@smileid/usesmileid 12.0.0-beta01

package/dist/data/api/interceptors/token_refresh_interceptor.d.ts

@@ -0,0 +1,45 @@
+import type { AxiosInstance } from "axios";
+import type { TokenHolder } from "../auth/token_holder";
+/**
+ * Refreshes the partner-supplied `smileid-token` when the server responds
+ * with a `401 Unauthorized` and retries the request once with the fresh
+ * token.
+ *
+ * Policy:
+ * - **401 only.** A 403 means the token is valid but unauthorized for the
+ *   resource — a refresh will not change that, so 403s pass through unchanged.
+ * - **At most one refresh per request.** A marker is stamped on the request
+ *   config so a second 401 surfaces unchanged instead of looping.
+ * - **Single-flight via {@link TokenHolder}.** Concurrent 401s share one
+ *   refresh invocation.
+ *
+ * Sits outermost of the SDK-owned response interceptors so its retry — which
+ * re-issues via the same axios instance — re-runs the downstream interceptors
+ * (mac, integrity, auth) with the now-refreshed token (auth reads from the
+ * same `TokenHolder` this interceptor wrote into).
+ */
+export type TokenRefreshInterceptorOptions = {
+    readonly tokenHolder: TokenHolder;
+    /**
+     * Partner-supplied refresh callback. `undefined` disables refresh — every
+     * 401 surfaces unchanged. The callback receives the token the SDK was
+     * using and returns a fresh one; any thrown exception is treated as a
+     * refresh failure and the original 401 is surfaced unchanged.
+     *
+     * Field is `T | undefined` (not just `T?`) so that under
+     * `exactOptionalPropertyTypes`, callers can pass `onTokenExpired: maybeUndefined`
+     * directly without a narrowing dance.
+     */
+    readonly onTokenExpired: ((previousToken: string) => Promise<string>) | undefined;
+};
+export declare class TokenRefreshInterceptor {
+    private readonly _tokenHolder;
+    private readonly _onTokenExpired;
+    constructor(options: TokenRefreshInterceptorOptions);
+    /** Attach a response interceptor that intercepts 401s and retries once. */
+    attach(client: AxiosInstance): {
+        response: number;
+    };
+    private _onError;
+}
+//# sourceMappingURL=token_refresh_interceptor.d.ts.map

package/dist/data/api/interceptors/token_refresh_interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_refresh_interceptor.d.ts","sourceRoot":"","sources":["../../../../src/data/api/interceptors/token_refresh_interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EAGd,MAAM,OAAO,CAAC;AAEf,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;;;;OASG;IACH,QAAQ,CAAC,cAAc,EACnB,CAAC,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,GAC5C,SAAS,CAAC;CACf,CAAC;AASF,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAElB;gBAEF,OAAO,EAAE,8BAA8B;IAKnD,2EAA2E;IAC3E,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE;YAQrC,QAAQ;CAoCvB"}

package/dist/data/api/interceptors/token_refresh_interceptor.js

@@ -0,0 +1,58 @@
+/** Marker on `RequestOptions.config` so a second 401 stops here instead of looping. */
+const RETRIED_FLAG = "__smileid_token_refresh_retried";
+export class TokenRefreshInterceptor {
+    _tokenHolder;
+    _onTokenExpired;
+    constructor(options) {
+        this._tokenHolder = options.tokenHolder;
+        this._onTokenExpired = options.onTokenExpired;
+    }
+    /** Attach a response interceptor that intercepts 401s and retries once. */
+    attach(client) {
+        const responseId = client.interceptors.response.use((response) => response, (error) => this._onError(client, error));
+        return { response: responseId };
+    }
+    async _onError(client, error) {
+        const refresh = this._onTokenExpired;
+        if (!refresh)
+            throw error;
+        if (!isAxiosErrorLike(error))
+            throw error;
+        const response = error.response;
+        if (!response || response.status !== 401)
+            throw error;
+        const config = error.config;
+        if (!config)
+            throw error;
+        if (config[RETRIED_FLAG] === true)
+            throw error;
+        const previousToken = this._tokenHolder.current;
+        const newToken = await this._tokenHolder.refreshSingleFlight(previousToken, async (previous) => {
+            try {
+                return await refresh(previous);
+            }
+            catch {
+                // Partner-supplied callback: opaque error surface. Any failure →
+                // null, caller surfaces the original 401 unchanged.
+                return null;
+            }
+        });
+        if (newToken === null || newToken === previousToken) {
+            throw error;
+        }
+        config[RETRIED_FLAG] = true;
+        return client.request(config);
+    }
+}
+/**
+ * Narrow `unknown` to the shape `TokenRefreshInterceptor` needs to read
+ * (`response.status`, `config`). Avoids relying on `axios.isAxiosError`
+ * which requires the package's named export at runtime.
+ */
+function isAxiosErrorLike(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "isAxiosError" in error &&
+        error.isAxiosError === true);
+}
+//# sourceMappingURL=token_refresh_interceptor.js.map

