@metamask-previews/kyc-controller 0.0.0-preview-4f4c98e → 0.0.0-preview-eb263b0ee

package/dist/KycService.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"KycService.d.mts","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACpC,kCAAkC,EACnC,oCAAoC;AACrC,OAAO,KAAK,EAAE,0BAA0B,EAAE,mCAAmC;AAE7E,OAAO,KAAK,EAAE,yCAAyC,EAAE,yCAAyC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,4CAA4C,EAAE,+CAA+C;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B;AAa3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,6BAA6B;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAA4C;AACnF,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,EACT,gBAAgB,EACjB,oBAAmB;AAKpB;;GAEG;AACH,eAAO,MAAM,WAAW,eAAe,CAAC;AAqBxC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,kCAAkC,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,iCAAiC,CAAC;AAEtC;;GAEG;AACH,KAAK,cAAc,GACf,4CAA4C,GAC5C,yCAAyC,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,CACpE,OAAO,WAAW,CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAC7C,oCAAoC,CAAC,OAAO,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,mCAAmC,CAAC;AAExC;;GAEG;AACH,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,CACzC,OAAO,WAAW,EAClB,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,aAAa,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAkBF,QAAA,MAAM,2BAA2B;;;;EAAmC,CAAC;AAkBrE,QAAA,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG1B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAUpE,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAAmC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE1E,QAAA,MAAM,kCAAkC;;;;;;EAGtC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAC9C,OAAO,kCAAkC,CAC1C,CAAC;AAaF,QAAA,MAAM,4BAA4B;;;;;;;;EAIhC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAgChF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,mEAAmE;IACnE,MAAM,EAAE,SAAS,CAAC;IAClB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,6DAA6D;IAC7D,iCAAiC,EAAE,OAAO,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,uBAAuB,CAAC;IAClD,0BAA0B,EAAE,uBAAuB,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;;;GAcG;AACH,qBAAa,UAAW,SAAQ,eAAe,CAC7C,OAAO,WAAW,EAClB,mBAAmB,CACpB;;IAOC;;;;;;;;;;;;;;OAcG;gBACS,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAsB,EACtB,aAAkB,GACnB,EAAE,iBAAiB;IA8BpB;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA0BtC;;;;;;;;OAQG;IACG,gBAAgB,CAAC,EACrB,MAAkB,EAClB,OAAO,GACR,EAAE;QACD,MAAM,CAAC,EAAE,SAAS,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAyBrD;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAoDpC;;;;;;;;;;OAUG;IACG,oBAAoB,CACxB,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,sBAAsB,CAAC;IAwBlC;;;;;;;;;;;OAWG;IACG,uBAAuB,CAC3B,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA0B9B;;;;;;;;OAQG;IACG,uBAAuB,CAC3B,MAAM,EAAE,6BAA6B,GACpC,OAAO,CAAC,qBAAqB,CAAC;IAmBjC;;;;;;;;OAQG;IACG,wBAAwB,CAC5B,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,qBAAqB,CAAC;IAiCjC;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgBtD;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAgBxC;;;;;;;;;;OAUG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAyB/B;;;;;;;;OAQG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,gBAAgB,CAAC;IAyB5B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC;IAmBxC;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC;CAqI7B"}

package/dist/{KycService.js → KycService.mjs}

@@ -10,12 +10,12 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
 var _KycService_instances, _KycService_fetch, _KycService_baseUrl, _KycService_fractalEncryptionBaseUrl, _KycService_validateResponse, _KycService_requestJson;
-import { BaseDataService } from '@metamask/base-data-service';
-import { HttpError } from '@metamask/controller-utils';
-import { array, assert, boolean, enums, optional, string, StructError, type, } from '@metamask/superstruct';
-import { Duration, inMilliseconds } from '@metamask/utils';
-import { alpha2ToAlpha3 } from './countryCodes.js';
-import { UKYC_JWKS_PATH } from './ukyc/constants.js';
+import { BaseDataService } from "@metamask/base-data-service";
+import { HttpError } from "@metamask/controller-utils";
+import { array, assert, boolean, enums, optional, string, StructError, type } from "@metamask/superstruct";
+import { Duration, inMilliseconds } from "@metamask/utils";
+import { alpha2ToAlpha3 } from "./countryCodes.mjs";
+import { UKYC_JWKS_PATH } from "./ukyc/constants.mjs";
 // === GENERAL ===
 /**
  * The name of the {@link KycService}, used to namespace the service's actions.
@@ -621,4 +621,4 @@ async function _KycService_requestJson(url, init, options = {}) {
     }
     return (await response.json());
 };
-//# sourceMappingURL=KycService.js.map
+//# sourceMappingURL=KycService.mjs.map

