@smileid/usesmileid 12.0.0-beta01

package/dist/data/dsl/builder/cache_config_builder.js

@@ -0,0 +1,23 @@
+/**
+ * DSL builder for HTTP response cache settings.
+ *
+ * `maxSize` is in bytes; the default of 50 MB covers typical
+ * verification flows without aggressive trimming.
+ */
+export class CacheConfigBuilder {
+    enabled = true;
+    /** Bytes — default 50 MB. */
+    maxSize = 50 * 1024 * 1024;
+    /**
+     * Multiplier helper: `c.megabytes(50)` evaluates to `50 * 1024 * 1024`
+     * bytes. TypeScript has no number extensions, so this lives as a
+     * builder method.
+     */
+    megabytes(count) {
+        return count * 1024 * 1024;
+    }
+    build() {
+        return Object.freeze({ enabled: this.enabled, maxSize: this.maxSize });
+    }
+}
+//# sourceMappingURL=cache_config_builder.js.map

package/dist/data/dsl/builder/cache_config_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/cache_config_builder.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAC7B,OAAO,GAAG,IAAI,CAAC;IACf,6BAA6B;IAC7B,OAAO,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAE3B;;;;OAIG;IACH,SAAS,CAAC,KAAa;QACrB,OAAO,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;CACF"}

package/dist/data/dsl/builder/config_builder.d.ts

@@ -0,0 +1,77 @@
+import type { JobType } from "../../../core/models/job_type";
+import { LogLevel, type NetworkInnerConfig, type NetworkLoggingConfig, type PartnerConfig } from "../../../core/models/network_config";
+/**
+ * DSL builder for partner identity and per-job environment.
+ *
+ * Set `partnerId` and choose `useSandbox` for the dev API or production.
+ * `callbackUrl` is the partner's webhook endpoint.
+ *
+ * The HTTP auth credential (`token`) and refresh callback
+ * (`onTokenExpired`) live on the parent {@link ConfigBuilder} instead —
+ * authentication is a network-level credential, not part of partner
+ * identity.
+ */
+export declare class PartnerConfigBuilder {
+    partnerId: string;
+    callbackUrl: string;
+    useSandbox: boolean;
+    /**
+     * Optional partner-supplied key/value metadata. Forwarded onto the
+     * `partner_params` JSON multipart form part on Enhanced / Biometric
+     * KYC submissions when set.
+     */
+    partnerParams?: Record<string, string>;
+    build(): PartnerConfig;
+}
+/**
+ * DSL builder for HTTP request/response logging.
+ *
+ * `level` controls verbosity (none / basic / headers / body); the
+ * built-in auth interceptor already redacts sensitive headers
+ * (`SmileID-Token`, `smileid-partner-id`). Partners can extend the
+ * redaction list with their own proxy-injected headers.
+ */
+export declare class LoggingConfigBuilder {
+    enabled: boolean;
+    level: LogLevel;
+    redactHeaders: readonly string[];
+    build(): NetworkLoggingConfig;
+}
+/**
+ * DSL builder for the main network job + auth + partner block.
+ *
+ * Holds `jobType`, the HTTP auth credentials (`token` + `onTokenExpired`),
+ * plus nested `partnerConfig` and `logging` sub-builders. The auth
+ * credential sits at this level — separate from `partnerConfig` which
+ * carries partner identity — because authentication is a network-level
+ * credential, not part of partner identity.
+ *
+ * Sub-builders are constructed lazily on first access so the partner can
+ * omit blocks they don't need.
+ */
+export declare class ConfigBuilder {
+    jobType?: JobType;
+    /**
+     * Short-lived v3 auth token issued by `/v3/token`. The partner
+     * application is responsible for exchanging its API key for a token
+     * before invoking the SDK and supplying the result here. Stamped as
+     * the `smileid-token` HTTP header on every authenticated request.
+     */
+    token: string;
+    /**
+     * Optional async refresh callback invoked when the server responds
+     * with `401 Unauthorized`. The callback receives the token the SDK
+     * was using and returns a fresh token; the SDK then retries the
+     * original request once with the new value. Concurrent 401s collapse
+     * to a single callback invocation via the SDK's shared `TokenHolder`.
+     * If the callback throws or the retry also returns 401, the original
+     * 401 response is surfaced unchanged.
+     */
+    onTokenExpired?: (previousToken: string) => Promise<string>;
+    private _partnerConfig?;
+    private _logging?;
+    partnerConfig(block: (p: PartnerConfigBuilder) => void): void;
+    logging(block: (l: LoggingConfigBuilder) => void): void;
+    build(): NetworkInnerConfig;
+}
+//# sourceMappingURL=config_builder.d.ts.map

