a step that is already open just refreshes its start time
+   * (a re-render / re-entry of the same step is not a new step).
+   */
   stepStarted(step, nowMs) {
     this.openSteps.set(step, nowMs);
   }
@@ -114,15 +118,34 @@ export class DiagnosticsCollector {
    * Record a step's outcome. Pairs with `stepStarted` for duration; if the step
    * was never started, durationMs is 0. `details` is a small non-PII bag of
    * step-specific signals (counts, flags, retries).
+   *
+   * IDEMPOTENT per open step: the navigation layer can call this more than once
+   * for the same logical transition (re-renders, the nav-lock window, a deferred
+   * navigate timer). We only record when the step is actually OPEN, then close
+   * it — a second call for an already-ended step is ignored instead of pushing a
+   * duplicate row into the report.
    */
   stepEnded(step, outcome, nowMs, details) {
     const startedAt = this.openSteps.get(step);
+    if (startedAt === undefined) {
+      // Not open: either already ended (duplicate call → ignore), or ended
+      // without a matching start. Allow a first record for a never-started step
+      // (durationMs 0), but suppress repeats of a step already in the log.
+      if (this.steps.some(s => s.step === step)) return;
+      this.steps.push({
+        step,
+        outcome,
+        durationMs: 0,
+        details: details && Object.keys(details).length ? details : undefined
+      });
+      return;
+    }
     this.openSteps.delete(step);
     this.steps.push({
       step,
       outcome,
       // `startedAt` can legitimately be 0 (session t0), so check for undefined.
-      durationMs: startedAt !== undefined ? Math.max(0, nowMs - startedAt) : 0,
+      durationMs: Math.max(0, nowMs - startedAt),
       details: details && Object.keys(details).length ? details : undefined
     });
   }
@@ -217,13 +240,22 @@ export class DiagnosticsCollector {
 
   /** Build the serialisable snapshot. */
   snapshot(nowMs, isoNow) {
+    // Any step that was started but never ended is one the user stopped on / the
+    // flow was abandoned at — surface it as 'skipped' (with its elapsed time) so
+    // the report shows the WHOLE journey instead of silently dropping the final,
+    // incomplete step. Appended in start order, after the recorded steps.
+    const openStepRecords = Array.from(this.openSteps.entries()).map(([step, startedAt]) => ({
+      step,
+      outcome: 'skipped',
+      durationMs: Math.max(0, nowMs - startedAt)
+    }));
     return {
       schemaVersion: 2,
       generatedAt: isoNow,
       documentType: this.documentType,
       dataSource: this.dataSource,
       totalDurationMs: this.startedAtMs ? Math.max(0, nowMs - this.startedAtMs) : 0,
-      steps: this.steps.map(s => ({
+      steps: [...this.steps, ...openStepRecords].map(s => ({
         ...s,
         details: s.details ? {
           ...s.details

package/lib/module/version.js

@@ -2,4 +2,4 @@
 
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.495.6';
+export const SDK_VERSION = '1.495.8';

package/lib/typescript/src/Screens/Dynamic/IdentityDocumentScanningScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityDocumentScanningScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/IdentityDocumentScanningScreen.tsx"],"names":[],"mappings":"AAuBA,QAAA,MAAM,8BAA8B,+CA4KnC,CAAC;AAgBF,eAAe,8BAA8B,CAAC"}
+{"version":3,"file":"IdentityDocumentScanningScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/IdentityDocumentScanningScreen.tsx"],"names":[],"mappings":"AAuBA,QAAA,MAAM,8BAA8B,+CAwLnC,CAAC;AAgBF,eAAe,8BAA8B,CAAC"}

package/lib/typescript/src/Shared/Components/EIDScanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EIDScanner.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/EIDScanner.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAiBpD,UAAU,eAAe;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,SAAS,EAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,KACtB,IAAI,CAAC;IACV,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C;AAED,QAAA,MAAM,UAAU,GAAI,6FAOjB,eAAe,4CAywBjB,CAAC;AA4NF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"EIDScanner.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/EIDScanner.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAwBpD,UAAU,eAAe;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,SAAS,EAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,KACtB,IAAI,CAAC;IACV,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C;AAED,QAAA,MAAM,UAAU,GAAI,6FAOjB,eAAe,4CA4yBjB,CAAC;AA4NF,eAAe,UAAU,CAAC"}

