@incodetech/core 0.0.0-dev-20260911-aec162f0 → 0.0.0-dev-20260914-8aef7789

package/dist/{index-1PoJuUJ-.d.ts → index-BGxFwnld.d.ts}

@@ -1,5 +1,5 @@
 import "./Manager-CQQ99QOI.js";
-import { n as Flow } from "./types-DzmqFoCH.js";
+import { n as Flow } from "./types-CBctcPeF.js";
 import { n as FinishStatus } from "./flowCompletionService-BlAHsKyv.js";
 //#region src/internal/flow-events/flowEvents.d.ts
 type FlowStartedEvent = {

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-import { a as isConfigured, l as setup, o as reset, t as SetupOptions } from "./setup-D6yz9se2.js";
+import { a as isConfigured, l as setup, o as reset, t as SetupOptions } from "./setup-CEX95gJ1.js";
 export { type SetupOptions, isConfigured, reset, setup };

package/dist/index.esm.js

@@ -1,2 +1,2 @@
-import { i as reset, r as isConfigured, s as setup } from "./setup-BHJ3-fhX.esm.js";
+import { i as reset, r as isConfigured, s as setup } from "./setup-CfNAVG-d.esm.js";
 export { isConfigured, reset, setup };

package/dist/mandatory-consent.d.ts

@@ -1,3 +1,3 @@
-import { r as MandatoryConsentConfig } from "./types-DJ2OM9rw.js";
-import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-BJnylLZO.js";
+import { r as MandatoryConsentConfig } from "./types-BzuUebkB.js";
+import { a as MandatoryConsentActor, i as createMandatoryConsentManagerFromActor, n as MandatoryConsentState, o as mandatoryConsentMachine, r as createMandatoryConsentManager, t as MandatoryConsentManager } from "./mandatoryConsentManager-CZwhsUlO.js";
 export { type MandatoryConsentActor, type MandatoryConsentConfig, type MandatoryConsentManager, type MandatoryConsentState, createMandatoryConsentManager, createMandatoryConsentManagerFromActor, mandatoryConsentMachine };

package/dist/{mandatoryConsentManager-BJnylLZO.d.ts → mandatoryConsentManager-CZwhsUlO.d.ts}

@@ -2,7 +2,7 @@ import { A as StateMachine, C as StateValue, D as PromiseActorLogic, a as ActorR
 import "./StateMachine-EDpYWy0i.js";
 import { t as Manager } from "./Manager-CQQ99QOI.js";
 import "./Actor-iTq7YY48.js";
-import { n as MandatoryConsent, r as MandatoryConsentConfig, t as FetchMandatoryConsentResponse } from "./types-DJ2OM9rw.js";
+import { n as MandatoryConsent, r as MandatoryConsentConfig, t as FetchMandatoryConsentResponse } from "./types-BzuUebkB.js";
 //#region src/modules/mandatory-consent/mandatoryConsentStateMachine.d.ts
 type MandatoryConsentContext = {
   config: MandatoryConsentConfig;

package/dist/{permissionGuards-DxbvOoZJ.esm.js → permissionGuards-o1JLtewE.esm.js}

@@ -1,4 +1,4 @@
-import { a as isWasmMotionPrimedForModule } from "./permissionServices-f7nBnW5P.esm.js";
+import { a as isWasmMotionPrimedForModule } from "./permissionServices-7lzEiOsO.esm.js";
 //#region src/internal/permissions/permissionGuards.ts
 function resolveStoredPermissionResult(fromEvent, fromContext) {
 	if (fromEvent === "granted" || fromEvent === "denied" || fromEvent === "prompt" || fromEvent === "refresh") return fromEvent;

package/dist/{permissionServices-f7nBnW5P.esm.js → permissionServices-7lzEiOsO.esm.js}

