@incodetech/core 0.0.0-dev-20260729-9461bce1 → 0.0.0-dev-20260729-37d96d3d

package/dist/{idVerificationManager-DBVs8TRS.esm.js → idVerificationManager-Df97Bf0n.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dy8PyVO5.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CMFCCu1H.esm.js";
 import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
-import { t as idVerificationMachine } from "./idVerificationStateMachine-xtTSJDrB.esm.js";
+import { t as idVerificationMachine } from "./idVerificationStateMachine-tAF7pvC8.esm.js";
 //#region src/modules/id-verification/idVerificationActor.ts
 function createIdVerificationActor(options) {
 	return createActor(idVerificationMachine, { input: { config: options.config } }).start();

package/dist/{idVerificationStateMachine-xtTSJDrB.esm.js → idVerificationStateMachine-tAF7pvC8.esm.js}

@@ -1,5 +1,5 @@
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 //#region src/modules/id-verification/idVerificationServices.ts

package/dist/identity-reuse.d.ts

@@ -1,2 +1,2 @@
-import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-D6pD4hcZ.js";
+import { c as identityReuseMachine, d as ReusableDocument, f as SubmitResponse, i as createIdentityReuseManagerFromActor, l as FetchDocumentsResponse, n as IdentityReuseState, o as SCAN_NEW_DOCUMENT, r as createIdentityReuseManager, s as SelectedDocumentId, t as IdentityReuseManager, u as IdentityReuseConfig } from "./identityReuseManager-v2TH5g7e.js";
 export { type FetchDocumentsResponse, type IdentityReuseConfig, type IdentityReuseManager, type IdentityReuseState, type ReusableDocument, SCAN_NEW_DOCUMENT, type SelectedDocumentId, type SubmitResponse, createIdentityReuseManager, createIdentityReuseManagerFromActor, identityReuseMachine };

package/dist/identity-reuse.esm.js

@@ -1,3 +1,3 @@
-import { n as identityReuseMachine, t as SCAN_NEW_DOCUMENT } from "./identityReuseStateMachine-DdwSrghH.esm.js";
-import { n as createIdentityReuseManagerFromActor, t as createIdentityReuseManager } from "./identityReuseManager-B8jNZNHu.esm.js";
+import { n as identityReuseMachine, t as SCAN_NEW_DOCUMENT } from "./identityReuseStateMachine-DG8kbKuy.esm.js";
+import { n as createIdentityReuseManagerFromActor, t as createIdentityReuseManager } from "./identityReuseManager-0ZHGWr9T.esm.js";
 export { SCAN_NEW_DOCUMENT, createIdentityReuseManager, createIdentityReuseManagerFromActor, identityReuseMachine };

package/dist/{identityReuseManager-B8jNZNHu.esm.js → identityReuseManager-0ZHGWr9T.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dy8PyVO5.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CMFCCu1H.esm.js";
 import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
-import { n as identityReuseMachine } from "./identityReuseStateMachine-DdwSrghH.esm.js";
+import { n as identityReuseMachine } from "./identityReuseStateMachine-DG8kbKuy.esm.js";
 //#region src/modules/identity-reuse/identityReuseActor.ts
 /**
 * Creates and starts an IdentityReuse actor.

package/dist/{identityReuseManager-D6pD4hcZ.d.ts → identityReuseManager-v2TH5g7e.d.ts}

@@ -125,7 +125,7 @@ declare const identityReuseMachine: StateMachine<IdentityReuseContext, {
     type: "hasSelection";
     params: unknown;
   };
-}>, never, "error" | "idle" | "finished" | "loading" | "submitting" | "documentsFound", string, IdentityReuseInput, NonReducibleUnknown, EventObject, MetaObject, {
+}>, never, "error" | "idle" | "finished" | "submitting" | "loading" | "documentsFound", string, IdentityReuseInput, NonReducibleUnknown, EventObject, MetaObject, {
   readonly id: "identityReuse";
   readonly initial: "idle";
   readonly context: ({ input }: {

package/dist/{identityReuseStateMachine-DdwSrghH.esm.js → identityReuseStateMachine-DG8kbKuy.esm.js}

