@seams/wallet-server 0.7.1 → 0.8.0

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts

@@ -1,169 +0,0 @@
-import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_EXPORT_OPERATION, WALLET_EMAIL_OTP_REGISTRATION_OPERATION, WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION, WALLET_EMAIL_OTP_UNLOCK_OPERATION } from '../../../../shared-ts/src/utils/emailOtpDomain';
-import { type ChallengeSubjectId, type EmailOtpChallengeId, type EmailOtpRegistrationAttemptId, type OrgId, type ProviderSubject, type WalletId } from '../../../../shared-ts/src/utils/domainIds';
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord } from '../EmailOtpStores';
-type EmailOtpRegistrationChallengePurpose = {
-    kind: 'registration';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
-    operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
-} | {
-    kind: 'registration_reroll';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_UNLOCK_OPERATION;
-};
-export type EmailOtpRegistrationChallengeProof = {
-    kind: 'registration_attempt';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    proofEmail: string;
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-    challengeId: EmailOtpChallengeId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-} | {
-    kind: 'direct_proof_email';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    proofEmail: string;
-    registrationAttemptId?: never;
-    challengeId: EmailOtpChallengeId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-};
-type VerifiedEmailOtpRegistrationChallengeProofShared = {
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    challengeEmail: string;
-    challengeId: EmailOtpChallengeId;
-    originalWalletId: WalletId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    purpose: EmailOtpRegistrationChallengePurpose;
-};
-type VerifiedEmailOtpRegistrationChallengeProof = (VerifiedEmailOtpRegistrationChallengeProofShared & {
-    kind: 'registration_attempt';
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-}) | (VerifiedEmailOtpRegistrationChallengeProofShared & {
-    kind: 'direct_proof_email';
-    registrationAttemptId?: never;
-});
-type EmailOtpChallengeVerificationIntent = {
-    kind: 'registration';
-    binding: EmailOtpRegistrationChallengeProof;
-    allowWalletReroll: boolean;
-} | {
-    kind: 'wallet_unlock';
-} | {
-    kind: 'transaction_sign';
-} | {
-    kind: 'export_key';
-};
-type EmailOtpStoredChallengePurpose = {
-    kind: 'registration';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
-    operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
-} | {
-    kind: 'wallet_unlock';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_UNLOCK_OPERATION;
-} | {
-    kind: 'transaction_sign';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION;
-} | {
-    kind: 'export_key';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
-};
-export type EmailOtpChallengeBindingMismatchCode = 'challenge_id_mismatch' | 'challenge_purpose_mismatch' | 'challenge_subject_mismatch' | 'challenge_email_mismatch' | 'challenge_wallet_mismatch' | 'challenge_session_mismatch' | 'challenge_org_mismatch' | 'challenge_channel_mismatch' | 'registration_reroll_disallowed';
-export type VerifiedEmailOtpChallengeCodeSuccessBase = {
-    challengeId: EmailOtpChallengeId;
-    challengeSubjectId: ChallengeSubjectId;
-    walletId: WalletId;
-    orgId: OrgId;
-    email?: string;
-    otpChannel: typeof EMAIL_OTP_CHANNEL;
-};
-type VerifiedEmailOtpChallengeCodeSuccess = (VerifiedEmailOtpChallengeCodeSuccessBase & {
-    intent: 'registration';
-    registrationChallengeProof: VerifiedEmailOtpRegistrationChallengeProof;
-}) | (VerifiedEmailOtpChallengeCodeSuccessBase & {
-    intent: 'wallet_unlock' | 'transaction_sign' | 'export_key';
-    registrationChallengeProof?: never;
-});
-export type VerifiedEmailOtpChallengeCodeResult = ({
-    ok: true;
-} & VerifiedEmailOtpChallengeCodeSuccess) | {
-    ok: false;
-    code: string;
-    message: string;
-    attemptsRemaining?: number;
-    lockedUntilMs?: number;
-};
-export declare function emailOtpChallengeVerificationIntentFromRequest(input: {
-    expectedAction: EmailOtpChallengeAction;
-    expectedOperation?: EmailOtpChallengeOperation;
-    registrationChallengeProof?: EmailOtpRegistrationChallengeProof;
-    allowRegistrationChallengeReroll?: boolean;
-}): EmailOtpChallengeVerificationIntent;
-export declare function expectedEmailOtpStoredChallengePurpose(intent: EmailOtpChallengeVerificationIntent): EmailOtpStoredChallengePurpose;
-export declare function readEmailOtpStoredChallengePurpose(record: Pick<EmailOtpChallengeRecord, 'action' | 'operation'>): EmailOtpStoredChallengePurpose | null;
-export declare function emailOtpStoredChallengePurposeMatches(input: {
-    expected: EmailOtpStoredChallengePurpose;
-    actual: EmailOtpStoredChallengePurpose | null;
-}): boolean;
-export declare function buildVerifiedEmailOtpRegistrationChallengeProof(input: {
-    record: EmailOtpChallengeRecord;
-    challengeSubjectId: ChallengeSubjectId;
-    proof: EmailOtpRegistrationChallengeProof;
-    storedPurpose: EmailOtpStoredChallengePurpose | null;
-    allowWalletReroll: boolean;
-}): VerifiedEmailOtpRegistrationChallengeProof | null;
-export type EmailOtpRegistrationChallengeProofResult = {
-    ok: true;
-    proof: EmailOtpRegistrationChallengeProof;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export type EmailOtpRegistrationChallengeProofInput = {
-    kind: 'google_registration_attempt';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    walletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-    challengeId: EmailOtpChallengeId;
-} | {
-    kind: 'direct_proof_email';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    proofEmail: string;
-    challengeId: EmailOtpChallengeId;
-};
-type EmailOtpRegistrationChallengeProofInputResult = {
-    ok: true;
-    input: EmailOtpRegistrationChallengeProofInput;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export declare function parseRawEmailOtpRegistrationChallengeProofInput(request: {
-    providerSubject: unknown;
-    walletId: unknown;
-    orgId: unknown;
-    ownerProofBindingDigest: unknown;
-    challengeId: unknown;
-    proofEmail?: unknown;
-    googleEmailOtpRegistrationAttemptId?: unknown;
-}): EmailOtpRegistrationChallengeProofInputResult;
-export {};
-//# sourceMappingURL=emailOtpChallengeProof.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts

@@ -1,47 +0,0 @@
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeStore, EmailOtpWalletEnrollmentRecord, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import type { NormalizedLogger } from '../logger';
-import { type EmailOtpRegistrationChallengeProof, type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
-import type { EmailOtpAuthStatePatch, EmailOtpAuthStateReadResult, EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
-import type { EmailOtpConfig } from './emailOtpConfig';
-import type { EmailOtpMemoryOutbox } from './emailOtpDelivery';
-import type { RateLimitResult } from './rateLimits';
-export type VerifyEmailOtpChallengeCodeRequest = {
-    challengeSubjectId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    challengeId?: unknown;
-    otpCode?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    registrationChallengeProof?: EmailOtpRegistrationChallengeProof;
-    allowRegistrationChallengeReroll?: boolean;
-    clientIp?: unknown;
-    expectedAction: EmailOtpChallengeAction;
-    expectedOperation?: EmailOtpChallengeOperation;
-};
-type EmailOtpVerificationRateLimitConsumer = (input: {
-    scope: 'verify';
-    action: EmailOtpChallengeAction;
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-}) => Promise<RateLimitResult>;
-type VerifyEmailOtpChallengeCodeInput = {
-    request: VerifyEmailOtpChallengeCodeRequest;
-    challengeStore: EmailOtpChallengeStore;
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    logger: NormalizedLogger;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string;
-    }) => Promise<EmailOtpEnrollmentReadResult>;
-    readEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord) => Promise<EmailOtpAuthStateReadResult>;
-    putEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord, patch: EmailOtpAuthStatePatch) => Promise<unknown>;
-    consumeRateLimit: EmailOtpVerificationRateLimitConsumer;
-    resolveConfig: () => EmailOtpConfig;
-};
-export declare function verifyEmailOtpChallengeCode(input: VerifyEmailOtpChallengeCodeInput): Promise<VerifiedEmailOtpChallengeCodeResult>;
-export {};
-//# sourceMappingURL=emailOtpChallengeVerification.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts

@@ -1,94 +0,0 @@
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord, EmailOtpChallengeStore, EmailOtpChannel, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-import { type EmailOtpConfig } from './emailOtpConfig';
-import type { EmailOtpAuthStateReadResult } from './emailOtpEnrollment';
-import type { EmailOtpDeliveryResult, EmailOtpMemoryOutbox } from './emailOtpDelivery';
-import type { RateLimitResult } from './rateLimits';
-type PruneExpiredEmailOtpChallengesInput = {
-    challengeStore: EmailOtpChallengeStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    nowMs: number;
-};
-export type CreateEmailOtpChallengeWithActionRequest = {
-    challengeSubjectId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    email?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    clientIp?: unknown;
-    operation?: unknown;
-    reuseActiveChallenge?: unknown;
-    action: EmailOtpChallengeAction;
-};
-type CreatedEmailOtpChallenge = {
-    challengeId: string;
-    issuedAtMs: number;
-    expiresAtMs: number;
-    challengeSubjectId: string;
-    walletId: string;
-    orgId: string;
-    otpChannel: EmailOtpChannel;
-    ownerProofBindingDigest: string;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-};
-export type CreateEmailOtpChallengeWithActionResult = {
-    ok: true;
-    challenge: CreatedEmailOtpChallenge;
-    delivery: {
-        status: 'sent' | 'reused';
-        mode: 'email_provider' | 'log' | 'memory';
-        emailHint: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-    retryAfterMs?: number;
-    resetAtMs?: number;
-};
-type EmailOtpChallengeEnrollmentReadResult = {
-    ok: true;
-    enrollment: EmailOtpWalletEnrollmentRecord;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type EmailOtpChallengeRateLimitConsumer = (input: {
-    scope: 'challenge';
-    action: EmailOtpChallengeAction;
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-}) => Promise<RateLimitResult>;
-type EmailOtpChallengeDeliverySender = (input: {
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    email: string;
-    otpCode: string;
-    expiresAtMs: number;
-}) => Promise<EmailOtpDeliveryResult>;
-type CreateEmailOtpChallengeWithActionInput = {
-    request: CreateEmailOtpChallengeWithActionRequest;
-    challengeStore: EmailOtpChallengeStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string;
-    }) => Promise<EmailOtpChallengeEnrollmentReadResult>;
-    readEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord) => Promise<EmailOtpAuthStateReadResult>;
-    consumeRateLimit: EmailOtpChallengeRateLimitConsumer;
-    resolveConfig: () => EmailOtpConfig;
-    deliverCode: EmailOtpChallengeDeliverySender;
-};
-export declare function pruneExpiredEmailOtpChallengesWithStore(input: PruneExpiredEmailOtpChallengesInput): Promise<readonly EmailOtpChallengeRecord[]>;
-export declare function createEmailOtpChallengeWithAction(input: CreateEmailOtpChallengeWithActionInput): Promise<CreateEmailOtpChallengeWithActionResult>;
-export {};
-//# sourceMappingURL=emailOtpChallenges.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts

@@ -1,66 +0,0 @@
-import type { EmailOtpChannel, EmailOtpChallengeAction, EmailOtpChallengeOperation } from '../EmailOtpStores';
-import type { NormalizedLogger } from '../logger';
-import type { EmailOtpConfig, EmailOtpDeliveryMode } from './emailOtpConfig';
-type EmailOtpMemoryOutboxEntry = {
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    email: string;
-    emailHint: string;
-    otpCode: string;
-    expiresAtMs: number;
-};
-export type EmailOtpMemoryOutbox = Map<string, EmailOtpMemoryOutboxEntry>;
-type EmailOtpDeliveryInput = {
-    config: EmailOtpConfig;
-    production: boolean;
-    logger: NormalizedLogger;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    email: string;
-    otpCode: string;
-    expiresAtMs: number;
-};
-export type EmailOtpDeliveryResult = {
-    ok: true;
-    deliveryMode: EmailOtpDeliveryMode;
-    emailHint: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-};
-type EmailOtpOutboxReadRequest = {
-    challengeId?: unknown;
-    userId?: unknown;
-    walletId?: unknown;
-};
-export type EmailOtpOutboxReadResult = {
-    ok: true;
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    emailHint: string;
-    otpCode: string;
-    expiresAtMs: number;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export declare function deliverEmailOtpCode(input: EmailOtpDeliveryInput): Promise<EmailOtpDeliveryResult>;
-export declare function readEmailOtpOutboxEntry(input: {
-    readonly config: EmailOtpConfig;
-    readonly memoryOutbox: EmailOtpMemoryOutbox;
-    readonly request: EmailOtpOutboxReadRequest;
-    readonly nowMs: number;
-}): EmailOtpOutboxReadResult;
-export {};
-//# sourceMappingURL=emailOtpDelivery.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts

@@ -1,43 +0,0 @@
-import type { EmailOtpChannel, EmailOtpGrantStore } from '../EmailOtpStores';
-export type EmailOtpGrantConsumeRequest = {
-    loginGrant?: unknown;
-    userId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    otpChannel?: unknown;
-    clientIp?: unknown;
-};
-export type EmailOtpGrantConsumeResult = {
-    ok: true;
-    challengeId: string;
-    otpChannel: EmailOtpChannel;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type EmailOtpGrantRateLimitInput = {
-    scope: 'grant';
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-};
-type EmailOtpGrantRateLimitResult = {
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    retryAfterMs?: number;
-    resetAtMs?: number;
-};
-type EmailOtpGrantRateLimitConsumer = (input: EmailOtpGrantRateLimitInput) => Promise<EmailOtpGrantRateLimitResult>;
-export declare function consumeEmailOtpGrantWithStore(input: {
-    readonly request: EmailOtpGrantConsumeRequest;
-    readonly grantStore: EmailOtpGrantStore;
-    readonly consumeRateLimit: EmailOtpGrantRateLimitConsumer;
-    readonly nowMs: number;
-}): Promise<EmailOtpGrantConsumeResult>;
-export {};
-//# sourceMappingURL=emailOtpGrant.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts

@@ -1,49 +0,0 @@
-import type { EmailOtpAuthStateStore, EmailOtpChannel, EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import type { IdentityStore } from '../IdentityStore';
-import type { WalletStore } from '../WalletStore';
-import { type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
-import type { VerifyEmailOtpChallengeCodeRequest } from './emailOtpChallengeVerification';
-export type VerifyEmailOtpEnrollmentInput = {
-    request: VerifyEmailOtpEnrollmentRequest;
-    walletStore: WalletStore;
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    authStateStore: EmailOtpAuthStateStore;
-    registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    identityStore: IdentityStore;
-    verifyChallengeCode: (request: VerifyEmailOtpChallengeCodeRequest) => Promise<VerifiedEmailOtpChallengeCodeResult>;
-};
-type VerifyEmailOtpEnrollmentRequest = {
-    providerSubject: unknown;
-    walletId: unknown;
-    orgId: unknown;
-    challengeId: unknown;
-    otpCode: unknown;
-    otpChannel: unknown;
-    ownerProofBindingDigest: unknown;
-    proofEmail?: unknown;
-    clientIp?: unknown;
-    enrollmentSealKeyVersion?: unknown;
-    serverSealedFactorCiphertextB64u?: unknown;
-    clientUnlockPublicKeyB64u?: unknown;
-    unlockKeyVersion?: unknown;
-    googleEmailOtpRegistrationAttemptId?: unknown;
-};
-export declare function verifyEmailOtpEnrollment(input: VerifyEmailOtpEnrollmentInput): Promise<{
-    ok: true;
-    walletId: string;
-    otpChannel: EmailOtpChannel;
-    enrollment: {
-        createdAtMs: number;
-        updatedAtMs: number;
-        enrollmentSealKeyVersion: string;
-        unlockKeyVersion: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    attemptsRemaining?: number;
-    lockedUntilMs?: number;
-}>;
-export {};
-//# sourceMappingURL=emailOtpRegistrationEnrollment.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts

@@ -1,71 +0,0 @@
-import type { EmailOtpAuthStateRecord, EmailOtpUnlockChallengeStore, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-type EmailOtpUnlockEnrollmentReadResult = {
-    ok: true;
-    enrollment: EmailOtpWalletEnrollmentRecord;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type CreateEmailOtpUnlockChallengeRequest = {
-    walletId?: unknown;
-    orgId?: unknown;
-    ttlMs?: unknown;
-    ttl_ms?: unknown;
-};
-export type CreateEmailOtpUnlockChallengeResult = {
-    ok: true;
-    walletId: string;
-    challengeId: string;
-    challengeB64u: string;
-    expiresAtMs: number;
-    unlockKeyVersion: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-};
-type VerifyEmailOtpUnlockProofRequest = {
-    walletId?: unknown;
-    orgId?: unknown;
-    challengeId?: unknown;
-    unlockProof?: unknown;
-};
-export type VerifyEmailOtpUnlockProofResult = {
-    ok: true;
-    verified: true;
-    userId: string;
-    walletId: string;
-    providerUserId: string;
-    orgId: string;
-    enrollmentId: string;
-    enrollmentSealKeyVersion: string;
-    unlockKeyVersion: string;
-} | {
-    ok: false;
-    verified: false;
-    code: string;
-    message: string;
-};
-export type CreateEmailOtpUnlockChallengeInput = {
-    request: CreateEmailOtpUnlockChallengeRequest;
-    unlockChallengeStore: EmailOtpUnlockChallengeStore;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string | undefined;
-    }) => Promise<EmailOtpUnlockEnrollmentReadResult>;
-};
-export type VerifyEmailOtpUnlockProofInput = {
-    request: VerifyEmailOtpUnlockProofRequest;
-    unlockChallengeStore: EmailOtpUnlockChallengeStore;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string | undefined;
-    }) => Promise<EmailOtpUnlockEnrollmentReadResult>;
-    putAuthStateForEnrollment: (enrollment: EmailOtpWalletEnrollmentRecord, patch: Pick<EmailOtpAuthStateRecord, 'lastEmailOtpLoginAtMs'>) => Promise<EmailOtpAuthStateRecord>;
-};
-export declare function createEmailOtpUnlockChallenge(input: CreateEmailOtpUnlockChallengeInput): Promise<CreateEmailOtpUnlockChallengeResult>;
-export declare function verifyEmailOtpUnlockProof(input: VerifyEmailOtpUnlockProofInput): Promise<VerifyEmailOtpUnlockProofResult>;
-export {};
-//# sourceMappingURL=emailOtpUnlock.d.ts.map

