@sekyro/web 0.1.0-rc.7 → 0.1.0-rc.8

package/dist/create-verification-C2JhOO6Y.d.cts

@@ -1,533 +0,0 @@
-import { b as Detector } from './detect-worker-CKXHlXx9.cjs';
-import { i as CaptureState$1, f as CaptureSessionV3Events, g as CaptureSessionV3Options, c as CaptureErrorKind$1 } from './capture-session-v3-UQU_WjO2.cjs';
-import { C as CheckReason, S as SessionFailureReason, j as MethodChoiceView, I as IdentityMethod, i as HostedVoiceView, f as HostedSessionView, o as HostedClient, p as AttestationInput, q as SessionView, b as CheckType } from './hosted-client-kBeq-mnJ.cjs';
-
-/** Gate guidance code. `'hold'` is emitted while the clip records. */
-type GateHint = "center" | "closer" | "farther" | "light" | "still" | "hold";
-/**
- * Capture + verification state, as seen by the partner:
- *  - `idle → starting → gating → recording → captured` is the engine's run;
- *  - `uploading → checking → done` follows ONLY when the handle was obtained via
- *    {@link Verification.liveness} (the SDK uploads and submits after `captured`);
- *  - `error` on a camera / engine failure (see {@link CaptureError}).
- */
-type CaptureState = "idle" | "starting" | "gating" | "recording" | "captured" | "uploading" | "checking" | "done" | "error";
-/** Declared capture channel — the liveness band is mobile-calibrated. */
-type CaptureChannel = "mobile" | "desktop";
-/** Gate ring update: integrator progress 0..1 and the current guidance code. */
-interface GateUpdate {
-    /** Gate integrator 0..1 — drive the ring off this directly. */
-    progress: number;
-    /** Current guidance code, `null` when no hint applies. */
-    hint: GateHint | null;
-    /**
-     * The detector currently sees a face (a non-zero engine presence factor). `false`
-     * with `hint: 'center'` means "no face in frame" rather than "off-center" —
-     * hosts use it to tell seeking from aligning, and for the no-face copy.
-     */
-    faceDetected: boolean;
-}
-/**
- * What the engine captured. Fires BEFORE any upload. `clip` is absent only in
- * the `degraded: 'NO_RECORDER'` case (no MediaRecorder on this browser).
- */
-interface CapturedArtifacts {
-    /** Mirrored JPEG keyframe (the face_match probe). */
-    keyframe: Blob;
-    /** The 2.5 s liveness clip (MP4-first mime ladder). */
-    clip?: Blob;
-    /** Container mime the clip finalized with — may carry codec params. */
-    clipMime?: string;
-    /** Intrinsic video width at capture time. */
-    width: number;
-    /** Intrinsic video height at capture time. */
-    height: number;
-    /** Recording-start → recording-stop, when known. */
-    clipMs?: number;
-    /** `'mobile'` on phones/tablets (the calibrated channel), else `'desktop'`. */
-    captureChannel: CaptureChannel;
-    /** Set when the browser has no MediaRecorder: a keyframe-only capture. */
-    degraded?: "NO_RECORDER";
-    /** The capture engine that produced the artifacts (`'v3'` for this SDK). Always set by the SDK; optional in the type so host-built fixtures stay valid. */
-    engine?: CaptureEngineId;
-    /**
-     * Camera request (`getUserMedia`) → the preview is live, in whole
-     * milliseconds measured with `performance.now()`. Part of the face-capture
-     * timing the SDK forwards to the backend as `input.capture` on the liveness
-     * submission; absent when the phase was not observed.
-     */
-    cameraReadyMs?: number;
-    /**
-     * Camera ready → the first face ACCEPTED by the gate (present and with
-     * size, centering and quality good enough to make progress — not merely
-     * detected), whole ms. Absent when no face was ever accepted.
-     */
-    faceAcquireMs?: number;
-    /**
-     * Face-capture duration: FIRST accepted face → gate progress 100 % (capture
-     * complete, before the clip window and any upload), whole ms. A face lost
-     * and re-acquired keeps the first acceptance as its start.
