idmission-web-sdk 2.3.212 → 2.3.213

package/dist/lib/camera/Camera.d.ts

@@ -1,4 +1,8 @@
 import { type MediaIntegrityToken } from './getUserMediaIntegrity';
+type TamperOptions = {
+    enabled?: boolean;
+    token?: MediaIntegrityToken;
+};
 export type Camera = {
     stream: MediaStream;
     isRearFacing: boolean;
@@ -8,8 +12,8 @@ export type Camera = {
     height: number;
 };
 export type CameraResolution = 'LOW' | 'MID' | 'MAX';
-export declare function selectAndOpenCamera(resolution?: CameraResolution, token?: MediaIntegrityToken): Promise<Camera>;
-export declare function getVideoDeviceMaxDimensions(deviceInfo: MediaDeviceInfo, token?: MediaIntegrityToken): Promise<{
+export declare function selectAndOpenCamera(resolution?: CameraResolution, tamper?: TamperOptions): Promise<Camera>;
+export declare function getVideoDeviceMaxDimensions(deviceInfo: MediaDeviceInfo, tamper?: TamperOptions): Promise<{
     width: number;
     height: number;
 }>;
@@ -21,7 +25,7 @@ type Resolution = {
 };
 export declare const quickScan: Resolution[];
 export type FacingMode = 'user' | 'environment' | 'left' | 'right';
-export declare function listAvailableCameras(facingMode?: FacingMode, requestMicAccess?: boolean, token?: MediaIntegrityToken): Promise<MediaDeviceInfo[]>;
+export declare function listAvailableCameras(facingMode?: FacingMode, requestMicAccess?: boolean, tamper?: TamperOptions): Promise<MediaDeviceInfo[]>;
 export declare const frontCameraLabels: string[];
 export declare const rearCameraLabels: string[];
 export declare const backUltraWideCameraLabels: string[];

package/dist/lib/camera/Camera.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Camera.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/Camera.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAIrF,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,EAAE,OAAO,CAAA;IACrB,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;AAIpD,wBAAsB,mBAAmB,CACvC,UAAU,GAAE,gBAAwB,EACpC,KAAK,CAAC,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA2GjB;AAQD,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,eAAe,EAC3B,KAAK,CAAC,EAAE,mBAAmB,GAC1B,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf,CAAC,CAkBD;AAED,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AACD,eAAO,MAAM,SAAS,EAAE,UAAU,EAmEjC,CAAA;AAyFD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,OAAO,CAAA;AAElE,wBAAsB,oBAAoB,CACxC,UAAU,CAAC,EAAE,UAAU,EACvB,gBAAgB,GAAE,OAAe,EACjC,KAAK,CAAC,EAAE,mBAAmB,GAC1B,OAAO,CAAC,eAAe,EAAE,CAAC,CA2B5B;AAED,eAAO,MAAM,iBAAiB,UA+ByB,CAAA;AACvD,eAAO,MAAM,gBAAgB,UAoC0B,CAAA;AACvD,eAAO,MAAM,yBAAyB,UAqCiB,CAAA;AAEvD,eAAO,MAAM,kBAAkB,kBACd,MAAM,GAAG,eAAe,mBACtB,MAAM,GAAG,MAAM,EAAE,YAWnC,CAAA;AAQD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAC9B,MAAM,CA6CR;AAED,wBAAgB,mBAAmB,SAKlC;AAED,wBAAgB,uBAAuB,SAQtC"}
