@incodetech/core 2.4.0-rc.4 → 2.4.1-agentic

package/dist/{types-BAxn7MpY.d.ts → types-xEEWCx1j.d.ts}

@@ -1,10 +1,11 @@
 import { y as IncodeCanvas } from "./createFaceAvatar-lYX0VTYs.js";
-import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-B6HsSzpk.js";
-import { a as IStorageCapability } from "./IWasmUtilCapability-GF2n7sfm.js";
+import { a as RegulationTypes, n as Flow, o as TutorialIdConfig } from "./types-DuD8TRJU.js";
+import { a as IStorageCapability } from "./IWasmUtilCapability-Cqiaxydi.js";
 import { t as PermissionResult } from "./types-BEwVKkLJ.js";
-import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-7JRf-2ck.js";
+import { n as DeepsightService, t as StreamCanvasCapture } from "./StreamCanvasCapture-C3xNfOsv.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 import { i as Pdf417DecodeResult, n as IIdCaptureCapability, r as IdCaptureSettings, t as DetectionOrientation } from "./IIdCaptureCapability-CGcEt2Cw.js";
+import { n as IGeolocationCapability, t as GeolocationCoords } from "./IGeolocationCapability-r49Qo7rR.js";
 //#region ../infra/src/capabilities/IDigitalCredentialsCapability.d.ts
 /**
  * Digital Credentials capability — wraps the W3C Digital Credentials API
@@ -95,25 +96,68 @@ type RedirectReturnParams = {
   resultsAccessKey: string;
 };
 //#endregion
+//#region src/modules/id/deviceWallet/types.d.ts
+/** Which wallet backend the handshake talks to. */
+type DeviceWalletPlatform = 'ios' | 'android';
+/** Explicit provider override, mirroring V1's `DigitalIdWalletProvider`. */
+type DeviceWalletProvider = 'apple_web' | 'google';
+type DeviceWalletDecision = 'ACCEPTED' | 'REJECTED';
+/**
+ * Failure classification.
+ * - `UNSUPPORTED_PLATFORM` — no Credentials API. The digital-ID funnel
+ *   resolves this away before the machine is invoked; kept for the defensive
+ *   path when the machine is started on an unsupported environment anyway.
+ * - `NO_CREDENTIAL` — the wallet sheet completed without a credential (user
+ *   dismissed, or no eligible digital ID on the device).
+ * - `WALLET_ERROR` — anything else (request/decrypt HTTP failure, the
+ *   Credentials API rejecting, missing activation, protocol errors).
+ */
+type DeviceWalletFailReason = 'UNSUPPORTED_PLATFORM' | 'NO_CREDENTIAL' | 'WALLET_ERROR';
+/** Response of both decrypt endpoints. Attributes are not inline (see above). */
+type DeviceWalletDecryptResponse = {
+  success: boolean;
+  decision?: DeviceWalletDecision;
+  [key: string]: unknown;
+};
+/** Injectable service seam (mirrors digital-id-redirect's services pattern). */
+type DeviceWalletServices = {
+  /** Builds the wallet request payload for the platform. */
+  requestWalletData: (platform: DeviceWalletPlatform, signal?: AbortSignal) => Promise<DigitalCredentialRequestOptions>;
+  /** Forwards the opaque wallet response for backend decryption. */
+  decryptWalletResponse: (platform: DeviceWalletPlatform, walletResponse: string, signal?: AbortSignal) => Promise<DeviceWalletDecryptResponse>;
+};
+/**
+ * Terminal machine output read by the ID-Capture parent (`onDone`).
+ * Projected by the machine's ROOT `output` — a top-level final node's own
+ * `output` does not propagate in this XState version.
+ */
+type DeviceWalletOutput = {
+  result: 'success';
+  decision: DeviceWalletDecision | undefined;
+  response: DeviceWalletDecryptResponse;
+} | {
+  result: 'dismissed';
+};
+//#endregion
 //#region src/modules/id/digitalIdRegistry.d.ts
 /**
  * True when a digital-ID method uses a full-page web-redirect flow (Trinsic
- * iDIN/FTN). Accepts both the module `FlowType` value (`REDIRECT`) and the
+ * iDIN, FTN, itsme, …). Accepts both the module `FlowType` value (`REDIRECT`) and the
  * backend value (`WEB_REDIRECT`). (Lives here rather than in
  * `idCaptureHelpers` to keep the registry free of circular imports; the
  * helpers re-export it.)
  */
 declare function isRedirectFlowType(flowType: string): boolean;
 /** Digital-ID document schemes the SDK knows how to verify. */
-type DigitalIdDocumentType = 'mDL' | 'iDIN' | 'FTN';
+type DigitalIdDocumentType = 'mDL' | 'iDIN' | 'FTN' | 'itsme' | 'SPID' | 'MitID' | 'BankIDSweden' | 'FranceIdentite' | 'IdentiteNumerique' | 'LAWallet' | 'DigiLocker';
 /** One way to fulfil a `DigitalIdDocumentType`, in funnel priority order. */
 type DigitalIdFunnelEntry = {
   /**
    * Incode-native device-wallet handshake (Apple Wallet web / Google
-   * Wallet). Activation is computed by `isDeviceWalletEnabled` — the
-   * `deviceWallet` flag or an enabled wallet method in
-   * `config.digitalIds` — so this entry carries no config-field name of
-   * its own.