package/dist/data/api/interceptors/token_refresh_interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token_refresh_interceptor.js","sourceRoot":"","sources":["../../../../src/data/api/interceptors/token_refresh_interceptor.ts"],"names":[],"mappings":"AA4CA,uFAAuF;AACvF,MAAM,YAAY,GAAG,iCAA0C,CAAC;AAMhE,MAAM,OAAO,uBAAuB;IACjB,YAAY,CAAc;IAC1B,eAAe,CAElB;IAEd,YAAY,OAAuC;QACjD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,MAAM,CAAC,MAAqB;QAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CACjD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EACtB,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CACjD,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAqB,EACrB,KAAc;QAEd,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC;QAE1B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,KAAK,CAAC;QAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAqC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC;QACzB,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QAE/C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAC1D,aAAa,EACb,KAAK,EAAE,QAAQ,EAAE,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,oDAAoD;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;QAEF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAC5B,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,cAAc,IAAI,KAAK;QACtB,KAAoC,CAAC,YAAY,KAAK,IAAI,CAC5D,CAAC;AACJ,CAAC"}

package/dist/data/api/smile_id_api.d.ts

@@ -0,0 +1,124 @@
+import { type AxiosInstance } from "axios";
+import type { NetworkConfig, PartnerConfig } from "../../core/models/network_config";
+import type { BiometricKycRequest, DocumentVerificationRequest, EnhancedDocumentVerificationRequest, EnhancedKycRequest, SmartSelfieAuthenticationRequest, SmartSelfieEnrollmentRequest } from "../model/job_request";
+import { SmileAuthInterceptor } from "./interceptors/smile_auth_interceptor";
+import { attachLoggingInterceptor } from "./interceptors/logging_interceptor";
+import type { JobSubmissionResponse } from "../model/job_submission_response";
+/**
+ * Typed Smile ID API wrapper around axios.
+ *
+ * Construction goes through `NetworkingFactory.make(config)` — the
+ * factory sets up the axios instance and attaches the auth + logging
+ * interceptors in the right order. The auth interceptor stamps the
+ * partner-supplied `PartnerConfig.token` onto every outbound request;
+ * the partner application is responsible for refreshing that token
+ * via its own backend.
+ *
+ * Sandbox switch: `partnerConfig.useSandbox` selects between dev and
+ * prod base URLs. Currently both point to dev — the conditional is
+ * infrastructure for future divergence.
+ */
+declare const PROD_BASE_URL: "https://api.smileidentity.com/";
+declare const SANDBOX_BASE_URL: "https://devapi.smileidentity.com/";
+export declare class SmileIDAPI {
+    private readonly _client;
+    private readonly _partnerConfig;
+    constructor(client: AxiosInstance, partnerConfig: PartnerConfig);
+    /**
+     * v3 smart-selfie enrollment.
+     *
+     * Endpoint: `/v3/registration` (canonical). The previous
+     * `/v3/smart_selfie_enrollment(_enhanced)` paths are deprecated —
+     * the lambda only routes on the canonical path. The `enhanced` flag
+     * on the request stays as the screen-level intent marker (the
+     * capture pipeline reads it to toggle enhanced liveness); it no
+     * longer selects a different URL.
+     *
+     * Wire format: multipart/form-data with the usual selfie + liveness
+     * file parts, plus a `user_details` plain text form field carrying a
+     * JSON-string value (matches the enhanced_kyc / biometric_kyc shape).
+     * The part is NOT tagged with a `Content-Type: application/json`
+     * header — the live server's multipart parser rejects parts tagged
+     * `application/json` as "missing or invalid" when it expects a text
+     * form field.
+     */
+    smartSelfieEnrollment(request: SmartSelfieEnrollmentRequest): Promise<JobSubmissionResponse>;
+    /**
+     * v3 smart-selfie authentication. Same notes as
+     * `smartSelfieEnrollment` — canonical path is `/v3/authentication`,
+     * the `enhanced` flag is intent-only, and `user_details` rides as a
+     * JSON multipart part.
+     */
+    smartSelfieAuthentication(request: SmartSelfieAuthenticationRequest): Promise<JobSubmissionResponse>;
+    enhancedKyc(request: EnhancedKycRequest): Promise<JobSubmissionResponse>;
+    biometricKyc(request: BiometricKycRequest): Promise<JobSubmissionResponse>;
+    documentVerification(request: DocumentVerificationRequest): Promise<JobSubmissionResponse>;
+    enhancedDocumentVerification(request: EnhancedDocumentVerificationRequest): Promise<JobSubmissionResponse>;
+    private _postDocumentVerification;
+    /**
+     * Build the selfie + liveness portion of a multipart form. No
+     * `user_id` / `job_id` / `partner_id` form fields (partner-id rides