package/lib/typescript/src/Shared/Components/IdentityDocumentCamera.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityDocumentCamera.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/IdentityDocumentCamera.tsx"],"names":[],"mappings":"AAyEA,OAAO,KAAK,EACV,mBAAmB,EACnB,SAAS,EACT,2BAA2B,EAK5B,MAAM,gCAAgC,CAAC;AAGxC,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC;AAC5E,YAAY,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAMnE,QAAA,MAAM,sBAAsB,GAAI,uDAI7B,2BAA2B,4CAmjF7B,CAAC;AAiIF,eAAe,sBAAsB,CAAC"}
+{"version":3,"file":"IdentityDocumentCamera.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/IdentityDocumentCamera.tsx"],"names":[],"mappings":"AAyEA,OAAO,KAAK,EACV,mBAAmB,EACnB,SAAS,EACT,2BAA2B,EAK5B,MAAM,gCAAgC,CAAC;AAGxC,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAAC;AAC5E,YAAY,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAMnE,QAAA,MAAM,sBAAsB,GAAI,uDAI7B,2BAA2B,4CAujF7B,CAAC;AAiIF,eAAe,sBAAsB,CAAC"}

package/lib/typescript/src/Shared/Components/IdentityDocumentCamera.flows.d.ts

@@ -84,16 +84,26 @@ export declare function handleIDBackFlow(mrzText: string | null, mrzFields: MRZF
  * PASSPORT: → COMPLETED (no back side)
  * ID CARD: → SCAN_ID_BACK
  *
- * Routing is PASSPORT-BIASED on purpose: a passport has no back side, so if we
- * route it to SCAN_ID_BACK it deadlocks forever waiting for a back that will
- * never appear. We therefore only go to SCAN_ID_BACK when there is POSITIVE
- * evidence the document is an ID card (a parsed MRZ document code that is
- * present and not 'P'). When the type is ambiguous — e.g. the passport MRZ was
- * never read as 'P' so the front step locked `detectedDocumentType` as
- * 'ID_FRONT' (the torch/tilt during hologram capture makes the MRZ unreadable),
- * or no MRZ code survived at all — we COMPLETE rather than wait for a
- * non-existent back side. A two-sided ID card always yields an 'I'/'A'/'C'
- * (non-'P') MRZ code, so genuine ID cards still route to SCAN_ID_BACK.
+ * Routing is PASSPORT-BIASED for safety — a passport has no back side, so any
+ * positive passport signal (a locked/current PASSPORT classification, or an MRZ
+ * document code of 'P') COMPLETES immediately and never routes to SCAN_ID_BACK
+ * (which would deadlock waiting for a back that never appears).
+ *
+ * For ID cards, we route to SCAN_ID_BACK on POSITIVE ID-card evidence, which is
+ * EITHER:
+ *   (a) a parsed MRZ document code that is present and not 'P' ('I'/'A'/'C'), OR
+ *   (b) the front was classified as ID_FRONT (and there is no passport signal).
+ *
+ * Case (b) is essential: an ID card's FRONT has no MRZ at all (the MRZ lives on
+ * the back), so by the time we finish the front + hologram there is usually NO
+ * MRZ code to key on. Requiring a code (the old behaviour) sent every ordinary
+ * ID card straight to COMPLETED and silently skipped the back-side scan.
+ * Conversely a passport's front DOES carry the MRZ, so a genuine passport that
+ * reached this point almost always exposes a 'P' code (or a PASSPORT lock) and
+ * is caught by the passport guard above. The residual ambiguous case — a
+ * passport misread/locked as ID_FRONT with no surviving 'P' — is rare and
+ * self-corrects: SCAN_ID_BACK simply won't find an ID-back MRZ/barcode and the
+ * user can cancel, which is far better than skipping the back of every real ID.
  */
 export declare function getNextStepAfterHologram(detectedDocumentType: 'ID_FRONT' | 'ID_BACK' | 'PASSPORT' | 'UNKNOWN', currentFrameDocType: 'ID_FRONT' | 'ID_BACK' | 'PASSPORT' | 'UNKNOWN', mrzDocCode: string | undefined): 'COMPLETED' | 'SCAN_ID_BACK';
 //# sourceMappingURL=IdentityDocumentCamera.flows.d.ts.map

