@trustchex/react-native-sdk 1.500.2 → 1.501.1

package/lib/typescript/src/Shared/Components/EIDScanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EIDScanner.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/EIDScanner.tsx"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAyBpD,UAAU,eAAe;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,SAAS,EAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,KACtB,IAAI,CAAC;IACV,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C;AAED,QAAA,MAAM,UAAU,GAAI,6FAOjB,eAAe,4CAg3BjB,CAAC;AAsOF,eAAe,UAAU,CAAC"}
+{"version":3,"file":"EIDScanner.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/EIDScanner.tsx"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA6BpD,UAAU,eAAe;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,SAAS,EAClB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,KACtB,IAAI,CAAC;IACV,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/C;AAED,QAAA,MAAM,UAAU,GAAI,2GAQjB,eAAe,4CAw6BjB,CAAC;AAsOF,eAAe,UAAU,CAAC"}

package/lib/typescript/src/Shared/Components/NavigationManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NavigationManager.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/NavigationManager.tsx"],"names":[],"mappings":"AAAA,OAAO,KAKN,MAAM,OAAO,CAAC;AAoBf,MAAM,MAAM,oBAAoB,GAAG;IACjC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,QAAA,MAAM,iBAAiB,wFAgStB,CAAC;AAaF,eAAe,iBAAiB,CAAC"}
+{"version":3,"file":"NavigationManager.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/NavigationManager.tsx"],"names":[],"mappings":"AAAA,OAAO,KAKN,MAAM,OAAO,CAAC;AAoBf,MAAM,MAAM,oBAAoB,GAAG;IACjC,kBAAkB,EAAE,MAAM,IAAI,CAAC;IAC/B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,QAAA,MAAM,iBAAiB,wFAsStB,CAAC;AAaF,eAAe,iBAAiB,CAAC"}

package/lib/typescript/src/Shared/EIDReader/eidReader.d.ts

@@ -1,10 +1,23 @@
 import { MRZInfo } from './lds/icao/mrzInfo';
-declare const eidReader: (documentNumber: string, dateOfBirth: string, dateOfExpiry: string, progressCallback?: (progress: number) => void) => Promise<{
+declare const eidReader: (documentNumber: string, dateOfBirth: string, dateOfExpiry: string, progressCallback?: (progress: number) => void, options?: {
+    passiveAuth?: boolean;
+}) => Promise<{
     mrz?: MRZInfo;
     faceImage: string;
     mimeType: string;
     dg11FirstName: string | null;
     dg11LastName: string | null;
+    dg11Address: string | null;
+    /**
+     * Passive Authentication result (ICAO 9303-11 §5.1), present only when
+     * options.passiveAuth was set. `integrity` is the on-device DG-hash check;
+     * `sodBase64` is the raw EF.SOD for server-side signature + CSCA chaining.
+     */
+    passiveAuth?: {
+        integrity: import("./passiveAuth/integrity").IntegrityReport | null;
+        sodBase64: string | null;
+        error?: string;
+    };
 } | undefined>;
 export { eidReader };
 //# sourceMappingURL=eidReader.d.ts.map

package/lib/typescript/src/Shared/EIDReader/eidReader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"eidReader.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/EIDReader/eidReader.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AA2Y7C,QAAA,MAAM,SAAS,GACb,gBAAgB,MAAM,EACtB,aAAa,MAAM,EACnB,cAAc,MAAM,EACpB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,KAC5C,OAAO,CACN;IACE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GACD,SAAS,CAyYZ,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"eidReader.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/EIDReader/eidReader.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AA2Y7C,QAAA,MAAM,SAAS,GACb,gBAAgB,MAAM,EACtB,aAAa,MAAM,EACnB,cAAc,MAAM,EACpB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EAC7C,UAAU;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,KAClC,OAAO,CACN;IACE,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE;QACZ,SAAS,EAAE,OAAO,yBAAyB,EAAE,eAAe,GAAG,IAAI,CAAC;QACpE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH,GACD,SAAS,CAocZ,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/lib/typescript/src/Shared/EIDReader/java/inputStream.d.ts

@@ -17,5 +17,8 @@ export declare abstract class InputStream {
     reset(): void;
     close(): void;
     static onRead(listener: (totalBytesRead: number, fileLength: number) => void): void;
+    /** Remove all progress listeners (e.g. before post-read passes that must not
+     *  drive the visible progress bar, like the Passive Auth SOD/DG re-reads). */
+    static clearListeners(): void;
 }
 //# sourceMappingURL=inputStream.d.ts.map

