@incodetech/core 2.3.0-rc.1 → 2.3.0-rc.10

package/dist/{sessionInitializer-BFk33E67.esm.js → sessionInitializer-BK5NjMe0.esm.js}

@@ -1,14 +1,14 @@
-import { E as updateFeatureManagementUser } from "./feature-management-E0mq0pMs.esm.js";
+import { d as fetchFeatureConfig, f as isFeatureEnabled, h as noteEnvironment, l as trueSightLog, p as resetFeatureConfigCache, s as startTrueSightCollection, v as noteTokenActivated } from "./trueSightService-D8yZwF3G.esm.js";
+import { E as updateFeatureManagementUser } from "./feature-management-C8OAO_CZ.esm.js";
 import { c as setToken, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { d as fetchFeatureConfig, f as isFeatureEnabled, h as noteEnvironment, l as trueSightLog, p as resetFeatureConfigCache, s as startTrueSightCollection, v as noteTokenActivated } from "./trueSightService-BN-Hzw82.esm.js";
 import { v as addEvent, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-BZh6dj53.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-CD9fJC2Y.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue } from "./stats-CZcy2J53.esm.js";
 import { t as getParsedUserAgent } from "./getParsedUserAgent-B2iFDql1.esm.js";
 import { a as isIOS } from "./platform-DkcRc9JV.esm.js";
 import { t as getUserAgent } from "./getBrowser-CBiibsL-.esm.js";
-import { i as linkSessionWithTRI, r as isTRIStarted } from "./tri-4RsGrIt6.esm.js";
+import { i as linkSessionWithTRI, r as isTRIStarted } from "./tri-xzRLIIMN.esm.js";
 //#region ../infra/src/providers/browser/BrowserEnvironmentProvider.ts
 var BrowserEnvironmentProvider = class {
 	getScreenDimensions() {

package/dist/{setup-Cv-JM9QC.d.ts → setup-Cyko6cAn.d.ts}

@@ -252,23 +252,10 @@ type SetupOptions = {
    */
   tri?: TransactionalRiskIntelligenceSetupConfig;
   /**
-   * TrueSight diagnostics — Incode-internal SDK-health telemetry
-   * (engineering-only dashboard, not customer analytics). During a session
-   * the SDK buffers sanitized, structured diagnostic breadcrumbs (module
-   * outcomes, error codes, timings — never PII, never captured images) and,
-   * at the session terminal, uploads ONE encrypted record to the Incode
-   * diagnostics backend. Used by Incode to debug customer-reported capture
-   * issues. Fire-and-forget and fail-open: it adds no retries, no blocking
-   * work, and can never affect the host flow.
-   *
-   * - `enabled` — set `false` to opt out entirely (no collection, no
-   *   subscriptions, no upload). Default: `true` (native SDK parity). Also
-   *   subject to a server-side kill-switch; an explicit server `false` stops
-   *   collection remotely regardless of this option.
-   *
-   * Decided by the first `setup()` call of the SDK lifecycle; later `setup()`
-   * calls cannot re-enable or disable it mid-session. Call `reset()` to start
-   * a new lifecycle with a different value.
+   * TrueSight diagnostics are temporarily unavailable while secure log
+   * encryption is implemented. This option remains accepted for compatibility;
+   * neither `enabled: true` nor a server flag can activate diagnostics.
+   * Regular SDK analytics are unaffected.
    */
   trueSight?: {
     enabled?: boolean;
@@ -553,7 +540,8 @@ declare function setWasmConfig(config: WasmConfig): void;
 /**
  * Initializes WasmUtilProvider with the stored WASM configuration.
  * Should be called after warmupWasm() completes when using conditional warmup.
- * This ensures image encryption works properly.
+ * Also upgrades the HTTP client so protected capture payloads are unwrapped
+ * by the native transport before upload.
  *
  * @param config - Optional WASM configuration. If not provided, uses the stored config from setWasmConfig().
  * @throws Error if no config is provided and none is stored

