@incodetech/core 2.4.0-rc.4 → 2.4.1-agentic

package/dist/{phoneManager-BO-LTih5.d.ts → phoneManager-6nrJkvkG.d.ts}

@@ -8,6 +8,11 @@ type IPhoneValidationCapability = {
   isPossible(phone: string): boolean;
   isValid(phone: string, country: string): boolean;
   formatE164(phone: string, country: string): string | null;
+  /**
+   * The national significant number's digits (no calling code or trunk
+   * prefix), or `null` when the phone can't be parsed. It needn't be valid.
+   */
+  nationalNumber(phone: string, country: string): string | null;
 };
 //#endregion
 //#region src/modules/phone/types.d.ts

package/dist/{phoneManager-KKUq-Vgo.esm.js → phoneManager-C6jut_pz.esm.js}

@@ -1,8 +1,8 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CQteqXfy.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
-import { n as loadPhoneValidation, t as getPhoneValidation } from "./phoneValidation-DnBcNUNh.esm.js";
+import { n as loadPhoneValidation, t as getPhoneValidation } from "./phoneValidation-OggtfjRt.esm.js";
 import { n as isOtpComplete } from "./otp-D2k3PeSL.esm.js";
-import { t as phoneMachine } from "./phoneStateMachine-D2QWS2cu.esm.js";
+import { t as phoneMachine } from "./phoneStateMachine-T1-drWfG.esm.js";
 //#region src/modules/phone/phoneActor.ts
 function createPhoneActor(options) {
 	return createActor(phoneMachine, { input: { config: options.config } }).start();

package/dist/{phoneStateMachine-D2QWS2cu.esm.js → phoneStateMachine-T1-drWfG.esm.js}

@@ -1,8 +1,9 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as loadPhoneValidation } from "./phoneValidation-DnBcNUNh.esm.js";
+import { t as carryAttempts } from "./attemptCarry-BjTJ6bMQ.esm.js";
+import { n as loadPhoneValidation } from "./phoneValidation-OggtfjRt.esm.js";
 import { n as isOtpComplete, t as computeOtpValidationErrors } from "./otp-D2k3PeSL.esm.js";
 //#region src/modules/phone/phoneServices.ts
 function getPhoneServerFailureReason(error, invalidStatus) {
@@ -210,30 +211,41 @@ const phoneMachine = setup({
 }).createMachine({
 	id: "phone",
 	initial: "idle",
-	context: ({ input }) => ({
-		config: input.config,
-		phone: "",
-		isValid: false,
-		phoneError: void 0,
-		validationErrors: void 0,
-		countryCode: "",
-		phonePrefix: "",
-		prefilledPhone: void 0,
-		optInGranted: false,
-		startInfo: void 0,
-		error: void 0,
-		otpCode: "",
-		otpError: void 0,
-		otpValidationErrors: void 0,
-		attemptsRemaining: input.config.maxOtpAttempts ?? 3,
-		resendTimer: 0,
-		resendTimerActive: false
-	}),
+	context: ({ input, self }) => {
+		const carried = carryAttempts("phone", self, (s) => ({ attemptsRemaining: s.matches("error") ? s.context.attemptsRemaining - 1 : s.context.attemptsRemaining }));
+		return {
+			config: input.config,
+			phone: "",
+			isValid: false,
+			phoneError: void 0,
+			validationErrors: void 0,
+			countryCode: "",
+			phonePrefix: "",
+			prefilledPhone: void 0,
+			optInGranted: false,
+			startInfo: void 0,
+			error: void 0,
+			otpCode: "",
+			otpError: void 0,
+			otpValidationErrors: void 0,
+			attemptsRemaining: carried.attemptsRemaining ?? input.config.maxOtpAttempts ?? 3,
+			resendTimer: 0,
+			resendTimerActive: false
+		};
+	},
 	states: {
-		idle: { on: { LOAD: [{
-			target: "loadingPrefill",
-			guard: "hasPrefill"
-		}, { target: "loadingStartInfo" }] } },
+		idle: { on: { LOAD: [
+			{
+				target: "error",
+				guard: ({ context }) => context.attemptsRemaining <= 0 && context.attemptsRemaining < (context.config.maxOtpAttempts ?? 3),
+				actions: assign({ error: () => "Maximum OTP attempts exceeded" })
+			},
+			{
+				target: "loadingPrefill",
+				guard: "hasPrefill"
+			},
+			{ target: "loadingStartInfo" }
+		] } },
 		loadingPrefill: {
 			entry: "startLoadingPhoneRules",
 			invoke: {