+     * the auth header `smileid-partner-id`). Consent + metadata are
+     * appended separately by `_appendConsentAndMetadata` so callers
+     * (biometric_kyc, document_verification) can inject extra fields
+     * between selfie and consent in the multipart order.
+     *
+     * `expectedLivenessCount` is the expected number of liveness frames
+     * for this submission — derived from the decoded `sdk_config` claim
+     * when present, otherwise the `ScanPerformanceProfile` default (7).
+     */
+    private _buildSelfieFormData;
+    /**
+     * Validates that the number of captured liveness images matches the
+     * expected count. A drift in either direction is surfaced here before
+     * the request hits the network so the mismatch is debuggable rather
+     * than swallowed by a generic 400.
+     *
+     * The expected count is derived from the `sdk_config` JWT claim's
+     * `livenessImageCount` when present (default 7 without a claim).
+     */
+    private static _validateLivenessCount;
+    /**
+     * Append the three top-level non-PII KYC string fields (`id_type`,
+     * `id_number`, `country`). PII fields move into the `user_details`
+     * JSON part; partner-supplied per-job overrides (`callback_url`,
+     * `partner_params`, `use_enrolled_image`) are appended by the
+     * endpoint-specific path.
+     */
+    private _appendIdFields;
+    /**
+     * Append the partner-config-level `callback_url` + `partner_params`
+     * multipart parts on Enhanced KYC submissions. Biometric KYC has its
+     * own per-job override path that already prefers `request.params.*`
+     * over the partner config and is handled inline; this helper covers
+     * the no-per-job-override case for Enhanced KYC.
+     *
+     * `callback_url` rides as a string part; `partner_params` as a JSON
+     * part. The `callback-url` HTTP header (attached by
+     * `SmileAuthInterceptor`) is independent and is preserved on every
+     * request regardless of this helper.
+     */
+    private _appendPartnerConfigParts;
+    /**
+     * Append `consent` + `metadata` as plain text form fields carrying
+     * JSON-string values. The server's multipart parser reads these as
+     * text form fields and JSON-parses the body by field name; tagging
+     * the part with `Content-Type: application/json` causes the parser
+     * to reject the part as "missing or invalid".
+     *
+     * The `metadata` snapshot is built by the request-construction site
+     * (the flow navigation manager) and travels on the request — this
+     * method serializes the snapshot it is handed rather than generating
+     * one, so a single per-flow metadata factory backs every submission.
+     */
+    private _appendConsentAndMetadata;
+    private _postMultipart;
+}
+/**
+ * Construct the axios instance used by `SmileIDAPI`. Lives here so
+ * the factory and the auth-interceptor can share a single call site
+ * for `baseURL` + timeout setup.
+ */
+export declare function buildAxiosClient(config: NetworkConfig): AxiosInstance;
+export { SmileAuthInterceptor, attachLoggingInterceptor, PROD_BASE_URL, SANDBOX_BASE_URL, };
+//# sourceMappingURL=smile_id_api.d.ts.map

package/dist/data/api/smile_id_api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smile_id_api.d.ts","sourceRoot":"","sources":["../../../src/data/api/smile_id_api.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,KAAK,EACV,aAAa,EACb,aAAa,EACd,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EACV,mBAAmB,EACnB,2BAA2B,EAC3B,mCAAmC,EACnC,kBAAkB,EAClB,gCAAgC,EAChC,4BAA4B,EAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAG9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAK9E;;;;;;;;;;;;;GAaG;AAQH,QAAA,MAAM,aAAa,kCAAyB,CAAC;AAC7C,QAAA,MAAM,gBAAgB,qCAAsB,CAAC;AAY7C,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;gBAEnC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa;IAK/D;;;;;;;;;;;;;;;;;OAiBG;IACG,qBAAqB,CACzB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IAYjC;;;;;OAKG;IACG,yBAAyB,CAC7B,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,qBAAqB,CAAC;IAa3B,WAAW,CACf,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,qBAAqB,CAAC;IAuB3B,YAAY,CAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,qBAAqB,CAAC;IAqB3B,oBAAoB,CACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,qBAAqB,CAAC;IAI3B,4BAA4B,CAChC,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,qBAAqB,CAAC;YAOnB,yBAAyB;IAyBvC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAiB5B;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAYrC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAavB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,yBAAyB;IAWjC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,yBAAyB;YAkBnB,cAAc;CAY7B;AAoHD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAgBrE;AAED,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,GACjB,CAAC"}

