@incodetech/core 0.0.0-dev-20260701-bdeaa221 → 0.0.0-dev-20260701-b6fc71dc

package/dist/id.esm.js

@@ -6,13 +6,13 @@ import { n as eventModuleNames } from "./types-ElOJAGaM.esm.js";
 import "./endpoints-BzMJFAPV.esm.js";
 import "./stats-CYcScXcO.esm.js";
 import "./browserSimulation-TsSoavQv.esm.js";
-import "./sessionInitializer-BPoQYSR2.esm.js";
+import "./sessionInitializer-Dfc__RkA.esm.js";
 import "./getDeviceData-TrKM8NPh.esm.js";
 import "./thumbmarkAdapter-fHBUDlAP.esm.js";
 import "./IpifyProvider-BRW14_uo.esm.js";
 import "./platform-uIVQUnJP.esm.js";
-import "./tri-RHgg98ap.esm.js";
-import { a as fromPromise, r as assign, s as createActor } from "./xstate.esm-r0zHjE2E.esm.js";
+import "./tri-D6YWLiyE.esm.js";
+import { a as fromPromise, r as assign, s as createActor } from "./xstate.esm-Bomq1a0z.esm.js";
 import "./apiError-C7SFQTB2.esm.js";
 import "./BrowserVisibilityObserverProvider-rim9Jrz-.esm.js";
 import "./MotionSensorProvider-DCbId4De.esm.js";
@@ -33,9 +33,9 @@ import "./permissionGuards-BR2oN573.esm.js";
 import "./recordingService-D8zRQbVb.esm.js";
 import "./mediaRecorderOptions-C3NAkVgK.esm.js";
 import "./session-D4m9r-7U.esm.js";
-import { a as processId, c as stopStream, d as validateUploadResponse, f as ID_ERROR_CODES, h as MANUAL_UPLOAD_MAX_RETRIES, i as preloadIdRecordingProvider, l as uploadIdImage, m as MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES, o as startRecordingSession, p as MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS, r as initializeIdCapture, s as stopRecording, t as idCaptureMachine, u as uploadManualIdFile } from "./idCaptureStateMachine-DdlLGjwa.esm.js";
+import { a as preloadIdRecordingProvider, c as stopRecording, d as uploadManualIdFile, f as validateUploadResponse, g as MANUAL_UPLOAD_MAX_RETRIES, h as MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES, i as initializeIdCapture, l as stopStream, m as MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS, o as processId, p as ID_ERROR_CODES, s as startRecordingSession, t as idCaptureMachine, u as uploadIdImage } from "./idCaptureStateMachine-BlLvve6M.esm.js";
 import "./idCaptureDefaults-GTCesE6K.esm.js";
-import { n as createIdCaptureActor, r as createIdCaptureManagerFromActor, t as createIdCaptureManager } from "./idCaptureManager-CeaNK-Ve.esm.js";
+import { n as createIdCaptureActor, r as createIdCaptureManagerFromActor, t as createIdCaptureManager } from "./idCaptureManager-FXTdeOsf.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-DrpXOwkG.esm.js";
 
 //#region src/modules/id/idCaptureOnlyStateMachine.ts

package/dist/{idCaptureManager-CeaNK-Ve.esm.js → idCaptureManager-FXTdeOsf.esm.js}

@@ -1,10 +1,10 @@
 import { n as createManagerInstrumentation, t as topLevelStateName } from "./events-CqGY1yMq.esm.js";
 import { n as eventModuleNames } from "./types-ElOJAGaM.esm.js";
-import { c as createManager, s as createActor } from "./xstate.esm-r0zHjE2E.esm.js";
+import { l as createManager, s as createActor } from "./xstate.esm-Bomq1a0z.esm.js";
 import { n as setWasmDsFlagSync, t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-rim9Jrz-.esm.js";
 import { o as resetWasmMotionPrimedForModule, r as primeMotionFromUserGestureIfNeeded } from "./permissionServices-BJhGL13R.esm.js";
 import { t as BrowserStorageProvider } from "./BrowserStorageProvider-CrrN540a.esm.js";
-import { g as mapDigitalIdScreenName, n as mapIdManualUploadScreenName, t as idCaptureMachine } from "./idCaptureStateMachine-DdlLGjwa.esm.js";
+import { _ as mapDigitalIdScreenName, n as MAX_EXPIRED_FIRST_SIDE_ATTEMPTS, r as mapIdManualUploadScreenName, t as idCaptureMachine } from "./idCaptureStateMachine-BlLvve6M.esm.js";
 
