@incodetech/core 2.3.2 → 2.4.0-rc.1

package/dist/Actor-DpTj5PFb.d.ts

@@ -0,0 +1 @@
+import "./Manager-C9T5amUN.js";

package/dist/{BaseWasmProvider-Dyi6dKp1.d.ts → BaseWasmProvider-Bq3OHo7P.d.ts}

@@ -1,5 +1,5 @@
-import { c as WasmPipeline } from "./warmup-Cis2p6O0.js";
-import { _ as MLProviderConfig } from "./createFaceAvatar-BlcTYgJv.js";
+import { c as WasmPipeline } from "./warmup-BO57syF6.js";
+import { _ as MLProviderConfig } from "./createFaceAvatar-lYX0VTYs.js";
 //#region ../infra/src/wasm/WasmPipelineType.d.ts
 declare enum WasmPipelineType {
   IdBlurGlarePipeline = 0,

package/dist/BrowserDiagnosticsEnvelopeProvider-BQca6KPG.esm.js

@@ -0,0 +1,43 @@
+//#region ../infra/src/providers/browser/diagnosticsEnvelopeEncoding.ts
+/**
+* Byte helpers shared by TrueSight envelope sealers (ENG-58122). Kept apart
+* from the provider so any future sealer composes the same gzip and base64url
+* steps around its own sealing step.
+*/
+/** UTF-8 encodes and gzips `text` via the native `CompressionStream`. */
+async function gzipUtf8(text) {
+	const stream = new Blob([text]).stream().pipeThrough(new CompressionStream("gzip"));
+	return new Uint8Array(await new Response(stream).arrayBuffer());
+}
+/** Unpadded base64url. Chunked so large payloads never overflow the call stack. */
+function toBase64Url(bytes) {
+	let binary = "";
+	for (let i = 0; i < bytes.length; i += 32768) binary += String.fromCharCode(...bytes.subarray(i, i + 32768));
+	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/u, "");
+}
+//#endregion
+//#region ../infra/src/providers/browser/BrowserDiagnosticsEnvelopeProvider.ts
+/**
+* Browser sealer for TrueSight diagnostics (ENG-48677 plan §1.5, ENG-58122):
+* JSON string → gzip via native CompressionStream → base64url → the
+* unencrypted `alg:"none"` contract envelope. No key and no encryption; the
+* payload is sanitized before it gets here and travels over HTTPS. Designed
+* to be loaded as a LAZY chunk — zero bytes on the host page's critical path.
+*/
+var BrowserDiagnosticsEnvelopeProvider = class {
+	isSupported() {
+		return typeof CompressionStream !== "undefined";
+	}
+	async seal(plaintext) {
+		return {
+			version: 1,
+			alg: "none",
+			compression: "gzip",
+			iv: "none",
+			ciphertext: toBase64Url(await gzipUtf8(plaintext)),
+			tag: "none"
+		};
+	}
+};
+//#endregion
+export { BrowserDiagnosticsEnvelopeProvider };

package/dist/{FaceDetectionProvider-DtmtCKa9.esm.js → FaceDetectionProvider-BIImDZrc.esm.js}

