@incodetech/core 2.4.0-rc.0 → 2.4.0-rc.2

package/dist/BrowserDiagnosticsCryptoProvider-BuzqvbhN.esm.js

@@ -1,77 +0,0 @@
-//#region ../infra/src/crypto/truesightKey.ts
-/**
-* Legacy TrueSight key helpers. ENG-57951 disconnects the shared-key path;
-* ENG-58122 tracks secure encryption and restoration.
-*/
-/** Interim P1 key id — the BE looks up the AES key by this label. */
-const TRUESIGHT_KID = "truesight-v1";
-/** No distributed shared key while TrueSight is disconnected (ENG-57951). */
-function getTruesightKey() {
-	return null;
-}
-//#endregion
-//#region ../infra/src/providers/browser/BrowserDiagnosticsCryptoProvider.ts
-/**
-* Browser sealer for TrueSight diagnostics (ENG-48677 plan §1.5): JSON string →
-* gzip via native CompressionStream → AES-256-GCM via WebCrypto → contract
-* envelope. Designed to be loaded as a LAZY chunk — zero bytes on the host
-* page's critical path.
-*
-* The CryptoKey is imported once (non-extractable) and the raw bytes are zeroed
-* immediately after import; `getKeyBytes` must therefore return a fresh copy.
-*/
-var BrowserDiagnosticsCryptoProvider = class {
-	constructor(getKeyBytes = getTruesightKey, kid = TRUESIGHT_KID) {
-		this.getKeyBytes = getKeyBytes;
-		this.kid = kid;
-		this.keyPromise = null;
-	}
-	isSupported() {
-		return typeof crypto !== "undefined" && typeof crypto.subtle !== "undefined" && typeof crypto.getRandomValues === "function" && typeof CompressionStream !== "undefined";
-	}
-	async seal(plaintext) {
-		const [gz, key] = await Promise.all([gzipUtf8(plaintext), this.importKeyOnce()]);
-		const iv = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(12));
-		const additionalData = new TextEncoder().encode(`v1|A256GCM|gzip|${this.kid}`);
-		const sealed = new Uint8Array(await crypto.subtle.encrypt({
-			name: "AES-GCM",
-			iv,
-			additionalData
-		}, key, gz));
-		const tagStart = sealed.length - 16;
-		return {
-			version: 1,
-			alg: "A256GCM",
-			compression: "gzip",
-			kid: this.kid,
-			iv: toBase64Url(iv),
-			ciphertext: toBase64Url(sealed.subarray(0, tagStart)),
-			tag: toBase64Url(sealed.subarray(tagStart))
-		};
-	}
-	importKeyOnce() {
-		this.keyPromise ??= (async () => {
-			const bytes = this.getKeyBytes();
-			if (!bytes || bytes.length !== 32) throw new Error("TrueSight diagnostics key unavailable in this build");
-			const copy = new Uint8Array(bytes);
-			try {
-				return await crypto.subtle.importKey("raw", copy, { name: "AES-GCM" }, false, ["encrypt"]);
-			} finally {
-				copy.fill(0);
-				bytes.fill(0);
-			}
-		})();
-		return this.keyPromise;
-	}
-};
-async function gzipUtf8(text) {
-	const stream = new Blob([text]).stream().pipeThrough(new CompressionStream("gzip"));
-	return new Uint8Array(await new Response(stream).arrayBuffer());
-}
-function toBase64Url(bytes) {
-	let binary = "";
-	for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
-	return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/u, "");
-}
-//#endregion
-export { BrowserDiagnosticsCryptoProvider };

