@smartspectra/node-sdk 3.3.0-rc.6 → 3.3.0-rc.7

package/README.md

@@ -60,6 +60,11 @@ thread-safe trampolines.
 | Node.js | >= 20 (Node 24 LTS recommended) |
 | Electron (optional) | >= 28 |
 
+You also need an API key from
+[physiology.presagetech.com](https://physiology.presagetech.com/auth/login). An AI assistant
+connected to the [SmartSpectra MCP Server](../docs/mcp-server.md) can fetch it from your account
+for you.
+
 The native runtime ships in per-platform npm packages pulled in automatically
 as dependencies — no install script and no system libraries to install.
 

package/js/constants.js

@@ -60,6 +60,7 @@ const ValidationCode = Object.freeze({
     kFaceTooFar:         14,
     kFaceTooHigh:        15,
     kFaceTooLow:         16,
+    kFaceNotForward:       17,
 });
 
 const SmartSpectraErrorCode = Object.freeze({

package/js/index.d.ts

@@ -58,6 +58,7 @@ export declare const ValidationCode: {
     readonly kFaceTooFar:         14;
     readonly kFaceTooHigh:        15;
     readonly kFaceTooLow:         16;
+    readonly kFaceNotForward:       17;
 };
 export type ValidationCodeValue = typeof ValidationCode[keyof typeof ValidationCode];
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartspectra/node-sdk",
-  "version": "3.3.0-rc.6",
+  "version": "3.3.0-rc.7",
   "description": "Node.js (Electron) FFI binding for SmartSpectra vitals measurement",
   "author": "Presage Technologies, Inc.",
   "license": "SEE LICENSE IN LICENSE",
@@ -40,7 +40,7 @@
   "scripts": {
     "prepare": "node scripts/gen-proto.cjs",
     "build:proto": "node scripts/gen-proto.cjs",
-    "test": "node test/log-level-pin.js && node test/renderer-timestamp.js && node test/smoke.js",
+    "test": "node --test test/log-level-pin.js test/renderer-timestamp.js test/smoke.js",
     "test:models-allowlist": "node test/models-allowlist.js"
   },
   "keywords": [
@@ -69,18 +69,18 @@
   "_nativeRuntime_doc": "Per-platform native packages (@smartspectra/node-sdk-<plat>-<arch>) are injected into dependencies at publish time (absent here so source installs don't fetch them). Why hard deps, not optionalDependencies: see js/resolve-native.js.",
   "dependencies": {
     "koffi": "^2.10.0",
-    "protobufjs": "^7.5.0",
-    "@smartspectra/node-sdk-linux-x64": "3.3.0-rc.6",
-    "@smartspectra/node-sdk-linux-arm64": "3.3.0-rc.6",
-    "@smartspectra/node-sdk-darwin-arm64": "3.3.0-rc.6",
-    "@smartspectra/node-sdk-win32-x64": "3.3.0-rc.6"
+    "protobufjs": "^7.6.5",
+    "@smartspectra/node-sdk-linux-x64": "3.3.0-rc.7",
+    "@smartspectra/node-sdk-linux-arm64": "3.3.0-rc.7",
+    "@smartspectra/node-sdk-darwin-arm64": "3.3.0-rc.7",
+    "@smartspectra/node-sdk-win32-x64": "3.3.0-rc.7"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",
     "protobufjs-cli": "^1.1.3"
   },
-  "_overrides_doc": "tmp is pulled in transitively (protobufjs-cli → tmp) as a build-only devDependency; it is never a runtime dependency and is not shipped to consumers (the published tarball ships js/ + prebuilds only, no node_modules). Pinned to an exact version (not a >= range) to clear GHSA-ph9p-34f9-6g65 (path traversal, affects tmp <0.2.6) AND to keep installs deterministic — an open range would let a future install pull a brand-new, not-yet-vetted release. Bump deliberately. Drop this once protobufjs-cli ships a release whose tmp range is already >=0.2.6.",
+  "_overrides_doc": "tmp is pulled in transitively (protobufjs-cli → tmp) as a build-only devDependency; it is never a runtime dependency and is not shipped to consumers (the published tarball ships js/ + prebuilds only, no node_modules). Pinned to an exact version (not a >= range) to clear GHSA-ph9p-34f9-6g65 (path traversal, affects tmp <0.2.6) and GHSA-7c78-jf6q-g5cm (type-confusion bypass of the 0.2.6 _assertPath guard, affects tmp >=0.2.6) AND to keep installs deterministic — an open range would let a future install pull a brand-new, not-yet-vetted release. Bump deliberately. Drop this once protobufjs-cli ships a release whose tmp range is already >=0.2.7.",
   "overrides": {
-    "tmp": "0.2.6"
+    "tmp": "0.2.7"
   }
 }