@incodetech/core 2.4.0-rc.0 → 2.4.0-rc.1

package/dist/{setup-C38QkrSP.esm.js → setup-B7ehQ-lf.esm.js}

@@ -1,197 +1,34 @@
-import { S as setWasmIntegrityObserver } from "./wasmWebClient-kbYZ2sxw.esm.js";
-import { D as resolveWasmConfig, d as getStoredHttpConfig, f as installFreshHttpClient, l as trueSightLog, m as upgradeToWasmHttpClient$1, o as resetTrueSight, p as resetHttpClientState, t as finalizeTrueSight } from "./trueSightService-BWgRVGIT.esm.js";
-import { i as setWasmOnDeviceMode, o as warmupWasm } from "./warmup-DMtbyb2l.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-CIdnE7Fx.esm.js";
-import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { b as resetAnalyticsBatcher, c as resetExperimentAssignments, x as setAnalyticsBatcher, y as getAnalyticsBatcher } from "./events-CAgFE-k3.esm.js";
-import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-DHzlkQNe.esm.js";
-import { a as resetSessionInit, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp, x as fingerprintSignalsReporter } from "./sessionInitializer-jxbfCnE-.esm.js";
+import { P as setWasmIntegrityObserver, _ as setWasmDiagnosticsHandler, w as resolveWasmConfig, y as DEFAULT_WASM_VERSION } from "./wasmWebClient-BjZw_7OB.esm.js";
+import { a as setWasmOnDeviceMode, d as drainWasmDiagnostics, f as getWasmDiagnosticsMode, n as getWarmupFacts, p as rearmWasmDiagnostics, s as warmupWasm } from "./warmup-BElYWRh7.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
+import { S as setAnalyticsBatcher, b as getAnalyticsBatcher, c as resetExperimentAssignments, v as createAnalyticsBatchingService, x as resetAnalyticsBatcher } from "./events-Du2A4-Qr.esm.js";
+import { a as resetApi, i as isApiConfigured, n as getApi, r as getToken, s as setHttpRequestObserver, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { S as noteTestingSignals, d as categoryForEndpoint, f as getStoredHttpConfig, h as upgradeToWasmHttpClient$1, m as resetHttpClientState, n as initializeTrueSightDiagnostics, o as resetTrueSight, p as installFreshHttpClient, s as setTrueSightExternalDrain, t as finalizeTrueSight, u as trueSightLog } from "./trueSightService-BzLdXpmJ.esm.js";
+import { a as resetSessionInit, b as BrowserEnvironmentProvider, c as setClientIpLookupEnabled, d as registerFlowPreloader, f as resetStandaloneFlowPolicy, i as initializeSession, m as setStandaloneFlowPolicy, o as setClientFingerprintEnabled, p as resolveStandaloneFlowPolicy, s as setClientHostingApp, x as fingerprintSignalsReporter } from "./sessionInitializer-DVWMJh25.esm.js";
 import { t as resolveLocalStorage } from "./safeStorage-UxDrnjwa.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-BTbYruNe.esm.js";
-import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DmG_tkGk.esm.js";
+import { C as resetFeatureManagement, D as applyEnvironment, O as getEnvironment, S as optOutFeatureManagement, b as initializeFeatureManagement, c as resetResolvedExperiments, k as resetEnvironment, v as getIsFeatureManagementLocked, w as resetFeatureManagementProviderInstance } from "./feature-management-rTfjzdDa.esm.js";
+import { r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
 import { a as resetTRI, n as initializeTRI, o as resetTRIProviderInstance } from "./tri-xzRLIIMN.esm.js";
-import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-DA64AEZC.esm.js";
-//#region src/internal/events/AnalyticsBatchingService.ts
-const DEFAULT_MAX_BATCH_SIZE = 50;
-const MAX_STATE_BATCH_SIZE = 50;
-const DEFAULT_MAX_BATCH_AGE_MS = 1e3;
-const DEFAULT_MAX_RETRIES = 2;
