@smileid/usesmileid 12.0.2 → 12.1.1

package/dist/data/api/smile_id_api.js

@@ -1,374 +1 @@
-import axios from "axios";
-import { SmileIDUrls } from "../smile_id_urls";
-import { userDetailsPayloadToWire } from "../model/user_details_payload";
-import { SmileAuthInterceptor } from "./interceptors/smile_auth_interceptor";
-import { attachLoggingInterceptor } from "./interceptors/logging_interceptor";
-import { REQUEST_MAC_OPT_IN_KEY } from "./interceptors/smile_request_mac_interceptor";
-import { ATTESTATION_OPT_IN_KEY } from "./interceptors/smile_integrity_interceptor";
-import { NetworkResponseParseException } from "../../core/exception";
-import { LivenessFrameCountException } from "../../core/exception";
-/**
- * Typed Smile ID API wrapper around axios.
- *
- * Construction goes through `NetworkingFactory.make(config)` — the
- * factory sets up the axios instance and attaches the auth + logging
- * interceptors in the right order. The auth interceptor stamps the
- * partner-supplied `PartnerConfig.token` onto every outbound request;
- * the partner application is responsible for refreshing that token
- * via its own backend.
- *
- * Sandbox switch: `partnerConfig.useSandbox` selects between dev and
- * prod base URLs. Currently both point to dev — the conditional is
- * infrastructure for future divergence.
- */
-// Both URLs point to dev during the v12 rollout. The `useSandbox`
-// conditional in `buildAxiosClient` stays as the seam for future
-// divergence; partners flipping the flag won't see a wire change yet,
-// but their code is forward-compatible. A previous mistake of pointing
-// only one of these at prod was the cause of a partner-credential 401
-// (prod traffic against creds registered on dev).
-const PROD_BASE_URL = SmileIDUrls.production;
-const SANDBOX_BASE_URL = SmileIDUrls.sandbox;
-/**
- * Opts a request into `smileid-request-mac` signing and
- * `smileid-device-nonce` attestation — the server rejects job
- * submissions that arrive without both headers.
- */
-const SIGNED_JOB_SUBMISSION_FLAGS = {
-    [REQUEST_MAC_OPT_IN_KEY]: true,
-    [ATTESTATION_OPT_IN_KEY]: true,
-};
-export class SmileIDAPI {
-    _client;
-    _partnerConfig;
-    constructor(client, partnerConfig) {
-        this._client = client;
-        this._partnerConfig = partnerConfig;
-    }
-    /**
-     * v3 smart-selfie enrollment.
-     *
-     * Endpoint: `/v3/registration` (canonical). The previous
-     * `/v3/smart_selfie_enrollment(_enhanced)` paths are deprecated —
-     * the lambda only routes on the canonical path. The `enhanced` flag
-     * on the request stays as the screen-level intent marker (the
-     * capture pipeline reads it to toggle enhanced liveness); it no
-     * longer selects a different URL.
-     *
-     * Wire format: multipart/form-data with the usual selfie + liveness
-     * file parts, plus a `user_details` plain text form field carrying a
-     * JSON-string value (matches the enhanced_kyc / biometric_kyc shape).
-     * The part is NOT tagged with a `Content-Type: application/json`
-     * header — the live server's multipart parser rejects parts tagged
-     * `application/json` as "missing or invalid" when it expects a text
-     * form field.
-     */
-    async smartSelfieEnrollment(request) {
-        const formData = this._buildSelfieFormData(request);
-        appendUserDetailsPart(formData, request);
-        this._appendPartnerConfigParts(formData);
-        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
-        return this._postMultipart("/v3/registration", formData);
-    }
-    /**
-     * v3 smart-selfie authentication. Same notes as
-     * `smartSelfieEnrollment` — canonical path is `/v3/authentication`,
-     * the `enhanced` flag is intent-only, and `user_details` rides as a
-     * JSON multipart part.
-     */
-    async smartSelfieAuthentication(request) {
-        const formData = this._buildSelfieFormData(request);
-        appendStringPart(formData, "user_id", request.userId);
-        appendUserDetailsPart(formData, request);
-        this._appendPartnerConfigParts(formData);
-        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
-        return this._postMultipart("/v3/authentication", formData);
-    }
-    async enhancedKyc(request) {
-        // Multipart/form-data wire format — server rejects JSON bodies
-        // with `415 — Unsupported Media Type. Required Content-Type is
