@smileid/usesmileid 12.0.0-beta01

package/dist/data/factory/networking_factory.js

@@ -0,0 +1,164 @@
+import { SmileIDAPI, buildAxiosClient, SmileAuthInterceptor, attachLoggingInterceptor, } from "../api/smile_id_api";
+import { createGzipInterceptor } from "../api/interceptors/gzip_interceptor";
+import { SmileRequestMacInterceptor } from "../api/interceptors/smile_request_mac_interceptor";
+import { SmileIntegrityInterceptor } from "../api/interceptors/smile_integrity_interceptor";
+import { TokenRefreshInterceptor } from "../api/interceptors/token_refresh_interceptor";
+import { TokenHolder } from "../api/auth/token_holder";
+import { SmileIDCryptoManager } from "../security/smile_id_crypto_manager";
+import { Attestation, SigningSecretProvider } from "@smileid/usesmileid_bridge";
+import { MissingPartnerConfigException } from "../../core/exception";
+import { UseSmileIDMetadataFactory } from "../../metadata/use_smile_id_metadata_factory";
+/**
+ * Wire an axios instance + the SDK's interceptor chain and return a
+ * `SmileIDAPI`.
+ *
+ * Canonical request-path order (outermost → wire):
+ *   `partner-custom → token-refresh → auth → request-mac → integrity →
+ *    logging → gzip → wire`
+ *
+ * - **Partner-custom interceptors** sit outermost so partners can
+ *   inject debugging tools (Charles, Sentry breadcrumbs) before any
+ *   SDK headers attach.
+ * - **TokenRefreshInterceptor** sits next so its retry — which re-issues
+ *   via `client.request(config)` — re-runs the rest of the SDK chain
+ *   with the refreshed token (auth re-stamps from the same `TokenHolder`
+ *   the refresh wrote into, mac/integrity re-stamp on opt-in endpoints).
+ *   It only attaches a response interceptor — the 401 → refresh → retry
+ *   pathway lives on the error branch.
+ * - **Auth** runs before the MAC interceptor so the `smileid-*` headers it
+ *   stamps (token, partner id, `smileid-request-timestamp`) are present to be
+ *   signed; it also sits after partner-custom interceptors so they cannot strip
+ *   the token. Reads the current token from the shared `TokenHolder`.
+ * - **Request MAC** stamps `smileid-request-mac` (the canonicalised-request
+ *   HMAC from `SmileIDCryptoManager`) for endpoints that opt in via
+ *   `_useSmileIDRequestMac: true`. It runs before the integrity interceptor so
+ *   the integrity token can bind to the freshly-computed MAC value.
+ * - **Integrity** stamps `smileid-device-nonce` with the
+ *   `Attestation.requestToken(macHeader)` envelope for endpoints that
+ *   opt in via `_useSmileIDAttestation: true`. Reads the MAC header the
+ *   previous interceptor set.
+ * - **Logging** sits second-to-last so the line it prints reflects
+ *   the request after auth has stamped headers but before gzip
+ *   transforms the body. Sensitive headers are redacted via the
+ *   [`ALWAYS_REDACT`](../api/interceptors/logging_interceptor.ts)
+ *   set. On the response path the order naturally inverts.
+ * - **Gzip** sits closest to the wire — it stamps `Accept-Encoding:
+ *   gzip` on every request so axios auto-decompresses responses.
+ *
+ * axios applies **request interceptors LIFO** (last registered runs
+ * first) and **response interceptors FIFO** (first registered runs
+ * first). The registration order below is therefore the *reverse* of
+ * the request-path order so the LIFO unwind lands on the canonical
+ * order described above.
+ */
+export function makeNetworkingFactory(config, 
+// The request-signing secret source; defaults to the native bridge and exists
+// so tests can supply a known secret without the native module.
+signingSecret = () => SigningSecretProvider.signingSecret()) {
+    // Reject blank credentials with a typed exception at client
+    // construction so an unauthenticated request never reaches the wire.
+    const partnerConfig = config.config?.partnerConfig;
+    if (!partnerConfig || partnerConfig.partnerId.trim() === "") {
+        throw MissingPartnerConfigException.missingPartnerId();
+    }
+    if (!config.config?.token || config.config.token.trim() === "") {
+        throw MissingPartnerConfigException.missingAuthToken();
+    }
+    const client = buildAxiosClient(config);
+    // Wire a single per-flow metadata provider — every submission
+    // endpoint requires a `metadata` part. The factory reads
+    // `expo-device` lazily when present and falls back to empty values
+    // otherwise, so this is safe to construct unconditionally. The
+    // provider is returned to the caller so the request-construction
+    // site (the flow navigation manager) can stamp a fresh snapshot
+    // onto each `JobRequest` via `metadata.make()`.
+    const metadata = new UseSmileIDMetadataFactory();
+    const api = new SmileIDAPI(client, partnerConfig);
