@incodetech/core 2.2.0 → 2.3.0-rc.0

package/dist/IWasmUtilCapability-CXXDA5l1.d.ts

@@ -0,0 +1,159 @@
+import { c as WasmPipeline } from "./warmup-Cis2p6O0.js";
+import { _ as MLProviderConfig } from "./createFaceAvatar-BlcTYgJv.js";
+//#region ../infra/src/capabilities/IRecordingCapability.d.ts
+type RecordingPublisher = {
+  getStreamId: () => string | undefined;
+  replaceVideoTrack: (track: MediaStreamTrack) => Promise<void>;
+  destroy: () => void;
+};
+type RecordingConnection = {
+  sessionId: string | undefined;
+  publisher: RecordingPublisher;
+  disconnect: () => Promise<void>;
+};
+type RecordingConnectionEvents = {
+  onSessionConnected?: (sessionId: string | undefined) => void;
+  onSessionDisconnected?: (sessionId: string | undefined) => void;
+  onSessionException?: (params: {
+    name?: string;
+    message?: string;
+    sessionId?: string;
+  }) => void;
+  onPublisherCreated?: (params: {
+    streamId?: string;
+    sessionId?: string;
+  }) => void;
+  onPublisherError?: (params: {
+    message?: string;
+    sessionId?: string;
+    streamId?: string;
+  }) => void;
+};
+type ConnectRecordingParams = {
+  sessionToken: string;
+  stream: MediaStream;
+  events?: RecordingConnectionEvents;
+};
+type IRecordingCapability = {
+  /**
+   * Connects to a recording session and publishes the provided media stream.
+   * Returns a connection handle that can be disconnected and used to manage the publisher.
+   */
+  connect: (params: ConnectRecordingParams) => Promise<RecordingConnection>;
+};
+//#endregion
+//#region ../infra/src/capabilities/IStorageCapability.d.ts
+/**
+ * Storage capability interface for abstracting storage operations.
+ * Enables swapping between browser localStorage and future WASM-based storage.
+ */
+interface IStorageCapability {
+  /**
+   * Retrieves a value from storage.
+   * @param key - The storage key
+   * @returns The stored value or null if not found
+   */
+  get<T>(key: string): Promise<T | null>;
+  /**
+   * Stores a value in storage.
+   * @param key - The storage key
+   * @param value - The value to store (will be serialized)
+   */
+  set<T>(key: string, value: T): Promise<void>;
+  /**
+   * Removes a value from storage.
+   * @param key - The storage key to remove
+   */
+  remove(key: string): Promise<void>;
+  /**
+   * Clears all values from storage.
+   */
+  clear(): Promise<void>;
+}
+//#endregion
+//#region ../infra/src/capabilities/IWasmUtilCapability.d.ts
+type WasmUtilConfig = MLProviderConfig & {
+  pipelines?: WasmPipeline[];
+};
+type VirtualCameraCheckOutput = {
+  canvas: HTMLCanvasElement | null;
+  itr: boolean | null;
+  skipped: boolean | null;
+};
+type IWasmUtilCapability = {
+  /**
+   * Whether the provider has been initialized and is ready to be used.
+   */
+  readonly initialized: boolean;
+  /**
+   * Initializes the provider with the given configuration.
+   * If WASM was already warmed up via `warmupWasm()`, this returns almost instantly.
