@iam-protocol/pulse-sdk 0.3.5 → 0.3.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iam-protocol/pulse-sdk",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Client-side SDK for IAM Protocol — sensor capture, TBH generation, ZK proof construction",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/src/pulse.ts

@@ -92,6 +92,19 @@ async function processSensorData(
     };
   }
 
+  // Re-verification requires audio + at least one other modality.
+  // Audio-only fingerprints lack inter-session variance from motion/touch,
+  // producing identical SimHash results that fail the min_distance constraint.
+  const hasPreviousData = loadVerificationData() !== null;
+  if (hasPreviousData && !hasMotion && !hasTouch) {
+    return {
+      success: false,
+      commitment: new Uint8Array(32),
+      isFirstVerification: false,
+      error: "Insufficient sensor data for re-verification. Please trace the curve and allow motion access.",
+    };
+  }
+
   // Extract features
   const features = await extractFeatures(sensorData);
 
@@ -432,30 +445,30 @@ export class PulseSDK {
       const session = this.createSession(touchElement);
       const stopPromises: Promise<void>[] = [];
 
-      // Audio
+      // Motion first — requires user gesture on iOS (gesture expires after getUserMedia)
       try {
-        await session.startAudio();
+        await session.startMotion();
+      } catch {
+        /* unexpected error — motion already skipped or idle */
+      }
+      if (session.isMotionCapturing()) {
         stopPromises.push(
           new Promise<void>((r) => setTimeout(r, DEFAULT_CAPTURE_MS))
-            .then(() => session.stopAudio())
+            .then(() => session.stopMotion())
             .then(() => {})
         );
-      } catch (err: any) {
-        throw new Error(`Audio capture failed: ${err?.message ?? "microphone unavailable"}`);
       }
 
-      // Motion — startMotion auto-skips if permission denied (no throw)
+      // Audio second — getUserMedia works without a gesture on secure origins
       try {
-        await session.startMotion();
-      } catch {
-        /* unexpected error — motion already skipped or idle */
-      }
-      if (session.isMotionCapturing()) {
+        await session.startAudio();
         stopPromises.push(
           new Promise<void>((r) => setTimeout(r, DEFAULT_CAPTURE_MS))
-            .then(() => session.stopMotion())
+            .then(() => session.stopAudio())
             .then(() => {})
         );
+      } catch (err: any) {
+        throw new Error(`Audio capture failed: ${err?.message ?? "microphone unavailable"}`);
       }
 
       // Touch