@smileid/usesmileid 12.0.0-beta01

package/dist/core/models/head_turn_direction.js

@@ -0,0 +1,14 @@
+/**
+ * Head-turn direction enum. Drives the direction-specific Enhanced
+ * Smart Selfie liveness animation and the scan-state transitioner's
+ * expected-direction tracking.
+ *
+ * Order is significant — used by the head-turn validator and surfaced
+ * to analytics dashboards.
+ */
+export const HEAD_TURN_DIRECTIONS = [
+    "look_left",
+    "look_right",
+    "look_up",
+];
+//# sourceMappingURL=head_turn_direction.js.map

package/dist/core/models/head_turn_direction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"head_turn_direction.js","sourceRoot":"","sources":["../../../src/core/models/head_turn_direction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW;IACX,YAAY;IACZ,SAAS;CACD,CAAC"}

package/dist/core/models/job_type.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Identifies the type of identity verification job to perform.
+ *
+ * The raw numeric value is the `job_type_id` carried in API requests
+ * and is part of the server wire-format contract — changing it is a
+ * breaking change.
+ */
+export declare const JobType: {
+    readonly biometricKyc: 1;
+    readonly smartSelfieAuthentication: 2;
+    readonly smartSelfieEnrollment: 4;
+    readonly enhancedKyc: 5;
+    readonly documentVerification: 6;
+    readonly bvn: 7;
+    readonly enhancedDocumentVerification: 11;
+    /**
+     * Sentinel used when no job type has been configured, or when the
+     * server returns a value not recognised by this SDK version. Update
+     * the SDK to pick up new values.
+     */
+    readonly unknown: -1;
+};
+export type JobType = (typeof JobType)[keyof typeof JobType];
+export type JobTypeName = keyof typeof JobType;
+/**
+ * Look up a `JobType` by its raw integer value. Returns `unknown` when
+ * no case matches.
+ */
+export declare function jobTypeFromValue(value: number): JobType;
+/** True when completing this job involves capturing a selfie. */
+export declare function requiresSelfie(jobType: JobType): boolean;
+/** True when completing this job involves capturing an identity document. */
+export declare function requiresDocument(jobType: JobType): boolean;
+//# sourceMappingURL=job_type.d.ts.map

package/dist/core/models/job_type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_type.d.ts","sourceRoot":"","sources":["../../../src/core/models/job_type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,OAAO;;;;;;;;IAQlB;;;;OAIG;;CAEK,CAAC;AAEX,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,OAAO,OAAO,CAAC,CAAC;AAE7D,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,OAAO,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAMxD;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAM1D"}

package/dist/core/models/job_type.js

@@ -0,0 +1,43 @@
+/**
+ * Identifies the type of identity verification job to perform.
+ *
+ * The raw numeric value is the `job_type_id` carried in API requests
+ * and is part of the server wire-format contract — changing it is a
+ * breaking change.
+ */
+export const JobType = {
+    biometricKyc: 1,
+    smartSelfieAuthentication: 2,
+    smartSelfieEnrollment: 4,
+    enhancedKyc: 5,
+    documentVerification: 6,
+    bvn: 7,
+    enhancedDocumentVerification: 11,
+    /**
+     * Sentinel used when no job type has been configured, or when the
+     * server returns a value not recognised by this SDK version. Update
+     * the SDK to pick up new values.
+     */
+    unknown: -1,
+};
+/**
+ * Look up a `JobType` by its raw integer value. Returns `unknown` when
+ * no case matches.
+ */
+export function jobTypeFromValue(value) {
+    const match = Object.values(JobType).find((v) => v === value);
+    return (match ?? JobType.unknown);
+}
+/** True when completing this job involves capturing a selfie. */
+export function requiresSelfie(jobType) {
+    return (jobType === JobType.biometricKyc ||
+        jobType === JobType.smartSelfieAuthentication ||
+        jobType === JobType.smartSelfieEnrollment);
+}
+/** True when completing this job involves capturing an identity document. */
+export function requiresDocument(jobType) {
+    return (jobType === JobType.biometricKyc ||
+        jobType === JobType.documentVerification ||
+        jobType === JobType.enhancedDocumentVerification);
+}
+//# sourceMappingURL=job_type.js.map