package/dist/{KycService.js.map → KycService.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"KycService.js","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAO9D,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAKvD,OAAO,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,KAAK,EACL,QAAQ,EACR,MAAM,EACN,WAAW,EACX,IAAI,GACL,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAWnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,kBAAkB;AAElB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,sBAAsB;IACtB,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,kBAAkB;CACV,CAAC;AAsFX,+BAA+B;AAE/B,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,EAAE;IACZ,YAAY,EAAE,MAAM,EAAE;IACtB,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,mBAAmB,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,EAAE;IACZ,WAAW,EAAE,MAAM,EAAE;IACrB,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEhE,MAAM,2BAA2B,GAAG,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhE,wEAAwE;AACxE,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,qBAAqB,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvB,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvB,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,qBAAqB;IACtC,QAAQ,EAAE,MAAM,EAAE;CACnB,CAAC,CAAC;AAGH,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE;IACnB,0DAA0D;IAC1D,uEAAuE;IACvE,iBAAiB,EAAE,sBAAsB;IACzC,mBAAmB,EAAE,sBAAsB;CAC5C,CAAC,CAAC;AAGH,MAAM,kCAAkC,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE;IAChB,oBAAoB,EAAE,MAAM,EAAE;CAC/B,CAAC,CAAC;AAKH,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE;IACrB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE;IAChB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,gFAAgF;AAChF,4EAA4E;AAC5E,MAAM,4BAA4B,GAAG,IAAI,CAAC;IACxC,EAAE,EAAE,MAAM,EAAE;IACZ,KAAK,EAAE,MAAM,EAAE;IACf,MAAM,EAAE,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,SAAS;IACT,uBAAuB;IACvB,kBAAkB;IAClB,WAAW;CACH,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;IACrC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,MAAM,EAAE;IACb,OAAO,EAAE,MAAM,EAAE;IACjB,KAAK,EAAE,MAAM,EAAE;IACf,GAAG,EAAE,MAAM,EAAE;IACb,SAAS,EAAE,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC;IAC5C,IAAI,EAAE,KAAK,CAAC,qBAAqB,CAAC;IAClC,WAAW,EAAE,KAAK,CAAC,qBAAqB,CAAC;IACzC,iCAAiC,EAAE,OAAO,EAAE;CAC7C,CAAC,CAAC;AA8FH,6BAA6B;AAE7B;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,UAAW,SAAQ,eAG/B;IAOC;;;;;;;;;;;;;;OAcG;IACH,YAAY,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAiB,GAAG,EAAE,EACtB,aAAa,GAAG,EAAE,GACA;QAClB,KAAK,CAAC;YACJ,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,iBAAiB;YACjB,aAAa;SACd,CAAC,CAAC;;QAlCI,oCAAqB;QAErB,sCAAiB;QAEjB,uDAAkC;QA+BzC,yEAAyE;QACzE,4EAA4E;QAC5E,8CAA8C;QAC9C,IAAI,aAAa,EAAE,CAAC;YAClB,uBAAA,IAAI,qBAAU,aAAa,MAAA,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAClD,uBAAA,IAAI,qBAAU,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAA,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,uBAAA,IAAI,uBAAY,OAAO,MAAA,CAAC;QACxB,uBAAA,IAAI,wCAA6B,wBAAwB,IAAI,EAAE,MAAA,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxC,sCAAsC,CACvC,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,+DAA+D;QAC/D,uBAAuB;QACvB,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAC1D,QAAQ,CACT,KAAK,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,kCAAkC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,MAAM,GAAG,SAAS,EAClB,OAAO,GAIR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,cAAc,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACrE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,aAAa,CACK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,gBAAgB;gBAC5B,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,eAAe;gBACtB,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,eAAe,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC;gBACE,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY;aACb;YACH,CAAC,CAAC,EAAE,CAAC;QAET,gFAAgF;QAChF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,mBAAmB;gBAC/B,MAAM;gBACN,MAAM,CAAC,WAAW,IAAI,IAAI;gBAC1B,MAAM,CAAC,OAAO,IAAI,IAAI;gBACtB,YAAY;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC;YACJ,8DAA8D;YAC9D,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,oBAAoB,CACxB,MAAkC;QAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,YAAY,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,uBAAuB;gBACnC,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,KAAK;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;aAC9C,CAAC;YACJ,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,4BAA4B,EAC5B,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,uBAAuB,CAC3B,MAAqC;QAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,YAAY,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAC3D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,0BAA0B;gBACtC,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;aAC9D,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,4BAA4B,EAC5B,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,uBAAuB,CAC3B,MAAqC;QAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAC/D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,0BAA0B,EAAE,MAAM,CAAC,SAAS,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,6DAA6D;YAC7D,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,gCAAgC,EAChC,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAC5B,MAAsC;QAEtC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAC/D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,2BAA2B;gBACvC,MAAM,CAAC,SAAS;gBAChB,MAAM,CAAC,IAAI;gBACX,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,iCAAiC;aACzC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,iCAAiC,EAC/B,MAAM,CAAC,iCAAiC;iBAC3C,CAAC;aACH,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,gCAAgC,EAChC,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC;YACzC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,gEAAgE;YAChE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,uBAAA,IAAI,4CAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,uBAAA,IAAI,4CAA0B,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,uBAAA,IAAI,4CAA0B,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACrE,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EAAmB,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;oBACpC,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;iBAC5C,CAAC;aACH,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAClE,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC9D,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;oBACzD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;iBAC9D,CAAC;aACH,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,UAAU,EACpD,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,SAAS,CAAC;YACnD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/D,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,kCAAkC,EAClC,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAC1D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,wEAAwE;YACxE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;CAoHF;0OAnGG,IAAa,EACb,MAA4B,EAC5B,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,qEAAqE;gBACrE,+DAA+D;gBAC/D,0BAA0B;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,SAAS,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,kCACH,GAAQ,EACR,IAAiB,EACjB,OAAO,GAAgC,EAAE;IAEzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,yCAAyC,CAC1C,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,yBAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjD,GAAG,IAAI;QACP,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,SAAS,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,SAAoC,CAAC;gBACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC1B,CAAC;qBAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,MAAM,EACf,aAAa,GAAG,CAAC,QAAQ,EAAE,yBAAyB,QAAQ,CAAC,MAAM,IACjE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CACH,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAS,CAAC;AACzC,CAAC","sourcesContent":["import { BaseDataService } from '@metamask/base-data-service';\nimport type {\n  DataServiceCacheUpdatedEvent,\n  DataServiceGranularCacheUpdatedEvent,\n  DataServiceInvalidateQueriesAction,\n} from '@metamask/base-data-service';\nimport type { CreateServicePolicyOptions } from '@metamask/controller-utils';\nimport { HttpError } from '@metamask/controller-utils';\nimport type { GeolocationControllerGetGeolocationAction } from '@metamask/geolocation-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { AuthenticationControllerGetBearerTokenAction } from '@metamask/profile-sync-controller/auth';\nimport type { Infer, Struct } from '@metamask/superstruct';\nimport {\n  array,\n  assert,\n  boolean,\n  enums,\n  optional,\n  string,\n  StructError,\n  type,\n} from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport { Duration, inMilliseconds } from '@metamask/utils';\nimport type { QueryClientConfig } from '@tanstack/query-core';\n\nimport { alpha2ToAlpha3 } from './countryCodes.js';\nimport type { KycServiceMethodActions } from './KycService-method-action-types.js';\nimport type {\n  KycConsentRecord,\n  KycDisclaimer,\n  KycSessionDisclaimers,\n  KycSessionStatus,\n  KycUserStatusResponse,\n  KycVendor,\n  KycVendorSigning,\n} from './types.js';\nimport { UKYC_JWKS_PATH } from './ukyc/constants.js';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link KycService}, used to namespace the service's actions.\n */\nexport const serviceName = 'KycService';\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'getGeoCountry',\n  'fetchDisclaimers',\n  'createSession',\n  'checkKycRequired',\n  'createVendorCustomer',\n  'submitVendorDisclaimers',\n  'fetchSessionDisclaimers',\n  'submitSessionDisclaimers',\n  'fetchKycStatus',\n  'fetchJwks',\n  'createUkycSession',\n  'setAuthorizations',\n  'createJourney',\n  'getSessionStatus',\n] as const;\n\n/**\n * Invalidates cached queries serviced by {@link KycService}.\n */\nexport type KycServiceInvalidateQueriesAction =\n  DataServiceInvalidateQueriesAction<typeof serviceName>;\n\n/**\n * Actions that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceActions =\n  | KycServiceMethodActions\n  | KycServiceInvalidateQueriesAction;\n\n/**\n * Actions from other messengers that {@link KycService} calls.\n */\ntype AllowedActions =\n  | AuthenticationControllerGetBearerTokenAction\n  | GeolocationControllerGetGeolocationAction;\n\n/**\n * Published when {@link KycService}'s cache is updated.\n */\nexport type KycServiceCacheUpdatedEvent = DataServiceCacheUpdatedEvent<\n  typeof serviceName\n>;\n\n/**\n * Published when a single key within {@link KycService}'s cache is updated.\n */\nexport type KycServiceGranularCacheUpdatedEvent =\n  DataServiceGranularCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Events that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceEvents =\n  | KycServiceCacheUpdatedEvent\n  | KycServiceGranularCacheUpdatedEvent;\n\n/**\n * Events from other messengers that {@link KycService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger restricted to actions and events accessed by\n * {@link KycService}.\n */\nexport type KycServiceMessenger = Messenger<\n  typeof serviceName,\n  KycServiceActions | AllowedActions,\n  KycServiceEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycService}.\n */\nexport type KycServiceOptions = {\n  messenger: KycServiceMessenger;\n  /**\n   * A function used to make HTTP requests. Defaults to the runtime's native\n   * `fetch`, so consumers do not need to inject one on platforms where `fetch`\n   * is available globally (browser, React Native, Node 18+).\n   */\n  fetch?: typeof fetch;\n  /**\n   * Mandatory value that sets the base url to KYC api\n   */\n  baseUrl: string;\n  /**\n   * Base URL of the Fractal encryption service, from which the JWKS used to\n   * verify encryption-schema `jwtChain`s is fetched.\n   */\n  fractalEncryptionBaseUrl?: string;\n  /**\n   * Shared configuration applied to all queries exposed by the service (e.g. a\n   * default `staleTime`/`gcTime`). Each data service gets its own\n   * `QueryClient`.\n   */\n  queryClientConfig?: QueryClientConfig;\n  policyOptions?: CreateServicePolicyOptions;\n};\n\n// === API RESPONSE SCHEMAS ===\n\nconst DisclaimerStruct = type({\n  id: string(),\n  display_name: string(),\n  url: string(),\n});\nconst DisclaimersResponseStruct = array(DisclaimerStruct);\n\nconst VendorSigningStruct = type({\n  id: string(),\n  customer_id: string(),\n  content_id: optional(string()),\n});\nconst VendorSigningsResponseStruct = array(VendorSigningStruct);\n\nconst CreateSessionResponseStruct = type({ sessionToken: string() });\n\n// The live KYC API returns the flag under `required`; the service normalizes\n// this to `kycRequired` for consumers (see `checkKycRequired`).\nconst KycRequiredResponseStruct = type({ required: boolean() });\n\n// The session server's public key, in JWK-like form, returned inside an\n// encryption schema from `POST /sessions`. `x` is the base64url public key\n// used to wrap a secret for that schema.\nconst ServerPublicKeyStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: optional(string()),\n  alg: optional(string()),\n  use: optional(string()),\n});\n\nconst EncryptionSchemaStruct = type({\n  serverPublicKey: ServerPublicKeyStruct,\n  jwtChain: string(),\n});\nexport type EncryptionSchema = Infer<typeof EncryptionSchemaStruct>;\n\n// A single Ed25519 (OKP) JWK. `type` (not `object`) keeps optional/extra JWK\n// fields (`use`, `alg`) from failing validation.\nconst JwkStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: string(),\n});\nconst JwksResponseStruct = type({ keys: array(JwkStruct) });\nexport type JwksResponse = Infer<typeof JwksResponseStruct>;\n\nconst UkycSessionResponseStruct = type({\n  sessionId: string(),\n  // Per-secret wrapping material so the client can seal the\n  // `data_encryption_key` and the `ukyc_capability_token` independently.\n  encryptionDataKey: EncryptionSchemaStruct,\n  ukycCapabilityToken: EncryptionSchemaStruct,\n});\nexport type UkycSessionResponse = Infer<typeof UkycSessionResponseStruct>;\n\nconst ApplicantAccessTokenResponseStruct = type({\n  status: string(),\n  applicantAccessToken: string(),\n});\nexport type ApplicantAccessTokenResponse = Infer<\n  typeof ApplicantAccessTokenResponseStruct\n>;\n\nconst SessionStatusResponseStruct = type({\n  finalStatus: string(),\n  statusMessage: optional(string()),\n  externalUserId: string(),\n  kycStatus: string(),\n  vendor: string(),\n  vendorStatus: string(),\n});\n\n// Vendor customer subset — `type` (not `object`) keeps extra vendor fields from\n// failing validation while still requiring the fields the controller needs.