@trustchex/react-native-sdk 1.486.0 → 1.488.0

package/lib/typescript/src/Shared/Libs/diagnostics.d.ts

@@ -38,7 +38,9 @@ export interface NfcDiagnostics {
     /** PACE object identifier string when PACE was attempted. */
     paceOid?: string;
     /** Why PACE wasn't used / fell back: 'no_card_access' | 'no_pace_info' |
-     * 'pace_failed'. Distinguishes device/chip-specific PACE issues. */
+     * 'pace_failed' | 'pace_unsupported_<agreement|mapping|curve|cipher>'.
+     * The pace_unsupported_* reasons mark a CAPABILITY gap (this build can't run
+     * the variant the chip advertises) vs pace_failed (a runtime failure). */
     paceFallbackReason?: string;
     steps: NfcStep[];
     /** Name of the first failing step, if any. */
@@ -131,6 +133,12 @@ export declare class DiagnosticsCollector {
     nfcPaceFellBackToBac(reason?: string): void;
     /** Record one completed step. Keep messages short and free of PII. */
     nfcStep(step: NfcStep): void;
+    /** The first NFC step that failed in the current attempt (e.g. 'paceAuth',
+     * 'readDG2'), or undefined. Lets the caller build a step-specific error code
+     * without taking a full snapshot. */
+    getFailureStep(): string | undefined;
+    /** APDU status word recorded for the failing step, if any (e.g. '6982'). */
+    getFailureStatusWord(): string | undefined;
     nfcResult(succeeded: boolean, errorCategory?: string): void;
     addError(e: {
         code?: string;

package/lib/typescript/src/Shared/Libs/diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,OAAO;IACtB;sDACkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;wEACoE;IACpE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C;sFACkF;IAClF,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;IACpB,qEAAqE;IACrE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AA+BD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAqC;IAEnD,4DAA4D;IAC5D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAU1B,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAK7D,sEAAsE;IACtE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAI9C;;sDAEkD;IAClD,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAYxC,iBAAiB,IAAI,IAAI;IAMzB,eAAe,IAAI,IAAI;IAIvB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAO3C,sEAAsE;IACtE,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAO5B,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IAa3D,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIxE,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;CAa7D;AAED,iEAAiE;AACjE,eAAO,MAAM,WAAW,sBAA6B,CAAC"}
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,sEAAsE;AACtE,MAAM,WAAW,OAAO;IACtB;sDACkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,kFAAkF;IAClF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;kEAC8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;8EAG0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,8CAA8C;IAC9C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC9C;sFACkF;IAClF,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,GAAG,EAAE,cAAc,CAAC;IACpB,GAAG,EAAE,cAAc,CAAC;IACpB,qEAAqE;IACrE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AA+BD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,GAAG,CAAc;IACzB,OAAO,CAAC,MAAM,CAAqC;IAEnD,4DAA4D;IAC5D,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAU1B,WAAW,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAK7D,sEAAsE;IACtE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI;IAI9C;;sDAEkD;IAClD,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;IAUxC,iBAAiB,IAAI,IAAI;IAezB,eAAe,IAAI,IAAI;IAIvB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAKjE,oBAAoB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAO3C,sEAAsE;IACtE,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAO5B;;yCAEqC;IACrC,cAAc,IAAI,MAAM,GAAG,SAAS;IAIpC,4EAA4E;IAC5E,oBAAoB,IAAI,MAAM,GAAG,SAAS;IAM1C,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IAY3D,QAAQ,CAAC,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAIxE,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB;CAe7D;AAED,iEAAiE;AACjE,eAAO,MAAM,WAAW,sBAA6B,CAAC"}

package/lib/typescript/src/Shared/Libs/mrz.utils.d.ts

@@ -33,6 +33,7 @@ declare const _default: {
     isValidOCRBPattern: (text: string) => boolean;
     applyOCRBCorrections: (text: string) => string;
     convertMRZDateToISODate: (mrzDate?: string | null) => string | null;
+    normalizeDocumentCode: (code: string | null | undefined) => string | null;
 };
 export default _default;
 //# sourceMappingURL=mrz.utils.d.ts.map

