@authme/identity-verification 2.8.38 → 2.8.42

package/index.cjs

@@ -29087,6 +29087,7 @@ const fasRecognitionResultMapping = fasRecognitionResult => {
     [liveness.FasRecognitionResult.Pass]: core.StatusDescription.Pass,
     [liveness.FasRecognitionResult.Error]: core.StatusDescription.Error,
     [liveness.FasRecognitionResult.NeedMoreFrame]: core.StatusDescription.NeedMoreFrame,
+    [liveness.FasRecognitionResult.Motion]: core.StatusDescription.Motion,
     [liveness.FasRecognitionResult.NeedFaceToCamera]: core.StatusDescription.NeedFaceToCamera
   };
   return (_a = fasServiceStageMap[fasRecognitionResult]) !== null && _a !== void 0 ? _a : core.StatusDescription.Failed;
@@ -29200,7 +29201,12 @@ const sendFrame = (canvasSizeInfo, canvas, video, frameCallback, fps, bas64Forma
   const ctx = canvas.getContext('2d', {
     willReadFrequently: true
   });
-  return source$.pipe(rxjs.mergeMap(() => rxjs.animationFrames().pipe(limitFPS(fps), rxjs.filter(() => received && !(flags === null || flags === void 0 ? void 0 : flags.animating)), rxjs.tap(() => received = false), rxjs.tap(() => util.clearCanvas(canvas)), rxjs.map(() => util.getImageData(canvas, ctx, video, canvasSizeInfo, bas64Format, imageType)), rxjs.mergeMap(imageData => rxjs.from(frameCallback(imageData.data, imageData.base64, cardType, type)).pipe(rxjs.catchError(e => {
+  return source$.pipe(rxjs.mergeMap(() => rxjs.animationFrames().pipe(limitFPS(fps), rxjs.filter(() => received && !(flags === null || flags === void 0 ? void 0 : flags.animating)), rxjs.tap(() => received = false), rxjs.tap(() => util.clearCanvas(canvas)), rxjs.map(() => util.getImageData(canvas, ctx, video, canvasSizeInfo, bas64Format, imageType)), rxjs.tap(imageData => {
+    // 如果 imageData 為 null（canvas 尺寸無效），重置 received 讓下一幀可以繼續
+    if (imageData === null) {
+      received = true;
+    }
+  }), rxjs.filter(imageData => imageData !== null), rxjs.mergeMap(imageData => rxjs.from(frameCallback(imageData.data, imageData.base64, cardType, type)).pipe(rxjs.catchError(e => {
     // send to fast, ignore
     if (e instanceof core.AuthmeError && e.code === core.ErrorCode.RECOGNITION_NOT_AVAILABLE) {
       return rxjs.EMPTY;
@@ -29362,78 +29368,6 @@ const modal = arg => {
   authmeContainer.appendChild(domModal);
 };
 
-const popupView = arg => {
-  const authmeContainer = document.querySelector('.authme-container');
-  if (!authmeContainer) {
-    console.error('modal: authmeContainer not found');
-    return;
-  }
-  const uiThemeConfig = util.Storage.getItem('themeConfig');
-  function removePopview() {
-    var _a;
-    (_a = document.querySelector('.video-container__popupview')) === null || _a === void 0 ? void 0 : _a.remove();
-  }
-  const domPopupView = document.createElement('div');
-  const domPopupViewContainer = document.createElement('div');
-  const domTitleContainer = document.createElement('div');
-  const domTitle = document.createElement('div');
-  const domContentContainer = document.createElement('div');
-  const domContent = document.createElement('div');
-  const domFooterContainer = document.createElement('div');
-  const domConfirm = document.createElement('div');
-  const domCancel = document.createElement('div');
-  domPopupView.classList.add('video-container__popupview');
-  domPopupViewContainer.classList.add('video-container__popupview-container');
-  domTitleContainer.classList.add('video-container__popupview-title-container');
-  domTitle.classList.add('video-container__popupview-title');
-  domContentContainer.classList.add('video-container__popupview-content-container');
-  domContent.classList.add('video-container__popupview-content');
-  domFooterContainer.classList.add('video-container__popupview-footer-container');
-  domConfirm.classList.add('video-container__popupview-confirm');
-  domCancel.classList.add('video-container__popupview-cancel');
-  domPopupViewContainer.style.backgroundColor = uiThemeConfig.popupView.backgroundColor;
-  domPopupViewContainer.style.borderRadius = `${uiThemeConfig.popupView.cornerRadius}px`;
-  domPopupViewContainer.style.width = `${parseFloat(uiThemeConfig.popupView.width) * 100}%`;
-  util.uiThemeText(domTitle, uiThemeConfig.titleOne);
-  util.uiThemeText(domContent, uiThemeConfig.bodyTwo);
-  console.log('deviceType', uiThemeConfig.deviceType);
-  if (uiThemeConfig.deviceType === 'mobile') {
-    util.uiThemeSmallButton(domConfirm, uiThemeConfig.smallermMajorButton);
-  } else {
-    util.uiThemeButton(domConfirm, uiThemeConfig.majorButton);
-  }
-  if (arg.cancel) {
-    util.uiThemeSmallButton(domCancel, uiThemeConfig.smallerMinorButton);
-    domCancel.innerHTML = arg.cancel;
-    domCancel.addEventListener('click', () => __awaiter(void 0, void 0, void 0, function* () {
-      if (arg.onCancel) {
-        arg.onCancel();
-      }
-      removePopview();
-    }));
-  }
-  domConfirm.addEventListener('click', () => __awaiter(void 0, void 0, void 0, function* () {
-    if (arg.onConfirm) {
-      arg.onConfirm();
-    }
-    removePopview();
-  }));
-  domTitle.innerHTML = arg.title;
-  domContent.innerHTML = arg.content;
-  domConfirm.innerHTML = arg.confirm;
-  domPopupViewContainer.appendChild(domTitleContainer);
-  domTitleContainer.appendChild(domTitle);
-  domPopupViewContainer.appendChild(domContentContainer);
-  domContentContainer.appendChild(domContent);
-  domPopupViewContainer.appendChild(domFooterContainer);
-  if (arg.cancel) {
-    domFooterContainer.appendChild(domCancel);
-  }
-  domFooterContainer.appendChild(domConfirm);
-  domPopupView.appendChild(domPopupViewContainer);
-  authmeContainer.appendChild(domPopupView);
-};
-
 function startLiveness(config) {
   return __awaiter(this, void 0, void 0, function* () {
     const translateService = core.getTranslateInstance();
@@ -29457,7 +29391,7 @@ function startLiveness(config) {
     setStatusEvent$2(core.StatusEvent.Passive);
     setStatusView$1(core.StatusView.Init);
     let engineInited = false;
-    let expiredIn;
+    let lastFasStatus = null;
     // render view
     // const {
     //   container,
@@ -29495,44 +29429,6 @@ function startLiveness(config) {
     };
     const canvas = document.createElement('canvas');
     let uiThemeConfig = util.themeConfigDefault;
-    // let sdkFlowTimeout: NodeJS.Timeout;
-    let sdkFlowTimeout = null;
-    const timeout$ = new rxjs.Subject();
-    // function makeSDKFlowTimeout(expiredIn: number) {
-    //   return setTimeout(async () => {
-    //     asyncShowErrorMessage(
-    //       translateService.translate('sdk.general.error.timeout.content'),
-    //       false
-    //     );
-    //     await waitTime(3 * TIME_UNIT.SECOND);
-    //     timeout$.next({
-    //       isSuccess: false as const,
-    //       code: `${ErrorCode.ID_RECOGNITION_TIMEOUT}`,
-    //       message: new AuthmeError(ErrorCode.ID_RECOGNITION_TIMEOUT).message,
-    //     });
-    //   }, expiredIn * TIME_UNIT.SECOND);
-    // }
-    function makeSDKFlowTimeout(expiredIn) {
-      return rxjs.timer(expiredIn * util.TIME_UNIT.SECOND).pipe(rxjs.switchMap(() => new rxjs.Observable(observer => {