package/dist/data/dsl/builder/config_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,QAAQ,EACR,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,aAAa,EACnB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,qBAAa,oBAAoB;IAC/B,SAAS,SAAM;IACf,WAAW,SAAM;IACjB,UAAU,UAAS;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvC,KAAK,IAAI,aAAa;CAUvB;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,UAAQ;IACf,KAAK,EAAE,QAAQ,CAAkB;IACjC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAM;IAEtC,KAAK,IAAI,oBAAoB;CAO9B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,KAAK,SAAM;IAEX;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,OAAO,CAAC,cAAc,CAAC,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,CAAuB;IAExC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI;IAK7D,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI;IAKvD,KAAK,IAAI,kBAAkB;CAa5B"}

package/dist/data/dsl/builder/config_builder.js

@@ -0,0 +1,111 @@
+import { LogLevel, } from "../../../core/models/network_config";
+/**
+ * DSL builder for partner identity and per-job environment.
+ *
+ * Set `partnerId` and choose `useSandbox` for the dev API or production.
+ * `callbackUrl` is the partner's webhook endpoint.
+ *
+ * The HTTP auth credential (`token`) and refresh callback
+ * (`onTokenExpired`) live on the parent {@link ConfigBuilder} instead —
+ * authentication is a network-level credential, not part of partner
+ * identity.
+ */
+export class PartnerConfigBuilder {
+    partnerId = "";
+    callbackUrl = "";
+    useSandbox = false;
+    /**
+     * Optional partner-supplied key/value metadata. Forwarded onto the
+     * `partner_params` JSON multipart form part on Enhanced / Biometric
+     * KYC submissions when set.
+     */
+    partnerParams;
+    build() {
+        return Object.freeze({
+            partnerId: this.partnerId,
+            callbackUrl: this.callbackUrl,
+            useSandbox: this.useSandbox,
+            ...(this.partnerParams !== undefined
+                ? { partnerParams: Object.freeze({ ...this.partnerParams }) }
+                : {}),
+        });
+    }
+}
+/**
+ * DSL builder for HTTP request/response logging.
+ *
+ * `level` controls verbosity (none / basic / headers / body); the
+ * built-in auth interceptor already redacts sensitive headers
+ * (`SmileID-Token`, `smileid-partner-id`). Partners can extend the
+ * redaction list with their own proxy-injected headers.
+ */
+export class LoggingConfigBuilder {
+    enabled = true;
+    level = LogLevel.basic;
+    redactHeaders = [];
+    build() {
+        return Object.freeze({
+            enabled: this.enabled,
+            level: this.level,
+            redactHeaders: Object.freeze([...this.redactHeaders]),
+        });
+    }
+}
+/**
+ * DSL builder for the main network job + auth + partner block.
+ *
+ * Holds `jobType`, the HTTP auth credentials (`token` + `onTokenExpired`),
+ * plus nested `partnerConfig` and `logging` sub-builders. The auth
+ * credential sits at this level — separate from `partnerConfig` which
+ * carries partner identity — because authentication is a network-level
+ * credential, not part of partner identity.
+ *
+ * Sub-builders are constructed lazily on first access so the partner can
+ * omit blocks they don't need.
+ */
+export class ConfigBuilder {
+    jobType;
+    /**
+     * Short-lived v3 auth token issued by `/v3/token`. The partner
+     * application is responsible for exchanging its API key for a token
+     * before invoking the SDK and supplying the result here. Stamped as
+     * the `smileid-token` HTTP header on every authenticated request.
+     */
+    token = "";
+    /**
+     * Optional async refresh callback invoked when the server responds
+     * with `401 Unauthorized`. The callback receives the token the SDK
+     * was using and returns a fresh token; the SDK then retries the
+     * original request once with the new value. Concurrent 401s collapse
+     * to a single callback invocation via the SDK's shared `TokenHolder`.
+     * If the callback throws or the retry also returns 401, the original
+     * 401 response is surfaced unchanged.
+     */
+    onTokenExpired;
+    _partnerConfig;
+    _logging;
+    partnerConfig(block) {
+        if (!this._partnerConfig)
+            this._partnerConfig = new PartnerConfigBuilder();
+        block(this._partnerConfig);
+    }
+    logging(block) {
+        if (!this._logging)
+            this._logging = new LoggingConfigBuilder();
+        block(this._logging);
+    }
+    build() {
+        return Object.freeze({
+            ...(this.jobType !== undefined ? { jobType: this.jobType } : {}),
+            ...(this.token !== "" ? { token: this.token } : {}),
+            ...(this.onTokenExpired !== undefined
+                ? { onTokenExpired: this.onTokenExpired }
+                : {}),
+            ...(this._partnerConfig
+                ? { partnerConfig: this._partnerConfig.build() }
+                : {}),
+            ...(this._logging ? { logging: this._logging.build() } : {}),
+        });
+    }
+}
+//# sourceMappingURL=config_builder.js.map

