@sekyro/web 0.1.0-rc.1 → 0.1.0-rc.3

package/dist/core/index.d.cts

@@ -1,5 +1,5 @@
-import { C as CameraErrorKind } from '../capture-session-v3-CAoWM8iT.cjs';
-export { a as CLIP_MS, b as CaptureArtifacts, c as CaptureErrorKind, d as CaptureSessionEvents, e as CaptureSessionV3, f as CaptureSessionV3Events, g as CaptureSessionV3Options, h as CaptureState, i as ClipError, j as ClipErrorKind, k as ClipRecorder, l as ClipResult, D as DEFAULT_CLIP_MIME, m as DEVICE_PROFILES, n as DeviceClass, o as DeviceProbe, p as DeviceProfile, q as DeviceProfiler, E as EscalationClipArtifact, r as EscalationHook, F as FaceGateV3, G as GateChecks, K as KEYFRAME_CANDIDATES, s as KEYFRAME_WINDOW_MS, M as MAX_CLIP_BYTES, t as MIME_CANDIDATES, S as STOP_GRACE_MS, T as TIMESLICE_MS, V as V3ChecksPayload, u as V3GateFactor, v as V3GateQuality, w as V3GateThresholds, x as V3GateTick, y as V3GateTickInput, z as V3TelemetryEvent, A as V3_GATE_DEFAULTS, B as VIDEO_BPS, H as buildLivenessV2FormData, I as cameraPreflight, J as classifyDevice, L as extForMime, N as isClipTooLarge, O as isMediaRecorderSupported, P as mapGetUserMediaError, Q as pickMimeType, R as probeDevice } from '../capture-session-v3-CAoWM8iT.cjs';
+import { C as CameraErrorKind } from '../capture-session-v3-COIO_F2w.cjs';
+export { a as CLIP_MS, b as CaptureArtifacts, c as CaptureErrorKind, d as CaptureSessionEvents, e as CaptureSessionV3, f as CaptureSessionV3Events, g as CaptureSessionV3Options, h as CaptureState, i as ClipError, j as ClipErrorKind, k as ClipRecorder, l as ClipResult, D as DEFAULT_CLIP_MIME, m as DEVICE_PROFILES, n as DeviceClass, o as DeviceProbe, p as DeviceProfile, q as DeviceProfiler, E as EscalationClipArtifact, r as EscalationHook, F as FaceGateV3, G as GateChecks, K as KEYFRAME_CANDIDATES, s as KEYFRAME_WINDOW_MS, M as MAX_CLIP_BYTES, t as MIME_CANDIDATES, S as STOP_GRACE_MS, T as TIMESLICE_MS, V as V3ChecksPayload, u as V3GateFactor, v as V3GateQuality, w as V3GateThresholds, x as V3GateTick, y as V3GateTickInput, z as V3TelemetryEvent, A as V3_GATE_DEFAULTS, B as VIDEO_BPS, H as buildLivenessV2FormData, I as cameraPreflight, J as classifyDevice, L as extForMime, N as isClipTooLarge, O as isMediaRecorderSupported, P as mapGetUserMediaError, Q as pickMimeType, R as probeDevice } from '../capture-session-v3-COIO_F2w.cjs';
 export { C as CENTERED_FACTOR, a as CIRCLE_RADIUS_FACTOR, I as IN_CIRCLE_FACTOR, b as buildCaptureConstraints, d as detectIsMobile } from '../capture-constraints-BujkZcfb.cjs';
 export { C as CreateDetectorOptions, D as DEFAULT_TIER_ORDER, a as DEFAULT_V3_ASSET_BASE_URL, b as Detector, c as DetectorLadderError, F as FaceObservation, d as createDetector, i as intrinsicSize, t as toStreamPixels } from '../detect-worker-CKXHlXx9.cjs';
 

