@smileid/usesmileid 12.0.0-beta01

package/dist/metadata/optional_native_modules.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Lazy bridges to optional `expo-device` / `expo-network` peer deps.
+ * Both are declared `optional: true` in `peerDependenciesMeta` so
+ * partners who don't need richer metadata don't pay the install cost.
+ *
+ * **Pattern:** dynamic `require()` wrapped in `try/catch`. Metro
+ * tolerates the missing-module case without failing the build —
+ * resolution attempts at runtime, the catch swallows the failure,
+ * and the metadata factory falls back to empty / zero defaults.
+ *
+ * Concrete scenario this prevents: a hard `import` would fail the
+ * bundle for every partner, even those who don't want richer
+ * metadata. The optional peer + try/require pattern keeps the
+ * default install footprint minimal.
+ */
+type DeviceModule = {
+    readonly modelName?: string | null;
+    readonly brand?: string | null;
+    readonly supportedCpuArchitectures?: readonly string[] | null;
+    readonly totalMemory?: number | null;
+};
+type NetworkModule = {
+    getNetworkStateAsync(): Promise<{
+        readonly type?: string | null;
+        readonly isConnected?: boolean | null;
+        readonly isInternetReachable?: boolean | null;
+    }>;
+    getIpAddressAsync?(): Promise<string>;
+};
+/**
+ * Load `expo-device`'s native module once, cached for the process
+ * lifetime. Returns `null` if the native module isn't linked into
+ * the host app (graceful degradation).
+ *
+ * **Why bypass `require("expo-device")`:** `expo-device`'s entry
+ * (`Device.js`) does `import ExpoDevice from './ExpoDevice'`, which
+ * evaluates `ExpoDevice.js` whose top-level statement is
+ * `export default requireNativeModule('ExpoDevice')`. The
+ * **throwing** variant — `requireNativeModule` throws "Cannot find
+ * native module 'ExpoDevice'" synchronously when the native side
+ * isn't linked. Concrete scenario this caused: pnpm-hoisted
+ * `expo-device` JS at the workspace root was reachable from a host
+ * app's Metro bundle even though the host app didn't link the native
+ * module. The throw at module init bypassed every try/catch we
+ * wrapped the require in.
+ *
+ * The fix: skip `expo-device`'s entry entirely. Pull the native
+ * module via `expo-modules-core`'s `requireOptionalNativeModule`,
+ * which returns `null` instead of throwing. The raw native module
+ * exposes the same fields (`brand`, `modelName`,
+ * `supportedCpuArchitectures`, `totalMemory`) that
+ * `expo-device/Device.js` re-exports — see `expo-device`'s
+ * native-module schema in `node_modules/expo-device/build/Device.js`.
+ * `expo-modules-core` is a transitive dep of `expo` so it's always
+ * present in any Expo app.
+ */
+export declare function loadExpoDevice(): DeviceModule | null;
+/**
+ * Load `expo-network`'s native module once, cached for the process
+ * lifetime. Returns `null` if the native module isn't linked into the
+ * host app (graceful degradation).
+ *
+ * **Why bypass `require("expo-network")`:** like `expo-device`, its
+ * entry (`Network.js`) imports `./ExpoNetwork`, whose top-level
+ * statement is `requireNativeModule('ExpoNetwork')` — the **throwing**
+ * variant that raises "Cannot find native module 'ExpoNetwork'"
+ * synchronously at module init when the native side isn't linked. That
+ * throw fires during Metro's module evaluation and bypasses a
+ * `try/catch` wrapped around the `require`, so a host app that reaches
+ * the pnpm-hoisted `expo-network` JS without linking the native module
+ * crashes on construction. The fix mirrors `loadExpoDevice`: pull the
+ * raw native module via `expo-modules-core`'s
+ * `requireOptionalNativeModule`, which returns `null` instead of
+ * throwing. The raw module exposes `getNetworkStateAsync` /
+ * `getIpAddressAsync` directly — the same methods `expo-network`'s
+ * `Network.js` calls on it.
+ *
+ * Note: `getNetworkStateAsync()` is async — the factory warms it up
+ * fire-and-forget and falls back to empty defaults until it settles.
+ */
+export declare function loadExpoNetwork(): NetworkModule | null;
+/** Test-only seam — clears the module cache so tests can re-evaluate. */
+export declare function _resetOptionalModulesForTesting(): void;
+export {};
+//# sourceMappingURL=optional_native_modules.d.ts.map