-     */
-    captureMs?: number;
-}
-/** Capture engine identifier carried on {@link CapturedArtifacts.engine}. */
-type CaptureEngineId = "v1" | "v3";
-/** Camera / engine failure kinds — collapsed to the public six. */
-type CaptureErrorKind = "permission" | "notfound" | "inuse" | "insecure" | "unsupported" | "generic";
-/** Camera / engine failure payload (`on('error')`). */
-interface CaptureError {
-    kind: CaptureErrorKind;
-    /**
-     * A fresh attempt (`retry()`) can succeed — false for `insecure` (needs
-     * HTTPS) and `unsupported` (the browser cannot capture at all).
-     */
-    retryable: boolean;
-}
-/** Event map of a {@link LivenessCaptureHandle}. */
-interface LivenessCaptureEvents {
-    /** Every state transition. */
-    state: CaptureState;
-    /** Gate ring updates while gating/recording. */
-    gate: GateUpdate;
-    /** The capture result — fires BEFORE any upload. */
-    captured: CapturedArtifacts;
-    /** Camera / engine failure. */
-    error: CaptureError;
-    /**
-     * Clip mode only: the recording window just ended and the keyframe is already
-     * available, BEFORE the clip finalizes (iOS can lag ~1.5 s). Hosts freeze the
-     * display on `previewDataUrl` (a mirrored JPEG data URL) instead of leaving
-     * the live feed running; `captured` follows once the clip lands.
-     */
-    frozen: {
-        previewDataUrl: string;
-    };
-    /**
-     * Device-profile hint, emitted when it changes: `'reduced'` asks the host to
-     * drop decorative animations (a LOW device class needs the frames for
-     * detection). Chrome only — never gate input.
-     */
-    profile: {
-        animations: "full" | "reduced";
-    };
-}
-/** Which camera to open: the selfie camera (`'user'`) or the rear one (`'environment'`). */
-type CameraFacing = "user" | "environment";
-/** Options of {@link LivenessCaptureHandle.start}. */
-interface LivenessStartOptions {
-    /**
-     * Camera for this attempt and its retries; default: the current one
-     * ({@link LivenessCaptureOptions.facing}, else `'user'`). Use `switchCamera()`
-     * to change camera mid-capture.
-     */
-    facing?: CameraFacing;
-}
-/** Live capture handle returned by {@link createLivenessCapture} / {@link Verification.liveness}. */
-interface LivenessCaptureHandle {
-    /** Current {@link CaptureState}. */
-    readonly state: CaptureState;
-    /** Subscribe; returns the unsubscribe function. */
-    on<K extends keyof LivenessCaptureEvents>(event: K, handler: (payload: LivenessCaptureEvents[K]) => void): () => void;
-    /**
-     * Ask for the camera and start gating. Resolves once the attempt is running or failed.
-     * `options.facing` picks the camera for this attempt and later retries.
-     */
-    start(options?: LivenessStartOptions): Promise<void>;
-    /** Fresh attempt: resets the engine and restarts the camera. */
-    retry(): void;
-    /** Toggle user/environment camera (gate restarts from zero). */
-    switchCamera(): void;
-    /** Stop the camera, release the detector, drop all listeners. */
-    destroy(): void;
-}
-/** Options of {@link createLivenessCapture} / {@link Verification.liveness}. */
-interface LivenessCaptureOptions {
-    /** Host-owned `<video playsInline muted>` element. */
-    video: HTMLVideoElement;
-    /** Initial camera; default `'user'`. `start({ facing })` overrides it. */
-    facing?: CameraFacing;
-    /** Base URL of the detector assets (tasks-vision wasm + tflite); default `/models-v3`. */
-    assetBaseUrl?: string;
-    /**
-     * Hold a Screen Wake Lock while the camera is live (`starting` / `gating` /
-     * `recording`) so the phone does not dim or lock mid-capture; re-taken when
-     * the page becomes visible again. Best-effort: unsupported browsers or a
-     * refused request (e.g. an iframe without `allow="screen-wake-lock"`) never
-     * affect the capture. Default `true`; `false` never requests the lock.
-     */
-    keepScreenAwake?: boolean;
-}
-/**
- * SDK-side failure reasons (status `'unavailable'`):
- *  - `no_recorder` — no MediaRecorder / unsupported clip container;
- *  - `attestation` — Turnstile failed client-side or `attestation_invalid` after one retry;
- *  - `network` — transport / API failure after the bounded replays;
- *  - `nni_unbound` — `population_registry` is the frontier but the session was
- *    minted WITHOUT a server-bound NNI (`POST /sessions` `input.nni`), so the
- *    SDK cannot submit it. Mint the session with the NNI (or complete the
- *    population step yourself) before starting the capture;
- *  - `method_required` — the session waits on the identity-method choice
- *    (profile v2 step 3; `on('method')` fired). Ask the person, call
- *    {@link Verification.selectMethod}, then capture again;
- *  - `inference_unavailable` — the model service stayed busy through the
- *    automatic retries (profile v2 step 4; `on('busy')` fired for each). No
- *    attempt was used and nothing was billed: let the person try again in a
- *    moment.