@@ -1,5 +1,5 @@
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 //#region src/modules/identity-reuse/identityReuseServices.ts

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { a as isConfigured, c as setup, o as reset, t as SetupOptions } from "./setup-B1WTXTQV.js";
+import { a as isConfigured, c as setup, o as reset, t as SetupOptions } from "./setup-Dj8n_YLP.js";
 export { type SetupOptions, isConfigured, reset, setup };

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import { i as reset, o as setup, r as isConfigured } from "./setup-MlGXfrG8.esm.js";
+import { i as reset, o as setup, r as isConfigured } from "./setup-BFV4zwpB.esm.js";
 export { isConfigured, reset, setup };

package/dist/{invokeOnCaptureCallback-B-QfsCQY.esm.js → invokeOnCaptureCallback-Cgl54qED.esm.js}

@@ -1,4 +1,4 @@
-import { m as addEvent } from "./events-Dy8PyVO5.esm.js";
+import { m as addEvent } from "./events-CMFCCu1H.esm.js";
 //#region src/internal/captureOnly/invokeOnCaptureCallback.ts
 /**
 * Invokes an integrator-provided `onCapture` callback with the assembled

package/dist/mandatory-consent.d.ts

@@ -1,3 +1,3 @@
 import { r as MandatoryConsentConfig } from "./types-BX_XkMsQ.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-Dcgmj1Cd.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-DOZSFZA2.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/mandatory-consent.esm.js

@@ -1,3 +1,3 @@
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-3a1psaoK.esm.js";
-import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-BAKnA7U_.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-CjKpOQXU.esm.js";
+import { n as createMandatoryConsentManagerFromActor, t as createMandatoryConsentManager } from "./mandatoryConsentManager-DaKK7S4q.esm.js";
 export { createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-Dcgmj1Cd.d.ts → mandatoryConsentManager-DOZSFZA2.d.ts}

@@ -72,7 +72,7 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
 }>, {
   type: "canSubmit";
   params: unknown;
-}, never, "error" | "idle" | "closed" | "finished" | "loading" | "submitting" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
+}, never, "error" | "idle" | "closed" | "finished" | "submitting" | "loading" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
   readonly id: "mandatoryConsent";
   readonly initial: "idle";
   readonly context: ({ input }: {

package/dist/{mandatoryConsentManager-BAKnA7U_.esm.js → mandatoryConsentManager-DaKK7S4q.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dy8PyVO5.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CMFCCu1H.esm.js";
 import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
-import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-3a1psaoK.esm.js";
+import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-CjKpOQXU.esm.js";
 //#region src/modules/mandatory-consent/mandatoryConsentActor.ts
 function createMandatoryConsentActor(options) {
 	return createActor(mandatoryConsentMachine, { input: { config: options.config } }).start();

package/dist/{mandatoryConsentStateMachine-3a1psaoK.esm.js → mandatoryConsentStateMachine-CjKpOQXU.esm.js}

@@ -1,5 +1,5 @@
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 //#region src/modules/mandatory-consent/mandatoryConsentServices.ts

package/dist/{onDeviceFaceResults-DbSP6iTw.esm.js → onDeviceFaceResults-BJDw5FPn.esm.js}

