@incodetech/core 0.0.0-dev-20261029-a725a1aa → 0.0.0-dev-20261030-25da0fd5

package/dist/{FaceDetectionProvider-DyPUMA8q.esm.js → FaceDetectionProvider-IQUzWgoQ.esm.js}

@@ -1,16 +1,14 @@
-import { l as wasmRuntime } from "./warmup-D-Y2iAoP.esm.js";
-import { t as ensureWasmPipelines } from "./setup-XyKmxnYs.esm.js";
-import { r as BaseWasmProvider } from "./WasmUtilProvider-DqtPEKsY.esm.js";
-import { t as api, u as endpoints } from "./api-BG98lkot.esm.js";
-import { l as trueSightHintTransition, r as noteTrueSightCaptureActivity } from "./trueSightService-CKRS-Zz7.esm.js";
-import "./sessionInitializer-D9AZfKtF.esm.js";
-import { t as addDeviceStats } from "./stats-D3Cxg6PL.esm.js";
-import { c as isIPhone14OrHigher, i as isDesktop } from "./platform-DkcRc9JV.esm.js";
-import { i as requestCameraAccess, o as stopCameraStream, r as getCameraReacquisitionConstraints } from "./camera-sIa9ceW2.esm.js";
+import { l as wasmRuntime } from "./warmup-DPfXWeBq.esm.js";
+import { t as ensureWasmPipelines } from "./setup-DsyIImNv.esm.js";
+import { r as BaseWasmProvider } from "./WasmUtilProvider-DZOGC2HE.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
+import { l as trueSightHintTransition, r as noteTrueSightCaptureActivity } from "./trueSightService-CKxjX0fA.esm.js";
+import "./sessionInitializer-CWj60x1d.esm.js";
+import { t as addDeviceStats } from "./stats-BpMz-hTP.esm.js";
 import { t as IncodeCanvas } from "./canvas-BxFzWTt-.esm.js";
-import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-YhlbyjI4.esm.js";
-import { i as hasBackCamera, n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-CMvXj4X4.esm.js";
-import "./deepsightService-BZDzMNFo.esm.js";
+import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-BwyB15vd.esm.js";
+import { n as hasBackCamera } from "./backCameraStream-DkOFEXvI.esm.js";
+import "./deepsightService-BAkzK3Nb.esm.js";
 import { t as getDeviceClass } from "./getDeviceClass-bsWdEDxP.esm.js";
 //#region src/internal/faceCapture/onDeviceFaceResults.ts
 /**
@@ -136,54 +134,18 @@ async function processFace(imageType = "selfie", signal) {
 function sendLabelInspectionEvent() {
 	return addDeviceStats({ cameraLabelInspectionStatus: "FAIL" });
 }
-const MOBILE_SELFIE_CONSTRAINTS = {
-	video: {
-		facingMode: "user",
-		height: { ideal: 480 },
-		width: { ideal: 640 }
-	},
-	audio: false
-};
-const IPHONE14_SELFIE_CONSTRAINTS = {
-	video: { height: { ideal: 1080 } },
-	audio: false
-};
-function buildCameraConstraints(resolution, deviceId) {
-	if (resolution) return {
-		video: {
-			facingMode: "user",
-			deviceId: deviceId ? { exact: deviceId } : void 0,
-			height: resolution.height ? { ideal: resolution.height } : void 0,
-			width: resolution.width ? { ideal: resolution.width } : void 0
-		},
-		audio: false
-	};
-	if (isIPhone14OrHigher()) return IPHONE14_SELFIE_CONSTRAINTS;