- *
- * A liveness step that needs a phone (`HostedStepView.requiresMobile`) on a
- * desktop browser ends with the reason `mobile_required` (status
- * `unavailable`): send the person to their phone. The SDK stops before any
- * upload when the view says so; otherwise the backend answers the submit with
- * a request-level `409 mobile_required` (no attempt used, nothing billed).
- */
-type SdkFailureReason = "no_recorder" | "attestation" | "network" | "nni_unbound" | "method_required" | "inference_unavailable";
-/** Backend reason taxonomy ∪ the SDK-side failure reasons. */
-type ReasonCode = CheckReason | SessionFailureReason | SdkFailureReason;
-/**
- * - `approved` / `rejected` / `review` — the session's verdict;
- * - `retry` — a retryable reason with attempts remaining (`autoRetry` on); the
- *   capture re-arms by itself;
- * - `unavailable` — v2 could not run this capture (no MediaRecorder,
- *   attestation failed, network/API failure). Treat as "not completed".
- */
-type VerificationStatus = "approved" | "rejected" | "review" | "retry" | "unavailable";
-/** The verdict for this session / capture (`on('result')`). */
-interface VerificationResult {
-    sessionId: string;
-    status: VerificationStatus;
-    /** Backend check or session-policy reason, or SDK-side reason for `unavailable`. */
-    reason?: ReasonCode;
-    /**
-     * `retry` (and a `rejected` on a still-parked step): submissions left for
-     * the parked check after this one, for the host's coaching copy.
-     */
-    attemptsRemaining?: number;
-    /**
-     * ISO-8601 time from which this device may verify again — set on a
-     * `rejected` result with reason `device_cooldown` (profile v2 step 4).
-     */
-    retryAfter?: string;
-}
-/**
- * `on('busy')` payload: the model service answered
- * `503 inference_unavailable` and the SDK waits `retryAfterSeconds` before
- * retry number `attempt` (1-based, at most 3). Show "busy, trying again" copy.
- */
-interface VerificationBusy {
-    attempt: number;
-    retryAfterSeconds: number;
-}
-/** Consent locale picklist (mirrors the backend HostedConsentSchema). */
-type VerificationLocale = "ar" | "fr" | "en";
-/** Options of {@link createVerification}. */
-interface VerificationOptions {
-    /** The session's client token (from `POST /api/v2/sessions` → `client_token`). */
-    clientToken: string;
-    /** API origin; default `https://api.sekyro.ai`. */
-    apiOrigin?: string;
-    /** Consent locale (echoed into the auditable consent record). */
-    locale: VerificationLocale;
-    /** Re-arm the capture on retryable reasons while attempts remain. Default `true`. */
-    autoRetry?: boolean;
-    /**
-     * How a `retry` verdict re-arms the capture (`autoRetry` on):
-     *  - `'auto'` (default) — the camera restarts immediately;
-     *  - `'manual'` — the handle settles at `done`; the host shows its coaching
-     *    and calls `retry()` on the handle when the user is ready.
-     */
-    rearm?: "auto" | "manual";
-    /** Injection seam for `fetch` (tests / non-window contexts). */
-    fetch?: typeof globalThis.fetch;
-}
-/** Event map of a {@link Verification}. */
-interface VerificationEvents {
-    /** Verdict per capture (and once when the registry settles the session early). */
-    result: VerificationResult;
-    /** Every hosted-view update the SDK observes (bootstrap, consent, submits). */
-    view: HostedSessionView;
-    /**
-     * The session waits on the identity-method choice (profile v2 step 3) and
-     * the SDK stopped before submitting anything: show the options and call
-     * {@link Verification.selectMethod}.
-     */
-    method: MethodChoiceView;
-    /**
-     * The model service is briefly unavailable and the SDK retries by itself
-     * (profile v2 step 4). A `result` follows: the verdict, or
-     * `unavailable / inference_unavailable` once the retries are spent.
