@incodetech/core 0.0.0-dev-20260921-33c2ed29 → 0.0.0-dev-20260921-e88426b0

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-SKAbIbBb.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-Bqpxd5ys.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/{runChildModule-0X8KWdrU.esm.js → runChildModule-BL4Rk8ik.esm.js}

@@ -1,5 +1,5 @@
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-BVrLJBui.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-7LLcmHwK.esm.js";
 import { C as createEventBus } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-Ccyzgxj1.esm.js";

package/dist/{sdkVersion-D91tsaUy.esm.js → sdkVersion-Cysb10Yn.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "0.0.0-dev-20260921-33c2ed29";
+const SDK_VERSION = "0.0.0-dev-20260921-e88426b0";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.esm.js

@@ -1,14 +1,14 @@
-import { l as BrowserStorageProvider } from "./setup-f_BLfVte.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
+import { l as BrowserStorageProvider } from "./setup-D8QyhVe3.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-BoBJhJTp.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CwW9CEgq.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-atWN12Jp.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-JiJf1zQt.esm.js";
 import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-BjoMVvya.esm.js";
 import { r as processFace } from "./selfieErrorUtils-yjRptLFi.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-C0CUhAg_.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-BwvfGm90.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-ydM6cuXP.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-DMwwPIKX.esm.js";
 import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BjzPjJ_p.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base

package/dist/{selfieManager-BwvfGm90.esm.js → selfieManager-DMwwPIKX.esm.js}

@@ -1,9 +1,9 @@
-import { l as BrowserStorageProvider } from "./setup-f_BLfVte.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
+import { l as BrowserStorageProvider } from "./setup-D8QyhVe3.esm.js";
 import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-Bg3FuvIs.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CwW9CEgq.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-C0CUhAg_.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-JiJf1zQt.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-ydM6cuXP.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-C0CUhAg_.esm.js → selfieStateMachine-ydM6cuXP.esm.js}

@@ -1,7 +1,7 @@
 import { i as assign } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-BoBJhJTp.esm.js";
-import { c as isOnDeviceMode } from "./FaceDetectionProvider-DN1HTSkP.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-atWN12Jp.esm.js";
+import { c as isOnDeviceMode } from "./FaceDetectionProvider-wJI4vP3r.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 import { n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-yjRptLFi.esm.js";
 /**

package/dist/{session-ByvC2FyF.esm.js → session-vLvfp5DY.esm.js}

@@ -1,8 +1,8 @@
+import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-BVrLJBui.esm.js";
 import { n as getApi } from "./api-Bx3gKW_y.esm.js";
-import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-7LLcmHwK.esm.js";
-import "./sessionInitializer-BpghxytN.esm.js";
+import "./sessionInitializer-BDaCQKeI.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { i as toIncodeApiError } from "./apiError-TkHnky_q.esm.js";
+import { i as toIncodeApiError } from "./apiError-3ys-wxoO.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic

package/dist/session.esm.js

@@ -1,9 +1,9 @@
 import { r as getToken } from "./api-Bx3gKW_y.esm.js";
 import { r as subscribeHttpErrors } from "./HttpRequestError-Bh0pNGSC.esm.js";
-import { i as initializeSession, l as whenSessionFingerprintSettled } from "./sessionInitializer-BpghxytN.esm.js";
-import { t as IncodeApiError } from "./apiError-TkHnky_q.esm.js";
-import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-ByvC2FyF.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-Dpe15n-k.esm.js";
+import { i as initializeSession, l as whenSessionFingerprintSettled } from "./sessionInitializer-BDaCQKeI.esm.js";
+import { t as IncodeApiError } from "./apiError-3ys-wxoO.esm.js";
+import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-vLvfp5DY.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-fQozmpJp.esm.js";
 //#region src/internal/session/sessionExpired.ts
 var SessionExpiredError = class extends Error {
 	constructor() {

package/dist/{sessionInitializer-BpghxytN.esm.js → sessionInitializer-BDaCQKeI.esm.js}

