@incodetech/core 0.0.0-dev-20260911-3c28f170 → 0.0.0-dev-20260911-d4e8be9f

package/dist/{mandatoryConsentManager-eFC-htLS.d.ts → mandatoryConsentManager-BxrRrlBs.d.ts}

@@ -57,14 +57,14 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
     type: "setError";
     params: NonReducibleUnknown;
   };
-  clearError: {
-    type: "clearError";
-    params: NonReducibleUnknown;
-  };
   toggleSigned: {
     type: "toggleSigned";
     params: NonReducibleUnknown;
   };
+  clearError: {
+    type: "clearError";
+    params: NonReducibleUnknown;
+  };
   resetContext: {
     type: "resetContext";
     params: NonReducibleUnknown;
@@ -72,7 +72,7 @@ declare const mandatoryConsentMachine: StateMachine<MandatoryConsentContext, {
 }>, {
   type: "canSubmit";
   params: unknown;
-}, never, "error" | "idle" | "closed" | "finished" | "loading" | "submitting" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
+}, never, "error" | "idle" | "closed" | "finished" | "submitting" | "loading" | "display", string, MandatoryConsentInput, NonReducibleUnknown, EventObject, MetaObject, {
   readonly id: "mandatoryConsent";
   readonly initial: "idle";
   readonly context: ({ input }: {

package/dist/{onDeviceFaceResults-CU5XlhqG.esm.js → onDeviceFaceResults-C10QzrYa.esm.js}

@@ -1,9 +1,9 @@
-import { t as ensureWasmPipelines } from "./setup-CQNSur1c.esm.js";
+import { t as ensureWasmPipelines } from "./setup-BQ5-0CB6.esm.js";
 import { s as wasmRuntime } from "./warmup-BOM-sD-6.esm.js";
 import { i as BaseWasmProvider } from "./safeStorage-Dp9m6aOh.esm.js";
 import { r as getToken } from "./api-Bx3gKW_y.esm.js";
-import { c as trueSightHintTransition, l as trueSightLog, r as noteTrueSightCaptureActivity } from "./trueSightService-CvdDnFul.esm.js";
-import "./sessionInitializer-DUpE6yBR.esm.js";
+import { c as trueSightHintTransition, l as trueSightLog, r as noteTrueSightCaptureActivity } from "./trueSightService-CGUA9dm6.esm.js";
+import { v as yieldUntilNextPaint } from "./sessionInitializer-BpyJ5y2B.esm.js";
 import { t as addDeviceStats } from "./stats-DkK-f8JT.esm.js";
 import { c as isIPhone14OrHigher, i as isDesktop } from "./platform-DkcRc9JV.esm.js";
 import { a as stopCameraStream, r as requestCameraAccess } from "./camera-_2sXMXiF.esm.js";
@@ -11,54 +11,6 @@ import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as IncodeCanvas } from "./canvas-E1zGkel4.esm.js";
 import { a as StreamCanvasProcessingSession, n as startRecording, r as stopRecording$1, t as createRecordingSession } from "./recordingsRepository-CCWy13M-.esm.js";
 import { i as hasBackCamera, n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-DE_5qY04.esm.js";
-//#region ../infra/src/scheduling/yieldUntilNextPaint.ts
-/**
-* Resolves after the browser has had a chance to commit and paint a queued
-* render.
-*
-* Strategy:
-* - `requestAnimationFrame` callbacks fire BEFORE the paint of the frame
-*   they belong to (per the HTML5 "update the rendering" step). If we
-*   resolve the promise inside a rAF callback, the await-continuation
-*   runs as a microtask immediately after the callback returns — still
-*   before the paint phase of that frame. A caller that then blocks the
-*   main thread (e.g. synchronous WASM `processPhoto`) starves the paint.
-* - We therefore chain rAF → setTimeout: the rAF fires before frame N's
-*   paint, the setTimeout runs as a macrotask scheduled after frame N's
-*   "update the rendering" step, which the browser will only get to once
-*   the paint actually lands. By the time setTimeout fires, the paint
-*   for the queued render is on screen.
-* - In environments where rAF never ticks (jsdom, happy-dom, backgrounded
-*   tabs), a parallel `setTimeout` fallback at 100 ms resolves instead.
-*   100 ms is comfortably longer than two real-browser frames so rAF +
-*   setTimeout wins reliably in any foregrounded browser. (An earlier
-*   implementation raced rAF against a `MessageChannel` macrotask, but
-*   MessageChannel drains immediately after the current task's
-*   microtasks — before the next paint — so it resolved the promise too
-*   early and defeated the whole point of the helper.)
-*
-* Lives in infra because it touches browser APIs (`requestAnimationFrame`,
-* `setTimeout`) that the architecture rules forbid from core. Core modules
-* that need to yield to the browser render loop should import this helper
-* directly via its file path.
-*/
-function yieldUntilNextPaint() {
-	return new Promise((resolve) => {
-		let resolved = false;
-		const done = () => {
-			if (resolved) return;
-			resolved = true;
-			resolve();
-		};
-		if (typeof requestAnimationFrame === "function") requestAnimationFrame(() => {
-			requestAnimationFrame(() => {
-				setTimeout(done, 0);
-			});
-		});
-		setTimeout(done, 100);
-	});
-}
-//#endregion
 //#region ../infra/src/wasm/faceProcessingWasmApi.ts
 var FaceProcessingWasmApi = class {
 	constructor(runtime = wasmRuntime) {
@@ -517,7 +469,7 @@ async function stopRecording(session) {
 	}
 }
 async function initializeDeepsightSession(options) {
-	const { loadDeepsightSession } = await import("./deepsightLoader-Cpjfw3EQ.esm.js");
+	const { loadDeepsightSession } = await import("./deepsightLoader-HcpfFvrJ.esm.js");
 	return loadDeepsightSession({
 		ds: options.ds,
 		storage: options.storage