package/lib/typescript/src/Shared/Libs/mrz.utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mrz.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrz.utils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA2CpD;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;sBAOwB,MAAM,KAAG,MAAM;2BA8gC7B,MAAM,gBACF,OAAO,KACnB,mBAAmB;0CAsKuB,MAAM,KAAG,mBAAmB;wCAj/B9B,MAAM,KAAG,MAAM,EAAE,EAAE;wCA2/BnB,MAAM,KAAG,MAAM;gCAmDvB,MAAM;;;;;+BAz1BP,MAAM,KAAG,OAAO;iCA4Bd,MAAM,KAAG,MAAM;wCA20BR,MAAM,GAAG,IAAI,KAAG,MAAM,GAAG,IAAI;;AAgBxE,wBAUE"}
+{"version":3,"file":"mrz.utils.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrz.utils.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA4EpD;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;;sBAOwB,MAAM,KAAG,MAAM;2BA+oC7B,MAAM,gBACF,OAAO,KACnB,mBAAmB;0CAwKuB,MAAM,KAAG,mBAAmB;wCApnC9B,MAAM,KAAG,MAAM,EAAE,EAAE;wCA8nCnB,MAAM,KAAG,MAAM;gCAmDvB,MAAM;;;;;+BA/1BP,MAAM,KAAG,OAAO;iCA4Bd,MAAM,KAAG,MAAM;wCAi1BR,MAAM,GAAG,IAAI,KAAG,MAAM,GAAG,IAAI;kCAn9ChE,MAAM,GAAG,IAAI,GAAG,SAAS,KAC9B,MAAM,GAAG,IAAI;;AAk+ChB,wBAWE"}

package/lib/typescript/src/Shared/Libs/mrzFrameAggregator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mrzFrameAggregator.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrzFrameAggregator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAkCvD,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvC,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkFD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAInC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO,CAAC,cAAc,CAAK;gBAEf,OAAO,GAAE,yBAA8B;IAMnD,KAAK,IAAI,IAAI;IAQb;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IA0B5B,iCAAiC;IACjC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,OAAO,CAAC,WAAW;IAUnB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,YAAY;IA+C5C,+EAA+E;IAC/E,OAAO,CAAC,KAAK;IAab;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAiB1B,4DAA4D;IAC5D,OAAO,CAAC,cAAc;IA8BtB,2EAA2E;IAC3E,gBAAgB,IAAI,YAAY;CAiEjC;AAED,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"mrzFrameAggregator.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrzFrameAggregator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAkCvD,MAAM,WAAW,aAAa;IAC5B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,+EAA+E;IAC/E,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACvC,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqHD;;;;GAIG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAInC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAEnC,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO,CAAC,cAAc,CAAK;gBAEf,OAAO,GAAE,yBAA8B;IAMnD,KAAK,IAAI,IAAI;IAQb;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IA0B5B,iCAAiC;IACjC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,OAAO,CAAC,WAAW;IAUnB;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,YAAY;IA+C5C,+EAA+E;IAC/E,OAAO,CAAC,KAAK;IAab;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAiB1B,4DAA4D;IAC5D,OAAO,CAAC,cAAc;IA8BtB,2EAA2E;IAC3E,gBAAgB,IAAI,YAAY;CAiEjC;AAED,eAAe,kBAAkB,CAAC"}

package/lib/typescript/src/Shared/Libs/mrzTransliteration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mrzTransliteration.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrzTransliteration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAyFhE,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,YAAY,CAmCd"}
+{"version":3,"file":"mrzTransliteration.d.ts","sourceRoot":"","sources":["../../../../../src/Shared/Libs/mrzTransliteration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAyFhE,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GACvB,YAAY,CAgDd"}

