@incodetech/core 2.3.0-rc.9 → 2.3.0

package/dist/{trueSightService-C1JG8gAU.esm.js → trueSightService-Di5RGIls.esm.js}

@@ -1,8 +1,8 @@
 import { a as setWebApiHttpTransport, f as deriveSiblingJsPath, i as initializeWasmWebClient, o as setupWasmConnection, p as WASM_MODEL_FILES, r as executeWasmRequest, t as WasmWebClientError, v as buildModelVariantSources } from "./wasmWebClient-B7baE-Wf.esm.js";
 import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
 import { i as isApiConfigured, n as getApi, o as setClient, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { S as subscribeEvent, n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
-import { t as SDK_VERSION } from "./sdkVersion-DCLQtexS.esm.js";
+import { n as eventModuleNames } from "./events-ijlbX_Wx.esm.js";
+import { t as SDK_VERSION } from "./sdkVersion-KY79FtZx.esm.js";
 import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
 //#region ../infra/src/wasm/wasmDefaults.ts
 const WASM_CDN_BASE_URL = "https://cdn.incodesmile.com/ml-wasm-kit-release";
@@ -688,8 +688,6 @@ async function withHandshakeFailureContext(wantsEncryption, fn) {
 		throw error;
 	}
 }
-/** Dirty-timer half of the interrupted-snapshot rebuild debounce (module boundaries + timer). */
-const SNAPSHOT_DIRTY_INTERVAL_MS = 15e3;
 /** Hard cap per log message, UTF-8 bytes (contract). */
 const MESSAGE_MAX_BYTES = 8 * 1024;
 const TRUESIGHT_SDK_ID = "IncdOnboarding";
@@ -770,92 +768,6 @@ function truncateUtf8(value, maxBytes) {
 	}
 	return result + TRUNCATION_SUFFIX;
 }
-const EVICTION_ORDER = [
-	"verbose",
-	"debug",
-	"info"
-];
-function createLogBuffer(options = {}) {
-	const flushThresholdBytes = options.flushThresholdBytes ?? 6e5;
-	const maxEntries = options.maxEntries ?? 5e3;
-	const { onOverflow } = options;
-	const entries = [];
-	let mode = onOverflow ? "flush" : "evict";
-	let nextIndex = 0;
-	let bytes = 0;
-	let dropped = 0;
-	let overflowPending = false;
-	function entryCost(entry) {
-		return utf8ByteLength(entry.message) + utf8ByteLength(entry.subsystem) + 120;
-	}
-	function removeAt(position) {
-		const [removed] = entries.splice(position, 1);
-		bytes -= entryCost(removed);
-		dropped += 1;
-	}
-	/** Lowest level first (oldest within it); warning+ only as the last resort. */
-	function evictOne() {
-		for (const level of EVICTION_ORDER) {
-			const position = entries.findIndex((entry) => entry.level === level);
-			if (position !== -1) {
-				removeAt(position);
-				return;
-			}
-		}
-		removeAt(0);
-	}
-	function copyOf(entry) {
-		return { ...entry };
-	}
-	return {
-		append(level, subsystem, category, message) {
-			const entry = {
-				index: nextIndex,
-				timestampMs: getTimestamp(),
-				level,
-				subsystem,
-				category,
-				message: sanitizeMessage(message)
-			};
-			nextIndex += 1;
-			entries.push(entry);
-			bytes += entryCost(entry);
-			if (mode === "flush" && onOverflow) {
-				if (!overflowPending && bytes >= flushThresholdBytes) {
-					overflowPending = true;
-					onOverflow(entries.map(copyOf));
-				}
-			} else while (bytes > flushThresholdBytes && entries.length > 1) evictOne();
-			while (entries.length > maxEntries) evictOne();
-		},
-		snapshot() {
-			return entries.map(copyOf);
-		},
-		sliceSince(index) {
-			return entries.filter((entry) => entry.index > index).map(copyOf);
-		},
-		markFlushed(uptoIndex) {
-			let removedBytes = 0;
-			let keepFrom = 0;
-			while (keepFrom < entries.length && entries[keepFrom].index <= uptoIndex) {
-				removedBytes += entryCost(entries[keepFrom]);
-				keepFrom += 1;
-			}
-			entries.splice(0, keepFrom);
-			bytes -= removedBytes;
-			overflowPending = false;
-		},
-		setOverflowMode(next) {
-			mode = next;
-		},
-		get droppedCount() {
-			return dropped;
-		},
-		get byteEstimate() {
-			return bytes;
-		}
-	};
-}
 //#endregion
 //#region ../infra/src/crypto/randomUUID.ts
 /**
@@ -972,14 +884,6 @@ function toContractEntry(entry) {
 		category: entry.category
 	};
 }
-//#endregion
-//#region src/internal/trueSight/sessionMetadata.ts
-/**
-* Hosts that match this pattern are non-prod by heuristic. Known failure modes
-* (customer CNAMEs, devMode left on in prod) are documented for the planned
-* P1 team review — see plan §Operating decisions (B6).
