@metamask-previews/kyc-controller 0.0.0-preview-8bfa290fb → 0.2.0-preview-0a30e47

package/dist/vendors/MoonPayFrameHandler.d.ts

@@ -0,0 +1,74 @@
+import type { KycPhase, KycVendor } from '../types.js';
+type MoonPayFrameState = {
+    activeVendor: KycVendor;
+    moonpayAccessToken: string | null;
+    moonpayCustomerId: string | null;
+    moonpaySessionToken: string | null;
+    phase: KycPhase;
+    statusMessage: string;
+};
+export type MoonPayFrameHandlerOptions = {
+    getState: () => MoonPayFrameState;
+    update: (updater: (state: MoonPayFrameState) => void) => void;
+    fail: (message: string) => void;
+    onAuthenticated: () => Promise<void>;
+    requireTermsReacceptance: () => void;
+};
+/**
+ * Owns MoonPay Check/Auth frame state and protocol handling.
+ */
+export declare class MoonPayFrameHandler {
+    #private;
+    constructor({ getState, update, fail, onAuthenticated, requireTermsReacceptance, }: MoonPayFrameHandlerOptions);
+    /**
+     * Creates a fresh keypair for a new MoonPay flow.
+     */
+    startFlow(): void;
+    /**
+     * Ensures an in-progress MoonPay flow has a frame keypair.
+     */
+    ensureKeypair(): void;
+    /**
+     * Clears all non-persisted MoonPay frame artifacts.
+     */
+    clear(): void;
+    /**
+     * Clears authentication associated with an earlier MoonPay session.
+     */
+    clearAuthentication(): void;
+    /**
+     * Handles a message posted by a MoonPay Check/Auth frame.
+     *
+     * @param message - The raw message posted by the frame.
+     * @returns An object whose optional `reply` should be posted back.
+     */
+    handleMessage(message: unknown): Promise<{
+        reply?: unknown;
+    }>;
+    /**
+     * Builds the Check-frame URL, or `null` when no session exists yet.
+     *
+     * @returns The Check-frame URL or `null`.
+     */
+    buildCheckFrameUrl(): string | null;
+    /**
+     * Builds the Auth-frame URL, or `null` when no client token is available.
+     *
+     * @returns The Auth-frame URL or `null`.
+     */
+    buildAuthFrameUrl(): string | null;
+    /**
+     * Builds the Reset-frame URL.
+     *
+     * @returns The Reset-frame URL.
+     */
+    buildResetFrameUrl(): string;
+}
+/**
+ * Drops persisted-in-memory MoonPay session artifacts from controller state.
+ *
+ * @param state - The state to mutate.
+ */
+export declare function clearMoonPaySession(state: MoonPayFrameState): void;
+export {};
+//# sourceMappingURL=MoonPayFrameHandler.d.ts.map

package/dist/vendors/MoonPayFrameHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MoonPayFrameHandler.d.ts","sourceRoot":"","sources":["../../src/vendors/MoonPayFrameHandler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAOvD,KAAK,iBAAiB,GAAG;IACvB,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAoBF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,iBAAiB,CAAC;IAClC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,wBAAwB,EAAE,MAAM,IAAI,CAAC;CACtC,CAAC;AAEF;;GAEG;AACH,qBAAa,mBAAmB;;IAiB9B,YAAY,EACV,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,eAAe,EACf,wBAAwB,GACzB,EAAE,0BAA0B,EAM5B;IAED;;OAEG;IACH,SAAS,IAAI,IAAI,CAEhB;IAED;;OAEG;IACH,aAAa,IAAI,IAAI,CAEpB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAGZ;IAED;;OAEG;IACH,mBAAmB,IAAI,IAAI,CAE1B;IAED;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CA2ElE;IAED;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAelC;IAED;;;;OAIG;IACH,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAcjC;IAED;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,CAI3B;CAkDF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAIlE"}

package/dist/vendors/MoonPayFrameHandler.js

@@ -0,0 +1,218 @@
+import { decryptCredentials, generateKeyPair } from '../crypto.js';
+const FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';
+const CHANNEL_CHECK = 'ch_1';
+const CHANNEL_AUTH = 'ch_2';
+const CHANNEL_RESET = 'ch_reset';
+/**
+ * Owns MoonPay Check/Auth frame state and protocol handling.
