@constructive-sdk/cli 1.20.8 → 1.20.10

package/auth/cli/commands/send-step-up-code.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI command for mutation sendStepUpCode
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/auth/cli/commands/send-step-up-code.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const executor_1 = require("../executor");
+const utils_1 = require("../utils");
+exports.default = async (argv, prompter, _options) => {
+    try {
+        if (argv.help || argv.h) {
+            console.log('send-step-up-code - sendStepUpCode\n\nUsage: send-step-up-code [OPTIONS]\n');
+            process.exit(0);
+        }
+        const answers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'input',
+                message: 'The exclusive input argument for this mutation. An object type, make sure to see documentation for this object\u2019s fields.',
+                required: true,
+            },
+        ]);
+        const client = (0, executor_1.getClient)();
+        const parsedAnswers = (0, utils_1.unflattenDotNotation)(answers);
+        const selectFields = (0, utils_1.buildSelectFromPaths)(argv.select ?? 'clientMutationId');
+        const result = await client.mutation
+            .sendStepUpCode(parsedAnswers, {
+            select: selectFields,
+        })
+            .execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed: sendStepUpCode');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+};

package/auth/cli/commands/verify-step-up-code.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI command for mutation verifyStepUpCode
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/auth/cli/commands/verify-step-up-code.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const executor_1 = require("../executor");
+const utils_1 = require("../utils");
+exports.default = async (argv, prompter, _options) => {
+    try {
+        if (argv.help || argv.h) {
+            console.log('verify-step-up-code - verifyStepUpCode\n\nUsage: verify-step-up-code [OPTIONS]\n');
+            process.exit(0);
+        }
+        const answers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'input',
+                message: 'The exclusive input argument for this mutation. An object type, make sure to see documentation for this object\u2019s fields.',
+                required: true,
+            },
+        ]);
+        const client = (0, executor_1.getClient)();
+        const parsedAnswers = (0, utils_1.unflattenDotNotation)(answers);
+        const selectFields = (0, utils_1.buildSelectFromPaths)(argv.select ?? 'clientMutationId');
+        const result = await client.mutation
+            .verifyStepUpCode(parsedAnswers, {
+            select: selectFields,
+        })
+            .execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed: verifyStepUpCode');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+};

package/auth/cli/commands.js

@@ -69,6 +69,7 @@ const send_account_deletion_email_1 = __importDefault(require("./commands/send-a
 const send_mfa_challenge_code_1 = __importDefault(require("./commands/send-mfa-challenge-code"));
 const send_phone_verification_code_1 = __importDefault(require("./commands/send-phone-verification-code"));
 const send_sms_otp_1 = __importDefault(require("./commands/send-sms-otp"));
+const send_step_up_code_1 = __importDefault(require("./commands/send-step-up-code"));
 const send_verification_email_1 = __importDefault(require("./commands/send-verification-email"));
 const set_password_1 = __importDefault(require("./commands/set-password"));
 const set_principal_entities_1 = __importDefault(require("./commands/set-principal-entities"));
@@ -85,6 +86,7 @@ const update_principal_1 = __importDefault(require("./commands/update-principal"
 const verify_email_1 = __importDefault(require("./commands/verify-email"));
 const verify_password_1 = __importDefault(require("./commands/verify-password"));
 const verify_phone_1 = __importDefault(require("./commands/verify-phone"));
+const verify_step_up_code_1 = __importDefault(require("./commands/verify-step-up-code"));
 const verify_totp_1 = __importDefault(require("./commands/verify-totp"));
 const createCommandMap = () => ({
     context: context_1.default,
@@ -146,6 +148,7 @@ const createCommandMap = () => ({
     'send-mfa-challenge-code': send_mfa_challenge_code_1.default,
     'send-phone-verification-code': send_phone_verification_code_1.default,
     'send-sms-otp': send_sms_otp_1.default,
+    'send-step-up-code': send_step_up_code_1.default,
     'send-verification-email': send_verification_email_1.default,
     'set-password': set_password_1.default,
     'set-principal-entities': set_principal_entities_1.default,
@@ -162,9 +165,10 @@ const createCommandMap = () => ({
     'verify-email': verify_email_1.default,
     'verify-password': verify_password_1.default,
     'verify-phone': verify_phone_1.default,
+    'verify-step-up-code': verify_step_up_code_1.default,
     'verify-totp': verify_totp_1.default,
 });
-const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  audit-log-auth       auditLogAuth CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  email                email CRUD operations\n  identity-provider    identityProvider CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  phone-number         phoneNumber CRUD operations\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  user                 user CRUD operations\n  user-setting         userSetting CRUD operations\n  user-settings-security userSettingsSecurity CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  current-ip-address   currentIpAddress\n  current-user         currentUser\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  get-mfa-status       getMfaStatus\n  require-step-up      requireStepUp\n  approve-device       approveDevice\n  check-password       checkPassword\n  complete-mfa-challenge completeMfaChallenge\n  confirm-delete-account confirmDeleteAccount\n  confirm-totp-setup   confirmTotpSetup\n  create-api-key       createApiKey\n  create-child-principal createChildPrincipal\n  create-org-api-key   createOrgApiKey\n  create-org-principal createOrgPrincipal\n  create-principal-from-preset createPrincipalFromPreset\n  delete-org-principal deleteOrgPrincipal\n  delete-principal     deletePrincipal\n  disable-email-mfa    disableEmailMfa\n  disable-sms-mfa      disableSmsMfa\n  disable-totp         disableTotp\n  disconnect-account   disconnectAccount\n  enable-email-mfa     enableEmailMfa\n  enable-sms-mfa       enableSmsMfa\n  enable-totp          enableTotp\n  extend-token-expires extendTokenExpires\n  forgot-password      forgotPassword\n  generate-backup-codes generateBackupCodes\n  link-identity        linkIdentity\n  mint-access-token    mintAccessToken\n  provision-bucket     Reconcile an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then enqueues the same\nstorage:provision_bucket job used by the INSERT trigger. This is\nidempotent for an already-reconciled bucket; enqueue failures become\nGraphQL errors.\n  refresh-access-token refreshAccessToken\n  request-cross-origin-token requestCrossOriginToken\n  request-magic-link   requestMagicLink\n  reset-password       resetPassword\n  revoke-api-key       revokeApiKey\n  revoke-org-api-key   revokeOrgApiKey\n  revoke-session       revokeSession\n  send-account-deletion-email sendAccountDeletionEmail\n  send-mfa-challenge-code sendMfaChallengeCode\n  send-phone-verification-code sendPhoneVerificationCode\n  send-sms-otp         sendSmsOtp\n  send-verification-email sendVerificationEmail\n  set-password         setPassword\n  set-principal-entities setPrincipalEntities\n  set-principal-scope  setPrincipalScope\n  sign-in              signIn\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-magic-link   signInMagicLink\n  sign-in-sms-otp      signInSmsOtp\n  sign-out             signOut\n  sign-up              signUp\n  sign-up-magic-link   signUpMagicLink\n  sign-up-sms          signUpSms\n  update-principal     updatePrincipal\n  verify-email         verifyEmail\n  verify-password      verifyPassword\n  verify-phone         verifyPhone\n  verify-totp          verifyTotp\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
+const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  audit-log-auth       auditLogAuth CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  email                email CRUD operations\n  identity-provider    identityProvider CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  phone-number         phoneNumber CRUD operations\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  user                 user CRUD operations\n  user-setting         userSetting CRUD operations\n  user-settings-security userSettingsSecurity CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  current-ip-address   currentIpAddress\n  current-user         currentUser\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  get-mfa-status       getMfaStatus\n  require-step-up      requireStepUp\n  approve-device       approveDevice\n  check-password       checkPassword\n  complete-mfa-challenge completeMfaChallenge\n  confirm-delete-account confirmDeleteAccount\n  confirm-totp-setup   confirmTotpSetup\n  create-api-key       createApiKey\n  create-child-principal createChildPrincipal\n  create-org-api-key   createOrgApiKey\n  create-org-principal createOrgPrincipal\n  create-principal-from-preset createPrincipalFromPreset\n  delete-org-principal deleteOrgPrincipal\n  delete-principal     deletePrincipal\n  disable-email-mfa    disableEmailMfa\n  disable-sms-mfa      disableSmsMfa\n  disable-totp         disableTotp\n  disconnect-account   disconnectAccount\n  enable-email-mfa     enableEmailMfa\n  enable-sms-mfa       enableSmsMfa\n  enable-totp          enableTotp\n  extend-token-expires extendTokenExpires\n  forgot-password      forgotPassword\n  generate-backup-codes generateBackupCodes\n  link-identity        linkIdentity\n  mint-access-token    mintAccessToken\n  provision-bucket     Reconcile an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then enqueues the same\nstorage:provision_bucket job used by the INSERT trigger. This is\nidempotent for an already-reconciled bucket; enqueue failures become\nGraphQL errors.\n  refresh-access-token refreshAccessToken\n  request-cross-origin-token requestCrossOriginToken\n  request-magic-link   requestMagicLink\n  reset-password       resetPassword\n  revoke-api-key       revokeApiKey\n  revoke-org-api-key   revokeOrgApiKey\n  revoke-session       revokeSession\n  send-account-deletion-email sendAccountDeletionEmail\n  send-mfa-challenge-code sendMfaChallengeCode\n  send-phone-verification-code sendPhoneVerificationCode\n  send-sms-otp         sendSmsOtp\n  send-step-up-code    sendStepUpCode\n  send-verification-email sendVerificationEmail\n  set-password         setPassword\n  set-principal-entities setPrincipalEntities\n  set-principal-scope  setPrincipalScope\n  sign-in              signIn\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-magic-link   signInMagicLink\n  sign-in-sms-otp      signInSmsOtp\n  sign-out             signOut\n  sign-up              signUp\n  sign-up-magic-link   signUpMagicLink\n  sign-up-sms          signUpSms\n  update-principal     updatePrincipal\n  verify-email         verifyEmail\n  verify-password      verifyPassword\n  verify-phone         verifyPhone\n  verify-step-up-code  verifyStepUpCode\n  verify-totp          verifyTotp\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
 const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/auth/cli/executor.d.ts