-const RETRY_BASE_DELAY_MS = 250;
-function isTransientStatus(status) {
-	return status === 0 || status >= 500 || status === 408 || status === 429;
-}
-function createAnalyticsBatchingService(options) {
-	const { endpoint, authToken, pageLifecycle, timer, apiBaseUrl, apiClient = api, maxBatchSize = DEFAULT_MAX_BATCH_SIZE, maxBatchAgeMs = DEFAULT_MAX_BATCH_AGE_MS, maxRetries = DEFAULT_MAX_RETRIES } = options;
-	let buffer = [];
-	let stateBuffer = [];
-	let stateToken = null;
-	let stateBatches = [];
-	let stateRequestInFlight = false;
-	let started = false;
-	let disposed = false;
-	let ageTimerHandle = null;
-	let unsubscribeLifecycle = null;
-	let warnedNullToken = false;
-	function clearAgeTimer() {
-		if (ageTimerHandle !== null) {
-			timer.clearTimeout(ageTimerHandle);
-			ageTimerHandle = null;
-		}
-	}
-	function armAgeTimerIfNeeded() {
-		if (ageTimerHandle === null) ageTimerHandle = timer.setTimeout(() => {
-			ageTimerHandle = null;
-			flush();
-		}, maxBatchAgeMs);
-	}
-	function dropTokenless() {
-		if (!warnedNullToken) {
-			warnedNullToken = true;
-			console.warn("[AnalyticsBatchingService] Dropping batch: no auth token at flush time.");
-		}
-	}
-	function sendBatch(batch, attempt) {
-		let promise;
-		try {
-			promise = apiClient.post(endpoint, batch, { keepalive: true });
-		} catch (error) {
-			handleSendError(batch, error, attempt);
-			return;
-		}
-		promise.catch((error) => handleSendError(batch, error, attempt));
-	}
-	function handleSendError(batch, error, attempt) {
-		if (disposed) return;
-		if (!isTransientStatus(error && typeof error === "object" && "status" in error ? Number(error.status) || 0 : 0)) return;
-		if (attempt >= maxRetries) return;
-		const delay = RETRY_BASE_DELAY_MS * 2 ** attempt;
-		timer.setTimeout(() => {
-			if (disposed) return;
-			sendBatch(batch, attempt + 1);
-		}, delay);
-	}
-	function flush() {
-		if (disposed || buffer.length === 0) return;
-		const batch = buffer;
-		buffer = [];
-		clearAgeTimer();
-		if (!authToken()) {
-			dropTokenless();
-			return;
-		}
-		sendBatch(batch, 0);
-	}
-	function syncStateToken() {
-		const token = authToken();
-		if (token !== stateToken) {
-			stateBuffer = [];
-			stateBatches = [];
-			stateToken = token;
-		}
-		return token;
-	}
-	function sendNextStateBatch() {
-		if (disposed || !started || stateRequestInFlight || stateBatches.length === 0) return;
-		const token = syncStateToken();
-		const batch = stateBatches.shift();
-		if (!batch || !token) return;
-		stateRequestInFlight = true;
-		const onSettled = () => {
-			stateRequestInFlight = false;
-			sendNextStateBatch();
-		};
-		try {
-			apiClient.post(endpoint, batch.events, {
-				keepalive: true,
-				headers: { "X-Incode-Hardware-Id": batch.token }
-			}).then(onSettled, onSettled);
-		} catch {
-			Promise.resolve().then(onSettled);
-		}
-	}
-	function flushStateChanges() {
-		if (disposed) return;
-		const token = syncStateToken();
-		if (!token || stateBuffer.length === 0) return;
-		stateBatches.push({
-			events: stateBuffer,
-			token
-		});
-		stateBuffer = [];
-		sendNextStateBatch();
-	}
-	function sendBeacon(batch, token) {
-		const url = `${apiBaseUrl().replace(/\/$/, "")}${endpoint}`;
-		const body = JSON.stringify({
-			token,
-			events: batch
-		});
-		pageLifecycle.sendBeacon(url, body);
-	}
-	function handlePageHide() {
-		if (disposed) return;
-		const token = syncStateToken();
-		const pendingStates = stateBatches;
-		stateBatches = [];
-		if (token && stateBuffer.length > 0) pendingStates.push({