+ */
+export class MoonPayFrameHandler {
+    #getState;
+    #update;
+    #fail;
+    #onAuthenticated;
+    #requireTermsReacceptance;
+    /** MoonPay Check/Auth frame X25519 keypair (never persisted). */
+    #frameKeypair = null;
+    /** Auth-frame client token, kept out of controller state. */
+    #authClientToken = null;
+    constructor({ getState, update, fail, onAuthenticated, requireTermsReacceptance, }) {
+        this.#getState = getState;
+        this.#update = update;
+        this.#fail = fail;
+        this.#onAuthenticated = onAuthenticated;
+        this.#requireTermsReacceptance = requireTermsReacceptance;
+    }
+    /**
+     * Creates a fresh keypair for a new MoonPay flow.
+     */
+    startFlow() {
+        this.#frameKeypair = generateKeyPair();
+    }
+    /**
+     * Ensures an in-progress MoonPay flow has a frame keypair.
+     */
+    ensureKeypair() {
+        this.#frameKeypair ??= generateKeyPair();
+    }
+    /**
+     * Clears all non-persisted MoonPay frame artifacts.
+     */
+    clear() {
+        this.#frameKeypair = null;
+        this.#authClientToken = null;
+    }
+    /**
+     * Clears authentication associated with an earlier MoonPay session.
+     */
+    clearAuthentication() {
+        this.#authClientToken = null;
+    }
+    /**
+     * Handles a message posted by a MoonPay Check/Auth frame.
+     *
+     * @param message - The raw message posted by the frame.
+     * @returns An object whose optional `reply` should be posted back.
+     */
+    async handleMessage(message) {
+        const payload = message;
+        if (!payload) {
+            return {};
+        }
+        if (payload.kind === 'handshake') {
+            const channelId = payload.meta?.channelId;
+            return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };
+        }
+        if (payload.kind !== 'complete') {
+            return {};
+        }
+        const channelId = payload.meta?.channelId;
+        const state = this.#getState();
+        // Only honor a completion for the MoonPay frame the flow is currently
+        // waiting on. This drops stale or duplicate messages after reset, phase
+        // advancement, or a vendor switch so they cannot restore tokens or rewind
+        // the flow. Unlike awaited controller work, external frame messages are
+        // not protected by the controller's generation guard.
+        let expectedPhase = null;
+        if (channelId === CHANNEL_CHECK) {
+            expectedPhase = 'check';
+        }
+        else if (channelId === CHANNEL_AUTH) {
+            expectedPhase = 'auth';
+        }
+        if (!expectedPhase ||
+            state.phase !== expectedPhase ||
+            state.activeVendor !== 'moonpay') {
+            return {};
+        }
+        const status = payload.payload?.status;
+        const credentialsEnvelope = payload.payload?.credentials;
+        const customerId = payload.payload?.customer?.id ?? null;
+        if (customerId) {
+            this.#update((draft) => {
+                draft.moonpayCustomerId = customerId;
+            });
+        }
+        if (!status) {
+            return {};
+        }
+        let accessToken;
+        let clientToken;
+        if (credentialsEnvelope && this.#frameKeypair) {
+            try {
+                const { credentials } = decryptCredentials(credentialsEnvelope, this.#frameKeypair.privateKey);
+                accessToken = credentials.accessToken;
+                clientToken = credentials.clientToken;
+            }
+            catch (error) {
+                this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);
+                return {};
+            }
+        }
+        if (channelId === CHANNEL_CHECK) {
+            await this.#handleCheckOutcome(status, accessToken, clientToken);
+        }
+        else {
+            await this.#handleAuthOutcome(status, accessToken);
+        }
+        return {};
+    }
+    /**
+     * Builds the Check-frame URL, or `null` when no session exists yet.
+     *
+     * @returns The Check-frame URL or `null`.
+     */
+    buildCheckFrameUrl() {
+        const state = this.#getState();
+        if (state.activeVendor !== 'moonpay' ||
+            !state.moonpaySessionToken ||
+            !this.#frameKeypair) {
+            return null;
+        }
+        const url = new URL(`${FRAMES_BASE_URL}/check-connection`);
+        url.searchParams.set('sessionToken', state.moonpaySessionToken);
+        url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);
+        url.searchParams.set('channelId', CHANNEL_CHECK);
+        url.searchParams.set('skipKyc', 'true');
+        return url.toString();
+    }
+    /**
+     * Builds the Auth-frame URL, or `null` when no client token is available.
+     *
+     * @returns The Auth-frame URL or `null`.
+     */
+    buildAuthFrameUrl() {
+        const state = this.#getState();
+        if (state.activeVendor !== 'moonpay' ||
+            !this.#authClientToken ||
+            !this.#frameKeypair) {
+            return null;
+        }
+        const url = new URL(`${FRAMES_BASE_URL}/auth`);
+        url.searchParams.set('clientToken', this.#authClientToken);
+        url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);
+        url.searchParams.set('channelId', CHANNEL_AUTH);
+        return url.toString();
+    }
+    /**
+     * Builds the Reset-frame URL.
