@smileid/usesmileid 12.2.0 → 12.2.1-SNAPSHOT.44

package/dist/data/factory/networking_factory.js

@@ -1 +1 @@
-"use strict";import{SmileIDAPI as u,buildAxiosClient as g,SmileAuthInterceptor as I,attachLoggingInterceptor as k}from"../api/smile_id_api";import{createGzipInterceptor as d}from"../api/interceptors/gzip_interceptor";import{SmileRequestMacInterceptor as y}from"../api/interceptors/smile_request_mac_interceptor";import{SmileIntegrityInterceptor as w}from"../api/interceptors/smile_integrity_interceptor";import{TokenRefreshInterceptor as C}from"../api/interceptors/token_refresh_interceptor";import{TokenHolder as S}from"../api/auth/token_holder";import{SmileIDCryptoManager as A}from"../security/smile_id_crypto_manager";import{SecurityPolicy as P}from"../security/security_policy";import{decodeSecurityPolicyBitCode as F}from"../util/use_smile_id_token_decoder";import{Attestation as T}from"@smileid/usesmileid_bridge";import{SigningSecretProvider as b}from"@smileid/usesmileid_bridge/internal";import{MissingPartnerConfigException as n}from"../../core/exception";import{UseSmileIDMetadataFactory as x}from"../../metadata/use_smile_id_metadata_factory";export function makeNetworkingFactory(t,o=()=>b.signingSecret()){const r=t.config?.partnerConfig;if(!r||r.partnerId.trim()==="")throw n.missingPartnerId();if(!t.config?.token||t.config.token.trim()==="")throw n.missingAuthToken();const c=/[\u0000-\u001F\u007F-\u009F]/;if(c.test(r.partnerId))throw n.controlCharacterPartnerId();if(c.test(t.config.token))throw n.controlCharacterAuthToken();if(!isResolvableCallbackUrl(r.callbackUrl??""))throw n.unresolvableCallbackUrl();const e=g(t),m=new x,f=new u(e,r);T.warmUp().catch(()=>{});const a=new S(t.config?.token??""),s=P.fromBitCode(F(t.config?.token??""));d().attach(e);const p=t.config?.logging;p&&k(e,p),new w({securityPolicy:s}).attach(e);const l=new A(o());if(new y({cryptoManager:l,securityPolicy:s}).attach(e),new I({partnerConfig:r,tokenHolder:a}).attach(e),new C({tokenHolder:a,onTokenExpired:t.config?.onTokenExpired}).attach(e),t.interceptors)for(const h of t.interceptors){const i=h;typeof i=="function"?i(e):typeof i?.attach=="function"&&i.attach(e)}return{api:f,client:e,metadata:m}}const M=/^callback_[0-9a-hjkmnp-tv-z]{26}$/;export function isResolvableCallbackUrl(t){if(t===""||M.test(t))return!0;const o=t.indexOf("://");if(o<=0)return!1;const r=t.slice(0,o).toLowerCase();if(r!=="http"&&r!=="https")return!1;const e=((t.slice(o+3).split(/[/?#]/)[0]??"").split("@").pop()??"").split(":")[0]??"";return e!==""&&!/[\s\u0000-\u001F\u007F-\u009F]/.test(e)}
+"use strict";import{SmileIDAPI as I,buildAxiosClient as d,SmileAuthInterceptor as k,attachLoggingInterceptor as y}from"../api/smile_id_api";import{createGzipInterceptor as w}from"../api/interceptors/gzip_interceptor";import{captureAdapter as C}from"../api/request_capture";import{SmileRequestMacInterceptor as S}from"../api/interceptors/smile_request_mac_interceptor";import{SmileIntegrityInterceptor as A}from"../api/interceptors/smile_integrity_interceptor";import{TokenRefreshInterceptor as P}from"../api/interceptors/token_refresh_interceptor";import{TokenHolder as F}from"../api/auth/token_holder";import{SmileIDCryptoManager as T}from"../security/smile_id_crypto_manager";import{SecurityPolicy as b}from"../security/security_policy";import{decodeSecurityPolicyBitCode as x}from"../util/use_smile_id_token_decoder";import{Attestation as M}from"@smileid/usesmileid_bridge";import{SigningSecretProvider as R}from"@smileid/usesmileid_bridge/internal";import{MissingPartnerConfigException as c}from"../../core/exception";import{UseSmileIDMetadataFactory as E}from"../../metadata/use_smile_id_metadata_factory";export function makeNetworkingFactory(t,o=()=>R.signingSecret(),a={}){const e=t.config?.partnerConfig;if(!e||e.partnerId.trim()==="")throw c.missingPartnerId();if(!t.config?.token||t.config.token.trim()==="")throw c.missingAuthToken();const n=/[\u0000-\u001F\u007F-\u009F]/;if(n.test(e.partnerId))throw c.controlCharacterPartnerId();if(n.test(t.config.token))throw c.controlCharacterAuthToken();if(!isResolvableCallbackUrl(e.callbackUrl??""))throw c.unresolvableCallbackUrl();const i=a.capturing===!0,r=d(t);i&&(r.defaults.adapter=C);const u=new E,h=new I(r,e);i||M.warmUp().catch(()=>{});const p=new F(t.config?.token??""),f=b.fromBitCode(x(t.config?.token??""));i||w().attach(r);const m=t.config?.logging;m&&!i&&y(r,m),new A({securityPolicy:f}).attach(r);const g=new T(o());if(new S({cryptoManager:g,securityPolicy:f}).attach(r),new k({partnerConfig:e,tokenHolder:p}).attach(r),new P({tokenHolder:p,onTokenExpired:t.config?.onTokenExpired}).attach(r),t.interceptors&&!i)for(const l of t.interceptors){const s=l;typeof s=="function"?s(r):typeof s?.attach=="function"&&s.attach(r)}return{api:h,client:r,metadata:u}}const U=/^callback_[0-9a-hjkmnp-tv-z]{26}$/;export function isResolvableCallbackUrl(t){if(t===""||U.test(t))return!0;const o=t.indexOf("://");if(o<=0)return!1;const a=t.slice(0,o).toLowerCase();if(a!=="http"&&a!=="https")return!1;const n=((t.slice(o+3).split(/[/?#]/)[0]??"").split("@").pop()??"").split(":")[0]??"";return n!==""&&!/[\s\u0000-\u001F\u007F-\u009F]/.test(n)}

package/dist/data/model/captured_job.d.ts

@@ -0,0 +1,49 @@
+import type { JobRequest } from "./job_request";
+import type { SealedJobRequest } from "./sealed_job_request";
+/**
+ * Everything the flow captured for a job that was handed back instead of
+ * submitted (`c.skipApiSubmission = true`). Forward it to Smile ID from your
+ * own backend: send the job type's `/v3` request with `headers` as request
+ * headers, the images as their usual form parts, and `encryptedPackage`,
+ * `packageNonce` and `packageTag` as the `encrypted_package`, `package_nonce`
+ * and `package_tag` form fields.
+ *
+ * Everything else the SDK would have sent (the consent record, the metadata,
+ * the signature and the other `smileid-*` headers) travels inside
+ * `encryptedPackage`, encrypted for Smile ID: forward it as is, since the
+ * server rejects a package that was changed. The image files must
+ * reach the server byte-for-byte too, since they carry an integrity seal that
+ * a re-encode invalidates. The SDK deletes neither the files nor
+ * `sessionDirectory` in this mode: once the job has been forwarded, delete
+ * every file it lists, then `sessionDirectory` and everything left in it.
+ * `sessionDirectory` is the SDK's session folder holding every listed file,
+ * and absent when they don't share one (the capture sessions can store them
+ * apart), the folder isn't one of the SDK's own, or the job captured no files
+ * (Enhanced KYC). A document imported from the gallery or taken with the manual
+ * shutter lives in the app's cache, which the OS may clear under storage
+ * pressure, so forward such a job promptly.
+ */
+export type CapturedJob = {
+    readonly jobType: JobRequest["jobType"];
+    readonly sessionId: string;
+    readonly sessionDirectory?: string;
+    readonly selfieImage?: string;
+    readonly livenessImages: readonly string[];
+    readonly frontDocument?: string;
+    readonly backDocument?: string;
+    /** The visa page of a Residency Document Verification job, sent as the `visa` part. */
+    readonly visaDocument?: string;
+    /** `smileid-token`, `smileid-source-sdk` and `smileid-source-sdk-version`, to send as they are. */
+    readonly headers: Readonly<Record<string, string>>;
+    /** The sealed request, hex-encoded; the `encrypted_package` form field. */
+    readonly encryptedPackage: string;
+    /** The package's AES-GCM nonce, hex-encoded; the `package_nonce` form field. */
+    readonly packageNonce: string;
+    /** The package's AES-GCM authentication tag, hex-encoded; the `package_tag` form field. */
+    readonly packageTag: string;
+};
+/**
+ * The partner-facing hand-over of `request`: the files its legs produced and
+ * the `sealed` request, with nothing the partner supplied echoed back.
+ */
+export declare function capturedJobFrom(request: JobRequest, sessionId: string, sealed: SealedJobRequest): CapturedJob;

