@polyester/sdk 0.0.0

package/dist/gen/auth/v1/mfa_pb.d.ts

@@ -0,0 +1,1020 @@
+import { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
+import { Timestamp } from "@bufbuild/protobuf/wkt";
+import { JsonObject, Message } from "@bufbuild/protobuf";
+declare namespace mfa_pb_d_exports {
+  export { BeginMFAChallengeRequest, BeginMFAChallengeRequestSchema, BeginMFAChallengeResponse, BeginMFAChallengeResponseSchema, BeginPasskeyEnrollmentRequest, BeginPasskeyEnrollmentRequestSchema, BeginPasskeyEnrollmentResponse, BeginPasskeyEnrollmentResponseSchema, BeginTOTPEnrollmentRequest, BeginTOTPEnrollmentRequestSchema, BeginTOTPEnrollmentResponse, BeginTOTPEnrollmentResponseSchema, ClaimFreshStepUpRequest, ClaimFreshStepUpRequestSchema, ClaimFreshStepUpResponse, ClaimFreshStepUpResponseSchema, CompleteMFAChallengeResponse, CompleteMFAChallengeResponseSchema, ConsumeFreshStepUpRequest, ConsumeFreshStepUpRequestSchema, ConsumeFreshStepUpResponse, ConsumeFreshStepUpResponseSchema, DeleteMFAFactorRequest, DeleteMFAFactorRequestSchema, DeleteMFAFactorResponse, DeleteMFAFactorResponseSchema, FinishPasskeyChallengeRequest, FinishPasskeyChallengeRequestSchema, FinishPasskeyEnrollmentRequest, FinishPasskeyEnrollmentRequestSchema, FinishPasskeyEnrollmentResponse, FinishPasskeyEnrollmentResponseSchema, FinishTOTPEnrollmentRequest, FinishTOTPEnrollmentRequestSchema, FinishTOTPEnrollmentResponse, FinishTOTPEnrollmentResponseSchema, ListMFAFactorsRequest, ListMFAFactorsRequestSchema, ListMFAFactorsResponse, ListMFAFactorsResponseSchema, MFAChallengePurpose, MFAChallengePurposeSchema, MFAFactor, MFAFactorSchema, MFAFactorType, MFAFactorTypeSchema, MFAService, RegenerateRecoveryCodesRequest, RegenerateRecoveryCodesRequestSchema, RegenerateRecoveryCodesResponse, RegenerateRecoveryCodesResponseSchema, ReleaseFreshStepUpRequest, ReleaseFreshStepUpRequestSchema, ReleaseFreshStepUpResponse, ReleaseFreshStepUpResponseSchema, SessionInfo, SessionInfoSchema, SessionLevel, SessionLevelSchema, UpdateMFAFactorRequest, UpdateMFAFactorRequestSchema, UpdateMFAFactorResponse, UpdateMFAFactorResponseSchema, VerifyRecoveryCodeChallengeRequest, VerifyRecoveryCodeChallengeRequestSchema, VerifyTOTPChallengeRequest, VerifyTOTPChallengeRequestSchema, file_auth_v1_mfa };
+}
+/**
+ * Describes the file auth/v1/mfa.proto.
+ */
+declare const file_auth_v1_mfa: GenFile;
+/**
+ * Current assurance details for an interactive session.
+ *
+ * @generated from message auth.v1.SessionInfo
+ */
+type SessionInfo = Message<"auth.v1.SessionInfo"> & {
+  /**
+   * Stable session identifier shared by the primary and MFA-elevated tokens.
+   *
+   * @generated from field: string session_id = 1;
+   */
+  sessionId: string;
+  /**
+   * Assurance level represented by this session response.
+   *
+   * @generated from field: auth.v1.SessionLevel session_level = 2;
+   */
+  sessionLevel: SessionLevel;
+  /**
+   * Authentication methods used for this session state, such as wallet, TOTP, passkey, or recovery code. Maximum 8 unique values.
+   *
+   * @generated from field: repeated string authentication_methods = 3;
+   */
+  authenticationMethods: string[];
+  /**
+   * Time when the session was authenticated or elevated.
+   *
+   * @generated from field: google.protobuf.Timestamp auth_time = 4;
+   */
+  authTime?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.SessionInfo.
+ * Use `create(SessionInfoSchema)` to create a new message.
+ */
+declare const SessionInfoSchema: GenMessage<SessionInfo>;
+/**
+ * Enrolled MFA factor metadata visible to the account owner.
+ *
+ * @generated from message auth.v1.MFAFactor
+ */
+type MFAFactor = Message<"auth.v1.MFAFactor"> & {
+  /**
+   * MFA factor identifier. Format: "mfa_" followed by 32 lowercase hex characters.
+   *
+   * @generated from field: string factor_id = 1;
+   */
+  factorId: string;
+  /**
+   * Type of enrolled factor.
+   *
+   * @generated from field: auth.v1.MFAFactorType factor_type = 2;
+   */
+  factorType: MFAFactorType;
+  /**
+   * Human-friendly label for the factor. Empty when no label is set.
+   *
+   * @generated from field: string label = 3;
+   */
+  label: string;
+  /**
+   * Time when the factor was enrolled.
+   *
+   * @generated from field: google.protobuf.Timestamp created_at = 4;
+   */
+  createdAt?: Timestamp | undefined;
+  /**
+   * Time when the factor was last used. Empty if the factor has not been used.
+   *
+   * @generated from field: google.protobuf.Timestamp last_used_at = 5;
+   */
+  lastUsedAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.MFAFactor.