package/dist/core/models/job_type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job_type.js","sourceRoot":"","sources":["../../../src/core/models/job_type.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,YAAY,EAAE,CAAC;IACf,yBAAyB,EAAE,CAAC;IAC5B,qBAAqB,EAAE,CAAC;IACxB,WAAW,EAAE,CAAC;IACd,oBAAoB,EAAE,CAAC;IACvB,GAAG,EAAE,CAAC;IACN,4BAA4B,EAAE,EAAE;IAChC;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC;CACH,CAAC;AAMX;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,CAAY,CAAC;AAC/C,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO,CACL,OAAO,KAAK,OAAO,CAAC,YAAY;QAChC,OAAO,KAAK,OAAO,CAAC,yBAAyB;QAC7C,OAAO,KAAK,OAAO,CAAC,qBAAqB,CAC1C,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,CACL,OAAO,KAAK,OAAO,CAAC,YAAY;QAChC,OAAO,KAAK,OAAO,CAAC,oBAAoB;QACxC,OAAO,KAAK,OAAO,CAAC,4BAA4B,CACjD,CAAC;AACJ,CAAC"}

package/dist/core/models/ml_config.d.ts

@@ -0,0 +1,41 @@
+import type { FaceConfig } from "@smileid/usesmileid_bridge";
+import type { FaceAnalyzer, DocumentAnalyzer } from "@smileid/usesmileid_platform_interface";
+/**
+ * ML configuration — the registry maps a `CaptureType` to its analyzer
+ * plus the configured wire payload the orchestrator pushes through
+ * `FaceAnalyzer.configure()` at capture start.
+ *
+ * Per-capture-type registration is exposed via
+ * `ml.analyzers((a) => a.forCaptureType(CaptureType.selfie, ...))`. The
+ * concrete type is the `FaceAnalyzer` / `DocumentAnalyzer` exported by
+ * each federated provider package; the `*Config` companion is the
+ * pre-built wire payload computed from the DSL scope at builder
+ * `build()` time and stable for the lifetime of the flow.
+ *
+ * `CaptureType` is a TypeScript enum (not a string union) so bare
+ * string literals do not typecheck — partners must reference the
+ * namespaced enum value.
+ */
+export declare enum CaptureType {
+    /**
+     * Selfie capture — front-facing camera, face oval overlay, head-pose
+     * validation.
+     */
+    selfie = "selfie",
+    /** Document capture — rectangular frame, optional two-sided. */
+    document = "document"
+}
+export type AnalyzerRegistry = {
+    readonly selfie?: FaceAnalyzer;
+    /**
+     * Wire-shape `FaceConfig` built from the DSL scope (analyzer key,
+     * ScanPerformanceProfile, FaceDetectorConfig). Falls back to native
+     * platform defaults when omitted.
+     */
+    readonly selfieConfig?: FaceConfig;
+    readonly document?: DocumentAnalyzer;
+};
+export type MLConfig = {
+    readonly analyzers: AnalyzerRegistry;
+};
+//# sourceMappingURL=ml_config.d.ts.map

package/dist/core/models/ml_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ml_config.d.ts","sourceRoot":"","sources":["../../../src/core/models/ml_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,wCAAwC,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AAEH,oBAAY,WAAW;IACrB;;;OAGG;IACH,MAAM,WAAW;IACjB,gEAAgE;IAChE,QAAQ,aAAa;CACtB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;CACtC,CAAC"}

package/dist/core/models/ml_config.js

@@ -0,0 +1,27 @@
+/**
+ * ML configuration — the registry maps a `CaptureType` to its analyzer
+ * plus the configured wire payload the orchestrator pushes through
+ * `FaceAnalyzer.configure()` at capture start.
+ *
+ * Per-capture-type registration is exposed via
+ * `ml.analyzers((a) => a.forCaptureType(CaptureType.selfie, ...))`. The
+ * concrete type is the `FaceAnalyzer` / `DocumentAnalyzer` exported by
+ * each federated provider package; the `*Config` companion is the
+ * pre-built wire payload computed from the DSL scope at builder
+ * `build()` time and stable for the lifetime of the flow.
+ *
+ * `CaptureType` is a TypeScript enum (not a string union) so bare
+ * string literals do not typecheck — partners must reference the
+ * namespaced enum value.
+ */
+export var CaptureType;
+(function (CaptureType) {
+    /**
+     * Selfie capture — front-facing camera, face oval overlay, head-pose
+     * validation.
+     */
+    CaptureType["selfie"] = "selfie";
+    /** Document capture — rectangular frame, optional two-sided. */
+    CaptureType["document"] = "document";
+})(CaptureType || (CaptureType = {}));
+//# sourceMappingURL=ml_config.js.map

