@incodetech/core 2.3.0-rc.1 → 2.3.0-rc.10

package/dist/{faceCaptureManagerFactory-B7Ms6pSs.esm.js → faceCaptureManagerFactory-Bk6pVs6E.esm.js}

@@ -1,10 +1,10 @@
 import { n as eventModuleNames, o as createManagerInstrumentation, r as eventScreenNames } from "./events-ijlbX_Wx.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
 import { u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
-import { i as concealmentToAvatar } from "./faceCaptureSetup-bkAlr5d8.esm.js";
-import { t as setWasmDsFlagSync } from "./wasmDsFlagSync-B2e8p268.esm.js";
+import { i as concealmentToAvatar } from "./faceCaptureSetup-CGQDK97m.esm.js";
+import { t as setWasmDsFlagSync } from "./wasmDsFlagSync-DYrLUEII.esm.js";
 import { t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-BrJN1B8A.esm.js";
-import { r as primeMotionFromUserGestureIfNeeded } from "./permissionServices-Bj_fyWtv.esm.js";
+import { r as primeMotionFromUserGestureIfNeeded } from "./permissionServices-EY3_Vx6c.esm.js";
 //#region src/internal/faceCapture/faceCaptureManagerFactory.ts
 function getPermissionStatus(snapshot) {
 	if (!snapshot.matches("permissions")) return;

package/dist/{faceCaptureManagerFactory-BeUl8fl1.d.ts → faceCaptureManagerFactory-DMLstvui.d.ts}

@@ -4,15 +4,14 @@ import { t as Manager } from "./Manager-CQQ99QOI.js";
 import "./Actor-iTq7YY48.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
 import "./index-B8weJxmL.js";
-import { s as FaceFeed, t as AvatarId, u as FaceCoordinates, y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
+import { c as FaceAttributesThresholds, d as FaceDetectionCallbacks, f as FaceDetectionConfig, h as IFaceDetectionCapability, l as FaceChecksConfig, m as FacePositionConstraints, p as FaceDetectionThresholds, s as FaceFeed, t as AvatarId, u as FaceCoordinates, v as WebApiHostRequestConfig, y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
 import { i as FlowModuleConfig } from "./types-Do5rEXij.js";
 import "./IWasmUtilCapability-CNWRl7jr.js";
 import { n as PermissionStatus, t as PermissionResult } from "./types-BEwVKkLJ.js";
 import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode, r as FaceCaptureDependencies, t as BaseFaceCaptureConfig } from "./types-Bnl58jUQ.js";
 import { t as AuthenticationConfig } from "./types-ChAowIxT.js";
-import "./types-BT_Oalip.js";
+import { t as BaseWasmProvider } from "./BaseWasmProvider-Dyi6dKp1.js";
 import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-_8gdW5Lk.js";
-import { t as FaceDetectionProvider } from "./FaceDetectionProvider-LdZ47bWy.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 //#region src/modules/authentication/authenticationStateMachine.d.ts
 declare const _authenticationMachine: AnyStateMachine;
@@ -28,6 +27,84 @@ type CreateAuthenticationActorOptions = {
 type AuthenticationActor = ActorRefFrom<AuthenticationMachine>;
 declare function createAuthenticationActor(options: CreateAuthenticationActorOptions): AuthenticationActor;
 //#endregion
+//#region src/internal/faceCapture/recordingService.d.ts
+type RecordingService = {
+  start(stream: MediaStream): Promise<void>;
+  /**
+   * Prepares the recording metadata needed by the face-image upload.
+   *
+   * Local video-liveness recordings must stop here because their upload id is
+   * sent with the image. Scoped face recordings return no legacy id, pause at
+   * the end of each attempt, and resume the same upload after a rejection; the
+   * state machine finalizes them only after the backend accepts the capture.