\nconst VendorCustomerResponseStruct = type({\n  id: string(),\n  email: string(),\n  status: string(),\n});\nexport type VendorCustomerResponse = Infer<typeof VendorCustomerResponseStruct>;\n\nconst KYC_USER_STATUSES = [\n  'not-started',\n  'pending',\n  'need-more-information',\n  'terminal-failure',\n  'completed',\n] as const;\n\nconst KycUserStatusResponseStruct = type({\n  status: enums([...KYC_USER_STATUSES]),\n  sumsubSessionId: optional(string()),\n  errorCode: optional(string()),\n});\n\nconst ConsentDocumentStruct = type({\n  key: string(),\n  version: string(),\n  title: string(),\n  url: string(),\n  consented: boolean(),\n});\n\nconst SessionDisclaimersResponseStruct = type({\n  idOS: array(ConsentDocumentStruct),\n  kycProvider: array(ConsentDocumentStruct),\n  credentialReusabilityConsentGiven: boolean(),\n});\n\n// === PARAM TYPES ===\n\nexport type CreateSessionParams = {\n  email: string;\n  termsAcceptedAt: string;\n  disclaimerIds: string[];\n};\n\nexport type CheckKycRequiredParams = {\n  /**\n   * Identity vendor to check. Defaults to `moonpay` for the existing\n   * Check/Auth path.\n   */\n  vendor?: KycVendor;\n  /**\n   * MoonPay access token. Required when `vendor` is `moonpay` (or omitted).\n   */\n  accessToken?: string;\n  /**\n   * ISO 3166-1 alpha-3 country code. Required when `vendor` is `moonpay`.\n   */\n  country?: string;\n  capabilities?: { product: string }[];\n};\n\nexport type CreateVendorCustomerParams = {\n  vendor: KycVendor;\n  email: string;\n};\n\nexport type SubmitVendorDisclaimersParams = {\n  /** Identity vendor whose T&Cs were accepted (currently `iron`). */\n  vendor: KycVendor;\n  /** Disclaimer ids from {@link KycService.fetchDisclaimers}. */\n  disclaimerIds: string[];\n};\n\nexport type FetchSessionDisclaimersParams = {\n  /** UKYC session id from {@link KycService.createUkycSession}. */\n  sessionId: string;\n};\n\nexport type SubmitSessionDisclaimersParams = {\n  /** UKYC session id from {@link KycService.createUkycSession}. */\n  sessionId: string;\n  /** Consents to the idOS legal documents (`key`/`version` from the catalog). */\n  idOS: KycConsentRecord[];\n  /**\n   * Consents to the KYC provider (SumSub) legal documents (`key`/`version`\n   * from the catalog).\n   */\n  kycProvider: KycConsentRecord[];\n  /** Consent to reuse the user's existing idOS credentials. */\n  credentialReusabilityConsentGiven: boolean;\n};\n\nexport type CreateUkycSessionParams = {\n  jwtToken: string;\n  /**\n   * Identity vendor for the UKYC session. Defaults to `moonpay` for the\n   * existing Check/Auth flow. Pass a non-MoonPay vendor (e.g. `iron`) for\n   * the consents path (no MoonPay metadata required).\n   */\n  vendor?: KycVendor;\n  /**\n   * Vendor-specific metadata. Required for MoonPay (`moonPayAccessToken` /\n   * `moonPayUserId`); optional / omitted for other vendors.\n   */\n  vendorMetadata?: Record<string, unknown>;\n};\n\n/**\n * Encrypted capability authorization payload (base64url nonce + ciphertext)\n * accepted by `POST /sessions/:sessionId/authorizations`. Produced by\n * `wrapEncryptionKey` for both the `data_encryption_key` and the\n * `ukyc_capability_token`.\n */\nexport type CapabilityAuthorization = {\n  nonce: string;\n  data: string;\n};\n\nexport type SetAuthorizationsParams = {\n  sessionId: string;\n  wrappedEncryptionDataKey: CapabilityAuthorization;\n  wrappedUkycCapabilityToken: CapabilityAuthorization;\n};\n\nexport type GetSessionStatusParams = {\n  sessionId: string;\n};\n\n// === SERVICE DEFINITION ===\n\n/**\n * `KycService` communicates with the Universal KYC (UKYC) backend to drive the\n * identity + document-verification flow. It is stateless and platform-agnostic:\n * HTTP is performed through the runtime's native `fetch` (or an injected\n * `fetch` when provided), and the auth bearer token and geolocation come from\n * other controllers via the messenger.\n *\n * It extends {@link BaseDataService}, so every request is routed through\n * `fetchQuery`: it is wrapped in the shared service policy (retries, circuit\n * breaker) and its result is exposed via the service's `QueryClient`. Read-only\n * endpoints (`fetchDisclaimers`, `fetchJwks`) are cached with a `staleTime`;\n * vendor-disclaimer, session-scoped disclaimer, session-creating, and\n * status-polling endpoints opt out of caching (`staleTime`/`gcTime` of `0`)\n * so they never serve a stale result.\n */\nexport class KycService extends BaseDataService<\n  typeof serviceName,\n  KycServiceMessenger\n> {\n  readonly #fetch: typeof fetch;\n\n  readonly #baseUrl: string;\n\n  readonly #fractalEncryptionBaseUrl: string;\n\n  /**\n   * Constructs a new KycService.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this service.\n   * @param options.fetch - A function used to make HTTP requests. Defaults to\n   * the runtime's native `fetch`.\n   * @param options.baseUrl - Base URL of the KYC API\n   * @param options.fractalEncryptionBaseUrl - Base URL of the Fractal\n   * encryption service, from which the JWKS used to verify encryption-schema\n   * `jwtChain`s is fetched.\n   * @param options.queryClientConfig - Shared configuration for all queries\n   * exposed by the service.\n   * @param options.policyOptions - Options for the request service policy.\n   */\n  constructor({\n    messenger,\n    fetch: fetchFunction,\n    baseUrl,\n    fractalEncryptionBaseUrl,\n    queryClientConfig = {},\n    policyOptions = {},\n  }: KycServiceOptions) {\n    super({\n      name: serviceName,\n      messenger,\n      queryClientConfig,\n      policyOptions,\n    });\n    // Fall back to the runtime's native `fetch`, bound to `globalThis` so it\n    // can be invoked as a method of this instance without an illegal-invocation\n    // error on platforms that check the receiver.\n    if (fetchFunction) {\n      this.#fetch = fetchFunction;\n    } else if (typeof globalThis.fetch === 'function') {\n      this.#fetch = globalThis.fetch.bind(globalThis);\n    } else {\n      throw new Error(\n        'KycService: fetch is not available globally and was not provided in options. Please inject a fetch implementation.',\n      );\n    }\n    if (!baseUrl) {\n      throw new Error('KycService: baseUrl is required');\n    }\n    this.#baseUrl = baseUrl;\n    this.#fractalEncryptionBaseUrl = fractalEncryptionBaseUrl ?? '';\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves the customer's country from the geolocation source and converts it\n   * to an ISO 3166-1 alpha-3 code.\n   *\n   * @returns The alpha-3 country code.\n   * @throws If the country cannot be determined or mapped.\n   */\n  async getGeoCountry(): Promise<string> {\n    const location = await this.messenger.call(\n      'GeolocationController:getGeolocation',\n    );\n    // Guard nullish/empty geolocation with the documented domain error rather\n    // than letting `assert(location, string())` surface a superstruct\n    // assertion error (which would change how the failure reads in\n    // `disclaimersError`).\n    const alpha2 =\n      typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';\n    if (!alpha2 || alpha2 === 'UNKNOWN') {\n      throw new Error(\n        `Unable to determine country from geolocation (got \"${String(\n          location,\n        )}\").`,\n      );\n    }\n    const alpha3 = alpha2ToAlpha3(alpha2);\n    if (!alpha3) {\n      throw new Error(\n        `Unable to map country code \"${alpha2}\" to an ISO 3166-1 alpha-3 code.`,\n      );\n    }\n    return alpha3;\n  }\n\n  /**\n   * Fetches the disclaimers the customer must accept before a session is\n   * created.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor. Defaults to `moonpay`.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchDisclaimers({\n    vendor = 'moonpay',\n    country,\n  }: {\n    vendor?: KycVendor;\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL(`/vendors/${vendor}/disclaimers`, this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchDisclaimers`, vendor, country],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      staleTime: inMilliseconds(5, Duration.Minute),\n    });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Creates a vendor session via the UKYC backend.\n   *\n   * @param params - The session parameters.\n   * @returns The created session token.\n   */\n  async createSession(\n    params: CreateSessionParams,\n  ): Promise<Infer<typeof CreateSessionResponseStruct>> {\n    const url = new URL('/vendors/moonpay/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createSession`,\n        params.email,\n        params.termsAcceptedAt,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(params),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      CreateSessionResponseStruct,\n      'sessions',\n    );\n  }\n\n  /**\n   * Checks whether KYC is required for the given vendor, country, and\n   * capabilities.\n   *\n   * @param params - The check parameters.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(\n    params: CheckKycRequiredParams,\n  ): Promise<{ kycRequired: boolean }> {\n    const vendor = params.vendor ?? 'moonpay';\n    const url = new URL(`/vendors/${vendor}/kyc-required`, this.#baseUrl);\n    const capabilities = params.capabilities ?? [{ product: 'ramps' }];\n    const body =\n      vendor === 'moonpay'\n        ? {\n            accessToken: params.accessToken,\n            country: params.country,\n            capabilities,\n          }\n        : {};\n\n    // MoonPay requires accessToken and country; validate before making the request.\n    if (vendor === 'moonpay') {\n      if (!params.accessToken) {\n        throw new Error(\n          'checkKycRequired: accessToken is required for vendor \"moonpay\".',\n        );\n      }\n      if (!params.country) {\n        throw new Error(\n          'checkKycRequired: country is required for vendor \"moonpay\".',\n        );\n      }\n    }\n\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:checkKycRequired`,\n        vendor,\n        params.accessToken ?? null,\n        params.country ?? null,\n        capabilities,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(body),\n        }),\n      // The requirement can change server-side, so always re-check.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Creates (or resumes) an empty-shell customer for the authenticated\n   * canonical user on the given identity vendor. Must run before showing\n   * vendor T&C so the customer exists and resume logic can key off vendor\n   * status.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor (e.g. `iron` for Money/VBA).\n   * @param params.email - Email associated with the customer.\n   * @returns The vendor customer record (subset validated for controller use).\n   */\n  async createVendorCustomer(\n    params: CreateVendorCustomerParams,\n  ): Promise<VendorCustomerResponse> {\n    const url = new URL(`/vendors/${params.vendor}/customers`, this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createVendorCustomer`,\n        params.vendor,\n        params.email,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({ email: params.email }),\n        }),\n      // Customer creation/resume must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      VendorCustomerResponseStruct,\n      'vendor customers',\n    );\n  }\n\n  /**\n   * Records vendor T&C acceptance (`POST /vendors/{vendor}/disclaimers`).\n   * For Iron this creates content signings from the disclaimer ids the\n   * customer accepted. Session-scoped idOS / KYC-provider consents are\n   * recorded separately via {@link submitSessionDisclaimers}. Retries re-POST\n   * the same ids, matching the legacy `POST /consents` signing step.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor (e.g. `iron`).\n   * @param params.disclaimerIds - Accepted vendor T&C ids.\n   * @returns The vendor signing records.\n   */\n  async submitVendorDisclaimers(\n    params: SubmitVendorDisclaimersParams,\n  ): Promise<KycVendorSigning[]> {\n    const url = new URL(\n      `/vendors/${encodeURIComponent(params.vendor)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:submitVendorDisclaimers`,\n        params.vendor,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({ disclaimerIds: params.disclaimerIds }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      VendorSigningsResponseStruct,\n      'vendor disclaimers',\n    );\n  }\n\n  /**\n   * Fetches the session-scoped idOS + KYC-provider disclaimer catalog\n   * (`GET /sessions/{sessionId}/disclaimers`). Requires an existing UKYC\n   * session; vendor T&Cs continue to come from {@link fetchDisclaimers}.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The catalog, including which documents are already consented.\n   */\n  async fetchSessionDisclaimers(\n    params: FetchSessionDisclaimersParams,\n  ): Promise<KycSessionDisclaimers> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchSessionDisclaimers`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Consent state can change after a POST, so always re-fetch.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionDisclaimersResponseStruct,\n      'session disclaimers',\n    );\n  }\n\n  /**\n   * Records idOS + KYC-provider consents for a UKYC session\n   * (`POST /sessions/{sessionId}/disclaimers`). `key`/`version` pairs must\n   * match the current catalog from {@link fetchSessionDisclaimers}. A 409\n   * means those document versions were already recorded for the session.\n   *\n   * @param params - The consent parameters.\n   * @returns The updated catalog after recording.\n   */\n  async submitSessionDisclaimers(\n    params: SubmitSessionDisclaimersParams,\n  ): Promise<KycSessionDisclaimers> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:submitSessionDisclaimers`,\n        params.sessionId,\n        params.idOS,\n        params.kycProvider,\n        params.credentialReusabilityConsentGiven,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            idOS: params.idOS,\n            kycProvider: params.kycProvider,\n            credentialReusabilityConsentGiven:\n              params.credentialReusabilityConsentGiven,\n          }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionDisclaimersResponseStruct,\n      'session disclaimers',\n    );\n  }\n\n  /**\n   * Fetches the user-keyed simplified KYC status used by Money toast / banner\n   * surfaces (`GET /kyc/status`).\n   *\n   * @returns The simplified status payload.\n   */\n  async fetchKycStatus(): Promise<KycUserStatusResponse> {\n    const url = new URL('/kyc/status', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchKycStatus`],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for toast flips, so it must always be fresh.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      KycUserStatusResponseStruct,\n      'kyc status',\n    );\n  }\n\n  /**\n   * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`s\n   * returned inside encryption schemas from {@link KycService.createUkycSession}.\n   *\n   * This is an unauthenticated request to a well-known path on the Fractal\n   * host, distinct from the UKYC base URL.\n   *\n   * @returns The JWKS keys.\n   */\n  async fetchJwks(): Promise<JwksResponse> {\n    if (!this.#fractalEncryptionBaseUrl) {\n      throw new Error(\n        'KycService: fractalEncryptionBaseUrl is not configured; cannot fetch JWKS to verify encryption schemas.',\n      );\n    }\n    const url = new URL(UKYC_JWKS_PATH, this.#fractalEncryptionBaseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchJwks`, this.#fractalEncryptionBaseUrl],\n      queryFn: async () =>\n        this.#requestJson(url, { method: 'GET' }, { authenticated: false }),\n      staleTime: inMilliseconds(1, Duration.Hour),\n    });\n    return this.