-        config.onDestroy();
-        popupView({
-          title: translateService.translate('sdk.general.error.timeout.title'),
-          content: translateService.translate('sdk.general.error.timeout.content'),
-          confirm: translateService.translate('sdk.general.confirm'),
-          onConfirm: () => {
-            observer.next(true);
-            observer.complete();
-          }
-        });
-      }))).subscribe(() => {
-        timeout$.next({
-          isSuccess: false,
-          code: `${core.ErrorCode.ID_RECOGNITION_TIMEOUT}`,
-          message: new core.AuthmeError(core.ErrorCode.ID_RECOGNITION_TIMEOUT).message,
-          data: {}
-        });
-      });
-    }
     function initOptions() {
       return __awaiter(this, void 0, void 0, function* () {
         const themeConfigApi = yield config.getOptionConfig();
@@ -29568,7 +29464,6 @@ function startLiveness(config) {
     //   需要等到介紹頁完成後，才開始執行 config.init (engine init 流程)。
     const init$ = rxjs.defer(() => config.init()).pipe(rxjs.tap(res => {
       livenessConfig = res.parameters;
-      expiredIn = res.expiredIn;
     }), rxjs.catchError(error => __awaiter(this, void 0, void 0, function* () {
       var _a, _b, _c, _d, _e, _f, _g, _h, _j;
       const EVENT_NAME_ERROR_CODE = 7;
@@ -29626,6 +29521,9 @@ function startLiveness(config) {
     })));
     const applyTextByResult = result => {
       // debugLog('fas-response', result);
+      if (lastFasStatus !== result.eStatus) {
+        lastFasStatus = result.eStatus;
+      }
       sendStatusDescription$2(fasRecognitionResultMapping(result.eStatus));
       switch (result.eStatus) {
         case liveness.FasRecognitionResult.NoFace:
@@ -29683,6 +29581,10 @@ function startLiveness(config) {
           uiComponentLiveness.statusText.textContent = translateService.translate('sdk.general.verify.success');
           setBorderStatus('pass');
           break;
+        case liveness.FasRecognitionResult.Motion:
+          uiComponentLiveness.statusText.textContent = translateService.translate('sdk.liveness.detection.motion');
+          setBorderStatus('pass');
+          break;
         case liveness.FasRecognitionResult.Pass:
           if (result.eStage === liveness.EAuthMeFASServiceStage.Scale) {
             setBorderStatus(null);
@@ -29774,9 +29676,6 @@ function startLiveness(config) {
       }
       setCorrectViewHeight();
     }), rxjs.switchMap(() => init$), rxjs.switchMap(() => requestCamera$), rxjs.tap(() => {
-      if (expiredIn) {
-        sdkFlowTimeout = makeSDKFlowTimeout(expiredIn);
-      }
       engineInited = true;
     }), rxjs.switchMap(() => rxjs.from(util.waitTime(1)).pipe(rxjs.tap(() => uiComponentBasic.videoContainer.style.zIndex = '101'))), rxjs.switchMap(() => rxjs.from(util.getCanvasSize(uiComponentBasic.video))), rxjs.switchMap(canvasSizeInfo => rxjs.from(config.onStart(canvasSizeInfo)).pipe(rxjs.tap(params => {
       const {
@@ -29826,26 +29725,16 @@ function startLiveness(config) {
     // ),
     rxjs.filter(({
       result
-    }) => (result.eStatus === liveness.FasRecognitionResult.Pass || result.eStatus === liveness.FasRecognitionResult.Failed) && result.eStage === liveness.EAuthMeFASServiceStage.Done), rxjs.map(data => {
-      // console.log('data', data);
+    }) => (result.eStatus === liveness.FasRecognitionResult.Pass || result.eStatus === liveness.FasRecognitionResult.Failed || result.eStatus === liveness.FasRecognitionResult.DepthFake) && result.eStage === liveness.EAuthMeFASServiceStage.Done), rxjs.take(1),
+    // 只處理第一個成功結果，防止 engine 繼續運行導致重複上傳
+    rxjs.map(data => {
+      // DepthFake 和 Failed 都視為失敗
+      const isSuccess = data.result.eStatus === liveness.FasRecognitionResult.Pass;
       return Object.assign(Object.assign({}, data), {
-        isSuccess: true
+        isSuccess
       });
-    }), rxjs.raceWith(timeout$) // 確保 timeout 之後一定會有失敗結果
-    )))),
-    // switchMap((resp) =>
-    //   window.navigator.onLine
-    //     ? of(resp)
-    //     : from(
-    //       asyncOnLineShowErrorMessage(
-    //         translateService.translate('sdk.general.error.alert.offline'),
-    //         translateService.translate('sdk.general.error.retry'),
-    //         false
-    //       )
-    //     ).pipe(map(() => resp))
-    // ),
-    rxjs.tap(res => {
-      // console.log('res', res);
+    }))))), rxjs.tap(res => {
+      // Engine timeout 會在 res.isSuccess 為 false 時發生
       if (res.isSuccess) {
         sendStatusDescription$2(core.StatusDescription.UploadingStart);
         util.startSpinner({
@@ -29854,12 +29743,10 @@ function startLiveness(config) {
           backgroundOpaque: true
         });
       } else {
-        console.warn('Timeout 發生，返回錯誤結果');
+        // Engine 返回 timeout 或其他失敗狀態
         throw new core.AuthmeError(core.ErrorCode.ID_RECOGNITION_TIMEOUT);
       }
-    }), rxjs.filter(res => res.isSuccess),
-    // **只執行成功的情況**
-    rxjs.switchMap(() => rxjs.defer(() => config.onSuccess())));
+    }), rxjs.filter(res => res.isSuccess), rxjs.switchMap(() => rxjs.defer(() => config.onSuccess())));
     return rxjs.of({}).pipe(() => {
       eventListenerService$2.start();
       setStatusView$1(core.StatusView.Init);
@@ -29962,11 +29849,6 @@ function startLiveness(config) {
         } finally {
           uiComponentBasic.video.srcObject = null;
         }
-        // if (sdkFlowTimeout) clearTimeout(sdkFlowTimeout);
-        if (sdkFlowTimeout) {
-          sdkFlowTimeout.unsubscribe();
-          sdkFlowTimeout = null;
-        }
         eventListenerService$2.stop();
         uiComponentBasic.container.remove();
         unsubscribe$.next();
@@ -30491,18 +30373,20 @@ const renderOCRMask = params => {
       borderOpacity = params.strokeOpacity;
     }
     if (params.type === 'bordered') {
-      const rectX = newCardPoints[0].x * windowWidth;
-      const rectY = newCardPoints[0].y * windowHeight;
-      const rectWidth = newCardPoints[1].x * windowWidth - rectX;
-      const rectHeight = newCardPoints[3].y * windowHeight - rectY;
-      pathOfFrame.setAttribute('visibility', 'hidden');
-      rectOfFrame.setAttribute('visibility', 'visible');
-      rectOfFrame.setAttribute('x', rectX.toString());
-      rectOfFrame.setAttribute('y', rectY.toString());
-      rectOfFrame.setAttribute('width', rectWidth.toString());
-      rectOfFrame.setAttribute('height', rectHeight.toString());
-      rectOfFrame.setAttribute('stroke-opacity', borderOpacity.toString());
-      svg.appendChild(rectOfFrame);
+      // 使用 path 畫傾斜的四邊形框線（支援防偽的傾斜效果）
+      rectOfFrame.setAttribute('visibility', 'hidden');
+      pathOfFrame.setAttribute('visibility', 'visible');
+      // 計算四個角的座標
+      const points = newCardPoints.map(p => ({
+        x: p.x * windowWidth,
+        y: p.y * windowHeight
+      }));
+      // 使用 path 畫閉合的四邊形
+      const dBordered = `M ${points[0].x},${points[0].y} ` + `L ${points[1].x},${points[1].y} ` + `L ${points[2].x},${points[2].y} ` + `L ${points[3].x},${points[3].y} Z`;
+      pathOfFrame.setAttribute('d', dBordered);
