@seams/wallet-server 0.7.3 → 0.9.0

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts

@@ -1,109 +0,0 @@
-import { WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_REGISTRATION_OPERATION } from '../../../../shared-ts/src/utils/emailOtpDomain';
-import { type EmailOtpChannel, type EmailOtpGrantStore, type EmailOtpLoginChallengeOperation } from '../EmailOtpStores';
-import type { EmailOtpConfig } from './emailOtpConfig';
-import { type CreateEmailOtpChallengeWithActionRequest, type CreateEmailOtpChallengeWithActionResult } from './emailOtpChallenges';
-import type { VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
-import type { VerifyEmailOtpChallengeCodeRequest } from './emailOtpChallengeVerification';
-export type EmailOtpChallengeOperationsInput = {
-    readonly createChallengeWithAction: (request: CreateEmailOtpChallengeWithActionRequest) => Promise<CreateEmailOtpChallengeWithActionResult>;
-    readonly verifyChallengeCode: (request: VerifyEmailOtpChallengeCodeRequest) => Promise<VerifiedEmailOtpChallengeCodeResult>;
-    readonly grantStore: EmailOtpGrantStore;
-    readonly resolveConfig: () => EmailOtpConfig;
-};
-type CreateEmailOtpLoginChallengeRequest = {
-    userId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    email?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    clientIp?: unknown;
-    operation?: unknown;
-    reuseActiveChallenge?: unknown;
-};
-type CreateEmailOtpLoginChallengeResult = {
-    ok: true;
-    challenge: {
-        challengeId: string;
-        issuedAtMs: number;
-        expiresAtMs: number;
-        userId: string;
-        walletId: string;
-        orgId: string;
-        otpChannel: EmailOtpChannel;
-        ownerProofBindingDigest: string;
-        action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-        operation: EmailOtpLoginChallengeOperation;
-    };
-    delivery: {
-        status: 'sent' | 'reused';
-        mode: 'email_provider' | 'log' | 'memory';
-        emailHint: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type CreateEmailOtpEnrollmentChallengeRequest = {
-    userId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    email?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    clientIp?: unknown;
-    operation?: unknown;
-};
-export type CreateEmailOtpEnrollmentChallengeResult = {
-    ok: true;
-    challenge: {
-        challengeId: string;
-        issuedAtMs: number;
-        expiresAtMs: number;
-        userId: string;
-        walletId: string;
-        orgId: string;
-        otpChannel: EmailOtpChannel;
-        ownerProofBindingDigest: string;
-        action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
-        operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
-    };
-    delivery: {
-        mode: 'email_provider' | 'log' | 'memory';
-        emailHint: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type VerifyEmailOtpLoginChallengeRequest = {
-    userId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    challengeId?: unknown;
-    otpCode?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    clientIp?: unknown;
-    operation?: unknown;
-};
-type VerifyEmailOtpLoginChallengeResult = {
-    ok: true;
-    challengeId: string;
-    loginGrant: string;
-    grantExpiresAtMs: number;
-    otpChannel: EmailOtpChannel;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    attemptsRemaining?: number;
-    lockedUntilMs?: number;
-};
-export declare function createEmailOtpChallenge(input: EmailOtpChallengeOperationsInput, request: CreateEmailOtpLoginChallengeRequest): Promise<CreateEmailOtpLoginChallengeResult>;
-export declare function createEmailOtpEnrollmentChallenge(input: EmailOtpChallengeOperationsInput, request: CreateEmailOtpEnrollmentChallengeRequest): Promise<CreateEmailOtpEnrollmentChallengeResult>;