package/dist/metadata/optional_native_modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional_native_modules.d.ts","sourceRoot":"","sources":["../../src/metadata/optional_native_modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,KAAK,YAAY,GAAG;IAClB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,oBAAoB,IAAI,OAAO,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KAC/C,CAAC,CAAC;IACH,iBAAiB,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACvC,CAAC;AAKF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,cAAc,IAAI,YAAY,GAAG,IAAI,CAapD;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,IAAI,aAAa,GAAG,IAAI,CAatD;AAED,yEAAyE;AACzE,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD"}

package/dist/metadata/optional_native_modules.js

@@ -0,0 +1,101 @@
+/**
+ * Lazy bridges to optional `expo-device` / `expo-network` peer deps.
+ * Both are declared `optional: true` in `peerDependenciesMeta` so
+ * partners who don't need richer metadata don't pay the install cost.
+ *
+ * **Pattern:** dynamic `require()` wrapped in `try/catch`. Metro
+ * tolerates the missing-module case without failing the build —
+ * resolution attempts at runtime, the catch swallows the failure,
+ * and the metadata factory falls back to empty / zero defaults.
+ *
+ * Concrete scenario this prevents: a hard `import` would fail the
+ * bundle for every partner, even those who don't want richer
+ * metadata. The optional peer + try/require pattern keeps the
+ * default install footprint minimal.
+ */
+let _device;
+let _network;
+/**
+ * Load `expo-device`'s native module once, cached for the process
+ * lifetime. Returns `null` if the native module isn't linked into
+ * the host app (graceful degradation).
+ *
+ * **Why bypass `require("expo-device")`:** `expo-device`'s entry
+ * (`Device.js`) does `import ExpoDevice from './ExpoDevice'`, which
+ * evaluates `ExpoDevice.js` whose top-level statement is
+ * `export default requireNativeModule('ExpoDevice')`. The
+ * **throwing** variant — `requireNativeModule` throws "Cannot find
+ * native module 'ExpoDevice'" synchronously when the native side
+ * isn't linked. Concrete scenario this caused: pnpm-hoisted
+ * `expo-device` JS at the workspace root was reachable from a host
+ * app's Metro bundle even though the host app didn't link the native
+ * module. The throw at module init bypassed every try/catch we
+ * wrapped the require in.
+ *
+ * The fix: skip `expo-device`'s entry entirely. Pull the native
+ * module via `expo-modules-core`'s `requireOptionalNativeModule`,
+ * which returns `null` instead of throwing. The raw native module
+ * exposes the same fields (`brand`, `modelName`,
+ * `supportedCpuArchitectures`, `totalMemory`) that
+ * `expo-device/Device.js` re-exports — see `expo-device`'s
+ * native-module schema in `node_modules/expo-device/build/Device.js`.
+ * `expo-modules-core` is a transitive dep of `expo` so it's always
+ * present in any Expo app.
+ */
+export function loadExpoDevice() {
+    if (_device !== undefined)
+        return _device;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const core = require("expo-modules-core");
+        _device =
+            core.requireOptionalNativeModule?.("ExpoDevice") ?? null;
+    }
+    catch {
+        _device = null;
+    }
+    return _device;
+}
+/**
+ * Load `expo-network`'s native module once, cached for the process
+ * lifetime. Returns `null` if the native module isn't linked into the
+ * host app (graceful degradation).
+ *
+ * **Why bypass `require("expo-network")`:** like `expo-device`, its
+ * entry (`Network.js`) imports `./ExpoNetwork`, whose top-level
+ * statement is `requireNativeModule('ExpoNetwork')` — the **throwing**
+ * variant that raises "Cannot find native module 'ExpoNetwork'"
+ * synchronously at module init when the native side isn't linked. That
+ * throw fires during Metro's module evaluation and bypasses a
+ * `try/catch` wrapped around the `require`, so a host app that reaches
+ * the pnpm-hoisted `expo-network` JS without linking the native module
+ * crashes on construction. The fix mirrors `loadExpoDevice`: pull the
+ * raw native module via `expo-modules-core`'s
+ * `requireOptionalNativeModule`, which returns `null` instead of
+ * throwing. The raw module exposes `getNetworkStateAsync` /
+ * `getIpAddressAsync` directly — the same methods `expo-network`'s
+ * `Network.js` calls on it.
+ *
+ * Note: `getNetworkStateAsync()` is async — the factory warms it up
+ * fire-and-forget and falls back to empty defaults until it settles.
+ */
+export function loadExpoNetwork() {
+    if (_network !== undefined)
+        return _network;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        const core = require("expo-modules-core");
+        _network =
+            core.requireOptionalNativeModule?.("ExpoNetwork") ?? null;
+    }
+    catch {
+        _network = null;
+    }
+    return _network;
+}
+/** Test-only seam — clears the module cache so tests can re-evaluate. */
+export function _resetOptionalModulesForTesting() {
+    _device = undefined;
+    _network = undefined;
+}
+//# sourceMappingURL=optional_native_modules.js.map