@@ -1,8 +1,8 @@
-import { E as updateFeatureManagementUser } from "./feature-management-BT326X9U.esm.js";
+import { d as fetchFeatureConfig, f as isFeatureEnabled, h as noteEnvironment, l as trueSightLog, p as resetFeatureConfigCache, s as startTrueSightCollection, v as noteTokenActivated } from "./trueSightService-BVrLJBui.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-B71OxR2_.esm.js";
 import { c as setToken, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { d as fetchFeatureConfig, f as isFeatureEnabled, h as noteEnvironment, l as trueSightLog, p as resetFeatureConfigCache, s as startTrueSightCollection, v as noteTokenActivated } from "./trueSightService-7LLcmHwK.esm.js";
 import { v as addEvent, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-D91tsaUy.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-Cysb10Yn.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-CZcy2J53.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-B2iFDql1.esm.js";

package/dist/{setup-Cry_vKq0.d.ts → setup-CHHZ8BBM.d.ts}

@@ -547,7 +547,8 @@ declare function setWasmConfig(config: WasmConfig): void;
 /**
  * Initializes WasmUtilProvider with the stored WASM configuration.
  * Should be called after warmupWasm() completes when using conditional warmup.
- * This ensures image encryption works properly.
+ * Also upgrades the HTTP client so protected capture payloads are unwrapped
+ * by the native transport before upload.
  *
  * @param config - Optional WASM configuration. If not provided, uses the stored config from setWasmConfig().
  * @throws Error if no config is provided and none is stored