+     *
+     * @returns The Reset-frame URL.
+     */
+    buildResetFrameUrl() {
+        const url = new URL(`${FRAMES_BASE_URL}/reset`);
+        url.searchParams.set('channelId', CHANNEL_RESET);
+        return url.toString();
+    }
+    async #handleCheckOutcome(status, accessToken, clientToken) {
+        if (status === 'active' && accessToken) {
+            this.#update((state) => {
+                state.moonpayAccessToken = accessToken;
+                state.phase = 'form';
+                state.statusMessage = 'Already authenticated. Review to submit.';
+            });
+            await this.#onAuthenticated();
+            return;
+        }
+        if (status === 'connectionRequired' && clientToken) {
+            this.#authClientToken = clientToken;
+            this.#update((state) => {
+                state.phase = 'auth';
+                state.statusMessage = 'Verify your email via OTP in the Auth frame.';
+            });
+            return;
+        }
+        if (status === 'termsAcceptanceRequired') {
+            this.#requireTermsReacceptance();
+            return;
+        }
+        this.#fail(`Check frame returned status: ${status}`);
+    }
+    async #handleAuthOutcome(status, accessToken) {
+        if (status === 'active' && accessToken) {
+            this.#update((state) => {
+                state.moonpayAccessToken = accessToken;
+                state.phase = 'form';
+                state.statusMessage = 'Authenticated. Review to submit.';
+            });
+            await this.#onAuthenticated();
+            return;
+        }
+        if (status === 'termsAcceptanceRequired') {
+            this.#requireTermsReacceptance();
+            return;
+        }
+        this.#fail(`Auth frame returned status: ${status}`);
+    }
+}
+/**
+ * Drops persisted-in-memory MoonPay session artifacts from controller state.
+ *
+ * @param state - The state to mutate.
+ */
+export function clearMoonPaySession(state) {
+    state.moonpayCustomerId = null;
+    state.moonpaySessionToken = null;
+    state.moonpayAccessToken = null;
+}
+//# sourceMappingURL=MoonPayFrameHandler.js.map

package/dist/vendors/MoonPayFrameHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MoonPayFrameHandler.js","sourceRoot":"","sources":["../../src/vendors/MoonPayFrameHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAInE,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,UAAU,CAAC;AAqCjC;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACrB,SAAS,CAAyC;IAElD,OAAO,CAAuC;IAE9C,KAAK,CAAqC;IAE1C,gBAAgB,CAAgD;IAEhE,yBAAyB,CAAyD;IAE3F,iEAAiE;IACjE,aAAa,GAAyB,IAAI,CAAC;IAE3C,6DAA6D;IAC7D,gBAAgB,GAAkB,IAAI,CAAC;IAEvC,YAAY,EACV,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,eAAe,EACf,wBAAwB,GACG;QAC3B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,yBAAyB,GAAG,wBAAwB,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,aAAa,GAAG,eAAe,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,OAAO,GAAG,OAAmC,CAAC;QAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE/B,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,aAAa,GAAoB,IAAI,CAAC;QAC1C,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,aAAa,GAAG,OAAO,CAAC;QAC1B,CAAC;aAAM,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YACtC,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;QAED,IACE,CAAC,aAAa;YACd,KAAK,CAAC,KAAK,KAAK,aAAa;YAC7B,KAAK,CAAC,YAAY,KAAK,SAAS,EAChC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACvC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;QAEzD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,iBAAiB,GAAG,UAAU,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,WAA+B,CAAC;QACpC,IAAI,mBAAmB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CACxC,mBAAmB,EACnB,IAAI,CAAC,aAAa,CAAC,UAAU,CAC9B,CAAC;gBACF,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;gBACtC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IACE,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,KAAK,CAAC,mBAAmB;YAC1B,CAAC,IAAI,CAAC,aAAa,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,mBAAmB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IACE,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,IAAI