package/dist/metadata/optional_native_modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional_native_modules.js","sourceRoot":"","sources":["../../src/metadata/optional_native_modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH,IAAI,OAAwC,CAAC;AAC7C,IAAI,QAA0C,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAEvC,CAAC;QACF,OAAO;YACL,IAAI,CAAC,2BAA2B,EAAE,CAAe,YAAY,CAAC,IAAI,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAEvC,CAAC;QACF,QAAQ;YACN,IAAI,CAAC,2BAA2B,EAAE,CAAgB,aAAa,CAAC,IAAI,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,+BAA+B;IAC7C,OAAO,GAAG,SAAS,CAAC;IACpB,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC"}

package/dist/metadata/use_smile_id_metadata.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Metadata payload submitted alongside every job request.
+ *
+ * Wire format: a JSON array of `{name, value}` entries (NOT a flat object) — the
+ * server and partner dashboards parse it positionally; `toEntries()` produces it.
+ *
+ * Omission rules: always-present (`sdk_version`, `sdk`, `device_os`,
+ * `device_model`, `app_name`, `session_id`, `proxy`, `proximity_sensor`,
+ * `security_policy_version`); conditional strings dropped when empty; conditional
+ * integers dropped when zero; booleans always included, stringified.
+ */
+export type MetadataEntry = {
+    readonly name: string;
+    readonly value: string;
+};
+export type UseSmileIDMetadataFields = {
+    readonly sdkVersion: string;
+    readonly sdk: string;
+    readonly deviceOs: string;
+    readonly deviceModel: string;
+    readonly appName: string;
+    readonly sessionId: string;
+    readonly clientIp: string;
+    readonly networkConnection: string;
+    readonly carrierInfo: string;
+    readonly proxy: boolean;
+    readonly timezone: string;
+    readonly locale: string;
+    readonly screenResolution: string;
+    readonly memoryInfoMb: number;
+    readonly deviceOrientation: string;
+    readonly systemArchitecture: string;
+    readonly numberOfCameras: number;
+    readonly hostApplication: string;
+    readonly proximitySensor: boolean;
+    readonly securityPolicyVersion: string;
+    /** Android Keystore security level (`KeyInfo.getSecurityLevel()`, `-2`…`2`) → `supports_hardware_attestation`. Undefined on iOS and before warm-up resolves. */
+    readonly hardwareAttestationSecurityLevel?: number;
+    /** base64-DER leaf-first X.509 chain → `attestation_certificate_chain` (JSON-array string). Undefined/empty when no chain was minted. */
+    readonly attestationCertificateChain?: readonly string[];
+    /** Apple App Attest support → `supports_app_attest`. Undefined on Android and before warm-up resolves. */
+    readonly supportsAppAttest?: boolean;
+    /** Capture-param provenance → `sdk_config_source`: `"sdk_config"` when a valid JWT claim was decoded, else `"default"`. */
+    readonly sdkConfigSource: string;
+    /** Resolved selfie width (px) → `image_width`: `sdk_config.selfie.width` override (when width+height > 0) or SDK default (480). Omitted when zero. */
+    readonly imageWidth: number;
+    /** Resolved selfie height (px) → `image_height`: `sdk_config.selfie.height` override (when width+height > 0) or SDK default (640). Omitted when zero. */
+    readonly imageHeight: number;
+};
+export declare class UseSmileIDMetadata {
+    private readonly _fields;
+    private readonly _extraEntries;
+    constructor(fields: UseSmileIDMetadataFields, extraEntries?: readonly MetadataEntry[]);
+    /** Snapshot of the typed fields. Useful for tests and analytics hooks. */
+    toFields(): UseSmileIDMetadataFields;
+    /**
+     * Returns a copy carrying additional wire entries appended after the
+     * device-metadata fields — for flow state that is not device metadata, e.g.
+     * the per-side document image origins (`DocumentFront/BackImageOrigin`).
+     */
+    withAdditionalEntries(extra: readonly MetadataEntry[]): UseSmileIDMetadata;
+    /**
+     * Canonical wire-format serialization to an array of `{name, value}` entries.
+     * Empty strings and zero integers are dropped so the payload stays compact
+     * (e.g. an emulator with no carrier info omits `carrier_info` entirely).
+     */
+    toEntries(): readonly MetadataEntry[];
+}
+//# sourceMappingURL=use_smile_id_metadata.d.ts.map