+   * @param config - Provider configuration including WASM paths
+   */
+  initialize(config: WasmUtilConfig): Promise<void>;
+  /**
+   * Encrypts a base64 image using the WASM utility API.
+   * @param image - Base64 image string (no data URL prefix)
+   * @returns Encrypted string
+   */
+  encryptImage(image: string): string;
+  setSdkVersion(version: string): void;
+  setSdkPlatform(platform: string): void;
+  setDeviceInfo(deviceInfo: object, overrideExisting?: boolean): void;
+  setBrowserInfo(browserInfo: object, overrideExisting?: boolean): void;
+  setCameraInfo(cameraInfo: object, overrideExisting?: boolean): void;
+  setMotionStatus(status: string): void;
+  setBackgroundMode(backgroundMode: boolean): void;
+  /**
+   * @deprecated Compatibility-only no-op since ml-wasm-kit v2.14.49-post1.
+   * Both values are accepted before or after initialization and never invoke
+   * native code. The public `fingerprint` option controls client-side
+   * submission; native fingerprint lifecycle remains owned by WASM. Not
+   * scheduled for removal: the wire stays live so ENG-55971 can restore the
+   * native fingerprint gate without a JS change. Use `setup({ fingerprint })`
+   * for client-side gating.
+   */
+  setOnDeviceMode(enabled: boolean): void;
+  setZc(zc: string): void;
+  setInspectorOpened(opened: boolean): void;
+  /**
+   * Returns whether the DevTools inspector has been detected as open.
+   * Safe to call before WASM initialization (returns the in-memory flag).
+   */
+  getInspectorOpened(): boolean;
+  /**
+   * Toggles the WASM module's production mode. When `true`, the native module
+   * suppresses its verbose debug logging/console output.
+   */
+  setProductionMode(productionMode: boolean): Promise<void>;
+  getMetadata(): string;
+  analyzeFrame(image: ImageData): Promise<void>;
+  getCheck(): string;
+  /**
+   * Gets the current pipeline state. Must be called before setMotionStatus(),
+   * getCheck(), setBackgroundMode(), and getMetadata() for proper metadata generation.
+   */
+  getPipelineState(): string;
+  estimatePerformance(): string;
+  /**
+   * @deprecated Returns `false` for compatibility; scheduled for removal in
+   * 3.0.0. Protected PRC/POC is the authoritative virtual-camera decision
+   * path: use {@link IWasmUtilCapability.prc} followed by
+   * {@link IWasmUtilCapability.poc} instead of inspecting the track label.
+   */
+  isVirtualCamera(label: string | null): boolean;
+  prc(): Promise<void>;
+  poc(output: VirtualCameraCheckOutput): Promise<void>;
+  rsp(): Promise<void>;
+  ssl(): void;
+  stl(): void;
+  osv(): void;
+  oev(): void;
+  ckvcks(data: ArrayBuffer): void;
+  /**
+   * Disposes of resources and resets initialization state.
+   */
+  dispose(): Promise<void>;
+};
+//#endregion
+export { IRecordingCapability as a, IStorageCapability as i, VirtualCameraCheckOutput as n, RecordingConnection as o, WasmUtilConfig as r, IWasmUtilCapability as t };

