@iam-protocol/pulse-sdk 0.2.3 → 0.2.5

package/dist/index.d.mts

@@ -171,11 +171,6 @@ interface PackedFingerprint {
     hi: bigint;
 }
 
-/**
- * Compute a 256-bit SimHash fingerprint from a feature vector.
- * Uses deterministic random hyperplanes seeded from the protocol constant.
- * Similar feature vectors produce fingerprints with low Hamming distance.
- */
 declare function simhash(features: number[]): TemporalFingerprint;
 /**
  * Compute Hamming distance between two fingerprints.
@@ -317,8 +312,6 @@ declare function submitViaWallet(proof: SolanaProof, commitment: Uint8Array, opt
  * Submit a proof via the IAM relayer API (walletless mode).
  * The relayer submits the on-chain transaction using the integrator's funded account.
  * The user needs no wallet, no SOL, no crypto knowledge.
- *
- * In Phase 3, the relayer endpoint is configurable (stub until executor-node in Phase 4).
  */
 declare function submitViaRelayer(proof: SolanaProof, commitment: Uint8Array, options: {
     relayerUrl: string;
@@ -361,6 +354,7 @@ declare function loadVerificationData(): StoredVerificationData | null;
 /**
  * Generate a random phonetically-balanced phrase for the voice challenge.
  * Each phrase is 5-6 syllable pairs, forming nonsensical but speakable words.
+ * Uses crypto.getRandomValues for unpredictable challenge generation.
  */
 declare function generatePhrase(wordCount?: number): string;
 /**

package/dist/index.d.ts

@@ -171,11 +171,6 @@ interface PackedFingerprint {
     hi: bigint;
 }
 
-/**
- * Compute a 256-bit SimHash fingerprint from a feature vector.
- * Uses deterministic random hyperplanes seeded from the protocol constant.
- * Similar feature vectors produce fingerprints with low Hamming distance.
- */
 declare function simhash(features: number[]): TemporalFingerprint;
 /**
  * Compute Hamming distance between two fingerprints.
@@ -317,8 +312,6 @@ declare function submitViaWallet(proof: SolanaProof, commitment: Uint8Array, opt
  * Submit a proof via the IAM relayer API (walletless mode).
  * The relayer submits the on-chain transaction using the integrator's funded account.
  * The user needs no wallet, no SOL, no crypto knowledge.
- *
- * In Phase 3, the relayer endpoint is configurable (stub until executor-node in Phase 4).
  */
 declare function submitViaRelayer(proof: SolanaProof, commitment: Uint8Array, options: {
     relayerUrl: string;
@@ -361,6 +354,7 @@ declare function loadVerificationData(): StoredVerificationData | null;
 /**
  * Generate a random phonetically-balanced phrase for the voice challenge.
  * Each phrase is 5-6 syllable pairs, forming nonsensical but speakable words.
+ * Uses crypto.getRandomValues for unpredictable challenge generation.
  */
 declare function generatePhrase(wordCount?: number): string;
 /**