+      pathOfFrame.setAttribute('stroke-opacity', borderOpacity.toString());
+      pathOfFrame.setAttribute('stroke-width', '3');
+      svg.appendChild(pathOfFrame);
     } else {
       rectOfFrame.setAttribute('visibility', 'hidden');
       pathOfFrame.setAttribute('visibility', 'visible');
@@ -30592,11 +30476,10 @@ const renderOCRMask = params => {
     path.setAttribute('d', d);
     // Set the same path for the border to match the mask exactly
     borderPath.setAttribute('d', d);
+    // Anti-fraud 模式下：隱藏 pathOfFrame 和 rectOfFrame，只顯示 borderPath（傾斜的框）
     if (antiFraud) {
-      setBorderType({
-        type: borderType,
-        mirrored: _mirrored
-      });
+      pathOfFrame.setAttribute('visibility', 'hidden');
+      rectOfFrame.setAttribute('visibility', 'hidden');
     }
   };
   function setBorderSuccess(color, opacity) {
@@ -30619,12 +30502,13 @@ const renderOCRMask = params => {
     if (borderType === 'bordered') {
       rectOfFrame.setAttribute('stroke', color);
       rectOfFrame.setAttribute('stroke-opacity', opacity.toString());
-      borderPath.setAttribute('stroke', color);
-      borderPath.setAttribute('stroke-opacity', opacity.toString());
     } else {
       pathOfFrame.setAttribute('stroke', color);
       pathOfFrame.setAttribute('stroke-opacity', opacity.toString());
     }
+    // 同時更新 borderPath (用於 anti-fraud 模式的傾斜框線)
+    borderPath.setAttribute('stroke', color);
+    borderPath.setAttribute('stroke-opacity', opacity.toString());
   }
   function frameImage(faceMode, zIndex, base64, color, opacity) {
     color = color !== null && color !== void 0 ? color : OcrFrame.imageColor;
@@ -31922,6 +31806,78 @@ const fraudScanIntroPage = arg => {
   authmeContainer.appendChild(domModal);
 };
 
+const popupView = arg => {
+  const authmeContainer = document.querySelector('.authme-container');
+  if (!authmeContainer) {
+    console.error('modal: authmeContainer not found');
+    return;
+  }
+  const uiThemeConfig = util.Storage.getItem('themeConfig');
+  function removePopview() {
+    var _a;
+    (_a = document.querySelector('.video-container__popupview')) === null || _a === void 0 ? void 0 : _a.remove();
+  }
+  const domPopupView = document.createElement('div');
+  const domPopupViewContainer = document.createElement('div');
+  const domTitleContainer = document.createElement('div');
+  const domTitle = document.createElement('div');
+  const domContentContainer = document.createElement('div');
+  const domContent = document.createElement('div');
+  const domFooterContainer = document.createElement('div');
+  const domConfirm = document.createElement('div');
+  const domCancel = document.createElement('div');
+  domPopupView.classList.add('video-container__popupview');
+  domPopupViewContainer.classList.add('video-container__popupview-container');
+  domTitleContainer.classList.add('video-container__popupview-title-container');
+  domTitle.classList.add('video-container__popupview-title');
+  domContentContainer.classList.add('video-container__popupview-content-container');
+  domContent.classList.add('video-container__popupview-content');
+  domFooterContainer.classList.add('video-container__popupview-footer-container');
+  domConfirm.classList.add('video-container__popupview-confirm');
+  domCancel.classList.add('video-container__popupview-cancel');
+  domPopupViewContainer.style.backgroundColor = uiThemeConfig.popupView.backgroundColor;
+  domPopupViewContainer.style.borderRadius = `${uiThemeConfig.popupView.cornerRadius}px`;
+  domPopupViewContainer.style.width = `${parseFloat(uiThemeConfig.popupView.width) * 100}%`;
+  util.uiThemeText(domTitle, uiThemeConfig.titleOne);
+  util.uiThemeText(domContent, uiThemeConfig.bodyTwo);
+  console.log('deviceType', uiThemeConfig.deviceType);
+  if (uiThemeConfig.deviceType === 'mobile') {
+    util.uiThemeSmallButton(domConfirm, uiThemeConfig.smallermMajorButton);
+  } else {
+    util.uiThemeButton(domConfirm, uiThemeConfig.majorButton);
+  }
+  if (arg.cancel) {
+    util.uiThemeSmallButton(domCancel, uiThemeConfig.smallerMinorButton);
+    domCancel.innerHTML = arg.cancel;
+    domCancel.addEventListener('click', () => __awaiter(void 0, void 0, void 0, function* () {
+      if (arg.onCancel) {
+        arg.onCancel();
+      }
+      removePopview();
+    }));
+  }
+  domConfirm.addEventListener('click', () => __awaiter(void 0, void 0, void 0, function* () {
+    if (arg.onConfirm) {
+      arg.onConfirm();
+    }
+    removePopview();
+  }));
+  domTitle.innerHTML = arg.title;
+  domContent.innerHTML = arg.content;
+  domConfirm.innerHTML = arg.confirm;
+  domPopupViewContainer.appendChild(domTitleContainer);
+  domTitleContainer.appendChild(domTitle);
+  domPopupViewContainer.appendChild(domContentContainer);
+  domContentContainer.appendChild(domContent);
+  domPopupViewContainer.appendChild(domFooterContainer);
+  if (arg.cancel) {
+    domFooterContainer.appendChild(domCancel);
+  }
+  domFooterContainer.appendChild(domConfirm);
+  domPopupView.appendChild(domPopupViewContainer);
+  authmeContainer.appendChild(domPopupView);
+};
+
 const ocrResultModal = arg => {
   let modifiedDetails = {};
   const authmeContainer = document.querySelector('.authme-container');
@@ -32142,6 +32098,10 @@ const ocrResultModal = arg => {
   }
 
   function parseRegex(input, forceUnicode = false) {
+    // 處理 undefined 或 null 輸入
+    if (!input) {
+      return null;
+    }
     try {
       let pattern = input;
       let flags = '';
@@ -32436,6 +32396,7 @@ function startOCR(config) {
       fraudRetryTimes: 1,
       fraudTimeout: 52,
       fraudMaxFps: 2,
+      ocrMaxFps: 2,
       captureTimeout: config.ocrConfig.captureTimeout
     };
     let cardSizeInfo = {
@@ -32729,9 +32690,9 @@ function startOCR(config) {
             uiComponentOCRMask.setCardBorderColor('error');
             break;
           case idRecognition.EAuthMeIDCardAntiFraudStatus.Error:
-            uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.error.alert.serverError');
-            util.showErrorMessage(translateService.translate('sdk.general.error.alert.serverError'), false);
+            uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.serverError');
             sendStatusDescription$1(core.StatusDescription.Error);
+            uiComponentOCRMask.setCardBorderColor('error');
             break;
           case idRecognition.EAuthMeIDCardAntiFraudStatus.NeedDeformationFrontal:
             needDeformationCount++;
@@ -32825,16 +32786,32 @@ function startOCR(config) {
           return ocrSendFrameAnimation;
         }
       }), rxjs.map(x => x.result), rxjs.concatMap(x => __awaiter(this, void 0, void 0, function* () {
+        // V9: 檢測 stage 變化，如果 stage 變化了，先顯示 pass 顏色
+        // V9 Engine 不再返回 StagePass 狀態，而是直接切換到下一個 stage
+        const stageChanged = x.eStage !== currentAntiFraudStage && currentAntiFraudStage !== undefined && x.eStage !== idRecognition.EAuthMeIDCardAntiFraudStage.Done;
+        if (stageChanged) {
+          // 顯示 pass 顏色表示上一個 stage 完成