package/dist/{phoneValidation-DnBcNUNh.esm.js → phoneValidation-OggtfjRt.esm.js}

@@ -18,8 +18,7 @@ const LAZY_IMPORT_OPTIONS = {
 var LazyPhoneValidationProvider = class LazyPhoneValidationProvider {
 	constructor() {
 		this._lazy = BrowserLazyImportProvider.getInstance().create(async () => {
-			const { PhoneValidationProvider } = await import("./PhoneValidationProvider-SZiOS0jB.esm.js").then((n) => n.n);
-			return new PhoneValidationProvider();
+			return new (await (import("./PhoneValidationProvider-Co4zk2en.esm.js").then((n) => n.n))).PhoneValidationProvider();
 		}, LAZY_IMPORT_OPTIONS);
 	}
 	static getInstance() {

package/dist/{platform-DkcRc9JV.esm.js → platform-aPh7gTWh.esm.js}

@@ -16,6 +16,20 @@ function isAndroid(userAgent) {
 	return /Android/i.test(ua);
 }
 /**
+* True on a Samsung Android device, as far as the user agent tells.
+*
+* Two signals: Samsung Internet stamps `SamsungBrowser/<n>`, and unreduced
+* user agents (WebViews, older Chrome) carry the `SAMSUNG` / `SM-<model>`
+* device token. Chrome 110+ reduces the Android model to `K`, so Chrome on a
+* Samsung phone is NOT detected — callers gating a Samsung-only feature on
+* this err on the side of hiding it.
+*/
+function isSamsungDevice(userAgent) {
+	const ua = userAgent || (typeof navigator !== "undefined" ? navigator.userAgent : "");
+	if (!isAndroid(ua)) return false;
+	return /SamsungBrowser\/|\bSAMSUNG\b|\bSM-[A-Z0-9]+/i.test(ua);
+}
+/**
 * True when the page runs inside an Android WebView — web content hosted by a
 * native app — rather than a standalone Android browser.
 *
@@ -128,4 +142,4 @@ function isIPhone14OrHigher() {
 	return IPHONE_14_PLUS_DIMENSIONS.some((dims) => dims.outerHeight === outerHeight && dims.outerWidth === outerWidth || dims.innerHeight === innerHeight && dims.innerWidth === innerWidth);
 }
 //#endregion
-export { isIOS as a, isIPhone14OrHigher as c, isSafari as d, isTabletWithoutAndroid as f, isDesktop as i, isIslandBrowser as l, isAndroidWebView as n, isIOSWebView as o, isBraveBrowser as r, isIPad as s, isAndroid as t, isMacOsSafari as u };
+export { isIOS as a, isIPhone14OrHigher as c, isSafari as d, isSamsungDevice as f, isDesktop as i, isIslandBrowser as l, isAndroidWebView as n, isIOSWebView as o, isTabletWithoutAndroid as p, isBraveBrowser as r, isIPad as s, isAndroid as t, isMacOsSafari as u };

package/dist/processFaceMatch-BWme3kVV.esm.js

@@ -0,0 +1,21 @@
+import { r as getToken } from "./api-BO8JA7Pf.esm.js";
+//#region src/internal/session/processFaceMatch.ts
+let saved = null;
+/**
+* Saves the `success` field of a selfie `/omni/process/face` response, so a
+* later face match in the same session shows it without a second call. A
+* response without `success` clears the saved result.
+*/
+function saveProcessFaceMatch(success) {
+	const token = getToken();
+	saved = token !== null && typeof success === "boolean" ? {
+		token,
+		matched: success
+	} : null;
+}
+/** The saved face match result of the current session, or `null`. */
+function getProcessFaceMatch() {
+	return saved !== null && saved.token === getToken() ? saved.matched : null;
+}
+//#endregion
+export { saveProcessFaceMatch as n, getProcessFaceMatch as t };

package/dist/qe-signature.esm.js

@@ -1,4 +1,4 @@
-import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-Btsa7Prh.esm.js";
+import { a as NAMIRIAL_QES_CONSENT_KEYS, c as areAllConsented, o as NAMIRIAL_QES_PROVIDER_CODE, r as electronicSignatureMachine, s as QE_CONSENT_KEYS, t as createElectronicSignatureManager, u as getDefaultConsentChecks } from "./electronicSignatureManager-C7pqXsRm.esm.js";
 //#region src/modules/qe-signature/index.ts
 function createQeSignatureManager(options) {
 	return createElectronicSignatureManager({ config: {