+ * Use `create(MFAFactorSchema)` to create a new message.
+ */
+declare const MFAFactorSchema: GenMessage<MFAFactor>;
+/**
+ * Request to list the caller's MFA factors.
+ *
+ * @generated from message auth.v1.ListMFAFactorsRequest
+ */
+type ListMFAFactorsRequest = Message<"auth.v1.ListMFAFactorsRequest"> & {};
+/**
+ * Describes the message auth.v1.ListMFAFactorsRequest.
+ * Use `create(ListMFAFactorsRequestSchema)` to create a new message.
+ */
+declare const ListMFAFactorsRequestSchema: GenMessage<ListMFAFactorsRequest>;
+/**
+ * Response containing the caller's enrolled MFA factors.
+ *
+ * @generated from message auth.v1.ListMFAFactorsResponse
+ */
+type ListMFAFactorsResponse = Message<"auth.v1.ListMFAFactorsResponse"> & {
+  /**
+   * Enrolled MFA factors, ordered oldest first.
+   *
+   * @generated from field: repeated auth.v1.MFAFactor factors = 1;
+   */
+  factors: MFAFactor[];
+  /**
+   * True when the caller has at least one unused recovery code.
+   *
+   * @generated from field: bool has_recovery_codes = 2;
+   */
+  hasRecoveryCodes: boolean;
+};
+/**
+ * Describes the message auth.v1.ListMFAFactorsResponse.
+ * Use `create(ListMFAFactorsResponseSchema)` to create a new message.
+ */
+declare const ListMFAFactorsResponseSchema: GenMessage<ListMFAFactorsResponse>;
+/**
+ * Request to begin authenticator-app enrollment.
+ *
+ * @generated from message auth.v1.BeginTOTPEnrollmentRequest
+ */
+type BeginTOTPEnrollmentRequest = Message<"auth.v1.BeginTOTPEnrollmentRequest"> & {
+  /**
+   * Optional human-friendly label. Defaults to "Authenticator App" when empty. Maximum 128 characters.
+   *
+   * @generated from field: string label = 1;
+   */
+  label: string;
+};
+/**
+ * Describes the message auth.v1.BeginTOTPEnrollmentRequest.
+ * Use `create(BeginTOTPEnrollmentRequestSchema)` to create a new message.
+ */
+declare const BeginTOTPEnrollmentRequestSchema: GenMessage<BeginTOTPEnrollmentRequest>;
+/**
+ * Response containing the authenticator-app enrollment secret.
+ *
+ * @generated from message auth.v1.BeginTOTPEnrollmentResponse
+ */
+type BeginTOTPEnrollmentResponse = Message<"auth.v1.BeginTOTPEnrollmentResponse"> & {
+  /**
+   * Enrollment challenge identifier. Format: "mfa_" followed by 32 lowercase hex characters.
+   *
+   * @generated from field: string enrollment_id = 1;
+   */
+  enrollmentId: string;
+  /**
+   * Shared secret to enter into an authenticator app. Returned only when enrollment begins.
+   *
+   * @generated from field: string secret = 2;
+   */
+  secret: string;
+  /**
+   * Authenticator-app setup URI for QR-code display. Returned only when enrollment begins.
+   *
+   * @generated from field: string otpauth_uri = 3;
+   */
+  otpauthUri: string;
+  /**
+   * Time when this enrollment challenge expires.
+   *
+   * @generated from field: google.protobuf.Timestamp expires_at = 4;
+   */
+  expiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.BeginTOTPEnrollmentResponse.
+ * Use `create(BeginTOTPEnrollmentResponseSchema)` to create a new message.
+ */
+declare const BeginTOTPEnrollmentResponseSchema: GenMessage<BeginTOTPEnrollmentResponse>;
+/**
+ * Request to finish authenticator-app enrollment.
+ *
+ * @generated from message auth.v1.FinishTOTPEnrollmentRequest
+ */
+type FinishTOTPEnrollmentRequest = Message<"auth.v1.FinishTOTPEnrollmentRequest"> & {
+  /**
+   * Enrollment challenge identifier returned by BeginTOTPEnrollment.
+   *
+   * @generated from field: string enrollment_id = 1;
+   */
+  enrollmentId: string;
+  /**
+   * Current 6 to 8 digit code from the authenticator app.
+   *
+   * @generated from field: string code = 2;
+   */
+  code: string;
+};
+/**
+ * Describes the message auth.v1.FinishTOTPEnrollmentRequest.
+ * Use `create(FinishTOTPEnrollmentRequestSchema)` to create a new message.
+ */
+declare const FinishTOTPEnrollmentRequestSchema: GenMessage<FinishTOTPEnrollmentRequest>;
+/**
+ * Response returned after authenticator-app enrollment succeeds.
+ *
+ * @generated from message auth.v1.FinishTOTPEnrollmentResponse
+ */
+type FinishTOTPEnrollmentResponse = Message<"auth.v1.FinishTOTPEnrollmentResponse"> & {
+  /**
+   * Newly enrolled MFA factor.
+   *
+   * @generated from field: auth.v1.MFAFactor factor = 1;
+   */
+  factor?: MFAFactor | undefined;
+  /**
+   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.
+   *
+   * @generated from field: repeated string recovery_codes = 2;
+   */
+  recoveryCodes: string[];
+};
+/**
+ * Describes the message auth.v1.FinishTOTPEnrollmentResponse.
+ * Use `create(FinishTOTPEnrollmentResponseSchema)` to create a new message.