package/lib/typescript/src/Translation/Resources/en.d.ts

@@ -48,6 +48,11 @@ declare const _default: {
     'diagnosticReport.noticeBody': string;
     'diagnosticReport.continue': string;
     'diagnosticReport.cancel': string;
+    'diagnosticReport.shareFailedTitle': string;
+    'diagnosticReport.shareFailedBody': string;
+    'diagnosticReport.uploadAction': string;
+    'diagnosticReport.uploadSuccess': string;
+    'diagnosticReport.uploadFailed': string;
     'livenessDetectionScreen.guideHeader': string;
     'livenessDetectionScreen.guideText': string;
     'livenessDetectionScreen.guidePoint1': string;
@@ -70,6 +75,13 @@ declare const _default: {
     'eidScannerScreen.guideHeader': string;
     'eidScannerScreen.guideText': string;
     'eidScannerScreen.invalidMRZFields': string;
+    'eidScannerScreen.error': string;
+    'eidScannerScreen.errorCode': string;
+    'eidScannerScreen.nfcGenericError': string;
+    'eidScannerScreen.nfcReadFailed': string;
+    'eidScannerScreen.nfcAuthFailed': string;
+    'eidScannerScreen.nfcTagLost': string;
+    'eidScannerScreen.nfcTimeout': string;
     'eidScannerScreen.faceImageNotFound': string;
     'eidScannerScreen.documentCode': string;
     'eidScannerScreen.nationality': string;

package/lib/typescript/src/Translation/Resources/en.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/en.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAgQE"}
+{"version":3,"file":"en.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/en.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAmRE"}

package/lib/typescript/src/Translation/Resources/tr.d.ts

@@ -48,6 +48,11 @@ declare const _default: {
     'diagnosticReport.noticeBody': string;
     'diagnosticReport.continue': string;
     'diagnosticReport.cancel': string;
+    'diagnosticReport.shareFailedTitle': string;
+    'diagnosticReport.shareFailedBody': string;
+    'diagnosticReport.uploadAction': string;
+    'diagnosticReport.uploadSuccess': string;
+    'diagnosticReport.uploadFailed': string;
     'livenessDetectionScreen.guideHeader': string;
     'livenessDetectionScreen.guideText': string;
     'livenessDetectionScreen.guidePoint1': string;
@@ -70,6 +75,13 @@ declare const _default: {
     'eidScannerScreen.guideHeader': string;
     'eidScannerScreen.guideText': string;
     'eidScannerScreen.invalidMRZFields': string;
+    'eidScannerScreen.error': string;
+    'eidScannerScreen.errorCode': string;
+    'eidScannerScreen.nfcGenericError': string;
+    'eidScannerScreen.nfcReadFailed': string;
+    'eidScannerScreen.nfcAuthFailed': string;
+    'eidScannerScreen.nfcTagLost': string;
+    'eidScannerScreen.nfcTimeout': string;
     'eidScannerScreen.faceImageNotFound': string;
     'eidScannerScreen.documentCode': string;
     'eidScannerScreen.nationality': string;

package/lib/typescript/src/Translation/Resources/tr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tr.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/tr.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAmQE"}
+{"version":3,"file":"tr.d.ts","sourceRoot":"","sources":["../../../../../src/Translation/Resources/tr.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wBAsRE"}

package/lib/typescript/src/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION = "1.486.0";
+export declare const SDK_VERSION = "1.488.0";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trustchex/react-native-sdk",
-  "version": "1.486.0",
+  "version": "1.488.0",
   "description": "Trustchex mobile app react native SDK for android or ios devices",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",

package/src/Shared/Components/EIDScanner.tsx

@@ -4,12 +4,14 @@ import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import NFCManager from 'react-native-nfc-manager';
 import DeviceInfo from 'react-native-device-info';
 import PermissionManager from '../Libs/permissions.utils';
+import mrzUtils from '../Libs/mrz.utils';
 import { debugError } from '../Libs/debug.utils';
 import { MRZInfo } from '../EIDReader/lds/icao/mrzInfo';
 import { eidReader } from '../EIDReader/eidReader';
 import NativeProgressBar from './NativeProgressBar';
 import type { MRZFields } from '../Types/mrzFields';
 import { buildDocumentName } from '../Libs/mrzTransliteration';
+import type { DocumentName } from '../Types/documentReadResult';
 import { normalizeFromMRZInfo } from '../Libs/documentDataNormalizer';
 import { useTranslation } from 'react-i18next';
 import AppContext from '../Contexts/AppContext';
@@ -54,13 +56,20 @@ const EIDScanner = ({
   const [documentMRZInfo, setDocumentMRZInfo] = React.useState<MRZInfo>();
   const [documentFaceImageMimeType, setDocumentFaceImageMimeType] =
     React.useState<string>();
-  const [documentName, setDocumentName] = React.useState<import('../Types/documentReadResult').DocumentName>();
+  const [documentName, setDocumentName] = React.useState<DocumentName>();
   const [progress, setProgress] = React.useState(0);
   const [progressStage, setProgressStage] = React.useState<string>('');
 