package/dist/{setup-f_BLfVte.esm.js → setup-D8QyhVe3.esm.js}

@@ -1,157 +1,16 @@
-import { f as deriveSiblingJsPath, p as WASM_MODEL_FILES, v as buildModelVariantSources } from "./wasmWebClient-DPPQlS-U.esm.js";
+import { C as upgradeToWasmHttpClient$1, S as resetHttpClientState, _ as noteTestingSignals, b as getStoredHttpConfig, k as resolveWasmConfig, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as installFreshHttpClient } from "./trueSightService-BVrLJBui.esm.js";
 import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-REsua-sF.esm.js";
 import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-C511Hltw.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-BT326X9U.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-B71OxR2_.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api } from "./api-Bx3gKW_y.esm.js";
-import { C as upgradeToWasmHttpClient$1, S as resetHttpClientState, _ as noteTestingSignals, b as getStoredHttpConfig, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as installFreshHttpClient } from "./trueSightService-7LLcmHwK.esm.js";
 import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp } from "./sessionInitializer-BpghxytN.esm.js";
+import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp } from "./sessionInitializer-BDaCQKeI.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-4RsGrIt6.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-D05TxEdI.esm.js";
-//#region ../infra/src/wasm/wasmDefaults.ts
-const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
-/** The WASM version bundled and tested with this SDK release. */
-const DEFAULT_WASM_VERSION = "v2.14.50-post1";
-const PATH_KEYS = [
-	"wasmPath",
-	"wasmSimdPath",
-	"glueCodePath",
-	"glueCodeSimdPath",
-	"modelsBasePath"
-];
-function isBlank(value) {
-	return value.trim() === "";
-}
-function hasDisallowedControlChars(value) {
-	for (let i = 0; i < value.length; i += 1) {
-		const code = value.charCodeAt(i);
-		if (code < 32 || code === 127) return true;
-	}
-	return false;
-}
-function isMalformedPath(value) {
-	const trimmed = value.trim();
-	if (trimmed === "") return false;
-	if (hasDisallowedControlChars(trimmed)) return true;
-	if (/^https?:\/\//i.test(trimmed)) try {
-		new URL(trimmed);
-		return false;
-	} catch {
-		return true;
-	}
-	return false;
-}
-function warnInvalidWasmPath(field, reason) {
-	if (reason === "empty") {
-		console.warn(`[Incode SDK] wasm.${field} is empty. Falling back to CDN default.`);
-		return;
-	}
-	console.warn(`[Incode SDK] wasm.${field} appears malformed. Falling back to CDN default.`);
-}
-function warnMalformedWasmPath(field) {
-	console.warn(`[Incode SDK] wasm.${field} appears malformed. Check the URL or path.`);
-}
-/**
-* Validates merged WASM path strings. When overrides contained blank path
-* values, callers should have already fallen back to defaults before this runs.
-*/
-function validateWasmPaths(config) {
-	for (const key of PATH_KEYS) {
-		const value = config[key];
-		if (typeof value === "string" && isMalformedPath(value)) warnMalformedWasmPath(key);
-	}
-}
-function pickPath(key, overrides, defaultValue) {
-	if (!overrides || !(key in overrides)) return defaultValue;
-	const raw = overrides[key];
-	if (raw === void 0) return defaultValue;
-	if (typeof raw !== "string") return defaultValue;
-	if (isBlank(raw)) {
-		warnInvalidWasmPath(key, "empty");
-		return defaultValue;
-	}
-	if (isMalformedPath(raw)) {
-		warnInvalidWasmPath(key, "malformed");
-		return defaultValue;
-	}
-	return raw.trim();
-}
-function pickSource(key, overrides, defaultValue) {
-	if (!(key in overrides) || overrides[key] === void 0) return defaultValue;
-	const source = overrides[key];
-	if (typeof source !== "string") return source;
-	return pickPath(key, overrides, String(defaultValue));
-}
-function resolveBasePath(overrides) {
-	const defaultValue = `${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`;
-	if (!("basePath" in overrides) || overrides.basePath === void 0) return defaultValue;
-	const basePath = overrides.basePath;
-	if (typeof basePath !== "string" || isBlank(basePath) || isMalformedPath(basePath)) throw new Error("[Incode SDK] wasm.basePath is invalid.");
-	return basePath.trim();
-}
-/** Builds a WarmupConfig from a directory that mirrors the ml-wasm-kit CDN layout. */
-function buildWasmConfigFromBasePath(basePath) {
