@smileid/usesmileid 12.0.2 → 12.1.1

package/src/data/model/__tests__/user_details_payload.test.ts

@@ -1,100 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { UserDetails } from "../../../core/models/params";
-import {
-  isUserDetailsPayloadEmpty,
-  userDetailsPayloadFrom,
-  userDetailsPayloadToWire,
-} from "../user_details_payload";
-
-// Pins the `user_details` wire carrier: token-bound fields are stripped,
-// nothing-stripped output matches the legacy `UserDetails` encoding, and an
-// all-stripped payload reads as empty so the part is omitted rather than
-// sent as `{}`.
-describe("UserDetailsPayload", () => {
-  const details: UserDetails = {
-    givenNames: "Ada",
-    lastName: "Lovelace",
-    email: "ada@example.test",
-    phoneNumber: "+2348000000000",
-  };
-
-  it("no token binding keeps every field and matches the UserDetails wire encoding", () => {
-    const payload = userDetailsPayloadFrom(details, undefined);
-
-    expect(payload).toEqual(details);
-    expect(isUserDetailsPayloadEmpty(payload)).toBe(false);
-    expect(userDetailsPayloadToWire(payload)).toEqual({
-      given_names: "Ada",
-      last_name: "Lovelace",
-      email: "ada@example.test",
-      phone_number: "+2348000000000",
-    });
-  });
-
-  it("an empty token payload binding nothing keeps every field", () => {
-    const payload = userDetailsPayloadFrom(details, {
-      hasGivenNames: false,
-      hasLastName: false,
-      hasEmail: false,
-      hasPhoneNumber: false,
-    });
-
-    expect(payload).toEqual(details);
-  });
-
-  it("token-bound fields are dropped individually", () => {
-    const payload = userDetailsPayloadFrom(details, {
-      hasGivenNames: true,
-      hasLastName: true,
-      hasEmail: false,
-      hasPhoneNumber: false,
-    });
-
-    expect(payload.givenNames).toBeUndefined();
-    expect(payload.lastName).toBeUndefined();
-    expect(payload.email).toBe("ada@example.test");
-    expect(payload.phoneNumber).toBe("+2348000000000");
-    expect(Object.keys(userDetailsPayloadToWire(payload)).sort()).toEqual([
-      "email",
-      "phone_number",
-    ]);
-  });
-
-  it("fully bound details read as empty", () => {
-    const payload = userDetailsPayloadFrom(details, {
-      hasGivenNames: true,
-      hasLastName: true,
-      hasEmail: true,
-      hasPhoneNumber: true,
-    });
-
-    expect(isUserDetailsPayloadEmpty(payload)).toBe(true);
-  });
-
-  it("blank contact fields count as empty and are omitted from the wire", () => {
-    const payload = userDetailsPayloadFrom(
-      { givenNames: "Ada", lastName: "Lovelace", email: "  ", phoneNumber: "" },
-      {
-        hasGivenNames: true,
-        hasLastName: true,
-        hasEmail: false,
-        hasPhoneNumber: false,
-      },
-    );
-
-    // Blank contacts encode to nothing, so nothing remains.
-    expect(isUserDetailsPayloadEmpty(payload)).toBe(true);
-    expect(userDetailsPayloadToWire(payload)).toEqual({});
-  });
-
-  it("contact fields are trimmed on the wire", () => {
-    const wire = userDetailsPayloadToWire({
-      givenNames: "Ada",
-      lastName: "Lovelace",
-      email: " ada@example.test ",
-    });
-
-    expect(wire["email"]).toBe("ada@example.test");
-    expect(wire["phone_number"]).toBeUndefined();
-  });
-});

package/src/data/model/image_dimensions.ts

@@ -1,15 +0,0 @@
-/**
- * Resolved selfie or liveness image capture dimensions.
- *
- * Produced only by `resolveDimensions` in `sdk_config_capture` — never
- * constructed directly. The pair rule (both width and height must be
- * present and positive) is enforced at the point of creation, so any
- * `ImageDimensions` value is guaranteed to carry two positive integers.
- *
- * Documents are always captured at sensor-native resolution; this type
- * is intentionally absent from the document-capture path.
- */
-export type ImageDimensions = {
-  readonly width: number;
-  readonly height: number;
-};