package/dist/data/api/smile_id_api.js

@@ -0,0 +1,371 @@
+import axios from "axios";
+import { SmileIDUrls } from "../smile_id_urls";
+import { SmileAuthInterceptor } from "./interceptors/smile_auth_interceptor";
+import { attachLoggingInterceptor } from "./interceptors/logging_interceptor";
+import { REQUEST_MAC_OPT_IN_KEY } from "./interceptors/smile_request_mac_interceptor";
+import { ATTESTATION_OPT_IN_KEY } from "./interceptors/smile_integrity_interceptor";
+import { NetworkResponseParseException } from "../../core/exception";
+import { LivenessFrameCountException } from "../../core/exception";
+/**
+ * Typed Smile ID API wrapper around axios.
+ *
+ * Construction goes through `NetworkingFactory.make(config)` — the
+ * factory sets up the axios instance and attaches the auth + logging
+ * interceptors in the right order. The auth interceptor stamps the
+ * partner-supplied `PartnerConfig.token` onto every outbound request;
+ * the partner application is responsible for refreshing that token
+ * via its own backend.
+ *
+ * Sandbox switch: `partnerConfig.useSandbox` selects between dev and
+ * prod base URLs. Currently both point to dev — the conditional is
+ * infrastructure for future divergence.
+ */
+// Both URLs point to dev during the v12 rollout. The `useSandbox`
+// conditional in `buildAxiosClient` stays as the seam for future
+// divergence; partners flipping the flag won't see a wire change yet,
+// but their code is forward-compatible. A previous mistake of pointing
+// only one of these at prod was the cause of a partner-credential 401
+// (prod traffic against creds registered on dev).
+const PROD_BASE_URL = SmileIDUrls.production;
+const SANDBOX_BASE_URL = SmileIDUrls.sandbox;
+/**
+ * Opts a request into `smileid-request-mac` signing and
+ * `smileid-device-nonce` attestation — the server rejects job
+ * submissions that arrive without both headers.
+ */
+const SIGNED_JOB_SUBMISSION_FLAGS = {
+    [REQUEST_MAC_OPT_IN_KEY]: true,
+    [ATTESTATION_OPT_IN_KEY]: true,
+};
+export class SmileIDAPI {
+    _client;
+    _partnerConfig;
+    constructor(client, partnerConfig) {
+        this._client = client;
+        this._partnerConfig = partnerConfig;
+    }
+    /**
+     * v3 smart-selfie enrollment.
+     *
+     * Endpoint: `/v3/registration` (canonical). The previous
+     * `/v3/smart_selfie_enrollment(_enhanced)` paths are deprecated —
+     * the lambda only routes on the canonical path. The `enhanced` flag
+     * on the request stays as the screen-level intent marker (the
+     * capture pipeline reads it to toggle enhanced liveness); it no
+     * longer selects a different URL.
+     *
+     * Wire format: multipart/form-data with the usual selfie + liveness
+     * file parts, plus a `user_details` plain text form field carrying a
+     * JSON-string value (matches the enhanced_kyc / biometric_kyc shape).
+     * The part is NOT tagged with a `Content-Type: application/json`
+     * header — the live server's multipart parser rejects parts tagged
+     * `application/json` as "missing or invalid" when it expects a text
+     * form field.
+     */
+    async smartSelfieEnrollment(request) {
+        const formData = this._buildSelfieFormData(request);
+        appendJsonPart(formData, "user_details", userDetailsToWire(request.userDetails));
+        this._appendPartnerConfigParts(formData);
+        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
+        return this._postMultipart("/v3/registration", formData);
+    }
+    /**
+     * v3 smart-selfie authentication. Same notes as
+     * `smartSelfieEnrollment` — canonical path is `/v3/authentication`,
+     * the `enhanced` flag is intent-only, and `user_details` rides as a
+     * JSON multipart part.
+     */
+    async smartSelfieAuthentication(request) {
+        const formData = this._buildSelfieFormData(request);
+        appendStringPart(formData, "user_id", request.userId);
+        appendJsonPart(formData, "user_details", userDetailsToWire(request.userDetails));
+        this._appendPartnerConfigParts(formData);
+        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
+        return this._postMultipart("/v3/authentication", formData);
+    }
+    async enhancedKyc(request) {
+        // Multipart/form-data wire format — server rejects JSON bodies
