@metamask-previews/kyc-controller 0.0.0-preview-6b4bcdab3 → 0.0.0-preview-0b5bfc2

package/dist/KycService-method-action-types.d.mts

@@ -19,7 +19,6 @@ export type KycServiceGetGeoCountryAction = {
  * created.
  *
  * @param params - The parameters.
- * @param params.vendor - Identity vendor. Defaults to `moonpay`.
  * @param params.country - ISO 3166-1 alpha-3 country code.
  * @returns The disclaimers.
  */
@@ -38,7 +37,7 @@ export type KycServiceCreateSessionAction = {
     handler: KycService['createSession'];
 };
 /**
- * Checks whether KYC is required for the given vendor, country, and
+ * Checks whether KYC is required for the given access token, country, and
  * capabilities.
  *
  * @param params - The check parameters.
@@ -48,41 +47,6 @@ export type KycServiceCheckKycRequiredAction = {
     type: `KycService:checkKycRequired`;
     handler: KycService['checkKycRequired'];
 };
-/**
- * Creates (or resumes) an empty-shell customer for the authenticated
- * canonical user on the given identity vendor. Must run before showing
- * vendor T&C so the customer exists and resume logic can key off vendor
- * status.
- *
- * @param params - The parameters.
- * @param params.vendor - Identity vendor (e.g. `iron` for Money/VBA).
- * @param params.email - Email associated with the customer.
- * @returns The vendor customer record (subset validated for controller use).
- */
-export type KycServiceCreateVendorCustomerAction = {
-    type: `KycService:createVendorCustomer`;
-    handler: KycService['createVendorCustomer'];
-};
-/**
- * Posts T&C1 (vendor signings) and T&C2 (Sumsub + idOS) consents for the
- * authenticated user. The API responds with 204 No Content on success.
- *
- * @param params - The consent parameters.
- */
-export type KycServiceSubmitConsentsAction = {
-    type: `KycService:submitConsents`;
-    handler: KycService['submitConsents'];
-};
-/**
- * Fetches the user-keyed simplified KYC status used by Money toast / banner
- * surfaces (`GET /kyc/status`).
- *
- * @returns The simplified status payload.
- */
-export type KycServiceFetchKycStatusAction = {
-    type: `KycService:fetchKycStatus`;
-    handler: KycService['fetchKycStatus'];
-};
 /**
  * Requests a per-session wrapping key from the UKYC backend.
  *
@@ -153,5 +117,5 @@ export type KycServiceGetSessionStatusAction = {
 /**
  * Union of all KycService action types.
  */
-export type KycServiceMethodActions = KycServiceGetGeoCountryAction | KycServiceFetchDisclaimersAction | KycServiceCreateSessionAction | KycServiceCheckKycRequiredAction | KycServiceCreateVendorCustomerAction | KycServiceSubmitConsentsAction | KycServiceFetchKycStatusAction | KycServiceGetWrappingKeyAction | KycServiceFetchJwksAction | KycServiceCreateUkycSessionAction | KycServiceCreateJourneyAction | KycServiceGetSessionStatusAction;
+export type KycServiceMethodActions = KycServiceGetGeoCountryAction | KycServiceFetchDisclaimersAction | KycServiceCreateSessionAction | KycServiceCheckKycRequiredAction | KycServiceGetWrappingKeyAction | KycServiceFetchJwksAction | KycServiceCreateUkycSessionAction | KycServiceCreateJourneyAction | KycServiceGetSessionStatusAction;
 //# sourceMappingURL=KycService-method-action-types.d.mts.map

package/dist/KycService-method-action-types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"KycService-method-action-types.d.mts","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,yBAAwB;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oCAAoC,GAAG;IACjD,IAAI,EAAE,iCAAiC,CAAC;IACxC,OAAO,EAAE,UAAU,CAAC,sBAAsB,CAAC,CAAC;CAC7C,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAC/B,6BAA6B,GAC7B,gCAAgC,GAChC,6BAA6B,GAC7B,gCAAgC,GAChC,oCAAoC,GACpC,8BAA8B,GAC9B,8BAA8B,GAC9B,8BAA8B,GAC9B,yBAAyB,GACzB,iCAAiC,GACjC,6BAA6B,GAC7B,gCAAgC,CAAC"}
+{"version":3,"file":"KycService-method-action-types.d.mts","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,yBAAwB;AAElD;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;CACvC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,8BAA8B,CAAC;IACrC,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;CAC1C,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GAAG;IAC1C,IAAI,EAAE,0BAA0B,CAAC;IACjC,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;CACtC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACzC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAC/B,6BAA6B,GAC7B,gCAAgC,GAChC,6BAA6B,GAC7B,gCAAgC,GAChC,8BAA8B,GAC9B,yBAAyB,GACzB,iCAAiC,GACjC,6BAA6B,GAC7B,gCAAgC,CAAC"}

