@nauth-toolkit/client 0.1.107 → 0.1.109

package/dist/index.d.mts

@@ -36,6 +36,14 @@ interface MFADevice {
     isActive: boolean;
     createdAt: string | Date;
 }
+/**
+ * Response from removing a single MFA device by ID.
+ */
+interface RemoveMFADeviceResponse {
+    removedDeviceId: number;
+    removedMethod: MFADeviceMethod;
+    mfaDisabled: boolean;
+}
 /**
  * MFA setup data returned by providers.
  */
@@ -219,11 +227,13 @@ interface MFACodeResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_REQUIRED;
     method: MFAMethod;
     code: string;
+    deviceId?: number;
 }
 interface MFAPasskeyResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_REQUIRED;
     method: 'passkey';
     credential: Record<string, unknown>;
+    deviceId?: number;
 }
 interface MFASetupResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_SETUP_REQUIRED;
@@ -673,7 +683,6 @@ interface NAuthEndpoints {
     mfaDevices: string;
     mfaSetupData: string;
     mfaVerifySetup: string;
-    mfaRemove: string;
     mfaPreferred: string;
     mfaBackupCodes: string;
     socialLinked: string;
@@ -717,10 +726,10 @@ interface NAuthAdminEndpoints {
     logoutAll: string;
     /** GET /users/:sub/mfa/status - Get MFA status */
     getMfaStatus: string;
-    /** POST /mfa/preferred-method - Set preferred MFA method */
-    setPreferredMfaMethod: string;
-    /** POST /mfa/remove-devices - Remove MFA devices */
-    removeMfaDevices: string;
+    /** DELETE /mfa/devices/:deviceId - Remove a single MFA device by id */
+    removeMfaDeviceById: string;
+    /** POST /users/:sub/mfa/devices/:deviceId/preferred - Set preferred MFA device */
+    setPreferredMfaDevice: string;
     /** POST /mfa/exemption - Set MFA exemption */
     setMfaExemption: string;
     /** GET /audit/history - Get audit history */
@@ -2518,32 +2527,46 @@ declare class AdminOperations {
      * Set preferred MFA method for a user
      *
      * @param sub - User UUID
-     * @param method - MFA method to set as preferred
+     * Remove MFA devices for a user
+     *
+     * @param sub - User UUID
+     * @param method - MFA method to remove
      * @returns Success message
      * @throws {NAuthClientError} If operation fails
      *
      * @example
      * ```typescript
-     * await client.admin.setPreferredMfaMethod('user-uuid', 'totp');
+     * await client.admin.removeMfaDevices('user-uuid', 'sms');
      * ```
      */
-    setPreferredMfaMethod(sub: string, method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
-        message: string;
-    }>;
     /**
-     * Remove MFA devices for a user
+     * Remove a single MFA device by device ID (admin).
      *
-     * @param sub - User UUID
-     * @param method - MFA method to remove
+     * @param deviceId - MFA device ID
+     * @returns Removal result
+     * @throws {NAuthClientError} If operation fails
+     *
+     * @example
+     * ```typescript
+     * const result = await client.admin.removeMfaDeviceById(123);
+     * console.log(result.removedDeviceId);
+     * ```
+     */
+    removeMfaDeviceById(deviceId: number): Promise<RemoveMFADeviceResponse>;
+    /**
+     * Set preferred MFA device for a user (admin operation).
+     *
+     * @param sub - User identifier
+     * @param deviceId - Device ID to set as preferred
      * @returns Success message
      * @throws {NAuthClientError} If operation fails
      *
      * @example
      * ```typescript
-     * await client.admin.removeMfaDevices('user-uuid', 'sms');
+     * await client.admin.setPreferredMfaDevice('user-uuid', 123);
      * ```
      */
-    removeMfaDevices(sub: string, method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
+    setPreferredMfaDevice(sub: string, deviceId: number): Promise<{
         message: string;
     }>;
     /**
@@ -2672,6 +2695,12 @@ declare class NAuthClient {
     private readonly challengeRouter;
     private readonly oauthStorage;
     private currentUser;
+    /**
+     * Internally tracked MFA device ID
+     * When user selects a specific device (e.g., "Microsoft Authenticator" vs "Google Authenticator"),
+     * SDK stores it here and auto-injects into respondToChallenge()
+     */
+    private selectedDeviceId?;
     /**
      * Admin operations (available if admin config provided).