+{"version":3,"file":"Camera.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/Camera.ts"],"names":[],"mappings":"AACA,OAAO,EAAqB,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAIrF,KAAK,aAAa,GAAG;IACnB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,KAAK,CAAC,EAAE,mBAAmB,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,EAAE,OAAO,CAAA;IACrB,OAAO,EAAE,MAAM,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;AAIpD,wBAAsB,mBAAmB,CACvC,UAAU,GAAE,gBAAwB,EACpC,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,MAAM,CAAC,CA2GjB;AAQD,wBAAsB,2BAA2B,CAC/C,UAAU,EAAE,eAAe,EAC3B,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC;IACT,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf,CAAC,CAkBD;AAED,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AACD,eAAO,MAAM,SAAS,EAAE,UAAU,EAmEjC,CAAA;AAyFD,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,aAAa,GAAG,MAAM,GAAG,OAAO,CAAA;AAElE,wBAAsB,oBAAoB,CACxC,UAAU,CAAC,EAAE,UAAU,EACvB,gBAAgB,GAAE,OAAe,EACjC,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,eAAe,EAAE,CAAC,CA2B5B;AAED,eAAO,MAAM,iBAAiB,UA+ByB,CAAA;AACvD,eAAO,MAAM,gBAAgB,UAoC0B,CAAA;AACvD,eAAO,MAAM,yBAAyB,UAqCiB,CAAA;AAEvD,eAAO,MAAM,kBAAkB,kBACd,MAAM,GAAG,eAAe,mBACtB,MAAM,GAAG,MAAM,EAAE,YAWnC,CAAA;AAQD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAC9B,MAAM,CA6CR;AAED,wBAAgB,mBAAmB,SAKlC;AAED,wBAAgB,uBAAuB,SAQtC"}

package/dist/lib/camera/cameraStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cameraStore.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/cameraStore.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAEZ,gBAAgB,EAChB,SAAS,EACT,cAAc,EAIf,MAAM,OAAO,CAAA;AAEd,OAAO,EAEL,MAAM,EAMP,MAAM,UAAU,CAAA;AAMjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAQlE,eAAO,IAAI,MAAM,EAAE,MAAM,GAAG,IAAW,CAAA;AACvC,eAAO,IAAI,WAAW,EAAE,WAAW,GAAG,IAAW,CAAA;AACjD,eAAO,IAAI,WAAW,EAAE,WAAW,GAAG,IAAW,CAAA;AAEjD,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAEnD,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAA;IACjC,wBAAwB,CAAC,EAAE,MAAM,IAAI,CAAA;IAErC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,iBAAiB,GAAG;IAC5C,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAA;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IAEnB,YAAY,EAAE,OAAO,CAAA;IAErB,WAAW,EAAE,OAAO,CAAA;IACpB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,4BAA4B,EAAE,OAAO,CAAA;IACrC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,uBAAuB,EAAE,OAAO,CAAA;IAEhC,eAAe,EAAE,OAAO,CAAA;IACxB,sBAAsB,EAAE,OAAO,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAA;IAE9C,cAAc,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAA;IAC7D,gCAAgC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAE1D,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,mBAAmB,EAAE,MAAM,IAAI,CAAA;IAE/B,uBAAuB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,uBAAuB,EAAE,MAAM,IAAI,CAAA;CACpC,CAAA;AAmXD,MAAM,MAAM,6BAA6B,GAAG;IAC1C,gBAAgB,CAAC,EAAE,0BAA0B,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,gBAAgB,CAAC,EAAE,wBAAwB,CAAA;CAC5C,CAAA;AAKD,wBAAgB,mBAAmB,CAAC,EAClC,QAAQ,EACR,0BAAiC,EACjC,4BAAmC,EACnC,uBAA+B,EAC/B,aAAoB,EACpB,MAAM,EACN,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,uBAA+B,EAC/B,qBAA6B,EAC7B,mBAAmB,EACnB,UAAe,EACf,QAAa,GACd,EAAE;IACD,QAAQ,EAAE,SAAS,CAAA;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAA;IACjC,yBAAyB,CAAC,EAAE,MAAM,IAAI,CAAA;IACtC,2BAA2B,CAAC,EAAE,MAAM,IAAI,CAAA;IACxC,wBAAwB,CAAC,EAAE,MAAM,IAAI,CAAA;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,UAAU,CAAC,EAAE,6BAA6B,CAAA;IAC1C,QAAQ,CAAC,EAAE,2BAA2B,CAAA;CACvC,qBAsEA;AAED,KAAK,0BAA0B,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,KAAK,wBAAwB,GAAG;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AA8GD,wBAAgB,cAAc,IAAI,WAAW,GAAG,aAAa,CAAA;AAC7D,wBAAgB,cAAc,CAAC,CAAC,EAC9B,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,KAAK,CAAC,GAClD,CAAC,CAAA"}
