@neofaceid/web-sdk 1.26.1 → 1.28.0

package/dist/neoface-id-sdk.es.js

@@ -8064,156 +8064,289 @@ function BiometricRegistrationModal({
     /* @__PURE__ */ jsx("canvas", { ref: canvasRef })
   ] });
 }
+const DEFAULT_PRIVACY_URL = "https://neofaceid.com/privacidade";
+const DEFAULT_RETENTION_DAYS = 90;
+const COPY = {
+  verification: {
+    title: "Vamos confirmar que é você",
+    duration: "Leva cerca de 20 segundos e usa a câmera do seu dispositivo.",
+    bullet1Title: "Sua câmera liga agora",
+    bullet1Body: "Você vê a imagem o tempo todo e pode encerrar quando quiser.",
+    bullet2Title: "Pediremos dois movimentos simples",
+    bullet2Body: "Virar o rosto ou piscar — é assim que sabemos que há alguém ali.",
+    bullet3Title: "A imagem não fica guardada",
+    bullet3Body: "Ela é usada para a verificação e descartada em seguida.",
+    primary: "Começar verificação"
+  },
+  registration: {
+    title: "Vamos cadastrar seu rosto",
+    duration: "Leva cerca de 20 segundos e usa a câmera do seu dispositivo.",
+    bullet1Title: "Sua câmera liga agora",
+    bullet1Body: "Você vê a imagem o tempo todo e pode encerrar quando quiser.",
+    bullet2Title: "Pediremos dois movimentos simples",
+    bullet2Body: "Virar o rosto ou piscar — é assim que sabemos que há alguém ali.",
+    bullet3Title: "Guardamos um vetor matemático do seu rosto",
+    bullet3Body: "Não a foto. A imagem é descartada.",
+    primary: "Começar cadastro"
+  }
+};
+const IconCamera = () => /* @__PURE__ */ jsxs(
+  "svg",
+  {
+    width: "24",
+    height: "24",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "1.75",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    "aria-hidden": "true",
+    children: [
+      /* @__PURE__ */ jsx("path", { d: "M14.5 4h-5L7 7H4a2 2 0 0 0-2 2v9a2 2 0 0 0 2 2h16a2 2 0 0 0 2-2V9a2 2 0 0 0-2-2h-3l-2.5-3Z" }),
+      /* @__PURE__ */ jsx("circle", { cx: "12", cy: "13", r: "4" })
+    ]
+  }
+);
+const IconGesture = () => /* @__PURE__ */ jsxs(
+  "svg",
+  {
+    width: "24",
+    height: "24",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "1.75",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    "aria-hidden": "true",
+    children: [
+      /* @__PURE__ */ jsx("circle", { cx: "12", cy: "12", r: "9" }),
+      /* @__PURE__ */ jsx("path", { d: "M4 12h16" }),
+      /* @__PURE__ */ jsx("path", { d: "M15 8l4 4-4 4" })
+    ]
+  }
+);
+const IconShield = () => /* @__PURE__ */ jsxs(
+  "svg",
+  {
+    width: "24",
+    height: "24",
+    viewBox: "0 0 24 24",
+    fill: "none",
+    stroke: "currentColor",
+    strokeWidth: "1.75",
+    strokeLinecap: "round",
+    strokeLinejoin: "round",
+    "aria-hidden": "true",
+    children: [
+      /* @__PURE__ */ jsx("path", { d: "M12 2 4 5v7c0 5 3.5 8.5 8 10 4.5-1.5 8-5 8-10V5l-8-3Z" }),
+      /* @__PURE__ */ jsx("path", { d: "m9 12 2 2 4-4" })
+    ]
+  }
+);
 function ConsentModalComponent({
-  purpose,
-  legalBasis,
-  privacyPolicyUrl,
-  retentionDays,
+  appName,
+  flow,
+  privacyPolicyUrl = DEFAULT_PRIVACY_URL,
+  retentionDays = DEFAULT_RETENTION_DAYS,
   onAccept,
   onDecline
 }) {
+  const copy = COPY[flow];
   return /* @__PURE__ */ jsxs(Fragment, { children: [
     /* @__PURE__ */ jsx("style", { children: `
-        @keyframes neofaceidConsentFadeIn {
-          from { opacity: 0; }
-          to { opacity: 1; }
-        }
-
+        @keyframes neofaceidConsentFadeIn { from { opacity: 0 } to { opacity: 1 } }
         @keyframes neofaceidConsentSlideUp {
-          from {
-            opacity: 0;
-            transform: translateY(20px);
-          }
-          to {
-            opacity: 1;
-            transform: translateY(0);
-          }
+          from { opacity: 0; transform: translateY(12px) }
+          to { opacity: 1; transform: translateY(0) }
         }
-
         .neofaceid-consent-overlay {
-          position: fixed;
-          inset: 0;
