@trustchex/react-native-sdk 1.501.0 → 1.502.0

package/lib/module/Screens/Dynamic/AddressCaptureScreen.js

@@ -1,7 +1,7 @@
 "use strict";
 
 import React, { useContext, useEffect, useRef, useState } from 'react';
-import { SafeAreaView, View, Text, TextInput, StyleSheet, ScrollView, Image, TouchableOpacity } from 'react-native';
+import { SafeAreaView, View, Text, StyleSheet, ScrollView, Image, TouchableOpacity } from 'react-native';
 import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import { useTranslation } from 'react-i18next';
 import { TrustchexCamera } from "../../Shared/Components/TrustchexCamera.js";
@@ -18,7 +18,7 @@ import { useKeepAwake } from "../../Shared/Libs/native-keep-awake.utils.js";
  * captures a proof document (residence cert / utility bill ≤3 months / public-
  * authority doc). The address is verified later by an operator (manual review).
  */
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 const AddressCaptureScreen = () => {
   useKeepAwake();
   useStatusBarWhiteBackground();
@@ -30,16 +30,14 @@ const AddressCaptureScreen = () => {
   } = useTranslation();
   const insets = useSafeAreaInsets();
 
-  // Pre-fill from the chip's DG11 address when the NFC read provided one.
-  const chipAddress = appContext.lastDocumentRead?.document.address ?? '';
-  const [addressText, setAddressText] = useState(chipAddress);
-  const [fromChip] = useState(!!chipAddress);
+  // The address text is NOT collected here — the chip's DG11 address (read on
+  // the NFC step) is the source of truth and is always sent. This step only
+  // collects a PROOF-DOCUMENT photo for the operator's manual review. We show
+  // the chip address read-only for context when available.
+  const chipAddress = appContext.identificationInfo.address?.addressText ?? appContext.lastDocumentRead?.document.address ?? '';
   const [proofImage, setProofImage] = useState();
   const [isCameraOpen, setIsCameraOpen] = useState(false);
   const captureNextFrame = useRef(false);
-
-  // Whether the proof document is required is configurable per workflow step.
-  const proofRequired = appContext.currentWorkflowStep?.data?.addressProofRequired !== false;
   useEffect(() => {
     trackVerificationStart('ADDRESS_CAPTURE');
   }, []);
@@ -52,11 +50,17 @@ const AddressCaptureScreen = () => {
       setIsCameraOpen(false);
     }
   };
-  const canContinue = addressText.trim().length > 0 && (!proofRequired || !!proofImage);
+
+  // A proof photo is the whole point of this step.
+  const canContinue = !!proofImage;
   const onContinue = () => {
+    // Attach the proof to the existing (chip-sourced) address without changing
+    // the address text or fromChip flag. If for some reason no address object
+    // exists yet, keep whatever chip text we have for display continuity.
+    const existing = appContext.identificationInfo.address;
     appContext.identificationInfo.address = {
-      addressText: addressText.trim(),
-      fromChip,
+      addressText: existing?.addressText ?? chipAddress,
+      fromChip: existing?.fromChip ?? !!chipAddress,
       proofImage,
       proofImageMimeType: proofImage ? 'image/jpeg' : undefined
     };
@@ -103,20 +107,21 @@ const AddressCaptureScreen = () => {
       }), /*#__PURE__*/_jsx(Text, {
         style: styles.subtitle,
         children: t('addressCaptureScreen.subtitle')
-      }), fromChip ? /*#__PURE__*/_jsx(Text, {
-        style: styles.chipHint,
-        children: t('addressCaptureScreen.prefilledFromChip')
+      }), chipAddress ? /*#__PURE__*/_jsxs(_Fragment, {
+        children: [/*#__PURE__*/_jsx(Text, {
+          style: styles.label,
+          children: t('addressCaptureScreen.addressLabel')
+        }), /*#__PURE__*/_jsx(View, {
+          style: styles.readonlyAddress,
+          children: /*#__PURE__*/_jsx(Text, {
+            style: styles.readonlyAddressText,
+            children: chipAddress
+          })
+        }), /*#__PURE__*/_jsx(Text, {
+          style: styles.chipHint,
+          children: t('addressCaptureScreen.prefilledFromChip')
+        })]
       }) : null, /*#__PURE__*/_jsx(Text, {
-        style: styles.label,
-        children: t('addressCaptureScreen.addressLabel')
-      }), /*#__PURE__*/_jsx(TextInput, {
-        style: styles.input,
-        value: addressText,
-        onChangeText: setAddressText,
-        placeholder: t('addressCaptureScreen.addressPlaceholder'),
-        multiline: true,
-        textAlignVertical: "top"
-      }), /*#__PURE__*/_jsx(Text, {
         style: styles.label,
         children: t('addressCaptureScreen.proofLabel')
       }), /*#__PURE__*/_jsx(Text, {
@@ -177,12 +182,15 @@ const styles = StyleSheet.create({
     marginTop: 16,
     marginBottom: 6
   },
-  input: {
+  readonlyAddress: {
     borderWidth: 1,
-    borderColor: '#CCC',
+    borderColor: '#E0E0E0',
+    backgroundColor: '#F7F7F7',
     borderRadius: 8,
     padding: 12,
-    minHeight: 88,
+    minHeight: 56
+  },
+  readonlyAddressText: {
     fontSize: 15,
     color: '#111'
   },