package/dist/data/dsl/builder/config_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/config_builder.ts"],"names":[],"mappings":"AACA,OAAO,EACL,QAAQ,GAIT,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IAC/B,SAAS,GAAG,EAAE,CAAC;IACf,WAAW,GAAG,EAAE,CAAC;IACjB,UAAU,GAAG,KAAK,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAA0B;IAEvC,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE;gBAC7D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAoB;IAC/B,OAAO,GAAG,IAAI,CAAC;IACf,KAAK,GAAa,QAAQ,CAAC,KAAK,CAAC;IACjC,aAAa,GAAsB,EAAE,CAAC;IAEtC,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IACxB,OAAO,CAAW;IAElB;;;;;OAKG;IACH,KAAK,GAAG,EAAE,CAAC;IAEX;;;;;;;;OAQG;IACH,cAAc,CAA8C;IAEpD,cAAc,CAAwB;IACtC,QAAQ,CAAwB;IAExC,aAAa,CAAC,KAAwC;QACpD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,KAAwC;QAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,cAAc;gBACrB,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/dsl/builder/interceptor_config_builder.d.ts

@@ -0,0 +1,46 @@
+import { LogLevel, type Interceptor } from "../../../core/models/network_config";
+/**
+ * DSL builder for registering custom HTTP interceptors.
+ *
+ * Partners compose the interceptor list via `add(...)`. Two
+ * convenience factories — `gzip()` and `logging(...)` — produce
+ * ready-to-add `Interceptor` instances.
+ *
+ * Usage:
+ * ```ts
+ * b.network((n) => {
+ *   n.interceptors((i) => {
+ *     i.add(i.gzip());
+ *     i.add(i.logging((l) => { l.level = LogLevel.body; }));
+ *     i.add(myCustomInterceptor);
+ *   });
+ * });
+ * ```
+ */
+export declare class InterceptorConfigBuilder {
+    private _interceptors;
+    add(interceptor: Interceptor): void;
+    /**
+     * Returns an interceptor that stamps `Accept-Encoding: gzip` on
+     * every outbound request. Hint-only — the SDK does not pull in a
+     * JS gzip dependency to compress request bodies. See
+     * [createGzipInterceptor] for the rationale.
+     */
+    gzip(): Interceptor;
+    /**
+     * Returns a logging interceptor configured by `configure`. The
+     * partner block mutates a `LoggingInterceptorBuilder` carrying
+     * `level` and `redactHeaders`.
+     */
+    logging(configure?: (builder: LoggingInterceptorBuilder) => void): Interceptor;
+    build(): readonly Interceptor[];
+}
+/**
+ * Configuration carrier for `InterceptorConfigBuilder.logging(...)`.
+ */
+export declare class LoggingInterceptorBuilder {
+    enabled: boolean;
+    level: LogLevel;
+    redactHeaders: readonly string[];
+}
+//# sourceMappingURL=interceptor_config_builder.d.ts.map

package/dist/data/dsl/builder/interceptor_config_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/interceptor_config_builder.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,QAAQ,EACR,KAAK,WAAW,EAEjB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,aAAa,CAAqB;IAE1C,GAAG,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAInC;;;;;OAKG;IACH,IAAI,IAAI,WAAW;IAInB;;;;OAIG;IACH,OAAO,CACL,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,IAAI,GACvD,WAAW;IAiBd,KAAK,IAAI,SAAS,WAAW,EAAE;CAGhC;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,UAAQ;IACf,KAAK,EAAE,QAAQ,CAAkB;IACjC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAM;CACvC"}