+{"version":3,"file":"cameraStore.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/cameraStore.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAEZ,gBAAgB,EAChB,SAAS,EACT,cAAc,EAIf,MAAM,OAAO,CAAA;AAEd,OAAO,EAEL,MAAM,EAMP,MAAM,UAAU,CAAA;AAMjB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAQlE,eAAO,IAAI,MAAM,EAAE,MAAM,GAAG,IAAW,CAAA;AACvC,eAAO,IAAI,WAAW,EAAE,WAAW,GAAG,IAAW,CAAA;AACjD,eAAO,IAAI,WAAW,EAAE,WAAW,GAAG,IAAW,CAAA;AAEjD,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,gBAAgB,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAEnD,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IAEjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IAEf,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAA;IACjC,wBAAwB,CAAC,EAAE,MAAM,IAAI,CAAA;IAErC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,iBAAiB,GAAG;IAC5C,WAAW,EAAE,OAAO,CAAA;IACpB,WAAW,EAAE,eAAe,GAAG,IAAI,CAAA;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IAEnB,YAAY,EAAE,OAAO,CAAA;IAErB,WAAW,EAAE,OAAO,CAAA;IACpB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,+BAA+B,EAAE,OAAO,CAAA;IACxC,4BAA4B,EAAE,OAAO,CAAA;IACrC,4BAA4B,EAAE,OAAO,CAAA;IACrC,qBAAqB,EAAE,OAAO,CAAA;IAC9B,uBAAuB,EAAE,OAAO,CAAA;IAEhC,eAAe,EAAE,OAAO,CAAA;IACxB,sBAAsB,EAAE,OAAO,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAA;IAE9C,cAAc,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAA;IAC7D,gCAAgC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAE1D,mBAAmB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,mBAAmB,EAAE,MAAM,IAAI,CAAA;IAE/B,uBAAuB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,uBAAuB,EAAE,MAAM,IAAI,CAAA;CACpC,CAAA;AAmXD,MAAM,MAAM,6BAA6B,GAAG;IAC1C,gBAAgB,CAAC,EAAE,0BAA0B,CAAA;CAC9C,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,gBAAgB,CAAC,EAAE,wBAAwB,CAAA;CAC5C,CAAA;AAKD,wBAAgB,mBAAmB,CAAC,EAClC,QAAQ,EACR,0BAAiC,EACjC,4BAAmC,EACnC,uBAA+B,EAC/B,aAAoB,EACpB,MAAM,EACN,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,uBAA+B,EAC/B,qBAA6B,EAC7B,mBAAmB,EACnB,UAAe,EACf,QAAa,GACd,EAAE;IACD,QAAQ,EAAE,SAAS,CAAA;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,4BAA4B,CAAC,EAAE,OAAO,CAAA;IACtC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAA;IACjC,yBAAyB,CAAC,EAAE,MAAM,IAAI,CAAA;IACtC,2BAA2B,CAAC,EAAE,MAAM,IAAI,CAAA;IACxC,wBAAwB,CAAC,EAAE,MAAM,IAAI,CAAA;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC,UAAU,CAAC,EAAE,6BAA6B,CAAA;IAC1C,QAAQ,CAAC,EAAE,2BAA2B,CAAA;CACvC,qBAwEA;AAED,KAAK,0BAA0B,GAAG;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAED,KAAK,wBAAwB,GAAG;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AA8GD,wBAAgB,cAAc,IAAI,WAAW,GAAG,aAAa,CAAA;AAC7D,wBAAgB,cAAc,CAAC,CAAC,EAC9B,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,KAAK,CAAC,GAClD,CAAC,CAAA"}

package/dist/lib/camera/getUserMediaIntegrity.d.ts

@@ -12,20 +12,61 @@ export type IntegrityResult = {
  * Customers should call this as early as possible in their application boot,
  * before any third-party scripts have a chance to monkey-patch browser APIs.
