@metamask-previews/kyc-controller 0.10.0-preview-32b6da31c → 0.10.0-preview-eefc6963e

package/CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Removed
+
+- **BREAKING:** Remove `MoonPayFrameHandler`, `MoonPayFrameHandlerOptions`, and `clearMoonPaySession` ([#10850](https://github.com/MetaMask/core/pull/10850))
+  - Clients that embedded MoonPay Check/Auth frames must implement that protocol themselves
+
 ## [0.10.0]
 
 ### Added

package/dist/index.d.ts

@@ -19,6 +19,4 @@ export { encodeStorageAccessTokenForHeader, signStorageAccessToken, } from './uk
 export type { SignStorageAccessTokenParams, UkycStorageAccessToken, UkycStorageAccessTokenPayload, UkycStorageOperation, UkycTokenPresenter, } from './ukyc/storageAccessToken.js';
 export { mintUkycTestToken } from './ukyc/testToken.js';
 export type { MintedUkycTestToken, MintUkycTestTokenParams, } from './ukyc/testToken.js';
-export { clearMoonPaySession, MoonPayFrameHandler, } from './vendors/MoonPayFrameHandler.js';
-export type { MoonPayFrameHandlerOptions } from './vendors/MoonPayFrameHandler.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,wCAAwC,EACxC,sCAAsC,EACtC,0BAA0B,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,6BAA6B,EAC7B,0CAA0C,EAC1C,yCAAyC,EACzC,wCAAwC,EACxC,4CAA4C,EAC5C,iDAAiD,EACjD,gDAAgD,EAChD,qCAAqC,EACrC,2CAA2C,EAC3C,0CAA0C,EAC1C,yCAAyC,EACzC,oCAAoC,EACpC,uCAAuC,EACvC,wBAAwB,EACxB,+BAA+B,EAC/B,4CAA4C,GAC7C,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EACV,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,gBAAgB,EAChB,sCAAsC,EACtC,wCAAwC,EACxC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,mCAAmC,EACnC,iCAAiC,EACjC,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,oCAAoC,EACpC,6BAA6B,EAC7B,oCAAoC,EACpC,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gDAAgD,EAChD,kDAAkD,EAClD,sCAAsC,EACtC,6BAA6B,EAC7B,gCAAgC,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,iCAAiC,EACjC,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,4BAA4B,EAC5B,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,UAAU,EACV,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gCAAgC,EAChC,mCAAmC,EACnC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,4CAA4C,EAC5C,mCAAmC,EACnC,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,kCAAkC,EAClC,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,EAC7B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EACV,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,wCAAwC,EACxC,sCAAsC,EACtC,0BAA0B,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,6BAA6B,EAC7B,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,6BAA6B,EAC7B,0CAA0C,EAC1C,yCAAyC,EACzC,wCAAwC,EACxC,4CAA4C,EAC5C,iDAAiD,EACjD,gDAAgD,EAChD,qCAAqC,EACrC,2CAA2C,EAC3C,0CAA0C,EAC1C,yCAAyC,EACzC,oCAAoC,EACpC,uCAAuC,EACvC,wBAAwB,EACxB,+BAA+B,EAC/B,4CAA4C,GAC7C,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EACV,4BAA4B,EAC5B,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,gBAAgB,EAChB,sCAAsC,EACtC,wCAAwC,EACxC,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,mCAAmC,EACnC,iCAAiC,EACjC,mBAAmB,EACnB,iBAAiB,EACjB,uBAAuB,EACvB,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,oCAAoC,EACpC,6BAA6B,EAC7B,oCAAoC,EACpC,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gDAAgD,EAChD,kDAAkD,EAClD,sCAAsC,EACtC,6BAA6B,EAC7B,gCAAgC,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,iCAAiC,EACjC,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,4BAA4B,EAC5B,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,UAAU,EACV,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,SAAS,EACT,gCAAgC,EAChC,mCAAmC,EACnC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,4CAA4C,EAC5C,mCAAmC,EACnC,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,kCAAkC,EAClC,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,EAC7B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EACV,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -11,5 +11,4 @@ export { UKYC_CAPABILITY_AUTH_SCHEME, UKYC_KWIL_AUDIENCE, UKYC_STORAGE_ACCESS_TO
 export { deriveClientMaterial, encodeClientMaterial, } from './ukyc/deriveClientMaterial.js';
 export { encodeStorageAccessTokenForHeader, signStorageAccessToken, } from './ukyc/storageAccessToken.js';
 export { mintUkycTestToken } from './ukyc/testToken.js';