package/dist/metadata/use_smile_id_metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use_smile_id_metadata.d.ts","sourceRoot":"","sources":["../../src/metadata/use_smile_id_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,gKAAgK;IAChK,QAAQ,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC;IACnD,yIAAyI;IACzI,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzD,0GAA0G;IAC1G,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,2HAA2H;IAC3H,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,sJAAsJ;IACtJ,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yJAAyJ;IACzJ,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;IACnD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;gBAGvD,MAAM,EAAE,wBAAwB,EAChC,YAAY,GAAE,SAAS,aAAa,EAAO;IAM7C,0EAA0E;IAC1E,QAAQ,IAAI,wBAAwB;IAIpC;;;;OAIG;IACH,qBAAqB,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,GAAG,kBAAkB;IAO1E;;;;OAIG;IACH,SAAS,IAAI,SAAS,aAAa,EAAE;CA2EtC"}

package/dist/metadata/use_smile_id_metadata.js

@@ -0,0 +1,116 @@
+/**
+ * Metadata payload submitted alongside every job request.
+ *
+ * Wire format: a JSON array of `{name, value}` entries (NOT a flat object) — the
+ * server and partner dashboards parse it positionally; `toEntries()` produces it.
+ *
+ * Omission rules: always-present (`sdk_version`, `sdk`, `device_os`,
+ * `device_model`, `app_name`, `session_id`, `proxy`, `proximity_sensor`,
+ * `security_policy_version`); conditional strings dropped when empty; conditional
+ * integers dropped when zero; booleans always included, stringified.
+ */
+export class UseSmileIDMetadata {
+    _fields;
+    _extraEntries;
+    constructor(fields, extraEntries = []) {
+        this._fields = fields;
+        this._extraEntries = extraEntries;
+    }
+    /** Snapshot of the typed fields. Useful for tests and analytics hooks. */
+    toFields() {
+        return this._fields;
+    }
+    /**
+     * Returns a copy carrying additional wire entries appended after the
+     * device-metadata fields — for flow state that is not device metadata, e.g.
+     * the per-side document image origins (`DocumentFront/BackImageOrigin`).
+     */
+    withAdditionalEntries(extra) {
+        return new UseSmileIDMetadata(this._fields, [
+            ...this._extraEntries,
+            ...extra,
+        ]);
+    }
+    /**
+     * Canonical wire-format serialization to an array of `{name, value}` entries.
+     * Empty strings and zero integers are dropped so the payload stays compact
+     * (e.g. an emulator with no carrier info omits `carrier_info` entirely).
+     */
+    toEntries() {
+        const fields = this._fields;
+        const entries = [];
+        // Always-present: SDK constants, booleans, sessionId (UUID), and
+        // device_os/device_model/app_name (emitted even when empty). The rest
+        // below use the drop-when-empty rule.
+        entries.push({ name: "sdk_version", value: fields.sdkVersion });
+        entries.push({ name: "sdk", value: fields.sdk });
+        entries.push({ name: "device_os", value: fields.deviceOs });
+        entries.push({ name: "device_model", value: fields.deviceModel });
+        entries.push({ name: "app_name", value: fields.appName });
+        entries.push({ name: "session_id", value: fields.sessionId });
+        // Always-present booleans (stringified, never empty by construction)
+        entries.push({ name: "proxy", value: String(fields.proxy) });
+        entries.push({
+            name: "proximity_sensor",
+            value: String(fields.proximitySensor),
+        });
+        // Conditional strings — omitted when empty
+        pushIfNonEmpty(entries, "client_ip", fields.clientIp);
+        pushIfNonEmpty(entries, "network_connection", fields.networkConnection);
+        pushIfNonEmpty(entries, "carrier_info", fields.carrierInfo);
+        pushIfNonEmpty(entries, "timezone", fields.timezone);
+        pushIfNonEmpty(entries, "locale", fields.locale);
+        pushIfNonEmpty(entries, "screen_resolution", fields.screenResolution);
+        pushIfNonEmpty(entries, "device_orientation", fields.deviceOrientation);
+        pushIfNonEmpty(entries, "system_architecture", fields.systemArchitecture);
+        pushIfNonEmpty(entries, "host_application", fields.hostApplication);
+        // Conditional integers — omitted when zero