package/dist/KycService-method-action-types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"KycService-method-action-types.mjs","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { KycService } from './KycService.js';\n\n/**\n * Resolves the customer's country from the geolocation source and converts it\n * to an ISO 3166-1 alpha-3 code.\n *\n * @returns The alpha-3 country code.\n * @throws If the country cannot be determined or mapped.\n */\nexport type KycServiceGetGeoCountryAction = {\n  type: `KycService:getGeoCountry`;\n  handler: KycService['getGeoCountry'];\n};\n\n/**\n * Fetches the disclaimers the customer must accept before a session is\n * created.\n *\n * @param params - The parameters.\n * @param params.vendor - Identity vendor. Defaults to `moonpay`.\n * @param params.country - ISO 3166-1 alpha-3 country code.\n * @returns The disclaimers.\n */\nexport type KycServiceFetchDisclaimersAction = {\n  type: `KycService:fetchDisclaimers`;\n  handler: KycService['fetchDisclaimers'];\n};\n\n/**\n * Creates a vendor session via the UKYC backend.\n *\n * @param params - The session parameters.\n * @returns The created session token.\n */\nexport type KycServiceCreateSessionAction = {\n  type: `KycService:createSession`;\n  handler: KycService['createSession'];\n};\n\n/**\n * Checks whether KYC is required for the given vendor, country, and\n * capabilities.\n *\n * @param params - The check parameters.\n * @returns Whether KYC is required.\n */\nexport type KycServiceCheckKycRequiredAction = {\n  type: `KycService:checkKycRequired`;\n  handler: KycService['checkKycRequired'];\n};\n\n/**\n * Creates (or resumes) an empty-shell customer for the authenticated\n * canonical user on the given identity vendor. Must run before showing\n * vendor T&C so the customer exists and resume logic can key off vendor\n * status.\n *\n * @param params - The parameters.\n * @param params.vendor - Identity vendor (e.g. `iron` for Money/VBA).\n * @param params.email - Email associated with the customer.\n * @returns The vendor customer record (subset validated for controller use).\n */\nexport type KycServiceCreateVendorCustomerAction = {\n  type: `KycService:createVendorCustomer`;\n  handler: KycService['createVendorCustomer'];\n};\n\n/**\n * Posts T&C1 (vendor signings) and T&C2 (Sumsub + idOS) consents for the\n * authenticated user. The API responds with 204 No Content on success.\n *\n * @param params - The consent parameters.\n */\nexport type KycServiceSubmitConsentsAction = {\n  type: `KycService:submitConsents`;\n  handler: KycService['submitConsents'];\n};\n\n/**\n * Fetches the user-keyed simplified KYC status used by Money toast / banner\n * surfaces (`GET /kyc/status`).\n *\n * @returns The simplified status payload.\n */\nexport type KycServiceFetchKycStatusAction = {\n  type: `KycService:fetchKycStatus`;\n  handler: KycService['fetchKycStatus'];\n};\n\n/**\n * Requests a per-session wrapping key from the UKYC backend.\n *\n * The client sends its ephemeral X25519 public key; the backend responds with\n * its session public key (`sessionServerPublicKey`) and a `jwtChain` that\n * attests it. The caller must verify `jwtChain` against the Fractal JWKS\n * (see {@link KycService.fetchJwks}) before trusting the key to wrap the\n * `data_encryption_key`.\n *\n * @param params - The parameters.\n * @param params.sessionClientPublicKey - Our ephemeral X25519 public key\n * (base64url).\n * @returns The wrapping key id, `jwtChain`, and session server public key.\n */\nexport type KycServiceGetWrappingKeyAction = {\n  type: `KycService:getWrappingKey`;\n  handler: KycService['getWrappingKey'];\n};\n\n/**\n * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`\n * returned by {@link KycService.getWrappingKey}.\n *\n * This is an unauthenticated request to a well-known path on the Fractal\n * host, distinct from the UKYC base URL.\n *\n * @returns The JWKS keys.