   // Animation for pulse indicator
   const pulseAnim = useRef(new Animated.Value(1)).current;
 
+  // Strip MRZ filler (`<`) and trim; returns '' for empty/filler-only input so
+  // the UI can hide fields the chip didn't actually provide.
+  const cleanField = useCallback((value?: string | null): string => {
+    if (!value) return '';
+    return value.replace(/</g, ' ').replace(/\s+/g, ' ').trim();
+  }, []);
+
   // Format date from YYMMDD to DD/MM/YYYY (matching Flutter SDK)
   const formatDate = useCallback((dateStr?: string | null) => {
     if (!dateStr) return '';
@@ -136,20 +145,30 @@ const EIDScanner = ({
   const [voiceGuidanceMessage, setVoiceGuidanceMessage] = useState<string>();
   const [attemptNumber, setAttemptNumber] = useState<number>(0);
 
-  const getFieldsFromMRZ = useCallback((mrz: MRZInfo) => {
-    return {
-      documentCode: mrz.getDocumentCode(),
-      personalNumber: mrz.getPersonalNumber() || mrz.getOptionalData1(),
-      documentNumber: mrz.getDocumentNumber(),
-      firstName: mrz.getSecondaryIdentifier(),
-      lastName: mrz.getPrimaryIdentifier(),
-      birthDate: mrz.getDateOfBirth(),
-      expirationDate: mrz.getDateOfExpiry(),
-      issuingState: mrz.getIssuingState(),
-      sex: mrz.getGender().getStrCode(),
-      nationality: mrz.getNationality(),
-    } satisfies MRZFields;
-  }, []);
+  const getFieldsFromMRZ = useCallback(
+    (mrz: MRZInfo, name?: DocumentName | null) => {
+      // Prefer the resolved name (DG11 printed name / transliteration) over the
+      // raw DG1 split. Some chips — notably Turkish PACE passports — return a DG1
+      // name field with no `<<` separator, so getPrimaryIdentifier() holds the
+      // FULL name and getSecondaryIdentifier() is empty ("name as surname"). The
+      // resolved name corrects that; fall back to the raw split when absent.
+      const firstName = name?.displayFirst || mrz.getSecondaryIdentifier();
+      const lastName = name?.displayLast || mrz.getPrimaryIdentifier();
+      return {
+        documentCode: mrzUtils.normalizeDocumentCode(mrz.getDocumentCode()),
+        personalNumber: mrz.getPersonalNumber() || mrz.getOptionalData1(),
+        documentNumber: mrz.getDocumentNumber(),
+        firstName,
+        lastName,
+        birthDate: mrz.getDateOfBirth(),
+        expirationDate: mrz.getDateOfExpiry(),
+        issuingState: mrz.getIssuingState(),
+        sex: mrz.getGender().getStrCode(),
+        nationality: mrz.getNationality(),
+      } satisfies MRZFields;
+    },
+    []
+  );
 
   const readNFC = useCallback(async () => {
     const startTime = Date.now();
@@ -267,7 +286,7 @@ const EIDScanner = ({
 
           if (appContext.skipNfcResultScreen && onScanSuccess) {
             onScanSuccess(
-              getFieldsFromMRZ(passportData.mrz),
+              getFieldsFromMRZ(passportData.mrz, builtName),
               passportData.faceImage,
               passportData.mimeType
             );
@@ -348,7 +367,42 @@ const EIDScanner = ({
       ).catch(() => {});
 
