@velion-la/onboarding-sdk-react-native 1.0.0-beta.2

package/lib/typescript/steps/LegalBasicInfoStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LegalBasicInfoStep.d.ts","sourceRoot":"","sources":["../../../src/steps/LegalBasicInfoStep.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,kBAAmB,YAAW,UAAU;IAKvC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/LegalExtendedInfoStep.d.ts

@@ -0,0 +1,17 @@
+/**
+ * LEGAL_EXTENDED_INFO — POST /sessions/:id/extended-info/legal { incorporation_date, incorporation_country }.
+ *
+ * Mirrors `LegalExtendedInfoModule.ts`. Both fields are required.
+ * `incorporation_country` is uppercased to ISO alpha-2 by `CountrySelect`.
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class LegalExtendedInfoStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=LegalExtendedInfoStep.d.ts.map

package/lib/typescript/steps/LegalExtendedInfoStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LegalExtendedInfoStep.d.ts","sourceRoot":"","sources":["../../../src/steps/LegalExtendedInfoStep.tsx"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,qBAAsB,YAAW,UAAU;IAK1C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/LivenessMatchStep.d.ts

@@ -0,0 +1,26 @@
+/**
+ * LIVENESS_MATCH — Iris-driven active liveness over WebSocket.
+ *
+ * Flow:
+ *   1. POST /liveness-init → { liveness_session_id, websocket_url, expires_at,
+ *      challenges, connection_token, frame_integrity_key_base64 }.
+ *   2. Optionally import the HMAC key for frame integrity.
+ *   3. Open vision-camera (front), connect WS with ?token & ?lang.
+ *   4. SESSION_READY → start frame capture loop (interval-driven), watchdog 25s.
+ *   5. Process CHALLENGE / CHALLENGE_PROGRESS / CHALLENGE_COMPLETE / WARNING /
+ *      ERROR / SESSION_COMPLETE.
+ *   6. Terminal WARNING (SPOOF_RISK_HIGH, …) → in-flow retry dialog (re-init
+ *      + fresh WS) without bailing the whole flow.
+ *   7. SESSION_COMPLETE → POST /liveness-verify → resolve the step.
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class LivenessMatchStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=LivenessMatchStep.d.ts.map

package/lib/typescript/steps/LivenessMatchStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LivenessMatchStep.d.ts","sourceRoot":"","sources":["../../../src/steps/LivenessMatchStep.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAsCH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AASpD,qBAAa,iBAAkB,YAAW,UAAU;IAKtC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IA2BpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/PhoneContactStep.d.ts

@@ -0,0 +1,15 @@
+/**
+ * PHONE_CONTACT — collect E.164 phone without OTP. Mirrors `PhoneContactModule.ts`.
+ * POST /sessions/:id/contact/phone { phone }
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class PhoneContactStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=PhoneContactStep.d.ts.map

package/lib/typescript/steps/PhoneContactStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhoneContactStep.d.ts","sourceRoot":"","sources":["../../../src/steps/PhoneContactStep.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,gBAAiB,YAAW,UAAU;IAKrC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/PhoneOtpStep.d.ts

@@ -0,0 +1,19 @@
+/**
+ * PHONE_OTP — send + verify 6-digit OTP via SMS.
+ * POST /sessions/:id/phone/send-otp { phone } (E.164)
+ * POST /sessions/:id/phone/verify-otp { otp }
+ *
+ * Mirrors `PhoneOtpModule.ts`. Same single-screen flow as `EmailOtpStep` but
+ * with phone-pad keyboard and E.164 validation.
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class PhoneOtpStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=PhoneOtpStep.d.ts.map

package/lib/typescript/steps/PhoneOtpStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PhoneOtpStep.d.ts","sourceRoot":"","sources":["../../../src/steps/PhoneOtpStep.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,YAAa,YAAW,UAAU;IAKjC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/SwornDeclarationStep.d.ts

@@ -0,0 +1,20 @@
+/**
+ * SWORN_DECLARATION — POST /sessions/:id/sworn-declaration { is_pep, is_ssoo, is_fatca, is_ocde }.
+ *
+ * Mirrors `SwornDeclarationModule.ts`:
+ *   - `ask_pep`, `ask_obligated_subject` default to TRUE if undefined.
+ *   - `ask_fatca`, `ask_ocde` default to FALSE (only shown when explicitly true).
+ *   - "Ninguna de las anteriores" toggle: ticking it clears the others; ticking
+ *     any other auto-unticks "none".
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class SwornDeclarationStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=SwornDeclarationStep.d.ts.map

package/lib/typescript/steps/SwornDeclarationStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SwornDeclarationStep.d.ts","sourceRoot":"","sources":["../../../src/steps/SwornDeclarationStep.tsx"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,oBAAqB,YAAW,UAAU;IAKzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/TaxInfoStep.d.ts

