@authhero/kysely-adapter 10.107.0 → 10.108.0

package/dist/kysely-adapter.d.ts

@@ -1561,6 +1561,7 @@ declare const codeTypeSchema: z.ZodEnum<[
 	"password_reset",
 	"email_verification",
 	"otp",
+	"mfa_otp",
 	"authorization_code",
 	"oauth2_state",
 	"ticket"
@@ -1574,6 +1575,7 @@ declare const codeInsertSchema: z.ZodObject<{
 		"password_reset",
 		"email_verification",
 		"otp",
+		"mfa_otp",
 		"authorization_code",
 		"oauth2_state",
 		"ticket"
@@ -1585,6 +1587,7 @@ declare const codeInsertSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	otp: z.ZodOptional<z.ZodString>;
 	nonce: z.ZodOptional<z.ZodString>;
 	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
@@ -1593,7 +1596,7 @@ declare const codeInsertSchema: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
 	code_id: string;
 	login_id: string;
-	code_type: "password_reset" | "email_verification" | "otp" | "authorization_code" | "oauth2_state" | "ticket";
+	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
 	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
@@ -1602,12 +1605,13 @@ declare const codeInsertSchema: z.ZodObject<{
 	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
+	otp?: string | undefined;
 	code_verifier?: string | undefined;
 	used_at?: string | undefined;
 }, {
 	code_id: string;
 	login_id: string;
-	code_type: "password_reset" | "email_verification" | "otp" | "authorization_code" | "oauth2_state" | "ticket";
+	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
 	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
@@ -1616,6 +1620,7 @@ declare const codeInsertSchema: z.ZodObject<{
 	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
+	otp?: string | undefined;
 	code_verifier?: string | undefined;
 	used_at?: string | undefined;
 }>;
@@ -1629,6 +1634,7 @@ declare const codeSchema: z.ZodObject<{
 		"password_reset",
 		"email_verification",
 		"otp",
+		"mfa_otp",
 		"authorization_code",
 		"oauth2_state",
 		"ticket"
@@ -1640,6 +1646,7 @@ declare const codeSchema: z.ZodObject<{
 		"S256"
 	]>>;
 	redirect_uri: z.ZodOptional<z.ZodString>;
+	otp: z.ZodOptional<z.ZodString>;
 	nonce: z.ZodOptional<z.ZodString>;
 	state: z.ZodOptional<z.ZodString>;
 	expires_at: z.ZodString;
@@ -1649,7 +1656,7 @@ declare const codeSchema: z.ZodObject<{
 	created_at: string;
 	code_id: string;
 	login_id: string;
-	code_type: "password_reset" | "email_verification" | "otp" | "authorization_code" | "oauth2_state" | "ticket";
+	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
 	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
@@ -1658,13 +1665,14 @@ declare const codeSchema: z.ZodObject<{
 	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
+	otp?: string | undefined;
 	code_verifier?: string | undefined;
 	used_at?: string | undefined;
 }, {
 	created_at: string;
 	code_id: string;
 	login_id: string;
-	code_type: "password_reset" | "email_verification" | "otp" | "authorization_code" | "oauth2_state" | "ticket";
+	code_type: "password_reset" | "email_verification" | "otp" | "mfa_otp" | "authorization_code" | "oauth2_state" | "ticket";
 	expires_at: string;
 	connection_id?: string | undefined;
 	user_id?: string | undefined;
@@ -1673,6 +1681,7 @@ declare const codeSchema: z.ZodObject<{
 	nonce?: string | undefined;
 	code_challenge_method?: "S256" | "plain" | undefined;
 	code_challenge?: string | undefined;
+	otp?: string | undefined;
 	code_verifier?: string | undefined;
 	used_at?: string | undefined;
 }>;
@@ -4636,6 +4645,85 @@ declare const formInsertSchema: z.ZodObject<{
 								id?: number | undefined;
 							}[] | undefined;
 						}>,
+						z.ZodObject<{
+							id: z.ZodString;
+							order: z.ZodOptional<z.ZodNumber>;
+							visible: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+						} & {
+							category: z.ZodOptional<z.ZodLiteral<"FIELD">>;
+							label: z.ZodOptional<z.ZodString>;
+							hint: z.ZodOptional<z.ZodString>;
+							messages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+								id: z.ZodOptional<z.ZodNumber>;
+								text: z.ZodString;
+								type: z.ZodEnum<[
+									"info",
+									"error",
+									"success",
+									"warning"
+								]>;
+							}, "strip", z.ZodTypeAny, {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}, {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}>, "many">>;
+							required: z.ZodOptional<z.ZodBoolean>;
+							sensitive: z.ZodOptional<z.ZodBoolean>;
+						} & {
+							type: z.ZodLiteral<"COUNTRY">;
+							config: z.ZodOptional<z.ZodObject<{
+								placeholder: z.ZodOptional<z.ZodString>;
