@smileid/usesmileid 12.0.0-beta01 → 12.0.1

package/dist/data/dsl/builder/retry_config_builder.js

@@ -3,22 +3,37 @@ export { RetryStrategy };
 /**
  * DSL builder for request retry behaviour.
  *
- * Defaults to exponential backoff with 3 attempts, 1 s initial delay,
- * 32 s ceiling, ±20% jitter. `fixedDelay` is honoured only when
- * `strategy = RetryStrategy.fixed`.
+ * Defaults to no retry. Set `strategy` to opt in, and the remaining fields
+ * then apply: 3 attempts, 1 s initial delay, 32 s ceiling, ±20% jitter.
+ * `fixedDelay` is honoured only when `strategy = RetryStrategy.fixed`.
  */
 export class RetryConfigBuilder {
+    /** Attempts per request including the first; applies once `strategy` opts in. */
     maxAttempts = 3;
-    strategy = RetryStrategy.exponential;
+    /** Backoff strategy between attempts: exponential, fixed, or none. */
+    strategy = RetryStrategy.none;
+    /** Delay before the first retry, in seconds (exponential strategy). */
     initialDelay = 1;
+    /**
+     * Factor by which the delay grows after each attempt (exponential
+     * strategy).
+     */
     multiplier = 2;
+    /**
+     * Upper bound on the delay between attempts, in seconds (exponential
+     * strategy).
+     */
     maxDelay = 32;
-    /** ±20% randomized jitter on the computed delay, in [0, 1]. */
+    /**
+     * Random fraction between 0 and 1 added to each delay to avoid
+     * synchronized retry storms.
+     */
     jitter = 0.2;
+    /** Constant delay between attempts, in seconds (fixed strategy). */
     fixedDelay = 1;
     build() {
         return Object.freeze({
-            maxAttempts: this.maxAttempts,
+            maxAttempts: this.strategy === RetryStrategy.none ? 1 : this.maxAttempts,
             strategy: this.strategy,
             initialDelay: this.initialDelay,
             multiplier: this.multiplier,

package/dist/data/dsl/builder/retry_config_builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"retry_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/retry_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAEd,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAC7B,WAAW,GAAG,CAAC,CAAC;IAChB,QAAQ,GAAkB,aAAa,CAAC,WAAW,CAAC;IACpD,YAAY,GAAG,CAAC,CAAC;IACjB,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,EAAE,CAAC;IACd,+DAA+D;IAC/D,MAAM,GAAG,GAAG,CAAC;IACb,UAAU,GAAG,CAAC,CAAC;IAEf,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"retry_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/retry_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAEd,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAC7B,iFAAiF;IACjF,WAAW,GAAG,CAAC,CAAC;IAEhB,sEAAsE;IACtE,QAAQ,GAAkB,aAAa,CAAC,IAAI,CAAC;IAE7C,uEAAuE;IACvE,YAAY,GAAG,CAAC,CAAC;IAEjB;;;OAGG;IACH,UAAU,GAAG,CAAC,CAAC;IAEf;;;OAGG;IACH,QAAQ,GAAG,EAAE,CAAC;IAEd;;;OAGG;IACH,MAAM,GAAG,GAAG,CAAC;IAEb,oEAAoE;IACpE,UAAU,GAAG,CAAC,CAAC;IAEf,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;YACxE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/dsl/builder/timeout_config_builder.d.ts

@@ -7,9 +7,13 @@ import type { TimeoutConfig } from "../../../core/models/network_config";
  * the end-to-end ceiling for the whole request including retries.
  */
 export declare class TimeoutConfigBuilder {
+    /** Maximum time to establish a connection, in seconds. */
     connect: number;
+    /** Maximum time to wait for response data, in seconds. */
     read: number;
+    /** Maximum time to send request data, in seconds. */
     write: number;
+    /** Maximum total time for the entire request, in seconds. */
     call: number;
     build(): TimeoutConfig;
 }

package/dist/data/dsl/builder/timeout_config_builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"timeout_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,SAAM;IACb,IAAI,SAAM;IACV,KAAK,SAAM;IACX,IAAI,SAAO;IAEX,KAAK,IAAI,aAAa;CAQvB"}
+{"version":3,"file":"timeout_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,0DAA0D;IAC1D,OAAO,SAAM;IAEb,0DAA0D;IAC1D,IAAI,SAAM;IAEV,qDAAqD;IACrD,KAAK,SAAM;IAEX,6DAA6D;IAC7D,IAAI,SAAO;IAEX,KAAK,IAAI,aAAa;CAQvB"}

package/dist/data/dsl/builder/timeout_config_builder.js

@@ -6,9 +6,13 @@
  * the end-to-end ceiling for the whole request including retries.
  */
 export class TimeoutConfigBuilder {
+    /** Maximum time to establish a connection, in seconds. */
     connect = 60;
+    /** Maximum time to wait for response data, in seconds. */
     read = 60;
+    /** Maximum time to send request data, in seconds. */
     write = 60;
+    /** Maximum total time for the entire request, in seconds. */
     call = 120;
     build() {
         return Object.freeze({

package/dist/data/dsl/builder/timeout_config_builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"timeout_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IAC/B,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,GAAG,EAAE,CAAC;IACV,KAAK,GAAG,EAAE,CAAC;IACX,IAAI,GAAG,GAAG,CAAC;IAEX,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"timeout_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IAC/B,0DAA0D;IAC1D,OAAO,GAAG,EAAE,CAAC;IAEb,0DAA0D;IAC1D,IAAI,GAAG,EAAE,CAAC;IAEV,qDAAqD;IACrD,KAAK,GAAG,EAAE,CAAC;IAEX,6DAA6D;IAC7D,IAAI,GAAG,GAAG,CAAC;IAEX,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/dsl/use_smile_id_network_builder.d.ts