package/lib/module/Screens/Dynamic/IdentityDocumentEIDScanningScreen.js

@@ -104,13 +104,16 @@ const IdentityDocumentEIDScanningScreen = () => {
             // Passive Auth artifacts for server-side verification.
             appContext.identificationInfo.scannedDocument.paSodBase64 = appContext.lastDocumentRead?.passiveAuth?.sodBase64 ?? null;
             appContext.identificationInfo.scannedDocument.paIntegrityStatus = appContext.lastDocumentRead?.passiveAuth?.integrityStatus ?? null;
-            // MASAK 4/C(1)(d): if the chip's DG11 carried an address and no
-            // address was captured otherwise, seed it from the chip so it is
-            // sent to the backend (fromChip=true). A later ADDRESS_CAPTURE
-            // step can still let the user confirm/edit it.
+            // MASAK 4/C(1)(d): the chip's DG11 address is the source of truth
+            // and is ALWAYS sent on the NFC read — independent of any
+            // ADDRESS_CAPTURE step. The address text is never user-edited; an
+            // ADDRESS_CAPTURE step only ADDS a proof-document photo for manual
+            // operator review (it does not change this address text).
             const chipAddress = appContext.lastDocumentRead?.document.address;
-            if (chipAddress && !appContext.identificationInfo.address) {
+            if (chipAddress) {
               appContext.identificationInfo.address = {
+                // Preserve any proof image already captured for this id.
+                ...appContext.identificationInfo.address,
                 addressText: chipAddress,
                 fromChip: true
               };

package/lib/module/Screens/Static/VerificationSessionCheckScreen.js

@@ -110,6 +110,11 @@ const VerificationSessionCheckScreen = () => {
     getSessionRef.current(sid).then(session => {
       const ctx = appContextRef.current;
       ctx.workflowSteps = session.workflowSteps;
+      // Start the loaded workflow from its FIRST step. Without clearing this,
+      // a currentWorkflowStep left over from a prior flow makes the navigator
+      // resolve "next" past the last step and jump straight to the result
+      // screen (which uploads + completes the session immediately).
+      ctx.currentWorkflowStep = undefined;
       if (session.branding) {
         ctx.branding = ctx.branding || session.branding;
       }
@@ -200,6 +205,9 @@ const VerificationSessionCheckScreen = () => {
                         }
                         const session = await getSession(sessionResponse.id, isDemoMode);
                         appContext.workflowSteps = session?.workflowSteps;
+                        // Start from the first step (see note above) — clear
+                        // any stale step so we don't jump straight to result.
+                        appContext.currentWorkflowStep = undefined;
                         if (session?.branding) {
                           appContext.branding = appContext.branding || session.branding;
                         }