 //#region src/internal/idCapture/idCaptureManagerFactory.ts
 function getPermissionStatus(snapshot) {
@@ -236,9 +236,10 @@ function mapState(snapshot) {
 	if (snapshot.matches("expiredExhausted")) return { status: "expiredExhausted" };
 	if (snapshot.matches("expired")) {
 		const counter = context.expiredFromUpload ? context.expiredAttempts : context.processingExpiredAttempts;
+		const cap = context.expiredFromUpload ? MAX_EXPIRED_FIRST_SIDE_ATTEMPTS : context.config.captureAttempts;
 		return {
 			status: "expired",
-			attemptsRemaining: Math.max(0, context.config.captureAttempts - counter),
+			attemptsRemaining: Math.max(0, cap - counter),
 			currentMode: context.currentMode
 		};
 	}

package/dist/{idCaptureManager-DDkfMlsm.d.ts → idCaptureManager-fvEYwU_l.d.ts}

@@ -423,8 +423,11 @@ type IdCaptureContext = {
   attemptsRemaining: number;
   /**
    * Number of consecutive `isDocumentExpired === true` upload responses for
-   * the current side. Reset on side change; preserved across the soft-retry
-   * cycle (`expired → capture`). Compared against `config.captureAttempts`.
+   * the current side (V1's `expiredFirstSideAttempt`). Reset on every side
+   * change; preserved across the same-side soft-retry cycle
+   * (`expired → capture`). Compared against `config.captureAttempts`. This is
+   * a per-side local counter only — the cross-side expired-back→front redirect
+   * is bounded separately by `expiredRedirected` (see below).
    */
   expiredAttempts: number;
   /**
@@ -470,14 +473,18 @@ type IdCaptureContext = {
    */
   forceFinishAfterProcessing: boolean;
   /**
-   * Set by the Story #2.1 expired-back redirect transition so that
-   * `resetForFrontCapture` (backFinished entry) and `resetForBackCapture`
-   * (frontFinished entry) skip zeroing `expiredAttempts`. Without this, the
-   * per-side counter resets every cycle and `expiredExhausted` is never
-   * reached. Consumed (cleared) by `resetForBackCapture` once back capture
-   * resumes with the preserved count.
+   * One-shot flag (V1's `expiredRedirected`). Set when an expired BACK upload
+   * in a multi-side flow sends the user back to FRONT capture for one more
+   * attempt (Figma Story #2.1 / ENG-46592). Session-global — preserved across
+   * the front/back side resets so it survives the flip cycle. Once set, any
+   * further expired upload routes straight to `expiredExhausted` instead of
+   * redirecting again, so the back→front redirect happens AT MOST ONCE per
+   * session. This is what keeps total captures within the backend's
+   * max-attempts/OCR cap (re-respects ENG-45666). Session-global: preserved
+   * across side resets and mid-flow `resetContext` restarts (like V1's
+   * localStorage flag); a fresh session starts it `false`.
    */
-  skipExpiredAttemptsReset: boolean;
+  expiredRedirected: boolean;
   uploadError: IdErrorCode | undefined;
   permissionResult: PermissionResult | 'refresh' | undefined;
   resetDetection: (() => void) | undefined;

package/dist/{idCaptureStateMachine-DdlLGjwa.esm.js → idCaptureStateMachine-BlLvve6M.esm.js}

@@ -3,9 +3,9 @@ import { r as getToken, t as api } from "./api-DsbUi7TO.esm.js";
 import { v as revokeObjectURL } from "./events-CqGY1yMq.esm.js";
 import { t as endpoints } from "./endpoints-BzMJFAPV.esm.js";
 import { t as addDeviceStats } from "./stats-CYcScXcO.esm.js";
-import { t as getDisableIpify } from "./sessionInitializer-BPoQYSR2.esm.js";
+import { t as getDisableIpify } from "./sessionInitializer-Dfc__RkA.esm.js";
 import { n as isDesktop } from "./platform-uIVQUnJP.esm.js";
-import { a as fromPromise, i as fromCallback, n as sendTo, o as and, r as assign, t as setup } from "./xstate.esm-r0zHjE2E.esm.js";
+import { a as fromPromise, c as not, i as fromCallback, n as sendTo, o as and, r as assign, t as setup } from "./xstate.esm-Bomq1a0z.esm.js";
 import { n as invokeRequestPermissionActor, t as checkPermission } from "./permissionServices-BJhGL13R.esm.js";
 import { _ as stopRecording$1, g as startRecording, h as createRecordingSession, y as StreamCanvasProcessingSession } from "./onDeviceFaceResults-DlErdHcT.esm.js";
 import { t as IncodeCanvas } from "./canvas-_I95hkPg.esm.js";
@@ -1166,6 +1166,157 @@ function mapIdManualUploadScreenName(value, context) {
 	return "IDmanual.upload.uploadedFront";
 }
 