package/dist/data/model/captured_job.js

@@ -0,0 +1 @@
+"use strict";import{JobType as t}from"../../core/models/job_type";export function capturedJobFrom(e,a,c){const n=m(e),i=r([n.selfieImage,...n.livenessImages,n.frontDocument,n.backDocument,n.visaDocument]);return Object.freeze({jobType:e.jobType,sessionId:a,...i!==void 0?{sessionDirectory:i}:{},...n.selfieImage!==void 0?{selfieImage:n.selfieImage}:{},livenessImages:Object.freeze([...n.livenessImages]),...n.frontDocument!==void 0?{frontDocument:n.frontDocument}:{},...n.backDocument!==void 0?{backDocument:n.backDocument}:{},...n.visaDocument!==void 0?{visaDocument:n.visaDocument}:{},headers:c.headers,encryptedPackage:c.encryptedPackage,packageNonce:c.packageNonce,packageTag:c.packageTag})}function m(e){switch(e.jobType){case t.smartSelfieEnrollment:case t.smartSelfieAuthentication:case t.biometricKyc:return{selfieImage:e.selfieImage,livenessImages:e.livenessImages};case t.documentVerification:case t.enhancedDocumentVerification:return{selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,...e.backDocument!==void 0?{backDocument:e.backDocument}:{}};case t.residencyDocumentVerification:return{selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,visaDocument:e.visaDocument};case t.enhancedKyc:case t.bvn:return{livenessImages:[]}}}function o(e){const a=e.lastIndexOf("/");if(a<=0)return;const c=e.slice(0,a);return/^[a-z][a-z0-9+.-]*:\/*$/i.test(c)?void 0:c}const f="UseSmileID";function r(e){const a=new Set(e.filter(s=>s!==void 0).map(o));if(a.size!==1)return;const[c]=a;if(c===void 0)return;const n=o(c);return n?.slice(n.lastIndexOf("/")+1)===f?c:void 0}

package/dist/data/model/job_request.d.ts

@@ -48,7 +48,7 @@ export type SmartSelfieEnrollmentRequest = BaseJobRequest & {
      * from the `sdk_config` JWT claim's `livenessImageCount` when
      * present (`livenessImageCount` maps to `numSamples = count + 1`,
      * so `expectedLivenessImageCount = count`); otherwise the
-     * `ScanPerformanceProfile` default minus one (`numSamples - 1`).
+     * native default (`FaceCaptureDefaults.numSamples`) minus one (`numSamples - 1`).
      * For Enhanced Smart Selfie this is always
      * `EnhancedSmartSelfieConfig.EXPECTED_LIVENESS_IMAGE_COUNT` (7).
      *

package/dist/data/model/sealed_job_request.d.ts

@@ -0,0 +1,15 @@
+/**
+ * A job request signed and sealed for the partner to forward
+ * (`c.skipApiSubmission = true`), produced by `JobPackageSealer`. The images
+ * travel beside it, unencrypted.
+ *
+ * `headers` go on the forwarded request as they are; `encryptedPackage`,
+ * `packageNonce` and `packageTag` are hex strings sent as the
+ * `encrypted_package`, `package_nonce` and `package_tag` form fields.
+ */
+export type SealedJobRequest = {
+    readonly headers: Readonly<Record<string, string>>;
+    readonly encryptedPackage: string;
+    readonly packageNonce: string;
+    readonly packageTag: string;
+};

package/dist/data/model/sealed_job_request.js

@@ -0,0 +1 @@
+"use strict";export{};

package/dist/data/repository/use_smile_id_repository.d.ts

@@ -1,6 +1,7 @@
 import type { SdkConfig } from "../model/sdk_config";
 import type { JobRequest } from "../model/job_request";
 import type { JobSubmissionResponse } from "../model/job_submission_response";
+import type { SealedJobRequest } from "../model/sealed_job_request";
 import type { UseSmileIDResult } from "../../core/models/result";
 /**
  * Repository abstraction over `SmileIDAPI` + retry policy.
@@ -16,4 +17,10 @@ export interface UseSmileIDRepository {
      * discriminator drives dispatch to the matching API method.
      */
     submit(request: JobRequest, sdkConfig?: SdkConfig | undefined): Promise<UseSmileIDResult<JobSubmissionResponse>>;
+    /**
+     * Build and sign the request `submit` would send for `request` without
+     * sending it, and seal it into the package a skipped submission hands the
+     * partner to forward (`c.skipApiSubmission`).
+     */
+    seal(request: JobRequest, sdkConfig?: SdkConfig | undefined): Promise<UseSmileIDResult<SealedJobRequest>>;
 }

package/dist/data/repository/use_smile_id_repository_impl.d.ts

@@ -4,6 +4,13 @@ import type { SmileIDAPI } from "../api/smile_id_api";
 import type { RetryConfig } from "../../core/models/network_config";
 import type { UseSmileIDResult } from "../../core/models/result";
 import type { SdkConfig } from "../model/sdk_config";
+import type { SealedJobRequest } from "../model/sealed_job_request";
+import type { JobPackageSealer } from "../security/job_package_sealer";
+/** What a skipped submission seals its request with. */
+export type CaptureDependencies = {
+    readonly api: SmileIDAPI;
+    readonly sealer: JobPackageSealer;
+};
 /**
  * Concrete repository.
  *
@@ -15,15 +22,35 @@ import type { SdkConfig } from "../model/sdk_config";
 export declare class UseSmileIDRepositoryImpl {
     private readonly _api;
     private readonly _retry;
-    constructor(api: SmileIDAPI, retry: RetryConfig);
+    private readonly _capture;
+    /**
+     * `capture` is what a skipped submission seals its request with: the capture
+     * client (`makeNetworkingFactory(config, secret, { capturing: true })`, the
+     * same interceptors stopped before the network) and the sealer.
+     */
+    constructor(api: SmileIDAPI, retry: RetryConfig, capture?: CaptureDependencies);
+    /**
+     * Sends `request` through the capture client, which runs the same
+     * interceptors as a submission and then stops the request
+     * (`CapturedRequest`) instead of sending it, so the sealed request is
+     * compressed and signed exactly as `submit`'s first attempt would be.
+     */
+    seal(request: JobRequest, sdkConfig?: SdkConfig | undefined): Promise<UseSmileIDResult<SealedJobRequest>>;
     submit(request: JobRequest, sdkConfig?: SdkConfig | undefined): Promise<UseSmileIDResult<JobSubmissionResponse>>;
+    /**
+     * Pre-flight payload compression — best effort: shrink the captured JPEGs under the Lambda
+     * cap before transmission (runs once, outside the retry loop), but never block submission, so
+     * any compression failure ships the captured images as-is and lets the server validate. The
+     * per-image original + final compressed sizes are stamped onto the metadata for telemetry.
+     */
+    private _compressed;
     /**
      * Pre-flight payload compression entry — extracts the captured image URIs for the job type and
      * compresses the bundle under the transmission cap (metadata is measured, never modified).
      * No-op for job types that carry no captured images (Enhanced KYC / BVN).
      */
     private _compressPayload;
-    private _dispatch;
+    private static _send;
     /**
      * Translate any caught error into the typed
      * [UseSmileIDNetworkException] hierarchy. Delegates to the canonical