package/lib/typescript/src/Shared/EIDReader/java/inputStream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inputStream.d.ts","sourceRoot":"","sources":["../../../../../../src/Shared/EIDReader/java/inputStream.ts"],"names":[],"mappings":"AAAA,8BAAsB,WAAW;IAE/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA+B;IAEtE,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAC3B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,KACf,IAAI,CAAC,EAAE,CAAM;IAElB,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAInC,mBAAmB,CACvB,CAAC,EAAE,UAAU,EACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC;IAqClB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;IAI7B,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmDnD,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBpE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBhC,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1C,aAAa,IAAI,OAAO;IAIxB,IAAI,CAAC,UAAU,EAAE,MAAM;IAEvB,SAAS;IAIT,KAAK;IAEL,KAAK;IAEL,MAAM,CAAC,MAAM,CACX,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI;CAIjE"}
+{"version":3,"file":"inputStream.d.ts","sourceRoot":"","sources":["../../../../../../src/Shared/EIDReader/java/inputStream.ts"],"names":[],"mappings":"AAAA,8BAAsB,WAAW;IAE/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAQ;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAA+B;IAEtE,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAC3B,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,KACf,IAAI,CAAC,EAAE,CAAM;IAElB,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhC,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAInC,mBAAmB,CACvB,CAAC,EAAE,UAAU,EACb,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,CAAC;IAqClB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC;IAI7B,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmDnD,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBpE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyBhC,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1C,aAAa,IAAI,OAAO;IAIxB,IAAI,CAAC,UAAU,EAAE,MAAM;IAEvB,SAAS;IAIT,KAAK;IAEL,KAAK;IAEL,MAAM,CAAC,MAAM,CACX,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI;IAKhE;kFAC8E;IAC9E,MAAM,CAAC,cAAc;CAGtB"}

package/lib/typescript/src/Shared/EIDReader/lds/icao/dg11File.d.ts

@@ -3,28 +3,41 @@ import { DataGroup } from '../dataGroup';
 /**
  * DG11 — Additional Personal Data (ICAO 9303-10 §4.6.6).
  *
- * We only extract tag 0x5F0E (Name of Holder), which contains the full name
- * exactly as printed on the document, in UTF-8, using the same `<<` primary/
- * secondary delimiter as the MRZ (but with native Unicode characters).
+ * We extract:
+ *  - tag 0x5F0E (Name of Holder) — full name as printed, UTF-8, `<<` primary/
+ *    secondary delimiter like the MRZ but with native Unicode.
+ *    Example: "ÖZTÜRK<<GÖKHAN MEHMET" → lastName="ÖZTÜRK", firstName="GÖKHAN MEHMET"
+ *  - tag 0x5F42 (Permanent Address) — the holder's address as printed/stored,
+ *    free-form, components delimited by `<` (used for MASAK 4/C(1)(d) address
+ *    pre-fill where the chip provides it; e.g. Turkish eID).
  *
- * Example: "ÖZTÜRK<<GÖKHAN MEHMET" → lastName="ÖZTÜRK", firstName="GÖKHAN MEHMET"
- *
- * The file is optional on the chip — if absent or unreadable we return null
- * so the caller can fall back to reverse transliteration.
+ * Every field is optional on the chip — absent fields stay null so the caller
+ * can fall back (reverse transliteration for the name, manual entry for the
+ * address).
  */
 export declare class DG11File extends DataGroup {
     private static readonly DG11_TAG;
     private static readonly TAG_LIST_TAG;
     private static readonly NAME_OF_HOLDER_TAG;
+    private static readonly PERMANENT_ADDRESS_TAG;
     private firstName;
     private lastName;
+    private address;
     constructor(is?: InputStream);
     /** Returns the first name from DG11, or null if not present. */
     getFirstName(): string | null;
     /** Returns the last name from DG11, or null if not present. */
     getLastName(): string | null;
+    /** Returns the permanent address from DG11, or null if not present. */
+    getAddress(): string | null;
     read(): Promise<void>;
     protected readContent(inputStream: InputStream): Promise<void>;
+    /**
+     * Normalize a DG11 permanent-address value. Components are delimited by `<`
+     * (single = field separator, double = stronger break); convert to a single
+     * comma-separated line, dropping filler.
+     */
+    private parseAddress;
     protected writeContent(): void;
     /**
      * Split "PRIMARY<<SECONDARY" into last/first name components.