package/dist/personhood.esm.js

@@ -1,17 +1,17 @@
-import { l as BrowserStorageProvider } from "./setup-CQNSur1c.esm.js";
+import { l as BrowserStorageProvider } from "./setup-BQ5-0CB6.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { C as createApi$1, v as randomUUID, y as getStoredHttpConfig } from "./trueSightService-CvdDnFul.esm.js";
+import { C as createApi$1, v as randomUUID, y as getStoredHttpConfig } from "./trueSightService-CGUA9dm6.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { _ as getThumbmarkId, m as isBrowserSimulation, n as getFingerprintEnabled, v as getDeviceFingerprintInfo, y as BrowserEnvironmentProvider } from "./sessionInitializer-DUpE6yBR.esm.js";
+import { _ as getThumbmarkId, b as BrowserEnvironmentProvider, m as isBrowserSimulation, n as getFingerprintEnabled, y as getDeviceFingerprintInfo } from "./sessionInitializer-BpyJ5y2B.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 import { a as stopCameraStream, r as requestCameraAccess } from "./camera-_2sXMXiF.esm.js";
 import { i as requestPermission, t as checkPermission } from "./permissionServices-f7nBnW5P.esm.js";
-import { f as stopStream, l as startDetection, p as FaceDetectionProvider, s as initializeDeepsightSession } from "./onDeviceFaceResults-CU5XlhqG.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
+import { f as stopStream, l as startDetection, p as FaceDetectionProvider, s as initializeDeepsightSession } from "./onDeviceFaceResults-C10QzrYa.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-D2XcXCZ4.esm.js";
 //#region src/modules/personhood/personhoodServices.ts
 /**

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-vLj_aBwI.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-Bf6B6pEU.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{runChildModule-6P8ofHxL.esm.js → runChildModule-BvxjSxjZ.esm.js}

@@ -1,5 +1,5 @@
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-CvdDnFul.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-CGUA9dm6.esm.js";
 import { C as createEventBus } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";

package/dist/{sdkVersion-DlL6SxXs.esm.js → sdkVersion-BRy4YQdU.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "0.0.0-dev-20260911-3c28f170";
+const SDK_VERSION = "0.0.0-dev-20260911-d4e8be9f";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.esm.js

