@metamask-previews/kyc-controller 0.0.0-preview-11d78534e

package/dist/KycController.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycController.cjs","sourceRoot":"","sources":["../src/KycController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,+DAA2D;AAI3D,yCAA+D;AAY/D,kBAAkB;AAEL,QAAA,cAAc,GAAG,eAAe,CAAC;AAE9C,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,qEAAqE;AACrE,6EAA6E;AAC7E,+CAA+C;AAC/C,MAAM,uBAAuB,GAAG,WAAW,CAAC;AA6D5C,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE;QACL,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,eAAe,EAAE;QACf,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,qBAAqB,EAAE;QACrB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,gBAAgB,EAAE;QAChB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,UAAU,EAAE;QACV,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,YAAY,EAAE;QACZ,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,iBAAiB,EAAE;QACjB,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,oBAAoB,EAAE;QACpB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;KACf;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,MAAM,EAAE;QACN,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;CAC0C,CAAC;AAE9C;;;;GAIG;AACH,SAAgB,4BAA4B;IAC1C,OAAO;QACL,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,IAAI;QACrB,qBAAqB,EAAE,EAAE;QACzB,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,IAAI;QACtB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,EAAE;QACxB,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE;YACN,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,oBAAoB,EAAE,IAAI;SAC3B;KACF,CAAC;AACJ,CAAC;AAxBD,oEAwBC;AAED,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,YAAY;IACZ,iBAAiB;IACjB,4BAA4B;IAC5B,iBAAiB;IACjB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;IACd,aAAa;IACb,OAAO;CACC,CAAC;AA4DX,gCAAgC;AAEhC;;;;;;GAMG;AACH,MAAa,aAAc,SAAQ,gCAIlC;IA2BC;;;;;;;OAOG;IACH,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAwB;QACpE,KAAK,CAAC;YACJ,SAAS;YACT,QAAQ,EAAE,qBAAqB;YAC/B,IAAI,EAAE,sBAAc;YACpB,KAAK,EAAE,EAAE,GAAG,4BAA4B,EAAE,EAAE,GAAG,KAAK,EAAE;SACvD,CAAC,CAAC;;QAxCI,gDAAmC;QAE5C,6EAA6E;QACpE,yCAAwB;QAEjC,kDAAkD;QAClD,yCAAkC,IAAI,EAAC;QAEvC;;;;WAIG;QACH,oCAAc,CAAC,EAAC;QAEhB;;;;;;;;WAQG;QACH,8CAAwB,KAAK,EAAC;QAkB5B,uBAAA,IAAI,iCAAmB,cAAc,MAAA,CAAC;QACtC,uBAAA,IAAI,0BAAY,IAAA,wBAAe,GAAE,MAAA,CAAC;QAElC,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,UAAU,CAAC,MAGhB;QACC,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,CAAC;YACD,KAAK,CAAC,aAAa,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACtE,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC;QAE9C,IAAI,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,uBAAA,IAAI,8DAAe,MAAnB,IAAI,CAAiB,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,MAA6B;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAM,EAAE,OAAO;gBACf,IAAI,CAAC,KAAK,CAAC,UAAU;gBACrB,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;oBAC1B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,6BAA6B,EAC7B,EAAE,OAAO,EAAE,CACZ,CAAC;YACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;gBAChC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,gBAAgB,GAAG,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,0BAA0B,CAAC,MAGhC;QACC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAC9C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAC9B,CAAC;QACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,CAAC;YACD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;YACxC,KAAK,CAAC,qBAAqB,GAAG,aAAa,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,8DAAe,MAAnB,IAAI,CAAiB,CAAC;IAC9B,CAAC;IAyDD;;OAEG;IACH,eAAe;QACb,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAgBD;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAExB;QACC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAmC,CAAC;QAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;QAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YACf,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,iBAAiB,GAAG,UAAU,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,WAA+B,CAAC;QACpC,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,2BAAkB,EACxC,aAAa,EACb,uBAAA,IAAI,8BAAS,CAAC,UAAU,CACzB,CAAC;gBACF,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;gBACtC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,uBAAA,IAAI,kEAAmB,MAAvB,IAAI,EAAoB,MAAM,EAAE,WAAW,CAAC,CAAC;YACnD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IA8HD;;;;OAIG;IACH,kBAAkB;QAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,mBAAmB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,8BAAS,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,IAAI,CAAC,uBAAA,IAAI,sCAAiB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,uBAAA,IAAI,sCAAiB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,8BAAS,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,QAAQ,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAGtB;QACC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,uDAAuD,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,yCAAyC,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;QAEpC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,wBAAwB,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC/C,6BAA6B,EAC7B,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CACtE,CAAC;YACF,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;gBACzD,KAAK,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,qBAAqB,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,MAA+B;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CAAC,MAGjB;QACC,IAAI,CAAC,uBAAA,IAAI,qCAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,8CAA8C,CAAC;YAC7D,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,wEAAwE;QACxE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;QAEpC,IAAI,CAAC;YACH,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC;gBACxC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,cAAc,CAAC;YAChC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACnD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBACxD,QAAQ;gBACR,cAAc,EAAE;oBACd,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;oBAC1C,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;iBAC5C;aACF,CAAC,CAAC;YACL,qEAAqE;YACrE,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,QAAQ,GAAG;gBACf,SAAS;gBACT,cAAc,EAAE,iBAAiB;gBACjC,aAAa;gBACb,QAAQ;aACT,CAAC;YAEF,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YACrC,CAAC,CAAC,CAAC;YAEH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxD,6BAA6B,EAC7B,QAAQ,CACT,CAAC;YAEF,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;gBAClC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;YAC3D,CAAC,CAAC,CAAC;YAEH,0EAA0E;YAC1E,iEAAiE;YACjE,yEAAyE;YACzE,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAE9B,MAAM,MAAM,GAAG,MAAM,uBAAA,IAAI,qCAAgB,CAAC,MAAM,CAAC;gBAC/C,oBAAoB;gBACpB,iBAAiB,EAAE,KAAK,IAAI,EAAE;oBAC5B,qEAAqE;oBACrE,mEAAmE;oBACnE,0CAA0C;oBAC1C,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;wBACpC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,6BAA6B,EAC7B,QAAQ,CACT,CAAC;oBACF,OAAO,SAAS,CAAC,oBAAoB,CAAC;gBACxC,CAAC;gBACD,cAAc,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;wBACrC,iBAAiB,GAAG,IAAI,CAAC;oBAC3B,CAAC;oBACD,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;wBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM;4BACjB,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;oBACjE,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;gBAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK;aAC9B,CAAC,CAAC;YAEH,oEAAoE;YACpE,kEAAkE;YAClE,kEAAkE;YAClE,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAChE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAc,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,uBAAA,IAAI,kCAAoB,IAAI,MAAA,CAAC;QAC7B,iEAAiE;QACjE,uHAAoB,CAAC,MAAA,CAAC;QACtB,4EAA4E;QAC5E,oEAAoE;QACpE,uDAAuD;QACvD,uBAAA,IAAI,uCAAyB,KAAK,MAAA,CAAC;QACnC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC;YACvB,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC9B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAC1B,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;YACzB,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC/B,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,GAAG;gBACb,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CAuDF;AAjwBD,sCAiwBC;;AAtlBC;;GAEG;AACH,KAAK;IACH,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,qCAAqC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,gDAAgD,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,sEAAsE;IACtE,WAAW;IACX,uBAAA,IAAI,kCAAoB,IAAI,MAAA,CAAC;IAC7B,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,KAAK,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAC5C,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAChD,0BAA0B,EAC1B,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,CACjE,CAAC;QACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;YAClC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;YACtB,KAAK,CAAC,aAAa,GAAG,mCAAmC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;YAChC