package/lib/typescript/src/Shared/EIDReader/lds/icao/dg11File.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dg11File.d.ts","sourceRoot":"","sources":["../../../../../../../src/Shared/EIDReader/lds/icao/dg11File.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;;;;;;;;;GAWG;AACH,qBAAa,QAAS,SAAQ,SAAS;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAC5C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAEpD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAuB;gBAE3B,EAAE,CAAC,EAAE,WAAW;IAI5B,gEAAgE;IAChE,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B,+DAA+D;IAC/D,WAAW,IAAI,MAAM,GAAG,IAAI;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;cAIX,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBpE,SAAS,CAAC,YAAY,IAAI,IAAI;IAI9B;;;OAGG;IACH,OAAO,CAAC,SAAS;CAgClB"}
+{"version":3,"file":"dg11File.d.ts","sourceRoot":"","sources":["../../../../../../../src/Shared/EIDReader/lds/icao/dg11File.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC;;;;;;;;;;;;;;GAcG;AACH,qBAAa,QAAS,SAAQ,SAAS;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACxC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAQ;IAC5C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAEvD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,OAAO,CAAuB;gBAE1B,EAAE,CAAC,EAAE,WAAW;IAI5B,gEAAgE;IAChE,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B,+DAA+D;IAC/D,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,uEAAuE;IACvE,UAAU,IAAI,MAAM,GAAG,IAAI;IAIrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;cAIX,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CpE;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAUpB,SAAS,CAAC,YAAY,IAAI,IAAI;IAI9B;;;OAGG;IACH,OAAO,CAAC,SAAS;CAgClB"}

package/lib/typescript/src/Shared/EIDReader/passiveAuth/der.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Minimal DER (ASN.1) reader for Passive Authentication parsing (ICAO 9303-11
+ * §5.1). Purpose-built and dependency-free so the EF.SOD / LDSSecurityObject
+ * parse is fully unit-testable offline. Only the constructs PA needs are
+ * supported: SEQUENCE, SET, INTEGER, OCTET STRING, OID, and tagged wrappers.
+ */
+export interface DerNode {
+    /** Raw first tag byte (class + constructed bit + number for low tags). */
+    tag: number;
+    /** Tag number with class/constructed bits masked off (low-tag form only). */
+    tagNumber: number;
+    /** True if the constructed bit (0x20) is set. */
+    constructed: boolean;
+    /** Value bytes (content octets), excluding tag and length. */
+    content: Uint8Array;
+    /** Offset of this node's first tag byte within the parent buffer. */
+    start: number;
+    /** Offset just past this node's content (start of the next sibling). */
+    end: number;
+}
+/** Read the TLV node starting at `offset` in `buf`. */
+export declare function readNode(buf: Uint8Array, offset: number): DerNode;
+/** Read all immediate child TLVs of a constructed node's content. */
+export declare function readChildren(content: Uint8Array): DerNode[];
+/** Decode an OID node's content to dotted-decimal string. */
+export declare function decodeOid(content: Uint8Array): string;
+/** Decode an INTEGER node's content to a JS number (small values only). */
+export declare function decodeInteger(content: Uint8Array): number;
+/** Lowercase hex string for a byte array. */
+export declare function toHex(bytes: Uint8Array): string;
+//# sourceMappingURL=der.d.ts.map

package/lib/typescript/src/Shared/EIDReader/passiveAuth/der.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"der.d.ts","sourceRoot":"","sources":["../../../../../../src/Shared/EIDReader/passiveAuth/der.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,OAAO;IACtB,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,WAAW,EAAE,OAAO,CAAC;IACrB,8DAA8D;IAC9D,OAAO,EAAE,UAAU,CAAC;IACpB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,uDAAuD;AACvD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CA0CjE;AAED,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,EAAE,CAS3D;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAerD;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAIzD;AAED,6CAA6C;AAC7C,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAI/C"}

package/lib/typescript/src/Shared/EIDReader/passiveAuth/integrity.d.ts

@@ -0,0 +1,31 @@
+import type { SodSecurityObject } from './sodParser';
+/**
+ * On-device Passive Authentication integrity check (ICAO 9303-11 §5.1, step 3).
+ * Recompute the hash of each raw data-group the chip returned and compare it to
+ * the hash the issuer signed into EF.SOD. A mismatch means the data was altered
+ * after signing → TAMPERED. This runs offline, with no trust store; SOD
+ * signature + CSCA chaining is verified server-side.
+ */
+export type IntegrityStatus = 'MATCH' | 'TAMPERED' | 'INCOMPLETE';
+export interface DgIntegrityResult {
+    dataGroup: number;
+    expectedHash: string;
+    actualHash: string;
+    matched: boolean;
+}
+export interface IntegrityReport {
+    status: IntegrityStatus;
+    digestAlgorithm: string;
+    /** Per-DG comparison for the data groups we actually read. */
+    results: DgIntegrityResult[];
+    /** DG numbers present in the SOD that we did not read (cannot verify). */
+    unverified: number[];
+}
+/**
+ * Compare the raw bytes of each read data group against the SOD's hash list.
+ *
+ * @param sod          parsed LDSSecurityObject (digest alg + per-DG hashes)
+ * @param rawDataGroups map of DG number → exact wire bytes read from the chip
+ */
+export declare function checkIntegrity(sod: SodSecurityObject, rawDataGroups: Record<number, Uint8Array>): IntegrityReport;
+//# sourceMappingURL=integrity.d.ts.map