-*/
-const NON_PROD_HOST_PATTERN = /stage|demo|saas-dev|localhost/i;
 function createInitialState() {
 	return {
 		sessionId: null,
@@ -1003,67 +907,16 @@ function createInitialState() {
 }
 let state = createInitialState();
 let sources = {};
-function stampStartedAtOnce() {
-	if (state.startedAtMs === null) state.startedAtMs = getTimestamp();
-}
 /** Tap for `createSession` — sessionId comes from the returned `interviewId`. */
-function noteSessionCreated(session, options = {}) {
-	if (session.interviewId) state.sessionId = session.interviewId;
-	stampStartedAtOnce();
-	state.sdkLanguage = options.language ?? state.sdkLanguage;
-	state.hasConfigurationId = state.hasConfigurationId || options.configurationId !== void 0;
-	state.hasExternalCustomerId = state.hasExternalCustomerId || options.externalCustomerId !== void 0;
-	state.hasProvidedSessionId = state.hasProvidedSessionId || options.interviewId !== void 0;
-}
-/**
-* Fallback sessionId for host-minted-token integrations that never called
-* `createSession`: `Features.sessionIdentifier` — used only when no
-* `interviewId` was observed.
-*/
-function noteFeatureConfig(features) {
-	if (!state.sessionId && features.sessionIdentifier) {
-		state.sessionId = features.sessionIdentifier;
-		stampStartedAtOnce();
-	}
-}
-/**
-* Entry-surface discriminator. `startOnboardingSection` is the default (weakest
-* signal — standalone module managers); richer surfaces upgrade it and are never
-* downgraded back.
-*/
-function noteIntegrationSurface(integrationType) {
-	if (integrationType === "startOnboardingSection") return;
-	state.integrationType = integrationType;
-}
-function noteEnvironment(environment) {
-	state.browser = environment.browser ?? state.browser;
-	state.osVersion = environment.osVersion ?? state.osVersion;
-	state.osLanguage = environment.osLanguage ?? state.osLanguage;
-}
-/**
-* WRITE-ONCE orchestrator identity (determinism guarantee for debugging):
-* a session is a flow or a workflow from its first orchestrator observation
-* and can never flip mid-session — a record labeled `flow` must always point
-* at a real flow. First non-null value wins for each of flowType/flowId/
-* workflowId; later calls are ignored (the service logs a self-health line
-* when a CONFLICTING orchestrator kind shows up).
-*/
-function noteFlowContext(context) {
-	state.flowType = state.flowType ?? context.flowType;
-	state.flowId = state.flowId ?? context.flowId ?? null;
-	state.workflowId = state.workflowId ?? context.workflowId ?? null;
-}
+function noteSessionCreated(session, options = {}) {}
+function noteEnvironment(environment) {}
 /**
 * `testing` heuristic: devMode OR non-prod API host pattern. Always a boolean —
 * the contract requires the field present on every record. Signals MERGE across
 * calls (a later apiUrl-only call must not erase an earlier devMode signal);
 * `testing` is recomputed from the merged pair.
 */
-function noteTestingSignals(signals) {
-	state.devModeSignal = signals.devMode ?? state.devModeSignal;
-	state.apiUrlSignal = signals.apiUrl ?? state.apiUrlSignal;
-	state.testing = state.devModeSignal === true || state.apiUrlSignal !== void 0 && NON_PROD_HOST_PATTERN.test(state.apiUrlSignal);
-}
+function noteTestingSignals(signals) {}
 /**
 * Live read of the merged testing signal (devMode OR non-prod host). Used to
 * gate host-console self-health noise so production host pages stay quiet while
@@ -1074,25 +927,12 @@ function isTrueSightTesting() {
 	return state.testing;
 }
 /**
-* Tap for `initializeSession({ token })` with a host-minted token — records
-* only the presence fact ("this token came from outside the SDK"), never the
-* token itself.
-*/
-function noteExternalTokenProvided() {
-	state.hasExternalToken = true;
-}
-/**
 * Wiring tap for every `initializeSession({ token })`: a token activated
 * before any `createSession` was observed on this page is host-minted, i.e.
 * external. (The exact `token`/`externalToken` web-semantics are a pending
 * Phase 0 contract ask — this inference is the interim mapping.)
 */
-function noteTokenActivated() {
-	if (state.sessionId === null) noteExternalTokenProvided();
-}
-function configureTrueSightMetadataSources(next) {
-	sources = next;
-}
+function noteTokenActivated() {}
 /** Explicit literal — the metadata half handed to the record builder. */
 function buildSessionMetadata() {
 	return {
@@ -1267,100 +1107,10 @@ async function fetchFeatureConfig(signal) {
 function resetFeatureConfigCache() {
 	cachedFeatures = null;
 }
-//#endregion
-//#region src/internal/trueSight/eventBridge.ts
-/**
-* Canonical subsystem registry (plan §Subsystem registry): one stable
-* lowercase dotted string per SDK area. The raw `eventModuleNames` wire
-* values are inconsistent (`SELFIE`, `datasharingconsent`, `AdSign`…), four
-* keys collapse into `ID`, and `workflow` doubles as a module name — this
-* table is the single normalization point, snapshot-frozen in tests so the
-* dashboard facet stays bounded (~70 strings) forever.
