@metamask-previews/kyc-controller 0.0.0-preview-11d78534e

package/dist/KycController.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycController.mjs","sourceRoot":"","sources":["../src/KycController.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,OAAO,EAAE,cAAc,EAAE,kCAAkC;AAI3D,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,qBAAiB;AAY/D,kBAAkB;AAElB,MAAM,CAAC,MAAM,cAAc,GAAG,eAAe,CAAC;AAE9C,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,UAAU,CAAC;AAEjC,8EAA8E;AAC9E,yEAAyE;AACzE,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,qEAAqE;AACrE,6EAA6E;AAC7E,+CAA+C;AAC/C,MAAM,uBAAuB,GAAG,WAAW,CAAC;AA6D5C,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE;QACL,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,KAAK,EAAE;QACL,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,eAAe,EAAE;QACf,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,qBAAqB,EAAE;QACrB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,gBAAgB,EAAE;QAChB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,UAAU,EAAE;QACV,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,YAAY,EAAE;QACZ,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,iBAAiB,EAAE;QACjB,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;KAChB;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;IACD,oBAAoB,EAAE;QACpB,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;KACf;IACD,aAAa,EAAE;QACb,sBAAsB,EAAE,IAAI;QAC5B,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;KAChB;IACD,MAAM,EAAE;QACN,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,IAAI;KACf;CAC0C,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,IAAI;QACrB,qBAAqB,EAAE,EAAE;QACzB,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,IAAI;QACtB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;QACvB,aAAa,EAAE,IAAI;QACnB,oBAAoB,EAAE,EAAE;QACxB,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE;YACN,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,oBAAoB,EAAE,IAAI;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,YAAY;IACZ,iBAAiB;IACjB,4BAA4B;IAC5B,iBAAiB;IACjB,oBAAoB;IACpB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,cAAc;IACd,aAAa;IACb,OAAO;CACC,CAAC;AA4DX,gCAAgC;AAEhC;;;;;;GAMG;AACH,MAAM,OAAO,aAAc,SAAQ,cAIlC;IA2BC;;;;;;;OAOG;IACH,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAwB;QACpE,KAAK,CAAC;YACJ,SAAS;YACT,QAAQ,EAAE,qBAAqB;YAC/B,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,EAAE,GAAG,4BAA4B,EAAE,EAAE,GAAG,KAAK,EAAE;SACvD,CAAC,CAAC;;QAxCI,gDAAmC;QAE5C,6EAA6E;QACpE,yCAAwB;QAEjC,kDAAkD;QAClD,yCAAkC,IAAI,EAAC;QAEvC;;;;WAIG;QACH,oCAAc,CAAC,EAAC;QAEhB;;;;;;;;WAQG;QACH,8CAAwB,KAAK,EAAC;QAkB5B,uBAAA,IAAI,iCAAmB,cAAc,MAAA,CAAC;QACtC,uBAAA,IAAI,0BAAY,eAAe,EAAE,MAAA,CAAC;QAElC,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,UAAU,CAAC,MAGhB;QACC,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,oEAAoE;QACpE,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,CAAC;YACD,KAAK,CAAC,aAAa,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACtE,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;QACxE,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC;QAE9C,IAAI,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjC,MAAM,uBAAA,IAAI,8DAAe,MAAnB,IAAI,CAAiB,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,MAA6B;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAM,EAAE,OAAO;gBACf,IAAI,CAAC,KAAK,CAAC,UAAU;gBACrB,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACtC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;oBAC1B,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,6BAA6B,EAC7B,EAAE,OAAO,EAAE,CACZ,CAAC;YACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;gBAChC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAChC,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,gBAAgB,GAAG,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,0BAA0B,CAAC,MAGhC;QACC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAC9C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAC9B,CAAC;QACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC7B,CAAC;YACD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;YACvC,CAAC;YACD,KAAK,CAAC,eAAe,GAAG,eAAe,CAAC;YACxC,KAAK,CAAC,qBAAqB,GAAG,aAAa,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,8DAAe,MAAnB,IAAI,CAAiB,CAAC;IAC9B,CAAC;IAyDD;;OAEG;IACH,eAAe;QACb,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAgBD;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAExB;QACC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAmC,CAAC;QAE3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACvC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;QAEnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YACf,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,iBAAiB,GAAG,UAAU,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,WAA+B,CAAC;QACpC,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CACxC,aAAa,EACb,uBAAA,IAAI,8BAAS,CAAC,UAAU,CACzB,CAAC;gBACF,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;gBACtC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACjE,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,uBAAA,IAAI,kEAAmB,MAAvB,IAAI,EAAoB,MAAM,EAAE,WAAW,CAAC,CAAC;YACnD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IA8HD;;;;OAIG;IACH,kBAAkB;QAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,mBAAmB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,8BAAS,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,IAAI,CAAC,uBAAA,IAAI,sCAAiB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,uBAAA,IAAI,sCAAiB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,8BAAS,CAAC,YAAY,CAAC,CAAC;QAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,QAAQ,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAGtB;QACC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,uDAAuD,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,yCAAyC,CAAC,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;QAEpC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,QAAQ,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,wBAAwB,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC/C,6BAA6B,EAC7B,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CACtE,CAAC;YACF,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC;gBACzD,KAAK,CAAC,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,qBAAqB,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,MAA+B;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CAAC,MAGjB;QACC,IAAI,CAAC,uBAAA,IAAI,qCAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,8CAA8C,CAAC;YAC7D,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,wEAAwE;QACxE,2EAA2E;QAC3E,wDAAwD;QACxD,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;QAEpC,IAAI,CAAC;YACH,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC;gBACxC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,cAAc,CAAC;YAChC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,aAAa,EAAE,GACnD,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBACxD,QAAQ;gBACR,cAAc,EAAE;oBACd,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;oBAC1C,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;iBAC5C;aACF,CAAC,CAAC;YACL,qEAAqE;YACrE,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,QAAQ,GAAG;gBACf,SAAS;gBACT,cAAc,EAAE,iBAAiB;gBACjC,aAAa;gBACb,QAAQ;aACT,CAAC;YAEF,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YACrC,CAAC,CAAC,CAAC;YAEH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxD,6BAA6B,EAC7B,QAAQ,CACT,CAAC;YAEF,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC;gBAClC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;YAC3D,CAAC,CAAC,CAAC;YAEH,0EAA0E;YAC1E,iEAAiE;YACjE,yEAAyE;YACzE,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAE9B,MAAM,MAAM,GAAG,MAAM,uBAAA,IAAI,qCAAgB,CAAC,MAAM,CAAC;gBAC/C,oBAAoB;gBACpB,iBAAiB,EAAE,KAAK,IAAI,EAAE;oBAC5B,qEAAqE;oBACrE,mEAAmE;oBACnE,0CAA0C;oBAC1C,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;wBACpC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;oBACJ,CAAC;oBACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,6BAA6B,EAC7B,QAAQ,CACT,CAAC;oBACF,OAAO,SAAS,CAAC,oBAAoB,CAAC;gBACxC,CAAC;gBACD,cAAc,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;wBACrC,iBAAiB,GAAG,IAAI,CAAC;oBAC3B,CAAC;oBACD,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;wBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM;4BACjB,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;oBACjE,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;gBAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK;aAC9B,CAAC,CAAC;YAEH,oEAAoE;YACpE,kEAAkE;YAClE,kEAAkE;YAClE,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAChE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAc,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,uBAAA,IAAI,gEAAiB,MAArB,IAAI,EAAkB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1C,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YAC/B,CAAC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,uBAAA,IAAI,kCAAoB,IAAI,MAAA,CAAC;QAC7B,iEAAiE;QACjE,uHAAoB,CAAC,MAAA,CAAC;QACtB,4EAA4E;QAC5E,oEAAoE;QACpE,uDAAuD;QACvD,uBAAA,IAAI,uCAAyB,KAAK,MAAA,CAAC;QACnC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC;YACvB,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC9B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;YAC1B,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;YACzB,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC/B,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,GAAG;gBACb,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CAuDF;;AAtlBC;;GAEG;AACH,KAAK;IACH,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,qCAAqC,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,gDAAgD,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,sEAAsE;IACtE,WAAW;IACX,uBAAA,IAAI,kCAAoB,IAAI,MAAA,CAAC;IAC7B,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,KAAK,CAAC,aAAa,GAAG,qBAAqB,CAAC;QAC5C,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAChD,0BAA0B,EAC1B,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,CACjE,CAAC;QACF,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;YAClC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;YACtB,KAAK,CAAC,aAAa,GAAG,mCAAmC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,0EAA0E;QAC1E,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;YAChC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,KAAK,GAAG,4BAA4B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,aAAa;gBACjB,0DAA0D,CAAC;YAC7D,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC,iFAoBmB,KAAyB;IAC3C,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,qBAAqB,GAAG,EAAE,CAAC;AACnC,CAAC;AA0ED;;;;;;GAMG;AACH,KAAK,4CACH,MAAsD,EACtD,WAAoB,EACpB,WAAoB;IAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;QACvC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,0CAA0C,CAAC;QACnE,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,4EAA6B,MAAjC,IAAI,CAA+B,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,IAAI,WAAW,EAAE,CAAC;QACnD,uBAAA,IAAI,kCAAoB,WAAW,MAAA,CAAC;QACpC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,8CAA8C,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,uBAAA,IAAI,yEAA0B,MAA9B,IAAI,CAA4B,CAAC;QACjC,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,gCAAgC,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,KAAK,2CACH,MAAsD,EACtD,WAAoB;IAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;QACvC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;YAC1B,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAChC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,kCAAkC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,MAAM,uBAAA,IAAI,4EAA6B,MAAjC,IAAI,CAA+B,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,uBAAA,IAAI,yEAA0B,MAA9B,IAAI,CAA4B,CAAC;QACjC,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,qDAAM,MAAV,IAAI,EAAO,+BAA+B,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,0BAA0B;IAC1B,IAAI,uBAAA,IAAI,2CAAsB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,uBAAA,IAAI,uCAAyB,IAAI,MAAA,CAAC;IAElC,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,UAAU,GAAG,uBAAA,IAAI,iCAAY,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,oEAAoE;YACpE,oEAAoE;QACtE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;YACpC,uBAAA,IAAI,uCAAyB,KAAK,MAAA,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;IAMC,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,uBAAA,IAAI,mEAAoB,MAAxB,IAAI,EAAqB,KAAK,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACtB,KAAK,CAAC,aAAa;YACjB,yDAAyD,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,2EA4RC,UAAkB,EAClB,OAA4C;IAE5C,IAAI,uBAAA,IAAI,iCAAY,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,OAAO,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC,mEAiBY,OAA4C;IACvD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,OAAO,CAAC,KAAsC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,qDAOK,OAAe;IACnB,uBAAA,IAAI,4DAAa,MAAjB,IAAI,EAAc,CAAC,KAAK,EAAE,EAAE;QAC1B,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QACtB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { Json } from '@metamask/utils';\n\nimport { decryptCredentials, generateKeyPair } from './crypto';\nimport type { EncryptedCredentialsEnvelope, X25519KeyPair } from './crypto';\nimport type { KycControllerMethodActions } from './KycController-method-action-types';\nimport type { KycServiceMethodActions } from './KycService-method-action-types';\nimport type {\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n} from './types';\n\n// === GENERAL ===\n\nexport const controllerName = 'KycController';\n\nconst FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';\nconst CHANNEL_CHECK = 'ch_1';\nconst CHANNEL_AUTH = 'ch_2';\nconst CHANNEL_RESET = 'ch_reset';\n\n// Placeholder credentials for the SumSub sub-flow. These are demo values that\n// must be replaced with real UKYC-issued material before production use.\nconst MOCK_JWT_TOKEN = 'mock-jwt-token';\n\n// The SumSub SDK status that signals the applicant finished the flow\n// successfully. Any other resolution (abandonment, failure, or a non-success\n// outcome) must not be recorded as `complete`.\nconst SUMSUB_COMPLETED_STATUS = 'Completed';\n\n// === STATE ===\n\n/**\n * Describes the shape of the state object for {@link KycController}.\n */\nexport type KycControllerState = {\n  /** Current phase of the identity flow. */\n  phase: KycPhase;\n  /** Human-readable status message for the current phase. */\n  statusMessage: string;\n  /** The current error message, or `null`. */\n  error: string | null;\n\n  /** Email associated with the session (sourced from the account). */\n  email: string | null;\n\n  /** ISO-8601 timestamp of the customer's terms acceptance (persisted). */\n  termsAcceptedAt: string | null;\n  /** IDs of the disclaimers the customer accepted (persisted). */\n  acceptedDisclaimerIds: string[];\n\n  /** Disclaimers fetched for the current country. */\n  disclaimers: KycDisclaimer[];\n  /** Error encountered while loading disclaimers, or `null`. */\n  disclaimersError: string | null;\n\n  /** Resolved ISO 3166-1 alpha-3 country code. */\n  geoCountry: string | null;\n\n  /** Vendor session token (not persisted, not logged). */\n  sessionToken: string | null;\n  /** Vendor access token (not persisted, not logged). */\n  accessToken: string | null;\n  /** Vendor customer id, used for the SumSub hand-off. */\n  moonpayCustomerId: string | null;\n\n  /**\n   * The product the current flow is running for. Captured at `initialize`\n   * (or `acceptTermsAndStartSession`) and used to automatically run the\n   * KYC-required check once authentication completes. `null` outside a\n   * product-scoped flow (in which case the flow stops at `form` and the\n   * consumer drives the check manually).\n   */\n  activeProduct: KycProduct | null;\n\n  /** Cached \"is KYC required\" result per product (persisted). */\n  kycRequiredByProduct: Partial<Record<KycProduct, boolean>>;\n  /** ISO-8601 timestamp of the last KYC-required check (persisted). */\n  lastCheckedAt: string | null;\n\n  /** SumSub document-verification sub-flow state. */\n  sumsub: {\n    status: KycSumSubStatus;\n    result: Json | null;\n    sessionId: string | null;\n    applicantAccessToken: string | null;\n  };\n};\n\nconst kycControllerMetadata = {\n  phase: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  statusMessage: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  error: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  email: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  termsAcceptedAt: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  acceptedDisclaimerIds: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  disclaimers: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: true,\n  },\n  disclaimersError: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  geoCountry: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  sessionToken: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  accessToken: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  moonpayCustomerId: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: false,\n  },\n  activeProduct: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: false,\n    usedInUi: true,\n  },\n  kycRequiredByProduct: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: true,\n  },\n  lastCheckedAt: {\n    includeInDebugSnapshot: true,\n    includeInStateLogs: true,\n    persist: true,\n    usedInUi: false,\n  },\n  sumsub: {\n    includeInDebugSnapshot: false,\n    includeInStateLogs: false,\n    persist: false,\n    usedInUi: true,\n  },\n} satisfies StateMetadata<KycControllerState>;\n\n/**\n * Constructs the default {@link KycController} state.\n *\n * @returns The default state.\n */\nexport function getDefaultKycControllerState(): KycControllerState {\n  return {\n    phase: 'idle',\n    statusMessage: '',\n    error: null,\n    email: null,\n    termsAcceptedAt: null,\n    acceptedDisclaimerIds: [],\n    disclaimers: [],\n    disclaimersError: null,\n    geoCountry: null,\n    sessionToken: null,\n    accessToken: null,\n    moonpayCustomerId: null,\n    activeProduct: null,\n    kycRequiredByProduct: {},\n    lastCheckedAt: null,\n    sumsub: {\n      status: 'idle',\n      result: null,\n      sessionId: null,\n      applicantAccessToken: null,\n    },\n  };\n}\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'initialize',\n  'loadDisclaimers',\n  'acceptTermsAndStartSession',\n  'clearSavedTerms',\n  'handleFrameMessage',\n  'buildCheckFrameUrl',\n  'buildAuthFrameUrl',\n  'buildResetFrameUrl',\n  'checkKycRequired',\n  'getKycStatus',\n  'startSumSub',\n  'reset',\n] as const;\n\nexport type KycControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  KycControllerState\n>;\n\nexport type KycControllerActions =\n  | KycControllerGetStateAction\n  | KycControllerMethodActions;\n\ntype AllowedActions = KycServiceMethodActions;\n\nexport type KycControllerStateChangeEvent = ControllerStateChangeEvent<\n  typeof controllerName,\n  KycControllerState\n>;\n\nexport type KycControllerEvents = KycControllerStateChangeEvent;\n\ntype AllowedEvents = never;\n\nexport type KycControllerMessenger = Messenger<\n  typeof controllerName,\n  KycControllerActions | AllowedActions,\n  KycControllerEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycController}.\n */\nexport type KycControllerOptions = {\n  messenger: KycControllerMessenger;\n  state?: Partial<KycControllerState>;\n  /**\n   * Platform adapter that presents the SumSub SDK. Injected by each client so\n   * the controller stays platform-agnostic.\n   */\n  sumsubLauncher: KycSumSubLauncher;\n};\n\n/**\n * The shape of a message posted by a Check/Auth frame.\n */\ntype FrameMessage = {\n  meta?: { channelId?: string };\n  kind?: string;\n  payload?: {\n    status?:\n      | 'active'\n      | 'connectionRequired'\n      | 'termsAcceptanceRequired'\n      | 'pending'\n      | 'unavailable'\n      | 'failed';\n    credentials?: EncryptedCredentialsEnvelope | string;\n    customer?: { id?: string };\n  };\n};\n\n// === CONTROLLER DEFINITION ===\n\n/**\n * `KycController` orchestrates the vendor-backed KYC / identity-verification\n * flow (MoonPay identity + SumSub documents) behind a vendor-neutral, per\n * product surface used by ramps and card. It owns all state, HTTP\n * orchestration (via `KycService`), crypto, and the frame message protocol;\n * platform-specific presentation (WebView/iframe, SumSub SDK) is injected.\n */\nexport class KycController extends BaseController<\n  typeof controllerName,\n  KycControllerState,\n  KycControllerMessenger\n> {\n  readonly #sumsubLauncher: KycSumSubLauncher;\n\n  /** Ephemeral X25519 keypair for the frame key exchange (never persisted). */\n  readonly #keypair: X25519KeyPair;\n\n  /** Auth-frame client token, kept out of state. */\n  #authClientToken: string | null = null;\n\n  /**\n   * Monotonic flow generation. Incremented by {@link reset} so in-flight async\n   * work (e.g. the KYC-required check) can detect that it was superseded and\n   * avoid writing stale results onto a reset controller.\n   */\n  #generation = 0;\n\n  /**\n   * Guards the automatic post-authentication continuation. The Check/Auth\n   * frames can post more than one `complete` message (duplicate or late), each\n   * of which resolves to an `active` outcome with an access token. Without this\n   * flag, every such message would re-enter {@link #continueAfterAuthentication}\n   * and run the KYC-required check / SumSub sub-flow again while a prior run is\n   * still in flight. Set for the duration of a continuation and cleared by\n   * {@link reset} so a fresh flow can continue again.\n   */\n  #continuationInFlight = false;\n\n  /**\n   * Constructs a new {@link KycController}.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this controller.\n   * @param options.state - Partial initial state; merged over defaults.\n   * @param options.sumsubLauncher - The platform SumSub launcher adapter.\n   */\n  constructor({ messenger, state, sumsubLauncher }: KycControllerOptions) {\n    super({\n      messenger,\n      metadata: kycControllerMetadata,\n      name: controllerName,\n      state: { ...getDefaultKycControllerState(), ...state },\n    });\n\n    this.#sumsubLauncher = sumsubLauncher;\n    this.#keypair = generateKeyPair();\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves persisted terms + geolocation, and auto-creates a session when\n   * terms are already accepted and an email is available.\n   *\n   * @param params - Optional parameters.\n   * @param params.email - The account email to associate with the session.\n   * @param params.product - The consuming feature the flow runs for. When\n   * provided, the controller automatically runs the KYC-required check once\n   * authentication completes (and chains into document verification when KYC\n   * is required). When omitted, the flow stops at `form` and the consumer must\n   * call `checkKycRequired` manually.\n   */\n  async initialize(params?: {\n    email?: string;\n    product?: KycProduct;\n  }): Promise<void> {\n    // `initialize` starts a fresh flow, so `activeProduct` is always reset to\n    // this call's product (or `null`). Otherwise a prior run's product could\n    // linger and cause `#continueAfterAuthentication` to auto-run the check /\n    // sub-flow when the caller intended the manual (product-less) flow.