-        // multipart/form-data`.
-        const formData = new FormData();
-        this._appendIdFields(formData, request.params);
-        appendUserDetailsPart(formData, request);
-        if (request.params.bankCode) {
-            appendStringPart(formData, "bank_code", request.params.bankCode);
-        }
-        // TS property `mobileOperator` maps to wire key `operator`.
-        if (request.params.mobileOperator) {
-            appendStringPart(formData, "operator", request.params.mobileOperator);
-        }
-        this._appendPartnerConfigParts(formData);
-        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
-        return this._postMultipart("/v3/enhanced_kyc", formData);
-    }
-    async biometricKyc(request) {
-        const useEnrolled = request.params.useEnrolledImage;
-        const formData = this._buildSelfieFormData(request);
-        this._appendIdFields(formData, request.params);
-        appendUserDetailsPart(formData, request);
-        if (useEnrolled) {
-            appendStringPart(formData, "use_enrolled_image", "true");
-        }
-        // `callback_url` and `partner_params` are sourced exclusively from
-        // `PartnerConfig` — symmetric with Enhanced KYC and the canonical
-        // SDKs. The `callback-url` HTTP header (attached by
-        // `SmileAuthInterceptor`) rides on every request independently.
-        this._appendPartnerConfigParts(formData);
-        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
-        return this._postMultipart("/v3/biometric_kyc", formData);
-    }
-    async documentVerification(request) {
-        return this._postDocumentVerification(request, "/v3/document_verification");
-    }
-    async enhancedDocumentVerification(request) {
-        return this._postDocumentVerification(request, "/v3/enhanced_document_verification");
-    }
-    async _postDocumentVerification(request, url) {
-        const formData = this._buildSelfieFormData(request);
-        appendFilePart(formData, "document", request.frontDocument);
-        if (request.backDocument) {
-            appendFilePart(formData, "document_back", request.backDocument);
-        }
-        appendStringPart(formData, "country", request.country);
-        if (request.idType) {
-            appendStringPart(formData, "id_type", request.idType);
-        }
-        appendUserDetailsPart(formData, request);
-        this._appendPartnerConfigParts(formData);
-        this._appendConsentAndMetadata(formData, request.consent, request.metadata);
-        return this._postMultipart(url, formData);
-    }
-    // --- internals ---------------------------------------------------------
-    /**
-     * Build the selfie + liveness portion of a multipart form. No
-     * `user_id` / `job_id` / `partner_id` form fields (partner-id rides
-     * the auth header `smileid-partner-id`). Consent + metadata are
-     * appended separately by `_appendConsentAndMetadata` so callers
-     * (biometric_kyc, document_verification) can inject extra fields
-     * between selfie and consent in the multipart order.
-     *
-     * `expectedLivenessCount` is the expected number of liveness frames
-     * for this submission — derived from the decoded `sdk_config` claim
-     * when present, otherwise the `ScanPerformanceProfile` default (7).
-     */
-    _buildSelfieFormData(request) {
-        SmileIDAPI._validateLivenessCount(request.livenessImages, request.expectedLivenessImageCount);
-        const formData = new FormData();
-        appendFilePart(formData, "selfie_image", request.selfieImage);
-        for (const liveness of request.livenessImages) {
-            appendFilePart(formData, "liveness_images", liveness);
-        }
-        return formData;
-    }
-    /**
-     * Validates that the number of captured liveness images matches the
-     * expected count. A drift in either direction is surfaced here before
-     * the request hits the network so the mismatch is debuggable rather
-     * than swallowed by a generic 400.
-     *
-     * The expected count is derived from the `sdk_config` JWT claim's
-     * `livenessImageCount` when present (default 7 without a claim).
-     */
-    static _validateLivenessCount(livenessImages, expectedCount) {
-        if (livenessImages.length !== expectedCount) {
-            throw new LivenessFrameCountException({
-                expected: expectedCount,