package/lib/typescript/src/Shared/EIDReader/passiveAuth/integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity.d.ts","sourceRoot":"","sources":["../../../../../../src/Shared/EIDReader/passiveAuth/integrity.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD;;;;;;GAMG;AAEH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,UAAU,GAAG,YAAY,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,0EAA0E;IAC1E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAmBD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,iBAAiB,EACtB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GACxC,eAAe,CAsCjB"}

package/lib/typescript/src/Shared/EIDReader/passiveAuth/sodParser.d.ts

@@ -0,0 +1,12 @@
+export interface SodSecurityObject {
+    /** Digest algorithm name, e.g. "SHA-256". */
+    digestAlgorithm: string;
+    /** Per-DG hashes from the SOD: dataGroupNumber → lowercase hex hash. */
+    dataGroupHashes: Record<number, string>;
+}
+/**
+ * Parse the EF.SOD bytes (with or without the outer 0x77 application wrapper).
+ * Throws on a malformed structure.
+ */
+export declare function parseSod(sodBytes: Uint8Array): SodSecurityObject;
+//# sourceMappingURL=sodParser.d.ts.map

package/lib/typescript/src/Shared/EIDReader/passiveAuth/sodParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sodParser.d.ts","sourceRoot":"","sources":["../../../../../../src/Shared/EIDReader/passiveAuth/sodParser.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAaD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,iBAAiB,CA4ChE"}

package/lib/typescript/src/Shared/Libs/chipVizMatch.d.ts

@@ -0,0 +1,68 @@
+import type { DocumentData } from '../Types/documentData';
+/**
+ * Verdict of comparing the NFC chip-read (DG1) identity data against the
+ * camera-OCR-read (printed / VIZ) identity data.
+ *
+ * Required by MASAK Tebliğ No. 32, Article 4/C(1)(b): for remote identity
+ * verification of non-Turkish nationals via NFC passport, the chip data must be
+ * verified — via NFC — to match the data printed on the passport. If it cannot
+ * be verified (`MISMATCH` or `UNVERIFIABLE`), no business relationship may be
+ * established through the remote flow.
+ *
+ * - `MATCH`        — every identity-critical field is equal.
+ * - `MISMATCH`     — at least one identity-critical field differs.
+ * - `UNVERIFIABLE` — one of the two sources is missing, so no comparison is possible.
+ */
+export type ChipVizVerdict = 'MATCH' | 'MISMATCH' | 'UNVERIFIABLE';
+/** Why a comparison came back `UNVERIFIABLE`. */
+export type ChipVizUnverifiableReason = 'missing-ocr-source' | 'missing-chip-source';
+export interface ChipVizMatchResult {
+    verdict: ChipVizVerdict;
+    /**
+     * Fields that differed (empty on `MATCH` / `UNVERIFIABLE`). Used for
+     * diagnostics and server-side review — never surfaced to the user, to avoid
+     * coaching fraud.
+     */
+    mismatchedFields: Array<keyof DocumentData>;
+    /** Present only when `verdict === 'UNVERIFIABLE'`. */
+    reason?: ChipVizUnverifiableReason;
+}
+export interface ChipVizCompareOptions {
+    /**
+     * When `true`, a difference in the raw MRZ name (first/last) alone flips the
+     * verdict to `MISMATCH`. When `false` (default), name differences are
+     * recorded in `mismatchedFields` but do not by themselves cause a mismatch —
+     * a single-character OCR slip on a name should not hard-block on its own.
+     * The identity-critical fields below always drive the verdict regardless.
+     */
+    strictNames?: boolean;
+    /**
+     * Raw MRZ ASCII names (OCR-B, before Unicode/DG11 display conversion). The
+     * normalized `DocumentData.firstName/lastName` are overwritten with the
+     * display form in the read path, so the raw forms must be passed in
+     * explicitly for an apples-to-apples comparison.
+     */
+    chipName?: {
+        first: string;
+        last: string;
+    };
+    vizName?: {
+        first: string;
+        last: string;
+    };
+}
+/**
+ * Compare the chip-read (DG1) document data against the OCR-read (printed/VIZ)
+ * document data and produce a match verdict.
+ *
+ * Both inputs are the normalized {@link DocumentData} shape, so they are
+ * directly comparable regardless of which read path produced them. Pass raw MRZ
+ * names via {@link ChipVizCompareOptions} — the `firstName`/`lastName` on
+ * `DocumentData` may already be the Unicode display form, which legitimately
+ * diverges between paths and would cause false mismatches.
+ *
+ * @param chip Chip-read data (from `normalizeFromMRZInfo`), or `undefined` if NFC did not complete.
+ * @param viz  OCR-read data (from `normalizeFromMRZFields`), or `undefined` if no OCR step ran.
+ */
+export declare function compareChipToViz(chip: DocumentData | undefined, viz: DocumentData | undefined, options?: ChipVizCompareOptions): ChipVizMatchResult;
+//# sourceMappingURL=chipVizMatch.d.ts.map