-	return MOBILE_SELFIE_CONSTRAINTS;
-}
-function stopStream(stream) {
-	stopCameraStream(stream);
-}
-async function getFrontCameraStream(resolution) {
-	if (isDesktop()) {
-		if (resolution) return ensureFrontCameraStream((deviceId) => requestCameraAccess(buildCameraConstraints(resolution, deviceId)));
-		return ensureFrontCameraStream((deviceId) => getDesktopCameraStream(deviceId ? { deviceId } : {}));
-	}
-	return requestCameraAccess(resolution ? buildCameraConstraints(resolution) : buildCameraConstraints());
-}
-async function initializeCamera(params) {
-	const { config } = params;
+/**
+* Camera-free preparation for one protected face attempt: warms the WASM
+* pipeline the attempt will run and decides which lens to request. Since
+* ml-wasm-kit v2.14.52 the kit acquires the camera itself inside the
+* protected camera step (`ICameraCycleCapability.startCameraCycle`), so no
+* camera opens here. Runs once per
+* attempt — from the tutorial pre-acquire when there is one, otherwise at
+* attempt start.
+*/
+async function probeFaceCamera(config) {
 	await ensureWasmPipelines([isOnDeviceMode(config) ? "onDeviceSelfie" : "selfie"]);
-	const usingBackCamera = config.assistedOnboarding === true && await hasBackCamera();
-	const backCamera = usingBackCamera ? await getBackCameraStream() : void 0;
-	const stream = backCamera?.stream ?? await getFrontCameraStream(config.cameraResolution);
-	const constraints = getCameraReacquisitionConstraints(stream.getVideoTracks()[0], backCamera?.constraints);
-	return {
-		stream,
-		provider: params.provider,
-		usingBackCamera,
-		constraints
-	};
+	return { usingBackCamera: config.assistedOnboarding === true && await hasBackCamera() };
 }
 /**
 * Encrypts the provided selfie image using WASM.
@@ -271,7 +233,7 @@ function startDetection(params) {
 	};
 }
 async function initializeDeepsightSession(options) {
-	const { loadDeepsightSession } = await import("./deepsightLoader-Bb-pXoX7.esm.js");
+	const { loadDeepsightSession } = await import("./deepsightLoader-B1XqVJWL.esm.js");
 	return loadDeepsightSession({
 		ds: options.ds,
 		storage: options.storage
@@ -543,4 +505,4 @@ var FaceDetectionProvider = class extends BaseWasmProvider {
 	}
 };
 //#endregion
-export { sendLabelInspectionEvent as a, processFace as c, FACE_ERROR_CODES as d, isOnDeviceMode as f, initializeDeepsightSession as i, uploadSelfie as l, encryptSelfieImage as n, startDetection as o, initializeCamera as r, stopStream as s, FaceDetectionProvider as t, getFaceUploadErrorCode as u };
+export { sendLabelInspectionEvent as a, uploadSelfie as c, isOnDeviceMode as d, probeFaceCamera as i, getFaceUploadErrorCode as l, encryptSelfieImage as n, startDetection as o, initializeDeepsightSession as r, processFace as s, FaceDetectionProvider as t, FACE_ERROR_CODES as u };

