Class RealtimeSessionVerificationWorkflow

Whether the feature is switched on.

Reads the session's verification state. This is the durable counterpart of the identity.verified event: a subscriber that was disconnected when the event fired recovers by asking here.

Redeems an emailed link token. The capability IS the token, so there is no principal; every failure — malformed, unknown, expired, used, voided — is the same result so the response cannot be used to learn anything about a session.

Asks to verify Email for the caller's session: validates, applies policy and limits, stores a pending verification (hashes only) and emails a one-time link plus a typed code.

Nothing is consumed unless the email is actually sent: a delivery failure rolls the stored state back.

Redeems the typed code for the caller's session. Wrong entries are counted against the pending verification and void it at maxCodeAttempts; submissions are also rate limited per session.