package/lib/typescript/src/Shared/Components/IdentityDocumentCamera.flows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityDocumentCamera.flows.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/IdentityDocumentCamera.flows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAUpD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EACP,mBAAmB,GACnB,cAAc,GACd,qBAAqB,GACrB,sBAAsB,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EACP,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,cAAc,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;CAC3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,EAAE,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,iBAAiB,EAAE,OAAO,EAC1B,WAAW,EAAE,OAAO,EACpB,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,OAAO,GACpB,kBAAkB,CAgEpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,EAAE,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,GACjB,iBAAiB,CA0EnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,QAAQ,EAAE,OAAO,EACjB,iBAAiB,EAAE,OAAO,EAC1B,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,WAAW,EAAE,OAAO,GACnB,gBAAgB,CA2DlB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACrE,mBAAmB,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACpE,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,WAAW,GAAG,cAAc,CAqB9B"}
+{"version":3,"file":"IdentityDocumentCamera.flows.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/IdentityDocumentCamera.flows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAUpD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EACP,mBAAmB,GACnB,cAAc,GACd,qBAAqB,GACrB,sBAAsB,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EACP,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,cAAc,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;CAC3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,EAAE,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,iBAAiB,EAAE,OAAO,EAC1B,WAAW,EAAE,OAAO,EACpB,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,OAAO,GACpB,kBAAkB,CAgEpB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,IAAI,EAAE,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,UAAU,EAAE,MAAM,GACjB,iBAAiB,CA0EnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,QAAQ,EAAE,OAAO,EACjB,iBAAiB,EAAE,OAAO,EAC1B,iBAAiB,EAAE,OAAO,EAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,WAAW,EAAE,OAAO,GACnB,gBAAgB,CA2DlB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,wBAAwB,CACtC,oBAAoB,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACrE,mBAAmB,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,EACpE,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,WAAW,GAAG,cAAc,CAsB9B"}

package/lib/typescript/src/Shared/Components/NavigationManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NavigationManager.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/NavigationManager.tsx"],"names":[],"mappings":"AAAA,OAAO,KAKN,MAAM,OAAO,CAAC;AAoBf,MAAM,MAAM,oBAAoB,GAAG;IACjC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,QAAA,MAAM,iBAAiB,wFAoQtB,CAAC;AAaF,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"NavigationManager.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/NavigationManager.tsx"],"names":[],"mappings":"AAAA,OAAO,KAKN,MAAM,OAAO,CAAC;AAoBf,MAAM,MAAM,oBAAoB,GAAG;IACjC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,QAAA,MAAM,iBAAiB,wFAgStB,CAAC;AAaF,eAAe,iBAAiB,CAAC"}

package/lib/typescript/src/Shared/Libs/diagnostics.d.ts

@@ -151,12 +151,22 @@ export declare class DiagnosticsCollector {
     /** Clear the ENTIRE session (steps, errors, timings) — new verification. */
     resetSession(nowMs: number): void;
     setDocument(documentType?: string, dataSource?: string): void;
-    /** Mark a workflow step as started (records start time for duration). */
+    /**
+     * Mark a workflow step as started (records start time for duration).
+     * Re-starting a step that is already open just refreshes its start time
+     * (a re-render / re-entry of the same step is not a new step).
+     */
     stepStarted(step: string, nowMs: number): void;
     /**
      * Record a step's outcome. Pairs with `stepStarted` for duration; if the step
      * was never started, durationMs is 0. `details` is a small non-PII bag of
      * step-specific signals (counts, flags, retries).
+     *
+     * IDEMPOTENT per open step: the navigation layer can call this more than once
+     * for the same logical transition (re-renders, the nav-lock window, a deferred
+     * navigate timer). We only record when the step is actually OPEN, then close
+     * it — a second call for an already-ended step is ignored instead of pushing a
+     * duplicate row into the report.
      */
     stepEnded(step: string, outcome: WorkflowStepRecord['outcome'], nowMs: number, details?: WorkflowStepRecord['details']): void;
     /** Merge a camera snapshot (called periodically as frames arrive). */