+   * Wallet). Activation is computed by `hasEligibleDeviceWallet` — an
+   * enabled wallet method in `config.digitalIds` that this device can
+   * reach, else the `deviceWallet` flag — so this entry carries no
+   * config-field name of its own.
    */
   kind: 'incodeWallet';
   /** Chooser tile this entry surfaces as. */
@@ -129,6 +173,11 @@ type DigitalIdFunnelEntry = {
    * activates this entry (e.g. `IDIN`).
    */
   method: string;
+  /**
+   * ISO alpha-2 countries the provider serves. Fallback for chooser
+   * ranking when the backend sends a method without `countries`.
+   */
+  countries?: readonly string[];
 };
 declare const DIGITAL_ID_REGISTRY: Record<DigitalIdDocumentType, readonly DigitalIdFunnelEntry[]>;
 declare const DIGITAL_ID_DOCUMENT_TYPES: DigitalIdDocumentType[];
@@ -144,6 +193,19 @@ type ResolvedDigitalIdRoute = {
 type DigitalIdPlatformSupport = {
   /** `IDigitalCredentialsCapability.isAvailable()`. */
   credentialsAvailable: boolean;
+  /**
+   * The OS wallet this device reaches (`resolveWalletPlatform()`): `ios` for
+   * Apple Wallet (iOS / iPadOS / macOS Safari), `android` for Google Wallet
+   * (everything else). Drives the per-wallet hard filter — Apple Wallet is
+   * never offered on `android`, Google Wallet never on `ios`. Omitted → no
+   * per-wallet filtering (callers that predate the filter).
+   */
+  walletPlatform?: DeviceWalletPlatform;
+  /**
+   * Whether this is a Samsung device (`isSamsungDevice()`). Samsung Wallet is
+   * Samsung-only. Omitted → not filtered.
+   */
+  samsungDevice?: boolean;
 };
 /**
  * Resolves the implementation that should fulfil a digital-ID document type:
@@ -152,47 +214,31 @@ type DigitalIdPlatformSupport = {
  */
 declare function resolveDigitalIdImplementation(docType: DigitalIdDocumentType, config: Pick<IdCaptureConfig, 'deviceWallet' | 'digitalIds'>, platform: DigitalIdPlatformSupport): ResolvedDigitalIdRoute | undefined;
 //#endregion
-//#region src/modules/id/deviceWallet/types.d.ts
-/** Which wallet backend the handshake talks to. */
-type DeviceWalletPlatform = 'ios' | 'android';
-/** Explicit provider override, mirroring V1's `DigitalIdWalletProvider`. */
-type DeviceWalletProvider = 'apple_web' | 'google';
-type DeviceWalletDecision = 'ACCEPTED' | 'REJECTED';
-/**
- * Failure classification.
- * - `UNSUPPORTED_PLATFORM` — no Credentials API. The digital-ID funnel
- *   resolves this away before the machine is invoked; kept for the defensive
- *   path when the machine is started on an unsupported environment anyway.
- * - `NO_CREDENTIAL` — the wallet sheet completed without a credential (user
- *   dismissed, or no eligible digital ID on the device).
- * - `WALLET_ERROR` — anything else (request/decrypt HTTP failure, the
- *   Credentials API rejecting, missing activation, protocol errors).
- */
-type DeviceWalletFailReason = 'UNSUPPORTED_PLATFORM' | 'NO_CREDENTIAL' | 'WALLET_ERROR';
-/** Response of both decrypt endpoints. Attributes are not inline (see above). */
-type DeviceWalletDecryptResponse = {
-  success: boolean;
-  decision?: DeviceWalletDecision;
-  [key: string]: unknown;
-};
-/** Injectable service seam (mirrors digital-id-redirect's services pattern). */
-type DeviceWalletServices = {
-  /** Builds the wallet request payload for the platform. */
-  requestWalletData: (platform: DeviceWalletPlatform, signal?: AbortSignal) => Promise<DigitalCredentialRequestOptions>;
-  /** Forwards the opaque wallet response for backend decryption. */
-  decryptWalletResponse: (platform: DeviceWalletPlatform, walletResponse: string, signal?: AbortSignal) => Promise<DeviceWalletDecryptResponse>;
+//#region ../infra/src/capabilities/ILocaleCapability.d.ts
+type ILocaleCapability = {
+  /**
+   * The user's preferred languages as BCP 47 tags, most preferred first
+   * (`navigator.languages`, e.g. `['sv-SE', 'en-GB']`). Empty when the
+   * environment exposes none.
+   */
+  getPreferredLanguages(): readonly string[];
 };
+//#endregion
+//#region src/modules/id/digitalIdCountry.d.ts
 /**
- * Terminal machine output read by the ID-Capture parent (`onDone`).
- * Projected by the machine's ROOT `output` — a top-level final node's own
- * `output` does not propagate in this XState version.
+ * The country signals ID Capture ranks digital-ID options by. Every field is
+ * optional; an absent one is simply not consulted. `createIdCaptureActor`
+ * fills `ipCountry` and `locale`; the GPS pair is opt-in.