@@ -1,7 +1,7 @@
-import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-1O9k0ulP.esm.js";
 import { n as isAndroidWebView } from "./platform-DkcRc9JV.esm.js";
-import { t as MotionSensorProvider } from "./MotionSensorProvider-Vlyhbcty.esm.js";
-import { a as stopCameraStream, o as clearCameraGrantedInDocument, r as requestCameraAccess, s as isCameraGrantedInDocument } from "./camera-_2sXMXiF.esm.js";
+import { t as MotionSensorProvider } from "./MotionSensorProvider-BnZ8_1Sk.esm.js";
+import { c as isCameraGrantedInDocument, i as requestCameraAccess, o as stopCameraStream, s as clearCameraGrantedInDocument } from "./camera-sIa9ceW2.esm.js";
 //#region ../infra/src/media/permissions.ts
 async function queryPermission(name) {
 	try {

package/dist/personhood.d.ts

@@ -2,13 +2,13 @@ import { A as StateMachine, i as ActorRefFrom, l as AnyStateMachine } from "./sp
 import "./StateMachine-EDpYWy0i.js";
 import { t as Manager } from "./Manager-CQQ99QOI.js";
 import "./Actor-iTq7YY48.js";
-import { y as IncodeCanvas } from "./createFaceAvatar-pUEkdk4X.js";
-import { i as IStorageCapability, t as IWasmUtilCapability } from "./IWasmUtilCapability-SNPhmIwB.js";
+import { y as IncodeCanvas } from "./createFaceAvatar-CTM9aj9Q.js";
+import { i as IStorageCapability, t as IWasmUtilCapability } from "./IWasmUtilCapability-DaP6pfHq.js";
 import { n as PermissionStatus, t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { n as DetectionStatus } from "./types-hSqUyXyw.js";
-import { t as FaceDetectionProvider } from "./FaceDetectionProvider-Cn1wS-sA.js";
+import { n as DetectionStatus } from "./types-DL0CXuWv.js";
+import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-D9Dz8kqB.js";
+import { t as FaceDetectionProvider } from "./FaceDetectionProvider-CyLxkzRP.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { n as StreamCanvasCapture, t as DeepsightService } from "./deepsightService-MZOpj7Vp.js";
 //#region src/modules/personhood/types.d.ts
 /**
  * Head pose (degrees) computed per-frame from the WASM face detector.

package/dist/personhood.esm.js

@@ -1,18 +1,18 @@
-import { l as BrowserStorageProvider } from "./setup-BHJ3-fhX.esm.js";
-import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CfNAVG-d.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-1O9k0ulP.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { C as createApi$1, v as randomUUID, y as getStoredHttpConfig } from "./trueSightService-DLzYznkh.esm.js";
+import { b as getStoredHttpConfig, w as createApi$1, y as randomUUID } from "./trueSightService-TqmmYye3.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { _ as getThumbmarkId, b as BrowserEnvironmentProvider, m as isBrowserSimulation, n as getFingerprintEnabled, y as getDeviceFingerprintInfo } from "./sessionInitializer-CEycxhm4.esm.js";
+import { _ as getThumbmarkId, m as isBrowserSimulation, n as getFingerprintEnabled, v as getDeviceFingerprintInfo, y as BrowserEnvironmentProvider } from "./sessionInitializer-CUpgbHzs.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { a as stopCameraStream, r as requestCameraAccess } from "./camera-_2sXMXiF.esm.js";
-import { i as requestPermission, t as checkPermission } from "./permissionServices-f7nBnW5P.esm.js";
+import { i as requestCameraAccess, o as stopCameraStream } from "./camera-sIa9ceW2.esm.js";
+import { i as requestPermission, t as checkPermission } from "./permissionServices-7lzEiOsO.esm.js";
+import { i as initializeDeepsightSession, l as stopStream, o as startDetection, t as FaceDetectionProvider } from "./FaceDetectionProvider-0bWjPgW5.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
-import { f as stopStream, l as startDetection, p as FaceDetectionProvider, s as initializeDeepsightSession } from "./onDeviceFaceResults-hle2Ci9l.esm.js";
-import { t as StreamCanvasCapture } from "./StreamCanvasCapture-D2XcXCZ4.esm.js";
+import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/personhood/personhoodServices.ts
 /**
 * Config used for the passive liveness pass. Deliberately stripped down from

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-CpLuqw7T.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-DkKQ07vx.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{runChildModule-BPlX2IDO.esm.js → runChildModule-BDlvNMrA.esm.js}