  *
- * The returned token is passed to SDK components via the `mediaIntegrityToken` prop.
+ * The returned token is passed to SDK components via the `mediaIntegrityToken`
+ * prop. **Passing a token is the recommended way to enable strong tamper
+ * detection.** Without it, the SDK falls back to Layer 1 (boot-time reference
+ * snapshot) and Layer 2 (page-vs-iframe `toString` heuristic), both of which
+ * are best-effort and can produce false positives — e.g. legitimate post-init
+ * shims like `webrtc-adapter`, browser-level instrumentation in Chrome for
+ * iOS (CriOS), and some browser extensions all replace `getUserMedia` in ways
+ * that look indistinguishable from tampering at those layers.
+ *
+ * Layer 3 (this token) compares against a snapshot the customer captures at
+ * a moment of their choosing, so it is robust against post-capture tampering
+ * regardless of how sophisticated the attacker is at faking `[native code]`
+ * after the snapshot — but it cannot defend against tampering that already
+ * happened before `captureMediaIntegrity` ran. Capture early.
+ *
+ * **Must be called in a browser context** (`navigator.mediaDevices` available).
+ * Calling during SSR / pre-DOM produces a token whose snapshot is empty;
+ * subsequent integrity checks against such a token will report "unrecognized
+ * or forged token" — a false positive caused by capture-time misuse.
  */
 export declare function captureMediaIntegrity(): MediaIntegrityToken;
+export type IntegrityCheckOptions = {
+    /** When false or omitted, all checks are skipped and result is clean. */
+    enabled?: boolean;
+    /** Optional customer-captured token for Layer 3. */
+    token?: MediaIntegrityToken;
+};
 /**
  * Run all applicable integrity check layers.
- * Layer 1: Boot-time referential equality
- * Layer 2: Fresh iframe cross-context toString (async-safe but sync)
- * Layer 3: Customer-provided token validation (if token supplied)
+ *
+ * - **Layer 1**: Boot-time referential equality (corroborated by Layer 2).
+ *   Best-effort; misses attackers who inject before SDK load.
+ * - **Layer 2**: Fresh-iframe cross-realm `toString` comparison. Best-effort;
+ *   produces false positives in browser-level instrumentation contexts (CriOS,
+ *   extensions). The page-vs-iframe disagreement case is gated on iframe
+ *   trustworthiness to mitigate this.
+ * - **Layer 3**: Customer-provided token validation (only runs when a token
+ *   is supplied). **This is the strong defense** — see `captureMediaIntegrity`.
+ *
+ * Returns clean immediately if `enabled` is not true.
  */
-export declare function checkGetUserMediaIntegrity(token?: MediaIntegrityToken): IntegrityResult;
+export declare function checkGetUserMediaIntegrity(options?: IntegrityCheckOptions): IntegrityResult;
 /**
- * Lightweight pre-call guard (Layer 1 + Layer 3 only, no iframe).
- * Returns `true` if tampering is detected.
+ * Lightweight pre-call guard. Returns `true` if tampering is detected.
+ * Returns `false` immediately when not enabled.
+ *
+ * Runs Layer 1 (corroborated by a cached Layer 2 verdict) and Layer 3.
+ * The full check at mount time (`checkGetUserMediaIntegrity`) re-runs Layer 2
+ * fresh for completeness; this guard uses the cache so per-call cost is low.
+ *
+ * For strong tamper resistance, customers should pass a token captured via
+ * `captureMediaIntegrity` — Layer 1 is best-effort and can produce false
+ * positives against legitimate post-init shims (`webrtc-adapter`, polyfills,
+ * browser extensions).