package/src/data/model/job_request.ts

@@ -1,165 +0,0 @@
-import type {
-  ConsentInformation,
-  EnhancedKYCParams,
-  BiometricKYCParams,
-} from "../../core/models/params";
-import type { UserDetailsPayload } from "./user_details_payload";
-import { JobType } from "../../core/models/job_type";
-import type { UseSmileIDMetadata } from "../../metadata/use_smile_id_metadata";
-
-/**
- * Discriminated-union of submission requests. The `jobType` field
- * narrows the union and tells the repository which API method to
- * dispatch to.
- *
- * Every variant intersects [BaseJobRequest], which carries the
- * fields shared by all submissions: the partner-captured `consent`
- * record, the per-submission `metadata` snapshot, and the decoded
- * token bindings. Variants keep a narrowed `jobType` literal so the
- * union still discriminates.
- *
- * `metadata` is built at the request-construction site (the flow
- * navigation manager) and travels on the request itself — the API
- * layer reads `request.metadata` and serializes it as the `metadata`
- * multipart part rather than generating the snapshot at submit time.
- */
-export interface BaseJobRequest {
-  /**
-   * Local consent record (captured on the consent screen or
-   * pre-supplied via the builder). Omitted only when no local source
-   * exists AND the token binds complete consent — the API layer then
-   * omits the `consent` multipart part and the server injects the
-   * token's consent.
-   */
-  readonly consent?: ConsentInformation;
-  readonly metadata: UseSmileIDMetadata;
-}
-
-export type SmartSelfieEnrollmentRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.smartSelfieEnrollment;
-  readonly selfieImage: string;
-  readonly livenessImages: readonly string[];
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-  /**
-   * Screen-level enhanced-liveness intent marker. The wire path is
-   * always `/v3/registration` (and `/v3/authentication` on the auth
-   * variant); this flag governs only the capture-time head-turn
-   * pipeline — the previous "different URL when enhanced" behavior
-   * pointed at endpoints the lambda never exposed.
-   */
-  readonly enhanced: boolean;
-  /**
-   * Expected number of liveness images for this submission. Derived
-   * from the `sdk_config` JWT claim's `livenessImageCount` when
-   * present (`livenessImageCount` maps to `numSamples = count + 1`,
-   * so `expectedLivenessImageCount = count`); otherwise the
-   * `ScanPerformanceProfile` default minus one (`numSamples - 1`).
-   * For Enhanced Smart Selfie this is always
-   * `EnhancedSmartSelfieConfig.EXPECTED_LIVENESS_IMAGE_COUNT` (7).
-   *
-   * Used by `SmileIDAPI._validateLivenessCount` to surface a count
-   * mismatch before the request hits the network.
-   */
-  readonly expectedLivenessImageCount: number;
-};
-
-export type SmartSelfieAuthenticationRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.smartSelfieAuthentication;
-  readonly selfieImage: string;
-  readonly livenessImages: readonly string[];
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-  /**
-   * The `user_id` returned by a prior enrollment — the v3
-   * `/v3/authentication` endpoint requires it so the server can match
-   * the authentication attempt to the existing enrollment. Sent on
-   * the wire as a `user_id` multipart text form field.
-   */
-  readonly userId: string;
-  /** Screen-level enhanced-liveness intent marker. See
-   * `SmartSelfieEnrollmentRequest.enhanced`. */
-  readonly enhanced: boolean;
-  /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
-  readonly expectedLivenessImageCount: number;
-};
-
-export type EnhancedKycRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.enhancedKyc;
-  readonly params: EnhancedKYCParams;
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-};
-
-/**
- * BVN submission stub. The variant exists in the discriminated union
- * so `JobType.bvn` can dispatch to a dedicated request rather than
- * piggy-backing on `enhancedKyc`. The repository rejects it with the
- * canonical `"BVN submission is not yet supported"` message until the
- * dedicated endpoint lands.
- */
-export type BvnRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.bvn;
-  readonly params: EnhancedKYCParams;
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-};
-
-export type BiometricKycRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.biometricKyc;
-  readonly selfieImage: string;
-  readonly livenessImages: readonly string[];
-  readonly params: BiometricKYCParams;
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-  /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
-  readonly expectedLivenessImageCount: number;
-};
-
-export type DocumentVerificationRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.documentVerification;
-  readonly selfieImage: string;
-  readonly livenessImages: readonly string[];
-  /** Front of the captured ID. Sent as the `document` part. */
-  readonly frontDocument: string;
-  /** Back of the captured ID. Sent as the `document_back` part. */
-  readonly backDocument?: string;
-  readonly country: string;
-  /** Optional — the server classifies the document when omitted. */
-  readonly idType?: string;
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-  /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
-  readonly expectedLivenessImageCount: number;
-};
-
-/**
- * Enhanced variant of the document-verification job. Dispatches through
- * `/v3/enhanced_document_verification` and lands on a distinct repository
- * switch case. Differs from [DocumentVerificationRequest] in that
- * `idType` is required (the server uses it for the ID-authority check).
- */
-export type EnhancedDocumentVerificationRequest = BaseJobRequest & {
-  readonly jobType: typeof JobType.enhancedDocumentVerification;
-  readonly selfieImage: string;
-  readonly livenessImages: readonly string[];
-  /** Front of the captured ID. Sent as the `document` part. */
-  readonly frontDocument: string;
-  /** Back of the captured ID. Sent as the `document_back` part. */
-  readonly backDocument?: string;
-  readonly country: string;
-  readonly idType: string;
-  /** Omitted when the token binds every required field, or reduced to the unbound remainder. */
-  readonly userDetails?: UserDetailsPayload;
-  /** See `SmartSelfieEnrollmentRequest.expectedLivenessImageCount`. */
-  readonly expectedLivenessImageCount: number;
-};
-
-export type JobRequest =
-  | SmartSelfieEnrollmentRequest
-  | SmartSelfieAuthenticationRequest
-  | EnhancedKycRequest
-  | BvnRequest
-  | BiometricKycRequest
-  | DocumentVerificationRequest
-  | EnhancedDocumentVerificationRequest;

