@metamask-previews/kyc-controller 0.0.0-preview-e57e5c3dc → 0.0.0-preview-c34a16a37

package/dist/KycService.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"KycService.d.cts","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACpC,kCAAkC,EACnC,oCAAoC;AACrC,OAAO,KAAK,EAAE,0BAA0B,EAAE,mCAAmC;AAE7E,OAAO,KAAK,EAAE,yCAAyC,EAAE,yCAAyC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,4CAA4C,EAAE,+CAA+C;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B;AAY3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,6BAA6B;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAA4C;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAmB;AAGlE,OAAO,KAAK,EAAE,sBAAsB,EAAE,sCAAqC;AAI3E;;GAEG;AACH,eAAO,MAAM,WAAW,eAAe,CAAC;AAgBxC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,kCAAkC,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,iCAAiC,CAAC;AAEtC;;GAEG;AACH,KAAK,cAAc,GACf,4CAA4C,GAC5C,yCAAyC,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,2BAA2B,GACrC,4BAA4B,CAAC,OAAO,WAAW,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAC7C,oCAAoC,CAAC,OAAO,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,mCAAmC,CAAC;AAExC;;GAEG;AACH,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,CACzC,OAAO,WAAW,EAClB,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,aAAa,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAWF,QAAA,MAAM,2BAA2B;;;;EAAmC,CAAC;AAcrE,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAU1E,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAAmC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,QAAA,MAAM,yBAAyB;;;;;;;;EAO7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE1E,QAAA,MAAM,kCAAkC;;;;;;EAGtC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAC9C,OAAO,kCAAkC,CAC1C,CAAC;AAaF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;GAYG;AACH,qBAAa,UAAW,SAAQ,eAAe,CAC7C,OAAO,WAAW,EAClB,mBAAmB,CACpB;;IAOC;;;;;;;;;;;;;OAaG;gBACS,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAsB,EACtB,aAAkB,GACnB,EAAE,iBAAiB;IAmBpB;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA0BtC;;;;;;;OAOG;IACG,gBAAgB,CAAC,EACrB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAyBrD;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IA+BpC;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC;IAsB/B;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAgBxC;;;;;;;;OAQG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAgC/B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC;IAmBxC;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC;CAgH7B"}
+{"version":3,"file":"KycService.d.cts","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACpC,kCAAkC,EACnC,oCAAoC;AACrC,OAAO,KAAK,EAAE,0BAA0B,EAAE,mCAAmC;AAE7E,OAAO,KAAK,EAAE,yCAAyC,EAAE,yCAAyC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,4CAA4C,EAAE,+CAA+C;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B;AAa3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,6BAA6B;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAA4C;AACnF,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,EACV,oBAAmB;AAGpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,sCAAqC;AAI3E;;GAEG;AACH,eAAO,MAAM,WAAW,eAAe,CAAC;AAqBxC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,kCAAkC,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,iCAAiC,CAAC;AAEtC;;GAEG;AACH,KAAK,cAAc,GACf,4CAA4C,GAC5C,yCAAyC,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,CACpE,OAAO,WAAW,CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAC7C,oCAAoC,CAAC,OAAO,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,mCAAmC,CAAC;AAExC;;GAEG;AACH,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,CACzC,OAAO,WAAW,EAClB,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,aAAa,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAWF,QAAA,MAAM,2BAA2B;;;;EAAmC,CAAC;AAcrE,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAU1E,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAAmC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,QAAA,MAAM,yBAAyB;;;;;;;;EAO7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE1E,QAAA,MAAM,kCAAkC;;;;;;EAGtC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAC9C,OAAO,kCAAkC,CAC1C,CAAC;AAaF,QAAA,MAAM,0BAA0B;;;;;;;;EAI9B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAkB5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;GAYG;AACH,qBAAa,UAAW,SAAQ,eAAe,CAC7C,OAAO,WAAW,EAClB,mBAAmB,CACpB;;IAOC;;;;;;;;;;;;;OAaG;gBACS,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAsB,EACtB,aAAkB,GACnB,EAAE,iBAAiB;IAmBpB;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA0BtC;;;;;;;OAOG;IACG,gBAAgB,CAAC,EACrB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAyBrD;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IA+BpC;;;;;;;;OAQG;IACG,kBAAkB,CACtB,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,oBAAoB,CAAC;IAoBhC;;;;;;;OAOG;IACG,oBAAoB,CAAC,EACzB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,oBAAoB,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAkB/D;;;;;OAKG;IACG,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBjE;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgBtD;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC;IAsB/B;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAgBxC;;;;;;;;OAQG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAgC/B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC;IAmBxC;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC;CA8I7B"}

package/dist/KycService.d.mts

@@ -7,7 +7,7 @@ import type { AuthenticationControllerGetBearerTokenAction } from "@metamask/pro
 import type { Infer, Struct } from "@metamask/superstruct";
 import type { QueryClientConfig } from "@tanstack/query-core";
 import type { KycServiceMethodActions } from "./KycService-method-action-types.mjs";
-import type { KycDisclaimer, KycSessionStatus } from "./types.mjs";
+import type { KycDisclaimer, KycSessionStatus, KycUserStatusResponse, KycVendor } from "./types.mjs";
 import type { UkycStorageAccessToken } from "./ukyc/storageAccessToken.mjs";
 /**
  * The name of the {@link KycService}, used to namespace the service's actions.
@@ -142,6 +142,16 @@ declare const ApplicantAccessTokenResponseStruct: Struct<{
     applicantAccessToken: Struct<string, null>;
 }>;
 export type ApplicantAccessTokenResponse = Infer<typeof ApplicantAccessTokenResponseStruct>;
+declare const IronCustomerResponseStruct: Struct<{
+    id: string;
+    status: string;
+    email: string;
+}, {
+    id: Struct<string, null>;
+    email: Struct<string, null>;
+    status: Struct<string, null>;
+}>;
+export type IronCustomerResponse = Infer<typeof IronCustomerResponseStruct>;
 export type CreateSessionParams = {
     email: string;
     termsAcceptedAt: string;
@@ -154,6 +164,15 @@ export type CheckKycRequiredParams = {
         product: string;
     }[];
 };
+export type CreateIronCustomerParams = {
+    email: string;
+};
+export type SubmitConsentsParams = {
+    ironDisclaimerIds: string[];
+    sumsubTncSigned: boolean;
+    idosTncSigned: boolean;
+    kycLevel?: 'standard';
+};
 export type GetWrappingKeyParams = {
     sessionClientPublicKey: string;
 };
@@ -169,7 +188,17 @@ export type WrappedEncryptionKey = {
 };
 export type CreateUkycSessionParams = {
     jwtToken: string;
-    vendorMetadata: Record<string, unknown>;
+    /**
+     * Identity vendor for the UKYC session. Defaults to `moonpay` for the
+     * existing Check/Auth flow. Pass `iron` for the Money/VBA path (no MoonPay
+     * metadata required).
+     */
+    vendorId?: KycVendor;
+    /**
+     * Vendor-specific metadata. Required for MoonPay (`moonPayAccessToken` /
+     * `moonPayUserId`); optional / omitted for Iron.
+     */
+    vendorMetadata?: Record<string, unknown>;
     wrappedEncryptionKey: WrappedEncryptionKey;
     /**
      * The client-signed `ukyc_capability_token` (envelope: payload + Ed25519
@@ -250,6 +279,50 @@ export declare class KycService extends BaseDataService<typeof serviceName, KycS
     checkKycRequired(params: CheckKycRequiredParams): Promise<{
         kycRequired: boolean;
     }>;
+    /**
+     * Creates (or resumes) an Iron empty-shell customer for the authenticated
+     * canonical user. Must run before showing Iron T&C so the customer exists in
+     * `SigningsRequired` and resume logic can key off Iron status.
+     *
+     * @param params - The parameters.
+     * @param params.email - Email associated with the Iron customer.
+     * @returns The Iron customer record (subset validated for controller use).
+     */
+    createIronCustomer(params: CreateIronCustomerParams): Promise<IronCustomerResponse>;
+    /**
+     * Fetches Iron disclaimers / terms the customer must accept before consents
+     * and the SumSub sub-flow.
+     *
+     * @param params - The parameters.
+     * @param params.country - ISO 3166-1 alpha-3 country code.
+     * @returns The disclaimers.
+     */
+    fetchIronDisclaimers({ country, }: {
+        country: string;
+    }): Promise<KycDisclaimer[]>;
+    /**
+     * Checks whether Iron still requires KYC for the authenticated canonical
+     * user. Unlike the MoonPay variant, this does not take an access token.
+     *
+     * @returns Whether KYC is required.
+     */
+    checkIronKycRequired(): Promise<{
+        kycRequired: boolean;
+    }>;
+    /**
+     * Posts T&C1 (Iron signings) and T&C2 (Sumsub + idOS) consents for the
+     * authenticated user. The API responds with 204 No Content on success.
+     *
+     * @param params - The consent parameters.
+     */
+    submitConsents(params: SubmitConsentsParams): Promise<void>;
+    /**
+     * Fetches the user-keyed simplified KYC status used by Money toast / banner
+     * surfaces (`GET /kyc/status`).
+     *
+     * @returns The simplified status payload.
+     */
+    fetchKycStatus(): Promise<KycUserStatusResponse>;
     /**
      * Requests a per-session wrapping key from the UKYC backend.