  */
-export declare function guardGetUserMedia(token?: MediaIntegrityToken): boolean;
+export declare function guardGetUserMedia(options?: IntegrityCheckOptions): boolean;
 export {};
 //# sourceMappingURL=getUserMediaIntegrity.d.ts.map

package/dist/lib/camera/getUserMediaIntegrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getUserMediaIntegrity.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/getUserMediaIntegrity.ts"],"names":[],"mappings":"AAcA,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAA;AAErD,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAYD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,IAAI,mBAAmB,CAS3D;AAqJD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,CAAC,EAAE,mBAAmB,GAC1B,eAAe,CAqBjB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,OAAO,CActE"}
+{"version":3,"file":"getUserMediaIntegrity.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/getUserMediaIntegrity.ts"],"names":[],"mappings":"AAcA,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAA;AAErD,iFAAiF;AACjF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,OAAO,CAAA;IACjB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AA+BD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,IAAI,mBAAmB,CAS3D;AAsLD,MAAM,MAAM,qBAAqB,GAAG;IAClC,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,mBAAmB,CAAA;CAC5B,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,qBAA0B,GAClC,eAAe,CAwBjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAiBT"}

package/dist/lib/camera/getUserMediaIntegrity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=getUserMediaIntegrity.test.d.ts.map

package/dist/lib/camera/getUserMediaIntegrity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getUserMediaIntegrity.test.d.ts","sourceRoot":"","sources":["../../../src/lib/camera/getUserMediaIntegrity.test.ts"],"names":[],"mappings":""}

package/dist/sdk2.cjs.development.js

@@ -235,7 +235,7 @@ typeof SuppressedError === "function" ? SuppressedError : function (error, suppr
   return e.name = "SuppressedError", e.error = error, e.suppressed = suppressed, e;
 };
 
-var webSdkVersion = '2.3.212';
+var webSdkVersion = '2.3.213';
 
 function getPlatform() {
   // eslint-disable-next-line @typescript-eslint/ban-ts-comment
@@ -4194,6 +4194,24 @@ var LOG_TAG$2 = 'camera:getUserMediaIntegrity';
 // Module-level boot-time cached references (SSR-safe)
 var _createElement = typeof document !== 'undefined' ? Document.prototype.createElement : undefined;
 var _getUserMedia = typeof navigator !== 'undefined' ? (_a = navigator.mediaDevices) === null || _a === void 0 ? void 0 : _a.getUserMedia : undefined;
+// Cached Layer 2 verdict — Layer 2 creates an iframe (expensive). Cache the
+// result for the lifetime of the page so repeated guard() calls are cheap.
+// Keyed by the current navigator.mediaDevices.getUserMedia identity so a
+// post-init replacement re-runs Layer 2 once and the new verdict sticks.
+var _cachedLayer2;
+function getCachedLayer2Verdict() {
+  var _a;
+  var currentSource = typeof navigator !== 'undefined' ? (_a = navigator.mediaDevices) === null || _a === void 0 ? void 0 : _a.getUserMedia : undefined;
+  if (_cachedLayer2 && _cachedLayer2.source === currentSource) {
+    return _cachedLayer2.verdict;
+  }
+  var verdict = checkLayer2();
+  _cachedLayer2 = {
+    source: currentSource,
+    verdict: verdict
+  };
+  return verdict;
+}
 // --- Layer 3: Customer-provided token ---
 var tokenStore = new WeakMap();
 /**
@@ -4201,7 +4219,25 @@ var tokenStore = new WeakMap();
  * Customers should call this as early as possible in their application boot,
  * before any third-party scripts have a chance to monkey-patch browser APIs.
  *
- * The returned token is passed to SDK components via the `mediaIntegrityToken` prop.
+ * The returned token is passed to SDK components via the `mediaIntegrityToken`
+ * prop. **Passing a token is the recommended way to enable strong tamper
+ * detection.** Without it, the SDK falls back to Layer 1 (boot-time reference
+ * snapshot) and Layer 2 (page-vs-iframe `toString` heuristic), both of which
+ * are best-effort and can produce false positives — e.g. legitimate post-init
+ * shims like `webrtc-adapter`, browser-level instrumentation in Chrome for
+ * iOS (CriOS), and some browser extensions all replace `getUserMedia` in ways
+ * that look indistinguishable from tampering at those layers.