-*/
-const MODULE_SUBSYSTEMS = {
-	[eventModuleNames.selfie]: "module.selfie",
-	[eventModuleNames.faceCapture]: "module.face-capture",
-	[eventModuleNames.authentication]: "module.authentication",
-	[eventModuleNames.authFace]: "module.auth-face",
-	[eventModuleNames.mlConsent]: "module.ml-consent",
-	[eventModuleNames.combinedConsent]: "module.combined-consent",
-	[eventModuleNames.curpValidation]: "module.curp",
-	[eventModuleNames.faceMatch]: "module.face-match",
-	[eventModuleNames.qr]: "module.qr",
-	[eventModuleNames.videoSelfie]: "module.video-selfie",
-	[eventModuleNames.id]: "module.id",
-	[eventModuleNames.idCapture]: "module.id-capture",
-	[eventModuleNames.idVerification]: "module.id-verification",
-	[eventModuleNames.idOcr]: "module.id-ocr",
-	[eventModuleNames.document]: "module.document-capture",
-	[eventModuleNames.creditCard]: "module.credit-card-front",
-	[eventModuleNames.creditCardBack]: "module.credit-card-back",
-	[eventModuleNames.conference]: "module.conference",
-	[eventModuleNames.otp]: "module.otp",
-	[eventModuleNames.signature]: "module.e-sign",
-	[eventModuleNames.ekyc]: "module.e-kyc",
-	[eventModuleNames.watchlist]: "module.watchlist",
-	[eventModuleNames.globalWatchList]: "module.global-watchlist",
-	[eventModuleNames.customWatchList]: "module.custom-watchlist",
-	[eventModuleNames.email]: "module.email",
-	[eventModuleNames.phone]: "module.phone-number",
-	[eventModuleNames.instantVerifyEmail]: "module.instant-verify-email",
-	[eventModuleNames.instantVerifyConsent]: "module.instant-verify-consent",
-	[eventModuleNames.forms]: "module.forms",
-	[eventModuleNames.customModule]: "module.custom-module",
-	[eventModuleNames.geolocation]: "module.geolocation",
-	[eventModuleNames.ekyb]: "module.e-kyb",
-	[eventModuleNames.identityReuse]: "module.identity-reuse",
-	[eventModuleNames.antifraud]: "module.antifraud",
-	[eventModuleNames.aeSignature]: "module.ae-signature",
-	[eventModuleNames.qeSignature]: "module.qe-signature",
-	[eventModuleNames.crossDocumentDataMatch]: "module.cross-document-data-match",
-	[eventModuleNames.customFields]: "module.custom-fields",
-	[eventModuleNames.fieldComparison]: "module.field-comparison",
-	[eventModuleNames.personhood]: "module.personhood",
-	[eventModuleNames.watchlistForBusiness]: "module.watchlist-for-business",
-	[eventModuleNames.trustGraph]: "module.trust-graph",
-	[eventModuleNames.certificateIssuance]: "module.certificate-issuance",
-	[eventModuleNames.governmentValidation]: "module.government-validation",
-	[eventModuleNames.documentUpload]: "module.document-upload",
-	[eventModuleNames.home]: "module.home",
-	[eventModuleNames.workflow]: "module.workflow",
-	[eventModuleNames.fiscalQr]: "module.fiscal-qr"
-};
-const CUSTOM_SUBSYSTEM_MAX_CHARS = 40;
-/**
-* Canonical `module.<kebab>` for a raw wire module name. Unknown/integrator-
-* custom names get a sanitized lowercase fallback (capped) — custom SDK 2
-* integrations get real per-module detail, not a lumped `other`.