package/dist/{IWasmUtilCapability-GF2n7sfm.d.ts → IWasmUtilCapability-Cqiaxydi.d.ts}

@@ -33,6 +33,12 @@ interface IStorageCapability {
 type WasmUtilConfig = MLProviderConfig & {
   pipelines?: WasmPipeline[];
 };
+/**
+ * Output object handed to {@link IWasmUtilCapability.poc}. Since ml-wasm-kit
+ * v2.14.53 the native check writes nothing into it (`itr` and `skipped` stay
+ * as the caller left them): the post-capture verdicts travel only in the
+ * signed capture metadata. Kept for the binding's arity.
+ */
 type VirtualCameraCheckOutput = {
   canvas: HTMLCanvasElement | null;
   itr: boolean | null;
@@ -66,6 +72,11 @@ type IWasmUtilCapability = {
   setBrowserInfo(browserInfo: object, overrideExisting?: boolean): void;
   setCameraInfo(cameraInfo: object, overrideExisting?: boolean): void;
   setMotionStatus(status: string): void;
+  /**
+   * @deprecated Native-free no-op since ml-wasm-kit v2.14.54, which removed
+   * the binding: the kit's own visibility observers record background time.
+   * Scheduled for removal in 3.0.0.
+   */
   setBackgroundMode(backgroundMode: boolean): void;
   /**
    * @deprecated Compatibility-only no-op since ml-wasm-kit v2.14.49-post1.
@@ -77,6 +88,11 @@ type IWasmUtilCapability = {
    * for client-side gating.
    */
   setOnDeviceMode(enabled: boolean): void;
+  /**
+   * @deprecated Native-free no-op since ml-wasm-kit v2.14.54, which removed
+   * the binding: the zoom check is gone and `iad.zc` is the constant `PASS`.
+   * Scheduled for removal in 3.0.0.
+   */
   setZc(zc: string): void;
   setInspectorOpened(opened: boolean): void;
   /**
@@ -112,18 +128,29 @@ type IWasmUtilCapability = {
   getCheck(): string;
   /**
    * Gets the current pipeline state. Must be called before setMotionStatus(),
-   * getCheck(), setBackgroundMode(), and getMetadata() for proper metadata generation.
+   * getCheck(), and getMetadata() for proper metadata generation.
    */
   getPipelineState(): string;
   estimatePerformance(): string;
   /**
    * @deprecated Returns `false` for compatibility; scheduled for removal in
-   * 3.0.0. Protected PRC/POC is the authoritative virtual-camera decision
-   * path: use {@link IWasmUtilCapability.prc} followed by
-   * {@link IWasmUtilCapability.poc} instead of inspecting the track label.
+   * 3.0.0. The protected camera step (`ICameraCycleCapability.startCameraCycle`)
+   * runs the pre-capture checks and the signed capture metadata carries the
+   * verdicts; nothing is decided from the track label.
    */
   isVirtualCamera(label: string | null): boolean;
+  /**
+   * @deprecated Resolves without doing anything since ml-wasm-kit v2.14.52,
+   * which removed the binding: the pre-capture check runs inside the protected
+   * camera step (`ICameraCycleCapability.startCameraCycle`), so a `prc()` then
+   * `poc()` sequence keeps working. Scheduled for removal in 3.0.0.
+   */
   prc(): Promise<void>;
+  /**
+   * Runs the native post-capture check. `output` is kept for the binding's
+   * arity and is not written since ml-wasm-kit v2.14.53 — see
+   * {@link VirtualCameraCheckOutput}.
+   */
   poc(output: VirtualCameraCheckOutput): Promise<void>;
   rsp(): Promise<void>;
   ssl(): void;

package/dist/{StreamCanvasCapture-7JRf-2ck.d.ts → StreamCanvasCapture-C3xNfOsv.d.ts}

@@ -1,5 +1,5 @@
 import { y as IncodeCanvas } from "./createFaceAvatar-lYX0VTYs.js";
-import "./IWasmUtilCapability-GF2n7sfm.js";
+import "./IWasmUtilCapability-Cqiaxydi.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 //#region ../infra/src/capabilities/IMotionSensorCapability.d.ts
 type MotionStatus = 'PASS' | 'FAIL' | 'UNCLEAR';
@@ -12,6 +12,11 @@ type MetadataService = {
   checkForVirtualCameraByLabel(videoTrack: MediaStreamTrack | null): Promise<boolean>;
   analyzeFrame(imageData: ImageData): Promise<void>;
   setMotionStatus(status: string): void;
+  /**
+   * @deprecated No-op since ml-wasm-kit v2.14.54 removed `setBackgroundMode`:
+   * the kit's own visibility observers record background time in the capture
+   * metadata. Scheduled for removal in 3.0.0.
+   */
   setBackgroundMode(backgroundMode: boolean): void;
   estimatePerformance(): string;
   getMetadata(): string;
@@ -19,7 +24,7 @@ type MetadataService = {
   getPipelineState(): string;
   /**
    * Prepares pipeline state for metadata collection.
-   * Must be called before setMotionStatus, getCheck, setBackgroundMode, and getMetadata.
+   * Must be called before setMotionStatus, getCheck, and getMetadata.
    */
   preparePipelineState(): void;
 };
@@ -53,7 +58,11 @@ type DeepsightService = {
   checkVirtualCamera(videoTrack: MediaStreamTrack): Promise<boolean>;
   performVirtualCameraCheck(sessionToken: string | null, source: FrameSource): Promise<void>;
   /**
-   * Runs PRC warmup and stores DS flag using infrastructure providers.
+   * @deprecated No-op since ml-wasm-kit v2.14.52 removed `prc`: the
+   * pre-capture check runs inside the protected camera step
+   * (`ICameraCycleCapability.startCameraCycle`) that the protected attempt
+   * drives, and there is no stand-alone warm-up any more. Scheduled for
+   * removal in 3.0.0.
    */
   performPrcCheck(params: DeepsightPrcCheckParams): Promise<void>;
   analyzeFrame(imageData: ImageData): Promise<void>;