@@ -228,6 +228,11 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").SendSmsOtpPayloadSelect>) => import("../orm").QueryBuilder<{
             sendSmsOtp: import("../orm").InferSelectResult<import("../orm/input-types").SendSmsOtpPayload, S> | null;
         }>;
+        sendStepUpCode: <S extends import("../orm/input-types").SendStepUpCodePayloadSelect>(args: import("../orm/mutation").SendStepUpCodeVariables, options: {
+            select: S;
+        } & import("../orm").StrictSelect<S, import("../orm/input-types").SendStepUpCodePayloadSelect>) => import("../orm").QueryBuilder<{
+            sendStepUpCode: import("../orm").InferSelectResult<import("../orm/input-types").SendStepUpCodePayload, S> | null;
+        }>;
         sendVerificationEmail: <S extends import("../orm/input-types").SendVerificationEmailPayloadSelect>(args: import("../orm/mutation").SendVerificationEmailVariables, options: {
             select: S;
         } & import("../orm").StrictSelect<S, import("../orm/input-types").SendVerificationEmailPayloadSelect>) => import("../orm").QueryBuilder<{
@@ -308,6 +313,11 @@ export declare function getClient(contextName?: string): {
         } & import("../orm").StrictSelect<S, import("../orm/input-types").VerifyPhonePayloadSelect>) => import("../orm").QueryBuilder<{
             verifyPhone: import("../orm").InferSelectResult<import("../orm/input-types").VerifyPhonePayload, S> | null;
         }>;
+        verifyStepUpCode: <S extends import("../orm/input-types").VerifyStepUpCodePayloadSelect>(args: import("../orm/mutation").VerifyStepUpCodeVariables, options: {
+            select: S;
+        } & import("../orm").StrictSelect<S, import("../orm/input-types").VerifyStepUpCodePayloadSelect>) => import("../orm").QueryBuilder<{
+            verifyStepUpCode: import("../orm").InferSelectResult<import("../orm/input-types").VerifyStepUpCodePayload, S> | null;
+        }>;
         verifyTotp: <S extends import("../orm/input-types").VerifyTotpPayloadSelect>(args: import("../orm/mutation").VerifyTotpVariables, options: {
             select: S;
         } & import("../orm").StrictSelect<S, import("../orm/input-types").VerifyTotpPayloadSelect>) => import("../orm").QueryBuilder<{

package/auth/orm/index.d.ts

@@ -273,6 +273,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").SendSmsOtpPayloadSelect>) => import("./query-builder").QueryBuilder<{
             sendSmsOtp: import("./select-types").InferSelectResult<import("./input-types").SendSmsOtpPayload, S> | null;
         }>;
+        sendStepUpCode: <S extends import("./input-types").SendStepUpCodePayloadSelect>(args: import("./mutation").SendStepUpCodeVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").SendStepUpCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
+            sendStepUpCode: import("./select-types").InferSelectResult<import("./input-types").SendStepUpCodePayload, S> | null;
+        }>;
         sendVerificationEmail: <S extends import("./input-types").SendVerificationEmailPayloadSelect>(args: import("./mutation").SendVerificationEmailVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").SendVerificationEmailPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -353,6 +358,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").VerifyPhonePayloadSelect>) => import("./query-builder").QueryBuilder<{
             verifyPhone: import("./select-types").InferSelectResult<import("./input-types").VerifyPhonePayload, S> | null;
         }>;
+        verifyStepUpCode: <S extends import("./input-types").VerifyStepUpCodePayloadSelect>(args: import("./mutation").VerifyStepUpCodeVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").VerifyStepUpCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
+            verifyStepUpCode: import("./select-types").InferSelectResult<import("./input-types").VerifyStepUpCodePayload, S> | null;
+        }>;
         verifyTotp: <S extends import("./input-types").VerifyTotpPayloadSelect>(args: import("./mutation").VerifyTotpVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").VerifyTotpPayloadSelect>) => import("./query-builder").QueryBuilder<{

package/auth/orm/input-types.d.ts

@@ -1884,6 +1884,10 @@ export interface SendSmsOtpInput {
     clientMutationId?: string;
     phone?: string;
 }
+export interface SendStepUpCodeInput {
+    clientMutationId?: string;
+    method?: string;
+}
 export interface SendVerificationEmailInput {
     clientMutationId?: string;
     email?: ConstructiveInternalTypeEmail;
@@ -1980,6 +1984,10 @@ export interface VerifyPhoneInput {
     code?: string;
     phone?: string;
 }
+export interface VerifyStepUpCodeInput {
+    clientMutationId?: string;
+    code: string;
+}
 export interface VerifyTotpInput {
     clientMutationId?: string;
     totpValue: string;
@@ -3619,6 +3627,14 @@ export type SendSmsOtpPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface SendStepUpCodePayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
+export type SendStepUpCodePayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface SendVerificationEmailPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -3759,6 +3775,14 @@ export type VerifyPhonePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface VerifyStepUpCodePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type VerifyStepUpCodePayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface VerifyTotpPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -4268,6 +4292,7 @@ export interface SignInRecord {
     isVerified?: boolean | null;
     mfaChallengeToken?: string | null;
     mfaRequired?: boolean | null;
+    mfaSetupRequired?: boolean | null;
     outDeviceToken?: string | null;
     totpEnabled?: boolean | null;
     userId?: string | null;
@@ -4280,6 +4305,7 @@ export type SignInRecordSelect = {
     isVerified?: boolean;
     mfaChallengeToken?: boolean;
     mfaRequired?: boolean;
+    mfaSetupRequired?: boolean;
     outDeviceToken?: boolean;
     totpEnabled?: boolean;
     userId?: boolean;