@@ -27,10 +27,27 @@ export declare class UseSmileIDNetworkBuilder {
     private _cache?;
     private _retry?;
     private _interceptors?;
+    /**
+     * Configures the job type, authentication token, token-refresh
+     * callback, and partner identity for this flow.
+     */
     config(block: (c: ConfigBuilder) => void): void;
+    /**
+     * Configures per-phase HTTP timeouts — connect, read, write, and
+     * overall call — in seconds.
+     */
     timeouts(block: (t: TimeoutConfigBuilder) => void): void;
+    /** Configures the HTTP response cache (on/off and maximum size). */
     cache(block: (c: CacheConfigBuilder) => void): void;
+    /**
+     * Configures automatic retry of failed requests: strategy, attempt
+     * count, and backoff.
+     */
     retry(block: (r: RetryConfigBuilder) => void): void;
+    /**
+     * Registers additional request/response interceptors, appended to the
+     * SDK's interceptor chain.
+     */
     interceptors(block: (i: InterceptorConfigBuilder) => void): void;
     build(): NetworkConfig;
 }

package/dist/data/dsl/use_smile_id_network_builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use_smile_id_network_builder.d.ts","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;IAChC,OAAO,CAAC,SAAS,CAAC,CAAuB;IACzC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,aAAa,CAAC,CAA2B;IAEjD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAK/C,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI;IAKxD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,IAAI,GAAG,IAAI;IAMhE,KAAK,IAAI,aAAa;CAWvB"}
+{"version":3,"file":"use_smile_id_network_builder.d.ts","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;IAChC,OAAO,CAAC,SAAS,CAAC,CAAuB;IACzC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,aAAa,CAAC,CAA2B;IAEjD;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAK/C;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI;IAKxD,oEAAoE;IACpE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,IAAI,GAAG,IAAI;IAMhE,KAAK,IAAI,aAAa;CAWvB"}

package/dist/data/dsl/use_smile_id_network_builder.js

@@ -26,26 +26,43 @@ export class UseSmileIDNetworkBuilder {
     _cache;
     _retry;
     _interceptors;
+    /**
+     * Configures the job type, authentication token, token-refresh
+     * callback, and partner identity for this flow.
+     */
     config(block) {
         if (!this._config)
             this._config = new ConfigBuilder();
         block(this._config);
     }
+    /**
+     * Configures per-phase HTTP timeouts — connect, read, write, and
+     * overall call — in seconds.
+     */
     timeouts(block) {
         if (!this._timeouts)
             this._timeouts = new TimeoutConfigBuilder();
         block(this._timeouts);
     }
+    /** Configures the HTTP response cache (on/off and maximum size). */
     cache(block) {
         if (!this._cache)
             this._cache = new CacheConfigBuilder();
         block(this._cache);
     }
+    /**
+     * Configures automatic retry of failed requests: strategy, attempt
+     * count, and backoff.
+     */
     retry(block) {
         if (!this._retry)
             this._retry = new RetryConfigBuilder();
         block(this._retry);
     }
+    /**
+     * Registers additional request/response interceptors, appended to the
+     * SDK's interceptor chain.
+     */
     interceptors(block) {
         if (!this._interceptors)
             this._interceptors = new InterceptorConfigBuilder();

package/dist/data/dsl/use_smile_id_network_builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"use_smile_id_network_builder.js","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAC3B,OAAO,CAAiB;IACxB,SAAS,CAAwB;IACjC,MAAM,CAAsB;IAC5B,MAAM,CAAsB;IAC5B,aAAa,CAA4B;IAEjD,MAAM,CAAC,KAAiC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,QAAQ,CAAC,KAAwC;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,KAA4C;QACvD,IAAI,CAAC,IAAI,CAAC,aAAa;YACrB,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"use_smile_id_network_builder.js","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAC3B,OAAO,CAAiB;IACxB,SAAS,CAAwB;IACjC,MAAM,CAAsB;IAC5B,MAAM,CAAsB;IAC5B,aAAa,CAA4B;IAEjD;;;OAGG;IACH,MAAM,CAAC,KAAiC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,KAAwC;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,KAA4C;QACvD,IAAI,CAAC,IAAI,CAAC,aAAa;YACrB,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/factory/networking_factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"networking_factory.d.ts","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,UAAU,EAIX,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EAGrB,aAAa,GAAE,MAAM,MAAoD,GACxE;IACD,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC,CAoHA"}
+{"version":3,"file":"networking_factory.d.ts","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,UAAU,EAIX,MAAM,qBAAqB,CAAC;AAY7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EAGrB,aAAa,GAAE,MAAM,MAAoD,GACxE;IACD,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC,CA+HA"}