-export { clearMoonPaySession, MoonPayFrameHandler, } from './vendors/MoonPayFrameHandler.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,wCAAwC,EACxC,sCAAsC,EACtC,0BAA0B,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AA+B5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA6C1D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAQlE,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAkBrE,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,4CAA4C,EAC5C,mCAAmC,EACnC,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AAQpB,iFAAiF;AACjF,gEAAgE;AAChE,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,kCAAkC,EAClC,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAMxD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kCAAkC,CAAC","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  getDefaultKycProviderDisclaimersAccepted,\n  getDefaultKycVendorDisclaimersAccepted,\n  KYC_PROVIDER_FLOW_STATUSES,\n  controllerName,\n} from './KycController.js';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n  FetchSessionDisclaimersParams,\n  KycProviderFlowStatus,\n} from './KycController.js';\nexport type {\n  KycControllerClearStateAction,\n  KycControllerFetchSessionDisclaimersAction,\n  KycControllerFetchVendorDisclaimersAction,\n  KycControllerGetProviderFlowStatusAction,\n  KycControllerGetSessionStatusForVendorAction,\n  KycControllerHasCompletedSessionDisclaimersAction,\n  KycControllerHasCompletedVendorDisclaimersAction,\n  KycControllerLaunchProviderFlowAction,\n  KycControllerRecordSessionDisclaimersAction,\n  KycControllerRecordVendorDisclaimersAction,\n  KycControllerFetchSessionStatusOnceAction,\n  KycControllerReadSessionStatusAction,\n  KycControllerRefreshSessionStatusAction,\n  KycControllerResetAction,\n  KycControllerStartSessionAction,\n  KycControllerStartSessionStatusPollingAction,\n} from './KycController-method-action-types.js';\n\nexport { KycService, serviceName } from './KycService.js';\nexport type {\n  ApplicantAccessTokenResponse,\n  CapabilityAuthorization,\n  CreateVendorCustomerParams,\n  CreateMoonpaySessionParams,\n  CreateUkycSessionParams,\n  EncryptionSchema,\n  FetchSessionDisclaimersByCountryParams,\n  FetchSessionDisclaimersBySessionIdParams,\n  GetSessionStatusParams,\n  ResetWrappingKeysParams,\n  VendorCustomerResponse,\n  JwksResponse,\n  KycServiceActions,\n  KycServiceCacheUpdatedEvent,\n  KycServiceEvents,\n  KycServiceGranularCacheUpdatedEvent,\n  KycServiceInvalidateQueriesAction,\n  KycServiceMessenger,\n  KycServiceOptions,\n  SetAuthorizationsParams,\n  SubmitSessionDisclaimersParams,\n  SubmitVendorDisclaimersParams,\n  UkycSessionResponse,\n} from './KycService.js';\nexport type {\n  KycServiceCreateVendorCustomerAction,\n  KycServiceCreateJourneyAction,\n  KycServiceCreateMoonpaySessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchIdosEnclaveJwksAction,\n  KycServiceFetchIdosRelayJwksAction,\n  KycServiceFetchSessionDisclaimersByCountryAction,\n  KycServiceFetchSessionDisclaimersBySessionIdAction,\n  KycServiceFetchVendorDisclaimersAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceGetSessionStatusAction,\n  KycServiceGetSessionStatusForVendorAction,\n  KycServiceResetWrappingKeysAction,\n  KycServiceSetAuthorizationsAction,\n  KycServiceSubmitSessionDisclaimersAction,\n  KycServiceSubmitVendorDisclaimersAction,\n} from './KycService-method-action-types.js';\n\nexport { selectKycSessionStatus, selectKycVendor } from './selectors.js';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes.js';\nexport { decryptCredentials, generateKeyPair } from './crypto.js';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto.js';\n\nexport { KYC_STATUSES, TERMINAL_SESSION_STATUSES } from './types.js';\nexport type {\n  KycCatalogDocument,\n  KycConsentDocument,\n  KycConsentRecord,\n  KycDisclaimer,\n  KycDisclaimersCatalog,\n  KycPhase,\n  KycProduct,\n  KycProviderDisclaimersAccepted,\n  KycSessionDisclaimers,\n  KycSessionStatus,\n  KycVendor,\n  KycIronVendorDisclaimersAccepted,\n  KycMoonpayVendorDisclaimersAccepted,\n  KycVendorDisclaimersAccepted,\n  KycVendorSigning,\n} from './types.js';\nexport {\n  FINAL_STATUSES_TO_SKIP_AUTH_REFRESH,\n  CAPABILITY_AUTHORIZATION_STATUSES,\n  CAPABILITY_AUTHORIZATION_STATUSES_TO_REFRESH,\n  needsCapabilityAuthorizationRefresh,\n  FINAL_STATUSES_TO_STOP_POLLING,\n} from './types.js';\nexport type {\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubSdkStatus,\n  KycSumSubStatus,\n} from './providers/sumsub.js';\n\n// UKYC storage-access-token utilities. Exported so a signed capability token can\n// be minted for testing UKYC Storage (see `mintUkycTestToken`).