@metamask-previews/kyc-controller 0.0.0-preview-11d78534e

package/dist/crypto.cjs

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * Check / Auth frame key exchange and credential decryption.
+ *
+ * The identity vendor's Check and Auth frames return encrypted credentials.
+ * The confirmed protocol is X25519 ECDH + AES-256-GCM (an "ECDH-ES" pattern
+ * signalled by a 12-byte IV):
+ *
+ *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the
+ *      frame as a URL param.
+ *   2. Frame generates its own ephemeral X25519 keypair and encrypts the
+ *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.
+ *   3. Client reverses:
+ *        shared = X25519(ourPrivate, theirEphemeralPublic)
+ *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)
+ *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)
+ *
+ * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and
+ * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decryptCredentials = exports.generateKeyPair = void 0;
+const aes_1 = require("@noble/ciphers/aes");
+const ed25519_1 = require("@noble/curves/ed25519");
+const hkdf_1 = require("@noble/hashes/hkdf");
+const sha2_1 = require("@noble/hashes/sha2");
+const utils_1 = require("@noble/hashes/utils");
+const base_1 = require("@scure/base");
+/**
+ * Generate a fresh X25519 keypair. The private key never leaves the device;
+ * only `publicKeyHex` is sent to the vendor via the frame URL.
+ *
+ * @returns The generated keypair.
+ */
+function generateKeyPair() {
+    const privateKey = ed25519_1.x25519.utils.randomSecretKey();
+    const publicKey = ed25519_1.x25519.getPublicKey(privateKey);
+    return {
+        privateKey,
+        publicKey,
+        publicKeyHex: (0, utils_1.bytesToHex)(publicKey),
+    };
+}
+exports.generateKeyPair = generateKeyPair;
+/**
+ * Decode a base64 / base64url string to bytes without relying on `atob` or
+ * `Buffer`.
+ *
+ * @param value - The (possibly url-safe, possibly unpadded) base64 string.
+ * @returns The decoded bytes.
+ */
+function base64ToBytes(value) {
+    const normalized = value.replace(/-/gu, '+').replace(/_/gu, '/');
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    return base_1.base64.decode(padded);
+}
+/**
+ * Decode a binary envelope field that may be hex or base64.
+ *
+ * @param value - The encoded field.
+ * @param encoding - Optional explicit encoding; auto-detected when omitted.
+ * @returns The decoded bytes.
+ */
+function decodeBinary(value, encoding) {
+    const isHex = encoding === 'hex' ||
+        (encoding === undefined && /^[0-9a-fA-F]+$/u.test(value));
+    if (isHex) {
+        return (0, utils_1.hexToBytes)(value);
+    }
+    return base64ToBytes(value);
+}
+/**
+ * Coerce the `credentials` field into a structured envelope. The frame may
+ * deliver it as an object, a JSON string, or base64(JSON).
+ *
+ * @param input - The raw credentials value.
+ * @returns The normalized envelope.
+ * @throws If the value is not a structured or base64(JSON) envelope, or is
+ * missing required fields.
+ */
+function normalizeEnvelope(input) {
+    let value = input;
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        if (trimmed.startsWith('{')) {
+            try {
+                value = JSON.parse(trimmed);
+            }
+            catch {
+                throw new Error(`credentials looked like JSON but failed to parse (preview: "${trimmed.slice(0, 64)}").`);
+            }
+        }
+        else {
+            let decodedText = null;
+            try {
+                decodedText = new TextDecoder().decode(base64ToBytes(trimmed));
+            }
+            catch {
+                decodedText = null;
+            }
+            const decodedTrimmed = decodedText?.trim();
+            if (decodedTrimmed?.startsWith('{')) {
+                try {
+                    value = JSON.parse(decodedTrimmed);
+                }
+                catch {
+                    throw new Error(`credentials base64-decoded to non-JSON (preview: "${decodedTrimmed.slice(0, 64)}").`);
+                }
+            }
+            else {
+                throw new Error(`credentials is an opaque string, not a structured or base64(JSON) envelope (preview: "${trimmed.slice(0, 64)}").`);
+            }
+        }
+    }
+    const env = value;
+    if (!env.ephemeralPublicKey || !(env.iv ?? env.nonce) || !env.ciphertext) {
+        const keys = value && typeof value === 'object'
+            ? Object.keys(value).join(', ')
+            : typeof value;
+        throw new Error(`credentials envelope missing required fields (ephemeralPublicKey/iv/ciphertext). Got: ${keys}`);
+    }
+    return env;
+}
+/**
+ * X25519 ECDH to AES-256-GCM decryption.
+ *
+ * @param theirPublicKey - The frame's ephemeral public key.
+ * @param iv - The 12-byte GCM IV.
+ * @param ciphertext - The ciphertext including the 16-byte auth tag.
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The decrypted credentials and method.
+ */
+function aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey) {
+    const shared = ed25519_1.x25519.getSharedSecret(ourPrivateKey, theirPublicKey);
+    const key = (0, hkdf_1.hkdf)(sha2_1.sha256, shared, undefined, undefined, 32);
+    const plaintext = (0, aes_1.gcm)(key, iv).decrypt(ciphertext);
+    const text = new TextDecoder().decode(plaintext);
+    return {
+        credentials: JSON.parse(text),
+        method: 'aes-256-gcm/hkdf-sha256',
+    };
+}
+/**
+ * Decrypt a Check/Auth frame credentials envelope using our X25519 private
+ * key.
+ *
+ * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The parsed credentials and the method that authenticated.
+ * @throws If the envelope is malformed or the IV length is not 12 bytes.
+ */
+function decryptCredentials(rawEnvelope, ourPrivateKey) {
+    const envelope = normalizeEnvelope(rawEnvelope);
+    const theirPublicKey = decodeBinary(envelope.ephemeralPublicKey, envelope.encoding);
+    // `normalizeEnvelope` guarantees one of `iv` / `nonce` is present.
+    const ivField = (envelope.iv ?? envelope.nonce);
+    const iv = decodeBinary(ivField, envelope.encoding);
+    const ciphertext = decodeBinary(envelope.ciphertext, envelope.encoding);
+    if (iv.length !== 12) {
+        throw new Error(`Unexpected IV length ${iv.length} (expected 12 for AES-256-GCM).`);
+    }
+    return aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey);
+}
+exports.decryptCredentials = decryptCredentials;
+//# sourceMappingURL=crypto.cjs.map