package/lib/typescript/src/Shared/Libs/diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,OAAO;IACtB;sDACkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;8EAG0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C;sFACkF;IAClF,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;uBAEmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;IACpB,qEAAqE;IACrE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AA+BD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,KAAK,CAA4B;IAEzC,OAAO,CAAC,SAAS,CAA6B;IAE9C;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAS1B,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAYjC,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAO7D,yEAAyE;IACzE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9C;;;;OAIG;IACH,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,EACtC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC,GACtC,IAAI;IAYP,sEAAsE;IACtE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAI9C;;sDAEkD;IAClD,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAUxC,iBAAiB,IAAI,IAAI;IAezB,eAAe,IAAI,IAAI;IAIvB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAO3C,sEAAsE;IACtE,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAO5B;;yCAEqC;IACrC,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,4EAA4E;IAC5E,oBAAoB,IAAI,MAAM,GAAG,SAAS;IAM1C,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IAY3D,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIxE,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;CAmB7D;AAED,iEAAiE;AACjE,eAAO,MAAM,WAAW,sBAA6B,CAAC"}
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,OAAO;IACtB;sDACkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;8EAG0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C;sFACkF;IAClF,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;uBAEmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,OAAO,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;IACpB,qEAAqE;IACrE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AA+BD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,KAAK,CAA4B;IAEzC,OAAO,CAAC,SAAS,CAA6B;IAE9C;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAS1B,4EAA4E;IAC5E,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAYjC,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAO7D;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9C;;;;;;;;;;OAUG;IACH,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,EACtC,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,kBAAkB,CAAC,SAAS,CAAC,GACtC,IAAI;IAyBP,sEAAsE;IACtE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAI9C;;sDAEkD;IAClD,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAUxC,iBAAiB,IAAI,IAAI;IAezB,eAAe,IAAI,IAAI;IAIvB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAO3C,sEAAsE;IACtE,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAO5B;;yCAEqC;IACrC,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,4EAA4E;IAC5E,oBAAoB,IAAI,MAAM,GAAG,SAAS;IAM1C,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IAY3D,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIxE,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;CA+B7D;AAED,iEAAiE;AACjE,eAAO,MAAM,WAAW,sBAA6B,CAAC"}

package/lib/typescript/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION = "1.495.6";
+export declare const SDK_VERSION = "1.495.8";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trustchex/react-native-sdk",
-  "version": "1.495.6",
+  "version": "1.495.8",
   "description": "Trustchex mobile app react native SDK for android or ios devices",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",
@@ -103,7 +103,7 @@
     "@eslint/compat": "^1.2.7",
     "@eslint/eslintrc": "^3.3.0",
     "@eslint/js": "^9.22.0",
-    "@react-native-community/cli": "18.0.0",
+    "@react-native-community/cli": "18.0.1",
     "@react-native/babel-preset": "0.79.7",
     "@react-native/eslint-config": "^0.78.0",
     "@react-navigation/native": "^7.1.16",
@@ -138,7 +138,7 @@
     "react-native-webrtc": "^124.0.0",
     "react-native-webview": "^13.15.0",
     "release-it": "^17.10.0",
-    "turbo": "^1.10.7",
+    "turbo": "^2.9.14",
     "typescript": "^5.8.3"
   },
   "dependencies": {

package/src/Screens/Dynamic/IdentityDocumentScanningScreen.tsx

@@ -54,14 +54,26 @@ const IdentityDocumentScanningScreen = () => {
       appContext.identificationInfo &&
       !appContext.identificationInfo.scannedDocument
     ) {
+      const mrzFields = (idBackSideData?.mrzFields ||
+        passportData?.mrzFields) as MRZFields | undefined;
+
+      // A document can complete capture (face/hologram/images) without ever
+      // reaching a stable MRZ consensus, in which case mrzFields is undefined.
+      // Bail out cleanly here: setting the scannedDocument guard below and THEN
+      // dereferencing mrzFields would throw mid-effect, leaving the guard set so
+      // re-entry is blocked forever — the user would be stranded on this screen
+      // with no error and no way forward. Reset and surface the failure instead.
+      if (!mrzFields) {
+        appContext.onError?.(t('general.error'));
+        navigationManagerRef.current?.reset();
+        return;
+      }
+
       appContext.identificationInfo.scannedDocument = {
         documentType: 'UNKNOWN',
         dataSource: 'UNKNOWN',
       };
 
