@raytio/decrypt-helper 6.0.0 → 6.1.1

package/dist/api/authedFetch.js

@@ -13,20 +13,21 @@ exports.authedFetch = void 0;
 function authedFetch(apiToken, url, options, retrying = false) {
     return __awaiter(this, void 0, void 0, function* () {
         console.log(`[API] ${retrying ? "Retry" : "Start"} ${url}`);
-        const startTime = +new Date();
-        const req = yield fetch(url, Object.assign(Object.assign({}, options), { headers: { Authorization: `Bearer ${apiToken}` } }));
-        const apiResp = yield req.json();
-        if (apiResp.message) {
-            if (!retrying && req.status === 504) {
-                console.log(`[API] Error ${req.status} (will retry) ${url}`);
+        const startTime = Date.now();
+        const response = yield fetch(url, Object.assign(Object.assign({}, options), { headers: { Authorization: `Bearer ${apiToken}` } }));
+        const apiResponse = yield response.json();
+        const error = apiResponse.message || apiResponse.error;
+        if (error) {
+            if (!retrying && response.status === 504) {
+                console.log(`[API] Error ${response.status} (will retry) ${url}`);
                 return authedFetch(apiToken, url, options, true);
             }
-            console.log(`[API] Error ${req.status} (no retry) ${url}`);
-            throw new Error(`Failed due to API Error from ${url}: "${apiResp.message}"`);
+            console.log(`[API] Error ${response.status} (no retry) ${url}`);
+            throw new Error(`Failed due to API Error from ${url}: "${error}"`);
         }
-        const totalTime = ((+new Date() - startTime) / 1000).toFixed(1);
+        const totalTime = ((Date.now() - startTime) / 1000).toFixed(1);
         console.log(`[API] Finish${retrying ? " after retry" : ""} (${totalTime}s) ${url}`);
-        return apiResp;
+        return apiResponse;
     });
 }
 exports.authedFetch = authedFetch;

package/dist/api/getFiles.d.ts

@@ -1,4 +1,6 @@
 import type { Instance, NId, ProfileObject } from "@raytio/types";
 import { ApplicationEncryptorLike } from "../types";
 import { EnvConfig } from "./fetchEnvConfig";
-export declare function getFiles(profileObjects: ProfileObject[], instance: Instance, apiToken: string, envConfig: EnvConfig, applicationDecryptor: ApplicationEncryptorLike): Promise<Record<NId, [dataUrl: string, fileExtension: string]>>;
+type FileObject = Record<NId, [dataUrl: string, fileExtension: string]>;
+export declare function getFiles(profileObjects: ProfileObject[], instance: Instance, apiToken: string, envConfig: EnvConfig, applicationDecryptor: ApplicationEncryptorLike): Promise<FileObject>;
+export {};