-          background: rgba(0, 0, 0, 0.6);
-          backdrop-filter: blur(8px);
-          display: flex;
-          align-items: center;
-          justify-content: center;
-          z-index: 10001;
-          padding: 20px;
-          animation: neofaceidConsentFadeIn 0.3s ease-out;
-          font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+          position: fixed; inset: 0;
+          background: rgba(10, 19, 32, 0.55);
+          backdrop-filter: blur(3px);
+          -webkit-backdrop-filter: blur(3px);
+          display: flex; align-items: center; justify-content: center;
+          z-index: 10001; padding: 20px;
+          animation: neofaceidConsentFadeIn 200ms ease-out;
+          font-family: inherit;
+          color: #0A1320;
         }
-
         .neofaceid-consent-modal {
-          background: linear-gradient(135deg, #1a1a2e 0%, #16213e 100%);
-          border-radius: 20px;
-          padding: 32px;
-          max-width: 420px;
+          background: #FFFFFF;
+          border-radius: 16px;
+          padding: 28px;
+          max-width: 440px;
           width: 100%;
-          box-shadow: 0 24px 48px rgba(0, 0, 0, 0.4), 0 0 0 1px rgba(255, 255, 255, 0.1);
-          animation: neofaceidConsentSlideUp 0.4s ease-out;
+          box-shadow: 0 1px 3px rgba(10, 19, 32, 0.08);
+          animation: neofaceidConsentSlideUp 320ms cubic-bezier(.2,0,0,1);
+          box-sizing: border-box;
+        }
+        .neofaceid-consent-header {
+          display: flex;
+          align-items: baseline;
+          gap: 10px;
+          margin-bottom: 20px;
+        }
+        .neofaceid-consent-appname {
+          font-size: 17px;
+          font-weight: 700;
+          color: #0A1320;
+          line-height: 1.2;
+        }
+        .neofaceid-consent-brand-caption {
+          font-size: 11px;
+          font-weight: 700;
+          letter-spacing: 0.09em;
+          text-transform: uppercase;
+          color: #617489;
         }
-
         .neofaceid-consent-title {
-          font-size: 20px;
+          font-size: 22px;
           font-weight: 700;
-          color: white;
-          margin: 0 0 12px 0;
+          color: #0A1320;
+          margin: 0 0 8px;
+          line-height: 1.25;
+          letter-spacing: -0.015em;
         }
-
-        .neofaceid-consent-message {
+        .neofaceid-consent-duration {
           font-size: 14px;
-          color: rgba(255, 255, 255, 0.7);
-          margin: 0 0 16px 0;
+          color: #48586B;
+          margin: 0 0 20px;
           line-height: 1.5;
         }
-
+        .neofaceid-consent-bullets {
+          display: flex;
+          flex-direction: column;
+          gap: 14px;
+          margin-bottom: 20px;
+        }
+        .neofaceid-consent-bullet {
+          display: flex;
+          gap: 12px;
+          align-items: flex-start;
+        }
+        .neofaceid-consent-bullet-icon {
+          flex-shrink: 0;
+          color: #0059C4;
+          margin-top: 2px;
+        }
+        .neofaceid-consent-bullet-title {
+          font-size: 14px;
+          font-weight: 600;
+          color: #0A1320;
+          margin: 0 0 2px;
+          line-height: 1.35;
+        }
+        .neofaceid-consent-bullet-body {
+          font-size: 13px;
+          color: #48586B;
+          margin: 0;
+          line-height: 1.45;
+        }
         .neofaceid-consent-link {
           display: inline-block;
-          font-size: 14px;
-          color: #a78bfa;
+          font-size: 13px;
+          color: #0059C4;
           text-decoration: underline;
-          margin-bottom: 24px;
-        }
-
-        .neofaceid-consent-link:hover {
-          color: #c4b5fd;
+          margin-bottom: 20px;
         }
-
+        .neofaceid-consent-link:hover { color: #00449A; }
         .neofaceid-consent-actions {
           display: flex;
           flex-direction: column;