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,KAAK,GAAG,4BAA4B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,aAAa;gBACjB,0DAA0D,CAAC;YAC7D,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC,iFAoBmB,KAAyB;IAC3C,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC;AACnC,CAAC;AA0ED;;;;;;GAMG;AACH,KAAK,4CACH,MAAsD,EACtD,WAAoB,EACpB,WAAoB;IAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;QACvC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,0CAA0C,CAAC;QACnE,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,4EAA6B,MAAjC,IAAI,CAA+B,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,IAAI,WAAW,EAAE,CAAC;QACnD,uBAAA,IAAI,kCAAoB,WAAW,MAAA,CAAC;QACpC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,8CAA8C,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,uBAAA,IAAI,yEAA0B,MAA9B,IAAI,CAA4B,CAAC;QACjC,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,gCAAgC,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,2CACH,MAAsD,EACtD,WAAoB;IAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;QACvC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,kCAAkC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,4EAA6B,MAAjC,IAAI,CAA+B,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,uBAAA,IAAI,yEAA0B,MAA9B,IAAI,CAA4B,CAAC;QACjC,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,+BAA+B,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,0BAA0B;IAC1B,IAAI,uBAAA,IAAI,2CAAsB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,uCAAyB,IAAI,MAAA,CAAC;IAElC,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,oEAAoE;YACpE,oEAAoE;QACtE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;YACpC,uBAAA,IAAI,uCAAyB,KAAK,MAAA,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;IAMC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACtB,KAAK,CAAC,aAAa;YACjB,yDAAyD,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,2EA4RC,UAAkB,EAClB,OAA4C;IAE5C,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC,mEAiBY,OAA4C;IACvD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,OAAO,CAAC,KAAsC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,qDAOK,OAAe;IACnB,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACtB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { Json } from '@metamask/utils';\n\nimport { decryptCredentials, generateKeyPair } from './crypto';\nimport type { EncryptedCredentialsEnvelope, X25519KeyPair } from './crypto';\nimport type { KycControllerMethodActions } from './KycController-method-action-types';\nimport type { KycServiceMethodActions } from './KycService-method-action-types';\nimport type {\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n} from './types';\n\n// === GENERAL ===\n\nexport const controllerName = 'KycController';\n\nconst FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';\nconst CHANNEL_CHECK = 'ch_1';\nconst CHANNEL_AUTH = 'ch_2';\nconst CHANNEL_RESET = 'ch_reset';\n\n// Placeholder credentials for the SumSub sub-flow. These are demo values that\n// must be replaced with real UKYC-issued material before production use.\nconst MOCK_JWT_TOKEN = 'mock-jwt-token';\n\n// The SumSub SDK status that signals the applicant finished the flow\n// successfully. Any other resolution (abandonment, failure, or a non-success\n// outcome) must not be recorded as `complete`.\nconst SUMSUB_COMPLETED_STATUS = 'Completed';\n\n// === STATE ===\n\n/**\n * Describes the shape of the state object for {@link KycController}.\n */\nexport type KycControllerState = {\n  /** Current phase of the identity flow. */\n  phase: KycPhase;\n  /** Human-readable status message for the current phase. */\n  statusMessage: string;\n  /** The current error message, or `null`. */\n  error: string | null;\n\n  /** Email associated with the session (sourced from the account). */\n  email: string | null;\n\n  /** ISO-8601 timestamp of the customer's terms acceptance (persisted). */\n  termsAcceptedAt: string | null;\n  /** IDs of the disclaimers the customer accepted (persisted). */\n  acceptedDisclaimerIds: string[];\n\n  /** Disclaimers fetched for the current country. */\n  disclaimers: KycDisclaimer[];\n  /** Error encountered while loading disclaimers, or `null`. */\n  disclaimersError: string | null;\n\n  /** Resolved ISO 3166-1 alpha-3 country code. */\n  geoCountry: string | null;\n\n  /** Vendor session token (not persisted, not logged). */\n  sessionToken: string | null;\n  /** Vendor access token (not persisted, not logged). */\n  accessToken: string | null;\n  /** Vendor customer id, used for the SumSub hand-off. */\n  moonpayCustomerId: string | null;\n\n  /**\n   * The product the current flow is running for. Captured at `initialize`\n   * (or `acceptTermsAndStartSession`) and used to automatically run the\n   * KYC-required check once authentication completes. `null` outside a\n   * product-scoped flow (in which case the flow stops at `form` and the\n   * consumer drives the check manually).\n   */\n  activeProduct: KycProduct | null;\n\n  /** Cached \"is KYC required\" result per product (persisted). */\n  kycRequiredByProduct: Partial<Record<KycProduct, boolean>>;\n  /** ISO-8601 timestamp of the last KYC-required check (persisted). */\n  lastCheckedAt: string | null;\n\n  /** SumSub document-verification sub-flow state. */\n  sumsub: {\n    status: KycSumSubStatus;\n    result: Json | null;\n    sessionId: string | null;\n    applicantAccessToken: string | null;\n  };\n};\n\nconst kycControllerMetadata = {\n  phase: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  statusMessage: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  error: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  email: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  termsAcceptedAt: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  acceptedDisclaimerIds: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  disclaimers: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: true,\n  },\n  disclaimersError: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  geoCountry: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  sessionToken: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  accessToken: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  moonpayCustomerId: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  activeProduct: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  kycRequiredByProduct: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: true,\n  },\n  lastCheckedAt: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  sumsub: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: true,\n  },\n} satisfies StateMetadata<KycControllerState>;\n\n/**\n * Constructs the default {@link KycController} state.\n *\n * @returns The default state.\n */\nexport function getDefaultKycControllerState(): KycControllerState {\n  return {\n    phase: 'idle',\n    statusMessage: '',\n    error: null,\n    email: null,\n    termsAcceptedAt: null,\n    acceptedDisclaimerIds: [],\n    disclaimers: [],\n    disclaimersError: null,\n    geoCountry: null,\n    sessionToken: null,\n    accessToken: null,\n    moonpayCustomerId: null,\n    activeProduct: null,\n    kycRequiredByProduct: {},\n    lastCheckedAt: null,\n    sumsub: {\n      status: 'idle',\n      result: null,\n      sessionId: null,\n      applicantAccessToken: null,\n    },\n  };\n}\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'initialize',\n  'loadDisclaimers',\n  'acceptTermsAndStartSession',\n  'clearSavedTerms',\n  'handleFrameMessage',\n  'buildCheckFrameUrl',\n  'buildAuthFrameUrl',\n  'buildResetFrameUrl',\n  'checkKycRequired',\n  'getKycStatus',\n  'startSumSub',\n  'reset',\n] as const;\n\nexport type KycControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  KycControllerState\n>;\n\nexport type KycControllerActions =\n  | KycControllerGetStateAction\n  | KycControllerMethodActions;\n\ntype AllowedActions = KycServiceMethodActions;\n\nexport type KycControllerStateChangeEvent = ControllerStateChangeEvent<\n  typeof controllerName,\n  KycControllerState\n>;\n\nexport type KycControllerEvents = KycControllerStateChangeEvent;\n\ntype AllowedEvents = never;\n\nexport type KycControllerMessenger = Messenger<\n  typeof controllerName,\n  KycControllerActions | AllowedActions,\n  KycControllerEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycController}.\n */\nexport type KycControllerOptions = {\n  messenger: KycControllerMessenger;\n  state?: Partial<KycControllerState>;\n  /**\n   * Platform adapter that presents the SumSub SDK. Injected by each client so\n   * the controller stays platform-agnostic.\n   */\n  sumsubLauncher: KycSumSubLauncher;\n};\n\n/**\n * The shape of a message posted by a Check/Auth frame.