-	const base = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
-	return {
-		wasmPath: `${base}/webLib.wasm`,
-		wasmSimdPath: `${base}/webLibSimd.wasm`,
-		glueCodePath: `${base}/webLib.js`,
-		glueCodeSimdPath: `${base}/webLibSimd.js`,
-		modelsBasePath: `${base}/models`
-	};
-}
-/** Builds the standard WarmupConfig from the Incode CDN. */
-function buildDefaultWasmConfig() {
-	return buildWasmConfigFromBasePath(`${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`);
-}
-const BARCODE_ENHANCE_MODEL_FILE = WASM_MODEL_FILES.barcode;
-/**
-* URL of the lazily-loaded PDF417 barcode enhancement model (US Smart Capture).
-* Derived from the resolved `modelsBasePath` so self-hosted / air-gapped
-* deployments resolve it correctly, falling back to the CDN default. Loaded on
-* demand via `IIdCaptureCapability.setBarcodeEnhancementModel` — deliberately
-* NOT part of any warmup model bundle.
-*/
-function getBarcodeEnhanceModelUrl(modelsBasePath, variant = "current") {
-	const source = buildModelVariantSources(modelsBasePath ?? `${WASM_CDN_BASE_URL}/v2.14.50-post1/models`, BARCODE_ENHANCE_MODEL_FILE);
-	return typeof source === "string" ? source : source[variant];
-}
-/**
-* Merges optional WASM path overrides with CDN defaults. Explicit non-blank
-* paths take precedence. Blank override strings log a warning and fall back to defaults.
-*/
-function resolveWasmConfig(overrides) {
-	if (!overrides) return buildDefaultWasmConfig();
-	const defaults = buildWasmConfigFromBasePath(resolveBasePath(overrides));
-	const resolvedWasmPath = pickSource("wasmPath", overrides, defaults.wasmPath);
-	const simdDefault = overrides.selfHosted ? resolvedWasmPath : defaults.wasmSimdPath;
-	const modelsDefault = defaults.modelsBasePath;
-	const resolvedWasmSimdPath = pickSource("wasmSimdPath", overrides, simdDefault);
-	const glueCodeSimdDefault = typeof resolvedWasmSimdPath === "string" ? deriveSiblingJsPath(resolvedWasmSimdPath) : defaults.glueCodeSimdPath;
-	const merged = {
-		wasmPath: resolvedWasmPath,
-		wasmSimdPath: resolvedWasmSimdPath,
-		glueCodePath: pickPath("glueCodePath", overrides, defaults.glueCodePath),
-		glueCodeSimdPath: pickPath("glueCodeSimdPath", overrides, glueCodeSimdDefault),
-		modelsBasePath: pickPath("modelsBasePath", overrides, modelsDefault),
-		useSimd: overrides.useSimd,
-		showLogs: overrides.showLogs,
-		pipelines: overrides.pipelines,
-		pipelineModels: overrides.pipelineModels,
-		modelUrls: overrides.modelUrls,
-		legacyModelUrls: overrides.legacyModelUrls,
-		loadGlue: overrides.loadGlue,
-		loadGlueSimd: overrides.loadGlueSimd,
-		selfHosted: overrides.selfHosted
-	};
-	validateWasmPaths(merged);
-	return merged;
-}
-//#endregion
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-JMyiIoCs.esm.js";
 //#region ../infra/src/providers/browser/BrowserPageLifecycleProvider.ts
 var BrowserPageLifecycleProvider = class {
 	sendBeacon(url, body, contentType = "application/json") {
@@ -776,7 +635,8 @@ function setWasmConfig(config) {
 /**
 * Initializes WasmUtilProvider with the stored WASM configuration.
 * Should be called after warmupWasm() completes when using conditional warmup.
-* This ensures image encryption works properly.
+* Also upgrades the HTTP client so protected capture payloads are unwrapped
+* by the native transport before upload.
 *
 * @param config - Optional WASM configuration. If not provided, uses the stored config from setWasmConfig().
 * @throws Error if no config is provided and none is stored
@@ -789,6 +649,7 @@ async function initializeWasmUtil(config) {
 		...resolved,
 		pipelines: resolved.pipelines ? [...resolved.pipelines] : void 0
 	});
+	await upgradeToWasmHttpClient$1(resolved);
 }
 /**
 * Warms additional WASM pipelines on demand, reusing the WASM config stored by
@@ -872,4 +733,4 @@ function reset() {
 	resetTrueSight();
 }
 //#endregion
-export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, buildDefaultWasmConfig as d, buildWasmConfigFromBasePath as f, reset as i, BrowserStorageProvider as l, resolveWasmConfig as m, initializeWasmUtil as n, setWasmConfig as o, getBarcodeEnhanceModelUrl as p, isConfigured as r, setup as s, ensureWasmPipelines as t, DEFAULT_WASM_VERSION as u };
+export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, reset as i, BrowserStorageProvider as l, initializeWasmUtil as n, setWasmConfig as o, isConfigured as r, setup as s, ensureWasmPipelines as t };