\n */\nexport type KycServiceFetchJwksAction = {\n  type: `KycService:fetchJwks`;\n  handler: KycService['fetchJwks'];\n};\n\n/**\n * Creates a UKYC session for the SumSub document-verification sub-flow,\n * handing over the wrapped `data_encryption_key` and the client-signed,\n * read-only `ukyc_capability_token` that authorizes later storage access for\n * the session.\n *\n * @param params - The session parameters.\n * @returns The UKYC session identifiers.\n */\nexport type KycServiceCreateUkycSessionAction = {\n  type: `KycService:createUkycSession`;\n  handler: KycService['createUkycSession'];\n};\n\n/**\n * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n * returning the applicant access token used to launch the SDK.\n *\n * @param sessionId - The UKYC session id from `createUkycSession`.\n * @returns The applicant access token and status.\n */\nexport type KycServiceCreateJourneyAction = {\n  type: `KycService:createJourney`;\n  handler: KycService['createJourney'];\n};\n\n/**\n * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n * completes to determine the final verification decision.\n *\n * @param params - The parameters.\n * @param params.sessionId - The UKYC session id.\n * @returns The session status.\n */\nexport type KycServiceGetSessionStatusAction = {\n  type: `KycService:getSessionStatus`;\n  handler: KycService['getSessionStatus'];\n};\n\n/**\n * Union of all KycService action types.\n */\nexport type KycServiceMethodActions =\n  | KycServiceGetGeoCountryAction\n  | KycServiceFetchDisclaimersAction\n  | KycServiceCreateSessionAction\n  | KycServiceCheckKycRequiredAction\n  | KycServiceCreateVendorCustomerAction\n  | KycServiceSubmitConsentsAction\n  | KycServiceFetchKycStatusAction\n  | KycServiceGetWrappingKeyAction\n  | KycServiceFetchJwksAction\n  | KycServiceCreateUkycSessionAction\n  | KycServiceCreateJourneyAction\n  | KycServiceGetSessionStatusAction;\n"]}
+{"version":3,"file":"KycService-method-action-types.mjs","sourceRoot":"","sources":["../src/KycService-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { KycService } from './KycService.js';\n\n/**\n * Resolves the customer's country from the geolocation source and converts it\n * to an ISO 3166-1 alpha-3 code.\n *\n * @returns The alpha-3 country code.\n * @throws If the country cannot be determined or mapped.\n */\nexport type KycServiceGetGeoCountryAction = {\n  type: `KycService:getGeoCountry`;\n  handler: KycService['getGeoCountry'];\n};\n\n/**\n * Fetches the disclaimers the customer must accept before a session is\n * created.\n *\n * @param params - The parameters.\n * @param params.country - ISO 3166-1 alpha-3 country code.\n * @returns The disclaimers.\n */\nexport type KycServiceFetchDisclaimersAction = {\n  type: `KycService:fetchDisclaimers`;\n  handler: KycService['fetchDisclaimers'];\n};\n\n/**\n * Creates a vendor session via the UKYC backend.\n *\n * @param params - The session parameters.\n * @returns The created session token.\n */\nexport type KycServiceCreateSessionAction = {\n  type: `KycService:createSession`;\n  handler: KycService['createSession'];\n};\n\n/**\n * Checks whether KYC is required for the given access token, country, and\n * capabilities.\n *\n * @param params - The check parameters.\n * @returns Whether KYC is required.\n */\nexport type KycServiceCheckKycRequiredAction = {\n  type: `KycService:checkKycRequired`;\n  handler: KycService['checkKycRequired'];\n};\n\n/**\n * Requests a per-session wrapping key from the UKYC backend.\n *\n * The client sends its ephemeral X25519 public key; the backend responds with\n * its session public key (`sessionServerPublicKey`) and a `jwtChain` that\n * attests it. The caller must verify `jwtChain` against the Fractal JWKS\n * (see {@link KycService.fetchJwks}) before trusting the key to wrap the\n * `data_encryption_key`.\n *\n * @param params - The parameters.\n * @param params.sessionClientPublicKey - Our ephemeral X25519 public key\n * (base64url).\n * @returns The wrapping key id, `jwtChain`, and session server public key.\n */\nexport type KycServiceGetWrappingKeyAction = {\n  type: `KycService:getWrappingKey`;\n  handler: KycService['getWrappingKey'];\n};\n\n/**\n * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`\n * returned by {@link KycService.getWrappingKey}.