+    // Warm up the Play Integrity / App Attest token provider off the
+    // submission path so the integrity interceptor's per-request
+    // `requestToken` doesn't pay the multi-second first-call cost (and
+    // doesn't fail `NOT_INITIALIZED`). Fire-and-forget + fail-open: on
+    // failure the interceptor stamps an `ERR_` nonce and the server decides
+    // policy.
+    void Attestation.warmUp().catch(() => {
+        /* fail-open — handled per-request by SmileIntegrityInterceptor */
+    });
+    // Shared mutable holder for the partner-supplied auth token.
+    // SmileAuthInterceptor reads from it on every request;
+    // TokenRefreshInterceptor writes a refreshed value on a 401 so the
+    // next outgoing request automatically picks up the new token.
+    const tokenHolder = new TokenHolder(config.config?.token ?? "");
+    // 1. Gzip is registered FIRST so it runs LAST on the request path
+    //    (innermost / closest to the wire). It stamps `Accept-Encoding:
+    //    gzip` so the server can compress responses (axios
+    //    transparently decompresses).
+    const gzip = createGzipInterceptor();
+    gzip.attach(client);
+    // 2. Logging is registered SECOND so it runs SECOND-TO-LAST on the
+    //    request path — the printed body and headers reflect the
+    //    request after auth has stamped headers but before gzip
+    //    transforms the wire bytes. Lives at `config.config.logging`
+    //    under the `network → config → logging` nesting.
+    const logging = config.config?.logging;
+    if (logging) {
+        attachLoggingInterceptor(client, logging);
+    }
+    // 3. Integrity is registered THIRD so it runs after MAC stamping on the
+    //    request path — it reads the `smileid-request-mac` header the MAC
+    //    interceptor sets and binds the per-request token to it. Per-request
+    //    opt-in via `config._useSmileIDAttestation`; pass-through otherwise.
+    const integrityInterceptor = new SmileIntegrityInterceptor();
+    integrityInterceptor.attach(client);
+    // 4. Request MAC runs after auth (so the `smileid-*` headers + timestamp it
+    //    signs are present) and before integrity (which binds to the MAC). The
+    //    signing key is PBKDF2-derived from the native Arkana secret. Per-request
+    //    opt-in via `config._useSmileIDRequestMac`; pass-through otherwise.
+    const cryptoManager = new SmileIDCryptoManager(signingSecret());
+    const requestMacInterceptor = new SmileRequestMacInterceptor({
+        cryptoManager,
+    });
+    requestMacInterceptor.attach(client);
+    // 5. Auth is registered LAST of these three so it runs FIRST on the request
+    //    path — after partner-custom interceptors (which therefore cannot strip
+    //    the token), before logging. It stamps the token + partner id +
+    //    `smileid-request-timestamp` before the MAC interceptor signs them, and
+    //    reads from the shared `TokenHolder` so a refreshed value is picked up on
+    //    the next outbound request.
+    const authInterceptor = new SmileAuthInterceptor({
+        partnerConfig,
+        tokenHolder,
+    });
+    authInterceptor.attach(client);
+    // 6. TokenRefreshInterceptor only attaches a response interceptor —
+    //    its 401 → refresh → retry pathway lives on the error branch.
+    //    Registered after the SDK request-side interceptors so its
+    //    response error handler sees the 401 BEFORE bubbling up to
+    //    partner-custom handlers downstream; the retry re-issues via
+    //    `client.request(config)` and re-runs all request interceptors
+    //    above (auth re-reads the now-refreshed `TokenHolder`).
+    const tokenRefreshInterceptor = new TokenRefreshInterceptor({
+        tokenHolder,
+        onTokenExpired: config.config?.onTokenExpired,
+    });
+    tokenRefreshInterceptor.attach(client);
+    // 7. Partner-custom interceptors are registered LAST so they run
+    //    FIRST on the request path (outermost) — ideal for Charles,
+    //    Sentry breadcrumbs, etc. that should observe the request
+    //    before any SDK headers attach.
+    if (config.interceptors) {
+        for (const interceptor of config.interceptors) {
+            // Partner contracts: `interceptor` may be `(client) => void` or
+            // an object with `attach(client)`. We support both shapes.
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            const handler = interceptor;
+            if (typeof handler === "function") {
+                handler(client);
+            }
+            else if (typeof handler?.attach === "function") {
+                handler.attach(client);
+            }
+        }
+    }
+    return { api, client, metadata };
+}
+//# sourceMappingURL=networking_factory.js.map