@@ -1,13 +1,13 @@
-import { l as BrowserStorageProvider } from "./setup-CQNSur1c.esm.js";
+import { l as BrowserStorageProvider } from "./setup-BQ5-0CB6.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { i as assign, s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-Bhpk__dy.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BRuA7cbI.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-C209BNIm.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CoWc6zH_.esm.js";
 import { r as processFace } from "./selfieErrorUtils-C6gC06J7.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-B7vhKLV7.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-C4esDm_H.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-CV3OsU5z.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-C680J2y6.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BjzPjJ_p.esm.js";
 //#region src/modules/selfie/selfieCaptureOnlyStateMachine.ts
 /**

package/dist/{selfieManager-C4esDm_H.esm.js → selfieManager-C680J2y6.esm.js}

@@ -1,9 +1,9 @@
-import { l as BrowserStorageProvider } from "./setup-CQNSur1c.esm.js";
+import { l as BrowserStorageProvider } from "./setup-BQ5-0CB6.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-BRuA7cbI.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-B7vhKLV7.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CoWc6zH_.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-CV3OsU5z.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-B7vhKLV7.esm.js → selfieStateMachine-CV3OsU5z.esm.js}

@@ -1,7 +1,7 @@
 import { i as assign } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { n as manualFaceUploadMachine, t as faceCaptureMachine } from "./faceCaptureSetup-Bhpk__dy.esm.js";
-import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-CU5XlhqG.esm.js";
+import { n as manualFaceUploadMachine, t as faceCaptureMachine } from "./faceCaptureSetup-C209BNIm.esm.js";
+import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-C10QzrYa.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 import { a as uploadSelfie, i as uploadManualSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-C6gC06J7.esm.js";
 //#region src/modules/selfie/selfieStateMachine.ts

package/dist/{session-DWnBmR2a.esm.js → session-BxzK5bo1.esm.js}

@@ -1,8 +1,8 @@
 import { n as getApi } from "./api-Bx3gKW_y.esm.js";
-import { h as noteSessionCreated, l as trueSightLog } from "./trueSightService-CvdDnFul.esm.js";
-import "./sessionInitializer-DUpE6yBR.esm.js";
+import { h as noteSessionCreated, l as trueSightLog } from "./trueSightService-CGUA9dm6.esm.js";
+import "./sessionInitializer-BpyJ5y2B.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
-import { i as toIncodeApiError } from "./apiError-CY6lWIaQ.esm.js";
+import { i as toIncodeApiError } from "./apiError-DsGq8I1L.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic

package/dist/session.esm.js

@@ -1,5 +1,5 @@
-import { c as whenSessionFingerprintSettled, i as initializeSession } from "./sessionInitializer-DUpE6yBR.esm.js";
-import { t as IncodeApiError } from "./apiError-CY6lWIaQ.esm.js";
-import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-DWnBmR2a.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-cuWgokHI.esm.js";
+import { c as whenSessionFingerprintSettled, i as initializeSession } from "./sessionInitializer-BpyJ5y2B.esm.js";
+import { t as IncodeApiError } from "./apiError-DsGq8I1L.esm.js";
+import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-BxzK5bo1.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-CTbI_iTT.esm.js";
 export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid, whenSessionFingerprintSettled };

package/dist/{sessionInitializer-DUpE6yBR.esm.js → sessionInitializer-BpyJ5y2B.esm.js}