-      const mrzFields = (idBackSideData?.mrzFields ||
-        passportData?.mrzFields) as MRZFields;
-
       const mrzText = idBackSideData?.mrzText || passportData?.mrzText;
 
       appContext.identificationInfo.scannedDocument.dataSource = 'MRZ';

package/src/Shared/Components/EIDScanner.tsx

@@ -26,6 +26,13 @@ import {
   trackEIDScanFailed,
 } from '../Libs/analytics.utils';
 
+// Hard ceiling for a single NFC read attempt. A healthy read — even a passport
+// with a slow curve (brainpoolP512r1 ECDH) plus a full DG2 face image — finishes
+// well within this; the watchdog only trips on a genuine stall so the user never
+// sits on the "reading document" spinner indefinitely. Deliberately generous to
+// avoid aborting slow-but-progressing reads.
+const NFC_READ_TIMEOUT_MS = 90_000;
+
 interface eIDScannerProps {
   documentNumber: string;
   dateOfBirth: string;
@@ -241,7 +248,13 @@ const EIDScanner = ({
 
     try {
       if (documentNumber && dateOfBirth && dateOfExpiry) {
-        const passportData = await eidReader(
+        // Watchdog: a chip that stalls mid-read (card slips, RF field drops in a
+        // way the per-APDU transceive timeout doesn't catch, or session open/
+        // close hangs) would otherwise leave eidReader pending forever — the
+        // "reading document" spinner never clears and the user is stuck with no
+        // error. Cap the whole read; on timeout we throw a categorized error so
+        // the catch below surfaces a retry prompt and finally resets the UI.
+        const readPromise = eidReader(
           documentNumber,
           dateOfBirth,
           dateOfExpiry,
@@ -259,6 +272,25 @@ const EIDScanner = ({
             }
           }
         );
+        let watchdog: ReturnType<typeof setTimeout> | undefined;
+        const watchdogPromise = new Promise<never>((_, reject) => {
+          watchdog = setTimeout(() => {
+            reject(
+              Object.assign(new Error('NFC read timed out'), {
+                nfcCategory: 'timeout',
+                nfcCode: 'NFC-TIMEOUT',
+              })
+            );
+          }, NFC_READ_TIMEOUT_MS);
+        });
+        let passportData;
+        try {
+          passportData = await Promise.race([readPromise, watchdogPromise]);
+        } finally {
+          if (watchdog) {
+            clearTimeout(watchdog);
+          }
+        }
         if (passportData) {
           const scanDuration = Date.now() - startTime;
           const documentData = normalizeFromMRZInfo(passportData.mrz);
@@ -302,6 +334,16 @@ const EIDScanner = ({
             scanDuration,
             currentAttempt
           ).catch(() => {});
+        } else {
+          // eidReader resolved without throwing but produced no data. Without
+          // this branch the success path is skipped silently and the user is
+          // left staring at the spinner until finally{} clears it — with no
+          // explanation. Treat it as a read failure so the catch surfaces a
+          // retry prompt.
+          throw Object.assign(new Error('NFC read returned no data'), {
+            nfcCategory: 'unknown',
+            nfcCode: 'NFC-EMPTY',
+          });
         }
       } else {
         const scanDuration = Date.now() - startTime;