+   */
+  prepareUpload(): Promise<{
+    recordingId: string | null;
+  }>;
+  stop(): Promise<{
+    recordingId: string | null;
+  }>;
+  /** Best-effort page-background handling for protected camera cycles. */
+  pauseForBackground?(): void;
+  /** Resumes the same recorder after its protected presentation track recovers. */
+  resumeFromBackground?(stream: MediaStream): Promise<void>;
+  /**
+   * Present only on step-scoped services (one recording per capture step,
+   * ENG-56648). Ends the recorder's camera clone synchronously and pauses the
+   * container without completing the upload; the next `start(stream)` resumes
+   * it with a fresh clone and the step owner completes it with `stop()`.
+   * Idempotent, and a no-op once the recording is completing.
+   */
+  suspend?(): void;
+  /**
+   * Stops the recorder and returns the raw (un-encrypted, not uploaded)
+   * video as base64. Used by the captureOnly flow, which hands video bytes
+   * to the integrator via `onCapture` instead of uploading to Incode.
+   *
+   * Returns `{ videoBase64: undefined }` when video is not available for
+   * any reason, including:
+   * - the recorder was never started or is already stopped,
+   * - video assembly fails.
+   */
+  stopAndGetVideo(): Promise<{
+    videoBase64: string | undefined;
+  }>;
+  cleanup(): void;
+};
+//#endregion
+//#region ../infra/src/providers/wasm/FaceDetectionProvider.d.ts
+declare class FaceDetectionProvider extends BaseWasmProvider implements IFaceDetectionCapability {
+  private defaultThresholds;
+  private currentThresholds;
+  private currentFrame;
+  private onFaceDataCallback;
+  constructor();
+  processFrame(image: ImageData): Promise<void>;
+  initialize(config: FaceDetectionConfig): Promise<void>;
+  /**
+   * Last-registered onCapture callback — captured into a private
+   * field so `forceCapture()` (called from outside the WASM-callback
+   * lifecycle) can re-fire the same wrapper. `setCallbacks` rebinds
+   * this on each invocation, so the field always reflects the
+   * current consumer.
+   */
+  private currentOnCaptureWrapper;
+  processPhoto(canvas: HTMLCanvasElement): void;
+  postFaceResults(config?: WebApiHostRequestConfig): Promise<unknown>;
+  setCallbacks(callbacks: FaceDetectionCallbacks): void;
+  setPositionConstraints(constraints: FacePositionConstraints): void;
+  applyDefaults(autocaptureInterval?: number): void;
+  setAutocaptureInterval(interval: number): void;
+  setThresholds(thresholds: FaceDetectionThresholds): void;
+  setAttributesThresholds(thresholds: FaceAttributesThresholds): void;
+  setChecksEnabled(config: FaceChecksConfig): void;
+  setVideoSelfieMode(enabled: boolean): void;
+  forceCapture(): void;
+  reset(): void;
+  private createDefaultFaceCoordinates;
+  private formatFaceCoordinates;
+}
+//#endregion
 //#region src/modules/selfie/types.d.ts
 /**
  * Public selfie configuration.
@@ -79,43 +156,6 @@ type ProcessFaceResponse = {
 };
 declare function processFace(imageType?: ProcessFaceImageType, signal?: AbortSignal): Promise<ProcessFaceResponse>;
 //#endregion
-//#region src/internal/faceCapture/recordingService.d.ts
-type RecordingService = {
-  start(stream: MediaStream): Promise<void>;
-  /**
-   * Prepares the recording metadata needed by the face-image upload.
-   *
-   * Local video-liveness recordings must stop here because their upload id is
-   * sent with the image. Scoped face recordings return no legacy id, pause at
-   * the end of each attempt, and resume the same upload after a rejection; the
-   * state machine finalizes them only after the backend accepts the capture.
-   */
-  prepareUpload(): Promise<{
-    recordingId: string | null;
-  }>;
-  stop(): Promise<{
-    recordingId: string | null;
-  }>;
-  /** Best-effort page-background handling for protected camera cycles. */
-  pauseForBackground?(): void;
-  /** Resumes the same recorder after its protected presentation track recovers. */
-  resumeFromBackground?(stream: MediaStream): Promise<void>;
-  /**
-   * Stops the recorder and returns the raw (un-encrypted, not uploaded)
-   * video as base64. Used by the captureOnly flow, which hands video bytes
-   * to the integrator via `onCapture` instead of uploading to Incode.