package/dist/core/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CameraErrorKind } from '../capture-session-v3-BJ8ciaWl.js';
-export { a as CLIP_MS, b as CaptureArtifacts, c as CaptureErrorKind, d as CaptureSessionEvents, e as CaptureSessionV3, f as CaptureSessionV3Events, g as CaptureSessionV3Options, h as CaptureState, i as ClipError, j as ClipErrorKind, k as ClipRecorder, l as ClipResult, D as DEFAULT_CLIP_MIME, m as DEVICE_PROFILES, n as DeviceClass, o as DeviceProbe, p as DeviceProfile, q as DeviceProfiler, E as EscalationClipArtifact, r as EscalationHook, F as FaceGateV3, G as GateChecks, K as KEYFRAME_CANDIDATES, s as KEYFRAME_WINDOW_MS, M as MAX_CLIP_BYTES, t as MIME_CANDIDATES, S as STOP_GRACE_MS, T as TIMESLICE_MS, V as V3ChecksPayload, u as V3GateFactor, v as V3GateQuality, w as V3GateThresholds, x as V3GateTick, y as V3GateTickInput, z as V3TelemetryEvent, A as V3_GATE_DEFAULTS, B as VIDEO_BPS, H as buildLivenessV2FormData, I as cameraPreflight, J as classifyDevice, L as extForMime, N as isClipTooLarge, O as isMediaRecorderSupported, P as mapGetUserMediaError, Q as pickMimeType, R as probeDevice } from '../capture-session-v3-BJ8ciaWl.js';
+import { C as CameraErrorKind } from '../capture-session-v3-CvIfcwST.js';
+export { a as CLIP_MS, b as CaptureArtifacts, c as CaptureErrorKind, d as CaptureSessionEvents, e as CaptureSessionV3, f as CaptureSessionV3Events, g as CaptureSessionV3Options, h as CaptureState, i as ClipError, j as ClipErrorKind, k as ClipRecorder, l as ClipResult, D as DEFAULT_CLIP_MIME, m as DEVICE_PROFILES, n as DeviceClass, o as DeviceProbe, p as DeviceProfile, q as DeviceProfiler, E as EscalationClipArtifact, r as EscalationHook, F as FaceGateV3, G as GateChecks, K as KEYFRAME_CANDIDATES, s as KEYFRAME_WINDOW_MS, M as MAX_CLIP_BYTES, t as MIME_CANDIDATES, S as STOP_GRACE_MS, T as TIMESLICE_MS, V as V3ChecksPayload, u as V3GateFactor, v as V3GateQuality, w as V3GateThresholds, x as V3GateTick, y as V3GateTickInput, z as V3TelemetryEvent, A as V3_GATE_DEFAULTS, B as VIDEO_BPS, H as buildLivenessV2FormData, I as cameraPreflight, J as classifyDevice, L as extForMime, N as isClipTooLarge, O as isMediaRecorderSupported, P as mapGetUserMediaError, Q as pickMimeType, R as probeDevice } from '../capture-session-v3-CvIfcwST.js';
 export { C as CENTERED_FACTOR, a as CIRCLE_RADIUS_FACTOR, I as IN_CIRCLE_FACTOR, b as buildCaptureConstraints, d as detectIsMobile } from '../capture-constraints-BujkZcfb.js';
 export { C as CreateDetectorOptions, D as DEFAULT_TIER_ORDER, a as DEFAULT_V3_ASSET_BASE_URL, b as Detector, c as DetectorLadderError, F as FaceObservation, d as createDetector, i as intrinsicSize, t as toStreamPixels } from '../detect-worker-CKXHlXx9.js';
 

package/dist/core/index.js

@@ -31,7 +31,7 @@ import {
   mapGetUserMediaError,
   pickMimeType,
   probeDevice
-} from "../chunk-LOTAJDRE.js";
+} from "../chunk-7TC6TOZ4.js";
 import {
   DEFAULT_TIER_ORDER,
   DEFAULT_V3_ASSET_BASE_URL,

package/dist/{create-verification--ldwakXV.d.cts → create-verification-CP18eq1Q.d.cts}

@@ -1,4 +1,4 @@
-import { h as CaptureState$1, f as CaptureSessionV3Events, g as CaptureSessionV3Options, c as CaptureErrorKind$1 } from './capture-session-v3-CAoWM8iT.cjs';
+import { h as CaptureState$1, f as CaptureSessionV3Events, g as CaptureSessionV3Options, c as CaptureErrorKind$1 } from './capture-session-v3-COIO_F2w.cjs';
 import { C as CheckReason, c as HostedSessionView, g as HostedClient, A as AttestationInput, h as SessionView, b as CheckType } from './hosted-client-BpvBqu9f.cjs';
 