-			events: stateBuffer,
-			token
-		});
-		stateBuffer = [];
-		for (const batch of pendingStates) sendBeacon(batch.events, batch.token);
-		if (buffer.length === 0) return;
-		const batch = buffer;
-		buffer = [];
-		clearAgeTimer();
-		if (!token) {
-			dropTokenless();
-			return;
-		}
-		sendBeacon(batch, token);
-	}
-	function enqueue(entry) {
-		if (disposed) return;
-		if (entry.code === "stateChanged") {
-			if (!syncStateToken()) return;
-			stateBuffer.push(entry);
-			if (stateBuffer.length === MAX_STATE_BATCH_SIZE) flushStateChanges();
-			return;
-		}
-		buffer.push(entry);
-		if (entry.code === "captureAttemptFinished" || entry.code === "moduleClosed" || entry.code === "errorTriggered" || entry.code === "background") flushStateChanges();
-		if (!started) return;
-		if (buffer.length >= maxBatchSize) {
-			flush();
-			return;
-		}
-		armAgeTimerIfNeeded();
-	}
-	function start() {
-		if (started || disposed) return;
-		started = true;
-		unsubscribeLifecycle = pageLifecycle.onPageHide(handlePageHide);
-		if (buffer.length > 0) flush();
-		sendNextStateBatch();
-	}
-	function dispose() {
-		if (disposed) return;
-		disposed = true;
-		clearAgeTimer();
-		unsubscribeLifecycle?.();
-		unsubscribeLifecycle = null;
-		buffer = [];
-		stateBuffer = [];
-		stateBatches = [];
-		stateToken = null;
-	}
+import { i as resetDashboardFlowCache, r as preloadDashboardFlow } from "./flowServices-CTc-zqfN.esm.js";
+//#region ../infra/src/wasm/wasmRuntimeProfile.ts
+/**
+* The WASM facts TrueSight reports as `session.webProfile.wasm`
+* (incode-truesight `WebProfile.wasm`, ENG-58122). Reads JS-side state only:
+* it is called from the record build, which can run inside a WASM sink
+* callback, so it must never call back into the binary.
+*/
+/** `null` until a WASM warmup completed in this page. */
+function getWasmRuntimeProfile() {
+	const facts = getWarmupFacts();
+	if (facts === null) return null;
+	const diagnosticsMode = getWasmDiagnosticsMode();
 	return {
-		enqueue,
-		start,
-		flush,
-		flushStateChanges,
-		dispose
+		version: DEFAULT_WASM_VERSION,
+		basePathPinned: facts.basePathPinned,
+		simd: facts.simd,
+		...diagnosticsMode === null ? {} : { diagnosticsMode },
+		warmupDurationMs: Math.round(facts.durationMs)
 	};
 }
 //#endregion
@@ -415,6 +252,7 @@ function describeCheck(check) {
 	const parts = [`asset=${check.asset}`, `status=${check.status}`];
 	if (check.byteLength !== void 0) parts.push(`bytes=${check.byteLength}`);
 	if (check.durationMs !== void 0) parts.push(`durationMs=${Math.round(check.durationMs)}`);
+	if (check.fetchMs !== void 0) parts.push(`fetchMs=${Math.round(check.fetchMs)}`);
 	if (check.expectedDigestPrefix !== void 0) parts.push(`expected=${check.expectedDigestPrefix}`);
 	if (check.actualDigestPrefix !== void 0) parts.push(`actual=${check.actualDigestPrefix}`);
 	return parts.join(" ");
@@ -470,6 +308,53 @@ function normalizeEncryption(input) {
 }
 let configured = false;
 /**
+* One-line environment facts for TrueSight's snapshot-on-first-error entry
+* (navigator facts read through the L0 provider — core never touches
+* browser globals directly).
+*/
+function buildEnvironmentSnapshot() {
+	const environment = new BrowserEnvironmentProvider();
+	const read = (property) => {
+		try {
+			return environment.getNavigatorProperty(property);
+		} catch {
+			return;
+		}
+	};
+	const connection = read("connection");
+	return [
+		`connection=${typeof connection?.effectiveType === "string" ? connection.effectiveType : "unknown"}`,