package/src/Shared/Components/IdentityDocumentCamera.flows.ts

@@ -326,16 +326,26 @@ export function handleIDBackFlow(
  * PASSPORT: → COMPLETED (no back side)
  * ID CARD: → SCAN_ID_BACK
  *
- * Routing is PASSPORT-BIASED on purpose: a passport has no back side, so if we
- * route it to SCAN_ID_BACK it deadlocks forever waiting for a back that will
- * never appear. We therefore only go to SCAN_ID_BACK when there is POSITIVE
- * evidence the document is an ID card (a parsed MRZ document code that is
- * present and not 'P'). When the type is ambiguous — e.g. the passport MRZ was
- * never read as 'P' so the front step locked `detectedDocumentType` as
- * 'ID_FRONT' (the torch/tilt during hologram capture makes the MRZ unreadable),
- * or no MRZ code survived at all — we COMPLETE rather than wait for a
- * non-existent back side. A two-sided ID card always yields an 'I'/'A'/'C'
- * (non-'P') MRZ code, so genuine ID cards still route to SCAN_ID_BACK.
+ * Routing is PASSPORT-BIASED for safety — a passport has no back side, so any
+ * positive passport signal (a locked/current PASSPORT classification, or an MRZ
+ * document code of 'P') COMPLETES immediately and never routes to SCAN_ID_BACK
+ * (which would deadlock waiting for a back that never appears).
+ *
+ * For ID cards, we route to SCAN_ID_BACK on POSITIVE ID-card evidence, which is
+ * EITHER:
+ *   (a) a parsed MRZ document code that is present and not 'P' ('I'/'A'/'C'), OR
+ *   (b) the front was classified as ID_FRONT (and there is no passport signal).
+ *
+ * Case (b) is essential: an ID card's FRONT has no MRZ at all (the MRZ lives on
+ * the back), so by the time we finish the front + hologram there is usually NO
+ * MRZ code to key on. Requiring a code (the old behaviour) sent every ordinary
+ * ID card straight to COMPLETED and silently skipped the back-side scan.
+ * Conversely a passport's front DOES carry the MRZ, so a genuine passport that
+ * reached this point almost always exposes a 'P' code (or a PASSPORT lock) and
+ * is caught by the passport guard above. The residual ambiguous case — a
+ * passport misread/locked as ID_FRONT with no surviving 'P' — is rare and
+ * self-corrects: SCAN_ID_BACK simply won't find an ID-back MRZ/barcode and the
+ * user can cancel, which is far better than skipping the back of every real ID.
  */
 export function getNextStepAfterHologram(
   detectedDocumentType: 'ID_FRONT' | 'ID_BACK' | 'PASSPORT' | 'UNKNOWN',
@@ -352,12 +362,13 @@ export function getNextStepAfterHologram(
     return 'COMPLETED';
   }
 
-  // Only continue to the back side when we have POSITIVE proof it's an ID card:
-  // a real MRZ document code that is present and not a passport. Without that
-  // proof, default to COMPLETED so a misclassified passport can't hang waiting
-  // for a back side that doesn't exist.
+  // Positive ID-card evidence → scan the back. Either a non-'P' MRZ code, or a
+  // front classified as ID_FRONT (an ID front legitimately has no MRZ, so the
+  // classification is the only signal we get).
   const hasIdCardMrzCode = !!mrzDocCode && mrzDocCode !== 'P';
-  if (hasIdCardMrzCode) {
+  const isIdFront =
+    detectedDocumentType === 'ID_FRONT' || currentFrameDocType === 'ID_FRONT';
+  if (hasIdCardMrzCode || isIdFront) {
     return 'SCAN_ID_BACK';
   }
 

package/src/Shared/Components/IdentityDocumentCamera.tsx

@@ -1731,12 +1731,16 @@ const IdentityDocumentCamera = ({
         // Fall back to the previously locked face (ref) when the live frame's face
         // was rejected — the torch is on during hologram capture, so faceImageToUse
         // is frequently null even though a valid face was locked during the front
-        // scan. Without this the gate's face requirement could never be satisfied.
+        // scan.
         const faceForCompletion = faceImageToUse ?? currentFaceImageRef.current;
+        // The face must NOT gate completion: if the front-scan face capture
+        // failed, currentFaceImageRef is null and the live frame's face is
+        // routinely rejected under the hologram torch — requiring a face here
+        // would wedge the user on the hologram step forever even after a valid
+        // hologram is captured or retries are exhausted. Attach the face if we
+        // have one (below), but advance regardless.
         const stepComplete =
-          (!!scannedData.hologramImage ||
-            (maxRetriesReached && !isCollecting)) &&
-          !!faceForCompletion; // Require face before completing
+          !!scannedData.hologramImage || (maxRetriesReached && !isCollecting);
 