package/dist/index.js

@@ -13029,6 +13029,7 @@ var BN254_SCALAR_FIELD = BigInt(
 var FINGERPRINT_BITS = 256;
 var DEFAULT_THRESHOLD = 30;
 var DEFAULT_MIN_DISTANCE = 3;
+var NUM_PUBLIC_INPUTS = 4;
 var PROOF_A_SIZE = 64;
 var PROOF_B_SIZE = 128;
 var PROOF_C_SIZE = 64;
@@ -13062,6 +13063,7 @@ async function captureAudio(options = {}) {
     }
   });
   const ctx = new AudioContext({ sampleRate: TARGET_SAMPLE_RATE });
+  const capturedSampleRate = ctx.sampleRate;
   const source = ctx.createMediaStreamSource(stream);
   const chunks = [];
   const startTime = performance.now();
@@ -13098,8 +13100,8 @@ async function captureAudio(options = {}) {
       }
       resolve({
         samples,
-        sampleRate: ctx.sampleRate,
-        duration: totalLength / ctx.sampleRate
+        sampleRate: capturedSampleRate,
+        duration: totalLength / capturedSampleRate
       });
     }
     const maxTimer = setTimeout(stopCapture, maxDurationMs);
@@ -13314,16 +13316,29 @@ function fuseFeatures(audio, motion, touch) {
 var FRAME_SIZE = 400;
 var HOP_SIZE = 160;
 var NUM_MFCC = 13;
-function extractMFCC(audio) {
+var meydaModule = null;
+async function getMeyda() {
+  if (!meydaModule) {
+    try {
+      meydaModule = await import("meyda");
+    } catch {
+      return null;
+    }
+  }
+  return meydaModule.default ?? meydaModule;
+}
+async function extractMFCC(audio) {
   const { samples, sampleRate } = audio;
-  let Meyda;
-  try {
-    Meyda = require("meyda");
-  } catch {
+  const Meyda = await getMeyda();
+  if (!Meyda) {
+    console.warn("[IAM SDK] Meyda library failed to load. Audio features will be zeros.");
     return new Array(NUM_MFCC * 3 * 4 + NUM_MFCC).fill(0);
   }
   const numFrames = Math.floor((samples.length - FRAME_SIZE) / HOP_SIZE) + 1;
-  if (numFrames < 3) return new Array(NUM_MFCC * 3 * 4 + NUM_MFCC).fill(0);
+  if (numFrames < 3) {
+    console.warn(`[IAM SDK] Too few audio frames (${numFrames}). Need at least 3.`);
+    return new Array(NUM_MFCC * 3 * 4 + NUM_MFCC).fill(0);
+  }
   const mfccFrames = [];
   for (let i = 0; i < numFrames; i++) {
     const start = i * HOP_SIZE;
@@ -13339,7 +13354,7 @@ function extractMFCC(audio) {
       mfccFrames.push(features2.mfcc);
     }
   }
-  if (mfccFrames.length < 3) return new Array(NUM_MFCC * 3 * 4).fill(0);
+  if (mfccFrames.length < 3) return new Array(NUM_MFCC * 3 * 4 + NUM_MFCC).fill(0);
   const deltaFrames = computeDeltas(mfccFrames);
   const deltaDeltaFrames = computeDeltas(deltaFrames);
   const features = [];
@@ -13489,10 +13504,16 @@ function getHyperplanes(dimension) {
   cachedDimension = dimension;
   return planes;
 }
+var EXPECTED_FEATURE_DIMENSION = 259;
 function simhash(features) {
   if (features.length === 0) {
     return new Array(FINGERPRINT_BITS).fill(0);
   }
+  if (features.length !== EXPECTED_FEATURE_DIMENSION) {
+    console.warn(
+      `[IAM SDK] Feature vector has ${features.length} dimensions, expected ${EXPECTED_FEATURE_DIMENSION}. Fingerprint quality may be degraded.`
+    );
+  }
   const planes = getHyperplanes(features.length);
   const fingerprint = [];
   for (let i = 0; i < FINGERPRINT_BITS; i++) {
@@ -13588,6 +13609,11 @@ function negateG1Y(yDecStr) {
   return toBigEndian32(yNeg.toString());
 }
 function serializeProof(proof, publicSignals) {
+  if (publicSignals.length !== NUM_PUBLIC_INPUTS) {
+    throw new Error(
+      `Expected ${NUM_PUBLIC_INPUTS} public signals, got ${publicSignals.length}`
+    );
+  }
   const a0 = toBigEndian32(proof.pi_a[0]);
   const a1 = negateG1Y(proof.pi_a[1]);
   const proofA = new Uint8Array(PROOF_A_SIZE);
@@ -13710,7 +13736,10 @@ async function submitViaWallet(proof, commitment, options) {
       systemProgram: SystemProgram13.programId
     }).rpc();
     const anchorIdl = await anchor.Program.fetchIdl(anchorProgramId, provider);
-    if (anchorIdl) {
+    if (!anchorIdl) {
+      return { success: false, error: "Failed to fetch IAM Anchor program IDL" };
+    }
+    {
       const anchorProgram = new anchor.Program(anchorIdl, provider);
       if (options.isFirstVerification) {
         const [identityPda] = PublicKey23.findProgramAddressSync(
@@ -13765,6 +13794,7 @@ async function submitViaWallet(proof, commitment, options) {
 }
 
 // src/submit/relayer.ts
+var RELAYER_TIMEOUT_MS = 3e4;
 async function submitViaRelayer(proof, commitment, options) {
   try {
     const body = {
@@ -13779,21 +13809,31 @@ async function submitViaRelayer(proof, commitment, options) {
     if (options.apiKey) {
       headers["X-API-Key"] = options.apiKey;
     }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), RELAYER_TIMEOUT_MS);
     const response = await fetch(options.relayerUrl, {
       method: "POST",
       headers,
-      body: JSON.stringify(body)
+      body: JSON.stringify(body),
+      signal: controller.signal
     });
+    clearTimeout(timer);
     if (!response.ok) {
       const errorText = await response.text();
       return { success: false, error: `Relayer error: ${response.status} ${errorText}` };
     }
     const result = await response.json();
+    if (result.success !== true) {
+      return { success: false, error: "Relayer returned unsuccessful response" };
+    }
     return {
-      success: result.success ?? true,
+      success: true,
       txSignature: result.tx_signature
     };
   } catch (err) {
+    if (err.name === "AbortError") {
+      return { success: false, error: "Relayer request timed out" };
+    }
     return { success: false, error: err.message ?? String(err) };
   }
 }
@@ -13849,8 +13889,8 @@ function loadVerificationData() {
 var inMemoryStore = null;
 