package/dist/{setup-BWG-hivt.esm.js → setup-D4YCSH31.esm.js}

@@ -1,156 +1,16 @@
-import { f as deriveSiblingJsPath, p as WASM_MODEL_FILES, v as buildModelVariantSources } from "./wasmWebClient-B7baE-Wf.esm.js";
-import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-CUUnwYxe.esm.js";
-import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-B-trhxg6.esm.js";
+import { D as resolveWasmConfig, S as upgradeToWasmHttpClient$1, b as installFreshHttpClient, l as trueSightLog, o as resetTrueSight, t as finalizeTrueSight, x as resetHttpClientState, y as getStoredHttpConfig } from "./trueSightService-D8yZwF3G.esm.js";
+import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-ChDwHSel.esm.js";
+import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-BdU9_m2E.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-E0mq0pMs.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-C8OAO_CZ.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api } from "./api-Bx3gKW_y.esm.js";
-import { C as upgradeToWasmHttpClient$1, S as resetHttpClientState, _ as noteTestingSignals, b as getStoredHttpConfig, l as trueSightLog, n as initializeTrueSightDiagnostics, o as resetTrueSight, t as finalizeTrueSight, u as categoryForEndpoint, x as installFreshHttpClient } from "./trueSightService-BN-Hzw82.esm.js";
+import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
 import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp } from "./sessionInitializer-BFk33E67.esm.js";
+import { a as resetSessionInit, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp } from "./sessionInitializer-BK5NjMe0.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
-import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-4RsGrIt6.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-DjPFGs_D.esm.js";
-//#region ../infra/src/wasm/wasmDefaults.ts
-const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
-/** The WASM version bundled and tested with this SDK release. */
-const DEFAULT_WASM_VERSION = "v2.14.50-post1";
-const PATH_KEYS = [
-	"wasmPath",
-	"wasmSimdPath",
-	"glueCodePath",
-	"glueCodeSimdPath",
-	"modelsBasePath"
-];
-function isBlank(value) {
-	return value.trim() === "";
-}
-function hasDisallowedControlChars(value) {
-	for (let i = 0; i < value.length; i += 1) {
-		const code = value.charCodeAt(i);
-		if (code < 32 || code === 127) return true;
-	}
-	return false;
-}
-function isMalformedPath(value) {
-	const trimmed = value.trim();
-	if (trimmed === "") return false;
-	if (hasDisallowedControlChars(trimmed)) return true;
-	if (/^https?:\/\//i.test(trimmed)) try {
-		new URL(trimmed);
-		return false;
-	} catch {
-		return true;
-	}
-	return false;
-}
-function warnInvalidWasmPath(field, reason) {
-	if (reason === "empty") {
-		console.warn(`[Incode SDK] wasm.${field} is empty. Falling back to CDN default.`);
-		return;
-	}
-	console.warn(`[Incode SDK] wasm.${field} appears malformed. Falling back to CDN default.`);
-}
-function warnMalformedWasmPath(field) {
-	console.warn(`[Incode SDK] wasm.${field} appears malformed. Check the URL or path.`);
-}
-/**
-* Validates merged WASM path strings. When overrides contained blank path
-* values, callers should have already fallen back to defaults before this runs.
-*/
-function validateWasmPaths(config) {
-	for (const key of PATH_KEYS) {
-		const value = config[key];
-		if (typeof value === "string" && isMalformedPath(value)) warnMalformedWasmPath(key);
-	}
-}
-function pickPath(key, overrides, defaultValue) {
-	if (!overrides || !(key in overrides)) return defaultValue;
-	const raw = overrides[key];
-	if (raw === void 0) return defaultValue;
-	if (typeof raw !== "string") return defaultValue;
-	if (isBlank(raw)) {
-		warnInvalidWasmPath(key, "empty");
-		return defaultValue;
-	}
-	if (isMalformedPath(raw)) {
-		warnInvalidWasmPath(key, "malformed");
-		return defaultValue;
-	}
-	return raw.trim();
-}
-function pickSource(key, overrides, defaultValue) {
-	if (!(key in overrides) || overrides[key] === void 0) return defaultValue;
-	const source = overrides[key];
-	if (typeof source !== "string") return source;
-	return pickPath(key, overrides, String(defaultValue));
-}
-function resolveBasePath(overrides) {
-	const defaultValue = `${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`;
-	if (!("basePath" in overrides) || overrides.basePath === void 0) return defaultValue;
-	const basePath = overrides.basePath;
-	if (typeof basePath !== "string" || isBlank(basePath) || isMalformedPath(basePath)) throw new Error("[Incode SDK] wasm.basePath is invalid.");
-	return basePath.trim();
-}
-/** Builds a WarmupConfig from a directory that mirrors the ml-wasm-kit CDN layout. */
-function buildWasmConfigFromBasePath(basePath) {
-	const base = basePath.endsWith("/") ? basePath.slice(0, -1) : basePath;
-	return {
-		wasmPath: `${base}/webLib.wasm`,
-		wasmSimdPath: `${base}/webLibSimd.wasm`,
-		glueCodePath: `${base}/webLib.js`,
-		glueCodeSimdPath: `${base}/webLibSimd.js`,
-		modelsBasePath: `${base}/models`
-	};
-}
-/** Builds the standard WarmupConfig from the Incode CDN. */
-function buildDefaultWasmConfig() {
-	return buildWasmConfigFromBasePath(`${WASM_CDN_BASE_URL}/${DEFAULT_WASM_VERSION}`);
-}
-const BARCODE_ENHANCE_MODEL_FILE = WASM_MODEL_FILES.barcode;
-/**
-* URL of the lazily-loaded PDF417 barcode enhancement model (US Smart Capture).
-* Derived from the resolved `modelsBasePath` so self-hosted / air-gapped
-* deployments resolve it correctly, falling back to the CDN default. Loaded on
-* demand via `IIdCaptureCapability.setBarcodeEnhancementModel` — deliberately
-* NOT part of any warmup model bundle.
-*/
-function getBarcodeEnhanceModelUrl(modelsBasePath, variant = "current") {
-	const source = buildModelVariantSources(modelsBasePath ?? `${WASM_CDN_BASE_URL}/v2.14.50-post1/models`, BARCODE_ENHANCE_MODEL_FILE);