 /** Gate guidance code. `'hold'` is emitted while the clip records. */
@@ -274,11 +274,13 @@ interface LivenessFlowDeps extends SubmitRuntime {
     getAttestation(): Promise<AttestationInput>;
     /** Latest hosted view (frontier decisions). */
     getView(): HostedSessionView;
+    /** Re-GET the view from the server (after a RESYNC code) and fold it in. */
+    refreshView(): Promise<HostedSessionView>;
     /** Fold a submit response into the view. */
     applySubmit(view: SessionView, submitted: CheckType): void;
     /** Flow-state hook for the capture handle. */
     onPhase(phase: "uploading" | "checking"): void;
-    /** A newer capture / destroy superseded this flow. */
+    /** The verification was destroyed (the only thing that cancels a chain). */
     isCancelled(): boolean;
 }
 type LivenessFlowOutcome = {
@@ -292,13 +294,18 @@ type LivenessFlowOutcome = {
     kind: "cancelled";
 };
 /**
- * Run the biometric submissions that are still executable: `liveness` when its
- * step is `pending | input_required`, then `face_match` when face_match is
- * executable and liveness either was NOT part of this capture (it had already
- * settled — any state, incl. `failed`: the selfie-fallback case, where this
- * capture only feeds face_match) or settled not-failed from this capture
- * (passed / review / processing / skipped — or absent). Returns `settled` for
- * the caller to map the view.
+ * Run the biometric submissions the CURRENT frontier allows, re-evaluating
+ * after every submit and after every RESYNC re-GET:
+ *  - frontier `liveness` → clip upload + attestation + `liveness` (once per capture);
+ *  - frontier `face_match` → keyframe upload + `face_match` (once per capture),
+ *    allowed when liveness was NOT part of this capture (it had already
+ *    settled — any state, incl. `failed`: the selfie-fallback case, where this
+ *    capture only feeds face_match) or settled chainable from this capture
+ *    (passed / review / processing / skipped — or absent);
+ *  - anything else (terminal view, a non-biometric frontier, a check this
+ *    capture already submitted) → `settled` for the caller to map the view.
+ * A RESYNC code re-GETs the view and re-enters (at most {@link RESYNC_REENTRY_MAX}
+ * times); the final RESYNC surfaces as `resync` for the caller to map.
  */
 declare function runLivenessFlow(deps: LivenessFlowDeps): Promise<LivenessFlowOutcome>;
 

package/dist/{create-verification-BlAPWeW5.d.ts → create-verification-CswF2As-.d.ts}

@@ -1,4 +1,4 @@
-import { h as CaptureState$1, f as CaptureSessionV3Events, g as CaptureSessionV3Options, c as CaptureErrorKind$1 } from './capture-session-v3-BJ8ciaWl.js';
+import { h as CaptureState$1, f as CaptureSessionV3Events, g as CaptureSessionV3Options, c as CaptureErrorKind$1 } from './capture-session-v3-CvIfcwST.js';
 import { C as CheckReason, c as HostedSessionView, g as HostedClient, A as AttestationInput, h as SessionView, b as CheckType } from './hosted-client-BpvBqu9f.js';
 