package/dist/data/factory/networking_factory.js

@@ -5,6 +5,8 @@ import { SmileIntegrityInterceptor } from "../api/interceptors/smile_integrity_i
 import { TokenRefreshInterceptor } from "../api/interceptors/token_refresh_interceptor";
 import { TokenHolder } from "../api/auth/token_holder";
 import { SmileIDCryptoManager } from "../security/smile_id_crypto_manager";
+import { SecurityPolicy } from "../security/security_policy";
+import { decodeSecurityPolicyBitCode } from "../util/use_smile_id_token_decoder";
 import { Attestation, SigningSecretProvider } from "@smileid/usesmileid_bridge";
 import { MissingPartnerConfigException } from "../../core/exception";
 import { UseSmileIDMetadataFactory } from "../../metadata/use_smile_id_metadata_factory";
@@ -88,6 +90,11 @@ signingSecret = () => SigningSecretProvider.signingSecret()) {
     // TokenRefreshInterceptor writes a refreshed value on a 401 so the
     // next outgoing request automatically picks up the new token.
     const tokenHolder = new TokenHolder(config.config?.token ?? "");
+    // Server-driven security policy for this flow, decoded from the top-level `policy` claim on the
+    // JWT (a sibling of `sdk_config`). Decoding is fail-secure: a malformed token, an absent claim, or an absent
+    // bit-code all resolve to "every behaviour active", so a token without the claim keeps the
+    // pre-policy behaviour rather than dropping security.
+    const securityPolicy = SecurityPolicy.fromBitCode(decodeSecurityPolicyBitCode(config.config?.token ?? ""));
     // 1. Gzip is registered FIRST so it runs LAST on the request path
     //    (innermost / closest to the wire). It stamps `Accept-Encoding:
     //    gzip` so the server can compress responses (axios
@@ -107,7 +114,9 @@ signingSecret = () => SigningSecretProvider.signingSecret()) {
     //    request path — it reads the `smileid-request-mac` header the MAC
     //    interceptor sets and binds the per-request token to it. Per-request
     //    opt-in via `config._useSmileIDAttestation`; pass-through otherwise.
-    const integrityInterceptor = new SmileIntegrityInterceptor();
+    const integrityInterceptor = new SmileIntegrityInterceptor({
+        securityPolicy,
+    });
     integrityInterceptor.attach(client);
     // 4. Request MAC runs after auth (so the `smileid-*` headers + timestamp it
     //    signs are present) and before integrity (which binds to the MAC). The
@@ -116,6 +125,7 @@ signingSecret = () => SigningSecretProvider.signingSecret()) {
     const cryptoManager = new SmileIDCryptoManager(signingSecret());
     const requestMacInterceptor = new SmileRequestMacInterceptor({
         cryptoManager,
+        securityPolicy,
     });
     requestMacInterceptor.attach(client);
     // 5. Auth is registered LAST of these three so it runs FIRST on the request

package/dist/data/factory/networking_factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"networking_factory.js","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAGzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqB;AACrB,8EAA8E;AAC9E,gEAAgE;AAChE,gBAA8B,GAAG,EAAE,CAAC,qBAAqB,CAAC,aAAa,EAAE;IAMzE,4DAA4D;IAC5D,qEAAqE;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IACnD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,8DAA8D;IAC9D,yDAAyD;IACzD,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,gEAAgE;IAChE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElD,iEAAiE;IACjE,6DAA6D;IAC7D,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,UAAU;IACV,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACnC,kEAAkE;IACpE,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAEhE,kEAAkE;IAClE,oEAAoE;IACpE,uDAAuD;IACvD,kCAAkC;IAClC,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpB,mEAAmE;IACnE,6DAA6D;IAC7D,4DAA4D;IAC5D,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,oBAAoB,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC7D,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAC;IAChE,MAAM,qBAAqB,GAAG,IAAI,0BAA0B,CAAC;QAC3D,aAAa;KACd,CAAC,CAAC;IACH,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErC,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IACH,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4DAA4D;IAC5D,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CAAC;QAC1D,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc;KAC9C,CAAC,CAAC;IACH,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvC,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,oCAAoC;IACpC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9C,gEAAgE;YAChE,2DAA2D;YAC3D,8DAA8D;YAC9D,MAAM,OAAO,GAAG,WAAkB,CAAC;YACnC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC"}
+{"version":3,"file":"networking_factory.js","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAGzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqB;AACrB,8EAA8E;AAC9E,gEAAgE;AAChE,gBAA8B,GAAG,EAAE,CAAC,qBAAqB,CAAC,aAAa,EAAE;IAMzE,4DAA4D;IAC5D,qEAAqE;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IACnD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,8DAA8D;IAC9D,yDAAyD;IACzD,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,gEAAgE;IAChE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElD,iEAAiE;IACjE,6DAA6D;IAC7D,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,UAAU;IACV,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACnC,kEAAkE;IACpE,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAEhE,gGAAgG;IAChG,6GAA6G;IAC7G,2FAA2F;IAC3F,sDAAsD;IACtD,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,CAC/C,2BAA2B,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CACxD,CAAC;IAEF,kEAAkE;IAClE,oEAAoE;IACpE,uDAAuD;IACvD,kCAAkC;IAClC,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpB,mEAAmE;IACnE,6DAA6D;IAC7D,4DAA4D;IAC5D,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,oBAAoB,GAAG,IAAI,yBAAyB,CAAC;QACzD,cAAc;KACf,CAAC,CAAC;IACH,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAC;IAChE,MAAM,qBAAqB,GAAG,IAAI,0BAA0B,CAAC;QAC3D,aAAa;QACb,cAAc;KACf,CAAC,CAAC;IACH,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErC,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IACH,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4DAA4D;IAC5D,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CAAC;QAC1D,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc;KAC9C,CAAC,CAAC;IACH,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvC,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,oCAAoC;IACpC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9C,gEAAgE;YAChE,2DAA2D;YAC3D,8DAA8D;YAC9D,MAAM,OAAO,GAAG,WAAkB,CAAC;YACnC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC"}