,CAAC,gBAAgB;YACtB,CAAC,IAAI,CAAC,aAAa,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,QAAQ,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,MAAmB,EACnB,WAAoB,EACpB,WAAoB;QAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC;gBACvC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,0CAA0C,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,oBAAoB,IAAI,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,8CAA8C,CAAC;YACvE,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACzC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,MAAmB,EACnB,WAAoB;QAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC;gBACvC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,kCAAkC,CAAC;YAC3D,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACzC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;AAClC,CAAC","sourcesContent":["import { decryptCredentials, generateKeyPair } from '../crypto.js';\nimport type { EncryptedCredentialsEnvelope, X25519KeyPair } from '../crypto.js';\nimport type { KycPhase, KycVendor } from '../types.js';\n\nconst FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';\nconst CHANNEL_CHECK = 'ch_1';\nconst CHANNEL_AUTH = 'ch_2';\nconst CHANNEL_RESET = 'ch_reset';\n\ntype MoonPayFrameState = {\n  activeVendor: KycVendor;\n  moonpayAccessToken: string | null;\n  moonpayCustomerId: string | null;\n  moonpaySessionToken: string | null;\n  phase: KycPhase;\n  statusMessage: string;\n};\n\ntype FrameMessage = {\n  meta?: { channelId?: string };\n  kind?: string;\n  payload?: {\n    status?:\n      | 'active'\n      | 'connectionRequired'\n      | 'termsAcceptanceRequired'\n      | 'pending'\n      | 'unavailable'\n      | 'failed';\n    credentials?: EncryptedCredentialsEnvelope | string;\n    customer?: { id?: string };\n  };\n};\n\ntype FrameStatus = NonNullable<FrameMessage['payload']>['status'];\n\nexport type MoonPayFrameHandlerOptions = {\n  getState: () => MoonPayFrameState;\n  update: (updater: (state: MoonPayFrameState) => void) => void;\n  fail: (message: string) => void;\n  onAuthenticated: () => Promise<void>;\n  requireTermsReacceptance: () => void;\n};\n\n/**\n * Owns MoonPay Check/Auth frame state and protocol handling.\n */\nexport class MoonPayFrameHandler {\n  readonly #getState: MoonPayFrameHandlerOptions['getState'];\n\n  readonly #update: MoonPayFrameHandlerOptions['update'];\n\n  readonly #fail: MoonPayFrameHandlerOptions['fail'];\n\n  readonly #onAuthenticated: MoonPayFrameHandlerOptions['onAuthenticated'];\n\n  readonly #requireTermsReacceptance: MoonPayFrameHandlerOptions['requireTermsReacceptance'];\n\n  /** MoonPay Check/Auth frame X25519 keypair (never persisted). */\n  #frameKeypair: X25519KeyPair | null = null;\n\n  /** Auth-frame client token, kept out of controller state. */\n  #authClientToken: string | null = null;\n\n  constructor({\n    getState,\n    update,\n    fail,\n    onAuthenticated,\n    requireTermsReacceptance,\n  }: MoonPayFrameHandlerOptions) {\n    this.#getState = getState;\n    this.#update = update;\n    this.#fail = fail;\n    this.#onAuthenticated = onAuthenticated;\n    this.#requireTermsReacceptance = requireTermsReacceptance;\n  }\n\n  /**\n   * Creates a fresh keypair for a new MoonPay flow.\n   */\n  startFlow(): void {\n    this.#frameKeypair = generateKeyPair();\n  }\n\n  /**\n   * Ensures an in-progress MoonPay flow has a frame keypair.\n   */\n  ensureKeypair(): void {\n    this.#frameKeypair ??= generateKeyPair();\n  }\n\n  /**\n   * Clears all non-persisted MoonPay frame artifacts.\n   */\n  clear(): void {\n    this.#frameKeypair = null;\n    this.#authClientToken = null;\n  }\n\n  /**\n   * Clears authentication associated with an earlier MoonPay session.\n   */\n  clearAuthentication(): void {\n    this.#authClientToken = null;\n  }\n\n  /**\n   * Handles a message posted by a MoonPay Check/Auth frame.\n   *\n   * @param message - The raw message posted by the frame.\n   * @returns An object whose optional `reply` should be posted back.