package/dist/crypto.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.cjs","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEH,4CAAyC;AACzC,mDAA+C;AAC/C,6CAA0C;AAC1C,6CAA4C;AAC5C,+CAA6D;AAC7D,sCAAqC;AAoDrC;;;;;GAKG;AACH,SAAgB,eAAe;IAC7B,MAAM,UAAU,GAAG,gBAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,gBAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO;QACL,UAAU;QACV,SAAS;QACT,YAAY,EAAE,IAAA,kBAAU,EAAC,SAAS,CAAC;KACpC,CAAC;AACJ,CAAC;AARD,0CAQC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EACvD,GAAG,CACJ,CAAC;IACF,OAAO,aAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,QAA2B;IAC9D,MAAM,KAAK,GACT,QAAQ,KAAK,KAAK;QAClB,CAAC,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAA,kBAAU,EAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,KAA4C;IAE5C,IAAI,KAAK,GAAY,KAAK,CAAC;IAE3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,+DAA+D,OAAO,CAAC,KAAK,CAC1E,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,WAAW,GAAkB,IAAI,CAAC;YACtC,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,MAAM,cAAc,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CACb,qDAAqD,cAAc,CAAC,KAAK,CACvE,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,yFAAyF,OAAO,CAAC,KAAK,CACpG,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,CAAC,CAAC,OAAO,KAAK,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,yFAAyF,IAAI,EAAE,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,cAA0B,EAC1B,EAAc,EACd,UAAsB,EACtB,aAAyB;IAEzB,MAAM,MAAM,GAAG,gBAAM,CAAC,eAAe,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAA,WAAI,EAAC,aAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAA,SAAG,EAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB;QACrD,MAAM,EAAE,yBAAyB;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kBAAkB,CAChC,WAAkD,EAClD,aAAyB;IAEzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,YAAY,CACjC,QAAQ,CAAC,kBAAkB,EAC3B,QAAQ,CAAC,QAAQ,CAClB,CAAC;IACF,mEAAmE;IACnE,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAW,CAAC;IAC1D,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,CAAC,MAAM,iCAAiC,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC;AArBD,gDAqBC","sourcesContent":["/**\n * Check / Auth frame key exchange and credential decryption.\n *\n * The identity vendor's Check and Auth frames return encrypted credentials.\n * The confirmed protocol is X25519 ECDH + AES-256-GCM (an \"ECDH-ES\" pattern\n * signalled by a 12-byte IV):\n *\n *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the\n *      frame as a URL param.\n *   2. Frame generates its own ephemeral X25519 keypair and encrypts the\n *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.\n *   3. Client reverses:\n *        shared = X25519(ourPrivate, theirEphemeralPublic)\n *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)\n *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)\n *\n * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and\n * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.\n */\n\nimport { gcm } from '@noble/ciphers/aes';\nimport { x25519 } from '@noble/curves/ed25519';\nimport { hkdf } from '@noble/hashes/hkdf';\nimport { sha256 } from '@noble/hashes/sha2';\nimport { bytesToHex, hexToBytes } from '@noble/hashes/utils';\nimport { base64 } from '@scure/base';\n\n/**\n * An X25519 keypair used for the Check/Auth frame key exchange.\n */\nexport type X25519KeyPair = {\n  /** Raw 32-byte X25519 private (scalar) key. Never leaves the device. */\n  privateKey: Uint8Array;\n  /** Raw 32-byte X25519 public key. */\n  publicKey: Uint8Array;\n  /** Hex-encoded public key, ready to drop into a Check/Auth frame URL. */\n  publicKeyHex: string;\n};\n\n/**\n * The encrypted-credentials envelope returned by the Check/Auth frames. Binary\n * fields may be hex or base64; the IV field may be named `iv` or `nonce`.\n */\nexport type EncryptedCredentialsEnvelope = {\n  /** Ephemeral public key produced by the frame for this exchange (32 bytes). */\n  ephemeralPublicKey: string;\n  /** Per-message IV. May be provided as `iv` or `nonce`. */\n  iv?: string;\n  nonce?: string;\n  /** Ciphertext (plaintext + 16-byte GCM auth tag). */\n  ciphertext: string;\n  /** Optional explicit encoding hint. Defaults to auto-detect. */\n  encoding?: 'hex' | 'base64';\n};\n\n/**\n * Decrypted Check/Auth frame credentials.\n *\n * - `accessToken` is the Bearer token for the identity API.\n * - `clientToken` is the short-lived token consumed by the Auth frame when the\n *   Check frame returns `connectionRequired`.\n */\nexport type DecryptedCredentials = {\n  accessToken?: string;\n  clientToken?: string;\n  [key: string]: unknown;\n};\n\n/**\n * Result of a successful decryption — the credentials plus the `method` that\n * authenticated.\n */\nexport type DecryptResult = {\n  credentials: DecryptedCredentials;\n  method: string;\n};\n\n/**\n * Generate a fresh X25519 keypair. The private key never leaves the device;\n * only `publicKeyHex` is sent to the vendor via the frame URL.\n *\n * @returns The generated keypair.\n */\nexport function generateKeyPair(): X25519KeyPair {\n  const privateKey = x25519.utils.randomSecretKey();\n  const publicKey = x25519.getPublicKey(privateKey);\n  return {\n    privateKey,\n    publicKey,\n    publicKeyHex: bytesToHex(publicKey),\n  };\n}\n\n/**\n * Decode a base64 / base64url string to bytes without relying on `atob` or\n * `Buffer`.\n *\n * @param value - The (possibly url-safe, possibly unpadded) base64 string.\n * @returns The decoded bytes.\n */\nfunction base64ToBytes(value: string): Uint8Array {\n  const normalized = value.replace(/-/gu, '+').replace(/_/gu, '/');\n  const padded = normalized.padEnd(\n    normalized.length + ((4 - (normalized.length % 4)) % 4),\n    '=',\n  );\n  return base64.decode(padded);\n}\n\n/**\n * Decode a binary envelope field that may be hex or base64.\n *\n * @param value - The encoded field.\n * @param encoding - Optional explicit encoding; auto-detected when omitted.\n * @returns The decoded bytes.\n */\nfunction decodeBinary(value: string, encoding?: 'hex' | 'base64'): Uint8Array {\n  const isHex =\n    encoding === 'hex' ||\n    (encoding === undefined && /^[0-9a-fA-F]+$/u.test(value));\n  if (isHex) {\n    return hexToBytes(value);\n  }\n  return base64ToBytes(value);\n}\n\n/**\n * Coerce the `credentials` field into a structured envelope. The frame may\n * deliver it as an object, a JSON string, or base64(JSON).\n *\n * @param input - The raw credentials value.\n * @returns The normalized envelope.\n * @throws If the value is not a structured or base64(JSON) envelope, or is\n * missing required fields.\n */\nfunction normalizeEnvelope(\n  input: EncryptedCredentialsEnvelope | string,\n): EncryptedCredentialsEnvelope {\n  let value: unknown = input;\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed.startsWith('{')) {\n      try {\n        value = JSON.parse(trimmed);\n      } catch {\n        throw new Error(\n          `credentials looked like JSON but failed to parse (preview: \"${trimmed.slice(\n            0,\n            64,\n          )}\").`,\n        );\n      }\n    } else {\n      let decodedText: string | null = null;\n      try {\n        decodedText = new TextDecoder().decode(base64ToBytes(trimmed));\n      } catch {\n        decodedText = null;\n      }\n      const decodedTrimmed = decodedText?.trim();\n      if (decodedTrimmed?.startsWith('{')) {\n        try {\n          value = JSON.parse(decodedTrimmed);\n        } catch {\n          throw new Error(\n            `credentials base64-decoded to non-JSON (preview: \"${decodedTrimmed.slice(\n              0,\n              64,\n            )}\").`,\n          );\n        }\n      } else {\n        throw new Error(\n          `credentials is an opaque string, not a structured or base64(JSON) envelope (preview: \"${trimmed.slice(\n            0,\n            64,\n          )}\").`,\n        );\n      }\n    }\n  }\n\n  const env = value as Partial<EncryptedCredentialsEnvelope>;\n  if (!env.ephemeralPublicKey || !(env.iv ?? env.nonce) || !env.ciphertext) {\n    const keys =\n      value && typeof value === 'object'\n        ? Object.keys(value).join(', ')\n        : typeof value;\n    throw new Error(\n      `credentials envelope missing required fields (ephemeralPublicKey/iv/ciphertext). Got: ${keys}`,\n    );\n  }\n  return env as EncryptedCredentialsEnvelope;\n}\n\n/**\n * X25519 ECDH to AES-256-GCM decryption.\n *\n * @param theirPublicKey - The frame's ephemeral public key.\n * @param iv - The 12-byte GCM IV.\n * @param ciphertext - The ciphertext including the 16-byte auth tag.\n * @param ourPrivateKey - Our X25519 private key.\n * @returns The decrypted credentials and method.\n */\nfunction aesGcmDecrypt(\n  theirPublicKey: Uint8Array,\n  iv: Uint8Array,\n  ciphertext: Uint8Array,\n  ourPrivateKey: Uint8Array,\n): DecryptResult {\n  const shared = x25519.getSharedSecret(ourPrivateKey, theirPublicKey);\n  const key = hkdf(sha256, shared, undefined, undefined, 32);\n  const plaintext = gcm(key, iv).decrypt(ciphertext);\n  const text = new TextDecoder().decode(plaintext);\n  return {\n    credentials: JSON.parse(text) as DecryptedCredentials,\n    method: 'aes-256-gcm/hkdf-sha256',\n  };\n}\n\n/**\n * Decrypt a Check/Auth frame credentials envelope using our X25519 private\n * key.\n *\n * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).\n * @param ourPrivateKey - Our X25519 private key.\n * @returns The parsed credentials and the method that authenticated.\n * @throws If the envelope is malformed or the IV length is not 12 bytes.\n */\nexport function decryptCredentials(\n  rawEnvelope: EncryptedCredentialsEnvelope | string,\n  ourPrivateKey: Uint8Array,\n): DecryptResult {\n  const envelope = normalizeEnvelope(rawEnvelope);\n  const theirPublicKey = decodeBinary(\n    envelope.ephemeralPublicKey,\n    envelope.encoding,\n  );\n  // `normalizeEnvelope` guarantees one of `iv` / `nonce` is present.\n  const ivField = (envelope.iv ?? envelope.nonce) as string;\n  const iv = decodeBinary(ivField, envelope.encoding);\n  const ciphertext = decodeBinary(envelope.ciphertext, envelope.encoding);\n\n  if (iv.length !== 12) {\n    throw new Error(\n      `Unexpected IV length ${iv.length} (expected 12 for AES-256-GCM).`,\n    );\n  }\n\n  return aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey);\n}\n"]}