package/dist/data/factory/networking_factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"networking_factory.js","sourceRoot":"","sources":["../../../src/data/factory/networking_factory.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8CAA8C,CAAC;AAGzF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqB;AACrB,8EAA8E;AAC9E,gEAAgE;AAChE,gBAA8B,GAAG,EAAE,CAAC,qBAAqB,CAAC,aAAa,EAAE;IAMzE,4DAA4D;IAC5D,qEAAqE;IACrE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IACnD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,6BAA6B,CAAC,gBAAgB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,8DAA8D;IAC9D,yDAAyD;IACzD,mEAAmE;IACnE,+DAA+D;IAC/D,iEAAiE;IACjE,gEAAgE;IAChE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAElD,iEAAiE;IACjE,6DAA6D;IAC7D,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,UAAU;IACV,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACnC,kEAAkE;IACpE,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,uDAAuD;IACvD,mEAAmE;IACnE,8DAA8D;IAC9D,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAEhE,kEAAkE;IAClE,oEAAoE;IACpE,uDAAuD;IACvD,kCAAkC;IAClC,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpB,mEAAmE;IACnE,6DAA6D;IAC7D,4DAA4D;IAC5D,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACZ,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,oBAAoB,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC7D,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,aAAa,EAAE,CAAC,CAAC;IAChE,MAAM,qBAAqB,GAAG,IAAI,0BAA0B,CAAC;QAC3D,aAAa;KACd,CAAC,CAAC;IACH,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErC,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAC5E,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,eAAe,GAAG,IAAI,oBAAoB,CAAC;QAC/C,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IACH,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAE/B,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,+DAA+D;IAC/D,iEAAiE;IACjE,mEAAmE;IACnE,4DAA4D;IAC5D,MAAM,uBAAuB,GAAG,IAAI,uBAAuB,CAAC;QAC1D,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc;KAC9C,CAAC,CAAC;IACH,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEvC,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,oCAAoC;IACpC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9C,gEAAgE;YAChE,2DAA2D;YAC3D,8DAA8D;YAC9D,MAAM,OAAO,GAAG,WAAkB,CAAC;YACnC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC"}