\nexport {\n  UKYC_CAPABILITY_AUTH_SCHEME,\n  UKYC_KWIL_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCES,\n  UKYC_STORAGE_ACCESS_TOKEN_VERSION,\n} from './ukyc/constants.js';\nexport {\n  deriveClientMaterial,\n  encodeClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport type {\n  EncodedUkycClientMaterial,\n  UkycClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport {\n  encodeStorageAccessTokenForHeader,\n  signStorageAccessToken,\n} from './ukyc/storageAccessToken.js';\nexport type {\n  SignStorageAccessTokenParams,\n  UkycStorageAccessToken,\n  UkycStorageAccessTokenPayload,\n  UkycStorageOperation,\n  UkycTokenPresenter,\n} from './ukyc/storageAccessToken.js';\nexport { mintUkycTestToken } from './ukyc/testToken.js';\nexport type {\n  MintedUkycTestToken,\n  MintUkycTestTokenParams,\n} from './ukyc/testToken.js';\n\nexport {\n  clearMoonPaySession,\n  MoonPayFrameHandler,\n} from './vendors/MoonPayFrameHandler.js';\nexport type { MoonPayFrameHandlerOptions } from './vendors/MoonPayFrameHandler.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,4BAA4B,EAC5B,wCAAwC,EACxC,sCAAsC,EACtC,0BAA0B,EAC1B,cAAc,GACf,MAAM,oBAAoB,CAAC;AA+B5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AA6C1D,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAQlE,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAkBrE,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,4CAA4C,EAC5C,mCAAmC,EACnC,8BAA8B,GAC/B,MAAM,YAAY,CAAC;AAQpB,iFAAiF;AACjF,gEAAgE;AAChE,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,kCAAkC,EAClC,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,iCAAiC,EACjC,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAQtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC","sourcesContent":["export {\n  KycController,\n  getDefaultKycControllerState,\n  getDefaultKycProviderDisclaimersAccepted,\n  getDefaultKycVendorDisclaimersAccepted,\n  KYC_PROVIDER_FLOW_STATUSES,\n  controllerName,\n} from './KycController.js';\nexport type {\n  KycControllerActions,\n  KycControllerEvents,\n  KycControllerGetStateAction,\n  KycControllerMessenger,\n  KycControllerOptions,\n  KycControllerState,\n  KycControllerStateChangeEvent,\n  FetchSessionDisclaimersParams,\n  KycProviderFlowStatus,\n} from './KycController.js';\nexport type {\n  KycControllerClearStateAction,\n  KycControllerFetchSessionDisclaimersAction,\n  KycControllerFetchVendorDisclaimersAction,\n  KycControllerGetProviderFlowStatusAction,\n  KycControllerGetSessionStatusForVendorAction,\n  KycControllerHasCompletedSessionDisclaimersAction,\n  KycControllerHasCompletedVendorDisclaimersAction,\n  KycControllerLaunchProviderFlowAction,\n  KycControllerRecordSessionDisclaimersAction,\n  KycControllerRecordVendorDisclaimersAction,\n  KycControllerFetchSessionStatusOnceAction,\n  KycControllerReadSessionStatusAction,\n  KycControllerRefreshSessionStatusAction,\n  KycControllerResetAction,\n  KycControllerStartSessionAction,\n  KycControllerStartSessionStatusPollingAction,\n} from './KycController-method-action-types.js';\n\nexport { KycService, serviceName } from './KycService.js';\nexport type {\n  ApplicantAccessTokenResponse,\n  CapabilityAuthorization,\n  CreateVendorCustomerParams,\n  CreateMoonpaySessionParams,\n  CreateUkycSessionParams,\n  EncryptionSchema,\n  FetchSessionDisclaimersByCountryParams,\n  FetchSessionDisclaimersBySessionIdParams,\n  GetSessionStatusParams,\n  ResetWrappingKeysParams,\n  VendorCustomerResponse,\n  JwksResponse,\n  KycServiceActions,\n  KycServiceCacheUpdatedEvent,\n  KycServiceEvents,\n  KycServiceGranularCacheUpdatedEvent,\n  KycServiceInvalidateQueriesAction,\n  KycServiceMessenger,\n  KycServiceOptions,\n  SetAuthorizationsParams,\n  SubmitSessionDisclaimersParams,\n  SubmitVendorDisclaimersParams,\n  UkycSessionResponse,\n} from './KycService.js';\nexport type {\n  KycServiceCreateVendorCustomerAction,\n  KycServiceCreateJourneyAction,\n  KycServiceCreateMoonpaySessionAction,\n  KycServiceCreateUkycSessionAction,\n  KycServiceFetchIdosEnclaveJwksAction,\n  KycServiceFetchIdosRelayJwksAction,\n  KycServiceFetchSessionDisclaimersByCountryAction,\n  KycServiceFetchSessionDisclaimersBySessionIdAction,\n  KycServiceFetchVendorDisclaimersAction,\n  KycServiceGetGeoCountryAction,\n  KycServiceGetSessionStatusAction,\n  KycServiceGetSessionStatusForVendorAction,\n  KycServiceResetWrappingKeysAction,\n  KycServiceSetAuthorizationsAction,\n  KycServiceSubmitSessionDisclaimersAction,\n  KycServiceSubmitVendorDisclaimersAction,\n} from './KycService-method-action-types.js';\n\nexport { selectKycSessionStatus, selectKycVendor } from './selectors.js';\n\nexport { alpha2ToAlpha3, ALPHA2_TO_ALPHA3 } from './countryCodes.js';\nexport { decryptCredentials, generateKeyPair } from './crypto.js';\nexport type {\n  DecryptedCredentials,\n  DecryptResult,\n  EncryptedCredentialsEnvelope,\n  X25519KeyPair,\n} from './crypto.js';\n\nexport { KYC_STATUSES, TERMINAL_SESSION_STATUSES } from './types.js';\nexport type {\n  KycCatalogDocument,\n  KycConsentDocument,\n  KycConsentRecord,\n  KycDisclaimer,\n  KycDisclaimersCatalog,\n  KycPhase,\n  KycProduct,\n  KycProviderDisclaimersAccepted,\n  KycSessionDisclaimers,\n  KycSessionStatus,\n  KycVendor,\n  KycIronVendorDisclaimersAccepted,\n  KycMoonpayVendorDisclaimersAccepted,\n  KycVendorDisclaimersAccepted,\n  KycVendorSigning,\n} from './types.js';\nexport {\n  FINAL_STATUSES_TO_SKIP_AUTH_REFRESH,\n  CAPABILITY_AUTHORIZATION_STATUSES,\n  CAPABILITY_AUTHORIZATION_STATUSES_TO_REFRESH,\n  needsCapabilityAuthorizationRefresh,\n  FINAL_STATUSES_TO_STOP_POLLING,\n} from './types.js';\nexport type {\n  KycSumSubLaunchParams,\n  KycSumSubLauncher,\n  KycSumSubSdkStatus,\n  KycSumSubStatus,\n} from './providers/sumsub.js';\n\n// UKYC storage-access-token utilities. Exported so a signed capability token can\n// be minted for testing UKYC Storage (see `mintUkycTestToken`).\nexport {\n  UKYC_CAPABILITY_AUTH_SCHEME,\n  UKYC_KWIL_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCE,\n  UKYC_STORAGE_ACCESS_TOKEN_AUDIENCES,\n  UKYC_STORAGE_ACCESS_TOKEN_VERSION,\n} from './ukyc/constants.js';\nexport {\n  deriveClientMaterial,\n  encodeClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport type {\n  EncodedUkycClientMaterial,\n  UkycClientMaterial,\n} from './ukyc/deriveClientMaterial.js';\nexport {\n  encodeStorageAccessTokenForHeader,\n  signStorageAccessToken,\n} from './ukyc/storageAccessToken.js';\nexport type {\n  SignStorageAccessTokenParams,\n  UkycStorageAccessToken,\n  UkycStorageAccessTokenPayload,\n  UkycStorageOperation,\n  UkycTokenPresenter,\n} from './ukyc/storageAccessToken.js';\nexport { mintUkycTestToken } from './ukyc/testToken.js';\nexport type {\n  MintedUkycTestToken,\n  MintUkycTestTokenParams,\n} from './ukyc/testToken.js';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/kyc-controller",
-  "version": "0.10.0-preview-32b6da31c",
+  "version": "0.10.0-preview-eefc6963e",
   "description": "Shared KYC / identity verification controller used across MetaMask clients",
   "keywords": [
     "Ethereum",

package/dist/vendors/MoonPayFrameHandler.d.ts

@@ -1,74 +0,0 @@
-import type { KycPhase, KycVendor } from '../types.js';
-type MoonPayFrameState = {
-    activeVendor: KycVendor;
-    moonpayAccessToken: string | null;
-    moonpayCustomerId: string | null;
-    moonpaySessionToken: string | null;
-    phase: KycPhase;
-    statusMessage: string;
-};
-export type MoonPayFrameHandlerOptions = {
-    getState: () => MoonPayFrameState;
-    update: (updater: (state: MoonPayFrameState) => void) => void;
-    fail: (message: string) => void;
-    onAuthenticated: () => Promise<void>;
-    requireTermsReacceptance: () => void;
-};
-/**
- * Owns MoonPay Check/Auth frame state and protocol handling.
- */
-export declare class MoonPayFrameHandler {
-    #private;
-    constructor({ getState, update, fail, onAuthenticated, requireTermsReacceptance, }: MoonPayFrameHandlerOptions);
-    /**
-     * Creates a fresh keypair for a new MoonPay flow.
-     */
-    startFlow(): void;
-    /**
-     * Ensures an in-progress MoonPay flow has a frame keypair.
-     */
-    ensureKeypair(): void;
-    /**
-     * Clears all non-persisted MoonPay frame artifacts.
-     */
-    clear(): void;
-    /**
-     * Clears authentication associated with an earlier MoonPay session.
-     */
-    clearAuthentication(): void;
-    /**
-     * Handles a message posted by a MoonPay Check/Auth frame.
-     *
-     * @param message - The raw message posted by the frame.
-     * @returns An object whose optional `reply` should be posted back.
-     */
-    handleMessage(message: unknown): Promise<{
-        reply?: unknown;
-    }>;
-    /**
-     * Builds the Check-frame URL, or `null` when no session exists yet.
-     *
-     * @returns The Check-frame URL or `null`.
-     */
-    buildCheckFrameUrl(): string | null;
-    /**
-     * Builds the Auth-frame URL, or `null` when no client token is available.
-     *
-     * @returns The Auth-frame URL or `null`.
-     */
-    buildAuthFrameUrl(): string | null;
-    /**
-     * Builds the Reset-frame URL.
-     *
-     * @returns The Reset-frame URL.
-     */
-    buildResetFrameUrl(): string;
-}
-/**
- * Drops persisted-in-memory MoonPay session artifacts from controller state.
- *
- * @param state - The state to mutate.