  */
-type DeviceWalletOutput = {
-  result: 'success';
-  decision: DeviceWalletDecision | undefined;
-  response: DeviceWalletDecryptResponse;
-} | {
-  result: 'dismissed';
+type DigitalIdCountryDetectionDependencies = {
+  /** IP → ISO alpha-2. Defaults to the backend geo-IP lookup. */
+  ipCountry?: (signal?: AbortSignal) => Promise<string | undefined>;
+  /** Browser language preferences, read for their region subtag. */
+  locale?: ILocaleCapability;
+  /** Position source for the GPS signal. Needs `reverseGeocodeCountry`. */
+  geolocation?: IGeolocationCapability;
+  /** Coordinates → ISO alpha-2. Without it the GPS signal is skipped. */
+  reverseGeocodeCountry?: (coords: GeolocationCoords, signal?: AbortSignal) => Promise<string | undefined>;
 };
 //#endregion
 //#region ../infra/src/capabilities/IAnalyticsCapability.d.ts
@@ -752,6 +798,19 @@ type IdCaptureContext = {
    * `availableDocumentTypes` whenever this list is non-empty.
    */
   digitalIdRedirectOptions: IdCaptureDigitalIdRedirectOption[];
+  /**
+   * Countries the user is likely in, strongest signal first, from the
+   * `detectingCountry` step before the chooser; `digitalIdRedirectOptions`
+   * is ranked by them. `undefined` until detection ran — it only runs when
+   * ranking can change the order — and `[]` when no signal answered.
+   */
+  detectedCountries: string[] | undefined;
+  /**
+   * The wallet family this device certainly reaches, read once from the user
+   * agent when the machine starts (`resolveWalletDevice`); names the wallet on
+   * the Digital ID chooser card. `undefined` when the OS is not certain.
+   */
+  walletDevice: 'apple' | 'samsung' | 'android' | undefined;
   /**
    * Provider picked on the chooser (`SELECT_DOCUMENT` with `providerId`).
    * Preset on the `digitalIdRedirect` child so the verification is created for
@@ -786,6 +845,15 @@ type IdCaptureEvent = {
    * Omitted → the first configured redirect method is launched.
    */
   providerId?: DigitalIdProviderId;
+} |
+/**
+ * On the chooser: the user picked the country to view options for. The
+ * redirect options are re-ranked with it as the strongest country; nothing
+ * is added or removed.
+ */
+{
+  type: 'SET_CHOOSER_COUNTRY';
+  country: string;
 } | {
   type: 'NEXT_STEP';
 } | {
@@ -927,6 +995,13 @@ type IdCaptureDependencies = {
    * `BrowserDigitalCredentialsProvider` at the composition points.
    */
   credentials?: IDigitalCredentialsCapability;
+  /**
+   * Country signals the chooser ranks digital-ID redirect options by (GPS →
+   * IP → browser locale; see `detectDigitalIdCountries`). `createIdCaptureActor`
+   * fills the IP and locale signals; the GPS pair is opt-in. Absent (direct
+   * machine construction) → no ranking, backend order.
+   */
+  countryDetection?: DigitalIdCountryDetectionDependencies;
   trackCaptureAttemptFinished?: (payload: {
     logs: string;
     resolution?: string;
@@ -970,4 +1045,4 @@ type IdCaptureOutput = {
   skipFaceMatch: boolean;
 } | undefined;
 //#endregion
-export { DeviceWalletDecision as A, DigitalIdFunnelEntry as B, IdCapturedImageData as C, IdFlowStep as D, IdErrorCode as E, DeviceWalletProvider as F, DigitalIdProviderId as G, ResolvedDigitalIdRoute as H, DeviceWalletServices as I, IDigitalCredentialsCapability as J, FailureReason as K, DIGITAL_ID_DOCUMENT_TYPES as L, DeviceWalletFailReason as M, DeviceWalletOutput as N, UploadIdResponse as O, DeviceWalletPlatform as P, DIGITAL_ID_REGISTRY as R, IdCaptureThresholds as S, IdError as T, isRedirectFlowType as U, DigitalIdPlatformSupport as V, resolveDigitalIdImplementation as W, IdCaptureGeometry as _, CaptureOnlyResponse as a, IdCaptureOnlyConfig as b, DetectionStatus as c, IdCaptureContext as d, IdCaptureDependencies as f, IdCaptureEvent as g, IdCaptureDigitalIdRedirectOption as h, CaptureIdResponse as i, DeviceWalletDecryptResponse as j, IAnalyticsCapability as k, ID_ERROR_CODES as l, IdCaptureDigitalIdMethod as m, AcceptedDocumentType as n, CapturedImage as o, IdCaptureDigitalIdFlowType as p, RedirectReturnParams as q, AddBarcodeV3Response as r, DetectionArea as s, AcceptedDocument as t, IdCaptureConfig as u, IdCaptureInput as v, IdDocumentType as w, IdCaptureOutput as x, IdCaptureMode as y, DigitalIdDocumentType as z };