+        pushIfNonZero(entries, "memory_info", fields.memoryInfoMb);
+        pushIfNonZero(entries, "number_of_cameras", fields.numberOfCameras);
+        // Always-present trailer
+        entries.push({
+            name: "security_policy_version",
+            value: fields.securityPolicyVersion,
+        });
+        // Device-integrity capability — omitted until per-session warm-up resolves.
+        // Android: Keystore security-level integer + cert chain; iOS: App Attest flag.
+        if (fields.hardwareAttestationSecurityLevel !== undefined) {
+            entries.push({
+                name: "supports_hardware_attestation",
+                value: String(fields.hardwareAttestationSecurityLevel),
+            });
+            const chain = fields.attestationCertificateChain;
+            if (chain && chain.length > 0) {
+                entries.push({
+                    name: "attestation_certificate_chain",
+                    value: JSON.stringify(chain),
+                });
+            }
+        }
+        if (fields.supportsAppAttest !== undefined) {
+            entries.push({
+                name: "supports_app_attest",
+                value: String(fields.supportsAppAttest),
+            });
+        }
+        // sdk_config provenance — always-present string, never empty.
+        entries.push({ name: "sdk_config_source", value: fields.sdkConfigSource });
+        // Resolved selfie dimensions — omitted when zero.
+        pushIfNonZero(entries, "image_width", fields.imageWidth);
+        pushIfNonZero(entries, "image_height", fields.imageHeight);
+        // Flow-state entries appended after the device-metadata fields.
+        entries.push(...this._extraEntries);
+        return Object.freeze(entries);
+    }
+}
+function pushIfNonEmpty(entries, name, value) {
+    if (value && value.length > 0) {
+        entries.push({ name, value });
+    }
+}
+function pushIfNonZero(entries, name, value) {
+    if (value !== 0) {
+        entries.push({ name, value: String(value) });
+    }
+}
+//# sourceMappingURL=use_smile_id_metadata.js.map

package/dist/metadata/use_smile_id_metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use_smile_id_metadata.js","sourceRoot":"","sources":["../../src/metadata/use_smile_id_metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA0CH,MAAM,OAAO,kBAAkB;IACZ,OAAO,CAA2B;IAClC,aAAa,CAA2B;IAEzD,YACE,MAAgC,EAChC,eAAyC,EAAE;QAE3C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,QAAQ;QACN,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;OAIG;IACH,qBAAqB,CAAC,KAA+B;QACnD,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE;YAC1C,GAAG,IAAI,CAAC,aAAa;YACrB,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,iEAAiE;QACjE,sEAAsE;QACtE,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAE9D,qEAAqE;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;SACtC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtD,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxE,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACtE,cAAc,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACxE,cAAc,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC1E,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEpE,2CAA2C;QAC3C,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3D,aAAa,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAEpE,yBAAyB;QACzB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,MAAM,CAAC,qBAAqB;SACpC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,+EAA+E;QAC/E,IAAI,MAAM,CAAC,gCAAgC,KAAK,SAAS,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,+BAA+B;gBACrC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,2BAA2B,CAAC;YACjD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,+BAA+B;oBACrC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;QAED,8DAA8D;QAC9D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3E,kDAAkD;QAClD,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAE3D,gEAAgE;QAChE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QAEpC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;CACF;AAED,SAAS,cAAc,CACrB,OAAwB,EACxB,IAAY,EACZ,KAAa;IAEb,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,OAAwB,EACxB,IAAY,EACZ,KAAa;IAEb,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/metadata/use_smile_id_metadata_factory.d.ts