package/dist/data/model/image_dimensions.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Resolved selfie or liveness image capture dimensions.
+ *
+ * Produced only by `resolveDimensions` in `sdk_config_capture` — never
+ * constructed directly. The pair rule (both width and height must be
+ * present and positive) is enforced at the point of creation, so any
+ * `ImageDimensions` value is guaranteed to carry two positive integers.
+ *
+ * Documents are always captured at sensor-native resolution; this type
+ * is intentionally absent from the document-capture path.
+ */
+export type ImageDimensions = {
+    readonly width: number;
+    readonly height: number;
+};
+//# sourceMappingURL=image_dimensions.d.ts.map

package/dist/data/model/image_dimensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image_dimensions.d.ts","sourceRoot":"","sources":["../../../src/data/model/image_dimensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC"}

package/dist/data/model/image_dimensions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=image_dimensions.js.map

package/dist/data/model/image_dimensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image_dimensions.js","sourceRoot":"","sources":["../../../src/data/model/image_dimensions.ts"],"names":[],"mappings":""}

package/dist/data/model/job_request.d.ts

@@ -0,0 +1,130 @@
+import type { ConsentInformation, EnhancedKYCParams, BiometricKYCParams, UserDetails } from "../../core/models/params";
+import { JobType } from "../../core/models/job_type";
+import type { UseSmileIDMetadata } from "../../metadata/use_smile_id_metadata";
+/**
+ * Discriminated-union of submission requests. The `jobType` field
+ * narrows the union and tells the repository which API method to
+ * dispatch to.
+ *
+ * Every variant intersects [BaseJobRequest], which carries the two
+ * fields shared by all submissions: the partner-captured `consent`
+ * record and the per-submission `metadata` snapshot. Variants keep a
+ * narrowed `jobType` literal so the union still discriminates.
+ *
+ * `metadata` is built at the request-construction site (the flow
+ * navigation manager) and travels on the request itself — the API
+ * layer reads `request.metadata` and serializes it as the `metadata`
+ * multipart part rather than generating the snapshot at submit time.
+ */
+export interface BaseJobRequest {
+    readonly consent: ConsentInformation;
+    readonly metadata: UseSmileIDMetadata;
+}
+export type SmartSelfieEnrollmentRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.smartSelfieEnrollment;
+    readonly selfieImage: string;
+    readonly livenessImages: readonly string[];
+    readonly userDetails: UserDetails;
+    /**
+     * Screen-level enhanced-liveness intent marker. The wire path is
+     * always `/v3/registration` (and `/v3/authentication` on the auth
+     * variant); this flag governs only the capture-time head-turn
+     * pipeline — the previous "different URL when enhanced" behavior
+     * pointed at endpoints the lambda never exposed.
+     */
+    readonly enhanced: boolean;
+    /**
+     * Expected number of liveness images for this submission. Derived
+     * from the `sdk_config` JWT claim's `livenessImageCount` when
+     * present (`livenessImageCount` maps to `numSamples = count + 1`,
+     * so `expectedLivenessImageCount = count`); otherwise the
+     * `ScanPerformanceProfile` default minus one (`numSamples - 1`).
+     * For Enhanced Smart Selfie this is always
+     * `EnhancedSmartSelfieConfig.EXPECTED_LIVENESS_IMAGE_COUNT` (7).
+     *
+     * Used by `SmileIDAPI._validateLivenessCount` to surface a count
+     * mismatch before the request hits the network.
+     */
+    readonly expectedLivenessImageCount: number;
+};
+export type SmartSelfieAuthenticationRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.smartSelfieAuthentication;
+    readonly selfieImage: string;
+    readonly livenessImages: readonly string[];
+    readonly userDetails: UserDetails;
+    /**
+     * The `user_id` returned by a prior enrollment — the v3
+     * `/v3/authentication` endpoint requires it so the server can match
+     * the authentication attempt to the existing enrollment. Sent on
+     * the wire as a `user_id` multipart text form field.
+     */
+    readonly userId: string;
+    /** Screen-level enhanced-liveness intent marker. See
+     * `SmartSelfieEnrollmentRequest.enhanced`. */
+    readonly enhanced: boolean;
+    /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
+    readonly expectedLivenessImageCount: number;
+};
+export type EnhancedKycRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.enhancedKyc;
+    readonly params: EnhancedKYCParams;
+    readonly userDetails: UserDetails;
+};
+/**
+ * BVN submission stub. The variant exists in the discriminated union
+ * so `JobType.bvn` can dispatch to a dedicated request rather than
+ * piggy-backing on `enhancedKyc`. The repository rejects it with the
+ * canonical `"BVN submission is not yet supported"` message until the
+ * dedicated endpoint lands.
+ */
+export type BvnRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.bvn;
+    readonly params: EnhancedKYCParams;
+    readonly userDetails: UserDetails;
+};
+export type BiometricKycRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.biometricKyc;
+    readonly selfieImage: string;
+    readonly livenessImages: readonly string[];
+    readonly params: BiometricKYCParams;
+    readonly userDetails: UserDetails;
+    /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
+    readonly expectedLivenessImageCount: number;
+};
+export type DocumentVerificationRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.documentVerification;
+    readonly selfieImage: string;
+    readonly livenessImages: readonly string[];
+    /** Front of the captured ID. Sent as the `document` part. */
+    readonly frontDocument: string;
+    /** Back of the captured ID. Sent as the `document_back` part. */
+    readonly backDocument?: string;
+    readonly country: string;
+    /** Optional — the server classifies the document when omitted. */
+    readonly idType?: string;
+    readonly userDetails: UserDetails;
+    /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
+    readonly expectedLivenessImageCount: number;
+};
+/**
+ * Enhanced variant of the document-verification job. Dispatches through
+ * `/v3/enhanced_document_verification` and lands on a distinct repository
+ * switch case. Differs from [DocumentVerificationRequest] in that
+ * `idType` is required (the server uses it for the ID-authority check).
+ */
+export type EnhancedDocumentVerificationRequest = BaseJobRequest & {
+    readonly jobType: typeof JobType.enhancedDocumentVerification;
+    readonly selfieImage: string;
+    readonly livenessImages: readonly string[];
+    /** Front of the captured ID. Sent as the `document` part. */
+    readonly frontDocument: string;
+    /** Back of the captured ID. Sent as the `document_back` part. */
+    readonly backDocument?: string;
+    readonly country: string;
+    readonly idType: string;
+    readonly userDetails: UserDetails;
+    /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
+    readonly expectedLivenessImageCount: number;
+};
+export type JobRequest = SmartSelfieEnrollmentRequest | SmartSelfieAuthenticationRequest | EnhancedKycRequest | BvnRequest | BiometricKycRequest | DocumentVerificationRequest | EnhancedDocumentVerificationRequest;
+//# sourceMappingURL=job_request.d.ts.map