#validateResponse(data, JwksResponseStruct, 'JWKS');\n  }\n\n  /**\n   * Creates a UKYC session for the SumSub document-verification sub-flow.\n   *\n   * The response carries per-secret encryption schemas (`encryptionDataKey` and\n   * `ukycCapabilityToken`) so the client can wrap the `data_encryption_key` and\n   * the read-only `ukyc_capability_token` and submit them via\n   * {@link KycService.setAuthorizations}.\n   *\n   * @param params - The session parameters.\n   * @returns The UKYC session id and encryption schemas.\n   */\n  async createUkycSession(\n    params: CreateUkycSessionParams,\n  ): Promise<UkycSessionResponse> {\n    const url = new URL('/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createUkycSession`, params.jwtToken],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            vendorId: params.vendor ?? 'moonpay',\n            vendorUserId: 'mockedId',\n            jwtToken: params.jwtToken,\n            vendorMetadata: params.vendorMetadata ?? {},\n          }),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      UkycSessionResponseStruct,\n      'UKYC sessions',\n    );\n  }\n\n  /**\n   * Submits the wrapped `data_encryption_key` and wrapped\n   * `ukyc_capability_token` for a UKYC session. Both secrets are sealed with\n   * `wrapEncryptionKey` against the encryption schemas returned by\n   * {@link KycService.createUkycSession}.\n   *\n   * @param params - The wrapped authorizations.\n   * @returns The session status after the authorizations are applied.\n   */\n  async setAuthorizations(\n    params: SetAuthorizationsParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/authorizations`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:setAuthorizations`, params.sessionId],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            wrappedEncryptionDataKey: params.wrappedEncryptionDataKey,\n            wrappedUkycCapabilityToken: params.wrappedUkycCapabilityToken,\n          }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'authorizations',\n    );\n  }\n\n  /**\n   * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n   * returning the applicant access token used to launch the SDK.\n   *\n   * @param sessionId - The UKYC session id from `createUkycSession`.\n   * @returns The applicant access token and status.\n   */\n  async createJourney(\n    sessionId: string,\n  ): Promise<ApplicantAccessTokenResponse> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(sessionId)}/journey`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createJourney`, sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'POST' }),\n      // Journeys are (re)created on demand; do not reuse a cached token.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      ApplicantAccessTokenResponseStruct,\n      'journey',\n    );\n  }\n\n  /**\n   * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n   * completes to determine the final verification decision.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The session status.\n   */\n  async getSessionStatus(\n    params: GetSessionStatusParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/status`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getSessionStatus`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for a terminal decision, so it must always be fresh.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'session status',\n    );\n  }\n\n  /**\n   * Validates a parsed API response against a superstruct schema, throwing a\n   * descriptive error when the response does not match.\n   *\n   * Unlike a bare `Struct.is` check, this surfaces exactly which field was\n   * missing or had the wrong type, which is essential for diagnosing shape\n   * mismatches between the client and the live API.\n   *\n   * @param data - The parsed response body.\n   * @param struct - The superstruct schema the body is expected to satisfy.\n   * @param apiName - A human-readable name of the API, used in the error message.\n   * @returns The validated, typed response.\n   * @throws If `data` does not match `struct`.\n   */\n  #validateResponse<Type, Schema>(\n    data: unknown,\n    struct: Struct<Type, Schema>,\n    apiName: string,\n  ): Type {\n    try {\n      assert(data, struct);\n      return data;\n    } catch (error) {\n      const detail =\n        error instanceof StructError\n          ? `${error.message} (received: ${JSON.stringify(data)})`\n          : // `assert` only ever throws `StructError` for the plain structs used\n            // here, so this is a defensive fallback that is not exercised.\n            /* istanbul ignore next */\n            String(error);\n      throw new Error(\n        `Malformed response received from ${apiName} API: ${detail}`,\n      );\n    }\n  }\n\n  /**\n   * Performs a single JSON request.\n   *\n   * This is meant to be used as the `queryFn` for {@link fetchQuery}, which\n   * wraps it in the shared service policy (retries, circuit breaker). Requests\n   * are authenticated with the wallet bearer token by default; pass\n   * `{ authenticated: false }` for calls to services that do not expect it\n   * (e.g. the Fractal JWKS endpoint).\n   *\n   * @param url - The request URL.\n   * @param init - The request init (method, body).\n   * @param options - Request options.\n   * @param options.authenticated - Whether to attach the bearer token. Defaults\n   * to `true`.\n   * @returns The parsed JSON response.\n   */\n  async #requestJson(\n    url: URL,\n    init: RequestInit,\n    options: { authenticated?: boolean } = {},\n  ): Promise<Json> {\n    const { authenticated = true } = options;\n\n    const headers: Record<string, string> = {};\n\n    // Only advertise a JSON body when one is actually sent; bodyless requests\n    // (e.g. `createJourney`) must not carry a `Content-Type`.\n    if (init.body !== undefined && init.body !== null) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    if (authenticated) {\n      const bearerToken = await this.messenger.call(\n        'AuthenticationController:getBearerToken',\n      );\n      if (!bearerToken) {\n        throw new Error(\n          'Unable to obtain an authentication bearer token — is the wallet signed in?',\n        );\n      }\n      assert(bearerToken, string());\n      headers.Authorization = `Bearer ${bearerToken}`;\n    }\n\n    const response = await this.#fetch(url.toString(), {\n      ...init,\n      headers,\n    });\n    if (!response.ok) {\n      let detail = '';\n      try {\n        const errorBody: unknown = await response.json();\n        if (errorBody && typeof errorBody === 'object') {\n          const record = errorBody as Record<string, unknown>;\n          if (typeof record.message === 'string') {\n            detail = record.message;\n          } else if (typeof record.error === 'string') {\n            detail = record.error;\n          }\n        }\n      } catch {\n        // Ignore body parse failures; status alone is still useful.\n      }\n      throw new HttpError(\n        response.status,\n        `Fetching '${url.toString()}' failed with status '${response.status}'${\n          detail ? `: ${detail}` : ''\n        }`,\n      );\n    }\n\n    // DELETE (and similar) endpoints return 204 No Content.\n    if (response.status === 204) {\n      return null;\n    }\n\n    return (await response.json()) as Json;\n  }\n}\n"]}
+{"version":3,"file":"KycService.mjs","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAO9D,OAAO,EAAE,SAAS,EAAE,mCAAmC;AAKvD,OAAO,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,KAAK,EACL,QAAQ,EACR,MAAM,EACN,WAAW,EACX,IAAI,EACL,8BAA8B;AAE/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,wBAAwB;AAG3D,OAAO,EAAE,cAAc,EAAE,2BAA0B;AAWnD,OAAO,EAAE,cAAc,EAAE,6BAA4B;AAErD,kBAAkB;AAElB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,sBAAsB;IACtB,yBAAyB;IACzB,yBAAyB;IACzB,0BAA0B;IAC1B,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,kBAAkB;CACV,CAAC;AAsFX,+BAA+B;AAE/B,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,EAAE;IACZ,YAAY,EAAE,MAAM,EAAE;IACtB,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,mBAAmB,GAAG,IAAI,CAAC;IAC/B,EAAE,EAAE,MAAM,EAAE;IACZ,WAAW,EAAE,MAAM,EAAE;IACrB,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEhE,MAAM,2BAA2B,GAAG,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhE,wEAAwE;AACxE,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,qBAAqB,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvB,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACvB,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CACxB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,qBAAqB;IACtC,QAAQ,EAAE,MAAM,EAAE;CACnB,CAAC,CAAC;AAGH,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE;IACnB,0DAA0D;IAC1D,uEAAuE;IACvE,iBAAiB,EAAE,sBAAsB;IACzC,mBAAmB,EAAE,sBAAsB;CAC5C,CAAC,CAAC;AAGH,MAAM,kCAAkC,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE;IAChB,oBAAoB,EAAE,MAAM,EAAE;CAC/B,CAAC,CAAC;AAKH,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE;IACrB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE;IAChB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,gFAAgF;AAChF,4EAA4E;AAC5E,MAAM,4BAA4B,GAAG,IAAI,CAAC;IACxC,EAAE,EAAE,MAAM,EAAE;IACZ,KAAK,EAAE,MAAM,EAAE;IACf,MAAM,EAAE,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,SAAS;IACT,uBAAuB;IACvB,kBAAkB;IAClB,WAAW;CACH,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;IACrC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,CAAC;IACjC,GAAG,EAAE,MAAM,EAAE;IACb,OAAO,EAAE,MAAM,EAAE;IACjB,KAAK,EAAE,MAAM,EAAE;IACf,GAAG,EAAE,MAAM,EAAE;IACb,SAAS,EAAE,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,IAAI,CAAC;IAC5C,IAAI,EAAE,KAAK,CAAC,qBAAqB,CAAC;IAClC,WAAW,EAAE,KAAK,CAAC,qBAAqB,CAAC;IACzC,iCAAiC,EAAE,OAAO,EAAE;CAC7C,CAAC,CAAC;AA8FH,6BAA6B;AAE7B;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,UAAW,SAAQ,eAG/B;IAOC;;;;;;;;;;;;;;OAcG;IACH,YAAY,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAiB,GAAG,EAAE,EACtB,aAAa,GAAG,EAAE,GACA;QAClB,KAAK,CAAC;YACJ,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,iBAAiB;YACjB,aAAa;SACd,CAAC,CAAC;;QAlCI,oCAAqB;QAErB,sCAAiB;QAEjB,uDAAkC;QA+BzC,yEAAyE;QACzE,4EAA4E;QAC5E,8CAA8C;QAC9C,IAAI,aAAa,EAAE,CAAC;YAClB,uBAAA,IAAI,qBAAU,aAAa,MAAA,CAAC;QAC9B,CAAC;aAAM,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAClD,uBAAA,IAAI,qBAAU,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAA,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,uBAAA,IAAI,uBAAY,OAAO,MAAA,CAAC;QACxB,uBAAA,IAAI,wCAA6B,wBAAwB,IAAI,EAAE,MAAA,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxC,sCAAsC,CACvC,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,+DAA+D;QAC/D,uBAAuB;QACvB,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAC1D,QAAQ,CACT,KAAK,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,kCAAkC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,MAAM,GAAG,SAAS,EAClB,OAAO,GAIR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,cAAc,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACrE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,aAAa,CACK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,gBAAgB;gBAC5B,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,eAAe;gBACtB,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,eAAe,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GACR,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC;gBACE,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,YAAY;aACb;YACH,CAAC,CAAC,EAAE,CAAC;QAET,gFAAgF;QAChF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,mBAAmB;gBAC/B,MAAM;gBACN,MAAM,CAAC,WAAW,IAAI,IAAI;gBAC1B,MAAM,CAAC,OAAO,IAAI,IAAI;gBACtB,YAAY;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC;YACJ,8DAA8D;YAC9D,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,oBAAoB,CACxB,MAAkC;QAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,YAAY,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,uBAAuB;gBACnC,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,KAAK;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;aAC9C,CAAC;YACJ,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,4BAA4B,EAC5B,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,uBAAuB,CAC3B,MAAqC;QAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,YAAY,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAC3D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,0BAA0B;gBACtC,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;aAC9D,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,4BAA4B,EAC5B,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,uBAAuB,CAC3B,MAAqC;QAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAC/D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,0BAA0B,EAAE,MAAM,CAAC,SAAS,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,6DAA6D;YAC7D,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,gCAAgC,EAChC,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,wBAAwB,CAC5B,MAAsC;QAEtC,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAC/D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,2BAA2B;gBACvC,MAAM,CAAC,SAAS;gBAChB,MAAM,CAAC,IAAI;gBACX,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,iCAAiC;aACzC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,iCAAiC,EAC/B,MAAM,CAAC,iCAAiC;iBAC3C,CAAC;aACH,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,gCAAgC,EAChC,qBAAqB,CACtB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC;YACzC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,gEAAgE;YAChE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,uBAAA,IAAI,4CAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,uBAAA,IAAI,4CAA0B,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,uBAAA,IAAI,4CAA0B,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACrE,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EAAmB,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;oBACpC,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;iBAC5C,CAAC;aACH,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAClE,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC9D,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;oBACzD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;iBAC9D,CAAC;aACH,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,UAAU,EACpD,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,SAAS,CAAC;YACnD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/D,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,kCAAkC,EAClC,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAC1D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,wEAAwE;YACxE,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC;SACV,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;CAoHF;0OAnGG,IAAa,EACb,MAA4B,EAC5B,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,qEAAqE;gBACrE,+DAA+D;gBAC/D,0BAA0B;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,SAAS,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,kCACH,GAAQ,EACR,IAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,yCAAyC,CAC1C,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,yBAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjD,GAAG,IAAI;QACP,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,SAAS,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,SAAoC,CAAC;gBACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC1B,CAAC;qBAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,MAAM,EACf,aAAa,GAAG,CAAC,QAAQ,EAAE,yBAAyB,QAAQ,CAAC,MAAM,IACjE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CACH,CAAC;IACJ,CAAC;IAED,wDAAwD;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAS,CAAC;AACzC,CAAC","sourcesContent":["import { BaseDataService } from '@metamask/base-data-service';\nimport type {\n  DataServiceCacheUpdatedEvent,\n  DataServiceGranularCacheUpdatedEvent,\n  DataServiceInvalidateQueriesAction,\n} from '@metamask/base-data-service';\nimport type { CreateServicePolicyOptions } from '@metamask/controller-utils';\nimport { HttpError } from '@metamask/controller-utils';\nimport type { GeolocationControllerGetGeolocationAction } from '@metamask/geolocation-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { AuthenticationControllerGetBearerTokenAction } from '@metamask/profile-sync-controller/auth';\nimport type { Infer, Struct } from '@metamask/superstruct';\nimport {\n  array,\n  assert,\n  boolean,\n  enums,\n  optional,\n  string,\n  StructError,\n  type,\n} from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport { Duration, inMilliseconds } from '@metamask/utils';\nimport type { QueryClientConfig } from '@tanstack/query-core';\n\nimport { alpha2ToAlpha3 } from './countryCodes.js';\nimport type { KycServiceMethodActions } from './KycService-method-action-types.js';\nimport type {\n  KycConsentRecord,\n  KycDisclaimer,\n  KycSessionDisclaimers,\n  KycSessionStatus,\n  KycUserStatusResponse,\n  KycVendor,\n  KycVendorSigning,\n} from './types.js';\nimport { UKYC_JWKS_PATH } from './ukyc/constants.js';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link KycService}, used to namespace the service's actions.