@incodetech/core 2.3.2 → 2.4.0-rc.1

package/dist/{setup-BuPbxpwF.esm.js → setup-B7ehQ-lf.esm.js}

@@ -1,16 +1,37 @@
-import { D as resolveWasmConfig, S as upgradeToWasmHttpClient$1, b as installFreshHttpClient, l as trueSightLog, o as resetTrueSight, t as finalizeTrueSight, x as resetHttpClientState, y as getStoredHttpConfig } from "./trueSightService-M5VpCo96.esm.js";
-import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-ChDwHSel.esm.js";
-import { r as WasmUtilProvider, t as resolveLocalStorage } from "./safeStorage-BdU9_m2E.esm.js";
+import { P as setWasmIntegrityObserver, _ as setWasmDiagnosticsHandler, w as resolveWasmConfig, y as DEFAULT_WASM_VERSION } from "./wasmWebClient-BjZw_7OB.esm.js";
+import { a as setWasmOnDeviceMode, d as drainWasmDiagnostics, f as getWasmDiagnosticsMode, n as getWarmupFacts, p as rearmWasmDiagnostics, s as warmupWasm } from "./warmup-BElYWRh7.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
+import { S as setAnalyticsBatcher, b as getAnalyticsBatcher, c as resetExperimentAssignments, v as createAnalyticsBatchingService, x as resetAnalyticsBatcher } from "./events-Du2A4-Qr.esm.js";
+import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-BzLdXpmJ.esm.js";
+import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp, x as fingerprintSignalsReporter } from "./sessionInitializer-DVWMJh25.esm.js";
+import { t as resolveLocalStorage } from "./safeStorage-UxDrnjwa.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-C8CuN0os.esm.js";
-import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-ijlbX_Wx.esm.js";
-import { a as resetSessionInit, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp } from "./sessionInitializer-CnhAkMUN.esm.js";
-import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-rTfjzdDa.esm.js";
+import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-xzRLIIMN.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-CdsWsppG.esm.js";
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-CTc-zqfN.esm.js";
+//#region ../infra/src/wasm/wasmRuntimeProfile.ts
+/**
+* The WASM facts TrueSight reports as `session.webProfile.wasm`
+* (incode-truesight `WebProfile.wasm`, ENG-58122). Reads JS-side state only:
+* it is called from the record build, which can run inside a WASM sink
+* callback, so it must never call back into the binary.
+*/
+/** `null` until a WASM warmup completed in this page. */
+function getWasmRuntimeProfile() {
+	const facts = getWarmupFacts();
+	if (facts === null) return null;
+	const diagnosticsMode = getWasmDiagnosticsMode();
+	return {
+		version: DEFAULT_WASM_VERSION,
+		basePathPinned: facts.basePathPinned,
+		simd: facts.simd,
+		...diagnosticsMode === null ? {} : { diagnosticsMode },
+		warmupDurationMs: Math.round(facts.durationMs)
+	};
+}
+//#endregion
 //#region ../infra/src/providers/browser/BrowserPageLifecycleProvider.ts
 var BrowserPageLifecycleProvider = class {
 	sendBeacon(url, body, contentType = "application/json") {
@@ -98,120 +119,6 @@ var BrowserStorageProvider = class {
 	}
 };
 //#endregion
-//#region src/internal/events/AnalyticsBatchingService.ts
-const DEFAULT_MAX_BATCH_SIZE = 50;
-const DEFAULT_MAX_BATCH_AGE_MS = 1e3;
-const DEFAULT_MAX_RETRIES = 2;
-const RETRY_BASE_DELAY_MS = 250;
-function isTransientStatus(status) {
-	return status === 0 || status >= 500 || status === 408 || status === 429;
-}
-function createAnalyticsBatchingService(options) {
-	const { endpoint, authToken, pageLifecycle, timer, apiBaseUrl, apiClient = api, maxBatchSize = DEFAULT_MAX_BATCH_SIZE, maxBatchAgeMs = DEFAULT_MAX_BATCH_AGE_MS, maxRetries = DEFAULT_MAX_RETRIES } = options;
-	let buffer = [];
-	let started = false;
-	let disposed = false;
-	let ageTimerHandle = null;
-	let unsubscribeLifecycle = null;
-	let warnedNullToken = false;
-	function clearAgeTimer() {
-		if (ageTimerHandle !== null) {
-			timer.clearTimeout(ageTimerHandle);
-			ageTimerHandle = null;
-		}
-	}
-	function armAgeTimerIfNeeded() {
-		if (ageTimerHandle === null) ageTimerHandle = timer.setTimeout(() => {