+          uiComponentOCRMask.setCardBorderColor('pass');
+          uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.stagePass');
+          previosAntiFraudAnimateTime = Date.now();
+          // 等待一段時間讓用戶看到顏色變化
+          yield new Promise(resolve => setTimeout(resolve, 1500));
+          yield stopAnimate();
+          needDeformationCount = 0;
+          previosAntiFraudAnimateTime = 0;
+          // 更新 currentAntiFraudStage 並設定新的 stage 框線
+          currentAntiFraudStage = x.eStage;
+          // 調用 cardRotateByStage 更新框線位置，但傳入 mandatoryRotate = true
+          yield cardRotateByStage(x.eStage, true);
+          // 跳過這一幀的 applyTextByResult，直接返回
+          return x;
+        }
         yield applyTextByResult(x);
         cardRotateByStage(x.eStage);
         if (isTutorialFinish) {
           // 文字更新移到 cardRotateAnimationProcess 中，確保與動畫同步
           x.eStage;
         }
-        if (x.eStage !== currentAntiFraudStage) {
-          needDeformationCount = 0;
-          previosAntiFraudAnimateTime = 0;
-        }
         if (!uiThemeConfig.isFraudAnimationLoadingPageEnabled) {
           // if (config.ocrConfig.disableTutorial) {
           util.stopSpinner();
@@ -32919,6 +32896,12 @@ function startOCR(config) {
             sendStatusDescription$1(core.StatusDescription.Reflective);
             uiComponentOCRMask.setCardBorderColor('error');
             break;
+          case idRecognition.EAuthMeCardOCRStatus.Gray:
+            // V9 新增: Gray 狀態表示灰階或顏色異常，顯示與 Blur 類似的提示
+            uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.blur');
+            sendStatusDescription$1(core.StatusDescription.Gray);
+            uiComponentOCRMask.setCardBorderColor('error');
+            break;
           case idRecognition.EAuthMeCardOCRStatus.Blur:
             uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.blur');
             sendStatusDescription$1(core.StatusDescription.Blur);
@@ -32946,6 +32929,19 @@ function startOCR(config) {
             sendStatusDescription$1(core.StatusDescription.Reflective);
             uiComponentOCRMask.setCardBorderColor('error');
             break;
+          case idRecognition.EAuthMeMRZServiceStatus.Blur:
+            // V9 新增: MRZ Blur 狀態
+            uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.blur');
+            sendStatusDescription$1(core.StatusDescription.Blur);
+            uiComponentOCRMask.setCardBorderColor('error');
+            blurCount++;
+            break;
+          case idRecognition.EAuthMeMRZServiceStatus.MRZNotFound:
+            // V9 新增: MRZ區域未找到（卡片存在但無法識別MRZ區）
+            uiComponentOCR.statusText.textContent = translateService.translate('sdk.general.verify.error.wrongCardType');
+            sendStatusDescription$1(core.StatusDescription.WrongCardType);
+            uiComponentOCRMask.setCardBorderColor('error');
+            break;
         }
         if (blurCount === 2) {
           showCameraSwitchButton(deviceMetas);
@@ -33078,7 +33074,12 @@ function startOCR(config) {
         const ctx = canvas.getContext('2d', {
           willReadFrequently: true
         });
-        return source$.pipe(rxjs.mergeMap(() => rxjs.animationFrames().pipe(limitFPS(fps), rxjs.filter(() => received && !ocrSendFrameAnimation), rxjs.tap(() => received = false), rxjs.tap(() => util.clearCanvas(canvas)), rxjs.map(() => util.getImageData(canvas, ctx, video, canvasSizeInfo, bas64Format, imageType)), rxjs.mergeMap(imageData => rxjs.from(frameCallback(imageData.data, imageData.base64, cardType, type)).pipe(rxjs.catchError(e => {
+        return source$.pipe(rxjs.mergeMap(() => rxjs.animationFrames().pipe(limitFPS(fps), rxjs.filter(() => received && !ocrSendFrameAnimation), rxjs.tap(() => received = false), rxjs.tap(() => util.clearCanvas(canvas)), rxjs.map(() => util.getImageData(canvas, ctx, video, canvasSizeInfo, bas64Format, imageType)), rxjs.tap(imageData => {
+          // 如果 imageData 為 null（canvas 尺寸無效），重置 received 讓下一幀可以繼續
+          if (imageData === null) {
+            received = true;
+          }
+        }), rxjs.filter(imageData => imageData !== null), rxjs.mergeMap(imageData => rxjs.from(frameCallback(imageData.data, imageData.base64, cardType, type)).pipe(rxjs.catchError(e => {
           // send to fast, ignore
           if (e instanceof core.AuthmeError && e.code === core.ErrorCode.RECOGNITION_NOT_AVAILABLE) {
             return rxjs.EMPTY;
@@ -33090,7 +33091,7 @@ function startOCR(config) {
         })), rxjs.tap(() => received = true))))));
       };
       const autoCapture = canvasSizeInfo => {
-        return rxjs.of(canvasSizeInfo).pipe(handleOcrSendFrame(canvasSizeInfo, uiComponentOCR.image, uiComponentBasic.video, config.recognition, 30, false, config.ocrConfig.resultImageFormat, cardType, type), rxjs.tap(x => applyTextByResult(x.result)), rxjs.filter(({
+        return rxjs.of(canvasSizeInfo).pipe(handleOcrSendFrame(canvasSizeInfo, uiComponentOCR.image, uiComponentBasic.video, config.recognition, ocrEngineConfig.ocrMaxFps, false, config.ocrConfig.resultImageFormat, cardType, type), rxjs.tap(x => applyTextByResult(x.result)), rxjs.filter(({
           result
         }) => result.eStatus === idRecognition.EAuthMeCardOCRStatus.Pass || result.eStatus === idRecognition.EAuthMeMRZServiceStatus.Success), rxjs.take(1), rxjs.tap(() => {
           if (countdownCaptureTimer && countdownCaptureTimer.end && !countdownCaptureTimer.end()) {
@@ -33108,38 +33109,47 @@ function startOCR(config) {
           util.hideElement(uiComponentOCR.scanAnimationContainer);
         }), rxjs.map(() => resp))), rxjs.switchMap(({
           result
-        }) => rxjs.from(type === idRecognition.EAuthMeCardClass.Passport && config.ocrConfig.disablePassportConfirm || !config.ocrConfig.confirmPageEnabled ? rxjs.of(false) : checkConfirmImage(result.imageData, result.iWidth, result.iHeight)).pipe(rxjs.switchMap(needRetry => {
-          if (countdownCaptureTimer && countdownCaptureTimer.end) {
-            if (needRetry && !countdownCaptureTimer.end()) {
-              countdownCaptureTimer = countdownTimer(captureTimeoutTimer, () => {
-                util.showElement(captureBtn);
-                toastManualCapture = toast({
-                  message: '<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_19494_3109)"><path d="M19.5 19.5H4.5C4.10218 19.5 3.72064 19.342 3.43934 19.0607C3.15804 18.7794 3 18.3978 3 18V7.5C3 7.10218 3.15804 6.72064 3.43934 6.43934C3.72064 6.15804 4.10218 6 4.5 6H7.5L9 3.75H15L16.5 6H19.5C19.8978 6 20.2794 6.15804 20.5607 6.43934C20.842 6.72064 21 7.10218 21 7.5V18C21 18.3978 20.842 18.7794 20.5607 19.0607C20.2794 19.342 19.8978 19.5 19.5 19.5Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/><path d="M12 15.75C13.864 15.75 15.375 14.239 15.375 12.375C15.375 10.511 13.864 9 12 9C10.136 9 8.625 10.511 8.625 12.375C8.625 14.239 10.136 15.75 12 15.75Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/></g><defs><clipPath id="clip0_19494_3109"><rect width="24" height="24" fill="white"/></clipPath></defs></svg>' + translateService.translate('sdk.general.manualCapture'),