       console.debug('NFC scan error:', error);
-      // Ignore error - let user retry
+
+      // Surface an accurate message instead of failing silently. eidReader
+      // attaches `nfcCategory` + `nfcCode`.
+      //   - User-correctable failures (wrong doc data, card moved/too slow, NFC
+      //     off) get a specific, actionable message and NO code — there's a clear
+      //     action to take, a support code would just be noise.
+      //   - Everything else is an unexpected/system error: show a generic message
+      //     plus the reportable code (e.g. NFC-READ-6A82) so the user can quote it.
+      //   - user_cancelled stays silent (the user dismissed the native NFC sheet).
+      const tagged = error as
+        | { nfcCategory?: string; nfcCode?: string }
+        | undefined;
+      const category = tagged?.nfcCategory ?? errorType;
+
+      // category -> actionable message key for the user-mistake cases.
+      const ACTIONABLE: Record<string, string> = {
+        auth_failed: 'eidScannerScreen.nfcAuthFailed',
+        tag_lost: 'eidScannerScreen.nfcTagLost',
+        timeout: 'eidScannerScreen.nfcTimeout',
+        not_enabled: 'eidScannerScreen.nfcNotEnabled',
+      };
+
+      if (category !== 'user_cancelled') {
+        const actionableKey = ACTIONABLE[category];
+        if (actionableKey) {
+          // Clear user action available — meaningful message, no support code.
+          Alert.alert(t('eidScannerScreen.error'), t(actionableKey));
+        } else {
+          // Unexpected/system error — generic message + reportable support code.
+          const errorCode = tagged?.nfcCode ?? 'NFC-READ';
+          const message = `${t('eidScannerScreen.nfcGenericError')}\n\n${t(
+            'eidScannerScreen.errorCode'
+          )}: ${errorCode}`;
+          Alert.alert(t('eidScannerScreen.error'), message);
+        }
+      }
     } finally {
       setIsScanning(false);
       setProgress(0);
@@ -566,59 +620,86 @@ const EIDScanner = ({
                     </View>
                   </View>
 
-                  {/* Right column: all fields as grid */}
+                  {/* Right column: all fields as grid. Each field renders only
+                      when the chip actually provided a value — filler-only /
+                      empty fields are hidden rather than shown blank. */}
                   <View style={styles.idCardFields}>
-                    <IDCardField
-                      label={t('eidScannerScreen.surname')}
-                      value={documentName?.displayLast ?? documentMRZInfo.getPrimaryIdentifier()}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.name')}
-                      value={documentName?.displayFirst ?? documentMRZInfo.getSecondaryIdentifier()}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.documentNumber')}
-                      value={documentMRZInfo.getDocumentNumber()}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.birthDate')}
-                      value={formatDate(documentMRZInfo.getDateOfBirth())}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.expirationDate')}
-                      value={formatDate(documentMRZInfo.getDateOfExpiry())}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.gender')}
-                      value={formatGender(
+                    {(() => {
+                      const surname =
+                        documentName?.displayLast ??
+                        cleanField(documentMRZInfo.getPrimaryIdentifier());
+                      const givenNames =
+                        documentName?.displayFirst ??
+                        cleanField(documentMRZInfo.getSecondaryIdentifier());
+                      const docNumber = cleanField(
+                        documentMRZInfo.getDocumentNumber()
+                      );
+                      const birthDate = formatDate(
+                        documentMRZInfo.getDateOfBirth()
+                      );
+                      const expiry = formatDate(
+                        documentMRZInfo.getDateOfExpiry()
+                      );
+                      const gender = formatGender(
                         documentMRZInfo.getGender().getStrCode()
-                      )}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.nationality')}
-                      value={formatNationality(
+                      );
+                      const nationality = formatNationality(
                         documentMRZInfo.getNationality()
-                      )}
-                    />
-                    <IDCardField
-                      label={t('eidScannerScreen.issuingState')}
-                      value={formatNationality(
+                      );
+                      const issuingState = formatNationality(
                         documentMRZInfo.getIssuingState()
-                      )}
-                    />
-                    {!!(
-                      documentMRZInfo.getPersonalNumber() ||
-                      documentMRZInfo.getOptionalData1()
-                    ) && (
-                      <IDCardField
-                        label={t('eidScannerScreen.personalNumber')}
-                        value={
-                          documentMRZInfo.getPersonalNumber() ||
-                          documentMRZInfo.getOptionalData1() ||
-                          ''
-                        }
-                      />
-                    )}
+                      );
+                      const personalNumber = cleanField(
+                        documentMRZInfo.getPersonalNumber() ||
+                          documentMRZInfo.getOptionalData1()
+                      );
+
+                      const fields: Array<{ label: string; value: string }> = [
+                        {
+                          label: t('eidScannerScreen.surname'),
+                          value: surname,
+                        },
+                        {
+                          label: t('eidScannerScreen.name'),
+                          value: givenNames,
+                        },
+                        {
+                          label: t('eidScannerScreen.documentNumber'),
+                          value: docNumber,
+                        },
+                        {
+                          label: t('eidScannerScreen.birthDate'),
+                          value: birthDate,
+                        },
+                        {
+                          label: t('eidScannerScreen.expirationDate'),
+                          value: expiry,
+                        },
+                        { label: t('eidScannerScreen.gender'), value: gender },
+                        {
+                          label: t('eidScannerScreen.nationality'),
+                          value: nationality,
+                        },
+                        {
+                          label: t('eidScannerScreen.issuingState'),
+                          value: issuingState,
+                        },
+                        {
+                          label: t('eidScannerScreen.personalNumber'),
+                          value: personalNumber,
+                        },
+                      ];
+
+                      return fields
+                        .filter((f) => f.value && f.value.trim().length > 0)
+                        .map((f) => (
+                          <IDCardField
+                            key={f.label}
+                            label={f.label}
+                            value={f.value}
+                          />
+                        ));
+                    })()}
                   </View>
                 </View>
               </View>
@@ -636,7 +717,7 @@ const EIDScanner = ({
                         documentFaceImageMimeType
                       ) {
                         onScanSuccess(
-                          getFieldsFromMRZ(documentMRZInfo),
+                          getFieldsFromMRZ(documentMRZInfo, documentName),
                           documentFaceImage,
                           documentFaceImageMimeType
                         );
@@ -723,7 +804,7 @@ const EIDScanner = ({
                     documentFaceImageMimeType
                   ) {
                     onScanSuccess(
-                      getFieldsFromMRZ(documentMRZInfo),
+                      getFieldsFromMRZ(documentMRZInfo, documentName),
                       documentFaceImage,
                       documentFaceImageMimeType
                     );