-			ageTimerHandle = null;
-			flush();
-		}, maxBatchAgeMs);
-	}
-	function dropTokenless() {
-		if (!warnedNullToken) {
-			warnedNullToken = true;
-			console.warn("[AnalyticsBatchingService] Dropping batch: no auth token at flush time.");
-		}
-	}
-	function sendBatch(batch, attempt) {
-		let promise;
-		try {
-			promise = apiClient.post(endpoint, batch, { keepalive: true });
-		} catch (error) {
-			handleSendError(batch, error, attempt);
-			return;
-		}
-		promise.catch((error) => handleSendError(batch, error, attempt));
-	}
-	function handleSendError(batch, error, attempt) {
-		if (disposed) return;
-		if (!isTransientStatus(error && typeof error === "object" && "status" in error ? Number(error.status) || 0 : 0)) return;
-		if (attempt >= maxRetries) return;
-		const delay = RETRY_BASE_DELAY_MS * 2 ** attempt;
-		timer.setTimeout(() => {
-			if (disposed) return;
-			sendBatch(batch, attempt + 1);
-		}, delay);
-	}
-	function flush() {
-		if (disposed || buffer.length === 0) return;
-		const batch = buffer;
-		buffer = [];
-		clearAgeTimer();
-		if (!authToken()) {
-			dropTokenless();
-			return;
-		}
-		sendBatch(batch, 0);
-	}
-	function handlePageHide() {
-		if (disposed || buffer.length === 0) return;
-		const batch = buffer;
-		buffer = [];
-		clearAgeTimer();
-		const token = authToken();
-		if (!token) {
-			dropTokenless();
-			return;
-		}
-		const url = `${apiBaseUrl().replace(/\/$/, "")}${endpoint}`;
-		const body = JSON.stringify({
-			token,
-			events: batch
-		});
-		pageLifecycle.sendBeacon(url, body);
-	}
-	function enqueue(entry) {
-		if (disposed) return;
-		buffer.push(entry);
-		if (!started) return;
-		if (buffer.length >= maxBatchSize) {
-			flush();
-			return;
-		}
-		armAgeTimerIfNeeded();
-	}
-	function start() {
-		if (started || disposed) return;
-		started = true;
-		unsubscribeLifecycle = pageLifecycle.onPageHide(handlePageHide);
-		if (buffer.length > 0) flush();
-	}
-	function dispose() {
-		if (disposed) return;
-		disposed = true;
-		clearAgeTimer();
-		unsubscribeLifecycle?.();
-		unsubscribeLifecycle = null;
-		buffer = [];
-	}
-	return {
-		enqueue,
-		start,
-		flush,
-		dispose
-	};
-}
-//#endregion
 //#region ../infra/src/providers/browser/DevtoolsDetectorProvider.ts
 var DevtoolsDetectorProvider = class {
 	constructor() {
@@ -324,6 +231,53 @@ function stopDevtoolsDetector() {
 	devtoolsDetector.stop();
 }
 //#endregion
+//#region src/modules/id/deviceWallet/deviceWalletSettings.ts
+/**
+* Client-side device-wallet settings registered by `setup()`. Kept in a
+* dependency-free module so `setup()` doesn't pull the wallet services into
+* the main bundle.
+*/
+let googleSignedRequests = true;
+/** Whether the Google Wallet request is fetched with `signedSupported=true`. */
+function setGoogleWalletSignedRequests(enabled) {
+	googleSignedRequests = enabled;
+}
+function isGoogleWalletSignedRequestsEnabled() {
+	return googleSignedRequests;
+}
+//#endregion
+//#region src/internal/wasmIntegrity/wasmIntegrityTelemetry.ts
+const TRUESIGHT_SUBSYSTEM = "wasm.integrity";
+function describeCheck(check) {
+	const parts = [`asset=${check.asset}`, `status=${check.status}`];
+	if (check.byteLength !== void 0) parts.push(`bytes=${check.byteLength}`);
+	if (check.durationMs !== void 0) parts.push(`durationMs=${Math.round(check.durationMs)}`);
+	if (check.fetchMs !== void 0) parts.push(`fetchMs=${Math.round(check.fetchMs)}`);
+	if (check.expectedDigestPrefix !== void 0) parts.push(`expected=${check.expectedDigestPrefix}`);
+	if (check.actualDigestPrefix !== void 0) parts.push(`actual=${check.actualDigestPrefix}`);
+	return parts.join(" ");
+}
+function onAssetChecked(check) {
+	const accepted = check.status === "verified" || check.status === "bundled";
+	trueSightLog(accepted ? "debug" : "severe", TRUESIGHT_SUBSYSTEM, "other", `wasm asset ${accepted ? "checked" : "rejected"} ${describeCheck(check)}`);
+}
+function onSummary(summary) {