-                  transition: true
+        }) => {
+          // V9: 檢查卡片圖像是否可用
+          const cardResult = result;
+          const hasValidImage = cardResult.imageData && cardResult.iWidth > 0 && cardResult.iHeight > 0;
+          if (!hasValidImage) {
+            console.warn('[OCR] Card image not available, skipping confirm page. iWidth:', cardResult.iWidth, 'iHeight:', cardResult.iHeight, 'imageData:', cardResult.imageData ? 'exists' : 'null');
+          }
+          const shouldSkipConfirm = type === idRecognition.EAuthMeCardClass.Passport && config.ocrConfig.disablePassportConfirm || !config.ocrConfig.confirmPageEnabled || !hasValidImage; // V9: 如果沒有卡片圖像，跳過確認頁
+          return rxjs.from(shouldSkipConfirm ? rxjs.of(false) : checkConfirmImage(cardResult.imageData, cardResult.iWidth, cardResult.iHeight)).pipe(rxjs.switchMap(needRetry => {
+            if (countdownCaptureTimer && countdownCaptureTimer.end) {
+              if (needRetry && !countdownCaptureTimer.end()) {
+                countdownCaptureTimer = countdownTimer(captureTimeoutTimer, () => {
+                  util.showElement(captureBtn);
+                  toastManualCapture = toast({
+                    message: '<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_19494_3109)"><path d="M19.5 19.5H4.5C4.10218 19.5 3.72064 19.342 3.43934 19.0607C3.15804 18.7794 3 18.3978 3 18V7.5C3 7.10218 3.15804 6.72064 3.43934 6.43934C3.72064 6.15804 4.10218 6 4.5 6H7.5L9 3.75H15L16.5 6H19.5C19.8978 6 20.2794 6.15804 20.5607 6.43934C20.842 6.72064 21 7.10218 21 7.5V18C21 18.3978 20.842 18.7794 20.5607 19.0607C20.2794 19.342 19.8978 19.5 19.5 19.5Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/><path d="M12 15.75C13.864 15.75 15.375 14.239 15.375 12.375C15.375 10.511 13.864 9 12 9C10.136 9 8.625 10.511 8.625 12.375C8.625 14.239 10.136 15.75 12 15.75Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/></g><defs><clipPath id="clip0_19494_3109"><rect width="24" height="24" fill="white"/></clipPath></defs></svg>' + translateService.translate('sdk.general.manualCapture'),
+                    transition: true
+                  });
                 });
-              });
-              countdownCaptureTimer.init();
-            }
-            if (!needRetry) {
-              countdownCaptureTimer.clear();
-              util.hideElement(captureBtn);
+                countdownCaptureTimer.init();
+              }
+              if (!needRetry) {
+                countdownCaptureTimer.clear();
+                util.hideElement(captureBtn);
+              }
             }
-          }
-          util.startSpinner({
-            text: translateService.translate('sdk.general.uploading'),
-            statement: translateService.translate('sdk.general.footer'),
-            backgroundOpaque: true
-          });
-          return needRetry ? rxjs.of(true) : rxjs.from(config.confirmImage({
-            type,
-            cardType
-          })).pipe(rxjs.tap(() => sendStatusAction$1(core.StatusAction.Uploading)), rxjs.map(confirmResp => !confirmResp));
-        }), rxjs.tap(() => {
-          // hideElement(uiComponentOCR.confirmImageContainer);
-          util.hideElement(uiComponentOCR.confirmContainer);
-          util.stopSpinner();
-          showVideoElement();
-        }), rxjs.switchMap(needRetry => needRetry ? recognition(true) : rxjs.of(true)))));
+            util.startSpinner({
+              text: translateService.translate('sdk.general.uploading'),
+              statement: translateService.translate('sdk.general.footer'),
+              backgroundOpaque: true
+            });
+            return needRetry ? rxjs.of(true) : rxjs.from(config.confirmImage({
+              type,
+              cardType
+            })).pipe(rxjs.tap(() => sendStatusAction$1(core.StatusAction.Uploading)), rxjs.map(confirmResp => !confirmResp));
+          }), rxjs.tap(() => {
+            // hideElement(uiComponentOCR.confirmImageContainer);
+            util.hideElement(uiComponentOCR.confirmContainer);
+            util.stopSpinner();
+            showVideoElement();
+          }), rxjs.switchMap(needRetry => needRetry ? recognition(true) : rxjs.of(true)));
+        }));
       };
       const recognition = retry => {
         return init(retry).pipe(rxjs.tap(() => {
@@ -33431,7 +33441,7 @@ function startOCR(config) {
         const cardType = currentType('get', null).cardType;
         const ctx = uiComponentOCR.image.getContext('2d');
         const imageData = util.getImageData(uiComponentOCR.image, ctx, uiComponentBasic.video, canvasSizeInfo, false, config.ocrConfig.resultImageFormat);
-        const imageBlob = util.UintArrayToBlob(canvasSizeInfo.width, canvasSizeInfo.height, imageData.data);
+        const imageBlob = imageData ? util.UintArrayToBlob(canvasSizeInfo.width, canvasSizeInfo.height, imageData.data) : undefined;
         const cancelResultObj = {
           isSuccess: false,
           code: `${core.ErrorCode.USER_CANCEL}`,
@@ -33782,7 +33792,7 @@ function startOCR(config) {
     function cardRotateByStage(stage, mandatoryRotate = false, point) {
       return __awaiter(this, void 0, void 0, function* () {
         if ((stage === idRecognition.EAuthMeIDCardAntiFraudStage.Done || stage === currentAntiFraudStage) && mandatoryRotate === false) return;
-        const cardMatchROI = point ? point : config.getCardMatchROI ? yield config.getCardMatchROI() : null;
+        const cardMatchROI = point ? point : config.getCardMatchROI ? yield config.getCardMatchROI(stage) : null;
         if (!cardMatchROI || cardMatchROI.length == 0) throw new core.AuthmeError(core.ErrorCode.SDK_INTERNAL_ERROR, 'getCardMatchROI is null');
         uiComponentOCRMask.setCardBorderColor('error');
         // 只有左右翻轉時需要正規化座標（確保左右邊平行）
@@ -34516,6 +34526,11 @@ class LivenessVerifyModule {
   }
 }
 
+/**
+ * Debug flag for FAS (Face Authentication Service) encryption flow.
+ * Set to true to enable detailed logging for debugging encryption issues.
+ */
+const DEBUG_FAS = false;
 function handleUploadError$1(_error) {
   return new Promise(resolve => {
     util.uploadModal({
@@ -34553,12 +34568,18 @@ class LivenessModule {
       let id = '';
       let pubKey = '';
       let shouldEncrypt = false;
+      // 保存 API 返回的參數，避免在 onStart 中被覆蓋
+      let apiTimeoutSec;
+      let apiFasThreshold;
       const encryptDataBase64 = data => __awaiter(this, void 0, void 0, function* () {
         const dataString = JSON.stringify(data);
         const encoder = new TextEncoder();
         const uint8Array = encoder.encode(dataString);
-        // TODO check encrypt function
         const resultEncrypt = yield this.fasService.encryptBlob(uint8Array, pubKey);
+        if (!resultEncrypt) {
+          console.error('[encryptDataBase64] encryptBlob returned null/empty');
+          throw new core.AuthmeError(core.ErrorCode.SDK_INTERNAL_ERROR, 'encryptBlob failed');
+        }
         return resultEncrypt;
       });
       const handleUpload = (id, frameList, resultList, meta, config, shouldEncrypt, encryptDataBase64) => __awaiter(this, void 0, void 0, function* () {