package/dist/redirect-to-mobile.d.ts

@@ -1,5 +1,5 @@
-import { n as RedirectToMobileServices, t as RedirectToMobileConfig } from "./types-DPIDuhut.js";
-import { a as RedirectToMobileActor, i as createRedirectToMobileManagerFromActor, n as RedirectToMobileState, o as redirectToMobileMachine, r as createRedirectToMobileManager, t as RedirectToMobileManager } from "./redirectToMobileManager-CVsvpVbQ.js";
+import { r as RedirectToMobileServices, t as RedirectToMobileConfig } from "./types-DNVzoRvi.js";
+import { a as RedirectToMobileActor, i as createRedirectToMobileManagerFromActor, n as RedirectToMobileState, o as redirectToMobileMachine, r as createRedirectToMobileManager, t as RedirectToMobileManager } from "./redirectToMobileManager-Dm9ctRCC.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileServices.d.ts
 declare const defaultRedirectToMobileServices: RedirectToMobileServices;
 //#endregion

package/dist/redirect-to-mobile.esm.js

@@ -1,3 +1,3 @@
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-b-H-ipGM.esm.js";
-import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-uHW3dyuQ.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices } from "./redirectToMobileStateMachine-BBMAc2Gb.esm.js";
+import { n as createRedirectToMobileManagerFromActor, t as createRedirectToMobileManager } from "./redirectToMobileManager-BJXC6Kx9.esm.js";
 export { createRedirectToMobileManager, createRedirectToMobileManagerFromActor, defaultRedirectToMobileServices, redirectToMobileMachine };

package/dist/{redirectToMobileManager-uHW3dyuQ.esm.js → redirectToMobileManager-BJXC6Kx9.esm.js}

@@ -1,8 +1,8 @@
-import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-Du2A4-Qr.esm.js";
+import { n as eventModuleNames, o as createManagerInstrumentation } from "./events-CQteqXfy.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { s as createActor, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-b-H-ipGM.esm.js";
+import { n as redirectToMobileMachine, r as defaultRedirectToMobileServices, t as canResendSmsFromContext } from "./redirectToMobileStateMachine-BBMAc2Gb.esm.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileActor.ts
 const POLL_INTERVAL_MS = 5e3;
 const QR_REFRESH_INTERVAL_MS = 5e3;
@@ -74,7 +74,8 @@ function mapState(snapshot) {
 	if (typedSnapshot.matches("closed")) return { status: "closed" };
 	if (typedSnapshot.matches("error")) return {
 		status: "error",
-		error: context.error ?? "An error occurred"
+		error: context.error ?? "An error occurred",
+		moduleErrorCode: context.moduleErrorCode
 	};
 	return { status: "idle" };
 }

package/dist/{redirectToMobileManager-CVsvpVbQ.d.ts → redirectToMobileManager-Dm9ctRCC.d.ts}

@@ -1,7 +1,7 @@
 import { i as ActorRefFrom } from "./spawn-D9jgw9pW.js";
 import { t as Manager } from "./Manager-C9T5amUN.js";
 import "./Actor-DpTj5PFb.js";
-import { n as RedirectToMobileServices, t as RedirectToMobileConfig } from "./types-DPIDuhut.js";
+import { n as RedirectToMobileErrorCode, r as RedirectToMobileServices, t as RedirectToMobileConfig } from "./types-DNVzoRvi.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileStateMachine.d.ts
 declare const redirectToMobileMachine: any;
 type RedirectToMobileMachine = typeof redirectToMobileMachine;
@@ -48,6 +48,8 @@ type RedirectToMobileClosedState = {
 type RedirectToMobileErrorState = {
   status: 'error';
   error: string;
+  /** Machine-readable code, forwarded as `onError`'s third argument. */
+  moduleErrorCode: RedirectToMobileErrorCode | undefined;
 };
 type RedirectToMobileState = RedirectToMobileIdleState | RedirectToMobileLoadingState | RedirectToMobileRedirectingState | RedirectToMobileFinishedState | RedirectToMobileContinueState | RedirectToMobileClosedState | RedirectToMobileErrorState;
 /**

package/dist/{redirectToMobileStateMachine-b-H-ipGM.esm.js → redirectToMobileStateMachine-BBMAc2Gb.esm.js}