package/lib/typescript/src/Shared/Libs/chipVizMatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chipVizMatch.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/chipVizMatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;AAEnE,iDAAiD;AACjD,MAAM,MAAM,yBAAyB,GACjC,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,cAAc,CAAC;IACxB;;;;OAIG;IACH,gBAAgB,EAAE,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC;IAC5C,sDAAsD;IACtD,MAAM,CAAC,EAAE,yBAAyB,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AA8BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,GAAG,EAAE,YAAY,GAAG,SAAS,EAC7B,OAAO,GAAE,qBAA0B,GAClC,kBAAkB,CAiDpB"}

package/lib/typescript/src/Shared/Libs/country-allow.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Country allow-list check for a workflow step's `allowedCountries`.
+ *
+ * Semantics (mirrors the server engine): an empty or unset list means ALL
+ * countries are allowed; a non-empty list allows ONLY those ICAO-3 codes.
+ * Matching is case-insensitive. `allowedCountries` carries any ICAO-3 code
+ * (server-driven), so the client treats the values as opaque strings.
+ */
+export declare function isCountryAllowed(issuingState: string | null | undefined, allowedCountries: string[] | null | undefined): boolean;
+//# sourceMappingURL=country-allow.d.ts.map

package/lib/typescript/src/Shared/Libs/country-allow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"country-allow.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/country-allow.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC5C,OAAO,CAKT"}

package/lib/typescript/src/Shared/Libs/documentDataNormalizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documentDataNormalizer.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/documentDataNormalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAoE7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAgB/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,YAAY,CAatE"}
+{"version":3,"file":"documentDataNormalizer.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/documentDataNormalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAiF7D;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAgB/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,YAAY,CAatE"}

package/lib/typescript/src/Shared/Libs/geolocation.utils.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Coarse geolocation capture for the MASAK Tebliğ No. 32 Article 4/C(1)(e)
+ * technical-data requirement. Invoked when a workflow step enables
+ * collectGeolocation.
+ *
+ * Implemented entirely with the platform's native location framework via the
+ * SDK's own native modules (iOS Core Location through PermissionModule, Android
+ * LocationManager through GeolocationModule) — no third-party module. The host
+ * app must declare the OS permission strings (iOS
+ * `NSLocationWhenInUseUsageDescription`, Android `ACCESS_COARSE_LOCATION`).
+ *
+ * Everything is fail-soft: if the native module is missing, services are off,
+ * permission is denied, or the fix times out, this returns null and the flow
+ * proceeds — the backend treats a missing geolocation as "not provided".
+ *
+ * @returns "lat,lng" rounded to ~city-block precision (~110 m), or null.
+ */
+export declare function captureCoarseGeolocation(timeoutMs?: number): Promise<string | null>;
+//# sourceMappingURL=geolocation.utils.d.ts.map

package/lib/typescript/src/Shared/Libs/geolocation.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geolocation.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/geolocation.utils.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,SAAO,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB"}

package/lib/typescript/src/Shared/Libs/promise.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promise.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/promise.utils.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,YAAY,GAAU,CAAC,EAC3B,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,aAAY,MAAU,EACtB,QAAO,MAAa,KACnB,OAAO,CAAC,CAAC,CAgCX,CAAC;AAEF,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"promise.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/promise.utils.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,YAAY,GAAU,CAAC,EAC3B,IAAI,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,aAAY,MAAU,EACtB,QAAO,MAAa,KACnB,OAAO,CAAC,CAAC,CA2CX,CAAC;AAEF,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/lib/typescript/src/Shared/Services/DataUploadService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DataUploadService.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Services/DataUploadService.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAQhE;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,EAAE,MAAM;YAKb,0BAA0B;IAexC;;OAEG;IACG,kBAAkB,CACtB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,uBAAuB,EACxC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC;IA8DhB;;OAEG;IACG,WAAW,CACf,gBAAgB,EAAE,MAAM,EACxB,eAAe,CAAC,EAAE,uBAAuB,EACzC,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GACtC,OAAO,CAAC,IAAI,CAAC;IAmLhB;;OAEG;IACG,mBAAmB,CACvB,kBAAkB,EAAE,kBAAkB,EACtC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EACvC,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,OAAO,CAAC;IAuGnB,OAAO,CAAC,iBAAiB;CAY1B"}
+{"version":3,"file":"DataUploadService.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Services/DataUploadService.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAQhE;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,EAAE,MAAM;YAKb,0BAA0B;IAexC;;OAEG;IACG,kBAAkB,CACtB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,uBAAuB,EACxC,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,IAAI,CAAC;IAqFhB;;OAEG;IACG,WAAW,CACf,gBAAgB,EAAE,MAAM,EACxB,eAAe,CAAC,EAAE,uBAAuB,EACzC,iBAAiB,CAAC,EAAE,iBAAiB,EACrC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GACtC,OAAO,CAAC,IAAI,CAAC;IAmLhB;;OAEG;IACG,mBAAmB,CACvB,kBAAkB,EAAE,kBAAkB,EACtC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,EACvC,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,OAAO,CAAC;IAuGnB,OAAO,CAAC,iBAAiB;CAY1B"}