-          gap: 12px;
+          gap: 10px;
         }
-
         .neofaceid-consent-button {
-          padding: 14px 24px;
-          border-radius: 12px;
+          min-height: 44px;
+          padding: 12px 20px;
+          border-radius: 16px;
           border: none;
-          font-size: 16px;
+          font-size: 15px;
           font-weight: 600;
           cursor: pointer;
-          transition: all 0.2s;
+          transition: background 120ms ease-out, transform 120ms ease-out;
           font-family: inherit;
         }
-
         .neofaceid-consent-button-primary {
-          background: linear-gradient(135deg, #7c3aed 0%, #6d28d9 100%);
-          color: white;
-          box-shadow: 0 4px 16px rgba(124, 58, 237, 0.3);
+          background: #0059C4;
+          color: #FFFFFF;
         }
-
-        .neofaceid-consent-button-primary:hover {
-          transform: translateY(-2px);
-          box-shadow: 0 8px 24px rgba(124, 58, 237, 0.4);
+        .neofaceid-consent-button-primary:hover { background: #00449A; }
+        .neofaceid-consent-button-primary:focus-visible {
+          outline: 2px solid #0059C4;
+          outline-offset: 2px;
         }
-
-        .neofaceid-consent-button-primary:active {
-          transform: translateY(0);
+        .neofaceid-consent-button-ghost {
+          background: transparent;
+          color: #334255;
         }
-
-        .neofaceid-consent-button-secondary {
-          background: rgba(255, 255, 255, 0.1);
-          color: white;
-          border: 1px solid rgba(255, 255, 255, 0.2);
+        .neofaceid-consent-button-ghost:hover { background: #F1F5FA; }
+        .neofaceid-consent-footer {
+          display: flex;
+          justify-content: center;
+          margin-top: 20px;
+          padding-top: 16px;
+          border-top: 1px solid #E6ECF4;
         }
-
-        .neofaceid-consent-button-secondary:hover {
-          background: rgba(255, 255, 255, 0.15);
-          border-color: rgba(255, 255, 255, 0.3);
+        .neofaceid-consent-seal {
+          font-size: 11px;
+          font-weight: 700;
+          letter-spacing: 0.09em;
+          text-transform: uppercase;
+          color: #617489;
         }
-
         @media (max-width: 640px) {
-          .neofaceid-consent-modal {
-            padding: 24px;
-            border-radius: 16px;
-          }
-
-          .neofaceid-consent-title {
-            font-size: 18px;
-          }
+          .neofaceid-consent-modal { padding: 22px; border-radius: 16px; }
+          .neofaceid-consent-title { font-size: 20px; }
+        }
+        @media (prefers-reduced-motion: reduce) {
+          .neofaceid-consent-overlay,
+          .neofaceid-consent-modal { animation: none; }
         }
       ` }),
-    /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-overlay", children: /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-modal", children: [
-      /* @__PURE__ */ jsxs("h3", { className: "neofaceid-consent-title", children: [
-        "Uso do seu rosto para ",
-        purpose
+    /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-overlay", role: "dialog", "aria-modal": "true", "aria-labelledby": "neofaceid-consent-title", children: /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-modal", children: [
+      /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-header", children: [
+        /* @__PURE__ */ jsx("span", { className: "neofaceid-consent-appname", children: appName }),
+        /* @__PURE__ */ jsx("span", { className: "neofaceid-consent-brand-caption", children: "NeoFaceID" })
       ] }),
-      /* @__PURE__ */ jsxs("p", { className: "neofaceid-consent-message", children: [
-        "Esta captura é realizada com base em ",
-        legalBasis,
-        ". Os dados biométricos coletados são retidos por até ",
-        retentionDays,
-        " dias, conforme a finalidade informada."