+//#endregion
+//#region src/modules/id/idCaptureGuards.ts
+const hasShowTutorialGuard = ({ context }) => context.config.showTutorial;
+const hasAgeAssuranceGuard = ({ context }) => context.config.ageAssurance === true;
+const hasShowDocumentChooserGuard = ({ context }) => !context.config.onlyBack && (context.config.showDocumentChooserScreen ?? false);
+const isPermissionGrantedGuard = ({ event }) => {
+	if ("output" in event) return event.output === "granted";
+	return false;
+};
+const isReadyForCaptureGuard = ({ context, event }) => {
+	return isReadyForCaptureFromPermission(resolveStoredPermissionResult("output" in event ? event.output : void 0, context.permissionResult), context.config.ds);
+};
+const needsMotionPrimeOnlyGuard = ({ context, event }) => {
+	return needsMotionPrimeOnlyFromPermission(resolveStoredPermissionResult("output" in event ? event.output : void 0, context.permissionResult), context.config.ds);
+};
+const isPermissionDeniedErrorGuard = ({ event }) => {
+	if ("error" in event) {
+		const error = event.error;
+		return error?.name === "NotAllowedError" || error?.name === "PermissionDeniedError";
+	}
+	return false;
+};
+const hasStreamGuard = ({ context }) => context.stream !== void 0;
+const hasAttemptsRemainingGuard = ({ context }) => context.attemptsRemaining > 0;
+const hasCapturedImageGuard = ({ context }) => {
+	return context.provider?.getCapturedCanvas() !== null;
+};
+const hasUploadValidationErrorGuard = ({ context }) => {
+	if (!context.uploadResponse) return false;
+	return validateUploadResponse(context.uploadResponse, {
+		skipGlareFront: context.uploadResponse.skipGlareFront,
+		skipGlareBack: context.uploadResponse.skipGlareBack
+	}) !== void 0;
+};
+const isFrontModeGuard = ({ context }) => context.currentMode === "front" || context.currentMode === "passport";
+/**
+* `config.onlyFront` from the orchestrated flow JSON is intentionally not
+* read here: the flow value cannot account for per-document overrides, so the
+* backend resolves the real policy per document at upload time
+* (via `skipBackIdCapture` on the upload response). Standalone
+* `idCaptureManager` consumers that pass `onlyFront: true` directly will
+* therefore also be ignored — re-wire this guard if that capability is needed
+* again.
+*/
+const isOnlyFrontGuard = (_args) => false;
+const shouldContinueToBackGuard = ({ context }) => {
+	if (context.currentMode !== "front" && context.currentMode !== "passport") return false;
+	if (context.config.onlyBack) return false;
+	if (context.config.usSmartCapture) return false;
+	if (context.uploadResponse?.skipBackIdCapture) {
+		if (!(context.config.alwaysCaptureBackOfId === true && context.currentMode !== "passport")) return false;
+	}
+	return true;
+};
+const shouldContinueToFrontGuard = ({ context }) => context.config.usSmartCapture === true && context.currentMode === "back" && context.uploadResponse?.forceFrontIdCapture === true;
+const hasMandatoryConsentGuard = ({ context }) => context.uploadResponse?.showMandatoryConsent === true;
+const isDeepsightEnabledGuard = ({ context }) => context.dependencies !== void 0;
+const isDeepsightReadyGuard = ({ context }) => context.deepsightService !== void 0;
+const needsDeepsightInitGuard = ({ context }) => context.dependencies !== void 0 && context.deepsightService === void 0 && !context.deepsightInitAttempted;
+const hasOnlyManualUploadAvailableGuard = ({ context }) => context.availableDocumentTypes.length === 1 && context.availableDocumentTypes[0] === "manualIdUpload";
+const isManualIdUploadSelectedGuard = ({ event }) => event.type === "SELECT_DOCUMENT" && event.documentType === "manualIdUpload";
+const isDigitalIdUploadSelectedGuard = ({ event }) => event.type === "SELECT_DOCUMENT" && event.documentType === "digitalIdUpload";
+const isUploadExpiredGuard = ({ context }) => context.uploadResponse?.isDocumentExpired === true;
+/**
+* Fixed cap on same-side expired retries, intentionally decoupled from the
+* dashboard-configurable `captureAttempts`.
+*
+* Business decision: the expired-ID retry policy is a fixed UX limit ("let the
+* user try a different ID a bounded number of times"), separate from the
+* generic capture-quality retry budget. The value `3` and this separation are
+* prescribed by the ENG-41643 spec — "[WEB] Document FE - Handle Expired ID
+* Errors on Front and Back ID Capture"
+* (https://app.notion.com/p/3264c3caef498080a44adf5ab62fcb77): *"Add
+* `MAX_EXPIRED_FIRST_SIDE_ATTEMPTS = 3` constant"* / *"Allow up to 3 attempts
+* when expired ID is detected on first side capture"*. SDK V1 implements it as
+* exactly this hardcoded constant (incode-welcome `Capture.tsx`), independent