+export { DigitalIdCountryDetectionDependencies as A, DeviceWalletDecryptResponse as B, IdCapturedImageData as C, IdFlowStep as D, IdErrorCode as E, DigitalIdPlatformSupport as F, DeviceWalletServices as G, DeviceWalletOutput as H, ResolvedDigitalIdRoute as I, RedirectReturnParams as J, DigitalIdProviderId as K, isRedirectFlowType as L, DIGITAL_ID_REGISTRY as M, DigitalIdDocumentType as N, UploadIdResponse as O, DigitalIdFunnelEntry as P, resolveDigitalIdImplementation as R, IdCaptureThresholds as S, IdError as T, DeviceWalletPlatform as U, DeviceWalletFailReason as V, DeviceWalletProvider as W, IDigitalCredentialsCapability as Y, IdCaptureGeometry as _, CaptureOnlyResponse as a, IdCaptureOnlyConfig as b, DetectionStatus as c, IdCaptureContext as d, IdCaptureDependencies as f, IdCaptureEvent as g, IdCaptureDigitalIdRedirectOption as h, CaptureIdResponse as i, DIGITAL_ID_DOCUMENT_TYPES as j, IAnalyticsCapability as k, ID_ERROR_CODES as l, IdCaptureDigitalIdMethod as m, AcceptedDocumentType as n, CapturedImage as o, IdCaptureDigitalIdFlowType as p, FailureReason as q, AddBarcodeV3Response as r, DetectionArea as s, AcceptedDocument as t, IdCaptureConfig as u, IdCaptureInput as v, IdDocumentType as w, IdCaptureOutput as x, IdCaptureMode as y, DeviceWalletDecision as z };

package/dist/{urlUtils-6jsE6rKp.esm.js → urlUtils-eYiyWjh0.esm.js}

@@ -6,6 +6,9 @@ function getUrlSearchParam(url, param) {
 		return null;
 	}
 }
+function resolveAgainstPageOrigin(path) {
+	return new URL(path, window.location.origin).href;
+}
 function buildUrlWithSearchParams(baseUrl, params) {
 	const url = new URL(baseUrl);
 	for (const [key, value] of Object.entries(params)) if (value !== void 0) url.searchParams.set(key, value);
@@ -20,4 +23,4 @@ function stripUrlQueryAndFragment(url) {
 	}
 }
 //#endregion
-export { getUrlSearchParam as n, stripUrlQueryAndFragment as r, buildUrlWithSearchParams as t };
+export { stripUrlQueryAndFragment as i, getUrlSearchParam as n, resolveAgainstPageOrigin as r, buildUrlWithSearchParams as t };

package/dist/video-selfie.d.ts

@@ -5,7 +5,7 @@ import "./Actor-DpTj5PFb.js";
 import { t as IVisibilityObserverCapability } from "./IVisibilityObserverCapability-D4tvIB5v.js";
 import { t as CameraStream } from "./camera-9wWD-pwg.js";
 import { t as DetectionOrientation } from "./IIdCaptureCapability-CGcEt2Cw.js";
-import { a as FacingMode, i as CameraCompositor, n as VideoSelfieDetectionStatus, o as VideoSelfieConfig, r as VideoSelfieValidationFailure, s as VideoSelfieStep, t as StepDetector } from "./videoSelfieStepDetector-CGsTltqB.js";
+import { a as FacingMode, c as VideoSelfieStep, i as CameraCompositor, n as VideoSelfieDetectionStatus, o as VideoSelfieConfig, r as VideoSelfieValidationFailure, s as VideoSelfieSpeechResult, t as StepDetector } from "./videoSelfieStepDetector-RfSmlFFW.js";
 //#region ../infra/src/capabilities/ITimerCapability.d.ts
 type TimerHandle = ReturnType<typeof setTimeout>;
 type ITimerCapability = {
@@ -162,7 +162,7 @@ type VideoSelfieRecordingDependencies = {
  * `error` for diagnostics/hosts, the UI shows its generic fallback);
  * `maxVideoLengthReached` is the configured recording limit; and
  * `validationAttemptsExhausted` terminates the module after the last allowed
- * ID or selfie validation failure.
+ * ID, selfie, or speech validation failure.
  */
 type VideoSelfieErrorKind = 'connection' | 'technical' | 'maxVideoLengthReached' | 'validationAttemptsExhausted';
 //#endregion
@@ -201,7 +201,7 @@ type VideoSelfieRecordingState = {
   orientation: DetectionOrientation | undefined;
   /** Validation failure shown during the current retry/exhaustion dwell. */
   validationFailure: VideoSelfieValidationFailure | undefined;
-  /** Remaining validation attempts for the active capture step; `-1` means unlimited. */
+  /** Remaining validation attempts for the active capture or speech step; `-1` means unlimited. */
   attemptsRemaining: number;
   /** The completed upload id, available during `success` and `finished`. */
   recordingId: string | null;
@@ -216,7 +216,7 @@ type VideoSelfieRecordingState = {
    * the connection-error copy; raw detail stays in `error` for diagnostics)
    * or `technical` (recoverable technical failures), or
    * `maxVideoLengthReached` (the configured recording limit), or
-   * `validationAttemptsExhausted` (terminal ID/selfie validation failure).
+   * `validationAttemptsExhausted` (terminal ID/selfie/speech validation failure).
    * Set when `status === 'error'`.
    */
   errorKind: VideoSelfieErrorKind | undefined;
@@ -238,6 +238,8 @@ declare function createVideoSelfieRecordingManager(options?: CreateVideoSelfieRe
    * facing mode differs; finalizes the upload on the last step.