+		`saveData=${connection?.saveData === true}`,
+		`online=${read("onLine") !== false}`,
+		`language=${typeof read("language") === "string" ? String(read("language")) : "unknown"}`
+	].join(" ");
+}
+/**
+* ENG-48677 event map row 23b: every Incode HTTP request, success or
+* failure, becomes a self-health line (Android-dashboard parity). Lives here
+* rather than in `api.ts` — `trueSightService` already imports from that
+* module, so a direct `trueSightLog` import there would cycle; `setup()`
+* wires this adapter in as the decoupled observer instead.
+*/
+function logHttpRequestTiming(entry) {
+	const category = categoryForEndpoint(entry.endpoint);
+	const status = entry.httpStatus ?? "unknown";
+	if (entry.outcome === "success") {
+		trueSightLog("debug", "http", category, `http request completed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
+		return;
+	}
+	trueSightLog("error", "http", category, `http request failed endpoint=${entry.endpoint} method=${entry.method} httpStatus=${status} durationMs=${entry.durationMs}`);
+}
+/**
+* ENG-48677 WS2: WASM-adjacent taps and kit-batch drains funnel through
+* infra's `wasmDiagnostics` (L0 cannot import `trueSightLog`); this adapter
+* is the injected handler — same decoupled-observer shape as the HTTP
+* timing tap above.
+*/
+function logWasmDiagnostic(entry) {
+	trueSightLog(entry.level, `wasm.${entry.subsystem}`, entry.category, entry.message, entry.timestampMs);
+}
+/**
 * Initializes the SDK with the provided configuration.
 * Must be called before using any SDK functionality.
 *
@@ -626,7 +511,23 @@ async function setup(options) {
 		pageLifecycle: new BrowserPageLifecycleProvider(),
 		timer: BrowserTimerProvider.getInstance()
 	}));
+	initializeTrueSightDiagnostics({
+		enabled: options.trueSight?.enabled !== false,
+		pageLifecycle: new BrowserPageLifecycleProvider(),
+		timer: BrowserTimerProvider.getInstance(),
+		storage: new BrowserStorageProvider(),
+		getEnvironmentSnapshot: buildEnvironmentSnapshot,
+		getWasmProfile: getWasmRuntimeProfile
+	});
+	noteTestingSignals({
+		devMode: options.devMode,
+		apiUrl: options.apiURL
+	});
+	setHttpRequestObserver(logHttpRequestTiming);
 	setWasmIntegrityObserver(wasmIntegrityTelemetry);
+	setWasmDiagnosticsHandler(logWasmDiagnostic);
+	setTrueSightExternalDrain(drainWasmDiagnostics);
+	if (!configured) rearmWasmDiagnostics();
 	const requestedEncryption = normalizeEncryption(options.encryption);
 	const stored = getStoredHttpConfig();
 	if (requestedEncryption && stored) {
@@ -660,14 +561,7 @@ async function setup(options) {
 			...effectiveWasm,
 			pipelines: effectiveWasm.pipelines ? [...effectiveWasm.pipelines] : void 0
 		};
-		const warmupStartedAt = getTimestamp();
-		try {
-			await warmupWasm(effectiveWasm);
-		} catch (error) {
-			trueSightLog("severe", "wasm", "other", `wasm warmup failed error=${String(error)} durationMs=${getTimestamp() - warmupStartedAt}`);
-			throw error;
-		}
-		trueSightLog("debug", "wasm", "other", `wasm warmup completed durationMs=${getTimestamp() - warmupStartedAt}`);
+		await warmupWasm(effectiveWasm);
 		await (await WasmUtilProvider.getInstance()).initialize({
 			...effectiveWasm,
 			pipelines: effectiveWasm.pipelines ? [...effectiveWasm.pipelines] : void 0
@@ -795,6 +689,7 @@ function reset() {
 	resetResolvedExperiments();
 	resetHttpClientState();
 	setWasmIntegrityObserver(null);
+	setWasmDiagnosticsHandler(null);
 	resetTRI();
 	configured = false;
 	wasmConfig = void 0;