\n    this.#applyUpdate((state) => {\n      if (params?.email) {\n        state.email = params.email;\n      }\n      state.activeProduct = params?.product ?? null;\n    });\n\n    // Resolve country for display; non-blocking.\n    try {\n      const country = await this.messenger.call('KycService:getGeoCountry');\n      this.#applyUpdate((state) => {\n        state.geoCountry = country;\n      });\n    } catch {\n      // Ignore; disclaimers loading will surface a country error if needed.\n    }\n\n    const hasTerms =\n      Boolean(this.state.termsAcceptedAt) &&\n      this.state.acceptedDisclaimerIds.length > 0;\n\n    if (hasTerms && this.state.email) {\n      await this.#createSession();\n      return;\n    }\n\n    this.#applyUpdate((state) => {\n      state.phase = 'terms';\n    });\n    await this.loadDisclaimers();\n  }\n\n  /**\n   * Loads the disclaimers for the resolved (or provided) country.\n   *\n   * @param params - Optional parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code override.\n   */\n  async loadDisclaimers(params?: { country?: string }): Promise<void> {\n    try {\n      const country =\n        params?.country ??\n        this.state.geoCountry ??\n        (await this.messenger.call('KycService:getGeoCountry'));\n      if (country !== this.state.geoCountry) {\n        this.#applyUpdate((state) => {\n          state.geoCountry = country;\n        });\n      }\n      const disclaimers = await this.messenger.call(\n        'KycService:fetchDisclaimers',\n        { country },\n      );\n      this.#applyUpdate((state) => {\n        state.disclaimers = disclaimers;\n        state.disclaimersError = null;\n      });\n    } catch (error) {\n      this.#applyUpdate((state) => {\n        state.disclaimersError = `Failed to load disclaimers: ${String(error)}`;\n      });\n    }\n  }\n\n  /**\n   * Captures terms acceptance for the currently loaded disclaimers and creates\n   * a session.\n   *\n   * @param params - Optional parameters.\n   * @param params.email - The account email to associate with the session.\n   * @param params.product - The consuming feature the flow runs for. See\n   * {@link initialize} for how the product drives the automatic post\n   * authentication continuation.\n   */\n  async acceptTermsAndStartSession(params?: {\n    email?: string;\n    product?: KycProduct;\n  }): Promise<void> {\n    const termsAcceptedAt = new Date().toISOString();\n    const disclaimerIds = this.state.disclaimers.map(\n      (disclaimer) => disclaimer.id,\n    );\n    this.#applyUpdate((state) => {\n      if (params?.email) {\n        state.email = params.email;\n      }\n      if (params?.product) {\n        state.activeProduct = params.product;\n      }\n      state.termsAcceptedAt = termsAcceptedAt;\n      state.acceptedDisclaimerIds = disclaimerIds;\n    });\n    await this.#createSession();\n  }\n\n  /**\n   * Creates a vendor session from the currently stored terms + email.\n   */\n  async #createSession(): Promise<void> {\n    const { email, termsAcceptedAt, acceptedDisclaimerIds } = this.state;\n    if (!email) {\n      this.#fail('Missing email for session creation.');\n      return;\n    }\n    if (!termsAcceptedAt || acceptedDisclaimerIds.length === 0) {\n      this.#fail('Missing terms acceptance for session creation.');\n      return;\n    }\n\n    // A new session invalidates any authentication carried over from a prior\n    // session. Clear the stale access token and auth-frame client token so\n    // `buildAuthFrameUrl` cannot return a URL tied to an old client token and\n    // `checkKycRequired` cannot run with an access token from an earlier\n    // authentication. The Check/Auth frames re-populate these for the new\n    // session.\n    this.#authClientToken = null;\n    this.#applyUpdate((state) => {\n      state.error = null;\n      state.phase = 'session';\n      state.statusMessage = 'Creating session...';\n      state.accessToken = null;\n    });\n\n    try {\n      const { sessionToken } = await this.messenger.call(\n        'KycService:createSession',\n        { email, termsAcceptedAt, disclaimerIds: acceptedDisclaimerIds },\n      );\n      this.#applyUpdate((state) => {\n        state.sessionToken = sessionToken;\n        state.phase = 'check';\n        state.statusMessage = 'Authenticating via Check frame...';\n      });\n    } catch (error) {\n      // Invalidate the stored acceptance so the customer can retry. Also clear\n      // `activeProduct` so a later `acceptTermsAndStartSession` that omits a\n      // product cannot auto-run the KYC check / SumSub chain for this failed\n      // flow's product — matching how `initialize` starts from a clean product.\n      this.#applyUpdate((state) => {\n        this.#clearAcceptedTerms(state);\n        state.activeProduct = null;\n        state.error = `Session creation failed: ${String(error)}`;\n        state.statusMessage =\n          'Session creation failed — accept the terms to try again.';\n        state.phase = 'terms';\n      });\n      await this.loadDisclaimers();\n    }\n  }\n\n  /**\n   * Clears the persisted terms acceptance.\n   */\n  clearSavedTerms(): void {\n    this.#applyUpdate((state) => {\n      this.#clearAcceptedTerms(state);\n    });\n  }\n\n  /**\n   * Clears the stored terms acceptance on the given draft state. Shared by the\n   * paths that must invalidate acceptance — explicit clear, vendor terms\n   * update, and session-creation failure — so they stay in sync. This is a\n   * targeted invalidation and, unlike {@link reset}, deliberately leaves the\n   * rest of the flow (geolocation, disclaimers, phase) untouched.\n   *\n   * @param state - The state to mutate.\n   */\n  #clearAcceptedTerms(state: KycControllerState): void {\n    state.termsAcceptedAt = null;\n    state.acceptedDisclaimerIds = [];\n  }\n\n  /**\n   * Handles a message posted by a Check/Auth frame and advances the flow.\n   *\n   * The transport-agnostic caller (WebView on mobile, iframe on web) forwards\n   * the raw message and injects the returned `reply` back into the frame.\n   *\n   * @param params - The parameters.\n   * @param params.message - The raw message posted by the frame.\n   * @returns An object whose optional `reply` should be posted back.\n   */\n  async handleFrameMessage(params: {\n    message: unknown;\n  }): Promise<{ reply?: unknown }> {\n    const payload = params.message as FrameMessage | undefined;\n\n    if (!payload) {\n      return {};\n    }\n\n    if (payload.kind === 'handshake') {\n      const channelId = payload.meta?.channelId;\n      return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };\n    }\n\n    if (payload.kind !== 'complete') {\n      return {};\n    }\n\n    const channelId = payload.meta?.channelId;\n    const status = payload.payload?.status;\n    const credsEnvelope = payload.payload?.credentials;\n\n    const customerId = payload.payload?.customer?.id ?? null;\n    if (customerId) {\n      this.#applyUpdate((state) => {\n        state.moonpayCustomerId = customerId;\n      });\n    }\n\n    if (!status) {\n      return {};\n    }\n\n    let accessToken: string | undefined;\n    let clientToken: string | undefined;\n    if (credsEnvelope) {\n      try {\n        const { credentials } = decryptCredentials(\n          credsEnvelope,\n          this.#keypair.privateKey,\n        );\n        accessToken = credentials.accessToken;\n        clientToken = credentials.clientToken;\n      } catch (error) {\n        this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);\n        return {};\n      }\n    }\n\n    if (channelId === CHANNEL_CHECK) {\n      await this.#handleCheckOutcome(status, accessToken, clientToken);\n      return {};\n    }\n\n    if (channelId === CHANNEL_AUTH) {\n      await this.#handleAuthOutcome(status, accessToken);\n      return {};\n    }\n\n    return {};\n  }\n\n  /**\n   * Applies a Check-frame outcome.\n   *\n   * @param status - The frame status.\n   * @param accessToken - The decrypted access token, if any.\n   * @param clientToken - The decrypted client token, if any.\n   */\n  async #handleCheckOutcome(\n    status: NonNullable<FrameMessage['payload']>['status'],\n    accessToken?: string,\n    clientToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#applyUpdate((state) => {\n        state.accessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Already authenticated. Review to submit.';\n      });\n      await this.#continueAfterAuthentication();\n      return;\n    }\n    if (status === 'connectionRequired' && clientToken) {\n      this.#authClientToken = clientToken;\n      this.#applyUpdate((state) => {\n        state.phase = 'auth';\n        state.statusMessage = 'Verify your email via OTP in the Auth frame.';\n      });\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Check frame returned status: ${status}`);\n  }\n\n  /**\n   * Applies an Auth-frame outcome.\n   *\n   * @param status - The frame status.\n   * @param accessToken - The decrypted access token, if any.\n   */\n  async #handleAuthOutcome(\n    status: NonNullable<FrameMessage['payload']>['status'],\n    accessToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#applyUpdate((state) => {\n        state.accessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Authenticated. Review to submit.';\n      });\n      await this.#continueAfterAuthentication();\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Auth frame returned status: ${status}`);\n  }\n\n  /**\n   * Continues the flow once authentication has completed (phase `form`).\n   *\n   * When the flow is scoped to a product (see {@link initialize}), the\n   * KYC-required check runs automatically, and — when KYC is required — the\n   * document-verification sub-flow is launched. When no product is set, this is\n   * a no-op and the flow stays at `form` for the consumer to drive manually.\n   *\n   * Errors are already recorded on state by `checkKycRequired` (`error`\n   * phase) and `startSumSub` (`sumsub.status = 'failed'`); this method swallows\n   * them so it can be awaited safely from the frame-message handler.\n   */\n  async #continueAfterAuthentication(): Promise<void> {\n    const product = this.state.activeProduct;\n    if (!product) {\n      return;\n    }\n\n    // A duplicate or late `complete` message can re-enter here while a prior\n    // continuation is still running; ignore it so the check / sub-flow does not\n    // run twice concurrently.\n    if (this.#continuationInFlight) {\n      return;\n    }\n    this.#continuationInFlight = true;\n\n    // Capture the generation so a `reset()` landing mid-continuation does not\n    // let the `finally` clear a flag that belongs to a newer flow.\n    const generation = this.#generation;\n\n    try {\n      const kycRequired = await this.checkKycRequired({ product });\n      if (!kycRequired) {\n        return;\n      }\n\n      try {\n        await this.startSumSub();\n      } catch {\n        // `startSumSub` already records `sumsub.status = 'failed'`; swallow the\n        // rethrown error (e.g. SDK unavailable) so the awaited continuation\n        // resolves cleanly rather than surfacing as an unhandled rejection.\n      }\n    } finally {\n      if (this.#generation === generation) {\n        this.#continuationInFlight = false;\n      }\n    }\n  }\n\n  /**\n   * Invalidates stored terms and returns to the terms phase.\n   */\n  #requireTermsReacceptance(): void {\n    this.