package/src/Shared/Components/IdentityDocumentCamera.constants.ts

@@ -17,7 +17,15 @@ export const REQUIRED_CONSISTENT_DOCTYPE_DETECTIONS = 3;
 export const SIGNATURE_REGEX = /s[gi]g?n[au]?t[u]?r|imz[a]s?/i;
 export const SIGNATURE_TEXT_REGEX = /signature|imza|İmza/i;
 export const MRZ_BLOCK_PATTERN = /[A-Z0-9<]{8,}.*</i;
-export const PASSPORT_MRZ_PATTERN = /P<[A-Z]{3}/;
+// Matches the line-1 start of ANY ICAO TD3 passport MRZ, so the camera routes
+// every passport variant into the passport flow (not the ID-card back-side
+// flow). Per ICAO 9303 Part 4: `P` + a type char (filler `<` or a subtype
+// letter — `P<`, `PP` German, `PD`/`PS`/`PO` diplomatic/service/official) +
+// the issuing state (3 letters, OR the German 1-letter `D` padded with filler,
+// e.g. `P<D<<` / `PPD<<`). Previously only `P<[A-Z]{3}` matched, so German `PP`
+// and 1-letter-issuer passports fell through to the ID-card flow and were
+// wrongly asked for a back side.
+export const PASSPORT_MRZ_PATTERN = /P[A-Z<](?:[A-Z]{3}|[A-Z]<<)[A-Z<]*<</;
 
 // BDDK Madde 7 - Security Feature Validation
 // When NFC chip reading unavailable, must verify at least 4 visual security features

package/src/Shared/EIDReader/cardFileInputStream.ts

@@ -4,6 +4,10 @@ import type { FileSystemStructured } from './smartcards/fileSystemStructured';
 import { Buffer } from 'buffer';
 