-   *
-   * Returns `{ videoBase64: undefined }` when video is not available for
-   * any reason, including:
-   * - the recorder was never started or is already stopped,
-   * - video assembly fails.
-   */
-  stopAndGetVideo(): Promise<{
-    videoBase64: string | undefined;
-  }>;
-  cleanup(): void;
-};
-//#endregion
 //#region src/internal/faceCapture/faceCaptureSetup.d.ts
 type FaceCaptureConfig = BaseFaceCaptureConfig;
 type FaceCaptureInput = {

package/dist/{faceCaptureSetup-bkAlr5d8.esm.js → faceCaptureSetup-CGQDK97m.esm.js}

@@ -1,21 +1,21 @@
+import { l as trueSightLog, m as isTrueSightTesting } from "./trueSightService-D8yZwF3G.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { l as trueSightLog, m as isTrueSightTesting } from "./trueSightService-BN-Hzw82.esm.js";
-import "./sessionInitializer-BFk33E67.esm.js";
+import "./sessionInitializer-BK5NjMe0.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
 import { t as isAndroid } from "./platform-DkcRc9JV.esm.js";
 import { i as assign, n as enqueueActions, r as sendTo, t as setup } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
-import { n as invokeRequestPermissionActor, t as checkPermission } from "./permissionServices-Bj_fyWtv.esm.js";
-import { a as sendLabelInspectionEvent, i as initializeDeepsightSession, r as initializeCamera, s as stopStream, t as FaceDetectionProvider } from "./FaceDetectionProvider-BfhWkK90.esm.js";
+import { n as invokeRequestPermissionActor, t as checkPermission } from "./permissionServices-EY3_Vx6c.esm.js";
+import { a as sendLabelInspectionEvent, i as initializeDeepsightSession, r as initializeCamera, s as stopStream, t as FaceDetectionProvider } from "./FaceDetectionProvider-BZYHujqz.esm.js";
 import { t as FACE_ERROR_CODES } from "./types-BN5RPPIZ.esm.js";
-import { a as flagFaceManualReview, i as imageFileToDataUrl, n as runProtectedAttempt, r as cameraCycleProvider, s as PROTECTED_CAPTURE_TARGET, t as createCameraCycleOwnership } from "./createCameraCycleOwnership-CX3hJGKc.esm.js";
+import { a as flagFaceManualReview, i as imageFileToDataUrl, n as runProtectedAttempt, r as cameraCycleProvider, s as PROTECTED_CAPTURE_TARGET, t as createCameraCycleOwnership } from "./createCameraCycleOwnership-DnwTl1ad.esm.js";
 import { n as releaseFaceAvatarWarmup, r as warmFaceAvatar, t as createFaceAvatar } from "./createFaceAvatar-BNHdeFj8.esm.js";
 import { t as IncodeCanvas } from "./canvas-BxFzWTt-.esm.js";
-import { n as needsMotionPrimeOnlyFromPermission, r as resolveStoredPermissionResult, t as isReadyForCaptureFromPermission } from "./permissionGuards-uYZYFu4J.esm.js";
+import { n as needsMotionPrimeOnlyFromPermission, r as resolveStoredPermissionResult, t as isReadyForCaptureFromPermission } from "./permissionGuards-D6TfVop2.esm.js";
+import { n as CameraCompositor, r as getAdaptiveMediaRecorderOptions, t as MultipartRecordingService } from "./multipartRecordingService-YKu0Bd7S.esm.js";
 import { t as getDeviceClass } from "./getDeviceClass-5NYZg9s6.esm.js";
-import { n as getAdaptiveMediaRecorderOptions, t as MultipartRecordingService } from "./multipartRecordingService-OEgIRvqC.esm.js";
 //#region src/internal/avatar/concealment.ts
 /**
 * Maps a backend concealment option to the internal avatar flags. `OPTION_NONE`
@@ -496,7 +496,28 @@ var LocalRecordingProvider = class {
 			recorder?.stream?.getTracks().forEach((track) => track.stop());
 		});
 	}
+	/**
+	* Discards the in-progress recording without producing a result: detaches
+	* the recorder's handlers, stops it, releases its cloned tracks and clears
+	* the flags. Idempotent, and safe after `stopRecording` or when never
+	* started. Mirrors `MultipartRecordingProvider.reset()` so an attempt that is
+	* released before finalization cannot leave a live camera clone behind
+	* (ENG-56648).