 /** Gate guidance code. `'hold'` is emitted while the clip records. */
@@ -274,11 +274,13 @@ interface LivenessFlowDeps extends SubmitRuntime {
     getAttestation(): Promise<AttestationInput>;
     /** Latest hosted view (frontier decisions). */
     getView(): HostedSessionView;
+    /** Re-GET the view from the server (after a RESYNC code) and fold it in. */
+    refreshView(): Promise<HostedSessionView>;
     /** Fold a submit response into the view. */
     applySubmit(view: SessionView, submitted: CheckType): void;
     /** Flow-state hook for the capture handle. */
     onPhase(phase: "uploading" | "checking"): void;
-    /** A newer capture / destroy superseded this flow. */
+    /** The verification was destroyed (the only thing that cancels a chain). */
     isCancelled(): boolean;
 }
 type LivenessFlowOutcome = {
@@ -292,13 +294,18 @@ type LivenessFlowOutcome = {
     kind: "cancelled";
 };
 /**
- * Run the biometric submissions that are still executable: `liveness` when its
- * step is `pending | input_required`, then `face_match` when face_match is
- * executable and liveness either was NOT part of this capture (it had already
- * settled — any state, incl. `failed`: the selfie-fallback case, where this
- * capture only feeds face_match) or settled not-failed from this capture
- * (passed / review / processing / skipped — or absent). Returns `settled` for
- * the caller to map the view.
+ * Run the biometric submissions the CURRENT frontier allows, re-evaluating
+ * after every submit and after every RESYNC re-GET:
+ *  - frontier `liveness` → clip upload + attestation + `liveness` (once per capture);
+ *  - frontier `face_match` → keyframe upload + `face_match` (once per capture),
+ *    allowed when liveness was NOT part of this capture (it had already
+ *    settled — any state, incl. `failed`: the selfie-fallback case, where this
+ *    capture only feeds face_match) or settled chainable from this capture
+ *    (passed / review / processing / skipped — or absent);
+ *  - anything else (terminal view, a non-biometric frontier, a check this
+ *    capture already submitted) → `settled` for the caller to map the view.
+ * A RESYNC code re-GETs the view and re-enters (at most {@link RESYNC_REENTRY_MAX}
+ * times); the final RESYNC surfaces as `resync` for the caller to map.
  */
 declare function runLivenessFlow(deps: LivenessFlowDeps): Promise<LivenessFlowOutcome>;
 