package/dist/data/repository/use_smile_id_repository_impl.d.ts

@@ -16,6 +16,12 @@ export declare class UseSmileIDRepositoryImpl {
     private readonly _retry;
     constructor(api: SmileIDAPI, retry: RetryConfig);
     submit(request: JobRequest): Promise<UseSmileIDResult<JobSubmissionResponse>>;
+    /**
+     * Pre-flight payload compression entry — extracts the captured image URIs for the job type and
+     * compresses the bundle under the transmission cap (metadata is measured, never modified).
+     * No-op for job types that carry no captured images (Enhanced KYC / BVN).
+     */
+    private _compressPayload;
     private _dispatch;
     /**
      * Translate any caught error into the typed

package/dist/data/repository/use_smile_id_repository_impl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"use_smile_id_repository_impl.d.ts","sourceRoot":"","sources":["../../../src/data/repository/use_smile_id_repository_impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAWjE;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW;IAKzC,MAAM,CACV,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IA8BnD,OAAO,CAAC,SAAS;IAmBjB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;CAGlB"}
+{"version":3,"file":"use_smile_id_repository_impl.d.ts","sourceRoot":"","sources":["../../../src/data/repository/use_smile_id_repository_impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAkCjE;;;;;;;GAOG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;gBAEzB,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW;IAKzC,MAAM,CACV,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IAiDnD;;;;OAIG;YACW,gBAAgB;IA2B9B,OAAO,CAAC,SAAS;IAgCjB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;CAGlB"}

package/dist/data/repository/use_smile_id_repository_impl.js

@@ -4,6 +4,22 @@ import { withRetry } from "../util/retry_util";
 import { InvalidFieldValueException } from "../../core/exception/job_validation_exceptions";
 import { UseSmileIDValidationException } from "../../core/exception/use_smile_id_validation_exception";
 import { mapAxiosError, } from "../../core/exception/use_smile_id_network_exception";
+import { PayloadCompressionRunner, } from "../compression/payload_compression_runner";
+/** Builds the per-image original/final compressed size wire entries, omitting absent/zero sizes. */
+function compressionSizeEntries(sizes) {
+    const entries = [];
+    const push = (name, value) => {
+        if (value !== undefined && value > 0)
+            entries.push({ name, value: String(value) });
+    };
+    push("selfie_original_size", sizes.selfieOriginalMb);
+    push("selfie_final_compressed_size", sizes.selfieFinalMb);
+    push("document_front_original_size", sizes.frontOriginalMb);
+    push("document_front_final_compressed_size", sizes.frontFinalMb);
+    push("document_back_original_size", sizes.backOriginalMb);
+    push("document_back_final_compressed_size", sizes.backFinalMb);
+    return entries;
+}
 /**
  * Concrete repository.
  *
@@ -30,8 +46,26 @@ export class UseSmileIDRepositoryImpl {
                 reason: "BVN submission is not yet supported",
             }));
         }
+        // Pre-flight payload compression — best effort: shrink the captured JPEGs under the Lambda
+        // cap before transmission (runs once, outside the retry loop), but never block submission, so
+        // any compression failure ships the captured images as-is and lets the server validate. The
+        // per-image original + final compressed sizes are stamped onto the metadata for telemetry.
+        let submitted = request;
+        try {
+            const sizes = await this._compressPayload(request);
+            const sizeEntries = sizes ? compressionSizeEntries(sizes) : [];
+            if (sizeEntries.length > 0) {
+                submitted = {
+                    ...request,
+                    metadata: request.metadata.withAdditionalEntries(sizeEntries),
+                };
+            }
+        }
+        catch {
+            // Best-effort: compression is an optimization; submit the captured images as-is on failure.
+        }
         try {
-            const response = await withRetry(this._retry, () => this._dispatch(request));
+            const response = await withRetry(this._retry, (attempt) => this._dispatch(submitted, attempt));
             return success(response);
         }
         catch (error) {
@@ -45,20 +79,60 @@ export class UseSmileIDRepositoryImpl {
             return failure(this._mapError(error));
         }
     }
-    _dispatch(request) {
+    /**
+     * Pre-flight payload compression entry — extracts the captured image URIs for the job type and
+     * compresses the bundle under the transmission cap (metadata is measured, never modified).
+     * No-op for job types that carry no captured images (Enhanced KYC / BVN).
+     */
+    async _compressPayload(request) {
+        const metadataBytes = JSON.stringify(request.metadata.toEntries()).length;
         switch (request.jobType) {
             case JobType.smartSelfieEnrollment:
-                return this._api.smartSelfieEnrollment(request);
             case JobType.smartSelfieAuthentication:
-                return this._api.smartSelfieAuthentication(request);
+            case JobType.biometricKyc:
+                return PayloadCompressionRunner.compress({
+                    selfieImage: request.selfieImage,
+                    livenessImages: request.livenessImages,
+                    metadataBytes,
+                });
+            case JobType.documentVerification:
+            case JobType.enhancedDocumentVerification:
+                return PayloadCompressionRunner.compress({
+                    selfieImage: request.selfieImage,
+                    livenessImages: request.livenessImages,
+                    frontDocument: request.frontDocument,
+                    backDocument: request.backDocument,
+                    metadataBytes,
+                });
+            default:
+                return undefined;
+        }
+    }
+    _dispatch(request, attempt) {
+        // Stamp how many network retries preceded this attempt onto the metadata
+        // (re-evaluated per attempt inside the retry loop). Appended as a flow-state
+        // entry so the already-appended document / config entries are preserved.
+        const stamped = attempt > 0
+            ? {
+                ...request,
+                metadata: request.metadata.withAdditionalEntries([
+                    { name: "network_retries", value: String(attempt) },
+                ]),
+            }
+            : request;
+        switch (stamped.jobType) {
+            case JobType.smartSelfieEnrollment:
+                return this._api.smartSelfieEnrollment(stamped);
+            case JobType.smartSelfieAuthentication:
+                return this._api.smartSelfieAuthentication(stamped);
             case JobType.enhancedKyc:
-                return this._api.enhancedKyc(request);
+                return this._api.enhancedKyc(stamped);
             case JobType.biometricKyc:
-                return this._api.biometricKyc(request);
+                return this._api.biometricKyc(stamped);
             case JobType.documentVerification:
-                return this._api.documentVerification(request);
+                return this._api.documentVerification(stamped);
             case JobType.enhancedDocumentVerification:
-                return this._api.enhancedDocumentVerification(request);
+                return this._api.enhancedDocumentVerification(stamped);
         }
     }
     /**

