@incodetech/core 2.2.0 → 2.3.0-rc.1

package/dist/selfie.esm.js

@@ -1,53 +1,15 @@
-import { r as WasmUtilProvider } from "./safeStorage-Ep56I-f_.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-k-FDkC4W.esm.js";
-import { n as eventModuleNames } from "./events-DYiyoSlx.esm.js";
-import { i as assign, s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
+import { l as BrowserStorageProvider } from "./setup-BWG-hivt.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-B-trhxg6.esm.js";
+import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
+import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-Cd-04W_X.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CVnZ0fa5.esm.js";
-import { r as processFace } from "./selfieErrorUtils-C2PYBVsp.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CHV_WNst.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-Bj6B2ZVy.esm.js";
-import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-GpvMuz9o.esm.js";
-//#region src/modules/selfie/selfieCaptureOnlyStateMachine.ts
-/**
-* Performs local finalization of a captured face frame: stops local video
-* recording (if any), runs deepsight metadata extraction, and assembles the
-* rich payload delivered to the integrator's `onCapture` callback.
-*/
-async function finalizeFaceCaptureOnly(ctx, signal) {
-	const canvas = ctx.capturedImage;
-	if (!canvas) throw new Error("selfieCaptureOnly: no captured image");
-	let videoBase64;
-	try {
-		videoBase64 = (await ctx.recordingService?.stopAndGetVideo())?.videoBase64;
-	} catch {
-		videoBase64 = void 0;
-	}
-	if (signal.aborted) throw new DOMException("Aborted", "AbortError");
-	let metadata = "";
-	try {
-		if (ctx.deepsightService) {
-			const imageData = canvas.getImageData();
-			if (imageData) await ctx.deepsightService.analyzeFrame(imageData);
-			if (signal.aborted) throw new DOMException("Aborted", "AbortError");
-			metadata = ctx.deepsightService.getMetadata();
-		}
-	} catch (error) {
-		if (error?.name === "AbortError") throw error;
-		metadata = "";
-	}
-	const imageBase64 = canvas.getBase64Image() ?? "";
-	const blobData = canvas.getBlobData();
-	if (!blobData) throw new Error("selfieCaptureOnly: failed to build image blob");
-	return {
-		imageBase64,
-		blob: blobData.blob,
-		url: blobData.url,
-		metadata,
-		videoBase64
-	};
-}
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-bkAlr5d8.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-B7Ms6pSs.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-CX3hJGKc.esm.js";
+import { r as processFace } from "./selfieErrorUtils-UiQ46EBa.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-Bzx41R8d.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-B-2c1n_x.esm.js";
+import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-BjzPjJ_p.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base
 * face-capture state tree; only the upload/process step is local instead of
@@ -55,37 +17,13 @@ async function finalizeFaceCaptureOnly(ctx, signal) {
 */
 const selfieCaptureOnlyMachine = faceCaptureMachine.provide({
 	actors: {
-		/**
-		* Pre-upload encryption + virtual-camera check are skipped: captureOnly is
-		* offline (no backend calls) and hands the canvas to the integrator
-		* unencrypted. The downstream `encryptedBase64Image`/`recordingId` fields
-		* are inert because `uploadFace` no longer reads them.
-		*/
-		prepareFaceUpload: fromPromise(async () => ({
-			encryptedBase64Image: "",
-			recordingId: null
-		})),
-		/**
-		* "Upload" becomes local finalize. The rich payload is routed to the
-		* typed `captureOnlyResult` context slot by the body-overridden
-		* `setUploadResponseFromEvent` action below, rather than the loose
-		* `uploadResponse: Record<string, unknown>` channel the base flow uses.
-		*/
-		uploadFace: fromPromise(async ({ input, signal }) => {
-			return await finalizeFaceCaptureOnly(input, signal);
+		protectedFaceController: createDefaultProtectedFaceControllerActor({
+			target: PROTECTED_CAPTURE_TARGET.selfie,
+			delivery: "local"
 		}),
 		/** No backend processing in captureOnly. */
 		processFace: fromPromise(async () => ({}))
 	},
-	actions: { 
-	/**
-	* Override the regular upload-response handler to populate the typed
-	* `captureOnlyResult` slot the captureOnly manager reads on `finished`.
-	* The regular `uploadResponse` channel is left undefined — the variant's
-	* guards (`hasUploadValidationError`, `isTerminalUploadError`) both
-	* return false, so nothing downstream needs it.
-	*/
-setUploadResponseFromEvent: assign({ captureOnlyResult: ({ event }) => event.output }) },
 	guards: {
 		hasUploadValidationError: () => false,
 		isTerminalUploadError: () => false

package/dist/{selfieErrorUtils-C2PYBVsp.esm.js → selfieErrorUtils-UiQ46EBa.esm.js}

