@iam-protocol/pulse-sdk 0.3.5 → 0.3.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iam-protocol/pulse-sdk",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "Client-side SDK for IAM Protocol — sensor capture, TBH generation, ZK proof construction",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/src/pulse.ts

@@ -40,9 +40,18 @@ async function extractFeatures(data: SensorData): Promise<number[]> {
   const audioFeatures = await extractSpeakerFeatures(data.audio);
 
   const hasMotion = data.motion.length >= MIN_MOTION_SAMPLES;
-  const motionFeatures = hasMotion
-    ? extractMotionFeatures(data.motion)
-    : extractMouseDynamics(data.touch);
+  const hasTouch = data.touch.length >= MIN_TOUCH_SAMPLES;
+
+  // On mobile (both IMU and touch available), use touch/pointer dynamics for
+  // kinematic features. Stationary IMU reads constant gravity — the derivatives
+  // are near-zero and produce identical features across sessions. Finger tracing
+  // has natural inter-session variance because no two paths are identical.
+  const motionFeatures =
+    hasMotion && hasTouch
+      ? extractMouseDynamics(data.touch)
+      : hasMotion
+        ? extractMotionFeatures(data.motion)
+        : extractMouseDynamics(data.touch);
 
   const touchFeatures = extractTouchFeatures(data.touch);
   return fuseFeatures(audioFeatures, motionFeatures, touchFeatures);
@@ -92,6 +101,19 @@ async function processSensorData(
     };
   }
 
+  // Re-verification requires audio + at least one other modality.
+  // Audio-only fingerprints lack inter-session variance from motion/touch,
+  // producing identical SimHash results that fail the min_distance constraint.
+  const hasPreviousData = loadVerificationData() !== null;
+  if (hasPreviousData && !hasMotion && !hasTouch) {
+    return {
+      success: false,
+      commitment: new Uint8Array(32),
+      isFirstVerification: false,
+      error: "Insufficient sensor data for re-verification. Please trace the curve and allow motion access.",
+    };
+  }
+
   // Extract features
   const features = await extractFeatures(sensorData);
 
@@ -432,30 +454,30 @@ export class PulseSDK {
       const session = this.createSession(touchElement);
       const stopPromises: Promise<void>[] = [];
 
-      // Audio
+      // Motion first — requires user gesture on iOS (gesture expires after getUserMedia)
       try {
-        await session.startAudio();
+        await session.startMotion();
+      } catch {
+        /* unexpected error — motion already skipped or idle */
+      }
+      if (session.isMotionCapturing()) {
         stopPromises.push(
           new Promise<void>((r) => setTimeout(r, DEFAULT_CAPTURE_MS))
-            .then(() => session.stopAudio())
+            .then(() => session.stopMotion())
             .then(() => {})
         );
-      } catch (err: any) {
-        throw new Error(`Audio capture failed: ${err?.message ?? "microphone unavailable"}`);
       }
 
-      // Motion — startMotion auto-skips if permission denied (no throw)
+      // Audio second — getUserMedia works without a gesture on secure origins
       try {
-        await session.startMotion();
-      } catch {
-        /* unexpected error — motion already skipped or idle */
-      }
-      if (session.isMotionCapturing()) {
+        await session.startAudio();
         stopPromises.push(
           new Promise<void>((r) => setTimeout(r, DEFAULT_CAPTURE_MS))
-            .then(() => session.stopMotion())
+            .then(() => session.stopAudio())
             .then(() => {})
         );
+      } catch (err: any) {
+        throw new Error(`Audio capture failed: ${err?.message ?? "microphone unavailable"}`);
       }
 
       // Touch