+ */
+declare const FinishTOTPEnrollmentResponseSchema: GenMessage<FinishTOTPEnrollmentResponse>;
+/**
+ * Request to begin passkey enrollment.
+ *
+ * @generated from message auth.v1.BeginPasskeyEnrollmentRequest
+ */
+type BeginPasskeyEnrollmentRequest = Message<"auth.v1.BeginPasskeyEnrollmentRequest"> & {
+  /**
+   * Optional human-friendly label for the passkey. Maximum 128 characters.
+   *
+   * @generated from field: string label = 1;
+   */
+  label: string;
+};
+/**
+ * Describes the message auth.v1.BeginPasskeyEnrollmentRequest.
+ * Use `create(BeginPasskeyEnrollmentRequestSchema)` to create a new message.
+ */
+declare const BeginPasskeyEnrollmentRequestSchema: GenMessage<BeginPasskeyEnrollmentRequest>;
+/**
+ * Response containing passkey enrollment options.
+ *
+ * @generated from message auth.v1.BeginPasskeyEnrollmentResponse
+ */
+type BeginPasskeyEnrollmentResponse = Message<"auth.v1.BeginPasskeyEnrollmentResponse"> & {
+  /**
+   * Enrollment challenge identifier. Format: "mfa_" followed by 32 lowercase hex characters.
+   *
+   * @generated from field: string enrollment_id = 1;
+   */
+  enrollmentId: string;
+  /**
+   * Passkey creation options to pass to the browser or device authenticator.
+   *
+   * @generated from field: google.protobuf.Struct public_key = 2;
+   */
+  publicKey?: JsonObject | undefined;
+  /**
+   * Time when this enrollment challenge expires.
+   *
+   * @generated from field: google.protobuf.Timestamp expires_at = 3;
+   */
+  expiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.BeginPasskeyEnrollmentResponse.
+ * Use `create(BeginPasskeyEnrollmentResponseSchema)` to create a new message.
+ */
+declare const BeginPasskeyEnrollmentResponseSchema: GenMessage<BeginPasskeyEnrollmentResponse>;
+/**
+ * Request to finish passkey enrollment.
+ *
+ * @generated from message auth.v1.FinishPasskeyEnrollmentRequest
+ */
+type FinishPasskeyEnrollmentRequest = Message<"auth.v1.FinishPasskeyEnrollmentRequest"> & {
+  /**
+   * Enrollment challenge identifier returned by BeginPasskeyEnrollment.
+   *
+   * @generated from field: string enrollment_id = 1;
+   */
+  enrollmentId: string;
+  /**
+   * Passkey creation response returned by the browser or device authenticator.
+   *
+   * @generated from field: google.protobuf.Struct credential = 2;
+   */
+  credential?: JsonObject | undefined;
+};
+/**
+ * Describes the message auth.v1.FinishPasskeyEnrollmentRequest.
+ * Use `create(FinishPasskeyEnrollmentRequestSchema)` to create a new message.
+ */
+declare const FinishPasskeyEnrollmentRequestSchema: GenMessage<FinishPasskeyEnrollmentRequest>;
+/**
+ * Response returned after passkey enrollment succeeds.
+ *
+ * @generated from message auth.v1.FinishPasskeyEnrollmentResponse
+ */
+type FinishPasskeyEnrollmentResponse = Message<"auth.v1.FinishPasskeyEnrollmentResponse"> & {
+  /**
+   * Newly enrolled MFA factor.
+   *
+   * @generated from field: auth.v1.MFAFactor factor = 1;
+   */
+  factor?: MFAFactor | undefined;
+  /**
+   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.
+   *
+   * @generated from field: repeated string recovery_codes = 2;
+   */
+  recoveryCodes: string[];
+};
+/**
+ * Describes the message auth.v1.FinishPasskeyEnrollmentResponse.
+ * Use `create(FinishPasskeyEnrollmentResponseSchema)` to create a new message.
+ */
+declare const FinishPasskeyEnrollmentResponseSchema: GenMessage<FinishPasskeyEnrollmentResponse>;
+/**
+ * Request to start an MFA challenge.
+ *
+ * @generated from message auth.v1.BeginMFAChallengeRequest
+ */
+type BeginMFAChallengeRequest = Message<"auth.v1.BeginMFAChallengeRequest"> & {
+  /**
+   * Desired challenge outcome: session elevation or fresh step-up.
+   *
+   * @generated from field: auth.v1.MFAChallengePurpose purpose = 1;
+   */
+  purpose: MFAChallengePurpose;
+};
+/**
+ * Describes the message auth.v1.BeginMFAChallengeRequest.
+ * Use `create(BeginMFAChallengeRequestSchema)` to create a new message.
+ */
+declare const BeginMFAChallengeRequestSchema: GenMessage<BeginMFAChallengeRequest>;
+/**
+ * Response returned after starting an MFA challenge.
+ *
+ * @generated from message auth.v1.BeginMFAChallengeResponse
+ */
+type BeginMFAChallengeResponse = Message<"auth.v1.BeginMFAChallengeResponse"> & {
+  /**
+   * Challenge identifier to submit when verifying a factor. Format: "mfa_" followed by 32 lowercase hex characters.
+   *
+   * @generated from field: string challenge_id = 1;
+   */
+  challengeId: string;
+  /**
+   * Factor types the caller may use for this challenge. Maximum 8 unique values.
+   *
+   * @generated from field: repeated auth.v1.MFAFactorType allowed_factor_types = 2;
+   */
+  allowedFactorTypes: MFAFactorType[];
+  /**
+   * Passkey request options when passkey verification is available. Empty when passkeys are not available.