package/dist/{trueSightService-7LLcmHwK.esm.js → trueSightService-BVrLJBui.esm.js}

@@ -1,10 +1,150 @@
-import { a as setWebApiHttpTransport, i as initializeWasmWebClient, o as setupWasmConnection, r as executeWasmRequest, t as WasmWebClientError } from "./wasmWebClient-DPPQlS-U.esm.js";
+import { a as setWebApiHttpTransport, f as deriveSiblingJsPath, i as initializeWasmWebClient, o as setupWasmConnection, p as WASM_MODEL_FILES, r as executeWasmRequest, t as WasmWebClientError, v as buildModelVariantSources } from "./wasmWebClient-DPPQlS-U.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
 import { n as reportHttpError, t as HttpRequestError } from "./HttpRequestError-Bh0pNGSC.esm.js";
 import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-D91tsaUy.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-Cysb10Yn.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
+//#region ../infra/src/wasm/wasmDefaults.ts
+const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
+/** The WASM version bundled and tested with this SDK release. */
+const DEFAULT_WASM_VERSION = "v2.14.50-post1";
+const PATH_KEYS = [
+	"wasmPath",
+	"wasmSimdPath",
+	"glueCodePath",
+	"glueCodeSimdPath",
+	"modelsBasePath"
+];
+function isBlank(value) {
+	return value.trim() === "";
+}
+function hasDisallowedControlChars(value) {
+	for (let i = 0; i < value.length; i += 1) {
+		const code = value.charCodeAt(i);
+		if (code < 32 || code === 127) return true;
+	}
+	return false;
+}
+function isMalformedPath(value) {
+	const trimmed = value.trim();
+	if (trimmed === "") return false;
+	if (hasDisallowedControlChars(trimmed)) return true;
+	if (/^https?:\/\//i.test(trimmed)) try {
+		new URL(trimmed);
+		return false;
+	} catch {
+		return true;
+	}
+	return false;
+}
+function warnInvalidWasmPath(field, reason) {
+	if (reason === "empty") {
+		console.warn(`[Incode SDK] wasm.${field} is empty. Falling back to CDN default.`);
+		return;
+	}
+	console.warn(`[Incode SDK] wasm.${field} appears malformed. Falling back to CDN default.`);
+}
+function warnMalformedWasmPath(field) {
+	console.warn(`[Incode SDK] wasm.${field} appears malformed. Check the URL or path.`);
+}
+/**
+* Validates merged WASM path strings. When overrides contained blank path
+* values, callers should have already fallen back to defaults before this runs.
+*/
+function validateWasmPaths(config) {
+	for (const key of PATH_KEYS) {
+		const value = config[key];
+		if (typeof value === "string" && isMalformedPath(value)) warnMalformedWasmPath(key);
+	}
+}
+function pickPath(key, overrides, defaultValue) {
+	if (!overrides || !(key in overrides)) return defaultValue;
+	const raw = overrides[key];
+	if (raw === void 0) return defaultValue;
+	if (typeof raw !== "string") return defaultValue;
+	if (isBlank(raw)) {
+		warnInvalidWasmPath(key, "empty");
+		return defaultValue;
+	}
+	if (isMalformedPath(raw)) {
+		warnInvalidWasmPath(key, "malformed");
+		return defaultValue;
+	}
+	return raw.trim();
+}
+function pickSource(key, overrides, defaultValue) {
+	if (!(key in overrides) || overrides[key] === void 0) return defaultValue;
+	const source = overrides[key];
+	if (typeof source !== "string") return source;
+	return pickPath(key, overrides, String(defaultValue));
+}
+function resolveBasePath(overrides) {
+	const defaultValue = `${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`;
+	if (!("basePath" in overrides) || overrides.basePath === void 0) return defaultValue;
+	const basePath = overrides.basePath;
+	if (typeof basePath !== "string" || isBlank(basePath) || isMalformedPath(basePath)) throw new Error("[Incode SDK] wasm.basePath is invalid.");
+	return basePath.trim();
+}
+/** Builds a WarmupConfig from a directory that mirrors the ml-wasm-kit CDN layout. */
+function buildWasmConfigFromBasePath(basePath) {
+	const base = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
+	return {
+		wasmPath: `${base}/webLib.wasm`,
+		wasmSimdPath: `${base}/webLibSimd.wasm`,
+		glueCodePath: `${base}/webLib.js`,
+		glueCodeSimdPath: `${base}/webLibSimd.js`,
+		modelsBasePath: `${base}/models`
+	};
+}
+/** Builds the standard WarmupConfig from the Incode CDN. */
+function buildDefaultWasmConfig() {
+	return buildWasmConfigFromBasePath(`${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`);
+}
+const BARCODE_ENHANCE_MODEL_FILE = WASM_MODEL_FILES.barcode;
+/**
+* URL of the lazily-loaded PDF417 barcode enhancement model (US Smart Capture).
+* Derived from the resolved `modelsBasePath` so self-hosted / air-gapped
+* deployments resolve it correctly, falling back to the CDN default. Loaded on
+* demand via `IIdCaptureCapability.setBarcodeEnhancementModel` — deliberately
+* NOT part of any warmup model bundle.
+*/
+function getBarcodeEnhanceModelUrl(modelsBasePath, variant = "current") {
+	const source = buildModelVariantSources(modelsBasePath ?? `${WASM_CDN_BASE_URL}/v2.14.50-post1/models`, BARCODE_ENHANCE_MODEL_FILE);
+	return typeof source === "string" ? source : source[variant];
+}
+/**
+* Merges optional WASM path overrides with CDN defaults. Explicit non-blank