@@ -1,5 +1,5 @@
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-DLzYznkh.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-TqmmYye3.esm.js";
 import { C as createEventBus } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";

package/dist/{safeStorage-Dp9m6aOh.esm.js → safeStorage-1O9k0ulP.esm.js}

@@ -1,5 +1,5 @@
-import { c as wasmCallWrapper, s as ML_CALL_MAX_POLLS } from "./wasmWebClient-BJCaFeBL.esm.js";
-import { a as waitForWasm, n as getWasmStatus, o as warmupWasm, r as isWasmReady, s as wasmRuntime } from "./warmup-BOM-sD-6.esm.js";
+import { c as wasmCallWrapper, s as ML_CALL_MAX_POLLS } from "./wasmWebClient-B7baE-Wf.esm.js";
+import { a as waitForWasm, n as getWasmStatus, o as warmupWasm, r as isWasmReady, s as wasmRuntime } from "./warmup-CUUnwYxe.esm.js";
 //#region ../infra/src/wasm/utilityWasmApi.ts
 /**
 * Utility / metadata domain facade over {@link WasmRuntime}.
@@ -35,9 +35,11 @@ var UtilityWasmApi = class {
 	ens(image) {
 		return this.runtime.requireUtilityApi("Unable to encrypt the image, cpp API hasn't been initialized").ens(image);
 	}
-	isVirtualCamera(label) {
-		const utilityApi = this.runtime.requireUtilityApi("Unable to check if the camera is virtual, cpp API hasn't been initialized");
-		if (label) return utilityApi.isVirtualCamera(label);
+	/**
+	* @deprecated Native label inspection was removed in v2.14.49-post1.
+	* Protected PRC/POC owns the authoritative decision.
+	*/
+	isVirtualCamera(_label) {
 		return false;
 	}
 	estimatePerformance() {
@@ -221,7 +223,7 @@ var BaseWasmProvider = class {
 		const pipelineType = this.getPipelineType();
 		await wasmRuntime.allocateImageBuffers(image.width, image.height);
 		await wasmRuntime.handleDetectionCallAndUpdateState(pipelineType);
-		return await wasmRuntime.process(image, pipelineType);
+		return await wasmRuntime.process(pipelineType, image);
 	}
 	/**
 	* Resets the pipeline to its initial state.
@@ -301,7 +303,6 @@ var WasmUtilProvider = class WasmUtilProvider extends BaseWasmProvider {
 		utilityWasmApi.setBackgroundMode(backgroundMode);
 	}
 	setOnDeviceMode(enabled) {
-		this.ensureInitialized();
 		wasmRuntime.setOnDeviceMode(enabled);
 	}
 	setZc(zc) {
@@ -348,7 +349,6 @@ var WasmUtilProvider = class WasmUtilProvider extends BaseWasmProvider {
 		return utilityWasmApi.estimatePerformance();
 	}
 	isVirtualCamera(label) {
-		this.ensureInitialized();
 		return utilityWasmApi.isVirtualCamera(label);
 	}
 	async prc() {

package/dist/{sdkVersion-Dr9_E3d9.esm.js → sdkVersion-CS_0s_Lc.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "0.0.0-dev-20260911-aec162f0";
+const SDK_VERSION = "0.0.0-dev-20260914-8aef7789";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.d.ts

@@ -1,10 +1,10 @@
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-CzUr_ZPq.js";
+import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-DqrYpjA5.js";
 import { n as PermissionStatus, t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types-hSqUyXyw.js";
+import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types-DL0CXuWv.js";
+import { n as DeepsightService } from "./StreamCanvasCapture-D9Dz8kqB.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { t as DeepsightService } from "./deepsightService-MZOpj7Vp.js";
-import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-Bg_Xwe4p.js";
+import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-DZ3u_WN9.js";
 //#region src/modules/selfie/selfieCaptureOnlyManager.d.ts
 type SelfieCaptureOnlyState = FaceCaptureManagerState;
 type SelfieCaptureOnlyManager = FaceCaptureManager;