\n   */\n  async handleMessage(message: unknown): Promise<{ reply?: unknown }> {\n    const payload = message as FrameMessage | undefined;\n\n    if (!payload) {\n      return {};\n    }\n\n    if (payload.kind === 'handshake') {\n      const channelId = payload.meta?.channelId;\n      return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };\n    }\n\n    if (payload.kind !== 'complete') {\n      return {};\n    }\n\n    const channelId = payload.meta?.channelId;\n    const state = this.#getState();\n\n    // Only honor a completion for the MoonPay frame the flow is currently\n    // waiting on. This drops stale or duplicate messages after reset, phase\n    // advancement, or a vendor switch so they cannot restore tokens or rewind\n    // the flow. Unlike awaited controller work, external frame messages are\n    // not protected by the controller's generation guard.\n    let expectedPhase: KycPhase | null = null;\n    if (channelId === CHANNEL_CHECK) {\n      expectedPhase = 'check';\n    } else if (channelId === CHANNEL_AUTH) {\n      expectedPhase = 'auth';\n    }\n\n    if (\n      !expectedPhase ||\n      state.phase !== expectedPhase ||\n      state.activeVendor !== 'moonpay'\n    ) {\n      return {};\n    }\n\n    const status = payload.payload?.status;\n    const credentialsEnvelope = payload.payload?.credentials;\n    const customerId = payload.payload?.customer?.id ?? null;\n\n    if (customerId) {\n      this.#update((draft) => {\n        draft.moonpayCustomerId = customerId;\n      });\n    }\n\n    if (!status) {\n      return {};\n    }\n\n    let accessToken: string | undefined;\n    let clientToken: string | undefined;\n    if (credentialsEnvelope && this.#frameKeypair) {\n      try {\n        const { credentials } = decryptCredentials(\n          credentialsEnvelope,\n          this.#frameKeypair.privateKey,\n        );\n        accessToken = credentials.accessToken;\n        clientToken = credentials.clientToken;\n      } catch (error) {\n        this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);\n        return {};\n      }\n    }\n\n    if (channelId === CHANNEL_CHECK) {\n      await this.#handleCheckOutcome(status, accessToken, clientToken);\n    } else {\n      await this.#handleAuthOutcome(status, accessToken);\n    }\n    return {};\n  }\n\n  /**\n   * Builds the Check-frame URL, or `null` when no session exists yet.\n   *\n   * @returns The Check-frame URL or `null`.\n   */\n  buildCheckFrameUrl(): string | null {\n    const state = this.#getState();\n    if (\n      state.activeVendor !== 'moonpay' ||\n      !state.moonpaySessionToken ||\n      !this.#frameKeypair\n    ) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/check-connection`);\n    url.searchParams.set('sessionToken', state.moonpaySessionToken);\n    url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_CHECK);\n    url.searchParams.set('skipKyc', 'true');\n    return url.toString();\n  }\n\n  /**\n   * Builds the Auth-frame URL, or `null` when no client token is available.\n   *\n   * @returns The Auth-frame URL or `null`.\n   */\n  buildAuthFrameUrl(): string | null {\n    const state = this.#getState();\n    if (\n      state.activeVendor !== 'moonpay' ||\n      !this.#authClientToken ||\n      !this.#frameKeypair\n    ) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/auth`);\n    url.searchParams.set('clientToken', this.#authClientToken);\n    url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_AUTH);\n    return url.toString();\n  }\n\n  /**\n   * Builds the Reset-frame URL.\n   *\n   * @returns The Reset-frame URL.\n   */\n  buildResetFrameUrl(): string {\n    const url = new URL(`${FRAMES_BASE_URL}/reset`);\n    url.searchParams.set('channelId', CHANNEL_RESET);\n    return url.toString();\n  }\n\n  async #handleCheckOutcome(\n    status: FrameStatus,\n    accessToken?: string,\n    clientToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#update((state) => {\n        state.moonpayAccessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Already authenticated. Review to submit.';\n      });\n      await this.#onAuthenticated();\n      return;\n    }\n    if (status === 'connectionRequired' && clientToken) {\n      this.#authClientToken = clientToken;\n      this.