\n *\n * This is an unauthenticated request to a well-known path on the Fractal\n * host, distinct from the UKYC base URL.\n *\n * @returns The JWKS keys.\n */\nexport type KycServiceFetchJwksAction = {\n  type: `KycService:fetchJwks`;\n  handler: KycService['fetchJwks'];\n};\n\n/**\n * Creates a UKYC session for the SumSub document-verification sub-flow,\n * handing over the wrapped `data_encryption_key` and the client-signed,\n * read-only `ukyc_capability_token` that authorizes later storage access for\n * the session.\n *\n * @param params - The session parameters.\n * @returns The UKYC session identifiers.\n */\nexport type KycServiceCreateUkycSessionAction = {\n  type: `KycService:createUkycSession`;\n  handler: KycService['createUkycSession'];\n};\n\n/**\n * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n * returning the applicant access token used to launch the SDK.\n *\n * @param sessionId - The UKYC session id from `createUkycSession`.\n * @returns The applicant access token and status.\n */\nexport type KycServiceCreateJourneyAction = {\n  type: `KycService:createJourney`;\n  handler: KycService['createJourney'];\n};\n\n/**\n * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n * completes to determine the final verification decision.\n *\n * @param params - The parameters.\n * @param params.sessionId - The UKYC session id.\n * @returns The session status.\n */\nexport type KycServiceGetSessionStatusAction = {\n  type: `KycService:getSessionStatus`;\n  handler: KycService['getSessionStatus'];\n};\n\n/**\n * Union of all KycService action types.\n */\nexport type KycServiceMethodActions =\n  | KycServiceGetGeoCountryAction\n  | KycServiceFetchDisclaimersAction\n  | KycServiceCreateSessionAction\n  | KycServiceCheckKycRequiredAction\n  | KycServiceGetWrappingKeyAction\n  | KycServiceFetchJwksAction\n  | KycServiceCreateUkycSessionAction\n  | KycServiceCreateJourneyAction\n  | KycServiceGetSessionStatusAction;\n"]}

package/dist/KycService.cjs

@@ -10,7 +10,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _KycService_instances, _KycService_fetch, _KycService_baseUrl, _KycService_fractalEncryptionBaseUrl, _KycService_validateResponse, _KycService_requestJson;
+var _KycService_instances, _KycService_baseUrl, _KycService_fractalEncryptionBaseUrl, _KycService_validateResponse, _KycService_requestJson;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KycService = exports.serviceName = void 0;
 const base_data_service_1 = require("@metamask/base-data-service");
@@ -31,9 +31,6 @@ const MESSENGER_EXPOSED_METHODS = [
     'fetchDisclaimers',
     'createSession',
     'checkKycRequired',
-    'createVendorCustomer',
-    'submitConsents',
-    'fetchKycStatus',
     'getWrappingKey',
     'fetchJwks',
     'createUkycSession',
@@ -92,39 +89,19 @@ const SessionStatusResponseStruct = (0, superstruct_1.type)({
     vendor: (0, superstruct_1.string)(),
     vendorStatus: (0, superstruct_1.string)(),
 });
-// Vendor customer subset — `type` (not `object`) keeps extra vendor fields from
-// failing validation while still requiring the fields the controller needs.
-const VendorCustomerResponseStruct = (0, superstruct_1.type)({
-    id: (0, superstruct_1.string)(),
-    email: (0, superstruct_1.string)(),
-    status: (0, superstruct_1.string)(),
-});
-const KYC_USER_STATUSES = [
-    'not-started',
-    'pending',
-    'need-more-information',
-    'terminal-failure',
-    'completed',
-];
-const KycUserStatusResponseStruct = (0, superstruct_1.type)({
-    status: (0, superstruct_1.enums)([...KYC_USER_STATUSES]),
-    sumsubSessionId: (0, superstruct_1.optional)((0, superstruct_1.string)()),
-    errorCode: (0, superstruct_1.optional)((0, superstruct_1.string)()),
-});
 // === SERVICE DEFINITION ===
 /**
  * `KycService` communicates with the Universal KYC (UKYC) backend to drive the
  * identity + document-verification flow. It is stateless and platform-agnostic:
- * HTTP is performed through the runtime's native `fetch` (or an injected
- * `fetch` when provided), and the auth bearer token and geolocation come from
- * other controllers via the messenger.