@@ -1,12 +1,14 @@
-import { n as BaseWasmProvider, o as mlWasmJSApi_default } from "./WasmUtilProvider-BrWOTaVG.esm.js";
-import { r as getToken, t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
-import { t as addDeviceStats } from "./stats-CKtpeAhi.esm.js";
+import { n as BaseWasmProvider, o as mlWasmJSApi_default } from "./WasmUtilProvider-D13sxEmA.esm.js";
+import { r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
+import { c as trueSightHintTransition, l as trueSightLog, r as noteTrueSightCaptureActivity } from "./trueSightService-1pUahMUt.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
+import "./trueSight-BhOPRXqt.esm.js";
+import { t as addDeviceStats } from "./stats-6sK3f5pc.esm.js";
 import { a as isIPhone14OrHigher, n as isDesktop } from "./platform-Cd_yWGNG.esm.js";
 import { a as stopCameraStream, r as requestCameraAccess } from "./camera-BmFEyPP_.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as IncodeCanvas } from "./canvas-E1zGkel4.esm.js";
-import { n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-6XQp9RxG.esm.js";
+import { n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-BqiXcU28.esm.js";
 //#region ../infra/src/scheduling/yieldUntilNextPaint.ts
 /**
 * Resolves after the browser has had a chance to commit and paint a queued
@@ -401,10 +403,12 @@ function startDetection(params) {
 		if (session?.isDisposed() === true) return;
 		if (lastStatus === status) return;
 		lastStatus = status;
+		trueSightHintTransition("module.face-capture", "faceScan", status);
 		params.onUpdate(status);
 	};
 	const stopDetectionLoop = () => {
 		session?.dispose();
+		noteTrueSightCaptureActivity(false);
 	};
 	const reset = () => {
 		provider.reset();
@@ -457,6 +461,7 @@ function startDetection(params) {
 				provider,
 				onFrame: params.onFrame
 			});
+			noteTrueSightCaptureActivity(true);
 		} catch {
 			setStatus("error");
 			cleanup();
@@ -516,7 +521,7 @@ async function stopRecording(session) {
 	}
 }
 async function initializeDeepsightSession(options) {
-	const { loadDeepsightSession } = await import("./deepsightLoader-AdX0vjwb.esm.js");
+	const { loadDeepsightSession } = await import("./deepsightLoader-CMjjYlDH.esm.js");
 	return loadDeepsightSession({
 		ds: options.ds,
 		storage: options.storage
@@ -561,7 +566,9 @@ async function defaultPrepareFaceUpload(ctx) {
 	const recordingId = (await ctx.recordingService?.stop())?.recordingId ?? null;
 	try {
 		if (ctx.deepsightService) await Promise.all([ctx.deepsightService.performVirtualCameraCheck(sessionToken, "SELFIE"), ctx.deepsightService.analyzeFrame(ctx.capturedImage.getImageData())]);
-	} catch (error) {}
+	} catch (error) {
+		trueSightLog("warning", "deepsight", "faceScan", `deepsight selfie analysis failed error=${String(error)}`);
+	}
 	const logs = ctx.deepsightService?.getPipelineState() ?? "";
 	ctx.dependencies.trackCaptureAttemptFinished?.({ logs });
 	return {

package/dist/{permissionGuards-5Cu6a8iN.esm.js → permissionGuards-D0cdQjk6.esm.js}

@@ -1,4 +1,4 @@
-import { a as isWasmMotionPrimedForModule } from "./permissionServices-CkHL1BjH.esm.js";
+import { a as isWasmMotionPrimedForModule } from "./permissionServices-GFikEK6S.esm.js";
 //#region src/internal/permissions/permissionGuards.ts
 function resolveStoredPermissionResult(fromEvent, fromContext) {
 	if (fromEvent === "granted" || fromEvent === "denied" || fromEvent === "prompt" || fromEvent === "refresh") return fromEvent;

package/dist/{permissionServices-CkHL1BjH.esm.js → permissionServices-GFikEK6S.esm.js}