+* paths take precedence. Blank override strings log a warning and fall back to defaults.
+*/
+function resolveWasmConfig(overrides) {
+	if (!overrides) return buildDefaultWasmConfig();
+	const defaults = buildWasmConfigFromBasePath(resolveBasePath(overrides));
+	const resolvedWasmPath = pickSource("wasmPath", overrides, defaults.wasmPath);
+	const simdDefault = overrides.selfHosted ? resolvedWasmPath : defaults.wasmSimdPath;
+	const modelsDefault = defaults.modelsBasePath;
+	const resolvedWasmSimdPath = pickSource("wasmSimdPath", overrides, simdDefault);
+	const glueCodeSimdDefault = typeof resolvedWasmSimdPath === "string" ? deriveSiblingJsPath(resolvedWasmSimdPath) : defaults.glueCodeSimdPath;
+	const merged = {
+		wasmPath: resolvedWasmPath,
+		wasmSimdPath: resolvedWasmSimdPath,
+		glueCodePath: pickPath("glueCodePath", overrides, defaults.glueCodePath),
+		glueCodeSimdPath: pickPath("glueCodeSimdPath", overrides, glueCodeSimdDefault),
+		modelsBasePath: pickPath("modelsBasePath", overrides, modelsDefault),
+		useSimd: overrides.useSimd,
+		showLogs: overrides.showLogs,
+		pipelines: overrides.pipelines,
+		pipelineModels: overrides.pipelineModels,
+		modelUrls: overrides.modelUrls,
+		legacyModelUrls: overrides.legacyModelUrls,
+		loadGlue: overrides.loadGlue,
+		loadGlueSimd: overrides.loadGlueSimd,
+		selfHosted: overrides.selfHosted
+	};
+	validateWasmPaths(merged);
+	return merged;
+}
+//#endregion
 //#region ../infra/src/http/createApi.ts
 var FetchHttpError = class extends HttpRequestError {
 	constructor(..._args) {
@@ -415,10 +555,18 @@ const createWasmApi = async (config) => {
 * `httpClient.request()` pipeline as every other endpoint — header
 * injection, encryption-state handling, default headers, timeout — instead
 * of bypassing it via `executeWasmRequest` directly.
+*
+* Protected captures arrive with `ie === true`: the C++ `WebApi` already
+* encrypted the body inline, and only the WASM `WebClient` can unwrap it. A
+* plain fetch client would post the ciphertext as JSON and the backend
+* answers 406. If the plain client is still installed at that point (the
+* host called `setup()` without `wasm` and warmed WASM separately), swap to
+* the WASM client first. The module is already loaded — the payload came
+* out of it — so the swap only creates the `WebClient`.
 */
 function bindWebApiTransport(client) {
 	return async (url, body, config) => {
-		const response = await client.request({
+		const response = await (config.ie === true && storedHttpConfig && !storedHttpConfig.isWasm ? await ensureWasmHttpClient() : client).request({
 			method: "POST",
 			url,
 			body,
@@ -437,7 +585,12 @@ function installClient(client) {
 	setClient(client);
 	setWebApiHttpTransport(bindWebApiTransport(client));
 }
+async function ensureWasmHttpClient() {
+	await upgradeToWasmHttpClient(resolveWasmConfig());
+	return getApi();
+}
 let storedHttpConfig;
+let pendingUpgrade;
 /** Reads the current HTTP-client config (or `undefined` if none installed). */
 function getStoredHttpConfig() {
 	return storedHttpConfig;
@@ -494,19 +647,24 @@ async function installFreshHttpClient(apiURL, options, effectiveWasm, encryption
 async function upgradeToWasmHttpClient(resolved) {
 	const stored = storedHttpConfig;
 	if (!stored || stored.isWasm) return;
-	installClient(await createWasmApi({
-		apiURL: stored.apiURL,
-		customHeaders: stored.customHeaders,
-		timeout: stored.timeout,
-		wasm: resolved,
-		encryptionEnabled: stored.encryption.enabled,
-		mgf1: stored.encryption.mgf1,
-		isEncryptionEnabled: isHttpEncrypted
-	}));
-	storedHttpConfig = {
-		...stored,
-		isWasm: true
-	};
+	pendingUpgrade ??= (async () => {
+		installClient(await createWasmApi({
+			apiURL: stored.apiURL,
+			customHeaders: stored.customHeaders,
+			timeout: stored.timeout,
+			wasm: resolved,
+			encryptionEnabled: stored.encryption.enabled,
+			mgf1: stored.encryption.mgf1,
+			isEncryptionEnabled: isHttpEncrypted
+		}));
+		storedHttpConfig = {
+			...stored,
+			isWasm: true
+		};
+	})().finally(() => {
+		pendingUpgrade = void 0;
+	});
+	return pendingUpgrade;
 }
 /**
 * When `wantsEncryption` is true, wraps a call that triggers the in-binary
@@ -1312,7 +1470,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-xGTAREHz.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-CvYfZMnv.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**
@@ -1881,4 +2039,4 @@ function modulePosition(payload) {
 	return `${typeof moduleIndex === "number" ? ` index=${moduleIndex}` : ""}${typeof totalModules === "number" ? ` total=${totalModules}` : ""}`;
 }
 //#endregion
-export { upgradeToWasmHttpClient as C, resetHttpClientState as S, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };
+export { upgradeToWasmHttpClient as C, buildWasmConfigFromBasePath as D, buildDefaultWasmConfig as E, getBarcodeEnhanceModelUrl as O, resetHttpClientState as S, DEFAULT_WASM_VERSION as T, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, resolveWasmConfig as k, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };

package/dist/video-selfie.esm.js

@@ -1,16 +1,16 @@
-import { t as ensureWasmPipelines } from "./setup-f_BLfVte.esm.js";
 import { r as WasmUtilProvider } from "./safeStorage-C511Hltw.esm.js";
+import { t as ensureWasmPipelines } from "./setup-D8QyhVe3.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-D05TxEdI.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-JMyiIoCs.esm.js";
 import { i as assign, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-Bg3FuvIs.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-Ccyzgxj1.esm.js";
 import { t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-BrJN1B8A.esm.js";
 import { t as MultipartRecordingService } from "./multipartRecordingService-OEgIRvqC.esm.js";
-import { i as CameraCompositor } from "./idCaptureDefaults-CD_yF2_H.esm.js";
+import { i as CameraCompositor } from "./idCaptureDefaults-BvJQyo_A.esm.js";
 import { t as VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE } from "./advanceableErrors-CpF2cBy6.esm.js";
-import { a as isConnectionError, n as defaultAcquireCamera, r as createDefaultStepDetector, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-CPqcnqCL.esm.js";
+import { a as isConnectionError, n as defaultAcquireCamera, r as createDefaultStepDetector, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-2-PZRnLp.esm.js";
 import { t as videoSelfieFlowModuleMachine } from "./videoSelfieFlowModuleMachine-DQTlyw98.esm.js";
 //#region src/modules/video-selfie/videoSelfieWasm.ts
 function warmupVideoSelfieWasm(config, steps = resolveVideoSelfieSteps(config)) {

package/dist/{videoSelfieCameraWarmer-CPqcnqCL.esm.js → videoSelfieCameraWarmer-2-PZRnLp.esm.js}