-export declare function verifyEmailOtpChallenge(input: EmailOtpChallengeOperationsInput, request: VerifyEmailOtpLoginChallengeRequest): Promise<VerifyEmailOtpLoginChallengeResult>;
-export {};
-//# sourceMappingURL=emailOtpChallengeOperations.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts

@@ -1,169 +0,0 @@
-import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_EXPORT_OPERATION, WALLET_EMAIL_OTP_REGISTRATION_OPERATION, WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION, WALLET_EMAIL_OTP_UNLOCK_OPERATION } from '../../../../shared-ts/src/utils/emailOtpDomain';
-import { type ChallengeSubjectId, type EmailOtpChallengeId, type EmailOtpRegistrationAttemptId, type OrgId, type ProviderSubject, type WalletId } from '../../../../shared-ts/src/utils/domainIds';
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord } from '../EmailOtpStores';
-type EmailOtpRegistrationChallengePurpose = {
-    kind: 'registration';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
-    operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
-} | {
-    kind: 'registration_reroll';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_UNLOCK_OPERATION;
-};
-export type EmailOtpRegistrationChallengeProof = {
-    kind: 'registration_attempt';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    proofEmail: string;
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-    challengeId: EmailOtpChallengeId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-} | {
-    kind: 'direct_proof_email';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    proofEmail: string;
-    registrationAttemptId?: never;
-    challengeId: EmailOtpChallengeId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-};
-type VerifiedEmailOtpRegistrationChallengeProofShared = {
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    challengeEmail: string;
-    challengeId: EmailOtpChallengeId;
-    originalWalletId: WalletId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    purpose: EmailOtpRegistrationChallengePurpose;
-};
-type VerifiedEmailOtpRegistrationChallengeProof = (VerifiedEmailOtpRegistrationChallengeProofShared & {
-    kind: 'registration_attempt';
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-}) | (VerifiedEmailOtpRegistrationChallengeProofShared & {
-    kind: 'direct_proof_email';
-    registrationAttemptId?: never;
-});
-type EmailOtpChallengeVerificationIntent = {
-    kind: 'registration';
-    binding: EmailOtpRegistrationChallengeProof;
-    allowWalletReroll: boolean;
-} | {
-    kind: 'wallet_unlock';
-} | {
-    kind: 'transaction_sign';
-} | {
-    kind: 'export_key';
-};
-type EmailOtpStoredChallengePurpose = {
-    kind: 'registration';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.registration;
-    operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
-} | {
-    kind: 'wallet_unlock';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_UNLOCK_OPERATION;
-} | {
-    kind: 'transaction_sign';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION;
-} | {
-    kind: 'export_key';
-    action: typeof WALLET_EMAIL_OTP_ACTIONS.login;
-    operation: typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
-};
-export type EmailOtpChallengeBindingMismatchCode = 'challenge_id_mismatch' | 'challenge_purpose_mismatch' | 'challenge_subject_mismatch' | 'challenge_email_mismatch' | 'challenge_wallet_mismatch' | 'challenge_session_mismatch' | 'challenge_org_mismatch' | 'challenge_channel_mismatch' | 'registration_reroll_disallowed';
-export type VerifiedEmailOtpChallengeCodeSuccessBase = {
-    challengeId: EmailOtpChallengeId;
-    challengeSubjectId: ChallengeSubjectId;
-    walletId: WalletId;
-    orgId: OrgId;
-    email?: string;
-    otpChannel: typeof EMAIL_OTP_CHANNEL;
-};
-type VerifiedEmailOtpChallengeCodeSuccess = (VerifiedEmailOtpChallengeCodeSuccessBase & {
-    intent: 'registration';
-    registrationChallengeProof: VerifiedEmailOtpRegistrationChallengeProof;