@@ -1,17 +1,6 @@
-import { t as WasmUtilProvider } from "./WasmUtilProvider-BrWOTaVG.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-D13sxEmA.esm.js";
 import { t as MotionSensorProvider } from "./MotionSensorProvider-DYvM90IX.esm.js";
 import { a as stopCameraStream, r as requestCameraAccess } from "./camera-BmFEyPP_.esm.js";
-//#region ../infra/src/media/cameraPermissionSession.ts
-const CAMERA_PERMISSIONS_GRANTED_KEY = "cameraPermissionsGranted";
-function isCameraGrantedInSession() {
-	if (typeof sessionStorage === "undefined") return false;
-	return sessionStorage.getItem(CAMERA_PERMISSIONS_GRANTED_KEY) === "true";
-}
-function markCameraPermissionsGrantedInSession() {
-	if (typeof sessionStorage === "undefined") return;
-	sessionStorage.setItem(CAMERA_PERMISSIONS_GRANTED_KEY, String(true));
-}
-//#endregion
 //#region ../infra/src/media/permissions.ts
 async function queryPermission(name) {
 	try {
@@ -39,7 +28,7 @@ function isWasmMotionPrimedForModule() {
 //#endregion
 //#region src/internal/permissions/permissionServices.ts
 function isCameraGrantedForMotionPrime(options) {
-	return options.cameraGranted === true || isCameraGrantedInSession();
+	return options.cameraGranted === true;
 }
 async function resolveMotionOsPermission(motionSensor) {
 	if (motionSensor.hasBeenRequestedThisSession()) return "granted";
@@ -64,10 +53,7 @@ async function primeMotionFromUserGestureIfNeeded(options) {
 }
 async function checkPermission() {
 	const queryResult = await queryCameraPermission();
-	if (queryResult === "granted") {
-		markCameraPermissionsGrantedInSession();
-		return "granted";
-	}
+	if (queryResult === "granted") return "granted";
 	if (queryResult === "denied") return "denied";
 	return "prompt";
 }
@@ -104,7 +90,6 @@ async function requestPermission(options = {}) {
 			video: true,
 			audio: options.requestAudio ?? false
 		}));
-		markCameraPermissionsGrantedInSession();
 		return "granted";
 	} catch (error) {
 		const name = error instanceof Error ? error.name : void 0;

package/dist/personhood.esm.js

@@ -1,31 +1,18 @@
-import { t as WasmUtilProvider } from "./WasmUtilProvider-BrWOTaVG.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-D13sxEmA.esm.js";
+import { t as BrowserStorageProvider } from "./BrowserStorageProvider-P6aUarE9.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { a as createApi$1, t as getStoredHttpConfig } from "./clientLifecycle-BX83zwtT.esm.js";
-import { n as eventModuleNames } from "./events-Dy8PyVO5.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
-import { _ as getDeviceFingerprintInfo, g as getThumbmarkId, n as getFingerprintEnabled, p as isBrowserSimulation, v as BrowserEnvironmentProvider } from "./sessionInitializer-DyJ4nLFJ.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { b as getStoredHttpConfig, w as createApi$1, y as randomUUID } from "./trueSightService-1pUahMUt.esm.js";
+import { n as eventModuleNames } from "./events-CMFCCu1H.esm.js";
+import { _ as getDeviceFingerprintInfo, g as getThumbmarkId, n as getFingerprintEnabled, p as isBrowserSimulation, v as BrowserEnvironmentProvider } from "./sessionInitializer-B9Z-7bmu.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { c as createManager, o as createActor, r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
-import { i as requestPermission, t as checkPermission } from "./permissionServices-CkHL1BjH.esm.js";
+import { i as requestPermission, t as checkPermission } from "./permissionServices-GFikEK6S.esm.js";
 import { a as stopCameraStream, r as requestCameraAccess } from "./camera-BmFEyPP_.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-P6aUarE9.esm.js";
-import { f as stopStream, l as startDetection, s as initializeDeepsightSession, v as FaceDetectionProvider } from "./onDeviceFaceResults-DbSP6iTw.esm.js";
+import { f as stopStream, l as startDetection, s as initializeDeepsightSession, v as FaceDetectionProvider } from "./onDeviceFaceResults-BJDw5FPn.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-D2XcXCZ4.esm.js";
-//#region ../infra/src/crypto/randomUUID.ts
-/**
-* Cryptographically-strong UUID v4 (RFC 4122).
-*
-* Lives in infra (L0) so Core (L1) can mint secure identifiers without touching
-* the `crypto` browser API directly — Core delegates here, keeping it free of
-* browser globals (enforced by the `no-browser-api-in-core` lint rule). Backed
-* by `crypto.randomUUID`, available in every browser the SDK targets.
-*/
-function randomUUID() {
-	return crypto.randomUUID();
-}
-//#endregion
 //#region src/modules/personhood/personhoodServices.ts
 /**
 * Config used for the passive liveness pass. Deliberately stripped down from