package/dist/{MotionSensorProvider-DGiV77J_.esm.js → MotionSensorProvider-BgTYwg9L.esm.js}

@@ -1,4 +1,4 @@
-import { n as resolveSessionStorage } from "./safeStorage-Ep56I-f_.esm.js";
+import { n as resolveSessionStorage } from "./safeStorage-B-trhxg6.esm.js";
 //#region ../infra/src/providers/browser/MotionSensorProvider.ts
 const MOTION_PERMISSION_GRANTED_KEY = "motionSensorsPermissionsGranted";
 const MOTION_PERMISSION_DENIED_KEY = "motionSensorsPermissionsDenied";

package/dist/{deepsightService-DLVQS_RH.d.ts → StreamCanvasCapture-B3YT2Bt6.d.ts}

@@ -1,43 +1,6 @@
+import { y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
+import "./IWasmUtilCapability-CXXDA5l1.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { o as IncodeCanvas } from "./IStorageCapability-ORkQfK3F.js";
-//#region ../infra/src/media/StreamCanvasCapture.d.ts
-type StreamCanvasCaptureOptions = {
-  fps?: number;
-  width?: number;
-  height?: number;
-};
-type StreamCanvasCaptureEventMap = {
-  frame: Event;
-};
-declare class StreamCanvasCapture {
-  private video;
-  private canvas;
-  private ctx;
-  private rafId;
-  private lastFrameTimeSeconds;
-  private lastTickTimeMs;
-  private hasFrame;
-  private disposed;
-  private eventTarget;
-  constructor(stream: CameraStream, options?: StreamCanvasCaptureOptions);
-  addEventListener(type: keyof StreamCanvasCaptureEventMap, listener: EventListenerOrEventListenerObject | null, options?: boolean | AddEventListenerOptions): void;
-  removeEventListener(type: keyof StreamCanvasCaptureEventMap, listener: EventListenerOrEventListenerObject | null, options?: boolean | EventListenerOptions): void;
-  /**
-   * Returns the latest cached frame as an {@link IncodeCanvas}.
-   */
-  getLatestCanvas(): IncodeCanvas | null;
-  /**
-   * Returns the latest cached frame as raw {@link ImageData}.
-   */
-  getLatestFrame(): ImageData | null;
-  /**
-   * Disposes internal resources and stops the capture loop.
-   */
-  dispose(): void;
-  private rafLoop;
-  private tick;
-}
-//#endregion
 //#region ../infra/src/capabilities/IMotionSensorCapability.d.ts
 type MotionStatus = 'PASS' | 'FAIL' | 'UNCLEAR';
 type MotionPermissionState = 'granted' | 'denied' | 'not-required';
@@ -86,7 +49,6 @@ type DeepsightService = {
   initialize(disableIpify?: boolean, disableFingerprint?: boolean): Promise<void>;
   requestMotionPermission(): Promise<'granted' | 'denied' | 'not-required'>;
   startMotionSensors(): Promise<void>;
-  primeWasmMotionSensor(): Promise<void>;
   stopMotionSensors(): void;
   checkVirtualCamera(videoTrack: MediaStreamTrack): Promise<boolean>;
   performVirtualCameraCheck(sessionToken: string | null, source: FrameSource): Promise<void>;
@@ -95,6 +57,12 @@ type DeepsightService = {
    */
   performPrcCheck(params: DeepsightPrcCheckParams): Promise<void>;
   analyzeFrame(imageData: ImageData): Promise<void>;
+  /**
+   * Finalizes non-frame DeepSight metadata after a protected WASM capture.
+   * The protected runtime owns frame analysis, so this intentionally does not
+   * call the host-supplied `analyzeFrame` fallback.
+   */
+  finalizeProtectedCaptureMetadata(): Promise<void>;
   getMetadata(): string;
   getMotionStatus(): string;
   getAnalysisStatus(): string;
@@ -105,4 +73,49 @@ type DeepsightPrcCheckParams = {
   constraints: MediaStreamConstraints;
 };
 //#endregion
-export { StreamCanvasCapture as n, DeepsightService as t };
+//#region ../infra/src/media/StreamCanvasCapture.d.ts
+type StreamCanvasCaptureOptions = {
+  fps?: number;
+  width?: number;
+  height?: number;
+  /**
+   * Keep a canvas cache updated from requestAnimationFrame. Defaults to true.
+   * Set false when a caller only needs an occasional presentation snapshot;
+   * `getLatestCanvas`/`getLatestFrame` will draw the current video frame on
+   * demand without running a duplicate per-frame loop.
+   */
+  continuous?: boolean;
+};
+type StreamCanvasCaptureEventMap = {
+  frame: Event;
+};
+declare class StreamCanvasCapture {
+  private video;
+  private canvas;
+  private ctx;
+  private rafId;
+  private lastFrameTimeSeconds;
+  private lastTickTimeMs;
+  private hasFrame;
+  private disposed;
+  private eventTarget;
+  constructor(stream: CameraStream, options?: StreamCanvasCaptureOptions);
+  addEventListener(type: keyof StreamCanvasCaptureEventMap, listener: EventListenerOrEventListenerObject | null, options?: boolean | AddEventListenerOptions): void;
+  removeEventListener(type: keyof StreamCanvasCaptureEventMap, listener: EventListenerOrEventListenerObject | null, options?: boolean | EventListenerOptions): void;
+  /**
+   * Returns the latest cached frame as an {@link IncodeCanvas}.
+   */
+  getLatestCanvas(): IncodeCanvas | null;
+  /**
+   * Returns the latest cached frame as raw {@link ImageData}.
+   */
+  getLatestFrame(): ImageData | null;
+  /**
+   * Disposes internal resources and stops the capture loop.
+   */
+  dispose(): void;
+  private rafLoop;
+  private tick;
+}
+//#endregion
+export { DeepsightService as n, StreamCanvasCapture as t };

package/dist/{StreamCanvasCapture-D2XcXCZ4.esm.js → StreamCanvasCapture-C9jtgBdT.esm.js}