-                actual: livenessImages.length,
-            });
-        }
-    }
-    /**
-     * Append the three top-level non-PII KYC string fields (`id_type`,
-     * `id_number`, `country`). PII fields move into the `user_details`
-     * JSON part; partner-supplied per-job overrides (`callback_url`,
-     * `partner_params`, `use_enrolled_image`) are appended by the
-     * endpoint-specific path.
-     */
-    _appendIdFields(formData, params) {
-        appendStringPart(formData, "id_type", params.idType);
-        appendStringPart(formData, "id_number", params.idNumber);
-        appendStringPart(formData, "country", params.country);
-    }
-    /**
-     * Append the partner-config-level `callback_url` + `partner_params`
-     * multipart parts on Enhanced KYC submissions. Biometric KYC has its
-     * own per-job override path that already prefers `request.params.*`
-     * over the partner config and is handled inline; this helper covers
-     * the no-per-job-override case for Enhanced KYC.
-     *
-     * `callback_url` rides as a string part; `partner_params` as a JSON
-     * part. The `callback-url` HTTP header (attached by
-     * `SmileAuthInterceptor`) is independent and is preserved on every
-     * request regardless of this helper.
-     */
-    _appendPartnerConfigParts(formData) {
-        const callbackUrl = this._partnerConfig.callbackUrl;
-        if (callbackUrl) {
-            appendStringPart(formData, "callback_url", callbackUrl);
-        }
-        const partnerParams = this._partnerConfig.partnerParams;
-        if (partnerParams) {
-            appendJsonPart(formData, "partner_params", partnerParams);
-        }
-    }
-    /**
-     * Append `consent` + `metadata` as plain text form fields carrying
-     * JSON-string values. The server's multipart parser reads these as
-     * text form fields and JSON-parses the body by field name; tagging
-     * the part with `Content-Type: application/json` causes the parser
-     * to reject the part as "missing or invalid".
-     *
-     * `consent` is `undefined` only when the token binds complete
-     * consent and no local source exists — the part is then omitted
-     * entirely and the server injects the token's consent.
-     *
-     * The `metadata` snapshot is built by the request-construction site
-     * (the flow navigation manager) and travels on the request — this
-     * method serializes the snapshot it is handed rather than generating
-     * one, so a single per-flow metadata factory backs every submission.
-     */
-    _appendConsentAndMetadata(formData, consent, metadata) {
-        // Transform the JS camelCase shape into the canonical snake_case
-        // wire JSON before serialization. The server validates the wire
-        // shape exactly — `consent.granted` (snake_case via `granted`
-        // already) and `consent.granted_at` are required.
-        if (consent !== undefined) {
-            appendJsonPart(formData, "consent", {
-                granted: consent.granted,
-                granted_at: consent.grantedAt,
-                notice_language: consent.noticeLanguage,
-                notice_privacy_policy_url: consent.noticePrivacyPolicyUrl,
-            });
-        }
-        appendJsonPart(formData, "metadata", metadata.toEntries());
-    }
-    async _postMultipart(url, body) {
-        const response = await this._client.post(url, body, {
-            headers: {
-                "Content-Type": "multipart/form-data",
-            },
-            ...SIGNED_JOB_SUBMISSION_FLAGS,
-        });
-        return mapJobSubmissionResponse(response.data);
-    }
-}
-/**
- * Map the snake_case wire JSON to camelCase `JobSubmissionResponse`.
- *
- * Throws [NetworkResponseParseException] when the body is missing or
- * shaped wrong — the typed exception flows through `mapAxiosError`'s
- * idempotent pass-through so partner code catching on
- * `e instanceof NetworkResponseParseException` sees it cleanly,
- * distinct from `NetworkUnknownException` (which would otherwise
- * swallow shape mismatches and bury them behind a generic message).
- */
-function mapJobSubmissionResponse(data) {
-    if (data == null || typeof data !== "object" || Array.isArray(data)) {
-        throw new NetworkResponseParseException({
-            message: "SmileIDAPI: server returned an empty or non-object response body.",
-        });
-    }
-    const raw = data;