+* of the configured capture-attempts; this restores that parity for ENG-46592
+* (https://app.notion.com/p/36b4c3caef4980f58f3ee3b1b4e234f2).
+*
+* NOTE: ENG-45666's acceptance text says the cap should follow "a specified
+* number of times if differently set on dashboard/SDK level". That wording
+* conflicts with the ENG-41643 spec + V1 for the *expired* path specifically;
+* V1 parity was chosen as source of truth here (see changeset
+* `eng-46592-r2-expired-id-v1-parity`). The configurable `captureAttempts`
+* still governs generic (non-expired) capture retries.
+*/
+const MAX_EXPIRED_FIRST_SIDE_ATTEMPTS = 3;
+/**
+* True when *this* expired upload will exhaust the same-side expired budget.
+* Compares the post-increment count, so the exhaustion branch can be picked in
+* the same tick that runs `incrementExpiredAttempts`:
+* - attempt 1 → 0+1=1 (not exhausted)
+* - attempt 2 → 1+1=2 (not exhausted)
+* - attempt 3 → 2+1=3 (exhausted, force-back / finish)
+*/
+const isExpiredAttemptsExhaustedGuard = ({ context }) => context.expiredAttempts + 1 >= MAX_EXPIRED_FIRST_SIDE_ATTEMPTS;
+const isNotPassportModeGuard = ({ context }) => context.currentMode !== "passport";
+/**
+* V1 parity for `shouldApplyAlwaysCaptureBackOverride` — force-redirects to
+* back capture after expired-front-attempts exhaust, but only when:
+* - we're on the front side
+* - `alwaysCaptureBackOfId` is set
+* - the flow isn't single-side (onlyBack / usSmartCapture)
+* - the session isn't a Digital ID upload (digital IDs are PDFs — no back
+*   side exists, so the override never applies regardless of config)
+*/
+const shouldForceBackOnExpiredGuard = ({ context }) => context.currentMode === "front" && context.config.alwaysCaptureBackOfId === true && !context.config.onlyBack && !context.config.usSmartCapture && !context.isDigitalUpload;
+const wasExpiredFromUploadGuard = ({ context }) => context.expiredFromUpload === true;
+const shouldSkipProcessIdGuard = ({ context }) => context.skipProcessId === true;
+/**
+* Bug 4 fix: when `expiredExhausted` is reached via the per-upload-expired
+* exhaustion path with a back side captured (or the entire single-side back
+* flow), we want `processId` to run once on Continue so the backend
+* processes whatever sides were uploaded. Front-only exhaustion (no back to
+* process) and the force-back V1 path keep using `setSkipProcessId` instead.
+*/
+const shouldProcessAfterExhaustionGuard = ({ context }) => context.exhaustedFromUpload === true && context.currentMode === "back" && (context.config.onlyBack === true || context.config.usSmartCapture === true);
+/**
+* `processing.onDone` reads this to short-circuit straight to `finished`
+* after the post-exhaustion `processId` call returns — without it, an
+* `isDocumentExpired:true` response would loop back to the Expired screen
+* we just terminated.
+*/
+const forceFinishAfterProcessingGuard = ({ context }) => context.forceFinishAfterProcessing === true;
+/**
+* Cap on the end-of-flow (`processId`) expired path — digital uploads and the
+* multi-side post-capture process step. This path intentionally still keys off
+* the dashboard-configurable `config.captureAttempts`, unlike the per-upload
+* (camera) same-side expired path, which uses the fixed
+* `MAX_EXPIRED_FIRST_SIDE_ATTEMPTS` (decoupled for V1 parity — see ENG-46592).
+* The two expired caps are therefore different by design.
+*/
+const isProcessingExpiredExhaustedGuard = ({ context }) => context.processingExpiredAttempts + 1 >= context.config.captureAttempts;
+/**
+* True when capturing the back side of a two-sided (front+back) ID flow.
+* Used to redirect an expired-back capture to front rather than retrying
+* the same back side (Figma Story #2.1).
+* Excludes onlyBack and usSmartCapture — those are single-side back flows
+* with no front to redirect to.
+*/
+const isBackModeInMultiSideFlowGuard = ({ context }) => context.currentMode === "back" && !context.config.onlyBack && !context.config.usSmartCapture;
+/**
+* True once the user has already been redirected from an expired second-side
+* (back) capture to the first side (front) for their one extra attempt
+* (V1's `expiredRedirected`). Used to make the expired-back→front redirect a
+* one-shot: any subsequent expired upload routes to `expiredExhausted` instead
+* of redirecting again, so total captures stay within the backend's
+* max-attempts/OCR cap (ENG-46592 / re-respects ENG-45666).
+*/
+const wasExpiredRedirectedGuard = ({ context }) => context.expiredRedirected === true;
+
 //#endregion
 //#region src/modules/id/idCaptureHelpers.ts
 /**
@@ -1750,122 +1901,6 @@ function getCurrentModeFromEvent(context, event) {
 	return context.currentMode;
 }
 
