diff --git a/packages/api-client/package.json b/packages/api-client/package.json
index ceae2a33c2..47ceecd5ef 100644
--- a/packages/api-client/package.json
+++ b/packages/api-client/package.json
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "dev": "tsup --watch",
-    "build": "tsup",
+    "build": "tsup && tsc -p tsconfig.build.json",
     "generate": "orval",
     "lint": "eslint src/**/*.ts",
     "test": "vitest run",
diff --git a/packages/api-client/tsconfig.build.json b/packages/api-client/tsconfig.build.json
new file mode 100644
index 0000000000..cad475047c
--- /dev/null
+++ b/packages/api-client/tsconfig.build.json
@@ -0,0 +1,14 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "emitDeclarationOnly": true
+  },
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.test.tsx",
+    "src/**/*.spec.ts",
+    "src/**/*.spec.tsx"
+  ]
+}
diff --git a/packages/api-client/tsup.config.ts b/packages/api-client/tsup.config.ts
index 76bc97358b..4d92ff7354 100644
--- a/packages/api-client/tsup.config.ts
+++ b/packages/api-client/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup';
 export default defineConfig({
   entry: ['src/index.ts'],
   format: ['cjs', 'esm'],
-  dts: true,
+  dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
   clean: true,
   sourcemap: true,
 });
diff --git a/packages/core/package.json b/packages/core/package.json
index 7da166c7d8..13db1b3b49 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "dev": "tsup --watch",
-    "build": "tsup",
+    "build": "tsup && tsc -p tsconfig.build.json",
     "lint": "eslint src/**/*.ts",
     "test": "vitest run",
     "test:watch": "vitest",
diff --git a/packages/core/tsconfig.build.json b/packages/core/tsconfig.build.json
new file mode 100644
index 0000000000..cad475047c
--- /dev/null
+++ b/packages/core/tsconfig.build.json
@@ -0,0 +1,14 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "emitDeclarationOnly": true
+  },
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.test.tsx",
+    "src/**/*.spec.ts",
+    "src/**/*.spec.tsx"
+  ]
+}
diff --git a/packages/core/tsup.config.ts b/packages/core/tsup.config.ts
index 76bc97358b..4d92ff7354 100644
--- a/packages/core/tsup.config.ts
+++ b/packages/core/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup';
 export default defineConfig({
   entry: ['src/index.ts'],
   format: ['cjs', 'esm'],
-  dts: true,
+  dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
   clean: true,
   sourcemap: true,
 });
diff --git a/packages/crypto/package.json b/packages/crypto/package.json
index 83491184c7..5d595f1207 100644
--- a/packages/crypto/package.json
+++ b/packages/crypto/package.json
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "dev": "tsup --watch",
-    "build": "tsup",
+    "build": "tsup && tsc -p tsconfig.build.json",
     "lint": "eslint src/**/*.ts",
     "test": "vitest run",
     "test:watch": "vitest",
diff --git a/packages/crypto/tsconfig.build.json b/packages/crypto/tsconfig.build.json
new file mode 100644
index 0000000000..cad475047c
--- /dev/null
+++ b/packages/crypto/tsconfig.build.json
@@ -0,0 +1,14 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "emitDeclarationOnly": true
+  },
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.test.tsx",
+    "src/**/*.spec.ts",
+    "src/**/*.spec.tsx"
+  ]
+}
diff --git a/packages/crypto/tsup.config.ts b/packages/crypto/tsup.config.ts
index 9d28b8e7d3..8b25b647a1 100644
--- a/packages/crypto/tsup.config.ts
+++ b/packages/crypto/tsup.config.ts
@@ -6,7 +6,7 @@ export default defineConfig([
     format: ['cjs'],
     clean: true,
     sourcemap: true,
-    dts: true,
+    dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
     // Bundle all dependencies into the CJS output so CommonJS consumers
     // (NestJS API, Jest) don't hit ERR_PACKAGE_PATH_NOT_EXPORTED or
     // "Unexpected token export" from ESM-only deps (@noble/*, @libp2p/*, ipns, multiformats).
@@ -16,7 +16,7 @@ export default defineConfig([
     entry: ['src/index.ts'],
     format: ['esm'],
     sourcemap: true,
-    dts: true,
+    dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
     // ESM output leaves deps external — Vite/browser bundlers handle them natively.