@@ -1,8 +1,8 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { i as assign, t as setup } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as getUrlSearchParam, t as buildUrlWithSearchParams } from "./urlUtils-6jsE6rKp.esm.js";
+import { n as getUrlSearchParam, r as resolveAgainstPageOrigin, t as buildUrlWithSearchParams } from "./urlUtils-eYiyWjh0.esm.js";
 //#region src/modules/redirect-to-mobile/redirectToMobileServices.ts
 async function fetchRedirectUrl(signal) {
 	const res = await api.get(endpoints.onboardingUrl, { signal });
@@ -59,6 +59,14 @@ function buildRedirectUrl(baseUrl, customUrl, config, urlUuid) {
 		url_uuid: urlUuid || void 0
 	});
 }
+const INVALID_URL_ERROR = "Invalid Redirect to Mobile URL. Use an absolute http or https URL.";
+const ABSOLUTE_HTTP_URL = /^https?:\/\//i;
+function withAbsoluteUrl(config) {
+	return config.url?.startsWith("/") ? {
+		...config,
+		url: resolveAgainstPageOrigin(config.url)
+	} : config;
+}
 function extractUuidFromUrl(url) {
 	return getUrlSearchParam(url, "uuid") ?? "";
 }
@@ -132,6 +140,10 @@ const redirectToMobileMachine = setup({
 			return { phonePrefix: event.output.phonePrefix };
 		}),
 		setError: assign(({ event }) => ({ error: String(event.error) })),
+		setInvalidUrlError: assign(() => ({
+			error: INVALID_URL_ERROR,
+			moduleErrorCode: "INVALID_REDIRECT_URL"
+		})),
 		completeSmsSend: assign(() => {
 			return {
 				smsSent: true,
@@ -172,13 +184,14 @@ const redirectToMobileMachine = setup({
 	},
 	guards: {
 		hasPhishingResistance: ({ context }) => context.config.qrPhishingResistance === true,
+		hasInvalidUrl: ({ context }) => context.config.url !== void 0 && !ABSOLUTE_HTTP_URL.test(context.config.url),
 		canResendSms: ({ context }) => canResendSmsFromContext(context)
 	}
 }).createMachine({
 	id: "redirectToMobile",
 	initial: "idle",
 	context: ({ input }) => ({
-		config: input.config,
+		config: withAbsoluteUrl(input.config),
 		redirectUrl: "",
 		fetchedBaseUrl: "",
 		uuid: "",
@@ -188,10 +201,15 @@ const redirectToMobileMachine = setup({
 		smsFailed: false,
 		smsResendTimer: 0,
 		smsResendTimerActive: false,
-		error: void 0
+		error: void 0,
+		moduleErrorCode: void 0
 	}),
 	states: {
-		idle: { on: { LOAD: "generatingUrl" } },
+		idle: { on: { LOAD: [{
+			target: "error",
+			guard: "hasInvalidUrl",
+			actions: "setInvalidUrlError"
+		}, { target: "generatingUrl" }] } },
 		generatingUrl: { invoke: {
 			id: "fetchRedirectUrl",
 			src: "fetchRedirectUrl",
@@ -294,7 +312,10 @@ const redirectToMobileMachine = setup({
 		},
 		continue: { type: "final" },
 		closed: { type: "final" },
-		error: { on: { RETRY: "generatingUrl" } }
+		error: { on: { RETRY: [{
+			guard: "hasInvalidUrl",
+			actions: "setInvalidUrlError"
+		}, { target: "generatingUrl" }] } }
 	}
 });
 //#endregion

package/dist/{runChildModule-C09a9ACV.esm.js → runChildModule-DPHTqSdF.esm.js}

@@ -1,6 +1,6 @@
-import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-import { w as createEventBus } from "./events-Du2A4-Qr.esm.js";
-import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-BAvhAU7T.esm.js";
+import { n as getTimestamp } from "./IBrowserEnvironmentCapability-D7JG7ML3.esm.js";
+import { w as createEventBus } from "./events-CQteqXfy.esm.js";
+import { a as notifyTrueSightManagerStopped, i as notifyTrueSightFlowEvent } from "./trueSightService-BujtUIW6.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 //#region src/internal/flow-events/flowEvents.ts