@@ -1,8 +1,8 @@
-import { E as updateFeatureManagementUser } from "./feature-management-Dd_npJ0p.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-DJHtBpsz.esm.js";
 import { c as setToken, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { _ as noteTokenActivated, d as fetchFeatureConfig, f as isFeatureEnabled, l as trueSightLog, m as noteEnvironment, p as resetFeatureConfigCache, s as startTrueSightCollection } from "./trueSightService-CvdDnFul.esm.js";
+import { _ as noteTokenActivated, d as fetchFeatureConfig, f as isFeatureEnabled, l as trueSightLog, m as noteEnvironment, p as resetFeatureConfigCache, s as startTrueSightCollection } from "./trueSightService-CGUA9dm6.esm.js";
 import { v as addEvent, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-DlL6SxXs.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-BRy4YQdU.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-DkK-f8JT.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-B2iFDql1.esm.js";
@@ -239,7 +239,7 @@ async function getDeviceFingerprintInfo() {
 	}
 }
 //#endregion
-//#region ../../node_modules/.pnpm/@thumbmarkjs+thumbmarkjs@1.6.4/node_modules/@thumbmarkjs/thumbmarkjs/dist/thumbmark.esm.js
+//#region ../../node_modules/.pnpm/@thumbmarkjs+thumbmarkjs@1.6.4_patch_hash=4567be4f9456c742dbb8f16dd684bd7f9e5d056dfdc5a42aa48c836cab4a540a/node_modules/@thumbmarkjs/thumbmarkjs/dist/thumbmark.esm.js
 const e = 2592e5;
 const t = "thumbmark";
 const n = "https://api.thumbmarkjs.com";
@@ -312,6 +312,11 @@ function c(e) {
 function l(e, t, n) {
 	let o = [];
 	for (let t = 0; t < e[0].data.length; t++) {
+		const first = e[0].data[t];
+		if (e.every((image) => image.data[t] === first)) {
+			o.push(first);
+			continue;
+		}
 		let n = [];
 		for (let o = 0; o < e.length; o++) n.push(e[o].data[t]);
 		o.push(u(n));
@@ -395,7 +400,7 @@ async function g(e) {
 	o.setProperty("position", "fixed"), o.setProperty("display", "block", "important"), o.setProperty("visibility", "visible"), o.setProperty("border", "0"), o.setProperty("opacity", "0"), n.src = "about:blank", document.body.appendChild(n);
 	const r = n.contentDocument || (null === (t = n.contentWindow) || void 0 === t ? void 0 : t.document);
 	if (!r) throw new Error("Iframe document is not accessible");
-	e({ iframe: r }), setTimeout((() => {
+	await e({ iframe: r }), setTimeout((() => {
 		document.body.removeChild(n);
 	}), 0);
 }
@@ -802,7 +807,7 @@ const V = {
 			0 !== t.length ? e({ commonPixelsHash: h(l(t, p, 20).data.toString()).toString() }) : e(null);
 		}));
 	},
-	fonts: async function(e) {
+	fonts: async function(options) {
 		return new Promise(((e) => {
 			try {
 				g((async ({ iframe: t }) => {
@@ -810,10 +815,12 @@ const V = {
 					if (!n) return void e(null);
 					const o = y.map(((e) => S(n, e)));
 					let r = {};
-					v.forEach(((e) => {
-						const t = S(n, e);
+					for (let i = 0; i < v.length; i++) {
+						if (options?.yield && i % 8 === 0) await options.yield();
+						const e = v[i], t = S(n, e);
 						o.includes(t) || (r[e] = t);
-					})), e(r);
+					}
+					e(r);
 				}));
 			} catch (t) {
 				e(null);
@@ -1390,7 +1397,14 @@ async function oe(e, t) {
 	})).filter((([e]) => {
 		var t, o, r, i;
 		return (null === (t = null == n ? void 0 : n.include) || void 0 === t ? void 0 : t.some(((e) => e.includes(".")))) ? null === (o = null == n ? void 0 : n.include) || void 0 === o ? void 0 : o.some(((t) => t.startsWith(e))) : 0 === (null === (r = null == n ? void 0 : n.include) || void 0 === r ? void 0 : r.length) || (null === (i = null == n ? void 0 : n.include) || void 0 === i ? void 0 : i.includes(e));
-	})), i = r.map((([e]) => e)), s = await function(e, t, n) {
+	})), i = r.map((([e]) => e)), a = [];
+	for (const [e, fn] of r) {
+		if (n.yield) await n.yield();
+		const pending = fn(t);
+		pending.catch(() => void 0);
+		a.push(pending);
+	}
+	const s = await function(e, t, n) {
 		return Promise.all(e.map(((e) => {
 			const o = performance.now();
 			return Promise.race([e.then(((e) => ({
@@ -1404,7 +1418,7 @@ async function oe(e, t) {
 			})))]);
 			var r, i;
 		})));
-	}(r.map((([e, n]) => n(t))), (null == n ? void 0 : n.timeout) || 5e3, j), c = {}, l = {};
+	}(a, (null == n ? void 0 : n.timeout) || 5e3, j), c = {}, l = {};
 	s.forEach(((e, t) => {
 		var n;
 		null != e.value && (l[i[t]] = e.value, c[i[t]] = null !== (n = e.elapsed) && void 0 !== n ? n : 0);
@@ -1435,6 +1449,54 @@ var se = class {
 	}
 };
 //#endregion
+//#region ../infra/src/scheduling/yieldUntilNextPaint.ts
+/**
+* Resolves after the browser has had a chance to commit and paint a queued
+* render.
+*
+* Strategy:
+* - `requestAnimationFrame` callbacks fire BEFORE the paint of the frame