\n */\nexport const serviceName = 'KycService';\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'getGeoCountry',\n  'fetchDisclaimers',\n  'createSession',\n  'checkKycRequired',\n  'createVendorCustomer',\n  'submitVendorDisclaimers',\n  'fetchSessionDisclaimers',\n  'submitSessionDisclaimers',\n  'fetchKycStatus',\n  'fetchJwks',\n  'createUkycSession',\n  'setAuthorizations',\n  'createJourney',\n  'getSessionStatus',\n] as const;\n\n/**\n * Invalidates cached queries serviced by {@link KycService}.\n */\nexport type KycServiceInvalidateQueriesAction =\n  DataServiceInvalidateQueriesAction<typeof serviceName>;\n\n/**\n * Actions that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceActions =\n  | KycServiceMethodActions\n  | KycServiceInvalidateQueriesAction;\n\n/**\n * Actions from other messengers that {@link KycService} calls.\n */\ntype AllowedActions =\n  | AuthenticationControllerGetBearerTokenAction\n  | GeolocationControllerGetGeolocationAction;\n\n/**\n * Published when {@link KycService}'s cache is updated.\n */\nexport type KycServiceCacheUpdatedEvent = DataServiceCacheUpdatedEvent<\n  typeof serviceName\n>;\n\n/**\n * Published when a single key within {@link KycService}'s cache is updated.\n */\nexport type KycServiceGranularCacheUpdatedEvent =\n  DataServiceGranularCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Events that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceEvents =\n  | KycServiceCacheUpdatedEvent\n  | KycServiceGranularCacheUpdatedEvent;\n\n/**\n * Events from other messengers that {@link KycService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger restricted to actions and events accessed by\n * {@link KycService}.\n */\nexport type KycServiceMessenger = Messenger<\n  typeof serviceName,\n  KycServiceActions | AllowedActions,\n  KycServiceEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycService}.\n */\nexport type KycServiceOptions = {\n  messenger: KycServiceMessenger;\n  /**\n   * A function used to make HTTP requests. Defaults to the runtime's native\n   * `fetch`, so consumers do not need to inject one on platforms where `fetch`\n   * is available globally (browser, React Native, Node 18+).\n   */\n  fetch?: typeof fetch;\n  /**\n   * Mandatory value that sets the base url to KYC api\n   */\n  baseUrl: string;\n  /**\n   * Base URL of the Fractal encryption service, from which the JWKS used to\n   * verify encryption-schema `jwtChain`s is fetched.\n   */\n  fractalEncryptionBaseUrl?: string;\n  /**\n   * Shared configuration applied to all queries exposed by the service (e.g. a\n   * default `staleTime`/`gcTime`). Each data service gets its own\n   * `QueryClient`.\n   */\n  queryClientConfig?: QueryClientConfig;\n  policyOptions?: CreateServicePolicyOptions;\n};\n\n// === API RESPONSE SCHEMAS ===\n\nconst DisclaimerStruct = type({\n  id: string(),\n  display_name: string(),\n  url: string(),\n});\nconst DisclaimersResponseStruct = array(DisclaimerStruct);\n\nconst VendorSigningStruct = type({\n  id: string(),\n  customer_id: string(),\n  content_id: optional(string()),\n});\nconst VendorSigningsResponseStruct = array(VendorSigningStruct);\n\nconst CreateSessionResponseStruct = type({ sessionToken: string() });\n\n// The live KYC API returns the flag under `required`; the service normalizes\n// this to `kycRequired` for consumers (see `checkKycRequired`).\nconst KycRequiredResponseStruct = type({ required: boolean() });\n\n// The session server's public key, in JWK-like form, returned inside an\n// encryption schema from `POST /sessions`. `x` is the base64url public key\n// used to wrap a secret for that schema.\nconst ServerPublicKeyStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: optional(string()),\n  alg: optional(string()),\n  use: optional(string()),\n});\n\nconst EncryptionSchemaStruct = type({\n  serverPublicKey: ServerPublicKeyStruct,\n  jwtChain: string(),\n});\nexport type EncryptionSchema = Infer<typeof EncryptionSchemaStruct>;\n\n// A single Ed25519 (OKP) JWK. `type` (not `object`) keeps optional/extra JWK\n// fields (`use`, `alg`) from failing validation.\nconst JwkStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: string(),\n});\nconst JwksResponseStruct = type({ keys: array(JwkStruct) });\nexport type JwksResponse = Infer<typeof JwksResponseStruct>;\n\nconst UkycSessionResponseStruct = type({\n  sessionId: string(),\n  // Per-secret wrapping material so the client can seal the\n  // `data_encryption_key` and the `ukyc_capability_token` independently.\n  encryptionDataKey: EncryptionSchemaStruct,\n  ukycCapabilityToken: EncryptionSchemaStruct,\n});\nexport type UkycSessionResponse = Infer<typeof UkycSessionResponseStruct>;\n\nconst ApplicantAccessTokenResponseStruct = type({\n  status: string(),\n  applicantAccessToken: string(),\n});\nexport type ApplicantAccessTokenResponse = Infer<\n  typeof ApplicantAccessTokenResponseStruct\n>;\n\nconst SessionStatusResponseStruct = type({\n  finalStatus: string(),\n  statusMessage: optional(string()),\n  externalUserId: string(),\n  kycStatus: string(),\n  vendor: string(),\n  vendorStatus: string(),\n});\n\n// Vendor customer subset — `type` (not `object`) keeps extra vendor fields from\n// failing validation while still requiring the fields the controller needs.\nconst VendorCustomerResponseStruct = type({\n  id: string(),\n  email: string(),\n  status: string(),\n});\nexport type VendorCustomerResponse = Infer<typeof VendorCustomerResponseStruct>;\n\nconst KYC_USER_STATUSES = [\n  'not-started',\n  'pending',\n  'need-more-information',\n  'terminal-failure',\n  'completed',\n] as const;\n\nconst KycUserStatusResponseStruct = type({\n  status: enums([...KYC_USER_STATUSES]),\n  sumsubSessionId: optional(string()),\n  errorCode: optional(string()),\n});\n\nconst ConsentDocumentStruct = type({\n  key: string(),\n  version: string(),\n  title: string(),\n  url: string(),\n  consented: boolean(),\n});\n\nconst SessionDisclaimersResponseStruct = type({\n  idOS: array(ConsentDocumentStruct),\n  kycProvider: array(ConsentDocumentStruct),\n  credentialReusabilityConsentGiven: boolean(),\n});\n\n// === PARAM TYPES ===\n\nexport type CreateSessionParams = {\n  email: string;\n  termsAcceptedAt: string;\n  disclaimerIds: string[];\n};\n\nexport type CheckKycRequiredParams = {\n  /**\n   * Identity vendor to check. Defaults to `moonpay` for the existing\n   * Check/Auth path.\n   */\n  vendor?: KycVendor;\n  /**\n   * MoonPay access token. Required when `vendor` is `moonpay` (or omitted).\n   */\n  accessToken?: string;\n  /**\n   * ISO 3166-1 alpha-3 country code. Required when `vendor` is `moonpay`.\n   */\n  country?: string;\n  capabilities?: { product: string }[];\n};\n\nexport type CreateVendorCustomerParams = {\n  vendor: KycVendor;\n  email: string;\n};\n\nexport type SubmitVendorDisclaimersParams = {\n  /** Identity vendor whose T&Cs were accepted (currently `iron`). */\n  vendor: KycVendor;\n  /** Disclaimer ids from {@link KycService.fetchDisclaimers}. */\n  disclaimerIds: string[];\n};\n\nexport type FetchSessionDisclaimersParams = {\n  /** UKYC session id from {@link KycService.createUkycSession}. */\n  sessionId: string;\n};\n\nexport type SubmitSessionDisclaimersParams = {\n  /** UKYC session id from {@link KycService.createUkycSession}. */\n  sessionId: string;\n  /** Consents to the idOS legal documents (`key`/`version` from the catalog). */\n  idOS: KycConsentRecord[];\n  /**\n   * Consents to the KYC provider (SumSub) legal documents (`key`/`version`\n   * from the catalog).\n   */\n  kycProvider: KycConsentRecord[];\n  /** Consent to reuse the user's existing idOS credentials. */\n  credentialReusabilityConsentGiven: boolean;\n};\n\nexport type CreateUkycSessionParams = {\n  jwtToken: string;\n  /**\n   * Identity vendor for the UKYC session. Defaults to `moonpay` for the\n   * existing Check/Auth flow. Pass a non-MoonPay vendor (e.g. `iron`) for\n   * the consents path (no MoonPay metadata required).\n   */\n  vendor?: KycVendor;\n  /**\n   * Vendor-specific metadata. Required for MoonPay (`moonPayAccessToken` /\n   * `moonPayUserId`); optional / omitted for other vendors.\n   */\n  vendorMetadata?: Record<string, unknown>;\n};\n\n/**\n * Encrypted capability authorization payload (base64url nonce + ciphertext)\n * accepted by `POST /sessions/:sessionId/authorizations`. Produced by\n * `wrapEncryptionKey` for both the `data_encryption_key` and the\n * `ukyc_capability_token`.\n */\nexport type CapabilityAuthorization = {\n  nonce: string;\n  data: string;\n};\n\nexport type SetAuthorizationsParams = {\n  sessionId: string;\n  wrappedEncryptionDataKey: CapabilityAuthorization;\n  wrappedUkycCapabilityToken: CapabilityAuthorization;\n};\n\nexport type GetSessionStatusParams = {\n  sessionId: string;\n};\n\n// === SERVICE DEFINITION ===\n\n/**\n * `KycService` communicates with the Universal KYC (UKYC) backend to drive the\n * identity + document-verification flow. It is stateless and platform-agnostic:\n * HTTP is performed through the runtime's native `fetch` (or an injected\n * `fetch` when provided), and the auth bearer token and geolocation come from\n * other controllers via the messenger.\n *\n * It extends {@link BaseDataService}, so every request is routed through\n * `fetchQuery`: it is wrapped in the shared service policy (retries, circuit\n * breaker) and its result is exposed via the service's `QueryClient`. Read-only\n * endpoints (`fetchDisclaimers`, `fetchJwks`) are cached with a `staleTime`;\n * vendor-disclaimer, session-scoped disclaimer, session-creating, and\n * status-polling endpoints opt out of caching (`staleTime`/`gcTime` of `0`)\n * so they never serve a stale result.\n */\nexport class KycService extends BaseDataService<\n  typeof serviceName,\n  KycServiceMessenger\n> {\n  readonly #fetch: typeof fetch;\n\n  readonly #baseUrl: string;\n\n  readonly #fractalEncryptionBaseUrl: string;\n\n  /**\n   * Constructs a new KycService.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this service.\n   * @param options.fetch - A function used to make HTTP requests. Defaults to\n   * the runtime's native `fetch`.\n   * @param options.baseUrl - Base URL of the KYC API\n   * @param options.fractalEncryptionBaseUrl - Base URL of the Fractal\n   * encryption service, from which the JWKS used to verify encryption-schema\n   * `jwtChain`s is fetched.\n   * @param options.queryClientConfig - Shared configuration for all queries\n   * exposed by the service.\n   * @param options.policyOptions - Options for the request service policy.\n   */\n  constructor({\n    messenger,\n    fetch: fetchFunction,\n    baseUrl,\n    fractalEncryptionBaseUrl,\n    queryClientConfig = {},\n    policyOptions = {},\n  }: KycServiceOptions) {\n    super({\n      name: serviceName,\n      messenger,\n      queryClientConfig,\n      policyOptions,\n    });\n    // Fall back to the runtime's native `fetch`, bound to `globalThis` so it\n    // can be invoked as a method of this instance without an illegal-invocation\n    // error on platforms that check the receiver.\n    if (fetchFunction) {\n      this.#fetch = fetchFunction;\n    } else if (typeof globalThis.fetch === 'function') {\n      this.#fetch = globalThis.fetch.bind(globalThis);\n    } else {\n      throw new Error(\n        'KycService: fetch is not available globally and was not provided in options. Please inject a fetch implementation.',\n      );\n    }\n    if (!baseUrl) {\n      throw new Error('KycService: baseUrl is required');\n    }\n    this.#baseUrl = baseUrl;\n    this.#fractalEncryptionBaseUrl = fractalEncryptionBaseUrl ?? '';\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves the customer's country from the geolocation source and converts it\n   * to an ISO 3166-1 alpha-3 code.\n   *\n   * @returns The alpha-3 country code.\n   * @throws If the country cannot be determined or mapped.\n   */\n  async getGeoCountry(): Promise<string> {\n    const location = await this.messenger.call(\n      'GeolocationController:getGeolocation',\n    );\n    // Guard nullish/empty geolocation with the documented domain error rather\n    // than letting `assert(location, string())` surface a superstruct\n    // assertion error (which would change how the failure reads in\n    // `disclaimersError`).\n    const alpha2 =\n      typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';\n    if (!alpha2 || alpha2 === 'UNKNOWN') {\n      throw new Error(\n        `Unable to determine country from geolocation (got \"${String(\n          location,\n        )}\").`,\n      );\n    }\n    const alpha3 = alpha2ToAlpha3(alpha2);\n    if (!alpha3) {\n      throw new Error(\n        `Unable to map country code \"${alpha2}\" to an ISO 3166-1 alpha-3 code.`,\n      );\n    }\n    return alpha3;\n  }\n\n  /**\n   * Fetches the disclaimers the customer must accept before a session is\n   * created.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor. Defaults to `moonpay`.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchDisclaimers({\n    vendor = 'moonpay',\n    country,\n  }: {\n    vendor?: KycVendor;\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL(`/vendors/${vendor}/disclaimers`, this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchDisclaimers`, vendor, country],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      staleTime: inMilliseconds(5, Duration.Minute),\n    });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Creates a vendor session via the UKYC backend.