      *
@@ -2802,6 +2831,59 @@ declare class NAuthClient {
      * @throws {NAuthClientError} If validation fails
      */
     respondToChallenge(response: ChallengeResponse): Promise<AuthResponse>;
+    /**
+     * Select an MFA device for verification
+     *
+     * Call this when user selects a specific device from the MFA selector UI.
+     * SDK stores the deviceId internally and auto-injects it when respondToChallenge() is called.
+     *
+     * @param deviceId - ID of the device user selected
+     *
+     * @example
+     * ```typescript
+     * // User clicks "Microsoft Authenticator" button
+     * client.selectMFADevice(48);
+     *
+     * // Later, when submitting OTP code:
+     * await client.respondToChallenge({
+     *   type: 'MFA_REQUIRED',
+     *   session: 'abc123',
+     *   method: 'totp',
+     *   code: '123456',
+     *   // SDK auto-injects deviceId=48 here!
+     * });
+     * ```
+     */
+    selectMFADevice(deviceId: number): void;
+    /**
+     * Get available MFA devices from challenge response
+     *
+     * Returns array of devices for methods that support multiple devices (TOTP, Passkey).
+     * Use this to render device selection UI only.
+     *
+     * @param challenge - Challenge response from login/signup
+     * @returns Array of MFA devices with id, name, and type
+     *
+     * @example
+     * ```typescript
+     * const devices = client.getMFADevices(challengeResponse);
+     * // Returns: [
+     * //   { id: 48, name: "Microsoft Authenticator", type: "totp" },
+     * //   { id: 3, name: "Google Authenticator", type: "totp" }
+     * // ]
+     * ```
+     */
+    getMFADevices(challenge: AuthResponse): Array<{
+        id: number;
+        name: string;
+        type: string;
+    }>;
+    /**
+     * Clear any selected MFA device
+     *
+     * Useful if user navigates back to device selector or cancels MFA flow.
+     */
+    clearSelectedDevice(): void;
     /**
      * Resend a challenge code.
      */
@@ -2901,18 +2983,38 @@ declare class NAuthClient {
         deviceId: number;
     }>;
     /**
-     * Remove MFA method.
+     * Remove ALL MFA devices for a specific method type.
+     *
+     * ⚠️ **Warning**: This removes ALL devices of the specified method.
+     * For example, if you have 3 TOTP devices, this will remove all 3.
+     *
+     * **Prefer `removeMfaDeviceById()`** to remove individual devices.
+     *
+     * @param method - MFA method type ('totp', 'sms', 'email', 'passkey')
+     * @returns Success message
+     *
+     * @example
+     * ```typescript
+     * // Removes ALL TOTP devices (all authenticator apps)
+     * await client.removeMfaDevice('totp');
+     * ```
      */
-    removeMfaDevice(method: string): Promise<{
-        message: string;
-    }>;
     /**
-     * Set preferred MFA method.
+     * Remove a single MFA device by device ID.
+     *
+     * @param deviceId - MFA device ID
+     * @returns Removal response
+     */
+    removeMfaDeviceById(deviceId: number): Promise<RemoveMFADeviceResponse>;
+    /**
+     * Set a specific MFA device as preferred.
+     *
+     * This marks the device as preferred and updates the user's preferred MFA method.
      *
-     * @param method - Device method to set as preferred ('totp', 'sms', 'email', or 'passkey'). Cannot be 'backup'.