\n */\ntype FrameMessage = {\n  meta?: { channelId?: string };\n  kind?: string;\n  payload?: {\n    status?:\n      | 'active'\n      | 'connectionRequired'\n      | 'termsAcceptanceRequired'\n      | 'pending'\n      | 'unavailable'\n      | 'failed';\n    credentials?: EncryptedCredentialsEnvelope | string;\n    customer?: { id?: string };\n  };\n};\n\n// === CONTROLLER DEFINITION ===\n\n/**\n * `KycController` orchestrates the vendor-backed KYC / identity-verification\n * flow (MoonPay identity + SumSub documents) behind a vendor-neutral, per\n * product surface used by ramps and card. It owns all state, HTTP\n * orchestration (via `KycService`), crypto, and the frame message protocol;\n * platform-specific presentation (WebView/iframe, SumSub SDK) is injected.\n */\nexport class KycController extends BaseController<\n  typeof controllerName,\n  KycControllerState,\n  KycControllerMessenger\n> {\n  readonly #sumsubLauncher: KycSumSubLauncher;\n\n  /** Ephemeral X25519 keypair for the frame key exchange (never persisted). */\n  readonly #keypair: X25519KeyPair;\n\n  /** Auth-frame client token, kept out of state. */\n  #authClientToken: string | null = null;\n\n  /**\n   * Monotonic flow generation. Incremented by {@link reset} so in-flight async\n   * work (e.g. the KYC-required check) can detect that it was superseded and\n   * avoid writing stale results onto a reset controller.\n   */\n  #generation = 0;\n\n  /**\n   * Guards the automatic post-authentication continuation. The Check/Auth\n   * frames can post more than one `complete` message (duplicate or late), each\n   * of which resolves to an `active` outcome with an access token. Without this\n   * flag, every such message would re-enter {@link #continueAfterAuthentication}\n   * and run the KYC-required check / SumSub sub-flow again while a prior run is\n   * still in flight. Set for the duration of a continuation and cleared by\n   * {@link reset} so a fresh flow can continue again.\n   */\n  #continuationInFlight = false;\n\n  /**\n   * Constructs a new {@link KycController}.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this controller.\n   * @param options.state - Partial initial state; merged over defaults.\n   * @param options.sumsubLauncher - The platform SumSub launcher adapter.\n   */\n  constructor({ messenger, state, sumsubLauncher }: KycControllerOptions) {\n    super({\n      messenger,\n      metadata: kycControllerMetadata,\n      name: controllerName,\n      state: { ...getDefaultKycControllerState(), ...state },\n    });\n\n    this.#sumsubLauncher = sumsubLauncher;\n    this.#keypair = generateKeyPair();\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves persisted terms + geolocation, and auto-creates a session when\n   * terms are already accepted and an email is available.\n   *\n   * @param params - Optional parameters.\n   * @param params.email - The account email to associate with the session.\n   * @param params.product - The consuming feature the flow runs for. When\n   * provided, the controller automatically runs the KYC-required check once\n   * authentication completes (and chains into document verification when KYC\n   * is required). When omitted, the flow stops at `form` and the consumer must\n   * call `checkKycRequired` manually.\n   */\n  async initialize(params?: {\n    email?: string;\n    product?: KycProduct;\n  }): Promise<void> {\n    // `initialize` starts a fresh flow, so `activeProduct` is always reset to\n    // this call's product (or `null`). Otherwise a prior run's product could\n    // linger and cause `#continueAfterAuthentication` to auto-run the check /\n    // sub-flow when the caller intended the manual (product-less) flow.\n    this.#applyUpdate((state) => {\n      if (params?.email) {\n        state.email = params.email;\n      }\n      state.activeProduct = params?.product ?? null;\n    });\n\n    // Resolve country for display; non-blocking.\n    try {\n      const country = await this.messenger.call('KycService:getGeoCountry');\n      this.#applyUpdate((state) => {\n        state.geoCountry = country;\n      });\n    } catch {\n      // Ignore; disclaimers loading will surface a country error if needed.\n    }\n\n    const hasTerms =\n      Boolean(this.state.termsAcceptedAt) &&\n      this.state.acceptedDisclaimerIds.length > 0;\n\n    if (hasTerms && this.state.email) {\n      await this.#createSession();\n      return;\n    }\n\n    this.#applyUpdate((state) => {\n      state.phase = 'terms';\n    });\n    await this.loadDisclaimers();\n  }\n\n  /**\n   * Loads the disclaimers for the resolved (or provided) country.\n   *\n   * @param params - Optional parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code override.\n   */\n  async loadDisclaimers(params?: { country?: string }): Promise<void> {\n    try {\n      const country =\n        params?.country ??\n        this.state.geoCountry ??\n        (await this.messenger.call('KycService:getGeoCountry'));\n      if (country !== this.state.geoCountry) {\n        this.#applyUpdate((state) => {\n          state.geoCountry = country;\n        });\n      }\n      const disclaimers = await this.messenger.call(\n        'KycService:fetchDisclaimers',\n        { country },\n      );\n      this.#applyUpdate((state) => {\n        state.disclaimers = disclaimers;\n        state.disclaimersError = null;\n      });\n    } catch (error) {\n      this.#applyUpdate((state) => {\n        state.disclaimersError = `Failed to load disclaimers: ${String(error)}`;\n      });\n    }\n  }\n\n  /**\n   * Captures terms acceptance for the currently loaded disclaimers and creates\n   * a session.\n   *\n   * @param params - Optional parameters.\n   * @param params.email - The account email to associate with the session.\n   * @param params.product - The consuming feature the flow runs for. See\n   * {@link initialize} for how the product drives the automatic post\n   * authentication continuation.\n   */\n  async acceptTermsAndStartSession(params?: {\n    email?: string;\n    product?: KycProduct;\n  }): Promise<void> {\n    const termsAcceptedAt = new Date().toISOString();\n    const disclaimerIds = this.state.disclaimers.map(\n      (disclaimer) => disclaimer.id,\n    );\n    this.#applyUpdate((state) => {\n      if (params?.email) {\n        state.email = params.email;\n      }\n      if (params?.product) {\n        state.activeProduct = params.product;\n      }\n      state.termsAcceptedAt = termsAcceptedAt;\n      state.acceptedDisclaimerIds = disclaimerIds;\n    });\n    await this.#createSession();\n  }\n\n  /**\n   * Creates a vendor session from the currently stored terms + email.\n   */\n  async #createSession(): Promise<void> {\n    const { email, termsAcceptedAt, acceptedDisclaimerIds } = this.state;\n    if (!email) {\n      this.#fail('Missing email for session creation.');\n      return;\n    }\n    if (!termsAcceptedAt || acceptedDisclaimerIds.length === 0) {\n      this.#fail('Missing terms acceptance for session creation.');\n      return;\n    }\n\n    // A new session invalidates any authentication carried over from a prior\n    // session. Clear the stale access token and auth-frame client token so\n    // `buildAuthFrameUrl` cannot return a URL tied to an old client token and\n    // `checkKycRequired` cannot run with an access token from an earlier\n    // authentication. The Check/Auth frames re-populate these for the new\n    // session.\n    this.#authClientToken = null;\n    this.#applyUpdate((state) => {\n      state.error = null;\n      state.phase = 'session';\n      state.statusMessage = 'Creating session...';\n      state.accessToken = null;\n    });\n\n    try {\n      const { sessionToken } = await this.messenger.call(\n        'KycService:createSession',\n        { email, termsAcceptedAt, disclaimerIds: acceptedDisclaimerIds },\n      );\n      this.#applyUpdate((state) => {\n        state.sessionToken = sessionToken;\n        state.phase = 'check';\n        state.statusMessage = 'Authenticating via Check frame...';\n      });\n    } catch (error) {\n      // Invalidate the stored acceptance so the customer can retry. Also clear\n      // `activeProduct` so a later `acceptTermsAndStartSession` that omits a\n      // product cannot auto-run the KYC check / SumSub chain for this failed\n      // flow's product — matching how `initialize` starts from a clean product.\n      this.#applyUpdate((state) => {\n        this.#clearAcceptedTerms(state);\n        state.activeProduct = null;\n        state.error = `Session creation failed: ${String(error)}`;\n        state.statusMessage =\n          'Session creation failed — accept the terms to try again.';\n        state.phase = 'terms';\n      });\n      await this.loadDisclaimers();\n    }\n  }\n\n  /**\n   * Clears the persisted terms acceptance.\n   */\n  clearSavedTerms(): void {\n    this.#applyUpdate((state) => {\n      this.#clearAcceptedTerms(state);\n    });\n  }\n\n  /**\n   * Clears the stored terms acceptance on the given draft state. Shared by the\n   * paths that must invalidate acceptance — explicit clear, vendor terms\n   * update, and session-creation failure — so they stay in sync. This is a\n   * targeted invalidation and, unlike {@link reset}, deliberately leaves the\n   * rest of the flow (geolocation, disclaimers, phase) untouched.\n   *\n   * @param state - The state to mutate.