+   *
+   * @generated from field: google.protobuf.Struct public_key = 3;
+   */
+  publicKey?: JsonObject | undefined;
+  /**
+   * Time when this challenge expires.
+   *
+   * @generated from field: google.protobuf.Timestamp expires_at = 4;
+   */
+  expiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.BeginMFAChallengeResponse.
+ * Use `create(BeginMFAChallengeResponseSchema)` to create a new message.
+ */
+declare const BeginMFAChallengeResponseSchema: GenMessage<BeginMFAChallengeResponse>;
+/**
+ * Request to verify an MFA challenge with an authenticator-app code.
+ *
+ * @generated from message auth.v1.VerifyTOTPChallengeRequest
+ */
+type VerifyTOTPChallengeRequest = Message<"auth.v1.VerifyTOTPChallengeRequest"> & {
+  /**
+   * Challenge identifier returned by BeginMFAChallenge.
+   *
+   * @generated from field: string challenge_id = 1;
+   */
+  challengeId: string;
+  /**
+   * Current 6 to 8 digit code from the authenticator app.
+   *
+   * @generated from field: string code = 2;
+   */
+  code: string;
+};
+/**
+ * Describes the message auth.v1.VerifyTOTPChallengeRequest.
+ * Use `create(VerifyTOTPChallengeRequestSchema)` to create a new message.
+ */
+declare const VerifyTOTPChallengeRequestSchema: GenMessage<VerifyTOTPChallengeRequest>;
+/**
+ * Request to verify an MFA challenge with a passkey.
+ *
+ * @generated from message auth.v1.FinishPasskeyChallengeRequest
+ */
+type FinishPasskeyChallengeRequest = Message<"auth.v1.FinishPasskeyChallengeRequest"> & {
+  /**
+   * Challenge identifier returned by BeginMFAChallenge.
+   *
+   * @generated from field: string challenge_id = 1;
+   */
+  challengeId: string;
+  /**
+   * Passkey authentication response returned by the browser or device authenticator.
+   *
+   * @generated from field: google.protobuf.Struct credential = 2;
+   */
+  credential?: JsonObject | undefined;
+};
+/**
+ * Describes the message auth.v1.FinishPasskeyChallengeRequest.
+ * Use `create(FinishPasskeyChallengeRequestSchema)` to create a new message.
+ */
+declare const FinishPasskeyChallengeRequestSchema: GenMessage<FinishPasskeyChallengeRequest>;
+/**
+ * Request to verify an MFA challenge with a recovery code.
+ *
+ * @generated from message auth.v1.VerifyRecoveryCodeChallengeRequest
+ */
+type VerifyRecoveryCodeChallengeRequest = Message<"auth.v1.VerifyRecoveryCodeChallengeRequest"> & {
+  /**
+   * Challenge identifier returned by BeginMFAChallenge.
+   *
+   * @generated from field: string challenge_id = 1;
+   */
+  challengeId: string;
+  /**
+   * One-time recovery code. Accepted format is 8 to 64 letters, numbers, or hyphens.
+   *
+   * @generated from field: string recovery_code = 2;
+   */
+  recoveryCode: string;
+};
+/**
+ * Describes the message auth.v1.VerifyRecoveryCodeChallengeRequest.
+ * Use `create(VerifyRecoveryCodeChallengeRequestSchema)` to create a new message.
+ */
+declare const VerifyRecoveryCodeChallengeRequestSchema: GenMessage<VerifyRecoveryCodeChallengeRequest>;
+/**
+ * Response returned after an MFA challenge is completed.
+ *
+ * @generated from message auth.v1.CompleteMFAChallengeResponse
+ */
+type CompleteMFAChallengeResponse = Message<"auth.v1.CompleteMFAChallengeResponse"> & {
+  /**
+   * Session assurance details after completing the challenge.
+   *
+   * @generated from field: auth.v1.SessionInfo session = 1;
+   */
+  session?: SessionInfo | undefined;
+  /**
+   * MFA-elevated session token returned for session-elevation challenges. Empty for fresh step-up challenges.
+   *
+   * @generated from field: string access_token = 2;
+   */
+  accessToken: string;
+  /**
+   * Time when access_token expires. Empty when no access_token is returned.
+   *
+   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 3;
+   */
+  accessTokenExpiresAt?: Timestamp | undefined;
+  /**
+   * Fresh step-up token returned for fresh step-up challenges. Empty for session-elevation challenges.
+   *
+   * @generated from field: string step_up_token = 4;
+   */
+  stepUpToken: string;
+  /**
+   * Time when step_up_token expires. Empty when no step_up_token is returned.
+   *
+   * @generated from field: google.protobuf.Timestamp step_up_expires_at = 5;
+   */
+  stepUpExpiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.CompleteMFAChallengeResponse.
+ * Use `create(CompleteMFAChallengeResponseSchema)` to create a new message.
+ */
+declare const CompleteMFAChallengeResponseSchema: GenMessage<CompleteMFAChallengeResponse>;
+/**
+ * Request to bind a fresh step-up proof to one protected request.
+ *
+ * @generated from message auth.v1.ClaimFreshStepUpRequest
+ */
+type ClaimFreshStepUpRequest = Message<"auth.v1.ClaimFreshStepUpRequest"> & {
+  /**
+   * Client-generated request identifier for the protected request. Maximum 128 characters.
+   *
+   * @generated from field: string request_id = 1;
+   */
+  requestId: string;
+  /**
+   * Product action being protected, such as a withdrawal or security setting change. Maximum 64 characters.