- */
-export declare function clearMoonPaySession(state: MoonPayFrameState): void;
-export {};
-//# sourceMappingURL=MoonPayFrameHandler.d.ts.map

package/dist/vendors/MoonPayFrameHandler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MoonPayFrameHandler.d.ts","sourceRoot":"","sources":["../../src/vendors/MoonPayFrameHandler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAOvD,KAAK,iBAAiB,GAAG;IACvB,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,QAAQ,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAoBF,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,MAAM,iBAAiB,CAAC;IAClC,MAAM,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,wBAAwB,EAAE,MAAM,IAAI,CAAC;CACtC,CAAC;AAEF;;GAEG;AACH,qBAAa,mBAAmB;;IAiB9B,YAAY,EACV,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,eAAe,EACf,wBAAwB,GACzB,EAAE,0BAA0B,EAM5B;IAED;;OAEG;IACH,SAAS,IAAI,IAAI,CAEhB;IAED;;OAEG;IACH,aAAa,IAAI,IAAI,CAEpB;IAED;;OAEG;IACH,KAAK,IAAI,IAAI,CAGZ;IAED;;OAEG;IACH,mBAAmB,IAAI,IAAI,CAE1B;IAED;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CA2ElE;IAED;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,GAAG,IAAI,CAclC;IAED;;;;OAIG;IACH,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAcjC;IAED;;;;OAIG;IACH,kBAAkB,IAAI,MAAM,CAI3B;CAkDF;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAIlE"}

package/dist/vendors/MoonPayFrameHandler.js

@@ -1,217 +0,0 @@
-import { decryptCredentials, generateKeyPair } from '../crypto.js';
-const FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';
-const CHANNEL_CHECK = 'ch_1';
-const CHANNEL_AUTH = 'ch_2';
-const CHANNEL_RESET = 'ch_reset';
-/**
- * Owns MoonPay Check/Auth frame state and protocol handling.
- */
-export class MoonPayFrameHandler {
-    #getState;
-    #update;
-    #fail;
-    #onAuthenticated;
-    #requireTermsReacceptance;
-    /** MoonPay Check/Auth frame X25519 keypair (never persisted). */
-    #frameKeypair = null;
-    /** Auth-frame client token, kept out of controller state. */
-    #authClientToken = null;
-    constructor({ getState, update, fail, onAuthenticated, requireTermsReacceptance, }) {
-        this.#getState = getState;
-        this.#update = update;
-        this.#fail = fail;
-        this.#onAuthenticated = onAuthenticated;
-        this.#requireTermsReacceptance = requireTermsReacceptance;
-    }
-    /**
-     * Creates a fresh keypair for a new MoonPay flow.
-     */
-    startFlow() {
-        this.#frameKeypair = generateKeyPair();
-    }
-    /**
-     * Ensures an in-progress MoonPay flow has a frame keypair.
-     */
-    ensureKeypair() {
-        this.#frameKeypair ??= generateKeyPair();
-    }
-    /**
-     * Clears all non-persisted MoonPay frame artifacts.
-     */
-    clear() {
-        this.#frameKeypair = null;
-        this.#authClientToken = null;
-    }
-    /**
-     * Clears authentication associated with an earlier MoonPay session.
-     */
-    clearAuthentication() {
-        this.#authClientToken = null;
-    }
-    /**
-     * Handles a message posted by a MoonPay Check/Auth frame.
-     *
-     * @param message - The raw message posted by the frame.
-     * @returns An object whose optional `reply` should be posted back.
-     */
-    async handleMessage(message) {
-        const payload = message;
-        if (!payload) {
-            return {};
-        }
-        if (payload.kind === 'handshake') {
-            const channelId = payload.meta?.channelId;
-            return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };
-        }
-        if (payload.kind !== 'complete') {
-            return {};
-        }
-        const channelId = payload.meta?.channelId;
-        const state = this.#getState();
-        // Only honor a completion for the MoonPay frame the flow is currently
-        // waiting on. This drops stale or duplicate messages after reset, phase
-        // advancement, or a vendor switch so they cannot restore tokens or rewind
-        // the flow. Unlike awaited controller work, external frame messages are
-        // not protected by the controller's generation guard.
-        let expectedPhase = null;
-        if (channelId === CHANNEL_CHECK) {
-            expectedPhase = 'check';
-        }
-        else if (channelId === CHANNEL_AUTH) {
-            expectedPhase = 'auth';
-        }
-        if (!expectedPhase ||
-            state.phase !== expectedPhase ||
-            state.activeVendor !== 'moonpay') {
-            return {};
-        }
-        const status = payload.payload?.status;
-        const credentialsEnvelope = payload.payload?.credentials;
-        const customerId = payload.payload?.customer?.id ?? null;
-        if (customerId) {
-            this.#update((draft) => {
-                draft.moonpayCustomerId = customerId;
-            });
-        }
-        if (!status) {
-            return {};
-        }
-        let accessToken;
-        let clientToken;
-        if (credentialsEnvelope && this.#frameKeypair) {
-            try {
-                const { credentials } = decryptCredentials(credentialsEnvelope, this.#frameKeypair.privateKey);
-                accessToken = credentials.accessToken;
-                clientToken = credentials.clientToken;
-            }
-            catch (error) {
-                this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);
-                return {};
-            }
-        }
-        if (channelId === CHANNEL_CHECK) {
-            await this.#handleCheckOutcome(status, accessToken, clientToken);
-        }
-        else {
-            await this.#handleAuthOutcome(status, accessToken);
-        }
-        return {};
-    }
-    /**
-     * Builds the Check-frame URL, or `null` when no session exists yet.