\n   */\n  #clearAcceptedTerms(state: KycControllerState): void {\n    state.termsAcceptedAt = null;\n    state.acceptedDisclaimerIds = [];\n  }\n\n  /**\n   * Handles a message posted by a Check/Auth frame and advances the flow.\n   *\n   * The transport-agnostic caller (WebView on mobile, iframe on web) forwards\n   * the raw message and injects the returned `reply` back into the frame.\n   *\n   * @param params - The parameters.\n   * @param params.message - The raw message posted by the frame.\n   * @returns An object whose optional `reply` should be posted back.\n   */\n  async handleFrameMessage(params: {\n    message: unknown;\n  }): Promise<{ reply?: unknown }> {\n    const payload = params.message as FrameMessage | undefined;\n\n    if (!payload) {\n      return {};\n    }\n\n    if (payload.kind === 'handshake') {\n      const channelId = payload.meta?.channelId;\n      return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };\n    }\n\n    if (payload.kind !== 'complete') {\n      return {};\n    }\n\n    const channelId = payload.meta?.channelId;\n    const status = payload.payload?.status;\n    const credsEnvelope = payload.payload?.credentials;\n\n    const customerId = payload.payload?.customer?.id ?? null;\n    if (customerId) {\n      this.#applyUpdate((state) => {\n        state.moonpayCustomerId = customerId;\n      });\n    }\n\n    if (!status) {\n      return {};\n    }\n\n    let accessToken: string | undefined;\n    let clientToken: string | undefined;\n    if (credsEnvelope) {\n      try {\n        const { credentials } = decryptCredentials(\n          credsEnvelope,\n          this.#keypair.privateKey,\n        );\n        accessToken = credentials.accessToken;\n        clientToken = credentials.clientToken;\n      } catch (error) {\n        this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);\n        return {};\n      }\n    }\n\n    if (channelId === CHANNEL_CHECK) {\n      await this.#handleCheckOutcome(status, accessToken, clientToken);\n      return {};\n    }\n\n    if (channelId === CHANNEL_AUTH) {\n      await this.#handleAuthOutcome(status, accessToken);\n      return {};\n    }\n\n    return {};\n  }\n\n  /**\n   * Applies a Check-frame outcome.\n   *\n   * @param status - The frame status.\n   * @param accessToken - The decrypted access token, if any.\n   * @param clientToken - The decrypted client token, if any.\n   */\n  async #handleCheckOutcome(\n    status: NonNullable<FrameMessage['payload']>['status'],\n    accessToken?: string,\n    clientToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#applyUpdate((state) => {\n        state.accessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Already authenticated. Review to submit.';\n      });\n      await this.#continueAfterAuthentication();\n      return;\n    }\n    if (status === 'connectionRequired' && clientToken) {\n      this.#authClientToken = clientToken;\n      this.#applyUpdate((state) => {\n        state.phase = 'auth';\n        state.statusMessage = 'Verify your email via OTP in the Auth frame.';\n      });\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Check frame returned status: ${status}`);\n  }\n\n  /**\n   * Applies an Auth-frame outcome.\n   *\n   * @param status - The frame status.\n   * @param accessToken - The decrypted access token, if any.\n   */\n  async #handleAuthOutcome(\n    status: NonNullable<FrameMessage['payload']>['status'],\n    accessToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#applyUpdate((state) => {\n        state.accessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Authenticated. Review to submit.';\n      });\n      await this.#continueAfterAuthentication();\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Auth frame returned status: ${status}`);\n  }\n\n  /**\n   * Continues the flow once authentication has completed (phase `form`).\n   *\n   * When the flow is scoped to a product (see {@link initialize}), the\n   * KYC-required check runs automatically, and — when KYC is required — the\n   * document-verification sub-flow is launched. When no product is set, this is\n   * a no-op and the flow stays at `form` for the consumer to drive manually.\n   *\n   * Errors are already recorded on state by `checkKycRequired` (`error`\n   * phase) and `startSumSub` (`sumsub.status = 'failed'`); this method swallows\n   * them so it can be awaited safely from the frame-message handler.\n   */\n  async #continueAfterAuthentication(): Promise<void> {\n    const product = this.state.activeProduct;\n    if (!product) {\n      return;\n    }\n\n    // A duplicate or late `complete` message can re-enter here while a prior\n    // continuation is still running; ignore it so the check / sub-flow does not\n    // run twice concurrently.\n    if (this.#continuationInFlight) {\n      return;\n    }\n    this.#continuationInFlight = true;\n\n    // Capture the generation so a `reset()` landing mid-continuation does not\n    // let the `finally` clear a flag that belongs to a newer flow.\n    const generation = this.#generation;\n\n    try {\n      const kycRequired = await this.checkKycRequired({ product });\n      if (!kycRequired) {\n        return;\n      }\n\n      try {\n        await this.startSumSub();\n      } catch {\n        // `startSumSub` already records `sumsub.status = 'failed'`; swallow the\n        // rethrown error (e.g. SDK unavailable) so the awaited continuation\n        // resolves cleanly rather than surfacing as an unhandled rejection.\n      }\n    } finally {\n      if (this.#generation === generation) {\n        this.#continuationInFlight = false;\n      }\n    }\n  }\n\n  /**\n   * Invalidates stored terms and returns to the terms phase.\n   */\n  #requireTermsReacceptance(): void {\n    this.#applyUpdate((state) => {\n      this.#clearAcceptedTerms(state);\n      state.phase = 'terms';\n      state.statusMessage =\n        'The vendor updated its Terms of Use — please re-accept.';\n    });\n  }\n\n  /**\n   * Builds the Check-frame URL, or `null` when no session exists yet.\n   *\n   * @returns The Check-frame URL or `null`.\n   */\n  buildCheckFrameUrl(): string | null {\n    if (!this.state.sessionToken) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/check-connection`);\n    url.searchParams.set('sessionToken', this.state.sessionToken);\n    url.searchParams.set('publicKey', this.#keypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_CHECK);\n    url.searchParams.set('skipKyc', 'true');\n    return url.toString();\n  }\n\n  /**\n   * Builds the Auth-frame URL, or `null` when no client token is available.\n   *\n   * @returns The Auth-frame URL or `null`.\n   */\n  buildAuthFrameUrl(): string | null {\n    if (!this.#authClientToken) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/auth`);\n    url.searchParams.set('clientToken', this.#authClientToken);\n    url.searchParams.set('publicKey', this.#keypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_AUTH);\n    return url.toString();\n  }\n\n  /**\n   * Builds the Reset-frame URL.\n   *\n   * @returns The Reset-frame URL.\n   */\n  buildResetFrameUrl(): string {\n    const url = new URL(`${FRAMES_BASE_URL}/reset`);\n    url.searchParams.set('channelId', CHANNEL_RESET);\n    return url.toString();\n  }\n\n  /**\n   * Checks whether KYC is required for a product and caches the result.\n   *\n   * @param params - The parameters.\n   * @param params.product - The consuming feature.\n   * @param params.country - Optional alpha-3 country override.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(params: {\n    product: KycProduct;\n    country?: string;\n  }): Promise<boolean> {\n    const { accessToken } = this.state;\n    if (!accessToken) {\n      this.#fail('Missing accessToken — repeat the authentication step.');\n      return false;\n    }\n    const country = params.country ?? this.state.geoCountry;\n    if (!country) {\n      this.#fail('Missing country for KYC-required check.');\n      return false;\n    }\n\n    // Capture the flow generation so we can detect a `reset()` that happens\n    // while the HTTP call is in flight and avoid writing stale results.\n    const generation = this.#generation;\n\n    this.#applyUpdate((state) => {\n      state.phase = 'submit';\n      state.statusMessage = 'Checking KYC status...';\n    });\n\n    try {\n      const { kycRequired } = await this.messenger.call(\n        'KycService:checkKycRequired',\n        { accessToken, country, capabilities: [{ product: params.product }] },\n      );\n      // The flow was reset while the check was in flight; discard the result\n      // rather than resurrecting a done/cached state on an idle controller.\n      if (this.#generation !== generation) {\n        return false;\n      }\n      this.#applyUpdate((state) => {\n        state.kycRequiredByProduct[params.product] = kycRequired;\n        state.lastCheckedAt = new Date().toISOString();\n        state.phase = 'done';\n        state.statusMessage = 'KYC check complete.';\n      });\n      return kycRequired;\n    } catch (error) {\n      if (this.