+      /* @__PURE__ */ jsx("h1", { id: "neofaceid-consent-title", className: "neofaceid-consent-title", children: copy.title }),
+      /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-duration", children: copy.duration }),
+      /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-bullets", children: [
+        /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-bullet", children: [
+          /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-bullet-icon", children: /* @__PURE__ */ jsx(IconCamera, {}) }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-title", children: copy.bullet1Title }),
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-body", children: copy.bullet1Body })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-bullet", children: [
+          /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-bullet-icon", children: /* @__PURE__ */ jsx(IconGesture, {}) }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-title", children: copy.bullet2Title }),
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-body", children: copy.bullet2Body })
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-bullet", children: [
+          /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-bullet-icon", children: /* @__PURE__ */ jsx(IconShield, {}) }),
+          /* @__PURE__ */ jsxs("div", { children: [
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-title", children: copy.bullet3Title }),
+            /* @__PURE__ */ jsx("p", { className: "neofaceid-consent-bullet-body", children: copy.bullet3Body })
+          ] })
+        ] })
       ] }),
-      /* @__PURE__ */ jsx(
+      /* @__PURE__ */ jsxs(
         "a",
         {
           href: privacyPolicyUrl,
           target: "_blank",
           rel: "noopener noreferrer",
           className: "neofaceid-consent-link",
-          children: "Ver política de privacidade"
+          children: [
+            "Ver política de privacidade (retenção de até ",
+            retentionDays,
+            " dias)"
+          ]
         }
       ),
       /* @__PURE__ */ jsxs("div", { className: "neofaceid-consent-actions", children: [
@@ -8223,19 +8356,20 @@ function ConsentModalComponent({
             type: "button",
             className: "neofaceid-consent-button neofaceid-consent-button-primary",
             onClick: onAccept,
-            children: "Aceito e continuar"
+            children: copy.primary
           }
         ),
         /* @__PURE__ */ jsx(
           "button",
           {
             type: "button",
-            className: "neofaceid-consent-button neofaceid-consent-button-secondary",
+            className: "neofaceid-consent-button neofaceid-consent-button-ghost",
             onClick: onDecline,
-            children: "Recusar"
+            children: "Agora não"
           }
         )
-      ] })
+      ] }),
+      /* @__PURE__ */ jsx("div", { className: "neofaceid-consent-footer", children: /* @__PURE__ */ jsx("span", { className: "neofaceid-consent-seal", children: "Protegido por NeoFaceID" }) })
     ] }) })
   ] });
 }
@@ -8245,9 +8379,7 @@ class ConsentModal {
     __publicField(this, "root", null);
   }
   show(props) {
-    if (this.container) {
-      return;
-    }
+    if (this.container) return;
     this.container = document.createElement("div");
     this.container.id = "neofaceid-consent-modal-container";
     document.body.appendChild(this.container);
@@ -8271,32 +8403,39 @@ class ConsentModal {
   }
   close() {
     if (this.container && document.body.contains(this.container)) {
-      if (this.root) {
-        this.root.unmount();
-      }
+      if (this.root) this.root.unmount();
       document.body.removeChild(this.container);
       this.container = null;
       this.root = null;
     }
   }
 }
-const DEFAULT_CONSENT_INFO = {
-  purpose: "autenticação facial",
-  legalBasis: "seu consentimento explícito (Art. 7º, I da LGPD)",
-  privacyPolicyUrl: "https://neofaceid.com/privacidade",
-  retentionDays: 90
-};
+const DEFAULT_APP_NAME = "sua aplicação";
 function requestConsent(info = {}) {
+  const appName = info.appName ?? DEFAULT_APP_NAME;
+  if (!info.appName) {
+    console.warn(
+      '[NeoFaceID SDK] requestConsent chamado sem appName — usando fallback "sua aplicação". Passe o nome do integrador via NeoFaceSDK.init({ appName }).'
