@polyester/sdk 0.10.0 → 0.12.0

package/dist/gen/auth/v1/api_keys_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"api_keys_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/api_keys.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { FieldMask, Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_field_mask, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/api_keys.proto.\n */\nexport const file_auth_v1_api_keys: GenFile = /*@__PURE__*/\n  fileDesc(\"ChZhdXRoL3YxL2FwaV9rZXlzLnByb3RvEgdhdXRoLnYxIucDCgZBcGlLZXkSEAoGa2V5X2lkGAIgASgJQgASDQoFbGFiZWwYAyABKAkSDgoEaWNvbhgJIAEoCUIAEg8KBWNvbG9yGAogASgJQgASFgoMaXBfd2hpdGVsaXN0GAQgAygJQgASJQoGc3RhdHVzGAYgASgOMhUuYXV0aC52MS5BcGlLZXlTdGF0dXMSGgoNc3ViYWNjb3VudF9pZBgHIAEoBkgAiAEBEhYKCXBvbGljeV9pZBgIIAEoBkgBiAEBEi4KCmNyZWF0ZWRfYXQYFCABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEjAKDGxhc3RfdXNlZF9hdBgVIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASGgoScHVibGljX2tleV9lZDI1NTE5GBYgASgMEi4KCmV4cGlyZXNfYXQYFyABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEhgKEGNyZWF0ZWRfYnlfYWN0b3IYGCABKAkSLgoKdXBkYXRlZF9hdBgZIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXASEAoIcmV2aXNpb24YGiABKARCEAoOX3N1YmFjY291bnRfaWRCDAoKX3BvbGljeV9pZCKrAQoTQ3JlYXRlQXBpS2V5UmVxdWVzdBIPCgVsYWJlbBgBIAEoCUIAEhoKDXN1YmFjY291bnRfaWQYAyABKAZIAIgBARIOCgRpY29uGAYgASgJQgASDwoFY29sb3IYByABKAlCABIWCgxpcF93aGl0ZWxpc3QYBCADKAlCABIcChJwdWJsaWNfa2V5X2VkMjU1MTkYBSABKAxCAEIQCg5fc3ViYWNjb3VudF9pZCI4ChRDcmVhdGVBcGlLZXlSZXNwb25zZRIgCgdhcGlfa2V5GAEgASgLMg8uYXV0aC52MS5BcGlLZXkiQgoSTGlzdEFwaUtleXNSZXF1ZXN0EhoKDXN1YmFjY291bnRfaWQYASABKAZIAIgBAUIQCg5fc3ViYWNjb3VudF9pZCI4ChNMaXN0QXBpS2V5c1Jlc3BvbnNlEiEKCGFwaV9rZXlzGAEgAygLMg8uYXV0aC52MS5BcGlLZXkiJwoTRGVsZXRlQXBpS2V5UmVxdWVzdBIQCgZrZXlfaWQYASABKAlCACIWChREZWxldGVBcGlLZXlSZXNwb25zZSIkChBHZXRBcGlLZXlSZXF1ZXN0EhAKBmtleV9pZBgBIAEoCUIAIjUKEUdldEFwaUtleVJlc3BvbnNlEiAKB2FwaV9rZXkYASABKAsyDy5hdXRoLnYxLkFwaUtleSK3AQoQQXBpS2V5VXBkYXRlU3BlYxIPCgVsYWJlbBgBIAEoCUIAEg4KBGljb24YAiABKAlCABIPCgVjb2xvchgDIAEoCUIAEicKBnN0YXR1cxgEIAEoDjIVLmF1dGgudjEuQXBpS2V5U3RhdHVzQgASFgoMaXBfd2hpdGVsaXN0GAUgAygJQgASLgoKZXhwaXJlc19hdBgGIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXA6ACKlAQoTVXBkYXRlQXBpS2V5UmVxdWVzdBIQCgZrZXlfaWQYASABKAlCABIsCgdhcGlfa2V5GAIgASgLMhkuYXV0aC52MS5BcGlLZXlVcGRhdGVTcGVjQgASMQoLdXBkYXRlX21hc2sYAyABKAsyGi5nb29nbGUucHJvdG9idWYuRmllbGRNYXNrQgASGwoRZXhwZWN0ZWRfcmV2aXNpb24YBCABKARCACI4ChRVcGRhdGVBcGlLZXlSZXNwb25zZRIgCgdhcGlfa2V5GAEgASgLMg8uYXV0aC52MS5BcGlLZXkqVQoMQXBpS2V5U3RhdHVzEh4KGkFQSV9LRVlfU1RBVFVTX1VOU1BFQ0lGSUVEEAASCgoGQUNUSVZFEAESCwoHUkVWT0tFRBACEgwKCERJU0FCTEVEEAMyjgMKDUFwaUtleVNlcnZpY2USTQoMQ3JlYXRlQXBpS2V5EhwuYXV0aC52MS5DcmVhdGVBcGlLZXlSZXF1ZXN0Gh0uYXV0aC52MS5DcmVhdGVBcGlLZXlSZXNwb25zZSIAEkoKC0xpc3RBcGlLZXlzEhsuYXV0aC52MS5MaXN0QXBpS2V5c1JlcXVlc3QaHC5hdXRoLnYxLkxpc3RBcGlLZXlzUmVzcG9uc2UiABJECglHZXRBcGlLZXkSGS5hdXRoLnYxLkdldEFwaUtleVJlcXVlc3QaGi5hdXRoLnYxLkdldEFwaUtleVJlc3BvbnNlIgASTQoMRGVsZXRlQXBpS2V5EhwuYXV0aC52MS5EZWxldGVBcGlLZXlSZXF1ZXN0Gh0uYXV0aC52MS5EZWxldGVBcGlLZXlSZXNwb25zZSIAEk0KDFVwZGF0ZUFwaUtleRIcLmF1dGgudjEuVXBkYXRlQXBpS2V5UmVxdWVzdBodLmF1dGgudjEuVXBkYXRlQXBpS2V5UmVzcG9uc2UiAEI8WjpnaXRodWIuY29tL0ZhYnJpYy1MYWJzL3BvbHllc3Rlci1zZGstZ28vZ2VuL2F1dGgvdjE7YXV0aHYxYgZwcm90bzM=\", [file_google_protobuf_field_mask, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * ApiKey is public API key metadata. It never includes the private key or seed.\n *\n * @generated from message auth.v1.ApiKey\n */\nexport type ApiKey = Message<\"auth.v1.ApiKey\"> & {\n  /**\n   * Stable opaque identifier used to refer to this key, formatted as \"ak_\"\n   * followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string key_id = 2;\n   */\n  keyId: string;\n\n  /**\n   * Human-readable label for the key. Maximum length is 64 characters.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 9;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 10;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Current key status.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 6;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Optional sub-account this key is scoped to (opaque ID; empty = root-level).\n   *\n   * @generated from field: optional fixed64 subaccount_id = 7;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional API policy attached to this key (opaque ID).\n   * Empty means no policy is attached and the key has no permissions.\n   *\n   * @generated from field: optional fixed64 policy_id = 8;\n   */\n  policyId?: bigint | undefined;\n\n  /**\n   * Time in UTC when this key was created.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 20;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Last time in UTC when this key authenticated a request. Omitted when the\n   * key has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 21;\n   */\n  lastUsedAt?: Timestamp | undefined;\n\n  /**\n   * Ed25519 public key bytes associated with this API key. The private key or\n   * seed is never returned by the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 22;\n   */\n  publicKeyEd25519: Uint8Array;\n\n  /**\n   * Optional expiry time in UTC. When set, the key cannot authenticate requests\n   * after this time, regardless of status.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 23;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Read-only actor label describing who created this key, such as a username\n   * or account label.\n   *\n   * @generated from field: string created_by_actor = 24;\n   */\n  createdByActor: string;\n\n  /**\n   * Time in UTC when this key's configuration was last changed. For the same\n   * key, later is fresher, equal is an idempotent replay, and earlier is stale.\n   * Equal timestamps with different configuration indicate an invariant failure.\n   * This is independent of last_used_at, which tracks authentication activity.\n   *\n   * @generated from field: google.protobuf.Timestamp updated_at = 25;\n   */\n  updatedAt?: Timestamp | undefined;\n\n  /**\n   * Monotonic resource revision used for conditional updates.\n   *\n   * @generated from field: uint64 revision = 26;\n   */\n  revision: bigint;\n};\n\n/**\n * Describes the message auth.v1.ApiKey.\n * Use `create(ApiKeySchema)` to create a new message.\n */\nexport const ApiKeySchema: GenMessage<ApiKey> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 0);\n\n/**\n * CreateApiKeyRequest creates a new API key. Clients generate the Ed25519 key\n * pair locally and submit only the public key.\n *\n * @generated from message auth.v1.CreateApiKeyRequest\n */\nexport type CreateApiKeyRequest = Message<\"auth.v1.CreateApiKeyRequest\"> & {\n  /**\n   * Human-readable label for the key. Required; 1 to 64 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * Optional sub-account to scope this key to (opaque ID). If unset, the key is\n   * root-level.