 export class CardFileInputStream extends InputStream {
+  /** Max re-issues of a single block read before failing — mitigates transient
+   *  iOS NFC transceive drops during large-file reads (e.g. DG2). */
+  private static readonly MAX_BLOCK_READ_RETRIES = 5;
+
   private path!: FileInfo[];
   private buffer!: Buffer;
   private bufferLength!: number;
@@ -69,12 +73,32 @@ export class CardFileInputStream extends InputStream {
           newOffsetBufferInFile = this.offsetBufferInFile + this.bufferLength;
           let newOffsetInBuffer = 0;
           let newBufferLength = 0;
-          while (newBufferLength === 0) {
-            newBufferLength = await this.fillBufferFromFile(
-              this.path,
-              newOffsetBufferInFile,
-              le
-            );
+          // Retry a failed block read. The iOS NFC stack (react-native-nfc-manager)
+          // throws transient "READ BINARY" transceive errors during the many
+          // block reads of a large file like DG2 (face image); a single drop
+          // previously aborted the whole read with "Could not read file". Re-issue
+          // the SAME block (offset unchanged) a few times before giving up — this
+          // is idempotent (no secure-messaging state advances on a failed read).
+          let attempt = 0;
+          for (;;) {
+            try {
+              newBufferLength = 0;
+              while (newBufferLength === 0) {
+                newBufferLength = await this.fillBufferFromFile(
+                  this.path,
+                  newOffsetBufferInFile,
+                  le
+                );
+              }
+              break;
+            } catch (blockError) {
+              if (++attempt >= CardFileInputStream.MAX_BLOCK_READ_RETRIES) {
+                throw blockError;
+              }
+              // Brief backoff: an immediate re-issue after a transient NFC drop
+              // usually fails again; a short pause lets the RF field re-stabilise.
+              await new Promise((r) => setTimeout(r, 80 * attempt));
+            }
           }
 
           this.offsetBufferInFile = newOffsetBufferInFile;

package/src/Shared/EIDReader/defaultFileSystem.ts

@@ -6,10 +6,12 @@ import { FileInfo } from './fileInfo';
 import { ISO7816_SW } from './smartcards/iso7816';
 import { SecureMessagingWrapper } from './secureMessagingWrapper';
 import { TripleDesSecureMessagingWrapper } from './tripleDesSecureMessagingWrapper';
+import { AESSecureMessagingWrapper } from './aesSecureMessagingWrapper';
 import type { APDUWrapper } from './smartcards/apduWrapper';
 import { TLVInputStream } from './tlv/tlvInputStream';
 import { CVCAFile } from './lds/cvcaFile';
 import { Buffer } from 'buffer';
+import { Platform } from 'react-native';
 import type { FileSystemStructured } from './smartcards/fileSystemStructured';
 
 export class DefaultFileSystem implements FileSystemStructured {
@@ -37,7 +39,37 @@ export class DefaultFileSystem implements FileSystemStructured {
     this.isSelected = false;
     this.isSFIEnabled = isSFIEnabled;
     this.fidToSFI = fidToSFI;
-    this.maxReadBinaryLength = EID_CONSTANTS.EXTENDED_MAX_TRANSCEIVE_LENGTH;
+    // iOS CoreNFC (via react-native-nfc-manager's sendCommandAPDUIOS) does not
+    // accept the EXTENDED-length APDU byte form this code emits when ne > 256
+    // (a 7-byte "00 XX XX" Le). Such a READ BINARY is rejected outright, so on
+    // iOS EVERY DG2 read failed ("Exception during READ BINARY") even though
+    // PACE — which only used short Le=256 — succeeded. Start at a short-form
+    // length on iOS (ne <= 256) so every READ BINARY stays in the short APDU
+    // form. Android's transceive() handles extended APDUs, so keep extended
+    // there for speed. JMRTD/NFCPassportReader likewise read in small blocks.
+    this.maxReadBinaryLength =
+      Platform.OS === 'ios'
+        ? EID_CONSTANTS.DEFAULT_MAX_BLOCKSIZE // 223 → short-form Le, SM-safe
+        : EID_CONSTANTS.EXTENDED_MAX_TRANSCEIVE_LENGTH;
+  }
+
+  /** Deep-copy a secure-messaging wrapper PRESERVING its cipher type (AES vs
+   *  3DES), so the SSC can be rewound for a retry without changing the MAC/enc
+   *  algorithm. Non-SM wrappers are returned as-is. */
+  private cloneWrapper(wrapper: APDUWrapper): APDUWrapper {
+    if (!(wrapper instanceof SecureMessagingWrapper)) {
+      return wrapper;
+    }
+    const args: [string, string, number, boolean, bigint] = [
+      wrapper.getEncryptionKey(),
+      wrapper.getMACKey(),
+      wrapper.getMaxTransceiveLength(),
+      wrapper.getShouldCheckMAC(),
+      wrapper.getSendSequenceCounter(),
+    ];
+    return wrapper.getType() === 'AES'
+      ? new AESSecureMessagingWrapper(...args)
+      : new TripleDesSecureMessagingWrapper(...args);
   }
 