#update((state) => {\n        state.phase = 'auth';\n        state.statusMessage = 'Verify your email via OTP in the Auth frame.';\n      });\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Check frame returned status: ${status}`);\n  }\n\n  async #handleAuthOutcome(\n    status: FrameStatus,\n    accessToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#update((state) => {\n        state.moonpayAccessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Authenticated. Review to submit.';\n      });\n      await this.#onAuthenticated();\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Auth frame returned status: ${status}`);\n  }\n}\n\n/**\n * Drops persisted-in-memory MoonPay session artifacts from controller state.\n *\n * @param state - The state to mutate.\n */\nexport function clearMoonPaySession(state: MoonPayFrameState): void {\n  state.moonpayCustomerId = null;\n  state.moonpaySessionToken = null;\n  state.moonpayAccessToken = null;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/kyc-controller",
-  "version": "0.0.0-preview-8bfa290fb",
+  "version": "0.2.0-preview-0a30e47",
   "description": "Shared KYC / identity verification controller used across MetaMask clients",
   "keywords": [
     "Ethereum",
@@ -18,19 +18,12 @@
   "files": [
     "dist/"
   ],
+  "type": "module",
   "sideEffects": false,
-  "main": "./dist/index.cjs",
-  "types": "./dist/index.d.cts",
   "exports": {
     ".": {
-      "import": {
-        "types": "./dist/index.d.mts",
-        "default": "./dist/index.mjs"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      }
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
     },
     "./package.json": "./package.json"
   },
@@ -39,10 +32,12 @@
     "registry": "https://registry.npmjs.org/"
   },
   "scripts": {
-    "build": "ts-bridge --project tsconfig.build.json --verbose --clean --no-references",
-    "build:all": "ts-bridge --project tsconfig.build.json --verbose --clean",
+    "build": "tsc --project tsconfig.build.json",
+    "build:all": "tsc --build tsconfig.build.json --verbose",
+    "build:clean": "yarn build:only-clean && yarn build",
     "build:docs": "typedoc",
-    "build:watch": "yarn build && chokidar 'src/**/*.ts' -c 'ts-bridge --project tsconfig.build.json --verbose --no-references' --initial",
+    "build:only-clean": "rimraf './dist' './tsconfig.build.tsbuildinfo'",
+    "build:watch": "yarn build && chokidar 'src/**/*.ts' -c 'tsc --project tsconfig.build.json' --initial",
     "changelog:update": "../../scripts/update-changelog.sh @metamask/kyc-controller",
     "changelog:validate": "../../scripts/validate-changelog.sh @metamask/kyc-controller",
     "lint:tsconfigs": "tsx ../../scripts/lint-tsconfigs/lint-tsconfigs.mts",
@@ -57,12 +52,12 @@
     "test:watch": "NODE_OPTIONS=--experimental-vm-modules jest --watch"
   },
   "dependencies": {
-    "@metamask/base-controller": "^9.1.0",
-    "@metamask/base-data-service": "^1.0.0",
-    "@metamask/controller-utils": "^12.3.0",
-    "@metamask/geolocation-controller": "^1.0.0",
-    "@metamask/messenger": "^2.0.0",
-    "@metamask/profile-sync-controller": "^29.0.0",
+    "@metamask/base-controller": "^10.0.0",
+    "@metamask/base-data-service": "^2.0.0",
+    "@metamask/controller-utils": "^13.0.0",
+    "@metamask/geolocation-controller": "^2.0.0",
+    "@metamask/messenger": "^3.0.0",
+    "@metamask/profile-sync-controller": "^31.0.0",
     "@metamask/superstruct": "^3.4.1",
     "@metamask/utils": "^11.12.0",
     "@noble/ciphers": "^1.3.0",
@@ -75,19 +70,20 @@
   },
   "devDependencies": {
     "@metamask/auto-changelog": "^6.1.0",
-    "@ts-bridge/cli": "^0.6.4",
     "@types/jest": "^30.0.0",
+    "@typescript/native": "npm:typescript@^7.0.2",
     "chokidar-cli": "^3.0.0",
     "deepmerge": "^4.2.2",
     "jest": "^30.4.2",
     "nock": "^13.3.1",
+    "rimraf": "^5.0.5",
     "ts-jest": "^29.4.11",
     "tsx": "^4.20.5",
     "typedoc": "^0.25.13",
     "typedoc-plugin-missing-exports": "^2.0.0",
-    "typescript": "~5.3.3"
+    "typescript": "npm:@typescript/typescript6@^6.0.2"
   },
   "engines": {
-    "node": "^18.18 || >=20"
+    "node": "^22.14.0 || ^24"
   }
 }

package/dist/KycController-method-action-types.cjs

@@ -1,7 +0,0 @@
-"use strict";
-/**
- * This file is auto generated.