#applyUpdate((state) => {\n      this.#clearAcceptedTerms(state);\n      state.phase = 'terms';\n      state.statusMessage =\n        'The vendor updated its Terms of Use — please re-accept.';\n    });\n  }\n\n  /**\n   * Builds the Check-frame URL, or `null` when no session exists yet.\n   *\n   * @returns The Check-frame URL or `null`.\n   */\n  buildCheckFrameUrl(): string | null {\n    if (!this.state.sessionToken) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/check-connection`);\n    url.searchParams.set('sessionToken', this.state.sessionToken);\n    url.searchParams.set('publicKey', this.#keypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_CHECK);\n    url.searchParams.set('skipKyc', 'true');\n    return url.toString();\n  }\n\n  /**\n   * Builds the Auth-frame URL, or `null` when no client token is available.\n   *\n   * @returns The Auth-frame URL or `null`.\n   */\n  buildAuthFrameUrl(): string | null {\n    if (!this.#authClientToken) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/auth`);\n    url.searchParams.set('clientToken', this.#authClientToken);\n    url.searchParams.set('publicKey', this.#keypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_AUTH);\n    return url.toString();\n  }\n\n  /**\n   * Builds the Reset-frame URL.\n   *\n   * @returns The Reset-frame URL.\n   */\n  buildResetFrameUrl(): string {\n    const url = new URL(`${FRAMES_BASE_URL}/reset`);\n    url.searchParams.set('channelId', CHANNEL_RESET);\n    return url.toString();\n  }\n\n  /**\n   * Checks whether KYC is required for a product and caches the result.\n   *\n   * @param params - The parameters.\n   * @param params.product - The consuming feature.\n   * @param params.country - Optional alpha-3 country override.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(params: {\n    product: KycProduct;\n    country?: string;\n  }): Promise<boolean> {\n    const { accessToken } = this.state;\n    if (!accessToken) {\n      this.#fail('Missing accessToken — repeat the authentication step.');\n      return false;\n    }\n    const country = params.country ?? this.state.geoCountry;\n    if (!country) {\n      this.#fail('Missing country for KYC-required check.');\n      return false;\n    }\n\n    // Capture the flow generation so we can detect a `reset()` that happens\n    // while the HTTP call is in flight and avoid writing stale results.\n    const generation = this.#generation;\n\n    this.#applyUpdate((state) => {\n      state.phase = 'submit';\n      state.statusMessage = 'Checking KYC status...';\n    });\n\n    try {\n      const { kycRequired } = await this.messenger.call(\n        'KycService:checkKycRequired',\n        { accessToken, country, capabilities: [{ product: params.product }] },\n      );\n      // The flow was reset while the check was in flight; discard the result\n      // rather than resurrecting a done/cached state on an idle controller.\n      if (this.#generation !== generation) {\n        return false;\n      }\n      this.#applyUpdate((state) => {\n        state.kycRequiredByProduct[params.product] = kycRequired;\n        state.lastCheckedAt = new Date().toISOString();\n        state.phase = 'done';\n        state.statusMessage = 'KYC check complete.';\n      });\n      return kycRequired;\n    } catch (error) {\n      if (this.#generation !== generation) {\n        return false;\n      }\n      this.#fail(`KYC check failed: ${String(error)}`);\n      return false;\n    }\n  }\n\n  /**\n   * Reads the cached \"is KYC required\" result for a product.\n   *\n   * @param params - The parameters.\n   * @param params.product - The consuming feature.\n   * @returns The cached value, or `undefined` if not yet checked.\n   */\n  getKycStatus(params: { product: KycProduct }): boolean | undefined {\n    return this.state.kycRequiredByProduct[params.product];\n  }\n\n  /**\n   * Runs the SumSub document-verification sub-flow: creates a UKYC session,\n   * exchanges the wrapped key for an applicant access token, and presents the\n   * SDK via the injected launcher.\n   *\n   * @param params - Optional parameters.\n   * @param params.locale - BCP-47 locale for the SDK UI.\n   * @param params.debug - Enables SDK debug logging.\n   * @returns The SDK result.\n   */\n  async startSumSub(params?: {\n    locale?: string;\n    debug?: boolean;\n  }): Promise<Record<string, unknown>> {\n    if (!this.#sumsubLauncher.isAvailable()) {\n      const error = 'SumSub SDK is not available in this runtime.';\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'failed';\n        state.sumsub.result = { error };\n      });\n      throw new Error(error);\n    }\n\n    // Capture the flow generation so each async step can detect a `reset()`\n    // that lands mid-flight and avoid writing stale sub-flow state (or, worse,\n    // presenting the SDK) on a controller that is now idle.\n    const generation = this.#generation;\n\n    try {\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'creatingSession';\n        state.sumsub.result = null;\n      });\n\n      const jwtToken = MOCK_JWT_TOKEN;\n      const { sessionId, wrappingPublicKey, idosSessionId } =\n        await this.messenger.call('KycService:createUkycSession', {\n          jwtToken,\n          vendorMetadata: {\n            moonPayAccessToken: this.state.accessToken,\n            moonPayUserId: this.state.moonpayCustomerId,\n          },\n        });\n      // Retain the exchange material so the SDK can refresh its token. The\n      // session's `wrappingPublicKey` is forwarded opaquely as the request's\n      // `wrappedUserKey` field (the /wrapped-key endpoint's body is unchanged).\n      const exchange = {\n        sessionId,\n        wrappedUserKey: wrappingPublicKey,\n        idosSessionId,\n        jwtToken,\n      };\n\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = 'fetchingToken';\n        state.sumsub.sessionId = sessionId;\n      });\n\n      const { applicantAccessToken } = await this.messenger.call(\n        'KycService:submitWrappedKey',\n        exchange,\n      );\n\n      // A reset() landed while the session/token was being prepared; abort\n      // before presenting the SDK rather than launching on an idle controller.\n      if (this.#generation !== generation) {\n        return {};\n      }\n\n      this.#applyUpdate((state) => {\n        state.sumsub.status = 'launching';\n        state.sumsub.applicantAccessToken = applicantAccessToken;\n      });\n\n      // Track whether the SDK ever reported a successful completion. A resolved\n      // `launch` alone does not imply success — the applicant may have\n      // abandoned the flow or the SDK may have reported a non-success outcome.\n      let reachedCompletion = false;\n\n      const result = await this.#sumsubLauncher.launch({\n        applicantAccessToken,\n        onTokenExpiration: async () => {\n          // A reset() may have superseded this flow while the SDK stayed open.\n          // Refuse to refresh against the now-stale UKYC session rather than\n          // silently keeping an orphaned SDK alive.\n          if (this.#generation !== generation) {\n            throw new Error(\n              'KYC flow was reset; SumSub session is no longer active.',\n            );\n          }\n          const refreshed = await this.messenger.call(\n            'KycService:submitWrappedKey',\n            exchange,\n          );\n          return refreshed.applicantAccessToken;\n        },\n        onStatusChange: (_prev, next) => {\n          if (next === SUMSUB_COMPLETED_STATUS) {\n            reachedCompletion = true;\n          }\n          this.#updateIfCurrent(generation, (state) => {\n            state.sumsub.status =\n              next === SUMSUB_COMPLETED_STATUS ? 'complete' : 'inProgress';\n          });\n        },\n        locale: params?.locale ?? 'en',\n        debug: params?.debug ?? false,\n      });\n\n      // Only record `complete` when the SDK actually reported completion;\n      // otherwise treat the resolved-but-unfinished flow as `failed` so\n      // consumers and UI do not mistake it for a finished verification.\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = reachedCompletion ? 'complete' : 'failed';\n        state.sumsub.result = result as Json;\n      });\n      return result;\n    } catch (error) {\n      const result = { error: String(error) };\n      this.#updateIfCurrent(generation, (state) => {\n        state.sumsub.status = 'failed';\n        state.sumsub.result = result;\n      });\n      return result;\n    }\n  }\n\n  /**\n   * Resets the flow to idle, clearing session tokens and sub-flow state while\n   * preserving persisted terms acceptance and the per-product cache.\n   */\n  reset(): void {\n    this.#authClientToken = null;\n    // Invalidate any in-flight async work started before this reset.\n    this.#generation += 1;\n    // Allow the next authenticated flow to auto-continue; any continuation from\n    // the superseded generation will no longer clear this flag (see the\n    // generation guard in `#continueAfterAuthentication`).\n    this.#continuationInFlight = false;\n    this.#applyUpdate((state) => {\n      state.phase = 'idle';\n      state.statusMessage = '';\n      state.error = null;\n      state.disclaimers = [];\n      state.disclaimersError = null;\n      state.sessionToken = null;\n      state.accessToken = null;\n      state.moonpayCustomerId = null;\n      state.activeProduct = null;\n      state.sumsub = {\n        status: 'idle',\n        result: null,\n        sessionId: null,\n        applicantAccessToken: null,\n      };\n    });\n  }\n\n  /**\n   * Applies a state update only when the flow has not been reset since\n   * `generation` was captured. Prevents an in-flight async step from writing\n   * stale results onto a controller that a concurrent {@link reset} has\n   * returned to idle.\n   *\n   * @param generation - The flow generation captured before the async work.\n   * @param updater - The state mutation to apply when still current.\n   * @returns `true` if the update was applied, `false` if it was superseded.\n   */\n  #updateIfCurrent(\n    generation: number,\n    updater: (state: KycControllerState) => void,\n  ): boolean {\n    if (this.#generation !== generation) {\n      return false;\n    }\n    this.#applyUpdate(updater);\n    return true;\n  }\n\n  /**\n   * The single state-update path for this controller. All mutations go through\n   * here (rather than calling `this.update` directly) so the mechanism stays\n   * consistent and one subtlety is handled in a single place:\n   *\n   * `sumsub.result` is typed as the recursive `Json`, and expanding\n   * `Draft<Json>` (which happens whenever an updater touches `sumsub.result`)\n   * trips TypeScript's \"type instantiation is excessively deep\" guard. By\n   * typing the callback parameter as the plain {@link KycControllerState}\n   * instead of Immer's `Draft`, we avoid expanding the draft type while keeping\n   * the same mutate-in-place semantics (the underlying value is still the Immer\n   * draft at runtime).\n   *\n   * @param updater - The state mutation to apply.\n   */\n  #applyUpdate(updater: (state: KycControllerState) => void): void {\n    this.update((state) => {\n      updater(state as unknown as KycControllerState);\n    });\n  }\n\n  /**\n   * Transitions to the error phase with a message.\n   *\n   * @param message - The error message.\n   */\n  #fail(message: string): void {\n    this.#applyUpdate((state) => {\n      state.error = message;\n      state.phase = 'error';\n    });\n  }\n}\n"]}