\n   *\n   * @param params - The session parameters.\n   * @returns The created session token.\n   */\n  async createSession(\n    params: CreateSessionParams,\n  ): Promise<Infer<typeof CreateSessionResponseStruct>> {\n    const url = new URL('/vendors/moonpay/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createSession`,\n        params.email,\n        params.termsAcceptedAt,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(params),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      CreateSessionResponseStruct,\n      'sessions',\n    );\n  }\n\n  /**\n   * Checks whether KYC is required for the given vendor, country, and\n   * capabilities.\n   *\n   * @param params - The check parameters.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(\n    params: CheckKycRequiredParams,\n  ): Promise<{ kycRequired: boolean }> {\n    const vendor = params.vendor ?? 'moonpay';\n    const url = new URL(`/vendors/${vendor}/kyc-required`, this.#baseUrl);\n    const capabilities = params.capabilities ?? [{ product: 'ramps' }];\n    const body =\n      vendor === 'moonpay'\n        ? {\n            accessToken: params.accessToken,\n            country: params.country,\n            capabilities,\n          }\n        : {};\n\n    // MoonPay requires accessToken and country; validate before making the request.\n    if (vendor === 'moonpay') {\n      if (!params.accessToken) {\n        throw new Error(\n          'checkKycRequired: accessToken is required for vendor \"moonpay\".',\n        );\n      }\n      if (!params.country) {\n        throw new Error(\n          'checkKycRequired: country is required for vendor \"moonpay\".',\n        );\n      }\n    }\n\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:checkKycRequired`,\n        vendor,\n        params.accessToken ?? null,\n        params.country ?? null,\n        capabilities,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(body),\n        }),\n      // The requirement can change server-side, so always re-check.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Creates (or resumes) an empty-shell customer for the authenticated\n   * canonical user on the given identity vendor. Must run before showing\n   * vendor T&C so the customer exists and resume logic can key off vendor\n   * status.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor (e.g. `iron` for Money/VBA).\n   * @param params.email - Email associated with the customer.\n   * @returns The vendor customer record (subset validated for controller use).\n   */\n  async createVendorCustomer(\n    params: CreateVendorCustomerParams,\n  ): Promise<VendorCustomerResponse> {\n    const url = new URL(`/vendors/${params.vendor}/customers`, this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createVendorCustomer`,\n        params.vendor,\n        params.email,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({ email: params.email }),\n        }),\n      // Customer creation/resume must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      VendorCustomerResponseStruct,\n      'vendor customers',\n    );\n  }\n\n  /**\n   * Records vendor T&C acceptance (`POST /vendors/{vendor}/disclaimers`).\n   * For Iron this creates content signings from the disclaimer ids the\n   * customer accepted. Session-scoped idOS / KYC-provider consents are\n   * recorded separately via {@link submitSessionDisclaimers}. Retries re-POST\n   * the same ids, matching the legacy `POST /consents` signing step.\n   *\n   * @param params - The parameters.\n   * @param params.vendor - Identity vendor (e.g. `iron`).\n   * @param params.disclaimerIds - Accepted vendor T&C ids.\n   * @returns The vendor signing records.\n   */\n  async submitVendorDisclaimers(\n    params: SubmitVendorDisclaimersParams,\n  ): Promise<KycVendorSigning[]> {\n    const url = new URL(\n      `/vendors/${encodeURIComponent(params.vendor)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:submitVendorDisclaimers`,\n        params.vendor,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({ disclaimerIds: params.disclaimerIds }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      VendorSigningsResponseStruct,\n      'vendor disclaimers',\n    );\n  }\n\n  /**\n   * Fetches the session-scoped idOS + KYC-provider disclaimer catalog\n   * (`GET /sessions/{sessionId}/disclaimers`). Requires an existing UKYC\n   * session; vendor T&Cs continue to come from {@link fetchDisclaimers}.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The catalog, including which documents are already consented.\n   */\n  async fetchSessionDisclaimers(\n    params: FetchSessionDisclaimersParams,\n  ): Promise<KycSessionDisclaimers> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchSessionDisclaimers`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Consent state can change after a POST, so always re-fetch.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionDisclaimersResponseStruct,\n      'session disclaimers',\n    );\n  }\n\n  /**\n   * Records idOS + KYC-provider consents for a UKYC session\n   * (`POST /sessions/{sessionId}/disclaimers`). `key`/`version` pairs must\n   * match the current catalog from {@link fetchSessionDisclaimers}. A 409\n   * means those document versions were already recorded for the session.\n   *\n   * @param params - The consent parameters.\n   * @returns The updated catalog after recording.\n   */\n  async submitSessionDisclaimers(\n    params: SubmitSessionDisclaimersParams,\n  ): Promise<KycSessionDisclaimers> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/disclaimers`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:submitSessionDisclaimers`,\n        params.sessionId,\n        params.idOS,\n        params.kycProvider,\n        params.credentialReusabilityConsentGiven,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            idOS: params.idOS,\n            kycProvider: params.kycProvider,\n            credentialReusabilityConsentGiven:\n              params.credentialReusabilityConsentGiven,\n          }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionDisclaimersResponseStruct,\n      'session disclaimers',\n    );\n  }\n\n  /**\n   * Fetches the user-keyed simplified KYC status used by Money toast / banner\n   * surfaces (`GET /kyc/status`).\n   *\n   * @returns The simplified status payload.\n   */\n  async fetchKycStatus(): Promise<KycUserStatusResponse> {\n    const url = new URL('/kyc/status', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchKycStatus`],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for toast flips, so it must always be fresh.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      KycUserStatusResponseStruct,\n      'kyc status',\n    );\n  }\n\n  /**\n   * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`s\n   * returned inside encryption schemas from {@link KycService.createUkycSession}.\n   *\n   * This is an unauthenticated request to a well-known path on the Fractal\n   * host, distinct from the UKYC base URL.\n   *\n   * @returns The JWKS keys.\n   */\n  async fetchJwks(): Promise<JwksResponse> {\n    if (!this.#fractalEncryptionBaseUrl) {\n      throw new Error(\n        'KycService: fractalEncryptionBaseUrl is not configured; cannot fetch JWKS to verify encryption schemas.',\n      );\n    }\n    const url = new URL(UKYC_JWKS_PATH, this.#fractalEncryptionBaseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchJwks`, this.#fractalEncryptionBaseUrl],\n      queryFn: async () =>\n        this.#requestJson(url, { method: 'GET' }, { authenticated: false }),\n      staleTime: inMilliseconds(1, Duration.Hour),\n    });\n    return this.#validateResponse(data, JwksResponseStruct, 'JWKS');\n  }\n\n  /**\n   * Creates a UKYC session for the SumSub document-verification sub-flow.\n   *\n   * The response carries per-secret encryption schemas (`encryptionDataKey` and\n   * `ukycCapabilityToken`) so the client can wrap the `data_encryption_key` and\n   * the read-only `ukyc_capability_token` and submit them via\n   * {@link KycService.setAuthorizations}.\n   *\n   * @param params - The session parameters.\n   * @returns The UKYC session id and encryption schemas.\n   */\n  async createUkycSession(\n    params: CreateUkycSessionParams,\n  ): Promise<UkycSessionResponse> {\n    const url = new URL('/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createUkycSession`, params.jwtToken],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            vendorId: params.vendor ?? 'moonpay',\n            vendorUserId: 'mockedId',\n            jwtToken: params.jwtToken,\n            vendorMetadata: params.vendorMetadata ?? {},\n          }),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      UkycSessionResponseStruct,\n      'UKYC sessions',\n    );\n  }\n\n  /**\n   * Submits the wrapped `data_encryption_key` and wrapped\n   * `ukyc_capability_token` for a UKYC session. Both secrets are sealed with\n   * `wrapEncryptionKey` against the encryption schemas returned by\n   * {@link KycService.createUkycSession}.\n   *\n   * @param params - The wrapped authorizations.\n   * @returns The session status after the authorizations are applied.\n   */\n  async setAuthorizations(\n    params: SetAuthorizationsParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/authorizations`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:setAuthorizations`, params.sessionId],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            wrappedEncryptionDataKey: params.wrappedEncryptionDataKey,\n            wrappedUkycCapabilityToken: params.wrappedUkycCapabilityToken,\n          }),\n        }),\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'authorizations',\n    );\n  }\n\n  /**\n   * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n   * returning the applicant access token used to launch the SDK.\n   *\n   * @param sessionId - The UKYC session id from `createUkycSession`.\n   * @returns The applicant access token and status.\n   */\n  async createJourney(\n    sessionId: string,\n  ): Promise<ApplicantAccessTokenResponse> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(sessionId)}/journey`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createJourney`, sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'POST' }),\n      // Journeys are (re)created on demand; do not reuse a cached token.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      ApplicantAccessTokenResponseStruct,\n      'journey',\n    );\n  }\n\n  /**\n   * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n   * completes to determine the final verification decision.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The session status.\n   */\n  async getSessionStatus(\n    params: GetSessionStatusParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/status`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getSessionStatus`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for a terminal decision, so it must always be fresh.\n      staleTime: 0,\n      gcTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'session status',\n    );\n  }\n\n  /**\n   * Validates a parsed API response against a superstruct schema, throwing a\n   * descriptive error when the response does not match.\n   *\n   * Unlike a bare `Struct.is` check, this surfaces exactly which field was\n   * missing or had the wrong type, which is essential for diagnosing shape\n   * mismatches between the client and the live API.\n   *\n   * @param data - The parsed response body.\n   * @param struct - The superstruct schema the body is expected to satisfy.\n   * @param apiName - A human-readable name of the API, used in the error message.\n   * @returns The validated, typed response.\n   * @throws If `data` does not match `struct`.\n   */\n  #validateResponse<Type, Schema>(\n    data: unknown,\n    struct: Struct<Type, Schema>,\n    apiName: string,\n  ): Type {\n    try {\n      assert(data, struct);\n      return data;\n    } catch (error) {\n      const detail =\n        error instanceof StructError\n          ? `${error.message} (received: ${JSON.stringify(data)})`\n          : // `assert` only ever throws `StructError` for the plain structs used\n            // here, so this is a defensive fallback that is not exercised.\n            /* istanbul ignore next */\n            String(error);\n      throw new Error(\n        `Malformed response received from ${apiName} API: ${detail}`,\n      );\n    }\n  }\n\n  /**\n   * Performs a single JSON request.\n   *\n   * This is meant to be used as the `queryFn` for {@link fetchQuery}, which\n   * wraps it in the shared service policy (retries, circuit breaker). Requests\n   * are authenticated with the wallet bearer token by default; pass\n   * `{ authenticated: false }` for calls to services that do not expect it\n   * (e.g. the Fractal JWKS endpoint).\n   *\n   * @param url - The request URL.\n   * @param init - The request init (method, body).\n   * @param options - Request options.\n   * @param options.authenticated - Whether to attach the bearer token. Defaults\n   * to `true`.\n   * @returns The parsed JSON response.\n   */\n  async #requestJson(\n    url: URL,\n    init: RequestInit,\n    options: { authenticated?: boolean } = {},\n  ): Promise<Json> {\n    const { authenticated = true } = options;\n\n    const headers: Record<string, string> = {};\n\n    // Only advertise a JSON body when one is actually sent; bodyless requests\n    // (e.g. `createJourney`) must not carry a `Content-Type`.\n    if (init.body !== undefined && init.body !== null) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    if (authenticated) {\n      const bearerToken = await this.messenger.call(\n        'AuthenticationController:getBearerToken',\n      );\n      if (!bearerToken) {\n        throw new Error(\n          'Unable to obtain an authentication bearer token — is the wallet signed in?',\n        );\n      }\n      assert(bearerToken, string());\n      headers.Authorization = `Bearer ${bearerToken}`;\n    }\n\n    const response = await this.#fetch(url.toString(), {\n      ...init,\n      headers,\n    });\n    if (!response.ok) {\n      let detail = '';\n      try {\n        const errorBody: unknown = await response.json();\n        if (errorBody && typeof errorBody === 'object') {\n          const record = errorBody as Record<string, unknown>;\n          if (typeof record.message === 'string') {\n            detail = record.message;\n          } else if (typeof record.error === 'string') {\n            detail = record.error;\n          }\n        }\n      } catch {\n        // Ignore body parse failures; status alone is still useful.\n      }\n      throw new HttpError(\n        response.status,\n        `Fetching '${url.toString()}' failed with status '${response.status}'${\n          detail ? `: ${detail}` : ''\n        }`,\n      );\n    }\n\n    // DELETE (and similar) endpoints return 204 No Content.\n    if (response.status === 204) {\n      return null;\n    }\n\n    return (await response.json()) as Json;\n  }\n}\n"]}