@@ -1,14 +1,17 @@
-import { c as trueSightHintTransition, r as noteTrueSightCaptureActivity } from "./trueSightService-M5VpCo96.esm.js";
-import { s as wasmRuntime } from "./warmup-ChDwHSel.esm.js";
-import { i as BaseWasmProvider } from "./safeStorage-BdU9_m2E.esm.js";
-import { t as ensureWasmPipelines } from "./setup-BuPbxpwF.esm.js";
-import "./sessionInitializer-CnhAkMUN.esm.js";
-import { t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
+import { c as wasmRuntime } from "./warmup-BElYWRh7.esm.js";
+import { t as ensureWasmPipelines } from "./setup-B7ehQ-lf.esm.js";
+import { r as BaseWasmProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
+import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { l as trueSightHintTransition, r as noteTrueSightCaptureActivity } from "./trueSightService-BzLdXpmJ.esm.js";
+import "./sessionInitializer-DVWMJh25.esm.js";
+import { t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
 import { c as isIPhone14OrHigher, i as isDesktop } from "./platform-DkcRc9JV.esm.js";
 import { i as requestCameraAccess, o as stopCameraStream, r as getCameraReacquisitionConstraints } from "./camera-sIa9ceW2.esm.js";
 import { t as IncodeCanvas } from "./canvas-BxFzWTt-.esm.js";
-import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-mwKFTlhR.esm.js";
-import { i as hasBackCamera, n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-B0-YgP_y.esm.js";
+import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-CLwrF5wD.esm.js";
+import { i as hasBackCamera, n as getBackCameraStream, r as getDesktopCameraStream, t as ensureFrontCameraStream } from "./backCameraStream-CMvXj4X4.esm.js";
+import "./deepsightService-tGP53cSS.esm.js";
+import { t as getDeviceClass } from "./getDeviceClass-bsWdEDxP.esm.js";
 //#region src/internal/faceCapture/onDeviceFaceResults.ts
 /**
 * On-device still-face capture is owned by the protected camera-cycle actor.
@@ -17,6 +20,118 @@ import { i as hasBackCamera, n as getBackCameraStream, r as getDesktopCameraStre
 */
 const isOnDeviceMode = (config) => config.onDeviceFaceResultsSubmissionEnabled === true;
 //#endregion
+//#region src/internal/faceCapture/types.ts
+const FACE_ERROR_CODES = {
+	FACE_OCCLUDED: "FACE_OCCLUDED",
+	LIVENESS: "LIVENESS_ERROR",
+	BRIGHTNESS: "BRIGHTNESS_ERROR",
+	LENSES: "LENSES_ERROR",
+	MASK: "MASK_ERROR",
+	CLOSED_EYES: "CLOSED_EYES_ERROR",
+	HEAD_COVER: "HEAD_COVER_ERROR",
+	SERVER: "SERVER_ERROR",
+	FACE_NOT_FOUND: "FACE_NOT_FOUND",
+	MULTIPLE_FACES: "MULTIPLE_FACES",
+	TOO_BLURRY: "TOO_BLURRY_ERROR",
+	TOO_DARK: "TOO_DARK_ERROR",
+	USER_IS_NOT_RECOGNIZED: "USER_IS_NOT_RECOGNIZED",
+	SPOOF_ATTEMPT_DETECTED: "SPOOF_ATTEMPT_DETECTED",
+	FACE_TOO_DARK: "FACE_TOO_DARK",
+	LENSES_DETECTED: "LENSES_DETECTED",
+	FACE_MASK_DETECTED: "FACE_MASK_DETECTED",
+	CLOSED_EYES_DETECTED: "CLOSED_EYES_DETECTED",
+	HEAD_COVER_DETECTED: "HEAD_COVER_DETECTED",
+	FACE_CROPPING_FAILED: "FACE_CROPPING_FAILED",
+	FACE_TOO_SMALL: "FACE_TOO_SMALL",
+	FACE_TOO_BLURRY: "FACE_TOO_BLURRY",
+	BAD_PHOTO_QUALITY: "BAD_PHOTO_QUALITY",
+	PROCESSING_ERROR: "PROCESSING_ERROR",
+	BAD_REQUEST: "BAD_REQUEST",
+	NONEXISTENT_CUSTOMER: "NONEXISTENT_CUSTOMER",
+	HINT_NOT_PROVIDED: "HINT_NOT_PROVIDED",
+	SELFIE_IMAGE_LOW_QUALITY: "SELFIE_IMAGE_LOW_QUALITY",
+	NO_MORE_ATTEMPTS: "NO_MORE_ATTEMPTS"
+};
+//#endregion
+//#region src/internal/faceCapture/faceUploadErrorCode.ts
+/** `status` values in the body of a 400 from a face upload (`/omni/add/face`). */
+const FACE_UPLOAD_ERROR_CODES = {
+	3004: FACE_ERROR_CODES.FACE_NOT_FOUND,
+	3005: FACE_ERROR_CODES.FACE_NOT_FOUND,
+	3006: FACE_ERROR_CODES.TOO_BLURRY,
+	3007: FACE_ERROR_CODES.TOO_DARK,
+	4010: FACE_ERROR_CODES.MULTIPLE_FACES,
+	4019: FACE_ERROR_CODES.FACE_NOT_FOUND,
+	4077: FACE_ERROR_CODES.BAD_PHOTO_QUALITY,
+	4078: FACE_ERROR_CODES.FACE_OCCLUDED
+};
+/**
+* Maps a rejected face upload to the error the capture screen shows. Only a
+* 400 carries a verdict on the face; any other HTTP status is a server error.
+*/
+function getFaceUploadErrorCode(httpStatus, responseStatus) {
+	if (httpStatus !== 400) return FACE_ERROR_CODES.SERVER;
+	if (responseStatus === void 0) return FACE_ERROR_CODES.BAD_REQUEST;
+	return FACE_UPLOAD_ERROR_CODES[responseStatus] ?? FACE_ERROR_CODES.BAD_REQUEST;
+}
+//#endregion
+//#region src/modules/selfie/selfieUploadService.ts
+/**
+* Uploads a selfie image to the backend.
+*/
+async function uploadSelfie({ encryptedBase64Image, faceCoordinates, signal, metadata, recordingId, imageType = "selfie", captureType, deepsightService }) {
+	try {
+		const payload = {
+			base64Image: encryptedBase64Image,
+			faceCoordinates: faceCoordinates ?? void 0,
+			encrypted: true,
+			clientInfo: { deviceClass: getDeviceClass() },
+			metadata: metadata ?? void 0
+		};
+		const query = {
+			imageType,
+			captureType
+		};
+		if (recordingId) query.recordingId = recordingId;
+		const res = await api.post(endpoints.selfie, payload, {
+			signal,
+			query
+		});
+		if (!res.ok) throw new Error(`POST ${endpoints.selfie} failed: ${res.status} ${res.statusText}`);
+		if (deepsightService) addDeviceStats({
+			frontIdStatsAnalysisStatus: "",
+			backIdStatsAnalysisStatus: "",
+			selfieStatsAnalysisStatus: deepsightService.getAnalysisStatus(),
+			motionStatus: deepsightService.getMotionStatus()
+		});
+		return res.data;
+	} catch (error) {
+		const errorCode = getFaceErrorCodeFromHttpError(error);
+		throw withTransportStatus(new Error(errorCode ?? FACE_ERROR_CODES.SERVER), error);
+	}
+}
+/**
+* Copies the HTTP status of `source` onto `target`. The code alone cannot say
+* whether the request got a verdict or never reached the backend — a network
+* failure and a 5xx both map to `SERVER_ERROR` — so a caller that retries
+* transport failures needs the status to survive this mapping.
+*/
+function withTransportStatus(target, source) {
+	if (typeof source === "object" && source !== null && "status" in source && typeof source.status === "number") return Object.assign(target, { status: source.status });
+	return target;
+}
+const getFaceErrorCodeFromHttpError = (error) => {
+	const err = error;
+	if (err.ok !== false || typeof err.status !== "number") return;
+	return getFaceUploadErrorCode(err.status, typeof err.data?.status === "number" ? err.data.status : void 0);
+};
+async function processFace(imageType = "selfie", signal) {
+	return (await api.post(endpoints.processFace, {}, {
+		query: { imageType },
+		signal
+	})).data;
+}
+//#endregion
 //#region src/internal/faceCapture/faceCaptureServices.ts
 function sendLabelInspectionEvent() {
 	return addDeviceStats({ cameraLabelInspectionStatus: "FAIL" });
@@ -156,7 +271,7 @@ function startDetection(params) {
 	};
 }
 async function initializeDeepsightSession(options) {
-	const { loadDeepsightSession } = await import("./deepsightLoader-v-dLejS-.esm.js");
+	const { loadDeepsightSession } = await import("./deepsightLoader-DZMdYSl-.esm.js");
 	return loadDeepsightSession({
 		ds: options.ds,
 		storage: options.storage
@@ -428,4 +543,4 @@ var FaceDetectionProvider = class extends BaseWasmProvider {
 	}
 };
 //#endregion
-export { sendLabelInspectionEvent as a, isOnDeviceMode as c, initializeDeepsightSession as i, encryptSelfieImage as n, startDetection as o, initializeCamera as r, stopStream as s, FaceDetectionProvider as t };
+export { sendLabelInspectionEvent as a, processFace as c, FACE_ERROR_CODES as d, isOnDeviceMode as f, initializeDeepsightSession as i, uploadSelfie as l, encryptSelfieImage as n, startDetection as o, initializeCamera as r, stopStream as s, FaceDetectionProvider as t, getFaceUploadErrorCode as u };