package/dist/data/dsl/builder/interceptor_config_builder.js

@@ -0,0 +1,69 @@
+import { attachLoggingInterceptor } from "../../api/interceptors/logging_interceptor";
+import { createGzipInterceptor } from "../../api/interceptors/gzip_interceptor";
+import { LogLevel, } from "../../../core/models/network_config";
+/**
+ * DSL builder for registering custom HTTP interceptors.
+ *
+ * Partners compose the interceptor list via `add(...)`. Two
+ * convenience factories — `gzip()` and `logging(...)` — produce
+ * ready-to-add `Interceptor` instances.
+ *
+ * Usage:
+ * ```ts
+ * b.network((n) => {
+ *   n.interceptors((i) => {
+ *     i.add(i.gzip());
+ *     i.add(i.logging((l) => { l.level = LogLevel.body; }));
+ *     i.add(myCustomInterceptor);
+ *   });
+ * });
+ * ```
+ */
+export class InterceptorConfigBuilder {
+    _interceptors = [];
+    add(interceptor) {
+        this._interceptors.push(interceptor);
+    }
+    /**
+     * Returns an interceptor that stamps `Accept-Encoding: gzip` on
+     * every outbound request. Hint-only — the SDK does not pull in a
+     * JS gzip dependency to compress request bodies. See
+     * [createGzipInterceptor] for the rationale.
+     */
+    gzip() {
+        return createGzipInterceptor();
+    }
+    /**
+     * Returns a logging interceptor configured by `configure`. The
+     * partner block mutates a `LoggingInterceptorBuilder` carrying
+     * `level` and `redactHeaders`.
+     */
+    logging(configure) {
+        const builder = new LoggingInterceptorBuilder();
+        if (configure) {
+            configure(builder);
+        }
+        const loggingConfig = Object.freeze({
+            enabled: builder.enabled,
+            level: builder.level,
+            redactHeaders: Object.freeze([...builder.redactHeaders]),
+        });
+        return {
+            attach(client) {
+                attachLoggingInterceptor(client, loggingConfig);
+            },
+        };
+    }
+    build() {
+        return Object.freeze([...this._interceptors]);
+    }
+}
+/**
+ * Configuration carrier for `InterceptorConfigBuilder.logging(...)`.
+ */
+export class LoggingInterceptorBuilder {
+    enabled = true;
+    level = LogLevel.basic;
+    redactHeaders = [];
+}
+//# sourceMappingURL=interceptor_config_builder.js.map

package/dist/data/dsl/builder/interceptor_config_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/interceptor_config_builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACL,QAAQ,GAGT,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAwB;IAC3B,aAAa,GAAkB,EAAE,CAAC;IAE1C,GAAG,CAAC,WAAwB;QAC1B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,IAAI;QACF,OAAO,qBAAqB,EAAE,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,OAAO,CACL,SAAwD;QAExD,MAAM,OAAO,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAChD,IAAI,SAAS,EAAE,CAAC;YACd,SAAS,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,aAAa,GAAyB,MAAM,CAAC,MAAM,CAAC;YACxD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;SACzD,CAAC,CAAC;QACH,OAAO;YACL,MAAM,CAAC,MAAqB;gBAC1B,wBAAwB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;YAClD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IAChD,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACpC,OAAO,GAAG,IAAI,CAAC;IACf,KAAK,GAAa,QAAQ,CAAC,KAAK,CAAC;IACjC,aAAa,GAAsB,EAAE,CAAC;CACvC"}

package/dist/data/dsl/builder/retry_config_builder.d.ts

@@ -0,0 +1,21 @@
+import { RetryStrategy, type RetryConfig } from "../../../core/models/network_config";
+export { RetryStrategy };
+/**
+ * DSL builder for request retry behaviour.
+ *
+ * Defaults to exponential backoff with 3 attempts, 1 s initial delay,
+ * 32 s ceiling, ±20% jitter. `fixedDelay` is honoured only when
+ * `strategy = RetryStrategy.fixed`.
+ */
+export declare class RetryConfigBuilder {
+    maxAttempts: number;
+    strategy: RetryStrategy;
+    initialDelay: number;
+    multiplier: number;
+    maxDelay: number;
+    /** ±20% randomized jitter on the computed delay, in [0, 1]. */
+    jitter: number;
+    fixedDelay: number;
+    build(): RetryConfig;
+}
+//# sourceMappingURL=retry_config_builder.d.ts.map