package/auth/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { ApproveDeviceInput, CheckPasswordInput, CompleteMfaChallengeInput, ConfirmDeleteAccountInput, ConfirmTotpSetupInput, CreateApiKeyInput, CreateChildPrincipalInput, CreateOrgApiKeyInput, CreateOrgPrincipalInput, CreatePrincipalFromPresetInput, DeleteOrgPrincipalInput, DeletePrincipalInput, DisableEmailMfaInput, DisableSmsMfaInput, DisableTotpInput, DisconnectAccountInput, EnableEmailMfaInput, EnableSmsMfaInput, EnableTotpInput, ExtendTokenExpiresInput, ForgotPasswordInput, GenerateBackupCodesInput, LinkIdentityInput, MintAccessTokenInput, ProvisionBucketInput, RefreshAccessTokenInput, RequestCrossOriginTokenInput, RequestMagicLinkInput, ResetPasswordInput, RevokeApiKeyInput, RevokeOrgApiKeyInput, RevokeSessionInput, SendAccountDeletionEmailInput, SendMfaChallengeCodeInput, SendPhoneVerificationCodeInput, SendSmsOtpInput, SendVerificationEmailInput, SetPasswordInput, SetPrincipalEntitiesInput, SetPrincipalScopeInput, SignInInput, SignInCrossOriginInput, SignInMagicLinkInput, SignInSmsOtpInput, SignOutInput, SignUpInput, SignUpMagicLinkInput, SignUpSmsInput, UpdatePrincipalInput, VerifyEmailInput, VerifyPasswordInput, VerifyPhoneInput, VerifyTotpInput, ApproveDevicePayload, CheckPasswordPayload, CompleteMfaChallengePayload, ConfirmDeleteAccountPayload, ConfirmTotpSetupPayload, CreateApiKeyPayload, CreateChildPrincipalPayload, CreateOrgApiKeyPayload, CreateOrgPrincipalPayload, CreatePrincipalFromPresetPayload, DeleteOrgPrincipalPayload, DeletePrincipalPayload, DisableEmailMfaPayload, DisableSmsMfaPayload, DisableTotpPayload, DisconnectAccountPayload, EnableEmailMfaPayload, EnableSmsMfaPayload, EnableTotpPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, GenerateBackupCodesPayload, LinkIdentityPayload, MintAccessTokenPayload, ProvisionBucketPayload, RefreshAccessTokenPayload, RequestCrossOriginTokenPayload, RequestMagicLinkPayload, ResetPasswordPayload, RevokeApiKeyPayload, RevokeOrgApiKeyPayload, RevokeSessionPayload, SendAccountDeletionEmailPayload, SendMfaChallengeCodePayload, SendPhoneVerificationCodePayload, SendSmsOtpPayload, SendVerificationEmailPayload, SetPasswordPayload, SetPrincipalEntitiesPayload, SetPrincipalScopePayload, SignInPayload, SignInCrossOriginPayload, SignInMagicLinkPayload, SignInSmsOtpPayload, SignOutPayload, SignUpPayload, SignUpMagicLinkPayload, SignUpSmsPayload, UpdatePrincipalPayload, VerifyEmailPayload, VerifyPasswordPayload, VerifyPhonePayload, VerifyTotpPayload, ApproveDevicePayloadSelect, CheckPasswordPayloadSelect, CompleteMfaChallengePayloadSelect, ConfirmDeleteAccountPayloadSelect, ConfirmTotpSetupPayloadSelect, CreateApiKeyPayloadSelect, CreateChildPrincipalPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateOrgPrincipalPayloadSelect, CreatePrincipalFromPresetPayloadSelect, DeleteOrgPrincipalPayloadSelect, DeletePrincipalPayloadSelect, DisableEmailMfaPayloadSelect, DisableSmsMfaPayloadSelect, DisableTotpPayloadSelect, DisconnectAccountPayloadSelect, EnableEmailMfaPayloadSelect, EnableSmsMfaPayloadSelect, EnableTotpPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, GenerateBackupCodesPayloadSelect, LinkIdentityPayloadSelect, MintAccessTokenPayloadSelect, ProvisionBucketPayloadSelect, RefreshAccessTokenPayloadSelect, RequestCrossOriginTokenPayloadSelect, RequestMagicLinkPayloadSelect, ResetPasswordPayloadSelect, RevokeApiKeyPayloadSelect, RevokeOrgApiKeyPayloadSelect, RevokeSessionPayloadSelect, SendAccountDeletionEmailPayloadSelect, SendMfaChallengeCodePayloadSelect, SendPhoneVerificationCodePayloadSelect, SendSmsOtpPayloadSelect, SendVerificationEmailPayloadSelect, SetPasswordPayloadSelect, SetPrincipalEntitiesPayloadSelect, SetPrincipalScopePayloadSelect, SignInPayloadSelect, SignInCrossOriginPayloadSelect, SignInMagicLinkPayloadSelect, SignInSmsOtpPayloadSelect, SignOutPayloadSelect, SignUpPayloadSelect, SignUpMagicLinkPayloadSelect, SignUpSmsPayloadSelect, UpdatePrincipalPayloadSelect, VerifyEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyPhonePayloadSelect, VerifyTotpPayloadSelect } from '../input-types';
+import type { ApproveDeviceInput, CheckPasswordInput, CompleteMfaChallengeInput, ConfirmDeleteAccountInput, ConfirmTotpSetupInput, CreateApiKeyInput, CreateChildPrincipalInput, CreateOrgApiKeyInput, CreateOrgPrincipalInput, CreatePrincipalFromPresetInput, DeleteOrgPrincipalInput, DeletePrincipalInput, DisableEmailMfaInput, DisableSmsMfaInput, DisableTotpInput, DisconnectAccountInput, EnableEmailMfaInput, EnableSmsMfaInput, EnableTotpInput, ExtendTokenExpiresInput, ForgotPasswordInput, GenerateBackupCodesInput, LinkIdentityInput, MintAccessTokenInput, ProvisionBucketInput, RefreshAccessTokenInput, RequestCrossOriginTokenInput, RequestMagicLinkInput, ResetPasswordInput, RevokeApiKeyInput, RevokeOrgApiKeyInput, RevokeSessionInput, SendAccountDeletionEmailInput, SendMfaChallengeCodeInput, SendPhoneVerificationCodeInput, SendSmsOtpInput, SendStepUpCodeInput, SendVerificationEmailInput, SetPasswordInput, SetPrincipalEntitiesInput, SetPrincipalScopeInput, SignInInput, SignInCrossOriginInput, SignInMagicLinkInput, SignInSmsOtpInput, SignOutInput, SignUpInput, SignUpMagicLinkInput, SignUpSmsInput, UpdatePrincipalInput, VerifyEmailInput, VerifyPasswordInput, VerifyPhoneInput, VerifyStepUpCodeInput, VerifyTotpInput, ApproveDevicePayload, CheckPasswordPayload, CompleteMfaChallengePayload, ConfirmDeleteAccountPayload, ConfirmTotpSetupPayload, CreateApiKeyPayload, CreateChildPrincipalPayload, CreateOrgApiKeyPayload, CreateOrgPrincipalPayload, CreatePrincipalFromPresetPayload, DeleteOrgPrincipalPayload, DeletePrincipalPayload, DisableEmailMfaPayload, DisableSmsMfaPayload, DisableTotpPayload, DisconnectAccountPayload, EnableEmailMfaPayload, EnableSmsMfaPayload, EnableTotpPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, GenerateBackupCodesPayload, LinkIdentityPayload, MintAccessTokenPayload, ProvisionBucketPayload, RefreshAccessTokenPayload, RequestCrossOriginTokenPayload, RequestMagicLinkPayload, ResetPasswordPayload, RevokeApiKeyPayload, RevokeOrgApiKeyPayload, RevokeSessionPayload, SendAccountDeletionEmailPayload, SendMfaChallengeCodePayload, SendPhoneVerificationCodePayload, SendSmsOtpPayload, SendStepUpCodePayload, SendVerificationEmailPayload, SetPasswordPayload, SetPrincipalEntitiesPayload, SetPrincipalScopePayload, SignInPayload, SignInCrossOriginPayload, SignInMagicLinkPayload, SignInSmsOtpPayload, SignOutPayload, SignUpPayload, SignUpMagicLinkPayload, SignUpSmsPayload, UpdatePrincipalPayload, VerifyEmailPayload, VerifyPasswordPayload, VerifyPhonePayload, VerifyStepUpCodePayload, VerifyTotpPayload, ApproveDevicePayloadSelect, CheckPasswordPayloadSelect, CompleteMfaChallengePayloadSelect, ConfirmDeleteAccountPayloadSelect, ConfirmTotpSetupPayloadSelect, CreateApiKeyPayloadSelect, CreateChildPrincipalPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateOrgPrincipalPayloadSelect, CreatePrincipalFromPresetPayloadSelect, DeleteOrgPrincipalPayloadSelect, DeletePrincipalPayloadSelect, DisableEmailMfaPayloadSelect, DisableSmsMfaPayloadSelect, DisableTotpPayloadSelect, DisconnectAccountPayloadSelect, EnableEmailMfaPayloadSelect, EnableSmsMfaPayloadSelect, EnableTotpPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, GenerateBackupCodesPayloadSelect, LinkIdentityPayloadSelect, MintAccessTokenPayloadSelect, ProvisionBucketPayloadSelect, RefreshAccessTokenPayloadSelect, RequestCrossOriginTokenPayloadSelect, RequestMagicLinkPayloadSelect, ResetPasswordPayloadSelect, RevokeApiKeyPayloadSelect, RevokeOrgApiKeyPayloadSelect, RevokeSessionPayloadSelect, SendAccountDeletionEmailPayloadSelect, SendMfaChallengeCodePayloadSelect, SendPhoneVerificationCodePayloadSelect, SendSmsOtpPayloadSelect, SendStepUpCodePayloadSelect, SendVerificationEmailPayloadSelect, SetPasswordPayloadSelect, SetPrincipalEntitiesPayloadSelect, SetPrincipalScopePayloadSelect, SignInPayloadSelect, SignInCrossOriginPayloadSelect, SignInMagicLinkPayloadSelect, SignInSmsOtpPayloadSelect, SignOutPayloadSelect, SignUpPayloadSelect, SignUpMagicLinkPayloadSelect, SignUpSmsPayloadSelect, UpdatePrincipalPayloadSelect, VerifyEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyPhonePayloadSelect, VerifyStepUpCodePayloadSelect, VerifyTotpPayloadSelect } from '../input-types';
 export interface ApproveDeviceVariables {
     input: ApproveDeviceInput;
 }
@@ -123,6 +123,9 @@ export interface SendPhoneVerificationCodeVariables {
 export interface SendSmsOtpVariables {
     input: SendSmsOtpInput;
 }
+export interface SendStepUpCodeVariables {
+    input: SendStepUpCodeInput;
+}
 export interface SendVerificationEmailVariables {
     input: SendVerificationEmailInput;
 }
@@ -171,6 +174,9 @@ export interface VerifyPasswordVariables {
 export interface VerifyPhoneVariables {
     input: VerifyPhoneInput;
 }
+export interface VerifyStepUpCodeVariables {
+    input: VerifyStepUpCodeInput;
+}
 export interface VerifyTotpVariables {
     input: VerifyTotpInput;
 }
@@ -355,6 +361,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SendSmsOtpPayloadSelect>) => QueryBuilder<{
         sendSmsOtp: InferSelectResult<SendSmsOtpPayload, S> | null;
     }>;
+    sendStepUpCode: <S extends SendStepUpCodePayloadSelect>(args: SendStepUpCodeVariables, options: {
+        select: S;
+    } & StrictSelect<S, SendStepUpCodePayloadSelect>) => QueryBuilder<{
+        sendStepUpCode: InferSelectResult<SendStepUpCodePayload, S> | null;
+    }>;
     sendVerificationEmail: <S extends SendVerificationEmailPayloadSelect>(args: SendVerificationEmailVariables, options: {
         select: S;
     } & StrictSelect<S, SendVerificationEmailPayloadSelect>) => QueryBuilder<{
@@ -435,6 +446,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, VerifyPhonePayloadSelect>) => QueryBuilder<{
         verifyPhone: InferSelectResult<VerifyPhonePayload, S> | null;
     }>;
+    verifyStepUpCode: <S extends VerifyStepUpCodePayloadSelect>(args: VerifyStepUpCodeVariables, options: {
+        select: S;
+    } & StrictSelect<S, VerifyStepUpCodePayloadSelect>) => QueryBuilder<{
+        verifyStepUpCode: InferSelectResult<VerifyStepUpCodePayload, S> | null;
+    }>;
     verifyTotp: <S extends VerifyTotpPayloadSelect>(args: VerifyTotpVariables, options: {
         select: S;
     } & StrictSelect<S, VerifyTotpPayloadSelect>) => QueryBuilder<{