+   *
+   * @generated from field: string action_type = 2;
+   */
+  actionType: string;
+  /**
+   * Product subject for the protected action, such as the target account, destination, or resource identifier. Maximum 128 characters.
+   *
+   * @generated from field: string subject = 3;
+   */
+  subject: string;
+};
+/**
+ * Describes the message auth.v1.ClaimFreshStepUpRequest.
+ * Use `create(ClaimFreshStepUpRequestSchema)` to create a new message.
+ */
+declare const ClaimFreshStepUpRequestSchema: GenMessage<ClaimFreshStepUpRequest>;
+/**
+ * Response returned after a fresh step-up proof is claimed.
+ *
+ * @generated from message auth.v1.ClaimFreshStepUpResponse
+ */
+type ClaimFreshStepUpResponse = Message<"auth.v1.ClaimFreshStepUpResponse"> & {
+  /**
+   * Fresh step-up proof identifier. Format: "mfa_" followed by 32 lowercase hex characters.
+   *
+   * @generated from field: string step_up_id = 1;
+   */
+  stepUpId: string;
+  /**
+   * One-time nonce that must be echoed when consuming or releasing the claim.
+   *
+   * @generated from field: string claim_nonce = 2;
+   */
+  claimNonce: string;
+  /**
+   * Time when this claim expires if it is not consumed or released.
+   *
+   * @generated from field: google.protobuf.Timestamp claim_expires_at = 3;
+   */
+  claimExpiresAt?: Timestamp | undefined;
+};
+/**
+ * Describes the message auth.v1.ClaimFreshStepUpResponse.
+ * Use `create(ClaimFreshStepUpResponseSchema)` to create a new message.
+ */
+declare const ClaimFreshStepUpResponseSchema: GenMessage<ClaimFreshStepUpResponse>;
+/**
+ * Request to consume a claimed fresh step-up proof after the protected request succeeds.
+ *
+ * @generated from message auth.v1.ConsumeFreshStepUpRequest
+ */
+type ConsumeFreshStepUpRequest = Message<"auth.v1.ConsumeFreshStepUpRequest"> & {
+  /**
+   * Fresh step-up proof identifier returned by ClaimFreshStepUp.
+   *
+   * @generated from field: string step_up_id = 1;
+   */
+  stepUpId: string;
+  /**
+   * Client-generated request identifier used when the proof was claimed.
+   *
+   * @generated from field: string request_id = 2;
+   */
+  requestId: string;
+  /**
+   * Product action type used when the proof was claimed.
+   *
+   * @generated from field: string action_type = 3;
+   */
+  actionType: string;
+  /**
+   * Product subject used when the proof was claimed.
+   *
+   * @generated from field: string subject = 4;
+   */
+  subject: string;
+  /**
+   * One-time nonce returned by ClaimFreshStepUp.
+   *
+   * @generated from field: string claim_nonce = 5;
+   */
+  claimNonce: string;
+};
+/**
+ * Describes the message auth.v1.ConsumeFreshStepUpRequest.
+ * Use `create(ConsumeFreshStepUpRequestSchema)` to create a new message.
+ */
+declare const ConsumeFreshStepUpRequestSchema: GenMessage<ConsumeFreshStepUpRequest>;
+/**
+ * Empty response returned after a fresh step-up proof is consumed.
+ *
+ * @generated from message auth.v1.ConsumeFreshStepUpResponse
+ */
+type ConsumeFreshStepUpResponse = Message<"auth.v1.ConsumeFreshStepUpResponse"> & {};
+/**
+ * Describes the message auth.v1.ConsumeFreshStepUpResponse.
+ * Use `create(ConsumeFreshStepUpResponseSchema)` to create a new message.
+ */
+declare const ConsumeFreshStepUpResponseSchema: GenMessage<ConsumeFreshStepUpResponse>;
+/**
+ * Request to release a claimed fresh step-up proof when the protected request does not complete.
+ *
+ * @generated from message auth.v1.ReleaseFreshStepUpRequest
+ */
+type ReleaseFreshStepUpRequest = Message<"auth.v1.ReleaseFreshStepUpRequest"> & {
+  /**
+   * Fresh step-up proof identifier returned by ClaimFreshStepUp.
+   *
+   * @generated from field: string step_up_id = 1;
+   */
+  stepUpId: string;
+  /**
+   * Client-generated request identifier used when the proof was claimed.
+   *
+   * @generated from field: string request_id = 2;
+   */
+  requestId: string;
+  /**
+   * Product action type used when the proof was claimed.
+   *
+   * @generated from field: string action_type = 3;
+   */
+  actionType: string;
+  /**
+   * Product subject used when the proof was claimed.
+   *
+   * @generated from field: string subject = 4;
+   */
+  subject: string;
+  /**
+   * One-time nonce returned by ClaimFreshStepUp.
+   *
+   * @generated from field: string claim_nonce = 5;
+   */
+  claimNonce: string;
+  /**
+   * Optional product-facing reason for releasing the claim. Maximum 128 characters.
+   *
+   * @generated from field: string reason = 6;
+   */
+  reason: string;
+};
+/**
+ * Describes the message auth.v1.ReleaseFreshStepUpRequest.
+ * Use `create(ReleaseFreshStepUpRequestSchema)` to create a new message.
+ */
+declare const ReleaseFreshStepUpRequestSchema: GenMessage<ReleaseFreshStepUpRequest>;
+/**
+ * Empty response returned after a fresh step-up proof is released.