package/dist/api/getFiles.js

@@ -14,12 +14,13 @@ const core_1 = require("@raytio/core");
 const mime_types_1 = require("mime-types");
 const file_1 = require("../helpers/file");
 const authedFetch_1 = require("./authedFetch");
+const videoToImage_1 = require("./videoToImage");
 const TEMP_OBJ_PREFIX = "urn:temp_object:";
 const getFileExtn = (b64) => { var _a; return (0, mime_types_1.extension)(((_a = b64.split(":")[1]) === null || _a === void 0 ? void 0 : _a.split(";base64,")[0]) || "text/plain") || "txt"; };
-const decryptFile = (encryptedData, encryptedObj, applicationDecryptor, wdek) => __awaiter(void 0, void 0, void 0, function* () {
-    const clonedEncryptedObj = JSON.parse(JSON.stringify(encryptedObj));
-    clonedEncryptedObj.encrypted_data.data = encryptedData;
-    const decrypted = yield applicationDecryptor.decrypt(clonedEncryptedObj, wdek);
+const decryptFile = (encryptedData, encryptedObject, applicationDecryptor, wdek) => __awaiter(void 0, void 0, void 0, function* () {
+    const clonedEncryptedObject = JSON.parse(JSON.stringify(encryptedObject));
+    clonedEncryptedObject.encrypted_data.data = encryptedData;
+    const decrypted = yield applicationDecryptor.decrypt(clonedEncryptedObject, wdek);
     return decrypted;
 });
 const cleanApiResponse = (responseBody) => {
@@ -35,6 +36,7 @@ const cleanApiResponse = (responseBody) => {
     return responseBody;
 };
 function getFiles(profileObjects, instance, apiToken, envConfig, applicationDecryptor) {
+    var _a;
     return __awaiter(this, void 0, void 0, function* () {
         // [nId: NId, fieldName: string, file: RaytFile][]
         const urnOrEncryptedList = profileObjects.flatMap((PO) => {
@@ -50,29 +52,41 @@ function getFiles(profileObjects, instance, apiToken, envConfig, applicationDecr
             });
         });
         const filesBase64 = yield Promise.all(urnOrEncryptedList.map(([PONId, fileNId, fieldName, urnOrEncrypted]) => __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
+            var _b, _c;
             // handle urn:temp_object:
             if (typeof urnOrEncrypted === "string" &&
                 urnOrEncrypted.startsWith(TEMP_OBJ_PREFIX)) {
                 const url = Buffer.from(urnOrEncrypted.slice(TEMP_OBJ_PREFIX.length), "base64").toString("binary");
-                const res = yield fetch(url);
-                const b64 = new TextDecoder().decode(yield res.arrayBuffer());
-                const type = res.headers.get("content-type") || "text/plain";
-                const dataUrl = `data:${type};base64,${b64}`;
+                const response = yield fetch(url);
+                const base64 = Buffer.from(yield response.arrayBuffer()).toString("base64");
+                const type = response.headers.get("content-type") || "text/plain";
+                const dataUrl = `data:${type};base64,${base64}`;
                 return [fileNId, [dataUrl, getFileExtn(dataUrl)]];
             }
-            // TODO: should realB64 be renamed to "realDataUrl"?
-            const realB64 = yield (0, authedFetch_1.authedFetch)(apiToken, `${envConfig.api_url}/share/v2/access_application/instance/${instance.i_id}/profile_object/${fileNId}/content`).then(cleanApiResponse);
+            const realDataUrl = yield (0, authedFetch_1.authedFetch)(apiToken, `${envConfig.api_url}/share/v2/access_application/instance/${instance.i_id}/profile_object/${fileNId}/content`).then(cleanApiResponse);
             if ((0, core_1.isEncrypted)(urnOrEncrypted)) {
-                const wdek = (_b = (_a = instance.keys[PONId]) === null || _a === void 0 ? void 0 : _a[fieldName]) === null || _b === void 0 ? void 0 : _b.data;
+                const wdek = (_c = (_b = instance.keys[PONId]) === null || _b === void 0 ? void 0 : _b[fieldName]) === null || _c === void 0 ? void 0 : _c.data;
                 if (!wdek)
                     return [fileNId, undefined];
-                const decryptedDataUrl = yield decryptFile(realB64, urnOrEncrypted, applicationDecryptor, wdek);
+                const decryptedDataUrl = yield decryptFile(realDataUrl, urnOrEncrypted, applicationDecryptor, wdek);
                 return [fileNId, [decryptedDataUrl, getFileExtn(decryptedDataUrl)]];
             }
-            return [fileNId, [realB64, getFileExtn(realB64)]];
+            return [fileNId, [realDataUrl, getFileExtn(realDataUrl)]];
         })));
-        return Object.fromEntries(filesBase64.filter((file) => { var _a; return !!file[1] && ((_a = file[1][0]) === null || _a === void 0 ? void 0 : _a.includes(",")); }));
+        const allDataUrls = Object.fromEntries(filesBase64.filter((file) => { var _a; return !!file[1] && ((_a = file[1][0]) === null || _a === void 0 ? void 0 : _a.includes(",")); }));
+        // for all videos, also store a static frame from the video, since we can't embedded a video into the PDF
+        for (const nId in allDataUrls) {
+            const [dataUrl, fileExtn] = allDataUrls[nId];
+            const isVideo = (_a = mime_types_1.types[fileExtn]) === null || _a === void 0 ? void 0 : _a.startsWith("video/");
+            if (isVideo) {
+                const imageDataUrl = yield (0, videoToImage_1.videoToImage)(apiToken, envConfig, dataUrl);
+                allDataUrls[`${nId}_videoFrame`] = [
+                    imageDataUrl,
+                    getFileExtn(imageDataUrl),
+                ];
+            }
+        }
+        return allDataUrls;
     });
 }
 exports.getFiles = getFiles;