+								default_value: z.ZodOptional<z.ZodString>;
+							}, "strip", z.ZodTypeAny, {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							}, {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							}>>;
+						}, "strip", z.ZodTypeAny, {
+							type: "COUNTRY";
+							id: string;
+							visible: boolean;
+							required?: boolean | undefined;
+							category?: "FIELD" | undefined;
+							config?: {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							} | undefined;
+							sensitive?: boolean | undefined;
+							label?: string | undefined;
+							order?: number | undefined;
+							hint?: string | undefined;
+							messages?: {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}[] | undefined;
+						}, {
+							type: "COUNTRY";
+							id: string;
+							required?: boolean | undefined;
+							category?: "FIELD" | undefined;
+							config?: {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							} | undefined;
+							sensitive?: boolean | undefined;
+							label?: string | undefined;
+							order?: number | undefined;
+							visible?: boolean | undefined;
+							hint?: string | undefined;
+							messages?: {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}[] | undefined;
+						}>,
 						z.ZodObject<{
 							id: z.ZodString;
 							order: z.ZodOptional<z.ZodNumber>;
@@ -6260,6 +6348,25 @@ declare const formInsertSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					visible: boolean;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -6719,6 +6826,25 @@ declare const formInsertSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					visible?: boolean | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -7182,6 +7308,25 @@ declare const formInsertSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					visible: boolean;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -7650,6 +7795,25 @@ declare const formInsertSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					visible?: boolean | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -8285,6 +8449,25 @@ declare const formInsertSchema: z.ZodObject<{
 					text: string;
 					id?: number | undefined;
 				}[] | undefined;
+			} | {
+				type: "COUNTRY";
+				id: string;
+				visible: boolean;
+				required?: boolean | undefined;
+				category?: "FIELD" | undefined;
+				config?: {
+					placeholder?: string | undefined;
+					default_value?: string | undefined;
+				} | undefined;
+				sensitive?: boolean | undefined;
+				label?: string | undefined;
+				order?: number | undefined;
+				hint?: string | undefined;
+				messages?: {
+					type: "info" | "error" | "success" | "warning";
+					text: string;
+					id?: number | undefined;
+				}[] | undefined;
 			} | {
 				type: "URL";
 				id: string;
@@ -8826,6 +9009,25 @@ declare const formInsertSchema: z.ZodObject<{
 					text: string;
 					id?: number | undefined;
 				}[] | undefined;
+			} | {
+				type: "COUNTRY";
+				id: string;
+				required?: boolean | undefined;
+				category?: "FIELD" | undefined;
+				config?: {
+					placeholder?: string | undefined;
+					default_value?: string | undefined;
+				} | undefined;
+				sensitive?: boolean | undefined;
+				label?: string | undefined;
+				order?: number | undefined;
+				visible?: boolean | undefined;
+				hint?: string | undefined;
+				messages?: {
+					type: "info" | "error" | "success" | "warning";
+					text: string;
+					id?: number | undefined;
+				}[] | undefined;
 			} | {
 				type: "URL";
 				id: string;
@@ -9797,6 +9999,85 @@ declare const formSchema: z.ZodObject<{
 								id?: number | undefined;
 							}[] | undefined;
 						}>,
+						z.ZodObject<{
+							id: z.ZodString;
+							order: z.ZodOptional<z.ZodNumber>;
+							visible: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+						} & {
+							category: z.ZodOptional<z.ZodLiteral<"FIELD">>;
+							label: z.ZodOptional<z.ZodString>;
+							hint: z.ZodOptional<z.ZodString>;
+							messages: z.ZodOptional<z.ZodArray<z.ZodObject<{
+								id: z.ZodOptional<z.ZodNumber>;
+								text: z.ZodString;
+								type: z.ZodEnum<[
+									"info",
+									"error",
+									"success",
+									"warning"
+								]>;
+							}, "strip", z.ZodTypeAny, {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}, {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}>, "many">>;
+							required: z.ZodOptional<z.ZodBoolean>;
+							sensitive: z.ZodOptional<z.ZodBoolean>;
+						} & {
+							type: z.ZodLiteral<"COUNTRY">;
+							config: z.ZodOptional<z.ZodObject<{
+								placeholder: z.ZodOptional<z.ZodString>;