+*   they belong to (per the HTML5 "update the rendering" step). If we
+*   resolve the promise inside a rAF callback, the await-continuation
+*   runs as a microtask immediately after the callback returns — still
+*   before the paint phase of that frame. A caller that then blocks the
+*   main thread (e.g. synchronous WASM `processPhoto`) starves the paint.
+* - We therefore chain rAF → setTimeout: the rAF fires before frame N's
+*   paint, the setTimeout runs as a macrotask scheduled after frame N's
+*   "update the rendering" step, which the browser will only get to once
+*   the paint actually lands. By the time setTimeout fires, the paint
+*   for the queued render is on screen.
+* - In environments where rAF never ticks (jsdom, happy-dom, backgrounded
+*   tabs), a parallel `setTimeout` fallback at 100 ms resolves instead.
+*   100 ms is comfortably longer than two real-browser frames so rAF +
+*   setTimeout wins reliably in any foregrounded browser. (An earlier
+*   implementation raced rAF against a `MessageChannel` macrotask, but
+*   MessageChannel drains immediately after the current task's
+*   microtasks — before the next paint — so it resolved the promise too
+*   early and defeated the whole point of the helper.)
+*
+* Lives in infra because it touches browser APIs (`requestAnimationFrame`,
+* `setTimeout`) that the architecture rules forbid from core. Core modules
+* that need to yield to the browser render loop should import this helper
+* directly via its file path.
+*/
+function yieldUntilNextPaint() {
+	return new Promise((resolve) => {
+		let resolved = false;
+		const done = () => {
+			if (resolved) return;
+			resolved = true;
+			resolve();
+		};
+		if (typeof requestAnimationFrame === "function") requestAnimationFrame(() => {
+			requestAnimationFrame(() => {
+				setTimeout(done, 0);
+			});
+		});
+		setTimeout(done, 100);
+	});
+}
+//#endregion
 //#region ../infra/src/providers/browser/thumbmarkAdapter.ts
 /**
 * Adapter for @thumbmarkjs/thumbmarkjs. Single point of dependency so bundlers
@@ -1456,7 +1518,10 @@ const THUMBMARK_ALGORITHM = {
 * read. It also stops upstream's 1-in-10 000 telemetry POST to
 * api.thumbmarkjs.com. Re-check this when bumping the dependency.
 */
-const THUMBMARK_OPTIONS = { logging: false };
+const THUMBMARK_OPTIONS = {
+	logging: false,
+	yield: yieldUntilNextPaint
+};
 async function getThumbmarkId() {
 	return (await new se(THUMBMARK_OPTIONS).get()).thumbmark;
 }
@@ -1610,7 +1675,9 @@ function formatBrowser(browser) {
 }
 async function submitDeviceFingerprint(options = {}, dependencies) {
 	const { disableIpify = false, hostingApp, signal } = options;
+	const token = getToken();
 	const fingerprint = await dependencies.fingerprintProvider.getFingerprint(disableIpify);
+	if (getToken() !== token || dependencies.isCurrentSession?.() === false) throw new Error("Session changed during fingerprint collection");
 	const hasLiedBrowser = isBrowserSimulation(dependencies.browserEnv);
 	const payload = {
 		hash: fingerprint.visitorId || "",
@@ -1851,7 +1918,8 @@ async function submitSessionFingerprint(fingerprintProvider, options, settled) {
 		if (fingerprintProvider) try {
 			const result = await submitDeviceFingerprint(options, {
 				fingerprintProvider,
-				browserEnv: new BrowserEnvironmentProvider()
+				browserEnv: new BrowserEnvironmentProvider(),
+				isCurrentSession: isCurrent
 			});
 			if (isCurrent()) {
 				cachedFingerprintResult = result;
@@ -1903,4 +1971,4 @@ function resetSessionInit() {
 	resetDeviceStatsQueue();
 }
 //#endregion
-export { getThumbmarkId as _, resetSessionInit as a, whenSessionFingerprintSettled as c, resetStandaloneFlowPolicy as d, resolveStandaloneFlowPolicy as f, IpifyProvider as g, getFingerprint as h, initializeSession as i, getStandaloneFlowPolicy as l, isBrowserSimulation as m, getFingerprintEnabled as n, setClientFingerprintEnabled as o, setStandaloneFlowPolicy as p, getSessionFingerprintResult as r, setClientIpLookupEnabled as s, getDisableIpify as t, registerFlowPreloader as u, getDeviceFingerprintInfo as v, BrowserEnvironmentProvider as y };
+export { getThumbmarkId as _, resetSessionInit as a, BrowserEnvironmentProvider as b, whenSessionFingerprintSettled as c, resetStandaloneFlowPolicy as d, resolveStandaloneFlowPolicy as f, IpifyProvider as g, getFingerprint as h, initializeSession as i, getStandaloneFlowPolicy as l, isBrowserSimulation as m, getFingerprintEnabled as n, setClientFingerprintEnabled as o, setStandaloneFlowPolicy as p, getSessionFingerprintResult as r, setClientIpLookupEnabled as s, getDisableIpify as t, registerFlowPreloader as u, yieldUntilNextPaint as v, getDeviceFingerprintInfo as y };