package/dist/api/signIn.js

@@ -16,22 +16,22 @@ const core_1 = require("@raytio/core");
 function signInWithPasswordMigration(username, password) {
     return __awaiter(this, void 0, void 0, function* () {
         try {
-            const userObj = yield auth_1.Auth.signIn(username, password);
-            return userObj;
+            const userObject = yield auth_1.Auth.signIn(username, password);
+            return userObject;
         }
         catch (_a) {
             // if the login fails, try again with their hashed password.
             // if it's successful the second time, we quietly change their password.
             const hashedPassword = yield (0, core_1.hashPassword)(password);
-            const userObj = yield auth_1.Auth.signIn(username, hashedPassword);
+            const userObject = yield auth_1.Auth.signIn(username, hashedPassword);
             // the login was successful. So we need to migrate their account.
             // No changes to the maxcryptor, purely to cognito.
             // we can only migrate their password if there are no login challenges
-            if (!userObj.challengeName) {
+            if (!userObject.challengeName) {
                 console.log("Migrating credentials...");
-                yield auth_1.Auth.changePassword(userObj, hashedPassword, password);
+                yield auth_1.Auth.changePassword(userObject, hashedPassword, password);
             }
-            return userObj;
+            return userObject;
         }
     });
 }
@@ -43,8 +43,8 @@ function signIn(CONFIG, envConfig) {
             userPoolId: envConfig.cognito_user_pool_id,
             userPoolWebClientId: envConfig.cognito_web_client_id,
         });
-        const userObj = yield signInWithPasswordMigration(CONFIG.RAYTIO_USERNAME, CONFIG.RAYTIO_PASSWORD);
-        if (userObj.challengeName === "SOFTWARE_TOKEN_MFA") {
+        const userObject = yield signInWithPasswordMigration(CONFIG.RAYTIO_USERNAME, CONFIG.RAYTIO_PASSWORD);
+        if (userObject.challengeName === "SOFTWARE_TOKEN_MFA") {
             throw new Error(`The configured account (${CONFIG.RAYTIO_USERNAME}) has two factor authentication enabled. You must disable 2FA or use a different account`);
         }
         const user = yield auth_1.Auth.currentAuthenticatedUser();

package/dist/api/uploadToObjectStore.d.ts

@@ -0,0 +1,5 @@
+import { EnvConfig } from "./fetchEnvConfig";
+export declare function uploadToObjectStore(apiToken: string, envConfig: EnvConfig, dataUrl: string, expiryDate?: Date): Promise<{
+    objectStoreId: string;
+    retrievalUrl: string;
+}>;

package/dist/api/uploadToObjectStore.js

@@ -0,0 +1,42 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uploadToObjectStore = void 0;
+const authedFetch_1 = require("./authedFetch");
+//
+// this file is mostly copy-pasted from the client repo. If you make
+// a change here, consider making the same change in the client.
+//
+function uploadToObjectStore(apiToken, envConfig, dataUrl, expiryDate) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const mimeType = dataUrl.split(";")[0].split(":")[1];
+        const base64 = dataUrl.split(",")[1];
+        // eslint-disable-next-line unicorn/prefer-code-point -- deliberate, this will only ever be ASCII
+        const arrayBuffer = Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));
+        // this is a weird API that returns a double stringified string
+        const temporaryUrl = yield (0, authedFetch_1.authedFetch)(apiToken, `${envConfig.api_url}/org/v1/object/url${expiryDate ? `?expires=${+expiryDate}` : ""}`);
+        const { status, statusText } = yield fetch(temporaryUrl, {
+            method: "PUT",
+            body: arrayBuffer,
+            headers: { "Content-Type": mimeType },
+        });
+        if (status !== 200) {
+            throw new Error(`Status ${status} from object store: ${statusText}`);
+        }
+        // the v4 API doesn't return the ID
+        const { pathname, origin } = new URL(temporaryUrl);
+        return {
+            objectStoreId: pathname.slice(1),
+            retrievalUrl: origin + pathname,
+        };
+    });
+}
+exports.uploadToObjectStore = uploadToObjectStore;

package/dist/api/videoToImage.d.ts

@@ -0,0 +1,3 @@
+import { EnvConfig } from "./fetchEnvConfig";
+/** Use the extractor API to get the middle frame from a video */
+export declare function videoToImage(apiToken: string, envConfig: EnvConfig, videoDataUrl: string): Promise<string>;

package/dist/api/videoToImage.js

@@ -0,0 +1,30 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.videoToImage = void 0;
+const authedFetch_1 = require("./authedFetch");
+const uploadToObjectStore_1 = require("./uploadToObjectStore");
+/** Use the extractor API to get the middle frame from a video */
+function videoToImage(apiToken, envConfig, videoDataUrl) {
+    return __awaiter(this, void 0, void 0, function* () {
+        // the new API can't handle big dataUrls, so we need to store the data in
+        // the object store first...
+        const in10Mins = new Date();
+        in10Mins.setMinutes(in10Mins.getMinutes() + 10);
+        const { retrievalUrl: videoUrl } = yield (0, uploadToObjectStore_1.uploadToObjectStore)(apiToken, envConfig, videoDataUrl, in10Mins);
+        const extractedImageBase64 = yield (0, authedFetch_1.authedFetch)(apiToken, `${envConfig.api_url}/face-detect/v1/image-extract-single`, 
+        // note: inspite of being called "video_urn", the new API actually expects a url, not a urn...
+        { method: "POST", body: JSON.stringify({ video_urn: videoUrl }) });
+        // annoyingly the new API doesn't return the data URL prefix, so we have to hardcode it here
+        return `data:image/jpeg;base64,${extractedImageBase64}`;
+    });
+}
+exports.videoToImage = videoToImage;