package/dist/phone.esm.js

@@ -1,3 +1,3 @@
-import { t as phoneMachine } from "./phoneStateMachine-DxmYoLg8.esm.js";
-import { t as createPhoneManager } from "./phoneManager-dizEvG20.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-FJ-_x1G4.esm.js";
+import { t as createPhoneManager } from "./phoneManager-WImoAp4i.esm.js";
 export { createPhoneManager, phoneMachine };

package/dist/{phoneManager-dizEvG20.esm.js → phoneManager-WImoAp4i.esm.js}

@@ -1,6 +1,6 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dy8PyVO5.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CMFCCu1H.esm.js";
 import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
-import { t as phoneMachine } from "./phoneStateMachine-DxmYoLg8.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-FJ-_x1G4.esm.js";
 //#region src/modules/phone/phoneActor.ts
 function createPhoneActor(options) {
 	return createActor(phoneMachine, { input: { config: options.config } }).start();

package/dist/{phoneStateMachine-DxmYoLg8.esm.js → phoneStateMachine-FJ-_x1G4.esm.js}

@@ -1,6 +1,6 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 import { n as isOtpComplete, t as computeOtpValidationErrors } from "./otp-D2k3PeSL.esm.js";

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as areAllConsented, i as QE_CONSENT_KEYS, n as electronicSignatureMachine, s as getDefaultConsentChecks, t as createElectronicSignatureManager } from "./electronicSignatureManager-hJ9YaAvD.esm.js";
+import { a as areAllConsented, i as QE_CONSENT_KEYS, n as electronicSignatureMachine, s as getDefaultConsentChecks, t as createElectronicSignatureManager } from "./electronicSignatureManager-Bv4NSqFL.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{recordingService-C8jFtEKZ.esm.js → recordingService-DgRIIgz0.esm.js}

@@ -1,7 +1,7 @@
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { t as isAndroid } from "./platform-Cd_yWGNG.esm.js";
-import { d as stopRecording, g as uploadDeepsightVideo, u as startRecordingSession } from "./onDeviceFaceResults-DbSP6iTw.esm.js";
+import { d as stopRecording, g as uploadDeepsightVideo, u as startRecordingSession } from "./onDeviceFaceResults-BJDw5FPn.esm.js";
 import { t as getAdaptiveMediaRecorderOptions } from "./mediaRecorderOptions-CUsftWlH.esm.js";
 //#region src/internal/manualReview/manualReviewService.ts
 async function flagFaceManualReview() {

package/dist/redirect-to-mobile.esm.js

@@ -1,3 +1,3 @@
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-TSHtrr5D.esm.js";
-import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-BCInKNqp.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-jI5XPtZJ.esm.js";
+import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-CxEu6KnV.esm.js";
 export { createRedirectToMobileManager, createRedirectToMobileManagerFromActor, defaultRedirectToMobileServices, redirectToMobileMachine };

package/dist/{redirectToMobileManager-BCInKNqp.esm.js → redirectToMobileManager-CxEu6KnV.esm.js}