-     */
-    busy: VerificationBusy;
-}
-/** One session's verification, from {@link createVerification}. */
-interface Verification {
-    /** Record consent once (no-op when the session already has it). */
-    consent(): Promise<void>;
-    /**
-     * Submit `population_registry` early with an empty input when it is the
-     * pending frontier and the backend holds the NNI: the SERVER-bound one, or
-     * the one the document step read (`nniFromDocument`). Retries once on
-     * `registry_unavailable`. Never rejects — failures surface through
-     * `result`. Idempotent.
-     */
-    startRegistry(): Promise<void>;
-    /**
-     * The identity-method choice the session waits on (profile v2 step 3),
-     * bootstrapping the hosted view when needed; `null` when there is no
-     * pending choice, the bootstrap fails, or the verification was destroyed.
-     * Never rejects.
-     */
-    methodChoice(): Promise<MethodChoiceView | null>;
-    /**
-     * Send the person's identity method (`POST /hosted/method`) and continue
-     * from the returned view. Rejects with the typed `HostedApiError` (e.g.
-     * 409 `method_locked`).
-     */
-    selectMethod(method: IdentityMethod): Promise<void>;
-    /**
-     * The session's pending liveness step must be captured on a phone
-     * (`HostedStepView.requiresMobile`, profile v2 step 4 automatic decisions)
-     * and this browser is not one: show "continue on your phone" instead of
-     * starting the camera. Bootstraps the hosted view when needed; `false` when
-     * the bootstrap fails or the verification was destroyed. Never rejects.
-     * Optional so custom / older `Verification` implementations stay valid —
-     * treat an absent member as "no phone requirement".
-     */
-    mobileRequired?(): Promise<boolean>;
-    /** Start a liveness capture bound to this verification; the SDK uploads + submits on `captured`. */
-    liveness(options: LivenessCaptureOptions): LivenessCaptureHandle;
-    /**
-     * The session's Sekyro AI-hosted voice clips (`view.voice`), bootstrapping the
-     * hosted view when it has not been fetched yet. Resolves `null` when the
-     * session has no active clip set, the API predates the field, the bootstrap
-     * fails, or the verification was destroyed. Never rejects.
-     */
-    voiceClips(): Promise<HostedVoiceView | null>;
-    /** Subscribe; returns the unsubscribe function. */
-    on<K extends keyof VerificationEvents>(event: K, handler: (payload: VerificationEvents[K]) => void): () => void;
-    /** Destroy the active capture and drop all listeners. */
-    destroy(): void;
-}
-
-/** The engine surface the handle binds — CaptureSessionV3 or a test double. */
-interface CaptureEngine {
-    readonly state: CaptureState$1;
-    on<K extends keyof CaptureSessionV3Events>(event: K, handler: (payload: CaptureSessionV3Events[K]) => void): () => void;
-    /** `facingMode` sets the camera for this attempt and later retries. */
-    start(options?: {
-        facingMode?: "user" | "environment";
-    }): Promise<void>;
-    retry(): void;
-    switchCamera(): void;
-    destroy(): void;
-    /** Device-profile chrome hint (LOW class → `'reduced'`); absent on doubles. */
-    readonly animations?: "full" | "reduced";
-}
-/** Internal construction seams (tests; Sekyro AI's own hosted page). */
-interface LivenessCaptureInternals {
-    /** Replace the engine constructor (default: `new CaptureSessionV3(options)`). */
-    createEngine?: (options: CaptureSessionV3Options) => CaptureEngine;
-    /** Extra engine options merged in (worker offload, warmed detector, telemetry). */
-    engineOptions?: Partial<Pick<CaptureSessionV3Options, "createDetector" | "createWorker" | "telemetry" | "deviceClass">>;
-    /** Clock (default `performance.now`). */
-    now?: () => number;
-}
-/** fcv3.* guidance key → public gate hint code. */
-declare function mapGuidanceHint(key: string): GateHint | null;
-/** Engine state → public state (`preflight|acquiring → starting`, `positioning → gating`). */
-declare function mapEngineState(state: CaptureState$1): CaptureState;
-/** Engine error kinds → the public six (`models|cliptoolarge|recorder|overconstrained → generic`). */
-declare function mapErrorKind(kind: CaptureErrorKind$1): CaptureErrorKind;
-/** Handle + the hooks the verification layer uses to drive the flow states. */
-interface LivenessCaptureInternalHandle {
-    handle: LivenessCaptureHandle;
-    /** Push a post-capture state (`uploading | checking | done`). */
-    setFlowState(state: Extract<CaptureState, "uploading" | "checking" | "done">): void;
-}
-declare function createLivenessCaptureInternal(options: LivenessCaptureOptions, internals?: LivenessCaptureInternals): LivenessCaptureInternalHandle;
-/**
- * Create a standalone liveness capture (no upload — pair it with your own
- * submission, or use {@link Verification.liveness} for the full flow).