   public setWrapper(wrapper: APDUWrapper): void {
@@ -131,19 +163,49 @@ export class DefaultFileSystem implements FileSystemStructured {
 
       return result;
     } catch (error) {
-      const sw = (error as any).getSW();
+      // Only APDU-level errors expose getSW(); a transient native NFC transceive
+      // error does NOT, so calling it unguarded threw a TypeError and masked the
+      // real failure. Guard it before testing for the WRONG_LENGTH downgrade.
+      const sw =
+        typeof (error as { getSW?: () => number }).getSW === 'function'
+          ? (error as { getSW: () => number }).getSW()
+          : undefined;
+      const isWrongLength =
+        sw != null &&
+        (sw & ISO7816_SW.WRONG_LENGTH) === ISO7816_SW.WRONG_LENGTH;
+
+      // Downgrade the read size and signal a retry (empty result) when EITHER:
+      //  - the chip returned 6Cxx WRONG_LENGTH (the standard JMRTD path), OR
+      //  - the read failed transiently with NO status word while we were still
+      //    at extended length. iOS CoreNFC (via react-native-nfc-manager) drops
+      //    the connection on too-large extended-length READ BINARY on some chips
+      //    (e.g. German passport DG2) instead of returning 6Cxx, so the chip
+      //    never gets to ask for a smaller length. Dropping to the conservative
+      //    223-byte block makes the next read succeed. Reference readers
+      //    (JMRTD, NFCPassportReader) read large files in small blocks (~0xA0).
+      // Restore the pre-send secure-messaging wrapper. A failed wrapped READ
+      // BINARY still advanced the send-sequence-counter, so a retry MUST reset
+      // it or every subsequent read fails the MAC. (This is why the read
+      // previously stalled partway through DG2: each retry reused a desynced
+      // SSC.) JMRTD does the same reset on its downgrade path.
+      this.wrapper = this.oldWrapper;
+
       if (
-        (sw & ISO7816_SW.WRONG_LENGTH) === ISO7816_SW.WRONG_LENGTH &&
+        (isWrongLength || sw == null) &&
         this.maxReadBinaryLength > EID_CONSTANTS.DEFAULT_MAX_BLOCKSIZE
       ) {
-        this.wrapper = this.oldWrapper;
         this.maxReadBinaryLength = EID_CONSTANTS.DEFAULT_MAX_BLOCKSIZE;
         return new Uint8Array(0);
       }
 
-      throw new Error(
-        `Read binary failed on file ${fileInfo == null ? this.selectedFID.toString(16) : fileInfo}`
-      );
+      // Preserve the original error (a transient transceive failure at an
+      // already-small block size) so the retry layer above can recognise and
+      // re-issue it, instead of flattening every cause into one opaque string.
+      throw error instanceof Error
+        ? error
+        : new Error(
+            `Read binary failed on file ${fileInfo == null ? this.selectedFID.toString(16) : fileInfo}`
+          );
     }
   }
 
@@ -216,16 +278,12 @@ export class DefaultFileSystem implements FileSystemStructured {
     le: number,
     isTLVEncodedOffsetNeeded: boolean
   ) {
-    this.oldWrapper =
-      this.wrapper instanceof SecureMessagingWrapper
-        ? new TripleDesSecureMessagingWrapper(
-            this.wrapper.getEncryptionKey(),
-            this.wrapper.getMACKey(),
-            this.wrapper.getMaxTransceiveLength(),
-            this.wrapper.getShouldCheckMAC(),
-            this.wrapper.getSendSequenceCounter()
-          )
-        : this.wrapper;
+    // Snapshot the wrapper BEFORE the send so a failed read can rewind the SSC.
+    // The copy MUST preserve the actual wrapper type — PACE sessions are AES
+    // (the German passport uses AES-CMAC). Previously this always built a 3DES
+    // wrapper, so an AES session's retry used a 3DES wrapper with AES keys and
+    // every subsequent read failed the MAC — the cause of the DG2 stall.
+    this.oldWrapper = this.cloneWrapper(this.wrapper);
     return this.service.sendReadBinary(
       this.wrapper,
       DefaultFileSystem.NO_SFI,