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 3;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 6;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 7;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Ed25519 public key bytes. Must be exactly 32 bytes. The private key or seed\n   * must never be sent to the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 5;\n   */\n  publicKeyEd25519: Uint8Array;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyRequest.\n * Use `create(CreateApiKeyRequestSchema)` to create a new message.\n */\nexport const CreateApiKeyRequestSchema: GenMessage<CreateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 1);\n\n/**\n * CreateApiKeyResponse returns the created API key metadata.\n *\n * @generated from message auth.v1.CreateApiKeyResponse\n */\nexport type CreateApiKeyResponse = Message<\"auth.v1.CreateApiKeyResponse\"> & {\n  /**\n   * Created API key metadata. The private key or seed is never returned.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyResponse.\n * Use `create(CreateApiKeyResponseSchema)` to create a new message.\n */\nexport const CreateApiKeyResponseSchema: GenMessage<CreateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 2);\n\n/**\n * ListApiKeysRequest lists non-revoked API keys owned by the caller.\n *\n * @generated from message auth.v1.ListApiKeysRequest\n */\nexport type ListApiKeysRequest = Message<\"auth.v1.ListApiKeysRequest\"> & {\n  /**\n   * Optional filter: only keys scoped to this sub-account (opaque ID). If unset,\n   * all non-revoked keys owned by the caller are returned.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 1;\n   */\n  subaccountId?: bigint | undefined;\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysRequest.\n * Use `create(ListApiKeysRequestSchema)` to create a new message.\n */\nexport const ListApiKeysRequestSchema: GenMessage<ListApiKeysRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 3);\n\n/**\n * ListApiKeysResponse contains matching API keys, newest first by creation time.\n *\n * @generated from message auth.v1.ListApiKeysResponse\n */\nexport type ListApiKeysResponse = Message<\"auth.v1.ListApiKeysResponse\"> & {\n  /**\n   * Matching API keys, newest first. Revoked keys are excluded.\n   *\n   * @generated from field: repeated auth.v1.ApiKey api_keys = 1;\n   */\n  apiKeys: ApiKey[];\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysResponse.\n * Use `create(ListApiKeysResponseSchema)` to create a new message.\n */\nexport const ListApiKeysResponseSchema: GenMessage<ListApiKeysResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 4);\n\n/**\n * DeleteApiKeyRequest permanently revokes an API key.\n *\n * @generated from message auth.v1.DeleteApiKeyRequest\n */\nexport type DeleteApiKeyRequest = Message<\"auth.v1.DeleteApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier (e.g. \"ak_<hex>\"). This is the stable public\n   * handle for a key.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyRequest.\n * Use `create(DeleteApiKeyRequestSchema)` to create a new message.\n */\nexport const DeleteApiKeyRequestSchema: GenMessage<DeleteApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 5);\n\n/**\n * DeleteApiKeyResponse is empty when revocation succeeds.\n *\n * @generated from message auth.v1.DeleteApiKeyResponse\n */\nexport type DeleteApiKeyResponse = Message<\"auth.v1.DeleteApiKeyResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyResponse.\n * Use `create(DeleteApiKeyResponseSchema)` to create a new message.\n */\nexport const DeleteApiKeyResponseSchema: GenMessage<DeleteApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 6);\n\n/**\n * GetApiKeyRequest returns a single API key owned by the caller's account.\n *\n * @generated from message auth.v1.GetApiKeyRequest\n */\nexport type GetApiKeyRequest = Message<\"auth.v1.GetApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier, formatted as \"ak_\" followed by 32 lowercase hex\n   * characters.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyRequest.\n * Use `create(GetApiKeyRequestSchema)` to create a new message.\n */\nexport const GetApiKeyRequestSchema: GenMessage<GetApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 7);\n\n/**\n * GetApiKeyResponse returns one API key owned by the caller.\n *\n * @generated from message auth.v1.GetApiKeyResponse\n */\nexport type GetApiKeyResponse = Message<\"auth.v1.GetApiKeyResponse\"> & {\n  /**\n   * Matching API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyResponse.\n * Use `create(GetApiKeyResponseSchema)` to create a new message.\n */\nexport const GetApiKeyResponseSchema: GenMessage<GetApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 8);\n\n/**\n * ApiKeyUpdateSpec contains mutable API key configuration.\n *\n * @generated from message auth.v1.ApiKeyUpdateSpec\n */\nexport type ApiKeyUpdateSpec = Message<\"auth.v1.ApiKeyUpdateSpec\"> & {\n  /**\n   * Human-friendly label for the key. Empty clears the label when selected.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.\n   *\n   * @generated from field: string icon = 2;\n   */\n  icon: string;\n\n  /**\n   * User-chosen color token for UI display. Empty clears the color when selected.\n   *\n   * @generated from field: string color = 3;\n   */\n  color: string;\n\n  /**\n   * New status. ACTIVE and DISABLED are allowed; revocation uses DeleteApiKey.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 4;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Complete replacement IP whitelist. Empty clears the restriction when selected.\n   *\n   * @generated from field: repeated string ip_whitelist = 5;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Expiry time in UTC. When selected, omission or the epoch clears expiry.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 6;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ApiKeyUpdateSpec.\n * Use `create(ApiKeyUpdateSpecSchema)` to create a new message.\n */\nexport const ApiKeyUpdateSpecSchema: GenMessage<ApiKeyUpdateSpec> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 9);\n\n/**\n * UpdateApiKeyRequest changes selected mutable fields on an existing API key.\n *\n * @generated from message auth.v1.UpdateApiKeyRequest\n */\nexport type UpdateApiKeyRequest = Message<\"auth.v1.UpdateApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier to update.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n\n  /**\n   * Candidate values for fields selected by update_mask.\n   *\n   * @generated from field: auth.v1.ApiKeyUpdateSpec api_key = 2;\n   */\n  apiKey?: ApiKeyUpdateSpec | undefined;\n\n  /**\n   * Mutable fields to apply. Paths are relative to api_key. The mask is required,\n   * must be non-empty, and cannot contain \"*\".\n   *\n   * @generated from field: google.protobuf.FieldMask update_mask = 3;\n   */\n  updateMask?: FieldMask | undefined;\n\n  /**\n   * Revision returned by the latest successful read.