+    );
+  }
+  const flow = info.flow ?? "verification";
   return new Promise((resolve) => {
     const modal = new ConsentModal();
     modal.show({
-      ...DEFAULT_CONSENT_INFO,
-      ...info,
+      appName,
+      flow,
+      privacyPolicyUrl: info.privacyPolicyUrl ?? DEFAULT_PRIVACY_URL,
+      retentionDays: info.retentionDays ?? DEFAULT_RETENTION_DAYS,
       onAccept: () => resolve(true),
       onDecline: () => resolve(false)
     });
   });
 }
+const DEFAULT_CONSENT_INFO = {
+  flow: "verification",
+  privacyPolicyUrl: DEFAULT_PRIVACY_URL,
+  retentionDays: DEFAULT_RETENTION_DAYS
+};
 class BiometricCaptureModal {
   constructor(options) {
     __publicField(this, "modal", null);
@@ -10088,7 +10227,10 @@ const biometricLoginFlow = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.
 }, Symbol.toStringTag, { value: "Module" }));
 const CONSENT_DENIED_MESSAGE$1 = "Consentimento recusado pelo usuário.";
 async function startFaceLogin(options) {
-  const consentAccepted = await requestConsent();
+  const consentAccepted = await requestConsent({
+    appName: options.appName,
+    flow: "verification"
+  });
   if (!consentAccepted) {
     options.onError(new NeoFaceError(CONSENT_DENIED_MESSAGE$1, ErrorType.CONSENT_DENIED));
     return;
@@ -10121,7 +10263,10 @@ async function startFaceLogin(options) {
   }
 }
 async function startHandLogin(options) {
-  const consentAccepted = await requestConsent();
+  const consentAccepted = await requestConsent({
+    appName: options.appName,
+    flow: "verification"
+  });
   if (!consentAccepted) {
     options.onError(new NeoFaceError(CONSENT_DENIED_MESSAGE$1, ErrorType.CONSENT_DENIED));
     return;
@@ -10156,7 +10301,10 @@ async function startHandLogin(options) {
   }
 }
 async function startAutoLogin(options) {
-  const consentAccepted = await requestConsent();
+  const consentAccepted = await requestConsent({
+    appName: options.appName,
+    flow: "verification"
+  });
   if (!consentAccepted) {
     options.onError(new NeoFaceError(CONSENT_DENIED_MESSAGE$1, ErrorType.CONSENT_DENIED));
     return;
@@ -10417,8 +10565,254 @@ const biometricDetection = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.