@@ -1,8 +1,8 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dy8PyVO5.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CMFCCu1H.esm.js";
 import { c as createManager, o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-TSHtrr5D.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-jI5XPtZJ.esm.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileActor.ts
 const POLL_INTERVAL_MS = 5e3;
 const QR_REFRESH_INTERVAL_MS = 5e3;

package/dist/{redirectToMobileStateMachine-TSHtrr5D.esm.js → redirectToMobileStateMachine-jI5XPtZJ.esm.js}

@@ -1,6 +1,6 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
 import { r as assign, t as setup } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 import { n as getUrlSearchParam, t as buildUrlWithSearchParams } from "./urlUtils-D6phjq1-.esm.js";

package/dist/{runChildModule-Crz1nHwJ.esm.js → runChildModule-BygT7eDD.esm.js}

@@ -1,4 +1,6 @@
-import { b as getTimestamp, y as createEventBus } from "./events-Dy8PyVO5.esm.js";
+import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-1pUahMUt.esm.js";
+import { y as createEventBus } from "./events-CMFCCu1H.esm.js";
 import { o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-CtI5S0f4.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
@@ -61,6 +63,8 @@ function getActiveModule(state, includeHomeModule) {
 }
 function attachFlowEventEmitter(manager, options = {}) {
 	const flowEventBus = createFlowEventBus();
+	const managerKind = options.managerKind ?? "flow";
+	flowEventBus.subscribe((event) => notifyTrueSightFlowEvent(event, managerKind));
 	let hasStartedCurrentRun = false;
 	let hasReadyCurrentRun = false;
 	let hasCompletedCurrentRun = false;
@@ -183,6 +187,7 @@ function attachFlowEventEmitter(manager, options = {}) {
 		value() {
 			if (isStopped) return;
 			isStopped = true;
+			notifyTrueSightManagerStopped(managerKind);
 			unsubscribe();
 			stop();
 		},

package/dist/selfie.esm.js

@@ -1,14 +1,14 @@
-import { t as WasmUtilProvider } from "./WasmUtilProvider-BrWOTaVG.esm.js";
-import { n as eventModuleNames } from "./events-Dy8PyVO5.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-D13sxEmA.esm.js";
+import { t as BrowserStorageProvider } from "./BrowserStorageProvider-P6aUarE9.esm.js";
+import { n as eventModuleNames } from "./events-CMFCCu1H.esm.js";
 import { o as createActor, r as assign } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-BQEQriDi.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-Bkc1HLRL.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-P6aUarE9.esm.js";
-import { r as processFace } from "./selfieErrorUtils-1aFaxF3Q.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BiuQiED3.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-KbDEkivf.esm.js";
-import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-B-QfsCQY.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-BEIJq6g-.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BdQ0rekz.esm.js";
+import { r as processFace } from "./selfieErrorUtils-DCRRRj38.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-BOtVaHGI.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-CXX0Bdsp.esm.js";
+import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-Cgl54qED.esm.js";
 //#region src/modules/selfie/selfieCaptureOnlyStateMachine.ts
 /**
 * Performs local finalization of a captured face frame: stops local video

package/dist/{selfieErrorUtils-1aFaxF3Q.esm.js → selfieErrorUtils-DCRRRj38.esm.js}

@@ -1,6 +1,6 @@
-import { t as api } from "./api-BDTZNnca.esm.js";
-import { t as endpoints } from "./endpoints-BwKx4Gne.esm.js";
-import { t as addDeviceStats } from "./stats-CKtpeAhi.esm.js";
+import { t as api } from "./api-Bx3gKW_y.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
+import { t as addDeviceStats } from "./stats-6sK3f5pc.esm.js";
 import { t as getDeviceClass } from "./getDeviceClass-BGmoQmjj.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 //#region src/modules/selfie/selfieUploadService.ts