package/dist/{WasmUtilProvider-DqtPEKsY.esm.js → WasmUtilProvider-DZOGC2HE.esm.js}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./rolldown-runtime-B-1-B7_t.esm.js";
-import { c as wasmCallWrapper, d as noteUnlockedCallStart, s as ML_CALL_MAX_POLLS, u as noteUnlockedCallEnd } from "./wasmWebClient-DpRiJOHd.esm.js";
-import { i as isWasmReady, l as wasmRuntime, o as waitForWasm, r as getWasmStatus, s as warmupWasm } from "./warmup-D-Y2iAoP.esm.js";
+import { c as wasmCallWrapper, d as noteUnlockedCallStart, s as ML_CALL_MAX_POLLS, u as noteUnlockedCallEnd } from "./wasmWebClient-DClKyqNR.esm.js";
+import { i as isWasmReady, l as wasmRuntime, o as waitForWasm, r as getWasmStatus, s as warmupWasm } from "./warmup-DPfXWeBq.esm.js";
 //#region ../infra/src/wasm/utilityWasmApi.ts
 /**
 * Utility / metadata domain facade over {@link WasmRuntime}.
@@ -10,7 +10,8 @@ import { i as isWasmReady, l as wasmRuntime, o as waitForWasm, r as getWasmStatu
 * persist and that must be replayed into it at call time —
 *
 * - `dsEnabled_` (deepsight) is passed as an argument on every
-*   `prc`/`poc`/`rsp`/`ssl` call;
+*   `poc`/`rsp`/`ssl` call, and read back through {@link getDsEnabled} by
+*   `CameraCycleProvider` for the camera step's `ds` option;
 * - `inspectorOpened_` is pushed into C++ inside {@link getMetadata}, right
 *   before reading the metadata, because `setInspectorOpened` may legitimately be
 *   called before WASM is initialized.
@@ -21,10 +22,24 @@ import { i as isWasmReady, l as wasmRuntime, o as waitForWasm, r as getWasmStatu
 * `fpPrefetch_` is a third, derived piece of JS state: the memoized `ppf` poll
 * that `getFPData` awaits, keyed by the embind handle it was started on.
 *
-* `prc`/`poc`/`rsp` are the only methods here that hold the ML semaphore.
+* `poc`/`rsp` are the only methods here that hold the ML semaphore (the camera
+* step's `cst` holds it from `WasmRuntime`).
 * `ssl`/`stl`/`osv`/`oev`/`ckvcks`/`sbc`/`ppf` and everything else are unlocked **by design**
 * (decision D6) — never add locking.
 *
+* Three members are deprecated native-free shims for bindings ml-wasm-kit
+* deleted: `prc` (v2.14.52) rejects with a fixed error; `setZc` and
+* `setBackgroundMode` (v2.14.54) are no-ops. `WasmUtilProvider` is public
+* (`@incodetech/core/extensibility`) and `major` changesets are forbidden, so
+* they follow the `isVirtualCamera` / `processPhoto` precedent until 3.0.0.
+*
+* `smv` (restored in ml-wasm-kit v2.14.54-pre5; `true` selects v2 since pre6)
+* is guarded like upstream but routes through `WasmRuntime.setMetadataV2Enabled`,
+* which latches the
+* selection and replays it after every `initialize()` — the kit keeps it as
+* realm state (ADR 0009 §6). The SDK-facing unguarded entry is
+* `wasmMetadataVersionSync.ts`.
+*
 * Method names, argument order and the pre-initialization error strings are
 * copied verbatim from the mirrored upstream `wasmApi.ts` so a WASM version bump
 * stays a diff against upstream (`docs/processes/WASM_VERSION_MIGRATION.md`).
@@ -58,8 +73,9 @@ var UtilityWasmApi = class {
 	}
 	/**
 	* @deprecated Native label inspection has been unavailable since
-	* v2.14.49-post1; scheduled for removal in 3.0.0. Protected PRC/POC owns
-	* the authoritative decision: use `prc()` followed by `poc()` instead.
+	* v2.14.49-post1; scheduled for removal in 3.0.0. The protected camera step
+	* (`ICameraCycleCapability.startCameraCycle`) runs the pre-capture checks
+	* and the signed capture metadata carries the verdicts.
 	*/
 	isVirtualCamera(_label) {
 		return false;
@@ -105,9 +121,12 @@ var UtilityWasmApi = class {
 	setCameraInfo(cameraInfo, overrideExisting = true) {
 		this.runtime.requireUtilityApi("Unable to set camera info, cpp API hasn't been initialized").setCameraInfo(cameraInfo, overrideExisting);
 	}
-	setZc(zc) {
-		this.runtime.requireUtilityApi("Unable to set zc, cpp API hasn't been initialized").setZc(zc);
-	}
+	/**
+	* @deprecated Native-free no-op. ml-wasm-kit v2.14.54 removed `setZc`: the
+	* zoom check is gone and `iad.zc` is the constant `PASS` in the capture
+	* metadata. Scheduled for removal in 3.0.0.