-     *
-     * @returns The Check-frame URL or `null`.
-     */
-    buildCheckFrameUrl() {
-        const state = this.#getState();
-        if (state.activeVendor !== 'moonpay' ||
-            !state.moonpaySessionToken ||
-            !this.#frameKeypair) {
-            return null;
-        }
-        const url = new URL(`${FRAMES_BASE_URL}/check-connection`);
-        url.searchParams.set('sessionToken', state.moonpaySessionToken);
-        url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);
-        url.searchParams.set('channelId', CHANNEL_CHECK);
-        return url.toString();
-    }
-    /**
-     * Builds the Auth-frame URL, or `null` when no client token is available.
-     *
-     * @returns The Auth-frame URL or `null`.
-     */
-    buildAuthFrameUrl() {
-        const state = this.#getState();
-        if (state.activeVendor !== 'moonpay' ||
-            !this.#authClientToken ||
-            !this.#frameKeypair) {
-            return null;
-        }
-        const url = new URL(`${FRAMES_BASE_URL}/auth`);
-        url.searchParams.set('clientToken', this.#authClientToken);
-        url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);
-        url.searchParams.set('channelId', CHANNEL_AUTH);
-        return url.toString();
-    }
-    /**
-     * Builds the Reset-frame URL.
-     *
-     * @returns The Reset-frame URL.
-     */
-    buildResetFrameUrl() {
-        const url = new URL(`${FRAMES_BASE_URL}/reset`);
-        url.searchParams.set('channelId', CHANNEL_RESET);
-        return url.toString();
-    }
-    async #handleCheckOutcome(status, accessToken, clientToken) {
-        if (status === 'active' && accessToken) {
-            this.#update((state) => {
-                state.moonpayAccessToken = accessToken;
-                state.phase = 'form';
-                state.statusMessage = 'Already authenticated. Review to submit.';
-            });
-            await this.#onAuthenticated();
-            return;
-        }
-        if (status === 'connectionRequired' && clientToken) {
-            this.#authClientToken = clientToken;
-            this.#update((state) => {
-                state.phase = 'auth';
-                state.statusMessage = 'Verify your email via OTP in the Auth frame.';
-            });
-            return;
-        }
-        if (status === 'termsAcceptanceRequired') {
-            this.#requireTermsReacceptance();
-            return;
-        }
-        this.#fail(`Check frame returned status: ${status}`);
-    }
-    async #handleAuthOutcome(status, accessToken) {
-        if (status === 'active' && accessToken) {
-            this.#update((state) => {
-                state.moonpayAccessToken = accessToken;
-                state.phase = 'form';
-                state.statusMessage = 'Authenticated. Review to submit.';
-            });
-            await this.#onAuthenticated();
-            return;
-        }
-        if (status === 'termsAcceptanceRequired') {
-            this.#requireTermsReacceptance();
-            return;
-        }
-        this.#fail(`Auth frame returned status: ${status}`);
-    }
-}
-/**
- * Drops persisted-in-memory MoonPay session artifacts from controller state.
- *
- * @param state - The state to mutate.
- */
-export function clearMoonPaySession(state) {
-    state.moonpayCustomerId = null;
-    state.moonpaySessionToken = null;
-    state.moonpayAccessToken = null;
-}
-//# sourceMappingURL=MoonPayFrameHandler.js.map

package/dist/vendors/MoonPayFrameHandler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MoonPayFrameHandler.js","sourceRoot":"","sources":["../../src/vendors/MoonPayFrameHandler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAInE,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,aAAa,GAAG,UAAU,CAAC;AAqCjC;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACrB,SAAS,CAAyC;IAElD,OAAO,CAAuC;IAE9C,KAAK,CAAqC;IAE1C,gBAAgB,CAAgD;IAEhE,yBAAyB,CAAyD;IAE3F,iEAAiE;IACjE,aAAa,GAAyB,IAAI,CAAC;IAE3C,6DAA6D;IAC7D,gBAAgB,GAAkB,IAAI,CAAC;IAEvC,YAAY,EACV,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,eAAe,EACf,wBAAwB,GACG;QAC3B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,IAAI,CAAC,yBAAyB,GAAG,wBAAwB,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,SAAS;QACP,IAAI,CAAC,aAAa,GAAG,eAAe,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAgB;QAClC,MAAM,OAAO,GAAG,OAAmC,CAAC;QAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;YAC1C,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrE,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE/B,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,wEAAwE;QACxE,sDAAsD;QACtD,IAAI,aAAa,GAAoB,IAAI,CAAC;QAC1C,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,aAAa,GAAG,OAAO,CAAC;QAC1B,CAAC;aAAM,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YACtC,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC;QAED,IACE,CAAC,aAAa;YACd,KAAK,CAAC,KAAK,KAAK,aAAa;YAC7B,KAAK,CAAC,YAAY,KAAK,SAAS,EAChC,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACvC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;QAEzD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,iBAAiB,GAAG,UAAU,