package/dist/selfie.esm.js

@@ -1,53 +1,15 @@
-import { l as BrowserStorageProvider } from "./setup-BHJ3-fhX.esm.js";
-import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CfNAVG-d.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-1O9k0ulP.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { i as assign, s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
+import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-CAGBnLVx.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-kDmbL0I7.esm.js";
-import { r as processFace } from "./selfieErrorUtils-C6gC06J7.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-B8vFeT39.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-BdP-RgH4.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-WeO8-TfR.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-D_EjQnnE.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-DQ5-F2oW.esm.js";
+import { r as processFace } from "./selfieErrorUtils-C77GXJH6.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-TGfI9hNp.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-BouB9yUQ.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BjzPjJ_p.esm.js";
-//#region src/modules/selfie/selfieCaptureOnlyStateMachine.ts
-/**
-* Performs local finalization of a captured face frame: stops local video
-* recording (if any), runs deepsight metadata extraction, and assembles the
-* rich payload delivered to the integrator's `onCapture` callback.
-*/
-async function finalizeFaceCaptureOnly(ctx, signal) {
-	const canvas = ctx.capturedImage;
-	if (!canvas) throw new Error("selfieCaptureOnly: no captured image");
-	let videoBase64;
-	try {
-		videoBase64 = (await ctx.recordingService?.stopAndGetVideo())?.videoBase64;
-	} catch {
-		videoBase64 = void 0;
-	}
-	if (signal.aborted) throw new DOMException("Aborted", "AbortError");
-	let metadata = "";
-	try {
-		if (ctx.deepsightService) {
-			const imageData = canvas.getImageData();
-			if (imageData) await ctx.deepsightService.analyzeFrame(imageData);
-			if (signal.aborted) throw new DOMException("Aborted", "AbortError");
-			metadata = ctx.deepsightService.getMetadata();
-		}
-	} catch (error) {
-		if (error?.name === "AbortError") throw error;
-		metadata = "";
-	}
-	const imageBase64 = canvas.getBase64Image() ?? "";
-	const blobData = canvas.getBlobData();
-	if (!blobData) throw new Error("selfieCaptureOnly: failed to build image blob");
-	return {
-		imageBase64,
-		blob: blobData.blob,
-		url: blobData.url,
-		metadata,
-		videoBase64
-	};
-}
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base
 * face-capture state tree; only the upload/process step is local instead of
@@ -55,37 +17,13 @@ async function finalizeFaceCaptureOnly(ctx, signal) {
 */
 const selfieCaptureOnlyMachine = faceCaptureMachine.provide({
 	actors: {
-		/**
-		* Pre-upload encryption + virtual-camera check are skipped: captureOnly is
-		* offline (no backend calls) and hands the canvas to the integrator
-		* unencrypted. The downstream `encryptedBase64Image`/`recordingId` fields
-		* are inert because `uploadFace` no longer reads them.
-		*/
-		prepareFaceUpload: fromPromise(async () => ({
-			encryptedBase64Image: "",
-			recordingId: null
-		})),
-		/**
-		* "Upload" becomes local finalize. The rich payload is routed to the
-		* typed `captureOnlyResult` context slot by the body-overridden
-		* `setUploadResponseFromEvent` action below, rather than the loose
-		* `uploadResponse: Record<string, unknown>` channel the base flow uses.
-		*/
-		uploadFace: fromPromise(async ({ input, signal }) => {
-			return await finalizeFaceCaptureOnly(input, signal);
+		protectedFaceController: createDefaultProtectedFaceControllerActor({
+			target: PROTECTED_CAPTURE_TARGET.selfie,
+			delivery: "local"
 		}),
 		/** No backend processing in captureOnly. */
 		processFace: fromPromise(async () => ({}))
 	},
-	actions: { 
-	/**
-	* Override the regular upload-response handler to populate the typed
-	* `captureOnlyResult` slot the captureOnly manager reads on `finished`.
-	* The regular `uploadResponse` channel is left undefined — the variant's
-	* guards (`hasUploadValidationError`, `isTerminalUploadError`) both
-	* return false, so nothing downstream needs it.
-	*/
-setUploadResponseFromEvent: assign({ captureOnlyResult: ({ event }) => event.output }) },
 	guards: {
 		hasUploadValidationError: () => false,
 		isTerminalUploadError: () => false

package/dist/{selfieManager-BdP-RgH4.esm.js → selfieManager-BouB9yUQ.esm.js}

@@ -1,9 +1,9 @@
-import { l as BrowserStorageProvider } from "./setup-BHJ3-fhX.esm.js";
-import { r as WasmUtilProvider } from "./safeStorage-Dp9m6aOh.esm.js";
+import { l as BrowserStorageProvider } from "./setup-CfNAVG-d.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-1O9k0ulP.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-kDmbL0I7.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-B8vFeT39.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-D_EjQnnE.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-TGfI9hNp.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieManager-Bg_Xwe4p.d.ts → selfieManager-DZ3u_WN9.d.ts}