    */
   nextStep(): void;
+  /** Report a speech verdict; Core counts rejections and finalizes on exhaustion. */
+  reportSpeechResult(result: VideoSelfieSpeechResult): void;
   /** Abandon the session without finalizing the upload. */
   abort(): void;
 };
@@ -340,9 +342,7 @@ type ConsentRecorder = {
   /** Start capturing audio from the given stream (uses its audio tracks). */
   start(stream: MediaStream): void;
   /** Stop, encode to MP3 base64, and upload. Resolves the backend verdict. */
-  submit(): Promise<{
-    success: boolean;
-  }>;
+  submit(): Promise<VideoSelfieSpeechResult>;
   /** Stop and discard without uploading (consent check disabled, or abort). */
   cancel(): void;
 };
@@ -383,4 +383,4 @@ declare const videoSelfieFlowModuleMachine: StateMachine<MachineContext, AnyEven
 //#region src/internal/orchestration/advanceableErrors.d.ts
 declare const VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE = "VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED";
 //#endregion
-export { type ConsentRecorder, type CreateVideoSelfieRecordingActorOptions, VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE, type VideoSelfieCameraWarmer, type VideoSelfieConfig, type VideoSelfieQuestion, type VideoSelfieRecordingManager, type VideoSelfieRecordingState, type VideoSelfieRecordingStatus, type VideoSelfieStep, createConsentRecorder, createVideoSelfieCameraWarmer, createVideoSelfieRecordingManager, facingModeForStep, getVideoSelfieQuestions, getVoiceConsentPhrase, resolveVideoSelfieSteps, videoSelfieFlowModuleMachine, videoSelfieWasmPipelines, warmupVideoSelfieWasm };
+export { type ConsentRecorder, type CreateVideoSelfieRecordingActorOptions, VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE, type VideoSelfieCameraWarmer, type VideoSelfieConfig, type VideoSelfieQuestion, type VideoSelfieRecordingManager, type VideoSelfieRecordingState, type VideoSelfieRecordingStatus, type VideoSelfieSpeechResult, type VideoSelfieStep, createConsentRecorder, createVideoSelfieCameraWarmer, createVideoSelfieRecordingManager, facingModeForStep, getVideoSelfieQuestions, getVoiceConsentPhrase, resolveVideoSelfieSteps, videoSelfieFlowModuleMachine, videoSelfieWasmPipelines, warmupVideoSelfieWasm };

package/dist/video-selfie.esm.js

@@ -1,15 +1,16 @@
-import { t as ensureWasmPipelines } from "./setup-BvKrAlOo.esm.js";
-import { t as WasmUtilProvider } from "./WasmUtilProvider-DtJuBdt-.esm.js";
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as ensureWasmPipelines } from "./setup-CDAKwTr7.esm.js";
+import { t as WasmUtilProvider } from "./WasmUtilProvider-GTkoJyFY.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
 import { t as BrowserLazyImportProvider } from "./BrowserLazyImportProvider-BhoA957O.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-COMEf-WP.esm.js";
-import { i as assign, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps, p as videoSelfieWasmPipelines } from "./flowServices-g2tVWsJl.esm.js";
+import { i as assign, l as raise, r as sendTo, s as createActor, t as setup, u as createManager } from "./xstate.esm-DSajW7CJ.esm.js";
 import { n as fromPromise, t as fromCallback } from "./xstate-actors.esm-8Gzepa_A.esm.js";
 import { t as BrowserVisibilityObserverProvider } from "./BrowserVisibilityObserverProvider-BrJN1B8A.esm.js";
-import { i as createRecordingCompositor, n as WorkerEncoderRecordingProvider, t as MultipartRecordingService } from "./multipartRecordingService-CLwrF5wD.esm.js";
-import { t as VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE } from "./advanceableErrors-q_pfU3Cn.esm.js";
-import { a as isConnectionError, n as defaultAcquireCamera, r as createDefaultStepDetector, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-LeE2vbAW.esm.js";
+import { t as carryAttempts } from "./attemptCarry-BjTJ6bMQ.esm.js";
+import { i as createRecordingCompositor, n as WorkerEncoderRecordingProvider, t as MultipartRecordingService } from "./multipartRecordingService-DMBxHKS2.esm.js";
+import { t as VIDEO_SELFIE_VALIDATION_ATTEMPTS_EXHAUSTED_CODE } from "./advanceableErrors-k-U-cL5m.esm.js";
+import { n as defaultAcquireCamera, r as createDefaultStepDetector, s as isConnectionError, t as createVideoSelfieCameraWarmer } from "./videoSelfieCameraWarmer-DjkPpoj_.esm.js";
 import { t as videoSelfieFlowModuleMachine } from "./videoSelfieFlowModuleMachine-BCFVHBQ1.esm.js";