+ *
+ * @generated from message auth.v1.ReleaseFreshStepUpResponse
+ */
+type ReleaseFreshStepUpResponse = Message<"auth.v1.ReleaseFreshStepUpResponse"> & {};
+/**
+ * Describes the message auth.v1.ReleaseFreshStepUpResponse.
+ * Use `create(ReleaseFreshStepUpResponseSchema)` to create a new message.
+ */
+declare const ReleaseFreshStepUpResponseSchema: GenMessage<ReleaseFreshStepUpResponse>;
+/**
+ * Request to update an MFA factor label.
+ *
+ * @generated from message auth.v1.UpdateMFAFactorRequest
+ */
+type UpdateMFAFactorRequest = Message<"auth.v1.UpdateMFAFactorRequest"> & {
+  /**
+   * MFA factor identifier to update.
+   *
+   * @generated from field: string factor_id = 1;
+   */
+  factorId: string;
+  /**
+   * New human-friendly label for the factor. Empty clears the label.
+   *
+   * @generated from field: string label = 2;
+   */
+  label: string;
+};
+/**
+ * Describes the message auth.v1.UpdateMFAFactorRequest.
+ * Use `create(UpdateMFAFactorRequestSchema)` to create a new message.
+ */
+declare const UpdateMFAFactorRequestSchema: GenMessage<UpdateMFAFactorRequest>;
+/**
+ * Response containing the updated MFA factor.
+ *
+ * @generated from message auth.v1.UpdateMFAFactorResponse
+ */
+type UpdateMFAFactorResponse = Message<"auth.v1.UpdateMFAFactorResponse"> & {
+  /**
+   * Updated MFA factor metadata.
+   *
+   * @generated from field: auth.v1.MFAFactor factor = 1;
+   */
+  factor?: MFAFactor | undefined;
+};
+/**
+ * Describes the message auth.v1.UpdateMFAFactorResponse.
+ * Use `create(UpdateMFAFactorResponseSchema)` to create a new message.
+ */
+declare const UpdateMFAFactorResponseSchema: GenMessage<UpdateMFAFactorResponse>;
+/**
+ * Request to delete an MFA factor.
+ *
+ * @generated from message auth.v1.DeleteMFAFactorRequest
+ */
+type DeleteMFAFactorRequest = Message<"auth.v1.DeleteMFAFactorRequest"> & {
+  /**
+   * MFA factor identifier to delete.
+   *
+   * @generated from field: string factor_id = 1;
+   */
+  factorId: string;
+};
+/**
+ * Describes the message auth.v1.DeleteMFAFactorRequest.
+ * Use `create(DeleteMFAFactorRequestSchema)` to create a new message.
+ */
+declare const DeleteMFAFactorRequestSchema: GenMessage<DeleteMFAFactorRequest>;
+/**
+ * Empty response returned after an MFA factor is deleted.
+ *
+ * @generated from message auth.v1.DeleteMFAFactorResponse
+ */
+type DeleteMFAFactorResponse = Message<"auth.v1.DeleteMFAFactorResponse"> & {};
+/**
+ * Describes the message auth.v1.DeleteMFAFactorResponse.
+ * Use `create(DeleteMFAFactorResponseSchema)` to create a new message.
+ */
+declare const DeleteMFAFactorResponseSchema: GenMessage<DeleteMFAFactorResponse>;
+/**
+ * Request to rotate recovery codes.
+ *
+ * @generated from message auth.v1.RegenerateRecoveryCodesRequest
+ */
+type RegenerateRecoveryCodesRequest = Message<"auth.v1.RegenerateRecoveryCodesRequest"> & {};
+/**
+ * Describes the message auth.v1.RegenerateRecoveryCodesRequest.
+ * Use `create(RegenerateRecoveryCodesRequestSchema)` to create a new message.
+ */
+declare const RegenerateRecoveryCodesRequestSchema: GenMessage<RegenerateRecoveryCodesRequest>;
+/**
+ * Response containing newly generated recovery codes.
+ *
+ * @generated from message auth.v1.RegenerateRecoveryCodesResponse
+ */
+type RegenerateRecoveryCodesResponse = Message<"auth.v1.RegenerateRecoveryCodesResponse"> & {
+  /**
+   * New one-time recovery codes. Store these securely; they are only returned in this response.
+   *
+   * @generated from field: repeated string recovery_codes = 1;
+   */
+  recoveryCodes: string[];
+};
+/**
+ * Describes the message auth.v1.RegenerateRecoveryCodesResponse.
+ * Use `create(RegenerateRecoveryCodesResponseSchema)` to create a new message.
+ */
+declare const RegenerateRecoveryCodesResponseSchema: GenMessage<RegenerateRecoveryCodesResponse>;
+/**
+ * Session assurance level for the current interactive authentication context.
+ *
+ * @generated from enum auth.v1.SessionLevel
+ */
+declare enum SessionLevel {
+  /**
+   * No session assurance level was specified.
+   *
+   * @generated from enum value: SESSION_LEVEL_UNSPECIFIED = 0;
+   */
+  SESSION_LEVEL_UNSPECIFIED = 0,
+  /**
+   * Primary login has completed, but MFA has not elevated this session.
+   *
+   * @generated from enum value: PRIMARY_AUTHENTICATED = 1;
+   */
+  PRIMARY_AUTHENTICATED = 1,
+  /**
+   * MFA has elevated this session for ordinary protected account activity.
+   *
+   * @generated from enum value: MFA_ELEVATED = 2;
+   */
+  MFA_ELEVATED = 2,
+  /**
+   * A short-lived proof for one high-risk action.