package/dist/data/repository/use_smile_id_repository_impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"use_smile_id_repository_impl.js","sourceRoot":"","sources":["../../../src/data/repository/use_smile_id_repository_impl.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EACL,aAAa,GAEd,MAAM,qDAAqD,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IAClB,IAAI,CAAa;IACjB,MAAM,CAAc;IAErC,YAAY,GAAe,EAAE,KAAkB;QAC7C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAmB;QAEnB,iEAAiE;QACjE,kEAAkE;QAClE,6DAA6D;QAC7D,UAAU;QACV,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,OAAO,CACZ,IAAI,0BAA0B,CAAC;gBAC7B,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,qCAAqC;aAC9C,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CACjD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;YACF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,iEAAiE;YACjE,oEAAoE;YACpE,uDAAuD;YACvD,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;gBACnD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,SAAS,CACf,OAA6D;QAE7D,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,OAAO,CAAC,qBAAqB;gBAChC,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,OAAO,CAAC,yBAAyB;gBACpC,OAAO,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACtD,KAAK,OAAO,CAAC,WAAW;gBACtB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxC,KAAK,OAAO,CAAC,YAAY;gBACvB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,KAAK,OAAO,CAAC,oBAAoB;gBAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACjD,KAAK,OAAO,CAAC,4BAA4B;gBACvC,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CAAC,KAAc;QAC9B,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"use_smile_id_repository_impl.js","sourceRoot":"","sources":["../../../src/data/repository/use_smile_id_repository_impl.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,wDAAwD,CAAC;AACvG,OAAO,EACL,aAAa,GAEd,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,wBAAwB,GAEzB,MAAM,2CAA2C,CAAC;AAGnD,oGAAoG;AACpG,SAAS,sBAAsB,CAC7B,KAA8B;IAE9B,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAyB,EAAE,EAAE;QACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,IAAI,CAAC,sBAAsB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,CAAC,8BAA8B,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,8BAA8B,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,CAAC,sCAAsC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,6BAA6B,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,qCAAqC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAwB;IAClB,IAAI,CAAa;IACjB,MAAM,CAAc;IAErC,YAAY,GAAe,EAAE,KAAkB;QAC7C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAmB;QAEnB,iEAAiE;QACjE,kEAAkE;QAClE,6DAA6D;QAC7D,UAAU;QACV,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACpC,OAAO,OAAO,CACZ,IAAI,0BAA0B,CAAC;gBAC7B,SAAS,EAAE,SAAS;gBACpB,MAAM,EAAE,qCAAqC;aAC9C,CAAC,CACH,CAAC;QACJ,CAAC;QAED,2FAA2F;QAC3F,8FAA8F;QAC9F,4FAA4F;QAC5F,2FAA2F;QAC3F,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,SAAS,GAAG;oBACV,GAAG,OAAO;oBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,WAAW,CAAC;iBAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4FAA4F;QAC9F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CACxD,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CACnC,CAAC;YACF,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,iEAAiE;YACjE,oEAAoE;YACpE,uDAAuD;YACvD,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;gBACnD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gBAAgB,CAC5B,OAAmB;QAEnB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1E,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,OAAO,CAAC,qBAAqB,CAAC;YACnC,KAAK,OAAO,CAAC,yBAAyB,CAAC;YACvC,KAAK,OAAO,CAAC,YAAY;gBACvB,OAAO,wBAAwB,CAAC,QAAQ,CAAC;oBACvC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,aAAa;iBACd,CAAC,CAAC;YACL,KAAK,OAAO,CAAC,oBAAoB,CAAC;YAClC,KAAK,OAAO,CAAC,4BAA4B;gBACvC,OAAO,wBAAwB,CAAC,QAAQ,CAAC;oBACvC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,aAAa;iBACd,CAAC,CAAC;YACL;gBACE,OAAO,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,SAAS,CACf,OAA6D,EAC7D,OAAe;QAEf,yEAAyE;QACzE,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,OAAO,GACX,OAAO,GAAG,CAAC;YACT,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAC/C,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;iBACpD,CAAC;aACH;YACH,CAAC,CAAC,OAAO,CAAC;QACd,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,KAAK,OAAO,CAAC,qBAAqB;gBAChC,OAAO,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,OAAO,CAAC,yBAAyB;gBACpC,OAAO,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACtD,KAAK,OAAO,CAAC,WAAW;gBACtB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxC,KAAK,OAAO,CAAC,YAAY;gBACvB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,KAAK,OAAO,CAAC,oBAAoB;gBAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACjD,KAAK,OAAO,CAAC,4BAA4B;gBACvC,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,SAAS,CAAC,KAAc;QAC9B,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/data/security/request_canonicalizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request_canonicalizer.d.ts","sourceRoot":"","sources":["../../../src/data/security/request_canonicalizer.ts"],"names":[],"mappings":"AAoDA,eAAO,MAAM,oBAAoB;0BAEpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QACzB,OAAO,GACZ,OAAO,CAAC,UAAU,CAAC;CAGvB,CAAC"}
+{"version":3,"file":"request_canonicalizer.d.ts","sourceRoot":"","sources":["../../../src/data/security/request_canonicalizer.ts"],"names":[],"mappings":"AAqDA,eAAO,MAAM,oBAAoB;0BAEpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QACzB,OAAO,GACZ,OAAO,CAAC,UAAU,CAAC;CAGvB,CAAC"}