@@ -1,16 +1,16 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-D05TxEdI.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-JMyiIoCs.esm.js";
 import { a as requestCameraWithFallback, i as requestCameraAccess } from "./camera-sIa9ceW2.esm.js";
 import { t as checkPermission } from "./permissionServices-C8DqhjX7.esm.js";
-import { n as encryptSelfieImage, o as startDetection, t as FaceDetectionProvider } from "./FaceDetectionProvider-DN1HTSkP.esm.js";
+import { n as encryptSelfieImage, o as startDetection, t as FaceDetectionProvider } from "./FaceDetectionProvider-wJI4vP3r.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
 import { t as StreamCanvasProcessingSession } from "./StreamCanvasProcessingSession-CBnbTnOr.esm.js";
 import { n as getBackCameraStream } from "./backCameraStream-B0-YgP_y.esm.js";
 import { n as getWindowDimensions } from "./getDeviceClass-CeBiEayS.esm.js";
 import { i as uploadSelfie, r as processFace, t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-yjRptLFi.esm.js";
-import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-CD_yF2_H.esm.js";
+import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-BvJQyo_A.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/video-selfie/videoSelfieCompareService.ts
 async function postVideoSelfieCompare(endpoint, base64Image) {

package/dist/wasm.d.ts

@@ -1,5 +1,5 @@
 import { a as WASM_MODEL_FILES, c as WasmPipeline, l as WasmSource, o as WasmGlueLoader, r as warmupWasm, s as WasmModelName, t as WarmupConfig } from "./warmup-BUPPRAA1.js";
-import { c as setWasmConfig, i as initializeWasmUtil, n as WasmConfig, r as ensureWasmPipelines, s as resolveWasmConfigForPipelines, u as upgradeToWasmHttpClient } from "./setup-Cry_vKq0.js";
+import { c as setWasmConfig, i as initializeWasmUtil, n as WasmConfig, r as ensureWasmPipelines, s as resolveWasmConfigForPipelines, u as upgradeToWasmHttpClient } from "./setup-CHHZ8BBM.js";
 //#region ../infra/src/wasm/wasmDefaults.d.ts
 /** The WASM version bundled and tested with this SDK release. */
 declare const DEFAULT_WASM_VERSION = "v2.14.50-post1";

package/dist/wasm.esm.js

@@ -1,6 +1,7 @@
 import { g as WASM_PIPELINE_MODEL_NAMES, m as WASM_PIPELINE_LAZY_MODEL_NAMES, p as WASM_MODEL_FILES } from "./wasmWebClient-DPPQlS-U.esm.js";
-import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, d as buildDefaultWasmConfig, f as buildWasmConfigFromBasePath, m as resolveWasmConfig, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines, u as DEFAULT_WASM_VERSION } from "./setup-f_BLfVte.esm.js";
+import { D as buildWasmConfigFromBasePath, E as buildDefaultWasmConfig, T as DEFAULT_WASM_VERSION, k as resolveWasmConfig } from "./trueSightService-BVrLJBui.esm.js";
 import { o as warmupWasm } from "./warmup-REsua-sF.esm.js";
+import { a as resolveWasmConfigForPipelines, c as upgradeToWasmHttpClient, n as initializeWasmUtil, o as setWasmConfig, t as ensureWasmPipelines } from "./setup-D8QyhVe3.esm.js";
 //#region src/defineWasm.ts
 function requiredModels(pipelines) {
 	const models = /* @__PURE__ */ new Set();