package/lib/typescript/src/Shared/Types/documentData.d.ts

@@ -40,5 +40,12 @@ export interface DocumentData {
      * Null if the document does not encode it.
      */
     dateOfExpiry: string | null;
+    /**
+     * Holder's permanent address as read from the chip's DG11 (NFC path only),
+     * normalized to a comma-separated line. Null when the chip does not provide
+     * it (most passports) or on the OCR path. Used to pre-fill the address step
+     * (MASAK 4/C(1)(d)).
+     */
+    address?: string | null;
 }
 //# sourceMappingURL=documentData.d.ts.map

package/lib/typescript/src/Shared/Types/documentData.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documentData.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/documentData.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,YAAY,EAAE,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;IAEjC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IAEvB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IAEpB,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC;IAEvB,kGAAkG;IAClG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IAEjB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAE3B;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B"}
+{"version":3,"file":"documentData.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/documentData.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,YAAY,EAAE,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;IAEjC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IAEvB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IAEpB,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC;IAEvB,kGAAkG;IAClG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAE9B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IAEjB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAE3B;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;OAGG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB"}

package/lib/typescript/src/Shared/Types/documentReadResult.d.ts

@@ -1,4 +1,5 @@
 import type { DocumentData } from './documentData';
+import type { ChipVizMatchResult } from '../Libs/chipVizMatch';
 /**
  * How the display name was derived from the raw MRZ ASCII name.
  *
@@ -40,5 +41,24 @@ export interface DocumentReadResult {
      * face image was successfully obtained.
      */
     face?: DocumentFaceImage;
+    /**
+     * Result of comparing this chip read against a prior camera-OCR (printed/VIZ)
+     * read, when one is available. Present only on the NFC path in the
+     * MASAK 4/C remote-passport flow. The client verdict is advisory — the server
+     * re-derives the authoritative verdict from the uploaded fields.
+     */
+    chipVizMatch?: ChipVizMatchResult;
+    /**
+     * Passive Authentication result (ICAO 9303-11 §5.1), present only on the NFC
+     * path when the eID step enabled passiveAuth. `integrityStatus` is the
+     * on-device DG-hash check (MATCH/TAMPERED/INCOMPLETE); full signature + CSCA
+     * verification is performed server-side from the SOD.
+     */
+    passiveAuth?: {
+        integrityStatus: 'MATCH' | 'TAMPERED' | 'INCOMPLETE' | null;
+        /** Raw EF.SOD (base64) for server-side signature + CSCA chaining. */
+        sodBase64?: string | null;
+        error?: string;
+    };
 }
 //# sourceMappingURL=documentReadResult.d.ts.map

package/lib/typescript/src/Shared/Types/documentReadResult.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"documentReadResult.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/documentReadResult.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,eAAe,GAAG,KAAK,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;OAIG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;CAC1B"}
+{"version":3,"file":"documentReadResult.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/documentReadResult.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,eAAe,GAAG,KAAK,CAAC;AAElE,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;OAIG;IACH,IAAI,EAAE,YAAY,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE;QACZ,eAAe,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;QAC5D,qEAAqE;QACrE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH"}