package/dist/core/models/ml_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ml_config.js","sourceRoot":"","sources":["../../../src/core/models/ml_config.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAN,IAAY,WAQX;AARD,WAAY,WAAW;IACrB;;;OAGG;IACH,gCAAiB,CAAA;IACjB,gEAAgE;IAChE,oCAAqB,CAAA;AACvB,CAAC,EARW,WAAW,KAAX,WAAW,QAQtB"}

package/dist/core/models/network_config.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Network stack types — partner credentials, transport tuning, logging
+ * controls.
+ *
+ * Stub note: the network stack itself is not yet wired (see
+ * `docs/Architecture.md § Rollout`). The DSL builder accepts these
+ * values for forward-compatibility — the orchestrator will start
+ * honouring them when the network/job-submission milestone lands.
+ */
+import type { AxiosInstance } from "axios";
+import type { JobType } from "./job_type";
+/**
+ * HTTP log verbosity — progressively reveals more of each request as
+ * the level rises (less redaction).
+ *
+ * `LogLevel` is a TypeScript enum — partners must reference the
+ * namespaced value (`LogLevel.body`); bare string literals do not
+ * typecheck.
+ */
+export declare enum LogLevel {
+    /** Suppress all network logging. */
+    none = "none",
+    /** Method, URL, and status only. */
+    basic = "basic",
+    /** `basic` + request/response headers (pre-redaction applied). */
+    headers = "headers",
+    /** `headers` + request/response bodies. Verbose — partner-debug only. */
+    body = "body"
+}
+export type NetworkLoggingConfig = {
+    readonly enabled: boolean;
+    readonly level: LogLevel;
+    readonly redactHeaders: readonly string[];
+};
+/**
+ * Partner identity and per-job environment settings.
+ *
+ * The HTTP auth credential (`token`) and refresh callback (`onTokenExpired`)
+ * live on the parent {@link NetworkInnerConfig} instead — they are
+ * network-level concerns rather than partner identity.
+ */
+export type PartnerConfig = {
+    readonly partnerId: string;
+    /**
+     * Partner webhook endpoint. Sent as the `callback-url` HTTP header
+     * on every request and, when non-empty, as the `callback_url`
+     * multipart form part on Enhanced/Biometric KYC submissions.
+     */
+    readonly callbackUrl: string;
+    readonly useSandbox: boolean;
+    /**
+     * Optional partner-supplied key/value metadata. When set, attached
+     * as the `partner_params` JSON multipart form part on Enhanced /
+     * Biometric KYC submissions.
+     */
+    readonly partnerParams?: Record<string, string>;
+};
+/**
+ * Frozen snapshot of the network job + auth + partner + logging block.
+ *
+ * `token` is the HTTP credential stamped as the `smileid-token` header on
+ * every outbound request — separate from `partnerConfig` because
+ * authentication is a network-level credential, not partner identity.
+ *
+ * `onTokenExpired` is an optional async refresh callback invoked when the
+ * server returns a `401 Unauthorized` on an authed endpoint. The SDK
+ * collapses concurrent 401s into a single callback invocation via
+ * `TokenHolder`, updates the stored token on success, and retries the
+ * failed request once. If the callback throws (or the retry also returns
+ * 401) the original 401 is surfaced unchanged.
+ */
+export type NetworkInnerConfig = {
+    readonly jobType?: JobType;
+    readonly token?: string;
+    readonly onTokenExpired?: (previousToken: string) => Promise<string>;
+    readonly partnerConfig?: PartnerConfig;
+    readonly logging?: NetworkLoggingConfig;
+};
+/** Timeouts in seconds. */
+export type TimeoutConfig = {
+    readonly connect: number;
+    readonly read: number;
+    readonly write: number;
+    readonly call: number;
+};
+export type CacheConfig = {
+    readonly enabled: boolean;
+    readonly maxSize: number;
+};
+/**
+ * Retry strategy.
+ *   - `exponential`: `delay = min(initialDelay × multiplier^attempt, maxDelay)` plus `±jitter`
+ *   - `fixed`: constant `fixedDelay` between attempts
+ *   - `none`: no retry (`maxAttempts: 1`)
+ */
+export declare enum RetryStrategy {
+    exponential = "exponential",
+    fixed = "fixed",
+    none = "none"
+}
+/** Delays are in seconds. */
+export type RetryConfig = {
+    readonly maxAttempts: number;
+    readonly strategy: RetryStrategy;
+    readonly initialDelay: number;
+    readonly multiplier: number;
+    readonly maxDelay: number;
+    readonly jitter: number;
+    readonly fixedDelay: number;
+};
+/**
+ * A request interceptor that hooks into the SDK's axios client. The
+ * SDK's built-in interceptors (gzip, auth, request-MAC, integrity)
+ * implement this shape, and partners can supply their own.
+ */
+export interface Interceptor {
+    /** Wire the interceptor's request/response hooks onto the client. */
+    attach(client: AxiosInstance): void;
+}
+export type NetworkConfig = {
+    readonly config?: NetworkInnerConfig;
+    readonly timeouts?: TimeoutConfig;
+    readonly cache?: CacheConfig;
+    readonly retry?: RetryConfig;
+    readonly interceptors?: readonly Interceptor[];
+};
+//# sourceMappingURL=network_config.d.ts.map