@@ -0,0 +1,19 @@
+/**
+ * TAX_INFO — POST /sessions/:id/tax-info { taxpayer_type, taxpayer_id_type, taxpayer_id }.
+ *
+ * Mirrors `TaxInfoModule.ts`:
+ *   - Resolves selectable lists from `stepConfig.accepted_tax_information`
+ *     (only — no SDK-side defaults), preferring `code` → `id` for the option
+ *     value sent in the payload.
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class TaxInfoStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=TaxInfoStep.d.ts.map

package/lib/typescript/steps/TaxInfoStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TaxInfoStep.d.ts","sourceRoot":"","sources":["../../../src/steps/TaxInfoStep.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAwBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,WAAY,YAAW,UAAU;IAKhC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/TermsAndConditionsStep.d.ts

@@ -0,0 +1,21 @@
+/**
+ * TERMS_AND_CONDITIONS — POST /sessions/:id/terms-and-conditions { acceptances }.
+ *
+ * Mirrors `TermsAndConditionsModule.ts`:
+ *   - Items resolved from `stepConfig.terms`. If empty, the step rejects with
+ *     `SdkErrorCode.UNKNOWN` (same as web — orchestrator can surface support copy).
+ *   - Each item has an optional `link` opened via React Native's `Linking`
+ *     (no extra dependency, OS picks the right handler — WebView, Safari, …).
+ *   - Submit gate: every item must be accepted.
+ */
+import type { StepDeps, StepModule } from './types';
+export declare class TermsAndConditionsStep implements StepModule {
+    private readonly deps;
+    private resolveStep;
+    private rejectStep;
+    private destroyed;
+    constructor(deps: StepDeps);
+    run(): Promise<void>;
+    destroy(): void;
+}
+//# sourceMappingURL=TermsAndConditionsStep.d.ts.map

package/lib/typescript/steps/TermsAndConditionsStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TermsAndConditionsStep.d.ts","sourceRoot":"","sources":["../../../src/steps/TermsAndConditionsStep.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuBH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD,qBAAa,sBAAuB,YAAW,UAAU;IAK3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,SAAS,CAAS;gBAEG,IAAI,EAAE,QAAQ;IAE3C,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BpB,OAAO,IAAI,IAAI;CAIhB"}

package/lib/typescript/steps/_shared.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Helpers shared by every step module — kept in a single place so the per-step
+ * files stay focused on their specific UI + payload.
+ */
+import { type SdkError } from '../types';
+import type { StringsTable } from '../i18n';
+export declare function toSubmissionError(err: unknown, t: StringsTable): SdkError;
+export declare function isEmail(value: string): boolean;
+export declare function isE164Phone(value: string): boolean;
+export declare function isOtpCode(value: string): boolean;
+//# sourceMappingURL=_shared.d.ts.map

package/lib/typescript/steps/_shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_shared.d.ts","sourceRoot":"","sources":["../../../src/steps/_shared.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,GAAG,QAAQ,CAkBzE;AAOD,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE9C;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhD"}