-	return typeof source === "string" ? source : source[variant];
-}
-/**
-* Merges optional WASM path overrides with CDN defaults. Explicit non-blank
-* paths take precedence. Blank override strings log a warning and fall back to defaults.
-*/
-function resolveWasmConfig(overrides) {
-	if (!overrides) return buildDefaultWasmConfig();
-	const defaults = buildWasmConfigFromBasePath(resolveBasePath(overrides));
-	const resolvedWasmPath = pickSource("wasmPath", overrides, defaults.wasmPath);
-	const simdDefault = overrides.selfHosted ? resolvedWasmPath : defaults.wasmSimdPath;
-	const modelsDefault = defaults.modelsBasePath;
-	const resolvedWasmSimdPath = pickSource("wasmSimdPath", overrides, simdDefault);
-	const glueCodeSimdDefault = typeof resolvedWasmSimdPath === "string" ? deriveSiblingJsPath(resolvedWasmSimdPath) : defaults.glueCodeSimdPath;
-	const merged = {
-		wasmPath: resolvedWasmPath,
-		wasmSimdPath: resolvedWasmSimdPath,
-		glueCodePath: pickPath("glueCodePath", overrides, defaults.glueCodePath),
-		glueCodeSimdPath: pickPath("glueCodeSimdPath", overrides, glueCodeSimdDefault),
-		modelsBasePath: pickPath("modelsBasePath", overrides, modelsDefault),
-		useSimd: overrides.useSimd,
-		pipelines: overrides.pipelines,
-		pipelineModels: overrides.pipelineModels,
-		modelUrls: overrides.modelUrls,
-		legacyModelUrls: overrides.legacyModelUrls,
-		loadGlue: overrides.loadGlue,
-		loadGlueSimd: overrides.loadGlueSimd,
-		selfHosted: overrides.selfHosted
-	};
-	validateWasmPaths(merged);
-	return merged;
-}
-//#endregion
+import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-xzRLIIMN.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-G1FDrkLd.esm.js";
 //#region ../infra/src/providers/browser/BrowserPageLifecycleProvider.ts
 var BrowserPageLifecycleProvider = class {
 	sendBeacon(url, body, contentType = "application/json") {
@@ -494,44 +354,6 @@ function normalizeEncryption(input) {
 }
 let configured = false;
 /**
-* One-line environment facts for TrueSight's snapshot-on-first-error entry
-* (navigator facts read through the L0 provider — core never touches
-* browser globals directly).
-*/
-function buildEnvironmentSnapshot() {
-	const environment = new BrowserEnvironmentProvider();
-	const read = (property) => {
-		try {
-			return environment.getNavigatorProperty(property);
-		} catch {
-			return;
-		}
-	};
-	const connection = read("connection");
-	return [
-		`connection=${typeof connection?.effectiveType === "string" ? connection.effectiveType : "unknown"}`,
-		`saveData=${connection?.saveData === true}`,
-		`online=${read("onLine") !== false}`,
-		`language=${typeof read("language") === "string" ? String(read("language")) : "unknown"}`
-	].join(" ");
-}
-/**
-* ENG-48677 event map row 23b: every Incode HTTP request, success or
-* failure, becomes a self-health line (Android-dashboard parity). Lives here
-* rather than in `api.ts` — `trueSightService` already imports from that
-* module, so a direct `trueSightLog` import there would cycle; `setup()`
-* wires this adapter in as the decoupled observer instead.
-*/
-function logHttpRequestTiming(entry) {
-	const category = categoryForEndpoint(entry.endpoint);
-	const status = entry.httpStatus ?? "unknown";
-	if (entry.outcome === "success") {
-		trueSightLog("debug", "http", category, `http request completed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
-		return;
-	}
-	trueSightLog("error", "http", category, `http request failed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
-}
-/**
 * Initializes the SDK with the provided configuration.
 * Must be called before using any SDK functionality.
 *
@@ -687,18 +509,6 @@ async function setup(options) {
 		pageLifecycle: new BrowserPageLifecycleProvider(),
 		timer: BrowserTimerProvider.getInstance()
 	}));
-	initializeTrueSightDiagnostics({
-		enabled: options.trueSight?.enabled !== false,
-		pageLifecycle: new BrowserPageLifecycleProvider(),
-		timer: BrowserTimerProvider.getInstance(),
-		storage: new BrowserStorageProvider(),
-		getEnvironmentSnapshot: buildEnvironmentSnapshot
-	});
-	noteTestingSignals({
-		devMode: options.devMode,
-		apiUrl: options.apiURL
-	});
-	setHttpRequestObserver(logHttpRequestTiming);
 	const requestedEncryption = normalizeEncryption(options.encryption);
 	const stored = getStoredHttpConfig();
 	if (requestedEncryption && stored) {
@@ -778,7 +588,8 @@ function setWasmConfig(config) {
 /**
 * Initializes WasmUtilProvider with the stored WASM configuration.
 * Should be called after warmupWasm() completes when using conditional warmup.
-* This ensures image encryption works properly.
+* Also upgrades the HTTP client so protected capture payloads are unwrapped
+* by the native transport before upload.
 *
 * @param config - Optional WASM configuration. If not provided, uses the stored config from setWasmConfig().
 * @throws Error if no config is provided and none is stored
@@ -791,6 +602,7 @@ async function initializeWasmUtil(config) {
 		...resolved,
 		pipelines: resolved.pipelines ? [...resolved.pipelines] : void 0
 	});
+	await upgradeToWasmHttpClient$1(resolved);
 }
 /**
 * Warms additional WASM pipelines on demand, reusing the WASM config stored by
@@ -874,4 +686,4 @@ function reset() {
 	resetTrueSight();
 }
 //#endregion
-export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, buildDefaultWasmConfig as d, buildWasmConfigFromBasePath as f, reset as i, BrowserStorageProvider as l, resolveWasmConfig as m, initializeWasmUtil as n, setWasmConfig as o, getBarcodeEnhanceModelUrl as p, isConfigured as r, setup as s, ensureWasmPipelines as t, DEFAULT_WASM_VERSION as u };
+export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, reset as i, BrowserStorageProvider as l, initializeWasmUtil as n, setWasmConfig as o, isConfigured as r, setup as s, ensureWasmPipelines as t };