package/dist/data/security/request_canonicalizer.js

@@ -1,4 +1,5 @@
 import { base64Encode, utf8Bytes } from "./signing_crypto";
+import { SmileIDCryptoError } from "./smile_id_crypto_error";
 /**
  * Reduces a request to the canonical bytes that get signed: the signed headers
  * as sorted-key JSON, followed by the canonicalised body. Canonicalisation
@@ -62,8 +63,19 @@ async function canonicalBody(body) {
 /** File parts (a `uri`) → Base64 of bytes; JSON fields → parsed; else string with bool coercion. */
 async function partValue(part) {
     if (part.uri != null) {
-        const response = await fetch(part.uri);
-        return base64Encode(new Uint8Array(await response.arrayBuffer()));
+        // Reading a file part can reject — e.g. the captured-image `file://` URI is
+        // unreadable, or the RN runtime rejects a local-file `fetch` when the device
+        // is offline (behaviour differs between the Expo and bare-RN runtimes).
+        // Surface it as a SmileIDCryptoError so the signing interceptor's narrow
+        // catch fails open (ships the request unsigned) instead of letting the
+        // rejection escape and crash the submission flow.
+        try {
+            const response = await fetch(part.uri);
+            return base64Encode(new Uint8Array(await response.arrayBuffer()));
+        }
+        catch (cause) {
+            throw new SmileIDCryptoError(`Failed to read request part "${part.fieldName}" for signing: ${String(cause)}`);
+        }
     }
     const value = part.string ?? "";
     if (JSON_FIELDS.has(part.fieldName)) {