   initializeBiometricDetection,
   isAdvancedDetectionAvailable
 }, Symbol.toStringTag, { value: "Module" }));
-const VERSION = "1.26.1";
+const VERSION = "1.28.0";
 const RELEASE_DATE = "2026-09-01";
+let cachedSession = null;
+function getCachedCaptureSession() {
+  return cachedSession;
+}
+function resetCaptureSession() {
+  cachedSession = null;
+}
+async function openCaptureSession({
+  applicationToken,
+  purpose
+}) {
+  if (!applicationToken) {
+    throw new NeoFaceError(
+      "applicationToken é obrigatório para abrir sessão de captura",
+      ErrorType.INVALID_TOKEN
+    );
+  }
+  const url = `${getBaseUrl()}/api/v1/auth/capture/session/`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-App-Token": applicationToken
+      },
+      body: JSON.stringify({ purpose })
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Erro de rede";
+    throw new NeoFaceError(`Falha de rede ao abrir sessão: ${message}`, ErrorType.NETWORK);
+  }
+  if (response.status === 401 || response.status === 403) {
+    throw new NeoFaceError("Token de aplicação inválido ou expirado", ErrorType.INVALID_TOKEN);
+  }
+  if (!response.ok) {
+    throw new NeoFaceError(
+      `Falha ao abrir sessão de captura (${response.status})`,
+      ErrorType.API_ERROR
+    );
+  }
+  const raw = await response.json().catch(() => null);
+  const payload = (raw == null ? void 0 : raw.data) ?? raw;
+  const sessionId = payload == null ? void 0 : payload.session_id;
+  const expiresAt = payload == null ? void 0 : payload.expires_at;
+  if (!sessionId || !expiresAt) {
+    throw new NeoFaceError(
+      "Resposta inválida ao abrir sessão de captura (campos ausentes)",
+      ErrorType.API_ERROR
+    );
+  }
+  cachedSession = { session_id: sessionId, expires_at: expiresAt };
+  return cachedSession;
+}
+async function withCaptureSession(params, fn) {
+  const session = cachedSession ?? await openCaptureSession(params);
+  try {
+    return await fn(session.session_id);
+  } catch (err) {
+    if (err instanceof NeoFaceError && err.message.includes("410")) {
+      resetCaptureSession();
+      const fresh = await openCaptureSession(params);
+      return fn(fresh.session_id);
+    }
+    throw err;
+  }
+}
+function withSessionId(payload) {
+  const session = cachedSession;
+  if (!session) return payload;
+  return { ...payload, session_id: session.session_id };
+}
+async function requestLivenessChallenge({
+  sessionId,
+  applicationToken
+}) {
+  if (!applicationToken) {
+    throw new NeoFaceError(
+      "applicationToken é obrigatório para solicitar desafio de liveness",
+      ErrorType.INVALID_TOKEN
+    );
+  }
+  if (!sessionId) {
+    throw new NeoFaceError(
+      "session_id é obrigatório para solicitar desafio de liveness",
+      ErrorType.VALIDATION_ERROR
+    );
+  }
+  const url = `${getBaseUrl()}/api/v1/auth/liveness/challenge/`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-App-Token": applicationToken
+      },
+      body: JSON.stringify({ session_id: sessionId })
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Erro de rede";
+    throw new NeoFaceError(`Falha de rede ao solicitar desafio: ${message}`, ErrorType.NETWORK);
+  }
+  if (response.status === 401 || response.status === 403) {
+    throw new NeoFaceError("Token de aplicação inválido ou expirado", ErrorType.INVALID_TOKEN);
+  }
+  if (response.status === 410) {
+    throw new NeoFaceError(
+      "Sessão de captura expirada (410) — reabrir sessão",
+      ErrorType.API_ERROR
+    );
+  }
+  if (!response.ok) {
+    throw new NeoFaceError(
+      `Falha ao solicitar desafio de liveness (${response.status})`,
+      ErrorType.API_ERROR
+    );
+  }
+  const raw = await response.json().catch(() => null);
+  const payload = (raw == null ? void 0 : raw.data) ?? raw;
+  const challengeId = payload == null ? void 0 : payload.challenge_id;
+  const gestures = payload == null ? void 0 : payload.gestures;
+  if (!challengeId || !Array.isArray(gestures) || gestures.length === 0) {
+    throw new NeoFaceError(