 // src/pulse.ts
-function extractFeatures(data) {
-  const audioFeatures = data.audio ? extractMFCC(data.audio) : new Array(169).fill(0);
+async function extractFeatures(data) {
+  const audioFeatures = data.audio ? await extractMFCC(data.audio) : new Array(169).fill(0);
   const motionFeatures = extractMotionFeatures(data.motion);
   const touchFeatures = extractTouchFeatures(data.touch);
   return fuseFeatures(audioFeatures, motionFeatures, touchFeatures);
@@ -13881,7 +13921,7 @@ async function processSensorData(sensorData, config, wallet, connection) {
       error: "No voice data detected. Please speak the phrase clearly during capture."
     };
   }
-  const features = extractFeatures(sensorData);
+  const features = await extractFeatures(sensorData);
   const fingerprint = simhash(features);
   const tbh = await generateTBH(fingerprint);
   const previousData = loadVerificationData();
@@ -13892,15 +13932,23 @@ async function processSensorData(sensorData, config, wallet, connection) {
       fingerprint: previousData.fingerprint,
       salt: BigInt(previousData.salt),
       commitment: BigInt(previousData.commitment),
-      commitmentBytes: new Uint8Array(32)
+      commitmentBytes: bigintToBytes32(BigInt(previousData.commitment))
     };
     const circuitInput = prepareCircuitInput(
       tbh,
       previousTBH,
       config.threshold
     );
-    const wasmPath = config.wasmUrl ?? "";
-    const zkeyPath = config.zkeyUrl ?? "";
+    const wasmPath = config.wasmUrl;
+    const zkeyPath = config.zkeyUrl;
+    if (!wasmPath || !zkeyPath) {
+      return {
+        success: false,
+        commitment: tbh.commitmentBytes,
+        isFirstVerification: false,
+        error: "wasmUrl and zkeyUrl must be configured for re-verification proof generation"
+      };
+    }
     const { proof, publicSignals } = await generateProof(
       circuitInput,
       wasmPath,
@@ -14213,14 +14261,18 @@ var SYLLABLES = [
   "su",
   "tu"
 ];
+function secureRandom(max) {
+  const arr = new Uint32Array(1);
+  crypto.getRandomValues(arr);
+  return arr[0] % max;
+}
 function generatePhrase(wordCount = 5) {
   const words = [];
   for (let w = 0; w < wordCount; w++) {
-    const syllableCount = 2 + Math.floor(Math.random() * 2);
+    const syllableCount = 2 + secureRandom(2);
     let word = "";
     for (let s = 0; s < syllableCount; s++) {
-      const idx = Math.floor(Math.random() * SYLLABLES.length);
-      word += SYLLABLES[idx];
+      word += SYLLABLES[secureRandom(SYLLABLES.length)];
     }
     words.push(word);
   }
@@ -14237,10 +14289,10 @@ function generatePhraseSequence(count = 3, wordCount = 4) {
     ];
     const words = [];
     for (let w = 0; w < wordCount; w++) {
-      const syllableCount = 2 + Math.floor(Math.random() * 2);
+      const syllableCount = 2 + secureRandom(2);
       let word = "";
       for (let s = 0; s < syllableCount; s++) {
-        word += subset[Math.floor(Math.random() * subset.length)];
+        word += subset[secureRandom(subset.length)];
       }
       words.push(word);
     }
@@ -14258,11 +14310,13 @@ function randomLissajousParams() {
     [3, 5],
     [4, 5]
   ];
-  const pair = ratios[Math.floor(Math.random() * ratios.length)];
+  const arr = new Uint32Array(2);
+  crypto.getRandomValues(arr);
+  const pair = ratios[arr[0] % ratios.length];
   return {
     a: pair[0],
     b: pair[1],
-    delta: Math.PI * (0.25 + Math.random() * 0.5),
+    delta: Math.PI * (0.25 + arr[1] / 4294967295 * 0.5),
     points: 200
   };
 }
@@ -14291,14 +14345,22 @@ function generateLissajousSequence(count = 2) {
     [3, 7],
     [4, 7]
   ];
-  const shuffled = [...allRatios].sort(() => Math.random() - 0.5);
+  const shuffled = [...allRatios];
+  for (let i = shuffled.length - 1; i > 0; i--) {
+    const arr = new Uint32Array(1);
+    crypto.getRandomValues(arr);
+    const j = arr[0] % (i + 1);
+    [shuffled[i], shuffled[j]] = [shuffled[j], shuffled[i]];
+  }
   const sequence = [];
   for (let i = 0; i < count; i++) {
     const pair = shuffled[i % shuffled.length];
+    const deltaArr = new Uint32Array(1);
+    crypto.getRandomValues(deltaArr);
     const params = {
       a: pair[0],
       b: pair[1],
-      delta: Math.PI * (0.1 + Math.random() * 0.8),
+      delta: Math.PI * (0.1 + deltaArr[0] / 4294967295 * 0.8),
       points: 200
     };
     sequence.push({ params, points: generateLissajousPoints(params) });