package/dist/data/model/job_request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_request.d.ts","sourceRoot":"","sources":["../../../src/data/model/job_request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACZ,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAED,MAAM,MAAM,4BAA4B,GAAG,cAAc,GAAG;IAC1D,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC;IACvD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG,cAAc,GAAG;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;kDAC8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,WAAW,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,GAAG,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG;IACjD,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,YAAY,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,cAAc,GAAG;IACzD,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,oBAAoB,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mCAAmC,GAAG,cAAc,GAAG;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAC,4BAA4B,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB,4BAA4B,GAC5B,gCAAgC,GAChC,kBAAkB,GAClB,UAAU,GACV,mBAAmB,GACnB,2BAA2B,GAC3B,mCAAmC,CAAC"}

package/dist/data/model/job_request.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=job_request.js.map

package/dist/data/model/job_request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_request.js","sourceRoot":"","sources":["../../../src/data/model/job_request.ts"],"names":[],"mappings":""}

package/dist/data/model/job_submission_response.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Job-submission response. Returned by every job-submission endpoint
+ * (`/v3/smart_selfie_*`, `/v3/biometric_kyc`,
+ * `/v3/document_verification`, …).
+ */
+export type JobSubmissionResponse = {
+    readonly jobId: string;
+    readonly userId: string;
+    readonly status: string;
+    readonly message: string;
+    /**
+     * ISO-8601 timestamp at which the server accepted the job. Always
+     * present in v3 responses but typed optional for forward and
+     * backward compatibility insurance.
+     */
+    readonly createdAt?: string;
+};
+//# sourceMappingURL=job_submission_response.d.ts.map

package/dist/data/model/job_submission_response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_submission_response.d.ts","sourceRoot":"","sources":["../../../src/data/model/job_submission_response.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC"}

package/dist/data/model/job_submission_response.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=job_submission_response.js.map

package/dist/data/model/job_submission_response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_submission_response.js","sourceRoot":"","sources":["../../../src/data/model/job_submission_response.ts"],"names":[],"mappings":""}

package/dist/data/model/sdk_config.d.ts

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/**
+ * Capture-parameter settings delivered via the JWT auth token.
+ *
+ * The backend embeds this object under the `sdk_config` claim (JWT
+ * payload, base64url-decoded middle segment). All fields are optional;
+ * an absent or invalid field falls back to the SDK default — values are
+ * never clamped.
+ *
+ * Expected claim shape:
+ * ```jsonc
+ * {
+ *   "sdk_config": {
+ *     "selfie":   { "width": 640, "height": 480, "quality": 90 },
+ *     "liveness": { "width": 640, "height": 480, "quality": 80 },
+ *     "document": { "quality": 70 },
+ *     "livenessImageCount": 7
+ *   }
+ * }
+ * ```
+ *
+ * Field names are a deliberate cross-SDK shared contract that
+ * intentionally omits the `UseSmileID` prefix.
+ */
+export declare const sdkConfigSchema: z.ZodObject<{
+    selfie: z.ZodOptional<z.ZodObject<{
+        width: z.ZodOptional<z.ZodNumber>;
+        height: z.ZodOptional<z.ZodNumber>;
+        quality: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    liveness: z.ZodOptional<z.ZodObject<{
+        width: z.ZodOptional<z.ZodNumber>;
+        height: z.ZodOptional<z.ZodNumber>;
+        quality: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    document: z.ZodOptional<z.ZodObject<{
+        width: z.ZodOptional<z.ZodNumber>;
+        height: z.ZodOptional<z.ZodNumber>;
+        quality: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    livenessImageCount: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type SdkConfig = z.infer<typeof sdkConfigSchema>;
+/**
+ * Convert `livenessImageCount` to the internal `numSamples` override,
+ * or `undefined` when the value is absent or invalid.
+ *
+ * Formula: `numSamples = livenessImageCount + 1`.
+ * The `+1` accounts for the reference selfie still that the native
+ * session captures in addition to the liveness frames.
+ * A count of `0` or below is treated as absent (returns `undefined`).
+ */
+export declare function numSamplesOverride(config: SdkConfig | undefined): number | undefined;
+//# sourceMappingURL=sdk_config.d.ts.map

package/dist/data/model/sdk_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk_config.d.ts","sourceRoot":"","sources":["../../../src/data/model/sdk_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;iBAyB1B,CAAC;AAEH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,SAAS,GAAG,SAAS,GAC5B,MAAM,GAAG,SAAS,CAMpB"}