package/dist/crypto.d.cts

@@ -0,0 +1,83 @@
+/**
+ * Check / Auth frame key exchange and credential decryption.
+ *
+ * The identity vendor's Check and Auth frames return encrypted credentials.
+ * The confirmed protocol is X25519 ECDH + AES-256-GCM (an "ECDH-ES" pattern
+ * signalled by a 12-byte IV):
+ *
+ *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the
+ *      frame as a URL param.
+ *   2. Frame generates its own ephemeral X25519 keypair and encrypts the
+ *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.
+ *   3. Client reverses:
+ *        shared = X25519(ourPrivate, theirEphemeralPublic)
+ *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)
+ *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)
+ *
+ * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and
+ * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.
+ */
+/**
+ * An X25519 keypair used for the Check/Auth frame key exchange.
+ */
+export type X25519KeyPair = {
+    /** Raw 32-byte X25519 private (scalar) key. Never leaves the device. */
+    privateKey: Uint8Array;
+    /** Raw 32-byte X25519 public key. */
+    publicKey: Uint8Array;
+    /** Hex-encoded public key, ready to drop into a Check/Auth frame URL. */
+    publicKeyHex: string;
+};
+/**
+ * The encrypted-credentials envelope returned by the Check/Auth frames. Binary
+ * fields may be hex or base64; the IV field may be named `iv` or `nonce`.
+ */
+export type EncryptedCredentialsEnvelope = {
+    /** Ephemeral public key produced by the frame for this exchange (32 bytes). */
+    ephemeralPublicKey: string;
+    /** Per-message IV. May be provided as `iv` or `nonce`. */
+    iv?: string;
+    nonce?: string;
+    /** Ciphertext (plaintext + 16-byte GCM auth tag). */
+    ciphertext: string;
+    /** Optional explicit encoding hint. Defaults to auto-detect. */
+    encoding?: 'hex' | 'base64';
+};
+/**
+ * Decrypted Check/Auth frame credentials.
+ *
+ * - `accessToken` is the Bearer token for the identity API.
+ * - `clientToken` is the short-lived token consumed by the Auth frame when the
+ *   Check frame returns `connectionRequired`.
+ */
+export type DecryptedCredentials = {
+    accessToken?: string;
+    clientToken?: string;
+    [key: string]: unknown;
+};
+/**
+ * Result of a successful decryption — the credentials plus the `method` that
+ * authenticated.
+ */
+export type DecryptResult = {
+    credentials: DecryptedCredentials;
+    method: string;
+};
+/**
+ * Generate a fresh X25519 keypair. The private key never leaves the device;
+ * only `publicKeyHex` is sent to the vendor via the frame URL.
+ *
+ * @returns The generated keypair.
+ */
+export declare function generateKeyPair(): X25519KeyPair;
+/**
+ * Decrypt a Check/Auth frame credentials envelope using our X25519 private
+ * key.
+ *
+ * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The parsed credentials and the method that authenticated.
+ * @throws If the envelope is malformed or the IV length is not 12 bytes.
+ */
+export declare function decryptCredentials(rawEnvelope: EncryptedCredentialsEnvelope | string, ourPrivateKey: Uint8Array): DecryptResult;
+//# sourceMappingURL=crypto.d.cts.map

package/dist/crypto.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.cts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,wEAAwE;IACxE,UAAU,EAAE,UAAU,CAAC;IACvB,qCAAqC;IACrC,SAAS,EAAE,UAAU,CAAC;IACtB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,oBAAoB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,aAAa,CAQ/C;AAkID;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,4BAA4B,GAAG,MAAM,EAClD,aAAa,EAAE,UAAU,GACxB,aAAa,CAkBf"}