\n   *\n   * @generated from field: uint64 expected_revision = 4;\n   */\n  expectedRevision: bigint;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyRequest.\n * Use `create(UpdateApiKeyRequestSchema)` to create a new message.\n */\nexport const UpdateApiKeyRequestSchema: GenMessage<UpdateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 10);\n\n/**\n * UpdateApiKeyResponse returns the API key after applying the update.\n *\n * @generated from message auth.v1.UpdateApiKeyResponse\n */\nexport type UpdateApiKeyResponse = Message<\"auth.v1.UpdateApiKeyResponse\"> & {\n  /**\n   * Updated API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyResponse.\n * Use `create(UpdateApiKeyResponseSchema)` to create a new message.\n */\nexport const UpdateApiKeyResponseSchema: GenMessage<UpdateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 11);\n\n/**\n * Status of an API key.\n *\n * @generated from enum auth.v1.ApiKeyStatus\n */\nexport enum ApiKeyStatus {\n  /**\n   * No API key status specified.\n   *\n   * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;\n   */\n  API_KEY_STATUS_UNSPECIFIED = 0,\n\n  /**\n   * Key can authenticate requests.\n   *\n   * @generated from enum value: ACTIVE = 1;\n   */\n  ACTIVE = 1,\n\n  /**\n   * Key has been permanently revoked and cannot be used again.\n   *\n   * @generated from enum value: REVOKED = 2;\n   */\n  REVOKED = 2,\n\n  /**\n   * Key is temporarily disabled and cannot authenticate requests until re-enabled.\n   *\n   * @generated from enum value: DISABLED = 3;\n   */\n  DISABLED = 3,\n}\n\n/**\n * Describes the enum auth.v1.ApiKeyStatus.\n */\nexport const ApiKeyStatusSchema: GenEnum<ApiKeyStatus> = /*@__PURE__*/\n  enumDesc(file_auth_v1_api_keys, 0);\n\n/**\n * ApiKeyService manages API keys for authenticated callers.\n *\n * @generated from service auth.v1.ApiKeyService\n */\nexport const ApiKeyService: GenService<{\n  /**\n   * Create a new API key for the caller. Account security settings may require\n   * MFA enrollment or a fresh step-up proof.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.CreateApiKey\n   */\n  createApiKey: {\n    methodKind: \"unary\";\n    input: typeof CreateApiKeyRequestSchema;\n    output: typeof CreateApiKeyResponseSchema;\n  },\n  /**\n   * List non-revoked API keys owned by the caller, newest first.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.ListApiKeys\n   */\n  listApiKeys: {\n    methodKind: \"unary\";\n    input: typeof ListApiKeysRequestSchema;\n    output: typeof ListApiKeysResponseSchema;\n  },\n  /**\n   * Get a single API key owned by the caller.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.GetApiKey\n   */\n  getApiKey: {\n    methodKind: \"unary\";\n    input: typeof GetApiKeyRequestSchema;\n    output: typeof GetApiKeyResponseSchema;\n  },\n  /**\n   * Revoke an API key permanently.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.DeleteApiKey\n   */\n  deleteApiKey: {\n    methodKind: \"unary\";\n    input: typeof DeleteApiKeyRequestSchema;\n    output: typeof DeleteApiKeyResponseSchema;\n  },\n  /**\n   * Update API key metadata and allowed status transitions. Revocation must use\n   * DeleteApiKey.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.UpdateApiKey\n   */\n  updateApiKey: {\n    methodKind: \"unary\";\n    input: typeof UpdateApiKeyRequestSchema;\n    output: typeof UpdateApiKeyResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_api_keys, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,wBACX,uBAAS,4nFAA4nF;CAAC;CAAiC;CAAgC;AAA0B,CAAC;;;;;AAgIpuF,MAAa,eACX,0BAAY,uBAAuB,CAAC;;;;;AA2DtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,2BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AActC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,0BACX,0BAAY,uBAAuB,CAAC;;;;;AAuDtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AA0CtC,MAAa,4BACX,0BAAY,uBAAuB,EAAE;;;;;AAoBvC,MAAa,6BACX,0BAAY,uBAAuB,EAAE;;;;;;AAOvC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,gCAAA,KAAA;;;;;;CAOA,aAAA,aAAA,YAAA,KAAA;;;;;;CAOA,aAAA,aAAA,aAAA,KAAA;;;;;;CAOA,aAAA,aAAA,cAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,uBAAuB,CAAC;;;;;;AAOnC,MAAa,gBAsDX,0BAAY,uBAAuB,CAAC"}
+{"version":3,"file":"api_keys_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/api_keys_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/api_keys.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { FieldMask, Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_field_mask, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/api_keys.proto.\n */\nexport const file_auth_v1_api_keys: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_field_mask, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * ApiKey is public API key metadata. It never includes the private key or seed.\n *\n * @generated from message auth.v1.ApiKey\n */\nexport type ApiKey = Message<\"auth.v1.ApiKey\"> & {\n  /**\n   * Stable opaque identifier used to refer to this key, formatted as \"ak_\"\n   * followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string key_id = 2;\n   */\n  keyId: string;\n\n  /**\n   * Human-readable label for the key. Maximum length is 64 characters.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 9;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 10;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Current key status.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 6;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Optional sub-account this key is scoped to (opaque ID; empty = root-level).\n   *\n   * @generated from field: optional fixed64 subaccount_id = 7;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional API policy attached to this key (opaque ID).\n   * Empty means no policy is attached and the key has no permissions.\n   *\n   * @generated from field: optional fixed64 policy_id = 8;\n   */\n  policyId?: bigint | undefined;\n\n  /**\n   * Time in UTC when this key was created.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 20;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Last time in UTC when this key authenticated a request. Omitted when the\n   * key has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 21;\n   */\n  lastUsedAt?: Timestamp | undefined;\n\n  /**\n   * Ed25519 public key bytes associated with this API key. The private key or\n   * seed is never returned by the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 22;\n   */\n  publicKeyEd25519: Uint8Array;\n\n  /**\n   * Optional expiry time in UTC. When set, the key cannot authenticate requests\n   * after this time, regardless of status.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 23;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Read-only actor label describing who created this key, such as a username\n   * or account label.