+     * @param deviceId - MFA device ID
      * @returns Success message
      */
-    setPreferredMfaMethod(method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
+    setPreferredMfaDevice(deviceId: number): Promise<{
         message: string;
     }>;
     /**
@@ -3359,4 +3461,4 @@ declare class FetchAdapter implements HttpAdapter {
     request<T>(config: HttpRequest): Promise<HttpResponse<T>>;
 }
 
-export { type AdminAuditHistoryRequest, AdminOperations, type AdminResetPasswordRequest, type AdminResetPasswordResponse, type AdminSignupRequest, type AdminSignupResponse, type AdminSignupSocialRequest, type AdminSignupSocialResponse, type AuditHistoryResponse, type AuthAuditEvent, type AuthAuditEventStatus, AuthAuditEventType, AuthChallenge, type AuthChallengeEvent, type AuthErrorEvent, type AuthEvent, type AuthEventListener, type AuthEventType, type AuthLoginEvent, type AuthLogoutEvent, type AuthRefreshEvent, type AuthResponse, type AuthResponseContext, type AuthSessionExpiredEvent, type AuthSignupEvent, type AuthSuccessEvent, type AuthUser, type AuthUserSummary, type BackupCodesResponse, type BaseChallengeResponse, BrowserStorage, type ChallengeResponse, ChallengeRouter, type ChangePasswordRequest, type ConfirmForgotPasswordRequest, type ConfirmForgotPasswordResponse, type DateFilter, type DeleteUserResponse, type DisableUserResponse, type EnableUserResponse, EventEmitter, FetchAdapter, type ForceChangePasswordResponse, type ForgotPasswordRequest, type ForgotPasswordResponse, type GetChallengeDataRequest, type GetChallengeDataResponse, type GetSetupDataRequest, type GetSetupDataResponse, type GetUserSessionsResponse, type GetUsersRequest, type GetUsersResponse, type HttpAdapter, type HttpRequest, type HttpResponse, InMemoryStorage, type LinkedAccountsResponse, type LoginRequest, type LogoutAllRequest, type LogoutRequest, type MFAChallengeMethod, type MFACodeResponse, type MFADevice, type MFADeviceMethod, type MFAMethod, type MFAPasskeyResponse, type MFASetupData, type MFASetupResponse, type MFAStatus, type MfaRoutesConfig, type NAuthAdminEndpoints, NAuthClient, type NAuthClientConfig, NAuthClientError, type NAuthEndpoints, type NAuthError, NAuthErrorCode, type NAuthRedirectsConfig, type NAuthStorageAdapter, type OAuthCallbackEvent, type OAuthCompletedEvent, type OAuthErrorEvent, type OAuthStartedEvent, type RecaptchaConfig, type RecaptchaVersion, type ResendCodeRequest, type ResetPasswordWithCodeRequest, type ResetPasswordWithCodeResponse, type ResolvedNAuthClientConfig, type SignupRequest, type SocialLoginOptions, type SocialProvider, type SocialVerifyRequest, type TokenDeliveryMode, type TokenResponse, type UpdateProfileRequest, type UserSessionInfo, type VerifyEmailResponse, type VerifyPhoneCodeResponse, type VerifyPhoneCollectResponse, defaultAdminEndpoints, defaultEndpoints, getChallengeInstructions, getMFAMethod, getMaskedDestination, isOTPChallenge, requiresPhoneCollection, resolveConfig };
+export { type AdminAuditHistoryRequest, AdminOperations, type AdminResetPasswordRequest, type AdminResetPasswordResponse, type AdminSignupRequest, type AdminSignupResponse, type AdminSignupSocialRequest, type AdminSignupSocialResponse, type AuditHistoryResponse, type AuthAuditEvent, type AuthAuditEventStatus, AuthAuditEventType, AuthChallenge, type AuthChallengeEvent, type AuthErrorEvent, type AuthEvent, type AuthEventListener, type AuthEventType, type AuthLoginEvent, type AuthLogoutEvent, type AuthRefreshEvent, type AuthResponse, type AuthResponseContext, type AuthSessionExpiredEvent, type AuthSignupEvent, type AuthSuccessEvent, type AuthUser, type AuthUserSummary, type BackupCodesResponse, type BaseChallengeResponse, BrowserStorage, type ChallengeResponse, ChallengeRouter, type ChangePasswordRequest, type ConfirmForgotPasswordRequest, type ConfirmForgotPasswordResponse, type DateFilter, type DeleteUserResponse, type DisableUserResponse, type EnableUserResponse, EventEmitter, FetchAdapter, type ForceChangePasswordResponse, type ForgotPasswordRequest, type ForgotPasswordResponse, type GetChallengeDataRequest, type