package/src/data/model/job_submission_response.ts

@@ -1,17 +0,0 @@
-/**
- * Job-submission response. Returned by every job-submission endpoint
- * (`/v3/smart_selfie_*`, `/v3/biometric_kyc`,
- * `/v3/document_verification`, …).
- */
-export type JobSubmissionResponse = {
-  readonly jobId: string;
-  readonly userId: string;
-  readonly status: string;
-  readonly message: string;
-  /**
-   * ISO-8601 timestamp at which the server accepted the job. Always
-   * present in v3 responses but typed optional for forward and
-   * backward compatibility insurance.
-   */
-  readonly createdAt?: string;
-};

package/src/data/model/sdk_config.ts

@@ -1,74 +0,0 @@
-import { z } from "zod";
-
-import { sdkConfigCaptureSchema } from "./sdk_config_capture";
-
-/**
- * Capture-parameter settings delivered via the JWT auth token.
- *
- * The backend embeds this object under the `sdk_config` claim (JWT
- * payload, base64url-decoded middle segment). All fields are optional;
- * an absent or invalid field falls back to the SDK default — values are
- * never clamped.
- *
- * Expected claim shape:
- * ```jsonc
- * {
- *   "sdk_config": {
- *     "selfie":   { "width": 640, "height": 480, "quality": 90 },
- *     "liveness": { "width": 640, "height": 480, "quality": 80 },
- *     "document": { "quality": 70 },
- *     "livenessImageCount": 7
- *   }
- * }
- * ```
- *
- * Field names are a deliberate cross-SDK shared contract that
- * intentionally omits the `UseSmileID` prefix.
- */
-export const sdkConfigSchema = z.object({
-  /** Selfie capture settings: pixel dimensions and JPEG quality. */
-  selfie: sdkConfigCaptureSchema.optional(),
-  /** Liveness capture settings: pixel dimensions and JPEG quality. */
-  liveness: sdkConfigCaptureSchema.optional(),
-  /**
-   * Document capture settings. Only `quality` is applied — document
-   * frames stay sensor-native with their longest side bounded at
-   * 1 600 px by the native resampler. `width` / `height` are accepted
-   * by the schema but deliberately ignored.
-   */
-  document: sdkConfigCaptureSchema.optional(),
-  /**
-   * Number of liveness images the native session should capture.
-   * Maps to the internal `numSamples` parameter as
-   * `numSamples = livenessImageCount + 1` (the `+1` accounts for the
-   * reference selfie still).
-   *
-   * A value of `0` or below is treated as absent; the caller falls back
-   * to the `ScanPerformanceProfile` default (`numSamples = 8`).
-   *
-   * This override is suppressed when Enhanced Smart Selfie liveness is
-   * active — the head-turn flow manages its own capture count.
-   */
-  livenessImageCount: z.number().int().optional(),
-});
-
-export type SdkConfig = z.infer<typeof sdkConfigSchema>;
-
-/**
- * Convert `livenessImageCount` to the internal `numSamples` override,
- * or `undefined` when the value is absent or invalid.
- *
- * Formula: `numSamples = livenessImageCount + 1`.
- * The `+1` accounts for the reference selfie still that the native
- * session captures in addition to the liveness frames.
- * A count of `0` or below is treated as absent (returns `undefined`).
- */
-export function numSamplesOverride(
-  config: SdkConfig | undefined,
-): number | undefined {
-  const count = config?.livenessImageCount;
-  if (count !== undefined && count > 0) {
-    return count + 1;
-  }
-  return undefined;
-}