package/lib/module/Shared/Components/QrCodeScannerCamera.js

@@ -29,19 +29,21 @@ const QrCodeScannerCamera = ({
   const lastScanTime = useRef(0);
   const hasScanned = useRef(false);
   const isInScanningFrame = (boundingBox, width, height) => {
-    // Match UI scanArea: top: '35%', left: '3%', right: '3%', bottom: '35%'
-    // Add 2% margin buffer to ensure code is comfortably inside frame
-    const marginBuffer = 0.02;
+    // Match the UI scanArea (top/bottom 35%, left/right 3%) but accept a QR
+    // whose CENTER falls inside it rather than requiring the WHOLE bounding box.
+    // Requiring full containment silently rejected perfectly readable codes that
+    // were merely close to an edge or slightly larger than the band — the most
+    // common "QR won't scan" failure. The center test keeps the scan scoped to
+    // the framed area without being brittle about size/position.
     const scanningFrame = {
-      left: width * (0.03 + marginBuffer),
-      top: height * (0.35 + marginBuffer),
-      right: width * (0.97 - marginBuffer),
-      bottom: height * (0.65 - marginBuffer)
+      left: width * 0.03,
+      top: height * 0.35,
+      right: width * 0.97,
+      bottom: height * 0.65
     };
-
-    // Check if entire bounding box is within scanning frame (with margin buffer)
-    const isInFrame = boundingBox.left >= scanningFrame.left && boundingBox.top >= scanningFrame.top && boundingBox.right <= scanningFrame.right && boundingBox.bottom <= scanningFrame.bottom;
-    return isInFrame;
+    const centerX = (boundingBox.left + boundingBox.right) / 2;
+    const centerY = (boundingBox.top + boundingBox.bottom) / 2;
+    return centerX >= scanningFrame.left && centerX <= scanningFrame.right && centerY >= scanningFrame.top && centerY <= scanningFrame.bottom;
   };
   const handleFrame = useCallback(async event => {
     if (hasScanned.current) return;
@@ -55,13 +57,13 @@ const QrCodeScannerCamera = ({
       frame
     } = event.nativeEvent;
     try {
-      // Barcodes are already detected natively — read directly from frame
+      // Barcodes are already detected natively — read directly from frame.
+      // Accept the first code that is readable AND framed; don't bail just
+      // because more than one code happens to be in view.
       const barcodes = frame.barcodes;
-      if (!barcodes || barcodes.length !== 1) return;
-      const code = barcodes[0];
-
-      // Use frame checking on both platforms for consistent behavior
-      if (code.boundingBox && isInScanningFrame(code.boundingBox, frame.width, frame.height) && code.rawValue) {
+      if (!barcodes || barcodes.length === 0) return;
+      const code = barcodes.find(b => b.rawValue && b.boundingBox && isInScanningFrame(b.boundingBox, frame.width, frame.height));
+      if (code?.rawValue) {
         hasScanned.current = true;
         onQrCodeScanned(code.rawValue);
       }

package/lib/module/Shared/Libs/deeplink.utils.js

@@ -34,12 +34,32 @@ const handleDeepLink = ({
       sessionId = segments[i + 1] ?? '';
       debugLog('handleDeepLink', 'Found sessionId:', sessionId);
     } else if (segments[i] === 'app-url') {
-      const host = segments[i + 1] ?? '';
+      // The app-url value can be EITHER a bare host (`app-url/host[:port]`) OR a
+      // full embedded URL (`app-url/https://host/...`). The embedded form splits
+      // across multiple segments because the inner `https://` contains a `//`,
+      // e.g. ['app-url', 'https:', '', 'host', ...] — so segments[i+1] is the
+      // inner scheme, not the host. Detect that and derive the host from the
+      // first non-empty segment after the inner scheme.
+      let host = '';
+      let embeddedScheme = '';
+      const next = segments[i + 1] ?? '';
+      const schemeMatch = next.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):$/);
+      if (schemeMatch) {
+        // Embedded-URL form: skip the inner scheme + the empty segment from `//`.
+        embeddedScheme = schemeMatch[1].toLowerCase();
+        let j = i + 2;
+        while (j < segments.length && segments[j] === '') j += 1;
+        host = segments[j] ?? '';
+      } else {
+        // Bare-host form.
+        host = next;
+      }
       if (!HOST_PATTERN.test(host)) {
         logWarn('handleDeepLink', 'Rejected invalid app-url host');
         continue;
       }
-      const hostScheme = scheme === 'http' ? 'http' : 'https';
+      // Prefer the embedded URL's own scheme; otherwise inherit the link's.
+      const hostScheme = embeddedScheme || (scheme === 'http' ? 'http' : 'https');
       if (!isAllowedScheme(hostScheme)) {
         logWarn('handleDeepLink', 'Rejected non-HTTPS app-url');
         continue;