+ *
+ * Layer 3 (this token) compares against a snapshot the customer captures at
+ * a moment of their choosing, so it is robust against post-capture tampering
+ * regardless of how sophisticated the attacker is at faking `[native code]`
+ * after the snapshot — but it cannot defend against tampering that already
+ * happened before `captureMediaIntegrity` ran. Capture early.
+ *
+ * **Must be called in a browser context** (`navigator.mediaDevices` available).
+ * Calling during SSR / pre-DOM produces a token whose snapshot is empty;
+ * subsequent integrity checks against such a token will report "unrecognized
+ * or forged token" — a false positive caused by capture-time misuse.
  */
 function captureMediaIntegrity() {
   var token = Object.freeze({
@@ -4215,8 +4251,8 @@ function captureMediaIntegrity() {
   }
   return token;
 }
-// --- Layer 1: Boot-time referential equality ---
-function checkLayer1() {
+// --- Layer 1: Boot-time referential equality (with Layer 2 corroboration) ---
+function checkLayer1(layer2) {
   var details = [];
   // SSR or missing mediaDevices — pass gracefully
   if (!_getUserMedia || typeof navigator === 'undefined' || !navigator.mediaDevices) {
@@ -4225,8 +4261,19 @@ function checkLayer1() {
       details: details
     };
   }
-  if (navigator.mediaDevices.getUserMedia !== _getUserMedia) {
-    details.push('Layer 1: navigator.mediaDevices.getUserMedia reference differs from boot-time snapshot');
+  if (navigator.mediaDevices.getUserMedia === _getUserMedia) {
+    return {
+      tampered: false,
+      details: details
+    };
+  }
+  // Reference differs from boot snapshot. This may be a legitimate post-init
+  // shim (webrtc-adapter, polyfill, browser extension). Only flag when Layer 2
+  // gives positive evidence of tampering. If Layer 2 is unavailable (no
+  // document) or itself reports clean, defer to Layer 2's signal and don't
+  // double-report at Layer 1.
+  if (layer2 === null || layer2 === void 0 ? void 0 : layer2.tampered) {
+    details.push('Layer 1: navigator.mediaDevices.getUserMedia reference differs from boot-time snapshot (corroborated by Layer 2)');
   }
   return {
     tampered: details.length > 0,
@@ -4235,7 +4282,7 @@ function checkLayer1() {
 }
 // --- Layer 2: Fresh iframe cross-context toString ---
 function checkLayer2() {
-  var _a, _b;
+  var _a, _b, _c, _d;
   var details = [];
   // SSR or missing prerequisites — pass gracefully
   if (typeof document === 'undefined' || !_createElement || !navigator.mediaDevices) {
@@ -4281,8 +4328,24 @@ function checkLayer2() {
           // Neither is native — something has tampered at a deep level
           details.push('Layer 2: neither page nor iframe getUserMedia appear native');
         } else if (pageIsNative && !iframeIsNative) {
-          // Page claims native but iframe disagrees — suspicious
-          details.push('Layer 2: page getUserMedia claims native but iframe does not');
+          // Iframe disagrees with page about native-ness. Probe iframe
+          // trustworthiness via another mediaDevices method before deciding
+          // whether to flag. Browsers (Chrome for iOS / CriOS) and some
+          // extensions wrap iframe getUserMedia specifically while leaving
+          // sibling methods intact; broadly-tampered iframes also can't be
+          // trusted as a "what does native look like" reference. In neither
+          // case is the iframe a reliable witness, so we trust the page-
+          // level [native code] signal and don't flag here.
+          //
+          // The strong defense against a faked-native page-level impostor
+          // is Layer 3 (customer-captured token), not Layer 2 heuristics.