+	trueSightLog(summary.failed > 0 ? "error" : "debug", TRUESIGHT_SUBSYSTEM, "other", `wasm integrity summary version=${summary.wasmVersion} verified=${summary.verified} failed=${summary.failed} bundled=${summary.bundled} hashMs=${summary.hashMs}`);
+}
+/**
+* Maps infra's WASM integrity results to TrueSight lines. Nothing carries URLs
+* or asset bytes.
+*
+* Deliberately not sent to the analytics event log: `/omni/interview-events`
+* accepts only allowlisted codes and rejects a whole batch with
+* `Illegal event code` for an unknown one, which would also drop every event
+* batched alongside it. Add an event here only once the backend accepts its code.
+*/
+const wasmIntegrityTelemetry = {
+	onAssetChecked,
+	onSummary
+};
+//#endregion
 //#region src/setup.ts
 let wasmConfig;
 /**
@@ -354,6 +308,53 @@ function normalizeEncryption(input) {
 }
 let configured = false;
 /**
+* One-line environment facts for TrueSight's snapshot-on-first-error entry
+* (navigator facts read through the L0 provider — core never touches
+* browser globals directly).
+*/
+function buildEnvironmentSnapshot() {
+	const environment = new BrowserEnvironmentProvider();
+	const read = (property) => {
+		try {
+			return environment.getNavigatorProperty(property);
+		} catch {
+			return;
+		}
+	};
+	const connection = read("connection");
+	return [
+		`connection=${typeof connection?.effectiveType === "string" ? connection.effectiveType : "unknown"}`,
+		`saveData=${connection?.saveData === true}`,
+		`online=${read("onLine") !== false}`,
+		`language=${typeof read("language") === "string" ? String(read("language")) : "unknown"}`
+	].join(" ");
+}
+/**
+* ENG-48677 event map row 23b: every Incode HTTP request, success or
+* failure, becomes a self-health line (Android-dashboard parity). Lives here
+* rather than in `api.ts` — `trueSightService` already imports from that
+* module, so a direct `trueSightLog` import there would cycle; `setup()`
+* wires this adapter in as the decoupled observer instead.
+*/
+function logHttpRequestTiming(entry) {
+	const category = categoryForEndpoint(entry.endpoint);
+	const status = entry.httpStatus ?? "unknown";
+	if (entry.outcome === "success") {
+		trueSightLog("debug", "http", category, `http request completed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
+		return;
+	}
+	trueSightLog("error", "http", category, `http request failed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
+}
+/**
+* ENG-48677 WS2: WASM-adjacent taps and kit-batch drains funnel through
+* infra's `wasmDiagnostics` (L0 cannot import `trueSightLog`); this adapter
+* is the injected handler — same decoupled-observer shape as the HTTP
+* timing tap above.
+*/
+function logWasmDiagnostic(entry) {
+	trueSightLog(entry.level, `wasm.${entry.subsystem}`, entry.category, entry.message, entry.timestampMs);
+}
+/**
 * Initializes the SDK with the provided configuration.
 * Must be called before using any SDK functionality.
 *
@@ -395,12 +396,12 @@ let configured = false;
 * });
 * ```
 *
-* @example Self-hosted WASM (pin a version folder on your CDN)
+* @example Self-hosted WASM (the release-matched files, unmodified, on your CDN)
 * ```ts
 * await setup({
 *   apiURL: 'https://api.incode.com',
 *   wasm: {
-*     basePath: 'https://my-cdn.example.com/ml-wasm-kit-release/v2.13.21',
+*     basePath: 'https://my-cdn.example.com/incode-wasm',
 *   },
 * });
 * ```
@@ -496,6 +497,7 @@ async function setup(options) {
 	setStandaloneFlowPolicy(standaloneFlowPolicy);
 	registerFlowPreloader(preloadDashboardFlow);
 	if (options.ipLookup !== void 0) setClientIpLookupEnabled(options.ipLookup);
+	if (options.deviceWallet?.googleSignedRequests !== void 0) setGoogleWalletSignedRequests(options.deviceWallet.googleSignedRequests);
 	if (options.hostingApp !== void 0) setClientHostingApp(options.hostingApp);
 	if (options.fingerprint !== void 0) {
 		setClientFingerprintEnabled(options.fingerprint);
@@ -509,6 +511,23 @@ async function setup(options) {
 		pageLifecycle: new BrowserPageLifecycleProvider(),
 		timer: BrowserTimerProvider.getInstance()
 	}));
+	initializeTrueSightDiagnostics({