-}) | (VerifiedEmailOtpChallengeCodeSuccessBase & {
-    intent: 'wallet_unlock' | 'transaction_sign' | 'export_key';
-    registrationChallengeProof?: never;
-});
-export type VerifiedEmailOtpChallengeCodeResult = ({
-    ok: true;
-} & VerifiedEmailOtpChallengeCodeSuccess) | {
-    ok: false;
-    code: string;
-    message: string;
-    attemptsRemaining?: number;
-    lockedUntilMs?: number;
-};
-export declare function emailOtpChallengeVerificationIntentFromRequest(input: {
-    expectedAction: EmailOtpChallengeAction;
-    expectedOperation?: EmailOtpChallengeOperation;
-    registrationChallengeProof?: EmailOtpRegistrationChallengeProof;
-    allowRegistrationChallengeReroll?: boolean;
-}): EmailOtpChallengeVerificationIntent;
-export declare function expectedEmailOtpStoredChallengePurpose(intent: EmailOtpChallengeVerificationIntent): EmailOtpStoredChallengePurpose;
-export declare function readEmailOtpStoredChallengePurpose(record: Pick<EmailOtpChallengeRecord, 'action' | 'operation'>): EmailOtpStoredChallengePurpose | null;
-export declare function emailOtpStoredChallengePurposeMatches(input: {
-    expected: EmailOtpStoredChallengePurpose;
-    actual: EmailOtpStoredChallengePurpose | null;
-}): boolean;
-export declare function buildVerifiedEmailOtpRegistrationChallengeProof(input: {
-    record: EmailOtpChallengeRecord;
-    challengeSubjectId: ChallengeSubjectId;
-    proof: EmailOtpRegistrationChallengeProof;
-    storedPurpose: EmailOtpStoredChallengePurpose | null;
-    allowWalletReroll: boolean;
-}): VerifiedEmailOtpRegistrationChallengeProof | null;
-export type EmailOtpRegistrationChallengeProofResult = {
-    ok: true;
-    proof: EmailOtpRegistrationChallengeProof;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export type EmailOtpRegistrationChallengeProofInput = {
-    kind: 'google_registration_attempt';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    walletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    registrationAttemptId: EmailOtpRegistrationAttemptId;
-    challengeId: EmailOtpChallengeId;
-} | {
-    kind: 'direct_proof_email';
-    providerSubject: ProviderSubject;
-    challengeSubjectId: ChallengeSubjectId;
-    finalWalletId: WalletId;
-    orgId: OrgId;
-    ownerProofBindingDigest: string;
-    proofEmail: string;
-    challengeId: EmailOtpChallengeId;
-};
-type EmailOtpRegistrationChallengeProofInputResult = {
-    ok: true;
-    input: EmailOtpRegistrationChallengeProofInput;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export declare function parseRawEmailOtpRegistrationChallengeProofInput(request: {
-    providerSubject: unknown;
-    walletId: unknown;
-    orgId: unknown;
-    ownerProofBindingDigest: unknown;
-    challengeId: unknown;
-    proofEmail?: unknown;
-    googleEmailOtpRegistrationAttemptId?: unknown;
-}): EmailOtpRegistrationChallengeProofInputResult;
-export {};
-//# sourceMappingURL=emailOtpChallengeProof.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts

@@ -1,47 +0,0 @@
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeStore, EmailOtpWalletEnrollmentRecord, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import type { NormalizedLogger } from '../logger';
-import { type EmailOtpRegistrationChallengeProof, type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
-import type { EmailOtpAuthStatePatch, EmailOtpAuthStateReadResult, EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
-import type { EmailOtpConfig } from './emailOtpConfig';
-import type { EmailOtpMemoryOutbox } from './emailOtpDelivery';
-import type { RateLimitResult } from './rateLimits';
-export type VerifyEmailOtpChallengeCodeRequest = {
-    challengeSubjectId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    challengeId?: unknown;
-    otpCode?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    registrationChallengeProof?: EmailOtpRegistrationChallengeProof;