package/dist/{selfieManager-KbDEkivf.esm.js → selfieManager-CXX0Bdsp.esm.js}

@@ -1,9 +1,9 @@
-import { t as WasmUtilProvider } from "./WasmUtilProvider-BrWOTaVG.esm.js";
-import { n as eventModuleNames } from "./events-Dy8PyVO5.esm.js";
-import { o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-Bkc1HLRL.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-D13sxEmA.esm.js";
 import { t as BrowserStorageProvider } from "./BrowserStorageProvider-P6aUarE9.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-BiuQiED3.esm.js";
+import { n as eventModuleNames } from "./events-CMFCCu1H.esm.js";
+import { o as createActor } from "./xstate.esm-Cf4e0Cfd.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BdQ0rekz.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-BOtVaHGI.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-BiuQiED3.esm.js → selfieStateMachine-BOtVaHGI.esm.js}

@@ -1,9 +1,9 @@
 import { r as assign } from "./xstate.esm-Cf4e0Cfd.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-CtI5S0f4.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-BQEQriDi.esm.js";
-import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-DbSP6iTw.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-BEIJq6g-.esm.js";
+import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-BJDw5FPn.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
-import { i as uploadSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-1aFaxF3Q.esm.js";
+import { i as uploadSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-DCRRRj38.esm.js";
 /**
 * The selfie capture state machine.
 *