package/dist/crypto.d.mts

@@ -0,0 +1,83 @@
+/**
+ * Check / Auth frame key exchange and credential decryption.
+ *
+ * The identity vendor's Check and Auth frames return encrypted credentials.
+ * The confirmed protocol is X25519 ECDH + AES-256-GCM (an "ECDH-ES" pattern
+ * signalled by a 12-byte IV):
+ *
+ *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the
+ *      frame as a URL param.
+ *   2. Frame generates its own ephemeral X25519 keypair and encrypts the
+ *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.
+ *   3. Client reverses:
+ *        shared = X25519(ourPrivate, theirEphemeralPublic)
+ *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)
+ *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)
+ *
+ * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and
+ * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.
+ */
+/**
+ * An X25519 keypair used for the Check/Auth frame key exchange.
+ */
+export type X25519KeyPair = {
+    /** Raw 32-byte X25519 private (scalar) key. Never leaves the device. */
+    privateKey: Uint8Array;
+    /** Raw 32-byte X25519 public key. */
+    publicKey: Uint8Array;
+    /** Hex-encoded public key, ready to drop into a Check/Auth frame URL. */
+    publicKeyHex: string;
+};
+/**
+ * The encrypted-credentials envelope returned by the Check/Auth frames. Binary
+ * fields may be hex or base64; the IV field may be named `iv` or `nonce`.
+ */
+export type EncryptedCredentialsEnvelope = {
+    /** Ephemeral public key produced by the frame for this exchange (32 bytes). */
+    ephemeralPublicKey: string;
+    /** Per-message IV. May be provided as `iv` or `nonce`. */
+    iv?: string;
+    nonce?: string;
+    /** Ciphertext (plaintext + 16-byte GCM auth tag). */
+    ciphertext: string;
+    /** Optional explicit encoding hint. Defaults to auto-detect. */
+    encoding?: 'hex' | 'base64';
+};
+/**
+ * Decrypted Check/Auth frame credentials.
+ *
+ * - `accessToken` is the Bearer token for the identity API.
+ * - `clientToken` is the short-lived token consumed by the Auth frame when the
+ *   Check frame returns `connectionRequired`.
+ */
+export type DecryptedCredentials = {
+    accessToken?: string;
+    clientToken?: string;
+    [key: string]: unknown;
+};
+/**
+ * Result of a successful decryption — the credentials plus the `method` that
+ * authenticated.
+ */
+export type DecryptResult = {
+    credentials: DecryptedCredentials;
+    method: string;
+};
+/**
+ * Generate a fresh X25519 keypair. The private key never leaves the device;
+ * only `publicKeyHex` is sent to the vendor via the frame URL.
+ *
+ * @returns The generated keypair.
+ */
+export declare function generateKeyPair(): X25519KeyPair;
+/**
+ * Decrypt a Check/Auth frame credentials envelope using our X25519 private
+ * key.
+ *
+ * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The parsed credentials and the method that authenticated.
+ * @throws If the envelope is malformed or the IV length is not 12 bytes.
+ */
+export declare function decryptCredentials(rawEnvelope: EncryptedCredentialsEnvelope | string, ourPrivateKey: Uint8Array): DecryptResult;
+//# sourceMappingURL=crypto.d.mts.map

package/dist/crypto.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.mts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,wEAAwE;IACxE,UAAU,EAAE,UAAU,CAAC;IACvB,qCAAqC;IACrC,SAAS,EAAE,UAAU,CAAC;IACtB,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG;IACzC,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC7B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,oBAAoB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,aAAa,CAQ/C;AAkID;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,4BAA4B,GAAG,MAAM,EAClD,aAAa,EAAE,UAAU,GACxB,aAAa,CAkBf"}

package/dist/crypto.mjs

@@ -0,0 +1,160 @@
+/**
+ * Check / Auth frame key exchange and credential decryption.
+ *
+ * The identity vendor's Check and Auth frames return encrypted credentials.
+ * The confirmed protocol is X25519 ECDH + AES-256-GCM (an "ECDH-ES" pattern
+ * signalled by a 12-byte IV):
+ *
+ *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the
+ *      frame as a URL param.
+ *   2. Frame generates its own ephemeral X25519 keypair and encrypts the
+ *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.
+ *   3. Client reverses:
+ *        shared = X25519(ourPrivate, theirEphemeralPublic)
+ *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)
+ *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)
+ *
+ * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and
+ * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.
+ */
+import { gcm } from "@noble/ciphers/aes";
+import { x25519 } from "@noble/curves/ed25519";
+import { hkdf } from "@noble/hashes/hkdf";
+import { sha256 } from "@noble/hashes/sha2";
+import { bytesToHex, hexToBytes } from "@noble/hashes/utils";
+import { base64 } from "@scure/base";
+/**
+ * Generate a fresh X25519 keypair. The private key never leaves the device;
+ * only `publicKeyHex` is sent to the vendor via the frame URL.
+ *
+ * @returns The generated keypair.
+ */
+export function generateKeyPair() {
+    const privateKey = x25519.utils.randomSecretKey();
+    const publicKey = x25519.getPublicKey(privateKey);
+    return {
+        privateKey,
+        publicKey,
+        publicKeyHex: bytesToHex(publicKey),
+    };
+}
+/**
+ * Decode a base64 / base64url string to bytes without relying on `atob` or
+ * `Buffer`.
+ *
+ * @param value - The (possibly url-safe, possibly unpadded) base64 string.
+ * @returns The decoded bytes.
+ */
+function base64ToBytes(value) {
+    const normalized = value.replace(/-/gu, '+').replace(/_/gu, '/');
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    return base64.decode(padded);
+}
+/**
+ * Decode a binary envelope field that may be hex or base64.
+ *
+ * @param value - The encoded field.
+ * @param encoding - Optional explicit encoding; auto-detected when omitted.
+ * @returns The decoded bytes.
+ */
+function decodeBinary(value, encoding) {
+    const isHex = encoding === 'hex' ||
+        (encoding === undefined && /^[0-9a-fA-F]+$/u.test(value));
+    if (isHex) {
+        return hexToBytes(value);
+    }
+    return base64ToBytes(value);
+}
+/**
+ * Coerce the `credentials` field into a structured envelope. The frame may
+ * deliver it as an object, a JSON string, or base64(JSON).
+ *
+ * @param input - The raw credentials value.
+ * @returns The normalized envelope.
+ * @throws If the value is not a structured or base64(JSON) envelope, or is
+ * missing required fields.
+ */
+function normalizeEnvelope(input) {
+    let value = input;
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        if (trimmed.startsWith('{')) {
+            try {
+                value = JSON.parse(trimmed);
+            }
+            catch {
+                throw new Error(`credentials looked like JSON but failed to parse (preview: "${trimmed.slice(0, 64)}").`);
+            }
+        }
+        else {
+            let decodedText = null;
+            try {
+                decodedText = new TextDecoder().decode(base64ToBytes(trimmed));
+            }
+            catch {
+                decodedText = null;
+            }
+            const decodedTrimmed = decodedText?.trim();
+            if (decodedTrimmed?.startsWith('{')) {
+                try {
+                    value = JSON.parse(decodedTrimmed);
+                }
+                catch {
+                    throw new Error(`credentials base64-decoded to non-JSON (preview: "${decodedTrimmed.slice(0, 64)}").`);
+                }
+            }
+            else {
+                throw new Error(`credentials is an opaque string, not a structured or base64(JSON) envelope (preview: "${trimmed.slice(0, 64)}").`);
+            }
+        }
+    }
+    const env = value;
+    if (!env.ephemeralPublicKey || !(env.iv ?? env.nonce) || !env.ciphertext) {
+        const keys = value && typeof value === 'object'
+            ? Object.keys(value).join(', ')
+            : typeof value;
+        throw new Error(`credentials envelope missing required fields (ephemeralPublicKey/iv/ciphertext). Got: ${keys}`);
+    }
+    return env;
+}
+/**
+ * X25519 ECDH to AES-256-GCM decryption.
+ *
+ * @param theirPublicKey - The frame's ephemeral public key.
+ * @param iv - The 12-byte GCM IV.
+ * @param ciphertext - The ciphertext including the 16-byte auth tag.
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The decrypted credentials and method.
+ */
+function aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey) {
+    const shared = x25519.getSharedSecret(ourPrivateKey, theirPublicKey);
+    const key = hkdf(sha256, shared, undefined, undefined, 32);
+    const plaintext = gcm(key, iv).decrypt(ciphertext);
+    const text = new TextDecoder().decode(plaintext);
+    return {
+        credentials: JSON.parse(text),
+        method: 'aes-256-gcm/hkdf-sha256',
+    };
+}
+/**
+ * Decrypt a Check/Auth frame credentials envelope using our X25519 private
+ * key.
+ *
+ * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).
+ * @param ourPrivateKey - Our X25519 private key.
+ * @returns The parsed credentials and the method that authenticated.
+ * @throws If the envelope is malformed or the IV length is not 12 bytes.
+ */
+export function decryptCredentials(rawEnvelope, ourPrivateKey) {
+    const envelope = normalizeEnvelope(rawEnvelope);
+    const theirPublicKey = decodeBinary(envelope.ephemeralPublicKey, envelope.encoding);
+    // `normalizeEnvelope` guarantees one of `iv` / `nonce` is present.
+    const ivField = (envelope.iv ?? envelope.nonce);
+    const iv = decodeBinary(ivField, envelope.encoding);
+    const ciphertext = decodeBinary(envelope.ciphertext, envelope.encoding);
+    if (iv.length !== 12) {
+        throw new Error(`Unexpected IV length ${iv.length} (expected 12 for AES-256-GCM).`);
+    }
+    return aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey);
+}
+//# sourceMappingURL=crypto.mjs.map