package/dist/KycService-method-action-types.cjs

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=KycService-method-action-types.cjs.map

package/dist/KycService-method-action-types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService-method-action-types.cjs","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":";AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { KycService } from './KycService';\n\n/**\n * Resolves the customer's country from the geolocation source and converts it\n * to an ISO 3166-1 alpha-3 code.\n *\n * @returns The alpha-3 country code.\n * @throws If the country cannot be determined or mapped.\n */\nexport type KycServiceGetGeoCountryAction = {\n  type: `KycService:getGeoCountry`;\n  handler: KycService['getGeoCountry'];\n};\n\n/**\n * Fetches the disclaimers the customer must accept before a session is\n * created.\n *\n * @param params - The parameters.\n * @param params.country - ISO 3166-1 alpha-3 country code.\n * @returns The disclaimers.\n */\nexport type KycServiceFetchDisclaimersAction = {\n  type: `KycService:fetchDisclaimers`;\n  handler: KycService['fetchDisclaimers'];\n};\n\n/**\n * Creates a vendor session via the UKYC backend.\n *\n * @param params - The session parameters.\n * @returns The created session token.\n */\nexport type KycServiceCreateSessionAction = {\n  type: `KycService:createSession`;\n  handler: KycService['createSession'];\n};\n\n/**\n * Checks whether KYC is required for the given access token, country, and\n * capabilities.\n *\n * @param params - The check parameters.\n * @returns Whether KYC is required.\n */\nexport type KycServiceCheckKycRequiredAction = {\n  type: `KycService:checkKycRequired`;\n  handler: KycService['checkKycRequired'];\n};\n\n/**\n * Creates a UKYC session for the SumSub document-verification sub-flow.\n *\n * @param params - The session parameters.\n * @returns The UKYC session identifiers and wrapped key.\n */\nexport type KycServiceCreateUkycSessionAction = {\n  type: `KycService:createUkycSession`;\n  handler: KycService['createUkycSession'];\n};\n\n/**\n * Exchanges the wrapped user key for a SumSub applicant access token.\n *\n * @param params - The exchange parameters.\n * @returns The applicant access token and status.\n */\nexport type KycServiceSubmitWrappedKeyAction = {\n  type: `KycService:submitWrappedKey`;\n  handler: KycService['submitWrappedKey'];\n};\n\n/**\n * Union of all KycService action types.\n */\nexport type KycServiceMethodActions =\n  | KycServiceGetGeoCountryAction\n  | KycServiceFetchDisclaimersAction\n  | KycServiceCreateSessionAction\n  | KycServiceCheckKycRequiredAction\n  | KycServiceCreateUkycSessionAction\n  | KycServiceSubmitWrappedKeyAction;\n"]}

package/dist/KycService-method-action-types.d.cts

@@ -0,0 +1,74 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+import type { KycService } from "./KycService.cjs";
+/**
+ * Resolves the customer's country from the geolocation source and converts it
+ * to an ISO 3166-1 alpha-3 code.
+ *
+ * @returns The alpha-3 country code.
+ * @throws If the country cannot be determined or mapped.
+ */
+export type KycServiceGetGeoCountryAction = {
+    type: `KycService:getGeoCountry`;
+    handler: KycService['getGeoCountry'];
+};
+/**
+ * Fetches the disclaimers the customer must accept before a session is
+ * created.
+ *
+ * @param params - The parameters.
+ * @param params.country - ISO 3166-1 alpha-3 country code.
+ * @returns The disclaimers.
+ */
+export type KycServiceFetchDisclaimersAction = {
+    type: `KycService:fetchDisclaimers`;
+    handler: KycService['fetchDisclaimers'];
+};
+/**
+ * Creates a vendor session via the UKYC backend.
+ *
+ * @param params - The session parameters.
+ * @returns The created session token.
+ */
+export type KycServiceCreateSessionAction = {
+    type: `KycService:createSession`;
+    handler: KycService['createSession'];
+};
+/**
+ * Checks whether KYC is required for the given access token, country, and
+ * capabilities.
+ *
+ * @param params - The check parameters.
+ * @returns Whether KYC is required.
+ */
+export type KycServiceCheckKycRequiredAction = {
+    type: `KycService:checkKycRequired`;
+    handler: KycService['checkKycRequired'];
+};
+/**
+ * Creates a UKYC session for the SumSub document-verification sub-flow.
+ *
+ * @param params - The session parameters.
+ * @returns The UKYC session identifiers and wrapped key.
+ */
+export type KycServiceCreateUkycSessionAction = {
+    type: `KycService:createUkycSession`;
+    handler: KycService['createUkycSession'];
+};
+/**
+ * Exchanges the wrapped user key for a SumSub applicant access token.
+ *
+ * @param params - The exchange parameters.
+ * @returns The applicant access token and status.
+ */
+export type KycServiceSubmitWrappedKeyAction = {
+    type: `KycService:submitWrappedKey`;
+    handler: KycService['submitWrappedKey'];
+};
+/**
+ * Union of all KycService action types.
+ */
+export type KycServiceMethodActions = KycServiceGetGeoCountryAction | KycServiceFetchDisclaimersAction | KycServiceCreateSessionAction | KycServiceCheckKycRequiredAction | KycServiceCreateUkycSessionAction | KycServiceSubmitWrappedKeyAction;
+//# sourceMappingURL=KycService-method-action-types.d.cts.map

package/dist/KycService-method-action-types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService-method-action-types.d.cts","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,yBAAqB;AAE/C;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAC/B,6BAA6B,GAC7B,gCAAgC,GAChC,6BAA6B,GAC7B,gCAAgC,GAChC,iCAAiC,GACjC,gCAAgC,CAAC"}

package/dist/KycService-method-action-types.d.mts

@@ -0,0 +1,74 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+import type { KycService } from "./KycService.mjs";
+/**
+ * Resolves the customer's country from the geolocation source and converts it
+ * to an ISO 3166-1 alpha-3 code.
+ *
+ * @returns The alpha-3 country code.
+ * @throws If the country cannot be determined or mapped.
+ */
+export type KycServiceGetGeoCountryAction = {
+    type: `KycService:getGeoCountry`;
+    handler: KycService['getGeoCountry'];
+};
+/**
+ * Fetches the disclaimers the customer must accept before a session is
+ * created.
+ *
+ * @param params - The parameters.
+ * @param params.country - ISO 3166-1 alpha-3 country code.
+ * @returns The disclaimers.
+ */
+export type KycServiceFetchDisclaimersAction = {
+    type: `KycService:fetchDisclaimers`;
+    handler: KycService['fetchDisclaimers'];
+};
+/**
+ * Creates a vendor session via the UKYC backend.
+ *
+ * @param params - The session parameters.
+ * @returns The created session token.
+ */
+export type KycServiceCreateSessionAction = {
+    type: `KycService:createSession`;
+    handler: KycService['createSession'];
+};
+/**
+ * Checks whether KYC is required for the given access token, country, and
+ * capabilities.
+ *
+ * @param params - The check parameters.
+ * @returns Whether KYC is required.
+ */
+export type KycServiceCheckKycRequiredAction = {
+    type: `KycService:checkKycRequired`;
+    handler: KycService['checkKycRequired'];
+};
+/**
+ * Creates a UKYC session for the SumSub document-verification sub-flow.
+ *
+ * @param params - The session parameters.
+ * @returns The UKYC session identifiers and wrapped key.
+ */
+export type KycServiceCreateUkycSessionAction = {
+    type: `KycService:createUkycSession`;
+    handler: KycService['createUkycSession'];
+};
+/**
+ * Exchanges the wrapped user key for a SumSub applicant access token.
+ *
+ * @param params - The exchange parameters.
+ * @returns The applicant access token and status.
+ */
+export type KycServiceSubmitWrappedKeyAction = {
+    type: `KycService:submitWrappedKey`;
+    handler: KycService['submitWrappedKey'];
+};
+/**
+ * Union of all KycService action types.
+ */
+export type KycServiceMethodActions = KycServiceGetGeoCountryAction | KycServiceFetchDisclaimersAction | KycServiceCreateSessionAction | KycServiceCheckKycRequiredAction | KycServiceCreateUkycSessionAction | KycServiceSubmitWrappedKeyAction;
+//# sourceMappingURL=KycService-method-action-types.d.mts.map