+   *
+   * @generated from enum value: FRESH_STEP_UP = 3;
+   */
+  FRESH_STEP_UP = 3
+}
+/**
+ * Describes the enum auth.v1.SessionLevel.
+ */
+declare const SessionLevelSchema: GenEnum<SessionLevel>;
+/**
+ * Type of MFA factor or one-time recovery method.
+ *
+ * @generated from enum auth.v1.MFAFactorType
+ */
+declare enum MFAFactorType {
+  /**
+   * No MFA factor type was specified.
+   *
+   * @generated from enum value: MFA_FACTOR_TYPE_UNSPECIFIED = 0;
+   */
+  MFA_FACTOR_TYPE_UNSPECIFIED = 0,
+  /**
+   * Time-based one-time password from an authenticator app.
+   *
+   * @generated from enum value: MFA_FACTOR_TYPE_TOTP = 1;
+   */
+  MFA_FACTOR_TYPE_TOTP = 1,
+  /**
+   * Passkey factor using device or hardware-key authentication.
+   *
+   * @generated from enum value: MFA_FACTOR_TYPE_PASSKEY = 2;
+   */
+  MFA_FACTOR_TYPE_PASSKEY = 2,
+  /**
+   * One-time recovery code.
+   *
+   * @generated from enum value: MFA_FACTOR_TYPE_RECOVERY_CODE = 3;
+   */
+  MFA_FACTOR_TYPE_RECOVERY_CODE = 3
+}
+/**
+ * Describes the enum auth.v1.MFAFactorType.
+ */
+declare const MFAFactorTypeSchema: GenEnum<MFAFactorType>;
+/**
+ * Reason a user is completing an MFA challenge.
+ *
+ * @generated from enum auth.v1.MFAChallengePurpose
+ */
+declare enum MFAChallengePurpose {
+  /**
+   * No MFA challenge purpose was specified.
+   *
+   * @generated from enum value: MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0;
+   */
+  MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0,
+  /**
+   * Elevates the current session after successful MFA.
+   *
+   * @generated from enum value: MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1;
+   */
+  MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1,
+  /**
+   * Creates a short-lived proof for one high-risk action.
+   *
+   * @generated from enum value: MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2;
+   */
+  MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2
+}
+/**
+ * Describes the enum auth.v1.MFAChallengePurpose.
+ */
+declare const MFAChallengePurposeSchema: GenEnum<MFAChallengePurpose>;
+/**
+ * MFA management service for enrollment, challenges, fresh step-up proofs, and recovery codes.
+ *
+ * @generated from service auth.v1.MFAService
+ */
+declare const MFAService: GenService<{
+  /**
+   * List the caller's enrolled MFA factors.
+   *
+   * @generated from rpc auth.v1.MFAService.ListMFAFactors
+   */
+  listMFAFactors: {
+    methodKind: "unary";
+    input: typeof ListMFAFactorsRequestSchema;
+    output: typeof ListMFAFactorsResponseSchema;
+  };
+  /**
+   * Start authenticator-app enrollment.
+   *
+   * @generated from rpc auth.v1.MFAService.BeginTOTPEnrollment
+   */
+  beginTOTPEnrollment: {
+    methodKind: "unary";
+    input: typeof BeginTOTPEnrollmentRequestSchema;
+    output: typeof BeginTOTPEnrollmentResponseSchema;
+  };
+  /**
+   * Finish authenticator-app enrollment.
+   *
+   * @generated from rpc auth.v1.MFAService.FinishTOTPEnrollment
+   */
+  finishTOTPEnrollment: {
+    methodKind: "unary";
+    input: typeof FinishTOTPEnrollmentRequestSchema;
+    output: typeof FinishTOTPEnrollmentResponseSchema;
+  };
+  /**
+   * Start passkey enrollment.
+   *
+   * @generated from rpc auth.v1.MFAService.BeginPasskeyEnrollment
+   */
+  beginPasskeyEnrollment: {
+    methodKind: "unary";
+    input: typeof BeginPasskeyEnrollmentRequestSchema;
+    output: typeof BeginPasskeyEnrollmentResponseSchema;
+  };
+  /**
+   * Finish passkey enrollment.
+   *
+   * @generated from rpc auth.v1.MFAService.FinishPasskeyEnrollment
+   */
+  finishPasskeyEnrollment: {
+    methodKind: "unary";
+    input: typeof FinishPasskeyEnrollmentRequestSchema;
+    output: typeof FinishPasskeyEnrollmentResponseSchema;
+  };
+  /**
+   * Start an MFA challenge for session elevation or fresh step-up.
+   *
+   * @generated from rpc auth.v1.MFAService.BeginMFAChallenge
+   */
+  beginMFAChallenge: {
+    methodKind: "unary";
+    input: typeof BeginMFAChallengeRequestSchema;
+    output: typeof BeginMFAChallengeResponseSchema;
+  };
+  /**
+   * Verify an MFA challenge with an authenticator-app code.
+   *
+   * @generated from rpc auth.v1.MFAService.VerifyTOTPChallenge
+   */
+  verifyTOTPChallenge: {
+    methodKind: "unary";
+    input: typeof VerifyTOTPChallengeRequestSchema;
+    output: typeof CompleteMFAChallengeResponseSchema;
+  };
+  /**
+   * Verify an MFA challenge with a passkey.
+   *
+   * @generated from rpc auth.v1.MFAService.FinishPasskeyChallenge
+   */
+  finishPasskeyChallenge: {
+    methodKind: "unary";
+    input: typeof FinishPasskeyChallengeRequestSchema;
+    output: typeof CompleteMFAChallengeResponseSchema;
+  };
+  /**
+   * Verify an MFA challenge with a recovery code.