package/dist/data/repository/use_smile_id_repository_impl.js

@@ -1 +1 @@
-"use strict";import{failure as s,success as m}from"../../core/models/result";import{JobType as t}from"../../core/models/job_type";import{withRetry as l}from"../util/retry_util";import{InvalidFieldValueException as f}from"../../core/exception/job_validation_exceptions";import{UseSmileIDValidationException as p}from"../../core/exception/use_smile_id_validation_exception";import{mapAxiosError as d}from"../../core/exception/use_smile_id_network_exception";import{PayloadCompressionRunner as c}from"../compression/payload_compression_runner";function _(r){const e=[],i=(n,a)=>{a!==void 0&&a>0&&e.push({name:n,value:String(a)})};return i("selfie_original_size",r.selfieOriginalMb),i("selfie_final_compressed_size",r.selfieFinalMb),i("document_front_original_size",r.frontOriginalMb),i("document_front_final_compressed_size",r.frontFinalMb),i("document_back_original_size",r.backOriginalMb),i("document_back_final_compressed_size",r.backFinalMb),i("document_visa_original_size",r.visaOriginalMb),i("document_visa_final_compressed_size",r.visaFinalMb),e}export class UseSmileIDRepositoryImpl{_api;_retry;constructor(e,i){this._api=e,this._retry=i}async submit(e,i){if(e.jobType===t.bvn)return s(new f({fieldName:"jobType",reason:"BVN submission is not yet supported"}));let n=e;try{const a=await this._compressPayload(e,i),o=a?_(a):[];o.length>0&&(n={...e,metadata:e.metadata.withAdditionalEntries(o)})}catch{}try{const a=await l(this._retry,o=>this._dispatch(n,o));return m(a)}catch(a){return a instanceof p?s(a):s(this._mapError(a))}}async _compressPayload(e,i){const n=JSON.stringify(e.metadata.toEntries()).length;switch(e.jobType){case t.smartSelfieEnrollment:case t.smartSelfieAuthentication:case t.biometricKyc:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,metadataBytes:n,sdkConfig:i});case t.documentVerification:case t.enhancedDocumentVerification:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,backDocument:e.backDocument,metadataBytes:n,sdkConfig:i});case t.residencyDocumentVerification:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,visaDocument:e.visaDocument,metadataBytes:n,sdkConfig:i});default:return}}_dispatch(e,i){const n=i>0?{...e,metadata:e.metadata.withAdditionalEntries([{name:"network_retries",value:String(i)}])}:e;switch(n.jobType){case t.smartSelfieEnrollment:return this._api.smartSelfieEnrollment(n);case t.smartSelfieAuthentication:return this._api.smartSelfieAuthentication(n);case t.enhancedKyc:return this._api.enhancedKyc(n);case t.biometricKyc:return this._api.biometricKyc(n);case t.documentVerification:return this._api.documentVerification(n);case t.enhancedDocumentVerification:return this._api.enhancedDocumentVerification(n);case t.residencyDocumentVerification:return this._api.residencyDocumentVerification(n)}}_mapError(e){return d(e)}}
+"use strict";import{failure as a,success as m}from"../../core/models/result";import{JobType as r}from"../../core/models/job_type";import{withRetry as d}from"../util/retry_util";import{InvalidFieldValueException as l}from"../../core/exception/job_validation_exceptions";import{UseSmileIDValidationException as f}from"../../core/exception/use_smile_id_validation_exception";import{mapAxiosError as p}from"../../core/exception/use_smile_id_network_exception";import{PayloadCompressionRunner as c}from"../compression/payload_compression_runner";import{CapturedRequest as _}from"../api/request_capture";function h(s){const e=[],t=(i,n)=>{n!==void 0&&n>0&&e.push({name:i,value:String(n)})};return t("selfie_original_size",s.selfieOriginalMb),t("selfie_final_compressed_size",s.selfieFinalMb),t("document_front_original_size",s.frontOriginalMb),t("document_front_final_compressed_size",s.frontFinalMb),t("document_back_original_size",s.backOriginalMb),t("document_back_final_compressed_size",s.backFinalMb),t("document_visa_original_size",s.visaOriginalMb),t("document_visa_final_compressed_size",s.visaFinalMb),e}export class UseSmileIDRepositoryImpl{_api;_retry;_capture;constructor(e,t,i){this._api=e,this._retry=t,this._capture=i}async seal(e,t){if(e.jobType===r.bvn)return a(new l({fieldName:"jobType",reason:"BVN submission is not yet supported"}));const i=this._capture;if(!i)return a(new Error("No capture client to seal the request through"));const n=await this._compressed(e,t);try{return await UseSmileIDRepositoryImpl._send(i.api,n,0),a(new Error("The capture client sent the request instead of stopping it"))}catch(o){if(o instanceof _)try{return m(await i.sealer.seal(o.config))}catch(u){return a(u)}return o instanceof f?a(o):a(this._mapError(o))}}async submit(e,t){if(e.jobType===r.bvn)return a(new l({fieldName:"jobType",reason:"BVN submission is not yet supported"}));const i=await this._compressed(e,t);try{const n=await d(this._retry,o=>UseSmileIDRepositoryImpl._send(this._api,i,o));return m(n)}catch(n){return n instanceof f?a(n):a(this._mapError(n))}}async _compressed(e,t){try{const i=await this._compressPayload(e,t),n=i?h(i):[];if(n.length>0)return{...e,metadata:e.metadata.withAdditionalEntries(n)}}catch{}return e}async _compressPayload(e,t){const i=JSON.stringify(e.metadata.toEntries()).length;switch(e.jobType){case r.smartSelfieEnrollment:case r.smartSelfieAuthentication:case r.biometricKyc:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,metadataBytes:i,sdkConfig:t});case r.documentVerification:case r.enhancedDocumentVerification:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,backDocument:e.backDocument,metadataBytes:i,sdkConfig:t});case r.residencyDocumentVerification:return c.compress({selfieImage:e.selfieImage,livenessImages:e.livenessImages,frontDocument:e.frontDocument,visaDocument:e.visaDocument,metadataBytes:i,sdkConfig:t});default:return}}static _send(e,t,i){const n=i>0?{...t,metadata:t.metadata.withAdditionalEntries([{name:"network_retries",value:String(i)}])}:t;switch(n.jobType){case r.smartSelfieEnrollment:return e.smartSelfieEnrollment(n);case r.smartSelfieAuthentication:return e.smartSelfieAuthentication(n);case r.enhancedKyc:return e.enhancedKyc(n);case r.biometricKyc:return e.biometricKyc(n);case r.documentVerification:return e.documentVerification(n);case r.enhancedDocumentVerification:return e.enhancedDocumentVerification(n);case r.residencyDocumentVerification:return e.residencyDocumentVerification(n)}}_mapError(e){return p(e)}}

package/dist/data/security/job_package_crypto.d.ts

@@ -0,0 +1,41 @@
+/** GCM's standard 96-bit nonce, fresh for every package. */
+export declare const JOB_PACKAGE_NONCE_BYTES = 12;
+/** GCM's full 128-bit authentication tag. */
+export declare const JOB_PACKAGE_TAG_BYTES = 16;
+/** AES-256's key length, which the secret's UTF-8 bytes must have. */
+export declare const JOB_PACKAGE_KEY_BYTES = 32;
+/** The encrypted bytes, and the nonce and tag the server needs to open them. */
+export type SealedBytes = {
+    readonly ciphertext: Uint8Array;
+    readonly nonce: Uint8Array;
+    readonly tag: Uint8Array;
+};
+/**
+ * AES-256-GCM sealing for the job package a skipped submission hands the
+ * partner (`c.skipApiSubmission = true`). The server opens it with the same SDK
+ * encryption secret, and GCM's tag fails on any changed byte, so the partner
+ * forwards the package as is. The secret ships in the app, so this keeps the
+ * package from casual reading, not from someone who extracts it.
+ *
+ * The secret is the secret rotator's `sdk_encryption` for this SDK version:
+ * 32 characters since secret-rotator #27, whose UTF-8 bytes are the AES-256 key
+ * as they are. The server keys the cipher the same way
+ * (`Buffer.from(secret, 'utf8')` in lambda's `decrypt.ts`). Runs on the Web
+ * Crypto provider the request signing uses.
+ */
+export declare const JobPackageCrypto: {
+    /**
+     * The AES key for `secret`: its UTF-8 bytes. Throws `SmileIDCryptoError`
+     * unless they are `JOB_PACKAGE_KEY_BYTES` long, as a secret bundled before
+     * secret-rotator #27 is not.
+     */
+    key(secret: string): Uint8Array;
+    /**
+     * Encrypts `plaintext` under `key` with `nonce`, a fresh random one unless a
+     * test pins it. Web Crypto appends the tag to the ciphertext; it is split off
+     * so the two travel separately.
+     */
+    seal(plaintext: Uint8Array, key: Uint8Array, nonce?: Uint8Array): Promise<SealedBytes>;
+};
+/** Lowercase hex, the encoding every field of the job package travels in. */
+export declare function toHex(bytes: Uint8Array): string;

package/dist/data/security/job_package_crypto.js

@@ -0,0 +1 @@
+"use strict";import{SmileIDCryptoError as a}from"./smile_id_crypto_error";import{exactBuffer as c,requireSubtle as l,utf8Bytes as u}from"./signing_crypto";export const JOB_PACKAGE_NONCE_BYTES=12,JOB_PACKAGE_TAG_BYTES=16,JOB_PACKAGE_KEY_BYTES=32;function p(){try{const t=require("react-native-quick-crypto"),r=t.getRandomValues??t.default?.getRandomValues;if(r)return r}catch{}const e=globalThis.crypto;if(e?.getRandomValues)return e.getRandomValues.bind(e);throw new a("No secure random source available to seal the job package. Install the `react-native-quick-crypto` peer dependency, or expose a global `crypto`.")}export const JobPackageCrypto={key(e){const t=u(e);if(t.length!==JOB_PACKAGE_KEY_BYTES)throw new a("The SDK encryption secret is not the 32 characters AES-256 takes");return t},async seal(e,t,r=p()(new Uint8Array(JOB_PACKAGE_NONCE_BYTES))){const s=l();try{const o=await s.importKey("raw",c(t),"AES-GCM",!1,["encrypt"]),n=new Uint8Array(await s.encrypt({name:"AES-GCM",iv:c(r),tagLength:JOB_PACKAGE_TAG_BYTES*8},o,c(e))),i=n.length-JOB_PACKAGE_TAG_BYTES;return{ciphertext:n.slice(0,i),nonce:r.slice(),tag:n.slice(i)}}catch(o){throw o instanceof a?o:new a(`Sealing the job package failed: ${String(o)}`)}}};export function toHex(e){let t="";for(const r of e)t+=r.toString(16).padStart(2,"0");return t}