+	*/
 	reset() {
+		this.removeEventListeners();
+		const recorder = this.mediaRecorder;
+		if (recorder) {
+			recorder.ondataavailable = null;
+			recorder.onerror = null;
+			recorder.onstop = null;
+			if (recorder.state !== "inactive") try {
+				recorder.stop();
+			} catch {}
+			recorder.stream?.getTracks().forEach((track) => track.stop());
+			this.mediaRecorder = null;
+		}
+		this.stream = null;
 		this._isRecording = false;
 		this._error = null;
 		this._hasError = false;
@@ -571,49 +592,146 @@ var LocalRecordingService = class {
 * the interview asynchronously by the backend's `selfie` scope consumer, so
 * its upload id must not be forwarded to `/omni/add/face` as a legacy
 * `recordingId`.
+*
+* The recording is scoped to the capture step (ENG-56648). The recorder
+* records a stable `CameraCompositor` stream instead of a raw camera clone, so
+* every attempt can end its own clone before PRC and POC run and the next
+* attempt swaps a fresh clone into the same multipart upload. The owning
+* controller completes the upload once the backend accepts a capture or the
+* step ends without a retry.
 */
 var MultipartFaceRecordingService = class {
 	constructor() {
 		this.service = new MultipartRecordingService("selfie");
+		this.audioSource = [];
+		this.needsVideoSourceReplacement = false;
 		this.pausedForAttempt = false;
+		this.startInFlight = false;
+		this.suspendRequested = false;
+		this.stopping = false;
 	}
 	async start(stream) {
-		if (this.pausedForAttempt) {
-			if (!this.service.resume()) throw new Error("Face recording did not resume");
-			this.pausedForAttempt = false;
+		if (this.stopping) throw new Error("Face recording already completed");
+		if (this.compositor) {
+			await this.resume(stream);
+			return;
+		}
+		const recordingSource = stream.clone();
+		const compositor = new CameraCompositor({ fps: 30 });
+		this.startInFlight = true;
+		try {
+			const composite = compositor.start(recordingSource);
+			await this.service.start(composite);
+		} catch (error) {
+			compositor.stop();
+			recordingSource.getTracks().forEach((track) => track.stop());
+			this.service.cleanup();
+			throw error;
+		} finally {
+			this.startInFlight = false;
+		}
+		if (this.stopping) {
+			compositor.stop();
+			recordingSource.getTracks().forEach((track) => track.stop());
+			this.service.cleanup();
+			return;
+		}
+		this.compositor = compositor;
+		this.recordingSource = recordingSource;
+		this.audioSource = recordingSource.getAudioTracks();
+		if (this.suspendRequested) {
+			this.suspendRequested = false;
+			this.suspend();
+		}
+	}
+	/**
+	* Pauses the container and ends the camera clone on the calling thread. The
+	* composite stream and the upload stay open for the next attempt.