package/dist/data/dsl/builder/retry_config_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/retry_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,KAAK,WAAW,EACjB,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,WAAW,SAAK;IAChB,QAAQ,EAAE,aAAa,CAA6B;IACpD,YAAY,SAAK;IACjB,UAAU,SAAK;IACf,QAAQ,SAAM;IACd,+DAA+D;IAC/D,MAAM,SAAO;IACb,UAAU,SAAK;IAEf,KAAK,IAAI,WAAW;CAWrB"}

package/dist/data/dsl/builder/retry_config_builder.js

@@ -0,0 +1,31 @@
+import { RetryStrategy, } from "../../../core/models/network_config";
+export { RetryStrategy };
+/**
+ * DSL builder for request retry behaviour.
+ *
+ * Defaults to exponential backoff with 3 attempts, 1 s initial delay,
+ * 32 s ceiling, ±20% jitter. `fixedDelay` is honoured only when
+ * `strategy = RetryStrategy.fixed`.
+ */
+export class RetryConfigBuilder {
+    maxAttempts = 3;
+    strategy = RetryStrategy.exponential;
+    initialDelay = 1;
+    multiplier = 2;
+    maxDelay = 32;
+    /** ±20% randomized jitter on the computed delay, in [0, 1]. */
+    jitter = 0.2;
+    fixedDelay = 1;
+    build() {
+        return Object.freeze({
+            maxAttempts: this.maxAttempts,
+            strategy: this.strategy,
+            initialDelay: this.initialDelay,
+            multiplier: this.multiplier,
+            maxDelay: this.maxDelay,
+            jitter: this.jitter,
+            fixedDelay: this.fixedDelay,
+        });
+    }
+}
+//# sourceMappingURL=retry_config_builder.js.map

package/dist/data/dsl/builder/retry_config_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/retry_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GAEd,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAC7B,WAAW,GAAG,CAAC,CAAC;IAChB,QAAQ,GAAkB,aAAa,CAAC,WAAW,CAAC;IACpD,YAAY,GAAG,CAAC,CAAC;IACjB,UAAU,GAAG,CAAC,CAAC;IACf,QAAQ,GAAG,EAAE,CAAC;IACd,+DAA+D;IAC/D,MAAM,GAAG,GAAG,CAAC;IACb,UAAU,GAAG,CAAC,CAAC;IAEf,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/dsl/builder/timeout_config_builder.d.ts

@@ -0,0 +1,16 @@
+import type { TimeoutConfig } from "../../../core/models/network_config";
+/**
+ * DSL builder for per-phase HTTP timeouts in **seconds**.
+ *
+ * `connect` is the connection-establishment phase; `read` and `write`
+ * cap the individual socket-read / socket-write operations; `call` is
+ * the end-to-end ceiling for the whole request including retries.
+ */
+export declare class TimeoutConfigBuilder {
+    connect: number;
+    read: number;
+    write: number;
+    call: number;
+    build(): TimeoutConfig;
+}
+//# sourceMappingURL=timeout_config_builder.d.ts.map

package/dist/data/dsl/builder/timeout_config_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEzE;;;;;;GAMG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,SAAM;IACb,IAAI,SAAM;IACV,KAAK,SAAM;IACX,IAAI,SAAO;IAEX,KAAK,IAAI,aAAa;CAQvB"}

package/dist/data/dsl/builder/timeout_config_builder.js

@@ -0,0 +1,22 @@
+/**
+ * DSL builder for per-phase HTTP timeouts in **seconds**.
+ *
+ * `connect` is the connection-establishment phase; `read` and `write`
+ * cap the individual socket-read / socket-write operations; `call` is
+ * the end-to-end ceiling for the whole request including retries.
+ */
+export class TimeoutConfigBuilder {
+    connect = 60;
+    read = 60;
+    write = 60;
+    call = 120;
+    build() {
+        return Object.freeze({
+            connect: this.connect,
+            read: this.read,
+            write: this.write,
+            call: this.call,
+        });
+    }
+}
+//# sourceMappingURL=timeout_config_builder.js.map

package/dist/data/dsl/builder/timeout_config_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout_config_builder.js","sourceRoot":"","sources":["../../../../src/data/dsl/builder/timeout_config_builder.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IAC/B,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,GAAG,EAAE,CAAC;IACV,KAAK,GAAG,EAAE,CAAC;IACX,IAAI,GAAG,GAAG,CAAC;IAEX,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/dsl/use_smile_id_network_builder.d.ts