package/dist/KycService-method-action-types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService-method-action-types.d.mts","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,yBAAqB;AAE/C;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAC/B,6BAA6B,GAC7B,gCAAgC,GAChC,6BAA6B,GAC7B,gCAAgC,GAChC,iCAAiC,GACjC,gCAAgC,CAAC"}

package/dist/KycService-method-action-types.mjs

@@ -0,0 +1,6 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+export {};
+//# sourceMappingURL=KycService-method-action-types.mjs.map

package/dist/KycService-method-action-types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService-method-action-types.mjs","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { KycService } from './KycService';\n\n/**\n * Resolves the customer's country from the geolocation source and converts it\n * to an ISO 3166-1 alpha-3 code.\n *\n * @returns The alpha-3 country code.\n * @throws If the country cannot be determined or mapped.\n */\nexport type KycServiceGetGeoCountryAction = {\n  type: `KycService:getGeoCountry`;\n  handler: KycService['getGeoCountry'];\n};\n\n/**\n * Fetches the disclaimers the customer must accept before a session is\n * created.\n *\n * @param params - The parameters.\n * @param params.country - ISO 3166-1 alpha-3 country code.\n * @returns The disclaimers.\n */\nexport type KycServiceFetchDisclaimersAction = {\n  type: `KycService:fetchDisclaimers`;\n  handler: KycService['fetchDisclaimers'];\n};\n\n/**\n * Creates a vendor session via the UKYC backend.\n *\n * @param params - The session parameters.\n * @returns The created session token.\n */\nexport type KycServiceCreateSessionAction = {\n  type: `KycService:createSession`;\n  handler: KycService['createSession'];\n};\n\n/**\n * Checks whether KYC is required for the given access token, country, and\n * capabilities.\n *\n * @param params - The check parameters.\n * @returns Whether KYC is required.\n */\nexport type KycServiceCheckKycRequiredAction = {\n  type: `KycService:checkKycRequired`;\n  handler: KycService['checkKycRequired'];\n};\n\n/**\n * Creates a UKYC session for the SumSub document-verification sub-flow.\n *\n * @param params - The session parameters.\n * @returns The UKYC session identifiers and wrapped key.\n */\nexport type KycServiceCreateUkycSessionAction = {\n  type: `KycService:createUkycSession`;\n  handler: KycService['createUkycSession'];\n};\n\n/**\n * Exchanges the wrapped user key for a SumSub applicant access token.\n *\n * @param params - The exchange parameters.\n * @returns The applicant access token and status.\n */\nexport type KycServiceSubmitWrappedKeyAction = {\n  type: `KycService:submitWrappedKey`;\n  handler: KycService['submitWrappedKey'];\n};\n\n/**\n * Union of all KycService action types.\n */\nexport type KycServiceMethodActions =\n  | KycServiceGetGeoCountryAction\n  | KycServiceFetchDisclaimersAction\n  | KycServiceCreateSessionAction\n  | KycServiceCheckKycRequiredAction\n  | KycServiceCreateUkycSessionAction\n  | KycServiceSubmitWrappedKeyAction;\n"]}

package/dist/KycService.cjs

@@ -0,0 +1,238 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _KycService_instances, _KycService_messenger, _KycService_fetch, _KycService_baseUrl, _KycService_policy, _KycService_validateResponse, _KycService_request;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KycService = exports.serviceName = void 0;
+const controller_utils_1 = require("@metamask/controller-utils");
+const superstruct_1 = require("@metamask/superstruct");
+const countryCodes_1 = require("./countryCodes.cjs");
+// === GENERAL ===
+/**
+ * The name of the {@link KycService}, used to namespace the service's actions.
+ */
+exports.serviceName = 'KycService';
+const KYC_API_URLS = {
+    production: 'https://kyc-api.cx.metamask.io',
+    development: 'https://kyc-api.dev-api.cx.metamask.io',
+};
+// === MESSENGER ===
+const MESSENGER_EXPOSED_METHODS = [
+    'getGeoCountry',
+    'fetchDisclaimers',
+    'createSession',
+    'checkKycRequired',
+    'createUkycSession',
+    'submitWrappedKey',
+];
+// === API RESPONSE SCHEMAS ===
+const DisclaimerStruct = (0, superstruct_1.type)({
+    id: (0, superstruct_1.string)(),
+    display_name: (0, superstruct_1.string)(),
+    url: (0, superstruct_1.string)(),
+});
+const DisclaimersResponseStruct = (0, superstruct_1.array)(DisclaimerStruct);
+const CreateSessionResponseStruct = (0, superstruct_1.type)({ sessionToken: (0, superstruct_1.string)() });
+// The live KYC API returns the flag under `required`; the service normalizes
+// this to `kycRequired` for consumers (see `checkKycRequired`).
+const KycRequiredResponseStruct = (0, superstruct_1.type)({ required: (0, superstruct_1.boolean)() });
+const UkycSessionResponseStruct = (0, superstruct_1.type)({
+    sessionId: (0, superstruct_1.string)(),
+    wrappingPublicKey: (0, superstruct_1.string)(),
+    idosSessionId: (0, superstruct_1.string)(),
+});
+const WrappedKeyResponseStruct = (0, superstruct_1.type)({
+    status: (0, superstruct_1.string)(),
+    applicantAccessToken: (0, superstruct_1.string)(),
+});
+// === SERVICE DEFINITION ===
+/**
+ * `KycService` communicates with the Universal KYC (UKYC) backend to drive the
+ * identity + document-verification flow. It is stateless and platform-agnostic:
+ * HTTP is performed through an injected `fetch`, and the auth bearer token and
+ * geolocation come from other controllers via the messenger.
+ */
+class KycService {
+    /**
+     * Constructs a new KycService.
+     *
+     * @param options - The constructor options.
+     * @param options.messenger - The messenger suited for this service.
+     * @param options.fetch - A function used to make HTTP requests.
+     * @param options.env - The environment; determines the base URL.
+     * @param options.baseUrl - Overrides the base URL derived from `env`.
+     * @param options.policyOptions - Options for the request service policy.
+     */
+    constructor({ messenger, fetch: fetchFunction, env, baseUrl, policyOptions, }) {
+        _KycService_instances.add(this);
+        _KycService_messenger.set(this, void 0);
+        _KycService_fetch.set(this, void 0);
+        _KycService_baseUrl.set(this, void 0);
+        _KycService_policy.set(this, void 0);
+        this.name = exports.serviceName;
+        __classPrivateFieldSet(this, _KycService_messenger, messenger, "f");
+        __classPrivateFieldSet(this, _KycService_fetch, fetchFunction, "f");
+        __classPrivateFieldSet(this, _KycService_baseUrl, baseUrl ?? KYC_API_URLS[env], "f");
+        __classPrivateFieldSet(this, _KycService_policy, (0, controller_utils_1.createServicePolicy)(policyOptions ?? {}), "f");
+        __classPrivateFieldGet(this, _KycService_messenger, "f").registerMethodActionHandlers(this, MESSENGER_EXPOSED_METHODS);
+    }
+    /**
+     * Resolves the customer's country from the geolocation source and converts it
+     * to an ISO 3166-1 alpha-3 code.
+     *
+     * @returns The alpha-3 country code.
+     * @throws If the country cannot be determined or mapped.
+     */
+    async getGeoCountry() {
+        const location = await __classPrivateFieldGet(this, _KycService_messenger, "f").call('GeolocationController:getGeolocation');
+        // Guard nullish/empty geolocation with the documented domain error rather
+        // than letting `assert(location, string())` surface a superstruct
+        // assertion error (which would change how the failure reads in
+        // `disclaimersError`).
+        const alpha2 = typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';
+        if (!alpha2 || alpha2 === 'UNKNOWN') {
+            throw new Error(`Unable to determine country from geolocation (got "${String(location)}").`);
+        }
+        const alpha3 = (0, countryCodes_1.alpha2ToAlpha3)(alpha2);
+        if (!alpha3) {
+            throw new Error(`Unable to map country code "${alpha2}" to an ISO 3166-1 alpha-3 code.`);
+        }
+        return alpha3;
+    }
+    /**
+     * Fetches the disclaimers the customer must accept before a session is
+     * created.
+     *
+     * @param params - The parameters.
+     * @param params.country - ISO 3166-1 alpha-3 country code.
+     * @returns The disclaimers.
+     */
+    async fetchDisclaimers({ country, }) {
+        const url = new URL('/vendors/moonpay/disclaimers', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        url.searchParams.set('country', country);
+        const data = await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_request).call(this, url, { method: 'GET' });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, DisclaimersResponseStruct, 'disclaimers');
+    }
+    /**
+     * Creates a vendor session via the UKYC backend.
+     *
+     * @param params - The session parameters.
+     * @returns The created session token.
+     */
+    async createSession(params) {
+        const url = new URL('/vendors/moonpay/sessions', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_request).call(this, url, {
+            method: 'POST',
+            body: JSON.stringify(params),
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, CreateSessionResponseStruct, 'sessions');
+    }
+    /**
+     * Checks whether KYC is required for the given access token, country, and
+     * capabilities.
+     *
+     * @param params - The check parameters.
+     * @returns Whether KYC is required.
+     */
+    async checkKycRequired(params) {
+        const url = new URL('/vendors/moonpay/kyc-required', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_request).call(this, url, {
+            method: 'POST',
+            body: JSON.stringify({
+                accessToken: params.accessToken,
+                country: params.country,
+                capabilities: params.capabilities ?? [{ product: 'ramps' }],
+            }),
+        });
+        const { required } = __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycRequiredResponseStruct, 'kyc-required');
+        return { kycRequired: required };
+    }
+    /**
+     * Creates a UKYC session for the SumSub document-verification sub-flow.
+     *
+     * @param params - The session parameters.
+     * @returns The UKYC session identifiers and wrapped key.
+     */
+    async createUkycSession(params) {
+        const url = new URL('/sessions', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_request).call(this, url, {
+            method: 'POST',
+            body: JSON.stringify({
+                vendorId: 'moonpay',
+                vendorUserId: 'mockedId',
+                jwtToken: params.jwtToken,
+                vendorMetadata: params.vendorMetadata,
+            }),
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, UkycSessionResponseStruct, 'UKYC sessions');
+    }
+    /**
+     * Exchanges the wrapped user key for a SumSub applicant access token.
+     *
+     * @param params - The exchange parameters.
+     * @returns The applicant access token and status.
+     */
+    async submitWrappedKey(params) {
+        const url = new URL(`/sessions/${encodeURIComponent(params.sessionId)}/wrapped-key`, __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_request).call(this, url, {
+            method: 'POST',
+            body: JSON.stringify({
+                wrappedUserKey: params.wrappedUserKey,
+                jwtToken: params.jwtToken,
+                idosSessionId: params.idosSessionId,
+            }),
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, WrappedKeyResponseStruct, 'wrapped-key');
+    }
+}
+exports.KycService = KycService;
+_KycService_messenger = new WeakMap(), _KycService_fetch = new WeakMap(), _KycService_baseUrl = new WeakMap(), _KycService_policy = new WeakMap(), _KycService_instances = new WeakSet(), _KycService_validateResponse = function _KycService_validateResponse(data, struct, apiName) {
+    try {
+        (0, superstruct_1.assert)(data, struct);
+        return data;
+    }
+    catch (error) {
+        const detail = error instanceof superstruct_1.StructError
+            ? `${error.message} (received: ${JSON.stringify(data)})`
+            : String(error);
+        throw new Error(`Malformed response received from ${apiName} API: ${detail}`);
+    }
+}, _KycService_request = 
+/**
+ * Performs an authenticated JSON request wrapped in the service policy.
+ *
+ * @param url - The request URL.
+ * @param init - The request init (method, body).
+ * @returns The parsed JSON response.
+ */
+async function _KycService_request(url, init) {
+    const bearerToken = await __classPrivateFieldGet(this, _KycService_messenger, "f").call('AuthenticationController:getBearerToken');
+    (0, superstruct_1.assert)(bearerToken, (0, superstruct_1.string)());
+    if (!bearerToken) {
+        throw new Error('Unable to obtain an authentication bearer token — is the wallet signed in?');
+    }
+    const response = await __classPrivateFieldGet(this, _KycService_policy, "f").execute(async () => {
+        const localResponse = await __classPrivateFieldGet(this, _KycService_fetch, "f").call(this, url.toString(), {
+            ...init,
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${bearerToken}`,
+            },
+        });
+        if (!localResponse.ok) {
+            throw new controller_utils_1.HttpError(localResponse.status, `Fetching '${url.toString()}' failed with status '${localResponse.status}'`);
+        }
+        return localResponse;
+    });
+    return response.json();
+};
+//# sourceMappingURL=KycService.cjs.map