package/dist/crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.mjs","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,GAAG,EAAE,2BAA2B;AACzC,OAAO,EAAE,MAAM,EAAE,8BAA8B;AAC/C,OAAO,EAAE,IAAI,EAAE,2BAA2B;AAC1C,OAAO,EAAE,MAAM,EAAE,2BAA2B;AAC5C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,4BAA4B;AAC7D,OAAO,EAAE,MAAM,EAAE,oBAAoB;AAoDrC;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO;QACL,UAAU;QACV,SAAS;QACT,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EACvD,GAAG,CACJ,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,QAA2B;IAC9D,MAAM,KAAK,GACT,QAAQ,KAAK,KAAK;QAClB,CAAC,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,KAA4C;IAE5C,IAAI,KAAK,GAAY,KAAK,CAAC;IAE3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,+DAA+D,OAAO,CAAC,KAAK,CAC1E,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,WAAW,GAAkB,IAAI,CAAC;YACtC,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,MAAM,cAAc,GAAG,WAAW,EAAE,IAAI,EAAE,CAAC;YAC3C,IAAI,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CACb,qDAAqD,cAAc,CAAC,KAAK,CACvE,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CACb,yFAAyF,OAAO,CAAC,KAAK,CACpG,CAAC,EACD,EAAE,CACH,KAAK,CACP,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,KAA8C,CAAC;IAC3D,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACzE,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,CAAC,CAAC,OAAO,KAAK,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,yFAAyF,IAAI,EAAE,CAChG,CAAC;IACJ,CAAC;IACD,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,cAA0B,EAC1B,EAAc,EACd,UAAsB,EACtB,aAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAyB;QACrD,MAAM,EAAE,yBAAyB;KAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAkD,EAClD,aAAyB;IAEzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,YAAY,CACjC,QAAQ,CAAC,kBAAkB,EAC3B,QAAQ,CAAC,QAAQ,CAClB,CAAC;IACF,mEAAmE;IACnE,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAW,CAAC;IAC1D,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAExE,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,wBAAwB,EAAE,CAAC,MAAM,iCAAiC,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC","sourcesContent":["/**\n * Check / Auth frame key exchange and credential decryption.\n *\n * The identity vendor's Check and Auth frames return encrypted credentials.\n * The confirmed protocol is X25519 ECDH + AES-256-GCM (an \"ECDH-ES\" pattern\n * signalled by a 12-byte IV):\n *\n *   1. Client generates an X25519 keypair, sends `publicKey` (hex) into the\n *      frame as a URL param.\n *   2. Frame generates its own ephemeral X25519 keypair and encrypts the\n *      credentials, returning `{ ephemeralPublicKey, iv, ciphertext }`.\n *   3. Client reverses:\n *        shared = X25519(ourPrivate, theirEphemeralPublic)\n *        key    = HKDF-SHA256(shared, salt=none, info=none, 32 bytes)\n *        plain  = AES-256-GCM.decrypt(key, iv, ciphertext || 16-byte tag)\n *\n * This module is platform-agnostic: it uses `@noble/*` + `@scure/base` and\n * avoids `Buffer` / `atob` so it runs unchanged on mobile, extension, and web.\n */\n\nimport { gcm } from '@noble/ciphers/aes';\nimport { x25519 } from '@noble/curves/ed25519';\nimport { hkdf } from '@noble/hashes/hkdf';\nimport { sha256 } from '@noble/hashes/sha2';\nimport { bytesToHex, hexToBytes } from '@noble/hashes/utils';\nimport { base64 } from '@scure/base';\n\n/**\n * An X25519 keypair used for the Check/Auth frame key exchange.\n */\nexport type X25519KeyPair = {\n  /** Raw 32-byte X25519 private (scalar) key. Never leaves the device. */\n  privateKey: Uint8Array;\n  /** Raw 32-byte X25519 public key. */\n  publicKey: Uint8Array;\n  /** Hex-encoded public key, ready to drop into a Check/Auth frame URL. */\n  publicKeyHex: string;\n};\n\n/**\n * The encrypted-credentials envelope returned by the Check/Auth frames. Binary\n * fields may be hex or base64; the IV field may be named `iv` or `nonce`.\n */\nexport type EncryptedCredentialsEnvelope = {\n  /** Ephemeral public key produced by the frame for this exchange (32 bytes). */\n  ephemeralPublicKey: string;\n  /** Per-message IV. May be provided as `iv` or `nonce`. */\n  iv?: string;\n  nonce?: string;\n  /** Ciphertext (plaintext + 16-byte GCM auth tag). */\n  ciphertext: string;\n  /** Optional explicit encoding hint. Defaults to auto-detect. */\n  encoding?: 'hex' | 'base64';\n};\n\n/**\n * Decrypted Check/Auth frame credentials.\n *\n * - `accessToken` is the Bearer token for the identity API.\n * - `clientToken` is the short-lived token consumed by the Auth frame when the\n *   Check frame returns `connectionRequired`.\n */\nexport type DecryptedCredentials = {\n  accessToken?: string;\n  clientToken?: string;\n  [key: string]: unknown;\n};\n\n/**\n * Result of a successful decryption — the credentials plus the `method` that\n * authenticated.\n */\nexport type DecryptResult = {\n  credentials: DecryptedCredentials;\n  method: string;\n};\n\n/**\n * Generate a fresh X25519 keypair. The private key never leaves the device;\n * only `publicKeyHex` is sent to the vendor via the frame URL.\n *\n * @returns The generated keypair.