package/lib/module/Translation/Resources/en.js

@@ -95,9 +95,9 @@ export default {
   'eidScannerScreen.nfcAuthFailed': 'Could not establish a secure connection to the chip. Make sure the document number, date of birth and expiry date are correct, then try again.',
   'eidScannerScreen.nfcTagLost': 'Connection to the document was lost. Keep the document still against the device and try again.',
   'eidScannerScreen.nfcTimeout': 'Reading the chip timed out. Hold the document steady against the device and try again.',
-  'addressCaptureScreen.title': 'Confirm your address',
-  'addressCaptureScreen.subtitle': 'Enter your current residential address and provide a supporting document.',
-  'addressCaptureScreen.prefilledFromChip': 'We pre-filled your address from your document chip. Please review and correct it if needed.',
+  'addressCaptureScreen.title': 'Proof of address',
+  'addressCaptureScreen.subtitle': 'Take a clear photo of a document that shows your address. It will be reviewed by an operator.',
+  'addressCaptureScreen.prefilledFromChip': 'This address was read from your document chip and is used as-is.',
   'addressCaptureScreen.addressLabel': 'Address',
   'addressCaptureScreen.addressPlaceholder': 'Street, number, city, country',
   'addressCaptureScreen.proofLabel': 'Proof of address',

package/lib/module/Translation/Resources/tr.js

@@ -95,9 +95,9 @@ export default {
   'eidScannerScreen.nfcAuthFailed': 'Çip ile güvenli bağlantı kurulamadı. Belge numarası, doğum tarihi ve son geçerlilik tarihinin doğru olduğundan emin olup tekrar deneyin.',
   'eidScannerScreen.nfcTagLost': 'Belge ile bağlantı kesildi. Belgeyi cihaza sabit tutun ve tekrar deneyin.',
   'eidScannerScreen.nfcTimeout': 'Çip okuması zaman aşımına uğradı. Belgeyi cihaza sabit tutup tekrar deneyin.',
-  'addressCaptureScreen.title': 'Adresinizi doğrulayın',
-  'addressCaptureScreen.subtitle': 'Güncel yerleşim adresinizi girin ve destekleyici bir belge sağlayın.',
-  'addressCaptureScreen.prefilledFromChip': 'Adresiniz belge yongasından önceden dolduruldu. Lütfen kontrol edin ve gerekirse düzeltin.',
+  'addressCaptureScreen.title': 'Adres kanıtı',
+  'addressCaptureScreen.subtitle': 'Adresinizi gösteren bir belgenin net bir fotoğrafını çekin. Bir operatör tarafından incelenecektir.',
+  'addressCaptureScreen.prefilledFromChip': 'Bu adres belge yongasından okundu ve olduğu gibi kullanılır.',
   'addressCaptureScreen.addressLabel': 'Adres',
   'addressCaptureScreen.addressPlaceholder': 'Cadde, numara, şehir, ülke',
   'addressCaptureScreen.proofLabel': 'Adres kanıtı',

package/lib/module/version.js

@@ -2,4 +2,4 @@
 
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.501.0';
+export const SDK_VERSION = '1.502.0';

package/lib/typescript/src/Screens/Dynamic/AddressCaptureScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddressCaptureScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/AddressCaptureScreen.tsx"],"names":[],"mappings":"AA8BA;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,+CA6HzB,CAAC;AAkCF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"AddressCaptureScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/AddressCaptureScreen.tsx"],"names":[],"mappings":"AA6BA;;;;;GAKG;AACH,QAAA,MAAM,oBAAoB,+CA8HzB,CAAC;AAkCF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/src/Screens/Dynamic/IdentityDocumentEIDScanningScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IdentityDocumentEIDScanningScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/IdentityDocumentEIDScanningScreen.tsx"],"names":[],"mappings":"AAsBA,QAAA,MAAM,iCAAiC,+CAuPtC,CAAC;AAoBF,eAAe,iCAAiC,CAAC"}
+{"version":3,"file":"IdentityDocumentEIDScanningScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Dynamic/IdentityDocumentEIDScanningScreen.tsx"],"names":[],"mappings":"AAsBA,QAAA,MAAM,iCAAiC,+CA0PtC,CAAC;AAoBF,eAAe,iCAAiC,CAAC"}