-    // Required string fields must be present and string-typed — a missing
-    // or non-string value is a malformed response, surfaced as a parse
-    // failure rather than silently coerced to "".
-    const requireString = (value, field) => {
-        if (typeof value !== "string") {
-            throw new NetworkResponseParseException({
-                message: `SmileIDAPI: response is missing the required string field '${field}'.`,
-            });
-        }
-        return value;
-    };
-    const result = {
-        jobId: requireString(raw["job_id"] ?? raw["jobId"], "job_id"),
-        userId: requireString(raw["user_id"] ?? raw["userId"], "user_id"),
-        status: requireString(raw["status"], "status"),
-        message: requireString(raw["message"], "message"),
-    };
-    const createdAtRaw = raw["created_at"] ?? raw["createdAt"];
-    if (typeof createdAtRaw === "string" && createdAtRaw.length > 0) {
-        return { ...result, createdAt: createdAtRaw };
-    }
-    return result;
-}
-/**
- * Append the `user_details` JSON multipart part. The payload arrives
- * pre-reduced from assembly (token-bound fields already dropped); the
- * part is omitted entirely when nothing remains — or when `userDetails`
- * was legitimately omitted because the token binds every required field.
- */
-function appendUserDetailsPart(formData, request) {
-    const details = request.userDetails;
-    if (details === undefined)
-        return;
-    const wire = userDetailsPayloadToWire(details);
-    if (Object.keys(wire).length === 0)
-        return;
-    appendJsonPart(formData, "user_details", wire);
-}
-/**
- * RN-style `FormData.append` for a string part. Used as the underlying
- * primitive for `appendJsonPart` (which serializes a JSON value into a
- * string part).
- */
-function appendStringPart(formData, name, value) {
-    // Cast to any — RN's FormData type signature predates the
-    // {uri, name, type} object form below, but the runtime accepts both
-    // strings and the file-descriptor object. `any` here is the
-    // standard RN workaround.
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    formData.append(name, value);
-}
-/**
- * Append a JSON value as a plain text multipart form field. The field
- * carries the JSON-serialized value as its body; the part is NOT
- * tagged with a `Content-Type: application/json` header. The live
- * server's multipart parser expects these fields (`user_details`,
- * `consent`, `metadata`, `partner_params`) as text form fields and
- * rejects parts tagged `application/json` as "missing or invalid".
- * This matches the Postman canonical `"type": "text"` wire shape.
- */
-function appendJsonPart(formData, name, value) {
-    const json = JSON.stringify(value);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    formData.append(name, json);
-}
-/**
- * Append a JPEG file by URI. RN's `FormData` accepts a file-descriptor
- * object `{ uri, name, type }`; axios serializes it as a binary part.
- * The native side handles the file read.
- */
-function appendFilePart(formData, name, uri) {
-    const fileName = uri.split("/").pop() ?? `${name}.jpg`;
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    formData.append(name, {
-        uri,
-        name: fileName,
-        type: "image/jpeg",
-    });
-}
-/**
- * Construct the axios instance used by `SmileIDAPI`. Lives here so
- * the factory and the auth-interceptor can share a single call site
- * for `baseURL` + timeout setup.
- */
-export function buildAxiosClient(config) {
-    const partnerConfig = config.config?.partnerConfig;
-    const useSandbox = partnerConfig?.useSandbox ?? true;
-    const baseURL = useSandbox ? SANDBOX_BASE_URL : PROD_BASE_URL;
-    // Public API expresses timeouts in seconds; axios takes ms. Default
-    // is 120 s — matches the per-phase ceiling on the other platforms'
-    // network stacks.
-    const callSeconds = config.timeouts?.call ?? 120;
-    return axios.create({
-        baseURL,
-        timeout: callSeconds * 1000,
-        // axios honors connect/read individually only on Node; on RN we
-        // get a single ceiling, so the configured `call` is the overall
-        // mark at which a hung request fails.
-    });
-}
-export { SmileAuthInterceptor, attachLoggingInterceptor, PROD_BASE_URL, SANDBOX_BASE_URL, };
-//# sourceMappingURL=smile_id_api.js.map
