@seams/wallet-server 0.6.2 → 0.7.3

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts

@@ -1,12 +1,7 @@
 import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_EXPORT_OPERATION, WALLET_EMAIL_OTP_REGISTRATION_OPERATION, WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION, WALLET_EMAIL_OTP_UNLOCK_OPERATION } from '../../../../shared-ts/src/utils/emailOtpDomain';
 import { type ChallengeSubjectId, type EmailOtpChallengeId, type EmailOtpRegistrationAttemptId, type OrgId, type ProviderSubject, type WalletId } from '../../../../shared-ts/src/utils/domainIds';
-import type { EmailOtpAuthStateRecord, EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-export type EmailOtpRegistrationEnrollmentPersistence = {
-    previousProviderWalletId?: string;
-    enrollment: EmailOtpWalletEnrollmentRecord;
-    authState: EmailOtpAuthStateRecord;
-};
-export type EmailOtpRegistrationChallengePurpose = {
+import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord } from '../EmailOtpStores';
+type EmailOtpRegistrationChallengePurpose = {
     kind: 'registration';
     action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
     operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
@@ -36,7 +31,7 @@ export type EmailOtpRegistrationChallengeProof = {
     orgId: OrgId;
     ownerProofBindingDigest: string;
 };
-export type VerifiedEmailOtpRegistrationChallengeProofShared = {
+type VerifiedEmailOtpRegistrationChallengeProofShared = {
     providerSubject: ProviderSubject;
     challengeSubjectId: ChallengeSubjectId;
     challengeEmail: string;
@@ -47,14 +42,14 @@ export type VerifiedEmailOtpRegistrationChallengeProofShared = {
     ownerProofBindingDigest: string;
     purpose: EmailOtpRegistrationChallengePurpose;
 };
-export type VerifiedEmailOtpRegistrationChallengeProof = (VerifiedEmailOtpRegistrationChallengeProofShared & {
+type VerifiedEmailOtpRegistrationChallengeProof = (VerifiedEmailOtpRegistrationChallengeProofShared & {
     kind: 'registration_attempt';
     registrationAttemptId: EmailOtpRegistrationAttemptId;
 }) | (VerifiedEmailOtpRegistrationChallengeProofShared & {
     kind: 'direct_proof_email';
     registrationAttemptId?: never;
 });
-export type EmailOtpChallengeVerificationIntent = {
+type EmailOtpChallengeVerificationIntent = {
     kind: 'registration';
     binding: EmailOtpRegistrationChallengeProof;
     allowWalletReroll: boolean;
@@ -65,7 +60,7 @@ export type EmailOtpChallengeVerificationIntent = {
 } | {
     kind: 'export_key';
 };
-export type EmailOtpStoredChallengePurpose = {
+type EmailOtpStoredChallengePurpose = {
     kind: 'registration';
     action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
     operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
@@ -91,7 +86,7 @@ export type VerifiedEmailOtpChallengeCodeSuccessBase = {
     email?: string;
     otpChannel: typeof EMAIL_OTP_CHANNEL;
 };
-export type VerifiedEmailOtpChallengeCodeSuccess = (VerifiedEmailOtpChallengeCodeSuccessBase & {
+type VerifiedEmailOtpChallengeCodeSuccess = (VerifiedEmailOtpChallengeCodeSuccessBase & {
     intent: 'registration';
     registrationChallengeProof: VerifiedEmailOtpRegistrationChallengeProof;
 }) | (VerifiedEmailOtpChallengeCodeSuccessBase & {
@@ -119,10 +114,6 @@ export declare function emailOtpStoredChallengePurposeMatches(input: {
     expected: EmailOtpStoredChallengePurpose;
     actual: EmailOtpStoredChallengePurpose | null;
 }): boolean;
-export declare function emailOtpRegistrationChallengePurposeForRecord(input: {
-    storedPurpose: EmailOtpStoredChallengePurpose | null;
-    allowWalletReroll: boolean;
-}): EmailOtpRegistrationChallengePurpose | null;
 export declare function buildVerifiedEmailOtpRegistrationChallengeProof(input: {
     record: EmailOtpChallengeRecord;
     challengeSubjectId: ChallengeSubjectId;
@@ -157,7 +148,7 @@ export type EmailOtpRegistrationChallengeProofInput = {
     proofEmail: string;
     challengeId: EmailOtpChallengeId;
 };
-export type EmailOtpRegistrationChallengeProofInputResult = {
+type EmailOtpRegistrationChallengeProofInputResult = {
     ok: true;
     input: EmailOtpRegistrationChallengeProofInput;
 } | {
@@ -174,4 +165,5 @@ export declare function parseRawEmailOtpRegistrationChallengeProofInput(request:
     proofEmail?: unknown;
     googleEmailOtpRegistrationAttemptId?: unknown;
 }): EmailOtpRegistrationChallengeProofInputResult;
+export {};
 //# sourceMappingURL=emailOtpChallengeProof.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts

@@ -19,7 +19,7 @@ export type VerifyEmailOtpChallengeCodeRequest = {
     expectedAction: EmailOtpChallengeAction;
     expectedOperation?: EmailOtpChallengeOperation;
 };
-export type EmailOtpVerificationRateLimitConsumer = (input: {
+type EmailOtpVerificationRateLimitConsumer = (input: {
     scope: 'verify';
     action: EmailOtpChallengeAction;
     userId: string;
@@ -27,7 +27,7 @@ export type EmailOtpVerificationRateLimitConsumer = (input: {
     orgId: string;
     clientIp?: string;
 }) => Promise<RateLimitResult>;
-export type VerifyEmailOtpChallengeCodeInput = {
+type VerifyEmailOtpChallengeCodeInput = {
     request: VerifyEmailOtpChallengeCodeRequest;
     challengeStore: EmailOtpChallengeStore;
     walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
@@ -43,4 +43,5 @@ export type VerifyEmailOtpChallengeCodeInput = {
     resolveConfig: () => EmailOtpConfig;
 };
 export declare function verifyEmailOtpChallengeCode(input: VerifyEmailOtpChallengeCodeInput): Promise<VerifiedEmailOtpChallengeCodeResult>;
+export {};
 //# sourceMappingURL=emailOtpChallengeVerification.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts

@@ -1,29 +1,13 @@
 import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord, EmailOtpChallengeStore, EmailOtpChannel, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
 import { type EmailOtpConfig } from './emailOtpConfig';
-import type { EmailOtpAuthStateReadResult } from './emailOtpEnrollment';
+import type { EmailOtpAuthStateReadResult, EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
 import type { EmailOtpDeliveryResult, EmailOtpMemoryOutbox } from './emailOtpDelivery';
 import type { RateLimitResult } from './rateLimits';
-export type EmailOtpChallengeStoreContext = {
-    challengeSubjectId: string;
-    walletId: string;
-    orgId: string;
-    otpChannel: EmailOtpChannel;
-    ownerProofBindingDigest: string;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    nowMs: number;
-};
-export type PruneExpiredEmailOtpChallengesInput = {
+type PruneExpiredEmailOtpChallengesInput = {
     challengeStore: EmailOtpChallengeStore;
     memoryOutbox: EmailOtpMemoryOutbox;
     nowMs: number;
 };
-export type EnforceEmailOtpActiveChallengeLimitInput = {
-    challengeStore: EmailOtpChallengeStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    context: EmailOtpChallengeStoreContext;
-    maxActiveChallenges: number;
-};
 export type CreateEmailOtpChallengeWithActionRequest = {
     challengeSubjectId?: unknown;
     walletId?: unknown;
@@ -36,7 +20,7 @@ export type CreateEmailOtpChallengeWithActionRequest = {
     reuseActiveChallenge?: unknown;
     action: EmailOtpChallengeAction;
 };
-export type CreatedEmailOtpChallenge = {
+type CreatedEmailOtpChallenge = {
     challengeId: string;
     issuedAtMs: number;
     expiresAtMs: number;
@@ -64,15 +48,7 @@ export type CreateEmailOtpChallengeWithActionResult = {
     retryAfterMs?: number;
     resetAtMs?: number;
 };
-export type EmailOtpChallengeEnrollmentReadResult = {
-    ok: true;
-    enrollment: EmailOtpWalletEnrollmentRecord;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export type EmailOtpChallengeRateLimitConsumer = (input: {
+type EmailOtpChallengeRateLimitConsumer = (input: {
     scope: 'challenge';
     action: EmailOtpChallengeAction;
     userId: string;
@@ -80,7 +56,7 @@ export type EmailOtpChallengeRateLimitConsumer = (input: {
     orgId: string;
     clientIp?: string;
 }) => Promise<RateLimitResult>;
-export type EmailOtpChallengeDeliverySender = (input: {
+type EmailOtpChallengeDeliverySender = (input: {
     challengeId: string;
     walletId: string;
     userId: string;
@@ -91,20 +67,20 @@ export type EmailOtpChallengeDeliverySender = (input: {
     otpCode: string;
     expiresAtMs: number;
 }) => Promise<EmailOtpDeliveryResult>;
-export type CreateEmailOtpChallengeWithActionInput = {
+type CreateEmailOtpChallengeWithActionInput = {
     request: CreateEmailOtpChallengeWithActionRequest;
     challengeStore: EmailOtpChallengeStore;
     memoryOutbox: EmailOtpMemoryOutbox;
     readActiveEnrollment: (input: {
         walletId: string;
         orgId: string;
-    }) => Promise<EmailOtpChallengeEnrollmentReadResult>;
+    }) => Promise<EmailOtpEnrollmentReadResult>;
     readEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord) => Promise<EmailOtpAuthStateReadResult>;
     consumeRateLimit: EmailOtpChallengeRateLimitConsumer;
     resolveConfig: () => EmailOtpConfig;
     deliverCode: EmailOtpChallengeDeliverySender;
 };
 export declare function pruneExpiredEmailOtpChallengesWithStore(input: PruneExpiredEmailOtpChallengesInput): Promise<readonly EmailOtpChallengeRecord[]>;
-export declare function enforceEmailOtpActiveChallengeLimitWithStore(input: EnforceEmailOtpActiveChallengeLimitInput): Promise<void>;
 export declare function createEmailOtpChallengeWithAction(input: CreateEmailOtpChallengeWithActionInput): Promise<CreateEmailOtpChallengeWithActionResult>;
+export {};
 //# sourceMappingURL=emailOtpChallenges.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts

@@ -11,24 +11,17 @@ export type EmailOtpConfig = {
     devOutboxEnabled: boolean;
     maxActiveChallengesPerContext: number;
 };
-export type AuthRateLimitPolicy = {
+type AuthRateLimitPolicy = {
     limit: number;
     windowMs: number;
 };
 export type EmailOtpRateLimitScope = 'challenge' | 'verify' | 'grant' | 'googleRegistrationAttempt';
 export type EmailOtpRateLimitPolicies = Record<EmailOtpRateLimitScope, AuthRateLimitPolicy>;
-export type EmailOtpConfigInput = {
+type EmailOtpConfigInput = {
     thresholdStore: AuthServiceConfigSource;
     production: boolean;
 };
-export declare function parseConfiguredInteger(input: {
-    name: string;
-    raw: string;
-    defaultValue: number;
-    min: number;
-    max: number;
-}): number;
-export declare function resolveRegistrationPrepareRateLimitPolicy(input: EmailOtpConfigInput): AuthRateLimitPolicy;
 export declare function resolveEmailOtpRateLimitPolicies(input: EmailOtpConfigInput): EmailOtpRateLimitPolicies;
 export declare function resolveEmailOtpConfig(input: EmailOtpConfigInput): EmailOtpConfig;
+export {};
 //# sourceMappingURL=emailOtpConfig.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts

@@ -1,7 +1,7 @@
 import type { EmailOtpChannel, EmailOtpChallengeAction, EmailOtpChallengeOperation } from '../EmailOtpStores';
 import type { NormalizedLogger } from '../logger';
 import type { EmailOtpConfig, EmailOtpDeliveryMode } from './emailOtpConfig';
-export type EmailOtpMemoryOutboxEntry = {
+type EmailOtpMemoryOutboxEntry = {
     walletId: string;
     userId: string;
     otpChannel: EmailOtpChannel;
@@ -11,7 +11,7 @@ export type EmailOtpMemoryOutboxEntry = {
     expiresAtMs: number;
 };
 export type EmailOtpMemoryOutbox = Map<string, EmailOtpMemoryOutboxEntry>;
-export type EmailOtpDeliveryInput = {
+type EmailOtpDeliveryInput = {
     config: EmailOtpConfig;
     production: boolean;
     logger: NormalizedLogger;
@@ -36,7 +36,7 @@ export type EmailOtpDeliveryResult = {
     message: string;
     lockedUntilMs?: number;
 };
-export type EmailOtpOutboxReadRequest = {
+type EmailOtpOutboxReadRequest = {
     challengeId?: unknown;
     userId?: unknown;
     walletId?: unknown;
@@ -62,4 +62,5 @@ export declare function readEmailOtpOutboxEntry(input: {
     readonly request: EmailOtpOutboxReadRequest;
     readonly nowMs: number;
 }): EmailOtpOutboxReadResult;
+export {};
 //# sourceMappingURL=emailOtpDelivery.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts

@@ -16,14 +16,14 @@ export type EmailOtpGrantConsumeResult = {
     code: string;
     message: string;
 };
-export type EmailOtpGrantRateLimitInput = {
+type EmailOtpGrantRateLimitInput = {
     scope: 'grant';
     userId: string;
     walletId: string;
     orgId: string;
     clientIp?: string;
 };
-export type EmailOtpGrantRateLimitResult = {
+type EmailOtpGrantRateLimitResult = {
     ok: true;
 } | {
     ok: false;
@@ -32,11 +32,12 @@ export type EmailOtpGrantRateLimitResult = {
     retryAfterMs?: number;
     resetAtMs?: number;
 };
-export type EmailOtpGrantRateLimitConsumer = (input: EmailOtpGrantRateLimitInput) => Promise<EmailOtpGrantRateLimitResult>;
+type EmailOtpGrantRateLimitConsumer = (input: EmailOtpGrantRateLimitInput) => Promise<EmailOtpGrantRateLimitResult>;
 export declare function consumeEmailOtpGrantWithStore(input: {
     readonly request: EmailOtpGrantConsumeRequest;
     readonly grantStore: EmailOtpGrantStore;
     readonly consumeRateLimit: EmailOtpGrantRateLimitConsumer;
     readonly nowMs: number;
 }): Promise<EmailOtpGrantConsumeResult>;
+export {};
 //# sourceMappingURL=emailOtpGrant.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts

@@ -1,22 +1,8 @@
-import { type WalletId } from '../../../../shared-ts/src/utils/domainIds';
-import type { RegistrationAuthority } from '../../../../shared-ts/src/utils/registrationIntent';
 import type { EmailOtpAuthStateStore, EmailOtpChannel, EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
 import type { IdentityStore } from '../IdentityStore';
 import type { WalletStore } from '../WalletStore';
-import type { WalletRegistrationFinalizeRequest } from '../registrationContracts';
-import { type EmailOtpRegistrationChallengeProofInput, type EmailOtpRegistrationChallengeProofResult, type EmailOtpRegistrationEnrollmentPersistence, type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
+import { type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
 import type { VerifyEmailOtpChallengeCodeRequest } from './emailOtpChallengeVerification';
-export type EmailOtpEnrollmentMaterialValidationResult = {
-    ok: true;
-    enrollmentSealKeyVersion: string;
-    serverSealedFactorCiphertextB64u: string;
-    clientUnlockPublicKeyB64u: string;
-    unlockKeyVersion: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
 export type VerifyEmailOtpEnrollmentInput = {
     request: VerifyEmailOtpEnrollmentRequest;
     walletStore: WalletStore;
@@ -26,7 +12,7 @@ export type VerifyEmailOtpEnrollmentInput = {
     identityStore: IdentityStore;
     verifyChallengeCode: (request: VerifyEmailOtpChallengeCodeRequest) => Promise<VerifiedEmailOtpChallengeCodeResult>;
 };
-export type VerifyEmailOtpEnrollmentRequest = {
+type VerifyEmailOtpEnrollmentRequest = {
     providerSubject: unknown;
     walletId: unknown;
     orgId: unknown;
@@ -42,60 +28,6 @@ export type VerifyEmailOtpEnrollmentRequest = {
     unlockKeyVersion?: unknown;
     googleEmailOtpRegistrationAttemptId?: unknown;
 };
-export declare function validateEmailOtpEnrollmentMaterial(request: {
-    enrollmentSealKeyVersion?: unknown;
-    clientUnlockPublicKeyB64u?: unknown;
-    unlockKeyVersion?: unknown;
-    serverSealedFactorCiphertextB64u?: unknown;
-}): Promise<{
-    ok: true;
-    enrollmentSealKeyVersion: string;
-    clientUnlockPublicKeyB64u: string;
-    unlockKeyVersion: string;
-    serverSealedFactorCiphertextB64u: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function buildEmailOtpRegistrationEnrollmentPersistence(input: {
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    authStateStore: EmailOtpAuthStateStore;
-    walletId: string;
-    orgId: string;
-    authSubjectId: string;
-    verifiedEmail: string;
-    material: NonNullable<WalletRegistrationFinalizeRequest['emailOtpEnrollment']>;
-    nowMs: number;
-}): Promise<{
-    ok: true;
-    persistence: EmailOtpRegistrationEnrollmentPersistence;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function emailOtpEnrollmentPersistenceForRegistrationFinalize(input: {
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    authStateStore: EmailOtpAuthStateStore;
-    authority: RegistrationAuthority;
-    request: WalletRegistrationFinalizeRequest;
-    walletId: WalletId;
-    orgId: string;
-    nowMs: number;
-}): Promise<{
-    ok: true;
-    persistence?: EmailOtpRegistrationEnrollmentPersistence;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function resolveEmailOtpRegistrationChallengeProof(input: {
-    proofInput: EmailOtpRegistrationChallengeProofInput;
-    registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    nowMs: number;
-}): Promise<EmailOtpRegistrationChallengeProofResult>;
 export declare function verifyEmailOtpEnrollment(input: VerifyEmailOtpEnrollmentInput): Promise<{
     ok: true;
     walletId: string;
@@ -113,4 +45,5 @@ export declare function verifyEmailOtpEnrollment(input: VerifyEmailOtpEnrollment
     attemptsRemaining?: number;
     lockedUntilMs?: number;
 }>;
+export {};
 //# sourceMappingURL=emailOtpRegistrationEnrollment.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts

@@ -1,5 +1,5 @@
 import type { SigningSessionSealCipherAdapter } from '../../threshold/session/signingSessionSeal/signingSessionSeal.types';
-export type EmailOtpShamirCipherConfig = {
+type EmailOtpShamirCipherConfig = {
     readonly rootSecretB64u: string;
     readonly currentKeyVersion: string;
     readonly acceptedWarmKeyVersions: readonly string[];
@@ -32,4 +32,5 @@ export declare function runEmailOtpServerSealOperation(input: {
     readonly request: EmailOtpServerSealRequest;
     readonly shamir: EmailOtpShamirCipherResult;
 }): Promise<EmailOtpServerSealResult>;
+export {};
 //# sourceMappingURL=emailOtpSeal.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts

@@ -1,13 +1,6 @@
 import type { EmailOtpAuthStateRecord, EmailOtpUnlockChallengeStore, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-export type EmailOtpUnlockEnrollmentReadResult = {
-    ok: true;
-    enrollment: EmailOtpWalletEnrollmentRecord;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export type CreateEmailOtpUnlockChallengeRequest = {
+import type { EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
+type CreateEmailOtpUnlockChallengeRequest = {
     walletId?: unknown;
     orgId?: unknown;
     ttlMs?: unknown;
@@ -26,7 +19,7 @@ export type CreateEmailOtpUnlockChallengeResult = {
     message: string;
     lockedUntilMs?: number;
 };
-export type VerifyEmailOtpUnlockProofRequest = {
+type VerifyEmailOtpUnlockProofRequest = {
     walletId?: unknown;
     orgId?: unknown;
     challengeId?: unknown;
@@ -54,7 +47,7 @@ export type CreateEmailOtpUnlockChallengeInput = {
     readActiveEnrollment: (input: {
         walletId: string;
         orgId: string | undefined;
-    }) => Promise<EmailOtpUnlockEnrollmentReadResult>;
+    }) => Promise<EmailOtpEnrollmentReadResult>;
 };
 export type VerifyEmailOtpUnlockProofInput = {
     request: VerifyEmailOtpUnlockProofRequest;
@@ -62,9 +55,10 @@ export type VerifyEmailOtpUnlockProofInput = {
     readActiveEnrollment: (input: {
         walletId: string;
         orgId: string | undefined;
-    }) => Promise<EmailOtpUnlockEnrollmentReadResult>;
+    }) => Promise<EmailOtpEnrollmentReadResult>;
     putAuthStateForEnrollment: (enrollment: EmailOtpWalletEnrollmentRecord, patch: Pick<EmailOtpAuthStateRecord, 'lastEmailOtpLoginAtMs'>) => Promise<EmailOtpAuthStateRecord>;
 };
 export declare function createEmailOtpUnlockChallenge(input: CreateEmailOtpUnlockChallengeInput): Promise<CreateEmailOtpUnlockChallengeResult>;
 export declare function verifyEmailOtpUnlockProof(input: VerifyEmailOtpUnlockProofInput): Promise<VerifyEmailOtpUnlockProofResult>;
+export {};
 //# sourceMappingURL=emailOtpUnlock.d.ts.map

package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts

@@ -39,7 +39,7 @@ export type GoogleEmailOtpResolutionResult = {
     email?: string;
     message: string;
 };
-export type GoogleEmailOtpRegistrationRateLimitRequest = {
+type GoogleEmailOtpRegistrationRateLimitRequest = {
     providerSubject?: unknown;
     email?: unknown;
     accountMode?: unknown;
@@ -65,7 +65,7 @@ export type GoogleEmailOtpRegistrationRateLimitConsumer = (input: {
     orgId: string;
     clientIp?: string;
 }) => Promise<GoogleEmailOtpRegistrationRateLimitResult>;
-export type GoogleEmailOtpSessionResolveRequest = {
+type GoogleEmailOtpSessionResolveRequest = {
     providerSubject?: string;
     sub?: string;
     email?: string;
@@ -74,7 +74,7 @@ export type GoogleEmailOtpSessionResolveRequest = {
     runtimePolicyScope?: ThresholdRuntimePolicyScope;
     restartRegistrationOffer?: unknown;
 };
-export type GoogleEmailOtpHostedWalletDeriver = (input: {
+type GoogleEmailOtpHostedWalletDeriver = (input: {
     providerSubject: string;
     sub?: string;
     email?: string;
@@ -83,11 +83,7 @@ export type GoogleEmailOtpHostedWalletDeriver = (input: {
     collisionCounter?: number;
     runtimePolicyScope?: ThresholdRuntimePolicyScope;
 }) => Promise<string>;
-export type GoogleEmailOtpHostedWalletPredicate = (walletId: string) => boolean;
-export declare function cleanupGoogleEmailOtpRegistrationAttemptsWithStore(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly nowMs: number;
-}): Promise<void>;
+type GoogleEmailOtpHostedWalletPredicate = (walletId: string) => boolean;
 export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitWithDeps(input: {
     readonly request: GoogleEmailOtpRegistrationRateLimitRequest;
     readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
@@ -169,4 +165,5 @@ export declare function cleanupGoogleEmailOtpDevRegistrationStateWithStores(inpu
     code: string;
     message: string;
 }>;
+export {};
 //# sourceMappingURL=googleEmailOtpRegistration.d.ts.map