package/dist/index.cjs

@@ -862,10 +862,12 @@ var V3_GATE_DEFAULTS = Object.freeze({
   MOTION_TAU_S: 0.4,
   MOTION_DEADBAND_IOD_PER_S: 0.1,
   READY_WINDOW_MS: 500,
-  // 0.7→0.75 with the trimmed window: trimming forgives exactly ONE flaky
-  // tick; the raised mean keeps a SECOND bad tick (a real sustained wobble)
-  // from diluting through at 10 Hz cadences.
-  READY_MEAN_Q: 0.75,
+  // (READY_MEAN_Q, the former 0.75 window MEAN, is gone — 2026-10-17 field
+  // bug: a steady q anywhere in [Q_GOOD, 0.75) saturated p at 1, passed every
+  // guide ("hold still") and could never reach the mean, so the ring sat full
+  // and green with nothing recording. Readiness now checks the window against
+  // Q_GOOD, which keeps the one-flaky-tick forgiveness and the second-bad-tick
+  // block without a dead band above the rise threshold.)
   GUIDE_SIZE: 0.6,
   GUIDE_CENTERING: 0.6,
   GUIDE_POSE: 0.6,
@@ -943,8 +945,7 @@ var FaceGateV3 = class {
       const worstIndex = windowSamples.indexOf(worst);
       windowSamples = windowSamples.filter((_, index) => index !== worstIndex);
     }
-    const windowMean = windowSamples.reduce((sum, value) => sum + value, 0) / Math.max(1, windowSamples.length);
-    const ready = this.p >= 1 && windowMean >= this.t.READY_MEAN_Q;
+    const ready = this.p >= 1 && windowSamples.every((sample) => sample >= this.t.Q_GOOD);
     return {
       at: timestampMs,
       q,
@@ -1562,6 +1563,14 @@ function createLivenessCaptureInternal(options, internals = {}) {
   let animations = "full";
   let recordingStartedAt = null;
   let frozenAt = null;
+  let frameWidth = 0;
+  let frameHeight = 0;
+  const latchFrameSize = () => {
+    if (options.video.videoWidth > 0 && options.video.videoHeight > 0) {
+      frameWidth = options.video.videoWidth;
+      frameHeight = options.video.videoHeight;
+    }
+  };
   const setState = (next) => {
     state = next;
     emitter.emit("state", next);
@@ -1582,10 +1591,13 @@ function createLivenessCaptureInternal(options, internals = {}) {
         faceDetected = false;
         recordingStartedAt = null;
         frozenAt = null;
+        frameWidth = 0;
+        frameHeight = 0;
       }
       setState(next);
       syncProfile();
       if (next === "recording") {
+        latchFrameSize();
         recordingStartedAt = now();
         hint = "hold";
         progress = 1;
@@ -1593,6 +1605,7 @@ function createLivenessCaptureInternal(options, internals = {}) {
       }
     }),
     engine.on("checks", (payload) => {
+      latchFrameSize();
       progress = payload.progress;
       faceDetected = payload.factors.presence > 0;
       emitGate();
@@ -1612,8 +1625,8 @@ function createLivenessCaptureInternal(options, internals = {}) {
         keyframe: artifacts.keyframe,
         ...artifacts.clip !== void 0 ? { clip: artifacts.clip } : {},
         ...artifacts.clipMimeType !== void 0 ? { clipMime: artifacts.clipMimeType } : {},
-        width: options.video.videoWidth,
-        height: options.video.videoHeight,
+        width: options.video.videoWidth || frameWidth,
+        height: options.video.videoHeight || frameHeight,
         ...clipMs !== void 0 ? { clipMs } : {},
         captureChannel: detectIsMobile() ? "mobile" : "desktop",
         ...degraded ? { degraded: "NO_RECORDER" } : {}
@@ -2064,6 +2077,7 @@ var KEYFRAME_MIME = "image/jpeg";
 var TRANSPORT_REPLAY_ATTEMPTS = 2;
 var TRANSPORT_REPLAY_DELAY_MS = 1e3;
 var MAX_RETRY_AFTER_MS = 1e4;
+var RESYNC_REENTRY_MAX = 3;
 var TRANSPORT_CODES = /* @__PURE__ */ new Set([
   "network_error",
   "timeout",
@@ -2124,6 +2138,7 @@ async function runSubmission(rt, executor, hooks = {}) {
     }
   }
 }
+var LIVENESS_CHAINABLE = /* @__PURE__ */ new Set(["passed", "review", "processing", "skipped"]);
 async function runLivenessFlow(deps) {
   const { artifacts } = deps;
   const clip = artifacts.clip;
@@ -2131,67 +2146,87 @@ async function runLivenessFlow(deps) {
   if (artifacts.degraded === "NO_RECORDER" || clip === void 0 || !CLIP_MIME_ALLOWLIST.includes(bareMime)) {
     return { kind: "unavailable", reason: "no_recorder" };
   }
-  try {
-    const livenessWasExecutable = isExecutable(stepOf(deps.getView(), "liveness"));
-    if (livenessWasExecutable) {
-      let clipKey = null;
-      let attestation = null;
-      const response = await runSubmission(
-        deps,
-        async (client, idempotencyKey) => {
-          if (clipKey === null) {
-            deps.onPhase("uploading");
-            const presigned = await client.presign("clip", bareMime, clip.size);
-            await client.uploadToSpaces(presigned.uploadUrl, clip, bareMime);
-            clipKey = (await client.completeMedia(presigned.key)).key;