+"use strict";import u from"axios";import{SmileIDUrls as d}from"../smile_id_urls";import{userDetailsPayloadToWire as g}from"../model/user_details_payload";import{SmileAuthInterceptor as h}from"./interceptors/smile_auth_interceptor";import{attachLoggingInterceptor as y}from"./interceptors/logging_interceptor";import{REQUEST_MAC_OPT_IN_KEY as b}from"./interceptors/smile_request_mac_interceptor";import{ATTESTATION_OPT_IN_KEY as S}from"./interceptors/smile_integrity_interceptor";import{NetworkResponseParseException as m}from"../../core/exception";import{LivenessFrameCountException as C}from"../../core/exception";const l=d.production,_=d.sandbox,P={[b]:!0,[S]:!0};export class SmileIDAPI{_client;_partnerConfig;constructor(t,n){this._client=t,this._partnerConfig=n}async smartSelfieEnrollment(t){const n=this._buildSelfieFormData(t);return r(n,t),this._appendPartnerConfigParts(n),this._appendConsentAndMetadata(n,t.consent,t.metadata),this._postMultipart("/v3/registration",n)}async smartSelfieAuthentication(t){const n=this._buildSelfieFormData(t);return i(n,"user_id",t.userId),r(n,t),this._appendPartnerConfigParts(n),this._appendConsentAndMetadata(n,t.consent,t.metadata),this._postMultipart("/v3/authentication",n)}async enhancedKyc(t){const n=new FormData;return this._appendIdFields(n,t.params),r(n,t),t.params.bankCode&&i(n,"bank_code",t.params.bankCode),t.params.mobileOperator&&i(n,"operator",t.params.mobileOperator),this._appendPartnerConfigParts(n),this._appendConsentAndMetadata(n,t.consent,t.metadata),this._postMultipart("/v3/enhanced_kyc",n)}async biometricKyc(t){const n=t.params.useEnrolledImage,e=this._buildSelfieFormData(t);return this._appendIdFields(e,t.params),r(e,t),n&&i(e,"use_enrolled_image","true"),this._appendPartnerConfigParts(e),this._appendConsentAndMetadata(e,t.consent,t.metadata),this._postMultipart("/v3/biometric_kyc",e)}async documentVerification(t){return this._postDocumentVerification(t,"/v3/document_verification")}async enhancedDocumentVerification(t){return this._postDocumentVerification(t,"/v3/enhanced_document_verification")}async _postDocumentVerification(t,n){const e=this._buildSelfieFormData(t);return p(e,"document",t.frontDocument),t.backDocument&&p(e,"document_back",t.backDocument),i(e,"country",t.country),t.idType&&i(e,"id_type",t.idType),r(e,t),this._appendPartnerConfigParts(e),this._appendConsentAndMetadata(e,t.consent,t.metadata),this._postMultipart(n,e)}_buildSelfieFormData(t){SmileIDAPI._validateLivenessCount(t.livenessImages,t.expectedLivenessImageCount);const n=new FormData;p(n,"selfie_image",t.selfieImage);for(const e of t.livenessImages)p(n,"liveness_images",e);return n}static _validateLivenessCount(t,n){if(t.length!==n)throw new C({expected:n,actual:t.length})}_appendIdFields(t,n){i(t,"id_type",n.idType),i(t,"id_number",n.idNumber),i(t,"country",n.country)}_appendPartnerConfigParts(t){const n=this._partnerConfig.callbackUrl;n&&i(t,"callback_url",n);const e=this._partnerConfig.partnerParams;e&&s(t,"partner_params",e)}_appendConsentAndMetadata(t,n,e){n!==void 0&&s(t,"consent",{granted:n.granted,granted_at:n.grantedAt,notice_language:n.noticeLanguage,notice_privacy_policy_url:n.noticePrivacyPolicyUrl}),s(t,"metadata",e.toEntries())}async _postMultipart(t,n){const e=await this._client.post(t,n,{headers:{"Content-Type":"multipart/form-data"},...P});return D(e.data)}}function D(a){if(a==null||typeof a!="object"||Array.isArray(a))throw new m({message:"SmileIDAPI: server returned an empty or non-object response body."});const t=a,n=(c,f)=>{if(typeof c!="string")throw new m({message:`SmileIDAPI: response is missing the required string field '${f}'.`});return c},e={jobId:n(t.job_id??t.jobId,"job_id"),userId:n(t.user_id??t.userId,"user_id"),status:n(t.status,"status"),message:n(t.message,"message")},o=t.created_at??t.createdAt;return typeof o=="string"&&o.length>0?{...e,createdAt:o}:e}function r(a,t){const n=t.userDetails;if(n===void 0)return;const e=g(n);Object.keys(e).length!==0&&s(a,"user_details",e)}function i(a,t,n){a.append(t,n)}function s(a,t,n){const e=JSON.stringify(n);a.append(t,e)}function p(a,t,n){const e=n.split("/").pop()??`${t}.jpg`;a.append(t,{uri:n,name:e,type:"image/jpeg"})}export function buildAxiosClient(a){const e=a.config?.partnerConfig?.useSandbox??!0?_:l,o=a.timeouts?.call??120;return u.create({baseURL:e,timeout:o*1e3})}export{h as SmileAuthInterceptor,y as attachLoggingInterceptor,l as PROD_BASE_URL,_ as SANDBOX_BASE_URL};