@@ -34580,7 +34601,6 @@ class LivenessModule {
       try {
         const result = yield rxjs.firstValueFrom(yield startLiveness({
           getOptionConfig: () => __awaiter(this, void 0, void 0, function* () {
-            console.log('config.deviceType', config.deviceType);
             const res = yield liveness.LivenessAPI.IdentityVerification.option(config.deviceType);
             const themeId = res.themeId;
             if (!themeId) {
@@ -34595,6 +34615,10 @@ class LivenessModule {
             id = resp.id;
             pubKey = resp.parameters.pubKey;
             shouldEncrypt = (_a = resp.shouldEncrypt) !== null && _a !== void 0 ? _a : shouldEncrypt;
+            if (DEBUG_FAS) ;
+            // 根據 shouldEncrypt 決定是否設置 report key
+            // shouldEncrypt = true: 清空 report key，讓 getReport() 返回未加密的 base64，由 SDK 加密整個 payload
+            // shouldEncrypt = false: 設置 report key，讓 getReport() 返回 engine 加密的 report
             if (!shouldEncrypt) {
               yield this.fasService.setPublicKeyForJson(pubKey);
             } else {
@@ -34609,8 +34633,11 @@ class LivenessModule {
             //   fRight: 0.7,
             //   fBottom: 0.7,
             // };
-            params.timeoutSec = resp.parameters.fasTimeout || params.timeoutSec;
-            params.fFASTh = resp.parameters.fasThreshold || params.fFASTh;
+            // 保存 API 參數，在 onStart 中使用
+            apiTimeoutSec = resp.parameters.fasTimeout || params.timeoutSec;
+            apiFasThreshold = resp.parameters.fasThreshold || params.fFASTh;
+            params.timeoutSec = apiTimeoutSec;
+            params.fFASTh = apiFasThreshold;
             yield this.fasService.setParams(params);
             yield this.fasService.setStage(resp.parameters.fasStages.map(x => `EAuthMeFASServiceStage_${x}`));
             // return resp.parameters;
@@ -34653,8 +34680,15 @@ class LivenessModule {
             params.faceROI.fRight = 1 - (1 - widthPercent) / 2;
             params.faceROI.fTop = (1 - heightPercent) / 2;
             params.faceROI.fBottom = 1 - (1 - heightPercent) / 2;
-            yield this.fasService.setParams(params);
+            // 保留 API 設定的 timeout 和 threshold，避免被 getParams() 的預設值覆蓋
+            if (apiTimeoutSec !== undefined) {
+              params.timeoutSec = apiTimeoutSec;
+            }
+            if (apiFasThreshold !== undefined) {
+              params.fFASTh = apiFasThreshold;
+            }
             yield this.fasService.setFrameSize(frameWidth, frameHeight);
+            yield this.fasService.setParams(params);
             yield this.fasService.startSession();
             return params;
           }),
@@ -34809,12 +34843,27 @@ class LivenessModule {
         data: meta
       };
       if (shouldEncrypt) {
-        postData.data = atob(meta);
+        // shouldEncrypt = true 時，沒有設置 report key，
+        // getReport() 返回的是 base64 編碼的未加密 JSON
+        // 需要先 atob 解碼成純 JSON 字串（保持為字串，與 Android SDK 一致）
+        // 然後用 encryptDataBase64 加密整個 postData
+        try {
+          const decodedMeta = atob(meta);
+          if (DEBUG_FAS) ;
+          postData.data = decodedMeta; // 保持為字串，與 Android 一致
+        } catch (e) {
+          console.error('[uploadMeta] atob failed:', e);
+          // 如果 atob 失敗，可能已經是純 JSON 字串，保持原樣
+        }
+
+        const encrypted = yield encryptDataBase64(postData);
         return liveness.LivenessAPI.IdentityVerification.uploadMeta({
           id: id,
-          encryptedBase64String: yield encryptDataBase64(postData)
+          encryptedBase64String: encrypted
         });
       } else {
+        // shouldEncrypt = false 時，已設置 report key，
+        // getReport() 返回的是 engine 加密過的 base64 字符串
         return liveness.LivenessAPI.IdentityVerification.uploadMeta(postData);
       }
       // return LivenessAPI.IdentityVerification.uploadMeta({
@@ -35116,13 +35165,19 @@ class MRZModule {
             pubKey = resp.parameters.pubKey;
             scanId = resp.scanId;
             uploadFullFrame = (_c = (_b = resp.parameters.fraud) === null || _b === void 0 ? void 0 : _b.collectAllFrames) !== null && _c !== void 0 ? _c : config.uploadFullFrame;
-            if (resp.parameters.pubKey) {
+            // 根據 shouldEncrypt 決定是否設置 report key
+            // shouldEncrypt = true: 清空 report key，讓 getReport() 返回未加密的 base64，由 SDK 加密整個 payload
+            // shouldEncrypt = false: 設置 report key，讓 getReport() 返回 engine 加密的 report
+            if (!shouldEncrypt) {
               this.engine.setPublicKeyForJson(pubKey);
+            } else {
+              this.engine.setPublicKeyForJson('');
             }
             yield this.mrzService.init();
             yield util.waitTime(100);
             return Object.assign(Object.assign({}, resp.parameters), {
-              expiredIn: resp.expiredIn
+              expiredIn: resp.expiredIn,
+              ocrMaxFps: 2
             });
           }),
           ocrStart: (points, type, setBorderType, setCardBorderColor, setBorderSuccess, scanAnimationContainer, successAnimationContainer, frameImage, frameText, faceMode, cardType, retry = false) => __awaiter(this, void 0, void 0, function* () {
@@ -35187,29 +35242,44 @@ class MRZModule {
               // 1. 最後結果統一使用 getFinalResult 取得的結果。
               // 2. 由於 engine-lib 限制，getFinalResult 必須要在 stop 之後呼叫。
               const finalResult = yield this.mrzService.getFinalResult();
-              latestTField = JSON.parse(yield this.mrzService.toJson(finalResult));
-              if (latestTField['birthDateCheckDigit']) {
-                delete latestTField['birthDateCheckDigit'];
-              }
-              if (latestTField['documentNumberCheckDigit']) {
-                delete latestTField['documentNumberCheckDigit'];
-              }
-              if (latestTField['expiryDateCheckDigit']) {
-                delete latestTField['expiryDateCheckDigit'];
-              }
-              if (latestTField['optionaldataCheckDigit']) {
-                delete latestTField['optionaldataCheckDigit'];
-              }
-              if (latestTField['overallCheckDigit']) {
-                delete latestTField['overallCheckDigit'];
-              }
-              switch (latestTField.gender) {
-                case 'M':
-                  latestTField.gender = 'male';
-                  break;
-                case 'F':
-                  latestTField.gender = 'female';
-                  break;
+              if (finalResult) {
+                const rawField = JSON.parse(yield this.mrzService.toJson(finalResult));
+                // V9 API 回傳 snake_case 欄位，轉換為 camelCase 以匹配翻譯 key
+                const snakeToCamelMap = {
+                  birth_date: 'birthDate',
+                  expiry_date: 'expiryDate',
+                  document_number: 'documentNumber',
+                  document_type: 'documentType',
+                  given_name: 'givenName',
+                  personal_number: 'personalNumber',
+                  sex: 'gender',
+                  surname: 'surname',