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-CQQ99QOI.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-CzUr_ZPq.js";
+import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-DqrYpjA5.js";
 //#region src/modules/selfie/selfieManager.d.ts
 type SelfieState = FaceCaptureManagerState;
 /**

package/dist/{selfieStateMachine-B8vFeT39.esm.js → selfieStateMachine-TGfI9hNp.esm.js}

@@ -1,27 +1,34 @@
 import { i as assign } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { n as manualFaceUploadMachine, t as faceCaptureMachine } from "./faceCaptureSetup-CAGBnLVx.esm.js";
-import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-hle2Ci9l.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, r as manualFaceUploadMachine, t as faceCaptureMachine } from "./faceCaptureSetup-WeO8-TfR.esm.js";
+import { u as isOnDeviceMode } from "./FaceDetectionProvider-0bWjPgW5.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
-import { a as uploadSelfie, i as uploadManualSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-C6gC06J7.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-DQ5-F2oW.esm.js";
+import { i as uploadManualSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-C77GXJH6.esm.js";
 //#region src/modules/selfie/selfieStateMachine.ts
 /**
 * Validates like the camera path does: a 200 that reports lenses, a mask or
 * failed liveness is still a rejection, and throwing lets the child machine
 * spend a retry and map the code to copy.
 */
-const manualUploadMachine = manualFaceUploadMachine.provide({ actors: { uploadFile: fromPromise(async ({ input, signal }) => {
-	const { base64Image, config, dependencies } = input;
-	const validationError = validateUploadResponse({
-		config,
-		response: await uploadManualSelfie({
-			base64Image,
-			dependencies,
-			signal
-		})
-	});
-	if (validationError) throw new Error(validationError);
-}) } });
+const manualUploadMachine = manualFaceUploadMachine.provide({ actors: {
+	protectedFaceController: createDefaultProtectedFaceControllerActor({
+		target: PROTECTED_CAPTURE_TARGET.selfie,
+		delivery: "protected"
+	}),
+	uploadFile: fromPromise(async ({ input, signal }) => {
+		const { base64Image, config, dependencies } = input;
+		const validationError = validateUploadResponse({
+			config,
+			response: await uploadManualSelfie({
+				base64Image,
+				dependencies,
+				signal
+			})
+		});
+		if (validationError) throw new Error(validationError);
+	})
+} });
 /**
 * The selfie capture state machine.
 *
@@ -31,22 +38,6 @@ const manualUploadMachine = manualFaceUploadMachine.provide({ actors: { uploadFi
 const selfieMachine = faceCaptureMachine.provide({
 	actors: {
 		manualUploadMachine,
-		prepareFaceUpload: fromPromise(async ({ input }) => {
-			const ctx = input;
-			return isOnDeviceMode(ctx.config) ? prepareOnDeviceFaceUpload(ctx) : defaultPrepareFaceUpload(ctx);
-		}),
-		uploadFace: fromPromise(async ({ input, signal }) => {
-			const ctx = input;
-			if (isOnDeviceMode(ctx.config)) return postOnDeviceFaceResults(ctx, signal);
-			return uploadSelfie({
-				encryptedBase64Image: ctx.encryptedBase64Image,
-				faceCoordinates: ctx.faceCoordinates,
-				metadata: ctx.deepsightService?.getMetadata(),
-				recordingId: ctx.uploadRecordingId,
-				deepsightService: ctx.deepsightService ?? void 0,
-				signal
-			});
-		}),
 		processFace: fromPromise(async ({ input, signal }) => {
 			if (isOnDeviceMode(input.config)) return {};
 			return processFace("selfie", signal);

package/dist/{session-C2THUsQZ.esm.js → session-m9j27bHm.esm.js}

@@ -1,8 +1,8 @@
 import { n as getApi } from "./api-Bx3gKW_y.esm.js";
-import { h as noteSessionCreated, l as trueSightLog } from "./trueSightService-DLzYznkh.esm.js";
-import "./sessionInitializer-CEycxhm4.esm.js";
+import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-TqmmYye3.esm.js";
+import "./sessionInitializer-CUpgbHzs.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
-import { i as toIncodeApiError } from "./apiError-XdhqSAmg.esm.js";
+import { i as toIncodeApiError } from "./apiError-CixFeCyt.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic

package/dist/session.d.ts

@@ -1,4 +1,4 @@
-import { t as DeviceFingerprintResult } from "./types-_pWNFY1F.js";
+import { t as DeviceFingerprintResult } from "./types-eLtVBhon.js";
 import { n as FinishStatus, r as GetFinishStatusFn, s as getFinishStatus } from "./flowCompletionService-BlAHsKyv.js";
 //#region src/internal/session/sessionService.d.ts
 type CreateSessionOptions = {

package/dist/session.esm.js

@@ -1,5 +1,5 @@
-import { c as whenSessionFingerprintSettled, i as initializeSession } from "./sessionInitializer-CEycxhm4.esm.js";
-import { t as IncodeApiError } from "./apiError-XdhqSAmg.esm.js";
-import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-C2THUsQZ.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-BpoZDpAn.esm.js";
+import { c as whenSessionFingerprintSettled, i as initializeSession } from "./sessionInitializer-CUpgbHzs.esm.js";
+import { t as IncodeApiError } from "./apiError-CixFeCyt.esm.js";
+import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-m9j27bHm.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-DELbVeL5.esm.js";
 export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid, whenSessionFingerprintSettled };

package/dist/{sessionInitializer-CEycxhm4.esm.js → sessionInitializer-CUpgbHzs.esm.js}

@@ -1,8 +1,8 @@
-import { E as updateFeatureManagementUser } from "./feature-management-B6CtmH1O.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-BEqf3Sr3.esm.js";
 import { c as setToken, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { _ as noteTokenActivated, d as fetchFeatureConfig, f as isFeatureEnabled, l as trueSightLog, m as noteEnvironment, p as resetFeatureConfigCache, s as startTrueSightCollection } from "./trueSightService-DLzYznkh.esm.js";
+import { d as fetchFeatureConfig, f as isFeatureEnabled, h as noteEnvironment, l as trueSightLog, p as resetFeatureConfigCache, s as startTrueSightCollection, v as noteTokenActivated } from "./trueSightService-TqmmYye3.esm.js";
 import { v as addEvent, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-Dr9_E3d9.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CS_0s_Lc.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-DkK-f8JT.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-B2iFDql1.esm.js";
@@ -1971,4 +1971,4 @@ function resetSessionInit() {
 	resetDeviceStatsQueue();
 }
 //#endregion
-export { getThumbmarkId as _, resetSessionInit as a, BrowserEnvironmentProvider as b, whenSessionFingerprintSettled as c, resetStandaloneFlowPolicy as d, resolveStandaloneFlowPolicy as f, IpifyProvider as g, getFingerprint as h, initializeSession as i, getStandaloneFlowPolicy as l, isBrowserSimulation as m, getFingerprintEnabled as n, setClientFingerprintEnabled as o, setStandaloneFlowPolicy as p, getSessionFingerprintResult as r, setClientIpLookupEnabled as s, getDisableIpify as t, registerFlowPreloader as u, yieldUntilNextPaint as v, getDeviceFingerprintInfo as y };
+export { getThumbmarkId as _, resetSessionInit as a, whenSessionFingerprintSettled as c, resetStandaloneFlowPolicy as d, resolveStandaloneFlowPolicy as f, IpifyProvider as g, getFingerprint as h, initializeSession as i, getStandaloneFlowPolicy as l, isBrowserSimulation as m, getFingerprintEnabled as n, setClientFingerprintEnabled as o, setStandaloneFlowPolicy as p, getSessionFingerprintResult as r, setClientIpLookupEnabled as s, getDisableIpify as t, registerFlowPreloader as u, getDeviceFingerprintInfo as v, BrowserEnvironmentProvider as y };