package/dist/data/compression/compressible_asset.d.ts

@@ -38,4 +38,3 @@ export declare class CompressibleAssets {
     /** Combined size of the front + back document images (0 when neither is present). */
     documentCombinedSize(): number;
 }
-//# sourceMappingURL=compressible_asset.d.ts.map

package/dist/data/compression/compressible_asset.js

@@ -1,34 +1 @@
-/**
- * The full set of images in one submission. Any role may be absent (e.g. SmartSelfie has no
- * documents; Enhanced KYC has no images at all → the compressor is a no-op).
- */
-export class CompressibleAssets {
-    selfie;
-    liveness;
-    documentFront;
-    documentBack;
-    constructor(args) {
-        this.selfie = args.selfie;
-        this.liveness = args.liveness ?? [];
-        this.documentFront = args.documentFront;
-        this.documentBack = args.documentBack;
-    }
-    /** All present assets, in submission order. */
-    all() {
-        const result = [];
-        if (this.selfie)
-            result.push(this.selfie);
-        result.push(...this.liveness);
-        if (this.documentFront)
-            result.push(this.documentFront);
-        if (this.documentBack)
-            result.push(this.documentBack);
-        return result;
-    }
-    /** Combined size of the front + back document images (0 when neither is present). */
-    documentCombinedSize() {
-        return ((this.documentFront?.encodedSize() ?? 0) +
-            (this.documentBack?.encodedSize() ?? 0));
-    }
-}
-//# sourceMappingURL=compressible_asset.js.map
+"use strict";export class CompressibleAssets{selfie;liveness;documentFront;documentBack;constructor(e){this.selfie=e.selfie,this.liveness=e.liveness??[],this.documentFront=e.documentFront,this.documentBack=e.documentBack}all(){const e=[];return this.selfie&&e.push(this.selfie),e.push(...this.liveness),this.documentFront&&e.push(this.documentFront),this.documentBack&&e.push(this.documentBack),e}documentCombinedSize(){return(this.documentFront?.encodedSize()??0)+(this.documentBack?.encodedSize()??0)}}

package/dist/data/compression/payload_compression_config.d.ts

@@ -33,4 +33,3 @@ export declare const PayloadCompressionConfig: {
 };
 /** base64 length of `n` raw bytes: `ceil(n / 3) * 4`. */
 export declare function base64Len(n: number): number;
-//# sourceMappingURL=payload_compression_config.d.ts.map