-//#endregion
-//#region src/modules/id/idCaptureGuards.ts
-const hasShowTutorialGuard = ({ context }) => context.config.showTutorial;
-const hasAgeAssuranceGuard = ({ context }) => context.config.ageAssurance === true;
-const hasShowDocumentChooserGuard = ({ context }) => !context.config.onlyBack && (context.config.showDocumentChooserScreen ?? false);
-const isPermissionGrantedGuard = ({ event }) => {
-	if ("output" in event) return event.output === "granted";
-	return false;
-};
-const isReadyForCaptureGuard = ({ context, event }) => {
-	return isReadyForCaptureFromPermission(resolveStoredPermissionResult("output" in event ? event.output : void 0, context.permissionResult), context.config.ds);
-};
-const needsMotionPrimeOnlyGuard = ({ context, event }) => {
-	return needsMotionPrimeOnlyFromPermission(resolveStoredPermissionResult("output" in event ? event.output : void 0, context.permissionResult), context.config.ds);
-};
-const isPermissionDeniedErrorGuard = ({ event }) => {
-	if ("error" in event) {
-		const error = event.error;
-		return error?.name === "NotAllowedError" || error?.name === "PermissionDeniedError";
-	}
-	return false;
-};
-const hasStreamGuard = ({ context }) => context.stream !== void 0;
-const hasAttemptsRemainingGuard = ({ context }) => context.attemptsRemaining > 0;
-const hasCapturedImageGuard = ({ context }) => {
-	return context.provider?.getCapturedCanvas() !== null;
-};
-const hasUploadValidationErrorGuard = ({ context }) => {
-	if (!context.uploadResponse) return false;
-	return validateUploadResponse(context.uploadResponse, {
-		skipGlareFront: context.uploadResponse.skipGlareFront,
-		skipGlareBack: context.uploadResponse.skipGlareBack
-	}) !== void 0;
-};
-const isFrontModeGuard = ({ context }) => context.currentMode === "front" || context.currentMode === "passport";
-/**
-* `config.onlyFront` from the orchestrated flow JSON is intentionally not
-* read here: the flow value cannot account for per-document overrides, so the
-* backend resolves the real policy per document at upload time
-* (via `skipBackIdCapture` on the upload response). Standalone
-* `idCaptureManager` consumers that pass `onlyFront: true` directly will
-* therefore also be ignored — re-wire this guard if that capability is needed
-* again.
-*/
-const isOnlyFrontGuard = (_args) => false;
-const shouldContinueToBackGuard = ({ context }) => {
-	if (context.currentMode !== "front" && context.currentMode !== "passport") return false;
-	if (context.config.onlyBack) return false;
-	if (context.config.usSmartCapture) return false;
-	if (context.uploadResponse?.skipBackIdCapture) {
-		if (!(context.config.alwaysCaptureBackOfId === true && context.currentMode !== "passport")) return false;
-	}
-	return true;
-};
-const shouldContinueToFrontGuard = ({ context }) => context.config.usSmartCapture === true && context.currentMode === "back" && context.uploadResponse?.forceFrontIdCapture === true;
-const hasMandatoryConsentGuard = ({ context }) => context.uploadResponse?.showMandatoryConsent === true;
-const isDeepsightEnabledGuard = ({ context }) => context.dependencies !== void 0;
-const isDeepsightReadyGuard = ({ context }) => context.deepsightService !== void 0;
-const needsDeepsightInitGuard = ({ context }) => context.dependencies !== void 0 && context.deepsightService === void 0 && !context.deepsightInitAttempted;
-const hasOnlyManualUploadAvailableGuard = ({ context }) => context.availableDocumentTypes.length === 1 && context.availableDocumentTypes[0] === "manualIdUpload";
-const isManualIdUploadSelectedGuard = ({ event }) => event.type === "SELECT_DOCUMENT" && event.documentType === "manualIdUpload";
-const isDigitalIdUploadSelectedGuard = ({ event }) => event.type === "SELECT_DOCUMENT" && event.documentType === "digitalIdUpload";
-const isUploadExpiredGuard = ({ context }) => context.uploadResponse?.isDocumentExpired === true;
-/**
-* True when *this* expired upload will exhaust the budget. Compares the
-* post-increment count, so the exhaustion branch can be picked in the same
-* tick that runs `incrementExpiredAttempts`. With `captureAttempts=3`:
-* - attempt 1 → 0+1=1 (not exhausted)
-* - attempt 2 → 1+1=2 (not exhausted)
-* - attempt 3 → 2+1=3 (exhausted, force-back / finish)
-*/
-const isExpiredAttemptsExhaustedGuard = ({ context }) => context.expiredAttempts + 1 >= context.config.captureAttempts;
-const isNotPassportModeGuard = ({ context }) => context.currentMode !== "passport";
-/**
-* V1 parity for `shouldApplyAlwaysCaptureBackOverride` — force-redirects to
-* back capture after expired-front-attempts exhaust, but only when:
-* - we're on the front side
-* - `alwaysCaptureBackOfId` is set
-* - the flow isn't single-side (onlyBack / usSmartCapture)
-* - the session isn't a Digital ID upload (digital IDs are PDFs — no back
-*   side exists, so the override never applies regardless of config)
-*/
-const shouldForceBackOnExpiredGuard = ({ context }) => context.currentMode === "front" && context.config.alwaysCaptureBackOfId === true && !context.config.onlyBack && !context.config.usSmartCapture && !context.isDigitalUpload;
-const wasExpiredFromUploadGuard = ({ context }) => context.expiredFromUpload === true;
-const shouldSkipProcessIdGuard = ({ context }) => context.skipProcessId === true;
-/**
-* Bug 4 fix: when `expiredExhausted` is reached via the per-upload-expired
-* exhaustion path with a back side captured (or the entire single-side back
-* flow), we want `processId` to run once on Continue so the backend
-* processes whatever sides were uploaded. Front-only exhaustion (no back to
-* process) and the force-back V1 path keep using `setSkipProcessId` instead.
-*/