+								default_value: z.ZodOptional<z.ZodString>;
+							}, "strip", z.ZodTypeAny, {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							}, {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							}>>;
+						}, "strip", z.ZodTypeAny, {
+							type: "COUNTRY";
+							id: string;
+							visible: boolean;
+							required?: boolean | undefined;
+							category?: "FIELD" | undefined;
+							config?: {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							} | undefined;
+							sensitive?: boolean | undefined;
+							label?: string | undefined;
+							order?: number | undefined;
+							hint?: string | undefined;
+							messages?: {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}[] | undefined;
+						}, {
+							type: "COUNTRY";
+							id: string;
+							required?: boolean | undefined;
+							category?: "FIELD" | undefined;
+							config?: {
+								placeholder?: string | undefined;
+								default_value?: string | undefined;
+							} | undefined;
+							sensitive?: boolean | undefined;
+							label?: string | undefined;
+							order?: number | undefined;
+							visible?: boolean | undefined;
+							hint?: string | undefined;
+							messages?: {
+								type: "info" | "error" | "success" | "warning";
+								text: string;
+								id?: number | undefined;
+							}[] | undefined;
+						}>,
 						z.ZodObject<{
 							id: z.ZodString;
 							order: z.ZodOptional<z.ZodNumber>;
@@ -11421,6 +11702,25 @@ declare const formSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					visible: boolean;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -11880,6 +12180,25 @@ declare const formSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					visible?: boolean | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -12343,6 +12662,25 @@ declare const formSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					visible: boolean;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -12811,6 +13149,25 @@ declare const formSchema: z.ZodObject<{
 						text: string;
 						id?: number | undefined;
 					}[] | undefined;
+				} | {
+					type: "COUNTRY";
+					id: string;
+					required?: boolean | undefined;
+					category?: "FIELD" | undefined;
+					config?: {
+						placeholder?: string | undefined;
+						default_value?: string | undefined;
+					} | undefined;
+					sensitive?: boolean | undefined;
+					label?: string | undefined;
+					order?: number | undefined;
+					visible?: boolean | undefined;
+					hint?: string | undefined;
+					messages?: {
+						type: "info" | "error" | "success" | "warning";
+						text: string;
+						id?: number | undefined;
+					}[] | undefined;
 				} | {
 					type: "URL";
 					id: string;
@@ -13451,6 +13808,25 @@ declare const formSchema: z.ZodObject<{
 					text: string;
 					id?: number | undefined;
 				}[] | undefined;
+			} | {
+				type: "COUNTRY";
+				id: string;
+				visible: boolean;
+				required?: boolean | undefined;
+				category?: "FIELD" | undefined;
+				config?: {
+					placeholder?: string | undefined;
+					default_value?: string | undefined;
+				} | undefined;
+				sensitive?: boolean | undefined;
+				label?: string | undefined;
+				order?: number | undefined;
+				hint?: string | undefined;
+				messages?: {
+					type: "info" | "error" | "success" | "warning";
+					text: string;
+					id?: number | undefined;
+				}[] | undefined;
 			} | {
 				type: "URL";
 				id: string;
@@ -13995,6 +14371,25 @@ declare const formSchema: z.ZodObject<{
 					text: string;
 					id?: number | undefined;
 				}[] | undefined;
+			} | {
+				type: "COUNTRY";
+				id: string;
+				required?: boolean | undefined;
+				category?: "FIELD" | undefined;
+				config?: {
+					placeholder?: string | undefined;
+					default_value?: string | undefined;
+				} | undefined;
+				sensitive?: boolean | undefined;
+				label?: string | undefined;
+				order?: number | undefined;
+				visible?: boolean | undefined;
+				hint?: string | undefined;
+				messages?: {
+					type: "info" | "error" | "success" | "warning";
+					text: string;
+					id?: number | undefined;
+				}[] | undefined;
 			} | {
 				type: "URL";
 				id: string;
@@ -14392,6 +14787,8 @@ declare enum LoginSessionState {
 	AUTHENTICATED = "authenticated",
 	/** Waiting for email verification */
 	AWAITING_EMAIL_VERIFICATION = "awaiting_email_verification",
+	/** Waiting for MFA verification */
+	AWAITING_MFA = "awaiting_mfa",
 	/** Waiting for hook/flow completion (form, page redirect) */
 	AWAITING_HOOK = "awaiting_hook",