package/dist/data/security/job_package_sealer.d.ts

@@ -0,0 +1,35 @@
+import type { InternalAxiosRequestConfig } from "axios";
+import type { SealedJobRequest } from "../model/sealed_job_request";
+/**
+ * Seals a signed job request into the package a skipped submission hands the
+ * partner.
+ *
+ * `seal` takes the request exactly as the SDK would have sent it, after the
+ * auth, request-MAC and integrity interceptors ran, so the signing is the same
+ * as for a submission. Everything but the images is encrypted together as
+ *
+ * ```
+ * { "headers": { every smileid-* header, lowercase }, "params": { every non-file form field } }
+ * ```
+ *
+ * and the partner forwards the ciphertext, nonce and tag as the
+ * `encrypted_package`, `package_nonce` and `package_tag` form fields alongside
+ * the images. The server opens the package and merges it back into the request
+ * before anything downstream reads it, so `params` carries each field the way
+ * the server's form parser produces it: the JSON fields parsed, every other
+ * field its string.
+ *
+ * The partner sends the token and source SDK headers
+ * (`SealedJobRequest.headers`) in the clear: the server authorises the request
+ * with the token and picks the secret to open the package with by the source
+ * SDK and its version.
+ */
+export declare class JobPackageSealer {
+    private readonly _encryptionSecret;
+    constructor(encryptionSecret: () => string);
+    /**
+     * Seals `config`. Throws `SmileIDCryptoError` in a build without the secret,
+     * or with one that is not 32 characters.
+     */
+    seal(config: InternalAxiosRequestConfig): Promise<SealedJobRequest>;
+}

package/dist/data/security/job_package_sealer.js

@@ -0,0 +1 @@
+"use strict";import{JobPackageCrypto as f,toHex as o}from"./job_package_crypto";import{utf8Bytes as d}from"./signing_crypto";import{SmileIDCryptoError as u}from"./smile_id_crypto_error";const m="smileid-",S=new Set(["smileid-token","smileid-source-sdk","smileid-source-sdk-version"]),h=new Set(["partner_params","metadata","failure_reason","consent","user_details","payload","countries","aliases","id_types"]);function y(e){return typeof e=="object"&&e!==null&&typeof e.getParts=="function"}export class JobPackageSealer{_encryptionSecret;constructor(t){this._encryptionSecret=t}async seal(t){const r=this._encryptionSecret();if(r.trim()==="")throw new u("The build carries no SDK encryption secret; run ./secrets.sh");const i={};for(const[s,n]of Object.entries(t.headers?.toJSON?.()??t.headers??{})){const l=s.toLowerCase();l.startsWith(m)&&n!=null&&(i[l]=String(n))}const c=Object.fromEntries(Object.entries(i).sort(([s],[n])=>s.localeCompare(n))),p=JSON.stringify({headers:c,params:g(t.data)}),a=await f.seal(d(p),f.key(r));return Object.freeze({headers:Object.freeze(Object.fromEntries(Object.entries(c).filter(([s])=>S.has(s)))),encryptedPackage:o(a.ciphertext),packageNonce:o(a.nonce),packageTag:o(a.tag)})}}function g(e){const t={};if(!y(e))return t;for(const r of e.getParts())r.uri!=null||r.string===void 0||(t[r.fieldName]=h.has(r.fieldName)?O(r.string):r.string);return t}function O(e){try{return JSON.parse(e)}catch{return e}}

package/dist/data/security/signing_crypto.d.ts

@@ -2,6 +2,40 @@
 export declare function utf8Bytes(input: string): Uint8Array;
 /** Standard-alphabet Base64 of [bytes] (no line wrap). */
 export declare function base64Encode(bytes: Uint8Array): string;
+/**
+ * Minimal structural type for the Web Crypto `SubtleCrypto` surface this module
+ * uses. Declared locally because the workspace tsconfig omits the DOM lib.
+ */
+export interface SubtleLike {
+    importKey(format: "raw", keyData: ArrayBuffer, algorithm: {
+        name: "HMAC";
+        hash: "SHA-256";
+    } | "PBKDF2" | "AES-GCM", extractable: boolean, keyUsages: readonly ("sign" | "deriveBits" | "encrypt")[]): Promise<unknown>;
+    encrypt(algorithm: {
+        name: "AES-GCM";
+        iv: ArrayBuffer;
+        tagLength: number;
+    }, key: unknown, data: ArrayBuffer): Promise<ArrayBuffer>;
+    sign(algorithm: "HMAC", key: unknown, data: ArrayBuffer): Promise<ArrayBuffer>;
+    deriveBits(algorithm: {
+        name: "PBKDF2";
+        salt: ArrayBuffer;
+        iterations: number;
+        hash: "SHA-256";
+    }, key: unknown, length: number): Promise<ArrayBuffer>;
+}
+/**
+ * The resolved Web Crypto provider, shared with the job-package sealing.
+ *
+ * @throws {SmileIDCryptoError} when no provider is available.
+ */
+export declare function requireSubtle(): SubtleLike;
+/**
+ * The exact bytes of [bytes] as a standalone `ArrayBuffer`. Reading `.buffer`
+ * directly is wrong when the view covers only part of a larger buffer (a
+ * `subarray` / `slice`), which would feed the surrounding bytes into PBKDF2/HMAC.
+ */
+export declare function exactBuffer(bytes: Uint8Array): ArrayBuffer;
 /**
  * Low-level signing primitives: PBKDF2 key derivation and HMAC-SHA256. Stateless
  * and deterministic, so the server reproduces the same key and MAC from the same

package/dist/data/security/signing_crypto.js

@@ -1 +1 @@
-"use strict";import{SmileIDCryptoError as a}from"./smile_id_crypto_error";const f=32,h=2e5;export function utf8Bytes(t){return new TextEncoder().encode(t)}const c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";export function base64Encode(t){let n="";for(let e=0;e<t.length;e+=3){const r=t[e],o=e+1<t.length?t[e+1]:0,l=e+2<t.length?t[e+2]:0;n+=c[r>>2],n+=c[(r&3)<<4|o>>4],n+=e+1<t.length?c[(o&15)<<2|l>>6]:"=",n+=e+2<t.length?c[l&63]:"="}return n}let i;function p(){if(i)return i;const t=globalThis.crypto?.subtle;if(t)return i=t,i;try{const n=require("react-native-quick-crypto"),e=n.subtle??n.webcrypto?.subtle??n.default?.subtle??n.default?.webcrypto?.subtle;if(e)return i=e,i}catch{}return null}function u(){const t=p();if(!t)throw new a("No Web Crypto provider available for request signing. Install the `react-native-quick-crypto` peer dependency (with its peers `react-native-nitro-modules` and `react-native-quick-base64`), or expose a global `crypto.subtle`.");return t}function s(t){return t.buffer.slice(t.byteOffset,t.byteOffset+t.byteLength)}export const SigningCrypto={async deriveKey(t,n){const e=u();try{const r=await e.importKey("raw",s(utf8Bytes(t)),"PBKDF2",!1,["deriveBits"]),o=await e.deriveBits({name:"PBKDF2",salt:s(n),iterations:h,hash:"SHA-256"},r,f*8);return new Uint8Array(o)}catch(r){throw r instanceof a?r:new a(`Key derivation failed: ${String(r)}`)}},async hmacSha256(t,n){const e=u();try{const r=await e.importKey("raw",s(t),{name:"HMAC",hash:"SHA-256"},!1,["sign"]),o=await e.sign("HMAC",r,s(n));return new Uint8Array(o)}catch(r){throw r instanceof a?r:new a(`MAC computation failed: ${String(r)}`)}}};
+"use strict";import{SmileIDCryptoError as a}from"./smile_id_crypto_error";const l=32,u=2e5;export function utf8Bytes(t){return new TextEncoder().encode(t)}const c="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";export function base64Encode(t){let r="";for(let e=0;e<t.length;e+=3){const n=t[e],o=e+1<t.length?t[e+1]:0,s=e+2<t.length?t[e+2]:0;r+=c[n>>2],r+=c[(n&3)<<4|o>>4],r+=e+1<t.length?c[(o&15)<<2|s>>6]:"=",r+=e+2<t.length?c[s&63]:"="}return r}let i;function f(){if(i)return i;const t=globalThis.crypto?.subtle;if(t)return i=t,i;try{const r=require("react-native-quick-crypto"),e=r.subtle??r.webcrypto?.subtle??r.default?.subtle??r.default?.webcrypto?.subtle;if(e)return i=e,i}catch{}return null}export function requireSubtle(){const t=f();if(!t)throw new a("No Web Crypto provider available for request signing. Install the `react-native-quick-crypto` peer dependency (with its peers `react-native-nitro-modules` and `react-native-quick-base64`), or expose a global `crypto.subtle`.");return t}export function exactBuffer(t){return t.buffer.slice(t.byteOffset,t.byteOffset+t.byteLength)}export const SigningCrypto={async deriveKey(t,r){const e=requireSubtle();try{const n=await e.importKey("raw",exactBuffer(utf8Bytes(t)),"PBKDF2",!1,["deriveBits"]),o=await e.deriveBits({name:"PBKDF2",salt:exactBuffer(r),iterations:u,hash:"SHA-256"},n,l*8);return new Uint8Array(o)}catch(n){throw n instanceof a?n:new a(`Key derivation failed: ${String(n)}`)}},async hmacSha256(t,r){const e=requireSubtle();try{const n=await e.importKey("raw",exactBuffer(t),{name:"HMAC",hash:"SHA-256"},!1,["sign"]),o=await e.sign("HMAC",n,exactBuffer(r));return new Uint8Array(o)}catch(n){throw n instanceof a?n:new a(`MAC computation failed: ${String(n)}`)}}};