package/lib/typescript/steps/types.d.ts

@@ -0,0 +1,68 @@
+/**
+ * @fileoverview Internal contracts shared by all step modules.
+ *
+ * Step modules own their network lifecycle and (when applicable) drive the UI
+ * via a `StepUiHandle` provided by the orchestrator. Modules that don't need
+ * a screen (e.g. DEVICE_FINGERPRINT, FACE_MATCH) ignore the UI handle entirely.
+ */
+import type { ReactNode } from 'react';
+import type { ApiCaller } from '../transport/api';
+import type { OnboardingStep, SdkError } from '../types';
+/**
+ * Internal contract every step module must implement. The orchestrator awaits
+ * `run()` and calls `destroy()` exactly once when the step is leaving the flow.
+ */
+export interface StepModule {
+    run(): Promise<void>;
+    destroy(): void;
+}
+/**
+ * Bridge a step module uses to render its UI inside `VelionOnboardingScreen`.
+ *
+ * - `setNode(node)` mounts a React subtree as the active step view.
+ * - `setNode(null)` (or omitting all calls) leaves whatever the orchestrator
+ *   considers the default chrome — typically a loading overlay.
+ *
+ * The orchestrator clears the slot automatically between steps, so modules
+ * don't need to call `setNode(null)` on `destroy()` for cleanup purposes.
+ */
+export interface StepUiHandle {
+    setNode(node: ReactNode | null): void;
+}
+/** Constructor arguments shared by every step module. */
+export interface StepDeps {
+    api: ApiCaller;
+    sessionId: string;
+    locale: string;
+    colorMode: 'light' | 'dark';
+    ui: StepUiHandle;
+    step: OnboardingStep;
+    stepConfig?: Record<string, unknown>;
+    /**
+     * Google Maps Platform API key (Maps + Places). Forwarded to the assisted
+     * `ADDRESS_INFO` flow when the consumer passes it via `VelionConfig`. Steps
+     * that don't use it can ignore the field.
+     */
+    googleMapsApiKey?: string;
+    /**
+     * Fingerprint Pro endpoint URL (custom subdomain). Defaults to
+     * `https://fp.velion.la`. Only read by `FingerprintStep`.
+     */
+    fingerprintEndpoint?: string;
+    /** Override of the public Fingerprint Pro key. Only read by `FingerprintStep`. */
+    fingerprintApiKey?: string;
+    /** Per-call timeout for Fingerprint identification. Only read by `FingerprintStep`. */
+    fingerprintTimeoutMs?: number;
+    /**
+     * Optional Iris calibration tag for LIVENESS_MATCH. See
+     * `VelionConfig.livenessCalibrationLabel` for details. Only read by
+     * `LivenessMatchStep`.
+     */
+    livenessCalibrationLabel?: string;
+}
+/**
+ * Convenience type used by step modules that propagate failures to the
+ * orchestrator. The orchestrator translates these into `onError` calls.
+ */
+export type StepFailure = SdkError;
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/steps/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/steps/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;CACvC;AAED,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,GAAG,EAAE,SAAS,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,EAAE,EAAE,YAAY,CAAC;IACjB,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC"}

package/lib/typescript/transport/api.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Secure, centralized API caller for the Velion Onboarding SDK.
+ *
+ * The SDK version comes from `utils/sdkVersion.ts` (a regular module constant)
+ * instead of bundler-injected globals so this code runs identically in Metro.
+ *
+ * Design decisions:
+ * - **Factory pattern** (`createApiCaller`): Returns a pre-configured caller
+ *   bound to a specific `baseUrl` and `sessionToken`. Modules receive this
+ *   caller and never have direct access to the token string.
+ * - **No API keys**: Only the short-lived `sessionToken` (Bearer) is used.
+ * - **AbortController integration**: All calls accept an optional signal,
+ *   enabling clean cancellation when `VelionOnboarding.destroy()` is called.
+ * - **Structured errors**: All failures are normalized into `SdkError` objects
+ *   with machine-readable codes, never raw exceptions.
+ */
+export interface ApiCallOptions {
+    /** AbortSignal to cancel the in-flight request. */
+    signal?: AbortSignal;
+    /** Additional headers to merge on top of the default auth headers. */
+    extraHeaders?: Record<string, string>;
+}
+/**
+ * Creates a pre-authorized API caller bound to a specific session.
+ * All requests include Authorization: Bearer <sessionToken>.
+ */
+export declare function createApiCaller(rawBaseUrl: string, sessionToken: string, expiresAt?: string): {
+    readonly get: <TResponse>(endpoint: string, options?: ApiCallOptions) => Promise<TResponse>;
+    readonly post: <TResponse>(endpoint: string, body: unknown, options?: ApiCallOptions) => Promise<TResponse>;
+    readonly postFormData: <TResponse>(endpoint: string, formData: FormData, options?: ApiCallOptions) => Promise<TResponse>;
+    readonly setSessionToken: (token: string, expiresAtIso?: string) => void;
+};
+/** The type of the object returned by `createApiCaller`. */
+export type ApiCaller = ReturnType<typeof createApiCaller>;
+//# sourceMappingURL=api.d.ts.map

package/lib/typescript/transport/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/transport/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AA2CH,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM;mBA8HC,SAAS,YAChB,MAAM,YACN,cAAc,KACvB,OAAO,CAAC,SAAS,CAAC;oBAWD,SAAS,YACjB,MAAM,QACV,OAAO,YACH,cAAc,KACvB,OAAO,CAAC,SAAS,CAAC;4BAoBO,SAAS,YACzB,MAAM,YACN,QAAQ,YACR,cAAc,KACvB,OAAO,CAAC,SAAS,CAAC;sCAlHW,MAAM,iBAAiB,MAAM,KAAG,IAAI;EA+HrE;AAED,4DAA4D;AAC5D,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/lib/typescript/transport/irisWebSocket.d.ts