package/dist/core/models/network_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network_config.d.ts","sourceRoot":"","sources":["../../../src/core/models/network_config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;GAOG;AACH,oBAAY,QAAQ;IAClB,oCAAoC;IACpC,IAAI,SAAS;IACb,oCAAoC;IACpC,KAAK,UAAU;IACf,kEAAkE;IAClE,OAAO,YAAY;IACnB,yEAAyE;IACzE,IAAI,SAAS;CACd;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;CACzC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,oBAAY,aAAa;IACvB,WAAW,gBAAgB;IAC3B,KAAK,UAAU;IACf,IAAI,SAAS;CACd;AAED,6BAA6B;AAC7B,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;CAChD,CAAC"}

package/dist/core/models/network_config.js

@@ -0,0 +1,41 @@
+/**
+ * Network stack types — partner credentials, transport tuning, logging
+ * controls.
+ *
+ * Stub note: the network stack itself is not yet wired (see
+ * `docs/Architecture.md § Rollout`). The DSL builder accepts these
+ * values for forward-compatibility — the orchestrator will start
+ * honouring them when the network/job-submission milestone lands.
+ */
+/**
+ * HTTP log verbosity — progressively reveals more of each request as
+ * the level rises (less redaction).
+ *
+ * `LogLevel` is a TypeScript enum — partners must reference the
+ * namespaced value (`LogLevel.body`); bare string literals do not
+ * typecheck.
+ */
+export var LogLevel;
+(function (LogLevel) {
+    /** Suppress all network logging. */
+    LogLevel["none"] = "none";
+    /** Method, URL, and status only. */
+    LogLevel["basic"] = "basic";
+    /** `basic` + request/response headers (pre-redaction applied). */
+    LogLevel["headers"] = "headers";
+    /** `headers` + request/response bodies. Verbose — partner-debug only. */
+    LogLevel["body"] = "body";
+})(LogLevel || (LogLevel = {}));
+/**
+ * Retry strategy.
+ *   - `exponential`: `delay = min(initialDelay × multiplier^attempt, maxDelay)` plus `±jitter`
+ *   - `fixed`: constant `fixedDelay` between attempts
+ *   - `none`: no retry (`maxAttempts: 1`)
+ */
+export var RetryStrategy;
+(function (RetryStrategy) {
+    RetryStrategy["exponential"] = "exponential";
+    RetryStrategy["fixed"] = "fixed";
+    RetryStrategy["none"] = "none";
+})(RetryStrategy || (RetryStrategy = {}));
+//# sourceMappingURL=network_config.js.map

