@neofaceid/web-sdk 1.40.0 → 1.40.2

package/dist/index.d.ts

@@ -345,6 +345,11 @@ export declare const checkUserExistence: (params: {
     cpf?: string;
 }) => Promise<UserExistenceResult>;
 
+/**
+ * Limpa o histórico de consentimentos no localStorage.
+ */
+export declare function clearConsentTrail(): void;
+
 /**
  * Conclui o processo de onboarding enviando imagens de face e documento
  * @param applicationToken Token da aplicação (header `X-App-Token`)
@@ -448,6 +453,14 @@ export declare interface ConsentModalProps {
     onDecline: () => void;
 }
 
+export declare interface ConsentRecord {
+    hash: string;
+    timestamp: string;
+    purpose: string;
+    legalBasis: string;
+    sdkVersion: string;
+}
+
 /**
  * Compatibilidade com callers antigos que passavam `{ purpose, legalBasis }`.
  * Deprecated — remover quando US14.4 unificar tokens.
@@ -692,6 +705,12 @@ export declare function getConfig(): Readonly<SDKConfig>;
 /** Retorna os dados de consentimento configurados (ou os defaults conservadores). */
 export declare function getConsent(): Consent;
 
+/**
+ * Retorna o histórico (trail) de consentimentos gravados no localStorage.
+ * Falha silenciosamente retornando array vazio caso o localStorage esteja inacessível.
+ */
+export declare function getConsentTrail(): ConsentRecord[];
+
 /**
  * Retorna o ambiente atual configurado.
  */
@@ -1238,6 +1257,17 @@ export declare const recognizeByPurpose: (image: Blob, applicationToken: string,
     sessionId?: string;
 }>;
 
+/**
+ * Grava um novo aceite de consentimento no localStorage do titular.
+ * Zero PII: grava apenas hash (SHA-256 de userAgent+purpose+timestamp), timestamp, finalidade, base legal e versão do SDK.
+ * Mantém até no máximo 100 registros (FIFO).
+ * Falha silenciosamente em caso de erro no localStorage (ex: Safari modo privado ou QuotaExceededError).
+ */
+export declare function recordConsent(customConsent?: Partial<{
+    purpose: string;
+    legalBasis: string;
+}>): Promise<ConsentRecord | null>;
+
 /**
  * NEO-101: Register biometric data for an existing person
  *
@@ -1342,7 +1372,7 @@ export declare const registerPersonWithoutFace: (personData: {
 /**
  * Data de lançamento da versão atual
  */
-export declare const RELEASE_DATE = "2026-09-09";
+export declare const RELEASE_DATE = "2026-09-10";
 
 declare interface RequestChallengeWithSessionParams {
     applicationToken: string;
@@ -1709,7 +1739,7 @@ export declare const validateToken: (applicationToken: string) => Promise<boolea
  * MINOR: Incrementado quando adicionamos funcionalidades mantendo compatibilidade
  * PATCH: Incrementado quando corrigimos bugs mantendo compatibilidade
  */
-export declare const VERSION = "1.40.0";
+export declare const VERSION = "1.40.2";
 
 /**
  * Executa `fn(sessionId)`. Se o servidor devolver 410 (sessão consumida/expirada),

package/dist/neoface-id-sdk.es.js

@@ -8736,6 +8736,74 @@ function BiometricRegistrationModal({
     /* @__PURE__ */ jsx("canvas", { ref: canvasRef })
   ] });
 }
+const VERSION = "1.40.2";
+const RELEASE_DATE = "2026-09-10";
+const CONSENT_TRAIL_STORAGE_KEY = "neoface_consent_trail_v1";
+const CONSENT_TRAIL_MAX_LIMIT = 100;
+async function hashString(inputStr) {
+  try {
+    if (typeof crypto !== "undefined" && crypto.subtle && typeof crypto.subtle.digest === "function") {
+      const encoder = new TextEncoder();
+      const buffer = await crypto.subtle.digest("SHA-256", encoder.encode(inputStr));
+      return Array.from(new Uint8Array(buffer)).map((b) => b.toString(16).padStart(2, "0")).join("");
+    }
+  } catch {
+  }
+  return "sha256-unavailable";
+}
+function getConsentTrail() {
+  try {
+    if (typeof window === "undefined" || !window.localStorage) {
+      return [];
+    }
+    const rawData = window.localStorage.getItem(CONSENT_TRAIL_STORAGE_KEY);
+    if (!rawData) {
+      return [];
+    }
+    const parsed = JSON.parse(rawData);
+    if (Array.isArray(parsed)) {
+      return parsed;
+    }
+    return [];
+  } catch {
+    return [];
+  }
+}
+function clearConsentTrail() {
+  try {
+    if (typeof window !== "undefined" && window.localStorage) {
+      window.localStorage.removeItem(CONSENT_TRAIL_STORAGE_KEY);
+    }
+  } catch {
+  }
+}
+async function recordConsent(customConsent) {
+  try {
+    const configConsent = getConsent();
+    const purpose = (customConsent == null ? void 0 : customConsent.purpose) ?? configConsent.purpose ?? "authentication";
+    const legalBasis = (customConsent == null ? void 0 : customConsent.legalBasis) ?? configConsent.legalBasis ?? "fraud_prevention";
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const userAgent = typeof navigator !== "undefined" ? navigator.userAgent : "";
+    const sdkVersion = VERSION;
+    const hash = await hashString(`${userAgent}${purpose}${timestamp}`);
+    const record = {
+      hash,
+      timestamp,
+      purpose,
+      legalBasis,
+      sdkVersion
+    };
+    const currentTrail = getConsentTrail();
+    currentTrail.push(record);
+    const updatedTrail = currentTrail.slice(-CONSENT_TRAIL_MAX_LIMIT);
+    if (typeof window !== "undefined" && window.localStorage) {
+      window.localStorage.setItem(CONSENT_TRAIL_STORAGE_KEY, JSON.stringify(updatedTrail));
+    }
+    return record;
+  } catch {
+    return null;
+  }
+}
 const DEFAULT_PRIVACY_URL = "https://neofaceid.com/privacidade";
 const DEFAULT_RETENTION_DAYS = 90;
 const COPY = {
@@ -9027,7 +9095,11 @@ function ConsentModalComponent({
           {
             type: "button",
             className: "neofaceid-consent-button neofaceid-consent-button-primary",
-            onClick: onAccept,
+            onClick: () => {
+              recordConsent().catch(() => {
+              });
+              onAccept();
+            },
             children: copy.primary
           }
         ),
@@ -11271,8 +11343,6 @@ const biometricDetection = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.
   initializeBiometricDetection,
   isAdvancedDetectionAvailable
 }, Symbol.toStringTag, { value: "Module" }));
-const VERSION = "1.40.0";
-const RELEASE_DATE = "2026-09-09";
 let cachedSession = null;
 function getCachedCaptureSession() {
   return cachedSession;
@@ -14387,6 +14457,7 @@ export {
   authorize,
   authorizeOperation,
   checkUserExistence,
+  clearConsentTrail,
   completeOnboarding,
   completeOnboardingWithData,
   confirmPasswordReset,
@@ -14398,6 +14469,7 @@ export {
   getCachedCaptureSession,
   getConfig,
   getConsent,
+  getConsentTrail,
   getEnvironment,
   getLocale,
   getRadius,
@@ -14416,6 +14488,7 @@ export {
   recognize,
   recognizeBiometric,
   recognizeByPurpose,
+  recordConsent,
   registerBiometric,
   registerPersonWithBiometric,
   registerPersonWithoutFace,