      *

package/dist/KycService.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"KycService.d.mts","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACpC,kCAAkC,EACnC,oCAAoC;AACrC,OAAO,KAAK,EAAE,0BAA0B,EAAE,mCAAmC;AAE7E,OAAO,KAAK,EAAE,yCAAyC,EAAE,yCAAyC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,4CAA4C,EAAE,+CAA+C;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B;AAY3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,6BAA6B;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAA4C;AACnF,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAmB;AAGlE,OAAO,KAAK,EAAE,sBAAsB,EAAE,sCAAqC;AAI3E;;GAEG;AACH,eAAO,MAAM,WAAW,eAAe,CAAC;AAgBxC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,kCAAkC,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,iCAAiC,CAAC;AAEtC;;GAEG;AACH,KAAK,cAAc,GACf,4CAA4C,GAC5C,yCAAyC,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,2BAA2B,GACrC,4BAA4B,CAAC,OAAO,WAAW,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAC7C,oCAAoC,CAAC,OAAO,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,mCAAmC,CAAC;AAExC;;GAEG;AACH,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,CACzC,OAAO,WAAW,EAClB,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,aAAa,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAWF,QAAA,MAAM,2BAA2B;;;;EAAmC,CAAC;AAcrE,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAU1E,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAAmC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,QAAA,MAAM,yBAAyB;;;;;;;;EAO7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE1E,QAAA,MAAM,kCAAkC;;;;;;EAGtC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAC9C,OAAO,kCAAkC,CAC1C,CAAC;AAaF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;GAYG;AACH,qBAAa,UAAW,SAAQ,eAAe,CAC7C,OAAO,WAAW,EAClB,mBAAmB,CACpB;;IAOC;;;;;;;;;;;;;OAaG;gBACS,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAsB,EACtB,aAAkB,GACnB,EAAE,iBAAiB;IAmBpB;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA0BtC;;;;;;;OAOG;IACG,gBAAgB,CAAC,EACrB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAyBrD;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IA+BpC;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC;IAsB/B;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAgBxC;;;;;;;;OAQG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAgC/B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC;IAmBxC;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC;CAgH7B"}
+{"version":3,"file":"KycService.d.mts","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAC9D,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACpC,kCAAkC,EACnC,oCAAoC;AACrC,OAAO,KAAK,EAAE,0BAA0B,EAAE,mCAAmC;AAE7E,OAAO,KAAK,EAAE,yCAAyC,EAAE,yCAAyC;AAClG,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,4CAA4C,EAAE,+CAA+C;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B;AAa3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,6BAA6B;AAG9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,6CAA4C;AACnF,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,qBAAqB,EACrB,SAAS,EACV,oBAAmB;AAGpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,sCAAqC;AAI3E;;GAEG;AACH,eAAO,MAAM,WAAW,eAAe,CAAC;AAqBxC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAC3C,kCAAkC,CAAC,OAAO,WAAW,CAAC,CAAC;AAEzD;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,iCAAiC,CAAC;AAEtC;;GAEG;AACH,KAAK,cAAc,GACf,4CAA4C,GAC5C,yCAAyC,CAAC;AAE9C;;GAEG;AACH,MAAM,MAAM,2BAA2B,GAAG,4BAA4B,CACpE,OAAO,WAAW,CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAC7C,oCAAoC,CAAC,OAAO,WAAW,CAAC,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB,2BAA2B,GAC3B,mCAAmC,CAAC;AAExC;;GAEG;AACH,KAAK,aAAa,GAAG,KAAK,CAAC;AAE3B;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,CACzC,OAAO,WAAW,EAClB,iBAAiB,GAAG,cAAc,EAClC,gBAAgB,GAAG,aAAa,CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,aAAa,CAAC,EAAE,0BAA0B,CAAC;CAC5C,CAAC;AAWF,QAAA,MAAM,2BAA2B;;;;EAAmC,CAAC;AAcrE,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAU1E,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;EAAmC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE5D,QAAA,MAAM,yBAAyB;;;;;;;;EAO7B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE1E,QAAA,MAAM,kCAAkC;;;;;;EAGtC,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAC9C,OAAO,kCAAkC,CAC1C,CAAC;AAaF,QAAA,MAAM,0BAA0B;;;;;;;;EAI9B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAkB5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,UAAU,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,sBAAsB,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C;;;;;;;OAOG;IACH,mBAAmB,EAAE,sBAAsB,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF;;;;;;;;;;;;GAYG;AACH,qBAAa,UAAW,SAAQ,eAAe,CAC7C,OAAO,WAAW,EAClB,mBAAmB,CACpB;;IAOC;;;;;;;;;;;;;OAaG;gBACS,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAsB,EACtB,aAAkB,GACnB,EAAE,iBAAiB;IAmBpB;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA0BtC;;;;;;;OAOG;IACG,gBAAgB,CAAC,EACrB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;IAyBrD;;;;;;OAMG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IA+BpC;;;;;;;;OAQG;IACG,kBAAkB,CACtB,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,oBAAoB,CAAC;IAoBhC;;;;;;;OAOG;IACG,oBAAoB,CAAC,EACzB,OAAO,GACR,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAe5B;;;;;OAKG;IACG,oBAAoB,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAkB/D;;;;;OAKG;IACG,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBjE;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC,qBAAqB,CAAC;IAgBtD;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,mBAAmB,CAAC;IAsB/B;;;;;;;;OAQG;IACG,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC;IAgBxC;;;;;;;;OAQG;IACG,iBAAiB,CACrB,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IAgC/B;;;;;;OAMG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,4BAA4B,CAAC;IAmBxC;;;;;;;OAOG;IACG,gBAAgB,CACpB,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC;CA8I7B"}

package/dist/KycService.mjs

@@ -9,10 +9,10 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var _KycService_instances, _KycService_fetch, _KycService_baseUrl, _KycService_fractalEncryptionBaseUrl, _KycService_validateResponse, _KycService_requestJson;
+var _KycService_instances, _KycService_fetch, _KycService_baseUrl, _KycService_fractalEncryptionBaseUrl, _KycService_validateResponse, _KycService_getBearerToken, _KycService_requestJson;
 import { BaseDataService } from "@metamask/base-data-service";
 import { HttpError } from "@metamask/controller-utils";
-import { array, assert, boolean, optional, string, StructError, type } from "@metamask/superstruct";
+import { array, assert, boolean, enums, optional, string, StructError, type } from "@metamask/superstruct";
 import { Duration, inMilliseconds } from "@metamask/utils";
 import { alpha2ToAlpha3 } from "./countryCodes.mjs";
 import { UKYC_JWKS_PATH } from "./ukyc/constants.mjs";
@@ -28,6 +28,11 @@ const MESSENGER_EXPOSED_METHODS = [
     'fetchDisclaimers',
     'createSession',
     'checkKycRequired',
+    'createIronCustomer',
+    'fetchIronDisclaimers',
+    'checkIronKycRequired',
+    'submitConsents',
+    'fetchKycStatus',
     'getWrappingKey',
     'fetchJwks',
     'createUkycSession',
@@ -86,6 +91,25 @@ const SessionStatusResponseStruct = type({
     vendor: string(),
     vendorStatus: string(),
 });
+// Iron customer subset — `type` (not `object`) keeps extra Iron fields from
+// failing validation while still requiring the fields the controller needs.
+const IronCustomerResponseStruct = type({
+    id: string(),
+    email: string(),
+    status: string(),
+});
+const KYC_USER_STATUSES = [
+    'not-started',
+    'pending',
+    'need-more-information',
+    'terminal-failure',
+    'completed',
+];
+const KycUserStatusResponseStruct = type({
+    status: enums([...KYC_USER_STATUSES]),
+    sumsubSessionId: optional(string()),
+    errorCode: optional(string()),
+});
 // === SERVICE DEFINITION ===
 /**
  * `KycService` communicates with the Universal KYC (UKYC) backend to drive the
@@ -232,6 +256,111 @@ export class KycService extends BaseDataService {
         const { required } = __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycRequiredResponseStruct, 'kyc-required');
         return { kycRequired: required };
     }
+    /**
+     * Creates (or resumes) an Iron empty-shell customer for the authenticated
+     * canonical user. Must run before showing Iron T&C so the customer exists in
+     * `SigningsRequired` and resume logic can key off Iron status.
+     *
+     * @param params - The parameters.
+     * @param params.email - Email associated with the Iron customer.
+     * @returns The Iron customer record (subset validated for controller use).
+     */
+    async createIronCustomer(params) {
+        const url = new URL('/vendors/iron/customers', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:createIronCustomer`, params.email],
+            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
+                method: 'POST',
+                body: JSON.stringify({ email: params.email }),
+            }),
+            // Customer creation/resume must never serve a stale/cached result.
+            staleTime: 0,
+            cacheTime: 0,
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, IronCustomerResponseStruct, 'iron customers');
+    }
+    /**
+     * Fetches Iron disclaimers / terms the customer must accept before consents
+     * and the SumSub sub-flow.
+     *
+     * @param params - The parameters.
+     * @param params.country - ISO 3166-1 alpha-3 country code.
+     * @returns The disclaimers.
+     */
+    async fetchIronDisclaimers({ country, }) {
+        const url = new URL('/vendors/iron/disclaimers', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        url.searchParams.set('country', country);
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:fetchIronDisclaimers`, country],
+            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'GET' }),
+            staleTime: inMilliseconds(5, Duration.Minute),
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, DisclaimersResponseStruct, 'iron disclaimers');
+    }
+    /**
+     * Checks whether Iron still requires KYC for the authenticated canonical
+     * user. Unlike the MoonPay variant, this does not take an access token.
+     *
+     * @returns Whether KYC is required.
+     */
+    async checkIronKycRequired() {
+        const url = new URL('/vendors/iron/kyc-required', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:checkIronKycRequired`],
+            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'POST', body: '{}' }),
+            // The requirement can change server-side, so always re-check.
+            staleTime: 0,
+            cacheTime: 0,
+        });
+        const { required } = __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycRequiredResponseStruct, 'iron kyc-required');
+        return { kycRequired: required };
+    }
+    /**
+     * Posts T&C1 (Iron signings) and T&C2 (Sumsub + idOS) consents for the
+     * authenticated user. The API responds with 204 No Content on success.
+     *
+     * @param params - The consent parameters.
+     */
+    async submitConsents(params) {
+        const url = new URL('/consents', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        await this.fetchQuery({
+            queryKey: [
+                `${this.name}:submitConsents`,
+                params.ironDisclaimerIds,
+                params.sumsubTncSigned,
+                params.idosTncSigned,
+                params.kycLevel ?? 'standard',
+            ],
+            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
+                method: 'POST',
+                body: JSON.stringify({
+                    ironDisclaimerIds: params.ironDisclaimerIds,
+                    sumsubTncSigned: params.sumsubTncSigned,
+                    idosTncSigned: params.idosTncSigned,
+                    kycLevel: params.kycLevel ?? 'standard',
+                }),
+            }),
+            staleTime: 0,
+            cacheTime: 0,
+        });
+    }
+    /**
+     * Fetches the user-keyed simplified KYC status used by Money toast / banner
+     * surfaces (`GET /kyc/status`).
+     *
+     * @returns The simplified status payload.
+     */
+    async fetchKycStatus() {
+        const url = new URL('/kyc/status', __classPrivateFieldGet(this, _KycService_baseUrl, "f"));
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:fetchKycStatus`],
+            queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, { method: 'GET' }),
+            // Status is polled for toast flips, so it must always be fresh.
+            staleTime: 0,
+            cacheTime: 0,
+        });
+        return __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_validateResponse).call(this, data, KycUserStatusResponseStruct, 'kyc status');
+    }
     /**
      * Requests a per-session wrapping key from the UKYC backend.
      *
@@ -302,10 +431,10 @@ export class KycService extends BaseDataService {
             queryFn: async () => __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_requestJson).call(this, url, {
                 method: 'POST',
                 body: JSON.stringify({
-                    vendorId: 'moonpay',
+                    vendorId: params.vendorId ?? 'moonpay',
                     vendorUserId: 'mockedId',
                     jwtToken: params.jwtToken,
-                    vendorMetadata: params.vendorMetadata,
+                    vendorMetadata: params.vendorMetadata ?? {},
                     wrappedEncryptionKey: params.wrappedEncryptionKey,
                     ukycCapabilityToken: encodeStorageAccessTokenForHeader(params.ukycCapabilityToken),
                 }),
@@ -368,6 +497,19 @@ _KycService_fetch = new WeakMap(), _KycService_baseUrl = new WeakMap(), _KycServ
                 String(error);
         throw new Error(`Malformed response received from ${apiName} API: ${detail}`);
     }
+}, _KycService_getBearerToken = 
+/**
+ * Gets the authenticated wallet bearer token.
+ *
+ * @returns The bearer token.
+ */
+async function _KycService_getBearerToken() {
+    const bearerToken = await this.messenger.call('AuthenticationController:getBearerToken');
+    assert(bearerToken, string());
+    if (!bearerToken) {
+        throw new Error('Unable to obtain an authentication bearer token - is the wallet signed in?');
+    }
+    return bearerToken;
 }, _KycService_requestJson = 
 /**
  * Performs a single JSON request.
@@ -394,19 +536,34 @@ async function _KycService_requestJson(url, init, options = {}) {
         headers['Content-Type'] = 'application/json';
     }
     if (authenticated) {
-        const bearerToken = await this.messenger.call('AuthenticationController:getBearerToken');
-        assert(bearerToken, string());
-        if (!bearerToken) {
-            throw new Error('Unable to obtain an authentication bearer token — is the wallet signed in?');
-        }
-        headers.Authorization = `Bearer ${bearerToken}`;
+        headers.Authorization = `Bearer ${await __classPrivateFieldGet(this, _KycService_instances, "m", _KycService_getBearerToken).call(this)}`;
     }
     const response = await __classPrivateFieldGet(this, _KycService_fetch, "f").call(this, url.toString(), {
         ...init,
         headers,
     });
     if (!response.ok) {
-        throw new HttpError(response.status, `Fetching '${url.toString()}' failed with status '${response.status}'`);
+        let detail = '';
+        try {
+            const errorBody = await response.json();
+            if (errorBody && typeof errorBody === 'object') {
+                const record = errorBody;
+                if (typeof record.message === 'string') {
+                    detail = record.message;
+                }
+                else if (typeof record.error === 'string') {
+                    detail = record.error;
+                }
+            }
+        }
+        catch {
+            // Ignore body parse failures; status alone is still useful.
+        }
+        throw new HttpError(response.status, `Fetching '${url.toString()}' failed with status '${response.status}'${detail ? `: ${detail}` : ''}`);
+    }
+    // Consent (and similar) endpoints return 204 No Content.