+		enabled: options.trueSight?.enabled !== false,
+		pageLifecycle: new BrowserPageLifecycleProvider(),
+		timer: BrowserTimerProvider.getInstance(),
+		storage: new BrowserStorageProvider(),
+		getEnvironmentSnapshot: buildEnvironmentSnapshot,
+		getWasmProfile: getWasmRuntimeProfile
+	});
+	noteTestingSignals({
+		devMode: options.devMode,
+		apiUrl: options.apiURL
+	});
+	setHttpRequestObserver(logHttpRequestTiming);
+	setWasmIntegrityObserver(wasmIntegrityTelemetry);
+	setWasmDiagnosticsHandler(logWasmDiagnostic);
+	setTrueSightExternalDrain(drainWasmDiagnostics);
+	if (!configured) rearmWasmDiagnostics();
 	const requestedEncryption = normalizeEncryption(options.encryption);
 	const stored = getStoredHttpConfig();
 	if (requestedEncryption && stored) {
@@ -542,21 +561,12 @@ async function setup(options) {
 			...effectiveWasm,
 			pipelines: effectiveWasm.pipelines ? [...effectiveWasm.pipelines] : void 0
 		};
-		const warmupStartedAt = getTimestamp();
-		try {
-			await warmupWasm(effectiveWasm);
-		} catch (error) {
-			trueSightLog("severe", "wasm", "other", `wasm warmup failed error=${String(error)} durationMs=${getTimestamp() - warmupStartedAt}`);
-			throw error;
-		}
-		trueSightLog("debug", "wasm", "other", `wasm warmup completed durationMs=${getTimestamp() - warmupStartedAt}`);
-		const provider = await WasmUtilProvider.getInstance();
-		await provider.initialize({
+		await warmupWasm(effectiveWasm);
+		await (await WasmUtilProvider.getInstance()).initialize({
 			...effectiveWasm,
 			pipelines: effectiveWasm.pipelines ? [...effectiveWasm.pipelines] : void 0
 		});
-		const showWasmLogs = typeof options.wasm === "object" && options.wasm.showLogs === true;
-		await provider.setProductionMode(!showWasmLogs);
+		fingerprintSignalsReporter.onWasmReady();
 		if (!options.devMode) startDevtoolsDetector();
 	}
 	if (!getIsFeatureManagementLocked()) if (options.featureManagement === false) optOutFeatureManagement();
@@ -602,6 +612,7 @@ async function initializeWasmUtil(config) {
 		...resolved,
 		pipelines: resolved.pipelines ? [...resolved.pipelines] : void 0
 	});
+	fingerprintSignalsReporter.onWasmReady();
 	await upgradeToWasmHttpClient$1(resolved);
 }
 /**
@@ -665,9 +676,11 @@ function reset() {
 	resetDeviceStatsQueue();
 	resetApi();
 	resetSessionInit();
+	fingerprintSignalsReporter.reset();
 	resetDashboardFlowCache();
 	resetStandaloneFlowPolicy();
 	setClientIpLookupEnabled(true);
+	setGoogleWalletSignedRequests(true);
 	setClientFingerprintEnabled(true);
 	setClientHostingApp(void 0);
 	setWasmOnDeviceMode(false);
@@ -675,6 +688,8 @@ function reset() {
 	resetExperimentAssignments();
 	resetResolvedExperiments();
 	resetHttpClientState();
+	setWasmIntegrityObserver(null);
+	setWasmDiagnosticsHandler(null);
 	resetTRI();
 	configured = false;
 	wasmConfig = void 0;
@@ -686,4 +701,4 @@ function reset() {
 	resetTrueSight();
 }
 //#endregion
-export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, reset as i, BrowserStorageProvider as l, initializeWasmUtil as n, setWasmConfig as o, isConfigured as r, setup as s, ensureWasmPipelines as t };
+export { resolveWasmConfigForPipelines as a, upgradeToWasmHttpClient as c, reset as i, isGoogleWalletSignedRequestsEnabled as l, initializeWasmUtil as n, setWasmConfig as o, isConfigured as r, setup as s, ensureWasmPipelines as t, BrowserStorageProvider as u };

package/dist/{setup-Cyko6cAn.d.ts → setup-YPKTUCY5.d.ts}

@@ -1,4 +1,4 @@
-import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-Cis2p6O0.js";
+import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-BO57syF6.js";
 import { s as TransactionalRiskIntelligenceSetupConfig } from "./index-BKOWUhxG.js";
 import { c as FeatureManagementRedactedUserInfo } from "./IFeatureManagementCapability-De8wpbGh.js";
 //#region src/internal/environment/environment.d.ts
@@ -34,12 +34,6 @@ type WasmConfig = Partial<WasmModuleConfig> & WasmModelsConfig & {
    * them.
    */
   pipelines?: WasmPipeline[];
-  /**
-   * Enables verbose output from the native WASM module.