package/dist/{sdkVersion-xE2xE2_9.esm.js → sdkVersion-C3_P-Qbq.esm.js}

@@ -1,4 +1,4 @@
 //#region src/internal/version/sdkVersion.ts
-const SDK_VERSION = "2.4.0-rc.4";
+const SDK_VERSION = "2.4.1-agentic";
 //#endregion
 export { SDK_VERSION as t };

package/dist/selfie.d.ts

@@ -1,10 +1,10 @@
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-1hzeS_rB.js";
+import { _ as SelfieCaptureOnlyConfig, a as SelfieCaptureOnlyMachine, c as SelfieActor, g as processFace, h as ProcessFaceResponse, i as SelfieCaptureOnlyActor, l as SelfieMachine, n as FaceCaptureManagerState, o as selfieCaptureOnlyMachine, r as CreateSelfieCaptureOnlyActorOptions, t as FaceCaptureManager, u as selfieMachine, v as SelfieConfig } from "./faceCaptureManagerFactory-C-xKdj-d.js";
 import { n as PermissionStatus, t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types-yPH8lAH-.js";
-import { n as DeepsightService } from "./StreamCanvasCapture-7JRf-2ck.js";
+import { a as FaceCapturedImageData, i as FaceCaptureOnlyResponse, n as DetectionStatus, o as FaceErrorCode } from "./types--3HDl2SF.js";
+import { n as DeepsightService } from "./StreamCanvasCapture-C3xNfOsv.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
-import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-BJdNu_nd.js";
+import { i as createSelfieManagerFromActor, n as SelfieState, r as createSelfieManager, t as SelfieManager } from "./selfieManager-BMmpUii2.js";
 //#region src/modules/selfie/selfieCaptureOnlyManager.d.ts
 type SelfieCaptureOnlyState = FaceCaptureManagerState;
 type SelfieCaptureOnlyManager = FaceCaptureManager;

package/dist/selfie.esm.js

@@ -1,15 +1,15 @@
-import { u as BrowserStorageProvider } from "./setup-BvKrAlOo.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { u as BrowserStorageProvider } from "./setup-CDAKwTr7.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-GTkoJyFY.esm.js";
+import { n as eventModuleNames } from "./events-CQteqXfy.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-CCucWLdy.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CdDfnyyb.esm.js";
-import { c as processFace } from "./FaceDetectionProvider-CzQEFzP8.esm.js";
-import { o as PROTECTED_CAPTURE_TARGET } from "./createCameraCycleOwnership-Dj_LHUvN.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-nWbIRIBD.esm.js";
-import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-RcVUu1KJ.esm.js";
-import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-DYrkOXO6.esm.js";
+import { n as createDefaultProtectedFaceControllerActor, t as faceCaptureMachine } from "./faceCaptureSetup-BQjCbL51.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CBm05KnT.esm.js";
+import { s as processFace } from "./FaceDetectionProvider-B83VmClw.esm.js";
+import { s as PROTECTED_CAPTURE_TARGET } from "./desktopCameraElection-kHY2IDJi.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-B5m_Kn0O.esm.js";
+import { n as createSelfieManagerFromActor, t as createSelfieManager } from "./selfieManager-Cbliomv7.esm.js";
+import { t as invokeOnCaptureCallback } from "./invokeOnCaptureCallback-CXIBwBeE.esm.js";
 /**
 * Selfie state machine variant for the captureOnly flow. Shares the full base
 * face-capture state tree; only the upload/process step is local instead of

package/dist/{selfieErrorUtils-CoXIxVCy.esm.js → selfieErrorUtils-BL0BLMnp.esm.js}

@@ -1,4 +1,4 @@
-import { d as FACE_ERROR_CODES } from "./FaceDetectionProvider-CzQEFzP8.esm.js";
+import { u as FACE_ERROR_CODES } from "./FaceDetectionProvider-B83VmClw.esm.js";
 //#region src/modules/selfie/selfieErrorUtils.ts
 const FACE_ERROR_CODE_VALUES = Object.values(FACE_ERROR_CODES);
 const isFaceErrorCode = (value) => {