package/dist/{setup-CQNSur1c.esm.js → setup-BQ5-0CB6.esm.js}

@@ -2,16 +2,16 @@ import { d as deriveSiblingJsPath, f as WASM_MODEL_FILES } from "./wasmWebClient
 import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-BOM-sD-6.esm.js";
 import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-Dp9m6aOh.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-Dd_npJ0p.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-DJHtBpsz.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api } from "./api-Bx3gKW_y.esm.js";
-import { S as upgradeToWasmHttpClient$1, b as installFreshHttpClient, g as noteTestingSignals, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as resetHttpClientState, y as getStoredHttpConfig } from "./trueSightService-CvdDnFul.esm.js";
+import { S as upgradeToWasmHttpClient$1, b as installFreshHttpClient, g as noteTestingSignals, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as resetHttpClientState, y as getStoredHttpConfig } from "./trueSightService-CGUA9dm6.esm.js";
 import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { a as resetSessionInit, d as resetStandaloneFlowPolicy, f as resolveStandaloneFlowPolicy, i as initializeSession, o as setClientFingerprintEnabled, p as setStandaloneFlowPolicy, s as setClientIpLookupEnabled, u as registerFlowPreloader, y as BrowserEnvironmentProvider } from "./sessionInitializer-DUpE6yBR.esm.js";
+import { a as resetSessionInit, b as BrowserEnvironmentProvider, d as resetStandaloneFlowPolicy, f as resolveStandaloneFlowPolicy, i as initializeSession, o as setClientFingerprintEnabled, p as setStandaloneFlowPolicy, s as setClientIpLookupEnabled, u as registerFlowPreloader } from "./sessionInitializer-BpyJ5y2B.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DkK-f8JT.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-4RsGrIt6.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-CzgZ-VRv.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-Nv0vz_a6.esm.js";
 //#region ../infra/src/wasm/wasmDefaults.ts
 const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
 /** The WASM version bundled and tested with this SDK release. */

package/dist/{trueSightService-CvdDnFul.esm.js → trueSightService-CGUA9dm6.esm.js}

@@ -2,7 +2,7 @@ import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWa
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
 import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-DlL6SxXs.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-BRy4YQdU.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 //#region ../infra/src/http/createApi.ts
 var FetchHttpError = class extends Error {
@@ -1320,7 +1320,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-D8H3nWpr.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-DGdx3emH.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**

package/dist/video-selfie.esm.js

@@ -1,16 +1,16 @@
-import { t as ensureWasmPipelines } from "./setup-CQNSur1c.esm.js";
+import { t as ensureWasmPipelines } from "./setup-BQ5-0CB6.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-CzgZ-VRv.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-Nv0vz_a6.esm.js";
 import { i as assign, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 import { t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-BrJN1B8A.esm.js";
 import { t as MultipartRecordingService } from "./multipartRecordingService-B3C_zlev.esm.js";
-import { i as CameraCompositor } from "./idCaptureDefaults-Dic5mQfO.esm.js";
+import { i as CameraCompositor } from "./idCaptureDefaults-DO_iW674.esm.js";
 import { t as VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE } from "./advanceableErrors-CpF2cBy6.esm.js";
-import { a as isConnectionError, n as defaultAcquireCamera, r as createDefaultStepDetector, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-Gcgw9ze7.esm.js";
+import { a as isConnectionError, n as defaultAcquireCamera, r as createDefaultStepDetector, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-Dn4l6XzJ.esm.js";
 import { t as videoSelfieFlowModuleMachine } from "./videoSelfieFlowModuleMachine-BUe2uACW.esm.js";
 //#region src/modules/video-selfie/videoSelfieWasm.ts
 function warmupVideoSelfieWasm(config, steps = resolveVideoSelfieSteps(config)) {