-    allowRegistrationChallengeReroll?: boolean;
-    clientIp?: unknown;
-    expectedAction: EmailOtpChallengeAction;
-    expectedOperation?: EmailOtpChallengeOperation;
-};
-type EmailOtpVerificationRateLimitConsumer = (input: {
-    scope: 'verify';
-    action: EmailOtpChallengeAction;
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-}) => Promise<RateLimitResult>;
-type VerifyEmailOtpChallengeCodeInput = {
-    request: VerifyEmailOtpChallengeCodeRequest;
-    challengeStore: EmailOtpChallengeStore;
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    logger: NormalizedLogger;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string;
-    }) => Promise<EmailOtpEnrollmentReadResult>;
-    readEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord) => Promise<EmailOtpAuthStateReadResult>;
-    putEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord, patch: EmailOtpAuthStatePatch) => Promise<unknown>;
-    consumeRateLimit: EmailOtpVerificationRateLimitConsumer;
-    resolveConfig: () => EmailOtpConfig;
-};
-export declare function verifyEmailOtpChallengeCode(input: VerifyEmailOtpChallengeCodeInput): Promise<VerifiedEmailOtpChallengeCodeResult>;
-export {};
-//# sourceMappingURL=emailOtpChallengeVerification.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts

@@ -1,86 +0,0 @@
-import type { EmailOtpChallengeAction, EmailOtpChallengeOperation, EmailOtpChallengeRecord, EmailOtpChallengeStore, EmailOtpChannel, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-import { type EmailOtpConfig } from './emailOtpConfig';
-import type { EmailOtpAuthStateReadResult, EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
-import type { EmailOtpDeliveryResult, EmailOtpMemoryOutbox } from './emailOtpDelivery';
-import type { RateLimitResult } from './rateLimits';
-type PruneExpiredEmailOtpChallengesInput = {
-    challengeStore: EmailOtpChallengeStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    nowMs: number;
-};
-export type CreateEmailOtpChallengeWithActionRequest = {
-    challengeSubjectId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    email?: unknown;
-    otpChannel?: unknown;
-    ownerProofBindingDigest?: unknown;
-    clientIp?: unknown;
-    operation?: unknown;
-    reuseActiveChallenge?: unknown;
-    action: EmailOtpChallengeAction;
-};
-type CreatedEmailOtpChallenge = {
-    challengeId: string;
-    issuedAtMs: number;
-    expiresAtMs: number;
-    challengeSubjectId: string;
-    walletId: string;
-    orgId: string;
-    otpChannel: EmailOtpChannel;
-    ownerProofBindingDigest: string;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-};
-export type CreateEmailOtpChallengeWithActionResult = {
-    ok: true;
-    challenge: CreatedEmailOtpChallenge;
-    delivery: {
-        status: 'sent' | 'reused';
-        mode: 'email_provider' | 'log' | 'memory';
-        emailHint: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-    retryAfterMs?: number;
-    resetAtMs?: number;
-};
-type EmailOtpChallengeRateLimitConsumer = (input: {
-    scope: 'challenge';
-    action: EmailOtpChallengeAction;
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-}) => Promise<RateLimitResult>;
-type EmailOtpChallengeDeliverySender = (input: {
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    email: string;
-    otpCode: string;
-    expiresAtMs: number;
-}) => Promise<EmailOtpDeliveryResult>;
-type CreateEmailOtpChallengeWithActionInput = {
-    request: CreateEmailOtpChallengeWithActionRequest;
-    challengeStore: EmailOtpChallengeStore;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string;
-    }) => Promise<EmailOtpEnrollmentReadResult>;
-    readEnrollmentAuthState: (enrollment: EmailOtpWalletEnrollmentRecord) => Promise<EmailOtpAuthStateReadResult>;
-    consumeRateLimit: EmailOtpChallengeRateLimitConsumer;
-    resolveConfig: () => EmailOtpConfig;
-    deliverCode: EmailOtpChallengeDeliverySender;