-*/
-function normalizeSubsystem(rawModule) {
-	if (rawModule === void 0) return "module.unknown";
-	const canonical = MODULE_SUBSYSTEMS[rawModule];
-	if (canonical !== void 0) return canonical;
-	const sanitized = rawModule.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, CUSTOM_SUBSYSTEM_MAX_CHARS).replace(/-+$/g, "");
-	return `module.${sanitized === "" ? "unknown" : sanitized}`;
-}
-const ID_SCAN_MODULES = /* @__PURE__ */ new Set([
-	eventModuleNames.id,
-	eventModuleNames.idCapture,
-	eventModuleNames.idVerification,
-	eventModuleNames.idOcr,
-	eventModuleNames.document,
-	eventModuleNames.documentUpload,
-	eventModuleNames.creditCard,
-	eventModuleNames.creditCardBack,
-	eventModuleNames.curpValidation
-]);
-const FACE_SCAN_MODULES = /* @__PURE__ */ new Set([
-	eventModuleNames.selfie,
-	eventModuleNames.faceCapture,
-	eventModuleNames.authentication,
-	eventModuleNames.authFace,
-	eventModuleNames.faceMatch,
-	eventModuleNames.videoSelfie,
-	eventModuleNames.personhood
-]);
-const ORCHESTRATION_MODULES = /* @__PURE__ */ new Set([eventModuleNames.home, eventModuleNames.workflow]);
+eventModuleNames.selfie, eventModuleNames.faceCapture, eventModuleNames.authentication, eventModuleNames.authFace, eventModuleNames.mlConsent, eventModuleNames.combinedConsent, eventModuleNames.curpValidation, eventModuleNames.faceMatch, eventModuleNames.qr, eventModuleNames.videoSelfie, eventModuleNames.id, eventModuleNames.idCapture, eventModuleNames.idVerification, eventModuleNames.idOcr, eventModuleNames.document, eventModuleNames.creditCard, eventModuleNames.creditCardBack, eventModuleNames.conference, eventModuleNames.otp, eventModuleNames.signature, eventModuleNames.ekyc, eventModuleNames.watchlist, eventModuleNames.globalWatchList, eventModuleNames.customWatchList, eventModuleNames.email, eventModuleNames.phone, eventModuleNames.instantVerifyEmail, eventModuleNames.instantVerifyConsent, eventModuleNames.forms, eventModuleNames.customModule, eventModuleNames.geolocation, eventModuleNames.ekyb, eventModuleNames.identityReuse, eventModuleNames.antifraud, eventModuleNames.aeSignature, eventModuleNames.qeSignature, eventModuleNames.crossDocumentDataMatch, eventModuleNames.customFields, eventModuleNames.fieldComparison, eventModuleNames.personhood, eventModuleNames.watchlistForBusiness, eventModuleNames.trustGraph, eventModuleNames.certificateIssuance, eventModuleNames.governmentValidation, eventModuleNames.documentUpload, eventModuleNames.home, eventModuleNames.workflow, eventModuleNames.fiscalQr;
+eventModuleNames.id, eventModuleNames.idCapture, eventModuleNames.idVerification, eventModuleNames.idOcr, eventModuleNames.document, eventModuleNames.documentUpload, eventModuleNames.creditCard, eventModuleNames.creditCardBack, eventModuleNames.curpValidation;
+eventModuleNames.selfie, eventModuleNames.faceCapture, eventModuleNames.authentication, eventModuleNames.authFace, eventModuleNames.faceMatch, eventModuleNames.videoSelfie, eventModuleNames.personhood;
+eventModuleNames.home, eventModuleNames.workflow;
 /**
 * Coarse category for HTTP-failure entries, from the endpoint path (event
 * map row 23: "by endpoint"). A conservative token heuristic — the category
@@ -1373,101 +1123,6 @@ function categoryForEndpoint(endpoint) {
 	if (/start|flow|workflow|feature-config|onboarding|finish-status/.test(endpoint)) return "orchestration";
 	return "other";
 }
-/** Coarse contract category from the RAW `event.module` value (plan rule). */
-function categoryForModule(rawModule) {
-	if (rawModule === void 0) return "other";
-	if (ID_SCAN_MODULES.has(rawModule)) return "idScan";
-	if (FACE_SCAN_MODULES.has(rawModule)) return "faceScan";
-	if (ORCHESTRATION_MODULES.has(rawModule)) return "orchestration";
-	return "other";
-}
-/** `verb key=value` line: undefined values drop their pair entirely. */
-function formatLine(verb, pairs = []) {
-	const parts = [verb];
-	for (const [key, value] of pairs) if (value !== void 0 && value !== null && value !== "") parts.push(`${key}=${String(value)}`);
-	return parts.join(" ");
-}
-/**
-* Analytics event → contract log tuple, or `null` for codes the taxonomy
-* does not cover (deny-by-default: nothing rides into the record unreviewed).
-* Levels/subsystems/categories per the plan's event map rows 5–6 and 16–20.