 //#region ../../node_modules/.pnpm/audio-recorder-polyfill@0.4.1/node_modules/audio-recorder-polyfill/wave-encoder/index.js
 var wave_encoder_default = () => {
@@ -726,6 +727,7 @@ const videoSelfieRecordingSetup = setup({
 			error: () => "Video selfie validation attempts exhausted",
 			errorKind: () => "validationAttemptsExhausted"
 		}),
+		consumeSpeechAttempt: assign({ speechAttemptsRemaining: ({ context }) => context.speechAttemptsRemaining === UNLIMITED_ATTEMPTS ? UNLIMITED_ATTEMPTS : Math.max(0, context.speechAttemptsRemaining - 1) }),
 		resetSession: assign(({ context }) => ({
 			stepIndex: 0,
 			cameraSwitchRetried: false,
@@ -739,6 +741,7 @@ const videoSelfieRecordingSetup = setup({
 			recordingId: null,
 			error: void 0,
 			errorKind: void 0,
+			speechAccepted: false,
 			resumeState: "recording"
 		})),
 		cleanup: ({ context }) => {
@@ -771,9 +774,15 @@ const videoSelfieRecordingSetup = setup({
 		}
 	},
 	guards: {
+		ignoreSpeechResult: ({ context }) => context.steps[context.stepIndex] !== "speech" || context.speechAccepted,
+		speechSubmissionFailed: ({ event }) => event.type === "SPEECH_RESULT" && event.result.errorKind !== void 0,
+		speechWasAccepted: ({ event }) => event.type === "SPEECH_RESULT" && event.result.success,
+		isLastSpeechAttempt: ({ context }) => context.speechAttemptsRemaining !== UNLIMITED_ATTEMPTS && context.speechAttemptsRemaining <= 1,
+		speechAccepted: ({ context }) => context.speechAccepted,
 		shouldEnterWasmGate: ({ context }) => context.ensureWasmReady !== void 0 && context.errorKind !== "maxVideoLengthReached" && context.errorKind !== "validationAttemptsExhausted",
 		isLastStep: ({ context }) => context.stepIndex >= context.steps.length - 1,
 		hasAttemptsRemaining: ({ context }) => context.attemptsRemaining === UNLIMITED_ATTEMPTS || context.attemptsRemaining > 0,
+		isOutOfAttempts: ({ context }) => context.attemptsRemaining === 0 || context.steps.includes("speech") && context.speechAttemptsRemaining === 0,
 		nextStepFlipsId: ({ context }) => context.steps[context.stepIndex] === "frontId" && context.steps[context.stepIndex + 1] === "backId",
 		nextStepFlipsCamera: ({ context }) => facingModeForStep(context.steps[context.stepIndex]) !== facingModeForStep(context.steps[context.stepIndex + 1]),
 		uploadReturnedNoRecordingId: ({ event }) => recordingIdFromEvent(event) === null,
@@ -812,11 +821,39 @@ const ADVANCE_TRANSITIONS = [
 		actions: "advanceStep"
 	}
 ];
+const SPEECH_RESULT_TRANSITIONS = [
+	{ guard: "ignoreSpeechResult" },
+	{
+		guard: "speechSubmissionFailed",
+		target: "error",
+		actions: videoSelfieRecordingSetup.assign(({ event }) => ({
+			error: "Speech validation could not be completed",
+			errorKind: event.type === "SPEECH_RESULT" ? event.result.errorKind : void 0
+		}))
+	},
+	{
+		guard: "speechWasAccepted",
+		actions: videoSelfieRecordingSetup.assign({ speechAccepted: () => true })
+	},
+	{
+		guard: "isLastSpeechAttempt",
+		target: "finalizing",
+		actions: ["consumeSpeechAttempt", "setValidationAttemptsExhausted"]
+	},
+	{ actions: "consumeSpeechAttempt" }
+];
 const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 	id: "videoSelfieRecording",
 	initial: "idle",
-	context: ({ input }) => {
+	context: ({ input, self }) => {
 		const visibilityObserver = input.visibilityObserver;
+		const carried = carryAttempts("videoSelfieRecording", self, (s) => ({
+			attemptsRemaining: s.context.attemptsRemaining,
+			speechAttemptsRemaining: s.context.speechAttemptsRemaining
+		}));
+		const perStep = normalizeAttempts(input.attemptsPerStep);
+		const attempts = perStep === UNLIMITED_ATTEMPTS ? perStep : Math.min(perStep, carried.attemptsRemaining ?? perStep);
+		const speechAttempts = perStep === UNLIMITED_ATTEMPTS ? perStep : Math.min(perStep, carried.speechAttemptsRemaining ?? perStep);
 		const compositor = input.dependencies?.createCompositor?.() ?? createRecordingCompositor();
 		return {
 			service: input.dependencies?.createRecordingService?.() ?? new MultipartRecordingService("videoselfie", new WorkerEncoderRecordingProvider(compositor)),
@@ -836,8 +873,10 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 			orientation: void 0,
 			detectionError: void 0,
 			validationFailure: void 0,
-			attemptsPerStep: normalizeAttempts(input.attemptsPerStep),
-			attemptsRemaining: normalizeAttempts(input.attemptsPerStep),
+			attemptsPerStep: attempts,
+			attemptsRemaining: attempts,
+			speechAttemptsRemaining: speechAttempts,