package/dist/countryCodes.cjs

@@ -0,0 +1,274 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.alpha2ToAlpha3 = exports.ALPHA2_TO_ALPHA3 = void 0;
+/**
+ * ISO 3166-1 alpha-2 to alpha-3 country code mapping.
+ *
+ * The geolocation source returns ISO 3166-2 codes whose leading segment is an
+ * alpha-2 country code (e.g. "US", "US-NY"). The identity vendor APIs
+ * (disclaimers, kyc-required) expect alpha-3 codes (e.g. "USA"). This map
+ * bridges the two.
+ */
+exports.ALPHA2_TO_ALPHA3 = {
+    AD: 'AND',
+    AE: 'ARE',
+    AF: 'AFG',
+    AG: 'ATG',
+    AI: 'AIA',
+    AL: 'ALB',
+    AM: 'ARM',
+    AO: 'AGO',
+    AQ: 'ATA',
+    AR: 'ARG',
+    AS: 'ASM',
+    AT: 'AUT',
+    AU: 'AUS',
+    AW: 'ABW',
+    AX: 'ALA',
+    AZ: 'AZE',
+    BA: 'BIH',
+    BB: 'BRB',
+    BD: 'BGD',
+    BE: 'BEL',
+    BF: 'BFA',
+    BG: 'BGR',
+    BH: 'BHR',
+    BI: 'BDI',
+    BJ: 'BEN',
+    BL: 'BLM',
+    BM: 'BMU',
+    BN: 'BRN',
+    BO: 'BOL',
+    BQ: 'BES',
+    BR: 'BRA',
+    BS: 'BHS',
+    BT: 'BTN',
+    BV: 'BVT',
+    BW: 'BWA',
+    BY: 'BLR',
+    BZ: 'BLZ',
+    CA: 'CAN',
+    CC: 'CCK',
+    CD: 'COD',
+    CF: 'CAF',
+    CG: 'COG',
+    CH: 'CHE',
+    CI: 'CIV',
+    CK: 'COK',
+    CL: 'CHL',
+    CM: 'CMR',
+    CN: 'CHN',
+    CO: 'COL',
+    CR: 'CRI',
+    CU: 'CUB',
+    CV: 'CPV',
+    CW: 'CUW',
+    CX: 'CXR',
+    CY: 'CYP',
+    CZ: 'CZE',
+    DE: 'DEU',
+    DJ: 'DJI',
+    DK: 'DNK',
+    DM: 'DMA',
+    DO: 'DOM',
+    DZ: 'DZA',
+    EC: 'ECU',
+    EE: 'EST',
+    EG: 'EGY',
+    EH: 'ESH',
+    ER: 'ERI',
+    ES: 'ESP',
+    ET: 'ETH',
+    FI: 'FIN',
+    FJ: 'FJI',
+    FK: 'FLK',
+    FM: 'FSM',
+    FO: 'FRO',
+    FR: 'FRA',
+    GA: 'GAB',
+    GB: 'GBR',
+    GD: 'GRD',
+    GE: 'GEO',
+    GF: 'GUF',
+    GG: 'GGY',
+    GH: 'GHA',
+    GI: 'GIB',
+    GL: 'GRL',
+    GM: 'GMB',
+    GN: 'GIN',
+    GP: 'GLP',
+    GQ: 'GNQ',
+    GR: 'GRC',
+    GS: 'SGS',
+    GT: 'GTM',
+    GU: 'GUM',
+    GW: 'GNB',
+    GY: 'GUY',
+    HK: 'HKG',
+    HM: 'HMD',
+    HN: 'HND',
+    HR: 'HRV',
+    HT: 'HTI',
+    HU: 'HUN',
+    ID: 'IDN',
+    IE: 'IRL',
+    IL: 'ISR',
+    IM: 'IMN',
+    IN: 'IND',
+    IO: 'IOT',
+    IQ: 'IRQ',
+    IR: 'IRN',
+    IS: 'ISL',
+    IT: 'ITA',
+    JE: 'JEY',
+    JM: 'JAM',
+    JO: 'JOR',
+    JP: 'JPN',
+    KE: 'KEN',
+    KG: 'KGZ',
+    KH: 'KHM',
+    KI: 'KIR',
+    KM: 'COM',
+    KN: 'KNA',
+    KP: 'PRK',
+    KR: 'KOR',
+    KW: 'KWT',
+    KY: 'CYM',
+    KZ: 'KAZ',
+    LA: 'LAO',
+    LB: 'LBN',
+    LC: 'LCA',
+    LI: 'LIE',
+    LK: 'LKA',
+    LR: 'LBR',
+    LS: 'LSO',
+    LT: 'LTU',
+    LU: 'LUX',
+    LV: 'LVA',
+    LY: 'LBY',
+    MA: 'MAR',
+    MC: 'MCO',
+    MD: 'MDA',
+    ME: 'MNE',
+    MF: 'MAF',
+    MG: 'MDG',
+    MH: 'MHL',
+    MK: 'MKD',
+    ML: 'MLI',
+    MM: 'MMR',
+    MN: 'MNG',
+    MO: 'MAC',
+    MP: 'MNP',
+    MQ: 'MTQ',
+    MR: 'MRT',
+    MS: 'MSR',
+    MT: 'MLT',
+    MU: 'MUS',
+    MV: 'MDV',
+    MW: 'MWI',
+    MX: 'MEX',
+    MY: 'MYS',
+    MZ: 'MOZ',
+    NA: 'NAM',
+    NC: 'NCL',
+    NE: 'NER',
+    NF: 'NFK',
+    NG: 'NGA',
+    NI: 'NIC',
+    NL: 'NLD',
+    NO: 'NOR',
+    NP: 'NPL',
+    NR: 'NRU',
+    NU: 'NIU',
+    NZ: 'NZL',
+    OM: 'OMN',
+    PA: 'PAN',
+    PE: 'PER',
+    PF: 'PYF',
+    PG: 'PNG',
+    PH: 'PHL',
+    PK: 'PAK',
+    PL: 'POL',
+    PM: 'SPM',
+    PN: 'PCN',
+    PR: 'PRI',
+    PS: 'PSE',
+    PT: 'PRT',
+    PW: 'PLW',
+    PY: 'PRY',
+    QA: 'QAT',
+    RE: 'REU',
+    RO: 'ROU',
+    RS: 'SRB',
+    RU: 'RUS',
+    RW: 'RWA',
+    SA: 'SAU',
+    SB: 'SLB',
+    SC: 'SYC',
+    SD: 'SDN',
+    SE: 'SWE',
+    SG: 'SGP',
+    SH: 'SHN',
+    SI: 'SVN',
+    SJ: 'SJM',
+    SK: 'SVK',
+    SL: 'SLE',
+    SM: 'SMR',
+    SN: 'SEN',
+    SO: 'SOM',
+    SR: 'SUR',
+    SS: 'SSD',
+    ST: 'STP',
+    SV: 'SLV',
+    SX: 'SXM',
+    SY: 'SYR',
+    SZ: 'SWZ',
+    TC: 'TCA',
+    TD: 'TCD',
+    TF: 'ATF',
+    TG: 'TGO',
+    TH: 'THA',
+    TJ: 'TJK',
+    TK: 'TKL',
+    TL: 'TLS',
+    TM: 'TKM',
+    TN: 'TUN',
+    TO: 'TON',
+    TR: 'TUR',
+    TT: 'TTO',
+    TV: 'TUV',
+    TW: 'TWN',
+    TZ: 'TZA',
+    UA: 'UKR',
+    UG: 'UGA',
+    UM: 'UMI',
+    US: 'USA',
+    UY: 'URY',
+    UZ: 'UZB',
+    VA: 'VAT',
+    VC: 'VCT',
+    VE: 'VEN',
+    VG: 'VGB',
+    VI: 'VIR',
+    VN: 'VNM',
+    VU: 'VUT',
+    WF: 'WLF',
+    WS: 'WSM',
+    YE: 'YEM',
+    YT: 'MYT',
+    ZA: 'ZAF',
+    ZM: 'ZMB',
+    ZW: 'ZWE',
+};
+/**
+ * Converts an ISO 3166-1 alpha-2 country code (e.g. "US") to its alpha-3
+ * equivalent (e.g. "USA"). Returns `undefined` for unknown codes.
+ *
+ * @param alpha2 - The ISO 3166-1 alpha-2 country code.
+ * @returns The alpha-3 code, or `undefined` if the input is not recognized.
+ */
+function alpha2ToAlpha3(alpha2) {
+    return exports.ALPHA2_TO_ALPHA3[alpha2.toUpperCase()];
+}
+exports.alpha2ToAlpha3 = alpha2ToAlpha3;
+//# sourceMappingURL=countryCodes.cjs.map