@@ -0,0 +1,37 @@
+import type { NetworkConfig } from "../../core/models/network_config";
+import { CacheConfigBuilder } from "./builder/cache_config_builder";
+import { ConfigBuilder } from "./builder/config_builder";
+import { InterceptorConfigBuilder } from "./builder/interceptor_config_builder";
+import { RetryConfigBuilder } from "./builder/retry_config_builder";
+import { TimeoutConfigBuilder } from "./builder/timeout_config_builder";
+/**
+ * DSL builder for the complete network stack configuration.
+ *
+ * Three levels of closure nesting:
+ *
+ *   network → config → partnerConfig
+ *                  └→ logging
+ *           → timeouts
+ *           → cache
+ *           → retry
+ *           → interceptors
+ *
+ * Mutable-receiver pattern: each closure mutates a builder, which
+ * snapshots its state via `build()` once the partner's callback
+ * returns. Builders are constructed lazily on first access so the
+ * partner can omit blocks they don't need.
+ */
+export declare class UseSmileIDNetworkBuilder {
+    private _config?;
+    private _timeouts?;
+    private _cache?;
+    private _retry?;
+    private _interceptors?;
+    config(block: (c: ConfigBuilder) => void): void;
+    timeouts(block: (t: TimeoutConfigBuilder) => void): void;
+    cache(block: (c: CacheConfigBuilder) => void): void;
+    retry(block: (r: RetryConfigBuilder) => void): void;
+    interceptors(block: (i: InterceptorConfigBuilder) => void): void;
+    build(): NetworkConfig;
+}
+//# sourceMappingURL=use_smile_id_network_builder.d.ts.map

package/dist/data/dsl/use_smile_id_network_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use_smile_id_network_builder.d.ts","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;IAChC,OAAO,CAAC,SAAS,CAAC,CAAuB;IACzC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,aAAa,CAAC,CAA2B;IAEjD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,GAAG,IAAI;IAK/C,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,oBAAoB,KAAK,IAAI,GAAG,IAAI;IAKxD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI;IAKnD,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,IAAI,GAAG,IAAI;IAMhE,KAAK,IAAI,aAAa;CAWvB"}

package/dist/data/dsl/use_smile_id_network_builder.js

@@ -0,0 +1,66 @@
+import { CacheConfigBuilder } from "./builder/cache_config_builder";
+import { ConfigBuilder } from "./builder/config_builder";
+import { InterceptorConfigBuilder } from "./builder/interceptor_config_builder";
+import { RetryConfigBuilder } from "./builder/retry_config_builder";
+import { TimeoutConfigBuilder } from "./builder/timeout_config_builder";
+/**
+ * DSL builder for the complete network stack configuration.
+ *
+ * Three levels of closure nesting:
+ *
+ *   network → config → partnerConfig
+ *                  └→ logging
+ *           → timeouts
+ *           → cache
+ *           → retry
+ *           → interceptors
+ *
+ * Mutable-receiver pattern: each closure mutates a builder, which
+ * snapshots its state via `build()` once the partner's callback
+ * returns. Builders are constructed lazily on first access so the
+ * partner can omit blocks they don't need.
+ */
+export class UseSmileIDNetworkBuilder {
+    _config;
+    _timeouts;
+    _cache;
+    _retry;
+    _interceptors;
+    config(block) {
+        if (!this._config)
+            this._config = new ConfigBuilder();
+        block(this._config);
+    }
+    timeouts(block) {
+        if (!this._timeouts)
+            this._timeouts = new TimeoutConfigBuilder();
+        block(this._timeouts);
+    }
+    cache(block) {
+        if (!this._cache)
+            this._cache = new CacheConfigBuilder();
+        block(this._cache);
+    }
+    retry(block) {
+        if (!this._retry)
+            this._retry = new RetryConfigBuilder();
+        block(this._retry);
+    }
+    interceptors(block) {
+        if (!this._interceptors)
+            this._interceptors = new InterceptorConfigBuilder();
+        block(this._interceptors);
+    }
+    build() {
+        return Object.freeze({
+            ...(this._config ? { config: this._config.build() } : {}),
+            ...(this._timeouts ? { timeouts: this._timeouts.build() } : {}),
+            ...(this._cache ? { cache: this._cache.build() } : {}),
+            ...(this._retry ? { retry: this._retry.build() } : {}),
+            ...(this._interceptors
+                ? { interceptors: this._interceptors.build() }
+                : {}),
+        });
+    }
+}
+//# sourceMappingURL=use_smile_id_network_builder.js.map