+	*/
+	suspend() {
+		if (this.stopping) return;
+		if (!this.compositor) {
+			this.suspendRequested = this.startInFlight;
 			return;
 		}
-		await this.service.start(stream);
+		if (!this.pausedForAttempt) this.pausedForAttempt = this.service.pause();
+		this.releaseCameraClone({ keepAudio: true });
+		this.needsVideoSourceReplacement = true;
 	}
 	async prepareUpload() {
-		this.pausedForAttempt = this.service.pause();
+		this.suspend();
 		return { recordingId: null };
 	}
 	async stop() {
-		try {
-			await this.service.stop();
-		} finally {
-			this.pausedForAttempt = false;
-		}
+		await this.complete();
 		return { recordingId: null };
 	}
 	pauseForBackground() {
-		this.service.pause();
+		this.suspend();
 	}
-	async resumeFromBackground() {
-		this.service.resume();
+	async resumeFromBackground(stream) {
+		if (!this.compositor || this.stopping) return;
+		await this.resume(stream);
 	}
 	async stopAndGetVideo() {
+		await this.complete();
+		return { videoBase64: void 0 };
+	}
+	cleanup() {
+		this.suspendRequested = false;
+		this.pausedForAttempt = false;
+		this.needsVideoSourceReplacement = false;
+		this.releaseCameraClone({ keepAudio: false });
+		this.compositor?.stop();
+		this.compositor = void 0;
+		this.recordingSource = void 0;
+		this.audioSource = [];
+		this.service.cleanup();
+	}
+	/** Swaps this attempt's camera clone into the composite and resumes. */
+	async resume(stream) {
+		const compositor = this.compositor;
+		if (!compositor) return;
+		if (this.needsVideoSourceReplacement) {
+			const recordingSource = stream.clone();
+			recordingSource.getAudioTracks().forEach((track) => track.stop());
+			compositor.switchVideo(recordingSource);
+			this.needsVideoSourceReplacement = false;
+			this.recordingSource = recordingSource;
+			const result = await compositor.resume();
+			if (result !== "resumed") throw new Error(`Face recording camera did not resume: ${result}`);
+		}
+		if (this.pausedForAttempt && !this.service.resume()) throw new Error("Face recording did not resume");
+		this.pausedForAttempt = false;
+	}
+	/**
+	* Completes the scoped upload. The camera clone ends synchronously before the
+	* drain so a step that ends mid-attempt never pins the camera; the composite
+	* stays alive until the recorder has emitted its final chunk.
+	*/
+	async complete() {
+		this.stopping = true;
+		this.suspendRequested = false;
+		this.releaseCameraClone({ keepAudio: false });
 		try {
 			await this.service.stop();
 		} finally {
+			this.compositor?.stop();
+			this.compositor = void 0;
+			this.recordingSource = void 0;
+			this.audioSource = [];
 			this.pausedForAttempt = false;
+			this.needsVideoSourceReplacement = false;
 		}
-		return { videoBase64: void 0 };
 	}
-	cleanup() {
-		this.pausedForAttempt = false;
-		this.service.cleanup();
+	releaseCameraClone(options) {
+		try {
+			this.compositor?.pause();
+		} catch {}
+		const tracks = options.keepAudio ? this.recordingSource?.getVideoTracks() ?? [] : /* @__PURE__ */ new Set([...this.recordingSource?.getTracks() ?? [], ...this.audioSource]);
+		for (const track of tracks) try {
+			track.stop();
+		} catch {}
 	}
 };
 /**
@@ -637,51 +755,88 @@ function createRecordingService(params) {
 //#endregion
 //#region src/internal/faceCapture/protectedFaceAttempt.ts
 const ON_DEVICE_MANUAL_CAPTURE_TIMEOUT_MS = 2147483647;
+/**
+* Recorder hooks for one protected face attempt.
+*
+* The recording service comes from the owner of the capture step (the face
+* controller), so a step-scoped service (`suspend` present) is started or
+* resumed by every attempt, paused with its camera clone ended before POC, and
+* suspended again on release; only the controller completes it (ENG-56648).
+* Per-attempt services (local video liveness, capture-only video) keep their
+* stop-before-POC and cleanup-on-release behavior.