#generation !== generation) {\n        return false;\n      }\n      this.#fail(`KYC check failed: ${String(error)}`);\n      return false;\n    }\n  }\n\n  /**\n   * Reads the cached \"is KYC required\" result for a product.\n   *\n   * @param params - The parameters.\n   * @param params.product - The consuming feature.\n   * @returns The cached value, or `undefined` if not yet checked.\n   */\n  getKycStatus(params: { product: KycProduct }): boolean | undefined {\n    return this.state.kycRequiredByProduct[params.product];\n  }\n\n  /**\n   * Runs the SumSub document-verification sub-flow: creates a UKYC session,\n   * exchanges the wrapped key for an applicant access token, and presents the\n   * SDK via the injected launcher.\n   *\n   * @param params - Optional parameters.\n   * @param params.locale - BCP-47 locale for the SDK UI.\n   * @param params.debug - Enables SDK debug logging.\n   * @returns The SDK result.\n   */\n  async startSumSub(params?: {\n    locale?: string;\n    debug?: boolean;\n  }): Promise<Record<string, unknown>> {\n    if (!this.#sumsubLauncher.isAvailable()) {\n      const error = 'SumSub SDK is not available in this runtime.';\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'failed';\n        state.sumsub.result = { error };\n      });\n      throw new Error(error);\n    }\n\n    // Capture the flow generation so each async step can detect a `reset()`\n    // that lands mid-flight and avoid writing stale sub-flow state (or, worse,\n    // presenting the SDK) on a controller that is now idle.\n    const generation = this.#generation;\n\n    try {\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'creatingSession';\n        state.sumsub.result = null;\n      });\n\n      const jwtToken = MOCK_JWT_TOKEN;\n      const { sessionId, wrappingPublicKey, idosSessionId } =\n        await this.messenger.call('KycService:createUkycSession', {\n          jwtToken,\n          vendorMetadata: {\n            moonPayAccessToken: this.state.accessToken,\n            moonPayUserId: this.state.moonpayCustomerId,\n          },\n        });\n      // Retain the exchange material so the SDK can refresh its token. The\n      // session's `wrappingPublicKey` is forwarded opaquely as the request's\n      // `wrappedUserKey` field (the /wrapped-key endpoint's body is unchanged).\n      const exchange = {\n        sessionId,\n        wrappedUserKey: wrappingPublicKey,\n        idosSessionId,\n        jwtToken,\n      };\n\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = 'fetchingToken';\n        state.sumsub.sessionId = sessionId;\n      });\n\n      const { applicantAccessToken } = await this.messenger.call(\n        'KycService:submitWrappedKey',\n        exchange,\n      );\n\n      // A reset() landed while the session/token was being prepared; abort\n      // before presenting the SDK rather than launching on an idle controller.\n      if (this.#generation !== generation) {\n        return {};\n      }\n\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'launching';\n        state.sumsub.applicantAccessToken = applicantAccessToken;\n      });\n\n      // Track whether the SDK ever reported a successful completion. A resolved\n      // `launch` alone does not imply success — the applicant may have\n      // abandoned the flow or the SDK may have reported a non-success outcome.\n      let reachedCompletion = false;\n\n      const result = await this.#sumsubLauncher.launch({\n        applicantAccessToken,\n        onTokenExpiration: async () => {\n          // A reset() may have superseded this flow while the SDK stayed open.\n          // Refuse to refresh against the now-stale UKYC session rather than\n          // silently keeping an orphaned SDK alive.\n          if (this.#generation !== generation) {\n            throw new Error(\n              'KYC flow was reset; SumSub session is no longer active.',\n            );\n          }\n          const refreshed = await this.messenger.call(\n            'KycService:submitWrappedKey',\n            exchange,\n          );\n          return refreshed.applicantAccessToken;\n        },\n        onStatusChange: (_prev, next) => {\n          if (next === SUMSUB_COMPLETED_STATUS) {\n            reachedCompletion = true;\n          }\n          this.#updateIfCurrent(generation, (state) => {\n            state.sumsub.status =\n              next === SUMSUB_COMPLETED_STATUS ? 'complete' : 'inProgress';\n          });\n        },\n        locale: params?.locale ?? 'en',\n        debug: params?.debug ?? false,\n      });\n\n      // Only record `complete` when the SDK actually reported completion;\n      // otherwise treat the resolved-but-unfinished flow as `failed` so\n      // consumers and UI do not mistake it for a finished verification.\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = reachedCompletion ? 'complete' : 'failed';\n        state.sumsub.result = result as Json;\n      });\n      return result;\n    } catch (error) {\n      const result = { error: String(error) };\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = 'failed';\n        state.sumsub.result = result;\n      });\n      return result;\n    }\n  }\n\n  /**\n   * Resets the flow to idle, clearing session tokens and sub-flow state while\n   * preserving persisted terms acceptance and the per-product cache.\n   */\n  reset(): void {\n    this.#authClientToken = null;\n    // Invalidate any in-flight async work started before this reset.\n    this.#generation += 1;\n    // Allow the next authenticated flow to auto-continue; any continuation from\n    // the superseded generation will no longer clear this flag (see the\n    // generation guard in `#continueAfterAuthentication`).\n    this.#continuationInFlight = false;\n    this.#applyUpdate((state) => {\n      state.phase = 'idle';\n      state.statusMessage = '';\n      state.error = null;\n      state.disclaimers = [];\n      state.disclaimersError = null;\n      state.sessionToken = null;\n      state.accessToken = null;\n      state.moonpayCustomerId = null;\n      state.activeProduct = null;\n      state.sumsub = {\n        status: 'idle',\n        result: null,\n        sessionId: null,\n        applicantAccessToken: null,\n      };\n    });\n  }\n\n  /**\n   * Applies a state update only when the flow has not been reset since\n   * `generation` was captured. Prevents an in-flight async step from writing\n   * stale results onto a controller that a concurrent {@link reset} has\n   * returned to idle.\n   *\n   * @param generation - The flow generation captured before the async work.\n   * @param updater - The state mutation to apply when still current.\n   * @returns `true` if the update was applied, `false` if it was superseded.\n   */\n  #updateIfCurrent(\n    generation: number,\n    updater: (state: KycControllerState) => void,\n  ): boolean {\n    if (this.#generation !== generation) {\n      return false;\n    }\n    this.#applyUpdate(updater);\n    return true;\n  }\n\n  /**\n   * The single state-update path for this controller. All mutations go through\n   * here (rather than calling `this.update` directly) so the mechanism stays\n   * consistent and one subtlety is handled in a single place:\n   *\n   * `sumsub.result` is typed as the recursive `Json`, and expanding\n   * `Draft<Json>` (which happens whenever an updater touches `sumsub.result`)\n   * trips TypeScript's \"type instantiation is excessively deep\" guard. By\n   * typing the callback parameter as the plain {@link KycControllerState}\n   * instead of Immer's `Draft`, we avoid expanding the draft type while keeping\n   * the same mutate-in-place semantics (the underlying value is still the Immer\n   * draft at runtime).\n   *\n   * @param updater - The state mutation to apply.\n   */\n  #applyUpdate(updater: (state: KycControllerState) => void): void {\n    this.update((state) => {\n      updater(state as unknown as KycControllerState);\n    });\n  }\n\n  /**\n   * Transitions to the error phase with a message.\n   *\n   * @param message - The error message.\n   */\n  #fail(message: string): void {\n    this.#applyUpdate((state) => {\n      state.error = message;\n      state.phase = 'error';\n    });\n  }\n}\n"]}

package/dist/KycController.d.cts

@@ -0,0 +1,219 @@
+import type { ControllerGetStateAction, ControllerStateChangeEvent } from "@metamask/base-controller";
+import { BaseController } from "@metamask/base-controller";
+import type { Messenger } from "@metamask/messenger";
+import type { Json } from "@metamask/utils";
+import type { KycControllerMethodActions } from "./KycController-method-action-types.cjs";
+import type { KycServiceMethodActions } from "./KycService-method-action-types.cjs";
+import type { KycDisclaimer, KycPhase, KycProduct, KycSumSubLauncher, KycSumSubStatus } from "./types.cjs";
+export declare const controllerName = "KycController";
+/**
+ * Describes the shape of the state object for {@link KycController}.