- */
-declare function createLivenessCapture(options: LivenessCaptureOptions): LivenessCaptureHandle;
-
-/** Preload state per asset base URL. */
-type LivenessAssetsStatus = "idle" | "loading" | "ready" | "failed";
-/** Options of {@link preloadLivenessAssets}. */
-interface PreloadLivenessAssetsOptions {
-    /** Same value as the capture's `assetBaseUrl`; default `/models-v3`. */
-    assetBaseUrl?: string;
-    /** Defer the load to browser idle time (`requestIdleCallback`, 1.2 s timeout fallback). Default `false`. */
-    idle?: boolean;
-    /** Skip when the browser asks to save data (`navigator.connection.saveData`). Default `false`. */
-    respectSaveData?: boolean;
-}
-/** Blaze init deadline for the preload — generous: a slow ~11 MB wasm download must finish. */
-declare const PRELOAD_BLAZE_INIT_TIMEOUT_MS = 120000;
-/** Outer budget reclaiming only a genuinely hung load (≥ the init deadline + slack). */
-declare const PRELOAD_BUDGET_MS = 130000;
-type Loader = (base: string) => Promise<Detector>;
-/** @internal Test seam: replace the detector loader (null restores the real one). */
-declare function setPreloadLoaderForTests(next: Loader | null): void;
-/** @internal Test seam: drop every entry (destroying warmed detectors). */
-declare function resetLivenessAssetsForTests(): void;
-/**
- * Warm the face detector for `assetBaseUrl` so the capture starts instantly.
- * Idempotent per base URL and never rejects: resolves the settled status.
- * `'idle'` means nothing was preloaded here (SSR, no camera API, Data-Saver
- * skip) — start normally. Calling again after `'failed'` retries the load.
- * With `idle: true` the load is deferred (status stays `'idle'` until it
- * starts); a later non-idle call — or a capture mounting meanwhile — starts it
- * at once, and {@link releaseLivenessAssets} cancels it.
- */
-declare function preloadLivenessAssets(options?: PreloadLivenessAssetsOptions): Promise<LivenessAssetsStatus>;
-/** Current preload status for `assetBaseUrl` (default `/models-v3`). */
-declare function getLivenessAssetsStatus(assetBaseUrl?: string): LivenessAssetsStatus;
-/**
- * Subscribe to status changes for `assetBaseUrl`; returns the unsubscribe
- * function. Does NOT emit the current status on subscribe (read it with
- * {@link getLivenessAssetsStatus}) — the
- * `useSyncExternalStore(subscribe, getSnapshot)` contract, so it plugs into
- * that hook directly.
- */
-declare function subscribeLivenessAssets(listener: (status: LivenessAssetsStatus) => void, assetBaseUrl?: string): () => void;
-/** Free the warmed detector (an SPA leaving the flow). Never call while a capture is mounted. */
-declare function releaseLivenessAssets(assetBaseUrl?: string): void;
-/**
- * @internal The capture engine's detector source when a preload exists for
- * `assetBaseUrl`: a non-owning view of the warm instance (waiting for an
- * in-flight load), or — once that load failed — a cold detector OWNED by the
- * session (default ladder + deadline). `undefined` when nothing was preloaded.
- * Invoking it on an idle-scheduled preload starts that load now and joins it.