- * Do not edit manually.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=KycController-method-action-types.cjs.map

package/dist/KycController-method-action-types.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"KycController-method-action-types.cjs","sourceRoot":"","sources":["../src/KycController-method-action-types.ts"],"names":[],"mappings":";AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { KycController } from './KycController.js';\n\n/**\n * Resolves persisted terms + geolocation, and auto-creates a session when\n * terms are already accepted and an email is available.\n *\n * @param params - Optional parameters.\n * @param params.email - The account email to associate with the session.\n * @param params.product - The consuming feature the flow runs for. When\n * provided, the controller automatically runs the KYC-required check once\n * authentication completes (and chains into document verification when KYC\n * is required). When omitted, the flow stops at `form` and the consumer must\n * call `checkKycRequired` manually.\n * @param params.vendor - Identity vendor for this flow. Non-MoonPay vendors\n * skip Check/Auth frames and use the consents path. Defaults to `moonpay`.\n */\nexport type KycControllerInitializeAction = {\n  type: `KycController:initialize`;\n  handler: KycController['initialize'];\n};\n\n/**\n * Creates (or resumes) an empty-shell customer for the given identity\n * vendor. Exposed so a consumer can ensure the customer exists before\n * showing T&C screens independently of {@link initialize}.\n *\n * A call while a session flow is already in progress is a no-op — matching\n * {@link initialize} — so a vendor switch cannot leave Check/Auth frames\n * attached to the wrong vendor. Call {@link reset} first to start over.\n *\n * @param params - The parameters.\n * @param params.vendor - Identity vendor for the customer.\n * @param params.email - Email for the vendor customer.\n */\nexport type KycControllerCreateVendorCustomerAction = {\n  type: `KycController:createVendorCustomer`;\n  handler: KycController['createVendorCustomer'];\n};\n\n/**\n * Loads the disclaimers for the resolved (or provided) country.\n *\n * @param params - Optional parameters.\n * @param params.country - ISO 3166-1 alpha-3 country code override.\n */\nexport type KycControllerLoadDisclaimersAction = {\n  type: `KycController:loadDisclaimers`;\n  handler: KycController['loadDisclaimers'];\n};\n\n/**\n * Captures terms acceptance for the currently loaded disclaimers and creates\n * a session.\n *\n * @param params - The parameters.\n * @param params.email - The account email to associate with the session.\n * @param params.product - The consuming feature the flow runs for. See\n * {@link initialize} for how the product drives the automatic post\n * authentication continuation.\n * @param params.sumsubTncSigned - Whether Sumsub T&C were accepted (T&C2).\n * Required for every vendor so callers explicitly declare acceptance.\n * @param params.idosTncSigned - Whether idOS T&C were accepted (T&C2).\n * Required for every vendor so callers explicitly declare acceptance.\n * @param params.credentialReusabilityConsentGiven - Whether the customer\n * consented to reuse existing idOS credentials. Used when recording\n * session-scoped disclaimers on the consents path. Defaults to `false`.\n */\nexport type KycControllerAcceptTermsAndStartSessionAction = {\n  type: `KycController:acceptTermsAndStartSession`;\n  handler: KycController['acceptTermsAndStartSession'];\n};\n\n/**\n * Clears the persisted terms acceptance.\n */\nexport type KycControllerClearSavedTermsAction = {\n  type: `KycController:clearSavedTerms`;\n  handler: KycController['clearSavedTerms'];\n};\n\n/**\n * Handles a message posted by a Check/Auth frame and advances the flow.\n *\n * The transport-agnostic caller (WebView on mobile, iframe on web) forwards\n * the raw message and injects the returned `reply` back into the frame.\n *\n * @param params - The parameters.\n * @param params.message - The raw message posted by the frame.\n * @returns An object whose optional `reply` should be posted back.\n */\nexport type KycControllerHandleFrameMessageAction = {\n  type: `KycController:handleFrameMessage`;\n  handler: KycController['handleFrameMessage'];\n};\n\n/**\n * Builds the Check-frame URL, or `null` when no session exists yet.\n *\n * @returns The Check-frame URL or `null`.\n */\nexport type KycControllerBuildCheckFrameUrlAction = {\n  type: `KycController:buildCheckFrameUrl`;\n  handler: KycController['buildCheckFrameUrl'];\n};\n\n/**\n * Builds the Auth-frame URL, or `null` when no client token is available.\n *\n * @returns The Auth-frame URL or `null`.\n */\nexport type KycControllerBuildAuthFrameUrlAction = {\n  type: `KycController:buildAuthFrameUrl`;\n  handler: KycController['buildAuthFrameUrl'];\n};\n\n/**\n * Builds the Reset-frame URL.\n *\n * @returns The Reset-frame URL.\n */\nexport type KycControllerBuildResetFrameUrlAction = {\n  type: `KycController:buildResetFrameUrl`;\n  handler: KycController['buildResetFrameUrl'];\n};\n\n/**\n * Checks whether KYC is required for a product and caches the result.\n *\n * @param params - The parameters.\n * @param params.product - The consuming feature.