\n   *\n   * @generated from field: string created_by_actor = 24;\n   */\n  createdByActor: string;\n\n  /**\n   * Time in UTC when this key's configuration was last changed. For the same\n   * key, later is fresher, equal is an idempotent replay, and earlier is stale.\n   * Equal timestamps with different configuration indicate an invariant failure.\n   * This is independent of last_used_at, which tracks authentication activity.\n   *\n   * @generated from field: google.protobuf.Timestamp updated_at = 25;\n   */\n  updatedAt?: Timestamp | undefined;\n\n  /**\n   * Monotonic resource revision used for conditional updates.\n   *\n   * @generated from field: uint64 revision = 26;\n   */\n  revision: bigint;\n};\n\n/**\n * Describes the message auth.v1.ApiKey.\n * Use `create(ApiKeySchema)` to create a new message.\n */\nexport const ApiKeySchema: GenMessage<ApiKey> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 0);\n\n/**\n * CreateApiKeyRequest creates a new API key. Clients generate the Ed25519 key\n * pair locally and submit only the public key.\n *\n * @generated from message auth.v1.CreateApiKeyRequest\n */\nexport type CreateApiKeyRequest = Message<\"auth.v1.CreateApiKeyRequest\"> & {\n  /**\n   * Human-readable label for the key. Required; 1 to 64 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * Optional sub-account to scope this key to (opaque ID). If unset, the key is\n   * root-level.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 3;\n   */\n  subaccountId?: bigint | undefined;\n\n  /**\n   * Optional user-chosen icon/emoji for UI display.\n   *\n   * @generated from field: string icon = 6;\n   */\n  icon: string;\n\n  /**\n   * Optional user-chosen color token for UI display.\n   *\n   * @generated from field: string color = 7;\n   */\n  color: string;\n\n  /**\n   * Optional CIDR whitelist. Empty means no IP restriction. Maximum 32 unique\n   * entries.\n   *\n   * @generated from field: repeated string ip_whitelist = 4;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Ed25519 public key bytes. Must be exactly 32 bytes. The private key or seed\n   * must never be sent to the API.\n   *\n   * @generated from field: bytes public_key_ed25519 = 5;\n   */\n  publicKeyEd25519: Uint8Array;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyRequest.\n * Use `create(CreateApiKeyRequestSchema)` to create a new message.\n */\nexport const CreateApiKeyRequestSchema: GenMessage<CreateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 1);\n\n/**\n * CreateApiKeyResponse returns the created API key metadata.\n *\n * @generated from message auth.v1.CreateApiKeyResponse\n */\nexport type CreateApiKeyResponse = Message<\"auth.v1.CreateApiKeyResponse\"> & {\n  /**\n   * Created API key metadata. The private key or seed is never returned.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateApiKeyResponse.\n * Use `create(CreateApiKeyResponseSchema)` to create a new message.\n */\nexport const CreateApiKeyResponseSchema: GenMessage<CreateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 2);\n\n/**\n * ListApiKeysRequest lists non-revoked API keys visible to the caller.\n *\n * @generated from message auth.v1.ListApiKeysRequest\n */\nexport type ListApiKeysRequest = Message<\"auth.v1.ListApiKeysRequest\"> & {\n  /**\n   * Optional filter: only keys scoped to this sub-account (opaque ID). The\n   * caller must own or administer the sub-account. If unset, only non-revoked\n   * keys owned by the caller are returned.\n   *\n   * @generated from field: optional fixed64 subaccount_id = 1;\n   */\n  subaccountId?: bigint | undefined;\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysRequest.\n * Use `create(ListApiKeysRequestSchema)` to create a new message.\n */\nexport const ListApiKeysRequestSchema: GenMessage<ListApiKeysRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 3);\n\n/**\n * ListApiKeysResponse contains matching API keys, newest first by creation time.\n *\n * @generated from message auth.v1.ListApiKeysResponse\n */\nexport type ListApiKeysResponse = Message<\"auth.v1.ListApiKeysResponse\"> & {\n  /**\n   * Matching API keys, newest first. Revoked keys are excluded.\n   *\n   * @generated from field: repeated auth.v1.ApiKey api_keys = 1;\n   */\n  apiKeys: ApiKey[];\n};\n\n/**\n * Describes the message auth.v1.ListApiKeysResponse.\n * Use `create(ListApiKeysResponseSchema)` to create a new message.\n */\nexport const ListApiKeysResponseSchema: GenMessage<ListApiKeysResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 4);\n\n/**\n * DeleteApiKeyRequest permanently revokes an API key.\n *\n * @generated from message auth.v1.DeleteApiKeyRequest\n */\nexport type DeleteApiKeyRequest = Message<\"auth.v1.DeleteApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier (e.g. \"ak_<hex>\"). This is the stable public\n   * handle for a key.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyRequest.\n * Use `create(DeleteApiKeyRequestSchema)` to create a new message.\n */\nexport const DeleteApiKeyRequestSchema: GenMessage<DeleteApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 5);\n\n/**\n * DeleteApiKeyResponse is empty when revocation succeeds.\n *\n * @generated from message auth.v1.DeleteApiKeyResponse\n */\nexport type DeleteApiKeyResponse = Message<\"auth.v1.DeleteApiKeyResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteApiKeyResponse.\n * Use `create(DeleteApiKeyResponseSchema)` to create a new message.\n */\nexport const DeleteApiKeyResponseSchema: GenMessage<DeleteApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 6);\n\n/**\n * GetApiKeyRequest returns one API key visible to its owner or a sub-account admin.\n *\n * @generated from message auth.v1.GetApiKeyRequest\n */\nexport type GetApiKeyRequest = Message<\"auth.v1.GetApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier, formatted as \"ak_\" followed by 32 lowercase hex\n   * characters.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyRequest.\n * Use `create(GetApiKeyRequestSchema)` to create a new message.\n */\nexport const GetApiKeyRequestSchema: GenMessage<GetApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 7);\n\n/**\n * GetApiKeyResponse returns one API key visible to the caller.\n *\n * @generated from message auth.v1.GetApiKeyResponse\n */\nexport type GetApiKeyResponse = Message<\"auth.v1.GetApiKeyResponse\"> & {\n  /**\n   * Matching API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.GetApiKeyResponse.\n * Use `create(GetApiKeyResponseSchema)` to create a new message.\n */\nexport const GetApiKeyResponseSchema: GenMessage<GetApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 8);\n\n/**\n * ApiKeyUpdateSpec contains mutable API key configuration.\n *\n * @generated from message auth.v1.ApiKeyUpdateSpec\n */\nexport type ApiKeyUpdateSpec = Message<\"auth.v1.ApiKeyUpdateSpec\"> & {\n  /**\n   * Human-friendly label for the key. Empty clears the label when selected.