-const shouldProcessAfterExhaustionGuard = ({ context }) => context.exhaustedFromUpload === true && context.currentMode === "back" && (context.config.onlyBack === true || context.config.usSmartCapture === true);
-/**
-* `processing.onDone` reads this to short-circuit straight to `finished`
-* after the post-exhaustion `processId` call returns — without it, an
-* `isDocumentExpired:true` response would loop back to the Expired screen
-* we just terminated.
-*/
-const forceFinishAfterProcessingGuard = ({ context }) => context.forceFinishAfterProcessing === true;
-/**
-* Cap on the end-of-flow expired path. All capture types (camera, digital,
-* manual) share `config.captureAttempts` for consistency — the user-visible
-* "X attempts remaining" counter is the same regardless of how the document
-* was submitted.
-*/
-const isProcessingExpiredExhaustedGuard = ({ context }) => context.processingExpiredAttempts + 1 >= context.config.captureAttempts;
-/**
-* True when capturing the back side of a two-sided (front+back) ID flow.
-* Used to redirect an expired-back capture to front rather than retrying
-* the same back side (Figma Story #2.1).
-* Excludes onlyBack and usSmartCapture — those are single-side back flows
-* with no front to redirect to.
-*/
-const isBackModeInMultiSideFlowGuard = ({ context }) => context.currentMode === "back" && !context.config.onlyBack && !context.config.usSmartCapture;
-
 //#endregion
 //#region src/modules/id/idCaptureStateMachine.ts
 function getIdErrorCodeFromUnknown(error) {
@@ -1927,8 +1962,7 @@ const _idCaptureMachine = setup({
 				uploadProgress: void 0,
 				manualCaptureTriggered: false,
 				attemptsRemaining: context.config.captureAttempts,
-				expiredAttempts: context.skipExpiredAttemptsReset ? context.expiredAttempts : 0,
-				skipExpiredAttemptsReset: false,
+				expiredAttempts: 0,
 				expiredFromUpload: false,
 				exhaustedFromUpload: false,
 				forceFinishAfterProcessing: false,
@@ -1953,6 +1987,7 @@ const _idCaptureMachine = setup({
 				uploadProgress: void 0,
 				manualCaptureTriggered: false,
 				attemptsRemaining: context.config.captureAttempts,
+				expiredAttempts: 0,
 				expiredFromUpload: false,
 				exhaustedFromUpload: false,
 				forceFinishAfterProcessing: false,
@@ -2063,7 +2098,7 @@ const _idCaptureMachine = setup({
 		setSkipProcessId: assign({ skipProcessId: () => true }),
 		setExpiredFromUpload: assign({ expiredFromUpload: () => true }),
 		setExhaustedFromUpload: assign({ exhaustedFromUpload: () => true }),
-		setSkipExpiredAttemptsReset: assign({ skipExpiredAttemptsReset: () => true }),
+		setExpiredRedirected: assign({ expiredRedirected: () => true }),
 		setForceFinishAfterProcessing: assign({ forceFinishAfterProcessing: () => true }),
 		clearExpiredFromUpload: assign({ expiredFromUpload: () => false })
 	},
@@ -2100,6 +2135,7 @@ const _idCaptureMachine = setup({
 		shouldProcessAfterExhaustion: shouldProcessAfterExhaustionGuard,
 		forceFinishAfterProcessing: forceFinishAfterProcessingGuard,
 		isBackModeInMultiSideFlow: isBackModeInMultiSideFlowGuard,
+		wasExpiredRedirected: wasExpiredRedirectedGuard,
 		isManualUploadExhausted: ({ event }) => event.output?.result === "exhausted",
 		isDigitalUploadExhausted: ({ event }) => event.output?.result === "exhausted",
 		isDigitalUploadSuccessful: ({ event }) => event.output?.result === "success"
@@ -2126,7 +2162,7 @@ const _idCaptureMachine = setup({
 			recordingSession: void 0,
 			attemptsRemaining: input.config.captureAttempts,
 			expiredAttempts: 0,
-			skipExpiredAttemptsReset: false,
+			expiredRedirected: false,
 			processingExpiredAttempts: 0,
 			skipProcessId: input.config.skipProcessId === true,
 			expiredFromUpload: false,
@@ -2656,6 +2692,15 @@ const _idCaptureMachine = setup({
 						target: "#idCapture.finished",
 						guard: and(["shouldSkipProcessId", "isUploadExpired"])
 					},
+					{
+						target: "#idCapture.expiredExhausted",
+						guard: and([
+							"isNotPassportMode",
+							"isUploadExpired",
+							"wasExpiredRedirected"
+						]),
+						actions: ["setExhaustedFromUpload"]
+					},
 					{
 						target: "#idCapture.expiredExhausted",
 						guard: and([
@@ -2857,12 +2902,16 @@ const _idCaptureMachine = setup({
 		expired: { on: { RETRY_CAPTURE: [
 			{
 				target: "#idCapture.backFinished",
-				guard: and(["wasExpiredFromUpload", "isBackModeInMultiSideFlow"]),
+				guard: and([
+					"wasExpiredFromUpload",
+					"isBackModeInMultiSideFlow",
+					not("wasExpiredRedirected")
+				]),
 				actions: [
 					"resetDetection",
 					"clearExpiredFromUpload",
 					"clearUploadFailure",
-					"setSkipExpiredAttemptsReset"
+					"setExpiredRedirected"
 				]
 			},
 			{
@@ -2894,22 +2943,25 @@ const _idCaptureMachine = setup({
 				actions: "resetContext"
 			}
 		] } },
-		expiredExhausted: { on: { CONTINUE_EXHAUSTED: [
-			{
-				target: "#idCapture.frontFinished",
-				guard: "shouldForceBackOnExpired",
-				actions: ["setSkipProcessId"]
-			},
-			{
-				target: "#idCapture.processing",
-				guard: "shouldProcessAfterExhaustion",
-				actions: ["setForceFinishAfterProcessing"]
-			},
-			{
-				target: "#idCapture.finished",
-				actions: ["setSkipProcessId"]
-			}
-		] } },
+		expiredExhausted: {
+			entry: "flagIdManualReview",
+			on: { CONTINUE_EXHAUSTED: [
+				{
+					target: "#idCapture.frontFinished",
+					guard: "shouldForceBackOnExpired",
+					actions: ["setSkipProcessId"]
+				},
+				{
+					target: "#idCapture.processing",
+					guard: "shouldProcessAfterExhaustion",
+					actions: ["setForceFinishAfterProcessing"]
+				},
+				{
+					target: "#idCapture.finished",
+					actions: ["setSkipProcessId"]
+				}
+			] }
+		},
 		finished: {
 			entry: [
 				"stopMediaRecording",
@@ -3016,4 +3068,4 @@ const _idCaptureMachine = setup({
 const idCaptureMachine = _idCaptureMachine;
 