+    if (response.status === 204) {
+        return null;
     }
     return (await response.json());
 };

package/dist/KycService.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"KycService.mjs","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAO9D,OAAO,EAAE,SAAS,EAAE,mCAAmC;AAKvD,OAAO,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,QAAQ,EACR,MAAM,EACN,WAAW,EACX,IAAI,EACL,8BAA8B;AAE/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,wBAAwB;AAG3D,OAAO,EAAE,cAAc,EAAE,2BAA0B;AAGnD,OAAO,EAAE,cAAc,EAAE,6BAA4B;AACrD,OAAO,EAAE,iCAAiC,EAAE,sCAAqC;AAGjF,kBAAkB;AAElB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,kBAAkB;CACV,CAAC;AAkFX,+BAA+B;AAE/B,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,EAAE;IACZ,YAAY,EAAE,MAAM,EAAE;IACtB,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,2BAA2B,GAAG,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhE,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,4BAA4B,GAAG,IAAI,CAAC;IACxC,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,EAAE,EAAE,MAAM,EAAE;IACZ,QAAQ,EAAE,MAAM,EAAE;IAClB,sBAAsB,EAAE,4BAA4B;CACrD,CAAC,CAAC;AAGH,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE;IACnB,0EAA0E;IAC1E,+EAA+E;IAC/E,mEAAmE;IACnE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAGH,MAAM,kCAAkC,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE;IAChB,oBAAoB,EAAE,MAAM,EAAE;CAC/B,CAAC,CAAC;AAKH,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE;IACrB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE;IAChB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAkDH,6BAA6B;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,UAAW,SAAQ,eAG/B;IAOC;;;;;;;;;;;;;OAaG;IACH,YAAY,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAiB,GAAG,EAAE,EACtB,aAAa,GAAG,EAAE,GACA;QAClB,KAAK,CAAC;YACJ,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,iBAAiB;YACjB,aAAa;SACd,CAAC,CAAC;;QAjCI,oCAAqB;QAErB,sCAAiB;QAEjB,uDAAkC;QA8BzC,uBAAA,IAAI,qBAAU,aAAa,MAAA,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,uBAAA,IAAI,uBAAY,OAAO,MAAA,CAAC;QACxB,uBAAA,IAAI,wCAA6B,wBAAwB,IAAI,EAAE,MAAA,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxC,sCAAsC,CACvC,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,+DAA+D;QAC/D,uBAAuB;QACvB,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAC1D,QAAQ,CACT,KAAK,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,kCAAkC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,OAAO,GAGR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,8BAA8B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,OAAO,CAAC;YACpD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,aAAa,CACK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,gBAAgB;gBAC5B,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,eAAe;gBACtB,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,mBAAmB;gBAC/B,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,OAAO;gBACd,YAAY;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,YAAY;iBACb,CAAC;aACH,CAAC;YACJ,8DAA8D;YAC9D,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,cAAc,CAClB,MAA4B;QAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACxE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;iBACtD,CAAC;aACH,CAAC;YACJ,oDAAoD;YACpD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,uBAAA,IAAI,4CAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,uBAAA,IAAI,4CAA0B,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,uBAAA,IAAI,4CAA0B,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACrE,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EAAmB,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,oBAAoB;gBAChC,MAAM,CAAC,oBAAoB,CAAC,SAAS;aACtC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,SAAS;oBACnB,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,mBAAmB,EAAE,iCAAiC,CACpD,MAAM,CAAC,mBAAmB,CAC3B;iBACF,CAAC;aACH,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,UAAU,EACpD,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,SAAS,CAAC;YACnD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/D,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,kCAAkC,EAClC,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAC1D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,wEAAwE;YACxE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;CA+FF;0OA9EG,IAAa,EACb,MAA4B,EAC5B,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,qEAAqE;gBACrE,+DAA+D;gBAC/D,0BAA0B;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,SAAS,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,kCACH,GAAQ,EACR,IAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,yCAAyC,CAC1C,CAAC;QACF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,aAAa,GAAG,UAAU,WAAW,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,yBAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjD,GAAG,IAAI;QACP,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,MAAM,EACf,aAAa,GAAG,CAAC,QAAQ,EAAE,yBAAyB,QAAQ,CAAC,MAAM,GAAG,CACvE,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAS,CAAC;AACzC,CAAC","sourcesContent":["import { BaseDataService } from '@metamask/base-data-service';\nimport type {\n  DataServiceCacheUpdatedEvent,\n  DataServiceGranularCacheUpdatedEvent,\n  DataServiceInvalidateQueriesAction,\n} from '@metamask/base-data-service';\nimport type { CreateServicePolicyOptions } from '@metamask/controller-utils';\nimport { HttpError } from '@metamask/controller-utils';\nimport type { GeolocationControllerGetGeolocationAction } from '@metamask/geolocation-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { AuthenticationControllerGetBearerTokenAction } from '@metamask/profile-sync-controller/auth';\nimport type { Infer, Struct } from '@metamask/superstruct';\nimport {\n  array,\n  assert,\n  boolean,\n  optional,\n  string,\n  StructError,\n  type,\n} from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport { Duration, inMilliseconds } from '@metamask/utils';\nimport type { QueryClientConfig } from '@tanstack/query-core';\n\nimport { alpha2ToAlpha3 } from './countryCodes.js';\nimport type { KycServiceMethodActions } from './KycService-method-action-types.js';\nimport type { KycDisclaimer, KycSessionStatus } from './types.js';\nimport { UKYC_JWKS_PATH } from './ukyc/constants.js';\nimport { encodeStorageAccessTokenForHeader } from './ukyc/storageAccessToken.js';\nimport type { UkycStorageAccessToken } from './ukyc/storageAccessToken.js';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link KycService}, used to namespace the service's actions.\n */\nexport const serviceName = 'KycService';\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'getGeoCountry',\n  'fetchDisclaimers',\n  'createSession',\n  'checkKycRequired',\n  'getWrappingKey',\n  'fetchJwks',\n  'createUkycSession',\n  'createJourney',\n  'getSessionStatus',\n] as const;\n\n/**\n * Invalidates cached queries serviced by {@link KycService}.\n */\nexport type KycServiceInvalidateQueriesAction =\n  DataServiceInvalidateQueriesAction<typeof serviceName>;\n\n/**\n * Actions that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceActions =\n  | KycServiceMethodActions\n  | KycServiceInvalidateQueriesAction;\n\n/**\n * Actions from other messengers that {@link KycService} calls.\n */\ntype AllowedActions =\n  | AuthenticationControllerGetBearerTokenAction\n  | GeolocationControllerGetGeolocationAction;\n\n/**\n * Published when {@link KycService}'s cache is updated.\n */\nexport type KycServiceCacheUpdatedEvent =\n  DataServiceCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Published when a single key within {@link KycService}'s cache is updated.\n */\nexport type KycServiceGranularCacheUpdatedEvent =\n  DataServiceGranularCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Events that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceEvents =\n  | KycServiceCacheUpdatedEvent\n  | KycServiceGranularCacheUpdatedEvent;\n\n/**\n * Events from other messengers that {@link KycService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger restricted to actions and events accessed by\n * {@link KycService}.\n */\nexport type KycServiceMessenger = Messenger<\n  typeof serviceName,\n  KycServiceActions | AllowedActions,\n  KycServiceEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycService}.\n */\nexport type KycServiceOptions = {\n  messenger: KycServiceMessenger;\n  fetch: typeof fetch;\n  /**\n   * Mandatory value that sets the base url to KYC api\n   */\n  baseUrl: string;\n  /**\n   * Base URL of the Fractal encryption service, from which the JWKS used to\n   * verify the `jwtChain` returned by {@link KycService.getWrappingKey} is\n   * fetched. Required to run the wrapping-key exchange in\n   * {@link KycService.fetchJwks}.\n   */\n  fractalEncryptionBaseUrl?: string;\n  /**\n   * Shared configuration applied to all queries exposed by the service (e.g. a\n   * default `staleTime`/`cacheTime`). Each data service gets its own\n   * `QueryClient`.\n   */\n  queryClientConfig?: QueryClientConfig;\n  policyOptions?: CreateServicePolicyOptions;\n};\n\n// === API RESPONSE SCHEMAS ===\n\nconst DisclaimerStruct = type({\n  id: string(),\n  display_name: string(),\n  url: string(),\n});\nconst DisclaimersResponseStruct = array(DisclaimerStruct);\n\nconst CreateSessionResponseStruct = type({ sessionToken: string() });\n\n// The live KYC API returns the flag under `required`; the service normalizes\n// this to `kycRequired` for consumers (see `checkKycRequired`).\nconst KycRequiredResponseStruct = type({ required: boolean() });\n\n// The session server's X25519 public key, in JWK-like form, returned by\n// `/wrapping-key`. `x` is the base64url public key used to wrap the user key.\nconst SessionServerPublicKeyStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n});\n\nconst WrappingKeyResponseStruct = type({\n  id: string(),\n  jwtChain: string(),\n  sessionServerPublicKey: SessionServerPublicKeyStruct,\n});\nexport type WrappingKeyResponse = Infer<typeof WrappingKeyResponseStruct>;\n\n// A single Ed25519 (OKP) JWK. `type` (not `object`) keeps optional/extra JWK\n// fields (`use`, `alg`) from failing validation.\nconst JwkStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: string(),\n});\nconst JwksResponseStruct = type({ keys: array(JwkStruct) });\nexport type JwksResponse = Infer<typeof JwksResponseStruct>;\n\nconst UkycSessionResponseStruct = type({\n  sessionId: string(),\n  // The relay-side KYC decision (e.g. `approved`) and the vendor-side final\n  // status (e.g. `pending`) at session-creation time. Present when the applicant\n  // already has a session in flight; absent for a brand-new session.\n  kycStatus: optional(string()),\n  finalStatus: optional(string()),\n});\nexport type UkycSessionResponse = Infer<typeof UkycSessionResponseStruct>;\n\nconst ApplicantAccessTokenResponseStruct = type({\n  status: string(),\n  applicantAccessToken: string(),\n});\nexport type ApplicantAccessTokenResponse = Infer<\n  typeof ApplicantAccessTokenResponseStruct\n>;\n\nconst SessionStatusResponseStruct = type({\n  finalStatus: string(),\n  statusMessage: optional(string()),\n  externalUserId: string(),\n  kycStatus: string(),\n  vendor: string(),\n  vendorStatus: string(),\n});\n\n// === PARAM TYPES ===\n\nexport type CreateSessionParams = {\n  email: string;\n  termsAcceptedAt: string;\n  disclaimerIds: string[];\n};\n\nexport type CheckKycRequiredParams = {\n  accessToken: string;\n  country: string;\n  capabilities?: { product: string }[];\n};\n\nexport type GetWrappingKeyParams = {\n  sessionClientPublicKey: string;\n};\n\n/**\n * The wrapped `data_encryption_key` sent to the UKYC backend when creating a\n * session. `encryptedKey` and `nonce` are produced by `wrapEncryptionKey`;\n * `sessionId` is the wrapping key id returned by `getWrappingKey`.\n */\nexport type WrappedEncryptionKey = {\n  sessionId: string;\n  encryptedKey: string;\n  nonce: string;\n};\n\nexport type CreateUkycSessionParams = {\n  jwtToken: string;\n  vendorMetadata: Record<string, unknown>;\n  wrappedEncryptionKey: WrappedEncryptionKey;\n  /**\n   * The client-signed `ukyc_capability_token` (envelope: payload + Ed25519\n   * signature) authorizing later storage access for this session. It is minted\n   * by the client with `read`-only scope — see the UKYC storage-and-auth spec\n   * for how it is formed. Only the client holds the signing key, so only the\n   * client can mint it. The envelope is base64url-encoded into a compact string\n   * before it is sent to the backend.