   },
 ]);
diff --git a/packages/sdk-core/package.json b/packages/sdk-core/package.json
index 830a8717a8..3ea7065400 100644
--- a/packages/sdk-core/package.json
+++ b/packages/sdk-core/package.json
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "dev": "tsup --watch",
-    "build": "tsup",
+    "build": "tsup && tsc -p tsconfig.build.json",
     "lint": "eslint src/**/*.ts",
     "test": "vitest run",
     "test:watch": "vitest",
diff --git a/packages/sdk-core/tsconfig.build.json b/packages/sdk-core/tsconfig.build.json
new file mode 100644
index 0000000000..cad475047c
--- /dev/null
+++ b/packages/sdk-core/tsconfig.build.json
@@ -0,0 +1,14 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "emitDeclarationOnly": true
+  },
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.test.tsx",
+    "src/**/*.spec.ts",
+    "src/**/*.spec.tsx"
+  ]
+}
diff --git a/packages/sdk-core/tsup.config.ts b/packages/sdk-core/tsup.config.ts
index 76bc97358b..4d92ff7354 100644
--- a/packages/sdk-core/tsup.config.ts
+++ b/packages/sdk-core/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup';
 export default defineConfig({
   entry: ['src/index.ts'],
   format: ['cjs', 'esm'],
-  dts: true,
+  dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
   clean: true,
   sourcemap: true,
 });
diff --git a/packages/sdk/package.json b/packages/sdk/package.json
index aacd67423d..4c8b59f262 100644
--- a/packages/sdk/package.json
+++ b/packages/sdk/package.json
@@ -14,7 +14,7 @@
   },
   "scripts": {
     "dev": "tsup --watch",
-    "build": "tsup",
+    "build": "tsup && tsc -p tsconfig.build.json",
     "lint": "eslint src/**/*.ts",
     "test": "vitest run",
     "test:watch": "vitest",
diff --git a/packages/sdk/tsconfig.build.json b/packages/sdk/tsconfig.build.json
new file mode 100644
index 0000000000..cad475047c
--- /dev/null
+++ b/packages/sdk/tsconfig.build.json
@@ -0,0 +1,14 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "emitDeclarationOnly": true
+  },
+  "exclude": [
+    "node_modules",
+    "dist",
+    "src/**/*.test.ts",
+    "src/**/*.test.tsx",
+    "src/**/*.spec.ts",
+    "src/**/*.spec.tsx"
+  ]
+}
diff --git a/packages/sdk/tsup.config.ts b/packages/sdk/tsup.config.ts
index 76bc97358b..4d92ff7354 100644
--- a/packages/sdk/tsup.config.ts
+++ b/packages/sdk/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup';
 export default defineConfig({
   entry: ['src/index.ts'],
   format: ['cjs', 'esm'],
-  dts: true,
+  dts: false, // emitted via a blocking tsc pass (build script); tsup's concurrent dts intermittently no-ops on Windows CI
   clean: true,
   sourcemap: true,
 });
diff --git a/release-please-config.json b/release-please-config.json
index ce6e3b8dd5..682f85c4dc 100644
--- a/release-please-config.json
+++ b/release-please-config.json
@@ -66,14 +66,14 @@
       "component": "@cipherbox/api",
       "include-component-in-tag": true,
       "bump-minor-pre-major": true,
-      "release-as": "0.39.0"
+      "release-as": "0.39.1"
     },
     "apps/web": {
       "release-type": "node",
       "component": "@cipherbox/web",
       "include-component-in-tag": true,
       "bump-minor-pre-major": true,
-      "release-as": "0.43.0"
+      "release-as": "0.44.0"
     },
     "apps/desktop": {
       "release-type": "node",
@@ -105,14 +105,14 @@
       "component": "@cipherbox/crypto",
       "include-component-in-tag": true,
       "bump-minor-pre-major": true,
-      "release-as": "0.32.0"
+      "release-as": "0.32.1"
     },
     "packages/api-client": {
       "release-type": "node",
       "component": "@cipherbox/api-client",
       "include-component-in-tag": true,
       "bump-minor-pre-major": true,
-      "release-as": "0.39.0"
+      "release-as": "0.39.1"
     },
     "packages/sdk-core": {
       "release-type": "node",
@@ -126,7 +126,7 @@
       "component": "@cipherbox/sdk",
       "include-component-in-tag": true,
       "bump-minor-pre-major": true,
-      "release-as": "0.35.0"
+      "release-as": "0.35.1"
     },
     "crates/crypto": {
       "release-type": "rust",