package/dist/session-BjWDH0Yu.esm.js

@@ -0,0 +1,161 @@
+import { n as getApi } from "./api-Bx3gKW_y.esm.js";
+import { h as noteSessionCreated, l as trueSightLog } from "./trueSightService-1pUahMUt.esm.js";
+import "./sessionInitializer-B9Z-7bmu.esm.js";
+import { t as endpoints } from "./endpoints-DOfmJylF.esm.js";
+import "./trueSight-BhOPRXqt.esm.js";
+import { r as toIncodeApiError } from "./apiError-DVMm9USR.esm.js";
+//#region src/internal/session/sessionService.ts
+/**
+* HTTP status codes the QR validation endpoint emits, keyed by their semantic
+* name. Hosts switch on these to render distinct messaging — `invalidQRuuid`
+* for an unknown/expired link, `onboardingUrlAlreadyUsed` for a one-time link
+* that has already been consumed.
+*/
+const QR_VALIDATION_ERROR_CODES = {
+	expiredUUID: 4026,
+	invalidQRuuid: 4081,
+	onboardingUrlAlreadyUsed: 4083
+};
+var QrValidationError = class extends Error {
+	constructor(status, statusText) {
+		super(`POST ${endpoints.qrValidateUuid} failed: ${status} ${statusText}`);
+		this.name = "QrValidationError";
+		this.status = status;
+		this.statusText = statusText;
+	}
+};
+/**
+* Creates a new onboarding session.
+*
+* @param apiKey - The API key from the Incode dashboard
+* @param options - Session creation options
+* @param signal - Optional AbortSignal for request cancellation
+* @returns The created session with token
+*
+* @example
+* ```ts
+* const session = await createSession('your-api-key', {
+*   configurationId: 'your-flow-id',
+*   language: 'en-US',
+* });
+* console.log(session.token); // Use this token for subsequent API calls
+* ```
+*/
+async function createSession(apiKey, options, signal) {
+	try {
+		const session = (await getApi().post(endpoints.createSession, {
+			configurationId: options.configurationId,
+			externalId: options.externalId,
+			externalCustomerId: options.externalCustomerId,
+			language: options.language ?? "en-US",
+			customFields: options.customFields,
+			uuid: options.uuid ?? null,
+			urlUuid: options.urlUuid ?? null,
+			interviewId: options.interviewId ?? null,
+			...options.loginHint != null && options.loginHint !== "" ? { loginHint: options.loginHint } : {}
+		}, {
+			headers: {
+				"x-api-key": apiKey,
+				"api-version": "1.0"
+			},
+			signal
+		})).data;
+		noteSessionCreated(session, {
+			configurationId: options.configurationId,
+			externalCustomerId: options.externalCustomerId,
+			interviewId: options.interviewId,
+			language: options.language
+		});
+		trueSightLog("info", "session", "orchestration", "session created");
+		return session;
+	} catch (error) {
+		toIncodeApiError(endpoints.createSession, error);
+	}
+}
+/**
+* Validates and rotates a QR anti-phishing URL UUID before creating a session.
+*
+* This call is unauthenticated; the `{ onboardingId, urlUuid }` pair itself
+* acts as the credential. The server burns the incoming `urlUuid` and returns
+* a freshly minted one that must be used in the subsequent `createSession`
+* call.
+*
+* @param options - `{ onboardingId, urlUuid }` from the incoming URL
+* @param signal - Optional AbortSignal for request cancellation
+* @returns The refreshed `urlUuid` to use for the session
+* @throws {QrValidationError} When the server rejects the validation request.
+*/
+async function validateQrUuid(options, signal) {
+	try {
+		return (await getApi().post(endpoints.qrValidateUuid, {
+			onboardingId: options.onboardingId,
+			urlUuid: options.urlUuid
+		}, {
+			headers: { "api-version": "1.0" },
+			signal
+		})).data;
+	} catch (error) {
+		const httpError = error;
+		throw new QrValidationError(httpError.data?.status ?? httpError.status, httpError.statusText);
+	}
+}
+/**
+* One-shot QR phishing-resistance helper.
+*
+* When `urlUuid` is a non-empty string, burns the stale value via
+* `validateQrUuid`, invokes `onRefreshed` with the fresh value, and returns
+* it so callers can forward it into `createSession`. When `urlUuid` is
+* absent, returns `undefined` without making any network call.
+*
+* Consolidates the rotation + callback logic shared by Flow self-loading and
+* Workflow token-mode bootstraps.
+*
+* @throws {QrValidationError} When the server rejects the validation request.
+*/
+async function refreshQrUrlUuid(options, signal) {
+	if (typeof options.urlUuid !== "string" || options.urlUuid.length === 0) return;
+	const result = await validateQrUuid({
+		onboardingId: options.onboardingId ?? null,
+		urlUuid: options.urlUuid
+	}, signal);
+	options.onRefreshed?.(result.urlUuid);
+	return result.urlUuid;
+}
+/**
+* Validates and rotates a QR anti-phishing `urlUuid` (when present), then
+* creates a session bound to the refreshed value. When `urlUuid` is absent,
+* behaves identically to {@link createSession}.
+*
+* Use this when the host owns session creation and wants the SDK to handle
+* phishing-resistance rotation in a single call. For raw control, compose
+* `refreshQrUrlUuid` and `createSession` directly.
+*
+* @throws {QrValidationError} When the server rejects the QR validation step.
+*
+* @example
+* ```ts
+* const session = await bootstrapSession(apiKey, {
+*   configurationId,
+*   urlUuid,
+*   onUrlUuidRefreshed: (refreshed) => {
+*     const url = new URL(window.location.href);
+*     url.searchParams.set('url_uuid', refreshed);
+*     window.history.replaceState({}, '', url);
+*   },
+* });
+* ```
+*/
+async function bootstrapSession(apiKey, options, signal) {
+	const { onUrlUuidRefreshed, ...createSessionOptions } = options;
+	const refreshedUrlUuid = await refreshQrUrlUuid({
+		urlUuid: options.urlUuid,
+		onboardingId: options.uuid ?? null,
+		onRefreshed: onUrlUuidRefreshed
+	}, signal);
+	return createSession(apiKey, {
+		...createSessionOptions,
+		urlUuid: refreshedUrlUuid
+	}, signal);
+}
+//#endregion
+export { refreshQrUrlUuid as a, createSession as i, QrValidationError as n, validateQrUuid as o, bootstrapSession as r, QR_VALIDATION_ERROR_CODES as t };