 	/** Waiting for user to complete action on continuation page (change-email, account, etc.) */
@@ -15457,6 +15854,10 @@ declare const tenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
 	mfa: z.ZodOptional<z.ZodObject<{
+		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+			"never",
+			"always"
+		]>>>;
 		factors: z.ZodOptional<z.ZodObject<{
 			sms: z.ZodDefault<z.ZodBoolean>;
 			otp: z.ZodDefault<z.ZodBoolean>;
@@ -15521,6 +15922,7 @@ declare const tenantSchema: z.ZodObject<{
 			message?: string | undefined;
 		}>>;
 	}, "strip", z.ZodTypeAny, {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email: boolean;
 			otp: boolean;
@@ -15544,6 +15946,7 @@ declare const tenantSchema: z.ZodObject<{
 			message?: string | undefined;
 		} | undefined;
 	}, {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email?: boolean | undefined;
 			otp?: boolean | undefined;
@@ -15671,6 +16074,7 @@ declare const tenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
 	mfa?: {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email: boolean;
 			otp: boolean;
@@ -15796,6 +16200,7 @@ declare const tenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
 	mfa?: {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email?: boolean | undefined;
 			otp?: boolean | undefined;
@@ -17684,7 +18089,6 @@ declare const promptScreenSchema: z.ZodEnum<[
 	"mfa-voice",
 	"mfa-phone",
 	"mfa-webauthn",
-	"mfa-sms",
 	"mfa-email",
 	"mfa-recovery-code",
 	"status",
@@ -17702,6 +18106,97 @@ declare const promptScreenSchema: z.ZodEnum<[
 export type PromptScreen = z.infer<typeof promptScreenSchema>;
 declare const customTextSchema: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodString>>;
 export type CustomText = z.infer<typeof customTextSchema>;
+declare const mfaEnrollmentInsertSchema: z.ZodEffects<z.ZodObject<{
+	user_id: z.ZodString;
+	type: z.ZodEnum<[
+		"phone",
+		"totp",
+		"email",
+		"push",
+		"webauthn"
+	]>;
+	phone_number: z.ZodOptional<z.ZodString>;
+	totp_secret: z.ZodOptional<z.ZodString>;
+	confirmed: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	user_id: string;
+	confirmed: boolean;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+}, {
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	user_id: string;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+	confirmed?: boolean | undefined;
+}>, {
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	user_id: string;
+	confirmed: boolean;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+}, {
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	user_id: string;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+	confirmed?: boolean | undefined;
+}>;
+export type MfaEnrollmentInsert = z.infer<typeof mfaEnrollmentInsertSchema>;
+declare const mfaEnrollmentSchema: z.ZodEffects<z.ZodObject<{
+	id: z.ZodString;
+	created_at: z.ZodString;
+	updated_at: z.ZodString;
+	user_id: z.ZodString;
+	type: z.ZodEnum<[
+		"phone",
+		"totp",
+		"email",
+		"push",
+		"webauthn"
+	]>;
+	phone_number: z.ZodOptional<z.ZodString>;
+	totp_secret: z.ZodOptional<z.ZodString>;
+	confirmed: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+	created_at: string;
+	updated_at: string;
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	id: string;
+	user_id: string;
+	confirmed: boolean;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+}, {
+	created_at: string;
+	updated_at: string;
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	id: string;
+	user_id: string;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+	confirmed?: boolean | undefined;
+}>, {
+	created_at: string;
+	updated_at: string;
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	id: string;
+	user_id: string;
+	confirmed: boolean;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+}, {
+	created_at: string;
+	updated_at: string;
+	type: "push" | "email" | "phone" | "totp" | "webauthn";
+	id: string;
+	user_id: string;
+	phone_number?: string | undefined;
+	totp_secret?: string | undefined;
+	confirmed?: boolean | undefined;
+}>;
+export type MfaEnrollment = z.infer<typeof mfaEnrollmentSchema>;
 export interface ListFlowsResponse extends Totals {
 	flows: Flow[];
 }
@@ -17809,6 +18304,11 @@ export interface CodesAdapter {
 	get: (tenant_id: string, code_id: string, type: CodeType) => Promise<Code | null>;
 	list: (tenant_id: string, params?: ListParams) => Promise<ListCodesResponse>;
 	used: (tenant_id: string, code_id: string) => Promise<boolean>;
+	/**
+	 * Atomically mark a code as used only if it has not been used yet.
+	 * Returns true if the code was successfully consumed (was unused), false otherwise.