+*/
 var ProtectedFaceRecorderHooks = class {
-	constructor(config, dependencies, delivery) {
-		this.config = config;
-		this.dependencies = dependencies;
+	constructor(config, delivery, getRecordingService) {
 		this.delivery = delivery;
+		this.getRecordingService = getRecordingService;
+		this.disposed = false;
 		this.mode = config.onDeviceFaceResultsSubmissionEnabled === true || config.enableFaceRecording !== true && config.deepsightLiveness !== "VIDEOLIVENESS" ? "none" : "finalizeBeforePoc";
 	}
 	async start(unprotectedStream) {
 		if (this.mode === "none") return;
-		const wasmUtil = await this.dependencies.getWasmUtil();
-		this.service = createRecordingService({
-			config: this.config,
-			wasmUtil,
-			sessionToken: getToken(),
-			localDelivery: this.delivery === "local"
-		});
-		await this.service?.start(unprotectedStream);
+		const service = await this.getRecordingService();
+		if (!service) return;
+		this.service = service;
+		if (this.disposed) {
+			this.suspendOrCleanup();
+			return;
+		}
+		try {
+			await service.start(unprotectedStream);
+		} catch (error) {
+			if (service.suspend) {
+				service.suspend();
+				trueSightLog("warning", "recording", "faceScan", "face recording did not resume for this attempt");
+				return;
+			}
+			throw error;
+		}
+		if (this.disposed) this.suspendOrCleanup();
 	}
 	async prepareForPoc() {
-		if (!this.service) return {};
+		const service = this.service;
+		if (!service) return {};
 		if (this.delivery === "local") {
 			try {
-				const result = await this.service.stopAndGetVideo();
+				const result = await service.stopAndGetVideo();
 				this.captureOnlyVideoBase64 = result.videoBase64;
 			} catch {
 				this.captureOnlyVideoBase64 = void 0;
 			}
 			return {};
 		}
-		return this.service.stop();
+		if (service.suspend) return service.prepareUpload();
+		return service.stop();
 	}
 	async resumeAfterPoc() {}
 	pauseForBackground() {
 		this.service?.pauseForBackground?.();
 	}
 	async resumeFromBackground(unprotectedStream) {
-		await this.service?.resumeFromBackground?.(unprotectedStream);
+		const service = this.service;
+		if (!service?.resumeFromBackground || this.disposed) return;
+		try {
+			await service.resumeFromBackground(unprotectedStream);
+		} catch {
+			service.suspend?.();
+			trueSightLog("warning", "recording", "faceScan", "face recording did not resume after foreground");
+		}
 	}
 	dispose() {
+		this.disposed = true;
 		try {
-			this.service?.cleanup();
+			this.suspendOrCleanup();
 		} finally {
 			this.service = void 0;
 		}
 	}
+	/** Step-scoped services suspend (the owner completes them); others clean up. */
+	suspendOrCleanup() {
+		const service = this.service;
+		if (!service) return;
+		if (service.suspend) service.suspend();
+		else service.cleanup();
+	}
 	takeCaptureOnlyVideo() {
 		const video = this.captureOnlyVideoBase64;
 		this.captureOnlyVideoBase64 = void 0;
@@ -705,9 +860,19 @@ var ProtectedFaceAttemptRuntime = class ProtectedFaceAttemptRuntime {
 		this.recorderTransferred = false;
 		this.pendingSignals = [];
 		this.provider = options.faceDetection;
-		this.recorder = new ProtectedFaceRecorderHooks(options.config, options.dependencies, options.delivery);
+		this.recorder = new ProtectedFaceRecorderHooks(options.config, options.delivery, options.getRecordingService ?? (() => this.createAttemptRecordingService()));
 		this.cycleOwnership = createCameraCycleOwnership(options.cycle);
 	}
+	/** Per-attempt fallback when no step owner supplies the recording service. */
+	async createAttemptRecordingService() {
+		const wasmUtil = await this.options.dependencies.getWasmUtil();
+		return createRecordingService({
+			config: this.options.config,
+			wasmUtil,
+			sessionToken: getToken(),
+			localDelivery: this.options.delivery === "local"
+		});
+	}
 	get delivery() {
 		return this.options.delivery;
 	}
@@ -973,6 +1138,8 @@ function createProtectedFaceControllerActor(options) {
 		let committedPreview;
 		let pendingAutoPreview;
 		let recording = {};
+		let stepRecording;
+		let stepRecordingPending;
 		let generation = 0;
 		let active = true;
 		let diagnosticAttempt = 0;
@@ -991,6 +1158,48 @@ function createProtectedFaceControllerActor(options) {
 			if (!controllerInput) throw new Error("Protected face controller is not bound");
 			return controllerInput;
 		};
+		/**
+		* One recording service per capture step (ENG-56648). Every attempt of the
+		* step starts or resumes it; `completeStepRecording` completes it when the
+		* backend accepts a capture or the step ends without a retry.