- */
-declare function preloadedDetectorFactory(assetBaseUrl?: string): (() => Promise<Detector>) | undefined;
-
-/** The client surface the flow needs — `HostedClient` or a test fake. */
-type HostedClientLike = Pick<HostedClient, "getSession" | "recordConsent" | "selectMethod" | "presign" | "uploadToSpaces" | "completeMedia" | "submitCheck">;
-/** The presign policy allowlist for `kind: 'clip'` (media.policy.ts mirror). */
-declare const CLIP_MIME_ALLOWLIST: readonly string[];
-/** Same-key transport replays AFTER the first try, and the pause between them. */
-declare const TRANSPORT_REPLAY_ATTEMPTS = 2;
-declare const TRANSPORT_REPLAY_DELAY_MS = 1000;
-/**
- * `503 inference_unavailable` (profile v2 step 4 — request-level: no state
- * change, no attempt used, not billed): retries after `retryAfterSeconds`
- * (default {@link INFERENCE_RETRY_DEFAULT_S}, capped at 30 s), at most
- * {@link INFERENCE_RETRY_ATTEMPTS} times, each under a FRESH key (each retry
- * is its own logical attempt; the backend never caches a 5xx envelope).
- */
-declare const INFERENCE_RETRY_ATTEMPTS = 3;
-declare const INFERENCE_RETRY_DEFAULT_S = 10;
-/** A Turnstile challenge failed client-side (load / render / error-callback / timeout). */
-declare class AttestationError extends Error {
-    constructor(message: string);
-}
-/** One logical submission: receives the client and ITS idempotency key. */
-type SubmitExecutor = (client: HostedClientLike, idempotencyKey: string) => Promise<SessionView>;
-interface SubmitRuntime {
-    client: HostedClientLike;
-    /** Force-record consent (the server just said it is missing). */
-    ensureConsent(opts: {
-        force: true;
-    }): Promise<void>;
-    sleep(ms: number): Promise<void>;
-    uuid(): string;
-    /** An `inference_unavailable` retry is about to wait (the `busy` event). */
-    onBusy?(info: VerificationBusy): void;
-}
-/**
- * Run one logical submission (ported use-submit semantics):
- *  - a fresh `crypto.randomUUID()` key per logical submission;
- *  - a transport-class failure replays the SAME executor under the SAME key
- *    (bounded) — the backend's IdempotencyInterceptor returns the first
- *    response instead of burning another attempt;
- *  - ONE `consent_required` recovery: force-record consent and re-run under a
- *    FRESH key (the 409 envelope is idempotency-cached under the old one);
- *  - ONE attestation retry (client-side Turnstile failure or a server
- *    `attestation_invalid`): `onAttestationInvalid` drops the cached token and
- *    the executor re-runs under a fresh key;
- *  - up to {@link INFERENCE_RETRY_ATTEMPTS} `inference_unavailable` retries
- *    after `retryAfterSeconds`, each under a FRESH key and with a fresh
- *    attestation (`onAttestationInvalid` — the Turnstile token was spent).
- * Throws the final error otherwise.
- */
-declare function runSubmission(rt: SubmitRuntime, executor: SubmitExecutor, hooks?: {
-    onAttestationInvalid?: () => void;
-}): Promise<SessionView>;
-interface LivenessFlowDeps extends SubmitRuntime {
-    artifacts: CapturedArtifacts;
-    /** Fresh attestation per call (Turnstile execute, or `{sandbox: true}`). */
-    getAttestation(): Promise<AttestationInput>;
-    /** Latest hosted view (frontier decisions). */
-    getView(): HostedSessionView;
-    /** Re-GET the view from the server (after a RESYNC code) and fold it in. */
-    refreshView(): Promise<HostedSessionView>;
-    /** Fold a submit response into the view. */
-    applySubmit(view: SessionView, submitted: CheckType): void;
-    /** Flow-state hook for the capture handle. */
-    onPhase(phase: "uploading" | "checking"): void;
-    /** The verification was destroyed (the only thing that cancels a chain). */
-    isCancelled(): boolean;
-}
-type LivenessFlowOutcome = {
-    kind: "settled";
-} | {
-    kind: "resync";
-} | {
-    kind: "unavailable";
-    reason: SdkFailureReason | "mobile_required";
-} | {
-    kind: "cancelled";
-};
-/**
- * Run the biometric submissions the CURRENT frontier allows, re-evaluating
- * after every submit and after every RESYNC re-GET:
- *  - frontier `liveness` → clip upload + attestation + `liveness` (once per capture);
- *  - frontier `face_match` → keyframe upload + `face_match` (once per capture),
- *    allowed when liveness was NOT part of this capture (it had already
- *    settled — any state, incl. `failed`: the selfie-fallback case, where this
- *    capture only feeds face_match) or settled chainable from this capture
- *    (passed / review / processing / skipped — or absent);
- *  - anything else (terminal view, a non-biometric frontier, a check this
- *    capture already submitted) → `settled` for the caller to map the view.