@@ -0,0 +1,72 @@
+/**
+ * @fileoverview Typed wrapper around the WebSocket connection to the Iris
+ * orchestrator.
+ *
+ *   - Server messages are JSON (`{ type, ... }`). See `IrisServerMessage`.
+ *   - Client → server frames are either:
+ *       a) raw `ArrayBuffer` JPEGs (when no HMAC key was returned), or
+ *       b) JSON envelopes signed with HMAC-SHA256 (see `utils/hmac`).
+ *
+ * The WebSocket global on RN supports both string and binary payloads, so we
+ * don't need any extra polyfills. We do require the URL to be `wss://`
+ * (or `ws://localhost:*` for dev) — TLS is enforced.
+ */
+export type IrisChallenge = 'FACE_FORWARD' | 'TURN_LEFT' | 'TURN_RIGHT' | 'SMILE' | 'BLINK' | 'MOVE_CLOSER' | 'MOVE_FARTHER';
+export interface IrisServerMessage {
+    type: 'SESSION_READY' | 'CHALLENGE' | 'CHALLENGE_PROGRESS' | 'CHALLENGE_COMPLETE' | 'WARNING' | 'ERROR' | 'SESSION_COMPLETE';
+    /** Iris challenge identifier (only on CHALLENGE / CHALLENGE_PROGRESS). */
+    challenge?: IrisChallenge | string;
+    /** 0..1 confidence on CHALLENGE_PROGRESS. */
+    confidence?: number;
+    /** Free-form server-supplied message (warnings, errors). */
+    message?: string;
+    /** Discriminator for WARNING (e.g. POSITIONING_REQUIRED, SPOOF_RISK_HIGH). */
+    code?: string;
+    /** Bumps as the user keeps missing positioning. */
+    consecutiveMisses?: number;
+    /** Final score map on SESSION_COMPLETE. */
+    signals?: Record<string, number>;
+    /** Zero-based position of this challenge in the session sequence (CHALLENGE only). */
+    sequenceIndex?: number;
+    /** Total number of challenges in the session sequence (CHALLENGE only). */
+    totalChallenges?: number;
+}
+export interface IrisOpenOptions {
+    websocketUrl: string;
+    connectionToken?: string | undefined;
+    /** `'es'` or `'en'` — anything else collapses to `'en'` (Iris default). */
+    locale: string;
+    onMessage: (msg: IrisServerMessage) => void;
+    /** Fired when the underlying WebSocket reports an error event. */
+    onError?: (event: Event) => void;
+    /** Fired when the WebSocket closes (either side). */
+    onClose?: (code: number, reason: string) => void;
+    /** Fired once after `onopen`. */
+    onOpen?: () => void;
+}
+export interface IrisConnection {
+    /** Send a binary JPEG frame. Returns `false` if the socket is not open. */
+    sendBinary: (bytes: ArrayBufferView | ArrayBuffer) => boolean;
+    /** Send a JSON envelope (already serialized). Returns `false` if not open. */
+    sendJson: (envelope: string) => boolean;
+    /** Close with a normal `1000` code (or a custom one). Idempotent. */
+    close: (code?: number, reason?: string) => void;
+    /** True when `OPEN`. */
+    isOpen: () => boolean;
+}
+/** Builds the final connect URL with `?token=...&lang=...` query params. */
+export declare function buildIrisUrl(websocketUrl: string, connectionToken: string | undefined, locale: string): string;
+/**
+ * Open a WebSocket against the Iris orchestrator. The URL must already include
+ * the customer's `connection_token` if Iris enforced auth.
+ *
+ * `onClose` fires for both clean (`code === 1000`) and unclean closures —
+ * callers decide how to react (terminal warning vs. unexpected drop).
+ */
+export declare function openIrisWebSocket(opts: IrisOpenOptions): IrisConnection;
+/**
+ * Subset of WARNING `code`s that mean "Iris is about to close, escalate to
+ * the in-flow retry dialog instead of the generic close handler".
+ */
+export declare const TERMINAL_WARNING_CODES: Set<string>;
+//# sourceMappingURL=irisWebSocket.d.ts.map