+		*/
+		const getStepRecordingService = () => {
+			if (stepRecording) return Promise.resolve(stepRecording);
+			if (stepRecordingPending) return stepRecordingPending;
+			const input = getControllerInput();
+			const pending = (async () => {
+				const wasmUtil = await input.dependencies.getWasmUtil();
+				if (!active) return;
+				stepRecording ??= createRecordingService({
+					config: input.config,
+					wasmUtil,
+					sessionToken: getToken(),
+					localDelivery: options.delivery === "local"
+				});
+				return stepRecording;
+			})();
+			stepRecordingPending = pending;
+			pending.finally(() => {
+				if (stepRecordingPending === pending) stepRecordingPending = void 0;
+			});
+			return pending;
+		};
+		const completeStepRecording = () => {
+			const service = stepRecording;
+			stepRecording = void 0;
+			if (!service) return;
+			if (!service.suspend) {
+				try {
+					service.cleanup();
+				} catch {}
+				return;
+			}
+			service.stop().catch(() => void 0).finally(() => {
+				try {
+					service.cleanup();
+				} catch {}
+			});
+		};
 		const ensureRuntime = () => {
 			if (!runtime) {
 				const input = getControllerInput();
@@ -1006,7 +1215,8 @@ function createProtectedFaceControllerActor(options) {
 					acquireCamera: (provider) => initializeCamera({
 						config: input.config,
 						provider
-					})
+					}),
+					getRecordingService: getStepRecordingService
 				});
 				if (deepsightService) runtime.setDeepsightService(deepsightService);
 			}
@@ -1250,12 +1460,16 @@ function createProtectedFaceControllerActor(options) {
 				case "RESET":
 					releaseCurrent("retry");
 					return;
+				case "COMPLETE_RECORDING":
+					completeStepRecording();
+					return;
 				case "RELEASE": releaseCurrent(command.reason);
 			}
 		});
 		return () => {
 			active = false;
 			releaseCurrent("externalStop");
+			completeStepRecording();
 		};
 	});
 }
@@ -1491,6 +1705,10 @@ const faceCaptureMachine = setup({
 			if (!isProtectedFaceControllerRunning(self)) return;
 			enqueue.sendTo("protectedFaceController", { type: "RESET" });
 		}),
+		completeProtectedRecording: enqueueActions(({ enqueue, self }) => {
+			if (!isProtectedFaceControllerRunning(self)) return;
+			enqueue.sendTo("protectedFaceController", { type: "COMPLETE_RECORDING" });
+		}),
 		sendProtectedAutoCapture: enqueueActions(({ enqueue, self, event }) => {
 			if (!isProtectedFaceControllerRunning(self)) return;
 			enqueue.sendTo("protectedFaceController", {
@@ -1980,7 +2198,7 @@ const faceCaptureMachine = setup({
 					}
 				] } },
 				success: {
-					entry: "cleanup",
+					entry: ["completeProtectedRecording", "cleanup"],
 					after: { 3e3: { target: "#faceCapture.processing" } }
 				}
 			}
@@ -2026,7 +2244,7 @@ const faceCaptureMachine = setup({
 			onError: { target: "finished" }
 		} },
 		terminalProcessing: {
-			entry: "cleanup",
+			entry: ["completeProtectedRecording", "cleanup"],
 			invoke: {
 				id: "processFace",
 				src: "processFace",
@@ -2055,7 +2273,11 @@ const faceCaptureMachine = setup({
 			type: "final"
 		},
 		error: {
-			entry: ["stopMediaStream", "releaseAvatarWarmup"],
+			entry: [
+				"completeProtectedRecording",
+				"stopMediaStream",
+				"releaseAvatarWarmup"