-};
-export declare function pruneExpiredEmailOtpChallengesWithStore(input: PruneExpiredEmailOtpChallengesInput): Promise<readonly EmailOtpChallengeRecord[]>;
-export declare function createEmailOtpChallengeWithAction(input: CreateEmailOtpChallengeWithActionInput): Promise<CreateEmailOtpChallengeWithActionResult>;
-export {};
-//# sourceMappingURL=emailOtpChallenges.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts

@@ -1,66 +0,0 @@
-import type { EmailOtpChannel, EmailOtpChallengeAction, EmailOtpChallengeOperation } from '../EmailOtpStores';
-import type { NormalizedLogger } from '../logger';
-import type { EmailOtpConfig, EmailOtpDeliveryMode } from './emailOtpConfig';
-type EmailOtpMemoryOutboxEntry = {
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    email: string;
-    emailHint: string;
-    otpCode: string;
-    expiresAtMs: number;
-};
-export type EmailOtpMemoryOutbox = Map<string, EmailOtpMemoryOutboxEntry>;
-type EmailOtpDeliveryInput = {
-    config: EmailOtpConfig;
-    production: boolean;
-    logger: NormalizedLogger;
-    memoryOutbox: EmailOtpMemoryOutbox;
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    email: string;
-    otpCode: string;
-    expiresAtMs: number;
-};
-export type EmailOtpDeliveryResult = {
-    ok: true;
-    deliveryMode: EmailOtpDeliveryMode;
-    emailHint: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-};
-type EmailOtpOutboxReadRequest = {
-    challengeId?: unknown;
-    userId?: unknown;
-    walletId?: unknown;
-};
-export type EmailOtpOutboxReadResult = {
-    ok: true;
-    challengeId: string;
-    walletId: string;
-    userId: string;
-    otpChannel: EmailOtpChannel;
-    emailHint: string;
-    otpCode: string;
-    expiresAtMs: number;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export declare function deliverEmailOtpCode(input: EmailOtpDeliveryInput): Promise<EmailOtpDeliveryResult>;
-export declare function readEmailOtpOutboxEntry(input: {
-    readonly config: EmailOtpConfig;
-    readonly memoryOutbox: EmailOtpMemoryOutbox;
-    readonly request: EmailOtpOutboxReadRequest;
-    readonly nowMs: number;
-}): EmailOtpOutboxReadResult;
-export {};
-//# sourceMappingURL=emailOtpDelivery.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts

@@ -1,43 +0,0 @@
-import type { EmailOtpChannel, EmailOtpGrantStore } from '../EmailOtpStores';
-export type EmailOtpGrantConsumeRequest = {
-    loginGrant?: unknown;
-    userId?: unknown;
-    walletId?: unknown;
-    orgId?: unknown;
-    otpChannel?: unknown;
-    clientIp?: unknown;
-};
-export type EmailOtpGrantConsumeResult = {
-    ok: true;
-    challengeId: string;
-    otpChannel: EmailOtpChannel;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type EmailOtpGrantRateLimitInput = {
-    scope: 'grant';
-    userId: string;
-    walletId: string;
-    orgId: string;
-    clientIp?: string;
-};
-type EmailOtpGrantRateLimitResult = {
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    retryAfterMs?: number;
-    resetAtMs?: number;
-};
-type EmailOtpGrantRateLimitConsumer = (input: EmailOtpGrantRateLimitInput) => Promise<EmailOtpGrantRateLimitResult>;
-export declare function consumeEmailOtpGrantWithStore(input: {
-    readonly request: EmailOtpGrantConsumeRequest;
-    readonly grantStore: EmailOtpGrantStore;
-    readonly consumeRateLimit: EmailOtpGrantRateLimitConsumer;
-    readonly nowMs: number;
-}): Promise<EmailOtpGrantConsumeResult>;
-export {};
-//# sourceMappingURL=emailOtpGrant.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts

@@ -1,49 +0,0 @@
-import type { EmailOtpAuthStateStore, EmailOtpChannel, EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import type { IdentityStore } from '../IdentityStore';
-import type { WalletStore } from '../WalletStore';
-import { type VerifiedEmailOtpChallengeCodeResult } from './emailOtpChallengeProof';