+      "Resposta inválida ao solicitar desafio (campos ausentes)",
+      ErrorType.API_ERROR
+    );
+  }
+  return {
+    challenge_id: challengeId,
+    gestures,
+    expires_at: payload == null ? void 0 : payload.expires_at
+  };
+}
+async function requestLivenessChallengeWithSession({
+  applicationToken,
+  purpose,
+  sessionId
+}) {
+  let currentSessionId = sessionId ?? (await openCaptureSession({ applicationToken, purpose })).session_id;
+  try {
+    return await requestLivenessChallenge({ sessionId: currentSessionId, applicationToken });
+  } catch (err) {
+    if (err instanceof NeoFaceError && err.message.includes("410")) {
+      resetCaptureSession();
+      currentSessionId = (await openCaptureSession({ applicationToken, purpose })).session_id;
+      return requestLivenessChallenge({ sessionId: currentSessionId, applicationToken });
+    }
+    throw err;
+  }
+}
+async function submitLivenessChallenge({
+  challengeId,
+  sessionId,
+  applicationToken,
+  gestures
+}) {
+  if (!applicationToken) {
+    throw new NeoFaceError(
+      "applicationToken é obrigatório para submeter desafio",
+      ErrorType.INVALID_TOKEN
+    );
+  }
+  if (!challengeId || !sessionId) {
+    throw new NeoFaceError(
+      "challenge_id e session_id são obrigatórios para submeter desafio",
+      ErrorType.VALIDATION_ERROR
+    );
+  }
+  if (!Array.isArray(gestures) || gestures.length === 0) {
+    throw new NeoFaceError("gestures[] vazio — nada para submeter", ErrorType.VALIDATION_ERROR);
+  }
+  const url = `${getBaseUrl()}/api/v1/auth/liveness/challenge/${encodeURIComponent(challengeId)}/submit/`;
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        "X-App-Token": applicationToken
+      },
+      body: JSON.stringify({ session_id: sessionId, gestures })
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Erro de rede";
+    throw new NeoFaceError(`Falha de rede ao submeter desafio: ${message}`, ErrorType.NETWORK);
+  }
+  if (response.status === 401 || response.status === 403) {
+    throw new NeoFaceError("Token de aplicação inválido ou expirado", ErrorType.INVALID_TOKEN);
+  }
+  if (response.status === 410) {
+    throw new NeoFaceError(
+      "Sessão ou desafio expirado (410) — reabrir sessão",
+      ErrorType.API_ERROR
+    );
+  }
+  if (!response.ok) {
+    throw new NeoFaceError(
+      `Falha ao submeter desafio de liveness (${response.status})`,
+      ErrorType.API_ERROR
+    );
+  }
+  const raw = await response.json().catch(() => null);
+  const payload = (raw == null ? void 0 : raw.data) ?? raw ?? {};
+  return {
+    success: (payload == null ? void 0 : payload.success) ?? true,
+    liveness_passed: payload == null ? void 0 : payload.liveness_passed,
+    score: payload == null ? void 0 : payload.score,
+    raw
+  };
+}
+async function runLivenessChallenge({
+  applicationToken,
+  purpose,
+  collectFramesForGesture,
+  retryOnSessionExpired = true
+}) {
+  const attempt = async () => {
+    const session = await openCaptureSession({ applicationToken, purpose });
+    const challenge = await requestLivenessChallenge({
+      sessionId: session.session_id,
+      applicationToken
+    });
+    const gestures = [];
+    for (let i = 0; i < challenge.gestures.length; i += 1) {
+      const g = challenge.gestures[i];
+      const images = await collectFramesForGesture(g, i, challenge.gestures.length);
+      gestures.push({ gesture_key: String(g.gesture_key), images });
+    }
+    return submitLivenessChallenge({
+      challengeId: challenge.challenge_id,
+      sessionId: session.session_id,
+      applicationToken,
+      gestures
+    });
+  };
+  try {
+    return await attempt();
+  } catch (err) {
+    if (retryOnSessionExpired && err instanceof NeoFaceError && err.message.includes("410")) {
+      resetCaptureSession();
+      return attempt();
+    }
+    throw err;
+  }
+}
 class OnboardingCaptureModal {
   constructor(options) {
     __publicField(this, "overlay", null);
@@ -10636,7 +11030,10 @@ class OnboardingCaptureModal {