package/dist/HttpRequestError-Bh0pNGSC.esm.js

@@ -0,0 +1,35 @@
+//#region ../infra/src/http/HttpRequestError.ts
+const listeners = /* @__PURE__ */ new Set();
+function subscribeHttpErrors(listener) {
+	listeners.add(listener);
+	return () => {
+		listeners.delete(listener);
+	};
+}
+/** The error shape shared by fetch, XHR, WASM and external requests. */
+var HttpRequestError = class extends Error {
+	constructor(status, statusText, url, method, headers, data) {
+		super(`HTTP ${status} ${statusText}`);
+		this.status = status;
+		this.statusText = statusText;
+		this.url = url;
+		this.method = method;
+		this.headers = headers;
+		this.data = data;
+		this.ok = false;
+		this.name = "HttpRequestError";
+		this.statusCode = status;
+	}
+};
+/** Report at the transport's rejection site; constructing an error is inert. */
+function reportHttpError(error, requestHeaders) {
+	for (const listener of [...listeners]) {
+		if (!listeners.has(listener)) continue;
+		try {
+			listener(error, requestHeaders);
+		} catch {}
+	}
+	return error;
+}
+//#endregion
+export { reportHttpError as n, subscribeHttpErrors as r, HttpRequestError as t };

package/dist/{IIdCaptureCapability-RNiFhvXR.d.ts → IIdCaptureCapability-CGcEt2Cw.d.ts}