@@ -1,4 +1,4 @@
-import { t as IncodeCanvas } from "./canvas-E1zGkel4.esm.js";
+import { t as IncodeCanvas } from "./canvas-BxFzWTt-.esm.js";
 //#region ../infra/src/media/StreamCanvasCapture.ts
 var StreamCanvasCapture = class {
 	constructor(stream, options) {
@@ -28,7 +28,7 @@ var StreamCanvasCapture = class {
 		try {
 			this.video.play();
 		} catch {}
-		this.rafLoop(intervalMs);
+		if (options?.continuous !== false) this.rafLoop(intervalMs);
 	}
 	addEventListener(type, listener, options) {
 		this.eventTarget.addEventListener(type, listener, options);

package/dist/{addressSearch-D1XpBdUS.esm.js → addressSearch-BRSu_aGA.esm.js}

@@ -1,6 +1,6 @@
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 const usStateOptions = Object.values({
 	AL: {

package/dist/advanceableErrors-CpF2cBy6.esm.js

@@ -0,0 +1,21 @@
+import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
+//#region src/internal/orchestration/advanceableErrors.ts
+const VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE = "VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED";
+/**
+* Module terminal-error codes an orchestrator should treat as "advance to the
+* next step" rather than "fail the flow". Decided here, at the orchestration
+* layer, so every consumer behaves identically. "Advanceable" is independent of
+* "retryable" (the module's own concern): it only decides what the flow does
+* *after* a terminal error. Note `NO_MORE_ATTEMPTS` subsumes the former
+* `USER_IS_NOT_RECOGNIZED` entry — see the contract test for the full matrix.
+*/
+const ADVANCEABLE_ERROR_CODES = [
+	FACE_ERROR_CODES.NONEXISTENT_CUSTOMER,
+	FACE_ERROR_CODES.HINT_NOT_PROVIDED,
+	FACE_ERROR_CODES.NO_MORE_ATTEMPTS,
+	VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE
+];
+/** True when the given code is a module terminal error the flow should advance past rather than fail on. */
+const isAdvanceableError = (moduleErrorCode) => moduleErrorCode !== void 0 && ADVANCEABLE_ERROR_CODES.includes(moduleErrorCode);
+//#endregion
+export { isAdvanceableError as n, VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE as t };

package/dist/ae-signature.d.ts

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-CQQ99QOI.js";
-import { _ as getDefaultConsentChecks, a as ElectronicSignatureConfig, h as areAllConsented, i as ConsentKey, r as ConsentChecks, s as ElectronicSignatureDocument, t as AE_CONSENT_KEYS } from "./types-DVmXIdzW.js";
-import { n as ElectronicSignatureState, o as electronicSignatureMachine } from "./electronicSignatureManager-CcUXQZS7.js";
+import { S as getDefaultConsentChecks, a as ElectronicSignatureConfig, b as areAllConsented, i as ConsentKey, r as ConsentChecks, s as ElectronicSignatureDocument, t as AE_CONSENT_KEYS } from "./types-D0gekt4U.js";
+import { n as ElectronicSignatureState, o as electronicSignatureMachine } from "./electronicSignatureManager-Ds-KEVTq.js";
 import "./electronic-signature.js";
 //#region src/modules/ae-signature/index.d.ts
 type AeSignatureConfig = Omit<ElectronicSignatureConfig, 'variant'>;
@@ -14,6 +14,8 @@ declare function createAeSignatureManager(options: {
   confirmFile(): void;
   viewDocument(url: string): void;
   closeDocumentView(): void;
+  viewApplicationForm(): void;
+  closeApplicationForm(): void;
   sign(): void;
   finish(): void;
   retry(): void;

package/dist/ae-signature.esm.js

@@ -1,4 +1,4 @@
-import { c as getDefaultConsentChecks, i as AE_CONSENT_KEYS, o as areAllConsented, r as electronicSignatureMachine, t as createElectronicSignatureManager } from "./electronicSignatureManager-DGbAJ00W.esm.js";
+import { c as areAllConsented, i as AE_CONSENT_KEYS, r as electronicSignatureMachine, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-DzulxM4_.esm.js";
 //#region src/modules/ae-signature/index.ts
 function createAeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/antifraud.esm.js