package/dist/{tri-4RsGrIt6.esm.js → tri-xzRLIIMN.esm.js}

@@ -128,8 +128,6 @@ var TransactionalRiskIntelligenceProvider = class TransactionalRiskIntelligenceP
 };
 //#endregion
 //#region src/integrations/tri/tri.ts
-const LINK_INTERVIEW_BLOCKED_HOSTS = ["falcon-ingest-k8s.saask8s.incodesmile.com", "falcon-ingest.incodesmile.com"];
-let _configuredApiURL;
 /**
 * Returns the active TRI capability implementation.
 *
@@ -157,7 +155,6 @@ function isTRIStarted() {
 * the `isStarted` flag and lazy-import state.
 */
 function resetTRIProviderInstance() {
-	_configuredApiURL = void 0;
 	TransactionalRiskIntelligenceProvider.resetInstance();
 }
 /**
@@ -211,7 +208,6 @@ async function initializeTRI(config, options = {}) {
 * @returns The resulting {@link TransactionalRiskIntelligenceState}.
 */
 async function setupTRI(config) {
-	_configuredApiURL = config.apiURL;
 	return getProvider().setup(config);
 }
 /**
@@ -247,14 +243,8 @@ async function resetTRI() {
 */
 async function linkSessionWithTRI(sessionToken) {
 	if (!sessionToken) return false;
-	if (isLinkInterviewBlocked(_configuredApiURL)) return false;
 	return getProvider().linkInterview(sessionToken);
 }
-function isLinkInterviewBlocked(apiURL) {
-	if (!apiURL) return true;
-	const normalized = apiURL.toLowerCase();
-	return LINK_INTERVIEW_BLOCKED_HOSTS.some((host) => normalized.includes(host));
-}
 /**
 * @private This function is not used outside of this file.
 *

package/dist/tri.esm.js

@@ -1,2 +1,2 @@
-import { a as resetTRI, c as startTRI, l as stopTRI, r as isTRIStarted, s as setupTRI, t as createTRISession } from "./tri-4RsGrIt6.esm.js";
+import { a as resetTRI, c as startTRI, l as stopTRI, r as isTRIStarted, s as setupTRI, t as createTRISession } from "./tri-xzRLIIMN.esm.js";
 export { createTRISession, isTRIStarted, resetTRI, setupTRI, startTRI, stopTRI };