GetChallengeDataResponse, type GetSetupDataRequest, type GetSetupDataResponse, type GetUserSessionsResponse, type GetUsersRequest, type GetUsersResponse, type HttpAdapter, type HttpRequest, type HttpResponse, InMemoryStorage, type LinkedAccountsResponse, type LoginRequest, type LogoutAllRequest, type LogoutRequest, type MFAChallengeMethod, type MFACodeResponse, type MFADevice, type MFADeviceMethod, type MFAMethod, type MFAPasskeyResponse, type MFASetupData, type MFASetupResponse, type MFAStatus, type MfaRoutesConfig, type NAuthAdminEndpoints, NAuthClient, type NAuthClientConfig, NAuthClientError, type NAuthEndpoints, type NAuthError, NAuthErrorCode, type NAuthRedirectsConfig, type NAuthStorageAdapter, type OAuthCallbackEvent, type OAuthCompletedEvent, type OAuthErrorEvent, type OAuthStartedEvent, type RecaptchaConfig, type RecaptchaVersion, type RemoveMFADeviceResponse, type ResendCodeRequest, type ResetPasswordWithCodeRequest, type ResetPasswordWithCodeResponse, type ResolvedNAuthClientConfig, type SignupRequest, type SocialLoginOptions, type SocialProvider, type SocialVerifyRequest, type TokenDeliveryMode, type TokenResponse, type UpdateProfileRequest, type UserSessionInfo, type VerifyEmailResponse, type VerifyPhoneCodeResponse, type VerifyPhoneCollectResponse, defaultAdminEndpoints, defaultEndpoints, getChallengeInstructions, getMFAMethod, getMaskedDestination, isOTPChallenge, requiresPhoneCollection, resolveConfig };

package/dist/index.d.ts

@@ -36,6 +36,14 @@ interface MFADevice {
     isActive: boolean;
     createdAt: string | Date;
 }
+/**
+ * Response from removing a single MFA device by ID.
+ */
+interface RemoveMFADeviceResponse {
+    removedDeviceId: number;
+    removedMethod: MFADeviceMethod;
+    mfaDisabled: boolean;
+}
 /**
  * MFA setup data returned by providers.
  */
@@ -219,11 +227,13 @@ interface MFACodeResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_REQUIRED;
     method: MFAMethod;
     code: string;
+    deviceId?: number;
 }
 interface MFAPasskeyResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_REQUIRED;
     method: 'passkey';
     credential: Record<string, unknown>;
+    deviceId?: number;
 }
 interface MFASetupResponse extends BaseChallengeResponse {
     type: AuthChallenge.MFA_SETUP_REQUIRED;
@@ -673,7 +683,6 @@ interface NAuthEndpoints {
     mfaDevices: string;
     mfaSetupData: string;
     mfaVerifySetup: string;
-    mfaRemove: string;
     mfaPreferred: string;
     mfaBackupCodes: string;
     socialLinked: string;
@@ -717,10 +726,10 @@ interface NAuthAdminEndpoints {
     logoutAll: string;
     /** GET /users/:sub/mfa/status - Get MFA status */
     getMfaStatus: string;
-    /** POST /mfa/preferred-method - Set preferred MFA method */
-    setPreferredMfaMethod: string;
-    /** POST /mfa/remove-devices - Remove MFA devices */
-    removeMfaDevices: string;
+    /** DELETE /mfa/devices/:deviceId - Remove a single MFA device by id */
+    removeMfaDeviceById: string;
+    /** POST /users/:sub/mfa/devices/:deviceId/preferred - Set preferred MFA device */
+    setPreferredMfaDevice: string;
     /** POST /mfa/exemption - Set MFA exemption */
     setMfaExemption: string;
     /** GET /audit/history - Get audit history */
@@ -2518,32 +2527,46 @@ declare class AdminOperations {
      * Set preferred MFA method for a user
      *
      * @param sub - User UUID
-     * @param method - MFA method to set as preferred
+     * Remove MFA devices for a user
+     *
+     * @param sub - User UUID
+     * @param method - MFA method to remove
      * @returns Success message
      * @throws {NAuthClientError} If operation fails
      *
      * @example
      * ```typescript
-     * await client.admin.setPreferredMfaMethod('user-uuid', 'totp');
+     * await client.admin.removeMfaDevices('user-uuid', 'sms');
      * ```
      */
-    setPreferredMfaMethod(sub: string, method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
-        message: string;
-    }>;
     /**
-     * Remove MFA devices for a user
+     * Remove a single MFA device by device ID (admin).