package/dist/data/compression/payload_compression_config.js

@@ -1,52 +1 @@
-/**
- * Shared byte-size guardrails and adaptive JPEG-compression constants for keeping a v3
- * form-data submission under AWS Lambda's 6 MB synchronous payload limit.
- *
- * **Cross-SDK source of truth** — the same thresholds, order, floors, and {@link base64Len}
- * formula are mirrored byte-for-byte in the Android, iOS, and Flutter SDKs. Do not diverge any
- * value without updating all four platforms.
- *
- * Lambda sees the **base64-encoded** body forwarded by API Gateway (base64 expands binary by
- * ~33%), so the real guardrail is `PayloadCompressor.projectedEncodedSize` against
- * `hardEncodedCap` — not raw bytes. Units are **binary MB (MiB, 1 << 20)**, locked across all
- * four SDKs.
- */
-const BYTES_PER_MB = 1 << 20;
-export const PayloadCompressionConfig = {
-    /** 1 MiB. Binary MB is the locked cross-SDK unit. */
-    bytesPerMB: BYTES_PER_MB,
-    /** Primary compression goal for the raw bundle. */
-    rawTarget: 4 * BYTES_PER_MB,
-    /** Relaxed raw ceiling, accepted only if the projected encoded size still fits the cap. */
-    rawFallback: 4 * BYTES_PER_MB + BYTES_PER_MB / 2, // 4.5 MiB
-    /** The real guardrail: projected base64-encoded body must stay under this (margin under 6 MB). */
-    hardEncodedCap: Math.floor((57 * BYTES_PER_MB) / 10), // 5.7 MiB
-    /** Rule A trigger: combined document images larger than this start the document sub-pass. */
-    docCombinedTrigger: 4 * BYTES_PER_MB,
-    /** Rule A sub-target: pull the combined documents under this (back first, then front). */
-    docCombinedTarget: 3 * BYTES_PER_MB,
-    /** Rule B trigger: a selfie larger than this marks a face-heavy job (faces compressed first). */
-    selfieTrigger: 1 * BYTES_PER_MB,
-    /** Minimum JPEG quality for face images (selfie + liveness) — higher penalty. Pending DS sign-off. */
-    faceMinQ: 0.45,
-    /** Minimum JPEG quality for document images — preserves OCR / MRZ. Pending DS sign-off. */
-    docMinQ: 0.7,
-    /**
-     * Absolute JPEG-quality floor for the hard-guarantee pass. When a bundle is still over
-     * `rawFallback` after every image has hit its per-type floor (`faceMinQ` / `docMinQ`), the
-     * guarantee pass keeps stepping quality down to this value — below the per-type floors — so an
-     * oversized capture never fails submission on size. Matches v11's quality-10 floor.
-     */
-    absoluteMinQ: 0.1,
-    /** Quality decrement per re-encode step. */
-    qualityStep: 0.05,
-    /** Nominal re-encode start point; each asset steps down from its own capture quality. */
-    startQ: 0.9,
-    /** Fixed allowance for multipart field names + part framing not counted in image/metadata totals. */
-    structuralOverheadBytes: 2048,
-};
-/** base64 length of `n` raw bytes: `ceil(n / 3) * 4`. */
-export function base64Len(n) {
-    return Math.ceil(n / 3) * 4;
-}
-//# sourceMappingURL=payload_compression_config.js.map
+"use strict";const r=1048576;export const PayloadCompressionConfig={bytesPerMB:1048576,rawTarget:4194304,rawFallback:4718592,hardEncodedCap:Math.floor(59768832e-1),docCombinedTrigger:4194304,docCombinedTarget:3145728,selfieTrigger:1048576,faceMinQ:.45,docMinQ:.7,absoluteMinQ:.1,qualityStep:.05,startQ:.9,structuralOverheadBytes:2048};export function base64Len(e){return Math.ceil(e/3)*4}

package/dist/data/compression/payload_compression_runner.d.ts

@@ -1,3 +1,10 @@
+import type { ImageTypeId } from "@smileid/usesmileid_bridge";
+import type { SdkConfig } from "../model/sdk_config";
+/**
+ * Capture quality of `kind` as a 0-1 fraction: the token's `sdk_config` value when in `1..100`, else the
+ * SDK default. It seeds the recompress start; seeding above the real capture quality inflates the image.
+ */
+export declare function resolveCaptureQuality(sdkConfig: SdkConfig | undefined, kind: ImageTypeId): number;
 /**
  * Per-role JPEG sizes in MB, measured before compression (`*Original`) and after (`*Final`); equal
  * when the image was not compressed, `undefined` for an absent role. Stamped into the submission
@@ -24,6 +31,6 @@ export declare const PayloadCompressionRunner: {
         frontDocument?: string | undefined;
         backDocument?: string | undefined;
         metadataBytes: number;
+        sdkConfig?: SdkConfig | undefined;
     }): Promise<PayloadCompressionSizes>;
 };
-//# sourceMappingURL=payload_compression_runner.d.ts.map