package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts

@@ -1,8 +1,8 @@
-export type NearTxUnsignedBorshOutput = {
+type NearTxUnsignedBorshOutput = {
     unsignedTransactionBorshB64u: string;
     signingDigestB64u: string;
 };
-export type FinalizeNearTxFromSignatureOutput = {
+type FinalizeNearTxFromSignatureOutput = {
     signedTransactionBorshB64u: string;
     transactionHash: string;
 };
@@ -13,4 +13,5 @@ export declare function signNearDigestWithSecretKey(args: {
     signingDigestB64u: string;
     expectedSignerPublicKey: string;
 }): Promise<string>;
+export {};
 //# sourceMappingURL=nearPrivateKeySigning.d.ts.map

package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts

@@ -7,7 +7,7 @@ export type RecordNearPublicKeyMetadataResult = {
     code: string;
     message: string;
 };
-export type NearPublicKeyListEntry = {
+type NearPublicKeyListEntry = {
     publicKey: string;
     kind: NearPublicKeyKind;
     signerSlot?: number;
@@ -40,4 +40,5 @@ export declare function listNearPublicKeysForUserWithStore(input: {
     store: NearPublicKeyStore;
     userId: string;
 }): Promise<ListNearPublicKeysResult>;
+export {};
 //# sourceMappingURL=nearPublicKeyMetadata.d.ts.map

package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts

@@ -2,7 +2,7 @@ import type { AccessKeyList, FinalExecutionOutcome } from '@near-js/types';
 import type { NearTransactionActionArgsWasm } from '../../../../shared-ts/src/near/actions';
 import { MinimalNearClient, SignedTransaction } from '../rpcClients/near/NearClient';
 import type { NormalizedLogger } from '../logger';
-export type NearTxContext = {
+type NearTxContext = {
     nextNonce: string;
     blockHash: string;
 };
@@ -46,4 +46,5 @@ export declare function verifyAccountAccessKeysPresentWithClient(input: {
     readonly expectedPublicKeys: readonly string[];
     readonly options?: AccountAccessKeyVisibilityOptions;
 }): Promise<boolean>;
+export {};
 //# sourceMappingURL=nearTransactions.d.ts.map

package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts

@@ -1,14 +1,14 @@
 import type { GoogleOidcConfig } from '../types';
 import type { IdentityStore } from '../IdentityStore';
-export type JwksCacheValue = {
+type JwksCacheValue = {
     keysByKid: Map<string, JsonWebKey>;
     expiresAtMs: number;
 };
-export type GoogleJwksState = {
+type GoogleJwksState = {
     cache: JwksCacheValue | null;
     fetchPromise: Promise<JwksCacheValue> | null;
 };
-export type GoogleLoginVerificationResult = {
+type GoogleLoginVerificationResult = {
     ok: true;
     verified: true;
     providerSubject: string;
@@ -62,4 +62,5 @@ export declare function verifyGoogleLoginWithIdentityStore(input: {
     jwksState: GoogleJwksState;
     identityStore: IdentityStore;
 }): Promise<GoogleLoginFacadeResult>;
+export {};
 //# sourceMappingURL=oidcVerification.d.ts.map

package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts

@@ -10,9 +10,6 @@ export type RateLimitResult = {
     retryAfterMs?: number;
     resetAtMs?: number;
 };
-export declare function createRegistrationPrepareRateLimiter(input: {
-    thresholdStore: AuthServiceConfigSource;
-}): SigningSessionSealRateLimiter;
 export declare function createEmailOtpRateLimiter(input: {
     thresholdStore: AuthServiceConfigSource;
 }): SigningSessionSealRateLimiter;