\n */\nexport function generateKeyPair(): X25519KeyPair {\n  const privateKey = x25519.utils.randomSecretKey();\n  const publicKey = x25519.getPublicKey(privateKey);\n  return {\n    privateKey,\n    publicKey,\n    publicKeyHex: bytesToHex(publicKey),\n  };\n}\n\n/**\n * Decode a base64 / base64url string to bytes without relying on `atob` or\n * `Buffer`.\n *\n * @param value - The (possibly url-safe, possibly unpadded) base64 string.\n * @returns The decoded bytes.\n */\nfunction base64ToBytes(value: string): Uint8Array {\n  const normalized = value.replace(/-/gu, '+').replace(/_/gu, '/');\n  const padded = normalized.padEnd(\n    normalized.length + ((4 - (normalized.length % 4)) % 4),\n    '=',\n  );\n  return base64.decode(padded);\n}\n\n/**\n * Decode a binary envelope field that may be hex or base64.\n *\n * @param value - The encoded field.\n * @param encoding - Optional explicit encoding; auto-detected when omitted.\n * @returns The decoded bytes.\n */\nfunction decodeBinary(value: string, encoding?: 'hex' | 'base64'): Uint8Array {\n  const isHex =\n    encoding === 'hex' ||\n    (encoding === undefined && /^[0-9a-fA-F]+$/u.test(value));\n  if (isHex) {\n    return hexToBytes(value);\n  }\n  return base64ToBytes(value);\n}\n\n/**\n * Coerce the `credentials` field into a structured envelope. The frame may\n * deliver it as an object, a JSON string, or base64(JSON).\n *\n * @param input - The raw credentials value.\n * @returns The normalized envelope.\n * @throws If the value is not a structured or base64(JSON) envelope, or is\n * missing required fields.\n */\nfunction normalizeEnvelope(\n  input: EncryptedCredentialsEnvelope | string,\n): EncryptedCredentialsEnvelope {\n  let value: unknown = input;\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed.startsWith('{')) {\n      try {\n        value = JSON.parse(trimmed);\n      } catch {\n        throw new Error(\n          `credentials looked like JSON but failed to parse (preview: \"${trimmed.slice(\n            0,\n            64,\n          )}\").`,\n        );\n      }\n    } else {\n      let decodedText: string | null = null;\n      try {\n        decodedText = new TextDecoder().decode(base64ToBytes(trimmed));\n      } catch {\n        decodedText = null;\n      }\n      const decodedTrimmed = decodedText?.trim();\n      if (decodedTrimmed?.startsWith('{')) {\n        try {\n          value = JSON.parse(decodedTrimmed);\n        } catch {\n          throw new Error(\n            `credentials base64-decoded to non-JSON (preview: \"${decodedTrimmed.slice(\n              0,\n              64,\n            )}\").`,\n          );\n        }\n      } else {\n        throw new Error(\n          `credentials is an opaque string, not a structured or base64(JSON) envelope (preview: \"${trimmed.slice(\n            0,\n            64,\n          )}\").`,\n        );\n      }\n    }\n  }\n\n  const env = value as Partial<EncryptedCredentialsEnvelope>;\n  if (!env.ephemeralPublicKey || !(env.iv ?? env.nonce) || !env.ciphertext) {\n    const keys =\n      value && typeof value === 'object'\n        ? Object.keys(value).join(', ')\n        : typeof value;\n    throw new Error(\n      `credentials envelope missing required fields (ephemeralPublicKey/iv/ciphertext). Got: ${keys}`,\n    );\n  }\n  return env as EncryptedCredentialsEnvelope;\n}\n\n/**\n * X25519 ECDH to AES-256-GCM decryption.\n *\n * @param theirPublicKey - The frame's ephemeral public key.\n * @param iv - The 12-byte GCM IV.\n * @param ciphertext - The ciphertext including the 16-byte auth tag.\n * @param ourPrivateKey - Our X25519 private key.\n * @returns The decrypted credentials and method.\n */\nfunction aesGcmDecrypt(\n  theirPublicKey: Uint8Array,\n  iv: Uint8Array,\n  ciphertext: Uint8Array,\n  ourPrivateKey: Uint8Array,\n): DecryptResult {\n  const shared = x25519.getSharedSecret(ourPrivateKey, theirPublicKey);\n  const key = hkdf(sha256, shared, undefined, undefined, 32);\n  const plaintext = gcm(key, iv).decrypt(ciphertext);\n  const text = new TextDecoder().decode(plaintext);\n  return {\n    credentials: JSON.parse(text) as DecryptedCredentials,\n    method: 'aes-256-gcm/hkdf-sha256',\n  };\n}\n\n/**\n * Decrypt a Check/Auth frame credentials envelope using our X25519 private\n * key.\n *\n * @param rawEnvelope - The raw envelope (object, JSON string, or base64(JSON)).\n * @param ourPrivateKey - Our X25519 private key.\n * @returns The parsed credentials and the method that authenticated.\n * @throws If the envelope is malformed or the IV length is not 12 bytes.\n */\nexport function decryptCredentials(\n  rawEnvelope: EncryptedCredentialsEnvelope | string,\n  ourPrivateKey: Uint8Array,\n): DecryptResult {\n  const envelope = normalizeEnvelope(rawEnvelope);\n  const theirPublicKey = decodeBinary(\n    envelope.ephemeralPublicKey,\n    envelope.encoding,\n  );\n  // `normalizeEnvelope` guarantees one of `iv` / `nonce` is present.\n  const ivField = (envelope.iv ?? envelope.nonce) as string;\n  const iv = decodeBinary(ivField, envelope.encoding);\n  const ciphertext = decodeBinary(envelope.ciphertext, envelope.encoding);\n\n  if (iv.length !== 12) {\n    throw new Error(\n      `Unexpected IV length ${iv.length} (expected 12 for AES-256-GCM).`,\n    );\n  }\n\n  return aesGcmDecrypt(theirPublicKey, iv, ciphertext, ourPrivateKey);\n}\n"]}