package/lib/typescript/src/Screens/Static/VerificationSessionCheckScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"VerificationSessionCheckScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Static/VerificationSessionCheckScreen.tsx"],"names":[],"mappings":"AAkDA,QAAA,MAAM,8BAA8B,+CAmUnC,CAAC;AAiHF,eAAe,8BAA8B,CAAC"}
+{"version":3,"file":"VerificationSessionCheckScreen.d.ts","sourceRoot":"","sources":["../../../../../src/Screens/Static/VerificationSessionCheckScreen.tsx"],"names":[],"mappings":"AAkDA,QAAA,MAAM,8BAA8B,+CA2UnC,CAAC;AAiHF,eAAe,8BAA8B,CAAC"}

package/lib/typescript/src/Shared/Components/QrCodeScannerCamera.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QrCodeScannerCamera.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/QrCodeScannerCamera.tsx"],"names":[],"mappings":"AA0BA,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,QAAA,MAAM,mBAAmB,GAAI,+BAG1B,wBAAwB,4CA6K1B,CAAC;AAwGF,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"QrCodeScannerCamera.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Components/QrCodeScannerCamera.tsx"],"names":[],"mappings":"AA0BA,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,QAAA,MAAM,mBAAmB,GAAI,+BAG1B,wBAAwB,4CAmL1B,CAAC;AAwGF,eAAe,mBAAmB,CAAC"}

package/lib/typescript/src/Shared/Libs/deeplink.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deeplink.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/deeplink.utils.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,MAGxC,CAAC;AAEF,QAAA,MAAM,cAAc,GAAI,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,aA4C/C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"deeplink.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/deeplink.utils.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,KAAG,MAGxC,CAAC;AAEF,QAAA,MAAM,cAAc,GAAI,SAAS;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,aAkE/C,CAAC;AAEF,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/lib/typescript/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION = "1.501.0";
+export declare const SDK_VERSION = "1.502.0";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trustchex/react-native-sdk",
-  "version": "1.501.0",
+  "version": "1.502.0",
   "description": "Trustchex mobile app react native SDK for android or ios devices",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",

package/src/Screens/Dynamic/AddressCaptureScreen.tsx

@@ -3,7 +3,6 @@ import {
   SafeAreaView,
   View,
   Text,
-  TextInput,
   StyleSheet,
   ScrollView,
   Image,
@@ -44,20 +43,19 @@ const AddressCaptureScreen = () => {
   const { t } = useTranslation();
   const insets = useSafeAreaInsets();
 
-  // Pre-fill from the chip's DG11 address when the NFC read provided one.
+  // The address text is NOT collected here — the chip's DG11 address (read on
+  // the NFC step) is the source of truth and is always sent. This step only
+  // collects a PROOF-DOCUMENT photo for the operator's manual review. We show
+  // the chip address read-only for context when available.
   const chipAddress =
-    appContext.lastDocumentRead?.document.address ?? '';
-  const [addressText, setAddressText] = useState<string>(chipAddress);
-  const [fromChip] = useState<boolean>(!!chipAddress);
+    appContext.identificationInfo.address?.addressText ??
+    appContext.lastDocumentRead?.document.address ??
+    '';
 
   const [proofImage, setProofImage] = useState<string | undefined>();
   const [isCameraOpen, setIsCameraOpen] = useState(false);
   const captureNextFrame = useRef(false);
 
-  // Whether the proof document is required is configurable per workflow step.
-  const proofRequired =
-    appContext.currentWorkflowStep?.data?.addressProofRequired !== false;
-
   useEffect(() => {
     trackVerificationStart('ADDRESS_CAPTURE');
   }, []);
@@ -72,13 +70,17 @@ const AddressCaptureScreen = () => {
     }
   };
 