+        // with `415 — Unsupported Media Type. Required Content-Type is
+        // multipart/form-data`.
+        const formData = new FormData();
+        this._appendIdFields(formData, request.params);
+        appendJsonPart(formData, "user_details", userDetailsToWire(request.userDetails));
+        if (request.params.bankCode) {
+            appendStringPart(formData, "bank_code", request.params.bankCode);
+        }
+        // TS property `mobileOperator` maps to wire key `operator`.
+        if (request.params.mobileOperator) {
+            appendStringPart(formData, "operator", request.params.mobileOperator);
+        }
+        this._appendPartnerConfigParts(formData);
+        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
+        return this._postMultipart("/v3/enhanced_kyc", formData);
+    }
+    async biometricKyc(request) {
+        const useEnrolled = request.params.useEnrolledImage;
+        const formData = this._buildSelfieFormData(request);
+        this._appendIdFields(formData, request.params);
+        appendJsonPart(formData, "user_details", userDetailsToWire(request.userDetails));
+        if (useEnrolled) {
+            appendStringPart(formData, "use_enrolled_image", "true");
+        }
+        // `callback_url` and `partner_params` are sourced exclusively from
+        // `PartnerConfig` — symmetric with Enhanced KYC and the canonical
+        // SDKs. The `callback-url` HTTP header (attached by
+        // `SmileAuthInterceptor`) rides on every request independently.
+        this._appendPartnerConfigParts(formData);
+        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
+        return this._postMultipart("/v3/biometric_kyc", formData);
+    }
+    async documentVerification(request) {
+        return this._postDocumentVerification(request, "/v3/document_verification");
+    }
+    async enhancedDocumentVerification(request) {
+        return this._postDocumentVerification(request, "/v3/enhanced_document_verification");
+    }
+    async _postDocumentVerification(request, url) {
+        const formData = this._buildSelfieFormData(request);
+        appendFilePart(formData, "document", request.frontDocument);
+        if (request.backDocument) {
+            appendFilePart(formData, "document_back", request.backDocument);
+        }
+        appendStringPart(formData, "country", request.country);
+        if (request.idType) {
+            appendStringPart(formData, "id_type", request.idType);
+        }
+        appendJsonPart(formData, "user_details", userDetailsToWire(request.userDetails));
+        this._appendPartnerConfigParts(formData);
+        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
+        return this._postMultipart(url, formData);
+    }
+    // --- internals ---------------------------------------------------------
+    /**
+     * Build the selfie + liveness portion of a multipart form. No
+     * `user_id` / `job_id` / `partner_id` form fields (partner-id rides
+     * the auth header `smileid-partner-id`). Consent + metadata are
+     * appended separately by `_appendConsentAndMetadata` so callers
+     * (biometric_kyc, document_verification) can inject extra fields
+     * between selfie and consent in the multipart order.
+     *
+     * `expectedLivenessCount` is the expected number of liveness frames
+     * for this submission — derived from the decoded `sdk_config` claim
+     * when present, otherwise the `ScanPerformanceProfile` default (7).
+     */
+    _buildSelfieFormData(request) {
+        SmileIDAPI._validateLivenessCount(request.livenessImages, request.expectedLivenessImageCount);
+        const formData = new FormData();
+        appendFilePart(formData, "selfie_image", request.selfieImage);
+        for (const liveness of request.livenessImages) {
+            appendFilePart(formData, "liveness_images", liveness);
+        }
+        return formData;
+    }
+    /**
+     * Validates that the number of captured liveness images matches the
+     * expected count. A drift in either direction is surfaced here before
+     * the request hits the network so the mismatch is debuggable rather
+     * than swallowed by a generic 400.
+     *
+     * The expected count is derived from the `sdk_config` JWT claim's
+     * `livenessImageCount` when present (default 7 without a claim).
+     */