+	*/
+	setZc(_zc) {}
 	setMotionStatus(motionStatus) {
 		this.runtime.requireUtilityApi("Unable to set motion status, cpp API hasn't been initialized").setMotionStatus(motionStatus);
 	}
@@ -117,12 +136,19 @@ var UtilityWasmApi = class {
 	getInspectorOpened() {
 		return this.inspectorOpened_;
 	}
-	setBackgroundMode(backgroundMode) {
-		this.runtime.requireUtilityApi("Unable to set background mode, cpp API hasn't been initialized").setBackgroundMode(backgroundMode);
-	}
+	/**
+	* @deprecated Native-free no-op. ml-wasm-kit v2.14.54 removed
+	* `setBackgroundMode`: the kit's own visibility observers record background
+	* time. Scheduled for removal in 3.0.0.
+	*/
+	setBackgroundMode(_backgroundMode) {}
 	setDsEnabled(enabled) {
 		this.dsEnabled_ = enabled;
 	}
+	/** The JS-side deepsight flag, for callers that replay it into the kit themselves. */
+	getDsEnabled() {
+		return this.dsEnabled_;
+	}
 	getCheck() {
 		const utilityApi = this.runtime.requireUtilityApi("Unable to get check, cpp API hasn't been initialized");
 		noteUnlockedCallStart("getCheck");
@@ -146,6 +172,16 @@ var UtilityWasmApi = class {
 		this.runtime.requireUtilityApi("Unable to sbc, cpp API hasn't been initialized").sbc(enabled);
 	}
 	/**
+	* Capture-metadata format selector (`smv`, ml-wasm-kit v2.14.54-pre6):
+	* `true` selects the v2 document, `false` the v1 document (the module
+	* default). Guarded like upstream; the selection is latched on the runtime
+	* so it survives re-initialization (ADR 0009 §6).
+	*/
+	smv(enabled) {
+		this.runtime.requireUtilityApi("Unable to smv, cpp API hasn't been initialized");
+		this.runtime.setMetadataV2Enabled(enabled);
+	}
+	/**
 	* Reads one fingerprint signal bucket (see {@link SignalDataType}), encrypted
 	* by the native module. Waits for the one-time async prefetch (`ppf`) first.
 	* An empty string means the bucket has no data.
@@ -184,13 +220,15 @@ var UtilityWasmApi = class {
 		});
 		return promise;
 	}
-	async prc() {
-		const message = "Unable to prc, cpp API hasn't been initialized";
-		this.runtime.requireUtilityApi(message);
-		await wasmCallWrapper(this.runtime.mlCallSemaphore, () => this.runtime.requireUtilityApi(message).prc(this.dsEnabled_, false), true, {
-			maxPolls: ML_CALL_MAX_POLLS,
-			label: "prc"
-		});
+	/**
+	* @deprecated Resolves without doing anything. ml-wasm-kit v2.14.52 removed
+	* `prc`: the pre-capture check runs inside the protected camera step
+	* (`ICameraCycleCapability.startCameraCycle`), which holds the ML semaphore
+	* for it, so a caller that still awaits `prc()` before `poc()` loses
+	* nothing. Scheduled for removal in 3.0.0.
+	*/
+	prc() {
+		return Promise.resolve();
 	}
 	async poc(output) {
 		const message = "Unable to poc, cpp API hasn't been initialized";
@@ -389,15 +427,21 @@ var WasmUtilProvider = class WasmUtilProvider extends BaseWasmProvider {
 		this.ensureInitialized();
 		utilityWasmApi.setMotionStatus(status);
 	}
+	/**
+	* @deprecated Native-free no-op since ml-wasm-kit v2.14.54; scheduled for
+	* removal in 3.0.0. Like the other shims it never requires initialization.
+	*/
 	setBackgroundMode(backgroundMode) {
-		this.ensureInitialized();
 		utilityWasmApi.setBackgroundMode(backgroundMode);
 	}
 	setOnDeviceMode(enabled) {
 		wasmRuntime.setOnDeviceMode(enabled);
 	}
+	/**
+	* @deprecated Native-free no-op since ml-wasm-kit v2.14.54; scheduled for
+	* removal in 3.0.0. Like the other shims it never requires initialization.
+	*/
 	setZc(zc) {
-		this.ensureInitialized();
 		utilityWasmApi.setZc(zc);
 	}
 	setInspectorOpened(opened) {
@@ -452,8 +496,13 @@ var WasmUtilProvider = class WasmUtilProvider extends BaseWasmProvider {
 	isVirtualCamera(label) {
 		return utilityWasmApi.isVirtualCamera(label);
 	}
+	/**
+	* @deprecated Resolves without doing anything since ml-wasm-kit v2.14.52:
+	* the pre-capture check runs inside the protected camera step, so existing
+	* `prc()` then `poc()` call sites keep working. Scheduled for removal in
+	* 3.0.0.
+	*/
 	async prc() {
-		this.ensureInitialized();
 		await utilityWasmApi.prc();
 	}
 	async poc(output) {