package/dist/data/util/retry_util.d.ts

@@ -11,16 +11,19 @@ import { type RetryConfig } from "../../core/models/network_config";
  */
 export declare function withRetry<T>(config: RetryConfig, block: (attempt: number) => Promise<T>): Promise<T>;
 /**
- * Network-class failure check. Returns `true` for axios errors that
- * indicate transient transport problems (timeout, 5xx, 408, 429) and
- * `false` for application errors the caller must handle (400, 401,
- * 403, …) or for non-axios errors (programming bugs).
+ * Network-class failure check. Returns `true` for a 5xx, 408 or 429
+ * response, and for any failure with none but a cancelled request: React
+ * Native's XHR adapter reports a connection failure, a failed TLS handshake
+ * and a redirect loop alike as `ERR_NETWORK`, so they can't be told apart.
+ * Other 4xx responses and non-axios errors (programming bugs) are not retried.
  */
 export declare function isRetryable(error: unknown): boolean;
 /**
  * Compute the delay (in milliseconds) before the next retry attempt.
  * `attempt` is 0-indexed (0 = first retry, after the initial call
  * failed). Config delays are in seconds; the return value is converted
- * to ms so it can drive `setTimeout` directly.
+ * to ms so it can drive `setTimeout` directly. Jitter moves the delay by
+ * up to `jitter` of itself either way (`jitterDraw` in [-1, 1], random by
+ * default), with jitter clamped to [0, 1] and never past `maxDelay`.
  */
-export declare function computeDelayMs(config: RetryConfig, attempt: number): number;
+export declare function computeDelayMs(config: RetryConfig, attempt: number, jitterDraw?: number): number;

package/dist/data/util/retry_util.js

@@ -1 +1 @@
-"use strict";import{isAxiosError as i}from"axios";import{RetryStrategy as m}from"../../core/models/network_config";export async function withRetry(t,e){if(t.strategy===m.none||t.maxAttempts<=1)return e(0);let a;for(let r=0;r<t.maxAttempts;r++)try{return await e(r)}catch(s){if(a=s,!isRetryable(s)||r===t.maxAttempts-1)throw s;const n=computeDelayMs(t,r);await u(n)}throw a}export function isRetryable(t){if(!i(t))return!1;if(!t.response)return!0;const e=t.response.status;return e>=500||e===408||e===429}export function computeDelayMs(t,e){if(t.strategy==="none")return 0;if(t.strategy==="fixed")return t.fixedDelay*1e3;const a=t.maxDelay*1e3,r=t.initialDelay*1e3*Math.pow(t.multiplier,e),s=Math.min(r,a),n=(Math.random()*2-1)*t.jitter,o=s*(1+n);return Math.max(0,Math.min(a,Math.round(o)))}function u(t){return new Promise(e=>setTimeout(e,t))}
+"use strict";import{isAxiosError as m}from"axios";import{CANCELED as u}from"../../core/exception/use_smile_id_network_exception";import{RetryStrategy as p}from"../../core/models/network_config";export async function withRetry(t,e){if(t.strategy===p.none||t.maxAttempts<=1)return e(0);let s;for(let r=0;r<t.maxAttempts;r++)try{return await e(r)}catch(a){if(s=a,!isRetryable(a)||r===t.maxAttempts-1)throw a;const n=computeDelayMs(t,r);await l(n)}throw s}export function isRetryable(t){if(!m(t)||t.code===u)return!1;if(!t.response)return!0;const e=t.response.status;return e>=500&&e<600||e===408||e===429}export function computeDelayMs(t,e,s=Math.random()*2-1){if(t.strategy==="none")return 0;if(t.strategy==="fixed")return t.fixedDelay*1e3;const r=t.maxDelay*1e3,a=t.initialDelay*1e3*Math.pow(t.multiplier,e),n=Math.min(a,r),i=s*Math.min(1,Math.max(0,t.jitter)),o=n*(1+i);return Math.max(0,Math.min(r,Math.round(o)))}function l(t){return new Promise(e=>setTimeout(e,t))}

package/dist/debug/selfie_preview_debug_geometry.d.ts

@@ -1,3 +1,6 @@
+import type { capturedOvalRegion } from "../presentation/components/helpers/captured_oval_region";
+/** How the preview places the selfie in its oval. */
+export type SelfiePreviewPlacement = ReturnType<typeof capturedOvalRegion>;
 /** A width × height in layout units (or image pixels). */
 export type DebugSize = {
     readonly width: number;
@@ -24,10 +27,10 @@ export type SelfiePreviewPanelGeometry = {
 /**
  * Pure geometry for the selfie preview-screen debug overlay.
  *
- * The preview screen draws the captured selfie at
- * `SelfieInteriorCrop.coverScale` into an oval-sized box and clips it to an
- * ellipse: the frame's interior covers the box, so the border ring never
- * reaches the user. These helpers compute where the full frame, the ellipse
+ * The preview screen draws the captured selfie into an oval-sized box through
+ * `capturedOvalRegion` and clips it to an ellipse: the region the capture oval
+ * showed fills the box, and the frame's interior always covers it, so the
+ * border ring never reaches the user. These helpers compute where the full frame, the ellipse
  * the user actually sees, and the interior crop land — in the oval box's
  * coordinate space for the in-place marking (`inPlace`) and in a fit-scaled
  * thumbnail's coordinate space for the full-frame panel (`panel`).
@@ -38,18 +41,15 @@ export declare const SelfiePreviewDebugGeometry: {
     readonly plannedBorderFraction: 0.15;
     /**
      * Maps the captured frame onto the preview screen the way the production
-     * layout does — `SelfieInteriorCrop.coverScale` centred in the oval box: the
-     * uniform scale at which the interior covers the box, centred. Returns `null`
-     * when either size is degenerate.
+     * layout does, through `placement`. Returns `null` when either size is
+     * degenerate.
      */
-    readonly inPlace: (imageSize: DebugSize, ovalRect: DebugRect) => SelfiePreviewInPlaceGeometry | null;
+    readonly inPlace: (imageSize: DebugSize, ovalRect: DebugRect, placement: SelfiePreviewPlacement) => SelfiePreviewInPlaceGeometry | null;
     /**
      * Lays the full frame out inside a panel the way contain scaling would
      * (uniform contain scale, centred) and maps the planned interior plus the
-     * ellipse the preview screen shows — the centre window, shaped like the oval
-     * box, that the interior crop leaves visible — into the same panel
-     * coordinates.
-     * Returns `null` when any size is degenerate.
+     * window the preview screen shows through `placement` into the same panel
+     * coordinates. Returns `null` when any size is degenerate.
      */
-    readonly panel: (imageSize: DebugSize, ovalSize: DebugSize, panelSize: DebugSize) => SelfiePreviewPanelGeometry | null;
+    readonly panel: (imageSize: DebugSize, ovalSize: DebugSize, panelSize: DebugSize, placement: SelfiePreviewPlacement) => SelfiePreviewPanelGeometry | null;
 };