package/src/data/model/sdk_config_capture.ts

@@ -1,78 +0,0 @@
-import { z } from "zod";
-
-import type { ImageDimensions } from "./image_dimensions";
-
-/**
- * Per-capture-type block inside an `sdk_config` JWT claim.
- *
- * Three instances appear under the `selfie`, `liveness`, and `document`
- * keys of the top-level claim. Each field is optional — any absent or
- * out-of-range value falls back to the SDK default at the point of use.
- *
- * Field names are a deliberate cross-SDK shared contract that
- * intentionally omits the `UseSmileID` prefix.
- */
-export const sdkConfigCaptureSchema = z.object({
-  /**
-   * Target capture width in pixels.
-   * Applied only for selfie and liveness — document frames stay
-   * sensor-native with their longest side bounded by the native
-   * resampler at 1 600 px.
-   */
-  width: z.number().int().optional(),
-  /**
-   * Target capture height in pixels.
-   * Resolved as a pair with `width` — both must be present and
-   * greater than zero, otherwise the pair falls back to the SDK
-   * default in full (never mix a server width with a default height).
-   */
-  height: z.number().int().optional(),
-  /**
-   * JPEG compression quality hint in the range `1..100`.
-   * Values outside that range are treated as absent — the caller uses
-   * the SDK default. Values are never clamped; the backend owns
-   * enforcement.
-   */
-  quality: z.number().int().optional(),
-});
-
-export type SdkConfigCapture = z.infer<typeof sdkConfigCaptureSchema>;
-
-/**
- * Resolve a capture block to an `ImageDimensions` pair, or `undefined`
- * when the pair rule is not satisfied.
- *
- * Rule (port of Flutter / iOS / Android cross-SDK contract):
- *   - Both `width` and `height` must be present and `> 0`.
- *   - If either is absent or invalid, return `undefined`; the caller
- *     falls back to the SDK default pair in full. Mixing a server width
- *     with a default height is explicitly forbidden to avoid
- *     aspect-ratio mismatches.
- */
-export function resolveDimensions(
-  capture: SdkConfigCapture | undefined,
-): ImageDimensions | undefined {
-  if (!capture) return undefined;
-  const { width, height } = capture;
-  if (width !== undefined && height !== undefined && width > 0 && height > 0) {
-    return { width, height };
-  }
-  return undefined;
-}
-
-/**
- * Resolve the JPEG quality from a capture block, or `undefined` when
- * the value is outside the valid range.
- *
- * Range: integer `1..100` inclusive. Out-of-range values are not
- * clamped — the caller uses the SDK default instead.
- */
-export function resolveJpegQuality(
-  capture: SdkConfigCapture | undefined,
-): number | undefined {
-  const quality = capture?.quality;
-  if (quality !== undefined && quality >= 1 && quality <= 100) {
-    return quality;
-  }
-  return undefined;
-}