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n\n  /**\n   * User-chosen icon/emoji for UI display. Empty clears the icon when selected.\n   *\n   * @generated from field: string icon = 2;\n   */\n  icon: string;\n\n  /**\n   * User-chosen color token for UI display. Empty clears the color when selected.\n   *\n   * @generated from field: string color = 3;\n   */\n  color: string;\n\n  /**\n   * New status. ACTIVE and DISABLED are allowed; revocation uses DeleteApiKey.\n   *\n   * @generated from field: auth.v1.ApiKeyStatus status = 4;\n   */\n  status: ApiKeyStatus;\n\n  /**\n   * Complete replacement IP whitelist. Empty clears the restriction when selected.\n   *\n   * @generated from field: repeated string ip_whitelist = 5;\n   */\n  ipWhitelist: string[];\n\n  /**\n   * Expiry time in UTC. When selected, omission or the epoch clears expiry.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 6;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ApiKeyUpdateSpec.\n * Use `create(ApiKeyUpdateSpecSchema)` to create a new message.\n */\nexport const ApiKeyUpdateSpecSchema: GenMessage<ApiKeyUpdateSpec> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 9);\n\n/**\n * UpdateApiKeyRequest changes selected mutable fields on an existing API key.\n *\n * @generated from message auth.v1.UpdateApiKeyRequest\n */\nexport type UpdateApiKeyRequest = Message<\"auth.v1.UpdateApiKeyRequest\"> & {\n  /**\n   * Opaque API key identifier to update.\n   *\n   * @generated from field: string key_id = 1;\n   */\n  keyId: string;\n\n  /**\n   * Candidate values for fields selected by update_mask.\n   *\n   * @generated from field: auth.v1.ApiKeyUpdateSpec api_key = 2;\n   */\n  apiKey?: ApiKeyUpdateSpec | undefined;\n\n  /**\n   * Mutable fields to apply. Paths are relative to api_key. The mask is required,\n   * must be non-empty, and cannot contain \"*\".\n   *\n   * @generated from field: google.protobuf.FieldMask update_mask = 3;\n   */\n  updateMask?: FieldMask | undefined;\n\n  /**\n   * Revision returned by the latest successful read.\n   *\n   * @generated from field: uint64 expected_revision = 4;\n   */\n  expectedRevision: bigint;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyRequest.\n * Use `create(UpdateApiKeyRequestSchema)` to create a new message.\n */\nexport const UpdateApiKeyRequestSchema: GenMessage<UpdateApiKeyRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 10);\n\n/**\n * UpdateApiKeyResponse returns the API key after applying the update.\n *\n * @generated from message auth.v1.UpdateApiKeyResponse\n */\nexport type UpdateApiKeyResponse = Message<\"auth.v1.UpdateApiKeyResponse\"> & {\n  /**\n   * Updated API key metadata.\n   *\n   * @generated from field: auth.v1.ApiKey api_key = 1;\n   */\n  apiKey?: ApiKey | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateApiKeyResponse.\n * Use `create(UpdateApiKeyResponseSchema)` to create a new message.\n */\nexport const UpdateApiKeyResponseSchema: GenMessage<UpdateApiKeyResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_api_keys, 11);\n\n/**\n * Status of an API key.\n *\n * @generated from enum auth.v1.ApiKeyStatus\n */\nexport enum ApiKeyStatus {\n  /**\n   * No API key status specified.\n   *\n   * @generated from enum value: API_KEY_STATUS_UNSPECIFIED = 0;\n   */\n  API_KEY_STATUS_UNSPECIFIED = 0,\n\n  /**\n   * Key can authenticate requests.\n   *\n   * @generated from enum value: ACTIVE = 1;\n   */\n  ACTIVE = 1,\n\n  /**\n   * Key has been permanently revoked and cannot be used again.\n   *\n   * @generated from enum value: REVOKED = 2;\n   */\n  REVOKED = 2,\n\n  /**\n   * Key is temporarily disabled and cannot authenticate requests until re-enabled.\n   *\n   * @generated from enum value: DISABLED = 3;\n   */\n  DISABLED = 3,\n}\n\n/**\n * Describes the enum auth.v1.ApiKeyStatus.\n */\nexport const ApiKeyStatusSchema: GenEnum<ApiKeyStatus> = /*@__PURE__*/\n  enumDesc(file_auth_v1_api_keys, 0);\n\n/**\n * ApiKeyService manages API keys for authenticated callers.\n *\n * @generated from service auth.v1.ApiKeyService\n */\nexport const ApiKeyService: GenService<{\n  /**\n   * Create a new API key for the caller. Account security settings may require\n   * MFA enrollment or a fresh step-up proof.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.CreateApiKey\n   */\n  createApiKey: {\n    methodKind: \"unary\";\n    input: typeof CreateApiKeyRequestSchema;\n    output: typeof CreateApiKeyResponseSchema;\n  },\n  /**\n   * List non-revoked API keys visible to the caller, newest first.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.ListApiKeys\n   */\n  listApiKeys: {\n    methodKind: \"unary\";\n    input: typeof ListApiKeysRequestSchema;\n    output: typeof ListApiKeysResponseSchema;\n  },\n  /**\n   * Get a single API key owned by the caller or scoped to a sub-account the caller administers.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.GetApiKey\n   */\n  getApiKey: {\n    methodKind: \"unary\";\n    input: typeof GetApiKeyRequestSchema;\n    output: typeof GetApiKeyResponseSchema;\n  },\n  /**\n   * Revoke an API key permanently.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.DeleteApiKey\n   */\n  deleteApiKey: {\n    methodKind: \"unary\";\n    input: typeof DeleteApiKeyRequestSchema;\n    output: typeof DeleteApiKeyResponseSchema;\n  },\n  /**\n   * Update API key metadata and allowed status transitions. Revocation must use\n   * DeleteApiKey.\n   *\n   * @generated from rpc auth.v1.ApiKeyService.UpdateApiKey\n   */\n  updateApiKey: {\n    methodKind: \"unary\";\n    input: typeof UpdateApiKeyRequestSchema;\n    output: typeof UpdateApiKeyResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_api_keys, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,wBACX,uBAAS,4nFAA4nF;CAAC;CAAiC;CAAgC;AAA0B,CAAC;;;;;AAgIpuF,MAAa,eACX,0BAAY,uBAAuB,CAAC;;;;;AA2DtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAsBtC,MAAa,2BACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,4BACX,0BAAY,uBAAuB,CAAC;;;;;AActC,MAAa,6BACX,0BAAY,uBAAuB,CAAC;;;;;AAqBtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AAoBtC,MAAa,0BACX,0BAAY,uBAAuB,CAAC;;;;;AAuDtC,MAAa,yBACX,0BAAY,uBAAuB,CAAC;;;;;AA0CtC,MAAa,4BACX,0BAAY,uBAAuB,EAAE;;;;;AAoBvC,MAAa,6BACX,0BAAY,uBAAuB,EAAE;;;;;;AAOvC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,gCAAA,KAAA;;;;;;CAOA,aAAA,aAAA,YAAA,KAAA;;;;;;CAOA,aAAA,aAAA,aAAA,KAAA;;;;;;CAOA,aAAA,aAAA,cAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,uBAAuB,CAAC;;;;;;AAOnC,MAAa,gBAsDX,0BAAY,uBAAuB,CAAC"}

package/dist/gen/auth/v1/mfa_pb.d.ts

@@ -217,6 +217,24 @@ type FinishTOTPEnrollmentResponse = Message<"auth.v1.FinishTOTPEnrollmentRespons
    * @generated from field: repeated string recovery_codes = 2;
    */
   recoveryCodes: string[];
+  /**
+   * MFA-elevated session details after successful enrollment.