package/dist/debug/selfie_preview_debug_geometry.js

@@ -1 +1 @@
-"use strict";import{SelfieInteriorCrop as d}from"../presentation/components/helpers/selfie_interior_crop";const f=d.borderFraction;export const SelfiePreviewDebugGeometry={plannedBorderFraction:f,inPlace(t,h){if(e(t)||e(h))return null;const n=d.coverScale(t,h),r=c(u(h),{width:t.width*n,height:t.height*n});return{frameRect:r,plannedInteriorRect:l(r,w(t)*n)}},panel(t,h,n){if(e(t)||e(h)||e(n))return null;const r=Math.min(n.width/t.width,n.height/t.height),o=c({x:n.width/2,y:n.height/2},{width:t.width*r,height:t.height*r}),i=d.coverScale(t,h);return{frameRect:o,plannedInteriorRect:l(o,w(t)*r),visibleOvalRect:c(u(o),{width:h.width/i*r,height:h.height/i*r})}}};function w(t){return f*Math.min(t.width,t.height)}function u(t){return{x:t.left+t.width/2,y:t.top+t.height/2}}function c(t,h){return{left:t.x-h.width/2,top:t.y-h.height/2,width:h.width,height:h.height}}function l(t,h){return{left:t.left+h,top:t.top+h,width:t.width-2*h,height:t.height-2*h}}function e(t){return t.width<=0||t.height<=0}
+"use strict";import{SelfieInteriorCrop as l}from"../presentation/components/helpers/selfie_interior_crop";const i=l.borderFraction;export const SelfiePreviewDebugGeometry={plannedBorderFraction:i,inPlace(t,h,o){if(e(t)||e(h))return null;const f=o.scale(t,h),n={width:t.width*f,height:t.height*f},d=o.offset(n,h),r={left:h.left+d.x,top:h.top+d.y,...n};return{frameRect:r,plannedInteriorRect:u(r,w(t)*f)}},panel(t,h,o,f){if(e(t)||e(h)||e(o))return null;const n=Math.min(o.width/t.width,o.height/t.height),d=s({x:o.width/2,y:o.height/2},{width:t.width*n,height:t.height*n}),r=f.scale(t,h),c=f.offset({width:t.width*r,height:t.height*r},h);return{frameRect:d,plannedInteriorRect:u(d,w(t)*n),visibleOvalRect:{left:d.left-c.x/r*n,top:d.top-c.y/r*n,width:h.width/r*n,height:h.height/r*n}}}};function w(t){return i*Math.min(t.width,t.height)}function s(t,h){return{left:t.x-h.width/2,top:t.y-h.height/2,width:h.width,height:h.height}}function u(t,h){return{left:t.left+h,top:t.top+h,width:t.width-2*h,height:t.height-2*h}}function e(t){return t.width<=0||t.height<=0}

package/dist/debug/use_smile_id_debug.d.ts

@@ -1,3 +1,4 @@
+import type { CapturePerfReport } from "../core/perf/capture_perf_trace";
 type Listener = () => void;
 /**
  * Debug hook state the SDK's screens subscribe to, so toggling a switch
@@ -12,6 +13,13 @@ export declare const UseSmileIDDebugHooks: {
     readonly isDocumentPreviewOverlayEnabled: () => boolean;
     /** Sets the flag and notifies subscribers; ungated, for tests and the public setter. */
     readonly setDocumentPreviewOverlayEnabled: (enabled: boolean) => void;
+    /** Whether each capture screen logs its perf trace. */
+    readonly isPerfTraceEnabled: () => boolean;
+    /** Sets the flag; read when a capture screen opens. */
+    readonly setPerfTraceEnabled: (enabled: boolean) => void;
+    /** Where each capture attempt's perf report also goes, beside the log; null for nowhere. */
+    readonly perfTraceListener: () => ((report: CapturePerfReport) => void) | null;
+    readonly setPerfTraceListener: (listener: ((report: CapturePerfReport) => void) | null) => void;
     readonly subscribe: (listener: Listener) => () => void;
 };
 /**
@@ -51,11 +59,26 @@ export declare const UseSmileIDDebug: {
     readonly setDocumentDebugOverlaysEnabled: (enabled: boolean) => void;
     /** Whether the document debug overlays are currently installed. */
     readonly isDocumentDebugOverlaysEnabled: () => boolean;
+    /**
+     * Logs each capture's timings, one line per capture screen through
+     * `console.log`: when the screen appeared, asked the camera to start, the
+     * camera ran, its first frame, the first analysis, the capture and its files
+     * on disk, plus the camera's analysis and still timings. Release builds too,
+     * since that is where timings mean something; it logs no images or personal
+     * data. Read when a capture screen opens.
+     */
+    readonly setPerfTraceEnabled: (enabled: boolean) => void;
+    /** Whether capture screens log their perf trace. */
+    readonly isPerfTraceEnabled: () => boolean;
+    /**
+     * Also hands each capture attempt's {@link CapturePerfReport} to `listener`: its marks and
+     * timings, typed, and its log line, for a release build, whose `console.log` reaches no device
+     * log, or to forward the timings to your own analytics. Null stops it.
+     */
+    readonly setPerfTraceListener: (listener: ((report: CapturePerfReport) => void) | null) => void;
 };
 /** Subscribes a component to the selfie preview overlay flag. */
 export declare function useSelfiePreviewOverlayEnabled(): boolean;
 /** Subscribes a component to the document overlays flag. */
 export declare function useDocumentPreviewOverlayEnabled(): boolean;
-/** Whether this is a dev build, where the debug overlays can switch on. @internal */
-export declare function isDevBuild(): boolean;
 export {};

package/dist/debug/use_smile_id_debug.js

@@ -1 +1 @@
-"use strict";import{useSyncExternalStore as t}from"react";let n=!1,i=!1;const r=new Set;export const UseSmileIDDebugHooks={isSelfiePreviewOverlayEnabled(){return n},setSelfiePreviewOverlayEnabled(e){n!==e&&(n=e,r.forEach(l=>l()))},isDocumentPreviewOverlayEnabled(){return i},setDocumentPreviewOverlayEnabled(e){i!==e&&(i=e,r.forEach(l=>l()))},subscribe(e){return r.add(e),()=>r.delete(e)}},UseSmileIDDebug={setSelfieDebugOverlaysEnabled(e){isDevBuild()&&UseSmileIDDebugHooks.setSelfiePreviewOverlayEnabled(e)},isSelfieDebugOverlaysEnabled(){return UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled()},setDocumentDebugOverlaysEnabled(e){isDevBuild()&&UseSmileIDDebugHooks.setDocumentPreviewOverlayEnabled(e)},isDocumentDebugOverlaysEnabled(){return UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled()}};export function useSelfiePreviewOverlayEnabled(){return t(UseSmileIDDebugHooks.subscribe,UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled,UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled)}export function useDocumentPreviewOverlayEnabled(){return t(UseSmileIDDebugHooks.subscribe,UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled,UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled)}export function isDevBuild(){return typeof __DEV__<"u"&&__DEV__}
+"use strict";import{useSyncExternalStore as t}from"react";import{isDevelopmentBuild as i}from"../core/is_development_build";let n=!1,a=!1,s=!1,u=null;const r=new Set;export const UseSmileIDDebugHooks={isSelfiePreviewOverlayEnabled(){return n},setSelfiePreviewOverlayEnabled(e){n!==e&&(n=e,r.forEach(l=>l()))},isDocumentPreviewOverlayEnabled(){return a},setDocumentPreviewOverlayEnabled(e){a!==e&&(a=e,r.forEach(l=>l()))},isPerfTraceEnabled(){return s},setPerfTraceEnabled(e){s=e},perfTraceListener(){return u},setPerfTraceListener(e){u=e},subscribe(e){return r.add(e),()=>r.delete(e)}},UseSmileIDDebug={setSelfieDebugOverlaysEnabled(e){i()&&UseSmileIDDebugHooks.setSelfiePreviewOverlayEnabled(e)},isSelfieDebugOverlaysEnabled(){return UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled()},setDocumentDebugOverlaysEnabled(e){i()&&UseSmileIDDebugHooks.setDocumentPreviewOverlayEnabled(e)},isDocumentDebugOverlaysEnabled(){return UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled()},setPerfTraceEnabled(e){UseSmileIDDebugHooks.setPerfTraceEnabled(e)},isPerfTraceEnabled(){return UseSmileIDDebugHooks.isPerfTraceEnabled()},setPerfTraceListener(e){UseSmileIDDebugHooks.setPerfTraceListener(e)}};export function useSelfiePreviewOverlayEnabled(){return t(UseSmileIDDebugHooks.subscribe,UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled,UseSmileIDDebugHooks.isSelfiePreviewOverlayEnabled)}export function useDocumentPreviewOverlayEnabled(){return t(UseSmileIDDebugHooks.subscribe,UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled,UseSmileIDDebugHooks.isDocumentPreviewOverlayEnabled)}