+			speechAccepted: false,
 			maxVideoLengthSeconds: normalizeMaxVideoLength(input.maxVideoLengthSeconds),
 			recordingId: null,
 			error: void 0,
@@ -861,10 +900,18 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		FOREGROUND: { actions: "markPageVisible" }
 	},
 	states: {
-		idle: { on: { START: [{
-			target: "preparingWasm",
-			guard: "shouldEnterWasmGate"
-		}, { target: "acquiringCamera" }] } },
+		idle: { on: { START: [
+			{
+				target: "error",
+				guard: "isOutOfAttempts",
+				actions: "setValidationAttemptsExhausted"
+			},
+			{
+				target: "preparingWasm",
+				guard: "shouldEnterWasmGate"
+			},
+			{ target: "acquiringCamera" }
+		] } },
 		preparingWasm: { invoke: {
 			src: "prepareWasm",
 			input: ({ context }) => ({ ensure: context.ensureWasmReady }),
@@ -916,6 +963,10 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		} },
 		recording: {
 			entry: "clearDetectionFeedback",
+			always: {
+				guard: "speechAccepted",
+				actions: [assign({ speechAccepted: () => false }), raise({ type: "NEXT_STEP" })]
+			},
 			invoke: {
 				src: "detectStep",
 				input: ({ context }) => ({
@@ -937,6 +988,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 				ORIENTATION: { actions: "setOrientation" },
 				DETECTION_DONE: ADVANCE_TRANSITIONS,
 				NEXT_STEP: ADVANCE_TRANSITIONS,
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 				VALIDATION_FAILED: {
 					target: "validationFeedback",
 					actions: "setValidationFailure"
@@ -1038,7 +1090,10 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 			after: { CAMERA_RELEASE_SETTLE: { target: "switchingCamera" } }
 		},
 		pausing: {
-			on: { MAX_VIDEO_LENGTH_REACHED: { actions: "setMaxVideoLengthReached" } },
+			on: {
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
+				MAX_VIDEO_LENGTH_REACHED: { actions: "setMaxVideoLengthReached" }
+			},
 			invoke: {
 				src: "pauseCapture",
 				input: ({ context }) => ({
@@ -1071,6 +1126,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 			}
 		},
 		suspended: { on: {
+			SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 			FOREGROUND: {
 				target: "resumingCompositor",
 				actions: "markPageVisible"
@@ -1082,6 +1138,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		} },
 		resumingCompositor: {
 			on: {
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 				BACKGROUND: {
 					target: "pausing",
 					actions: "markPageHidden"
@@ -1118,6 +1175,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		},
 		reacquiringCamera: {
 			on: {
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 				BACKGROUND: {
 					target: "pausing",
 					actions: "markPageHidden"
@@ -1148,6 +1206,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		},
 		validatingRecoveredCamera: {
 			on: {
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 				BACKGROUND: {
 					target: "pausing",
 					actions: "markPageHidden"
@@ -1181,6 +1240,7 @@ const videoSelfieRecordingMachine = videoSelfieRecordingSetup.createMachine({
 		},
 		resumingRecorder: {
 			on: {
+				SPEECH_RESULT: SPEECH_RESULT_TRANSITIONS,
 				BACKGROUND: {
 					target: "pausing",
 					actions: "markPageHidden"
@@ -1341,7 +1401,7 @@ function mapState(snapshot) {
 		detectionStatus: context.detectionStatus,
 		orientation: context.orientation,
 		validationFailure: context.validationFailure,
-		attemptsRemaining: context.attemptsRemaining,
+		attemptsRemaining: steps[stepIndex] === "speech" ? context.speechAttemptsRemaining : context.attemptsRemaining,
 		recordingId: context.recordingId,
 		error: context.error,
 		errorKind: context.errorKind
@@ -1363,6 +1423,13 @@ function createApi({ actor }) {
 		nextStep() {
 			actor.send({ type: "NEXT_STEP" });
 		},
+		/** Report a speech verdict; Core counts rejections and finalizes on exhaustion. */
+		reportSpeechResult(result) {
+			actor.send({
+				type: "SPEECH_RESULT",
+				result
+			});
+		},
 		/** Abandon the session without finalizing the upload. */
 		abort() {
 			actor.send({ type: "ABORT" });
@@ -1412,8 +1479,8 @@ async function getVoiceConsentPhrase() {
 }
 /**
 * Uploads the recorded consent audio (base64 MP3) for speech-to-text
-* validation. Resolves `{ success: false }` on a network/validation error so
-* the UI can drive its retry loop instead of throwing.
+* validation. Transport/technical failures carry an error kind so they do not
+* consume validation attempts.