package/lib/typescript/transport/irisWebSocket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"irisWebSocket.d.ts","sourceRoot":"","sources":["../../../src/transport/irisWebSocket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,WAAW,GACX,YAAY,GACZ,OAAO,GACP,OAAO,GACP,aAAa,GACb,cAAc,CAAC;AAEnB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EACA,eAAe,GACf,WAAW,GACX,oBAAoB,GACpB,oBAAoB,GACpB,SAAS,GACT,OAAO,GACP,kBAAkB,CAAC;IACvB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;IACnC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,sFAAsF;IACtF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC5C,kEAAkE;IAClE,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,qDAAqD;IACrD,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,UAAU,EAAE,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,KAAK,OAAO,CAAC;IAC9D,8EAA8E;IAC9E,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,qEAAqE;IACrE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,wBAAwB;IACxB,MAAM,EAAE,MAAM,OAAO,CAAC;CACvB;AAID,4EAA4E;AAC5E,wBAAgB,YAAY,CAC1B,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,MAAM,EAAE,MAAM,GACb,MAAM,CAUR;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,CAuEvE;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,aAIjC,CAAC"}

package/lib/typescript/transport/secureUrl.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @fileoverview Transport-security guards for runtime URLs.
+ *
+ * The SDK exchanges bearer tokens, KYC documents and selfies. A misconfigured
+ * `apiUrl`, a tampered `liveness-init` response, or a backend that returns a
+ * `ws://` URL would all leak that data in cleartext. These helpers force every
+ * runtime endpoint to use TLS, with a single carve-out for loopback hosts so
+ * developers can still run the SDK against a local backend.
+ */
+/** True when the URL is `https://`, or `http://localhost`-style for dev. */
+export declare function isSecureHttpUrl(url: string): boolean;
+/** True when the URL is `wss://`, or `ws://localhost`-style for dev. */
+export declare function isSecureWebSocketUrl(url: string): boolean;
+//# sourceMappingURL=secureUrl.d.ts.map

package/lib/typescript/transport/secureUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureUrl.d.ts","sourceRoot":"","sources":["../../../src/transport/secureUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgBH,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASpD;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CASzD"}

package/lib/typescript/transport/sse.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @fileoverview SSE client for React Native, with auto-reconnect.
+ *
+ * React Native's `fetch` does not expose `body.getReader()`, so we lean on
+ * `react-native-sse` — which follows the `EventSource` model and dispatches
+ * by `event:` name. If the backend publishes named events
+ * (e.g. `event: NextStepRequestedEvent`), the default `'message'` listener
+ * never fires.
+ *
+ * To cover both cases we register the same handler on `'message'` AND on
+ * every named event the orchestrator may emit. New event types are
+ * discovered automatically the first time the wrapper sees them
+ * (`addEventListener` is added on demand) — see the dynamic registration
+ * below.
+ *
+ * ## Reconnection
+ *
+ * Production deployments behind GCP / k8s ingress (and most load balancers)
+ * close idle TCP streams at ~30 s. When that happens `react-native-sse`
+ * fires `error` with `{ type: 'error', message: 'cannot parse response',
+ * xhrStatus: 200, xhrState: 4 }` — a clean upstream close, not a real
+ * transport failure. The native EventSource spec would auto-reconnect
+ * here, but `react-native-sse` does not in this scenario, so we wrap it.
+ *
+ * Strategy:
+ *   - On `error` or `close`, schedule a reconnect with exponential backoff
+ *     (capped at 30 s). On `open` of the new connection, reset the attempt
+ *     counter so a brief blip doesn't punish us forever.
+ *   - Track `lastEventId` across reconnects — the backend supports
+ *     `Last-Event-ID` replay via Redis, so we never lose an event that
+ *     fired during the gap.
+ *   - Don't escalate transient drops to `onError`: the orchestrator uses
+ *     that callback to switch to GET polling, which is a much worse UX
+ *     than a 1 s blip + replay. We still log the underlying error for
+ *     debugging.
+ *
+ * Path: `${baseUrl}/sessions/:sessionId/events` (baseUrl already includes `/public/sdk`).
+ * Backend: `OnboardingSseController GET /public/sdk/sessions/{sessionId}/events`.
+ */
+import type { OnboardingSessionEvent } from '../types';
+export declare const SSE_EVENTS_PATH = "/sessions";
+export interface SessionEventSourceOptions {
+    baseUrl: string;
+    sessionId: string;
+    sessionToken: string;
+    /** Last event_id (epoch millis) received; use "0" for first connection. */
+    lastEventId?: string;
+    /** Optional abort signal — closes the stream when fired. */
+    signal?: AbortSignal;
+    onEvent?: (event: OnboardingSessionEvent) => void;
+    onError?: (err: unknown) => void;
+}
+export declare function createSessionEventSource(options: SessionEventSourceOptions): () => void;
+//# sourceMappingURL=sse.d.ts.map

package/lib/typescript/transport/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/transport/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAGvD,eAAO,MAAM,eAAe,cAAc,CAAC;AA+B3C,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAClD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAClC;AAiBD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,MAAM,IAAI,CA6MZ"}