-   *
-   * Defaults to `false`. Enable it only while diagnosing WASM behavior.
-   */
-  showLogs?: boolean;
 };
 /**
  * Object form of the `encryption` option for {@link SetupOptions}. Reach for
@@ -192,8 +186,12 @@ type SetupOptions = {
    * collected during face capture (selfie/authentication/id/personhood) — the
    * descriptive device fields and `webglFingerprint` are unaffected.
    *
-   * This option controls only the client-side JavaScript collection and
-   * submission path. It does **not** suppress native fingerprint collection:
+   * It also stops the native fingerprint signals reporter
+   * (`POST /omni/add/device-fingerprint-signals`: PID/DEVICE at session start,
+   * BEHAVIOUR after each capture attempt) and switches native behaviour-signals
+   * collection off (`sbc(false)`) once WASM is ready.
+   *
+   * It does **not** suppress the rest of native fingerprint collection:
    * against the pinned `v2.14.50-post1` runtime, WASM starts collecting during
    * initialization regardless of this flag, and the full fingerprint bucket is
    * serialized into the metadata bundle.
@@ -229,6 +227,17 @@ type SetupOptions = {
    * (off by default).
    */
   devMode?: boolean;
+  /**
+   * Device wallet (mDL) options.
+   *
+   * `googleSignedRequests` (default `true`): Google Wallet requests are fetched
+   * as signed-capable, and the backend picks signed (`openid4vp-v1-signed`) or
+   * unsigned. Pass `false` to always get unsigned (`openid4vp-v1-unsigned`)
+   * requests, e.g. for testing. Temporary — this choice moves to the backend.
+   */
+  deviceWallet?: {
+    googleSignedRequests?: boolean;
+  };
   /**
    * Transactional Risk Intelligence (TRI) telemetry configuration.
    *
@@ -252,10 +261,28 @@ type SetupOptions = {
    */
   tri?: TransactionalRiskIntelligenceSetupConfig;
   /**
-   * TrueSight diagnostics are temporarily unavailable while secure log
-   * encryption is implemented. This option remains accepted for compatibility;
-   * neither `enabled: true` nor a server flag can activate diagnostics.
-   * Regular SDK analytics are unaffected.
+   * TrueSight diagnostics — Incode-internal SDK-health telemetry
+   * (engineering-only dashboard, not customer analytics). During a session
+   * the SDK buffers structured diagnostic breadcrumbs (module outcomes, error
+   * codes, timings — sanitized to exclude personal data, never captured
+   * images) and, at the session terminal, uploads ONE gzipped record over
+   * HTTPS to the Incode diagnostics backend. Used by Incode to debug
+   * customer-reported capture issues. Fire-and-forget and fail-open: it adds
+   * no retries, no blocking work, and can never affect the host flow.
+   *
+   * While a session runs, a gzipped copy of the record is kept in
+   * `localStorage` (`incode.truesight.pending.*`) so it survives a closed tab
+   * or a cancelled upload. A copy left behind may be sent on a later page
+   * load; copies older than 7 days are deleted without being sent.
+   *
+   * - `enabled` — set `false` to opt out entirely (no collection, no
+   *   subscriptions, no upload). Default: `true` (native SDK parity). Also
+   *   subject to a server-side kill-switch; an explicit server `false` stops
+   *   collection remotely regardless of this option.
+   *
+   * Decided by the first `setup()` call of the SDK lifecycle; later `setup()`
+   * calls cannot re-enable or disable it mid-session. Call `reset()` to start
+   * a new lifecycle with a different value.
    */
   trueSight?: {
     enabled?: boolean;
@@ -435,12 +462,12 @@ type FeatureManagementSetupOptions = {
  * });
  * ```
  *
- * @example Self-hosted WASM (pin a version folder on your CDN)
+ * @example Self-hosted WASM (the release-matched files, unmodified, on your CDN)
  * ```ts
  * await setup({
  *   apiURL: 'https://api.incode.com',
  *   wasm: {
- *     basePath: 'https://my-cdn.example.com/ml-wasm-kit-release/v2.13.21',
+ *     basePath: 'https://my-cdn.example.com/incode-wasm',
  *   },
  * });
  * ```