package/dist/core/models/network_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network_config.js","sourceRoot":"","sources":["../../../src/core/models/network_config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH;;;;;;;GAOG;AACH,MAAM,CAAN,IAAY,QASX;AATD,WAAY,QAAQ;IAClB,oCAAoC;IACpC,yBAAa,CAAA;IACb,oCAAoC;IACpC,2BAAe,CAAA;IACf,kEAAkE;IAClE,+BAAmB,CAAA;IACnB,yEAAyE;IACzE,yBAAa,CAAA;AACf,CAAC,EATW,QAAQ,KAAR,QAAQ,QASnB;AAmED;;;;;GAKG;AACH,MAAM,CAAN,IAAY,aAIX;AAJD,WAAY,aAAa;IACvB,4CAA2B,CAAA;IAC3B,gCAAe,CAAA;IACf,8BAAa,CAAA;AACf,CAAC,EAJW,aAAa,KAAb,aAAa,QAIxB"}

package/dist/core/models/params.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Job-specific parameters and consent records.
+ */
+/** ISO-8601 timestamp string. */
+export type Timestamp = string;
+/** Records that a user has granted consent to biometric data collection. */
+export type ConsentInformation = {
+    /** `true` when the user tapped Allow on the consent screen. */
+    readonly granted: boolean;
+    /** ISO-8601 timestamp at which consent was granted. */
+    readonly grantedAt: Timestamp;
+    /** BCP-47 language code for the displayed consent notice (e.g. `"en"`). */
+    readonly noticeLanguage: string;
+    /** URL of the partner's privacy policy shown at consent time. */
+    readonly noticePrivacyPolicyUrl: string;
+};
+/**
+ * Subject's personal details, sent as the `user_details` JSON part.
+ * Requires non-blank `givenNames` and `lastName`, plus at least one of
+ * `email` or `phoneNumber`.
+ */
+export type UserDetails = {
+    /** Subject's given / first names. Required, non-blank. */
+    readonly givenNames: string;
+    /** Subject's family / last name. Required, non-blank. */
+    readonly lastName: string;
+    /** Optional email address. */
+    readonly email?: string;
+    /** Optional phone number in international format (leading `+`). */
+    readonly phoneNumber?: string;
+};
+/**
+ * Identity fields for an Enhanced KYC job. `userDetails` is no longer
+ * carried on this type — set it on the top-level builder via
+ * `b.userDetails = ...` (shared across every job that needs the
+ * `user_details` multipart part: enhanced_kyc, biometric_kyc, and the
+ * v3 smartSelfie* endpoints).
+ */
+export type EnhancedKYCParams = {
+    /** Document type (e.g. `"NATIONAL_ID"`, `"PASSPORT"`). */
+    readonly idType: string;
+    /** Document number. */
+    readonly idNumber: string;
+    /** ISO 3166-1 alpha-2 country code (e.g. `"KE"`). */
+    readonly country: string;
+    /** Optional bank code, sent as `bank_code`. */
+    readonly bankCode?: string;
+    /** Optional mobile operator code, sent as `operator`. */
+    readonly mobileOperator?: string;
+};
+/**
+ * Identity fields for a Biometric KYC job. `userDetails` is no longer
+ * carried on this type — set it on the top-level builder via
+ * `b.userDetails = ...` (shared across every job that needs the
+ * `user_details` multipart part: enhanced_kyc, biometric_kyc, and the
+ * v3 smartSelfie* endpoints).
+ */
+export type BiometricKYCParams = {
+    /** Document type (e.g. `"NATIONAL_ID"`, `"PASSPORT"`). */
+    readonly idType: string;
+    /** Document number. */
+    readonly idNumber: string;
+    /** ISO 3166-1 alpha-2 country code (e.g. `"KE"`). */
+    readonly country: string;
+    /**
+     * When `true`, sends `use_enrolled_image` so the server uses the
+     * partner's previously enrolled image. Capture still runs.
+     */
+    readonly useEnrolledImage: boolean;
+};
+/**
+ * Identity fields for a Document Verification job. `userDetails` rides
+ * on the top-level builder via `b.userDetails = ...`, not on this type.
+ */
+export type DocumentVerificationParams = {
+    /** ISO 3166-1 alpha-2 country code (e.g. `"KE"`). */
+    readonly country: string;
+    /** Document type. Optional — the server classifies it when omitted. */
+    readonly idType?: string;
+};
+/**
+ * Identity fields for an Enhanced Document Verification job.
+ * `userDetails` rides on the top-level builder via `b.userDetails =
+ * ...`, not on this type.
+ */
+export type EnhancedDocumentVerificationParams = {
+    /** ISO 3166-1 alpha-2 country code (e.g. `"KE"`). */
+    readonly country: string;
+    /** Document type. Required — drives the ID-authority cross-check. */
+    readonly idType: string;
+};
+//# sourceMappingURL=params.d.ts.map