package/dist/data/security/request_canonicalizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"request_canonicalizer.js","sourceRoot":"","sources":["../../../src/data/security/request_canonicalizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE3D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,gBAAgB;IAChB,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,kBAAkB,GACtB,8DAA8D,CAAC;AACjE,MAAM,eAAe,GACnB,sFAAsF,CAAC;AAUzF,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAA+B,CAAC,QAAQ,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,IAAa;QAEb,OAAO,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;CACF,CAAC;AAEF,SAAS,gBAAgB,CAAC,OAA+B;IACvD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC/B,IACE,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;YACrC,IAAI,KAAK,kBAAkB;YAC3B,IAAI,KAAK,mBAAmB,EAC5B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAa;IACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,SAAS,CAAC,IAAkB;IACzC,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CACZ,OAAgC,EAChC,IAAY,EACZ,KAAc;IAEd,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC;SACtC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"request_canonicalizer.js","sourceRoot":"","sources":["../../../src/data/security/request_canonicalizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,gBAAgB;IAChB,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,kBAAkB,GACtB,8DAA8D,CAAC;AACjE,MAAM,eAAe,GACnB,sFAAsF,CAAC;AAUzF,SAAS,cAAc,CAAC,IAAa;IACnC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAA+B,CAAC,QAAQ,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,KAAK,CAAC,YAAY,CAChB,OAA+B,EAC/B,IAAa;QAEb,OAAO,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,CAAC;CACF,CAAC;AAEF,SAAS,gBAAgB,CAAC,OAA+B;IACvD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC/B,IACE,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;YACrC,IAAI,KAAK,kBAAkB;YAC3B,IAAI,KAAK,mBAAmB,EAC5B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAa;IACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,SAAS,CAAC,IAAkB;IACzC,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,4EAA4E;QAC5E,6EAA6E;QAC7E,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,YAAY,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,IAAI,CAAC,SAAS,kBAAkB,MAAM,CAAC,KAAK,CAAC,EAAE,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CACZ,OAAgC,EAChC,IAAY,EACZ,KAAc;IAEd,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtB,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC;QACtB,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,OAAO,CAAC,kBAAkB,EAAE,SAAS,CAAC;SACtC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/data/security/security_policy.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Server-driven security policy decoded from the integer `policy` bit-code carried as a top-level
+ * claim on the SmileID JWT — a sibling of the `sdk_config` claim, not nested inside it (see
+ * `decodeSecurityPolicyBitCode` and `docs/Policy.md`).
+ *
+ * Each bit toggles one SDK security behaviour, so the backend can dial protection up or down per
+ * session without shipping a new SDK build. The bit-code contract — which bit means what — is
+ * documented in `docs/Policy.md`, not here, so the four SDKs share one source of truth.
+ *
+ * **Fail-secure:** an absent (`undefined`) bit-code enables every behaviour, so a token that omits
+ * the claim — or a malformed token that fails to decode — runs with full protection rather than
+ * silently dropping security. This matches the value `undefined` produces in
+ * {@link SecurityPolicy.fromBitCode}.
+ *
+ * **Internal by design:** this class is not exported from the package entrypoint (`src/index.ts`),
+ * so it never becomes part of the partner-facing API; it exists only so the SDK can gate its own
+ * request signing and device attestation.
+ */
+export declare class SecurityPolicy {
+    private static readonly _BIT_PAYLOAD_SIGNING;
+    private static readonly _BIT_PAYLOAD_ENCRYPTION;
+    private static readonly _BIT_ROOTED_DEVICE_CHECK;
+    private static readonly _BIT_PLAY_INTEGRITY_CHECK;
+    private static readonly _ALL_ACTIVE;
+    private readonly _bitCode;
+    private constructor();
+    /**
+     * Decode a `bitCode` into a typed policy. An `undefined` code is fail-secure — every behaviour
+     * is active. For a defined code, behaviour `b` is active when bit `b` is set, least-significant
+     * bit first.
+     */
+    static fromBitCode(bitCode: number | undefined): SecurityPolicy;
+    /** True when the server enabled request-payload HMAC signing for this session. */
+    isPayloadSigningActive(): boolean;
+    /** True when the server enabled request-payload encryption for this session. */
+    isPayloadEncryptionActive(): boolean;
+    /** True when the server enabled the rooted / jailbroken device check for this session. */
+    isRootedDeviceCheckActive(): boolean;
+    /** True when the server enabled device attestation for this session. */
+    isPlayIntegrityCheckActive(): boolean;
+    private _isSet;
+}
+//# sourceMappingURL=security_policy.d.ts.map

package/dist/data/security/security_policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_policy.d.ts","sourceRoot":"","sources":["../../../src/data/security/security_policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAK;IACjD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAK;IACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAK;IACrD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAK;IAGtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAIe;IAElD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc;IAI/D,kFAAkF;IAClF,sBAAsB,IAAI,OAAO;IAIjC,gFAAgF;IAChF,yBAAyB,IAAI,OAAO;IAIpC,0FAA0F;IAC1F,yBAAyB,IAAI,OAAO;IAIpC,wEAAwE;IACxE,0BAA0B,IAAI,OAAO;IAIrC,OAAO,CAAC,MAAM;CAGf"}

package/dist/data/security/security_policy.js

@@ -0,0 +1,61 @@
+/**
+ * Server-driven security policy decoded from the integer `policy` bit-code carried as a top-level
+ * claim on the SmileID JWT — a sibling of the `sdk_config` claim, not nested inside it (see
+ * `decodeSecurityPolicyBitCode` and `docs/Policy.md`).
+ *
+ * Each bit toggles one SDK security behaviour, so the backend can dial protection up or down per
+ * session without shipping a new SDK build. The bit-code contract — which bit means what — is
+ * documented in `docs/Policy.md`, not here, so the four SDKs share one source of truth.
+ *
+ * **Fail-secure:** an absent (`undefined`) bit-code enables every behaviour, so a token that omits
+ * the claim — or a malformed token that fails to decode — runs with full protection rather than
+ * silently dropping security. This matches the value `undefined` produces in
+ * {@link SecurityPolicy.fromBitCode}.
+ *
+ * **Internal by design:** this class is not exported from the package entrypoint (`src/index.ts`),
+ * so it never becomes part of the partner-facing API; it exists only so the SDK can gate its own
+ * request signing and device attestation.
+ */
+export class SecurityPolicy {
+    static _BIT_PAYLOAD_SIGNING = 0;
+    static _BIT_PAYLOAD_ENCRYPTION = 1;
+    static _BIT_ROOTED_DEVICE_CHECK = 2;
+    static _BIT_PLAY_INTEGRITY_CHECK = 3;
+    // Fail-secure default for an absent bit-code: every known behaviour active.
+    static _ALL_ACTIVE = (1 << SecurityPolicy._BIT_PAYLOAD_SIGNING) |
+        (1 << SecurityPolicy._BIT_PAYLOAD_ENCRYPTION) |
+        (1 << SecurityPolicy._BIT_ROOTED_DEVICE_CHECK) |
+        (1 << SecurityPolicy._BIT_PLAY_INTEGRITY_CHECK);
+    _bitCode;
+    constructor(bitCode) {
+        this._bitCode = bitCode;
+    }
+    /**
+     * Decode a `bitCode` into a typed policy. An `undefined` code is fail-secure — every behaviour
+     * is active. For a defined code, behaviour `b` is active when bit `b` is set, least-significant
+     * bit first.
+     */
+    static fromBitCode(bitCode) {
+        return new SecurityPolicy(bitCode ?? SecurityPolicy._ALL_ACTIVE);
+    }
+    /** True when the server enabled request-payload HMAC signing for this session. */
+    isPayloadSigningActive() {
+        return this._isSet(SecurityPolicy._BIT_PAYLOAD_SIGNING);
+    }
+    /** True when the server enabled request-payload encryption for this session. */
+    isPayloadEncryptionActive() {
+        return this._isSet(SecurityPolicy._BIT_PAYLOAD_ENCRYPTION);
+    }
+    /** True when the server enabled the rooted / jailbroken device check for this session. */
+    isRootedDeviceCheckActive() {
+        return this._isSet(SecurityPolicy._BIT_ROOTED_DEVICE_CHECK);
+    }
+    /** True when the server enabled device attestation for this session. */
+    isPlayIntegrityCheckActive() {
+        return this._isSet(SecurityPolicy._BIT_PLAY_INTEGRITY_CHECK);
+    }
+    _isSet(bit) {
+        return ((this._bitCode >> bit) & 1) === 1;
+    }
+}
+//# sourceMappingURL=security_policy.js.map