@@ -0,0 +1,82 @@
+import { UseSmileIDMetadata } from "./use_smile_id_metadata";
+import type { SdkConfig } from "../data/model/sdk_config";
+export interface MetadataProvider {
+    /**
+     * Build a metadata snapshot for a single submission.
+     *
+     * When `sdkConfig` is provided (the decoded `sdk_config` JWT claim),
+     * the snapshot includes:
+     *   - `sdk_config_source: "sdk_config"` — the backend gates its
+     *     dimension-consistency check on this value.
+     *   - `image_width` / `image_height` — the resolved selfie capture
+     *     dimensions (server override or SDK default of 480 × 640).
+     *
+     * When `sdkConfig` is absent, `sdk_config_source` is `"default"` and
+     * `image_width` / `image_height` reflect the SDK defaults.
+     */
+    make(sdkConfig?: SdkConfig): UseSmileIDMetadata;
+    /**
+     * Stable per-flow session identifier — used as the analytics
+     * events' `session_id` value and the storage session directory name.
+     */
+    readonly sessionId: string;
+}
+export type MetadataFactoryOptions = {
+    /**
+     * Override the partner's app name. Default is empty string — RN
+     * does not expose the host-app name without `expo-application` as
+     * a peer dep. Partners using `expo-application` typically pass
+     * `Application.applicationName` here.
+     */
+    readonly appName?: string;
+    /**
+     * Override the host-app version string (e.g. `'PartnerApp v1.2.3'`).
+     * Default empty.
+     */
+    readonly hostApplication?: string;
+};
+export declare class UseSmileIDMetadataFactory implements MetadataProvider {
+    private readonly _sessionId;
+    private readonly _deviceOs;
+    private readonly _deviceModel;
+    private readonly _appName;
+    private readonly _hostApplication;
+    private readonly _systemArchitecture;
+    private readonly _memoryInfoMb;
+    private _clientIp;
+    private _networkConnection;
+    private _hardwareAttestation?;
+    constructor(options?: MetadataFactoryOptions);
+    /**
+     * Stable per-flow session identifier. Used as the storage session
+     * directory name, the analytics events' `session_id` value, and the
+     * Sentry user-id for crash-report correlation (see
+     * `UseSmileIDCrashReporting.setUserId`).
+     */
+    get sessionId(): string;
+    /**
+     * Resolve the async `expo-network` fields into the cache. Called
+     * from the constructor as fire-and-forget; partners can also
+     * `await` it explicitly when they want to guarantee populated
+     * network fields on the first submission.
+     */
+    warmup(): Promise<void>;
+    private _warmupAsync;
+    /**
+     * Resolve the per-session hardware-attestation snapshot. Called from the
+     * constructor as fire-and-forget. Android mints a Keystore-backed key
+     * (challenge `SHA-256(sessionId)`); iOS reports App Attest support.
+     */
+    private _warmUpHardwareAttestation;
+    /** Build a metadata snapshot for a single submission. */
+    make(sdkConfig?: SdkConfig): UseSmileIDMetadata;
+}
+/**
+ * Generate a session-stable identifier. Prefers `crypto.randomUUID`
+ * (Hermes 0.79+ / RN 0.76+) and falls back to a Math.random-based
+ * UUID-like for older runtimes. The fallback is NOT
+ * cryptographically random — that's acceptable here because the
+ * session ID's purpose is correlation, not security.
+ */
+export declare function generateSessionId(): string;
+//# sourceMappingURL=use_smile_id_metadata_factory.d.ts.map

package/dist/metadata/use_smile_id_metadata_factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use_smile_id_metadata_factory.d.ts","sourceRoot":"","sources":["../../src/metadata/use_smile_id_metadata_factory.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AA+C1D,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;;;OAYG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,kBAAkB,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,qBAAa,yBAA0B,YAAW,gBAAgB;IAEhE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAKvC,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,kBAAkB,CAAM;IAIhC,OAAO,CAAC,oBAAoB,CAAC,CAAsB;gBAEvC,OAAO,GAAE,sBAA2B;IAkDhD;;;;;OAKG;IACH,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;YAIf,YAAY;IA0B1B;;;;OAIG;YACW,0BAA0B;IAWxC,yDAAyD;IACzD,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,kBAAkB;CAqEhD;AA2DD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAqB1C"}