-*/
-function mapAnalyticsEventToLog(event) {
-	const payload = event.payload ?? {};
-	const subsystem = normalizeSubsystem(event.module);
-	const category = categoryForModule(event.module);
-	switch (event.code) {
-		case "moduleOpened":
-		case "moduleClosed": return {
-			level: "info",
-			subsystem,
-			category,
-			message: formatLine(event.code === "moduleOpened" ? "module opened" : "module closed", [["screen", event.screen]])
-		};
-		case "screenOpened":
-		case "screenClosed": return {
-			level: "debug",
-			subsystem,
-			category,
-			message: formatLine(event.code === "screenOpened" ? "screen opened" : "screen closed", [["screen", event.screen]])
-		};
-		case "errorTriggered": return {
-			level: "error",
-			subsystem,
-			category,
-			message: formatLine("errorTriggered", [
-				["errorName", stringOrUndefined(payload.errorName) ?? "unknown"],
-				["errorCode", stringOrUndefined(payload.errorCode)],
-				["reason", stringOrUndefined(payload.reason)]
-			])
-		};
-		case "captureAttemptFinished": return {
-			level: "debug",
-			subsystem,
-			category,
-			message: formatLine("capture attempt finished", [["logs", stringOrUndefined(payload.logs)]])
-		};
-		case "background":
-		case "foreground": return {
-			level: "debug",
-			subsystem,
-			category,
-			message: `visibility ${event.code}`
-		};
-		case "elementClicked": return {
-			level: "debug",
-			subsystem,
-			category,
-			message: formatLine("element clicked", [["element", stringOrUndefined(payload.element)], ["action", stringOrUndefined(payload.action)]])
-		};
-		case "browser": {
-			const browser = nameVersion(payload.browser);
-			const os = nameVersion(payload.os);
-			const device = typeof payload.device === "object" && payload.device !== null ? stringOrUndefined(payload.device.type) : void 0;
-			return {
-				level: "info",
-				subsystem: "session",
-				category: "other",
-				message: formatLine("browser info", [
-					["browser", browser],
-					["os", os],
-					["device", device],
-					["webrtc", typeof payload.isWebRtcSupported === "boolean" ? payload.isWebRtcSupported : void 0]
-				])
-			};
-		}
-		default: return null;
-	}
-}
-function stringOrUndefined(value) {
-	return typeof value === "string" ? value : void 0;
-}
-function nameVersion(value) {
-	if (typeof value !== "object" || value === null) return;
-	const { name, version } = value;
-	const joined = [name, version].filter((part) => typeof part === "string" && part !== "").join(" ");
-	return joined === "" ? void 0 : joined;
-}
 //#endregion
 //#region src/internal/trueSight/uploader.ts
 let cryptoProviderPromise = null;
@@ -1477,7 +1132,7 @@ let cryptoProviderPromise = null;
 * the service's prewarm).
 */
 function loadDiagnosticsCryptoProvider() {
-	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-HO8YXP4h.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
+	cryptoProviderPromise ??= import("./BrowserDiagnosticsCryptoProvider-BuzqvbhN.esm.js").then((module) => new module.BrowserDiagnosticsCryptoProvider());
 	return cryptoProviderPromise;
 }
 /**
@@ -1486,35 +1141,7 @@ function loadDiagnosticsCryptoProvider() {
 * rebuild ONCE with the oldest half of the logs dropped; still over → drop
 * the upload entirely rather than send an invalid envelope.
 */
-async function uploadDiagnostics(record, options) {
-	const warn = options.warn ?? defaultWarn;
-	try {
-		const sealer = await (options.loadCrypto ?? loadDiagnosticsCryptoProvider)();
-		let envelope = await sealer.seal(JSON.stringify(record));
-		let envelopeBytes = utf8ByteLength(JSON.stringify(envelope));
-		if (envelopeBytes > 1e6) {
-			const trimmed = {
-				...record,
-				logs: record.logs.slice(Math.floor(record.logs.length / 2))
-			};
-			warn(`[TrueSight] envelope ${envelopeBytes}B over the 1MB cap — rebuilt with the oldest ${record.logs.length - trimmed.logs.length} logs dropped`);
-			envelope = await sealer.seal(JSON.stringify(trimmed));
-			envelopeBytes = utf8ByteLength(JSON.stringify(envelope));
-			if (envelopeBytes > 1e6) {
-				warn("[TrueSight] envelope still over the cap after trim — upload dropped");
-				return;
-			}
-		} else if (envelopeBytes > 9e5) warn(`[TrueSight] envelope ${envelopeBytes}B is approaching the 1MB cap`);
-		const keepalive = options.keepalive === true && envelopeBytes <= 6e4;
-		if (isForwardedFalse((await options.post(endpoints.diagnosticsData, envelope, keepalive ? { keepalive: true } : {})).data)) warn("[TrueSight] proxy accepted the record but did not forward it (forwarded:false)");
-	} catch (error) {
-		warn(`[TrueSight] diagnostics upload failed (no retry): ${String(error)}`);
-	}
-}
-function isForwardedFalse(data) {
-	return typeof data === "object" && data !== null && "forwarded" in data && data.forwarded === false;
-}
-function defaultWarn() {}
+async function uploadDiagnostics(record, options) {}
 //#endregion
 //#region src/internal/trueSight/trueSightService.ts
 let active = false;
@@ -1531,21 +1158,15 @@ let options = defaultOptions();
 let observedManagerKind = null;
 let orchestratorConflictLogged = false;
 let snapshotRecordId = null;
-let cachedPendingEnvelope = null;
 let snapshotDirty = false;
 let captureActive = false;
 let rebuildInFlight = false;
 let sealFailureLogged = false;
 let pendingSlotRegistered = false;
 let recoveryStarted = false;
-let bridgeFailureCount = 0;
-let envSnapshotLogged = false;
 let hintTransitionCount = 0;
 let hintSuppressedCount = 0;
 let lastHintStatus = null;
-let overflowBatchCount = 0;
-let lastFlushRecordId = null;
-let overflowDormant = false;
 let overflowFlushInFlightUpTo = null;
 let dirtyTimerHandle = null;
 let unsubscribePageHide = null;
@@ -1563,25 +1184,7 @@ function defaultOptions() {
 * encryption lock); `reset()` → `resetTrueSight()` starts a new one.