      *
-     * @param sub - User UUID
-     * @param method - MFA method to remove
+     * @param deviceId - MFA device ID
+     * @returns Removal result
+     * @throws {NAuthClientError} If operation fails
+     *
+     * @example
+     * ```typescript
+     * const result = await client.admin.removeMfaDeviceById(123);
+     * console.log(result.removedDeviceId);
+     * ```
+     */
+    removeMfaDeviceById(deviceId: number): Promise<RemoveMFADeviceResponse>;
+    /**
+     * Set preferred MFA device for a user (admin operation).
+     *
+     * @param sub - User identifier
+     * @param deviceId - Device ID to set as preferred
      * @returns Success message
      * @throws {NAuthClientError} If operation fails
      *
      * @example
      * ```typescript
-     * await client.admin.removeMfaDevices('user-uuid', 'sms');
+     * await client.admin.setPreferredMfaDevice('user-uuid', 123);
      * ```
      */
-    removeMfaDevices(sub: string, method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
+    setPreferredMfaDevice(sub: string, deviceId: number): Promise<{
         message: string;
     }>;
     /**
@@ -2672,6 +2695,12 @@ declare class NAuthClient {
     private readonly challengeRouter;
     private readonly oauthStorage;
     private currentUser;
+    /**
+     * Internally tracked MFA device ID
+     * When user selects a specific device (e.g., "Microsoft Authenticator" vs "Google Authenticator"),
+     * SDK stores it here and auto-injects into respondToChallenge()
+     */
+    private selectedDeviceId?;
     /**
      * Admin operations (available if admin config provided).
      *
@@ -2802,6 +2831,59 @@ declare class NAuthClient {
      * @throws {NAuthClientError} If validation fails
      */
     respondToChallenge(response: ChallengeResponse): Promise<AuthResponse>;
+    /**
+     * Select an MFA device for verification
+     *
+     * Call this when user selects a specific device from the MFA selector UI.
+     * SDK stores the deviceId internally and auto-injects it when respondToChallenge() is called.
+     *
+     * @param deviceId - ID of the device user selected
+     *
+     * @example
+     * ```typescript
+     * // User clicks "Microsoft Authenticator" button
+     * client.selectMFADevice(48);
+     *
+     * // Later, when submitting OTP code:
+     * await client.respondToChallenge({
+     *   type: 'MFA_REQUIRED',
+     *   session: 'abc123',
+     *   method: 'totp',
+     *   code: '123456',
+     *   // SDK auto-injects deviceId=48 here!
+     * });
+     * ```
+     */
+    selectMFADevice(deviceId: number): void;
+    /**
+     * Get available MFA devices from challenge response
+     *
+     * Returns array of devices for methods that support multiple devices (TOTP, Passkey).
+     * Use this to render device selection UI only.
+     *
+     * @param challenge - Challenge response from login/signup
+     * @returns Array of MFA devices with id, name, and type
+     *
+     * @example
+     * ```typescript
+     * const devices = client.getMFADevices(challengeResponse);
+     * // Returns: [
+     * //   { id: 48, name: "Microsoft Authenticator", type: "totp" },
+     * //   { id: 3, name: "Google Authenticator", type: "totp" }
+     * // ]
+     * ```
+     */
+    getMFADevices(challenge: AuthResponse): Array<{
+        id: number;
+        name: string;
+        type: string;
+    }>;
+    /**
+     * Clear any selected MFA device
+     *
+     * Useful if user navigates back to device selector or cancels MFA flow.