package/dist/index.cjs

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateKeyPair = exports.decryptCredentials = exports.ALPHA2_TO_ALPHA3 = exports.alpha2ToAlpha3 = exports.selectKycSumSub = exports.selectKycPhase = exports.selectIsKycRequiredForProduct = exports.serviceName = exports.KycService = exports.controllerName = exports.getDefaultKycControllerState = exports.KycController = void 0;
+var KycController_1 = require("./KycController.cjs");
+Object.defineProperty(exports, "KycController", { enumerable: true, get: function () { return KycController_1.KycController; } });
+Object.defineProperty(exports, "getDefaultKycControllerState", { enumerable: true, get: function () { return KycController_1.getDefaultKycControllerState; } });
+Object.defineProperty(exports, "controllerName", { enumerable: true, get: function () { return KycController_1.controllerName; } });
+var KycService_1 = require("./KycService.cjs");
+Object.defineProperty(exports, "KycService", { enumerable: true, get: function () { return KycService_1.KycService; } });
+Object.defineProperty(exports, "serviceName", { enumerable: true, get: function () { return KycService_1.serviceName; } });
+var selectors_1 = require("./selectors.cjs");
+Object.defineProperty(exports, "selectIsKycRequiredForProduct", { enumerable: true, get: function () { return selectors_1.selectIsKycRequiredForProduct; } });
+Object.defineProperty(exports, "selectKycPhase", { enumerable: true, get: function () { return selectors_1.selectKycPhase; } });
+Object.defineProperty(exports, "selectKycSumSub", { enumerable: true, get: function () { return selectors_1.selectKycSumSub; } });
+var countryCodes_1 = require("./countryCodes.cjs");
+Object.defineProperty(exports, "alpha2ToAlpha3", { enumerable: true, get: function () { return countryCodes_1.alpha2ToAlpha3; } });
+Object.defineProperty(exports, "ALPHA2_TO_ALPHA3", { enumerable: true, get: function () { return countryCodes_1.ALPHA2_TO_ALPHA3; } });
+var crypto_1 = require("./crypto.cjs");
+Object.defineProperty(exports, "decryptCredentials", { enumerable: true, get: function () { return crypto_1.decryptCredentials; } });
+Object.defineProperty(exports, "generateKeyPair", { enumerable: true, get: function () { return crypto_1.generateKeyPair; } });
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,qDAIyB;AAHvB,8GAAA,aAAa,OAAA;AACb,6HAAA,4BAA4B,OAAA;AAC5B,+GAAA,cAAc,OAAA;AA0BhB,+CAAuD;AAA9C,wGAAA,UAAU,OAAA;AAAE,yGAAA,WAAW,OAAA;AAuBhC,6CAIqB;AAHnB,0HAAA,6BAA6B,OAAA;AAC7B,2GAAA,cAAc,OAAA;AACd,4GAAA,eAAe,OAAA;AAGjB,mDAAkE;AAAzD,8GAAA,cAAc,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AACzC,uCAA+D;AAAtD,4GAAA,kBAAkB,OAAA;AAAE,yGAAA,eAAe,OAAA","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  controllerName,\n} from './KycController';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n} from './KycController';\nexport type {\n  KycControllerAcceptTermsAndStartSessionAction,\n  KycControllerBuildAuthFrameUrlAction,\n  KycControllerBuildCheckFrameUrlAction,\n  KycControllerBuildResetFrameUrlAction,\n  KycControllerCheckKycRequiredAction,\n  KycControllerClearSavedTermsAction,\n  KycControllerGetKycStatusAction,\n  KycControllerHandleFrameMessageAction,\n  KycControllerInitializeAction,\n  KycControllerLoadDisclaimersAction,\n  KycControllerResetAction,\n  KycControllerStartSumSubAction,\n} from './KycController-method-action-types';\n\nexport { KycService, serviceName } from './KycService';\nexport type {\n  CheckKycRequiredParams,\n  CreateSessionParams,\n  CreateUkycSessionParams,\n  KycServiceActions,\n  KycServiceEnvironment,\n  KycServiceEvents,\n  KycServiceMessenger,\n  KycServiceOptions,\n  SubmitWrappedKeyParams,\n  UkycSessionResponse,\n  WrappedKeyResponse,\n} from './KycService';\nexport type {\n  KycServiceCheckKycRequiredAction,\n  KycServiceCreateSessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchDisclaimersAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceSubmitWrappedKeyAction,\n} from './KycService-method-action-types';\n\nexport {\n  selectIsKycRequiredForProduct,\n  selectKycPhase,\n  selectKycSumSub,\n} from './selectors';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes';\nexport { decryptCredentials, generateKeyPair } from './crypto';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto';\n\nexport type {\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n  KycVendor,\n} from './types';\n"]}

package/dist/index.d.cts

@@ -0,0 +1,12 @@
+export { KycController, getDefaultKycControllerState, controllerName, } from "./KycController.cjs";
+export type { KycControllerActions, KycControllerEvents, KycControllerGetStateAction, KycControllerMessenger, KycControllerOptions, KycControllerState, KycControllerStateChangeEvent, } from "./KycController.cjs";
+export type { KycControllerAcceptTermsAndStartSessionAction, KycControllerBuildAuthFrameUrlAction, KycControllerBuildCheckFrameUrlAction, KycControllerBuildResetFrameUrlAction, KycControllerCheckKycRequiredAction, KycControllerClearSavedTermsAction, KycControllerGetKycStatusAction, KycControllerHandleFrameMessageAction, KycControllerInitializeAction, KycControllerLoadDisclaimersAction, KycControllerResetAction, KycControllerStartSumSubAction, } from "./KycController-method-action-types.cjs";
+export { KycService, serviceName } from "./KycService.cjs";
+export type { CheckKycRequiredParams, CreateSessionParams, CreateUkycSessionParams, KycServiceActions, KycServiceEnvironment, KycServiceEvents, KycServiceMessenger, KycServiceOptions, SubmitWrappedKeyParams, UkycSessionResponse, WrappedKeyResponse, } from "./KycService.cjs";
+export type { KycServiceCheckKycRequiredAction, KycServiceCreateSessionAction, KycServiceCreateUkycSessionAction, KycServiceFetchDisclaimersAction, KycServiceGetGeoCountryAction, KycServiceSubmitWrappedKeyAction, } from "./KycService-method-action-types.cjs";
+export { selectIsKycRequiredForProduct, selectKycPhase, selectKycSumSub, } from "./selectors.cjs";
+export { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from "./countryCodes.cjs";
+export { decryptCredentials, generateKeyPair } from "./crypto.cjs";
+export type { DecryptedCredentials, DecryptResult, EncryptedCredentialsEnvelope, X25519KeyPair, } from "./crypto.cjs";
+export type { KycDisclaimer, KycPhase, KycProduct, KycSumSubLaunchParams, KycSumSubLauncher, KycSumSubStatus, KycVendor, } from "./types.cjs";
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,cAAc,GACf,4BAAwB;AACzB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,4BAAwB;AACzB,YAAY,EACV,6CAA6C,EAC7C,oCAAoC,EACpC,qCAAqC,EACrC,qCAAqC,EACrC,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,EACxB,8BAA8B,GAC/B,gDAA4C;AAE7C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAqB;AACvD,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,GACnB,yBAAqB;AACtB,YAAY,EACV,gCAAgC,EAChC,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,GACjC,6CAAyC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,eAAe,GAChB,wBAAoB;AAErB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,2BAAuB;AAClE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAiB;AAC/D,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,4BAA4B,EAC5B,aAAa,GACd,qBAAiB;AAElB,YAAY,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,SAAS,GACV,oBAAgB"}