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,WAA+B,CAAC;QACpC,IAAI,WAA+B,CAAC;QACpC,IAAI,mBAAmB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,EAAE,WAAW,EAAE,GAAG,kBAAkB,CACxC,mBAAmB,EACnB,IAAI,CAAC,aAAa,CAAC,UAAU,CAC9B,CAAC;gBACF,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;gBACtC,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IACE,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,KAAK,CAAC,mBAAmB;YAC1B,CAAC,IAAI,CAAC,aAAa,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,mBAAmB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IACE,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,IAAI,CAAC,gBAAgB;YACtB,CAAC,IAAI,CAAC,aAAa,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,OAAO,CAAC,CAAC;QAC/C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,eAAe,QAAQ,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,MAAmB,EACnB,WAAoB,EACpB,WAAoB;QAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC;gBACvC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,0CAA0C,CAAC;YACnE,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,oBAAoB,IAAI,WAAW,EAAE,CAAC;YACnD,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,8CAA8C,CAAC;YACvE,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACzC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,MAAmB,EACnB,WAAoB;QAEpB,IAAI,MAAM,KAAK,QAAQ,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrB,KAAK,CAAC,kBAAkB,GAAG,WAAW,CAAC;gBACvC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;gBACrB,KAAK,CAAC,aAAa,GAAG,kCAAkC,CAAC;YAC3D,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;YACzC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC1D,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;AAClC,CAAC","sourcesContent":["import { decryptCredentials, generateKeyPair } from '../crypto.js';\nimport type { EncryptedCredentialsEnvelope, X25519KeyPair } from '../crypto.js';\nimport type { KycPhase, KycVendor } from '../types.js';\n\nconst FRAMES_BASE_URL = 'https://blocks.moonpay.com/platform/v1';\nconst CHANNEL_CHECK = 'ch_1';\nconst CHANNEL_AUTH = 'ch_2';\nconst CHANNEL_RESET = 'ch_reset';\n\ntype MoonPayFrameState = {\n  activeVendor: KycVendor;\n  moonpayAccessToken: string | null;\n  moonpayCustomerId: string | null;\n  moonpaySessionToken: string | null;\n  phase: KycPhase;\n  statusMessage: string;\n};\n\ntype FrameMessage = {\n  meta?: { channelId?: string };\n  kind?: string;\n  payload?: {\n    status?:\n      | 'active'\n      | 'connectionRequired'\n      | 'termsAcceptanceRequired'\n      | 'pending'\n      | 'unavailable'\n      | 'failed';\n    credentials?: EncryptedCredentialsEnvelope | string;\n    customer?: { id?: string };\n  };\n};\n\ntype FrameStatus = NonNullable<FrameMessage['payload']>['status'];\n\nexport type MoonPayFrameHandlerOptions = {\n  getState: () => MoonPayFrameState;\n  update: (updater: (state: MoonPayFrameState) => void) => void;\n  fail: (message: string) => void;\n  onAuthenticated: () => Promise<void>;\n  requireTermsReacceptance: () => void;\n};\n\n/**\n * Owns MoonPay Check/Auth frame state and protocol handling.\n */\nexport class MoonPayFrameHandler {\n  readonly #getState: MoonPayFrameHandlerOptions['getState'];\n\n  readonly #update: MoonPayFrameHandlerOptions['update'];\n\n  readonly #fail: MoonPayFrameHandlerOptions['fail'];\n\n  readonly #onAuthenticated: MoonPayFrameHandlerOptions['onAuthenticated'];\n\n  readonly #requireTermsReacceptance: MoonPayFrameHandlerOptions['requireTermsReacceptance'];\n\n  /** MoonPay Check/Auth frame X25519 keypair (never persisted). */\n  #frameKeypair: X25519KeyPair | null = null;\n\n  /** Auth-frame client token, kept out of controller state. */\n  #authClientToken: string | null = null;\n\n  constructor({\n    getState,\n    update,\n    fail,\n    onAuthenticated,\n    requireTermsReacceptance,\n  }: MoonPayFrameHandlerOptions) {\n    this.#getState = getState;\n    this.#update = update;\n    this.#fail = fail;\n    this.#onAuthenticated = onAuthenticated;\n    this.#requireTermsReacceptance = requireTermsReacceptance;\n  }\n\n  /**\n   * Creates a fresh keypair for a new MoonPay flow.\n   */\n  startFlow(): void {\n    this.#frameKeypair = generateKeyPair();\n  }\n\n  /**\n   * Ensures an in-progress MoonPay flow has a frame keypair.\n   */\n  ensureKeypair(): void {\n    this.#frameKeypair ??= generateKeyPair();\n  }\n\n  /**\n   * Clears all non-persisted MoonPay frame artifacts.\n   */\n  clear(): void {\n    this.#frameKeypair = null;\n    this.#authClientToken = null;\n  }\n\n  /**\n   * Clears authentication associated with an earlier MoonPay session.\n   */\n  clearAuthentication(): void {\n    this.#authClientToken = null;\n  }\n\n  /**\n   * Handles a message posted by a MoonPay Check/Auth frame.\n   *\n   * @param message - The raw message posted by the frame.\n   * @returns An object whose optional `reply` should be posted back.\n   */\n  async handleMessage(message: unknown): Promise<{ reply?: unknown }> {\n    const payload = message as FrameMessage | undefined;\n\n    if (!payload) {\n      return {};\n    }\n\n    if (payload.kind === 'handshake') {\n      const channelId = payload.meta?.channelId;\n      return { reply: { version: 2, meta: { channelId }, kind: 'ack' } };\n    }\n\n    if (payload.kind !