package/dist/data/dsl/use_smile_id_network_builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use_smile_id_network_builder.js","sourceRoot":"","sources":["../../../src/data/dsl/use_smile_id_network_builder.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,wBAAwB;IAC3B,OAAO,CAAiB;IACxB,SAAS,CAAwB;IACjC,MAAM,CAAsB;IAC5B,MAAM,CAAsB;IAC5B,aAAa,CAA4B;IAEjD,MAAM,CAAC,KAAiC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,QAAQ,CAAC,KAAwC;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAsC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,KAA4C;QACvD,IAAI,CAAC,IAAI,CAAC,aAAa;YACrB,IAAI,CAAC,aAAa,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/data/factory/networking_factory.d.ts

@@ -0,0 +1,53 @@
+import type { AxiosInstance } from "axios";
+import type { NetworkConfig } from "../../core/models/network_config";
+import { SmileIDAPI } from "../api/smile_id_api";
+import type { MetadataProvider } from "../../metadata/use_smile_id_metadata_factory";
+/**
+ * Wire an axios instance + the SDK's interceptor chain and return a
+ * `SmileIDAPI`.
+ *
+ * Canonical request-path order (outermost → wire):
+ *   `partner-custom → token-refresh → auth → request-mac → integrity →
+ *    logging → gzip → wire`
+ *
+ * - **Partner-custom interceptors** sit outermost so partners can
+ *   inject debugging tools (Charles, Sentry breadcrumbs) before any
+ *   SDK headers attach.
+ * - **TokenRefreshInterceptor** sits next so its retry — which re-issues
+ *   via `client.request(config)` — re-runs the rest of the SDK chain
+ *   with the refreshed token (auth re-stamps from the same `TokenHolder`
+ *   the refresh wrote into, mac/integrity re-stamp on opt-in endpoints).
+ *   It only attaches a response interceptor — the 401 → refresh → retry
+ *   pathway lives on the error branch.
+ * - **Auth** runs before the MAC interceptor so the `smileid-*` headers it
+ *   stamps (token, partner id, `smileid-request-timestamp`) are present to be
+ *   signed; it also sits after partner-custom interceptors so they cannot strip
+ *   the token. Reads the current token from the shared `TokenHolder`.
+ * - **Request MAC** stamps `smileid-request-mac` (the canonicalised-request
+ *   HMAC from `SmileIDCryptoManager`) for endpoints that opt in via
+ *   `_useSmileIDRequestMac: true`. It runs before the integrity interceptor so
+ *   the integrity token can bind to the freshly-computed MAC value.
+ * - **Integrity** stamps `smileid-device-nonce` with the
+ *   `Attestation.requestToken(macHeader)` envelope for endpoints that
+ *   opt in via `_useSmileIDAttestation: true`. Reads the MAC header the
+ *   previous interceptor set.
+ * - **Logging** sits second-to-last so the line it prints reflects
+ *   the request after auth has stamped headers but before gzip
+ *   transforms the body. Sensitive headers are redacted via the
+ *   [`ALWAYS_REDACT`](../api/interceptors/logging_interceptor.ts)
+ *   set. On the response path the order naturally inverts.
+ * - **Gzip** sits closest to the wire — it stamps `Accept-Encoding:
+ *   gzip` on every request so axios auto-decompresses responses.
+ *
+ * axios applies **request interceptors LIFO** (last registered runs
+ * first) and **response interceptors FIFO** (first registered runs
+ * first). The registration order below is therefore the *reverse* of
+ * the request-path order so the LIFO unwind lands on the canonical
+ * order described above.
+ */
+export declare function makeNetworkingFactory(config: NetworkConfig, signingSecret?: () => string): {
+    readonly api: SmileIDAPI;
+    readonly client: AxiosInstance;
+    readonly metadata: MetadataProvider;
+};
+//# sourceMappingURL=networking_factory.d.ts.map

package/dist/data/factory/networking_factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking_factory.d.ts","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,UAAU,EAIX,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,aAAa,EAGrB,aAAa,GAAE,MAAM,MAAoD,GACxE;IACD,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC,CAoHA"}