+    static _validateLivenessCount(livenessImages, expectedCount) {
+        if (livenessImages.length !== expectedCount) {
+            throw new LivenessFrameCountException({
+                expected: expectedCount,
+                actual: livenessImages.length,
+            });
+        }
+    }
+    /**
+     * Append the three top-level non-PII KYC string fields (`id_type`,
+     * `id_number`, `country`). PII fields move into the `user_details`
+     * JSON part; partner-supplied per-job overrides (`callback_url`,
+     * `partner_params`, `use_enrolled_image`) are appended by the
+     * endpoint-specific path.
+     */
+    _appendIdFields(formData, params) {
+        appendStringPart(formData, "id_type", params.idType);
+        appendStringPart(formData, "id_number", params.idNumber);
+        appendStringPart(formData, "country", params.country);
+    }
+    /**
+     * Append the partner-config-level `callback_url` + `partner_params`
+     * multipart parts on Enhanced KYC submissions. Biometric KYC has its
+     * own per-job override path that already prefers `request.params.*`
+     * over the partner config and is handled inline; this helper covers
+     * the no-per-job-override case for Enhanced KYC.
+     *
+     * `callback_url` rides as a string part; `partner_params` as a JSON
+     * part. The `callback-url` HTTP header (attached by
+     * `SmileAuthInterceptor`) is independent and is preserved on every
+     * request regardless of this helper.
+     */
+    _appendPartnerConfigParts(formData) {
+        const callbackUrl = this._partnerConfig.callbackUrl;
+        if (callbackUrl) {
+            appendStringPart(formData, "callback_url", callbackUrl);
+        }
+        const partnerParams = this._partnerConfig.partnerParams;
+        if (partnerParams) {
+            appendJsonPart(formData, "partner_params", partnerParams);
+        }
+    }
+    /**
+     * Append `consent` + `metadata` as plain text form fields carrying
+     * JSON-string values. The server's multipart parser reads these as
+     * text form fields and JSON-parses the body by field name; tagging
+     * the part with `Content-Type: application/json` causes the parser
+     * to reject the part as "missing or invalid".
+     *
+     * The `metadata` snapshot is built by the request-construction site
+     * (the flow navigation manager) and travels on the request — this
+     * method serializes the snapshot it is handed rather than generating
+     * one, so a single per-flow metadata factory backs every submission.
+     */
+    _appendConsentAndMetadata(formData, consent, metadata) {
+        // Transform the JS camelCase shape into the canonical snake_case
+        // wire JSON before serialization. The server validates the wire
+        // shape exactly — `consent.granted` (snake_case via `granted`
+        // already) and `consent.granted_at` are required.
+        appendJsonPart(formData, "consent", {
+            granted: consent.granted,
+            granted_at: consent.grantedAt,
+            notice_language: consent.noticeLanguage,
+            notice_privacy_policy_url: consent.noticePrivacyPolicyUrl,
+        });
+        appendJsonPart(formData, "metadata", metadata.toEntries());
+    }
+    async _postMultipart(url, body) {
+        const response = await this._client.post(url, body, {
+            headers: {
+                "Content-Type": "multipart/form-data",
+            },
+            ...SIGNED_JOB_SUBMISSION_FLAGS,
+        });
+        return mapJobSubmissionResponse(response.data);
+    }
+}
+/**
+ * Map the snake_case wire JSON to camelCase `JobSubmissionResponse`.
+ *
+ * Throws [NetworkResponseParseException] when the body is missing or
+ * shaped wrong — the typed exception flows through `mapAxiosError`'s
+ * idempotent pass-through so partner code catching on
+ * `e instanceof NetworkResponseParseException` sees it cleanly,
+ * distinct from `NetworkUnknownException` (which would otherwise
+ * swallow shape mismatches and bury them behind a generic message).
+ */
+function mapJobSubmissionResponse(data) {
+    if (data == null || typeof data !== "object" || Array.isArray(data)) {
+        throw new NetworkResponseParseException({
+            message: "SmileIDAPI: server returned an empty or non-object response body.",
+        });
+    }