package/lib/typescript/src/Shared/Types/identificationInfo.d.ts

@@ -1,13 +1,27 @@
 import type { MRZFields } from './mrzFields';
 import type { LivenessInstructionType } from './livenessIntructionType';
+import type { ChipVizMatchResult } from '../Libs/chipVizMatch';
 export interface IdentificationInfo {
     sessionId: string;
     identificationId: string;
     consent: {
         contractIds: string[];
         deviceInfo: string;
+        /**
+         * Coarse device geolocation ("lat,lng"), captured when a workflow step
+         * enables collectGeolocation (MASAK §4/C(1)(e) technical data). Optional —
+         * null/absent when not collected or unavailable.
+         */
+        geolocation?: string | null;
+        /**
+         * True when the workflow step required geolocation (collectGeolocation). Lets
+         * the server raise a suspicion signal if geolocation came back null.
+         */
+        geolocationExpected?: boolean;
     };
     scannedDocument?: ScannedIdentityDocument;
+    /** Captured address + proof document (MASAK 4/C(1)(d) ADDRESS_CAPTURE step). */
+    address?: CapturedAddress;
     livenessDetection?: LivenessDetection;
     locale: string;
     authToken?: string;
@@ -33,6 +47,25 @@ export interface ScannedIdentityDocument {
     barcodeValue?: string;
     mrzText?: string;
     mrzFields?: MRZFields;
+    /**
+     * The printed/VIZ MRZ from the camera scan, preserved separately from
+     * mrzFields (which the EID path overwrites with the chip MRZ). Sent to the
+     * backend so it can independently re-derive the chip↔VIZ match (MASAK 4/C).
+     */
+    vizMrzFields?: MRZFields;
+    /**
+     * The client-side chip↔VIZ match verdict. Advisory — the server re-derives
+     * the authoritative verdict. Recorded for every EID scan as a security signal.
+     */
+    chipVizMatch?: ChipVizMatchResult;
+    /**
+     * Passive Authentication artifacts (ICAO 9303-11 §5.1), present only when the
+     * eID step ran with passiveAuth. `paSodBase64` is the raw EF.SOD for
+     * server-side signature + CSCA chaining; `paIntegrityStatus` is the
+     * on-device DG-hash check.
+     */
+    paSodBase64?: string | null;
+    paIntegrityStatus?: 'MATCH' | 'TAMPERED' | 'INCOMPLETE' | null;
 }
 export interface LivenessDetection {
     instructions: {
@@ -41,9 +74,25 @@ export interface LivenessDetection {
     }[];
     videoPath: string;
 }
+/**
+ * Address captured in the ADDRESS_CAPTURE step (MASAK 4/C(1)(d)). The text may
+ * be pre-filled from the chip's DG11 address and edited by the user. The proof
+ * image is a photo/scan of a supporting document (residence cert, utility bill
+ * ≤3 months, public-authority doc).
+ */
+export interface CapturedAddress {
+    /** Free-form address line(s) as entered/confirmed by the user. */
+    addressText: string;
+    /** True when the addressText was pre-filled from the chip's DG11 address. */
+    fromChip: boolean;
+    /** Base64 proof-document image (no data-URI prefix), if captured. */
+    proofImage?: string;
+    /** MIME type of proofImage, e.g. "image/jpeg". */
+    proofImageMimeType?: string;
+}
 export interface WorkflowStep {
     id?: string;
-    type: 'CONTRACT_ACCEPTANCE' | 'IDENTITY_DOCUMENT_SCAN' | 'IDENTITY_DOCUMENT_EID_SCAN' | 'LIVENESS_CHECK' | 'VERBAL_CONSENT' | 'AML_CHECK' | 'VIDEO_CALL';
+    type: 'CONTRACT_ACCEPTANCE' | 'IDENTITY_DOCUMENT_SCAN' | 'IDENTITY_DOCUMENT_EID_SCAN' | 'LIVENESS_CHECK' | 'VERBAL_CONSENT' | 'AML_CHECK' | 'VIDEO_CALL' | 'ADDRESS_CAPTURE';
     data?: {
         contracts?: {
             en: {
@@ -58,11 +107,55 @@ export interface WorkflowStep {
             };
         };
         allowedDocumentTypes?: ('I' | 'P')[] | null;
-        allowedCountries?: 'TUR'[] | null;
+        /** ICAO-3 allow-list of accepted document issuers/nationalities. Empty/unset
+         * = all allowed. Server-driven, so the client treats these as opaque codes. */
+        allowedCountries?: string[] | null;
         allowedLivenessInstructionTypes?: LivenessInstructionType[] | null;
         voiceGuidanceActive?: boolean;
         verbalConsentTitle?: string | null;
         verbalConsentText?: string | null;
+        /**
+         * Collect coarse device geolocation during this step (MASAK 4/C(1)(e)
+         * technical data). Server-driven per-step config; defaults to off.
+         */
+        collectGeolocation?: boolean;
+        /**
+         * Terminal-reject the identification server-side when the chip↔VIZ verdict
+         * is not MATCH (MASAK 4/C(1)(b)). Enforcement is SERVER-SIDE only — the
+         * client never blocks or surfaces the verdict to the user; it computes the
+         * verdict and sends it to the backend, which decides. Defaults to off.
+         */
+        enforceChipVizMatch?: boolean;
+        /**
+         * Whether a proof document is required in the ADDRESS_CAPTURE step
+         * (MASAK 4/C(1)(d)). Defaults to true; set false to allow address-only.
+         */
+        addressProofRequired?: boolean;
+        /**
+         * Run Passive Authentication on the eID scan (ICAO 9303-11 §5.1 / MASAK
+         * 4/C(1)(b),(c)): read EF.SOD, verify on-device DG-hash integrity, and send
+         * the SOD for server-side signature + CSCA chaining. Adds NFC time (re-reads
+         * SOD + DGs); defaults to off.
+         */
+        passiveAuth?: boolean;
+        /**
+         * Risky-country block (MASAK 4/C(3)): 3-letter ICAO nationality codes the
+         * obligated party may not accept via the remote-passport flow. Enforced
+         * server-side — a document whose nationality is on this list is rejected.
+         */
+        blockedNationalities?: string[];
+        /**
+         * Require a trained operator in the video interview (MASAK 4/C(1)(a)): the
+         * VIDEO_CALL step must have had an operator connected, not just completed.
+         * Enforced server-side. Defaults to off.
+         */
+        requireOperator?: boolean;
+        /**
+         * Terminal-reject the identification server-side when Passive Authentication
+         * comes back TAMPERED. Defaults to off (the verdict is recorded and
+         * withholds the step score, but does not hard-reject unless enabled).
+         */
+        enforcePassiveAuth?: boolean;
     };
     required: boolean;
 }