+ * HTTP is performed through the global `fetch`, and the auth bearer token and
+ * geolocation come from other controllers via the messenger.
  *
  * It extends {@link BaseDataService}, so every request is routed through
  * `fetchQuery`: it is wrapped in the shared service policy (retries, circuit
  * breaker) and its result is exposed via the service's `QueryClient`. Read-only
  * endpoints (`fetchDisclaimers`, `fetchJwks`) are cached with a `staleTime`;
  * the session-creating and status-polling endpoints opt out of caching
- * (`staleTime`/`cacheTime` of `0`) so they never serve a stale result.
+ * (`staleTime`/`gcTime` of `0`) so they never serve a stale result.
  */
 class KycService extends base_data_service_1.BaseDataService {
     /**
@@ -132,8 +109,6 @@ class KycService extends base_data_service_1.BaseDataService {
      *
      * @param options - The constructor options.
      * @param options.messenger - The messenger suited for this service.
-     * @param options.fetch - A function used to make HTTP requests. Defaults to
-     * the runtime's native `fetch`.
      * @param options.baseUrl - Base URL of the KYC API
      * @param options.fractalEncryptionBaseUrl - Base URL of the Fractal
      * encryption service, from which the JWKS used to verify the wrapping-key
@@ -142,7 +117,7 @@ class KycService extends base_data_service_1.BaseDataService {
      * exposed by the service.
      * @param options.policyOptions - Options for the request service policy.
      */
-    constructor({ messenger, fetch: fetchFunction, baseUrl, fractalEncryptionBaseUrl, queryClientConfig = {}, policyOptions = {}, }) {
+    constructor({ messenger, baseUrl, fractalEncryptionBaseUrl, queryClientConfig = {}, policyOptions = {}, }) {
         super({
             name: exports.serviceName,
             messenger,
@@ -150,26 +125,10 @@ class KycService extends base_data_service_1.BaseDataService {
             policyOptions,
         });
         _KycService_instances.add(this);
-        _KycService_fetch.set(this, void 0);
         _KycService_baseUrl.set(this, void 0);
         _KycService_fractalEncryptionBaseUrl.set(this, void 0);
-        // Fall back to the runtime's native `fetch`, bound to `globalThis` so it
-        // can be invoked as a method of this instance without an illegal-invocation
-        // error on platforms that check the receiver.
-        if (fetchFunction) {
-            __classPrivateFieldSet(this, _KycService_fetch, fetchFunction, "f");
-        }
-        else if (typeof globalThis.fetch === 'function') {
-            __classPrivateFieldSet(this, _KycService_fetch, globalThis.fetch.bind(globalThis), "f");
-        }
-        else {
-            throw new Error('KycService: fetch is not available globally and was not provided in options. Please inject a fetch implementation.');
-        }
-        if (!baseUrl) {
-            throw new Error('KycService: baseUrl is required');
-        }
         __classPrivateFieldSet(this, _KycService_baseUrl, baseUrl, "f");
-        __classPrivateFieldSet(this, _KycService_fractalEncryptionBaseUrl, fractalEncryptionBaseUrl ?? '', "f");
+        __classPrivateFieldSet(this, _KycService_fractalEncryptionBaseUrl, fractalEncryptionBaseUrl, "f");
         this.messenger.registerMethodActionHandlers(this, MESSENGER_EXPOSED_METHODS);
     }
     /**
@@ -200,15 +159,14 @@ class KycService extends base_data_service_1.BaseDataService {
      * created.
      *
      * @param params - The parameters.
-     * @param params.vendor - Identity vendor. Defaults to `moonpay`.
      * @param params.country - ISO 3166-1 alpha-3 country code.
      * @returns The disclaimers.
      */
-    async fetchDisclaimers({ vendor = 'moonpay', country, }) {
-        const url = new URL(`/vendors/${vendor}/disclaimers`, __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+    async fetchDisclaimers({ country, }) {
+        const url = new URL('/vendors/moonpay/disclaimers', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
         url.searchParams.set('country', country);
         const data = await this.fetchQuery({
-            queryKey: [`${this.name}:fetchDisclaimers`, vendor, country],
+            queryKey: [`${this.name}:fetchDisclaimers`, country],
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'GET' }),
             staleTime: (0, utils_1.inMilliseconds)(5, utils_1.Duration.Minute),
         });
@@ -235,132 +193,42 @@ class KycService extends base_data_service_1.BaseDataService {
             }),
             // A session-creating mutation must never serve a stale/cached result.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, CreateSessionResponseStruct, 'sessions');
     }
     /**
-     * Checks whether KYC is required for the given vendor, country, and
+     * Checks whether KYC is required for the given access token, country, and
      * capabilities.