@@ -1,3 +1,3 @@
-import { t as antifraudMachine } from "./antifraudStateMachine-Bf_JVNwn.esm.js";
-import { n as createAntifraudManagerFromActor, t as createAntifraudManager } from "./antifraudManager-CQFNgSPt.esm.js";
+import { t as antifraudMachine } from "./antifraudStateMachine-BHxehiJZ.esm.js";
+import { n as createAntifraudManagerFromActor, t as createAntifraudManager } from "./antifraudManager-Bg9ynGum.esm.js";
 export { antifraudMachine, createAntifraudManager, createAntifraudManagerFromActor };

package/dist/{antifraudManager-CQFNgSPt.esm.js → antifraudManager-Bg9ynGum.esm.js}

@@ -1,7 +1,7 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-DYiyoSlx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as antifraudMachine } from "./antifraudStateMachine-Bf_JVNwn.esm.js";
+import { t as antifraudMachine } from "./antifraudStateMachine-BHxehiJZ.esm.js";
 //#region src/modules/antifraud/antifraudActor.ts
 function createAntifraudActor() {
 	return createActor(antifraudMachine).start();

package/dist/{antifraudStateMachine-Bf_JVNwn.esm.js → antifraudStateMachine-BHxehiJZ.esm.js}

@@ -1,5 +1,5 @@
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
+import { t as endpoints } from "./endpoints-D3B9mUHh.esm.js";
 import { t as setup } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 //#region src/modules/antifraud/antifraudServices.ts

package/dist/{apiError-BA1d_au0.esm.js → apiError-D0v5hFyN.esm.js}

@@ -1,4 +1,4 @@
-import { l as trueSightLog, u as categoryForEndpoint } from "./trueSightService---iW2KKJ.esm.js";
+import { l as trueSightLog, u as categoryForEndpoint } from "./trueSightService-CKrrfV0Q.esm.js";
 //#region src/internal/http/apiError.ts
 /**
 * Incode API error.
@@ -46,6 +46,18 @@ function isConnectivityError(err) {
 	return isHttpError(err) && err.status === 0;
 }
 /**
+* True when an error represents a failure that is the server's fault (or the
+* network's) rather than the caller's — HTTP `5xx`, or connectivity loss
+* (see {@link isConnectivityError}). Useful for callers that want to offer a
+* "Try again" retry only for these, while a `4xx` (the caller sent something
+* the backend rejected) is left for the caller to handle on its own terms —
+* retrying the identical payload would just fail again.
+*/
+function isServerError(err) {
+	if (isConnectivityError(err)) return true;
+	return err instanceof IncodeApiError && (err.httpStatus >= 500 || err.httpStatus === 0);
+}
+/**
 * Convert an unknown error caught from `api.{get,post,...}` into an
 * `IncodeApiError`, extracting the Incode-specific status and message from
 * the response body when present. The original error is preserved on
@@ -70,4 +82,4 @@ function logHttpFailureBreadcrumb(message, endpoint) {
 	} catch {}
 }
 //#endregion
-export { isConnectivityError as n, toIncodeApiError as r, IncodeApiError as t };
+export { toIncodeApiError as i, isConnectivityError as n, isServerError as r, IncodeApiError as t };

package/dist/authentication.d.ts

@@ -1,4 +1,4 @@
-import { b as createAuthenticationActor, v as AuthenticationActor, x as authenticationMachine, y as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-BxWPpxyd.js";
-import { t as AuthenticationConfig } from "./types-EELWyWpd.js";
-import { n as AuthenticationState, r as createAuthenticationManager, t as AuthenticationManager } from "./authenticationManager-BBMGTcwW.js";
+import { C as authenticationMachine, S as createAuthenticationActor, b as AuthenticationActor, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-CvtqcLxs.js";
+import { t as AuthenticationConfig } from "./types-ZT1XFIJ8.js";
+import { n as AuthenticationState, r as createAuthenticationManager, t as AuthenticationManager } from "./authenticationManager-DXTIUcma.js";
 export { type AuthenticationActor, type AuthenticationConfig, type AuthenticationManager, type AuthenticationState, type CreateAuthenticationActorOptions, authenticationMachine, createAuthenticationActor, createAuthenticationManager };