package/auth/orm/mutation/index.js

@@ -437,6 +437,18 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'SendSmsOtpPayload'),
         }),
+        sendStepUpCode: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'SendStepUpCode',
+            fieldName: 'sendStepUpCode',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'SendStepUpCode', 'sendStepUpCode', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'SendStepUpCodeInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'SendStepUpCodePayload'),
+        }),
         sendVerificationEmail: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',
@@ -629,6 +641,18 @@ function createMutationOperations(client) {
                 },
             ], input_types_1.connectionFieldsMap, 'VerifyPhonePayload'),
         }),
+        verifyStepUpCode: (args, options) => new query_builder_1.QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'VerifyStepUpCode',
+            fieldName: 'verifyStepUpCode',
+            ...(0, query_builder_1.buildCustomDocument)('mutation', 'VerifyStepUpCode', 'verifyStepUpCode', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'VerifyStepUpCodeInput!',
+                },
+            ], input_types_1.connectionFieldsMap, 'VerifyStepUpCodePayload'),
+        }),
         verifyTotp: (args, options) => new query_builder_1.QueryBuilder({
             client,
             operation: 'mutation',

package/esm/auth/cli/commands/send-step-up-code.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI command for mutation sendStepUpCode
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/esm/auth/cli/commands/send-step-up-code.js

@@ -0,0 +1,34 @@
+import { getClient } from '../executor';
+import { unflattenDotNotation, buildSelectFromPaths } from '../utils';
+export default async (argv, prompter, _options) => {
+    try {
+        if (argv.help || argv.h) {
+            console.log('send-step-up-code - sendStepUpCode\n\nUsage: send-step-up-code [OPTIONS]\n');
+            process.exit(0);
+        }
+        const answers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'input',
+                message: 'The exclusive input argument for this mutation. An object type, make sure to see documentation for this object\u2019s fields.',
+                required: true,
+            },
+        ]);
+        const client = getClient();
+        const parsedAnswers = unflattenDotNotation(answers);
+        const selectFields = buildSelectFromPaths(argv.select ?? 'clientMutationId');
+        const result = await client.mutation
+            .sendStepUpCode(parsedAnswers, {
+            select: selectFields,
+        })
+            .execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed: sendStepUpCode');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+};

package/esm/auth/cli/commands/verify-step-up-code.d.ts

@@ -0,0 +1,8 @@
+/**
+ * CLI command for mutation verifyStepUpCode
+ * @generated by @constructive-io/graphql-codegen
+ * DO NOT EDIT - changes will be overwritten
+ */
+import { CLIOptions, Inquirerer } from 'inquirerer';
+declare const _default: (argv: Partial<Record<string, unknown>>, prompter: Inquirerer, _options: CLIOptions) => Promise<void>;
+export default _default;

package/esm/auth/cli/commands/verify-step-up-code.js

@@ -0,0 +1,34 @@
+import { getClient } from '../executor';
+import { unflattenDotNotation, buildSelectFromPaths } from '../utils';
+export default async (argv, prompter, _options) => {
+    try {
+        if (argv.help || argv.h) {
+            console.log('verify-step-up-code - verifyStepUpCode\n\nUsage: verify-step-up-code [OPTIONS]\n');
+            process.exit(0);
+        }
+        const answers = await prompter.prompt(argv, [
+            {
+                type: 'text',
+                name: 'input',
+                message: 'The exclusive input argument for this mutation. An object type, make sure to see documentation for this object\u2019s fields.',
+                required: true,
+            },
+        ]);
+        const client = getClient();
+        const parsedAnswers = unflattenDotNotation(answers);
+        const selectFields = buildSelectFromPaths(argv.select ?? 'clientMutationId');
+        const result = await client.mutation
+            .verifyStepUpCode(parsedAnswers, {
+            select: selectFields,
+        })
+            .execute();
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        console.error('Failed: verifyStepUpCode');
+        if (error instanceof Error) {
+            console.error(error.message);
+        }
+        process.exit(1);
+    }
+};