package/dist/debug/use_smile_id_document_preview_debug_overlay.js

@@ -1 +1 @@
-"use strict";import{jsx as i,jsxs as d}from"react/jsx-runtime";import{useId as v}from"react";import{Image as I,StyleSheet as n,View as o}from"react-native";import{useSafeAreaInsets as b}from"react-native-safe-area-context";import h,{ClipPath as S,Defs as y,Path as c,Rect as a}from"react-native-svg";import{DocumentPreviewDebugGeometry as s}from"./document_preview_debug_geometry";import{BORDER_RING_FILL as u,BOUNDARY_STROKE as m,HIDDEN_TODAY_DIM as P,PANEL_WIDTH as g,PlannedBoundary as _,VISIBLE_BOUNDARY_COLOR as f,debugPreviewStyles as w,rectPath as R,ringPath as D}from"./preview_debug_drawing";import{SelfiePreviewDebugHud as p}from"./use_smile_id_selfie_preview_debug_overlay";export function UseSmileIDDocumentPreviewDebugOverlay(t){const r=b();return i(o,{pointerEvents:"box-none",style:n.absoluteFill,testID:"si_debug_document_preview_overlay",children:i(o,{style:[w.hudAnchor,{top:r.top+8}],children:i(p,{title:"DOCUMENT",children:i(z,{...t})})})})}export function DocumentPreviewHiddenRegionsInPlace(t){const r=`si_debug_card_clip_${v().replace(/:/g,"")}`,l=s.inPlace(t.imageSize,t.cardSize,t.borderFraction);if(!l)return null;const e={left:0,top:0,width:t.cardSize.width,height:t.cardSize.height};return d(h,{width:"100%",height:"100%",style:n.absoluteFill,testID:"si_debug_document_preview_in_place",children:[i(y,{children:i(S,{id:r,children:i(a,{x:0,y:0,width:e.width,height:e.height})})}),i(c,{d:D(l.frameRect,l.plannedInteriorRect),fill:u,fillRule:"evenodd",clipPath:`url(#${r})`}),i(_,{rect:l.plannedInteriorRect}),i(a,{x:e.left,y:e.top,width:e.width,height:e.height,fill:"none",stroke:f,strokeWidth:m})]})}function z(t){const r=t.imageSize?t.imageSize.width/t.imageSize.height:x,l={width:g,height:g/r},e=t.imageSize?s.panel(t.imageSize,t.cardSize,l,t.borderFraction):null;return d(o,{style:[w.panel,l],testID:"si_debug_document_preview_panel",children:[i(I,{source:{uri:t.uri},resizeMode:"contain",style:n.absoluteFill}),e?d(h,{width:l.width,height:l.height,style:n.absoluteFill,testID:"si_debug_document_preview_panel_markings",children:[i(c,{d:`${R(e.frameRect)} ${R(e.visibleCardRect)}`,fill:P,fillRule:"evenodd"}),i(c,{d:D(e.frameRect,e.plannedInteriorRect),fill:u,fillRule:"evenodd"}),i(_,{rect:e.plannedInteriorRect}),i(a,{x:e.visibleCardRect.left,y:e.visibleCardRect.top,width:e.visibleCardRect.width,height:e.visibleCardRect.height,fill:"none",stroke:f,strokeWidth:m})]}):null]})}const x=1.586;
+"use strict";import{jsx as i,jsxs as d}from"react/jsx-runtime";import{useId as I}from"react";import{Image as v,StyleSheet as n,View as o}from"react-native";import{useSafeAreaInsets as b}from"react-native-safe-area-context";import h,{ClipPath as S,Defs as y,Path as c,Rect as a}from"react-native-svg";import{DocumentPreviewDebugGeometry as s}from"./document_preview_debug_geometry";import{BORDER_RING_FILL as u,BOUNDARY_STROKE as m,HIDDEN_TODAY_DIM as P,PANEL_WIDTH as g,PlannedBoundary as _,VISIBLE_BOUNDARY_COLOR as f,debugPreviewStyles as w,rectPath as R,ringPath as D}from"./preview_debug_drawing";import{SelfiePreviewDebugHud as p}from"./use_smile_id_selfie_preview_debug_overlay";import{capturedImageUri as z}from"../presentation/components/helpers/captured_image_uri";export function UseSmileIDDocumentPreviewDebugOverlay(t){const r=b();return i(o,{pointerEvents:"box-none",style:n.absoluteFill,testID:"si_debug_document_preview_overlay",children:i(o,{style:[w.hudAnchor,{top:r.top+8}],children:i(p,{title:"DOCUMENT",children:i(x,{...t})})})})}export function DocumentPreviewHiddenRegionsInPlace(t){const r=`si_debug_card_clip_${I().replace(/:/g,"")}`,l=s.inPlace(t.imageSize,t.cardSize,t.borderFraction);if(!l)return null;const e={left:0,top:0,width:t.cardSize.width,height:t.cardSize.height};return d(h,{width:"100%",height:"100%",style:n.absoluteFill,testID:"si_debug_document_preview_in_place",children:[i(y,{children:i(S,{id:r,children:i(a,{x:0,y:0,width:e.width,height:e.height})})}),i(c,{d:D(l.frameRect,l.plannedInteriorRect),fill:u,fillRule:"evenodd",clipPath:`url(#${r})`}),i(_,{rect:l.plannedInteriorRect}),i(a,{x:e.left,y:e.top,width:e.width,height:e.height,fill:"none",stroke:f,strokeWidth:m})]})}function x(t){const r=t.imageSize?t.imageSize.width/t.imageSize.height:E,l={width:g,height:g/r},e=t.imageSize?s.panel(t.imageSize,t.cardSize,l,t.borderFraction):null;return d(o,{style:[w.panel,l],testID:"si_debug_document_preview_panel",children:[i(v,{source:{uri:z(t.uri)},resizeMode:"contain",style:n.absoluteFill}),e?d(h,{width:l.width,height:l.height,style:n.absoluteFill,testID:"si_debug_document_preview_panel_markings",children:[i(c,{d:`${R(e.frameRect)} ${R(e.visibleCardRect)}`,fill:P,fillRule:"evenodd"}),i(c,{d:D(e.frameRect,e.plannedInteriorRect),fill:u,fillRule:"evenodd"}),i(_,{rect:e.plannedInteriorRect}),i(a,{x:e.visibleCardRect.left,y:e.visibleCardRect.top,width:e.visibleCardRect.width,height:e.visibleCardRect.height,fill:"none",stroke:f,strokeWidth:m})]}):null]})}const E=1.586;

package/dist/debug/use_smile_id_selfie_preview_debug_overlay.d.ts

@@ -1,10 +1,12 @@
 import { type ReactNode } from "react";
-import { type DebugRect, type DebugSize } from "./selfie_preview_debug_geometry";
+import { type DebugRect, type DebugSize, type SelfiePreviewPlacement } from "./selfie_preview_debug_geometry";
 export type UseSmileIDSelfiePreviewDebugOverlayProps = {
     /** Local file URI of the captured selfie the preview screen shows. */
     readonly uri: string;
     /** The laid-out oval box, in this overlay's coordinate space. */
     readonly ovalRect: DebugRect;
+    /** How the preview places the selfie in `ovalRect`. */
+    readonly placement: SelfiePreviewPlacement;
 };
 /**
  * Developer overlay for the post-capture selfie preview screen: shows which
@@ -38,6 +40,7 @@ export declare function UseSmileIDSelfiePreviewDebugOverlay(props: UseSmileIDSel
 export declare function SelfiePreviewHiddenRegionsInPlace(props: {
     readonly imageSize: DebugSize;
     readonly ovalRect: DebugRect;
+    readonly placement: SelfiePreviewPlacement;
 }): import("react").JSX.Element | null;
 /**
  * Markings over the full-frame panel: everything outside the user-visible
@@ -48,6 +51,7 @@ export declare function SelfiePreviewPanelMarkings(props: {
     readonly imageSize: DebugSize;
     readonly ovalSize: DebugSize;
     readonly panelSize: DebugSize;
+    readonly placement: SelfiePreviewPlacement;
 }): import("react").JSX.Element | null;
 /**
  * Collapsible heads-up display chrome: dark rounded background, the title