-  const canContinue =
-    addressText.trim().length > 0 && (!proofRequired || !!proofImage);
+  // A proof photo is the whole point of this step.
+  const canContinue = !!proofImage;
 
   const onContinue = () => {
+    // Attach the proof to the existing (chip-sourced) address without changing
+    // the address text or fromChip flag. If for some reason no address object
+    // exists yet, keep whatever chip text we have for display continuity.
+    const existing = appContext.identificationInfo.address;
     appContext.identificationInfo.address = {
-      addressText: addressText.trim(),
-      fromChip,
+      addressText: existing?.addressText ?? chipAddress,
+      fromChip: existing?.fromChip ?? !!chipAddress,
       proofImage,
       proofImageMimeType: proofImage ? 'image/jpeg' : undefined,
     };
@@ -118,22 +120,20 @@ const AddressCaptureScreen = () => {
         <Text style={styles.title}>{t('addressCaptureScreen.title')}</Text>
         <Text style={styles.subtitle}>{t('addressCaptureScreen.subtitle')}</Text>
 
-        {fromChip ? (
-          <Text style={styles.chipHint}>
-            {t('addressCaptureScreen.prefilledFromChip')}
-          </Text>
+        {chipAddress ? (
+          <>
+            <Text style={styles.label}>
+              {t('addressCaptureScreen.addressLabel')}
+            </Text>
+            <View style={styles.readonlyAddress}>
+              <Text style={styles.readonlyAddressText}>{chipAddress}</Text>
+            </View>
+            <Text style={styles.chipHint}>
+              {t('addressCaptureScreen.prefilledFromChip')}
+            </Text>
+          </>
         ) : null}
 
-        <Text style={styles.label}>{t('addressCaptureScreen.addressLabel')}</Text>
-        <TextInput
-          style={styles.input}
-          value={addressText}
-          onChangeText={setAddressText}
-          placeholder={t('addressCaptureScreen.addressPlaceholder')}
-          multiline
-          textAlignVertical="top"
-        />
-
         <Text style={styles.label}>{t('addressCaptureScreen.proofLabel')}</Text>
         <Text style={styles.proofHint}>{t('addressCaptureScreen.proofHint')}</Text>
         {proofImage ? (
@@ -168,15 +168,15 @@ const styles = StyleSheet.create({
   subtitle: { fontSize: 15, color: '#555', marginBottom: 16 },
   chipHint: { fontSize: 13, color: '#2E7D32', marginBottom: 12 },
   label: { fontSize: 14, fontWeight: '600', color: '#222', marginTop: 16, marginBottom: 6 },
-  input: {
+  readonlyAddress: {
     borderWidth: 1,
-    borderColor: '#CCC',
+    borderColor: '#E0E0E0',
+    backgroundColor: '#F7F7F7',
     borderRadius: 8,
     padding: 12,
-    minHeight: 88,
-    fontSize: 15,
-    color: '#111',
+    minHeight: 56,
   },
+  readonlyAddressText: { fontSize: 15, color: '#111' },
   proofHint: { fontSize: 13, color: '#777', marginBottom: 10 },
   proofPreview: {
     width: '100%',

package/src/Screens/Dynamic/IdentityDocumentEIDScanningScreen.tsx

@@ -144,14 +144,17 @@ const IdentityDocumentEIDScanningScreen = () => {
                 appContext.identificationInfo.scannedDocument.paIntegrityStatus =
                   appContext.lastDocumentRead?.passiveAuth?.integrityStatus ??
                   null;
-                // MASAK 4/C(1)(d): if the chip's DG11 carried an address and no
-                // address was captured otherwise, seed it from the chip so it is
-                // sent to the backend (fromChip=true). A later ADDRESS_CAPTURE
-                // step can still let the user confirm/edit it.
+                // MASAK 4/C(1)(d): the chip's DG11 address is the source of truth
+                // and is ALWAYS sent on the NFC read — independent of any
+                // ADDRESS_CAPTURE step. The address text is never user-edited; an
+                // ADDRESS_CAPTURE step only ADDS a proof-document photo for manual
+                // operator review (it does not change this address text).
                 const chipAddress =
                   appContext.lastDocumentRead?.document.address;
-                if (chipAddress && !appContext.identificationInfo.address) {
+                if (chipAddress) {
                   appContext.identificationInfo.address = {
+                    // Preserve any proof image already captured for this id.
+                    ...appContext.identificationInfo.address,
                     addressText: chipAddress,
                     fromChip: true,
                   };