+                  nationality: 'nationality',
+                  country: 'country'
+                };
+                // 需要刪除的欄位 (check digit)
+                const fieldsToDelete = ['birthDateCheckDigit', 'documentNumberCheckDigit', 'expiryDateCheckDigit', 'optionaldataCheckDigit', 'overallCheckDigit', 'birth_date_check_digit', 'document_number_check_digit', 'expiry_date_check_digit', 'optional_data_check_digit', 'overall_check_digit'];
+                // 轉換欄位名稱並過濾 check digit
+                latestTField = {};
+                for (const [key, value] of Object.entries(rawField)) {
+                  if (fieldsToDelete.includes(key)) {
+                    continue; // 跳過 check digit 欄位
+                  }
+
+                  const newKey = snakeToCamelMap[key] || key;
+                  latestTField[newKey] = value;
+                }
+                // 性別轉換
+                if (latestTField === null || latestTField === void 0 ? void 0 : latestTField.gender) {
+                  switch (latestTField.gender) {
+                    case 'M':
+                      latestTField.gender = 'male';
+                      break;
+                    case 'F':
+                      latestTField.gender = 'female';
+                      break;
+                  }
+                }
               }
             } else if (uploadFullFrame) {
               const image = util.UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas);
@@ -35345,6 +35415,8 @@ class MRZModule {
           getAntiFraudStageList: () => []
         }));
       } catch (error) {
+        console.error('[MRZ Module] Error caught:', error);
+        console.error('[MRZ Module] Error stack:', error === null || error === void 0 ? void 0 : error.stack);
         const catchedError = error instanceof core.AuthmeError ? error : new core.AuthmeError(core.ErrorCode.SDK_INTERNAL_ERROR, error);
         return {
           isSuccess: false,
@@ -35357,8 +35429,98 @@ class MRZModule {
   }
 }
 
-const F_IMAGE_BLUE_TH = 'fImageBlurTh';
+// V9: 卡片 OCR 參數常數名稱
+const F_IMAGE_BLUR_TH = 'fImageBlurTh';
+const F_IDCARD_COLOR_TH = 'fIdCardColorTh';
+const F_IMAGE_REFLECTIVE_TRIGGER_TH = 'fImageReflectiveTriggerTh';
+const F_IMAGE_REFLECTIVE_MASK_TH = 'fImageReflectiveMaskTh';
+const F_CARD_MATCH_TH = 'fCardMatchTh';
+const F_CARD_CLASSIFICATION_TH = 'fCardClassificationTh';
+// V9: 不同卡片類型的預設參數 (參考 Android SDK)
+// 邏輯說明:
+// - idCardColorTh: color_detect.score > threshold 為彩色 (Pass), < threshold 為灰階 (Gray)
+// - imageReflectiveTriggerTh: 反光分數 > threshold 判定為反光
+// - imageBlurTh: 模糊分數 > threshold 判定為模糊
+const CARD_OCR_PARAMS_MAP = {
+  // 身分證正面: 高反光容限 (塑膠卡)
+  TWN_IDCard_Front: {
+    idCardColorTh: 15,
+    imageBlurTh: 750,
+    imageReflectiveTriggerTh: 1.05,
+    imageReflectiveMaskTh: 1.5,
+    cardMatchTh: 0.3,
+    cardClassificationTh: 0.62655
+  },
+  // 身分證背面: 高反光容限 (塑膠卡)
+  TWN_IDCard_Back: {
+    idCardColorTh: 4.5,
+    imageBlurTh: 750,
+    imageReflectiveTriggerTh: 1.05,
+    imageReflectiveMaskTh: 1.5,
+    cardMatchTh: 0.3,
+    cardClassificationTh: 0.62655
+  },
+  // 健保卡正面: 中等反光容限
+  TWN_HealthCard_Front: {
+    idCardColorTh: 10,
+    imageBlurTh: 750,
+    imageReflectiveTriggerTh: 0.35,
+    imageReflectiveMaskTh: 0.45,
+    cardMatchTh: 0.3,
+    cardClassificationTh: 0.62655
+  },
+  // 駕照正面: 低反光觸發 (紙質)
+  TWN_DriverLicense_Front: {
+    idCardColorTh: 15,
+    imageBlurTh: 750,
+    imageReflectiveTriggerTh: 0.16,
+    imageReflectiveMaskTh: 0.45,
+    cardMatchTh: 0.3,
+    cardClassificationTh: 0.62655
+  },
+  // 駕照背面: 極低反光觸發
+  TWN_DriverLicense_Back: {
+    idCardColorTh: 8,
+    imageBlurTh: 600,
+    imageReflectiveTriggerTh: 0.045,
+    imageReflectiveMaskTh: 0.45,
+    cardMatchTh: 0.75,
+    cardClassificationTh: 0.62655
+  },
+  // 居留證正面
+  TWN_ResidentCard_Front: {
+    idCardColorTh: 0,
+    imageBlurTh: 600,
+    imageReflectiveTriggerTh: 0.045,
+    imageReflectiveMaskTh: 0.45,
+    cardMatchTh: 0.75,
+    cardClassificationTh: 0.62655
+  },
+  // 居留證背面
+  TWN_ResidentCard_Back: {
+    idCardColorTh: 0,
+    imageBlurTh: 600,
+    imageReflectiveTriggerTh: 0.045,
+    imageReflectiveMaskTh: 0.45,
+    cardMatchTh: 0.75,
+    cardClassificationTh: 0.62655
+  }
+};
+// V9: 預設參數 (用於未定義的卡片類型)
+const DEFAULT_CARD_OCR_PARAMS = {
+  idCardColorTh: 0,
+  imageBlurTh: 750,
+  imageReflectiveTriggerTh: 0.05,
+  imageReflectiveMaskTh: 0.025,
+  cardMatchTh: 0.3,
+  cardClassificationTh: 0.62655
+};
 const DEFAULT_ANTI_FRAUD_TIMEOUT = 40;
+// V9: OCR 結果需要過濾掉的欄位 (重複/內部欄位)
+// 這些欄位可能是內部檢核數字或與其他欄位重複
+const OCR_FIELDS_TO_FILTER = ['backSideId', 'reverseId', 'dob', 'firstName', 'lastName', 'fullName', 'optionalData2' // 內部欄位
+];
+
 function unionMerge(a, b) {
   const entries = Object.entries(a).concat(Object.entries(b));
   // union merge
@@ -35423,8 +35585,8 @@ function handleUploadError(error) {
     });
   });
 }
-// 目前不需要隨機，若未來需要隨機可更新。
-const antiFraudStageListMap = [[engine.EAuthMeIDCardAntiFraudStage.Left, engine.EAuthMeIDCardAntiFraudStage.Right, engine.EAuthMeIDCardAntiFraudStage.Up, engine.EAuthMeIDCardAntiFraudStage.Down, engine.EAuthMeIDCardAntiFraudStage.Left, engine.EAuthMeIDCardAntiFraudStage.Right, engine.EAuthMeIDCardAntiFraudStage.Up, engine.EAuthMeIDCardAntiFraudStage.Down, engine.EAuthMeIDCardAntiFraudStage.Left, engine.EAuthMeIDCardAntiFraudStage.Right, engine.EAuthMeIDCardAntiFraudStage.Up, engine.EAuthMeIDCardAntiFraudStage.Down]
+// V9: Engine 會自動重複 stages，只需要傳入基本的 4 個方向
+const antiFraudStageListMap = [[engine.EAuthMeIDCardAntiFraudStage.Left, engine.EAuthMeIDCardAntiFraudStage.Right, engine.EAuthMeIDCardAntiFraudStage.Up, engine.EAuthMeIDCardAntiFraudStage.Down]
 // [
 //   EAuthMeIDCardAntiFraudStage.Left,
 //   EAuthMeIDCardAntiFraudStage.Right,
@@ -35742,12 +35904,17 @@ class OCRModule {
             pubKey = resp.parameters.pubKey;
             uploadFullFrame = (_c = (_b = resp.parameters.fraud) === null || _b === void 0 ? void 0 : _b.collectAllFrames) !== null && _c !== void 0 ? _c : config.uploadFullFrame;
             fraudTimeout = (_e = (_d = resp.parameters.fraud) === null || _d === void 0 ? void 0 : _d.totalTimeout) !== null && _e !== void 0 ? _e : DEFAULT_ANTI_FRAUD_TIMEOUT;
+            // 根據 shouldEncrypt 決定是否設置 report key
+            // shouldEncrypt = true: 清空 report key，讓 getReport() 返回未加密的 base64，由 SDK 加密整個 payload
+            // shouldEncrypt = false: 設置 report key，讓 getReport() 返回 engine 加密的 report
             if (!shouldEncrypt) {
               this.engine.setPublicKeyForJson(pubKey);
             } else {
               this.engine.setPublicKeyForJson('');
             }
             if (config.type === idRecognition.IdRecognitionCardType.IDCard && config.needAntiFraud) {
+              // 先設定 stage 再 init，避免使用預設的 Frontal stage
+              yield this.antiFraudInstance.setStage(antiFraudStageList);
               yield this.antiFraudInstance.init();
             } else if (config.type === idRecognition.IdRecognitionCardType.ResidentCard) {
               // workaround: resident card need MRZ, refactor later.