@@ -1,5 +1,5 @@
-import "./warmup-Cis2p6O0.js";
-import { _ as MLProviderConfig, g as IMLProviderCapability, y as IncodeCanvas } from "./createFaceAvatar-BlcTYgJv.js";
+import "./warmup-BO57syF6.js";
+import { _ as MLProviderConfig, g as IMLProviderCapability, y as IncodeCanvas } from "./createFaceAvatar-lYX0VTYs.js";
 //#region ../infra/src/wasm/mlWasmBridgeTypes.d.ts
 /**
  * Decoded PDF417 barcode surfaced from the WASM ID-capture pipeline during

package/dist/{IWasmUtilCapability-CNWRl7jr.d.ts → IWasmUtilCapability-GF2n7sfm.d.ts}

@@ -1,5 +1,5 @@
-import { c as WasmPipeline } from "./warmup-Cis2p6O0.js";
-import { _ as MLProviderConfig } from "./createFaceAvatar-BlcTYgJv.js";
+import { c as WasmPipeline } from "./warmup-BO57syF6.js";
+import { _ as MLProviderConfig } from "./createFaceAvatar-lYX0VTYs.js";
 //#region ../infra/src/capabilities/IStorageCapability.d.ts
 /**
  * Storage capability interface for abstracting storage operations.
@@ -38,6 +38,11 @@ type VirtualCameraCheckOutput = {
   itr: boolean | null;
   skipped: boolean | null;
 };
+/**
+ * Fingerprint signal buckets the native module can report, one per row of the
+ * `/omni/add/device-fingerprint-signals` backend table.
+ */
+type FingerprintSignalType = 'device' | 'behaviour' | 'pid';
 type IWasmUtilCapability = {
   /**
    * Whether the provider has been initialized and is ready to be used.
@@ -80,11 +85,29 @@ type IWasmUtilCapability = {
    */
   getInspectorOpened(): boolean;
   /**
-   * Toggles the WASM module's production mode. When `true`, the native module
-   * suppresses its verbose debug logging/console output.
+   * Retained for callers that manually control the native log level: `true`
+   * keeps errors only; `false` enables debug logs. Console output still requires
+   * `wasm.showLogs: true` at the first module load.
    */
   setProductionMode(productionMode: boolean): Promise<void>;
   getMetadata(): string;
+  /**
+   * Turns native behaviour-signals collection on or off (`sbc`). It is on by
+   * default; pass `false` to honor a fingerprint opt-out.
+   */
+  setBehaviourSignalsCollection(enabled: boolean): void;
+  /**
+   * Reads one encrypted fingerprint signal bucket from the native module,
+   * waiting for the one-time async prefetch first. Resolves to an empty string
+   * when the bucket has no data. Behaviour reads drain the native buffer.
+   */
+  getFingerprintSignals(type: FingerprintSignalType): Promise<string>;
+  /**
+   * Starts the one-time async prefetch that {@link getFingerprintSignals}
+   * waits for, ahead of the first read. Idempotent: later calls (and reads)
+   * join the same collection.
+   */
+  prefetchFingerprintSignals(): Promise<void>;
   analyzeFrame(image: ImageData): Promise<void>;
   getCheck(): string;
   /**
@@ -114,4 +137,4 @@ type IWasmUtilCapability = {
   dispose(): Promise<void>;
 };
 //#endregion
-export { IStorageCapability as i, VirtualCameraCheckOutput as n, WasmUtilConfig as r, IWasmUtilCapability as t };
+export { IStorageCapability as a, WasmUtilConfig as i, IWasmUtilCapability as n, VirtualCameraCheckOutput as r, FingerprintSignalType as t };

package/dist/{Manager-CQQ99QOI.d.ts → Manager-C9T5amUN.d.ts}

@@ -1,4 +1,10 @@
-import "./StateMachine-EDpYWy0i.js";
+//#region ../../node_modules/.pnpm/xstate@5.24.0/node_modules/xstate/dist/declarations/src/index.d.ts
+declare global {
+  interface SymbolConstructor {
+    readonly observable: symbol;
+  }
+}
+//#endregion
 //#region ../infra/src/manager/Manager.d.ts
 /**
  * Base manager interface providing state access, subscriptions, and lifecycle control.

package/dist/{MotionSensorProvider-DyhbM4Si.esm.js → MotionSensorProvider-DYxh8TjR.esm.js}

@@ -1,4 +1,4 @@
-import { n as resolveSessionStorage } from "./safeStorage-BdU9_m2E.esm.js";
+import { n as resolveSessionStorage } from "./safeStorage-UxDrnjwa.esm.js";
 //#region ../infra/src/providers/browser/MotionSensorProvider.ts
 const MOTION_PERMISSION_GRANTED_KEY = "motionSensorsPermissionsGranted";
 const MOTION_PERMISSION_DENIED_KEY = "motionSensorsPermissionsDenied";