package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts

@@ -1,9 +1,4 @@
 import { type ActionArgsWasm } from '../../../../shared-ts/src/near/actions';
-import type { RouterAbEcdsaDerivationPublicCapabilityV1 } from '../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import type { EcdsaDerivationClientBootstrapRequest, EcdsaDerivationServerBootstrapResponse, ThresholdRuntimePolicyScope } from '../types';
-import type { WalletRegistrationEcdsaClientBootstrap, WalletRegistrationEcdsaPrepareContext, WalletRegistrationEcdsaWalletKey } from '../registrationContracts';
-import type { WebAuthnCredentialBindingStore } from '../WebAuthnCredentialBindingStore';
-import type { ThresholdEcdsaChainTarget } from '../thresholdEcdsaChainTarget';
 export declare function buildFullAccessAddKeyAction(publicKey: string): ActionArgsWasm;
 export declare function normalizeBootstrapPublicKeys(args: {
     publicKey: string;
@@ -13,25 +8,4 @@ export declare function normalizeBootstrapPublicKeys(args: {
     recoveryPublicKey?: string;
     expectedPublicKeys: string[];
 };
-export declare function resolveBoundThresholdRuntimePolicyScope(args: {
-    bindingStore: WebAuthnCredentialBindingStore;
-    userId: string;
-    rpId: string;
-}): Promise<ThresholdRuntimePolicyScope | undefined>;
-export type EcdsaWalletKeyBuildResult = {
-    ok: true;
-    walletKeys: WalletRegistrationEcdsaWalletKey[];
-} | {
-    ok: false;
-    code: 'incomplete_ecdsa_wallet_key';
-    message: string;
-};
-export declare function buildEcdsaWalletKeysFromBootstrap(args: {
-    bootstrap: EcdsaDerivationServerBootstrapResponse;
-    chainTargets: readonly ThresholdEcdsaChainTarget[];
-    publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
-    errorContext: string;
-}): EcdsaWalletKeyBuildResult;
-export declare function isMatchingEcdsaClientBootstrap(expected: WalletRegistrationEcdsaPrepareContext, actual: WalletRegistrationEcdsaClientBootstrap): boolean;
-export declare function toEcdsaDerivationClientBootstrapRequest(clientBootstrap: WalletRegistrationEcdsaClientBootstrap): EcdsaDerivationClientBootstrapRequest;
 //# sourceMappingURL=registrationThresholdHelpers.d.ts.map

package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts

@@ -3,7 +3,6 @@ import type { NormalizedLogger } from '../logger';
 import { type EmailOtpAuthStateStore, type EmailOtpChallengeStore, type EmailOtpGrantStore, type EmailOtpRegistrationAttemptStore, type EmailOtpUnlockChallengeStore, type EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
 import { type IdentityStore } from '../IdentityStore';
 import { type NearPublicKeyStore } from '../NearPublicKeyStore';
-import { type RegistrationCeremonyStore } from '../RegistrationCeremonyStore';
 import { type WalletAuthMethodStore } from '../WalletAuthMethodStore';
 import { type WalletStore } from '../WalletStore';
 import { type WebAuthnAuthenticatorStore } from '../WebAuthnAuthenticatorStore';
@@ -29,10 +28,8 @@ export declare class AuthServiceStoreRegistry {
     private emailOtpUnlockChallengeStore;
     private emailOtpRegistrationAttemptStore;
     private emailOtpRateLimiter;
-    private registrationPrepareRateLimiter;
     private nearPublicKeyStore;
     private identityStore;
-    private registrationCeremonyStore;
     private walletStore;
     private walletAuthMethodStore;
     constructor(input: AuthServiceStoreRegistryInput);
@@ -40,7 +37,6 @@ export declare class AuthServiceStoreRegistry {
     getWebAuthnLoginChallengeStore(): WebAuthnLoginChallengeStore;
     getWebAuthnCredentialBindingStore(): WebAuthnCredentialBindingStore;
     getWebAuthnSyncChallengeStore(): WebAuthnSyncChallengeStore;
-    getRegistrationCeremonyStore(): RegistrationCeremonyStore;
     getWalletStore(): WalletStore;
     getWalletAuthMethodStore(): WalletAuthMethodStore;
     getEmailOtpChallengeStore(): EmailOtpChallengeStore;
@@ -49,7 +45,6 @@ export declare class AuthServiceStoreRegistry {
     getEmailOtpAuthStateStore(): EmailOtpAuthStateStore;
     getEmailOtpUnlockChallengeStore(): EmailOtpUnlockChallengeStore;
     getEmailOtpRegistrationAttemptStore(): EmailOtpRegistrationAttemptStore;
-    getRegistrationPrepareRateLimiter(): SigningSessionSealRateLimiter;
     getEmailOtpRateLimiter(): SigningSessionSealRateLimiter;
     getIdentityStore(): IdentityStore;
     getNearPublicKeyStore(): NearPublicKeyStore;