package/src/Screens/Static/VerificationSessionCheckScreen.tsx

@@ -181,6 +181,11 @@ const VerificationSessionCheckScreen = () => {
       .then((session) => {
         const ctx = appContextRef.current;
         ctx.workflowSteps = session.workflowSteps;
+        // Start the loaded workflow from its FIRST step. Without clearing this,
+        // a currentWorkflowStep left over from a prior flow makes the navigator
+        // resolve "next" past the last step and jump straight to the result
+        // screen (which uploads + completes the session immediately).
+        ctx.currentWorkflowStep = undefined;
         if (session.branding) {
           ctx.branding = ctx.branding || session.branding;
         }
@@ -299,6 +304,9 @@ const VerificationSessionCheckScreen = () => {
                               isDemoMode
                             );
                             appContext.workflowSteps = session?.workflowSteps;
+                            // Start from the first step (see note above) — clear
+                            // any stale step so we don't jump straight to result.
+                            appContext.currentWorkflowStep = undefined;
                             if (session?.branding) {
                               appContext.branding =
                                 appContext.branding || session.branding;

package/src/Shared/Components/QrCodeScannerCamera.tsx

@@ -50,24 +50,28 @@ const QrCodeScannerCamera = ({
     width: number,
     height: number
   ) => {
-    // Match UI scanArea: top: '35%', left: '3%', right: '3%', bottom: '35%'
-    // Add 2% margin buffer to ensure code is comfortably inside frame
-    const marginBuffer = 0.02;
+    // Match the UI scanArea (top/bottom 35%, left/right 3%) but accept a QR
+    // whose CENTER falls inside it rather than requiring the WHOLE bounding box.
+    // Requiring full containment silently rejected perfectly readable codes that
+    // were merely close to an edge or slightly larger than the band — the most
+    // common "QR won't scan" failure. The center test keeps the scan scoped to
+    // the framed area without being brittle about size/position.
     const scanningFrame = {
-      left: width * (0.03 + marginBuffer),
-      top: height * (0.35 + marginBuffer),
-      right: width * (0.97 - marginBuffer),
-      bottom: height * (0.65 - marginBuffer),
+      left: width * 0.03,
+      top: height * 0.35,
+      right: width * 0.97,
+      bottom: height * 0.65,
     };
 
-    // Check if entire bounding box is within scanning frame (with margin buffer)
-    const isInFrame =
-      boundingBox.left >= scanningFrame.left &&
-      boundingBox.top >= scanningFrame.top &&
-      boundingBox.right <= scanningFrame.right &&
-      boundingBox.bottom <= scanningFrame.bottom;
+    const centerX = (boundingBox.left + boundingBox.right) / 2;
+    const centerY = (boundingBox.top + boundingBox.bottom) / 2;
 
-    return isInFrame;
+    return (
+      centerX >= scanningFrame.left &&
+      centerX <= scanningFrame.right &&
+      centerY >= scanningFrame.top &&
+      centerY <= scanningFrame.bottom
+    );
   };
 
   const handleFrame = useCallback(
@@ -84,18 +88,20 @@ const QrCodeScannerCamera = ({
       const { frame } = event.nativeEvent;
 
       try {
-        // Barcodes are already detected natively — read directly from frame
+        // Barcodes are already detected natively — read directly from frame.
+        // Accept the first code that is readable AND framed; don't bail just
+        // because more than one code happens to be in view.
         const barcodes = frame.barcodes;
-        if (!barcodes || barcodes.length !== 1) return;
+        if (!barcodes || barcodes.length === 0) return;
 
-        const code = barcodes[0];
+        const code = barcodes.find(
+          (b) =>
+            b.rawValue &&
+            b.boundingBox &&
+            isInScanningFrame(b.boundingBox, frame.width, frame.height)
+        );
 