      *
      * @param params - The check parameters.
      * @returns Whether KYC is required.
      */
     async checkKycRequired(params) {
-        const vendor = params.vendor ?? 'moonpay';
-        const url = new URL(`/vendors/${vendor}/kyc-required`, __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const url = new URL('/vendors/moonpay/kyc-required', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
         const capabilities = params.capabilities ?? [{ product: 'ramps' }];
-        const body = vendor === 'moonpay'
-            ? {
-                accessToken: params.accessToken,
-                country: params.country,
-                capabilities,
-            }
-            : {};
-        // MoonPay requires accessToken and country; validate before making the request.
-        if (vendor === 'moonpay') {
-            if (!params.accessToken) {
-                throw new Error('checkKycRequired: accessToken is required for vendor "moonpay".');
-            }
-            if (!params.country) {
-                throw new Error('checkKycRequired: country is required for vendor "moonpay".');
-            }
-        }
         const data = await this.fetchQuery({
             queryKey: [
                 `${this.name}:checkKycRequired`,
-                vendor,
-                params.accessToken ?? null,
-                params.country ?? null,
+                params.accessToken,
+                params.country,
                 capabilities,
             ],
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
                 method: 'POST',
-                body: JSON.stringify(body),
+                body: JSON.stringify({
+                    accessToken: params.accessToken,
+                    country: params.country,
+                    capabilities,
+                }),
             }),
             // The requirement can change server-side, so always re-check.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         const { required } = __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycRequiredResponseStruct, 'kyc-required');
         return { kycRequired: required };
     }
-    /**
-     * Creates (or resumes) an empty-shell customer for the authenticated
-     * canonical user on the given identity vendor. Must run before showing
-     * vendor T&C so the customer exists and resume logic can key off vendor
-     * status.
-     *
-     * @param params - The parameters.
-     * @param params.vendor - Identity vendor (e.g. `iron` for Money/VBA).
-     * @param params.email - Email associated with the customer.
-     * @returns The vendor customer record (subset validated for controller use).
-     */
-    async createVendorCustomer(params) {
-        const url = new URL(`/vendors/${params.vendor}/customers`, __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
-        const data = await this.fetchQuery({
-            queryKey: [
-                `${this.name}:createVendorCustomer`,
-                params.vendor,
-                params.email,
-            ],
-            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
-                method: 'POST',
-                body: JSON.stringify({ email: params.email }),
-            }),
-            // Customer creation/resume must never serve a stale/cached result.
-            staleTime: 0,
-            cacheTime: 0,
-        });
-        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, VendorCustomerResponseStruct, 'vendor customers');
-    }
-    /**
-     * Posts T&C1 (vendor signings) and T&C2 (Sumsub + idOS) consents for the
-     * authenticated user. The API responds with 204 No Content on success.
-     *
-     * @param params - The consent parameters.
-     */
-    async submitConsents(params) {
-        const url = new URL('/consents', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
-        await this.fetchQuery({
-            queryKey: [
-                `${this.name}:submitConsents`,
-                params.disclaimerIds,
-                params.sumsubTncSigned,
-                params.idosTncSigned,
-                params.kycLevel ?? 'standard',
-            ],
-            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
-                method: 'POST',
-                // UKYC Money/VBA consents contract still uses `ironDisclaimerIds`.
-                body: JSON.stringify({
-                    ironDisclaimerIds: params.disclaimerIds,
-                    sumsubTncSigned: params.sumsubTncSigned,
-                    idosTncSigned: params.idosTncSigned,
-                    kycLevel: params.kycLevel ?? 'standard',
-                }),
-            }),
-            staleTime: 0,
-            cacheTime: 0,
-        });
-    }
-    /**
-     * Fetches the user-keyed simplified KYC status used by Money toast / banner
-     * surfaces (`GET /kyc/status`).
-     *
-     * @returns The simplified status payload.