 * `enabled:false` is a no-op by design: zero subscriptions, zero state.
 */
-function initializeTrueSightDiagnostics(serviceOptions) {
-	if (!serviceOptions.enabled || active) return;
-	active = true;
-	options = {
-		...defaultOptions(),
-		...pickDefined(serviceOptions)
-	};
-	buffer = createLogBuffer({ onOverflow: handleBufferOverflow });
-	configureTrueSightMetadataSources({
-		getHasToken: () => getToken() !== null,
-		getE2eEncryptionEnabled: isHttpEncrypted
-	});
-	unsubscribeEvents = subscribeEvent(handleAnalyticsEvent);
-	trueSightLog("debug", "diagnostics", "other", "diagnostics initialized");
-	if (options.pageLifecycle && options.storage) unsubscribePageHide = options.pageLifecycle.onPageHide(handlePageHide);
-	if (options.timer && options.storage) dirtyTimerHandle = options.timer.setInterval(() => {
-		maybeRebuildSnapshot();
-	}, SNAPSHOT_DIRTY_INTERVAL_MS);
-}
+function initializeTrueSightDiagnostics(serviceOptions) {}
 /**
 * Session-time entry, called from `initializeSession` once feature config is
 * known. Collection is already running by then (buffering starts at
@@ -1596,7 +1199,6 @@ function startTrueSightCollection(features) {
 		prewarmCrypto();
 	}
 	if (features) {
-		noteFeatureConfig(features);
 		if (!flagResolutionStarted) {
 			flagResolutionStarted = true;
 			applyFeatureResolution(features, false);
@@ -1604,7 +1206,6 @@ function startTrueSightCollection(features) {
 	} else if (!flagResolutionStarted) {
 		flagResolutionStarted = true;
 		options.fetchFeatures().then((fetched) => {
-			noteFeatureConfig(fetched);
 			applyFeatureResolution(fetched, false);
 		}, () => {
 			applyFeatureResolution(null, true);
@@ -1617,10 +1218,7 @@ function startTrueSightCollection(features) {
 * snapshot rebuilds are suppressed — the collector must never compete with
 * 30 fps capture. Deactivation flushes the deferred rebuild.
 */
-function noteTrueSightCaptureActivity(activityActive) {
-	captureActive = activityActive;
-	if (!activityActive) maybeRebuildSnapshot();
-}
+function noteTrueSightCaptureActivity(activityActive) {}
 /**
 * Seals and uploads the one final record per session. The upload-relevant
 * state — transport, metadata (live token/E2EE getters read NOW), buffered
@@ -1638,7 +1236,6 @@ function finalizeTrueSight(outcome, failureReason) {
 	if (transport === null || cryptoUnsupported) return Promise.resolve();
 	const record = buildDiagnosticsRecord(metadata, logs, outcome, failureReason);
 	if (record === null) return Promise.resolve();
-	cachedPendingEnvelope = null;
 	if (options.storage && metadata.sessionId) clearPending(metadata.sessionId, { storage: options.storage });
 	return options.upload(record, {
 		post: transport,
@@ -1670,12 +1267,6 @@ function trueSightHintTransition(subsystem, category, status) {
 	}
 	trueSightLog("debug", subsystem, category, `hint changed status=${status}`);
 }
-function resetHintBudget() {
-	if (hintSuppressedCount > 0) trueSightLog("debug", "diagnostics", "other", `hint transitions suppressed count=${hintSuppressedCount}`);
-	hintTransitionCount = 0;
-	hintSuppressedCount = 0;
-	lastHintStatus = null;
-}
 /** Buffer tap for wiring points and self-health lines. No-op when inactive. */
 function trueSightLog(level, subsystem, category, message) {
 	if (buffer === null) return;
@@ -1698,11 +1289,7 @@ function notifyTrueSightFlowEvent(event, managerKind) {
 				trueSightLog("info", managerKind, "orchestration", "flow.started");
 				break;
 			case "flow.ready":
-				if (identityAccepted) noteFlowContext({
-					flowType: managerKind,
-					flowId: managerKind === "flow" ? event.flowId ?? null : null,
-					workflowId: managerKind === "workflow" ? event.flowId ?? null : null
-				});
+				if (identityAccepted) managerKind === "flow" && event.flowId, managerKind === "workflow" && event.flowId;
 				trueSightLog("info", managerKind, "orchestration", `flow.ready ${managerKind === "workflow" ? "workflowId" : "flowId"}=${event.flowId ?? "unknown"}`);
 				break;
 			case "flow.module.started":
@@ -1760,8 +1347,6 @@ function stampOrchestratorIdentity(managerKind) {
 		}
 		return false;
 	}
-	noteIntegrationSurface(managerKind === "workflow" ? "startWorkflow" : "startFlow");
-	noteFlowContext({ flowType: managerKind });
 	return true;
 }
 /** Full teardown, called from `reset()` AFTER finalize captured its snapshot. */
@@ -1785,51 +1370,19 @@ function resetTrueSight() {
 	observedManagerKind = null;
 	orchestratorConflictLogged = false;
 	snapshotRecordId = null;
-	cachedPendingEnvelope = null;
 	snapshotDirty = false;
 	captureActive = false;
 	rebuildInFlight = false;
 	sealFailureLogged = false;
 	pendingSlotRegistered = false;
 	recoveryStarted = false;
-	bridgeFailureCount = 0;
-	envSnapshotLogged = false;
 	hintTransitionCount = 0;
 	hintSuppressedCount = 0;
 	lastHintStatus = null;
-	overflowBatchCount = 0;