@@ -35759,7 +35926,8 @@ class OCRModule {
             yield util.waitTime(100);
             return Object.assign(Object.assign({}, resp.parameters), {
               expiredIn: resp.expiredIn,
-              captureTimeout: config.captureTimeout
+              captureTimeout: config.captureTimeout,
+              ocrMaxFps: 2
             });
           }),
           ocrStart: (points, type, setBorderType, setCardBorderColor, setBorderSuccess, scanAnimationContainer, successAnimationContainer, frameImage, frameText, faceMode, cardType, retry = false) => __awaiter(this, void 0, void 0, function* () {
@@ -35770,9 +35938,14 @@ class OCRModule {
             _service instanceof idRecognition.CardOCR ? yield _service.setType(type) : null;
             const newParams = {};
             const oldParams = yield this.ocrService.getParams();
-            newParams[F_IMAGE_BLUE_TH] = 750;
-            newParams['fCardMatchTh'] = 0.5;
-            newParams['fImageReflectiveTriggerTh'] = 0.15;
+            // V9: 根據卡片類型設置參數 (參考 Android SDK)
+            const cardParams = CARD_OCR_PARAMS_MAP[cardType] || DEFAULT_CARD_OCR_PARAMS;
+            newParams[F_IMAGE_BLUR_TH] = cardParams.imageBlurTh;
+            newParams[F_IDCARD_COLOR_TH] = cardParams.idCardColorTh;
+            newParams[F_IMAGE_REFLECTIVE_TRIGGER_TH] = cardParams.imageReflectiveTriggerTh;
+            newParams[F_IMAGE_REFLECTIVE_MASK_TH] = cardParams.imageReflectiveMaskTh;
+            newParams[F_CARD_MATCH_TH] = cardParams.cardMatchTh;
+            newParams[F_CARD_CLASSIFICATION_TH] = cardParams.cardClassificationTh;
             yield this.ocrService.setParams(Object.assign(Object.assign({}, oldParams), newParams));
             if (cardTypes.map(idRecognition.mapCardtypeToAuthmeClass).filter(n => n == engine.EAuthMeCardClass.Unknown).length > 0) {
               this.ocrService.setOption({
@@ -35936,9 +36109,12 @@ class OCRModule {
             const newParams = {};
             const oldParams = yield _service.getParams();
             if (config.antiFraudIMetalTagValidCountTh !== false) newParams['iMetalTagValidCountTh'] = config.antiFraudIMetalTagValidCountTh;
+            // V9: 根據卡片類型設置參數 (參考 Android SDK)
+            const cardParams = CARD_OCR_PARAMS_MAP[cardType] || DEFAULT_CARD_OCR_PARAMS;
             newParams['timeoutSec'] = 1000;
-            newParams['fCardMatchTh'] = 0.5;
-            newParams['fImageReflectiveTriggerTh'] = 0.15;
+            newParams[F_IDCARD_COLOR_TH] = cardParams.idCardColorTh;
+            newParams[F_IMAGE_REFLECTIVE_TRIGGER_TH] = cardParams.imageReflectiveTriggerTh;
+            newParams[F_CARD_MATCH_TH] = cardParams.cardMatchTh;
             newParams['fImageThicknessTh'] = 0.4;
             newParams['fCardDeformationTh'] = 10;
             newParams['enableCardInROI'] = 1;
@@ -36278,8 +36454,16 @@ class OCRModule {
             });
             const ocrOriginImg = util.UintArrayToBlob(frameWidth, frameHeight, data, virtualCanvas, config.resultImageFormat);
             const eClass = cardType !== null && cardType !== void 0 ? cardType : '';
-            if (result.eStatus === idRecognition.EAuthMeCardOCRStatus.Pass && result.imageData && !!docInfos[eClass].docId) {
-              const resultOcrImg = util.UintArrayToBlob(result.iWidth, result.iHeight, result === null || result === void 0 ? void 0 : result.imageData, virtualCanvas, config.resultImageFormat);
+            if (result.eStatus === idRecognition.EAuthMeCardOCRStatus.Pass && !!docInfos[eClass].docId) {
+              // V9: 如果有卡片圖像就使用它，否則使用原始幀圖像
+              let resultOcrImg;
+              if (result.imageData && result.iWidth > 0 && result.iHeight > 0) {
+                resultOcrImg = util.UintArrayToBlob(result.iWidth, result.iHeight, result.imageData, virtualCanvas, config.resultImageFormat);
+              } else {
+                // V9 沒有返回卡片圖像，使用原始幀圖像作為替代
+                console.warn('[OCR] V9: no card image available, using original frame image');
+                resultOcrImg = ocrOriginImg;
+              }
               docInfos[eClass].ocrImg = resultOcrImg;
               docInfos[eClass].ocrOriginImg = ocrOriginImg;
               yield _service.stop();
@@ -36365,6 +36549,12 @@ class OCRModule {
             } else {
               ocrOriginImg = docInfos[option.cardType].ocrOriginImg;
             }
+            // V9: 檢查 ocrOriginImg 是否有效
+            if (!ocrOriginImg) {
+              console.error('[OCR] confirmImage: ocrOriginImg is null or undefined, cannot proceed');
+              console.error('[OCR] confirmImage: option.cardType =', option.cardType, 'docInfos[cardType] =', docInfos[option.cardType]);
+              return false;
+            }
             // const base64Image = await blobToBase64(ocrOriginImg);
             // console.log('confirmImage', base64Image);
             const requestImg = yield encryptImageBase64(ocrOriginImg);
@@ -36491,6 +36681,8 @@ class OCRModule {
                 const item2 = res.fields.find(item => item.name === item1.name);
                 return item2 ? Object.assign(Object.assign({}, item1), item2) : item1;
               }).concat(res.fields.filter(item2 => !ocrResultFilds.some(item1 => item1.name === item2.name)));
+              // V9: 過濾掉重複/內部欄位
+              ocrResultFilds = ocrResultFilds.filter(item => !OCR_FIELDS_TO_FILTER.includes(item.name));
               delete docInfos[option.cardType];
               return true;
             } catch (error) {
@@ -36510,6 +36702,13 @@ class OCRModule {
               } else {
                 ocrOriginImg = docInfos[cardType].ocrOriginImg;
               }
+              // V9: 檢查 ocrOriginImg 是否有效
+              if (!ocrOriginImg) {
+                console.warn('[OCR] ocrCancel: ocrOriginImg is null, skipping upload');
+                yield this.ocrService.stop();
+                docInfos[cardType].docId = '';
+                return true;
+              }
               const requestImg = yield encryptImageBase64(ocrOriginImg);
               yield this.ocrService.stop();
               const report = yield this.ocrService.getReport();
@@ -36556,7 +36755,9 @@ class OCRModule {
             }
           }),
           antiFraudStart: (points, setBorderType, setCardBorderColor, setBorderSuccess, scanAnimationContainer, successAnimationContainer, frameImage, frameText, faceMode) => __awaiter(this, void 0, void 0, function* () {
-            yield this.antiFraudInstance.init();
+            // setStage() 如果服務已初始化會自動觸發 reinit
+            // 不需要再呼叫 init()
+            yield this.antiFraudInstance.setStage(antiFraudStageList);
             yield this.antiFraudInstance.setFrameSize(frameWidth, frameHeight);
             yield this.antiFraudInstance.setMaskPosition(points.map(([x, y]) => [Number(x.toFixed(2)), Number(y.toFixed(2))]));
             const newParams = {};
@@ -36564,7 +36765,6 @@ class OCRModule {
             if (config.antiFraudIMetalTagValidCountTh !== false) newParams['iMetalTagValidCountTh'] = config.antiFraudIMetalTagValidCountTh;
             newParams['timeoutSec'] = fraudTimeout;
             yield this.antiFraudInstance.setParams(Object.assign(Object.assign({}, oldParams), newParams));
-            yield this.antiFraudInstance.setStage(antiFraudStageList);
             yield this.antiFraudInstance.startSession();
             const twnidCardFront = engine.EAuthMeCardClass.TWN_IDCard_Front;
             docInfos[twnidCardFront] = {
@@ -36825,8 +37025,10 @@ class OCRModule {
             yield (_u = this.ocrService) === null || _u === void 0 ? void 0 : _u.destroy();
             yield (_v = this.antiFraudInstance) === null || _v === void 0 ? void 0 : _v.destroy();
           }),
-          getCardMatchROI: () => __awaiter(this, void 0, void 0, function* () {
-            return yield this.antiFraudInstance.getCardMatchROI();
+          getCardMatchROI: stage => __awaiter(this, void 0, void 0, function* () {
+            return yield this.antiFraudInstance.getCardMatchROI(stage ? {
+              stage
+            } : undefined);
           })
         }), eventNameWrong$.pipe(rxjs.tap(() => {
           throw new core.AuthmeError(core.ErrorCode.EVENT_NAME_WRONG);
@@ -37343,8 +37545,8 @@ class AuthmeIdentityVerification extends engine.AuthmeFunctionModule {
 }
 
 var name = "authme/sdk";
-var version$1 = "2.8.38";
-var date = "2026-01-21T02:32:26+0000";
+var version$1 = "2.8.42";
+var date = "2026-02-03T09:36:05+0000";
 var packageInfo = {
 	name: name,
 	version: version$1,