\n   */\n  ukycCapabilityToken: UkycStorageAccessToken;\n};\n\nexport type GetSessionStatusParams = {\n  sessionId: string;\n};\n\n// === SERVICE DEFINITION ===\n\n/**\n * `KycService` communicates with the Universal KYC (UKYC) backend to drive the\n * identity + document-verification flow. It is stateless and platform-agnostic:\n * HTTP is performed through an injected `fetch`, and the auth bearer token and\n * geolocation come from other controllers via the messenger.\n *\n * It extends {@link BaseDataService}, so every request is routed through\n * `fetchQuery`: it is wrapped in the shared service policy (retries, circuit\n * breaker) and its result is exposed via the service's `QueryClient`. Read-only\n * endpoints (`fetchDisclaimers`, `fetchJwks`) are cached with a `staleTime`;\n * the session-creating and status-polling endpoints opt out of caching\n * (`staleTime`/`cacheTime` of `0`) so they never serve a stale result.\n */\nexport class KycService extends BaseDataService<\n  typeof serviceName,\n  KycServiceMessenger\n> {\n  readonly #fetch: typeof fetch;\n\n  readonly #baseUrl: string;\n\n  readonly #fractalEncryptionBaseUrl: string;\n\n  /**\n   * Constructs a new KycService.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this service.\n   * @param options.fetch - A function used to make HTTP requests.\n   * @param options.baseUrl - Base URL of the KYC API\n   * @param options.fractalEncryptionBaseUrl - Base URL of the Fractal\n   * encryption service, from which the JWKS used to verify the wrapping-key\n   * `jwtChain` is fetched.\n   * @param options.queryClientConfig - Shared configuration for all queries\n   * exposed by the service.\n   * @param options.policyOptions - Options for the request service policy.\n   */\n  constructor({\n    messenger,\n    fetch: fetchFunction,\n    baseUrl,\n    fractalEncryptionBaseUrl,\n    queryClientConfig = {},\n    policyOptions = {},\n  }: KycServiceOptions) {\n    super({\n      name: serviceName,\n      messenger,\n      queryClientConfig,\n      policyOptions,\n    });\n    this.#fetch = fetchFunction;\n    if (!baseUrl) {\n      throw new Error('KycService: baseUrl is required');\n    }\n    this.#baseUrl = baseUrl;\n    this.#fractalEncryptionBaseUrl = fractalEncryptionBaseUrl ?? '';\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves the customer's country from the geolocation source and converts it\n   * to an ISO 3166-1 alpha-3 code.\n   *\n   * @returns The alpha-3 country code.\n   * @throws If the country cannot be determined or mapped.\n   */\n  async getGeoCountry(): Promise<string> {\n    const location = await this.messenger.call(\n      'GeolocationController:getGeolocation',\n    );\n    // Guard nullish/empty geolocation with the documented domain error rather\n    // than letting `assert(location, string())` surface a superstruct\n    // assertion error (which would change how the failure reads in\n    // `disclaimersError`).\n    const alpha2 =\n      typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';\n    if (!alpha2 || alpha2 === 'UNKNOWN') {\n      throw new Error(\n        `Unable to determine country from geolocation (got \"${String(\n          location,\n        )}\").`,\n      );\n    }\n    const alpha3 = alpha2ToAlpha3(alpha2);\n    if (!alpha3) {\n      throw new Error(\n        `Unable to map country code \"${alpha2}\" to an ISO 3166-1 alpha-3 code.`,\n      );\n    }\n    return alpha3;\n  }\n\n  /**\n   * Fetches the disclaimers the customer must accept before a session is\n   * created.\n   *\n   * @param params - The parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchDisclaimers({\n    country,\n  }: {\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL('/vendors/moonpay/disclaimers', this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchDisclaimers`, country],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      staleTime: inMilliseconds(5, Duration.Minute),\n    });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Creates a vendor session via the UKYC backend.\n   *\n   * @param params - The session parameters.\n   * @returns The created session token.\n   */\n  async createSession(\n    params: CreateSessionParams,\n  ): Promise<Infer<typeof CreateSessionResponseStruct>> {\n    const url = new URL('/vendors/moonpay/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createSession`,\n        params.email,\n        params.termsAcceptedAt,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(params),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      CreateSessionResponseStruct,\n      'sessions',\n    );\n  }\n\n  /**\n   * Checks whether KYC is required for the given access token, country, and\n   * capabilities.\n   *\n   * @param params - The check parameters.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(\n    params: CheckKycRequiredParams,\n  ): Promise<{ kycRequired: boolean }> {\n    const url = new URL('/vendors/moonpay/kyc-required', this.#baseUrl);\n    const capabilities = params.capabilities ?? [{ product: 'ramps' }];\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:checkKycRequired`,\n        params.accessToken,\n        params.country,\n        capabilities,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            accessToken: params.accessToken,\n            country: params.country,\n            capabilities,\n          }),\n        }),\n      // The requirement can change server-side, so always re-check.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Requests a per-session wrapping key from the UKYC backend.\n   *\n   * The client sends its ephemeral X25519 public key; the backend responds with\n   * its session public key (`sessionServerPublicKey`) and a `jwtChain` that\n   * attests it. The caller must verify `jwtChain` against the Fractal JWKS\n   * (see {@link KycService.fetchJwks}) before trusting the key to wrap the\n   * `data_encryption_key`.\n   *\n   * @param params - The parameters.\n   * @param params.sessionClientPublicKey - Our ephemeral X25519 public key\n   * (base64url).\n   * @returns The wrapping key id, `jwtChain`, and session server public key.\n   */\n  async getWrappingKey(\n    params: GetWrappingKeyParams,\n  ): Promise<WrappingKeyResponse> {\n    const url = new URL('/wrapping-key', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getWrappingKey`, params.sessionClientPublicKey],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            sessionClientPublicKey: params.sessionClientPublicKey,\n          }),\n        }),\n      // A per-session key exchange must always run fresh.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      WrappingKeyResponseStruct,\n      'wrapping-key',\n    );\n  }\n\n  /**\n   * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`\n   * returned by {@link KycService.getWrappingKey}.\n   *\n   * This is an unauthenticated request to a well-known path on the Fractal\n   * host, distinct from the UKYC base URL.\n   *\n   * @returns The JWKS keys.\n   */\n  async fetchJwks(): Promise<JwksResponse> {\n    if (!this.#fractalEncryptionBaseUrl) {\n      throw new Error(\n        'KycService: fractalEncryptionBaseUrl is not configured; cannot fetch JWKS to verify the wrapping key.',\n      );\n    }\n    const url = new URL(UKYC_JWKS_PATH, this.#fractalEncryptionBaseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchJwks`, this.#fractalEncryptionBaseUrl],\n      queryFn: async () =>\n        this.#requestJson(url, { method: 'GET' }, { authenticated: false }),\n      staleTime: inMilliseconds(1, Duration.Hour),\n    });\n    return this.#validateResponse(data, JwksResponseStruct, 'JWKS');\n  }\n\n  /**\n   * Creates a UKYC session for the SumSub document-verification sub-flow,\n   * handing over the wrapped `data_encryption_key` and the client-signed,\n   * read-only `ukyc_capability_token` that authorizes later storage access for\n   * the session.\n   *\n   * @param params - The session parameters.\n   * @returns The UKYC session identifiers.\n   */\n  async createUkycSession(\n    params: CreateUkycSessionParams,\n  ): Promise<UkycSessionResponse> {\n    const url = new URL('/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createUkycSession`,\n        params.wrappedEncryptionKey.sessionId,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            vendorId: 'moonpay',\n            vendorUserId: 'mockedId',\n            jwtToken: params.jwtToken,\n            vendorMetadata: params.vendorMetadata,\n            wrappedEncryptionKey: params.wrappedEncryptionKey,\n            ukycCapabilityToken: encodeStorageAccessTokenForHeader(\n              params.ukycCapabilityToken,\n            ),\n          }),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      UkycSessionResponseStruct,\n      'UKYC sessions',\n    );\n  }\n\n  /**\n   * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n   * returning the applicant access token used to launch the SDK.\n   *\n   * @param sessionId - The UKYC session id from `createUkycSession`.\n   * @returns The applicant access token and status.\n   */\n  async createJourney(\n    sessionId: string,\n  ): Promise<ApplicantAccessTokenResponse> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(sessionId)}/journey`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createJourney`, sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'POST' }),\n      // Journeys are (re)created on demand; do not reuse a cached token.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      ApplicantAccessTokenResponseStruct,\n      'journey',\n    );\n  }\n\n  /**\n   * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n   * completes to determine the final verification decision.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The session status.\n   */\n  async getSessionStatus(\n    params: GetSessionStatusParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/status`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getSessionStatus`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for a terminal decision, so it must always be fresh.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'session status',\n    );\n  }\n\n  /**\n   * Validates a parsed API response against a superstruct schema, throwing a\n   * descriptive error when the response does not match.\n   *\n   * Unlike a bare `Struct.is` check, this surfaces exactly which field was\n   * missing or had the wrong type, which is essential for diagnosing shape\n   * mismatches between the client and the live API.\n   *\n   * @param data - The parsed response body.\n   * @param struct - The superstruct schema the body is expected to satisfy.\n   * @param apiName - A human-readable name of the API, used in the error message.\n   * @returns The validated, typed response.\n   * @throws If `data` does not match `struct`.\n   */\n  #validateResponse<Type, Schema>(\n    data: unknown,\n    struct: Struct<Type, Schema>,\n    apiName: string,\n  ): Type {\n    try {\n      assert(data, struct);\n      return data;\n    } catch (error) {\n      const detail =\n        error instanceof StructError\n          ? `${error.message} (received: ${JSON.stringify(data)})`\n          : // `assert` only ever throws `StructError` for the plain structs used\n            // here, so this is a defensive fallback that is not exercised.\n            /* istanbul ignore next */\n            String(error);\n      throw new Error(\n        `Malformed response received from ${apiName} API: ${detail}`,\n      );\n    }\n  }\n\n  /**\n   * Performs a single JSON request.\n   *\n   * This is meant to be used as the `queryFn` for {@link fetchQuery}, which\n   * wraps it in the shared service policy (retries, circuit breaker). Requests\n   * are authenticated with the wallet bearer token by default; pass\n   * `{ authenticated: false }` for calls to services that do not expect it\n   * (e.g. the Fractal JWKS endpoint).\n   *\n   * @param url - The request URL.\n   * @param init - The request init (method, body).\n   * @param options - Request options.\n   * @param options.authenticated - Whether to attach the bearer token. Defaults\n   * to `true`.\n   * @returns The parsed JSON response.\n   */\n  async #requestJson(\n    url: URL,\n    init: RequestInit,\n    options: { authenticated?: boolean } = {},\n  ): Promise<Json> {\n    const { authenticated = true } = options;\n\n    const headers: Record<string, string> = {};\n\n    // Only advertise a JSON body when one is actually sent; bodyless requests\n    // (e.g. `createJourney`) must not carry a `Content-Type`.\n    if (init.body !== undefined && init.body !== null) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    if (authenticated) {\n      const bearerToken = await this.messenger.call(\n        'AuthenticationController:getBearerToken',\n      );\n      assert(bearerToken, string());\n      if (!bearerToken) {\n        throw new Error(\n          'Unable to obtain an authentication bearer token — is the wallet signed in?',\n        );\n      }\n      headers.Authorization = `Bearer ${bearerToken}`;\n    }\n\n    const response = await this.#fetch(url.toString(), {\n      ...init,\n      headers,\n    });\n    if (!response.ok) {\n      throw new HttpError(\n        response.status,\n        `Fetching '${url.toString()}' failed with status '${response.status}'`,\n      );\n    }\n\n    return (await response.json()) as Json;\n  }\n}\n"]}