         if (stepComplete) {
           // Make sure the locked face rides along even if this frame's face was

package/src/Shared/Components/NavigationManager.tsx

@@ -37,6 +37,12 @@ const NavigationManager = forwardRef(
     const appContext = useContext(AppContext);
     const navigation = useNavigation();
     const { t } = useTranslation();
+    // Track the lock-release timer so we can cancel it on unmount. Without this
+    // the timer is orphaned, and the shared module-level navigationLock relies
+    // solely on the focus/unmount resets below to clear `isNavigating`.
+    const lockReleaseTimer = React.useRef<ReturnType<
+      typeof setTimeout
+    > | null>(null);
 
     const routes = {
       VERIFICATION_SESSION_CHECK: 'VerificationSessionCheckScreen',
@@ -60,14 +66,23 @@ const NavigationManager = forwardRef(
 
       return () => {
         navigation.removeListener('focus', handleFocus);
+        // Fully release the shared lock on unmount so a navigation started by
+        // this (now gone) screen can never strand the next screen: clear both
+        // the flag and the rate-limit timestamp, and cancel the pending timer.
         navigationLock.isNavigating = false;
+        navigationLock.lastNavigationTime = 0;
+        if (lockReleaseTimer.current) {
+          clearTimeout(lockReleaseTimer.current);
+          lockReleaseTimer.current = null;
+        }
       };
     }, [navigation]);
 
     const getNextRoute = useCallback(
       (
         workflowSteps?: WorkflowStep[],
-        currentWorkFlowStep?: WorkflowStep
+        currentWorkFlowStep?: WorkflowStep,
+        outcome: 'success' | 'skipped' = 'success'
       ): string => {
         // If this was a debug navigation, go directly to result screen
         if (appContext.isDebugNavigated) {
@@ -88,12 +103,13 @@ const NavigationManager = forwardRef(
             ? workflowSteps[currentStepIndex + 1]
             : null;
 
-        // Diagnostics: advancing past the current step means it completed. Record
-        // its outcome (success — the user moved on) and start-time the next step,
-        // so the report captures the WHOLE flow, not just the NFC read.
+        // Diagnostics: advancing past the current step records its outcome —
+        // 'success' on a normal advance, 'skipped' when the user used the skip
+        // button — and start-times the next step, so the report captures the
+        // WHOLE flow, not just the NFC read.
         const now = Date.now();
         if (currentWorkFlowStep?.type) {
-          diagnostics.stepEnded(currentWorkFlowStep.type, 'success', now);
+          diagnostics.stepEnded(currentWorkFlowStep.type, outcome, now);
         }
 
         if (!nextStep) {
@@ -145,7 +161,8 @@ const NavigationManager = forwardRef(
       ]
     );
 
-    const goToNextRoute = useCallback(() => {
+    const goToNextRoute = useCallback(
+      (outcome: 'success' | 'skipped' = 'success') => {
       const currentTime = Date.now();
       const minTimeBetweenNavigation = 1000;
 
@@ -163,7 +180,8 @@ const NavigationManager = forwardRef(
       try {
         const nextRoute = getNextRoute(
           appContext.workflowSteps,
-          appContext.currentWorkflowStep
+          appContext.currentWorkflowStep,
+          outcome
         );
 
         navigation.dispatch(
@@ -179,15 +197,21 @@ const NavigationManager = forwardRef(
         throw error;
       }
 
-      setTimeout(() => {
+      if (lockReleaseTimer.current) {
+        clearTimeout(lockReleaseTimer.current);
+      }
+      lockReleaseTimer.current = setTimeout(() => {
         navigationLock.isNavigating = false;
+        lockReleaseTimer.current = null;
       }, 1000);
-    }, [
-      getNextRoute,
-      appContext.workflowSteps,
-      appContext.currentWorkflowStep,
-      navigation,
-    ]);
+      },
+      [
+        getNextRoute,
+        appContext.workflowSteps,
+        appContext.currentWorkflowStep,
+        navigation,
+      ]
+    );
 
     const goToNextRouteWithAlert = useCallback(() => {
       if (navigationLock.isNavigating) {
@@ -204,7 +228,7 @@ const NavigationManager = forwardRef(
           },
           {
             text: t('general.yes'),
-            onPress: goToNextRoute,
+            onPress: () => goToNextRoute('skipped'),
           },
         ]
       );
@@ -264,8 +288,12 @@ const NavigationManager = forwardRef(
         throw error;
       }
 