package/dist/helpers/formatOutput.js

@@ -29,36 +29,37 @@ const byPriority = (schema) => ([a], [b]) => {
 };
 function formatOutput(profileObjects, allSchemas, realVers, apiToken, envConfig) {
     return __awaiter(this, void 0, void 0, function* () {
-        const PODetails = profileObjects.reduce((acPromise, PO) => __awaiter(this, void 0, void 0, function* () {
+        const PODetails = profileObjects.reduce((accumulatorPromiseOuter, PO) => __awaiter(this, void 0, void 0, function* () {
             var _a;
-            const ac = yield acPromise;
+            const accumulatorOuter = yield accumulatorPromiseOuter;
             const schemaName = (0, core_1.findSchemaLabel)(PO.labels);
             const schema = allSchemas.find((x) => x.name === schemaName);
             if (!schema)
                 throw new Error(`${schema} is missing!`);
-            const verDetails = (0, core_1.getPOVerification)({ PO, schema, realVers });
-            const realProps = (0, ramda_1.omit)(constants_1.FIELDS_TO_REMOVE, PO.properties);
+            const versionDetails = (0, core_1.getPOVerification)({ PO, schema, realVers });
+            const realProperties = (0, ramda_1.omit)(constants_1.FIELDS_TO_REMOVE, PO.properties);
             (0, types_2.assertSafeProperty)(schemaName);
-            const existing = ac[schemaName] || [];
-            const poProperties = Object.entries(realProps).sort(byPriority(schema));
-            const reducedProperties = yield poProperties.reduce((acc, [key, value]) => __awaiter(this, void 0, void 0, function* () {
+            const existing = accumulatorOuter[schemaName] || [];
+            const poProperties = Object.entries(realProperties).sort(byPriority(schema));
+            const reducedProperties = yield poProperties.reduce((accumulatorPromiseInner, [key, value]) => __awaiter(this, void 0, void 0, function* () {
                 var _b, _c;
-                const accP = yield acc;
+                const accumulatorInner = yield accumulatorPromiseInner;
                 (0, types_2.assertSafeProperty)(key);
                 const prettyValue = typeof value === "string"
                     ? yield (0, lookup_1.maybeGetLookupValue)(schema, key, value, apiToken)
                     : undefined;
-                const obj = {
+                const POInfo = {
                     title: ((_c = (_b = schema.properties) === null || _b === void 0 ? void 0 : _b[key]) === null || _c === void 0 ? void 0 : _c.title) || key,
                     value,
-                    verification: verDetails.fieldVerifications[key] || types_1.FieldVerification.NotVerified,
+                    verification: versionDetails.fieldVerifications[key] ||
+                        types_1.FieldVerification.NotVerified,
                 };
                 if (prettyValue)
-                    obj.formatted_value = prettyValue;
-                return Object.assign(Object.assign({}, accP), { [key]: obj });
+                    POInfo.formatted_value = prettyValue;
+                return Object.assign(Object.assign({}, accumulatorInner), { [key]: POInfo });
             }), Promise.resolve({}));
             const thisPO = {
-                $verification_details: yield (0, api_1.resolveVerificationDetails)(verDetails.details.verifiers, envConfig),
+                $verification_details: yield (0, api_1.resolveVerificationDetails)(versionDetails.details.verifiers, envConfig),
                 $shouldBeVerifiedFields: (_a = schema.verified_fields) === null || _a === void 0 ? void 0 : _a.map((x) => typeof x === "string" ? x : x.field),
                 $nId: PO.n_id,
                 $schemaName: schemaName,
@@ -66,25 +67,25 @@ function formatOutput(profileObjects, allSchemas, realVers, apiToken, envConfig)
                 $properties: reducedProperties,
                 $badges: {
                     verified: {
-                        code: verDetails.status,
-                        statusText: constants_1.PO_VER_TEXT_MAP[verDetails.status],
+                        code: versionDetails.status,
+                        statusText: constants_1.PO_VER_TEXT_MAP[versionDetails.status],
                     },
                     safeHarbour: schemaName === constants_1.SCHEMA.PERSON
-                        ? (({ isSafe }) => ({
-                            code: isSafe,
-                            statusText: isSafe
-                                ? (0, locales_1.$$)("POVerificationBadge.safe-harbour-yes")
-                                : (0, locales_1.$$)("POVerificationBadge.safe-harbour-no"),
-                        }))(yield (0, core_1.calcSafeHarbourScore)({
+                        ? yield (0, core_1.calcSafeHarbourScore)({
                             person: PO,
                             getSchema: (name) => __awaiter(this, void 0, void 0, function* () { return allSchemas.find((x) => x.name === name); }),
                             profileObjects,
                             realVers,
+                        }).then(({ isSafe }) => ({
+                            code: isSafe,
+                            statusText: isSafe
+                                ? (0, locales_1.$$)("POVerificationBadge.safe-harbour-yes")
+                                : (0, locales_1.$$)("POVerificationBadge.safe-harbour-no"),
                         }))
                         : undefined,
                 },
             };
-            return Object.assign(Object.assign({}, ac), { [schemaName]: [...existing, thisPO] });
+            return Object.assign(Object.assign({}, accumulatorOuter), { [schemaName]: [...existing, thisPO] });
         }), Promise.resolve({}));
         return PODetails;
     });