+     */
+    clearSelectedDevice(): void;
     /**
      * Resend a challenge code.
      */
@@ -2901,18 +2983,38 @@ declare class NAuthClient {
         deviceId: number;
     }>;
     /**
-     * Remove MFA method.
+     * Remove ALL MFA devices for a specific method type.
+     *
+     * ⚠️ **Warning**: This removes ALL devices of the specified method.
+     * For example, if you have 3 TOTP devices, this will remove all 3.
+     *
+     * **Prefer `removeMfaDeviceById()`** to remove individual devices.
+     *
+     * @param method - MFA method type ('totp', 'sms', 'email', 'passkey')
+     * @returns Success message
+     *
+     * @example
+     * ```typescript
+     * // Removes ALL TOTP devices (all authenticator apps)
+     * await client.removeMfaDevice('totp');
+     * ```
      */
-    removeMfaDevice(method: string): Promise<{
-        message: string;
-    }>;
     /**
-     * Set preferred MFA method.
+     * Remove a single MFA device by device ID.
+     *
+     * @param deviceId - MFA device ID
+     * @returns Removal response
+     */
+    removeMfaDeviceById(deviceId: number): Promise<RemoveMFADeviceResponse>;
+    /**
+     * Set a specific MFA device as preferred.
+     *
+     * This marks the device as preferred and updates the user's preferred MFA method.
      *
-     * @param method - Device method to set as preferred ('totp', 'sms', 'email', or 'passkey'). Cannot be 'backup'.
+     * @param deviceId - MFA device ID
      * @returns Success message
      */
-    setPreferredMfaMethod(method: 'totp' | 'sms' | 'email' | 'passkey'): Promise<{
+    setPreferredMfaDevice(deviceId: number): Promise<{
         message: string;
     }>;
     /**
@@ -3359,4 +3461,4 @@ declare class FetchAdapter implements HttpAdapter {
     request<T>(config: HttpRequest): Promise<HttpResponse<T>>;
 }
 
-export { type AdminAuditHistoryRequest, AdminOperations, type AdminResetPasswordRequest, type AdminResetPasswordResponse, type AdminSignupRequest, type AdminSignupResponse, type AdminSignupSocialRequest, type AdminSignupSocialResponse, type AuditHistoryResponse, type AuthAuditEvent, type AuthAuditEventStatus, AuthAuditEventType, AuthChallenge, type AuthChallengeEvent, type AuthErrorEvent, type AuthEvent, type AuthEventListener, type AuthEventType, type AuthLoginEvent, type AuthLogoutEvent, type AuthRefreshEvent, type AuthResponse, type AuthResponseContext, type AuthSessionExpiredEvent, type AuthSignupEvent, type AuthSuccessEvent, type AuthUser, type AuthUserSummary, type BackupCodesResponse, type BaseChallengeResponse, BrowserStorage, type ChallengeResponse, ChallengeRouter, type ChangePasswordRequest, type ConfirmForgotPasswordRequest, type ConfirmForgotPasswordResponse, type DateFilter, type DeleteUserResponse, type DisableUserResponse, type EnableUserResponse, EventEmitter, FetchAdapter, type ForceChangePasswordResponse, type ForgotPasswordRequest, type ForgotPasswordResponse, type GetChallengeDataRequest, type GetChallengeDataResponse, type GetSetupDataRequest, type GetSetupDataResponse, type GetUserSessionsResponse, type GetUsersRequest, type GetUsersResponse, type HttpAdapter, type HttpRequest, type HttpResponse, InMemoryStorage, type LinkedAccountsResponse, type LoginRequest, type LogoutAllRequest, type LogoutRequest, type MFAChallengeMethod, type MFACodeResponse, type MFADevice, type MFADeviceMethod, type MFAMethod, type MFAPasskeyResponse, type MFASetupData, type MFASetupResponse, type MFAStatus, type