-        // Use frame checking on both platforms for consistent behavior
-        if (
-          code.boundingBox &&
-          isInScanningFrame(code.boundingBox, frame.width, frame.height) &&
-          code.rawValue
-        ) {
+        if (code?.rawValue) {
           hasScanned.current = true;
           onQrCodeScanned(code.rawValue);
         }

package/src/Shared/Libs/deeplink.utils.ts

@@ -37,12 +37,34 @@ const handleDeepLink = ({ url }: { url: string }) => {
       sessionId = segments[i + 1] ?? '';
       debugLog('handleDeepLink', 'Found sessionId:', sessionId);
     } else if (segments[i] === 'app-url') {
-      const host = segments[i + 1] ?? '';
+      // The app-url value can be EITHER a bare host (`app-url/host[:port]`) OR a
+      // full embedded URL (`app-url/https://host/...`). The embedded form splits
+      // across multiple segments because the inner `https://` contains a `//`,
+      // e.g. ['app-url', 'https:', '', 'host', ...] — so segments[i+1] is the
+      // inner scheme, not the host. Detect that and derive the host from the
+      // first non-empty segment after the inner scheme.
+      let host = '';
+      let embeddedScheme = '';
+      const next = segments[i + 1] ?? '';
+      const schemeMatch = next.match(/^([a-zA-Z][a-zA-Z0-9+.-]*):$/);
+      if (schemeMatch) {
+        // Embedded-URL form: skip the inner scheme + the empty segment from `//`.
+        embeddedScheme = schemeMatch[1].toLowerCase();
+        let j = i + 2;
+        while (j < segments.length && segments[j] === '') j += 1;
+        host = segments[j] ?? '';
+      } else {
+        // Bare-host form.
+        host = next;
+      }
+
       if (!HOST_PATTERN.test(host)) {
         logWarn('handleDeepLink', 'Rejected invalid app-url host');
         continue;
       }
-      const hostScheme = scheme === 'http' ? 'http' : 'https';
+      // Prefer the embedded URL's own scheme; otherwise inherit the link's.
+      const hostScheme =
+        embeddedScheme || (scheme === 'http' ? 'http' : 'https');
       if (!isAllowedScheme(hostScheme)) {
         logWarn('handleDeepLink', 'Rejected non-HTTPS app-url');
         continue;

package/src/Translation/Resources/en.ts

@@ -124,11 +124,11 @@ export default {
     'Connection to the document was lost. Keep the document still against the device and try again.',
   'eidScannerScreen.nfcTimeout':
     'Reading the chip timed out. Hold the document steady against the device and try again.',
-  'addressCaptureScreen.title': 'Confirm your address',
+  'addressCaptureScreen.title': 'Proof of address',
   'addressCaptureScreen.subtitle':
-    'Enter your current residential address and provide a supporting document.',
+    'Take a clear photo of a document that shows your address. It will be reviewed by an operator.',
   'addressCaptureScreen.prefilledFromChip':
-    'We pre-filled your address from your document chip. Please review and correct it if needed.',
+    'This address was read from your document chip and is used as-is.',
   'addressCaptureScreen.addressLabel': 'Address',
   'addressCaptureScreen.addressPlaceholder': 'Street, number, city, country',
   'addressCaptureScreen.proofLabel': 'Proof of address',

package/src/Translation/Resources/tr.ts

@@ -124,11 +124,11 @@ export default {
     'Belge ile bağlantı kesildi. Belgeyi cihaza sabit tutun ve tekrar deneyin.',
   'eidScannerScreen.nfcTimeout':
     'Çip okuması zaman aşımına uğradı. Belgeyi cihaza sabit tutup tekrar deneyin.',
-  'addressCaptureScreen.title': 'Adresinizi doğrulayın',
+  'addressCaptureScreen.title': 'Adres kanıtı',
   'addressCaptureScreen.subtitle':
-    'Güncel yerleşim adresinizi girin ve destekleyici bir belge sağlayın.',
+    'Adresinizi gösteren bir belgenin net bir fotoğrafını çekin. Bir operatör tarafından incelenecektir.',
   'addressCaptureScreen.prefilledFromChip':
-    'Adresiniz belge yongasından önceden dolduruldu. Lütfen kontrol edin ve gerekirse düzeltin.',
+    'Bu adres belge yongasından okundu ve olduğu gibi kullanılır.',
   'addressCaptureScreen.addressLabel': 'Adres',
   'addressCaptureScreen.addressPlaceholder': 'Cadde, numara, şehir, ülke',
   'addressCaptureScreen.proofLabel': 'Adres kanıtı',

package/src/version.ts

@@ -1,3 +1,3 @@
 // This file is auto-generated. Do not edit manually.
 // Version is synced from package.json during build.
-export const SDK_VERSION = '1.501.0';
+export const SDK_VERSION = '1.502.0';