+   *
+   * @generated from rpc auth.v1.MFAService.VerifyRecoveryCodeChallenge
+   */
+  verifyRecoveryCodeChallenge: {
+    methodKind: "unary";
+    input: typeof VerifyRecoveryCodeChallengeRequestSchema;
+    output: typeof CompleteMFAChallengeResponseSchema;
+  };
+  /**
+   * Update an enrolled MFA factor label.
+   *
+   * @generated from rpc auth.v1.MFAService.UpdateMFAFactor
+   */
+  updateMFAFactor: {
+    methodKind: "unary";
+    input: typeof UpdateMFAFactorRequestSchema;
+    output: typeof UpdateMFAFactorResponseSchema;
+  };
+  /**
+   * Delete an enrolled MFA factor.
+   *
+   * @generated from rpc auth.v1.MFAService.DeleteMFAFactor
+   */
+  deleteMFAFactor: {
+    methodKind: "unary";
+    input: typeof DeleteMFAFactorRequestSchema;
+    output: typeof DeleteMFAFactorResponseSchema;
+  };
+  /**
+   * Rotate the caller's recovery codes.
+   *
+   * @generated from rpc auth.v1.MFAService.RegenerateRecoveryCodes
+   */
+  regenerateRecoveryCodes: {
+    methodKind: "unary";
+    input: typeof RegenerateRecoveryCodesRequestSchema;
+    output: typeof RegenerateRecoveryCodesResponseSchema;
+  };
+  /**
+   * Claim a fresh step-up proof for one protected request.
+   *
+   * @generated from rpc auth.v1.MFAService.ClaimFreshStepUp
+   */
+  claimFreshStepUp: {
+    methodKind: "unary";
+    input: typeof ClaimFreshStepUpRequestSchema;
+    output: typeof ClaimFreshStepUpResponseSchema;
+  };
+  /**
+   * Consume a claimed fresh step-up proof after the protected request succeeds.
+   *
+   * @generated from rpc auth.v1.MFAService.ConsumeFreshStepUp
+   */
+  consumeFreshStepUp: {
+    methodKind: "unary";
+    input: typeof ConsumeFreshStepUpRequestSchema;
+    output: typeof ConsumeFreshStepUpResponseSchema;
+  };
+  /**
+   * Release a claimed fresh step-up proof when the protected request does not complete.
+   *
+   * @generated from rpc auth.v1.MFAService.ReleaseFreshStepUp
+   */
+  releaseFreshStepUp: {
+    methodKind: "unary";
+    input: typeof ReleaseFreshStepUpRequestSchema;
+    output: typeof ReleaseFreshStepUpResponseSchema;
+  };
+}>;
+//#endregion
+export { BeginMFAChallengeRequest, BeginMFAChallengeRequestSchema, BeginMFAChallengeResponse, BeginMFAChallengeResponseSchema, BeginPasskeyEnrollmentRequest, BeginPasskeyEnrollmentRequestSchema, BeginPasskeyEnrollmentResponse, BeginPasskeyEnrollmentResponseSchema, BeginTOTPEnrollmentRequest, BeginTOTPEnrollmentRequestSchema, BeginTOTPEnrollmentResponse, BeginTOTPEnrollmentResponseSchema, ClaimFreshStepUpRequest, ClaimFreshStepUpRequestSchema, ClaimFreshStepUpResponse, ClaimFreshStepUpResponseSchema, CompleteMFAChallengeResponse, CompleteMFAChallengeResponseSchema, ConsumeFreshStepUpRequest, ConsumeFreshStepUpRequestSchema, ConsumeFreshStepUpResponse, ConsumeFreshStepUpResponseSchema, DeleteMFAFactorRequest, DeleteMFAFactorRequestSchema, DeleteMFAFactorResponse, DeleteMFAFactorResponseSchema, FinishPasskeyChallengeRequest, FinishPasskeyChallengeRequestSchema, FinishPasskeyEnrollmentRequest, FinishPasskeyEnrollmentRequestSchema, FinishPasskeyEnrollmentResponse, FinishPasskeyEnrollmentResponseSchema, FinishTOTPEnrollmentRequest, FinishTOTPEnrollmentRequestSchema, FinishTOTPEnrollmentResponse, FinishTOTPEnrollmentResponseSchema, ListMFAFactorsRequest, ListMFAFactorsRequestSchema, ListMFAFactorsResponse, ListMFAFactorsResponseSchema, MFAChallengePurpose, MFAChallengePurposeSchema, MFAFactor, MFAFactorSchema, MFAFactorType, MFAFactorTypeSchema, MFAService, RegenerateRecoveryCodesRequest, RegenerateRecoveryCodesRequestSchema, RegenerateRecoveryCodesResponse, RegenerateRecoveryCodesResponseSchema, ReleaseFreshStepUpRequest, ReleaseFreshStepUpRequestSchema, ReleaseFreshStepUpResponse, ReleaseFreshStepUpResponseSchema, SessionInfo, SessionInfoSchema, SessionLevel, SessionLevelSchema, UpdateMFAFactorRequest, UpdateMFAFactorRequestSchema, UpdateMFAFactorResponse, UpdateMFAFactorResponseSchema, VerifyRecoveryCodeChallengeRequest, VerifyRecoveryCodeChallengeRequestSchema, VerifyTOTPChallengeRequest, VerifyTOTPChallengeRequestSchema, file_auth_v1_mfa, mfa_pb_d_exports };
+//# sourceMappingURL=mfa_pb.d.ts.map