package/dist/{setup-lgkQ8dJW.d.ts → setup-YPKTUCY5.d.ts}

@@ -1,4 +1,4 @@
-import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-BUPPRAA1.js";
+import { c as WasmPipeline, i as WasmModuleConfig, n as WasmModelsConfig, t as WarmupConfig } from "./warmup-BO57syF6.js";
 import { s as TransactionalRiskIntelligenceSetupConfig } from "./index-BKOWUhxG.js";
 import { c as FeatureManagementRedactedUserInfo } from "./IFeatureManagementCapability-De8wpbGh.js";
 //#region src/internal/environment/environment.d.ts
@@ -261,10 +261,28 @@ type SetupOptions = {
    */
   tri?: TransactionalRiskIntelligenceSetupConfig;
   /**
-   * TrueSight diagnostics are temporarily unavailable while secure log
-   * encryption is implemented. This option remains accepted for compatibility;
-   * neither `enabled: true` nor a server flag can activate diagnostics.
-   * Regular SDK analytics are unaffected.
+   * TrueSight diagnostics — Incode-internal SDK-health telemetry
+   * (engineering-only dashboard, not customer analytics). During a session
+   * the SDK buffers structured diagnostic breadcrumbs (module outcomes, error
+   * codes, timings — sanitized to exclude personal data, never captured
+   * images) and, at the session terminal, uploads ONE gzipped record over
+   * HTTPS to the Incode diagnostics backend. Used by Incode to debug
+   * customer-reported capture issues. Fire-and-forget and fail-open: it adds
+   * no retries, no blocking work, and can never affect the host flow.
+   *
+   * While a session runs, a gzipped copy of the record is kept in
+   * `localStorage` (`incode.truesight.pending.*`) so it survives a closed tab
+   * or a cancelled upload. A copy left behind may be sent on a later page
+   * load; copies older than 7 days are deleted without being sent.
+   *
+   * - `enabled` — set `false` to opt out entirely (no collection, no
+   *   subscriptions, no upload). Default: `true` (native SDK parity). Also
+   *   subject to a server-side kill-switch; an explicit server `false` stops
+   *   collection remotely regardless of this option.
+   *
+   * Decided by the first `setup()` call of the SDK lifecycle; later `setup()`
+   * calls cannot re-enable or disable it mid-session. Call `reset()` to start
+   * a new lifecycle with a different value.
    */
   trueSight?: {
     enabled?: boolean;

package/dist/signature.esm.js

@@ -1,3 +1,3 @@
-import { t as signatureMachine } from "./signatureStateMachine-BkRSrkKp.esm.js";
-import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-qqXyH93e.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
+import { n as createSignatureManagerFromActor, t as createSignatureManager } from "./signatureManager-f_dPAGXn.esm.js";
 export { createSignatureManager, createSignatureManagerFromActor, signatureMachine };

package/dist/{signatureManager-qqXyH93e.esm.js → signatureManager-f_dPAGXn.esm.js}

@@ -1,7 +1,7 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CAgFE-k3.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
 import { t as topLevelStateName } from "./topLevelStateName-B5i2avbh.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as signatureMachine } from "./signatureStateMachine-BkRSrkKp.esm.js";
+import { t as signatureMachine } from "./signatureStateMachine-C-nUq_oq.esm.js";
 //#region src/modules/signature/signatureActor.ts
 function createSignatureActor(options) {
 	return createActor(signatureMachine, { input: { config: options.config } }).start();

package/dist/{signatureStateMachine-BkRSrkKp.esm.js → signatureStateMachine-C-nUq_oq.esm.js}

@@ -1,5 +1,4 @@
-import { t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-DHzlkQNe.esm.js";
+import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/modules/signature/signatureServices.ts

package/dist/{stats-DmG_tkGk.esm.js → stats-BEvexnKC.esm.js}

@@ -1,5 +1,4 @@
-import { r as getToken, t as api } from "./api-Bx3gKW_y.esm.js";
-import { t as endpoints } from "./endpoints-DHzlkQNe.esm.js";
+import { r as getToken, t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
 //#region src/modules/stats/statsServices.ts
 const deviceStatsQueue = [];
 async function postDeviceStatsNow(stats) {

package/dist/stats.esm.js

@@ -1,2 +1,2 @@
-import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-DmG_tkGk.esm.js";
+import { n as flushDeviceStatsQueue, r as resetDeviceStatsQueue, t as addDeviceStats } from "./stats-BEvexnKC.esm.js";
 export { addDeviceStats, flushDeviceStatsQueue, resetDeviceStatsQueue };