package/dist/authentication.esm.js

@@ -1,3 +1,3 @@
-import { t as authenticationMachine } from "./authenticationStateMachine-xzi-vnvE.esm.js";
-import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-zh9TC62P.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-DJ0zUm-A.esm.js";
+import { r as createAuthenticationActor, t as createAuthenticationManager } from "./authenticationManager-C4B4-29g.esm.js";
 export { authenticationMachine, createAuthenticationActor, createAuthenticationManager };

package/dist/{authenticationManager-zh9TC62P.esm.js → authenticationManager-C4B4-29g.esm.js}

@@ -1,9 +1,9 @@
-import { r as WasmUtilProvider } from "./safeStorage-Ep56I-f_.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-k-FDkC4W.esm.js";
-import { n as eventModuleNames } from "./events-DYiyoSlx.esm.js";
+import { l as BrowserStorageProvider } from "./setup-msLybMbC.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-B-trhxg6.esm.js";
+import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CVnZ0fa5.esm.js";
-import { t as authenticationMachine } from "./authenticationStateMachine-xzi-vnvE.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-pCmG4MeF.esm.js";
+import { t as authenticationMachine } from "./authenticationStateMachine-DJ0zUm-A.esm.js";
 //#region src/modules/authentication/authenticationActor.ts
 function createAuthenticationActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{authenticationManager-BBMGTcwW.d.ts → authenticationManager-DXTIUcma.d.ts}

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-CQQ99QOI.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { n as FaceCaptureManagerState, t as FaceCaptureManager, v as AuthenticationActor, y as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-BxWPpxyd.js";
+import { b as AuthenticationActor, n as FaceCaptureManagerState, t as FaceCaptureManager, x as CreateAuthenticationActorOptions } from "./faceCaptureManagerFactory-CvtqcLxs.js";
 //#region src/modules/authentication/authenticationManager.d.ts
 type AuthenticationState = FaceCaptureManagerState;
 /**
@@ -22,6 +22,9 @@ declare function createAuthenticationManagerFromActor(actor: AuthenticationActor
   reset(): void;
   retryCapture(): void;
   capture(): void;
+  goToManualUpload(): void;
+  manualUploadSelectFile(file: File): void;
+  manualUploadContinue(): void;
 };
 /**
  * Creates an authentication manager instance for handling face authentication flow.
@@ -69,6 +72,9 @@ declare function createAuthenticationManager(options: CreateAuthenticationActorO
   reset(): void;
   retryCapture(): void;
   capture(): void;
+  goToManualUpload(): void;
+  manualUploadSelectFile(file: File): void;
+  manualUploadContinue(): void;
 };
 type AuthenticationManager = FaceCaptureManager;
 //#endregion

package/dist/{authenticationStateMachine-xzi-vnvE.esm.js → authenticationStateMachine-DJ0zUm-A.esm.js}