package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts

@@ -1,126 +0,0 @@
-import { type GoogleProviderSubject, type VerifiedGoogleEmail } from '../../../../shared-ts/src/utils/domainIds';
-import type { AuthServiceConfig, ThresholdRuntimePolicyScope } from '../types';
-import type { IdentityStore } from '../IdentityStore';
-import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import { type GoogleEmailOtpResolutionResult, type GoogleEmailOtpRegistrationRateLimitConsumer, type GoogleEmailOtpRegistrationRateLimitResult } from './googleEmailOtpRegistration';
-type GoogleEmailOtpStores = {
-    readonly identityStore: IdentityStore;
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-};
-type GoogleEmailOtpEnvironment = {
-    readonly config: AuthServiceConfig;
-    readonly readConfigValue: (name: string) => string;
-    readonly isProductionEnvironment: boolean;
-};
-export type GoogleEmailOtpOperationsInput = GoogleEmailOtpStores & GoogleEmailOtpEnvironment & {
-    readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
-};
-export declare function resolveOidcWalletIdWithGoogleEmailOtp(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        providerSubject?: string;
-        sub?: string;
-        email?: string;
-        accountMode?: unknown;
-        ownerProofBindingDigest?: string;
-        runtimePolicyScope?: ThresholdRuntimePolicyScope;
-        restartRegistrationOffer?: unknown;
-    };
-}): Promise<string>;
-export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        providerSubject?: unknown;
-        email?: unknown;
-        accountMode?: unknown;
-        runtimePolicyScope?: ThresholdRuntimePolicyScope;
-        clientIp?: string;
-        providerUserId?: string;
-        restartRegistrationOffer?: unknown;
-    };
-}): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
-export declare function resolveGoogleEmailOtpSessionForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        providerSubject?: string | GoogleProviderSubject;
-        sub?: string;
-        email?: string | VerifiedGoogleEmail;
-        accountMode?: unknown;
-        ownerProofBindingDigest?: string;
-        runtimePolicyScope?: ThresholdRuntimePolicyScope;
-        restartRegistrationOffer?: unknown;
-    };
-}): Promise<GoogleEmailOtpResolutionResult>;
-export declare function completeGoogleEmailOtpRegistrationAttemptForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        registrationAttemptId?: unknown;
-        walletId?: unknown;
-    };
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function validateGoogleEmailOtpRegistrationCandidateWalletForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        registrationAttemptId: string;
-        walletId: string;
-        ownerProofBindingDigest: string;
-        providerSubject: string;
-    };
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        registrationAttemptId?: unknown;
-        walletId?: unknown;
-        finalizedPublicKey?: unknown;
-    };
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function failGoogleEmailOtpRegistrationAttemptForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        registrationAttemptId?: unknown;
-        walletId?: unknown;
-        failureCode?: unknown;
-    };
-}): Promise<void>;
-export declare function cleanupGoogleEmailOtpDevRegistrationStateForAuthService(input: {
-    readonly deps: GoogleEmailOtpOperationsInput;
-    readonly request: {
-        providerSubject?: unknown;
-        walletId?: unknown;
-        orgId?: unknown;
-        nowMs?: unknown;
-    };
-}): Promise<{
-    ok: true;
-    providerSubject: string;
-    expiredRegistrationAttemptsDeleted: number;
-    linkedWalletId?: string;
-    orphanedWalletMappingRemoved: boolean;
-    orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export {};
-//# sourceMappingURL=googleEmailOtpOperations.d.ts.map