@@ -1,8 +1,8 @@
 import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
-import { t as addDeviceStats } from "./stats-B0nFKawG.esm.js";
-import { t as getDeviceClass } from "./getDeviceClass-9y-kbVDw.esm.js";
+import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
+import { t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
+import { t as getDeviceClass } from "./getDeviceClass-5NYZg9s6.esm.js";
 //#region src/modules/selfie/selfieUploadService.ts
 /**
 * Uploads a selfie image to the backend.
@@ -36,6 +36,32 @@ async function uploadSelfie({ encryptedBase64Image, faceCoordinates, signal, met
 	}
 }
 /**
+* Uploads a selfie the user picked from device storage. Same endpoint and
+* encryption as {@link uploadSelfie}, plus `captureType=UPLOAD`; there is no
+* camera, so no face coordinates, deepsight metadata or recording id.
+*/
+async function uploadManualSelfie({ base64Image, dependencies, imageType = "selfie", signal }) {
+	try {
+		const payload = {
+			base64Image: (await dependencies.getWasmUtil()).encryptImage(base64Image),
+			encrypted: true,
+			clientInfo: { deviceClass: getDeviceClass() }
+		};
+		const res = await api.post(endpoints.selfie, payload, {
+			signal,
+			query: {
+				imageType,
+				captureType: "UPLOAD"
+			}
+		});
+		if (!res.ok) throw new Error(`POST ${endpoints.selfie} failed: ${res.status} ${res.statusText}`);
+		return res.data;
+	} catch (error) {
+		const errorCode = getFaceErrorCodeFromHttpError(error);
+		throw withTransportStatus(new Error(errorCode ?? FACE_ERROR_CODES.SERVER), error);
+	}
+}
+/**
 * Copies the HTTP status of `source` onto `target`. The code alone cannot say
 * whether the request got a verdict or never reached the backend — a network
 * failure and a 5xx both map to `SERVER_ERROR` — so a caller that retries
@@ -87,4 +113,4 @@ const validateUploadResponse = ({ config, response }) => {
 	if (config.validateHeadCover && response.hasHeadCover) return FACE_ERROR_CODES.HEAD_COVER;
 };
 //#endregion
-export { uploadSelfie as i, validateUploadResponse as n, processFace as r, getFaceErrorCodeFromUnknown as t };
+export { uploadSelfie as a, uploadManualSelfie as i, validateUploadResponse as n, processFace as r, getFaceErrorCodeFromUnknown as t };

package/dist/{selfieManager-DwlCppg0.d.ts → selfieManager-4RRLi21P.d.ts}

@@ -1,15 +1,6 @@
 import { t as Manager } from "./Manager-CQQ99QOI.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-BxWPpxyd.js";
-//#region src/modules/selfie/selfieUploadService.d.ts
-type ProcessFaceImageType = 'selfie' | 'videoSelfie';
-type ProcessFaceResponse = {
-  faceMatch: boolean;
-  confidence: number;
-  existingUser: boolean;
-};
-declare function processFace(imageType?: ProcessFaceImageType, signal?: AbortSignal): Promise<ProcessFaceResponse>;
-//#endregion
+import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-BeUl8fl1.js";
 //#region src/modules/selfie/selfieManager.d.ts
 type SelfieState = FaceCaptureManagerState;
 /**
@@ -31,6 +22,9 @@ declare function createSelfieManagerFromActor(actor: SelfieActor, visibilityObse
   reset(): void;
   retryCapture(): void;
   capture(): void;
+  goToManualUpload(): void;
+  manualUploadSelectFile(file: File): void;
+  manualUploadContinue(): void;
 };
 /**
  * Creates a selfie manager instance for handling selfie capture flow.
@@ -71,7 +65,10 @@ declare function createSelfieManager(options: CreateSelfieActorOptions): Manager
   reset(): void;
   retryCapture(): void;
   capture(): void;
+  goToManualUpload(): void;
+  manualUploadSelectFile(file: File): void;
+  manualUploadContinue(): void;
 };
 type SelfieManager = FaceCaptureManager;
 //#endregion
-export { ProcessFaceResponse as a, createSelfieManagerFromActor as i, SelfieState as n, processFace as o, createSelfieManager as r, SelfieManager as t };
+export { createSelfieManagerFromActor as i, SelfieState as n, createSelfieManager as r, SelfieManager as t };