+			],
 			on: { RESET: {
 				target: "idle",
 				actions: ["resetProtectedController", "resetContext"]

package/dist/{feature-management-E0mq0pMs.esm.js → feature-management-C8OAO_CZ.esm.js}

@@ -1,5 +1,5 @@
 import { n as __toESM } from "./rolldown-runtime-FDOR9p9I.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-BZh6dj53.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CD9fJC2Y.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
 let currentEnvironment;
 /** Effective tier: the explicitly-set value, else the default (see note above). */

package/dist/feature-management.esm.js

@@ -1,2 +1,2 @@
-import { E as updateFeatureManagementUser, T as subscribeFeatureManagement, _ as getIsFeatureManagementInitialized, a as stringParam, d as ONBOARDING_WEB_SDK_PARAMETER_STORE, f as getExperiment, g as getFeatureParameterStore, h as getFeatureManagementVersion, i as numberParam, l as resolveExperiment, m as getFeatureGate, n as defineExperimentParams, o as EXPERIMENT_UNAVAILABLE_SENTINEL, p as getFeatureDynamicConfig, r as enumParam, s as exposeExperimentOnce, t as booleanParam, u as resolveExperimentOnce, x as logEvent, y as getLayer } from "./feature-management-E0mq0pMs.esm.js";
+import { E as updateFeatureManagementUser, T as subscribeFeatureManagement, _ as getIsFeatureManagementInitialized, a as stringParam, d as ONBOARDING_WEB_SDK_PARAMETER_STORE, f as getExperiment, g as getFeatureParameterStore, h as getFeatureManagementVersion, i as numberParam, l as resolveExperiment, m as getFeatureGate, n as defineExperimentParams, o as EXPERIMENT_UNAVAILABLE_SENTINEL, p as getFeatureDynamicConfig, r as enumParam, s as exposeExperimentOnce, t as booleanParam, u as resolveExperimentOnce, x as logEvent, y as getLayer } from "./feature-management-C8OAO_CZ.esm.js";
 export { EXPERIMENT_UNAVAILABLE_SENTINEL, ONBOARDING_WEB_SDK_PARAMETER_STORE, booleanParam, defineExperimentParams, enumParam, exposeExperimentOnce, getExperiment, getFeatureDynamicConfig, getFeatureGate, getFeatureManagementVersion, getFeatureParameterStore, getIsFeatureManagementInitialized, getLayer, logEvent, numberParam, resolveExperiment, resolveExperimentOnce, stringParam, subscribeFeatureManagement, updateFeatureManagementUser };

package/dist/fiscal-qr.esm.js

@@ -1,2 +1,2 @@
-import { n as createFiscalQrManagerFromActor, r as fiscalQrMachine, t as createFiscalQrManager } from "./fiscalQrManager-BunLVFbd.esm.js";
+import { n as createFiscalQrManagerFromActor, r as fiscalQrMachine, t as createFiscalQrManager } from "./fiscalQrManager-DbCVMIBx.esm.js";
 export { createFiscalQrManager, createFiscalQrManagerFromActor, fiscalQrMachine };

package/dist/{fiscalQrManager-BunLVFbd.esm.js → fiscalQrManager-DbCVMIBx.esm.js}

@@ -5,7 +5,7 @@ import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { i as assign, s as createActor, t as setup, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
 import { o as stopCameraStream } from "./camera-sIa9ceW2.esm.js";
-import { n as getBackCameraStream } from "./backCameraStream-BOtyQowf.esm.js";
+import { n as getBackCameraStream } from "./backCameraStream-B0-YgP_y.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/fiscal-qr/fiscalQrConstants.ts
 const SUCCESS_DISPLAY_MS = 1500;