+    const raw = data;
+    // Required string fields must be present and string-typed — a missing
+    // or non-string value is a malformed response, surfaced as a parse
+    // failure rather than silently coerced to "".
+    const requireString = (value, field) => {
+        if (typeof value !== "string") {
+            throw new NetworkResponseParseException({
+                message: `SmileIDAPI: response is missing the required string field '${field}'.`,
+            });
+        }
+        return value;
+    };
+    const result = {
+        jobId: requireString(raw["job_id"] ?? raw["jobId"], "job_id"),
+        userId: requireString(raw["user_id"] ?? raw["userId"], "user_id"),
+        status: requireString(raw["status"], "status"),
+        message: requireString(raw["message"], "message"),
+    };
+    const createdAtRaw = raw["created_at"] ?? raw["createdAt"];
+    if (typeof createdAtRaw === "string" && createdAtRaw.length > 0) {
+        return { ...result, createdAt: createdAtRaw };
+    }
+    return result;
+}
+/**
+ * Convert `UserDetails` to the snake_case wire shape. Optional fields
+ * are trimmed; blank values are omitted.
+ */
+function userDetailsToWire(details) {
+    const wire = {
+        given_names: details.givenNames,
+        last_name: details.lastName,
+    };
+    const trimmedEmail = details.email?.trim();
+    if (trimmedEmail) {
+        wire["email"] = trimmedEmail;
+    }
+    const trimmedPhone = details.phoneNumber?.trim();
+    if (trimmedPhone) {
+        wire["phone_number"] = trimmedPhone;
+    }
+    return wire;
+}
+/**
+ * RN-style `FormData.append` for a string part. Used as the underlying
+ * primitive for `appendJsonPart` (which serializes a JSON value into a
+ * string part).
+ */
+function appendStringPart(formData, name, value) {
+    // Cast to any — RN's FormData type signature predates the
+    // {uri, name, type} object form below, but the runtime accepts both
+    // strings and the file-descriptor object. `any` here is the
+    // standard RN workaround.
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    formData.append(name, value);
+}
+/**
+ * Append a JSON value as a plain text multipart form field. The field
+ * carries the JSON-serialized value as its body; the part is NOT
+ * tagged with a `Content-Type: application/json` header. The live
+ * server's multipart parser expects these fields (`user_details`,
+ * `consent`, `metadata`, `partner_params`) as text form fields and
+ * rejects parts tagged `application/json` as "missing or invalid".
+ * This matches the Postman canonical `"type": "text"` wire shape.
+ */
+function appendJsonPart(formData, name, value) {
+    const json = JSON.stringify(value);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    formData.append(name, json);
+}
+/**
+ * Append a JPEG file by URI. RN's `FormData` accepts a file-descriptor
+ * object `{ uri, name, type }`; axios serializes it as a binary part.
+ * The native side handles the file read.
+ */
+function appendFilePart(formData, name, uri) {
+    const fileName = uri.split("/").pop() ?? `${name}.jpg`;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    formData.append(name, {
+        uri,
+        name: fileName,
+        type: "image/jpeg",
+    });
+}
+/**
+ * Construct the axios instance used by `SmileIDAPI`. Lives here so
+ * the factory and the auth-interceptor can share a single call site
+ * for `baseURL` + timeout setup.
+ */
+export function buildAxiosClient(config) {
+    const partnerConfig = config.config?.partnerConfig;
+    const useSandbox = partnerConfig?.useSandbox ?? true;
+    const baseURL = useSandbox ? SANDBOX_BASE_URL : PROD_BASE_URL;
+    // Public API expresses timeouts in seconds; axios takes ms. Default
+    // is 120 s — matches the per-phase ceiling on the other platforms'
+    // network stacks.
+    const callSeconds = config.timeouts?.call ?? 120;
+    return axios.create({
+        baseURL,
+        timeout: callSeconds * 1000,
+        // axios honors connect/read individually only on Node; on RN we
+        // get a single ceiling, so the configured `call` is the overall
+        // mark at which a hung request fails.
+    });
+}
+export { SmileAuthInterceptor, attachLoggingInterceptor, PROD_BASE_URL, SANDBOX_BASE_URL, };
+//# sourceMappingURL=smile_id_api.js.map

