OptionalpromptAsks the user for the OTP the recoverian sent to their bound contact; called mid-recovery (between recoverStart and recoverVerify). Optional so recovery-service registration can be wired before the OTP input UI exists; recoverWallet throws clearly if invoked without it.
Cloud Run service name of the recoverian (used to scope its requests).
recoverian-service base URL — the independent identify + KMS-decrypt side.
recovery-service base URL — the encrypted-blob store (ciphertext only).
Wiring for the two-service non-custodial recovery split (WO 2026/003995, redirect mode). Usually supplied by a WalletEnvironment preset; an RP only sets these to point at a custom deployment. See
.claude/rules/wallet.mdfor the ciphertext-store / recoverian separation.