package/dist/helpers/json2csv.d.ts

@@ -1,2 +1,2 @@
-export declare const flattenObj: (obj: Record<string, any>) => Record<string, any>;
+export declare const flattenObject: (rootObject: Record<string, unknown>) => Record<string, never>;
 export declare function deepJsonToCsv(json: Record<string, unknown>): string;

package/dist/helpers/json2csv.js

@@ -1,24 +1,24 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.deepJsonToCsv = exports.flattenObj = void 0;
+exports.deepJsonToCsv = exports.flattenObject = void 0;
 const ramda_1 = require("ramda");
 // copied from raytio-client
-const flattenObj = (obj) => {
-    const go = (obj_) => (0, ramda_1.chain)(([k, v]) => {
+const flattenObject = (rootObject) => {
+    const go = (object) => (0, ramda_1.chain)(([k, v]) => {
         if ((0, ramda_1.type)(v) === "Object" || (0, ramda_1.type)(v) === "Array") {
             return (0, ramda_1.map)(([k_, v_]) => [`${k}.${k_}`, v_], go(v));
         }
         return [[k, v]];
-    }, (0, ramda_1.toPairs)(obj_));
-    return (0, ramda_1.fromPairs)(go(obj));
+    }, (0, ramda_1.toPairs)(object));
+    return (0, ramda_1.fromPairs)(go(rootObject));
 };
-exports.flattenObj = flattenObj;
+exports.flattenObject = flattenObject;
+const toCsvRow = (row) => row
+    .map((field) => typeof field === "string" ? `"${field.replaceAll('"', '""')}"` : field)
+    .join(",");
 function deepJsonToCsv(json) {
-    const flatJson = (0, exports.flattenObj)(json);
+    const flatJson = (0, exports.flattenObject)(json);
     const [headerRow, values] = (0, ramda_1.transpose)(Object.entries(flatJson));
-    const toCsvRow = (row) => row
-        .map((field) => typeof field === "string" ? `"${field.replace(/"/g, '""')}"` : field)
-        .join(",");
     return `${toCsvRow(headerRow)}\n${toCsvRow(values)}`;
 }
 exports.deepJsonToCsv = deepJsonToCsv;

package/dist/helpers/setupMaxcryptor.js

@@ -13,15 +13,15 @@ exports.setupMaxcryptor = void 0;
 const maxcryptor_1 = require("@raytio/maxcryptor");
 const ramda_1 = require("ramda");
 const constants_1 = require("../constants");
-const isMaxcryptorAttr = (name) => name in constants_1.ATTRIBUTE_MAP;
+const isMaxcryptorAttribute = (name) => name in constants_1.ATTRIBUTE_MAP;
 function setupMaxcryptor(CONFIG, cognitoAttributes) {
     return __awaiter(this, void 0, void 0, function* () {
-        const userDoc = cognitoAttributes.reduce((acc, { Name, Value }) => {
-            if (!isMaxcryptorAttr(Name))
-                return acc;
-            return (0, ramda_1.assocPath)(constants_1.ATTRIBUTE_MAP[Name], JSON.parse(Value), acc);
+        const userDocument = cognitoAttributes.reduce((accumulator, { Name, Value }) => {
+            if (!isMaxcryptorAttribute(Name))
+                return accumulator;
+            return (0, ramda_1.assocPath)(constants_1.ATTRIBUTE_MAP[Name], JSON.parse(Value), accumulator);
         }, {});
-        const { encryptor: maxcryptor } = yield (0, maxcryptor_1.encryptorFromExistingUser)(userDoc, CONFIG.RAYTIO_PASSWORD);
+        const { encryptor: maxcryptor } = yield (0, maxcryptor_1.encryptorFromExistingUser)(userDocument, CONFIG.RAYTIO_PASSWORD);
         return maxcryptor;
     });
 }