package/dist/data/model/sdk_config.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import { sdkConfigCaptureSchema } from "./sdk_config_capture";
+/**
+ * Capture-parameter settings delivered via the JWT auth token.
+ *
+ * The backend embeds this object under the `sdk_config` claim (JWT
+ * payload, base64url-decoded middle segment). All fields are optional;
+ * an absent or invalid field falls back to the SDK default — values are
+ * never clamped.
+ *
+ * Expected claim shape:
+ * ```jsonc
+ * {
+ *   "sdk_config": {
+ *     "selfie":   { "width": 640, "height": 480, "quality": 90 },
+ *     "liveness": { "width": 640, "height": 480, "quality": 80 },
+ *     "document": { "quality": 70 },
+ *     "livenessImageCount": 7
+ *   }
+ * }
+ * ```
+ *
+ * Field names are a deliberate cross-SDK shared contract that
+ * intentionally omits the `UseSmileID` prefix.
+ */
+export const sdkConfigSchema = z.object({
+    /** Selfie capture settings: pixel dimensions and JPEG quality. */
+    selfie: sdkConfigCaptureSchema.optional(),
+    /** Liveness capture settings: pixel dimensions and JPEG quality. */
+    liveness: sdkConfigCaptureSchema.optional(),
+    /**
+     * Document capture settings. Only `quality` is applied — document
+     * frames stay sensor-native with their longest side bounded at
+     * 1 600 px by the native resampler. `width` / `height` are accepted
+     * by the schema but deliberately ignored.
+     */
+    document: sdkConfigCaptureSchema.optional(),
+    /**
+     * Number of liveness images the native session should capture.
+     * Maps to the internal `numSamples` parameter as
+     * `numSamples = livenessImageCount + 1` (the `+1` accounts for the
+     * reference selfie still).
+     *
+     * A value of `0` or below is treated as absent; the caller falls back
+     * to the `ScanPerformanceProfile` default (`numSamples = 8`).
+     *
+     * This override is suppressed when Enhanced Smart Selfie liveness is
+     * active — the head-turn flow manages its own capture count.
+     */
+    livenessImageCount: z.number().int().optional(),
+});
+/**
+ * Convert `livenessImageCount` to the internal `numSamples` override,
+ * or `undefined` when the value is absent or invalid.
+ *
+ * Formula: `numSamples = livenessImageCount + 1`.
+ * The `+1` accounts for the reference selfie still that the native
+ * session captures in addition to the liveness frames.
+ * A count of `0` or below is treated as absent (returns `undefined`).
+ */
+export function numSamplesOverride(config) {
+    const count = config?.livenessImageCount;
+    if (count !== undefined && count > 0) {
+        return count + 1;
+    }
+    return undefined;
+}
+//# sourceMappingURL=sdk_config.js.map

package/dist/data/model/sdk_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk_config.js","sourceRoot":"","sources":["../../../src/data/model/sdk_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,kEAAkE;IAClE,MAAM,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IACzC,oEAAoE;IACpE,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC3C;;;;;OAKG;IACH,QAAQ,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC3C;;;;;;;;;;;OAWG;IACH,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAIH;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,EAAE,kBAAkB,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/data/model/sdk_config_capture.d.ts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import type { ImageDimensions } from "./image_dimensions";
+/**
+ * Per-capture-type block inside an `sdk_config` JWT claim.
+ *
+ * Three instances appear under the `selfie`, `liveness`, and `document`
+ * keys of the top-level claim. Each field is optional — any absent or
+ * out-of-range value falls back to the SDK default at the point of use.
+ *
+ * Field names are a deliberate cross-SDK shared contract that
+ * intentionally omits the `UseSmileID` prefix.
+ */
+export declare const sdkConfigCaptureSchema: z.ZodObject<{
+    width: z.ZodOptional<z.ZodNumber>;
+    height: z.ZodOptional<z.ZodNumber>;
+    quality: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type SdkConfigCapture = z.infer<typeof sdkConfigCaptureSchema>;
+/**
+ * Resolve a capture block to an `ImageDimensions` pair, or `undefined`
+ * when the pair rule is not satisfied.
+ *
+ * Rule (port of Flutter / iOS / Android cross-SDK contract):
+ *   - Both `width` and `height` must be present and `> 0`.
+ *   - If either is absent or invalid, return `undefined`; the caller
+ *     falls back to the SDK default pair in full. Mixing a server width
+ *     with a default height is explicitly forbidden to avoid
+ *     aspect-ratio mismatches.
+ */
+export declare function resolveDimensions(capture: SdkConfigCapture | undefined): ImageDimensions | undefined;
+/**
+ * Resolve the JPEG quality from a capture block, or `undefined` when
+ * the value is outside the valid range.
+ *
+ * Range: integer `1..100` inclusive. Out-of-range values are not
+ * clamped — the caller uses the SDK default instead.
+ */
+export declare function resolveJpegQuality(capture: SdkConfigCapture | undefined): number | undefined;
+//# sourceMappingURL=sdk_config_capture.d.ts.map