+{"version":3,"file":"KycService.mjs","sourceRoot":"","sources":["../src/KycService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,oCAAoC;AAO9D,OAAO,EAAE,SAAS,EAAE,mCAAmC;AAKvD,OAAO,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACP,KAAK,EACL,QAAQ,EACR,MAAM,EACN,WAAW,EACX,IAAI,EACL,8BAA8B;AAE/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,wBAAwB;AAG3D,OAAO,EAAE,cAAc,EAAE,2BAA0B;AAQnD,OAAO,EAAE,cAAc,EAAE,6BAA4B;AACrD,OAAO,EAAE,iCAAiC,EAAE,sCAAqC;AAGjF,kBAAkB;AAElB;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,kBAAkB;CACV,CAAC;AAmFX,+BAA+B;AAE/B,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC5B,EAAE,EAAE,MAAM,EAAE;IACZ,YAAY,EAAE,MAAM,EAAE;IACtB,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAE1D,MAAM,2BAA2B,GAAG,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,gEAAgE;AAChE,MAAM,yBAAyB,GAAG,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAEhE,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,4BAA4B,GAAG,IAAI,CAAC;IACxC,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,EAAE,EAAE,MAAM,EAAE;IACZ,QAAQ,EAAE,MAAM,EAAE;IAClB,sBAAsB,EAAE,4BAA4B;CACrD,CAAC,CAAC;AAGH,6EAA6E;AAC7E,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,EAAE;IACb,GAAG,EAAE,MAAM,EAAE;IACb,CAAC,EAAE,MAAM,EAAE;IACX,GAAG,EAAE,MAAM,EAAE;CACd,CAAC,CAAC;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAG5D,MAAM,yBAAyB,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE;IACnB,0EAA0E;IAC1E,+EAA+E;IAC/E,mEAAmE;IACnE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7B,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAGH,MAAM,kCAAkC,GAAG,IAAI,CAAC;IAC9C,MAAM,EAAE,MAAM,EAAE;IAChB,oBAAoB,EAAE,MAAM,EAAE;CAC/B,CAAC,CAAC;AAKH,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,WAAW,EAAE,MAAM,EAAE;IACrB,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACjC,cAAc,EAAE,MAAM,EAAE;IACxB,SAAS,EAAE,MAAM,EAAE;IACnB,MAAM,EAAE,MAAM,EAAE;IAChB,YAAY,EAAE,MAAM,EAAE;CACvB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,4EAA4E;AAC5E,MAAM,0BAA0B,GAAG,IAAI,CAAC;IACtC,EAAE,EAAE,MAAM,EAAE;IACZ,KAAK,EAAE,MAAM,EAAE;IACf,MAAM,EAAE,MAAM,EAAE;CACjB,CAAC,CAAC;AAGH,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,SAAS;IACT,uBAAuB;IACvB,kBAAkB;IAClB,WAAW;CACH,CAAC;AAEX,MAAM,2BAA2B,GAAG,IAAI,CAAC;IACvC,MAAM,EAAE,KAAK,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;IACrC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAC;AAuEH,6BAA6B;AAE7B;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,UAAW,SAAQ,eAG/B;IAOC;;;;;;;;;;;;;OAaG;IACH,YAAY,EACV,SAAS,EACT,KAAK,EAAE,aAAa,EACpB,OAAO,EACP,wBAAwB,EACxB,iBAAiB,GAAG,EAAE,EACtB,aAAa,GAAG,EAAE,GACA;QAClB,KAAK,CAAC;YACJ,IAAI,EAAE,WAAW;YACjB,SAAS;YACT,iBAAiB;YACjB,aAAa;SACd,CAAC,CAAC;;QAjCI,oCAAqB;QAErB,sCAAiB;QAEjB,uDAAkC;QA8BzC,uBAAA,IAAI,qBAAU,aAAa,MAAA,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,uBAAA,IAAI,uBAAY,OAAO,MAAA,CAAC;QACxB,uBAAA,IAAI,wCAA6B,wBAAwB,IAAI,EAAE,MAAA,CAAC;QAChE,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa;QACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACxC,sCAAsC,CACvC,CAAC;QACF,0EAA0E;QAC1E,kEAAkE;QAClE,+DAA+D;QAC/D,uBAAuB;QACvB,MAAM,MAAM,GACV,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD,MAAM,CAC1D,QAAQ,CACT,KAAK,CACP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,kCAAkC,CACxE,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CAAC,EACrB,OAAO,GAGR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,8BAA8B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,OAAO,CAAC;YACpD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,aAAa,CACK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,gBAAgB;gBAC5B,MAAM,CAAC,KAAK;gBACZ,MAAM,CAAC,eAAe;gBACtB,MAAM,CAAC,aAAa;aACrB;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,mBAAmB;gBAC/B,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,OAAO;gBACd,YAAY;aACb;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,YAAY;iBACb,CAAC;aACH,CAAC;YACJ,8DAA8D;YAC9D,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAgC;QAEhC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC;YAC3D,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;aAC9C,CAAC;YACJ,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,0BAA0B,EAC1B,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,oBAAoB,CAAC,EACzB,OAAO,GAGR;QACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,2BAA2B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,uBAAuB,EAAE,OAAO,CAAC;YACxD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,kBAAkB,CACA,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,4BAA4B,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxD,8DAA8D;YAC9D,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACvB,IAAI,EACJ,yBAAyB,EACzB,mBAAmB,CACpB,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAA4B;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,UAAU,CAAC;YACpB,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,iBAAiB;gBAC7B,MAAM,CAAC,iBAAiB;gBACxB,MAAM,CAAC,eAAe;gBACtB,MAAM,CAAC,aAAa;gBACpB,MAAM,CAAC,QAAQ,IAAI,UAAU;aAC9B;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,UAAU;iBACxC,CAAC;aACH,CAAC;YACJ,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,CAAC;YACzC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,gEAAgE;YAChE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,YAAY,CACb,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,cAAc,CAClB,MAA4B;QAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,iBAAiB,EAAE,MAAM,CAAC,sBAAsB,CAAC;YACxE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;iBACtD,CAAC;aACH,CAAC;YACJ,oDAAoD;YACpD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,cAAc,CACf,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,uBAAA,IAAI,4CAA0B,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,uBAAA,IAAI,4CAA0B,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,YAAY,EAAE,uBAAA,IAAI,4CAA0B,CAAC;YACpE,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACrE,SAAS,EAAE,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EAAmB,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB,CACrB,MAA+B;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,uBAAA,IAAI,2BAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,oBAAoB;gBAChC,MAAM,CAAC,oBAAoB,CAAC,SAAS;aACtC;YACD,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE;gBACrB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;oBACtC,YAAY,EAAE,UAAU;oBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;oBAC3C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,mBAAmB,EAAE,iCAAiC,CACpD,MAAM,CAAC,mBAAmB,CAC3B;iBACF,CAAC;aACH,CAAC;YACJ,sEAAsE;YACtE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,yBAAyB,EACzB,eAAe,CAChB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,UAAU,EACpD,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,gBAAgB,EAAE,SAAS,CAAC;YACnD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAC/D,mEAAmE;YACnE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,kCAAkC,EAClC,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,MAA8B;QAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,aAAa,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,EAC1D,uBAAA,IAAI,2BAAS,CACd,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,MAAM,CAAC,SAAS,CAAC;YAC7D,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,uBAAA,IAAI,sDAAa,MAAjB,IAAI,EAAc,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC9D,wEAAwE;YACxE,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO,uBAAA,IAAI,2DAAkB,MAAtB,IAAI,EACT,IAAI,EACJ,2BAA2B,EAC3B,gBAAgB,CACjB,CAAC;IACJ,CAAC;CA6HF;0OA5GG,IAAa,EACb,MAA4B,EAC5B,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,eAAe,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,qEAAqE;gBACrE,+DAA+D;gBAC/D,0BAA0B;gBAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,OAAO,SAAS,MAAM,EAAE,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK;IACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,yCAAyC,CAC1C,CAAC;IACF,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,kCACH,GAAQ,EACR,IAAiB,EACjB,UAAuC,EAAE;IAEzC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,uBAAA,IAAI,yDAAgB,MAApB,IAAI,CAAkB,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,yBAAO,MAAX,IAAI,EAAQ,GAAG,CAAC,QAAQ,EAAE,EAAE;QACjD,GAAG,IAAI;QACP,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,SAAS,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,SAAoC,CAAC;gBACpD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACvC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;gBAC1B,CAAC;qBAAM,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,MAAM,EACf,aAAa,GAAG,CAAC,QAAQ,EAAE,yBAAyB,QAAQ,CAAC,MAAM,IACjE,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CACH,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAS,CAAC;AACzC,CAAC","sourcesContent":["import { BaseDataService } from '@metamask/base-data-service';\nimport type {\n  DataServiceCacheUpdatedEvent,\n  DataServiceGranularCacheUpdatedEvent,\n  DataServiceInvalidateQueriesAction,\n} from '@metamask/base-data-service';\nimport type { CreateServicePolicyOptions } from '@metamask/controller-utils';\nimport { HttpError } from '@metamask/controller-utils';\nimport type { GeolocationControllerGetGeolocationAction } from '@metamask/geolocation-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { AuthenticationControllerGetBearerTokenAction } from '@metamask/profile-sync-controller/auth';\nimport type { Infer, Struct } from '@metamask/superstruct';\nimport {\n  array,\n  assert,\n  boolean,\n  enums,\n  optional,\n  string,\n  StructError,\n  type,\n} from '@metamask/superstruct';\nimport type { Json } from '@metamask/utils';\nimport { Duration, inMilliseconds } from '@metamask/utils';\nimport type { QueryClientConfig } from '@tanstack/query-core';\n\nimport { alpha2ToAlpha3 } from './countryCodes.js';\nimport type { KycServiceMethodActions } from './KycService-method-action-types.js';\nimport type {\n  KycDisclaimer,\n  KycSessionStatus,\n  KycUserStatusResponse,\n  KycVendor,\n} from './types.js';\nimport { UKYC_JWKS_PATH } from './ukyc/constants.js';\nimport { encodeStorageAccessTokenForHeader } from './ukyc/storageAccessToken.js';\nimport type { UkycStorageAccessToken } from './ukyc/storageAccessToken.js';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link KycService}, used to namespace the service's actions.\n */\nexport const serviceName = 'KycService';\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'getGeoCountry',\n  'fetchDisclaimers',\n  'createSession',\n  'checkKycRequired',\n  'createIronCustomer',\n  'fetchIronDisclaimers',\n  'checkIronKycRequired',\n  'submitConsents',\n  'fetchKycStatus',\n  'getWrappingKey',\n  'fetchJwks',\n  'createUkycSession',\n  'createJourney',\n  'getSessionStatus',\n] as const;\n\n/**\n * Invalidates cached queries serviced by {@link KycService}.\n */\nexport type KycServiceInvalidateQueriesAction =\n  DataServiceInvalidateQueriesAction<typeof serviceName>;\n\n/**\n * Actions that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceActions =\n  | KycServiceMethodActions\n  | KycServiceInvalidateQueriesAction;\n\n/**\n * Actions from other messengers that {@link KycService} calls.\n */\ntype AllowedActions =\n  | AuthenticationControllerGetBearerTokenAction\n  | GeolocationControllerGetGeolocationAction;\n\n/**\n * Published when {@link KycService}'s cache is updated.\n */\nexport type KycServiceCacheUpdatedEvent = DataServiceCacheUpdatedEvent<\n  typeof serviceName\n>;\n\n/**\n * Published when a single key within {@link KycService}'s cache is updated.\n */\nexport type KycServiceGranularCacheUpdatedEvent =\n  DataServiceGranularCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Events that {@link KycService} exposes to other consumers.\n */\nexport type KycServiceEvents =\n  | KycServiceCacheUpdatedEvent\n  | KycServiceGranularCacheUpdatedEvent;\n\n/**\n * Events from other messengers that {@link KycService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger restricted to actions and events accessed by\n * {@link KycService}.