+          var iframeEnumerateDevices = (_d = (_c = iframeWindow.navigator) === null || _c === void 0 ? void 0 : _c.mediaDevices) === null || _d === void 0 ? void 0 : _d.enumerateDevices;
+          var iframeEnumerateNative = iframeEnumerateDevices ? String(iframeToString.call(iframeEnumerateDevices)).includes('[native code]') : false;
+          if (iframeEnumerateNative) {
+            debug("".concat(LOG_TAG$2, " Layer 2: page getUserMedia native; iframe getUserMedia wrapped but iframe enumerateDevices native \u2014 browser-level instrumentation pattern (e.g. CriOS), not flagged"));
+          } else {
+            debug("".concat(LOG_TAG$2, " Layer 2: page getUserMedia native; iframe broadly unreliable as a reference (enumerateDevices also non-native or unavailable), not flagged"));
+          }
         }
         // pageIsNative=false, iframeIsNative=true → legitimate shim (e.g. adapter.js), not flagged
         // both native → clean, not flagged
@@ -4343,20 +4406,36 @@ function checkLayer3(token) {
     details: details
   };
 }
-// --- Public API ---
 /**
  * Run all applicable integrity check layers.
- * Layer 1: Boot-time referential equality
- * Layer 2: Fresh iframe cross-context toString (async-safe but sync)
- * Layer 3: Customer-provided token validation (if token supplied)
+ *
+ * - **Layer 1**: Boot-time referential equality (corroborated by Layer 2).
+ *   Best-effort; misses attackers who inject before SDK load.
+ * - **Layer 2**: Fresh-iframe cross-realm `toString` comparison. Best-effort;
+ *   produces false positives in browser-level instrumentation contexts (CriOS,
+ *   extensions). The page-vs-iframe disagreement case is gated on iframe
+ *   trustworthiness to mitigate this.
+ * - **Layer 3**: Customer-provided token validation (only runs when a token
+ *   is supplied). **This is the strong defense** — see `captureMediaIntegrity`.
+ *
+ * Returns clean immediately if `enabled` is not true.
  */
-function checkGetUserMediaIntegrity(token) {
+function checkGetUserMediaIntegrity(options) {
+  if (options === void 0) {
+    options = {};
+  }
+  if (!options.enabled) {
+    return {
+      tampered: false,
+      details: []
+    };
+  }
   var allDetails = [];
-  var l1 = checkLayer1();
-  allDetails.push.apply(allDetails, l1.details);
   var l2 = checkLayer2();
+  var l1 = checkLayer1(l2);
+  allDetails.push.apply(allDetails, l1.details);
   allDetails.push.apply(allDetails, l2.details);
-  var l3 = checkLayer3(token);
+  var l3 = checkLayer3(options.token);
   allDetails.push.apply(allDetails, l3.details);
   var tampered = l1.tampered || l2.tampered || l3.tampered;
   if (tampered) {
@@ -4370,12 +4449,26 @@ function checkGetUserMediaIntegrity(token) {
   };
 }
 /**
- * Lightweight pre-call guard (Layer 1 + Layer 3 only, no iframe).
- * Returns `true` if tampering is detected.
+ * Lightweight pre-call guard. Returns `true` if tampering is detected.
+ * Returns `false` immediately when not enabled.
+ *
+ * Runs Layer 1 (corroborated by a cached Layer 2 verdict) and Layer 3.
+ * The full check at mount time (`checkGetUserMediaIntegrity`) re-runs Layer 2
+ * fresh for completeness; this guard uses the cache so per-call cost is low.
+ *
+ * For strong tamper resistance, customers should pass a token captured via
+ * `captureMediaIntegrity` — Layer 1 is best-effort and can produce false
+ * positives against legitimate post-init shims (`webrtc-adapter`, polyfills,
+ * browser extensions).