package/dist/{setup-D6yz9se2.d.ts → setup-CEX95gJ1.d.ts}

@@ -1,4 +1,4 @@
-import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-CXHBgvFC.js";
+import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-Cis2p6O0.js";
 import { s as TransactionalRiskIntelligenceSetupConfig } from "./index-BKOWUhxG.js";
 import { c as FeatureManagementRedactedUserInfo } from "./IFeatureManagementCapability-De8wpbGh.js";
 //#region src/internal/environment/environment.d.ts
@@ -173,11 +173,16 @@ type SetupOptions = {
    * collected during face capture (selfie/authentication/id/personhood) — the
    * descriptive device fields and `webglFingerprint` are unaffected.
    *
-   * When `false`, also enables WASM on-device mode: the native WASM module
-   * skips its own full fingerprint collection and keeps only the
-   * device-detection DTO. Applied immediately and honored by every
-   * subsequent WASM warmup (setup-time or lazy, e.g. triggered later by
-   * `<incode-flow>`/`<incode-workflow>`).
+   * This option controls only the client-side JavaScript collection and
+   * submission path. It does **not** suppress native fingerprint collection:
+   * against the pinned `v2.14.49-post1` runtime, WASM starts collecting during
+   * initialization regardless of this flag, and the full fingerprint bucket is
+   * serialized into the metadata bundle.
+   *
+   * This is a behaviour change from `v2.14.07-post7-post3`, where
+   * `fingerprint: false` additionally disabled native collection through
+   * ml-wasm-kit's `setOnDeviceMode`. That kill switch was never ported to the
+   * v2.14.4x line; restoring it is tracked as ENG-55971.
    *
    * Default: `true` (fingerprint submission enabled).
    */

package/dist/{setup-BHJ3-fhX.esm.js → setup-CfNAVG-d.esm.js}

@@ -1,21 +1,21 @@
-import { d as deriveSiblingJsPath, f as WASM_MODEL_FILES } from "./wasmWebClient-BJCaFeBL.esm.js";
-import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-BOM-sD-6.esm.js";
-import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-Dp9m6aOh.esm.js";
+import { f as deriveSiblingJsPath, p as WASM_MODEL_FILES, v as buildModelVariantSources } from "./wasmWebClient-B7baE-Wf.esm.js";
+import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-CUUnwYxe.esm.js";
+import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-1O9k0ulP.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-B6CtmH1O.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-BEqf3Sr3.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api } from "./api-Bx3gKW_y.esm.js";
-import { S as upgradeToWasmHttpClient$1, b as installFreshHttpClient, g as noteTestingSignals, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as resetHttpClientState, y as getStoredHttpConfig } from "./trueSightService-DLzYznkh.esm.js";
+import { C as upgradeToWasmHttpClient$1, S as resetHttpClientState, _ as noteTestingSignals, b as getStoredHttpConfig, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as installFreshHttpClient } from "./trueSightService-TqmmYye3.esm.js";
 import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { a as resetSessionInit, b as BrowserEnvironmentProvider, d as resetStandaloneFlowPolicy, f as resolveStandaloneFlowPolicy, i as initializeSession, o as setClientFingerprintEnabled, p as setStandaloneFlowPolicy, s as setClientIpLookupEnabled, u as registerFlowPreloader } from "./sessionInitializer-CEycxhm4.esm.js";
+import { a as resetSessionInit, d as resetStandaloneFlowPolicy, f as resolveStandaloneFlowPolicy, i as initializeSession, o as setClientFingerprintEnabled, p as setStandaloneFlowPolicy, s as setClientIpLookupEnabled, u as registerFlowPreloader, y as BrowserEnvironmentProvider } from "./sessionInitializer-CUpgbHzs.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DkK-f8JT.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-4RsGrIt6.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-BVnSStkh.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-Brr2fh_c.esm.js";
 //#region ../infra/src/wasm/wasmDefaults.ts
 const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
 /** The WASM version bundled and tested with this SDK release. */
-const DEFAULT_WASM_VERSION = "v2.14.07-post7-post3";
+const DEFAULT_WASM_VERSION = "v2.14.49-post1";
 const PATH_KEYS = [
 	"wasmPath",
 	"wasmSimdPath",
@@ -116,9 +116,9 @@ const BARCODE_ENHANCE_MODEL_FILE = WASM_MODEL_FILES.barcode;
 * demand via `IIdCaptureCapability.setBarcodeEnhancementModel` — deliberately
 * NOT part of any warmup model bundle.
 */
-function getBarcodeEnhanceModelUrl(modelsBasePath) {
-	const base = modelsBasePath ?? `${WASM_CDN_BASE_URL}/v2.14.07-post7-post3/models`;
-	return `${base.endsWith("/") ? base.slice(0, -1) : base}/${BARCODE_ENHANCE_MODEL_FILE}`;
+function getBarcodeEnhanceModelUrl(modelsBasePath, variant = "current") {
+	const source = buildModelVariantSources(modelsBasePath ?? `${WASM_CDN_BASE_URL}/v2.14.49-post1/models`, BARCODE_ENHANCE_MODEL_FILE);
+	return typeof source === "string" ? source : source[variant];
 }
 /**
 * Merges optional WASM path overrides with CDN defaults. Explicit non-blank
@@ -142,6 +142,7 @@ function resolveWasmConfig(overrides) {
 		pipelines: overrides.pipelines,
 		pipelineModels: overrides.pipelineModels,
 		modelUrls: overrides.modelUrls,
+		legacyModelUrls: overrides.legacyModelUrls,
 		loadGlue: overrides.loadGlue,
 		loadGlueSimd: overrides.loadGlueSimd,
 		selfHosted: overrides.selfHosted