 //#endregion
-export { processId as a, stopStream as c, validateUploadResponse as d, ID_ERROR_CODES as f, mapDigitalIdScreenName as g, MANUAL_UPLOAD_MAX_RETRIES as h, preloadIdRecordingProvider as i, uploadIdImage as l, MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES as m, mapIdManualUploadScreenName as n, startRecordingSession as o, MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS as p, initializeIdCapture as r, stopRecording as s, idCaptureMachine as t, uploadManualIdFile as u };
+export { mapDigitalIdScreenName as _, preloadIdRecordingProvider as a, stopRecording as c, uploadManualIdFile as d, validateUploadResponse as f, MANUAL_UPLOAD_MAX_RETRIES as g, MANUAL_UPLOAD_MAX_FILE_SIZE_BYTES as h, initializeIdCapture as i, stopStream as l, MANUAL_UPLOAD_EXHAUSTION_FORWARD_MS as m, MAX_EXPIRED_FIRST_SIDE_ATTEMPTS as n, processId as o, ID_ERROR_CODES as p, mapIdManualUploadScreenName as r, startRecordingSession as s, idCaptureMachine as t, uploadIdImage as u };

package/dist/{idOcrStateMachine-Tr48722s.esm.js → idOcrStateMachine-6vUdYjRV.esm.js}