package/esm/auth/cli/commands.js

@@ -63,6 +63,7 @@ import sendAccountDeletionEmailCmd from './commands/send-account-deletion-email'
 import sendMfaChallengeCodeCmd from './commands/send-mfa-challenge-code';
 import sendPhoneVerificationCodeCmd from './commands/send-phone-verification-code';
 import sendSmsOtpCmd from './commands/send-sms-otp';
+import sendStepUpCodeCmd from './commands/send-step-up-code';
 import sendVerificationEmailCmd from './commands/send-verification-email';
 import setPasswordCmd from './commands/set-password';
 import setPrincipalEntitiesCmd from './commands/set-principal-entities';
@@ -79,6 +80,7 @@ import updatePrincipalCmd from './commands/update-principal';
 import verifyEmailCmd from './commands/verify-email';
 import verifyPasswordCmd from './commands/verify-password';
 import verifyPhoneCmd from './commands/verify-phone';
+import verifyStepUpCodeCmd from './commands/verify-step-up-code';
 import verifyTotpCmd from './commands/verify-totp';
 const createCommandMap = () => ({
     context: contextCmd,
@@ -140,6 +142,7 @@ const createCommandMap = () => ({
     'send-mfa-challenge-code': sendMfaChallengeCodeCmd,
     'send-phone-verification-code': sendPhoneVerificationCodeCmd,
     'send-sms-otp': sendSmsOtpCmd,
+    'send-step-up-code': sendStepUpCodeCmd,
     'send-verification-email': sendVerificationEmailCmd,
     'set-password': setPasswordCmd,
     'set-principal-entities': setPrincipalEntitiesCmd,
@@ -156,9 +159,10 @@ const createCommandMap = () => ({
     'verify-email': verifyEmailCmd,
     'verify-password': verifyPasswordCmd,
     'verify-phone': verifyPhoneCmd,
+    'verify-step-up-code': verifyStepUpCodeCmd,
     'verify-totp': verifyTotpCmd,
 });
-const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  audit-log-auth       auditLogAuth CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  email                email CRUD operations\n  identity-provider    identityProvider CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  phone-number         phoneNumber CRUD operations\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  user                 user CRUD operations\n  user-setting         userSetting CRUD operations\n  user-settings-security userSettingsSecurity CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  current-ip-address   currentIpAddress\n  current-user         currentUser\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  get-mfa-status       getMfaStatus\n  require-step-up      requireStepUp\n  approve-device       approveDevice\n  check-password       checkPassword\n  complete-mfa-challenge completeMfaChallenge\n  confirm-delete-account confirmDeleteAccount\n  confirm-totp-setup   confirmTotpSetup\n  create-api-key       createApiKey\n  create-child-principal createChildPrincipal\n  create-org-api-key   createOrgApiKey\n  create-org-principal createOrgPrincipal\n  create-principal-from-preset createPrincipalFromPreset\n  delete-org-principal deleteOrgPrincipal\n  delete-principal     deletePrincipal\n  disable-email-mfa    disableEmailMfa\n  disable-sms-mfa      disableSmsMfa\n  disable-totp         disableTotp\n  disconnect-account   disconnectAccount\n  enable-email-mfa     enableEmailMfa\n  enable-sms-mfa       enableSmsMfa\n  enable-totp          enableTotp\n  extend-token-expires extendTokenExpires\n  forgot-password      forgotPassword\n  generate-backup-codes generateBackupCodes\n  link-identity        linkIdentity\n  mint-access-token    mintAccessToken\n  provision-bucket     Reconcile an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then enqueues the same\nstorage:provision_bucket job used by the INSERT trigger. This is\nidempotent for an already-reconciled bucket; enqueue failures become\nGraphQL errors.\n  refresh-access-token refreshAccessToken\n  request-cross-origin-token requestCrossOriginToken\n  request-magic-link   requestMagicLink\n  reset-password       resetPassword\n  revoke-api-key       revokeApiKey\n  revoke-org-api-key   revokeOrgApiKey\n  revoke-session       revokeSession\n  send-account-deletion-email sendAccountDeletionEmail\n  send-mfa-challenge-code sendMfaChallengeCode\n  send-phone-verification-code sendPhoneVerificationCode\n  send-sms-otp         sendSmsOtp\n  send-verification-email sendVerificationEmail\n  set-password         setPassword\n  set-principal-entities setPrincipalEntities\n  set-principal-scope  setPrincipalScope\n  sign-in              signIn\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-magic-link   signInMagicLink\n  sign-in-sms-otp      signInSmsOtp\n  sign-out             signOut\n  sign-up              signUp\n  sign-up-magic-link   signUpMagicLink\n  sign-up-sms          signUpSms\n  update-principal     updatePrincipal\n  verify-email         verifyEmail\n  verify-password      verifyPassword\n  verify-phone         verifyPhone\n  verify-totp          verifyTotp\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
+const usage = '\ncsdk <command>\n\nCommands:\n  context               Manage API contexts\n  auth                  Manage authentication\n  audit-log-auth       auditLogAuth CRUD operations\n  crypto-address       cryptoAddress CRUD operations\n  email                email CRUD operations\n  identity-provider    identityProvider CRUD operations\n  org-api-key-list     orgApiKeyList CRUD operations\n  phone-number         phoneNumber CRUD operations\n  principal            principal CRUD operations\n  principal-entity     principalEntity CRUD operations\n  principal-scope-override principalScopeOverride CRUD operations\n  role-type            roleType CRUD operations\n  user-connected-account userConnectedAccount CRUD operations\n  user                 user CRUD operations\n  user-setting         userSetting CRUD operations\n  user-settings-security userSettingsSecurity CRUD operations\n  webauthn-credential  webauthnCredential CRUD operations\n  current-ip-address   currentIpAddress\n  current-user         currentUser\n  current-user-agent   currentUserAgent\n  current-user-id      currentUserId\n  get-mfa-status       getMfaStatus\n  require-step-up      requireStepUp\n  approve-device       approveDevice\n  check-password       checkPassword\n  complete-mfa-challenge completeMfaChallenge\n  confirm-delete-account confirmDeleteAccount\n  confirm-totp-setup   confirmTotpSetup\n  create-api-key       createApiKey\n  create-child-principal createChildPrincipal\n  create-org-api-key   createOrgApiKey\n  create-org-principal createOrgPrincipal\n  create-principal-from-preset createPrincipalFromPreset\n  delete-org-principal deleteOrgPrincipal\n  delete-principal     deletePrincipal\n  disable-email-mfa    disableEmailMfa\n  disable-sms-mfa      disableSmsMfa\n  disable-totp         disableTotp\n  disconnect-account   disconnectAccount\n  enable-email-mfa     enableEmailMfa\n  enable-sms-mfa       enableSmsMfa\n  enable-totp          enableTotp\n  extend-token-expires extendTokenExpires\n  forgot-password      forgotPassword\n  generate-backup-codes generateBackupCodes\n  link-identity        linkIdentity\n  mint-access-token    mintAccessToken\n  provision-bucket     Reconcile an S3 bucket for a logical bucket in the database.\nReads the bucket config via RLS, then enqueues the same\nstorage:provision_bucket job used by the INSERT trigger. This is\nidempotent for an already-reconciled bucket; enqueue failures become\nGraphQL errors.\n  refresh-access-token refreshAccessToken\n  request-cross-origin-token requestCrossOriginToken\n  request-magic-link   requestMagicLink\n  reset-password       resetPassword\n  revoke-api-key       revokeApiKey\n  revoke-org-api-key   revokeOrgApiKey\n  revoke-session       revokeSession\n  send-account-deletion-email sendAccountDeletionEmail\n  send-mfa-challenge-code sendMfaChallengeCode\n  send-phone-verification-code sendPhoneVerificationCode\n  send-sms-otp         sendSmsOtp\n  send-step-up-code    sendStepUpCode\n  send-verification-email sendVerificationEmail\n  set-password         setPassword\n  set-principal-entities setPrincipalEntities\n  set-principal-scope  setPrincipalScope\n  sign-in              signIn\n  sign-in-cross-origin signInCrossOrigin\n  sign-in-magic-link   signInMagicLink\n  sign-in-sms-otp      signInSmsOtp\n  sign-out             signOut\n  sign-up              signUp\n  sign-up-magic-link   signUpMagicLink\n  sign-up-sms          signUpSms\n  update-principal     updatePrincipal\n  verify-email         verifyEmail\n  verify-password      verifyPassword\n  verify-phone         verifyPhone\n  verify-step-up-code  verifyStepUpCode\n  verify-totp          verifyTotp\n\n  --help, -h            Show this help message\n  --version, -v         Show version\n';
 export const commands = async (argv, prompter, options) => {
     if (argv.help || argv.h) {
         console.log(usage);