@@ -1,12 +1,9 @@
-import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
-import { t as addDeviceStats } from "./stats-B0nFKawG.esm.js";
 import { i as assign } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-Cd-04W_X.esm.js";
-import { i as prepareOnDeviceFaceUpload, n as isOnDeviceMode, r as postOnDeviceFaceResults, t as defaultPrepareFaceUpload } from "./onDeviceFaceResults-CUHwyZT4.esm.js";
-import { t as getDeviceClass } from "./getDeviceClass-9y-kbVDw.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-BSextack.esm.js";
+import { u as isOnDeviceMode } from "./FaceDetectionProvider-DTetAE8H.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-DQ5-F2oW.esm.js";
 //#region src/modules/authentication/authenticationErrorUtils.ts
 const AUTH_ERROR_MAP = {
 	SPOOF_ATTEMPT_DETECTED: FACE_ERROR_CODES.SPOOF_ATTEMPT_DETECTED,
@@ -42,46 +39,6 @@ const isTerminalAuthError = (response, attemptsRemaining) => {
 	return false;
 };
 //#endregion
-//#region src/modules/authentication/authenticationUploadService.ts
-async function uploadAuthFace(params) {
-	try {
-		const payload = {
-			base64Image: params.encryptedBase64Image,
-			faceCoordinates: params.faceCoordinates ?? void 0,
-			encrypted: true,
-			clientInfo: { deviceClass: getDeviceClass() },
-			metadata: params.metadata ?? void 0,
-			...params.authHint !== void 0 && { hint: params.authHint }
-		};
-		const query = {};
-		if (params.recordingId) query.recordingId = params.recordingId;
-		const res = await api.post(endpoints.authenticate, payload, {
-			signal: params.signal,
-			query
-		});
-		if (!res.ok) throw new Error(`POST ${endpoints.authenticate} failed: ${res.status} ${res.statusText}`);
-		if (params.deepsightService) addDeviceStats({
-			frontIdStatsAnalysisStatus: "",
-			backIdStatsAnalysisStatus: "",
-			selfieStatsAnalysisStatus: params.deepsightService.getAnalysisStatus(),
-			motionStatus: params.deepsightService.getMotionStatus()
-		});
-		return res.data;
-	} catch (error) {
-		const errorCode = getAuthErrorCodeFromHttpError(error);
-		if (errorCode) throw new Error(errorCode);
-		throw new Error(FACE_ERROR_CODES.SERVER);
-	}
-}
-const getAuthErrorCodeFromHttpError = (error) => {
-	const err = error;
-	if (err.ok !== false || typeof err.status !== "number") return;
-	if (err.status !== 400) return FACE_ERROR_CODES.SERVER;
-	const errorName = err.data?.error?.name;
-	if (!errorName) return FACE_ERROR_CODES.BAD_REQUEST;
-	return AUTH_ERROR_MAP[errorName] ?? FACE_ERROR_CODES.BAD_REQUEST;
-};
-//#endregion
 //#region src/modules/authentication/authenticationStateMachine.ts
 /**
 * Narrow the base machine's opaque `uploadResponse` (Record<string, unknown>)
@@ -90,22 +47,9 @@ const getAuthErrorCodeFromHttpError = (error) => {
 const authUploadResponse = (context) => context.uploadResponse;
 const authenticationMachine = faceCaptureMachine.provide({
 	actors: {
-		prepareFaceUpload: fromPromise(async ({ input }) => {
-			const ctx = input;
-			return isOnDeviceMode(ctx.config) ? prepareOnDeviceFaceUpload(ctx) : defaultPrepareFaceUpload(ctx);
-		}),
-		uploadFace: fromPromise(async ({ input, signal }) => {
-			const ctx = input;
-			if (isOnDeviceMode(ctx.config)) return postOnDeviceFaceResults(ctx, signal);
-			return uploadAuthFace({
-				encryptedBase64Image: ctx.encryptedBase64Image,
-				faceCoordinates: ctx.faceCoordinates,
-				authHint: ctx.authHint,
-				metadata: ctx.deepsightService?.getMetadata(),
-				recordingId: ctx.uploadRecordingId,
-				deepsightService: ctx.deepsightService ?? void 0,
-				signal
-			});
+		protectedFaceController: createDefaultProtectedFaceControllerActor({
+			target: PROTECTED_CAPTURE_TARGET.authentication,
+			delivery: "protected"
 		}),
 		processFace: fromPromise(async () => ({}))
 	},

package/dist/avatar.d.ts

@@ -1,3 +1,2 @@
-import { n as AvatarFaceState } from "./IFaceAvatarCapability-BrL19G0s.js";
-import { i as createFaceAvatar, n as FaceAvatarHandle, r as FaceAvatarOptions, t as AvatarId } from "./createFaceAvatar-BEj18KXi.js";
+import { i as createFaceAvatar, n as FaceAvatarHandle, o as AvatarFaceState, r as FaceAvatarOptions, t as AvatarId } from "./createFaceAvatar-BlcTYgJv.js";
 export { type AvatarFaceState, type AvatarId, type FaceAvatarHandle, type FaceAvatarOptions, createFaceAvatar };

package/dist/avatar.esm.js

@@ -1,2 +1,2 @@
-import { t as createFaceAvatar } from "./createFaceAvatar-DQKaRise.esm.js";
+import { t as createFaceAvatar } from "./createFaceAvatar-BNHdeFj8.esm.js";
 export { createFaceAvatar };