package/dist/{trueSightService-DLzYznkh.esm.js → trueSightService-TqmmYye3.esm.js}

@@ -1,8 +1,8 @@
-import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-BJCaFeBL.esm.js";
+import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-B7baE-Wf.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
 import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-Dr9_E3d9.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CS_0s_Lc.esm.js";
 import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 //#region ../infra/src/http/createApi.ts
 var FetchHttpError = class extends Error {
@@ -1320,7 +1320,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-8sT0QLgq.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-BoYzmYY5.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**
@@ -1889,4 +1889,4 @@ function modulePosition(payload) {
 	return `${typeof moduleIndex === "number" ? ` index=${moduleIndex}` : ""}${typeof totalModules === "number" ? ` total=${totalModules}` : ""}`;
 }
 //#endregion
-export { createApi as C, upgradeToWasmHttpClient as S, noteTokenActivated as _, notifyTrueSightManagerStopped as a, installFreshHttpClient as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteTestingSignals as g, noteSessionCreated as h, notifyTrueSightFlowEvent as i, trueSightLog as l, noteEnvironment as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, randomUUID as v, resetHttpClientState as x, getStoredHttpConfig as y };
+export { upgradeToWasmHttpClient as C, resetHttpClientState as S, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };

package/dist/types-BhHF-CuL.d.ts

@@ -0,0 +1,6 @@
+import { i as FlowModuleConfig } from "./types-CBctcPeF.js";
+import { t as BaseFaceCaptureConfig } from "./types-DL0CXuWv.js";
+//#region src/modules/authentication/types.d.ts
+type AuthenticationConfig = FlowModuleConfig['AUTHENTICATION'] & BaseFaceCaptureConfig;
+//#endregion
+export { AuthenticationConfig as t };

package/dist/{types-DJ2OM9rw.d.ts → types-BzuUebkB.d.ts}

@@ -1,4 +1,4 @@
-import { a as RegulationTypes } from "./types-DzmqFoCH.js";
+import { a as RegulationTypes } from "./types-CBctcPeF.js";
 //#region src/modules/mandatory-consent/types.d.ts
 type RegulatoryConsentType = 'MANDATORY' | 'ML';
 type MandatoryConsentConfig = {

package/dist/{types-DzmqFoCH.d.ts → types-CBctcPeF.d.ts}

@@ -1,5 +1,5 @@
 import { s as RiskAddon } from "./types-Bk_6dmDa.js";
-import "./createFaceAvatar-pUEkdk4X.js";
+import "./createFaceAvatar-CTM9aj9Q.js";
 //#region src/internal/avatar/concealment.d.ts
 /**
  * Backend-aligned selfie/auth face-concealment options. The backend returns a

package/dist/{types-BBI4-s9u2.d.ts → types-CoOlCUp82.d.ts}

@@ -1,10 +1,10 @@
-import { y as IncodeCanvas } from "./createFaceAvatar-pUEkdk4X.js";
-import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-DzmqFoCH.js";
-import { a as IRecordingCapability, i as IStorageCapability, o as RecordingConnection } from "./IWasmUtilCapability-SNPhmIwB.js";
+import { y as IncodeCanvas } from "./createFaceAvatar-CTM9aj9Q.js";
+import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-CBctcPeF.js";
+import { a as IRecordingCapability, i as IStorageCapability, o as RecordingConnection } from "./IWasmUtilCapability-DaP6pfHq.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
+import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-D9Dz8kqB.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { n as StreamCanvasCapture, t as DeepsightService } from "./deepsightService-MZOpj7Vp.js";
-import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-DDWlQzhi.js";
+import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-nfpic2z2.js";
 //#region ../infra/src/capabilities/IDigitalCredentialsCapability.d.ts
 /**
  * Digital Credentials capability — wraps the W3C Digital Credentials API