 */
 async function addSpeech(base64Mp3) {
 	try {
@@ -1421,8 +1488,11 @@ async function addSpeech(base64Mp3) {
 			base64Media: base64Mp3,
 			audioOnly: true
 		})).data.success === true };
-	} catch {
-		return { success: false };
+	} catch (error) {
+		return {
+			success: false,
+			errorKind: isConnectionError(error) ? "connection" : "technical"
+		};
 	}
 }
 //#endregion
@@ -1435,7 +1505,10 @@ function createConsentRecorder() {
 		},
 		async submit() {
 			const base64 = await provider.stopAsBase64();
-			if (base64.length === 0) return { success: false };
+			if (base64.length === 0) return {
+				success: false,
+				errorKind: "technical"
+			};
 			return addSpeech(base64);
 		},
 		cancel() {

package/dist/{videoSelfieCameraWarmer-LeE2vbAW.esm.js → videoSelfieCameraWarmer-DjkPpoj_.esm.js}

@@ -1,14 +1,14 @@
-import { t as api, u as endpoints } from "./api-Cz90EHyu.esm.js";
+import { t as api, u as endpoints } from "./api-BO8JA7Pf.esm.js";
 import { t as BrowserTimerProvider } from "./BrowserTimerProvider-BXhgNxLt.esm.js";
-import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-COMEf-WP.esm.js";
-import { a as requestCameraWithFallback, i as requestCameraAccess } from "./camera-sIa9ceW2.esm.js";
-import { t as checkPermission } from "./permissionServices-Ca-tSNhT.esm.js";
-import { c as processFace, d as FACE_ERROR_CODES, l as uploadSelfie, n as encryptSelfieImage, o as startDetection, t as FaceDetectionProvider } from "./FaceDetectionProvider-CzQEFzP8.esm.js";
-import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-CLwrF5wD.esm.js";
-import { n as getBackCameraStream } from "./backCameraStream-CMvXj4X4.esm.js";
+import { d as facingModeForStep, f as resolveVideoSelfieSteps } from "./flowServices-g2tVWsJl.esm.js";
+import { i as requestCameraWithFallback, r as requestCameraAccess } from "./camera-E_Kcre4O.esm.js";
+import { t as checkPermission } from "./permissionServices-DnBAN_hW.esm.js";
+import { c as uploadSelfie, n as encryptSelfieImage, o as startDetection, s as processFace, t as FaceDetectionProvider, u as FACE_ERROR_CODES } from "./FaceDetectionProvider-B83VmClw.esm.js";
+import { o as StreamCanvasProcessingSession } from "./multipartRecordingService-DMBxHKS2.esm.js";
+import { t as getBackCameraStream } from "./backCameraStream-C5_NNfUN.esm.js";
 import { n as getWindowDimensions } from "./getDeviceClass-CeBiEayS.esm.js";
-import { t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-CoXIxVCy.esm.js";
-import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-BGsG2OAs.esm.js";
+import { t as getFaceErrorCodeFromUnknown } from "./selfieErrorUtils-BL0BLMnp.esm.js";
+import { n as DEFAULT_ID_CAPTURE_THRESHOLDS, r as IdCaptureProvider, t as DEFAULT_ID_CAPTURE_GEOMETRY } from "./idCaptureDefaults-MSQoqScU.esm.js";
 import { t as StreamCanvasCapture } from "./StreamCanvasCapture-C9jtgBdT.esm.js";
 //#region src/modules/video-selfie/videoSelfieCompareService.ts
 async function postVideoSelfieCompare(endpoint, base64Image) {
@@ -23,6 +23,14 @@ const compareVideoSelfieBackId = (base64Image) => postVideoSelfieCompare(endpoin
 /** Compare OCR from a back-ID frame against the captured ID's OCR. */
 const compareVideoSelfieBackOcr = (base64Image) => postVideoSelfieCompare(endpoints.videoSelfieCompareBackOcr, base64Image);
 //#endregion
+//#region src/modules/video-selfie/videoSelfieErrors.ts
+/** HTTP transport failures, rather than backend validation verdicts. */
+function isConnectionError(error) {
+	if (typeof error !== "object" || error === null || !("status" in error)) return false;
+	const status = error.status;
+	return typeof status === "number" && (status === 0 || status === 408 || status === 429 || status >= 500);
+}
+//#endregion
 //#region src/modules/video-selfie/videoSelfieStepDetector.ts
 /** Default autocapture window for the selfie step when the config omits one. */
 const SELFIE_AUTOCAPTURE_MS = 1e4;
@@ -95,17 +103,6 @@ function isSelfieValidationError(error) {
 const SELFIE_SUBMIT_ATTEMPTS = 3;
 const SELFIE_SUBMIT_BACKOFF_MS = 2e3;
 /**
-* True for HTTP-transport-shaped failures — network error / client-side
-* timeout (status 0), 408, 429, 5xx — as opposed to a backend verdict.
-* Plain Errors (aborts, programming faults) are not connection errors.
-*/
-function isConnectionError(error) {
-	if (typeof error !== "object" || error === null || !("status" in error)) return false;
-	const status = error.status;
-	if (typeof status !== "number") return false;
-	return status === 0 || status === 408 || status === 429 || status >= 500;
-}
-/**
 * True for errors where the selfie submission never got a meaningful backend
 * verdict, as opposed to a validation outcome. Re-sending the same payload
 * can succeed, so these are retried in place instead of failing the whole
@@ -508,4 +505,4 @@ function createVideoSelfieCameraWarmer(config, steps = resolveVideoSelfieSteps(c
 	};
 }
 //#endregion
-export { isConnectionError as a, delay as i, defaultAcquireCamera as n, isSelfieValidationError as o, createDefaultStepDetector as r, isWrongVideoSelfieIdSide as s, createVideoSelfieCameraWarmer as t };
+export { isSelfieValidationError as a, delay as i, defaultAcquireCamera as n, isWrongVideoSelfieIdSide as o, createDefaultStepDetector as r, isConnectionError as s, createVideoSelfieCameraWarmer as t };