package/dist/signature.d.ts

@@ -1,2 +1,2 @@
-import { a as createSignatureManagerFromActor, c as SignatureConfig, i as createSignatureManager, n as SignatureManager, o as SignatureActor, r as SignatureState, s as signatureMachine, t as SignatureCaptureState } from "./signatureManager-DGBSWz2_.js";
+import { a as createSignatureManagerFromActor, c as SignatureConfig, i as createSignatureManager, n as SignatureManager, o as SignatureActor, r as SignatureState, s as signatureMachine, t as SignatureCaptureState } from "./signatureManager-BpVt_Jv7.js";
 export { type SignatureActor, type SignatureCaptureState, type SignatureConfig, type SignatureManager, type SignatureState, createSignatureManager, createSignatureManagerFromActor, signatureMachine };

package/dist/signature.esm.js

@@ -1,3 +1,3 @@
-import { t as signatureMachine } from "./signatureStateMachine-ce_XMA3l.esm.js";
-import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-B72np4ZO.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
+import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-f_dPAGXn.esm.js";
 export { createSignatureManager, createSignatureManagerFromActor, signatureMachine };

package/dist/{signatureManager-DGBSWz2_.d.ts → signatureManager-BpVt_Jv7.d.ts}

@@ -1,6 +1,6 @@
 import { i as ActorRefFrom } from "./spawn-D9jgw9pW.js";
-import { t as Manager } from "./Manager-CQQ99QOI.js";
-import "./Actor-iTq7YY48.js";
+import { t as Manager } from "./Manager-C9T5amUN.js";
+import "./Actor-DpTj5PFb.js";
 //#region src/modules/signature/types.d.ts
 /**
  * Configuration options for Signature.

package/dist/{signatureManager-B72np4ZO.esm.js → signatureManager-f_dPAGXn.esm.js}