package/dist/{selfieManager-BJdNu_nd.d.ts → selfieManager-BMmpUii2.d.ts}

@@ -1,6 +1,6 @@
 import { t as Manager } from "./Manager-C9T5amUN.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
-import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-1hzeS_rB.js";
+import { c as SelfieActor, n as FaceCaptureManagerState, s as CreateSelfieActorOptions, t as FaceCaptureManager } from "./faceCaptureManagerFactory-C-xKdj-d.js";
 //#region src/modules/selfie/selfieManager.d.ts
 type SelfieState = FaceCaptureManagerState;
 /**

package/dist/{selfieManager-RcVUu1KJ.esm.js → selfieManager-Cbliomv7.esm.js}

@@ -1,9 +1,9 @@
-import { u as BrowserStorageProvider } from "./setup-BvKrAlOo.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { n as eventModuleNames } from "./events-Du2A4-Qr.esm.js";
+import { u as BrowserStorageProvider } from "./setup-CDAKwTr7.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-GTkoJyFY.esm.js";
+import { n as eventModuleNames } from "./events-CQteqXfy.esm.js";
 import { s as createActor } from "./xstate.esm-DSajW7CJ.esm.js";
-import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CdDfnyyb.esm.js";
-import { t as selfieMachine } from "./selfieStateMachine-nWbIRIBD.esm.js";
+import { t as createFaceCaptureManagerFromActor } from "./faceCaptureManagerFactory-CBm05KnT.esm.js";
+import { t as selfieMachine } from "./selfieStateMachine-B5m_Kn0O.esm.js";
 //#region src/modules/selfie/selfieActor.ts
 function createSelfieActor(options) {
 	const dependencies = options.dependencies ?? {

package/dist/{selfieStateMachine-nWbIRIBD.esm.js → selfieStateMachine-B5m_Kn0O.esm.js}

@@ -1,8 +1,8 @@
 import { i as assign } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise } from "./xstate-actors.esm-8Gzepa_A.esm.js";
-import { t as faceCaptureMachine } from "./faceCaptureSetup-CCucWLdy.esm.js";
-import { c as processFace, d as FACE_ERROR_CODES, f as isOnDeviceMode } from "./FaceDetectionProvider-CzQEFzP8.esm.js";
-import { n as validateUploadResponse } from "./selfieErrorUtils-CoXIxVCy.esm.js";
+import { t as faceCaptureMachine } from "./faceCaptureSetup-BQjCbL51.esm.js";
+import { d as isOnDeviceMode, s as processFace, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-B83VmClw.esm.js";
+import { n as validateUploadResponse } from "./selfieErrorUtils-BL0BLMnp.esm.js";
 /**
 * The selfie capture state machine.
 *