package/dist/helpers/splitPOAndVers.js

@@ -3,9 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.splitPOAndVers = void 0;
 const core_1 = require("@raytio/core");
 const constants_1 = require("../constants");
-const splitPOAndVers = (list) => list.reduce((ac, PO) => {
-    const isVer = (0, core_1.findSchemaLabel)(PO.labels) === constants_1.SCHEMA.VERIFICATION;
-    ac[+isVer].push(PO);
-    return ac;
+const splitPOAndVers = (list) => list.reduce((accumulator, PO) => {
+    const isVerification = (0, core_1.findSchemaLabel)(PO.labels) === constants_1.SCHEMA.VERIFICATION;
+    // move to the left or right array depending on whther +isVerification is 0 or 1
+    accumulator[+isVerification].push(PO);
+    return accumulator;
 }, [[], []]);
 exports.splitPOAndVers = splitPOAndVers;

package/dist/locales/index.js

@@ -10,13 +10,13 @@ const isValidLocale = (lang) => lang in locales;
 exports.isValidLocale = isValidLocale;
 const $$ = (key, variables) => {
     const strings = locales[global.lang || "en"];
-    const replaceWithVariable = (_, varName) => {
-        const value = variables === null || variables === void 0 ? void 0 : variables[varName];
-        if (typeof value === "undefined") {
-            throw new Error(`[i18n] variable '${varName}' not defined`);
+    const replaceWithVariable = (_, variableName) => {
+        const value = variables === null || variables === void 0 ? void 0 : variables[variableName];
+        if (value === undefined) {
+            throw new TypeError(`[i18n] variable '${variableName}' not defined`);
         }
         return `${value}`;
     };
-    return strings[key].replace(/{([^}]+)}/g, replaceWithVariable);
+    return strings[key].replaceAll(/{([^}]+)}/g, replaceWithVariable);
 };
 exports.$$ = $$;

package/dist/pdf/components/Images.js

@@ -10,7 +10,8 @@ const helpers_1 = require("../../helpers");
 const Images = ({ nIds, files, }) => {
     return (jsx_pdf_1.default.createElement(jsx_pdf_1.default.Fragment, null, nIds.map((nId) => {
         var _a;
-        const file = (_a = files[nId]) === null || _a === void 0 ? void 0 : _a[0];
+        // for videos, prefer the static frame over the original video
+        const file = (_a = (files[`${nId}_videoFrame`] || files[nId])) === null || _a === void 0 ? void 0 : _a[0];
         if (file)
             (0, helpers_1.assertSafeProperty)(file);
         return file ? (jsx_pdf_1.default.createElement("image", { src: file, width: 300 })) : (jsx_pdf_1.default.createElement("text", null, (0, locales_1.$$)("Images.file-not-found")));

package/dist/pdf/components/Report.js

@@ -4,8 +4,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Report = void 0;
+const node_crypto_1 = require("node:crypto");
 const jsx_pdf_1 = __importDefault(require("jsx-pdf"));
-const crypto_1 = require("crypto");
 const core_1 = require("@raytio/core");
 const locales_1 = require("../../locales");
 const POVerificationBadge_1 = require("./POVerificationBadge");
@@ -21,7 +21,7 @@ const constants_2 = require("../../constants");
 const version_1 = require("../../public-methods/version");
 const Report = ({ data, files, config, aId, clientUrl, envConfig, }) => {
     // The PDF is read only; there's no reason why anyone would ever need to unlock it.
-    const randomToken = (0, crypto_1.randomBytes)(32).toString("base64");
+    const randomToken = (0, node_crypto_1.randomBytes)(32).toString("base64");
     const schemas = Object.values(data.profile_objects).sort(
     // sort it so that the person schema comes first
     (a, b) => {

package/dist/pdf/helpers/general.js

@@ -1,17 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatDate = exports.verifyColour = exports.loadAsset = exports.asset = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 const types_1 = require("@raytio/types");
-const fs_1 = require("fs");
-const path_1 = require("path");
 const asset = (name) => {
-    if (name.match(/[^A-Za-z\-_.]/) || name.includes("..")) {
+    if (/[^.A-Z_a-z-]/.test(name) || name.includes("..")) {
         throw new Error("Invalid asset name");
     }
-    return (0, path_1.join)(__dirname, "../../../assets/", name);
+    return (0, node_path_1.join)(__dirname, "../../../assets/", name);
 };
 exports.asset = asset;
-const loadAsset = (name) => (0, fs_1.readFileSync)((0, exports.asset)(name), { encoding: "utf-8" });
+const loadAsset = (name) => (0, node_fs_1.readFileSync)((0, exports.asset)(name), { encoding: "utf8" });
 exports.loadAsset = loadAsset;
 const verifyColour = (x) => {
     if (x === types_1.FieldVerification.Verified)