package/src/data/model/sdk_config_source.ts

@@ -1,26 +0,0 @@
-/**
- * Provenance of the capture parameters used for a given submission.
- *
- * Emitted as the `sdk_config_source` metadata entry on every job
- * submission. The backend gates its dimension-consistency check on this
- * value — reporting the wrong source causes server-side validation
- * failures, so these wire strings are parity-critical.
- *
- * Wire values are intentionally lowercase snake_case to match the
- * backend's expected strings.
- */
-export const SdkConfigSource = {
-  /**
-   * Capture parameters were overridden by a valid `sdk_config` claim
-   * decoded from the JWT auth token.
-   */
-  sdkConfig: "sdk_config",
-  /**
-   * No `sdk_config` claim was present (or it was structurally invalid);
-   * the SDK applied its built-in defaults throughout the flow.
-   */
-  defaultSource: "default",
-} as const;
-
-export type SdkConfigSourceValue =
-  (typeof SdkConfigSource)[keyof typeof SdkConfigSource];

package/src/data/model/token_payload.ts

@@ -1,182 +0,0 @@
-import { z } from "zod";
-
-/**
- * User-detail and consent bindings delivered via the JWT auth token.
- *
- * The backend embeds this object under the top-level `payload` claim
- * (JWT payload, base64url-decoded middle segment) when the partner
- * binds user details and/or consent into the token on their backend.
- * User-detail values in the claim are opaque vault references — only
- * key PRESENCE is meaningful client-side. Consent subfields are
- * plaintext. `country` / `id_type` / `id_number` / `callback_url` may
- * also appear in the claim but are deliberately ignored.
- *
- * Every field is optional and every field tolerates a wrong wire type
- * by degrading to absent — a malformed claim never rejects the token.
- *
- * Field names are a deliberate cross-SDK shared contract that
- * intentionally omits the `UseSmileID` prefix. Internal — not
- * re-exported from the package entrypoint (`src/index.ts`).
- */
-
-const tokenConsentClaimSchema = z.object({
-  /** Only a literal `true` counts — `false` or a non-boolean is never trusted as a binding. */
-  granted: z.literal(true).optional().catch(undefined),
-  granted_at: z.string().optional().catch(undefined),
-  notice_language: z.string().optional().catch(undefined),
-  notice_privacy_policy_url: z.string().optional().catch(undefined),
-});
-
-/**
- * Tolerant wire schema for the `payload` claim. Unknown keys are
- * stripped; a wrong-typed field degrades to `undefined` (per-field
- * `.catch`) instead of failing the whole claim.
- */
-export const tokenPayloadSchema = z.object({
-  given_names: z.string().optional().catch(undefined),
-  last_name: z.string().optional().catch(undefined),
-  email: z.string().optional().catch(undefined),
-  phone_number: z.string().optional().catch(undefined),
-  /** Non-object / array consent values degrade to absent. */
-  consent: tokenConsentClaimSchema.optional().catch(undefined),
-});
-
-/**
- * Consent subfields bound into the token. Token consent always wins:
- * a complete binding (see {@link isTokenConsentComplete}) supersedes
- * every local consent source, and a partial binding is a build-time
- * validation error naming the missing subfields (see
- * {@link tokenConsentMissingSubfields}).
- */
-export type TokenConsent = {
-  /** Present (and `true`) only when the claim carried a literal `granted: true`. */
-  readonly granted?: boolean;
-  /** ISO-8601 timestamp from the claim's `granted_at`. */
-  readonly grantedAt?: string;
-  /** Language code from the claim's `notice_language`. */
-  readonly noticeLanguage?: string;
-  /** URL from the claim's `notice_privacy_policy_url`. */
-  readonly noticePrivacyPolicyUrl?: string;
-};
-
-/**
- * Presence flags for the identity fields the token binds, parsed from
- * the `payload` claim. A flag is `true` iff the claim carries the key
- * with a non-empty string value (the value itself is an opaque vault
- * reference — the server injects the real value at submission).
- */