package/dist/{addressSearch-B0cu1Cuf.esm.js → addressSearch-41sMcnJk.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-BG98lkot.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/shared/usStates.ts

package/dist/ae-signature.esm.js

@@ -1,4 +1,4 @@
-import { c as areAllConsented, i as AE_CONSENT_KEYS, r as electronicSignatureMachine, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-BvZrv57e.esm.js";
+import { c as areAllConsented, i as AE_CONSENT_KEYS, r as electronicSignatureMachine, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-CScqZVks.esm.js";
 //#region src/modules/ae-signature/index.ts
 function createAeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/antifraud.esm.js

@@ -1,3 +1,3 @@
-import { t as antifraudMachine } from "./antifraudStateMachine-C0Fvysdf.esm.js";
-import { n as createAntifraudManagerFromActor, t as createAntifraudManager } from "./antifraudManager-Bcv2EsSL.esm.js";
+import { t as antifraudMachine } from "./antifraudStateMachine-BcsUTTIr.esm.js";
+import { n as createAntifraudManagerFromActor, t as createAntifraudManager } from "./antifraudManager-CQ08atTC.esm.js";
 export { antifraudMachine, createAntifraudManager, createAntifraudManagerFromActor };

package/dist/{antifraudManager-Bcv2EsSL.esm.js → antifraudManager-CQ08atTC.esm.js}

@@ -1,7 +1,7 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Dh1gMk0J.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CQteqXfy.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as antifraudMachine } from "./antifraudStateMachine-C0Fvysdf.esm.js";
+import { t as antifraudMachine } from "./antifraudStateMachine-BcsUTTIr.esm.js";
 //#region src/modules/antifraud/antifraudActor.ts
 function createAntifraudActor() {
 	return createActor(antifraudMachine).start();

package/dist/{antifraudStateMachine-C0Fvysdf.esm.js → antifraudStateMachine-BcsUTTIr.esm.js}

@@ -1,4 +1,4 @@
-import { t as api, u as endpoints } from "./api-BG98lkot.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/antifraud/antifraudServices.ts

package/dist/{api-BG98lkot.esm.js → api-BO8JA7Pf.esm.js}

@@ -271,10 +271,10 @@ async function withTiming(method, url, call) {
 * (later keys overwrite earlier ones in object spread).
 *
 * Existing call sites that already pass an explicit
-* `X-Incode-Hardware-Id` header (`recordingsRepository.uploadDeepsightVideo`,
-* `internal/virtualCameraCheck.logFrame`) now use the value they
-* passed in unconditionally — previously the auto-injection silently
-* clobbered them. Both call sites pass tokens that are already
+* `X-Incode-Hardware-Id` header (`recordingsRepository.uploadDeepsightVideo`;
+* the retired `internal/virtualCameraCheck.logFrame` did too) now use the
+* value they passed in unconditionally — previously the auto-injection
+* silently clobbered them. Those call sites pass tokens that are already
 * supposed to be the active session token, so behaviour is
 * unchanged in practice; the change unblocks personhood (which
 * needs to attach its own slot's token) without bypassing the

package/dist/{apiError-B30TKIvV.esm.js → apiError-yoXb-Uyb.esm.js}

@@ -1,4 +1,4 @@
-import { d as categoryForEndpoint, u as trueSightLog } from "./trueSightService-CKRS-Zz7.esm.js";
+import { d as categoryForEndpoint, u as trueSightLog } from "./trueSightService-CKxjX0fA.esm.js";
 //#region src/internal/http/apiError.ts
 /**
 * Incode API error.