package/dist/data/compression/payload_compression_runner.js

@@ -1,55 +1 @@
-import { File } from "expo-file-system";
-import { ImageType } from "@smileid/usesmileid_bridge";
-import { CameraDefaults } from "../../camera/camera_defaults";
-import { CompressibleAssets } from "./compressible_asset";
-import { PayloadCompressor } from "./payload_compressor";
-import { UriCompressibleAsset } from "./uri_compressible_asset";
-// RN `CameraDefaults` only exposes the document JPEG quality; selfie/liveness capture quality
-// match the cross-SDK values. These seed only the recompress start, which steps DOWN from here
-// (never re-encoding above the capture quality, which would inflate).
-const SELFIE_CAPTURE_QUALITY = 0.95;
-const LIVENESS_CAPTURE_QUALITY = 0.8;
-const BYTES_PER_MB = 1024 * 1024;
-function sizeInMb(uri) {
-    if (uri === undefined)
-        return undefined;
-    const bytes = new File(uri).size ?? 0;
-    return bytes > 0 ? bytes / BYTES_PER_MB : undefined;
-}
-/**
- * Builds `CompressibleAssets` from a submission's captured JPEG URIs and runs `PayloadCompressor`
- * to bring the bundle under the transmission cap, re-stamping the Smile EXIF `image_digest` (and
- * re-encoding natively) per step. Best-effort: it compresses each image down to its quality floor
- * and resolves — it never throws on size, so submission is never blocked.
- */
-export const PayloadCompressionRunner = {
-    async compress(args) {
-        // Original JPEG sizes, measured before the compressor rewrites the files in place.
-        const selfieOriginalMb = sizeInMb(args.selfieImage);
-        const frontOriginalMb = sizeInMb(args.frontDocument);
-        const backOriginalMb = sizeInMb(args.backDocument);
-        const assets = new CompressibleAssets({
-            selfie: args.selfieImage
-                ? new UriCompressibleAsset(ImageType.Selfie, args.selfieImage, SELFIE_CAPTURE_QUALITY)
-                : undefined,
-            liveness: (args.livenessImages ?? []).map((uri) => new UriCompressibleAsset(ImageType.Liveness, uri, LIVENESS_CAPTURE_QUALITY)),
-            documentFront: args.frontDocument
-                ? new UriCompressibleAsset(ImageType.DocumentFront, args.frontDocument, CameraDefaults.documentJpegQuality)
-                : undefined,
-            documentBack: args.backDocument
-                ? new UriCompressibleAsset(ImageType.DocumentBack, args.backDocument, CameraDefaults.documentJpegQuality)
-                : undefined,
-        });
-        await PayloadCompressor.prepareBundleForTransmission(assets, args.metadataBytes);
-        // Final JPEG sizes, measured after compression (equal to the originals when not compressed).
-        return {
-            selfieOriginalMb,
-            selfieFinalMb: sizeInMb(args.selfieImage),
-            frontOriginalMb,
-            frontFinalMb: sizeInMb(args.frontDocument),
-            backOriginalMb,
-            backFinalMb: sizeInMb(args.backDocument),
-        };
-    },
-};
-//# sourceMappingURL=payload_compression_runner.js.map
+"use strict";import{File as u}from"expo-file-system";import{ImageType as n}from"@smileid/usesmileid_bridge";import{CameraDefaults as l}from"../../camera/camera_defaults";import{resolveJpegQuality as r}from"../model/sdk_config_capture";import{CompressibleAssets as a}from"./compressible_asset";import{PayloadCompressor as d}from"./payload_compressor";import{UriCompressibleAsset as s}from"./uri_compressible_asset";const p=.95,b=.8;export function resolveCaptureQuality(e,o){const[m,c]=o===n.Selfie?[e?.selfie,p]:o===n.Liveness?[e?.liveness,b]:[e?.document,l.documentJpegQuality],i=r(m);return i===void 0?c:i/100}const D=1024*1024;function t(e){if(e===void 0)return;const o=new u(e).size??0;return o>0?o/D:void 0}export const PayloadCompressionRunner={async compress(e){const o=t(e.selfieImage),m=t(e.frontDocument),c=t(e.backDocument),i=new a({selfie:e.selfieImage?new s(n.Selfie,e.selfieImage,resolveCaptureQuality(e.sdkConfig,n.Selfie)):void 0,liveness:(e.livenessImages??[]).map(f=>new s(n.Liveness,f,resolveCaptureQuality(e.sdkConfig,n.Liveness))),documentFront:e.frontDocument?new s(n.DocumentFront,e.frontDocument,resolveCaptureQuality(e.sdkConfig,n.DocumentFront)):void 0,documentBack:e.backDocument?new s(n.DocumentBack,e.backDocument,resolveCaptureQuality(e.sdkConfig,n.DocumentBack)):void 0});return await d.prepareBundleForTransmission(i,e.metadataBytes),{selfieOriginalMb:o,selfieFinalMb:t(e.selfieImage),frontOriginalMb:m,frontFinalMb:t(e.frontDocument),backOriginalMb:c,backFinalMb:t(e.backDocument)}}};

package/dist/data/compression/payload_compressor.d.ts

@@ -37,4 +37,3 @@ export declare const PayloadCompressor: {
     /** Reduce each asset in `group` (order matters) toward `target` as measured by `measure`. */
     _compressGroupToTarget(group: CompressibleAsset[], minQuality: number, target: number, measure: () => number): Promise<void>;
 };
-//# sourceMappingURL=payload_compressor.d.ts.map