package/dist/index.d.mts

@@ -0,0 +1,12 @@
+export { KycController, getDefaultKycControllerState, controllerName, } from "./KycController.mjs";
+export type { KycControllerActions, KycControllerEvents, KycControllerGetStateAction, KycControllerMessenger, KycControllerOptions, KycControllerState, KycControllerStateChangeEvent, } from "./KycController.mjs";
+export type { KycControllerAcceptTermsAndStartSessionAction, KycControllerBuildAuthFrameUrlAction, KycControllerBuildCheckFrameUrlAction, KycControllerBuildResetFrameUrlAction, KycControllerCheckKycRequiredAction, KycControllerClearSavedTermsAction, KycControllerGetKycStatusAction, KycControllerHandleFrameMessageAction, KycControllerInitializeAction, KycControllerLoadDisclaimersAction, KycControllerResetAction, KycControllerStartSumSubAction, } from "./KycController-method-action-types.mjs";
+export { KycService, serviceName } from "./KycService.mjs";
+export type { CheckKycRequiredParams, CreateSessionParams, CreateUkycSessionParams, KycServiceActions, KycServiceEnvironment, KycServiceEvents, KycServiceMessenger, KycServiceOptions, SubmitWrappedKeyParams, UkycSessionResponse, WrappedKeyResponse, } from "./KycService.mjs";
+export type { KycServiceCheckKycRequiredAction, KycServiceCreateSessionAction, KycServiceCreateUkycSessionAction, KycServiceFetchDisclaimersAction, KycServiceGetGeoCountryAction, KycServiceSubmitWrappedKeyAction, } from "./KycService-method-action-types.mjs";
+export { selectIsKycRequiredForProduct, selectKycPhase, selectKycSumSub, } from "./selectors.mjs";
+export { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from "./countryCodes.mjs";
+export { decryptCredentials, generateKeyPair } from "./crypto.mjs";
+export type { DecryptedCredentials, DecryptResult, EncryptedCredentialsEnvelope, X25519KeyPair, } from "./crypto.mjs";
+export type { KycDisclaimer, KycPhase, KycProduct, KycSumSubLaunchParams, KycSumSubLauncher, KycSumSubStatus, KycVendor, } from "./types.mjs";
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,cAAc,GACf,4BAAwB;AACzB,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,GAC9B,4BAAwB;AACzB,YAAY,EACV,6CAA6C,EAC7C,oCAAoC,EACpC,qCAAqC,EACrC,qCAAqC,EACrC,mCAAmC,EACnC,kCAAkC,EAClC,+BAA+B,EAC/B,qCAAqC,EACrC,6BAA6B,EAC7B,kCAAkC,EAClC,wBAAwB,EACxB,8BAA8B,GAC/B,gDAA4C;AAE7C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAqB;AACvD,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,GACnB,yBAAqB;AACtB,YAAY,EACV,gCAAgC,EAChC,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,GACjC,6CAAyC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,eAAe,GAChB,wBAAoB;AAErB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,2BAAuB;AAClE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAiB;AAC/D,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,4BAA4B,EAC5B,aAAa,GACd,qBAAiB;AAElB,YAAY,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,SAAS,GACV,oBAAgB"}

package/dist/index.mjs

@@ -0,0 +1,6 @@
+export { KycController, getDefaultKycControllerState, controllerName } from "./KycController.mjs";
+export { KycService, serviceName } from "./KycService.mjs";
+export { selectIsKycRequiredForProduct, selectKycPhase, selectKycSumSub } from "./selectors.mjs";
+export { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from "./countryCodes.mjs";
+export { decryptCredentials, generateKeyPair } from "./crypto.mjs";
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,cAAc,EACf,4BAAwB;AAyBzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAqB;AAuBvD,OAAO,EACL,6BAA6B,EAC7B,cAAc,EACd,eAAe,EAChB,wBAAoB;AAErB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,2BAAuB;AAClE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAiB","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  controllerName,\n} from './KycController';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n} from './KycController';\nexport type {\n  KycControllerAcceptTermsAndStartSessionAction,\n  KycControllerBuildAuthFrameUrlAction,\n  KycControllerBuildCheckFrameUrlAction,\n  KycControllerBuildResetFrameUrlAction,\n  KycControllerCheckKycRequiredAction,\n  KycControllerClearSavedTermsAction,\n  KycControllerGetKycStatusAction,\n  KycControllerHandleFrameMessageAction,\n  KycControllerInitializeAction,\n  KycControllerLoadDisclaimersAction,\n  KycControllerResetAction,\n  KycControllerStartSumSubAction,\n} from './KycController-method-action-types';\n\nexport { KycService, serviceName } from './KycService';\nexport type {\n  CheckKycRequiredParams,\n  CreateSessionParams,\n  CreateUkycSessionParams,\n  KycServiceActions,\n  KycServiceEnvironment,\n  KycServiceEvents,\n  KycServiceMessenger,\n  KycServiceOptions,\n  SubmitWrappedKeyParams,\n  UkycSessionResponse,\n  WrappedKeyResponse,\n} from './KycService';\nexport type {\n  KycServiceCheckKycRequiredAction,\n  KycServiceCreateSessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchDisclaimersAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceSubmitWrappedKeyAction,\n} from './KycService-method-action-types';\n\nexport {\n  selectIsKycRequiredForProduct,\n  selectKycPhase,\n  selectKycSumSub,\n} from './selectors';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes';\nexport { decryptCredentials, generateKeyPair } from './crypto';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto';\n\nexport type {\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n  KycVendor,\n} from './types';\n"]}