-	lastFlushRecordId = null;
-	overflowDormant = false;
 	overflowFlushInFlightUpTo = null;
 	options = defaultOptions();
 	resetTrueSightMetadata();
 }
-function handleAnalyticsEvent(event) {
-	if (finalized) return;
-	try {
-		const mapped = mapAnalyticsEventToLog(event);
-		if (mapped === null) return;
-		trueSightLog(mapped.level, mapped.subsystem, mapped.category, mapped.message);
-		if (mapped.level === "error" || mapped.level === "severe") logEnvironmentSnapshotOnce();
-		if (event.code === "captureAttemptFinished") resetHintBudget();
-	} catch {
-		bridgeFailureCount += 1;
-		if (bridgeFailureCount === 1) trueSightLog("warning", "diagnostics", "other", "bridge mapping failed");
-	}
-}
-/**
-* Environment-snapshot-on-first-error (event map 19d): the "conditions at
-* the moment of failure" line — logged once per session, right after the
-* first error-level entry. The snapshot closure is injected (navigator
-* facts live behind the L0 environment provider).
-*/
-function logEnvironmentSnapshotOnce() {
-	if (envSnapshotLogged || options.getEnvironmentSnapshot === void 0) return;
-	envSnapshotLogged = true;
-	try {
-		trueSightLog("info", "session", "other", `environment at first error ${options.getEnvironmentSnapshot()}`);
-	} catch {}
-}
 function applyFeatureResolution(features, unresolvable) {
 	if (!active || remoteKilled || finalized) return;
 	const entry = features?.features?.find((candidate) => candidate.feature === "TRUESIGHT_DIAGNOSTICS");
@@ -1846,67 +1399,6 @@ function remoteKill() {
 	unsubscribeEvents = null;
 }
 /**
-* Size-limit overflow flush (plan §1.3, event map 10b): the buffer crossed
-* ~600 KB mid-session — ship the slice as its OWN contract-valid record
-* (fresh id, same sessionId, index continuity ties the records together)
-* and keep logging. **STAGING-ONLY until BE ships `inProgress`/`flushReason`
-* (hard gate B2)**: outside staging (`testing !== true`) the machinery goes
-* dormant and the buffer falls back to eviction. Interim outcome marker is
-* the sanctioned `failure/interrupted` pair; the terminal record supersedes.
-*/
-function handleBufferOverflow(slice) {
-	dispatchOverflowSlice(slice);
-}
-async function dispatchOverflowSlice(slice) {
-	if (!active || remoteKilled || finalized || overflowDormant || slice.length === 0) return;
-	const metadata = buildSessionMetadata();
-	if (metadata.testing !== true) {
-		goOverflowDormant("overflowFlush dormant reason=prod");
-		return;
-	}
-	if (cryptoUnsupported) {
-		goOverflowDormant("overflowFlush dormant reason=cryptoUnsupported");
-		return;
-	}
-	const transport = safeCaptureTransport();
-	if (transport === null) {
-		goOverflowDormant("overflowFlush dormant reason=noTransport");
-		return;
-	}
-	overflowBatchCount += 1;
-	const record = buildDiagnosticsRecord(metadata, [{
-		index: slice[0].index,
-		timestampMs: getTimestamp(),
-		level: "info",
-		subsystem: "diagnostics",
-		category: "other",
-		message: `sizeLimitFlush batch=${overflowBatchCount} prevRecordId=${lastFlushRecordId ?? "none"}`
-	}, ...slice], "failure", "interrupted");
-	if (record === null) {
-		goOverflowDormant("overflowFlush dormant reason=unbuildable");
-		return;
-	}
-	lastFlushRecordId = record.id;
-	const upToIndex = slice[slice.length - 1].index;
-	overflowFlushInFlightUpTo = upToIndex;
-	await options.upload(record, {
-		post: transport,
-		loadCrypto: options.loadCrypto,
-		warn: selfHealthWarn
-	});
-	buffer?.markFlushed(upToIndex);
-	overflowFlushInFlightUpTo = null;
-	snapshotDirty = true;
-	trueSightLog("info", "diagnostics", "other", `sizeLimitFlush dispatched batch=${overflowBatchCount} recordId=${record.id} entries=${slice.length}`);
-}
-/** B2 fallback: machinery dormant, eviction takes over — logged exactly once. */
-function goOverflowDormant(message) {
-	if (overflowDormant) return;
-	overflowDormant = true;
-	trueSightLog("warning", "diagnostics", "other", message);
-	buffer?.setOverflowMode("evict");
-}
-/**
 * Debounced interrupted-snapshot rebuild (plan §1.8): triggered by module
 * boundaries and the dirty-interval tick, suppressed while a capture loop is
 * active (C7). Seals the CURRENT state as a `failure/interrupted` record
@@ -1925,7 +1417,6 @@ function maybeRebuildSnapshot() {
 	snapshotDirty = false;
 	rebuildInFlight = true;
 	options.loadCrypto().then((sealer) => sealer.seal(JSON.stringify(record))).then(async (envelope) => {
-		cachedPendingEnvelope = envelope;
 		if (!pendingSlotRegistered) {
 			pendingSlotRegistered = true;
 			await registerPendingSlot(sessionId, { storage });
@@ -1946,22 +1437,6 @@ function maybeRebuildSnapshot() {
 	});
 }
 /**
-* Page-hide = persist only, NEVER send (locked decision): one synchronous-
-* effective write of the freshest pre-sealed snapshot. Building or posting
-* here is forbidden — a hidden tab is frequently a user who returns.