package/dist/KycService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService.cjs","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAIA,iEAA4E;AAK5E,uDAO+B;AAE/B,qDAAgD;AAIhD,kBAAkB;AAElB;;GAEG;AACU,QAAA,WAAW,GAAG,YAAY,CAAC;AAOxC,MAAM,YAAY,GAA0C;IAC1D,UAAU,EAAE,gCAAgC;IAC5C,WAAW,EAAE,wCAAwC;CACtD,CAAC;AAEF,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAkDX,+BAA+B;AAE/B,MAAM,gBAAgB,GAAG,IAAA,kBAAI,EAAC;IAC5B,EAAE,EAAE,IAAA,oBAAM,GAAE;IACZ,YAAY,EAAE,IAAA,oBAAM,GAAE;IACtB,GAAG,EAAE,IAAA,oBAAM,GAAE;CACd,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,IAAA,mBAAK,EAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,2BAA2B,GAAG,IAAA,kBAAI,EAAC,EAAE,YAAY,EAAE,IAAA,oBAAM,GAAE,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,IAAA,kBAAI,EAAC,EAAE,QAAQ,EAAE,IAAA,qBAAO,GAAE,EAAE,CAAC,CAAC;AAEhE,MAAM,yBAAyB,GAAG,IAAA,kBAAI,EAAC;IACrC,SAAS,EAAE,IAAA,oBAAM,GAAE;IACnB,iBAAiB,EAAE,IAAA,oBAAM,GAAE;IAC3B,aAAa,EAAE,IAAA,oBAAM,GAAE;CACxB,CAAC,CAAC;AAGH,MAAM,wBAAwB,GAAG,IAAA,kBAAI,EAAC;IACpC,MAAM,EAAE,IAAA,oBAAM,GAAE;IAChB,oBAAoB,EAAE,IAAA,oBAAM,GAAE;CAC/B,CAAC,CAAC;AA6BH,6BAA6B;AAE7B;;;;;GAKG;AACH,MAAa,UAAU;IAWrB;;;;;;;;;OASG;IACH,YAAY,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,GAAG,EACH,OAAO,EACP,aAAa,GACK;;QAxBX,wCAAgC;QAEhC,oCAAqB;QAErB,sCAAiB;QAEjB,qCAAuB;QAmB9B,IAAI,CAAC,IAAI,GAAG,mBAAW,CAAC;QACxB,uBAAA,IAAI,yBAAc,SAAS,MAAA,CAAC;QAC5B,uBAAA,IAAI,qBAAU,aAAa,MAAA,CAAC;QAC5B,uBAAA,IAAI,uBAAY,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,MAAA,CAAC;QAC7C,uBAAA,IAAI,sBAAW,IAAA,sCAAmB,EAAC,aAAa,IAAI,EAAE,CAAC,MAAA,CAAC;QACxD,uBAAA,IAAI,6BAAW,CAAC,4BAA4B,CAC1C,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,6BAAW,CAAC,IAAI,CACzC,sCAAsC,CACvC,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,+DAA+D;QAC/D,uBAAuB;QACvB,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAC1D,QAAQ,CACT,KAAK,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,6BAAc,EAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,kCAAkC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,OAAO,GAGR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,8BAA8B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,kDAAS,MAAb,IAAI,EAAU,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,aAAa,CACK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,kDAAS,MAAb,IAAI,EAAU,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,kDAAS,MAAb,IAAI,EAAU,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;aAC5D,CAAC;SACH,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,kDAAS,MAAb,IAAI,EAAU,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,QAAQ,EAAE,SAAS;gBACnB,YAAY,EAAE,UAAU;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAC/D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,kDAAS,MAAb,IAAI,EAAU,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC;SACH,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,wBAAwB,EACxB,aAAa,CACd,CAAC;IACJ,CAAC;CAwEF;AA3QD,gCA2QC;+PAvDG,IAAa,EACb,MAA4B,EAC5B,OAAe;IAEf,IAAI,CAAC;QACH,IAAA,oBAAM,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,yBAAW;YAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,SAAS,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,8BAAU,GAAQ,EAAE,IAAiB;IACxC,MAAM,WAAW,GAAG,MAAM,uBAAA,IAAI,6BAAW,CAAC,IAAI,CAC5C,yCAAyC,CAC1C,CAAC;IACF,IAAA,oBAAM,EAAC,WAAW,EAAE,IAAA,oBAAM,GAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,0BAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACrD,MAAM,aAAa,GAAG,MAAM,uBAAA,IAAI,yBAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,QAAQ,EAAE,EAAE;YACtD,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,4BAAS,CACjB,aAAa,CAAC,MAAM,EACpB,aAAa,GAAG,CAAC,QAAQ,EAAE,yBAAyB,aAAa,CAAC,MAAM,GAAG,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC","sourcesContent":["import type {\n  CreateServicePolicyOptions,\n  ServicePolicy,\n} from '@metamask/controller-utils';\nimport { createServicePolicy, HttpError } from '@metamask/controller-utils';\nimport type { GeolocationControllerGetGeolocationAction } from '@metamask/geolocation-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { AuthenticationControllerGetBearerTokenAction } from '@metamask/profile-sync-controller/auth';\nimport type { Infer, Struct } from '@metamask/superstruct';\nimport {\n  array,\n  assert,\n  boolean,\n  string,\n  StructError,\n  type,\n} from '@metamask/superstruct';\n\nimport { alpha2ToAlpha3 } from './countryCodes';\nimport type { KycServiceMethodActions } from './KycService-method-action-types';\nimport type { KycDisclaimer } from './types';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link KycService}, used to namespace the service's actions.\n */\nexport const serviceName = 'KycService';\n\n/**\n * The supported environments for the Universal KYC API.\n */\nexport type KycServiceEnvironment = 'production' | 'development';\n\nconst KYC_API_URLS: Record<KycServiceEnvironment, string> = {\n  production: 'https://kyc-api.cx.metamask.io',\n  development: 'https://kyc-api.dev-api.cx.metamask.io',\n};\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'getGeoCountry',\n  'fetchDisclaimers',\n  'createSession',\n  'checkKycRequired',\n  'createUkycSession',\n  'submitWrappedKey',\n] as const;\n\n/**\n * Actions that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceActions = KycServiceMethodActions;\n\n/**\n * Actions from other messengers that {@link KycService} calls.\n */\ntype AllowedActions =\n  | AuthenticationControllerGetBearerTokenAction\n  | GeolocationControllerGetGeolocationAction;\n\n/**\n * Events that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceEvents = never;\n\n/**\n * Events from other messengers that {@link KycService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger restricted to actions and events accessed by\n * {@link KycService}.\n */\nexport type KycServiceMessenger = Messenger<\n  typeof serviceName,\n  KycServiceActions | AllowedActions,\n  KycServiceEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycService}.\n */\nexport type KycServiceOptions = {\n  messenger: KycServiceMessenger;\n  fetch: typeof fetch;\n  env: KycServiceEnvironment;\n  /**\n   * Overrides the base URL derived from `env`. When provided, this value is\n   * used verbatim as the base URL for all requests, which is useful for\n   * targeting a local or staging KYC API.\n   */\n  baseUrl?: string;\n  policyOptions?: CreateServicePolicyOptions;\n};\n\n// === API RESPONSE SCHEMAS ===\n\nconst DisclaimerStruct = type({\n  id: string(),\n  display_name: string(),\n  url: string(),\n});\nconst DisclaimersResponseStruct = array(DisclaimerStruct);\n\nconst CreateSessionResponseStruct = type({ sessionToken: string() });\n\n// The live KYC API returns the flag under `required`; the service normalizes\n// this to `kycRequired` for consumers (see `checkKycRequired`).\nconst KycRequiredResponseStruct = type({ required: boolean() });\n\nconst UkycSessionResponseStruct = type({\n  sessionId: string(),\n  wrappingPublicKey: string(),\n  idosSessionId: string(),\n});\nexport type UkycSessionResponse = Infer<typeof UkycSessionResponseStruct>;\n\nconst WrappedKeyResponseStruct = type({\n  status: string(),\n  applicantAccessToken: string(),\n});\nexport type WrappedKeyResponse = Infer<typeof WrappedKeyResponseStruct>;\n\n// === PARAM TYPES ===\n\nexport type CreateSessionParams = {\n  email: string;\n  termsAcceptedAt: string;\n  disclaimerIds: string[];\n};\n\nexport type CheckKycRequiredParams = {\n  accessToken: string;\n  country: string;\n  capabilities?: { product: string }[];\n};\n\nexport type CreateUkycSessionParams = {\n  jwtToken: string;\n  vendorMetadata: Record<string, unknown>;\n};\n\nexport type SubmitWrappedKeyParams = {\n  sessionId: string;\n  wrappedUserKey: string;\n  idosSessionId: string;\n  jwtToken: string;\n};\n\n// === SERVICE DEFINITION ===\n\n/**\n * `KycService` communicates with the Universal KYC (UKYC) backend to drive the\n * identity + document-verification flow. It is stateless and platform-agnostic:\n * HTTP is performed through an injected `fetch`, and the auth bearer token and\n * geolocation come from other controllers via the messenger.