MfaRoutesConfig, type NAuthAdminEndpoints, NAuthClient, type NAuthClientConfig, NAuthClientError, type NAuthEndpoints, type NAuthError, NAuthErrorCode, type NAuthRedirectsConfig, type NAuthStorageAdapter, type OAuthCallbackEvent, type OAuthCompletedEvent, type OAuthErrorEvent, type OAuthStartedEvent, type RecaptchaConfig, type RecaptchaVersion, type ResendCodeRequest, type ResetPasswordWithCodeRequest, type ResetPasswordWithCodeResponse, type ResolvedNAuthClientConfig, type SignupRequest, type SocialLoginOptions, type SocialProvider, type SocialVerifyRequest, type TokenDeliveryMode, type TokenResponse, type UpdateProfileRequest, type UserSessionInfo, type VerifyEmailResponse, type VerifyPhoneCodeResponse, type VerifyPhoneCollectResponse, defaultAdminEndpoints, defaultEndpoints, getChallengeInstructions, getMFAMethod, getMaskedDestination, isOTPChallenge, requiresPhoneCollection, resolveConfig };
+export { type AdminAuditHistoryRequest, AdminOperations, type AdminResetPasswordRequest, type AdminResetPasswordResponse, type AdminSignupRequest, type AdminSignupResponse, type AdminSignupSocialRequest, type AdminSignupSocialResponse, type AuditHistoryResponse, type AuthAuditEvent, type AuthAuditEventStatus, AuthAuditEventType, AuthChallenge, type AuthChallengeEvent, type AuthErrorEvent, type AuthEvent, type AuthEventListener, type AuthEventType, type AuthLoginEvent, type AuthLogoutEvent, type AuthRefreshEvent, type AuthResponse, type AuthResponseContext, type AuthSessionExpiredEvent, type AuthSignupEvent, type AuthSuccessEvent, type AuthUser, type AuthUserSummary, type BackupCodesResponse, type BaseChallengeResponse, BrowserStorage, type ChallengeResponse, ChallengeRouter, type ChangePasswordRequest, type ConfirmForgotPasswordRequest, type ConfirmForgotPasswordResponse, type DateFilter, type DeleteUserResponse, type DisableUserResponse, type EnableUserResponse, EventEmitter, FetchAdapter, type ForceChangePasswordResponse, type ForgotPasswordRequest, type ForgotPasswordResponse, type GetChallengeDataRequest, type GetChallengeDataResponse, type GetSetupDataRequest, type GetSetupDataResponse, type GetUserSessionsResponse, type GetUsersRequest, type GetUsersResponse, type HttpAdapter, type HttpRequest, type HttpResponse, InMemoryStorage, type LinkedAccountsResponse, type LoginRequest, type LogoutAllRequest, type LogoutRequest, type MFAChallengeMethod, type MFACodeResponse, type MFADevice, type MFADeviceMethod, type MFAMethod, type MFAPasskeyResponse, type MFASetupData, type MFASetupResponse, type MFAStatus, type MfaRoutesConfig, type NAuthAdminEndpoints, NAuthClient, type NAuthClientConfig, NAuthClientError, type NAuthEndpoints, type NAuthError, NAuthErrorCode, type NAuthRedirectsConfig, type NAuthStorageAdapter, type OAuthCallbackEvent, type OAuthCompletedEvent, type OAuthErrorEvent, type OAuthStartedEvent, type RecaptchaConfig, type RecaptchaVersion, type RemoveMFADeviceResponse, type ResendCodeRequest, type ResetPasswordWithCodeRequest, type ResetPasswordWithCodeResponse, type ResolvedNAuthClientConfig, type SignupRequest, type SocialLoginOptions, type SocialProvider, type SocialVerifyRequest, type TokenDeliveryMode, type TokenResponse, type UpdateProfileRequest, type UserSessionInfo, type VerifyEmailResponse, type VerifyPhoneCodeResponse, type VerifyPhoneCollectResponse, defaultAdminEndpoints, defaultEndpoints, getChallengeInstructions, getMFAMethod, getMaskedDestination, isOTPChallenge, requiresPhoneCollection, resolveConfig };