package/lib/typescript/src/Shared/Types/identificationInfo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identificationInfo.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/identificationInfo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EACA,qBAAqB,GACrB,wBAAwB,GACxB,4BAA4B,GAC5B,gBAAgB,GAChB,gBAAgB,GAChB,WAAW,GACX,YAAY,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE;YACV,EAAE,EAAE;gBACF,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,GAAG,EAAE,MAAM,CAAC;aACb,CAAC;YACF,EAAE,EAAE;gBACF,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,GAAG,EAAE,MAAM,CAAC;aACb,CAAC;SACH,CAAC;QACF,oBAAoB,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;QAC5C,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAClC,+BAA+B,CAAC,EAAE,uBAAuB,EAAE,GAAG,IAAI,CAAC;QACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB"}
+{"version":3,"file":"identificationInfo.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Types/identificationInfo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE;QACP,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B;;;WAGG;QACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,gFAAgF;IAChF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,IAAI,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,UAAU,EAAE,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB;;;OAGG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EACA,qBAAqB,GACrB,wBAAwB,GACxB,4BAA4B,GAC5B,gBAAgB,GAChB,gBAAgB,GAChB,WAAW,GACX,YAAY,GACZ,iBAAiB,CAAC;IACtB,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE;YACV,EAAE,EAAE;gBACF,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,GAAG,EAAE,MAAM,CAAC;aACb,CAAC;YACF,EAAE,EAAE;gBACF,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,GAAG,EAAE,MAAM,CAAC;aACb,CAAC;SACH,CAAC;QACF,oBAAoB,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC;QAC5C;uFAC+E;QAC/E,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACnC,+BAA+B,CAAC,EAAE,uBAAuB,EAAE,GAAG,IAAI,CAAC;QACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC;;;WAGG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAC7B;;;;;WAKG;QACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B;;;WAGG;QACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B;;;;;WAKG;QACH,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB;;;;WAIG;QACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAChC;;;;WAIG;QACH,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB"}

package/lib/typescript/src/Translation/Resources/en.d.ts

@@ -10,6 +10,8 @@ declare const _default: {
     'verificationSessionCheckScreen.or': string;
     'general.warning': string;
     'general.error': string;
+    'general.continue': string;
+    'general.cancel': string;
     'general.yes': string;
     'general.no': string;
     'general.letsGo': string;
@@ -24,6 +26,7 @@ declare const _default: {
     'termsOfUseAndDataPrivacyScreen.acceptAndContinue': string;
     'resultScreen.submitting': string;
     'resultScreen.submissionFailed': string;
+    'resultScreen.sessionTerminated': string;
     'resultScreen.submissionFailedTitle': string;
     'resultScreen.submissionFailedRetryHint': string;
     'resultScreen.retrySubmission': string;
@@ -90,10 +93,23 @@ declare const _default: {
     'eidScannerScreen.nfcAuthFailed': string;
     'eidScannerScreen.nfcTagLost': string;
     'eidScannerScreen.nfcTimeout': string;
+    'addressCaptureScreen.title': string;
+    'addressCaptureScreen.subtitle': string;
+    'addressCaptureScreen.prefilledFromChip': string;
+    'addressCaptureScreen.addressLabel': string;
+    'addressCaptureScreen.addressPlaceholder': string;
+    'addressCaptureScreen.proofLabel': string;
+    'addressCaptureScreen.proofHint': string;
+    'addressCaptureScreen.captureProof': string;
+    'addressCaptureScreen.retakeProof': string;
+    'addressCaptureScreen.proofCameraHint': string;
+    'addressCaptureScreen.capture': string;
     'eidScannerScreen.faceImageNotFound': string;
     'eidScannerScreen.documentCode': string;
     'eidScannerScreen.nationality': string;
     'eidScannerScreen.personalNumber': string;
+    'eidScannerScreen.address': string;
+    'eidScannerScreen.location': string;
     'eidScannerScreen.documentNumber': string;
     'eidScannerScreen.name': string;
     'eidScannerScreen.surname': string;

package/lib/typescript/src/Translation/Resources/en.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/en.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAySE"}
+{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/en.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBA8TE"}