package/dist/{videoSelfieCameraWarmer-Gcgw9ze7.esm.js → videoSelfieCameraWarmer-Dn4l6XzJ.esm.js}

@@ -1,17 +1,17 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-CzgZ-VRv.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-Nv0vz_a6.esm.js";
 import { i as requestCameraWithFallback, r as requestCameraAccess } from "./camera-_2sXMXiF.esm.js";
 import { t as checkPermission } from "./permissionServices-f7nBnW5P.esm.js";
-import { a as encryptSelfieImage, l as startDetection, p as FaceDetectionProvider } from "./onDeviceFaceResults-CU5XlhqG.esm.js";
+import { a as encryptSelfieImage, l as startDetection, p as FaceDetectionProvider } from "./onDeviceFaceResults-C10QzrYa.esm.js";
 import { a as StreamCanvasProcessingSession } from "./recordingsRepository-CCWy13M-.esm.js";
 import { n as getBackCameraStream } from "./backCameraStream-DE_5qY04.esm.js";
 import { n as getWindowDimensions } from "./getDeviceClass-CeBiEayS.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 import { a as uploadSelfie, r as processFace, t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-C6gC06J7.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-D2XcXCZ4.esm.js";
-import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-Dic5mQfO.esm.js";
+import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-DO_iW674.esm.js";
 //#region src/modules/video-selfie/videoSelfieCompareService.ts
 async function postVideoSelfieCompare(endpoint, base64Image) {
 	return (await api.post(endpoint, { base64Image })).data;

package/dist/wasm.esm.js

@@ -1,5 +1,5 @@
 import { f as WASM_MODEL_FILES, h as WASM_PIPELINE_MODEL_NAMES, p as WASM_PIPELINE_LAZY_MODEL_NAMES } from "./wasmWebClient-BJCaFeBL.esm.js";
-import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, d as buildDefaultWasmConfig, f as buildWasmConfigFromBasePath, m as resolveWasmConfig, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines, u as DEFAULT_WASM_VERSION } from "./setup-CQNSur1c.esm.js";
+import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, d as buildDefaultWasmConfig, f as buildWasmConfigFromBasePath, m as resolveWasmConfig, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines, u as DEFAULT_WASM_VERSION } from "./setup-BQ5-0CB6.esm.js";
 import { o as warmupWasm } from "./warmup-BOM-sD-6.esm.js";
 //#region src/defineWasm.ts
 function requiredModels(pipelines) {