package/esm/auth/cli/executor.d.ts

@@ -228,6 +228,11 @@ export declare function getClient(contextName?: string): {
         } & import("..").StrictSelect<S, import("../orm/input-types").SendSmsOtpPayloadSelect>) => import("..").QueryBuilder<{
             sendSmsOtp: import("..").InferSelectResult<import("../orm/input-types").SendSmsOtpPayload, S> | null;
         }>;
+        sendStepUpCode: <S extends import("../orm/input-types").SendStepUpCodePayloadSelect>(args: import("../orm/mutation").SendStepUpCodeVariables, options: {
+            select: S;
+        } & import("..").StrictSelect<S, import("../orm/input-types").SendStepUpCodePayloadSelect>) => import("..").QueryBuilder<{
+            sendStepUpCode: import("..").InferSelectResult<import("../orm/input-types").SendStepUpCodePayload, S> | null;
+        }>;
         sendVerificationEmail: <S extends import("../orm/input-types").SendVerificationEmailPayloadSelect>(args: import("../orm/mutation").SendVerificationEmailVariables, options: {
             select: S;
         } & import("..").StrictSelect<S, import("../orm/input-types").SendVerificationEmailPayloadSelect>) => import("..").QueryBuilder<{
@@ -308,6 +313,11 @@ export declare function getClient(contextName?: string): {
         } & import("..").StrictSelect<S, import("../orm/input-types").VerifyPhonePayloadSelect>) => import("..").QueryBuilder<{
             verifyPhone: import("..").InferSelectResult<import("../orm/input-types").VerifyPhonePayload, S> | null;
         }>;
+        verifyStepUpCode: <S extends import("../orm/input-types").VerifyStepUpCodePayloadSelect>(args: import("../orm/mutation").VerifyStepUpCodeVariables, options: {
+            select: S;
+        } & import("..").StrictSelect<S, import("../orm/input-types").VerifyStepUpCodePayloadSelect>) => import("..").QueryBuilder<{
+            verifyStepUpCode: import("..").InferSelectResult<import("../orm/input-types").VerifyStepUpCodePayload, S> | null;
+        }>;
         verifyTotp: <S extends import("../orm/input-types").VerifyTotpPayloadSelect>(args: import("../orm/mutation").VerifyTotpVariables, options: {
             select: S;
         } & import("..").StrictSelect<S, import("../orm/input-types").VerifyTotpPayloadSelect>) => import("..").QueryBuilder<{

package/esm/auth/orm/index.d.ts

@@ -273,6 +273,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").SendSmsOtpPayloadSelect>) => import("./query-builder").QueryBuilder<{
             sendSmsOtp: import("./select-types").InferSelectResult<import("./input-types").SendSmsOtpPayload, S> | null;
         }>;
+        sendStepUpCode: <S extends import("./input-types").SendStepUpCodePayloadSelect>(args: import("./mutation").SendStepUpCodeVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").SendStepUpCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
+            sendStepUpCode: import("./select-types").InferSelectResult<import("./input-types").SendStepUpCodePayload, S> | null;
+        }>;
         sendVerificationEmail: <S extends import("./input-types").SendVerificationEmailPayloadSelect>(args: import("./mutation").SendVerificationEmailVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").SendVerificationEmailPayloadSelect>) => import("./query-builder").QueryBuilder<{
@@ -353,6 +358,11 @@ export declare function createClient(config: OrmClientConfig): {
         } & import("./select-types").StrictSelect<S, import("./input-types").VerifyPhonePayloadSelect>) => import("./query-builder").QueryBuilder<{
             verifyPhone: import("./select-types").InferSelectResult<import("./input-types").VerifyPhonePayload, S> | null;
         }>;
+        verifyStepUpCode: <S extends import("./input-types").VerifyStepUpCodePayloadSelect>(args: import("./mutation").VerifyStepUpCodeVariables, options: {
+            select: S;
+        } & import("./select-types").StrictSelect<S, import("./input-types").VerifyStepUpCodePayloadSelect>) => import("./query-builder").QueryBuilder<{
+            verifyStepUpCode: import("./select-types").InferSelectResult<import("./input-types").VerifyStepUpCodePayload, S> | null;
+        }>;
         verifyTotp: <S extends import("./input-types").VerifyTotpPayloadSelect>(args: import("./mutation").VerifyTotpVariables, options: {
             select: S;
         } & import("./select-types").StrictSelect<S, import("./input-types").VerifyTotpPayloadSelect>) => import("./query-builder").QueryBuilder<{

package/esm/auth/orm/input-types.d.ts

@@ -1884,6 +1884,10 @@ export interface SendSmsOtpInput {
     clientMutationId?: string;
     phone?: string;
 }
+export interface SendStepUpCodeInput {
+    clientMutationId?: string;
+    method?: string;
+}
 export interface SendVerificationEmailInput {
     clientMutationId?: string;
     email?: ConstructiveInternalTypeEmail;
@@ -1980,6 +1984,10 @@ export interface VerifyPhoneInput {
     code?: string;
     phone?: string;
 }
+export interface VerifyStepUpCodeInput {
+    clientMutationId?: string;
+    code: string;
+}
 export interface VerifyTotpInput {
     clientMutationId?: string;
     totpValue: string;
@@ -3619,6 +3627,14 @@ export type SendSmsOtpPayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface SendStepUpCodePayload {
+    clientMutationId?: string | null;
+    result?: string | null;
+}
+export type SendStepUpCodePayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface SendVerificationEmailPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -3759,6 +3775,14 @@ export type VerifyPhonePayloadSelect = {
     clientMutationId?: boolean;
     result?: boolean;
 };
+export interface VerifyStepUpCodePayload {
+    clientMutationId?: string | null;
+    result?: boolean | null;
+}
+export type VerifyStepUpCodePayloadSelect = {
+    clientMutationId?: boolean;
+    result?: boolean;
+};
 export interface VerifyTotpPayload {
     clientMutationId?: string | null;
     result?: boolean | null;
@@ -4268,6 +4292,7 @@ export interface SignInRecord {
     isVerified?: boolean | null;
     mfaChallengeToken?: string | null;
     mfaRequired?: boolean | null;
+    mfaSetupRequired?: boolean | null;
     outDeviceToken?: string | null;
     totpEnabled?: boolean | null;
     userId?: string | null;
@@ -4280,6 +4305,7 @@ export type SignInRecordSelect = {
     isVerified?: boolean;
     mfaChallengeToken?: boolean;
     mfaRequired?: boolean;
+    mfaSetupRequired?: boolean;
     outDeviceToken?: boolean;
     totpEnabled?: boolean;
     userId?: boolean;