+	 */
+	consume: (tenant_id: string, code_id: string) => Promise<boolean>;
 	remove: (tenant_id: string, code_id: string) => Promise<boolean>;
 }
 export interface PasswordsAdapter {
@@ -18039,6 +18539,13 @@ export interface GeoAdapter {
 	 */
 	getGeoInfo(headers: Record<string, string>): Promise<GeoInfo | null>;
 }
+export interface MfaEnrollmentsAdapter {
+	create: (tenant_id: string, enrollment: MfaEnrollmentInsert) => Promise<MfaEnrollment>;
+	get: (tenant_id: string, enrollment_id: string) => Promise<MfaEnrollment | null>;
+	list: (tenant_id: string, user_id: string) => Promise<MfaEnrollment[]>;
+	update: (tenant_id: string, enrollment_id: string, data: Partial<MfaEnrollmentInsert>) => Promise<MfaEnrollment>;
+	remove: (tenant_id: string, enrollment_id: string) => Promise<boolean>;
+}
 export interface StatsListParams {
 	from?: string;
 	to?: string;
@@ -18125,6 +18632,7 @@ export interface DataAdapters {
 	users: UserDataAdapter;
 	userRoles: UserRolesAdapter;
 	organizations: OrganizationsAdapter;
+	mfaEnrollments: MfaEnrollmentsAdapter;
 	userOrganizations: UserOrganizationsAdapter;
 	/**
 	 * Optional session cleanup function.
@@ -19474,6 +19982,10 @@ declare const sqlTenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported: z.ZodOptional<z.ZodBoolean>;
 	authorization_response_iss_parameter_supported: z.ZodOptional<z.ZodBoolean>;
 	mfa: z.ZodOptional<z.ZodObject<{
+		policy: z.ZodOptional<z.ZodDefault<z.ZodEnum<[
+			"never",
+			"always"
+		]>>>;
 		factors: z.ZodOptional<z.ZodObject<{
 			sms: z.ZodDefault<z.ZodBoolean>;
 			otp: z.ZodDefault<z.ZodBoolean>;
@@ -19538,6 +20050,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 			message?: string | undefined;
 		}>>;
 	}, "strip", z.ZodTypeAny, {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email: boolean;
 			otp: boolean;
@@ -19561,6 +20074,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 			message?: string | undefined;
 		} | undefined;
 	}, {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email?: boolean | undefined;
 			otp?: boolean | undefined;
@@ -19688,6 +20202,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
 	mfa?: {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email: boolean;
 			otp: boolean;
@@ -19813,6 +20328,7 @@ declare const sqlTenantSchema: z.ZodObject<{
 	pushed_authorization_requests_supported?: boolean | undefined;
 	authorization_response_iss_parameter_supported?: boolean | undefined;
 	mfa?: {
+		policy?: "never" | "always" | undefined;
 		factors?: {
 			email?: boolean | undefined;
 			otp?: boolean | undefined;
@@ -20246,6 +20762,37 @@ declare const sqlClientSchema: z.ZodObject<{
 	compliance_level?: "none" | "fapi1_adv_pkj_par" | "fapi1_adv_mtls_par" | "fapi2_sp_pkj_mtls" | "fapi2_sp_mtls_mtls" | undefined;
 	par_request_expiry?: number | undefined;
 }>;
+declare const sqlMfaEnrollmentSchema: z.ZodObject<{
+	id: z.ZodString;
+	tenant_id: z.ZodString;
+	user_id: z.ZodString;
+	type: z.ZodString;
+	phone_number: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+	totp_secret: z.ZodNullable<z.ZodOptional<z.ZodString>>;
+	confirmed: z.ZodNumber;
+	created_at_ts: z.ZodNumber;
+	updated_at_ts: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+	type: string;
+	tenant_id: string;
+	user_id: string;
+	created_at_ts: number;
+	updated_at_ts: number;
+	id: string;
+	confirmed: number;
+	phone_number?: string | null | undefined;
+	totp_secret?: string | null | undefined;
+}, {
+	type: string;
+	tenant_id: string;
+	user_id: string;
+	created_at_ts: number;
+	updated_at_ts: number;
+	id: string;
+	confirmed: number;
+	phone_number?: string | null | undefined;
+	totp_secret?: string | null | undefined;
+}>;
 export interface Database {
 	flows: z.infer<typeof sqlFlowSchema>;
 	branding: z.infer<typeof sqlBrandingSchema>;
@@ -20281,6 +20828,7 @@ export interface Database {
 	invites: z.infer<typeof sqlInviteSchema>;
 	universal_login_templates: z.infer<typeof sqlUniversalLoginTemplateSchema>;
 	custom_text: z.infer<typeof sqlCustomTextSchema>;
+	mfa_enrollments: z.infer<typeof sqlMfaEnrollmentSchema>;
 }
 export declare function migrateToLatest(db: Kysely<Database>, debug?: boolean): Promise<void>;
 export declare function migrateDown(db: Kysely<Database>): Promise<void>;