package/dist/{selfieManager-Bj6B2ZVy.esm.js → selfieManager-B-2c1n_x.esm.js}

@@ -1,9 +1,9 @@
-import { r as WasmUtilProvider } from "./safeStorage-Ep56I-f_.esm.js";
-import { t as BrowserStorageProvider } from "./BrowserStorageProvider-k-FDkC4W.esm.js";
-import { n as eventModuleNames } from "./events-DYiyoSlx.esm.js";
+import { l as BrowserStorageProvider } from "./setup-BWG-hivt.esm.js";
+import { r as WasmUtilProvider } from "./safeStorage-B-trhxg6.esm.js";
+import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
 import { s as createActor } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CVnZ0fa5.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-CHV_WNst.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-B7Ms6pSs.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-Bzx41R8d.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/selfieStateMachine-Bzx41R8d.esm.js

@@ -0,0 +1,69 @@
+import { i as assign } from "./xstate.esm-BuFLFuzz.esm.js";
+import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, r as manualFaceUploadMachine, t as faceCaptureMachine } from "./faceCaptureSetup-bkAlr5d8.esm.js";
+import { c as isOnDeviceMode } from "./FaceDetectionProvider-BfhWkK90.esm.js";
+import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-CX3hJGKc.esm.js";
+import { i as uploadManualSelfie, n as validateUploadResponse, r as processFace } from "./selfieErrorUtils-UiQ46EBa.esm.js";
+//#region src/modules/selfie/selfieStateMachine.ts
+/**
+* Validates like the camera path does: a 200 that reports lenses, a mask or
+* failed liveness is still a rejection, and throwing lets the child machine
+* spend a retry and map the code to copy.
+*/
+const manualUploadMachine = manualFaceUploadMachine.provide({ actors: {
+	protectedFaceController: createDefaultProtectedFaceControllerActor({
+		target: PROTECTED_CAPTURE_TARGET.selfie,
+		delivery: "protected"
+	}),
+	uploadFile: fromPromise(async ({ input, signal }) => {
+		const { base64Image, config, dependencies } = input;
+		const validationError = validateUploadResponse({
+			config,
+			response: await uploadManualSelfie({
+				base64Image,
+				dependencies,
+				signal
+			})
+		});
+		if (validationError) throw new Error(validationError);
+	})
+} });
+/**
+* The selfie capture state machine.
+*
+* Note: Uses AnyStateMachine type for declaration file portability.
+* Type safety is ensured via the machine configuration.
+*/
+const selfieMachine = faceCaptureMachine.provide({
+	actors: {
+		manualUploadMachine,
+		processFace: fromPromise(async ({ input, signal }) => {
+			if (isOnDeviceMode(input.config)) return {};
+			return processFace("selfie", signal);
+		})
+	},
+	actions: {
+		prepareStreamForRetry: () => void 0,
+		setUploadErrorFromUploadValidation: assign({ uploadError: ({ context }) => {
+			if (isOnDeviceMode(context.config)) return;
+			return validateUploadResponse({
+				config: context.config,
+				response: context.uploadResponse
+			}) ?? FACE_ERROR_CODES.SERVER;
+		} })
+	},
+	guards: {
+		hasUploadValidationError: ({ context }) => {
+			if (isOnDeviceMode(context.config)) return false;
+			return validateUploadResponse({
+				config: context.config,
+				response: context.uploadResponse
+			}) !== void 0;
+		},
+		isTerminalUploadError: () => false,
+		hasManualUploadEnabled: ({ context }) => context.config.manualUploadSelfieCapture === true
+	}
+});
+//#endregion
+export { selfieMachine as t };

package/dist/{session-BFdLgN4i.esm.js → session-3LmvAU4S.esm.js}

@@ -1,9 +1,8 @@
 import { n as getApi } from "./api-Bx3gKW_y.esm.js";
-import { h as noteSessionCreated, l as trueSightLog } from "./trueSightService---iW2KKJ.esm.js";
-import "./sessionInitializer-dlfDehHk.esm.js";
-import { t as endpoints } from "./endpoints-CCzL3XD_.esm.js";
-import "./trueSight-B_icM8r2.esm.js";
-import { r as toIncodeApiError } from "./apiError-BA1d_au0.esm.js";
+import { g as noteSessionCreated, l as trueSightLog } from "./trueSightService-BN-Hzw82.esm.js";
+import "./sessionInitializer-BFk33E67.esm.js";
+import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
+import { i as toIncodeApiError } from "./apiError-Budb6m6w.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic

package/dist/session.d.ts

@@ -1,13 +1,5 @@
-import { a as RegulationTypes } from "./types-KPvmag_B.js";
+import { t as DeviceFingerprintResult } from "./types-DgDvvzg0.js";
 import { n as FinishStatus, r as GetFinishStatusFn, s as getFinishStatus } from "./flowCompletionService-BlAHsKyv.js";
-//#region src/internal/fingerprint/types.d.ts
-type DeviceFingerprintResult = {
-  success: boolean;
-  sessionStatus: string;
-  showMandatoryConsent?: boolean;
-  regulationType?: RegulationTypes;
-};
-//#endregion
 //#region src/internal/session/sessionService.d.ts
 type CreateSessionOptions = {
   /** The configuration/flow ID from the Incode dashboard */
@@ -196,6 +188,13 @@ type Features = {
 };
 //#endregion
 //#region src/internal/session/sessionInitializer.d.ts
+/**
+ * Resolves once the device-fingerprint step of the current session
+ * activation has settled (submitted, failed, or skipped) — with the backend's
+ * result when there is one. Resolves immediately when no activation is in
+ * flight. Pairs with `initializeSession({ awaitFingerprint: false })`.
+ */
+declare function whenSessionFingerprintSettled(): Promise<DeviceFingerprintResult | undefined>;
 type SessionInitOptions = {
   /**
    * Session token returned by `createSession`. Persisted on the HTTP client
@@ -207,12 +206,23 @@ type SessionInitOptions = {
    * token. Application code should always pass `token` explicitly.
    */
   token?: string;
-  /** Custom hosting app name for fingerprint */
+  /**
+   * Custom hosting app name for fingerprint. Defaults to the value given to
+   * `setup({ hostingApp })`, so internal activations inherit the host identity.
+   */
   hostingApp?: string;
   /** Abort signal for cancellation */
   signal?: AbortSignal;
   /** Set to `true` to preload Flow configuration during session activation. */
   preloadFlow?: boolean;
+  /**
+   * `false` resolves as soon as the feature config is in, leaving the device
+   * fingerprint (thumbmark + IP lookup + submit) to finish in the background;
+   * `fingerprintSuccess`/`fingerprintResult` on the result are then not yet
+   * known — read them via `whenSessionFingerprintSettled()`. Default `true`
+   * keeps the historical contract: the promise settles after the fingerprint.
+   */
+  awaitFingerprint?: boolean;
 };
 type SessionInitResult = {
   features: Features;
@@ -251,4 +261,4 @@ type SessionInitResult = {
  */
 declare function initializeSession(options?: SessionInitOptions): Promise<SessionInitResult>;
 //#endregion
-export { type BootstrapSessionOptions, type CreateSessionOptions, type FinishStatus, type GetFinishStatusFn, IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, type QrValidationErrorCode, type QrValidationResult, type RefreshQrUrlUuidOptions, type Session, type SessionInitOptions, type SessionInitResult, type ValidateQrUuidOptions, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid };
+export { type BootstrapSessionOptions, type CreateSessionOptions, type DeviceFingerprintResult, type FinishStatus, type GetFinishStatusFn, IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, type QrValidationErrorCode, type QrValidationResult, type RefreshQrUrlUuidOptions, type Session, type SessionInitOptions, type SessionInitResult, type ValidateQrUuidOptions, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid, whenSessionFingerprintSettled };

package/dist/session.esm.js

@@ -1,5 +1,5 @@
-import { i as initializeSession } from "./sessionInitializer-dlfDehHk.esm.js";
-import { t as IncodeApiError } from "./apiError-BA1d_au0.esm.js";
-import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-BFdLgN4i.esm.js";
-import { n as getFinishStatus } from "./flowCompletionService-tfeoGre9.esm.js";
-export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid };
+import { i as initializeSession, l as whenSessionFingerprintSettled } from "./sessionInitializer-BFk33E67.esm.js";
+import { t as IncodeApiError } from "./apiError-Budb6m6w.esm.js";
+import { a as refreshQrUrlUuid, i as createSession, n as QrValidationError, o as validateQrUuid, r as bootstrapSession, t as QR_VALIDATION_ERROR_CODES } from "./session-3LmvAU4S.esm.js";
+import { n as getFinishStatus } from "./flowCompletionService-DJp1odGN.esm.js";
+export { IncodeApiError, QR_VALIDATION_ERROR_CODES, QrValidationError, bootstrapSession, createSession, getFinishStatus, initializeSession, refreshQrUrlUuid, validateQrUuid, whenSessionFingerprintSettled };