-*/
-function handlePageHide() {
-	if (!active || remoteKilled || finalized || cachedPendingEnvelope === null || options.storage === void 0) return;
-	const sessionId = buildSessionMetadata().sessionId;
-	if (!sessionId) return;
-	writePendingEnvelope(sessionId, {
-		v: 1,
-		persistedAt: getTimestamp(),
-		envelope: cachedPendingEnvelope
-	}, { storage: options.storage });
-	trueSightLog("debug", "diagnostics", "other", "snapshot persisted on pagehide");
-}
-/**
 * Next-load recovery off the first-token-observed hook (A1) — runs once per
 * lifecycle, fire-and-forget, and reports the A5 loss counters as a
 * self-health line when there was anything to report.
@@ -2026,19 +1501,6 @@ function selfHealthWarn(message) {
 	if (isTrueSightTesting()) console.warn(message);
 	trueSightLog("warning", "diagnostics", "other", message);
 }
-/** Spread-safe subset: injected seams only, `undefined` values dropped. */
-function pickDefined(serviceOptions) {
-	const picked = {};
-	if (serviceOptions.fetchFeatures) picked.fetchFeatures = serviceOptions.fetchFeatures;
-	if (serviceOptions.captureTransport) picked.captureTransport = serviceOptions.captureTransport;
-	if (serviceOptions.upload) picked.upload = serviceOptions.upload;
-	if (serviceOptions.loadCrypto) picked.loadCrypto = serviceOptions.loadCrypto;
-	if (serviceOptions.pageLifecycle) picked.pageLifecycle = serviceOptions.pageLifecycle;
-	if (serviceOptions.timer) picked.timer = serviceOptions.timer;
-	if (serviceOptions.storage) picked.storage = serviceOptions.storage;
-	if (serviceOptions.getEnvironmentSnapshot) picked.getEnvironmentSnapshot = serviceOptions.getEnvironmentSnapshot;
-	return picked;
-}
 /** ` index=i total=n` suffix when the flow event carries module positioning. */
 function modulePosition(payload) {
 	if (typeof payload !== "object" || payload === null) return "";
@@ -2046,4 +1508,4 @@ function modulePosition(payload) {
 	return `${typeof moduleIndex === "number" ? ` index=${moduleIndex}` : ""}${typeof totalModules === "number" ? ` total=${totalModules}` : ""}`;
 }
 //#endregion
-export { upgradeToWasmHttpClient as C, buildWasmConfigFromBasePath as D, buildDefaultWasmConfig as E, getBarcodeEnhanceModelUrl as O, resetHttpClientState as S, DEFAULT_WASM_VERSION as T, noteTestingSignals as _, notifyTrueSightManagerStopped as a, getStoredHttpConfig as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, resolveWasmConfig as k, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, createApi as w, installFreshHttpClient as x, randomUUID as y };
+export { DEFAULT_WASM_VERSION as C, resolveWasmConfig as D, getBarcodeEnhanceModelUrl as E, upgradeToWasmHttpClient as S, buildWasmConfigFromBasePath as T, noteTestingSignals as _, notifyTrueSightManagerStopped as a, installFreshHttpClient as b, trueSightHintTransition as c, fetchFeatureConfig as d, isFeatureEnabled as f, noteSessionCreated as g, noteEnvironment as h, notifyTrueSightFlowEvent as i, trueSightLog as l, isTrueSightTesting as m, initializeTrueSightDiagnostics as n, resetTrueSight as o, resetFeatureConfigCache as p, noteTrueSightCaptureActivity as r, startTrueSightCollection as s, finalizeTrueSight as t, categoryForEndpoint as u, noteTokenActivated as v, buildDefaultWasmConfig as w, resetHttpClientState as x, getStoredHttpConfig as y };