\n */\nexport class KycService {\n  readonly name: typeof serviceName;\n\n  readonly #messenger: KycServiceMessenger;\n\n  readonly #fetch: typeof fetch;\n\n  readonly #baseUrl: string;\n\n  readonly #policy: ServicePolicy;\n\n  /**\n   * Constructs a new KycService.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this service.\n   * @param options.fetch - A function used to make HTTP requests.\n   * @param options.env - The environment; determines the base URL.\n   * @param options.baseUrl - Overrides the base URL derived from `env`.\n   * @param options.policyOptions - Options for the request service policy.\n   */\n  constructor({\n    messenger,\n    fetch: fetchFunction,\n    env,\n    baseUrl,\n    policyOptions,\n  }: KycServiceOptions) {\n    this.name = serviceName;\n    this.#messenger = messenger;\n    this.#fetch = fetchFunction;\n    this.#baseUrl = baseUrl ?? KYC_API_URLS[env];\n    this.#policy = createServicePolicy(policyOptions ?? {});\n    this.#messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves the customer's country from the geolocation source and converts it\n   * to an ISO 3166-1 alpha-3 code.\n   *\n   * @returns The alpha-3 country code.\n   * @throws If the country cannot be determined or mapped.\n   */\n  async getGeoCountry(): Promise<string> {\n    const location = await this.#messenger.call(\n      'GeolocationController:getGeolocation',\n    );\n    // Guard nullish/empty geolocation with the documented domain error rather\n    // than letting `assert(location, string())` surface a superstruct\n    // assertion error (which would change how the failure reads in\n    // `disclaimersError`).\n    const alpha2 =\n      typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';\n    if (!alpha2 || alpha2 === 'UNKNOWN') {\n      throw new Error(\n        `Unable to determine country from geolocation (got \"${String(\n          location,\n        )}\").`,\n      );\n    }\n    const alpha3 = alpha2ToAlpha3(alpha2);\n    if (!alpha3) {\n      throw new Error(\n        `Unable to map country code \"${alpha2}\" to an ISO 3166-1 alpha-3 code.`,\n      );\n    }\n    return alpha3;\n  }\n\n  /**\n   * Fetches the disclaimers the customer must accept before a session is\n   * created.\n   *\n   * @param params - The parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchDisclaimers({\n    country,\n  }: {\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL('/vendors/moonpay/disclaimers', this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.#request(url, { method: 'GET' });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Creates a vendor session via the UKYC backend.\n   *\n   * @param params - The session parameters.\n   * @returns The created session token.\n   */\n  async createSession(\n    params: CreateSessionParams,\n  ): Promise<Infer<typeof CreateSessionResponseStruct>> {\n    const url = new URL('/vendors/moonpay/sessions', this.#baseUrl);\n    const data = await this.#request(url, {\n      method: 'POST',\n      body: JSON.stringify(params),\n    });\n    return this.#validateResponse(\n      data,\n      CreateSessionResponseStruct,\n      'sessions',\n    );\n  }\n\n  /**\n   * Checks whether KYC is required for the given access token, country, and\n   * capabilities.\n   *\n   * @param params - The check parameters.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(\n    params: CheckKycRequiredParams,\n  ): Promise<{ kycRequired: boolean }> {\n    const url = new URL('/vendors/moonpay/kyc-required', this.#baseUrl);\n    const data = await this.#request(url, {\n      method: 'POST',\n      body: JSON.stringify({\n        accessToken: params.accessToken,\n        country: params.country,\n        capabilities: params.capabilities ?? [{ product: 'ramps' }],\n      }),\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Creates a UKYC session for the SumSub document-verification sub-flow.\n   *\n   * @param params - The session parameters.\n   * @returns The UKYC session identifiers and wrapped key.\n   */\n  async createUkycSession(\n    params: CreateUkycSessionParams,\n  ): Promise<UkycSessionResponse> {\n    const url = new URL('/sessions', this.#baseUrl);\n    const data = await this.#request(url, {\n      method: 'POST',\n      body: JSON.stringify({\n        vendorId: 'moonpay',\n        vendorUserId: 'mockedId',\n        jwtToken: params.jwtToken,\n        vendorMetadata: params.vendorMetadata,\n      }),\n    });\n    return this.#validateResponse(\n      data,\n      UkycSessionResponseStruct,\n      'UKYC sessions',\n    );\n  }\n\n  /**\n   * Exchanges the wrapped user key for a SumSub applicant access token.\n   *\n   * @param params - The exchange parameters.\n   * @returns The applicant access token and status.\n   */\n  async submitWrappedKey(\n    params: SubmitWrappedKeyParams,\n  ): Promise<WrappedKeyResponse> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/wrapped-key`,\n      this.#baseUrl,\n    );\n    const data = await this.#request(url, {\n      method: 'POST',\n      body: JSON.stringify({\n        wrappedUserKey: params.wrappedUserKey,\n        jwtToken: params.jwtToken,\n        idosSessionId: params.idosSessionId,\n      }),\n    });\n    return this.#validateResponse(\n      data,\n      WrappedKeyResponseStruct,\n      'wrapped-key',\n    );\n  }\n\n  /**\n   * Validates a parsed API response against a superstruct schema, throwing a\n   * descriptive error when the response does not match.\n   *\n   * Unlike a bare `Struct.is` check, this surfaces exactly which field was\n   * missing or had the wrong type, which is essential for diagnosing shape\n   * mismatches between the client and the live API.\n   *\n   * @param data - The parsed response body.\n   * @param struct - The superstruct schema the body is expected to satisfy.\n   * @param apiName - A human-readable name of the API, used in the error message.\n   * @returns The validated, typed response.\n   * @throws If `data` does not match `struct`.\n   */\n  #validateResponse<Type, Schema>(\n    data: unknown,\n    struct: Struct<Type, Schema>,\n    apiName: string,\n  ): Type {\n    try {\n      assert(data, struct);\n      return data;\n    } catch (error) {\n      const detail =\n        error instanceof StructError\n          ? `${error.message} (received: ${JSON.stringify(data)})`\n          : String(error);\n      throw new Error(\n        `Malformed response received from ${apiName} API: ${detail}`,\n      );\n    }\n  }\n\n  /**\n   * Performs an authenticated JSON request wrapped in the service policy.\n   *\n   * @param url - The request URL.\n   * @param init - The request init (method, body).\n   * @returns The parsed JSON response.\n   */\n  async #request(url: URL, init: RequestInit): Promise<unknown> {\n    const bearerToken = await this.#messenger.call(\n      'AuthenticationController:getBearerToken',\n    );\n    assert(bearerToken, string());\n    if (!bearerToken) {\n      throw new Error(\n        'Unable to obtain an authentication bearer token — is the wallet signed in?',\n      );\n    }\n\n    const response = await this.#policy.execute(async () => {\n      const localResponse = await this.#fetch(url.toString(), {\n        ...init,\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${bearerToken}`,\n        },\n      });\n      if (!localResponse.ok) {\n        throw new HttpError(\n          localResponse.status,\n          `Fetching '${url.toString()}' failed with status '${localResponse.status}'`,\n        );\n      }\n      return localResponse;\n    });\n\n    return response.json();\n  }\n}\n"]}