-          }
-          if (attestation === null) {
-            try {
-              attestation = await deps.getAttestation();
-            } catch (err) {
-              throw new AttestationError(err instanceof Error ? err.message : String(err));
-            }
-          }
-          deps.onPhase("checking");
-          return client.submitCheck(
-            "liveness",
-            { clipKey, attestation, captureChannel: artifacts.captureChannel },
-            { idempotencyKey }
-          );
-        },
-        {
-          onAttestationInvalid: () => {
-            attestation = null;
-          }
-        }
-      );
-      if (deps.isCancelled()) return { kind: "cancelled" };
-      deps.applySubmit(response, "liveness");
-    }
+  const submitLiveness = buildLivenessSubmit(deps, clip, bareMime);
+  const submitFaceMatch = buildFaceMatchSubmit(deps, artifacts.keyframe);
+  let livenessSubmitted = false;
+  let faceMatchSubmitted = false;
+  let livenessChainable = true;
+  let resyncs = 0;
+  for (; ; ) {
+    if (deps.isCancelled()) return { kind: "cancelled" };
     const view = deps.getView();
-    const liveness = stepOf(view, "liveness");
-    const livenessOk = !livenessWasExecutable || liveness === void 0 || liveness.state === "passed" || liveness.state === "review" || liveness.state === "processing" || liveness.state === "skipped";
-    if (!isTerminalView(view) && livenessOk && isExecutable(stepOf(view, "face_match"))) {
-      const keyframe = artifacts.keyframe;
-      let imageKey = null;
-      const response = await runSubmission(deps, async (client, idempotencyKey) => {
-        if (imageKey === null) {
-          deps.onPhase("uploading");
-          const presigned = await client.presign("image", KEYFRAME_MIME, keyframe.size);
-          await client.uploadToSpaces(presigned.uploadUrl, keyframe, KEYFRAME_MIME);
-          imageKey = (await client.completeMedia(presigned.key)).key;
-        }
-        deps.onPhase("checking");
-        return client.submitCheck("face_match", { imageKey }, { idempotencyKey });
-      });
+    if (isTerminalView(view)) return { kind: "settled" };
+    const frontier = frontierStep(view)?.checkType;
+    const next = frontier === "liveness" && !livenessSubmitted ? "liveness" : frontier === "face_match" && !faceMatchSubmitted && livenessChainable ? "face_match" : null;
+    if (next === null) return { kind: "settled" };
+    try {
+      if (next === "liveness") {
+        livenessSubmitted = true;
+        const response = await submitLiveness();
+        if (deps.isCancelled()) return { kind: "cancelled" };
+        deps.applySubmit(response, "liveness");
+        const state = stepOf(deps.getView(), "liveness")?.state;
+        livenessChainable = state === void 0 || LIVENESS_CHAINABLE.has(state);
+      } else {
+        faceMatchSubmitted = true;
+        const response = await submitFaceMatch();
+        if (deps.isCancelled()) return { kind: "cancelled" };
+        deps.applySubmit(response, "face_match");
+      }
+    } catch (err) {
       if (deps.isCancelled()) return { kind: "cancelled" };
-      deps.applySubmit(response, "face_match");
+      const outcome = classifyFailure(err);
+      if (outcome.kind !== "resync" || resyncs >= RESYNC_REENTRY_MAX) return outcome;
+      resyncs += 1;
+      await deps.refreshView();
+    }
+  }
+}
+function buildLivenessSubmit(deps, clip, bareMime) {
+  let clipKey = null;
+  let attestation = null;
+  return () => runSubmission(
+    deps,
+    async (client, idempotencyKey) => {
+      if (clipKey === null) {
+        deps.onPhase("uploading");
+        const presigned = await client.presign("clip", bareMime, clip.size);
+        await client.uploadToSpaces(presigned.uploadUrl, clip, bareMime);
+        clipKey = (await client.completeMedia(presigned.key)).key;
+      }
+      if (attestation === null) {
+        try {
+          attestation = await deps.getAttestation();
+        } catch (err) {
+          throw new AttestationError(err instanceof Error ? err.message : String(err));
+        }
+      }
+      deps.onPhase("checking");
+      return client.submitCheck(
+        "liveness",
+        { clipKey, attestation, captureChannel: deps.artifacts.captureChannel },
+        { idempotencyKey }
+      );
+    },
+    {
+      onAttestationInvalid: () => {
+        attestation = null;
+      }
     }
-    return { kind: "settled" };
-  } catch (err) {
-    if (deps.isCancelled()) return { kind: "cancelled" };
-    return classifyFailure(err);
-  }
+  );
+}
+function buildFaceMatchSubmit(deps, keyframe) {
+  let imageKey = null;
+  return () => runSubmission(deps, async (client, idempotencyKey) => {