 const startOnboarding = async (options) => {
   const { applicationToken, onboardingToken, countdown, title, subtitle, onSuccess, onError } = options;
   try {
-    const consentAccepted = await requestConsent();
+    const consentAccepted = await requestConsent({
+      appName: options.appName,
+      flow: "registration"
+    });
     if (!consentAccepted) {
       onError(new NeoFaceError("Consentimento recusado pelo usuário.", ErrorType.CONSENT_DENIED));
       return;
@@ -11015,7 +11412,10 @@ const authorizeOperation = async (applicationToken, cpf, options) => {
   }
   const capturedPhotos = [];
   const captureDelay = (options == null ? void 0 : options.captureDelay) || 2e3;
-  const consentAccepted = await requestConsent();
+  const consentAccepted = await requestConsent({
+    appName: options == null ? void 0 : options.appName,
+    flow: "verification"
+  });
   if (!consentAccepted) {
     throw new NeoFaceError("Consentimento recusado pelo usuário.", ErrorType.CONSENT_DENIED);
   }
@@ -11162,6 +11562,18 @@ class DocumentCaptureModal {
     };
   }
   async open() {
+    if (!this.options.skipConsent) {
+      const consentAccepted = await requestConsent({
+        appName: this.options.appName,
+        flow: "verification"
+      });
+      if (!consentAccepted) {
+        throw new NeoFaceError(
+          "Consentimento recusado pelo usuário.",
+          ErrorType.CONSENT_DENIED
+        );
+      }
+    }
     return new Promise((resolve) => {
       this.resolvePromise = resolve;
       if (this.options.preSelectedDocument) {
@@ -12124,8 +12536,8 @@ const DocumentCaptureModal$1 = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Obj
   startDocumentCapture
 }, Symbol.toStringTag, { value: "Module" }));
 const CONSENT_DENIED_MESSAGE = "Consentimento recusado pelo usuário.";
-function start(applicationToken, callbacks) {
-  requestConsent().then((accepted) => {
+function start(applicationToken, callbacks, options) {
+  requestConsent({ appName: options == null ? void 0 : options.appName, flow: "verification" }).then((accepted) => {
     if (!accepted) {
       callbacks.onError("CONSENT_DENIED", CONSENT_DENIED_MESSAGE);
       return;
@@ -12160,7 +12572,7 @@ function start(applicationToken, callbacks) {
   });
 }
 function startBiometricRegistration(personData, applicationToken, callbacks, options) {
-  requestConsent().then((accepted) => {
+  requestConsent({ appName: options == null ? void 0 : options.appName, flow: "registration" }).then((accepted) => {
     if (!accepted) {
       callbacks.onError("CONSENT_DENIED", CONSENT_DENIED_MESSAGE);
       return;
@@ -12201,8 +12613,8 @@ function startBiometricRegistration(personData, applicationToken, callbacks, opt
     });
   });
 }
-function startLivenessCapture(applicationToken, callbacks) {
-  requestConsent().then((accepted) => {
+function startLivenessCapture(applicationToken, callbacks, options) {
+  requestConsent({ appName: options == null ? void 0 : options.appName, flow: "verification" }).then((accepted) => {
     if (!accepted) {
       callbacks.onError("CONSENT_DENIED", CONSENT_DENIED_MESSAGE);
       return;
@@ -12275,6 +12687,7 @@ export {
   detectBiometricType,
   getApplicationToken,
   getBaseUrl,
+  getCachedCaptureSession,
   getConfig,
   getEnvironment,
   identifyPerson,
@@ -12285,6 +12698,7 @@ export {
   isInitialized,
   loginWithBiometric,
   loginWithEmail,
+  openCaptureSession,
   preloadFaceDetectionModels,
   recognize,
   recognizeBiometric,
@@ -12293,7 +12707,11 @@ export {
   registerPersonWithBiometric,
   registerPersonWithoutFace,
   requestConsent,
+  requestLivenessChallenge,
+  requestLivenessChallengeWithSession,
   requestPasswordReset,
+  resetCaptureSession,
+  runLivenessChallenge,
   simpleIdentification,
   start,
   startAutoLogin,
@@ -12303,6 +12721,9 @@ export {
   startHandLogin,
   startLivenessCapture,
   startOnboarding,
+  submitLivenessChallenge,
   validateOnboardingToken,
-  validateToken
+  validateToken,
+  withCaptureSession,
+  withSessionId
 };