-export type TokenPayload = {
-  readonly hasGivenNames: boolean;
-  readonly hasLastName: boolean;
-  readonly hasEmail: boolean;
-  readonly hasPhoneNumber: boolean;
-  readonly consent?: TokenConsent;
-};
-
-/**
- * Parse a raw `payload` claim value into a `TokenPayload`, or
- * `undefined` when the claim is absent or not a JSON object. Mirrors
- * the `sdk_config` degradation semantics: never throws, tolerates
- * unknown keys, and degrades wrong-typed fields to absent.
- */
-export function parseTokenPayload(rawClaim: unknown): TokenPayload | undefined {
-  if (
-    rawClaim === null ||
-    typeof rawClaim !== "object" ||
-    Array.isArray(rawClaim)
-  ) {
-    return undefined;
-  }
-  const parseResult = tokenPayloadSchema.safeParse(rawClaim);
-  if (!parseResult.success) {
-    // Unreachable in practice (every field carries a `.catch`), but
-    // degrade gracefully to preserve the never-throws contract.
-    return undefined;
-  }
-  const claim = parseResult.data;
-  const consent = tokenConsentFromClaim(claim.consent);
-  return {
-    hasGivenNames: isPresent(claim.given_names),
-    hasLastName: isPresent(claim.last_name),
-    hasEmail: isPresent(claim.email),
-    hasPhoneNumber: isPresent(claim.phone_number),
-    ...(consent !== undefined ? { consent } : {}),
-  };
-}
-
-/**
- * Token consent is COMPLETE when `granted` is `true` and every other
- * subfield is non-blank. A complete binding — granted with every
- * notice subfield non-blank — satisfies the consent requirement
- * without a local source. Token consent always wins, so a partial
- * binding is a build-time validation error.
- */
-export function isTokenConsentComplete(
-  consent: TokenConsent | undefined,
-): boolean {
-  return (
-    consent !== undefined && tokenConsentMissingSubfields(consent).length === 0
-  );
-}
-
-/**
- * Wire-key names of the consent subfields the binding is missing. A
- * token that carries a consent object must carry all four subfields —
- * a non-empty list is a build-time validation error naming exactly
- * what the token must add.
- */
-export function tokenConsentMissingSubfields(
-  consent: TokenConsent,
-): readonly string[] {
-  const missing: string[] = [];
-  if (consent.granted !== true) missing.push("granted");
-  if (!isNonBlank(consent.grantedAt)) missing.push("granted_at");
-  if (!isNonBlank(consent.noticeLanguage)) missing.push("notice_language");
-  if (!isNonBlank(consent.noticePrivacyPolicyUrl)) {
-    missing.push("notice_privacy_policy_url");
-  }
-  return missing;
-}
-
-/**
- * Whether the token binds every user-detail field the SDK would
- * otherwise require from the builder: `given_names` AND `last_name`
- * AND at least one of `email` / `phone_number`. Only then may
- * `builder.userDetails` be omitted entirely.
- */
-export function bindsRequiredUserDetails(
-  payload: TokenPayload | undefined,
-): boolean {
-  if (payload === undefined) return false;
-  return (
-    payload.hasGivenNames &&
-    payload.hasLastName &&
-    (payload.hasEmail || payload.hasPhoneNumber)
-  );
-}
-
-function tokenConsentFromClaim(
-  claim: z.infer<typeof tokenConsentClaimSchema> | undefined,
-): TokenConsent | undefined {
-  if (claim === undefined) return undefined;
-  const consent: TokenConsent = {
-    ...(claim.granted === true ? { granted: true } : {}),
-    ...(claim.granted_at !== undefined ? { grantedAt: claim.granted_at } : {}),
-    ...(claim.notice_language !== undefined
-      ? { noticeLanguage: claim.notice_language }
-      : {}),
-    ...(claim.notice_privacy_policy_url !== undefined
-      ? { noticePrivacyPolicyUrl: claim.notice_privacy_policy_url }
-      : {}),
-  };
-  // An empty consent object binds nothing — treat it as absent.
-  return Object.keys(consent).length > 0 ? consent : undefined;
-}
-
-function isPresent(value: string | undefined): boolean {
-  return value !== undefined && value.length > 0;
-}
-
-function isNonBlank(value: string | undefined): boolean {
-  return value !== undefined && value.trim().length > 0;
-}