\n */\nexport type KycServiceMessenger = Messenger<\n  typeof serviceName,\n  KycServiceActions | AllowedActions,\n  KycServiceEvents | AllowedEvents\n>;\n\n/**\n * Options for constructing a {@link KycService}.\n */\nexport type KycServiceOptions = {\n  messenger: KycServiceMessenger;\n  fetch: typeof fetch;\n  /**\n   * Mandatory value that sets the base url to KYC api\n   */\n  baseUrl: string;\n  /**\n   * Base URL of the Fractal encryption service, from which the JWKS used to\n   * verify the `jwtChain` returned by {@link KycService.getWrappingKey} is\n   * fetched. Required to run the wrapping-key exchange in\n   * {@link KycService.fetchJwks}.\n   */\n  fractalEncryptionBaseUrl?: string;\n  /**\n   * Shared configuration applied to all queries exposed by the service (e.g. a\n   * default `staleTime`/`cacheTime`). Each data service gets its own\n   * `QueryClient`.\n   */\n  queryClientConfig?: QueryClientConfig;\n  policyOptions?: CreateServicePolicyOptions;\n};\n\n// === API RESPONSE SCHEMAS ===\n\nconst DisclaimerStruct = type({\n  id: string(),\n  display_name: string(),\n  url: string(),\n});\nconst DisclaimersResponseStruct = array(DisclaimerStruct);\n\nconst CreateSessionResponseStruct = type({ sessionToken: string() });\n\n// The live KYC API returns the flag under `required`; the service normalizes\n// this to `kycRequired` for consumers (see `checkKycRequired`).\nconst KycRequiredResponseStruct = type({ required: boolean() });\n\n// The session server's X25519 public key, in JWK-like form, returned by\n// `/wrapping-key`. `x` is the base64url public key used to wrap the user key.\nconst SessionServerPublicKeyStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n});\n\nconst WrappingKeyResponseStruct = type({\n  id: string(),\n  jwtChain: string(),\n  sessionServerPublicKey: SessionServerPublicKeyStruct,\n});\nexport type WrappingKeyResponse = Infer<typeof WrappingKeyResponseStruct>;\n\n// A single Ed25519 (OKP) JWK. `type` (not `object`) keeps optional/extra JWK\n// fields (`use`, `alg`) from failing validation.\nconst JwkStruct = type({\n  kty: string(),\n  crv: string(),\n  x: string(),\n  kid: string(),\n});\nconst JwksResponseStruct = type({ keys: array(JwkStruct) });\nexport type JwksResponse = Infer<typeof JwksResponseStruct>;\n\nconst UkycSessionResponseStruct = type({\n  sessionId: string(),\n  // The relay-side KYC decision (e.g. `approved`) and the vendor-side final\n  // status (e.g. `pending`) at session-creation time. Present when the applicant\n  // already has a session in flight; absent for a brand-new session.\n  kycStatus: optional(string()),\n  finalStatus: optional(string()),\n});\nexport type UkycSessionResponse = Infer<typeof UkycSessionResponseStruct>;\n\nconst ApplicantAccessTokenResponseStruct = type({\n  status: string(),\n  applicantAccessToken: string(),\n});\nexport type ApplicantAccessTokenResponse = Infer<\n  typeof ApplicantAccessTokenResponseStruct\n>;\n\nconst SessionStatusResponseStruct = type({\n  finalStatus: string(),\n  statusMessage: optional(string()),\n  externalUserId: string(),\n  kycStatus: string(),\n  vendor: string(),\n  vendorStatus: string(),\n});\n\n// Iron customer subset — `type` (not `object`) keeps extra Iron fields from\n// failing validation while still requiring the fields the controller needs.\nconst IronCustomerResponseStruct = type({\n  id: string(),\n  email: string(),\n  status: string(),\n});\nexport type IronCustomerResponse = Infer<typeof IronCustomerResponseStruct>;\n\nconst KYC_USER_STATUSES = [\n  'not-started',\n  'pending',\n  'need-more-information',\n  'terminal-failure',\n  'completed',\n] as const;\n\nconst KycUserStatusResponseStruct = type({\n  status: enums([...KYC_USER_STATUSES]),\n  sumsubSessionId: optional(string()),\n  errorCode: optional(string()),\n});\n\n// === PARAM TYPES ===\n\nexport type CreateSessionParams = {\n  email: string;\n  termsAcceptedAt: string;\n  disclaimerIds: string[];\n};\n\nexport type CheckKycRequiredParams = {\n  accessToken: string;\n  country: string;\n  capabilities?: { product: string }[];\n};\n\nexport type CreateIronCustomerParams = {\n  email: string;\n};\n\nexport type SubmitConsentsParams = {\n  ironDisclaimerIds: string[];\n  sumsubTncSigned: boolean;\n  idosTncSigned: boolean;\n  kycLevel?: 'standard';\n};\n\nexport type GetWrappingKeyParams = {\n  sessionClientPublicKey: string;\n};\n\n/**\n * The wrapped `data_encryption_key` sent to the UKYC backend when creating a\n * session. `encryptedKey` and `nonce` are produced by `wrapEncryptionKey`;\n * `sessionId` is the wrapping key id returned by `getWrappingKey`.\n */\nexport type WrappedEncryptionKey = {\n  sessionId: string;\n  encryptedKey: string;\n  nonce: string;\n};\n\nexport type CreateUkycSessionParams = {\n  jwtToken: string;\n  /**\n   * Identity vendor for the UKYC session. Defaults to `moonpay` for the\n   * existing Check/Auth flow. Pass `iron` for the Money/VBA path (no MoonPay\n   * metadata required).\n   */\n  vendorId?: KycVendor;\n  /**\n   * Vendor-specific metadata. Required for MoonPay (`moonPayAccessToken` /\n   * `moonPayUserId`); optional / omitted for Iron.\n   */\n  vendorMetadata?: Record<string, unknown>;\n  wrappedEncryptionKey: WrappedEncryptionKey;\n  /**\n   * The client-signed `ukyc_capability_token` (envelope: payload + Ed25519\n   * signature) authorizing later storage access for this session. It is minted\n   * by the client with `read`-only scope — see the UKYC storage-and-auth spec\n   * for how it is formed. Only the client holds the signing key, so only the\n   * client can mint it. The envelope is base64url-encoded into a compact string\n   * before it is sent to the backend.\n   */\n  ukycCapabilityToken: UkycStorageAccessToken;\n};\n\nexport type GetSessionStatusParams = {\n  sessionId: string;\n};\n\n// === SERVICE DEFINITION ===\n\n/**\n * `KycService` communicates with the Universal KYC (UKYC) backend to drive the\n * identity + document-verification flow. It is stateless and platform-agnostic:\n * HTTP is performed through an injected `fetch`, and the auth bearer token and\n * geolocation come from other controllers via the messenger.\n *\n * It extends {@link BaseDataService}, so every request is routed through\n * `fetchQuery`: it is wrapped in the shared service policy (retries, circuit\n * breaker) and its result is exposed via the service's `QueryClient`. Read-only\n * endpoints (`fetchDisclaimers`, `fetchJwks`) are cached with a `staleTime`;\n * the session-creating and status-polling endpoints opt out of caching\n * (`staleTime`/`cacheTime` of `0`) so they never serve a stale result.\n */\nexport class KycService extends BaseDataService<\n  typeof serviceName,\n  KycServiceMessenger\n> {\n  readonly #fetch: typeof fetch;\n\n  readonly #baseUrl: string;\n\n  readonly #fractalEncryptionBaseUrl: string;\n\n  /**\n   * Constructs a new KycService.\n   *\n   * @param options - The constructor options.\n   * @param options.messenger - The messenger suited for this service.\n   * @param options.fetch - A function used to make HTTP requests.\n   * @param options.baseUrl - Base URL of the KYC API\n   * @param options.fractalEncryptionBaseUrl - Base URL of the Fractal\n   * encryption service, from which the JWKS used to verify the wrapping-key\n   * `jwtChain` is fetched.\n   * @param options.queryClientConfig - Shared configuration for all queries\n   * exposed by the service.\n   * @param options.policyOptions - Options for the request service policy.\n   */\n  constructor({\n    messenger,\n    fetch: fetchFunction,\n    baseUrl,\n    fractalEncryptionBaseUrl,\n    queryClientConfig = {},\n    policyOptions = {},\n  }: KycServiceOptions) {\n    super({\n      name: serviceName,\n      messenger,\n      queryClientConfig,\n      policyOptions,\n    });\n    this.#fetch = fetchFunction;\n    if (!baseUrl) {\n      throw new Error('KycService: baseUrl is required');\n    }\n    this.#baseUrl = baseUrl;\n    this.#fractalEncryptionBaseUrl = fractalEncryptionBaseUrl ?? '';\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Resolves the customer's country from the geolocation source and converts it\n   * to an ISO 3166-1 alpha-3 code.\n   *\n   * @returns The alpha-3 country code.\n   * @throws If the country cannot be determined or mapped.\n   */\n  async getGeoCountry(): Promise<string> {\n    const location = await this.messenger.call(\n      'GeolocationController:getGeolocation',\n    );\n    // Guard nullish/empty geolocation with the documented domain error rather\n    // than letting `assert(location, string())` surface a superstruct\n    // assertion error (which would change how the failure reads in\n    // `disclaimersError`).\n    const alpha2 =\n      typeof location === 'string' ? location.split('-')[0].toUpperCase() : '';\n    if (!alpha2 || alpha2 === 'UNKNOWN') {\n      throw new Error(\n        `Unable to determine country from geolocation (got \"${String(\n          location,\n        )}\").`,\n      );\n    }\n    const alpha3 = alpha2ToAlpha3(alpha2);\n    if (!alpha3) {\n      throw new Error(\n        `Unable to map country code \"${alpha2}\" to an ISO 3166-1 alpha-3 code.`,\n      );\n    }\n    return alpha3;\n  }\n\n  /**\n   * Fetches the disclaimers the customer must accept before a session is\n   * created.\n   *\n   * @param params - The parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchDisclaimers({\n    country,\n  }: {\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL('/vendors/moonpay/disclaimers', this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchDisclaimers`, country],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      staleTime: inMilliseconds(5, Duration.Minute),\n    });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Creates a vendor session via the UKYC backend.\n   *\n   * @param params - The session parameters.\n   * @returns The created session token.\n   */\n  async createSession(\n    params: CreateSessionParams,\n  ): Promise<Infer<typeof CreateSessionResponseStruct>> {\n    const url = new URL('/vendors/moonpay/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createSession`,\n        params.email,\n        params.termsAcceptedAt,\n        params.disclaimerIds,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify(params),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      CreateSessionResponseStruct,\n      'sessions',\n    );\n  }\n\n  /**\n   * Checks whether KYC is required for the given access token, country, and\n   * capabilities.\n   *\n   * @param params - The check parameters.\n   * @returns Whether KYC is required.\n   */\n  async checkKycRequired(\n    params: CheckKycRequiredParams,\n  ): Promise<{ kycRequired: boolean }> {\n    const url = new URL('/vendors/moonpay/kyc-required', this.#baseUrl);\n    const capabilities = params.capabilities ?? [{ product: 'ramps' }];\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:checkKycRequired`,\n        params.accessToken,\n        params.country,\n        capabilities,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            accessToken: params.accessToken,\n            country: params.country,\n            capabilities,\n          }),\n        }),\n      // The requirement can change server-side, so always re-check.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Creates (or resumes) an Iron empty-shell customer for the authenticated\n   * canonical user. Must run before showing Iron T&C so the customer exists in\n   * `SigningsRequired` and resume logic can key off Iron status.\n   *\n   * @param params - The parameters.\n   * @param params.email - Email associated with the Iron customer.\n   * @returns The Iron customer record (subset validated for controller use).\n   */\n  async createIronCustomer(\n    params: CreateIronCustomerParams,\n  ): Promise<IronCustomerResponse> {\n    const url = new URL('/vendors/iron/customers', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createIronCustomer`, params.email],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({ email: params.email }),\n        }),\n      // Customer creation/resume must never serve a stale/cached result.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      IronCustomerResponseStruct,\n      'iron customers',\n    );\n  }\n\n  /**\n   * Fetches Iron disclaimers / terms the customer must accept before consents\n   * and the SumSub sub-flow.\n   *\n   * @param params - The parameters.\n   * @param params.country - ISO 3166-1 alpha-3 country code.\n   * @returns The disclaimers.\n   */\n  async fetchIronDisclaimers({\n    country,\n  }: {\n    country: string;\n  }): Promise<KycDisclaimer[]> {\n    const url = new URL('/vendors/iron/disclaimers', this.