package/esm/auth/orm/mutation/index.d.ts

@@ -6,7 +6,7 @@
 import { OrmClient } from '../client';
 import { QueryBuilder } from '../query-builder';
 import type { InferSelectResult, StrictSelect } from '../select-types';
-import type { ApproveDeviceInput, CheckPasswordInput, CompleteMfaChallengeInput, ConfirmDeleteAccountInput, ConfirmTotpSetupInput, CreateApiKeyInput, CreateChildPrincipalInput, CreateOrgApiKeyInput, CreateOrgPrincipalInput, CreatePrincipalFromPresetInput, DeleteOrgPrincipalInput, DeletePrincipalInput, DisableEmailMfaInput, DisableSmsMfaInput, DisableTotpInput, DisconnectAccountInput, EnableEmailMfaInput, EnableSmsMfaInput, EnableTotpInput, ExtendTokenExpiresInput, ForgotPasswordInput, GenerateBackupCodesInput, LinkIdentityInput, MintAccessTokenInput, ProvisionBucketInput, RefreshAccessTokenInput, RequestCrossOriginTokenInput, RequestMagicLinkInput, ResetPasswordInput, RevokeApiKeyInput, RevokeOrgApiKeyInput, RevokeSessionInput, SendAccountDeletionEmailInput, SendMfaChallengeCodeInput, SendPhoneVerificationCodeInput, SendSmsOtpInput, SendVerificationEmailInput, SetPasswordInput, SetPrincipalEntitiesInput, SetPrincipalScopeInput, SignInInput, SignInCrossOriginInput, SignInMagicLinkInput, SignInSmsOtpInput, SignOutInput, SignUpInput, SignUpMagicLinkInput, SignUpSmsInput, UpdatePrincipalInput, VerifyEmailInput, VerifyPasswordInput, VerifyPhoneInput, VerifyTotpInput, ApproveDevicePayload, CheckPasswordPayload, CompleteMfaChallengePayload, ConfirmDeleteAccountPayload, ConfirmTotpSetupPayload, CreateApiKeyPayload, CreateChildPrincipalPayload, CreateOrgApiKeyPayload, CreateOrgPrincipalPayload, CreatePrincipalFromPresetPayload, DeleteOrgPrincipalPayload, DeletePrincipalPayload, DisableEmailMfaPayload, DisableSmsMfaPayload, DisableTotpPayload, DisconnectAccountPayload, EnableEmailMfaPayload, EnableSmsMfaPayload, EnableTotpPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, GenerateBackupCodesPayload, LinkIdentityPayload, MintAccessTokenPayload, ProvisionBucketPayload, RefreshAccessTokenPayload, RequestCrossOriginTokenPayload, RequestMagicLinkPayload, ResetPasswordPayload, RevokeApiKeyPayload, RevokeOrgApiKeyPayload, RevokeSessionPayload, SendAccountDeletionEmailPayload, SendMfaChallengeCodePayload, SendPhoneVerificationCodePayload, SendSmsOtpPayload, SendVerificationEmailPayload, SetPasswordPayload, SetPrincipalEntitiesPayload, SetPrincipalScopePayload, SignInPayload, SignInCrossOriginPayload, SignInMagicLinkPayload, SignInSmsOtpPayload, SignOutPayload, SignUpPayload, SignUpMagicLinkPayload, SignUpSmsPayload, UpdatePrincipalPayload, VerifyEmailPayload, VerifyPasswordPayload, VerifyPhonePayload, VerifyTotpPayload, ApproveDevicePayloadSelect, CheckPasswordPayloadSelect, CompleteMfaChallengePayloadSelect, ConfirmDeleteAccountPayloadSelect, ConfirmTotpSetupPayloadSelect, CreateApiKeyPayloadSelect, CreateChildPrincipalPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateOrgPrincipalPayloadSelect, CreatePrincipalFromPresetPayloadSelect, DeleteOrgPrincipalPayloadSelect, DeletePrincipalPayloadSelect, DisableEmailMfaPayloadSelect, DisableSmsMfaPayloadSelect, DisableTotpPayloadSelect, DisconnectAccountPayloadSelect, EnableEmailMfaPayloadSelect, EnableSmsMfaPayloadSelect, EnableTotpPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, GenerateBackupCodesPayloadSelect, LinkIdentityPayloadSelect, MintAccessTokenPayloadSelect, ProvisionBucketPayloadSelect, RefreshAccessTokenPayloadSelect, RequestCrossOriginTokenPayloadSelect, RequestMagicLinkPayloadSelect, ResetPasswordPayloadSelect, RevokeApiKeyPayloadSelect, RevokeOrgApiKeyPayloadSelect, RevokeSessionPayloadSelect, SendAccountDeletionEmailPayloadSelect, SendMfaChallengeCodePayloadSelect, SendPhoneVerificationCodePayloadSelect, SendSmsOtpPayloadSelect, SendVerificationEmailPayloadSelect, SetPasswordPayloadSelect, SetPrincipalEntitiesPayloadSelect, SetPrincipalScopePayloadSelect, SignInPayloadSelect, SignInCrossOriginPayloadSelect, SignInMagicLinkPayloadSelect, SignInSmsOtpPayloadSelect, SignOutPayloadSelect, SignUpPayloadSelect, SignUpMagicLinkPayloadSelect, SignUpSmsPayloadSelect, UpdatePrincipalPayloadSelect, VerifyEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyPhonePayloadSelect, VerifyTotpPayloadSelect } from '../input-types';
+import type { ApproveDeviceInput, CheckPasswordInput, CompleteMfaChallengeInput, ConfirmDeleteAccountInput, ConfirmTotpSetupInput, CreateApiKeyInput, CreateChildPrincipalInput, CreateOrgApiKeyInput, CreateOrgPrincipalInput, CreatePrincipalFromPresetInput, DeleteOrgPrincipalInput, DeletePrincipalInput, DisableEmailMfaInput, DisableSmsMfaInput, DisableTotpInput, DisconnectAccountInput, EnableEmailMfaInput, EnableSmsMfaInput, EnableTotpInput, ExtendTokenExpiresInput, ForgotPasswordInput, GenerateBackupCodesInput, LinkIdentityInput, MintAccessTokenInput, ProvisionBucketInput, RefreshAccessTokenInput, RequestCrossOriginTokenInput, RequestMagicLinkInput, ResetPasswordInput, RevokeApiKeyInput, RevokeOrgApiKeyInput, RevokeSessionInput, SendAccountDeletionEmailInput, SendMfaChallengeCodeInput, SendPhoneVerificationCodeInput, SendSmsOtpInput, SendStepUpCodeInput, SendVerificationEmailInput, SetPasswordInput, SetPrincipalEntitiesInput, SetPrincipalScopeInput, SignInInput, SignInCrossOriginInput, SignInMagicLinkInput, SignInSmsOtpInput, SignOutInput, SignUpInput, SignUpMagicLinkInput, SignUpSmsInput, UpdatePrincipalInput, VerifyEmailInput, VerifyPasswordInput, VerifyPhoneInput, VerifyStepUpCodeInput, VerifyTotpInput, ApproveDevicePayload, CheckPasswordPayload, CompleteMfaChallengePayload, ConfirmDeleteAccountPayload, ConfirmTotpSetupPayload, CreateApiKeyPayload, CreateChildPrincipalPayload, CreateOrgApiKeyPayload, CreateOrgPrincipalPayload, CreatePrincipalFromPresetPayload, DeleteOrgPrincipalPayload, DeletePrincipalPayload, DisableEmailMfaPayload, DisableSmsMfaPayload, DisableTotpPayload, DisconnectAccountPayload, EnableEmailMfaPayload, EnableSmsMfaPayload, EnableTotpPayload, ExtendTokenExpiresPayload, ForgotPasswordPayload, GenerateBackupCodesPayload, LinkIdentityPayload, MintAccessTokenPayload, ProvisionBucketPayload, RefreshAccessTokenPayload, RequestCrossOriginTokenPayload, RequestMagicLinkPayload, ResetPasswordPayload, RevokeApiKeyPayload, RevokeOrgApiKeyPayload, RevokeSessionPayload, SendAccountDeletionEmailPayload, SendMfaChallengeCodePayload, SendPhoneVerificationCodePayload, SendSmsOtpPayload, SendStepUpCodePayload, SendVerificationEmailPayload, SetPasswordPayload, SetPrincipalEntitiesPayload, SetPrincipalScopePayload, SignInPayload, SignInCrossOriginPayload, SignInMagicLinkPayload, SignInSmsOtpPayload, SignOutPayload, SignUpPayload, SignUpMagicLinkPayload, SignUpSmsPayload, UpdatePrincipalPayload, VerifyEmailPayload, VerifyPasswordPayload, VerifyPhonePayload, VerifyStepUpCodePayload, VerifyTotpPayload, ApproveDevicePayloadSelect, CheckPasswordPayloadSelect, CompleteMfaChallengePayloadSelect, ConfirmDeleteAccountPayloadSelect, ConfirmTotpSetupPayloadSelect, CreateApiKeyPayloadSelect, CreateChildPrincipalPayloadSelect, CreateOrgApiKeyPayloadSelect, CreateOrgPrincipalPayloadSelect, CreatePrincipalFromPresetPayloadSelect, DeleteOrgPrincipalPayloadSelect, DeletePrincipalPayloadSelect, DisableEmailMfaPayloadSelect, DisableSmsMfaPayloadSelect, DisableTotpPayloadSelect, DisconnectAccountPayloadSelect, EnableEmailMfaPayloadSelect, EnableSmsMfaPayloadSelect, EnableTotpPayloadSelect, ExtendTokenExpiresPayloadSelect, ForgotPasswordPayloadSelect, GenerateBackupCodesPayloadSelect, LinkIdentityPayloadSelect, MintAccessTokenPayloadSelect, ProvisionBucketPayloadSelect, RefreshAccessTokenPayloadSelect, RequestCrossOriginTokenPayloadSelect, RequestMagicLinkPayloadSelect, ResetPasswordPayloadSelect, RevokeApiKeyPayloadSelect, RevokeOrgApiKeyPayloadSelect, RevokeSessionPayloadSelect, SendAccountDeletionEmailPayloadSelect, SendMfaChallengeCodePayloadSelect, SendPhoneVerificationCodePayloadSelect, SendSmsOtpPayloadSelect, SendStepUpCodePayloadSelect, SendVerificationEmailPayloadSelect, SetPasswordPayloadSelect, SetPrincipalEntitiesPayloadSelect, SetPrincipalScopePayloadSelect, SignInPayloadSelect, SignInCrossOriginPayloadSelect, SignInMagicLinkPayloadSelect, SignInSmsOtpPayloadSelect, SignOutPayloadSelect, SignUpPayloadSelect, SignUpMagicLinkPayloadSelect, SignUpSmsPayloadSelect, UpdatePrincipalPayloadSelect, VerifyEmailPayloadSelect, VerifyPasswordPayloadSelect, VerifyPhonePayloadSelect, VerifyStepUpCodePayloadSelect, VerifyTotpPayloadSelect } from '../input-types';
 export interface ApproveDeviceVariables {
     input: ApproveDeviceInput;
 }
@@ -123,6 +123,9 @@ export interface SendPhoneVerificationCodeVariables {
 export interface SendSmsOtpVariables {
     input: SendSmsOtpInput;
 }
+export interface SendStepUpCodeVariables {
+    input: SendStepUpCodeInput;
+}
 export interface SendVerificationEmailVariables {
     input: SendVerificationEmailInput;
 }
@@ -171,6 +174,9 @@ export interface VerifyPasswordVariables {
 export interface VerifyPhoneVariables {
     input: VerifyPhoneInput;
 }
+export interface VerifyStepUpCodeVariables {
+    input: VerifyStepUpCodeInput;
+}
 export interface VerifyTotpVariables {
     input: VerifyTotpInput;
 }
@@ -355,6 +361,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, SendSmsOtpPayloadSelect>) => QueryBuilder<{
         sendSmsOtp: InferSelectResult<SendSmsOtpPayload, S> | null;
     }>;
+    sendStepUpCode: <S extends SendStepUpCodePayloadSelect>(args: SendStepUpCodeVariables, options: {
+        select: S;
+    } & StrictSelect<S, SendStepUpCodePayloadSelect>) => QueryBuilder<{
+        sendStepUpCode: InferSelectResult<SendStepUpCodePayload, S> | null;
+    }>;
     sendVerificationEmail: <S extends SendVerificationEmailPayloadSelect>(args: SendVerificationEmailVariables, options: {
         select: S;
     } & StrictSelect<S, SendVerificationEmailPayloadSelect>) => QueryBuilder<{
@@ -435,6 +446,11 @@ export declare function createMutationOperations(client: OrmClient): {
     } & StrictSelect<S, VerifyPhonePayloadSelect>) => QueryBuilder<{
         verifyPhone: InferSelectResult<VerifyPhonePayload, S> | null;
     }>;
+    verifyStepUpCode: <S extends VerifyStepUpCodePayloadSelect>(args: VerifyStepUpCodeVariables, options: {
+        select: S;
+    } & StrictSelect<S, VerifyStepUpCodePayloadSelect>) => QueryBuilder<{
+        verifyStepUpCode: InferSelectResult<VerifyStepUpCodePayload, S> | null;
+    }>;
     verifyTotp: <S extends VerifyTotpPayloadSelect>(args: VerifyTotpVariables, options: {
         select: S;
     } & StrictSelect<S, VerifyTotpPayloadSelect>) => QueryBuilder<{