package/dist/{attemptCarry-DpuNCHQS.esm.js → attemptCarry-BjTJ6bMQ.esm.js}

@@ -1,4 +1,4 @@
-import { r as getToken } from "./api-BG98lkot.esm.js";
+import { r as getToken } from "./api-BO8JA7Pf.esm.js";
 import { a as watchConnectivity } from "./connectivity-HSl0diCx.esm.js";
 //#region src/internal/session/attemptCarry.ts
 const carried = /* @__PURE__ */ new Map();

package/dist/authentication.d.ts

@@ -1,4 +1,4 @@
-import { C as authenticationMachine, S as createAuthenticationActor, b as AuthenticationActor, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-C3RG3oYt.js";
-import { t as AuthenticationConfig } from "./types-C3dgFVhg.js";
-import { n as AuthenticationState, r as createAuthenticationManager, t as AuthenticationManager } from "./authenticationManager-CfD9LLbU.js";
+import { C as authenticationMachine, S as createAuthenticationActor, b as AuthenticationActor, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-QYEShK-c.js";
+import { t as AuthenticationConfig } from "./types-D9r3zRfY.js";
+import { n as AuthenticationState, r as createAuthenticationManager, t as AuthenticationManager } from "./authenticationManager-CVDBB_4A.js";
 export { type AuthenticationActor, type AuthenticationConfig, type AuthenticationManager, type AuthenticationState, type CreateAuthenticationActorOptions, authenticationMachine, createAuthenticationActor, createAuthenticationManager };

package/dist/authentication.esm.js

@@ -1,3 +1,3 @@
-import { t as authenticationMachine } from "./authenticationStateMachine-vqX2IRlb.esm.js";
-import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-Cnixv5FG.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-BrNJAQqh.esm.js";
+import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-BOasUkUz.esm.js";
 export { authenticationMachine, createAuthenticationActor, createAuthenticationManager };

package/dist/{authenticationManager-Cnixv5FG.esm.js → authenticationManager-BOasUkUz.esm.js}

@@ -1,9 +1,9 @@
-import { u as BrowserStorageProvider } from "./setup-XyKmxnYs.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DqtPEKsY.esm.js";
-import { n as eventModuleNames } from "./events-Dh1gMk0J.esm.js";
+import { u as BrowserStorageProvider } from "./setup-DsyIImNv.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-DZOGC2HE.esm.js";
+import { n as eventModuleNames } from "./events-CQteqXfy.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-DEfqLONA.esm.js";
-import { t as authenticationMachine } from "./authenticationStateMachine-vqX2IRlb.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-B7vE9xhl.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-BrNJAQqh.esm.js";
 //#region src/modules/authentication/authenticationActor.ts
 function createAuthenticationActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{authenticationManager-CfD9LLbU.d.ts → authenticationManager-CVDBB_4A.d.ts}

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-C9T5amUN.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { b as AuthenticationActor, n as FaceCaptureManagerState, t as FaceCaptureManager, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-C3RG3oYt.js";
+import { b as AuthenticationActor, n as FaceCaptureManagerState, t as FaceCaptureManager, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-QYEShK-c.js";
 //#region src/modules/authentication/authenticationManager.d.ts
 type AuthenticationState = FaceCaptureManagerState;
 /**

package/dist/{authenticationStateMachine-vqX2IRlb.esm.js → authenticationStateMachine-BrNJAQqh.esm.js}