package/dist/debug/use_smile_id_selfie_preview_debug_overlay.js

@@ -1 +1 @@
-"use strict";import{jsx as i,jsxs as a}from"react/jsx-runtime";import{useEffect as b,useId as w,useState as f}from"react";import{Image as D,Pressable as x,StyleSheet as d,Text as g,View as o}from"react-native";import{useSafeAreaInsets as p}from"react-native-safe-area-context";import m,{ClipPath as E,Defs as $,Ellipse as c,Path as h}from"react-native-svg";import{decodeUprightImageSize as A}from"../presentation/components/helpers/selfie_interior_crop";import{SelfiePreviewDebugGeometry as S}from"./selfie_preview_debug_geometry";import{BORDER_RING_FILL as _,BOUNDARY_STROKE as v,HIDDEN_TODAY_DIM as F,PANEL_WIDTH as R,PlannedBoundary as y,VISIBLE_BOUNDARY_COLOR as I,debugPreviewStyles as O,rectPath as T,ringPath as P}from"./preview_debug_drawing";export function UseSmileIDSelfiePreviewDebugOverlay(e){const t=p(),[l,n]=f(null);return b(()=>{let s=!0;return A(e.uri).then(z=>{s&&n(z)}),()=>{s=!1}},[e.uri]),a(o,{pointerEvents:"box-none",style:d.absoluteFill,testID:"si_debug_selfie_preview_overlay",children:[l?i(o,{pointerEvents:"none",style:d.absoluteFill,children:i(SelfiePreviewHiddenRegionsInPlace,{imageSize:l,ovalRect:e.ovalRect})}):null,i(o,{style:[r.hudAnchor,{top:t.top+8}],children:i(SelfiePreviewDebugHud,{title:"FRAME",children:i(L,{uri:e.uri,imageSize:l,ovalSize:e.ovalRect})})})]})}export function SelfiePreviewHiddenRegionsInPlace(e){const t=`si_debug_oval_clip_${w().replace(/:/g,"")}`,l=S.inPlace(e.imageSize,e.ovalRect);if(!l)return null;const n=e.ovalRect;return a(m,{width:"100%",height:"100%",testID:"si_debug_selfie_preview_in_place",children:[i($,{children:i(E,{id:t,children:i(c,{...u(n)})})}),i(h,{d:P(l.frameRect,l.plannedInteriorRect),fill:_,fillRule:"evenodd",clipPath:`url(#${t})`}),i(y,{rect:l.plannedInteriorRect}),i(c,{...u(n),fill:"none",stroke:I,strokeWidth:v})]})}export function SelfiePreviewPanelMarkings(e){const t=S.panel(e.imageSize,e.ovalSize,e.panelSize);if(!t)return null;const l=t.visibleOvalRect;return a(m,{width:e.panelSize.width,height:e.panelSize.height,style:d.absoluteFill,testID:"si_debug_selfie_preview_panel_markings",children:[i(h,{d:`${T(t.frameRect)} ${k(l)}`,fill:F,fillRule:"evenodd"}),i(h,{d:P(t.frameRect,t.plannedInteriorRect),fill:_,fillRule:"evenodd"}),i(y,{rect:t.plannedInteriorRect}),i(c,{...u(l),fill:"none",stroke:I,strokeWidth:v})]})}export function SelfiePreviewDebugHud(e){const[t,l]=f(!0);return a(o,{style:r.hud,children:[a(o,{style:r.hudHeader,children:[t?i(g,{style:r.hudText,children:e.title}):null,i(x,{accessibilityRole:"button",testID:"si_debug_hud_toggle",onPress:()=>l(n=>!n),hitSlop:8,style:r.hudChevron,children:i(g,{style:r.hudText,children:t?"\u25B2":"\u25BC"})})]}),t?e.children:null]})}function L(e){const t=e.imageSize?e.imageSize.width/e.imageSize.height:N,l={width:R,height:R/t};return a(o,{style:[r.panel,l],testID:"si_debug_selfie_preview_panel",children:[i(D,{source:{uri:e.uri},resizeMode:"contain",style:d.absoluteFill}),e.imageSize?i(SelfiePreviewPanelMarkings,{imageSize:e.imageSize,ovalSize:e.ovalSize,panelSize:l}):null]})}function u(e){return{cx:e.left+e.width/2,cy:e.top+e.height/2,rx:e.width/2,ry:e.height/2}}function k(e){const{cx:t,cy:l,rx:n,ry:s}=u(e);return`M${t-n},${l} a${n},${s} 0 1,0 ${2*n},0 a${n},${s} 0 1,0 ${-2*n},0 Z`}const N=3/4,r=O;
+"use strict";import{jsx as i,jsxs as a}from"react/jsx-runtime";import{useEffect as b,useId as w,useState as m}from"react";import{Image as D,Pressable as x,StyleSheet as d,Text as f,View as o}from"react-native";import{useSafeAreaInsets as p}from"react-native-safe-area-context";import g,{ClipPath as E,Defs as $,Ellipse as u,Path as h}from"react-native-svg";import{decodeUprightImageSize as A}from"../presentation/components/helpers/selfie_interior_crop";import{SelfiePreviewDebugGeometry as S}from"./selfie_preview_debug_geometry";import{BORDER_RING_FILL as _,BOUNDARY_STROKE as v,HIDDEN_TODAY_DIM as F,PANEL_WIDTH as R,PlannedBoundary as y,VISIBLE_BOUNDARY_COLOR as I,debugPreviewStyles as O,rectPath as T,ringPath as P}from"./preview_debug_drawing";import{capturedImageUri as L}from"../presentation/components/helpers/captured_image_uri";export function UseSmileIDSelfiePreviewDebugOverlay(e){const t=p(),[l,n]=m(null);return b(()=>{let c=!0;return A(e.uri).then(z=>{c&&n(z)}),()=>{c=!1}},[e.uri]),a(o,{pointerEvents:"box-none",style:d.absoluteFill,testID:"si_debug_selfie_preview_overlay",children:[l?i(o,{pointerEvents:"none",style:d.absoluteFill,children:i(SelfiePreviewHiddenRegionsInPlace,{imageSize:l,ovalRect:e.ovalRect,placement:e.placement})}):null,i(o,{style:[r.hudAnchor,{top:t.top+8}],children:i(SelfiePreviewDebugHud,{title:"FRAME",children:i(k,{uri:e.uri,imageSize:l,ovalSize:e.ovalRect,placement:e.placement})})})]})}export function SelfiePreviewHiddenRegionsInPlace(e){const t=`si_debug_oval_clip_${w().replace(/:/g,"")}`,l=S.inPlace(e.imageSize,e.ovalRect,e.placement);if(!l)return null;const n=e.ovalRect;return a(g,{width:"100%",height:"100%",testID:"si_debug_selfie_preview_in_place",children:[i($,{children:i(E,{id:t,children:i(u,{...s(n)})})}),i(h,{d:P(l.frameRect,l.plannedInteriorRect),fill:_,fillRule:"evenodd",clipPath:`url(#${t})`}),i(y,{rect:l.plannedInteriorRect}),i(u,{...s(n),fill:"none",stroke:I,strokeWidth:v})]})}export function SelfiePreviewPanelMarkings(e){const t=S.panel(e.imageSize,e.ovalSize,e.panelSize,e.placement);if(!t)return null;const l=t.visibleOvalRect;return a(g,{width:e.panelSize.width,height:e.panelSize.height,style:d.absoluteFill,testID:"si_debug_selfie_preview_panel_markings",children:[i(h,{d:`${T(t.frameRect)} ${N(l)}`,fill:F,fillRule:"evenodd"}),i(h,{d:P(t.frameRect,t.plannedInteriorRect),fill:_,fillRule:"evenodd"}),i(y,{rect:t.plannedInteriorRect}),i(u,{...s(l),fill:"none",stroke:I,strokeWidth:v})]})}export function SelfiePreviewDebugHud(e){const[t,l]=m(!0);return a(o,{style:r.hud,children:[a(o,{style:r.hudHeader,children:[t?i(f,{style:r.hudText,children:e.title}):null,i(x,{accessibilityRole:"button",testID:"si_debug_hud_toggle",onPress:()=>l(n=>!n),hitSlop:8,style:r.hudChevron,children:i(f,{style:r.hudText,children:t?"\u25B2":"\u25BC"})})]}),t?e.children:null]})}function k(e){const t=e.imageSize?e.imageSize.width/e.imageSize.height:U,l={width:R,height:R/t};return a(o,{style:[r.panel,l],testID:"si_debug_selfie_preview_panel",children:[i(D,{source:{uri:L(e.uri)},resizeMode:"contain",style:d.absoluteFill}),e.imageSize?i(SelfiePreviewPanelMarkings,{imageSize:e.imageSize,ovalSize:e.ovalSize,placement:e.placement,panelSize:l}):null]})}function s(e){return{cx:e.left+e.width/2,cy:e.top+e.height/2,rx:e.width/2,ry:e.height/2}}function N(e){const{cx:t,cy:l,rx:n,ry:c}=s(e);return`M${t-n},${l} a${n},${c} 0 1,0 ${2*n},0 a${n},${c} 0 1,0 ${-2*n},0 Z`}const U=3/4,r=O;

package/dist/index.d.ts

@@ -47,7 +47,8 @@ export { JobType, jobTypeFromValue, requiresDocument, requiresSelfie, type JobTy
 export { FlowStep } from "./core/models/flow_step";
 export { DocumentType, type DocumentOrientation, type GenericDocumentArgs, } from "./core/models/document_type";
 export { DEFAULT_ACTIVATE_MANUAL_AFTER_MS, DocumentCaptureMode, type AutoCaptureWithManualFallbackArgs, } from "./core/models/document_capture_mode";
-export { cancelled, failure, success, type UseSmileIDResult, } from "./core/models/result";
+export { cancelled, captured, failure, success, type UseSmileIDResult, } from "./core/models/result";
+export type { CapturedJob } from "./data/model/captured_job";
 export type { ConfigOptions } from "./core/models/config";
 export { GlobalPrivacyControl, GLOBAL_PRIVACY_CONTROL_WIRE_KEY, globalPrivacyControlFromWire, } from "./core/models/global_privacy_control";
 export { LogLevel } from "./core/models/network_config";
@@ -118,3 +119,5 @@ export { UseSmileIDProcessingScreen, type ProcessingState, type UseSmileIDProces
 export { ForceMaxBrightness } from "./presentation/utils/force_max_brightness";
 export type { ForceMaxBrightnessProps } from "./presentation/utils/force_max_brightness";
 export { UseSmileIDDebug } from "./debug/use_smile_id_debug";
+export { CapturePerfMark } from "./core/perf/capture_perf_trace";
+export type { CapturePerfOutcome, CapturePerfReport, CapturePerfStat, } from "./core/perf/capture_perf_trace";