package/esm/auth/orm/mutation/index.js

@@ -434,6 +434,18 @@ export function createMutationOperations(client) {
                 },
             ], connectionFieldsMap, 'SendSmsOtpPayload'),
         }),
+        sendStepUpCode: (args, options) => new QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'SendStepUpCode',
+            fieldName: 'sendStepUpCode',
+            ...buildCustomDocument('mutation', 'SendStepUpCode', 'sendStepUpCode', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'SendStepUpCodeInput!',
+                },
+            ], connectionFieldsMap, 'SendStepUpCodePayload'),
+        }),
         sendVerificationEmail: (args, options) => new QueryBuilder({
             client,
             operation: 'mutation',
@@ -626,6 +638,18 @@ export function createMutationOperations(client) {
                 },
             ], connectionFieldsMap, 'VerifyPhonePayload'),
         }),
+        verifyStepUpCode: (args, options) => new QueryBuilder({
+            client,
+            operation: 'mutation',
+            operationName: 'VerifyStepUpCode',
+            fieldName: 'verifyStepUpCode',
+            ...buildCustomDocument('mutation', 'VerifyStepUpCode', 'verifyStepUpCode', options.select, args, [
+                {
+                    name: 'input',
+                    type: 'VerifyStepUpCodeInput!',
+                },
+            ], connectionFieldsMap, 'VerifyStepUpCodePayload'),
+        }),
         verifyTotp: (args, options) => new QueryBuilder({
             client,
             operation: 'mutation',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-sdk/cli",
-  "version": "1.20.8",
+  "version": "1.20.10",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive CLI SDK - Auto-generated GraphQL CLI with ORM client, context management, and interactive prompts",
   "main": "index.js",
@@ -46,8 +46,8 @@
   "dependencies": {
     "@0no-co/graphql.web": "^1.3.3",
     "@agentic-kit/ollama": "2.15.0",
-    "@constructive-io/graphql-query": "^4.20.7",
-    "@constructive-io/graphql-types": "^3.33.5",
+    "@constructive-io/graphql-query": "^4.20.8",
+    "@constructive-io/graphql-types": "^3.33.6",
     "appstash": "^0.8.0",
     "gql-ast": "^3.25.0",
     "graphql": "16.13.0",
@@ -56,11 +56,11 @@
     "yanse": "^0.2.2"
   },
   "devDependencies": {
-    "@constructive-io/graphql-codegen": "^5.23.7",
+    "@constructive-io/graphql-codegen": "^5.23.8",
     "@types/node": "^22.19.11",
     "makage": "^0.8.0",
     "tsx": "^4.19.0",
     "typescript": "^6.0.3"
   },
-  "gitHead": "747cd5eacd1984fc7755ad828bbc5b67e225cd09"
+  "gitHead": "5bfd326dedbe898ef9495530cd842cff4034957f"
 }