-import type { VerifyEmailOtpChallengeCodeRequest } from './emailOtpChallengeVerification';
-export type VerifyEmailOtpEnrollmentInput = {
-    request: VerifyEmailOtpEnrollmentRequest;
-    walletStore: WalletStore;
-    walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    authStateStore: EmailOtpAuthStateStore;
-    registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    identityStore: IdentityStore;
-    verifyChallengeCode: (request: VerifyEmailOtpChallengeCodeRequest) => Promise<VerifiedEmailOtpChallengeCodeResult>;
-};
-type VerifyEmailOtpEnrollmentRequest = {
-    providerSubject: unknown;
-    walletId: unknown;
-    orgId: unknown;
-    challengeId: unknown;
-    otpCode: unknown;
-    otpChannel: unknown;
-    ownerProofBindingDigest: unknown;
-    proofEmail?: unknown;
-    clientIp?: unknown;
-    enrollmentSealKeyVersion?: unknown;
-    serverSealedFactorCiphertextB64u?: unknown;
-    clientUnlockPublicKeyB64u?: unknown;
-    unlockKeyVersion?: unknown;
-    googleEmailOtpRegistrationAttemptId?: unknown;
-};
-export declare function verifyEmailOtpEnrollment(input: VerifyEmailOtpEnrollmentInput): Promise<{
-    ok: true;
-    walletId: string;
-    otpChannel: EmailOtpChannel;
-    enrollment: {
-        createdAtMs: number;
-        updatedAtMs: number;
-        enrollmentSealKeyVersion: string;
-        unlockKeyVersion: string;
-    };
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    attemptsRemaining?: number;
-    lockedUntilMs?: number;
-}>;
-export {};
-//# sourceMappingURL=emailOtpRegistrationEnrollment.d.ts.map

package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts

@@ -1,64 +0,0 @@
-import type { EmailOtpAuthStateRecord, EmailOtpUnlockChallengeStore, EmailOtpWalletEnrollmentRecord } from '../EmailOtpStores';
-import type { EmailOtpEnrollmentReadResult } from './emailOtpEnrollment';
-type CreateEmailOtpUnlockChallengeRequest = {
-    walletId?: unknown;
-    orgId?: unknown;
-    ttlMs?: unknown;
-    ttl_ms?: unknown;
-};
-export type CreateEmailOtpUnlockChallengeResult = {
-    ok: true;
-    walletId: string;
-    challengeId: string;
-    challengeB64u: string;
-    expiresAtMs: number;
-    unlockKeyVersion: string;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-    lockedUntilMs?: number;
-};
-type VerifyEmailOtpUnlockProofRequest = {
-    walletId?: unknown;
-    orgId?: unknown;
-    challengeId?: unknown;
-    unlockProof?: unknown;
-};
-export type VerifyEmailOtpUnlockProofResult = {
-    ok: true;
-    verified: true;
-    userId: string;
-    walletId: string;
-    providerUserId: string;
-    orgId: string;
-    enrollmentId: string;
-    enrollmentSealKeyVersion: string;
-    unlockKeyVersion: string;
-} | {
-    ok: false;
-    verified: false;
-    code: string;
-    message: string;
-};
-export type CreateEmailOtpUnlockChallengeInput = {
-    request: CreateEmailOtpUnlockChallengeRequest;
-    unlockChallengeStore: EmailOtpUnlockChallengeStore;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string | undefined;
-    }) => Promise<EmailOtpEnrollmentReadResult>;
-};
-export type VerifyEmailOtpUnlockProofInput = {
-    request: VerifyEmailOtpUnlockProofRequest;
-    unlockChallengeStore: EmailOtpUnlockChallengeStore;
-    readActiveEnrollment: (input: {
-        walletId: string;
-        orgId: string | undefined;
-    }) => Promise<EmailOtpEnrollmentReadResult>;
-    putAuthStateForEnrollment: (enrollment: EmailOtpWalletEnrollmentRecord, patch: Pick<EmailOtpAuthStateRecord, 'lastEmailOtpLoginAtMs'>) => Promise<EmailOtpAuthStateRecord>;
-};
-export declare function createEmailOtpUnlockChallenge(input: CreateEmailOtpUnlockChallengeInput): Promise<CreateEmailOtpUnlockChallengeResult>;
-export declare function verifyEmailOtpUnlockProof(input: VerifyEmailOtpUnlockProofInput): Promise<VerifyEmailOtpUnlockProofResult>;
-export {};
-//# sourceMappingURL=emailOtpUnlock.d.ts.map