package/dist/countryCodes.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"countryCodes.cjs","sourceRoot":"","sources":["../src/countryCodes.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACU,QAAA,gBAAgB,GAA2B;IACtD,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;CACV,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,MAAc;IAC3C,OAAO,wBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAFD,wCAEC","sourcesContent":["/**\n * ISO 3166-1 alpha-2 to alpha-3 country code mapping.\n *\n * The geolocation source returns ISO 3166-2 codes whose leading segment is an\n * alpha-2 country code (e.g. \"US\", \"US-NY\"). The identity vendor APIs\n * (disclaimers, kyc-required) expect alpha-3 codes (e.g. \"USA\"). This map\n * bridges the two.\n */\nexport const ALPHA2_TO_ALPHA3: Record<string, string> = {\n  AD: 'AND',\n  AE: 'ARE',\n  AF: 'AFG',\n  AG: 'ATG',\n  AI: 'AIA',\n  AL: 'ALB',\n  AM: 'ARM',\n  AO: 'AGO',\n  AQ: 'ATA',\n  AR: 'ARG',\n  AS: 'ASM',\n  AT: 'AUT',\n  AU: 'AUS',\n  AW: 'ABW',\n  AX: 'ALA',\n  AZ: 'AZE',\n  BA: 'BIH',\n  BB: 'BRB',\n  BD: 'BGD',\n  BE: 'BEL',\n  BF: 'BFA',\n  BG: 'BGR',\n  BH: 'BHR',\n  BI: 'BDI',\n  BJ: 'BEN',\n  BL: 'BLM',\n  BM: 'BMU',\n  BN: 'BRN',\n  BO: 'BOL',\n  BQ: 'BES',\n  BR: 'BRA',\n  BS: 'BHS',\n  BT: 'BTN',\n  BV: 'BVT',\n  BW: 'BWA',\n  BY: 'BLR',\n  BZ: 'BLZ',\n  CA: 'CAN',\n  CC: 'CCK',\n  CD: 'COD',\n  CF: 'CAF',\n  CG: 'COG',\n  CH: 'CHE',\n  CI: 'CIV',\n  CK: 'COK',\n  CL: 'CHL',\n  CM: 'CMR',\n  CN: 'CHN',\n  CO: 'COL',\n  CR: 'CRI',\n  CU: 'CUB',\n  CV: 'CPV',\n  CW: 'CUW',\n  CX: 'CXR',\n  CY: 'CYP',\n  CZ: 'CZE',\n  DE: 'DEU',\n  DJ: 'DJI',\n  DK: 'DNK',\n  DM: 'DMA',\n  DO: 'DOM',\n  DZ: 'DZA',\n  EC: 'ECU',\n  EE: 'EST',\n  EG: 'EGY',\n  EH: 'ESH',\n  ER: 'ERI',\n  ES: 'ESP',\n  ET: 'ETH',\n  FI: 'FIN',\n  FJ: 'FJI',\n  FK: 'FLK',\n  FM: 'FSM',\n  FO: 'FRO',\n  FR: 'FRA',\n  GA: 'GAB',\n  GB: 'GBR',\n  GD: 'GRD',\n  GE: 'GEO',\n  GF: 'GUF',\n  GG: 'GGY',\n  GH: 'GHA',\n  GI: 'GIB',\n  GL: 'GRL',\n  GM: 'GMB',\n  GN: 'GIN',\n  GP: 'GLP',\n  GQ: 'GNQ',\n  GR: 'GRC',\n  GS: 'SGS',\n  GT: 'GTM',\n  GU: 'GUM',\n  GW: 'GNB',\n  GY: 'GUY',\n  HK: 'HKG',\n  HM: 'HMD',\n  HN: 'HND',\n  HR: 'HRV',\n  HT: 'HTI',\n  HU: 'HUN',\n  ID: 'IDN',\n  IE: 'IRL',\n  IL: 'ISR',\n  IM: 'IMN',\n  IN: 'IND',\n  IO: 'IOT',\n  IQ: 'IRQ',\n  IR: 'IRN',\n  IS: 'ISL',\n  IT: 'ITA',\n  JE: 'JEY',\n  JM: 'JAM',\n  JO: 'JOR',\n  JP: 'JPN',\n  KE: 'KEN',\n  KG: 'KGZ',\n  KH: 'KHM',\n  KI: 'KIR',\n  KM: 'COM',\n  KN: 'KNA',\n  KP: 'PRK',\n  KR: 'KOR',\n  KW: 'KWT',\n  KY: 'CYM',\n  KZ: 'KAZ',\n  LA: 'LAO',\n  LB: 'LBN',\n  LC: 'LCA',\n  LI: 'LIE',\n  LK: 'LKA',\n  LR: 'LBR',\n  LS: 'LSO',\n  LT: 'LTU',\n  LU: 'LUX',\n  LV: 'LVA',\n  LY: 'LBY',\n  MA: 'MAR',\n  MC: 'MCO',\n  MD: 'MDA',\n  ME: 'MNE',\n  MF: 'MAF',\n  MG: 'MDG',\n  MH: 'MHL',\n  MK: 'MKD',\n  ML: 'MLI',\n  MM: 'MMR',\n  MN: 'MNG',\n  MO: 'MAC',\n  MP: 'MNP',\n  MQ: 'MTQ',\n  MR: 'MRT',\n  MS: 'MSR',\n  MT: 'MLT',\n  MU: 'MUS',\n  MV: 'MDV',\n  MW: 'MWI',\n  MX: 'MEX',\n  MY: 'MYS',\n  MZ: 'MOZ',\n  NA: 'NAM',\n  NC: 'NCL',\n  NE: 'NER',\n  NF: 'NFK',\n  NG: 'NGA',\n  NI: 'NIC',\n  NL: 'NLD',\n  NO: 'NOR',\n  NP: 'NPL',\n  NR: 'NRU',\n  NU: 'NIU',\n  NZ: 'NZL',\n  OM: 'OMN',\n  PA: 'PAN',\n  PE: 'PER',\n  PF: 'PYF',\n  PG: 'PNG',\n  PH: 'PHL',\n  PK: 'PAK',\n  PL: 'POL',\n  PM: 'SPM',\n  PN: 'PCN',\n  PR: 'PRI',\n  PS: 'PSE',\n  PT: 'PRT',\n  PW: 'PLW',\n  PY: 'PRY',\n  QA: 'QAT',\n  RE: 'REU',\n  RO: 'ROU',\n  RS: 'SRB',\n  RU: 'RUS',\n  RW: 'RWA',\n  SA: 'SAU',\n  SB: 'SLB',\n  SC: 'SYC',\n  SD: 'SDN',\n  SE: 'SWE',\n  SG: 'SGP',\n  SH: 'SHN',\n  SI: 'SVN',\n  SJ: 'SJM',\n  SK: 'SVK',\n  SL: 'SLE',\n  SM: 'SMR',\n  SN: 'SEN',\n  SO: 'SOM',\n  SR: 'SUR',\n  SS: 'SSD',\n  ST: 'STP',\n  SV: 'SLV',\n  SX: 'SXM',\n  SY: 'SYR',\n  SZ: 'SWZ',\n  TC: 'TCA',\n  TD: 'TCD',\n  TF: 'ATF',\n  TG: 'TGO',\n  TH: 'THA',\n  TJ: 'TJK',\n  TK: 'TKL',\n  TL: 'TLS',\n  TM: 'TKM',\n  TN: 'TUN',\n  TO: 'TON',\n  TR: 'TUR',\n  TT: 'TTO',\n  TV: 'TUV',\n  TW: 'TWN',\n  TZ: 'TZA',\n  UA: 'UKR',\n  UG: 'UGA',\n  UM: 'UMI',\n  US: 'USA',\n  UY: 'URY',\n  UZ: 'UZB',\n  VA: 'VAT',\n  VC: 'VCT',\n  VE: 'VEN',\n  VG: 'VGB',\n  VI: 'VIR',\n  VN: 'VNM',\n  VU: 'VUT',\n  WF: 'WLF',\n  WS: 'WSM',\n  YE: 'YEM',\n  YT: 'MYT',\n  ZA: 'ZAF',\n  ZM: 'ZMB',\n  ZW: 'ZWE',\n};\n\n/**\n * Converts an ISO 3166-1 alpha-2 country code (e.g. \"US\") to its alpha-3\n * equivalent (e.g. \"USA\"). Returns `undefined` for unknown codes.\n *\n * @param alpha2 - The ISO 3166-1 alpha-2 country code.\n * @returns The alpha-3 code, or `undefined` if the input is not recognized.\n */\nexport function alpha2ToAlpha3(alpha2: string): string | undefined {\n  return ALPHA2_TO_ALPHA3[alpha2.toUpperCase()];\n}\n"]}

package/dist/{countryCodes.d.ts → countryCodes.d.cts}

@@ -15,4 +15,4 @@ export declare const ALPHA2_TO_ALPHA3: Record<string, string>;
  * @returns The alpha-3 code, or `undefined` if the input is not recognized.
  */
 export declare function alpha2ToAlpha3(alpha2: string): string | undefined;
-//# sourceMappingURL=countryCodes.d.ts.map
+//# sourceMappingURL=countryCodes.d.cts.map

package/dist/countryCodes.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countryCodes.d.cts","sourceRoot":"","sources":["../src/countryCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0PnD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE"}

package/dist/countryCodes.d.mts

@@ -0,0 +1,18 @@
+/**
+ * ISO 3166-1 alpha-2 to alpha-3 country code mapping.
+ *
+ * The geolocation source returns ISO 3166-2 codes whose leading segment is an
+ * alpha-2 country code (e.g. "US", "US-NY"). The identity vendor APIs
+ * (disclaimers, kyc-required) expect alpha-3 codes (e.g. "USA"). This map
+ * bridges the two.
+ */
+export declare const ALPHA2_TO_ALPHA3: Record<string, string>;
+/**
+ * Converts an ISO 3166-1 alpha-2 country code (e.g. "US") to its alpha-3
+ * equivalent (e.g. "USA"). Returns `undefined` for unknown codes.
+ *
+ * @param alpha2 - The ISO 3166-1 alpha-2 country code.
+ * @returns The alpha-3 code, or `undefined` if the input is not recognized.
+ */
+export declare function alpha2ToAlpha3(alpha2: string): string | undefined;
+//# sourceMappingURL=countryCodes.d.mts.map

package/dist/countryCodes.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countryCodes.d.mts","sourceRoot":"","sources":["../src/countryCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0PnD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE"}

package/dist/{countryCodes.js → countryCodes.mjs}

@@ -267,4 +267,4 @@ export const ALPHA2_TO_ALPHA3 = {
 export function alpha2ToAlpha3(alpha2) {
     return ALPHA2_TO_ALPHA3[alpha2.toUpperCase()];
 }
-//# sourceMappingURL=countryCodes.js.map
+//# sourceMappingURL=countryCodes.mjs.map