\n * @param params.country - Optional alpha-3 country override.\n * @returns Whether KYC is required.\n */\nexport type KycControllerCheckKycRequiredAction = {\n  type: `KycController:checkKycRequired`;\n  handler: KycController['checkKycRequired'];\n};\n\n/**\n * Reads the cached \"is KYC required\" result for a product.\n *\n * @param params - The parameters.\n * @param params.product - The consuming feature.\n * @returns The cached value, or `undefined` if not yet checked.\n */\nexport type KycControllerGetKycStatusAction = {\n  type: `KycController:getKycStatus`;\n  handler: KycController['getKycStatus'];\n};\n\n/**\n * Returns the vendor-scoped identity for the currently authenticated\n * customer, or `null` when the flow has not yet captured a vendor customer\n * id (before authentication or after {@link reset}), or when a MoonPay id\n * is present under a different `activeVendor`.\n *\n * Exposed so consumers (e.g. ramps autoramp creation) can attach the vendor\n * customer id to downstream calls without reading the full KYC state, which\n * also holds session/access tokens. The id is session-scoped and never\n * persisted.\n *\n * @returns The current {@link KycCustomerIdentity}, or `null`.\n */\nexport type KycControllerGetCustomerIdentityAction = {\n  type: `KycController:getCustomerIdentity`;\n  handler: KycController['getCustomerIdentity'];\n};\n\n/**\n * Runs the SumSub document-verification sub-flow end to end:\n *\n * 1. creates a UKYC session, receiving per-secret encryption schemas;\n * 2. verifies the `encryptionDataKey` schema's `jwtChain` against the\n * idOS enclave JWKS and the `ukycCapabilityToken` schema's `jwtChain` against\n * the idOS relay JWKS, then confirms each attested session server public\n * key;\n * 3. derives the `data_encryption_key` from the wallet's UKYC\n * `local_user_secret` and wraps it for the session server;\n * 4. mints a client-signed, read-only `ukyc_capability_token`, wraps it the\n * same way as the encryption key, and submits both via authorizations;\n * 5. fetches the SumSub applicant access token; and\n * 6. presents the SDK via the injected launcher.\n *\n * If a UKYC session already exists (the consents path creates it before\n * recording session disclaimers), steps 1–4 are skipped.\n *\n * If authorizations report the applicant is already approved on the relay\n * while the vendor is still finalizing (`kycStatus: approved`,\n * `finalStatus: pending`), the sub-flow stops at step 4 with a\n * `vendorProcessing` status and a message rather than launching the SDK.\n *\n * @param params - Optional parameters.\n * @param params.locale - BCP-47 locale for the SDK UI.\n * @param params.debug - Enables SDK debug logging.\n * @returns The SDK result.\n */\nexport type KycControllerStartSumSubAction = {\n  type: `KycController:startSumSub`;\n  handler: KycController['startSumSub'];\n};\n\n/**\n * Refreshes the user-keyed simplified KYC status from `GET /kyc/status`,\n * stores it on state, publishes {@link KycControllerStatusChangedEvent}, and\n * schedules short-interval polling while the status is `pending`.\n *\n * @returns The latest status payload.\n */\nexport type KycControllerRefreshKycStatusAction = {\n  type: `KycController:refreshKycStatus`;\n  handler: KycController['refreshKycStatus'];\n};\n\n/**\n * Fetches the current UKYC session status for the active sub-flow and records\n * it on state. Useful for a one-off refresh outside the automatic polling\n * loop that {@link startSumSub} runs.\n *\n * @returns The fetched session status.\n * @throws If there is no active SumSub session to query.\n */\nexport type KycControllerGetSessionStatusAction = {\n  type: `KycController:getSessionStatus`;\n  handler: KycController['getSessionStatus'];\n};\n\n/**\n * Resets the flow to idle, clearing session tokens and sub-flow state while\n * preserving persisted terms acceptance and the per-product cache.\n */\nexport type KycControllerResetAction = {\n  type: `KycController:reset`;\n  handler: KycController['reset'];\n};\n\n/**\n * Restores the controller to its default state, discarding everything\n * {@link reset} deliberately keeps: the session email, the persisted terms\n * acceptance, the per-product KYC-required cache and the user-keyed status.\n *\n * Intended for a full wallet reset, where no trace of the previous\n * customer may survive into the next wallet.\n */\nexport type KycControllerClearStateAction = {\n  type: `KycController:clearState`;\n  handler: KycController['clearState'];\n};\n\n/**\n * Union of all KycController action types.\n */\nexport type KycControllerMethodActions =\n  | KycControllerInitializeAction\n  | KycControllerCreateVendorCustomerAction\n  | KycControllerLoadDisclaimersAction\n  | KycControllerAcceptTermsAndStartSessionAction\n  | KycControllerClearSavedTermsAction\n  | KycControllerHandleFrameMessageAction\n  | KycControllerBuildCheckFrameUrlAction\n  | KycControllerBuildAuthFrameUrlAction\n  | KycControllerBuildResetFrameUrlAction\n  | KycControllerCheckKycRequiredAction\n  | KycControllerGetKycStatusAction\n  | KycControllerGetCustomerIdentityAction\n  | KycControllerStartSumSubAction\n  | KycControllerRefreshKycStatusAction\n  | KycControllerGetSessionStatusAction\n  | KycControllerResetAction\n  | KycControllerClearStateAction;\n"]}