package/dist/public-methods/generatePDF.js

@@ -13,10 +13,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generatePDF = exports.generatePdfJson = void 0;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 const pdfmake_1 = __importDefault(require("pdfmake"));
 const jsx_pdf_1 = __importDefault(require("jsx-pdf"));
-const fs_1 = require("fs");
-const path_1 = require("path");
 const locales_1 = require("../locales");
 const Report_1 = require("../pdf/components/Report");
 const style_1 = require("../pdf/style");
@@ -24,15 +24,16 @@ function generatePdfJson(data, DATE_FORMAT, TIMEZONE) {
     return jsx_pdf_1.default.renderPdf(jsx_pdf_1.default.createElement(Report_1.Report, { data: data.json, files: data.files, aId: data.a_id, clientUrl: data.client_url, envConfig: data.envConfig, config: { DATE_FORMAT, TIMEZONE } }));
 }
 exports.generatePdfJson = generatePdfJson;
-const generatePDF = () => (data) => __awaiter(void 0, void 0, void 0, function* () {
+const generatePDF = () => 
+// eslint-disable-next-line unicorn/consistent-function-scoping -- deliberately to future proof the SDK for options
+(data) => __awaiter(void 0, void 0, void 0, function* () {
     console.log("Generating PDF Report...");
-    const { DATE_FORMAT = "en-nz", TIMEZONE = "Pacific/Auckland" } = process.env;
+    const { DATE_FORMAT = "en-nz", TIMEZONE = "Pacific/Auckland", PDF_LANGUAGE: customLang, } = process.env;
     if (data.envConfig.logo_url) {
         // there is a white labelling URL, so fetch it and write it to disk, overriding the default logo
         const arrayBuf = yield fetch(data.envConfig.logo_url).then((r) => r.arrayBuffer());
-        yield fs_1.promises.writeFile((0, path_1.join)(__dirname, "../../assets/custom-logo.png"), Buffer.from(arrayBuf));
+        yield node_fs_1.promises.writeFile((0, node_path_1.join)(__dirname, "../../assets/custom-logo.png"), Buffer.from(arrayBuf));
     }
-    const customLang = process.env.PDF_LANGUAGE;
     if (customLang) {
         if ((0, locales_1.isValidLocale)(customLang)) {
             global.lang = customLang;
@@ -43,17 +44,17 @@ const generatePDF = () => (data) => __awaiter(void 0, void 0, void 0, function*
     }
     return new Promise((resolve) => {
         const printer = new pdfmake_1.default(style_1.fonts);
-        const pdfDoc = printer.createPdfKitDocument(generatePdfJson(data, DATE_FORMAT, TIMEZONE));
+        const pdfDocument = printer.createPdfKitDocument(generatePdfJson(data, DATE_FORMAT, TIMEZONE));
         const chunks = [];
-        pdfDoc.on("data", (chunk) => chunks.push(chunk));
-        pdfDoc.on("end", () => {
+        pdfDocument.on("data", (chunk) => chunks.push(chunk));
+        pdfDocument.on("end", () => {
             const final = Buffer.concat(chunks);
             const dataUrl = `data:application/pdf;base64,${final.toString("base64")}`;
             resolve(Object.assign(Object.assign({}, data), { files: Object.assign(Object.assign({}, data.files), { 
                     // do not change name, will be a breaking change
                     [data.json.i_id]: [dataUrl, "pdf"] }) }));
         });
-        pdfDoc.end();
+        pdfDocument.end();
     });
 });
 exports.generatePDF = generatePDF;

package/dist/public-methods/getAndValidateConfig.js

@@ -9,11 +9,11 @@ const constants_1 = require("../constants");
  * any are missing.
  */
 function getAndValidateConfig() {
-    const CONFIG = constants_1.ENV_VARIABLES.reduce((acc, name) => {
+    const CONFIG = constants_1.ENV_VARIABLES.reduce((accumulator, name) => {
         const value = process.env[name];
         if (!value)
             throw new Error(`${name} is not configured`);
-        return Object.assign(Object.assign({}, acc), { [name]: value });
+        return Object.assign(Object.assign({}, accumulator), { [name]: value });
     }, {});
     return CONFIG;
 }