+ */
+export type KycControllerState = {
+    /** Current phase of the identity flow. */
+    phase: KycPhase;
+    /** Human-readable status message for the current phase. */
+    statusMessage: string;
+    /** The current error message, or `null`. */
+    error: string | null;
+    /** Email associated with the session (sourced from the account). */
+    email: string | null;
+    /** ISO-8601 timestamp of the customer's terms acceptance (persisted). */
+    termsAcceptedAt: string | null;
+    /** IDs of the disclaimers the customer accepted (persisted). */
+    acceptedDisclaimerIds: string[];
+    /** Disclaimers fetched for the current country. */
+    disclaimers: KycDisclaimer[];
+    /** Error encountered while loading disclaimers, or `null`. */
+    disclaimersError: string | null;
+    /** Resolved ISO 3166-1 alpha-3 country code. */
+    geoCountry: string | null;
+    /** Vendor session token (not persisted, not logged). */
+    sessionToken: string | null;
+    /** Vendor access token (not persisted, not logged). */
+    accessToken: string | null;
+    /** Vendor customer id, used for the SumSub hand-off. */
+    moonpayCustomerId: string | null;
+    /**
+     * The product the current flow is running for. Captured at `initialize`
+     * (or `acceptTermsAndStartSession`) and used to automatically run the
+     * KYC-required check once authentication completes. `null` outside a
+     * product-scoped flow (in which case the flow stops at `form` and the
+     * consumer drives the check manually).
+     */
+    activeProduct: KycProduct | null;
+    /** Cached "is KYC required" result per product (persisted). */
+    kycRequiredByProduct: Partial<Record<KycProduct, boolean>>;
+    /** ISO-8601 timestamp of the last KYC-required check (persisted). */
+    lastCheckedAt: string | null;
+    /** SumSub document-verification sub-flow state. */
+    sumsub: {
+        status: KycSumSubStatus;
+        result: Json | null;
+        sessionId: string | null;
+        applicantAccessToken: string | null;
+    };
+};
+/**
+ * Constructs the default {@link KycController} state.
+ *
+ * @returns The default state.
+ */
+export declare function getDefaultKycControllerState(): KycControllerState;
+export type KycControllerGetStateAction = ControllerGetStateAction<typeof controllerName, KycControllerState>;
+export type KycControllerActions = KycControllerGetStateAction | KycControllerMethodActions;
+type AllowedActions = KycServiceMethodActions;
+export type KycControllerStateChangeEvent = ControllerStateChangeEvent<typeof controllerName, KycControllerState>;
+export type KycControllerEvents = KycControllerStateChangeEvent;
+type AllowedEvents = never;
+export type KycControllerMessenger = Messenger<typeof controllerName, KycControllerActions | AllowedActions, KycControllerEvents | AllowedEvents>;
+/**
+ * Options for constructing a {@link KycController}.
+ */
+export type KycControllerOptions = {
+    messenger: KycControllerMessenger;
+    state?: Partial<KycControllerState>;
+    /**
+     * Platform adapter that presents the SumSub SDK. Injected by each client so
+     * the controller stays platform-agnostic.
+     */
+    sumsubLauncher: KycSumSubLauncher;
+};
+/**
+ * `KycController` orchestrates the vendor-backed KYC / identity-verification
+ * flow (MoonPay identity + SumSub documents) behind a vendor-neutral, per
+ * product surface used by ramps and card. It owns all state, HTTP
+ * orchestration (via `KycService`), crypto, and the frame message protocol;
+ * platform-specific presentation (WebView/iframe, SumSub SDK) is injected.
+ */
+export declare class KycController extends BaseController<typeof controllerName, KycControllerState, KycControllerMessenger> {
+    #private;
+    /**
+     * Constructs a new {@link KycController}.
+     *
+     * @param options - The constructor options.
+     * @param options.messenger - The messenger suited for this controller.
+     * @param options.state - Partial initial state; merged over defaults.
+     * @param options.sumsubLauncher - The platform SumSub launcher adapter.
+     */
+    constructor({ messenger, state, sumsubLauncher }: KycControllerOptions);
+    /**
+     * Resolves persisted terms + geolocation, and auto-creates a session when
+     * terms are already accepted and an email is available.
+     *
+     * @param params - Optional parameters.
+     * @param params.email - The account email to associate with the session.
+     * @param params.product - The consuming feature the flow runs for. When
+     * provided, the controller automatically runs the KYC-required check once
+     * authentication completes (and chains into document verification when KYC
+     * is required). When omitted, the flow stops at `form` and the consumer must
+     * call `checkKycRequired` manually.
+     */
+    initialize(params?: {
+        email?: string;
+        product?: KycProduct;
+    }): Promise<void>;
+    /**
+     * Loads the disclaimers for the resolved (or provided) country.
+     *
+     * @param params - Optional parameters.
+     * @param params.country - ISO 3166-1 alpha-3 country code override.
+     */
+    loadDisclaimers(params?: {
+        country?: string;
+    }): Promise<void>;
+    /**
+     * Captures terms acceptance for the currently loaded disclaimers and creates
+     * a session.
+     *
+     * @param params - Optional parameters.
+     * @param params.email - The account email to associate with the session.
+     * @param params.product - The consuming feature the flow runs for. See
+     * {@link initialize} for how the product drives the automatic post
+     * authentication continuation.
+     */
+    acceptTermsAndStartSession(params?: {
+        email?: string;
+        product?: KycProduct;
+    }): Promise<void>;
+    /**
+     * Clears the persisted terms acceptance.
+     */
+    clearSavedTerms(): void;
+    /**
+     * Handles a message posted by a Check/Auth frame and advances the flow.
+     *
+     * The transport-agnostic caller (WebView on mobile, iframe on web) forwards
+     * the raw message and injects the returned `reply` back into the frame.
+     *
+     * @param params - The parameters.
+     * @param params.message - The raw message posted by the frame.
+     * @returns An object whose optional `reply` should be posted back.
+     */
+    handleFrameMessage(params: {
+        message: unknown;
+    }): Promise<{
+        reply?: unknown;
+    }>;
+    /**
+     * Builds the Check-frame URL, or `null` when no session exists yet.
+     *
+     * @returns The Check-frame URL or `null`.
+     */
+    buildCheckFrameUrl(): string | null;
+    /**
+     * Builds the Auth-frame URL, or `null` when no client token is available.
+     *
+     * @returns The Auth-frame URL or `null`.
+     */
+    buildAuthFrameUrl(): string | null;
+    /**
+     * Builds the Reset-frame URL.
+     *
+     * @returns The Reset-frame URL.
+     */
+    buildResetFrameUrl(): string;
+    /**
+     * Checks whether KYC is required for a product and caches the result.
+     *
+     * @param params - The parameters.
+     * @param params.product - The consuming feature.
+     * @param params.country - Optional alpha-3 country override.
+     * @returns Whether KYC is required.
+     */
+    checkKycRequired(params: {
+        product: KycProduct;
+        country?: string;
+    }): Promise<boolean>;
+    /**
+     * Reads the cached "is KYC required" result for a product.
+     *
+     * @param params - The parameters.
+     * @param params.product - The consuming feature.
+     * @returns The cached value, or `undefined` if not yet checked.