-     */
-    async fetchKycStatus() {
-        const url = new URL('/kyc/status', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
-        const data = await this.fetchQuery({
-            queryKey: [`${this.name}:fetchKycStatus`],
-            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'GET' }),
-            // Status is polled for toast flips, so it must always be fresh.
-            staleTime: 0,
-            cacheTime: 0,
-        });
-        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycUserStatusResponseStruct, 'kyc status');
-    }
     /**
      * Requests a per-session wrapping key from the UKYC backend.
      *
@@ -387,7 +255,7 @@ class KycService extends base_data_service_1.BaseDataService {
             }),
             // A per-session key exchange must always run fresh.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, WrappingKeyResponseStruct, 'wrapping-key');
     }
@@ -431,17 +299,17 @@ class KycService extends base_data_service_1.BaseDataService {
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
                 method: 'POST',
                 body: JSON.stringify({
-                    vendorId: params.vendor ?? 'moonpay',
+                    vendorId: 'moonpay',
                     vendorUserId: 'mockedId',
                     jwtToken: params.jwtToken,
-                    vendorMetadata: params.vendorMetadata ?? {},
+                    vendorMetadata: params.vendorMetadata,
                     wrappedEncryptionKey: params.wrappedEncryptionKey,
                     ukycCapabilityToken: (0, storageAccessToken_js_1.encodeStorageAccessTokenForHeader)(params.ukycCapabilityToken),
                 }),
             }),
             // A session-creating mutation must never serve a stale/cached result.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, UkycSessionResponseStruct, 'UKYC sessions');
     }
@@ -459,7 +327,7 @@ class KycService extends base_data_service_1.BaseDataService {
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'POST' }),
             // Journeys are (re)created on demand; do not reuse a cached token.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, ApplicantAccessTokenResponseStruct, 'journey');
     }
@@ -478,13 +346,13 @@ class KycService extends base_data_service_1.BaseDataService {
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'GET' }),
             // Status is polled for a terminal decision, so it must always be fresh.
             staleTime: 0,
-            cacheTime: 0,
+            gcTime: 0,
         });
         return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, SessionStatusResponseStruct, 'session status');
     }
 }
 exports.KycService = KycService;
-_KycService_fetch = new WeakMap(), _KycService_baseUrl = new WeakMap(), _KycService_fractalEncryptionBaseUrl = new WeakMap(), _KycService_instances = new WeakSet(), _KycService_validateResponse = function _KycService_validateResponse(data, struct, apiName) {
+_KycService_baseUrl = new WeakMap(), _KycService_fractalEncryptionBaseUrl = new WeakMap(), _KycService_instances = new WeakSet(), _KycService_validateResponse = function _KycService_validateResponse(data, struct, apiName) {
     try {
         (0, superstruct_1.assert)(data, struct);
         return data;
@@ -525,38 +393,15 @@ async function _KycService_requestJson(url, init, options = {}) {
     }
     if (authenticated) {
         const bearerToken = await this.messenger.call('AuthenticationController:getBearerToken');
-        if (!bearerToken) {
-            throw new Error('Unable to obtain an authentication bearer token — is the wallet signed in?');
-        }
         (0, superstruct_1.assert)(bearerToken, (0, superstruct_1.string)());
         headers.Authorization = `Bearer ${bearerToken}`;
     }
-    const response = await __classPrivateFieldGet(this, _KycService_fetch, "f").call(this, url.toString(), {
+    const response = await fetch(url.toString(), {
         ...init,
         headers,
     });
     if (!response.ok) {
-        let detail = '';
-        try {
-            const errorBody = await response.json();
-            if (errorBody && typeof errorBody === 'object') {
-                const record = errorBody;
-                if (typeof record.message === 'string') {
-                    detail = record.message;
-                }
-                else if (typeof record.error === 'string') {
-                    detail = record.error;
-                }
-            }
-        }
-        catch {
-            // Ignore body parse failures; status alone is still useful.
-        }
-        throw new controller_utils_1.HttpError(response.status, `Fetching '${url.toString()}' failed with status '${response.status}'${detail ? `: ${detail}` : ''}`);
-    }
-    // Consent (and similar) endpoints return 204 No Content.
-    if (response.status === 204) {
-        return null;
+        throw new controller_utils_1.HttpError(response.status, `Fetching '${url.toString()}' failed with status '${response.status}'`);
     }
     return (await response.json());
 };