== 'complete') {\n      return {};\n    }\n\n    const channelId = payload.meta?.channelId;\n    const state = this.#getState();\n\n    // Only honor a completion for the MoonPay frame the flow is currently\n    // waiting on. This drops stale or duplicate messages after reset, phase\n    // advancement, or a vendor switch so they cannot restore tokens or rewind\n    // the flow. Unlike awaited controller work, external frame messages are\n    // not protected by the controller's generation guard.\n    let expectedPhase: KycPhase | null = null;\n    if (channelId === CHANNEL_CHECK) {\n      expectedPhase = 'check';\n    } else if (channelId === CHANNEL_AUTH) {\n      expectedPhase = 'auth';\n    }\n\n    if (\n      !expectedPhase ||\n      state.phase !== expectedPhase ||\n      state.activeVendor !== 'moonpay'\n    ) {\n      return {};\n    }\n\n    const status = payload.payload?.status;\n    const credentialsEnvelope = payload.payload?.credentials;\n    const customerId = payload.payload?.customer?.id ?? null;\n\n    if (customerId) {\n      this.#update((draft) => {\n        draft.moonpayCustomerId = customerId;\n      });\n    }\n\n    if (!status) {\n      return {};\n    }\n\n    let accessToken: string | undefined;\n    let clientToken: string | undefined;\n    if (credentialsEnvelope && this.#frameKeypair) {\n      try {\n        const { credentials } = decryptCredentials(\n          credentialsEnvelope,\n          this.#frameKeypair.privateKey,\n        );\n        accessToken = credentials.accessToken;\n        clientToken = credentials.clientToken;\n      } catch (error) {\n        this.#fail(`Failed to decrypt frame credentials: ${String(error)}`);\n        return {};\n      }\n    }\n\n    if (channelId === CHANNEL_CHECK) {\n      await this.#handleCheckOutcome(status, accessToken, clientToken);\n    } else {\n      await this.#handleAuthOutcome(status, accessToken);\n    }\n    return {};\n  }\n\n  /**\n   * Builds the Check-frame URL, or `null` when no session exists yet.\n   *\n   * @returns The Check-frame URL or `null`.\n   */\n  buildCheckFrameUrl(): string | null {\n    const state = this.#getState();\n    if (\n      state.activeVendor !== 'moonpay' ||\n      !state.moonpaySessionToken ||\n      !this.#frameKeypair\n    ) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/check-connection`);\n    url.searchParams.set('sessionToken', state.moonpaySessionToken);\n    url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_CHECK);\n    return url.toString();\n  }\n\n  /**\n   * Builds the Auth-frame URL, or `null` when no client token is available.\n   *\n   * @returns The Auth-frame URL or `null`.\n   */\n  buildAuthFrameUrl(): string | null {\n    const state = this.#getState();\n    if (\n      state.activeVendor !== 'moonpay' ||\n      !this.#authClientToken ||\n      !this.#frameKeypair\n    ) {\n      return null;\n    }\n    const url = new URL(`${FRAMES_BASE_URL}/auth`);\n    url.searchParams.set('clientToken', this.#authClientToken);\n    url.searchParams.set('publicKey', this.#frameKeypair.publicKeyHex);\n    url.searchParams.set('channelId', CHANNEL_AUTH);\n    return url.toString();\n  }\n\n  /**\n   * Builds the Reset-frame URL.\n   *\n   * @returns The Reset-frame URL.\n   */\n  buildResetFrameUrl(): string {\n    const url = new URL(`${FRAMES_BASE_URL}/reset`);\n    url.searchParams.set('channelId', CHANNEL_RESET);\n    return url.toString();\n  }\n\n  async #handleCheckOutcome(\n    status: FrameStatus,\n    accessToken?: string,\n    clientToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#update((state) => {\n        state.moonpayAccessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Already authenticated. Review to submit.';\n      });\n      await this.#onAuthenticated();\n      return;\n    }\n    if (status === 'connectionRequired' && clientToken) {\n      this.#authClientToken = clientToken;\n      this.#update((state) => {\n        state.phase = 'auth';\n        state.statusMessage = 'Verify your email via OTP in the Auth frame.';\n      });\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Check frame returned status: ${status}`);\n  }\n\n  async #handleAuthOutcome(\n    status: FrameStatus,\n    accessToken?: string,\n  ): Promise<void> {\n    if (status === 'active' && accessToken) {\n      this.#update((state) => {\n        state.moonpayAccessToken = accessToken;\n        state.phase = 'form';\n        state.statusMessage = 'Authenticated. Review to submit.';\n      });\n      await this.#onAuthenticated();\n      return;\n    }\n    if (status === 'termsAcceptanceRequired') {\n      this.#requireTermsReacceptance();\n      return;\n    }\n    this.#fail(`Auth frame returned status: ${status}`);\n  }\n}\n\n/**\n * Drops persisted-in-memory MoonPay session artifacts from controller state.\n *\n * @param state - The state to mutate.\n */\nexport function clearMoonPaySession(state: MoonPayFrameState): void {\n  state.moonpayCustomerId = null;\n  state.moonpaySessionToken = null;\n  state.moonpayAccessToken = null;\n}\n"]}