+     */
+    getKycStatus(params: {
+        product: KycProduct;
+    }): boolean | undefined;
+    /**
+     * Runs the SumSub document-verification sub-flow: creates a UKYC session,
+     * exchanges the wrapped key for an applicant access token, and presents the
+     * SDK via the injected launcher.
+     *
+     * @param params - Optional parameters.
+     * @param params.locale - BCP-47 locale for the SDK UI.
+     * @param params.debug - Enables SDK debug logging.
+     * @returns The SDK result.
+     */
+    startSumSub(params?: {
+        locale?: string;
+        debug?: boolean;
+    }): Promise<Record<string, unknown>>;
+    /**
+     * Resets the flow to idle, clearing session tokens and sub-flow state while
+     * preserving persisted terms acceptance and the per-product cache.
+     */
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=KycController.d.cts.map

package/dist/KycController.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycController.d.cts","sourceRoot":"","sources":["../src/KycController.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,kCAAkC;AACnC,OAAO,EAAE,cAAc,EAAE,kCAAkC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAI5C,OAAO,KAAK,EAAE,0BAA0B,EAAE,gDAA4C;AACtF,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAAyC;AAChF,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,eAAe,EAChB,oBAAgB;AAIjB,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAkB9C;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,QAAQ,CAAC;IAChB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,yEAAyE;IACzE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gEAAgE;IAChE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAEhC,mDAAmD;IACnD,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC,gDAAgD;IAChD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,wDAAwD;IACxD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uDAAuD;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wDAAwD;IACxD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC;;;;;;OAMG;IACH,aAAa,EAAE,UAAU,GAAG,IAAI,CAAC;IAEjC,+DAA+D;IAC/D,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,qEAAqE;IACrE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,mDAAmD;IACnD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;KACrC,CAAC;CACH,CAAC;AAqGF;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,kBAAkB,CAwBjE;AAmBD,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAChE,OAAO,cAAc,EACrB,kBAAkB,CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B,2BAA2B,GAC3B,0BAA0B,CAAC;AAE/B,KAAK,cAAc,GAAG,uBAAuB,CAAC;AAE9C,MAAM,MAAM,6BAA6B,GAAG,0BAA0B,CACpE,OAAO,cAAc,EACrB,kBAAkB,CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAEhE,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B,MAAM,MAAM,sBAAsB,GAAG,SAAS,CAC5C,OAAO,cAAc,EACrB,oBAAoB,GAAG,cAAc,EACrC,mBAAmB,GAAG,aAAa,CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpC;;;OAGG;IACH,cAAc,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAuBF;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,cAAc,CAC/C,OAAO,cAAc,EACrB,kBAAkB,EAClB,sBAAsB,CACvB;;IA2BC;;;;;;;OAOG;gBACS,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,oBAAoB;IAiBtE;;;;;;;;;;;OAWG;IACG,UAAU,CAAC,MAAM,CAAC,EAAE;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCjB;;;;;OAKG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnE;;;;;;;;;OASG;IACG,0BAA0B,CAAC,MAAM,CAAC,EAAE;QACxC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyEjB;;OAEG;IACH,eAAe,IAAI,IAAI;IAoBvB;;;;;;;;;OASG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAC/B,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAwLhC;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAYnC;;;;OAIG;IACH,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAWlC;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAM5B;;;;;;;OAOG;IACG,gBAAgB,CAAC,MAAM,EAAE;QAC7B,OAAO,EAAE,UAAU,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC;IA+CpB;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,GAAG,SAAS;IAIlE;;;;;;;;;OASG;IACG,WAAW,CAAC,MAAM,CAAC,EAAE;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAkHpC;;;OAGG;IACH,KAAK,IAAI,IAAI;CAgFd"}

package/dist/KycController.d.mts

@@ -0,0 +1,219 @@
+import type { ControllerGetStateAction, ControllerStateChangeEvent } from "@metamask/base-controller";
+import { BaseController } from "@metamask/base-controller";
+import type { Messenger } from "@metamask/messenger";
+import type { Json } from "@metamask/utils";
+import type { KycControllerMethodActions } from "./KycController-method-action-types.mjs";
+import type { KycServiceMethodActions } from "./KycService-method-action-types.mjs";
+import type { KycDisclaimer, KycPhase, KycProduct, KycSumSubLauncher, KycSumSubStatus } from "./types.mjs";
+export declare const controllerName = "KycController";
+/**
+ * Describes the shape of the state object for {@link KycController}.
+ */
+export type KycControllerState = {
+    /** Current phase of the identity flow. */
+    phase: KycPhase;
+    /** Human-readable status message for the current phase. */
+    statusMessage: string;
+    /** The current error message, or `null`. */
+    error: string | null;
+    /** Email associated with the session (sourced from the account). */
+    email: string | null;
+    /** ISO-8601 timestamp of the customer's terms acceptance (persisted). */
+    termsAcceptedAt: string | null;
+    /** IDs of the disclaimers the customer accepted (persisted). */
+    acceptedDisclaimerIds: string[];
+    /** Disclaimers fetched for the current country. */
+    disclaimers: KycDisclaimer[];
+    /** Error encountered while loading disclaimers, or `null`. */
+    disclaimersError: string | null;
+    /** Resolved ISO 3166-1 alpha-3 country code. */
+    geoCountry: string | null;
+    /** Vendor session token (not persisted, not logged). */
+    sessionToken: string | null;
+    /** Vendor access token (not persisted, not logged). */
+    accessToken: string | null;
+    /** Vendor customer id, used for the SumSub hand-off. */
+    moonpayCustomerId: string | null;
+    /**
+     * The product the current flow is running for. Captured at `initialize`
+     * (or `acceptTermsAndStartSession`) and used to automatically run the
+     * KYC-required check once authentication completes. `null` outside a
+     * product-scoped flow (in which case the flow stops at `form` and the
+     * consumer drives the check manually).
+     */
+    activeProduct: KycProduct | null;
+    /** Cached "is KYC required" result per product (persisted). */
+    kycRequiredByProduct: Partial<Record<KycProduct, boolean>>;
+    /** ISO-8601 timestamp of the last KYC-required check (persisted). */
+    lastCheckedAt: string | null;
+    /** SumSub document-verification sub-flow state. */
+    sumsub: {
+        status: KycSumSubStatus;
+        result: Json | null;
+        sessionId: string | null;
+        applicantAccessToken: string | null;
+    };
+};
+/**
+ * Constructs the default {@link KycController} state.
+ *
+ * @returns The default state.
+ */
+export declare function getDefaultKycControllerState(): KycControllerState;
+export type KycControllerGetStateAction = ControllerGetStateAction<typeof controllerName, KycControllerState>;
+export type KycControllerActions = KycControllerGetStateAction | KycControllerMethodActions;
+type AllowedActions = KycServiceMethodActions;
+export type KycControllerStateChangeEvent = ControllerStateChangeEvent<typeof controllerName, KycControllerState>;
+export type KycControllerEvents = KycControllerStateChangeEvent;
+type AllowedEvents = never;
+export type KycControllerMessenger = Messenger<typeof controllerName, KycControllerActions | AllowedActions, KycControllerEvents | AllowedEvents>;
+/**
+ * Options for constructing a {@link KycController}.
+ */
+export type KycControllerOptions = {
+    messenger: KycControllerMessenger;
+    state?: Partial<KycControllerState>;
+    /**
+     * Platform adapter that presents the SumSub SDK. Injected by each client so
+     * the controller stays platform-agnostic.
+     */
+    sumsubLauncher: KycSumSubLauncher;
+};
+/**
+ * `KycController` orchestrates the vendor-backed KYC / identity-verification
+ * flow (MoonPay identity + SumSub documents) behind a vendor-neutral, per
+ * product surface used by ramps and card. It owns all state, HTTP
+ * orchestration (via `KycService`), crypto, and the frame message protocol;
+ * platform-specific presentation (WebView/iframe, SumSub SDK) is injected.
+ */
+export declare class KycController extends BaseController<typeof controllerName, KycControllerState, KycControllerMessenger> {
+    #private;
+    /**
+     * Constructs a new {@link KycController}.
+     *
+     * @param options - The constructor options.