- * A RESYNC code re-GETs the view and re-enters (at most {@link RESYNC_REENTRY_MAX}
- * times); the final RESYNC surfaces as `resync` for the caller to map.
- */
-declare function runLivenessFlow(deps: LivenessFlowDeps): Promise<LivenessFlowOutcome>;
-
-/** Production API origin — the `apiOrigin` default. */
-declare const DEFAULT_API_ORIGIN = "https://api.sekyro.ai";
-/** Pause before the single `registry_unavailable` re-submit. */
-declare const REGISTRY_RETRY_DELAY_MS = 5000;
-/** Bounded poll while a biometric verdict is still `processing` after the submits. */
-declare const PROCESSING_POLL_DELAY_MS = 1500;
-declare const PROCESSING_POLL_MAX = 10;
-/**
- * Construction seams — tests and Sekyro AI's own hosted page (`@sekyro/web/internal`).
- * Not part of the partner contract.
- */
-interface VerificationInternals {
-    /** Replace the HTTP client (default: `new HostedClient({...})`). */
-    client?: HostedClientLike;
-    /**
-     * Replace the Turnstile challenge (default: {@link executeTurnstile}). The
-     * `signal` aborts when the verification is destroyed (M1).
-     */
-    getTurnstileToken?: (siteKey: string, opts: {
-        signal: AbortSignal;
-    }) => Promise<string>;
-    /** Capture-engine seams forwarded to {@link createLivenessCaptureInternal}. */
-    capture?: LivenessCaptureInternals;
-    sleep?: (ms: number) => Promise<void>;
-    uuid?: () => string;
-}
-/** `crypto.randomUUID()` with a v4 fallback for hosts that lack it. */
-declare function randomUuid(): string;
-/**
- * Create a verification bound to one session (spec §3.1):
- * `consent()` → `startRegistry()` → `liveness({video})` → `on('result')`.
- */
-declare function createVerification(options: VerificationOptions): Verification;
-/** {@link createVerification} with construction seams (tests / Sekyro AI-internal hosts). */
-declare function createVerificationInternal(options: VerificationOptions, internals: VerificationInternals): Verification;
-
-export { mapEngineState as $, AttestationError as A, type LivenessCaptureInternalHandle as B, type CameraFacing as C, DEFAULT_API_ORIGIN as D, type LivenessCaptureInternals as E, type LivenessFlowDeps as F, type GateHint as G, type HostedClientLike as H, INFERENCE_RETRY_ATTEMPTS as I, type LivenessFlowOutcome as J, PRELOAD_BLAZE_INIT_TIMEOUT_MS as K, type LivenessAssetsStatus as L, PRELOAD_BUDGET_MS as M, PROCESSING_POLL_DELAY_MS as N, PROCESSING_POLL_MAX as O, type PreloadLivenessAssetsOptions as P, REGISTRY_RETRY_DELAY_MS as Q, type ReasonCode as R, type SdkFailureReason as S, type SubmitExecutor as T, type SubmitRuntime as U, type Verification as V, TRANSPORT_REPLAY_ATTEMPTS as W, TRANSPORT_REPLAY_DELAY_MS as X, type VerificationInternals as Y, createLivenessCaptureInternal as Z, createVerificationInternal as _, type CaptureChannel as a, mapErrorKind as a0, mapGuidanceHint as a1, preloadedDetectorFactory as a2, randomUuid as a3, resetLivenessAssetsForTests as a4, runLivenessFlow as a5, runSubmission as a6, setPreloadLoaderForTests as a7, type CaptureEngineId as b, type CaptureError as c, type CaptureErrorKind as d, type CaptureState as e, type CapturedArtifacts as f, type GateUpdate as g, type LivenessCaptureEvents as h, type LivenessCaptureHandle as i, type LivenessCaptureOptions as j, type LivenessStartOptions as k, type VerificationBusy as l, type VerificationEvents as m, type VerificationLocale as n, type VerificationOptions as o, type VerificationResult as p, type VerificationStatus as q, createLivenessCapture as r, createVerification as s, getLivenessAssetsStatus as t, preloadLivenessAssets as u, releaseLivenessAssets as v, subscribeLivenessAssets as w, CLIP_MIME_ALLOWLIST as x, type CaptureEngine as y, INFERENCE_RETRY_DEFAULT_S as z };