+    if (imageKey === null) {
+      deps.onPhase("uploading");
+      const presigned = await client.presign("image", KEYFRAME_MIME, keyframe.size);
+      await client.uploadToSpaces(presigned.uploadUrl, keyframe, KEYFRAME_MIME);
+      imageKey = (await client.completeMedia(presigned.key)).key;
+    }
+    deps.onPhase("checking");
+    return client.submitCheck("face_match", { imageKey }, { idempotencyKey });
+  });
 }
 function classifyFailure(err) {
   if (err instanceof AttestationError) return { kind: "unavailable", reason: "attestation" };
@@ -2427,7 +2462,8 @@ function createVerificationInternal(options, internals) {
     };
   };
   let active = null;
-  let flowToken = 0;
+  let chain = Promise.resolve();
+  let chainDepth = 0;
   const settleProcessing = async () => {
     let current = await ensureView();
     for (let i = 0; i < PROCESSING_POLL_MAX && !destroyed && !isTerminalView(current) && frontierStep(current) === void 0 && current.steps.some((step) => step.state === "processing"); i += 1) {
@@ -2437,11 +2473,17 @@ function createVerificationInternal(options, internals) {
     }
     return current;
   };
-  const runFlow = async (capture, artifacts, token) => {
-    const isCancelled = () => destroyed || token !== flowToken || active !== capture;
+  const runFlow = async (bound, artifacts, capturedAttempt) => {
+    const { capture } = bound;
+    const isCancelled = () => destroyed;
+    const ownsHandle = () => bound.alive && bound.attempt === capturedAttempt;
+    const setPhase = (phase) => {
+      if (ownsHandle()) capture.setFlowState(phase);
+    };
     const finish = (result) => {
       if (isCancelled()) return;
       emitResult(result);
+      if (!ownsHandle()) return;
       if (result.status === "retry" && rearm === "auto") {
         capture.handle.retry();
         return;
@@ -2453,7 +2495,7 @@ function createVerificationInternal(options, internals) {
       finish(unavailable(sessionId, "no_recorder"));
       return;
     }
-    capture.setFlowState("uploading");
+    setPhase("uploading");
     try {
       await startRegistry();
       if (isCancelled()) return;
@@ -2475,10 +2517,9 @@ function createVerificationInternal(options, internals) {
           artifacts,
           getAttestation,
           getView: () => view ?? current,
+          refreshView,
           applySubmit,
-          onPhase: (phase) => {
-            if (!isCancelled()) capture.setFlowState(phase);
-          },
+          onPhase: setPhase,
           isCancelled
         });
         if (isCancelled()) return;
@@ -2495,18 +2536,43 @@ function createVerificationInternal(options, internals) {
       finish(unavailable(view?.sessionId ?? "", "network"));
     }
   };
+  const enqueueFlow = (bound, artifacts) => {
+    const capturedAttempt = bound.attempt;
+    if (chainDepth > 0 && bound.alive) {
+      bound.capture.setFlowState("uploading");
+    }
+    chainDepth += 1;
+    chain = chain.then(() => runFlow(bound, artifacts, capturedAttempt)).finally(() => {
+      chainDepth -= 1;
+    }).catch(() => void 0);
+  };
   const liveness = (captureOptions) => {
-    active?.handle.destroy();
+    active?.capture.handle.destroy();
+    if (active !== null) active.alive = false;
     const capture = createLivenessCaptureInternal(captureOptions, internals.capture);
-    active = capture;
+    const bound = { capture, alive: true, attempt: 0 };
+    active = bound;
     capture.handle.on("state", (state) => {
-      if (state === "starting") flowToken += 1;
+      if (state === "starting") bound.attempt += 1;
     });
     capture.handle.on("captured", (artifacts) => {
-      const token = ++flowToken;
-      void Promise.resolve().then(() => runFlow(capture, artifacts, token));
+      void Promise.resolve().then(() => enqueueFlow(bound, artifacts));
     });
-    return capture.handle;
+    const inner = capture.handle;
+    return {
+      get state() {
+        return inner.state;
+      },
+      on: (event, handler) => inner.on(event, handler),
+      start: () => inner.start(),
+      retry: () => inner.retry(),
+      switchCamera: () => inner.switchCamera(),
+      destroy: () => {
+        bound.alive = false;
+        if (active === bound) active = null;
+        inner.destroy();
+      }
+    };
   };
   return {
     consent: () => ensureConsent(),
@@ -2516,8 +2582,11 @@ function createVerificationInternal(options, internals) {
     destroy: () => {
       destroyed = true;
       lifetime.abort();
-      active?.handle.destroy();
-      active = null;
+      if (active !== null) {
+        active.alive = false;
+        active.capture.handle.destroy();
+        active = null;
+      }
       emitter.clear();
     }
   };