#baseUrl);\n    url.searchParams.set('country', country);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchIronDisclaimers`, country],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      staleTime: inMilliseconds(5, Duration.Minute),\n    });\n    return this.#validateResponse(\n      data,\n      DisclaimersResponseStruct,\n      'iron disclaimers',\n    ) as KycDisclaimer[];\n  }\n\n  /**\n   * Checks whether Iron still requires KYC for the authenticated canonical\n   * user. Unlike the MoonPay variant, this does not take an access token.\n   *\n   * @returns Whether KYC is required.\n   */\n  async checkIronKycRequired(): Promise<{ kycRequired: boolean }> {\n    const url = new URL('/vendors/iron/kyc-required', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:checkIronKycRequired`],\n      queryFn: async () =>\n        this.#requestJson(url, { method: 'POST', body: '{}' }),\n      // The requirement can change server-side, so always re-check.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    const { required } = this.#validateResponse(\n      data,\n      KycRequiredResponseStruct,\n      'iron kyc-required',\n    );\n    return { kycRequired: required };\n  }\n\n  /**\n   * Posts T&C1 (Iron signings) and T&C2 (Sumsub + idOS) consents for the\n   * authenticated user. The API responds with 204 No Content on success.\n   *\n   * @param params - The consent parameters.\n   */\n  async submitConsents(params: SubmitConsentsParams): Promise<void> {\n    const url = new URL('/consents', this.#baseUrl);\n    await this.fetchQuery({\n      queryKey: [\n        `${this.name}:submitConsents`,\n        params.ironDisclaimerIds,\n        params.sumsubTncSigned,\n        params.idosTncSigned,\n        params.kycLevel ?? 'standard',\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            ironDisclaimerIds: params.ironDisclaimerIds,\n            sumsubTncSigned: params.sumsubTncSigned,\n            idosTncSigned: params.idosTncSigned,\n            kycLevel: params.kycLevel ?? 'standard',\n          }),\n        }),\n      staleTime: 0,\n      cacheTime: 0,\n    });\n  }\n\n  /**\n   * Fetches the user-keyed simplified KYC status used by Money toast / banner\n   * surfaces (`GET /kyc/status`).\n   *\n   * @returns The simplified status payload.\n   */\n  async fetchKycStatus(): Promise<KycUserStatusResponse> {\n    const url = new URL('/kyc/status', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchKycStatus`],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for toast flips, so it must always be fresh.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      KycUserStatusResponseStruct,\n      'kyc status',\n    );\n  }\n\n  /**\n   * Requests a per-session wrapping key from the UKYC backend.\n   *\n   * The client sends its ephemeral X25519 public key; the backend responds with\n   * its session public key (`sessionServerPublicKey`) and a `jwtChain` that\n   * attests it. The caller must verify `jwtChain` against the Fractal JWKS\n   * (see {@link KycService.fetchJwks}) before trusting the key to wrap the\n   * `data_encryption_key`.\n   *\n   * @param params - The parameters.\n   * @param params.sessionClientPublicKey - Our ephemeral X25519 public key\n   * (base64url).\n   * @returns The wrapping key id, `jwtChain`, and session server public key.\n   */\n  async getWrappingKey(\n    params: GetWrappingKeyParams,\n  ): Promise<WrappingKeyResponse> {\n    const url = new URL('/wrapping-key', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getWrappingKey`, params.sessionClientPublicKey],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            sessionClientPublicKey: params.sessionClientPublicKey,\n          }),\n        }),\n      // A per-session key exchange must always run fresh.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      WrappingKeyResponseStruct,\n      'wrapping-key',\n    );\n  }\n\n  /**\n   * Fetches the Fractal encryption service JWKS used to verify the `jwtChain`\n   * returned by {@link KycService.getWrappingKey}.\n   *\n   * This is an unauthenticated request to a well-known path on the Fractal\n   * host, distinct from the UKYC base URL.\n   *\n   * @returns The JWKS keys.\n   */\n  async fetchJwks(): Promise<JwksResponse> {\n    if (!this.#fractalEncryptionBaseUrl) {\n      throw new Error(\n        'KycService: fractalEncryptionBaseUrl is not configured; cannot fetch JWKS to verify the wrapping key.',\n      );\n    }\n    const url = new URL(UKYC_JWKS_PATH, this.#fractalEncryptionBaseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:fetchJwks`, this.#fractalEncryptionBaseUrl],\n      queryFn: async () =>\n        this.#requestJson(url, { method: 'GET' }, { authenticated: false }),\n      staleTime: inMilliseconds(1, Duration.Hour),\n    });\n    return this.#validateResponse(data, JwksResponseStruct, 'JWKS');\n  }\n\n  /**\n   * Creates a UKYC session for the SumSub document-verification sub-flow,\n   * handing over the wrapped `data_encryption_key` and the client-signed,\n   * read-only `ukyc_capability_token` that authorizes later storage access for\n   * the session.\n   *\n   * @param params - The session parameters.\n   * @returns The UKYC session identifiers.\n   */\n  async createUkycSession(\n    params: CreateUkycSessionParams,\n  ): Promise<UkycSessionResponse> {\n    const url = new URL('/sessions', this.#baseUrl);\n    const data = await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createUkycSession`,\n        params.wrappedEncryptionKey.sessionId,\n      ],\n      queryFn: async () =>\n        this.#requestJson(url, {\n          method: 'POST',\n          body: JSON.stringify({\n            vendorId: params.vendorId ?? 'moonpay',\n            vendorUserId: 'mockedId',\n            jwtToken: params.jwtToken,\n            vendorMetadata: params.vendorMetadata ?? {},\n            wrappedEncryptionKey: params.wrappedEncryptionKey,\n            ukycCapabilityToken: encodeStorageAccessTokenForHeader(\n              params.ukycCapabilityToken,\n            ),\n          }),\n        }),\n      // A session-creating mutation must never serve a stale/cached result.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      UkycSessionResponseStruct,\n      'UKYC sessions',\n    );\n  }\n\n  /**\n   * Creates (or refreshes) the SumSub verification journey for a UKYC session,\n   * returning the applicant access token used to launch the SDK.\n   *\n   * @param sessionId - The UKYC session id from `createUkycSession`.\n   * @returns The applicant access token and status.\n   */\n  async createJourney(\n    sessionId: string,\n  ): Promise<ApplicantAccessTokenResponse> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(sessionId)}/journey`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:createJourney`, sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'POST' }),\n      // Journeys are (re)created on demand; do not reuse a cached token.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      ApplicantAccessTokenResponseStruct,\n      'journey',\n    );\n  }\n\n  /**\n   * Fetches the current status of a UKYC session. Polled after the SumSub SDK\n   * completes to determine the final verification decision.\n   *\n   * @param params - The parameters.\n   * @param params.sessionId - The UKYC session id.\n   * @returns The session status.\n   */\n  async getSessionStatus(\n    params: GetSessionStatusParams,\n  ): Promise<KycSessionStatus> {\n    const url = new URL(\n      `/sessions/${encodeURIComponent(params.sessionId)}/status`,\n      this.#baseUrl,\n    );\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getSessionStatus`, params.sessionId],\n      queryFn: async () => this.#requestJson(url, { method: 'GET' }),\n      // Status is polled for a terminal decision, so it must always be fresh.\n      staleTime: 0,\n      cacheTime: 0,\n    });\n    return this.#validateResponse(\n      data,\n      SessionStatusResponseStruct,\n      'session status',\n    );\n  }\n\n  /**\n   * Validates a parsed API response against a superstruct schema, throwing a\n   * descriptive error when the response does not match.\n   *\n   * Unlike a bare `Struct.is` check, this surfaces exactly which field was\n   * missing or had the wrong type, which is essential for diagnosing shape\n   * mismatches between the client and the live API.\n   *\n   * @param data - The parsed response body.\n   * @param struct - The superstruct schema the body is expected to satisfy.\n   * @param apiName - A human-readable name of the API, used in the error message.\n   * @returns The validated, typed response.\n   * @throws If `data` does not match `struct`.\n   */\n  #validateResponse<Type, Schema>(\n    data: unknown,\n    struct: Struct<Type, Schema>,\n    apiName: string,\n  ): Type {\n    try {\n      assert(data, struct);\n      return data;\n    } catch (error) {\n      const detail =\n        error instanceof StructError\n          ? `${error.message} (received: ${JSON.stringify(data)})`\n          : // `assert` only ever throws `StructError` for the plain structs used\n            // here, so this is a defensive fallback that is not exercised.\n            /* istanbul ignore next */\n            String(error);\n      throw new Error(\n        `Malformed response received from ${apiName} API: ${detail}`,\n      );\n    }\n  }\n\n  /**\n   * Gets the authenticated wallet bearer token.\n   *\n   * @returns The bearer token.\n   */\n  async #getBearerToken(): Promise<string> {\n    const bearerToken = await this.messenger.call(\n      'AuthenticationController:getBearerToken',\n    );\n    assert(bearerToken, string());\n    if (!bearerToken) {\n      throw new Error(\n        'Unable to obtain an authentication bearer token - is the wallet signed in?',\n      );\n    }\n    return bearerToken;\n  }\n\n  /**\n   * Performs a single JSON request.\n   *\n   * This is meant to be used as the `queryFn` for {@link fetchQuery}, which\n   * wraps it in the shared service policy (retries, circuit breaker). Requests\n   * are authenticated with the wallet bearer token by default; pass\n   * `{ authenticated: false }` for calls to services that do not expect it\n   * (e.g. the Fractal JWKS endpoint).\n   *\n   * @param url - The request URL.\n   * @param init - The request init (method, body).\n   * @param options - Request options.\n   * @param options.authenticated - Whether to attach the bearer token. Defaults\n   * to `true`.\n   * @returns The parsed JSON response.\n   */\n  async #requestJson(\n    url: URL,\n    init: RequestInit,\n    options: { authenticated?: boolean } = {},\n  ): Promise<Json> {\n    const { authenticated = true } = options;\n\n    const headers: Record<string, string> = {};\n\n    // Only advertise a JSON body when one is actually sent; bodyless requests\n    // (e.g. `createJourney`) must not carry a `Content-Type`.\n    if (init.body !== undefined && init.body !== null) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    if (authenticated) {\n      headers.Authorization = `Bearer ${await this.#getBearerToken()}`;\n    }\n\n    const response = await this.#fetch(url.toString(), {\n      ...init,\n      headers,\n    });\n    if (!response.ok) {\n      let detail = '';\n      try {\n        const errorBody: unknown = await response.json();\n        if (errorBody && typeof errorBody === 'object') {\n          const record = errorBody as Record<string, unknown>;\n          if (typeof record.message === 'string') {\n            detail = record.message;\n          } else if (typeof record.error === 'string') {\n            detail = record.error;\n          }\n        }\n      } catch {\n        // Ignore body parse failures; status alone is still useful.\n      }\n      throw new HttpError(\n        response.status,\n        `Fetching '${url.toString()}' failed with status '${response.status}'${\n          detail ? `: ${detail}` : ''\n        }`,\n      );\n    }\n\n    // Consent (and similar) endpoints return 204 No Content.\n    if (response.status === 204) {\n      return null;\n    }\n\n    return (await response.json()) as Json;\n  }\n}\n"]}