  */
-function guardGetUserMedia(token) {
-  var l1 = checkLayer1();
-  var l3 = checkLayer3(token);
+function guardGetUserMedia(options) {
+  if (options === void 0) {
+    options = {};
+  }
+  if (!options.enabled) return false;
+  var l2 = getCachedLayer2Verdict();
+  var l1 = checkLayer1(l2);
+  var l3 = checkLayer3(options.token);
   var tampered = l1.tampered || l3.tampered;
   if (tampered) {
     error("".concat(LOG_TAG$2, " guard detected tampering:"), __spreadArray(__spreadArray([], l1.details, true), l3.details, true));
@@ -4385,16 +4478,19 @@ function guardGetUserMedia(token) {
 
 var LOG_TAG$1 = 'camera:Camera';
 function listAvailableCameras(facingMode_1) {
-  return __awaiter(this, arguments, void 0, function (facingMode, requestMicAccess, token) {
+  return __awaiter(this, arguments, void 0, function (facingMode, requestMicAccess, tamper) {
     var cameraEnumerationStream, allDevices, allowedVideoDevices;
     if (requestMicAccess === void 0) {
       requestMicAccess = false;
     }
+    if (tamper === void 0) {
+      tamper = {};
+    }
     return __generator(this, function (_a) {
       switch (_a.label) {
         case 0:
           // The first thing we need to do is call getUserMedia() so that the subsequent call to enumerateDevices() works.
-          if (guardGetUserMedia(token)) {
+          if (guardGetUserMedia(tamper)) {
             throw new Error('getUserMedia tampering detected');
           }
           return [4 /*yield*/, navigator.mediaDevices.getUserMedia({
@@ -5732,7 +5828,10 @@ var createCameraStore = function createCameraStore(config) {
               case 0:
                 debug("".concat(LOG_TAG, " requestCameraAccess"), new Error().stack);
                 _a = get(), videoRef = _a.videoRef, releaseCameraAccess = _a.releaseCameraAccess, preferFrontFacingCamera = _a.preferFrontFacingCamera, preferIphoneContinuityCamera = _a.preferIphoneContinuityCamera, iphoneContinuityCameraDenied = _a.iphoneContinuityCameraDenied, enableTamperDetection = _a.enableTamperDetection, mediaIntegrityToken = _a.mediaIntegrityToken;
-                if (enableTamperDetection && guardGetUserMedia(mediaIntegrityToken)) {
+                if (guardGetUserMedia({
+                  enabled: enableTamperDetection,
+                  token: mediaIntegrityToken
+                })) {
                   set({
                     cameraTamperingDetected: true
                   });
@@ -5742,7 +5841,10 @@ var createCameraStore = function createCameraStore(config) {
                 _f.label = 1;
               case 1:
                 _f.trys.push([1, 11,, 12]);
-                return [4 /*yield*/, listAvailableCameras(undefined, false, mediaIntegrityToken)];
+                return [4 /*yield*/, listAvailableCameras(undefined, false, {
+                  enabled: enableTamperDetection,
+                  token: mediaIntegrityToken
+                })];
               case 2:
                 availableCameras = _f.sent();
                 selectedCamera = void 0;
@@ -5954,7 +6056,10 @@ var createCameraStore = function createCameraStore(config) {
             switch (_a.label) {
               case 0:
                 get().releaseMicrophoneAccess();
-                if (get().enableTamperDetection && guardGetUserMedia(get().mediaIntegrityToken)) {
+                if (guardGetUserMedia({
+                  enabled: get().enableTamperDetection,
+                  token: get().mediaIntegrityToken
+                })) {
                   set({
                     cameraTamperingDetected: true
                   });
@@ -6078,8 +6183,10 @@ function CameraStoreProvider(_a) {
   }));
   React.useEffect(function () {
     var _a;
-    if (!enableTamperDetection) return;
-    var result = checkGetUserMediaIntegrity(mediaIntegrityToken);
+    var result = checkGetUserMediaIntegrity({
+      enabled: enableTamperDetection,
+      token: mediaIntegrityToken
+    });
     if (result.tampered) {
       (_a = store.current) === null || _a === void 0 ? void 0 : _a.setState({
         cameraTamperingDetected: true