package/dist/{session-Cr4IVgYu.esm.js → session-DAaAewMX.esm.js}

@@ -1,7 +1,7 @@
-import { n as getApi, u as endpoints } from "./api-Cz90EHyu.esm.js";
-import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-BAvhAU7T.esm.js";
-import "./sessionInitializer-c3CChZts.esm.js";
-import { i as toIncodeApiError } from "./apiError-B_uY7RO6.esm.js";
+import { n as getApi, u as endpoints } from "./api-BO8JA7Pf.esm.js";
+import { u as trueSightLog, x as noteSessionCreated } from "./trueSightService-BujtUIW6.esm.js";
+import "./sessionInitializer-CWFT4dfw.esm.js";
+import { i as toIncodeApiError } from "./apiError-CfuIvnUy.esm.js";
 //#region src/internal/session/sessionService.ts
 /**
 * HTTP status codes the QR validation endpoint emits, keyed by their semantic
@@ -14,6 +14,18 @@ const QR_VALIDATION_ERROR_CODES = {
 	invalidQRuuid: 4081,
 	onboardingUrlAlreadyUsed: 4083
 };
+/**
+* Incode status codes `POST /omni/session/continue` rejects a handoff link
+* with (as `IncodeApiError.status`). Trying again does not help: the same link
+* fails the same way.
+*/
+const SESSION_CONTINUE_ERROR_CODES = {
+	invalidUuid: 4026,
+	invalidQrValidation: 4081,
+	continuationPeriodExpired: 4086,
+	continuationLimitReached: 4087,
+	sessionNotActive: 4088
+};
 var QrValidationError = class extends Error {
 	constructor(status, statusText) {
 		super(`POST ${endpoints.qrValidateUuid} failed: ${status} ${statusText}`);
@@ -23,7 +35,14 @@ var QrValidationError = class extends Error {
 	}
 };
 /**
-* Creates a new onboarding session.
+* Creates a new onboarding session, or continues an existing one when
+* `options.uuid` is set (see {@link CreateSessionOptions.uuid}).
+*
+* The server allows a limited number of continues (a server setting, two by
+* default), within 48 hours of the session start. Each successful call with a
+* `uuid` spends one, a reload of the handoff link included. A refused continue
+* throws an `IncodeApiError` whose `status` is one of
+* {@link SESSION_CONTINUE_ERROR_CODES}.
 *
 * @param apiKey - The API key from the Incode dashboard
 * @param options - Session creation options
@@ -40,6 +59,17 @@ var QrValidationError = class extends Error {
 * ```
 */
 async function createSession(apiKey, options, signal) {
+	if (options.uuid) {
+		const session = await continueSession(apiKey, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid
+		}, signal);
+		noteSessionCreated(session, {
+			configurationId: options.configurationId,
+			language: options.language
+		});
+		return session;
+	}
 	try {
 		const session = (await getApi().post(endpoints.createSession, {
 			configurationId: options.configurationId,
@@ -47,7 +77,6 @@ async function createSession(apiKey, options, signal) {
 			externalCustomerId: options.externalCustomerId,
 			language: options.language ?? "en-US",
 			customFields: options.customFields,
-			uuid: options.uuid ?? null,
 			urlUuid: options.urlUuid ?? null,
 			interviewId: options.interviewId ?? null,
 			...options.loginHint != null && options.loginHint !== "" ? { loginHint: options.loginHint } : {}
@@ -71,6 +100,45 @@ async function createSession(apiKey, options, signal) {
 	}
 }
 /**
+* Continues the session behind a desktop→mobile handoff link through
+* `POST /omni/session/continue`. Only `uuid` and `urlUuid` are sent, and the
+* response `sessionId` is returned as `interviewId`. `createSession` and
+* `bootstrapSession` call it when `uuid` is set.
+*
+* Each successful call spends one continue. A refused continue throws an
+* `IncodeApiError` whose `status` is one of {@link SESSION_CONTINUE_ERROR_CODES}.
+*
+* @param apiKey - The API key from the Incode dashboard
+* @param options - The handoff link's `uuid` and `urlUuid`
+* @param signal - Optional AbortSignal for request cancellation
+* @returns The continued session with token
+*/
+async function continueSession(apiKey, options, signal) {
+	try {
+		const { sessionId, token, endScreenTitle, endScreenText } = (await getApi().post(endpoints.sessionContinue, {
+			uuid: options.uuid,
+			urlUuid: options.urlUuid ?? null
+		}, {
+			headers: {
+				"x-api-key": apiKey,
+				"api-version": "1.0"
+			},
+			signal
+		})).data;
+		const session = {
+			token,
+			interviewId: sessionId,
+			endScreenTitle,
+			endScreenText
+		};
+		noteSessionCreated(session);
+		trueSightLog("info", "session", "orchestration", "session continued");
+		return session;
+	} catch (error) {
+		toIncodeApiError(endpoints.sessionContinue, error);
+	}
+}
+/**
 * Validates and rotates a QR anti-phishing URL UUID before creating a session.
 *
 * This call is unauthenticated; the `{ onboardingId, urlUuid }` pair itself
@@ -121,8 +189,8 @@ async function refreshQrUrlUuid(options, signal) {
 }
 /**
 * Validates and rotates a QR anti-phishing `urlUuid` (when present), then
-* creates a session bound to the refreshed value. When `urlUuid` is absent,
-* behaves identically to {@link createSession}.
+* creates (or, with `uuid`, continues) a session bound to the refreshed value.
+* When `urlUuid` is absent, behaves identically to {@link createSession}.
 *
 * Use this when the host owns session creation and wants the SDK to handle
 * phishing-resistance rotation in a single call. For raw control, compose
@@ -156,4 +224,4 @@ async function bootstrapSession(apiKey, options, signal) {
 	}, signal);
 }
 //#endregion
-export { refreshQrUrlUuid as a, createSession as i, QrValidationError as n, validateQrUuid as o, bootstrapSession as r, QR_VALIDATION_ERROR_CODES as t };
+export { continueSession as a, validateQrUuid as c, bootstrapSession as i, QrValidationError as n, createSession as o, SESSION_CONTINUE_ERROR_CODES as r, refreshQrUrlUuid as s, QR_VALIDATION_ERROR_CODES as t };