@@ -1,8 +1,8 @@
 import { i as assign } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-aTSEvqZn.esm.js";
-import { d as FACE_ERROR_CODES, f as isOnDeviceMode } from "./FaceDetectionProvider-DyPUMA8q.esm.js";
-import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-c3noNWxH.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-CRsR2ivT.esm.js";
+import { d as isOnDeviceMode, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-IQUzWgoQ.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./desktopCameraElection-NmoOMLSk.esm.js";
 //#region src/modules/authentication/authenticationErrorUtils.ts
 const AUTH_ERROR_MAP = {
 	SPOOF_ATTEMPT_DETECTED: FACE_ERROR_CODES.SPOOF_ATTEMPT_DETECTED,

package/dist/{backCameraStream-CMvXj4X4.esm.js → backCameraStream-DkOFEXvI.esm.js}

@@ -1,5 +1,5 @@
 import { a as isIOS, c as isIPhone14OrHigher, d as isSafari, i as isDesktop, t as isAndroid } from "./platform-DkcRc9JV.esm.js";
-import { i as requestCameraAccess, n as enumerateVideoDevices, o as stopCameraStream, t as applyTrackConstraints } from "./camera-sIa9ceW2.esm.js";
+import { a as stopCameraStream, n as enumerateVideoDevices, r as requestCameraAccess, t as applyTrackConstraints } from "./camera-E_Kcre4O.esm.js";
 import { t as sleep } from "./ITimerCapability-DgdDzp8G.esm.js";
 import { t as getBrowser } from "./getBrowser-Cbe1C4Tn.esm.js";
 //#region src/internal/camera/backCameraStream.ts
@@ -396,9 +396,6 @@ async function getDesktopCameraStreamResult(options, fallbackLevel = 0) {
 		return getDesktopCameraStreamResult(options, nextLevel);
 	}
 }
-async function getDesktopCameraStream(options, fallbackLevel = 0) {
-	return (await getDesktopCameraStreamResult(options, fallbackLevel)).stream;
-}
 /**
 * Pick the best back-facing device from a list already filtered by label.
 * Prefers the highest megapixel count when labels advertise it, else the first.
@@ -450,43 +447,6 @@ async function getDesktopBackCameraStream(deviceId) {
 		return original;
 	}
 }
-/**
-* Desktop front-camera (selfie) acquisition with verify-and-correct.
-*
-* Counterpart to {@link getDesktopBackCameraStream}. Requesting a front camera
-* uses an *advisory* `facingMode: 'user'` hint, which the browser may ignore —
-* notably on a Surface after the back camera was explicitly opened by deviceId
-* for ID capture, the browser remembers the rear camera as its preferred device
-* and hands it back for the selfie too.
-*
-* The caller supplies an `open(deviceId?)` callback so this stays agnostic to
-* the selfie resolution strategy. We then verify by LABEL only (never
-* facingMode):
-*  1. Open via the callback.
-*  2. If the opened track is NOT a back camera → trust it, return as-is.
-*  3. If it IS a back camera, enumerate and reopen the first non-back device.
-*  4. If there is no non-back device, or the reopen fails → keep the original.
-*
-* Note: "first non-back device" is intentionally simple — on machines that also
-* expose a Windows Hello IR sensor this could pick the IR camera. Accepted
-* tradeoff; revisit with a front-label allowlist if it proves a problem.
-*/
-async function ensureFrontCameraStream(open) {
-	const original = await open();
-	const track = original.getVideoTracks()[0];
-	if (!track || !isBackCameraLabel(track.label)) return original;
-	const frontDevices = (await enumerateVideoDevices()).filter((d) => !isBackCameraLabel(d.label));
-	if (frontDevices.length === 0) return original;
-	const target = frontDevices[0];
-	if (track.getSettings().deviceId === target.deviceId) return original;
-	try {
-		const corrected = await open(target.deviceId);
-		stopCameraStream(original);
-		return corrected;
-	} catch {
-		return original;
-	}
-}
 async function getBackCameraStream(deviceId) {
 	if (isIOS()) return getIOSCameraStream();
 	if (isAndroid()) {
@@ -501,4 +461,4 @@ async function getBackCameraStream(deviceId) {
 	};
 }
 //#endregion
-export { isBackCameraLabel as a, hasBackCamera as i, getBackCameraStream as n, isBackFacingTrack as o, getDesktopCameraStream as r, ensureFrontCameraStream as t };
+export { selectBestBackDevice as a, isBackFacingTrack as i, hasBackCamera as n, isBackCameraLabel as r, getBackCameraStream as t };