package/dist/data/model/sdk_config_capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk_config_capture.d.ts","sourceRoot":"","sources":["../../../src/data/model/sdk_config_capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB;;;;iBAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,eAAe,GAAG,SAAS,CAO7B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,gBAAgB,GAAG,SAAS,GACpC,MAAM,GAAG,SAAS,CAMpB"}

package/dist/data/model/sdk_config_capture.js

@@ -0,0 +1,69 @@
+import { z } from "zod";
+/**
+ * Per-capture-type block inside an `sdk_config` JWT claim.
+ *
+ * Three instances appear under the `selfie`, `liveness`, and `document`
+ * keys of the top-level claim. Each field is optional — any absent or
+ * out-of-range value falls back to the SDK default at the point of use.
+ *
+ * Field names are a deliberate cross-SDK shared contract that
+ * intentionally omits the `UseSmileID` prefix.
+ */
+export const sdkConfigCaptureSchema = z.object({
+    /**
+     * Target capture width in pixels.
+     * Applied only for selfie and liveness — document frames stay
+     * sensor-native with their longest side bounded by the native
+     * resampler at 1 600 px.
+     */
+    width: z.number().int().optional(),
+    /**
+     * Target capture height in pixels.
+     * Resolved as a pair with `width` — both must be present and
+     * greater than zero, otherwise the pair falls back to the SDK
+     * default in full (never mix a server width with a default height).
+     */
+    height: z.number().int().optional(),
+    /**
+     * JPEG compression quality hint in the range `1..100`.
+     * Values outside that range are treated as absent — the caller uses
+     * the SDK default. Values are never clamped; the backend owns
+     * enforcement.
+     */
+    quality: z.number().int().optional(),
+});
+/**
+ * Resolve a capture block to an `ImageDimensions` pair, or `undefined`
+ * when the pair rule is not satisfied.
+ *
+ * Rule (port of Flutter / iOS / Android cross-SDK contract):
+ *   - Both `width` and `height` must be present and `> 0`.
+ *   - If either is absent or invalid, return `undefined`; the caller
+ *     falls back to the SDK default pair in full. Mixing a server width
+ *     with a default height is explicitly forbidden to avoid
+ *     aspect-ratio mismatches.
+ */
+export function resolveDimensions(capture) {
+    if (!capture)
+        return undefined;
+    const { width, height } = capture;
+    if (width !== undefined && height !== undefined && width > 0 && height > 0) {
+        return { width, height };
+    }
+    return undefined;
+}
+/**
+ * Resolve the JPEG quality from a capture block, or `undefined` when
+ * the value is outside the valid range.
+ *
+ * Range: integer `1..100` inclusive. Out-of-range values are not
+ * clamped — the caller uses the SDK default instead.
+ */
+export function resolveJpegQuality(capture) {
+    const quality = capture?.quality;
+    if (quality !== undefined && quality >= 1 && quality <= 100) {
+        return quality;
+    }
+    return undefined;
+}
+//# sourceMappingURL=sdk_config_capture.js.map

package/dist/data/model/sdk_config_capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk_config_capture.js","sourceRoot":"","sources":["../../../src/data/model/sdk_config_capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC;;;;;OAKG;IACH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAIH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAqC;IAErC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAqC;IAErC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QAC5D,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}