@@ -1,7 +1,7 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-ijlbX_Wx.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
-import { s as createActor, u as createManager } from "./xstate.esm-BuFLFuzz.esm.js";
-import { t as signatureMachine } from "./signatureStateMachine-ce_XMA3l.esm.js";
+import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
 //#region src/modules/signature/signatureActor.ts
 function createSignatureActor(options) {
 	return createActor(signatureMachine, { input: { config: options.config } }).start();
@@ -24,12 +24,8 @@ function createSignatureActor(options) {
 *
 * State → screen mapping rationale:
 *
-* - `idle`/`captureSignature` collapse to `eSign.writeSignature.default` —
-*   the state machine stays in `captureSignature` throughout drawing (stroke
-*   validity changes via `SIGNATURE_CHANGED` are context-only and don't fire
-*   a new `screenOpened`). The `eSign.writeSignature.completed` Figma surface
-*   is therefore the post-submit "signed canvas while we wait for the API"
-*   surface, mapped to `submittingSignature`.
+* - Drawing validity selects `default` or `completed` before submission.
+*   Clearing the canvas returns to `default`; submission stays on `completed`.
 * - `success`/`finished` both map to `eSign.writeYourSignature.success` so
 *   the terminal `finished` state stays on the visible success canvas rather
 *   than falling back to the generic `<module>.finished` default.
@@ -42,8 +38,8 @@ function getSignatureScreenName(snapshot) {
 	const stateName = topLevelStateName(snapshot.value);
 	if (stateName === void 0) return void 0;
 	switch (stateName) {
-		case "idle":
-		case "captureSignature": return "eSign.writeSignature.default";
+		case "idle": return "eSign.writeSignature.default";
+		case "captureSignature": return snapshot.context.isValid ? "eSign.writeSignature.completed" : "eSign.writeSignature.default";
 		case "submittingSignature": return "eSign.writeSignature.completed";
 		case "success":
 		case "finished": return "eSign.writeYourSignature.success";

package/dist/{signatureStateMachine-ce_XMA3l.esm.js → signatureStateMachine-C-nUq_oq.esm.js}

@@ -1,7 +1,6 @@
-import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
-import { i as assign, t as setup } from "./xstate.esm-BuFLFuzz.esm.js";
-import { n as fromPromise } from "./xstate-actors.esm-BXeQ-Ucz.esm.js";
+import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
+import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/signature/signatureServices.ts
 /**
 * Uploads a signature image to the Omni API.

package/dist/splitTrackedName-3zJRd2RD.esm.js

@@ -0,0 +1,19 @@
+//#region src/internal/events/splitTrackedName.ts
+/** Splits a Figma section/state path, keeping the full state name verbatim. */
+function splitTrackedName(fullName) {
+	if (fullName === void 0) return {
+		screen: void 0,
+		state: void 0
+	};
+	const lastDot = fullName.lastIndexOf(".");
+	if (fullName.indexOf(".") === lastDot) return {
+		screen: fullName,
+		state: void 0
+	};
+	return {
+		screen: fullName.slice(0, lastDot),
+		state: fullName
+	};
+}
+//#endregion
+export { splitTrackedName as t };

package/dist/{src-35ekGRzK.esm.js → src-DJAJjRYQ.esm.js}

@@ -1,4 +1,4 @@
-import { t as __commonJSMin } from "./rolldown-runtime-FDOR9p9I.esm.js";
+import { t as __commonJSMin } from "./rolldown-runtime-B-1-B7_t.esm.js";
 //#region ../../node_modules/.pnpm/@statsig+client-core@3.33.3/node_modules/@statsig/client-core/src/Log.js
 var require_Log = /* @__PURE__ */ __commonJSMin(((exports) => {
 	Object.defineProperty(exports, "__esModule", { value: true });

package/dist/{stats-CZcy2J53.esm.js → stats-BEvexnKC.esm.js}

@@ -1,5 +1,4 @@
-import { r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-B-3Q-LUw.esm.js";
+import { r as getToken, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
 //#region src/modules/stats/statsServices.ts
 const deviceStatsQueue = [];
 async function postDeviceStatsNow(stats) {

package/dist/stats.esm.js

@@ -1,2 +1,2 @@
-import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-CZcy2J53.esm.js";
+import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
 export { addDeviceStats, flushDeviceStatsQueue, resetDeviceStatsQueue };