package/dist/workflow.esm.js

@@ -1,29 +1,29 @@
-import { E as updateFeatureManagementUser } from "./feature-management-Dd_npJ0p.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-DJHtBpsz.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { l as trueSightLog } from "./trueSightService-CvdDnFul.esm.js";
+import { l as trueSightLog } from "./trueSightService-CGUA9dm6.esm.js";
 import { n as eventModuleNames, o as createManagerInstrumentation, v as addEvent } from "./events-ijlbX_Wx.esm.js";
-import { i as initializeSession, r as getSessionFingerprintResult } from "./sessionInitializer-DUpE6yBR.esm.js";
+import { i as initializeSession, r as getSessionFingerprintResult } from "./sessionInitializer-BpyJ5y2B.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
-import { i as toIncodeApiError } from "./apiError-CY6lWIaQ.esm.js";
-import { v as toEkybConfig } from "./flowServices-CzgZ-VRv.esm.js";
+import { i as toIncodeApiError } from "./apiError-DsGq8I1L.esm.js";
+import { v as toEkybConfig } from "./flowServices-Nv0vz_a6.esm.js";
 import { i as toEkycConfig } from "./ekycUtils-Dew1rBG0.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { r as electronicSignatureMachine } from "./electronicSignatureManager-vLj_aBwI.esm.js";
+import { r as electronicSignatureMachine } from "./electronicSignatureManager-Bf6B6pEU.esm.js";
 import "./ae-signature.esm.js";
 import { t as antifraudMachine } from "./antifraudStateMachine-BHxehiJZ.esm.js";
-import { t as authenticationMachine } from "./authenticationStateMachine-DAQ4dBAD.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-CTCuMCty.esm.js";
 import { t as certificateIssuanceMachine } from "./certificateIssuanceStateMachine-BBD5h8c4.esm.js";
 import { t as consentMachine } from "./consentStateMachine-DbUmqWgV.esm.js";
 import { t as curpValidationMachine } from "./curpValidationStateMachine-DvUPC_8S.esm.js";
 import { t as customWatchlistMachine } from "./customWatchlistStateMachine-qZVgkKgP.esm.js";
 import { t as documentCaptureMachine } from "./documentCaptureStateMachine-CPizkpcg.esm.js";
-import { t as dynamicFormsMachine } from "./dynamicFormsStateMachine-CoBVJjYk.esm.js";
-import { t as ekybMachine } from "./ekybStateMachine-CHzi9XHk.esm.js";
+import { t as dynamicFormsMachine } from "./dynamicFormsStateMachine-Dz0LqEEn.esm.js";
+import { t as ekybMachine } from "./ekybStateMachine-Dzf-Pbdt.esm.js";
 import { t as ekycMachine } from "./ekycStateMachine-CmdW2gVm.esm.js";
 import { t as emailMachine } from "./emailStateMachine-CyPFZ7dW.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-B7vhKLV7.esm.js";
-import { t as idCaptureMachine } from "./idCaptureStateMachine-UTll8mMx.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-CV3OsU5z.esm.js";
+import { t as idCaptureMachine } from "./idCaptureStateMachine-CBELAdUH.esm.js";
 import { t as phoneMachine } from "./phoneStateMachine-jl8LJKCo.esm.js";
 import { t as watchlistMachine } from "./watchlistStateMachine-DvOby3a-.esm.js";
 import { t as watchlistForBusinessMachine } from "./watchlistForBusinessStateMachine-DEzgjz7C.esm.js";
@@ -32,12 +32,12 @@ import { t as mandatoryConsentMachine } from "./mandatoryConsentStateMachine-DSD
 import { t as idOcrStateMachine } from "./idOcrStateMachine-33UvRAHE.esm.js";
 import { n as redirectToMobileMachine } from "./redirectToMobileStateMachine-v3otpT-L.esm.js";
 import { t as signatureMachine } from "./signatureStateMachine-BHPwkJZS.esm.js";
-import { t as geolocationMachine } from "./geolocationStateMachine-BPzG-LrP.esm.js";
+import { t as geolocationMachine } from "./geolocationStateMachine-DIZOaCem.esm.js";
 import { t as governmentValidationMachine } from "./governmentValidationStateMachine-D1ZnEqdd.esm.js";
 import { t as idVerificationMachine } from "./idVerificationStateMachine-BPGrQZEm.esm.js";
 import { t as faceMatchMachine } from "./faceMatchStateMachine-BUc5FXYy.esm.js";
-import { n as getFinishStatus, r as getTotalScoreStatus } from "./flowCompletionService-cuWgokHI.esm.js";
-import { n as attachFlowEventEmitter, t as runChildModule } from "./runChildModule-6P8ofHxL.esm.js";
+import { n as getFinishStatus, r as getTotalScoreStatus } from "./flowCompletionService-CTbI_iTT.esm.js";
+import { n as attachFlowEventEmitter, t as runChildModule } from "./runChildModule-BvxjSxjZ.esm.js";
 import { n as isAdvanceableError } from "./advanceableErrors-CpF2cBy6.esm.js";
 import "./qe-signature.esm.js";
 import { t as videoSelfieFlowModuleMachine } from "./videoSelfieFlowModuleMachine-BUe2uACW.esm.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@incodetech/core",
-  "version": "0.0.0-dev-20260911-3c28f170",
+  "version": "0.0.0-dev-20260911-d4e8be9f",
   "license": "ISC",
   "repository": {
     "type": "git",