package/dist/data/security/security_policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security_policy.js","sourceRoot":"","sources":["../../../src/data/security/security_policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAU,oBAAoB,GAAG,CAAC,CAAC;IACzC,MAAM,CAAU,uBAAuB,GAAG,CAAC,CAAC;IAC5C,MAAM,CAAU,wBAAwB,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAU,yBAAyB,GAAG,CAAC,CAAC;IAEtD,4EAA4E;IACpE,MAAM,CAAU,WAAW,GACjC,CAAC,CAAC,IAAI,cAAc,CAAC,oBAAoB,CAAC;QAC1C,CAAC,CAAC,IAAI,cAAc,CAAC,uBAAuB,CAAC;QAC7C,CAAC,CAAC,IAAI,cAAc,CAAC,wBAAwB,CAAC;QAC9C,CAAC,CAAC,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;IAEjC,QAAQ,CAAS;IAElC,YAAoB,OAAe;QACjC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,OAA2B;QAC5C,OAAO,IAAI,cAAc,CAAC,OAAO,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;IACnE,CAAC;IAED,kFAAkF;IAClF,sBAAsB;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC;IAED,gFAAgF;IAChF,yBAAyB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;IAC7D,CAAC;IAED,0FAA0F;IAC1F,yBAAyB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC;IAC9D,CAAC;IAED,wEAAwE;IACxE,0BAA0B;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;IAC/D,CAAC;IAEO,MAAM,CAAC,GAAW;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC"}

package/dist/data/smile_id_urls.d.ts

@@ -5,7 +5,7 @@
  * kept so the production host can diverge without touching call sites.
  */
 export declare const SmileIDUrls: {
-    readonly sandbox: "https://devapi.smileidentity.com/";
+    readonly sandbox: "https://testapi.smileidentity.com/";
     readonly production: "https://api.smileidentity.com/";
     readonly forConfig: (useSandbox: boolean) => string;
 };

package/dist/data/smile_id_urls.js

@@ -5,7 +5,7 @@
  * kept so the production host can diverge without touching call sites.
  */
 export const SmileIDUrls = {
-    sandbox: "https://devapi.smileidentity.com/",
+    sandbox: "https://testapi.smileidentity.com/",
     production: "https://api.smileidentity.com/",
     forConfig(useSandbox) {
         return useSandbox ? this.sandbox : this.production;

package/dist/data/smile_id_urls.js.map

@@ -1 +1 @@
-{"version":3,"file":"smile_id_urls.js","sourceRoot":"","sources":["../../src/data/smile_id_urls.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,OAAO,EAAE,mCAAmC;IAC5C,UAAU,EAAE,gCAAgC;IAC5C,SAAS,CAAC,UAAmB;QAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrD,CAAC;CACO,CAAC"}
+{"version":3,"file":"smile_id_urls.js","sourceRoot":"","sources":["../../src/data/smile_id_urls.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,OAAO,EAAE,oCAAoC;IAC7C,UAAU,EAAE,gCAAgC;IAC5C,SAAS,CAAC,UAAmB;QAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACrD,CAAC;CACO,CAAC"}

package/dist/data/util/retry_util.d.ts

@@ -1,4 +1,4 @@
-import type { RetryConfig } from "../../core/models/network_config";
+import { type RetryConfig } from "../../core/models/network_config";
 /**
  * Retry helper. Retries `block` until success or `maxAttempts`
  * exhausted, with delays driven by the configured strategy. Only
@@ -9,7 +9,7 @@ import type { RetryConfig } from "../../core/models/network_config";
  * the auth interceptor can invalidate its cache. A 503 (server busy)
  * is retried up to `maxAttempts` times with exponential backoff.
  */
-export declare function withRetry<T>(config: RetryConfig, block: () => Promise<T>): Promise<T>;
+export declare function withRetry<T>(config: RetryConfig, block: (attempt: number) => Promise<T>): Promise<T>;
 /**
  * Network-class failure check. Returns `true` for axios errors that
  * indicate transient transport problems (timeout, 5xx, 408, 429) and