package/dist/core/models/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../../src/core/models/params.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,iCAAiC;AACjC,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC;AAE/B,4EAA4E;AAC5E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,iEAAiE;IACjE,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,8BAA8B;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kCAAkC,GAAG;IAC/C,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC"}

package/dist/core/models/params.js

@@ -0,0 +1,5 @@
+/**
+ * Job-specific parameters and consent records.
+ */
+export {};
+//# sourceMappingURL=params.js.map

package/dist/core/models/params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.js","sourceRoot":"","sources":["../../../src/core/models/params.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/core/models/result.d.ts

@@ -0,0 +1,29 @@
+/**
+ * A result type for SDK operations that makes error handling explicit.
+ *
+ * Partners never need to unwrap a `UseSmileIDResult` directly — all
+ * errors are automatically surfaced through the `onResult` callback.
+ * The discriminated union lets partner code `switch (result.status)`
+ * and exhaust both branches without try/catch ceremony.
+ */
+export type UseSmileIDResult<T> = {
+    readonly status: "success";
+    readonly value: T;
+} | {
+    readonly status: "failure";
+    readonly error: unknown;
+} | {
+    readonly status: "cancelled";
+};
+/** Construct a successful result carrying `value`. */
+export declare function success<T>(value: T): UseSmileIDResult<T>;
+/** Construct a failed result carrying `error`. */
+export declare function failure<T>(error: unknown): UseSmileIDResult<T>;
+/**
+ * Construct a cancelled result — the user deliberately exited the flow
+ * (e.g. back-pressed out of the first screen) without completing or
+ * failing. Distinct from `failure` so partners can tell a user
+ * cancellation apart from an error.
+ */
+export declare function cancelled<T>(): UseSmileIDResult<T>;
+//# sourceMappingURL=result.d.ts.map

package/dist/core/models/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../src/core/models/result.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAErC,sDAAsD;AACtD,wBAAgB,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAExD;AAED,kDAAkD;AAClD,wBAAgB,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAE9D;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAElD"}

package/dist/core/models/result.js

@@ -0,0 +1,18 @@
+/** Construct a successful result carrying `value`. */
+export function success(value) {
+    return { status: "success", value };
+}
+/** Construct a failed result carrying `error`. */
+export function failure(error) {
+    return { status: "failure", error };
+}
+/**
+ * Construct a cancelled result — the user deliberately exited the flow
+ * (e.g. back-pressed out of the first screen) without completing or
+ * failing. Distinct from `failure` so partners can tell a user
+ * cancellation apart from an error.
+ */
+export function cancelled() {
+    return { status: "cancelled" };
+}
+//# sourceMappingURL=result.js.map

package/dist/core/models/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../src/core/models/result.ts"],"names":[],"mappings":"AAaA,sDAAsD;AACtD,MAAM,UAAU,OAAO,CAAI,KAAQ;IACjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,OAAO,CAAI,KAAc;IACvC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC"}