package/dist/api-Bx3gKW_y.esm.js

@@ -1,129 +0,0 @@
-import { t as getTimestamp } from "./IBrowserEnvironmentCapability-DEaRRk-R.esm.js";
-//#region src/internal/http/api.ts
-let client = null;
-let currentToken = null;
-function setClient(httpClient) {
-	client = httpClient;
-}
-function setToken(token) {
-	currentToken = token;
-}
-function getToken() {
-	return currentToken;
-}
-function getApi() {
-	if (!client) throw new Error("SDK not configured. Call setup({ apiURL: \"...\" }) first.");
-	return client;
-}
-function isApiConfigured() {
-	return client !== null;
-}
-function resetApi() {
-	client = null;
-	currentToken = null;
-	requestObserver = null;
-}
-let requestObserver = null;
-/**
-* Observer fired around every `api.*` call (ENG-48677 event map row 23b —
-* Android-dashboard parity: every request gets a timing line, not just
-* failures). Deliberately a plain setter, not a direct `trueSightLog` import:
-* `trueSightService` already imports from this module, so importing it back
-* here would create a cycle. `setup.ts` wires the real observer.
-*/
-function setHttpRequestObserver(observer) {
-	requestObserver = observer;
-}
-function notifyRequestObserver(entry) {
-	if (!requestObserver) return;
-	try {
-		requestObserver(entry);
-	} catch {}
-}
-/** Strips a query string so `?communicationchannel=SMS`-style call sites don't fragment the endpoint label. */
-function normalizeEndpoint(url) {
-	const queryIndex = url.indexOf("?");
-	return queryIndex === -1 ? url : url.slice(0, queryIndex);
-}
-function httpStatusOf(error) {
-	if (typeof error === "object" && error !== null && "status" in error && typeof error.status === "number") return error.status;
-	return null;
-}
-async function withTiming(method, url, call) {
-	const endpoint = normalizeEndpoint(url);
-	const startedAt = getTimestamp();
-	let response;
-	try {
-		response = await call();
-	} catch (error) {
-		notifyRequestObserver({
-			method,
-			endpoint,
-			httpStatus: httpStatusOf(error),
-			durationMs: getTimestamp() - startedAt,
-			outcome: "failure"
-		});
-		throw error;
-	}
-	notifyRequestObserver({
-		method,
-		endpoint,
-		httpStatus: response.status,
-		durationMs: getTimestamp() - startedAt,
-		outcome: "success"
-	});
-	return response;
-}
-/**
-* Header-precedence contract: when a caller passes
-* `X-Incode-Hardware-Id` in `config.headers`, their value wins over
-* `currentToken`. Spreading `config?.headers` LAST achieves that
-* (later keys overwrite earlier ones in object spread).
-*
-* Existing call sites that already pass an explicit
-* `X-Incode-Hardware-Id` header (`recordingsRepository.uploadDeepsightVideo`,
-* `internal/virtualCameraCheck.logFrame`) now use the value they
-* passed in unconditionally — previously the auto-injection silently
-* clobbered them. Both call sites pass tokens that are already
-* supposed to be the active session token, so behaviour is
-* unchanged in practice; the change unblocks personhood (which
-* needs to attach its own slot's token) without bypassing the
-* shared `api` wrapper.
-*
-* Regression coverage lives in `api.test.ts → "should let explicit
-* X-Incode-Hardware-Id override the auto-injected token"`.
-*/
-function addTokenHeader(config) {
-	if (!currentToken) return config ?? {};
-	return {
-		...config,
-		headers: {
-			"X-Incode-Hardware-Id": currentToken,
-			...config?.headers
-		}
-	};
-}
-const api = {
-	get(url, config) {
-		const client = getApi();
-		return withTiming("GET", url, () => client.get(url, addTokenHeader(config)));
-	},
-	post(url, data, config) {
-		const client = getApi();
-		return withTiming("POST", url, () => client.post(url, data, addTokenHeader(config)));
-	},
-	put(url, data, config) {
-		const client = getApi();
-		return withTiming("PUT", url, () => client.put(url, data, addTokenHeader(config)));
-	},
-	patch(url, data, config) {
-		const client = getApi();
-		return withTiming("PATCH", url, () => client.patch(url, data, addTokenHeader(config)));
-	},
-	delete(url, config) {
-		const client = getApi();
-		return withTiming("DELETE", url, () => client.delete(url, addTokenHeader(config)));
-	}
-};
-//#endregion
-export { resetApi as a, setToken as c, isApiConfigured as i, getApi as n, setClient as o, getToken as r, setHttpRequestObserver as s, api as t };

package/dist/types-C71Zo6vl.d.ts

@@ -1,6 +0,0 @@
-import { i as FlowModuleConfig } from "./types-BGXxRwQM.js";
-import { t as BaseFaceCaptureConfig } from "./types-zpO4fU6a.js";
-//#region src/modules/authentication/types.d.ts
-type AuthenticationConfig = FlowModuleConfig['AUTHENTICATION'] & BaseFaceCaptureConfig;
-//#endregion
-export { AuthenticationConfig as t };