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,wDAI4B;AAH1B,iHAAA,aAAa,OAAA;AACb,gIAAA,4BAA4B,OAAA;AAC5B,kHAAA,cAAc,OAAA;AA2BhB,kDAA0D;AAAjD,2GAAA,UAAU,OAAA;AAAE,4GAAA,WAAW,OAAA;AAgChC,gDAIwB;AAHtB,6HAAA,6BAA6B,OAAA;AAC7B,8GAAA,cAAc,OAAA;AACd,+GAAA,eAAe,OAAA;AAGjB,sDAAqE;AAA5D,iHAAA,cAAc,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AACzC,0CAAkE;AAAzD,+GAAA,kBAAkB,OAAA;AAAE,4GAAA,eAAe,OAAA;AAmB5C,iFAAiF;AACjF,gEAAgE;AAChE,qDAM6B;AAL3B,2HAAA,2BAA2B,OAAA;AAC3B,kHAAA,kBAAkB,OAAA;AAClB,kIAAA,kCAAkC,OAAA;AAClC,mIAAA,mCAAmC,OAAA;AACnC,iIAAA,iCAAiC,OAAA;AAEnC,2EAGwC;AAFtC,+HAAA,oBAAoB,OAAA;AACpB,+HAAA,oBAAoB,OAAA;AAMtB,uEAGsC;AAFpC,0IAAA,iCAAiC,OAAA;AACjC,+HAAA,sBAAsB,OAAA;AASxB,qDAAwD;AAA/C,iHAAA,iBAAiB,OAAA","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  controllerName,\n} from './KycController.js';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n} from './KycController.js';\nexport type {\n  KycControllerAcceptTermsAndStartSessionAction,\n  KycControllerBuildAuthFrameUrlAction,\n  KycControllerBuildCheckFrameUrlAction,\n  KycControllerBuildResetFrameUrlAction,\n  KycControllerCheckKycRequiredAction,\n  KycControllerClearSavedTermsAction,\n  KycControllerGetKycStatusAction,\n  KycControllerGetSessionStatusAction,\n  KycControllerHandleFrameMessageAction,\n  KycControllerInitializeAction,\n  KycControllerLoadDisclaimersAction,\n  KycControllerResetAction,\n  KycControllerStartSumSubAction,\n} from './KycController-method-action-types.js';\n\nexport { KycService, serviceName } from './KycService.js';\nexport type {\n  ApplicantAccessTokenResponse,\n  CheckKycRequiredParams,\n  CreateSessionParams,\n  CreateUkycSessionParams,\n  GetSessionStatusParams,\n  GetWrappingKeyParams,\n  JwksResponse,\n  KycServiceActions,\n  KycServiceCacheUpdatedEvent,\n  KycServiceEvents,\n  KycServiceGranularCacheUpdatedEvent,\n  KycServiceInvalidateQueriesAction,\n  KycServiceMessenger,\n  KycServiceOptions,\n  UkycSessionResponse,\n  WrappedEncryptionKey,\n  WrappingKeyResponse,\n} from './KycService.js';\nexport type {\n  KycServiceCheckKycRequiredAction,\n  KycServiceCreateJourneyAction,\n  KycServiceCreateSessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchDisclaimersAction,\n  KycServiceFetchJwksAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceGetSessionStatusAction,\n  KycServiceGetWrappingKeyAction,\n} from './KycService-method-action-types.js';\n\nexport {\n  selectIsKycRequiredForProduct,\n  selectKycPhase,\n  selectKycSumSub,\n} from './selectors.js';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes.js';\nexport { decryptCredentials, generateKeyPair } from './crypto.js';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto.js';\n\nexport type {\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSessionStatus,\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n  KycVendor,\n} from './types.js';\n\n// UKYC storage-access-token utilities. Exported so a signed capability token can\n// be minted for testing UKYC Storage (see `mintUkycTestToken`).\nexport {\n  UKYC_CAPABILITY_AUTH_SCHEME,\n  UKYC_KWIL_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCES,\n  UKYC_STORAGE_ACCESS_TOKEN_VERSION,\n} from './ukyc/constants.js';\nexport {\n  deriveClientMaterial,\n  encodeClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport type {\n  EncodedUkycClientMaterial,\n  UkycClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport {\n  encodeStorageAccessTokenForHeader,\n  signStorageAccessToken,\n} from './ukyc/storageAccessToken.js';\nexport type {\n  SignStorageAccessTokenParams,\n  UkycStorageAccessToken,\n  UkycStorageAccessTokenPayload,\n  UkycStorageOperation,\n  UkycTokenPresenter,\n} from './ukyc/storageAccessToken.js';\nexport { mintUkycTestToken } from './ukyc/testToken.js';\nexport type {\n  MintedUkycTestToken,\n  MintUkycTestTokenParams,\n} from './ukyc/testToken.js';\n"]}
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,wDAI4B;AAH1B,iHAAA,aAAa,OAAA;AACb,gIAAA,4BAA4B,OAAA;AAC5B,kHAAA,cAAc,OAAA;AA+BhB,kDAA0D;AAAjD,2GAAA,UAAU,OAAA;AAAE,4GAAA,WAAW,OAAA;AAwChC,gDAIwB;AAHtB,6HAAA,6BAA6B,OAAA;AAC7B,8GAAA,cAAc,OAAA;AACd,+GAAA,eAAe,OAAA;AAGjB,sDAAqE;AAA5D,iHAAA,cAAc,OAAA;AAAE,mHAAA,gBAAgB,OAAA;AACzC,0CAAkE;AAAzD,+GAAA,kBAAkB,OAAA;AAAE,4GAAA,eAAe,OAAA;AAsB5C,iFAAiF;AACjF,gEAAgE;AAChE,qDAM6B;AAL3B,2HAAA,2BAA2B,OAAA;AAC3B,kHAAA,kBAAkB,OAAA;AAClB,kIAAA,kCAAkC,OAAA;AAClC,mIAAA,mCAAmC,OAAA;AACnC,iIAAA,iCAAiC,OAAA;AAEnC,2EAGwC;AAFtC,+HAAA,oBAAoB,OAAA;AACpB,+HAAA,oBAAoB,OAAA;AAMtB,uEAGsC;AAFpC,0IAAA,iCAAiC,OAAA;AACjC,+HAAA,sBAAsB,OAAA;AASxB,qDAAwD;AAA/C,iHAAA,iBAAiB,OAAA","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  controllerName,\n} from './KycController.js';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n  KycControllerStatusChangedEvent,\n} from './KycController.js';\nexport type {\n  KycControllerAcceptTermsAndStartSessionAction,\n  KycControllerBuildAuthFrameUrlAction,\n  KycControllerBuildCheckFrameUrlAction,\n  KycControllerBuildResetFrameUrlAction,\n  KycControllerCheckKycRequiredAction,\n  KycControllerClearSavedTermsAction,\n  KycControllerCreateIronCustomerAction,\n  KycControllerGetCustomerIdentityAction,\n  KycControllerGetKycStatusAction,\n  KycControllerGetSessionStatusAction,\n  KycControllerHandleFrameMessageAction,\n  KycControllerInitializeAction,\n  KycControllerLoadDisclaimersAction,\n  KycControllerRefreshKycStatusAction,\n  KycControllerResetAction,\n  KycControllerStartSumSubAction,\n} from './KycController-method-action-types.js';\n\nexport { KycService, serviceName } from './KycService.js';\nexport type {\n  ApplicantAccessTokenResponse,\n  CheckKycRequiredParams,\n  CreateIronCustomerParams,\n  CreateSessionParams,\n  CreateUkycSessionParams,\n  GetSessionStatusParams,\n  GetWrappingKeyParams,\n  IronCustomerResponse,\n  JwksResponse,\n  KycServiceActions,\n  KycServiceCacheUpdatedEvent,\n  KycServiceEvents,\n  KycServiceGranularCacheUpdatedEvent,\n  KycServiceInvalidateQueriesAction,\n  KycServiceMessenger,\n  KycServiceOptions,\n  SubmitConsentsParams,\n  UkycSessionResponse,\n  WrappedEncryptionKey,\n  WrappingKeyResponse,\n} from './KycService.js';\nexport type {\n  KycServiceCheckIronKycRequiredAction,\n  KycServiceCheckKycRequiredAction,\n  KycServiceCreateIronCustomerAction,\n  KycServiceCreateJourneyAction,\n  KycServiceCreateSessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchDisclaimersAction,\n  KycServiceFetchIronDisclaimersAction,\n  KycServiceFetchJwksAction,\n  KycServiceFetchKycStatusAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceGetSessionStatusAction,\n  KycServiceGetWrappingKeyAction,\n  KycServiceSubmitConsentsAction,\n} from './KycService-method-action-types.js';\n\nexport {\n  selectIsKycRequiredForProduct,\n  selectKycPhase,\n  selectKycSumSub,\n} from './selectors.js';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes.js';\nexport { decryptCredentials, generateKeyPair } from './crypto.js';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto.js';\n\nexport type {\n  KycCustomerIdentity,\n  KycDisclaimer,\n  KycPhase,\n  KycProduct,\n  KycSessionStatus,\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubStatus,\n  KycUserStatus,\n  KycUserStatusResponse,\n  KycVendor,\n} from './types.js';\n\n// UKYC storage-access-token utilities. Exported so a signed capability token can\n// be minted for testing UKYC Storage (see `mintUkycTestToken`).\nexport {\n  UKYC_CAPABILITY_AUTH_SCHEME,\n  UKYC_KWIL_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCES,\n  UKYC_STORAGE_ACCESS_TOKEN_VERSION,\n} from './ukyc/constants.js';\nexport {\n  deriveClientMaterial,\n  encodeClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport type {\n  EncodedUkycClientMaterial,\n  UkycClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport {\n  encodeStorageAccessTokenForHeader,\n  signStorageAccessToken,\n} from './ukyc/storageAccessToken.js';\nexport type {\n  SignStorageAccessTokenParams,\n  UkycStorageAccessToken,\n  UkycStorageAccessTokenPayload,\n  UkycStorageOperation,\n  UkycTokenPresenter,\n} from './ukyc/storageAccessToken.js';\nexport { mintUkycTestToken } from './ukyc/testToken.js';\nexport type {\n  MintedUkycTestToken,\n  MintUkycTestTokenParams,\n} from './ukyc/testToken.js';\n"]}

package/dist/index.d.cts

@@ -1,14 +1,14 @@
 export { KycController, getDefaultKycControllerState, controllerName, } from "./KycController.cjs";
-export type { KycControllerActions, KycControllerEvents, KycControllerGetStateAction, KycControllerMessenger, KycControllerOptions, KycControllerState, KycControllerStateChangeEvent, } from "./KycController.cjs";
-export type { KycControllerAcceptTermsAndStartSessionAction, KycControllerBuildAuthFrameUrlAction, KycControllerBuildCheckFrameUrlAction, KycControllerBuildResetFrameUrlAction, KycControllerCheckKycRequiredAction, KycControllerClearSavedTermsAction, KycControllerGetKycStatusAction, KycControllerGetSessionStatusAction, KycControllerHandleFrameMessageAction, KycControllerInitializeAction, KycControllerLoadDisclaimersAction, KycControllerResetAction, KycControllerStartSumSubAction, } from "./KycController-method-action-types.cjs";
+export type { KycControllerActions, KycControllerEvents, KycControllerGetStateAction, KycControllerMessenger, KycControllerOptions, KycControllerState, KycControllerStateChangeEvent, KycControllerStatusChangedEvent, } from "./KycController.cjs";
+export type { KycControllerAcceptTermsAndStartSessionAction, KycControllerBuildAuthFrameUrlAction, KycControllerBuildCheckFrameUrlAction, KycControllerBuildResetFrameUrlAction, KycControllerCheckKycRequiredAction, KycControllerClearSavedTermsAction, KycControllerCreateIronCustomerAction, KycControllerGetCustomerIdentityAction, KycControllerGetKycStatusAction, KycControllerGetSessionStatusAction, KycControllerHandleFrameMessageAction, KycControllerInitializeAction, KycControllerLoadDisclaimersAction, KycControllerRefreshKycStatusAction, KycControllerResetAction, KycControllerStartSumSubAction, } from "./KycController-method-action-types.cjs";
 export { KycService, serviceName } from "./KycService.cjs";
-export type { ApplicantAccessTokenResponse, CheckKycRequiredParams, CreateSessionParams, CreateUkycSessionParams, GetSessionStatusParams, GetWrappingKeyParams, JwksResponse, KycServiceActions, KycServiceCacheUpdatedEvent, KycServiceEvents, KycServiceGranularCacheUpdatedEvent, KycServiceInvalidateQueriesAction, KycServiceMessenger, KycServiceOptions, UkycSessionResponse, WrappedEncryptionKey, WrappingKeyResponse, } from "./KycService.cjs";
-export type { KycServiceCheckKycRequiredAction, KycServiceCreateJourneyAction, KycServiceCreateSessionAction, KycServiceCreateUkycSessionAction, KycServiceFetchDisclaimersAction, KycServiceFetchJwksAction, KycServiceGetGeoCountryAction, KycServiceGetSessionStatusAction, KycServiceGetWrappingKeyAction, } from "./KycService-method-action-types.cjs";
+export type { ApplicantAccessTokenResponse, CheckKycRequiredParams, CreateIronCustomerParams, CreateSessionParams, CreateUkycSessionParams, GetSessionStatusParams, GetWrappingKeyParams, IronCustomerResponse, JwksResponse, KycServiceActions, KycServiceCacheUpdatedEvent, KycServiceEvents, KycServiceGranularCacheUpdatedEvent, KycServiceInvalidateQueriesAction, KycServiceMessenger, KycServiceOptions, SubmitConsentsParams, UkycSessionResponse, WrappedEncryptionKey, WrappingKeyResponse, } from "./KycService.cjs";
+export type { KycServiceCheckIronKycRequiredAction, KycServiceCheckKycRequiredAction, KycServiceCreateIronCustomerAction, KycServiceCreateJourneyAction, KycServiceCreateSessionAction, KycServiceCreateUkycSessionAction, KycServiceFetchDisclaimersAction, KycServiceFetchIronDisclaimersAction, KycServiceFetchJwksAction, KycServiceFetchKycStatusAction, KycServiceGetGeoCountryAction, KycServiceGetSessionStatusAction, KycServiceGetWrappingKeyAction, KycServiceSubmitConsentsAction, } from "./KycService-method-action-types.cjs";
 export { selectIsKycRequiredForProduct, selectKycPhase, selectKycSumSub, } from "./selectors.cjs";
 export { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from "./countryCodes.cjs";
 export { decryptCredentials, generateKeyPair } from "./crypto.cjs";
 export type { DecryptedCredentials, DecryptResult, EncryptedCredentialsEnvelope, X25519KeyPair, } from "./crypto.cjs";
-export type { KycDisclaimer, KycPhase, KycProduct, KycSessionStatus, KycSumSubLaunchParams, KycSumSubLauncher, KycSumSubStatus, KycVendor, } from "./types.cjs";
+export type { KycCustomerIdentity, KycDisclaimer, KycPhase, KycProduct, KycSessionStatus, KycSumSubLaunchParams, KycSumSubLauncher, KycSumSubStatus, KycUserStatus, KycUserStatusResponse, KycVendor, } from "./types.cjs";
 export { UKYC_CAPABILITY_AUTH_SCHEME, UKYC_KWIL_AUDIENCE, UKYC_STORAGE_ACCESS_TOKEN_AUDIENCE, UKYC_STORAGE_ACCESS_TOKEN_AUDIENCES, UKYC_STORAGE_ACCESS_TOKEN_VERSION, } from "./ukyc/constants.cjs";
 export { deriveClientMaterial, encodeClientMaterial, } from "./ukyc/deriveClientMaterial.cjs";
 export type { EncodedUkycClientMaterial, UkycClientMaterial, } from "./ukyc/deriveClientMaterial.cjs";