+     * @param options.messenger - The messenger suited for this controller.
+     * @param options.state - Partial initial state; merged over defaults.
+     * @param options.sumsubLauncher - The platform SumSub launcher adapter.
+     */
+    constructor({ messenger, state, sumsubLauncher }: KycControllerOptions);
+    /**
+     * Resolves persisted terms + geolocation, and auto-creates a session when
+     * terms are already accepted and an email is available.
+     *
+     * @param params - Optional parameters.
+     * @param params.email - The account email to associate with the session.
+     * @param params.product - The consuming feature the flow runs for. When
+     * provided, the controller automatically runs the KYC-required check once
+     * authentication completes (and chains into document verification when KYC
+     * is required). When omitted, the flow stops at `form` and the consumer must
+     * call `checkKycRequired` manually.
+     */
+    initialize(params?: {
+        email?: string;
+        product?: KycProduct;
+    }): Promise<void>;
+    /**
+     * Loads the disclaimers for the resolved (or provided) country.
+     *
+     * @param params - Optional parameters.
+     * @param params.country - ISO 3166-1 alpha-3 country code override.
+     */
+    loadDisclaimers(params?: {
+        country?: string;
+    }): Promise<void>;
+    /**
+     * Captures terms acceptance for the currently loaded disclaimers and creates
+     * a session.
+     *
+     * @param params - Optional parameters.
+     * @param params.email - The account email to associate with the session.
+     * @param params.product - The consuming feature the flow runs for. See
+     * {@link initialize} for how the product drives the automatic post
+     * authentication continuation.
+     */
+    acceptTermsAndStartSession(params?: {
+        email?: string;
+        product?: KycProduct;
+    }): Promise<void>;
+    /**
+     * Clears the persisted terms acceptance.
+     */
+    clearSavedTerms(): void;
+    /**
+     * Handles a message posted by a Check/Auth frame and advances the flow.
+     *
+     * The transport-agnostic caller (WebView on mobile, iframe on web) forwards
+     * the raw message and injects the returned `reply` back into the frame.
+     *
+     * @param params - The parameters.
+     * @param params.message - The raw message posted by the frame.
+     * @returns An object whose optional `reply` should be posted back.
+     */
+    handleFrameMessage(params: {
+        message: unknown;
+    }): Promise<{
+        reply?: unknown;
+    }>;
+    /**
+     * Builds the Check-frame URL, or `null` when no session exists yet.
+     *
+     * @returns The Check-frame URL or `null`.
+     */
+    buildCheckFrameUrl(): string | null;
+    /**
+     * Builds the Auth-frame URL, or `null` when no client token is available.
+     *
+     * @returns The Auth-frame URL or `null`.
+     */
+    buildAuthFrameUrl(): string | null;
+    /**
+     * Builds the Reset-frame URL.
+     *
+     * @returns The Reset-frame URL.
+     */
+    buildResetFrameUrl(): string;
+    /**
+     * Checks whether KYC is required for a product and caches the result.
+     *
+     * @param params - The parameters.
+     * @param params.product - The consuming feature.
+     * @param params.country - Optional alpha-3 country override.
+     * @returns Whether KYC is required.
+     */
+    checkKycRequired(params: {
+        product: KycProduct;
+        country?: string;
+    }): Promise<boolean>;
+    /**
+     * Reads the cached "is KYC required" result for a product.
+     *
+     * @param params - The parameters.
+     * @param params.product - The consuming feature.
+     * @returns The cached value, or `undefined` if not yet checked.
+     */
+    getKycStatus(params: {
+        product: KycProduct;
+    }): boolean | undefined;
+    /**
+     * Runs the SumSub document-verification sub-flow: creates a UKYC session,
+     * exchanges the wrapped key for an applicant access token, and presents the
+     * SDK via the injected launcher.
+     *
+     * @param params - Optional parameters.
+     * @param params.locale - BCP-47 locale for the SDK UI.
+     * @param params.debug - Enables SDK debug logging.
+     * @returns The SDK result.
+     */
+    startSumSub(params?: {
+        locale?: string;
+        debug?: boolean;
+    }): Promise<Record<string, unknown>>;
+    /**
+     * Resets the flow to idle, clearing session tokens and sub-flow state while
+     * preserving persisted terms acceptance and the per-product cache.
+     */
+    reset(): void;
+}
+export {};
+//# sourceMappingURL=KycController.d.mts.map

package/dist/KycController.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycController.d.mts","sourceRoot":"","sources":["../src/KycController.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,kCAAkC;AACnC,OAAO,EAAE,cAAc,EAAE,kCAAkC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,IAAI,EAAE,wBAAwB;AAI5C,OAAO,KAAK,EAAE,0BAA0B,EAAE,gDAA4C;AACtF,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAAyC;AAChF,OAAO,KAAK,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,eAAe,EAChB,oBAAgB;AAIjB,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAkB9C;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,QAAQ,CAAC;IAChB,2DAA2D;IAC3D,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,oEAAoE;IACpE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAErB,yEAAyE;IACzE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gEAAgE;IAChE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAEhC,mDAAmD;IACnD,WAAW,EAAE,aAAa,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhC,gDAAgD;IAChD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B,wDAAwD;IACxD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uDAAuD;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wDAAwD;IACxD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC;;;;;;OAMG;IACH,aAAa,EAAE,UAAU,GAAG,IAAI,CAAC;IAEjC,+DAA+D;IAC/D,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,qEAAqE;IACrE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAE7B,mDAAmD;IACnD,MAAM,EAAE;QACN,MAAM,EAAE,eAAe,CAAC;QACxB,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;QACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;KACrC,CAAC;CACH,CAAC;AAqGF;;;;GAIG;AACH,wBAAgB,4BAA4B,IAAI,kBAAkB,CAwBjE;AAmBD,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAChE,OAAO,cAAc,EACrB,kBAAkB,CACnB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAC5B,2BAA2B,GAC3B,0BAA0B,CAAC;AAE/B,KAAK,cAAc,GAAG,uBAAuB,CAAC;AAE9C,MAAM,MAAM,6BAA6B,GAAG,0BAA0B,CACpE,OAAO,cAAc,EACrB,kBAAkB,CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAEhE,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B,MAAM,MAAM,sBAAsB,GAAG,SAAS,CAC5C,OAAO,cAAc,EACrB,oBAAoB,GAAG,cAAc,EACrC,mBAAmB,GAAG,aAAa,CACpC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACpC;;;OAGG;IACH,cAAc,EAAE,iBAAiB,CAAC;CACnC,CAAC;AAuBF;;;;;;GAMG;AACH,qBAAa,aAAc,SAAQ,cAAc,CAC/C,OAAO,cAAc,EACrB,kBAAkB,EAClB,sBAAsB,CACvB;;IA2BC;;;;;;;OAOG;gBACS,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,oBAAoB;IAiBtE;;;;;;;;;;;OAWG;IACG,UAAU,CAAC,MAAM,CAAC,EAAE;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCjB;;;;;OAKG;IACG,eAAe,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnE;;;;;;;;;OASG;IACG,0BAA0B,CAAC,MAAM,CAAC,EAAE;QACxC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyEjB;;OAEG;IACH,eAAe,IAAI,IAAI;IAoBvB;;;;;;;;;OASG;IACG,kBAAkB,CAAC,MAAM,EAAE;QAC/B,OAAO,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAwLhC;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,GAAG,IAAI;IAYnC;;;;OAIG;IACH,iBAAiB,IAAI,MAAM,GAAG,IAAI;IAWlC;;;;OAIG;IACH,kBAAkB,IAAI,MAAM;IAM5B;;;;;;;OAOG;IACG,gBAAgB,CAAC,MAAM,EAAE;QAC7B,OAAO,EAAE,UAAU,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,OAAO,CAAC;IA+CpB;;;;;;OAMG;IACH,YAAY,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,GAAG,SAAS;IAIlE;;;;;;;;;OASG;IACG,WAAW,CAAC,MAAM,CAAC,EAAE;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAkHpC;;;OAGG;IACH,KAAK,IAAI,IAAI;CAgFd"}