-      setTimeout(() => {
+      if (lockReleaseTimer.current) {
+        clearTimeout(lockReleaseTimer.current);
+      }
+      lockReleaseTimer.current = setTimeout(() => {
         navigationLock.isNavigating = false;
+        lockReleaseTimer.current = null;
       }, 1000);
     }, [appContext, navigation, routes.VERIFICATION_SESSION_CHECK]);
 

package/src/Shared/Libs/diagnostics.ts

@@ -210,7 +210,11 @@ export class DiagnosticsCollector {
 
   // ---- Workflow steps (whole-flow, not just NFC) ----
 
-  /** Mark a workflow step as started (records start time for duration). */
+  /**
+   * Mark a workflow step as started (records start time for duration).
+   * Re-starting a step that is already open just refreshes its start time
+   * (a re-render / re-entry of the same step is not a new step).
+   */
   stepStarted(step: string, nowMs: number): void {
     this.openSteps.set(step, nowMs);
   }
@@ -219,6 +223,12 @@ export class DiagnosticsCollector {
    * Record a step's outcome. Pairs with `stepStarted` for duration; if the step
    * was never started, durationMs is 0. `details` is a small non-PII bag of
    * step-specific signals (counts, flags, retries).
+   *
+   * IDEMPOTENT per open step: the navigation layer can call this more than once
+   * for the same logical transition (re-renders, the nav-lock window, a deferred
+   * navigate timer). We only record when the step is actually OPEN, then close
+   * it — a second call for an already-ended step is ignored instead of pushing a
+   * duplicate row into the report.
    */
   stepEnded(
     step: string,
@@ -227,12 +237,25 @@ export class DiagnosticsCollector {
     details?: WorkflowStepRecord['details']
   ): void {
     const startedAt = this.openSteps.get(step);
+    if (startedAt === undefined) {
+      // Not open: either already ended (duplicate call → ignore), or ended
+      // without a matching start. Allow a first record for a never-started step
+      // (durationMs 0), but suppress repeats of a step already in the log.
+      if (this.steps.some((s) => s.step === step)) return;
+      this.steps.push({
+        step,
+        outcome,
+        durationMs: 0,
+        details: details && Object.keys(details).length ? details : undefined,
+      });
+      return;
+    }
     this.openSteps.delete(step);
     this.steps.push({
       step,
       outcome,
       // `startedAt` can legitimately be 0 (session t0), so check for undefined.
-      durationMs: startedAt !== undefined ? Math.max(0, nowMs - startedAt) : 0,
+      durationMs: Math.max(0, nowMs - startedAt),
       details: details && Object.keys(details).length ? details : undefined,
     });
   }
@@ -326,6 +349,18 @@ export class DiagnosticsCollector {
 
   /** Build the serialisable snapshot. */
   snapshot(nowMs: number, isoNow: string): DiagnosticsSnapshot {
+    // Any step that was started but never ended is one the user stopped on / the
+    // flow was abandoned at — surface it as 'skipped' (with its elapsed time) so
+    // the report shows the WHOLE journey instead of silently dropping the final,
+    // incomplete step. Appended in start order, after the recorded steps.
+    const openStepRecords: WorkflowStepRecord[] = Array.from(
+      this.openSteps.entries()
+    ).map(([step, startedAt]) => ({
+      step,
+      outcome: 'skipped' as const,
+      durationMs: Math.max(0, nowMs - startedAt),
+    }));
+
     return {
       schemaVersion: 2,
       generatedAt: isoNow,
@@ -334,7 +369,7 @@ export class DiagnosticsCollector {
       totalDurationMs: this.startedAtMs
         ? Math.max(0, nowMs - this.startedAtMs)
         : 0,
-      steps: this.steps.map((s) => ({
+      steps: [...this.steps, ...openStepRecords].map((s) => ({
         ...s,
         details: s.details ? { ...s.details } : undefined,
       })),

package/src/version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.495.6';
+export const SDK_VERSION = '1.495.8';