package/dist/public-methods/processSubmission.js

@@ -100,14 +100,14 @@ function processSubmission({ applicationId, instanceId, verbose, config, _suplie
             // final outputs
             const csv = (0, helpers_1.deepJsonToCsv)(Object.assign(Object.assign({}, instanceDataToPassOn), (0, ramda_1.mapObjIndexed)((POList) => POList.map((flatPO) => {
                 // this is a bit weird, but it prevents an even bigger breaking change for the csv format
-                const obj = Object.entries(flatPO.$properties).flatMap(([fieldName, field]) => [
+                const object = Object.entries(flatPO.$properties).flatMap(([fieldName, field]) => [
                     [fieldName, field.value],
                     [
                         `${fieldName}.verification`,
                         constants_1.FIELD_VER_TEXT_MAP[field.verification],
                     ],
                 ]);
-                return Object.assign(Object.assign({}, flatPO), Object.fromEntries(obj));
+                return Object.assign(Object.assign({}, flatPO), Object.fromEntries(object));
             }), PODetails)));
             log("Success!");
             return {
@@ -119,9 +119,9 @@ function processSubmission({ applicationId, instanceId, verbose, config, _suplie
                 envConfig,
             };
         }
-        catch (err) {
-            log("Processing submission failed:", err);
-            throw err; // pass on error
+        catch (error) {
+            log("Processing submission failed:", error);
+            throw error; // pass on error
         }
     });
 }

package/dist/public-methods/saveToS3Bucket.js

@@ -21,16 +21,18 @@ function upload(s3, { bucketName, fileName, fileContent }) {
                 Bucket: bucketName,
                 Key: fileName,
                 Body: fileContent,
-            }, (err, data) => {
-                if (err)
-                    return reject(err);
+            }, (error, data) => {
+                if (error)
+                    return reject(error);
                 console.log(`Uploaded ${data.Location}`);
                 return resolve(data);
             });
         });
     });
 }
-const saveToS3Bucket = () => (input) => __awaiter(void 0, void 0, void 0, function* () {
+const saveToS3Bucket = () => 
+// eslint-disable-next-line unicorn/consistent-function-scoping -- deliberately to future proof the SDK for options
+(input) => __awaiter(void 0, void 0, void 0, function* () {
     console.log("Uploading data to S3...");
     const bucketName = process.env.S3_BUCKET;
     if (!bucketName)

package/dist/public-methods/version.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.version = exports.packageDotJson = void 0;
-const fs_1 = require("fs");
-const path_1 = require("path");
-exports.packageDotJson = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(__dirname, "../../package.json"), "utf8"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.packageDotJson = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(__dirname, "../../package.json"), "utf8"));
 exports.version = Object.entries({
     LANG: process.env.PDF_LANGUAGE || "default",
     N: process.version.slice(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@raytio/decrypt-helper",
-  "version": "6.0.0",
+  "version": "6.1.1",
   "author": "Raytio",
   "description": "A helper to decrypt data shared by Raytio users",
   "main": "dist",
@@ -34,24 +34,24 @@
   },
   "devDependencies": {
     "@raytio/react-intl-manager": "^6.3.1",
-    "@types/jest": "^29.5.1",
+    "@types/jest": "^29.5.2",
     "@types/jest-image-snapshot": "^6.1.0",
     "@types/jsx-pdf": "^2.2.2",
     "@types/mime-types": "^2.1.1",
-    "@types/node": "^18.15.12",
+    "@types/node": "^18.16.18",
     "@types/pdfmake": "^0.2.2",
-    "@types/ramda": "^0.29.0",
+    "@types/ramda": "^0.29.2",
     "babel-preset-react-app": "^10.0.1",
-    "dotenv": "^16.0.3",
-    "eslint": "^8.38.0",
-    "eslint-config-kyle": "^11.7.0",
+    "dotenv": "^16.3.1",
+    "eslint": "^8.43.0",
+    "eslint-config-kyle": "^11.14.2",
     "jest": "^29.5.0",
     "jest-image-snapshot": "^6.1.0",
     "jest-junit": "^16.0.0",
     "pdf-to-img": "^2.1.1",
     "ts-jest": "^29.1.0",
     "ts-node": "^10.9.1",
-    "typescript": "^5.0.4"
+    "typescript": "^5.1.3"
   },
   "eslintConfig": {
     "extends": "kyle",
@@ -61,7 +61,16 @@
       "react/react-in-jsx-scope": 0,
       "react/style-prop-object": 0,
       "react/no-unknown-property": 0,
-      "@typescript-eslint/no-non-null-assertion": 0,
+      "unicorn/prevent-abbreviations": [
+        1,
+        {
+          "replacements": {
+            "i": false,
+            "env": false,
+            "props": false
+          }
+        }
+      ],
       "@typescript-eslint/no-unused-vars": [
         2,
         {