package/dist/data/api/auth/token_holder.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Thread-safe holder for the partner-supplied `smileid-token`.
+ *
+ * The token is mutable at runtime so a partner-supplied refresh callback can
+ * replace it on a 401 response and subsequent requests automatically pick up
+ * the fresh value via `SmileAuthInterceptor` (and `SmileRequestMacInterceptor`
+ * when MAC stamping is re-enabled). JavaScript's single-threaded event loop
+ * provides safe publication of field writes; this class adds **single-flight**
+ * refresh semantics so concurrent 401s collapse into one partner-callback
+ * invocation.
+ */
+export declare class TokenHolder {
+    private _token;
+    private _inflight;
+    constructor(initialToken: string);
+    /** Current token. Returns the latest value any refresh has written. */
+    get current(): string;
+    /**
+     * Replace the current token. Visible for integration tests that simulate a
+     * refresh without driving a full HTTP round-trip; production refresh flows
+     * always update the holder via {@link refreshSingleFlight}.
+     */
+    update(newToken: string): void;
+    /**
+     * Single-flight refresh.
+     *
+     * If another concurrent caller already refreshed the token while this caller
+     * was awaiting, return the new token without re-invoking `refreshCallback`.
+     * If a refresh is already in flight, join it instead of starting a second
+     * one. Otherwise invoke the callback, store the result, and return it.
+     *
+     * `refreshCallback` is supplied by the caller as a non-throwing
+     * `Promise<string | null>` returning function; `TokenRefreshInterceptor`
+     * wraps the partner-facing `(previous) => Promise<string>` so any thrown
+     * exception is collapsed to `null`. A `null` return tells the caller to
+     * surface the original 401 unchanged.
+     */
+    refreshSingleFlight(previousToken: string, refreshCallback: (previousToken: string) => Promise<string | null>): Promise<string | null>;
+}
+//# sourceMappingURL=token_holder.d.ts.map

package/dist/data/api/auth/token_holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_holder.d.ts","sourceRoot":"","sources":["../../../../src/data/api/auth/token_holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAuC;gBAE5C,YAAY,EAAE,MAAM;IAIhC,uEAAuE;IACvE,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI9B;;;;;;;;;;;;;OAaG;IACG,mBAAmB,CACvB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GACjE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAqB1B"}

package/dist/data/api/auth/token_holder.js

@@ -0,0 +1,67 @@
+/**
+ * Thread-safe holder for the partner-supplied `smileid-token`.
+ *
+ * The token is mutable at runtime so a partner-supplied refresh callback can
+ * replace it on a 401 response and subsequent requests automatically pick up
+ * the fresh value via `SmileAuthInterceptor` (and `SmileRequestMacInterceptor`
+ * when MAC stamping is re-enabled). JavaScript's single-threaded event loop
+ * provides safe publication of field writes; this class adds **single-flight**
+ * refresh semantics so concurrent 401s collapse into one partner-callback
+ * invocation.
+ */
+export class TokenHolder {
+    _token;
+    _inflight = null;
+    constructor(initialToken) {
+        this._token = initialToken;
+    }
+    /** Current token. Returns the latest value any refresh has written. */
+    get current() {
+        return this._token;
+    }
+    /**
+     * Replace the current token. Visible for integration tests that simulate a
+     * refresh without driving a full HTTP round-trip; production refresh flows
+     * always update the holder via {@link refreshSingleFlight}.
+     */
+    update(newToken) {
+        this._token = newToken;
+    }
+    /**
+     * Single-flight refresh.
+     *
+     * If another concurrent caller already refreshed the token while this caller
+     * was awaiting, return the new token without re-invoking `refreshCallback`.
+     * If a refresh is already in flight, join it instead of starting a second
+     * one. Otherwise invoke the callback, store the result, and return it.
+     *
+     * `refreshCallback` is supplied by the caller as a non-throwing
+     * `Promise<string | null>` returning function; `TokenRefreshInterceptor`
+     * wraps the partner-facing `(previous) => Promise<string>` so any thrown
+     * exception is collapsed to `null`. A `null` return tells the caller to
+     * surface the original 401 unchanged.
+     */
+    async refreshSingleFlight(previousToken, refreshCallback) {
+        if (this._token !== previousToken) {
+            return this._token;
+        }
+        if (this._inflight) {
+            return this._inflight;
+        }
+        const promise = (async () => {
+            try {
+                const next = await refreshCallback(previousToken);
+                if (next !== null) {
+                    this._token = next;
+                }
+                return next;
+            }
+            finally {
+                this._inflight = null;
+            }
+        })();
+        this._inflight = promise;
+        return promise;
+    }
+}
+//# sourceMappingURL=token_holder.js.map

package/dist/data/api/auth/token_holder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_holder.js","sourceRoot":"","sources":["../../../../src/data/api/auth/token_holder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,OAAO,WAAW;IACd,MAAM,CAAS;IACf,SAAS,GAAkC,IAAI,CAAC;IAExD,YAAY,YAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC;IAC7B,CAAC;IAED,uEAAuE;IACvE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,mBAAmB,CACvB,aAAqB,EACrB,eAAkE;QAElE,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;gBAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrB,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}