package/dist/data/api/smile_id_api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smile_id_api.js","sourceRoot":"","sources":["../../../src/data/api/smile_id_api.ts"],"names":[],"mappings":"AAAA,OAAO,KAA6B,MAAM,OAAO,CAAC;AAKlD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAU/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAGpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE;;;;;;;;;;;;;GAaG;AAEH,kEAAkE;AAClE,iEAAiE;AACjE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,kDAAkD;AAClD,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC;AAC7C,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC;AAE7C;;;;GAIG;AACH,MAAM,2BAA2B,GAAG;IAClC,CAAC,sBAAsB,CAAC,EAAE,IAAI;IAC9B,CAAC,sBAAsB,CAAC,EAAE,IAAI;CACtB,CAAC;AAEX,MAAM,OAAO,UAAU;IACJ,OAAO,CAAgB;IACvB,cAAc,CAAgB;IAE/C,YAAY,MAAqB,EAAE,aAA4B;QAC7D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAqC;QAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,cAAc,CACZ,QAAQ,EACR,cAAc,EACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB,CAC7B,OAAyC;QAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,cAAc,CACZ,QAAQ,EACR,cAAc,EACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAA2B;QAE3B,+DAA+D;QAC/D,+DAA+D;QAC/D,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,cAAc,CACZ,QAAQ,EACR,cAAc,EACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC5B,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,4DAA4D;QAC5D,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAClC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAA4B;QAE5B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,cAAc,CACZ,QAAQ,EACR,cAAc,EACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,gBAAgB,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC3D,CAAC;QACD,mEAAmE;QACnE,kEAAkE;QAClE,oDAAoD;QACpD,gEAAgE;QAChE,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAoC;QAEpC,OAAO,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,OAA4C;QAE5C,OAAO,IAAI,CAAC,yBAAyB,CACnC,OAAO,EACP,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,OAA0E,EAC1E,GAAW;QAEX,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAClE,CAAC;QACD,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,cAAc,CACZ,QAAQ,EACR,cAAc,EACd,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,0EAA0E;IAE1E;;;;;;;;;;;OAWG;IACK,oBAAoB,CAAC,OAI5B;QACC,UAAU,CAAC,sBAAsB,CAC/B,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,0BAA0B,CACnC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;QAChC,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9D,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC9C,cAAc,CAAC,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,sBAAsB,CACnC,cAAiC,EACjC,aAAqB;QAErB,IAAI,cAAc,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC5C,MAAM,IAAI,2BAA2B,CAAC;gBACpC,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,eAAe,CACrB,QAAkB,EAClB,MAIC;QAED,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzD,gBAAgB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;;;;;OAWG;IACK,yBAAyB,CAAC,QAAkB;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC;QACpD,IAAI,WAAW,EAAE,CAAC;YAChB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;QACxD,IAAI,aAAa,EAAE,CAAC;YAClB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,yBAAyB,CAC/B,QAAkB,EAClB,OAA2B,EAC3B,QAA4B;QAE5B,iEAAiE;QACjE,gEAAgE;QAChE,8DAA8D;QAC9D,kDAAkD;QAClD,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE;YAClC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,eAAe,EAAE,OAAO,CAAC,cAAc;YACvC,yBAAyB,EAAE,OAAO,CAAC,sBAAsB;SAC1D,CAAC,CAAC;QACH,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,GAAW,EACX,IAAc;QAEd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;YAClD,OAAO,EAAE;gBACP,cAAc,EAAE,qBAAqB;aACtC;YACD,GAAG,2BAA2B;SAC/B,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB,CAAC,IAAa;IAC7C,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,6BAA6B,CAAC;YACtC,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,sEAAsE;IACtE,mEAAmE;IACnE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,CAAC,KAAc,EAAE,KAAa,EAAU,EAAE;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,6BAA6B,CAAC;gBACtC,OAAO,EAAE,8DAA8D,KAAK,IAAI;aACjF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAA0B;QACpC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;QAC7D,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;QACjE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAC9C,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;KAClD,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAAoB;IAC7C,MAAM,IAAI,GAA2B;QACnC,WAAW,EAAE,OAAO,CAAC,UAAU;QAC/B,SAAS,EAAE,OAAO,CAAC,QAAQ;KAC5B,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;IAC/B,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC,cAAc,CAAC,GAAG,YAAY,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACvB,QAAkB,EAClB,IAAY,EACZ,KAAa;IAEb,0DAA0D;IAC1D,oEAAoE;IACpE,4DAA4D;IAC5D,0BAA0B;IAC1B,8DAA8D;IAC7D,QAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CACrB,QAAkB,EAClB,IAAY,EACZ,KAAc;IAEd,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,8DAA8D;IAC7D,QAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAkB,EAAE,IAAY,EAAE,GAAW;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,MAAM,CAAC;IACvD,8DAA8D;IAC7D,QAAgB,CAAC,MAAM,CAAC,IAAI,EAAE;QAC7B,GAAG;QACH,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;IACnD,MAAM,UAAU,GAAG,aAAa,EAAE,UAAU,IAAI,IAAI,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;IAE9D,oEAAoE;IACpE,mEAAmE;IACnE,kBAAkB;IAClB,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC;IACjD,OAAO,KAAK,CAAC,MAAM,CAAC;QAClB,OAAO;QACP,OAAO,EAAE,WAAW,GAAG,IAAI;QAC3B,gEAAgE;QAChE,gEAAgE;QAChE,sCAAsC;KACvC,CAAC,CAAC;AACL,CAAC;AAED,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,aAAa,EACb,gBAAgB,GACjB,CAAC"}

package/dist/data/dsl/builder/cache_config_builder.d.ts

@@ -0,0 +1,20 @@
+import type { CacheConfig } from "../../../core/models/network_config";
+/**
+ * DSL builder for HTTP response cache settings.
+ *
+ * `maxSize` is in bytes; the default of 50 MB covers typical
+ * verification flows without aggressive trimming.
+ */
+export declare class CacheConfigBuilder {
+    enabled: boolean;
+    /** Bytes — default 50 MB. */
+    maxSize: number;
+    /**
+     * Multiplier helper: `c.megabytes(50)` evaluates to `50 * 1024 * 1024`
+     * bytes. TypeScript has no number extensions, so this lives as a
+     * builder method.
+     */
+    megabytes(count: number): number;
+    build(): CacheConfig;
+}
+//# sourceMappingURL=cache_config_builder.d.ts.map

package/dist/data/dsl/builder/cache_config_builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache_config_builder.d.ts","sourceRoot":"","sources":["../../../../src/data/dsl/builder/cache_config_builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAEvE;;;;;GAKG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,UAAQ;IACf,6BAA6B;IAC7B,OAAO,SAAoB;IAE3B;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIhC,KAAK,IAAI,WAAW;CAGrB"}