@@ -1,7 +1,7 @@
 import { t as api } from "./api-DsbUi7TO.esm.js";
 import { _ as getTimestamp } from "./events-CqGY1yMq.esm.js";
 import { t as endpoints } from "./endpoints-BzMJFAPV.esm.js";
-import { a as fromPromise, r as assign, t as setup } from "./xstate.esm-r0zHjE2E.esm.js";
+import { a as fromPromise, r as assign, t as setup } from "./xstate.esm-Bomq1a0z.esm.js";
 import { t as validateCPF } from "./cpf-BKaho0j_.esm.js";
 
 //#region ../infra/src/providers/browser/DateFormattingProvider.ts

package/dist/{idVerificationStateMachine-DwjJiKun.esm.js → idVerificationStateMachine-cT7LtSYe.esm.js}

@@ -1,6 +1,6 @@
 import { t as api } from "./api-DsbUi7TO.esm.js";
 import { t as endpoints } from "./endpoints-BzMJFAPV.esm.js";
-import { a as fromPromise, t as setup } from "./xstate.esm-r0zHjE2E.esm.js";
+import { a as fromPromise, t as setup } from "./xstate.esm-Bomq1a0z.esm.js";
 
 //#region src/modules/id-verification/idVerificationServices.ts
 /**

package/dist/identity-reuse.d.ts

@@ -1,4 +1,4 @@
 import "./Manager-BUc6OqO5.js";
 import "./Actor-Du_LU0S4.js";
-import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-piMy-REi.js";
+import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-BOnaxwJI.js";
 export { type FetchDocumentsResponse, type IdentityReuseConfig, type IdentityReuseManager, type IdentityReuseState, type ReusableDocument, SCAN_NEW_DOCUMENT, type SelectedDocumentId, type SubmitResponse, createIdentityReuseManager, createIdentityReuseManagerFromActor, identityReuseMachine };

package/dist/identity-reuse.esm.js

@@ -2,8 +2,8 @@ import "./api-DsbUi7TO.esm.js";
 import "./events-CqGY1yMq.esm.js";
 import "./types-ElOJAGaM.esm.js";
 import "./endpoints-BzMJFAPV.esm.js";
-import "./xstate.esm-r0zHjE2E.esm.js";
-import { n as identityReuseMachine, t as SCAN_NEW_DOCUMENT } from "./identityReuseStateMachine-CE7CiLs9.esm.js";
-import { n as createIdentityReuseManagerFromActor, t as createIdentityReuseManager } from "./identityReuseManager-DjhuypVV.esm.js";
+import "./xstate.esm-Bomq1a0z.esm.js";
+import { n as identityReuseMachine, t as SCAN_NEW_DOCUMENT } from "./identityReuseStateMachine-BYYzDw-l.esm.js";
+import { n as createIdentityReuseManagerFromActor, t as createIdentityReuseManager } from "./identityReuseManager-BeyKVX1g.esm.js";
 
 export { SCAN_NEW_DOCUMENT, createIdentityReuseManager, createIdentityReuseManagerFromActor, identityReuseMachine };