+   *
+   * @generated from field: auth.v1.SessionInfo session = 3;
+   */
+  session?: SessionInfo | undefined;
+  /**
+   * MFA-elevated session token issued after successful enrollment.
+   *
+   * @generated from field: string access_token = 4;
+   */
+  accessToken: string;
+  /**
+   * Time when access_token expires.
+   *
+   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;
+   */
+  accessTokenExpiresAt?: Timestamp | undefined;
 };
 /**
  * Describes the message auth.v1.FinishTOTPEnrollmentResponse.
@@ -313,6 +331,24 @@ type FinishPasskeyEnrollmentResponse = Message<"auth.v1.FinishPasskeyEnrollmentR
    * @generated from field: repeated string recovery_codes = 2;
    */
   recoveryCodes: string[];
+  /**
+   * MFA-elevated session details after successful enrollment.
+   *
+   * @generated from field: auth.v1.SessionInfo session = 3;
+   */
+  session?: SessionInfo | undefined;
+  /**
+   * MFA-elevated session token issued after successful enrollment.
+   *
+   * @generated from field: string access_token = 4;
+   */
+  accessToken: string;
+  /**
+   * Time when access_token expires.
+   *
+   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;
+   */
+  accessTokenExpiresAt?: Timestamp | undefined;
 };
 /**
  * Describes the message auth.v1.FinishPasskeyEnrollmentResponse.
@@ -452,19 +488,19 @@ declare const VerifyRecoveryCodeChallengeRequestSchema: GenMessage<VerifyRecover
  */
 type CompleteMFAChallengeResponse = Message<"auth.v1.CompleteMFAChallengeResponse"> & {
   /**
-   * Session assurance details after completing the challenge.
+   * MFA-elevated session details after completing the challenge.
    *
    * @generated from field: auth.v1.SessionInfo session = 1;
    */
   session?: SessionInfo | undefined;
   /**
-   * MFA-elevated session token returned for session-elevation challenges. Empty for fresh step-up challenges.
+   * MFA-elevated session token returned after every successful challenge.
    *
    * @generated from field: string access_token = 2;
    */
   accessToken: string;
   /**
-   * Time when access_token expires. Empty when no access_token is returned.
+   * Time when access_token expires.
    *
    * @generated from field: google.protobuf.Timestamp access_token_expires_at = 3;
    */

package/dist/gen/auth/v1/mfa_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mfa_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/mfa_pb.ts"],"mappings":";;;;;;;;;cAca,kBAAkB;;;;;;KAQnB,cAAc;;;;;;EAMxB;;;;;;EAOA,cAAc;;;;;;EAOd;;;;;;EAOA,WAAW;;;;;;cAOA,mBAAmB,WAAW;;;;;;KAQ/B,YAAY;;;;;;EAMtB;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA,YAAY;;;;;;EAOZ,aAAa;;;;;;cAOF,iBAAiB,WAAW;;;;;;KAQ7B,wBAAwB;;;;;cAOvB,6BAA6B,WAAW;;;;;;KAQzC,yBAAyB;;;;;;EAMnC,SAAS;;;;;;EAOT;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,6BAA6B;;;;;;EAMvC;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;;EAMxC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,YAAY;;;;;;cAOD,mCAAmC,WAAW;;;;;;KAQ/C,8BAA8B;;;;;;EAMxC;;;;;;EAOA;;;;;;cAOW,mCAAmC,WAAW;;;;;;KAQ/C,+BAA+B;;;;;;EAMzC,SAAS;;;;;;EAOT;;;;;;cAOW,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;EAM1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C;;;;;;EAOA,YAAY;;;;;;EAOZ,YAAY;;;;;;cAOD,sCAAsC,WAAW;;;;;;KAQlD,iCAAiC;;;;;;EAM3C;;;;;;EAOA,aAAa;;;;;;cAOF,sCAAsC,WAAW;;;;;;KAQlD,kCAAkC;;;;;;EAM5C,SAAS;;;;;;EAOT;;;;;;cAOW,uCAAuC,WAAW;;;;;;KAQnD,2BAA2B;;;;;;EAMrC,SAAS;;;;;;cAOE,gCAAgC,WAAW;;;;;;KAQ5C,4BAA4B;;;;;;EAMtC;;;;;;EAOA,oBAAoB;;;;;;EAOpB,YAAY;;;;;;EAOZ,YAAY;;;;;;cAOD,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;;EAMvC;;;;;;EAOA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,gCAAgC;;;;;;EAM1C;;;;;;EAOA,aAAa;;;;;;cAOF,qCAAqC,WAAW;;;;;;KAQjD,qCAAqC;;;;;;EAM/C;;;;;;EAOA;;;;;;cAOW,0CAA0C,WAAW;;;;;;KAQtD,+BAA+B;;;;;;EAMzC,UAAU;;;;;;EAOV;;;;;;EAOA,uBAAuB;;;;;;EAOvB;;;;;;EAOA,kBAAkB;;;;;;cAOP,oCAAoC,WAAW;;;;;;KAQhD,0BAA0B;;;;;;EAMpC;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,+BAA+B,WAAW;;;;;;KAQ3C,2BAA2B;;;;;;EAMrC;;;;;;EAOA;;;;;;EAOA,iBAAiB;;;;;;cAON,gCAAgC,WAAW;;;;;;KAQ5C,4BAA4B;;;;;;EAMtC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;cAO5B,kCAAkC,WAAW;;;;;;KAQ9C,4BAA4B;;;;;;EAMtC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;cAO5B,kCAAkC,WAAW;;;;;;KAQ9C,yBAAyB;;;;;;EAMnC;;;;;;EAOA;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;EAMnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;KAQ3C,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;KAQlD,kCAAkC;;;;;;EAM5C;;;;;;cAOW,uCAAuC,WAAW;;;;;;aAQnD;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,oBAAoB,QAAQ;;;;;;aAQ7B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;aAQ9B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,2BAA2B,QAAQ;;;;;;cAQnC,YAAY;;;;;;EAMvB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"mfa_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/mfa_pb.ts"],"mappings":";;;;;;;;;cAca,kBAAkB;;;;;;KAQnB,cAAc;;;;;;EAMxB;;;;;;EAOA,cAAc;;;;;;EAOd;;;;;;EAOA,WAAW;;;;;;cAOA,mBAAmB,WAAW;;;;;;KAQ/B,YAAY;;;;;;EAMtB;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA,YAAY;;;;;;EAOZ,aAAa;;;;;;cAOF,iBAAiB,WAAW;;;;;;KAQ7B,wBAAwB;;;;;cAOvB,6BAA6B,WAAW;;;;;;KAQzC,yBAAyB;;;;;;EAMnC,SAAS;;;;;;EAOT;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,6BAA6B;;;;;;EAMvC;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;;EAMxC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,YAAY;;;;;;cAOD,mCAAmC,WAAW;;;;;;KAQ/C,8BAA8B;;;;;;EAMxC;;;;;;EAOA;;;;;;cAOW,mCAAmC,WAAW;;;;;;KAQ/C,+BAA+B;;;;;;EAMzC,SAAS;;;;;;EAOT;;;;;;EAOA,UAAU;;;;;;EAOV;;;;;;EAOA,uBAAuB;;;;;;cAOZ,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;EAM1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C;;;;;;EAOA,YAAY;;;;;;EAOZ,YAAY;;;;;;cAOD,sCAAsC,WAAW;;;;;;KAQlD,iCAAiC;;;;;;EAM3C;;;;;;EAOA,aAAa;;;;;;cAOF,sCAAsC,WAAW;;;;;;KAQlD,kCAAkC;;;;;;EAM5C,SAAS;;;;;;EAOT;;;;;;EAOA,UAAU;;;;;;EAOV;;;;;;EAOA,uBAAuB;;;;;;cAOZ,uCAAuC,WAAW;;;;;;KAQnD,2BAA2B;;;;;;EAMrC,SAAS;;;;;;cAOE,gCAAgC,WAAW;;;;;;KAQ5C,4BAA4B;;;;;;EAMtC;;;;;;EAOA,oBAAoB;;;;;;EAOpB,YAAY;;;;;;EAOZ,YAAY;;;;;;cAOD,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;;EAMvC;;;;;;EAOA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,gCAAgC;;;;;;EAM1C;;;;;;EAOA,aAAa;;;;;;cAOF,qCAAqC,WAAW;;;;;;KAQjD,qCAAqC;;;;;;EAM/C;;;;;;EAOA;;;;;;cAOW,0CAA0C,WAAW;;;;;;KAQtD,+BAA+B;;;;;;EAMzC,UAAU;;;;;;EAOV;;;;;;EAOA,uBAAuB;;;;;;EAOvB;;;;;;EAOA,kBAAkB;;;;;;cAOP,oCAAoC,WAAW;;;;;;KAQhD,0BAA0B;;;;;;EAMpC;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,+BAA+B,WAAW;;;;;;KAQ3C,2BAA2B;;;;;;EAMrC;;;;;;EAOA;;;;;;EAOA,iBAAiB;;;;;;cAON,gCAAgC,WAAW;;;;;;KAQ5C,4BAA4B;;;;;;EAMtC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;cAO5B,kCAAkC,WAAW;;;;;;KAQ9C,4BAA4B;;;;;;EAMtC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;cAOW,iCAAiC,WAAW;;;;;;KAQ7C,6BAA6B;;;;;cAO5B,kCAAkC,WAAW;;;;;;KAQ9C,yBAAyB;;;;;;EAMnC;;;;;;EAOA;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;EAMnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;KAQ3C,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;KAQlD,kCAAkC;;;;;;EAM5C;;;;;;cAOW,uCAAuC,WAAW;;;;;;aAQnD;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,oBAAoB,QAAQ;;;;;;aAQ7B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;aAQ9B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,2BAA2B,QAAQ;;;;;;cAQnC,YAAY;;;;;;EAMvB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}

package/dist/gen/auth/v1/mfa_pb.js

@@ -46,7 +46,7 @@ var mfa_pb_exports = /* @__PURE__ */ __exportAll({
 /**
 * Describes the file auth/v1/mfa.proto.
 */
-const file_auth_v1_mfa = /*@__PURE__*/ fileDesc("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", [
+const file_auth_v1_mfa = /*@__PURE__*/ fileDesc("ChFhdXRoL3YxL21mYS5wcm90bxIHYXV0aC52MSKkAQoLU2Vzc2lvbkluZm8SFAoKc2Vzc2lvbl9pZBgBIAEoCUIAEi4KDXNlc3Npb25fbGV2ZWwYAiABKA4yFS5hdXRoLnYxLlNlc3Npb25MZXZlbEIAEiAKFmF1dGhlbnRpY2F0aW9uX21ldGhvZHMYAyADKAlCABItCglhdXRoX3RpbWUYBCABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wIsIBCglNRkFGYWN0b3ISEwoJZmFjdG9yX2lkGAEgASgJQgASLQoLZmFjdG9yX3R5cGUYAiABKA4yFi5hdXRoLnYxLk1GQUZhY3RvclR5cGVCABIPCgVsYWJlbBgDIAEoCUIAEi4KCmNyZWF0ZWRfYXQYBCABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEjAKDGxhc3RfdXNlZF9hdBgFIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAiFwoVTGlzdE1GQUZhY3RvcnNSZXF1ZXN0IlkKFkxpc3RNRkFGYWN0b3JzUmVzcG9uc2USIwoHZmFjdG9ycxgBIAMoCzISLmF1dGgudjEuTUZBRmFjdG9yEhoKEmhhc19yZWNvdmVyeV9jb2RlcxgCIAEoCCItChpCZWdpblRPVFBFbnJvbGxtZW50UmVxdWVzdBIPCgVsYWJlbBgBIAEoCUIAIo8BChtCZWdpblRPVFBFbnJvbGxtZW50UmVzcG9uc2USFwoNZW5yb2xsbWVudF9pZBgBIAEoCUIAEhAKBnNlY3JldBgCIAEoCUIAEhUKC290cGF1dGhfdXJpGAMgASgJQgASLgoKZXhwaXJlc19hdBgEIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAiRgobRmluaXNoVE9UUEVucm9sbG1lbnRSZXF1ZXN0EhcKDWVucm9sbG1lbnRfaWQYASABKAlCABIOCgRjb2RlGAIgASgJQgAi2AEKHEZpbmlzaFRPVFBFbnJvbGxtZW50UmVzcG9uc2USIgoGZmFjdG9yGAEgASgLMhIuYXV0aC52MS5NRkFGYWN0b3ISGAoOcmVjb3ZlcnlfY29kZXMYAiADKAlCABIlCgdzZXNzaW9uGAMgASgLMhQuYXV0aC52MS5TZXNzaW9uSW5mbxIWCgxhY2Nlc3NfdG9rZW4YBCABKAlCABI7ChdhY2Nlc3NfdG9rZW5fZXhwaXJlc19hdBgFIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAiMAodQmVnaW5QYXNza2V5RW5yb2xsbWVudFJlcXVlc3QSDwoFbGFiZWwYASABKAlCACKWAQoeQmVnaW5QYXNza2V5RW5yb2xsbWVudFJlc3BvbnNlEhcKDWVucm9sbG1lbnRfaWQYASABKAlCABIrCgpwdWJsaWNfa2V5GAIgASgLMhcuZ29vZ2xlLnByb3RvYnVmLlN0cnVjdBIuCgpleHBpcmVzX2F0GAMgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcCJoCh5GaW5pc2hQYXNza2V5RW5yb2xsbWVudFJlcXVlc3QSFwoNZW5yb2xsbWVudF9pZBgBIAEoCUIAEi0KCmNyZWRlbnRpYWwYAiABKAsyFy5nb29nbGUucHJvdG9idWYuU3RydWN0QgAi2wEKH0ZpbmlzaFBhc3NrZXlFbnJvbGxtZW50UmVzcG9uc2USIgoGZmFjdG9yGAEgASgLMhIuYXV0aC52MS5NRkFGYWN0b3ISGAoOcmVjb3ZlcnlfY29kZXMYAiADKAlCABIlCgdzZXNzaW9uGAMgASgLMhQuYXV0aC52MS5TZXNzaW9uSW5mbxIWCgxhY2Nlc3NfdG9rZW4YBCABKAlCABI7ChdhY2Nlc3NfdG9rZW5fZXhwaXJlc19hdBgFIAEoCzIaLmdvb2dsZS5wcm90b2J1Zi5UaW1lc3RhbXAiSwoYQmVnaW5NRkFDaGFsbGVuZ2VSZXF1ZXN0Ei8KB3B1cnBvc2UYASABKA4yHC5hdXRoLnYxLk1GQUNoYWxsZW5nZVB1cnBvc2VCACLIAQoZQmVnaW5NRkFDaGFsbGVuZ2VSZXNwb25zZRIWCgxjaGFsbGVuZ2VfaWQYASABKAlCABI2ChRhbGxvd2VkX2ZhY3Rvcl90eXBlcxgCIAMoDjIWLmF1dGgudjEuTUZBRmFjdG9yVHlwZUIAEisKCnB1YmxpY19rZXkYAyABKAsyFy5nb29nbGUucHJvdG9idWYuU3RydWN0Ei4KCmV4cGlyZXNfYXQYBCABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wIkQKGlZlcmlmeVRPVFBDaGFsbGVuZ2VSZXF1ZXN0EhYKDGNoYWxsZW5nZV9pZBgBIAEoCUIAEg4KBGNvZGUYAiABKAlCACJmCh1GaW5pc2hQYXNza2V5Q2hhbGxlbmdlUmVxdWVzdBIWCgxjaGFsbGVuZ2VfaWQYASABKAlCABItCgpjcmVkZW50aWFsGAIgASgLMhcuZ29vZ2xlLnByb3RvYnVmLlN0cnVjdEIAIlUKIlZlcmlmeVJlY292ZXJ5Q29kZUNoYWxsZW5nZVJlcXVlc3QSFgoMY2hhbGxlbmdlX2lkGAEgASgJQgASFwoNcmVjb3ZlcnlfY29kZRgCIAEoCUIAIusBChxDb21wbGV0ZU1GQUNoYWxsZW5nZVJlc3BvbnNlEiUKB3Nlc3Npb24YASABKAsyFC5hdXRoLnYxLlNlc3Npb25JbmZvEhYKDGFjY2Vzc190b2tlbhgCIAEoCUIAEjsKF2FjY2Vzc190b2tlbl9leHBpcmVzX2F0GAMgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBIXCg1zdGVwX3VwX3Rva2VuGAQgASgJQgASNgoSc3RlcF91cF9leHBpcmVzX2F0GAUgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcCJZChdDbGFpbUZyZXNoU3RlcFVwUmVxdWVzdBIUCgpyZXF1ZXN0X2lkGAEgASgJQgASFQoLYWN0aW9uX3R5cGUYAiABKAlCABIRCgdzdWJqZWN0GAMgASgJQgAifQoYQ2xhaW1GcmVzaFN0ZXBVcFJlc3BvbnNlEhQKCnN0ZXBfdXBfaWQYASABKAlCABIVCgtjbGFpbV9ub25jZRgCIAEoCUIAEjQKEGNsYWltX2V4cGlyZXNfYXQYAyABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wIogBChlDb25zdW1lRnJlc2hTdGVwVXBSZXF1ZXN0EhQKCnN0ZXBfdXBfaWQYASABKAlCABIUCgpyZXF1ZXN0X2lkGAIgASgJQgASFQoLYWN0aW9uX3R5cGUYAyABKAlCABIRCgdzdWJqZWN0GAQgASgJQgASFQoLY2xhaW1fbm9uY2UYBSABKAlCACIcChpDb25zdW1lRnJlc2hTdGVwVXBSZXNwb25zZSKaAQoZUmVsZWFzZUZyZXNoU3RlcFVwUmVxdWVzdBIUCgpzdGVwX3VwX2lkGAEgASgJQgASFAoKcmVxdWVzdF9pZBgCIAEoCUIAEhUKC2FjdGlvbl90eXBlGAMgASgJQgASEQoHc3ViamVjdBgEIAEoCUIAEhUKC2NsYWltX25vbmNlGAUgASgJQgASEAoGcmVhc29uGAYgASgJQgAiHAoaUmVsZWFzZUZyZXNoU3RlcFVwUmVzcG9uc2UiPgoWVXBkYXRlTUZBRmFjdG9yUmVxdWVzdBITCglmYWN0b3JfaWQYASABKAlCABIPCgVsYWJlbBgCIAEoCUIAIj0KF1VwZGF0ZU1GQUZhY3RvclJlc3BvbnNlEiIKBmZhY3RvchgBIAEoCzISLmF1dGgudjEuTUZBRmFjdG9yIi0KFkRlbGV0ZU1GQUZhY3RvclJlcXVlc3QSEwoJZmFjdG9yX2lkGAEgASgJQgAiGQoXRGVsZXRlTUZBRmFjdG9yUmVzcG9uc2UiIAoeUmVnZW5lcmF0ZVJlY292ZXJ5Q29kZXNSZXF1ZXN0IjsKH1JlZ2VuZXJhdGVSZWNvdmVyeUNvZGVzUmVzcG9uc2USGAoOcmVjb3ZlcnlfY29kZXMYASADKAlCACptCgxTZXNzaW9uTGV2ZWwSHQoZU0VTU0lPTl9MRVZFTF9VTlNQRUNJRklFRBAAEhkKFVBSSU1BUllfQVVUSEVOVElDQVRFRBABEhAKDE1GQV9FTEVWQVRFRBACEhEKDUZSRVNIX1NURVBfVVAQAyqKAQoNTUZBRmFjdG9yVHlwZRIfChtNRkFfRkFDVE9SX1RZUEVfVU5TUEVDSUZJRUQQABIYChRNRkFfRkFDVE9SX1RZUEVfVE9UUBABEhsKF01GQV9GQUNUT1JfVFlQRV9QQVNTS0VZEAISIQodTUZBX0ZBQ1RPUl9UWVBFX1JFQ09WRVJZX0NPREUQAyqSAQoTTUZBQ2hhbGxlbmdlUHVycG9zZRIlCiFNRkFfQ0hBTExFTkdFX1BVUlBPU0VfVU5TUEVDSUZJRUQQABIrCidNRkFfQ0hBTExFTkdFX1BVUlBPU0VfU0VTU0lPTl9FTEVWQVRJT04QARInCiNNRkFfQ0hBTExFTkdFX1BVUlBPU0VfRlJFU0hfU1RFUF9VUBACMuMLCgpNRkFTZXJ2aWNlElMKDkxpc3RNRkFGYWN0b3JzEh4uYXV0aC52MS5MaXN0TUZBRmFjdG9yc1JlcXVlc3QaHy5hdXRoLnYxLkxpc3RNRkFGYWN0b3JzUmVzcG9uc2UiABJiChNCZWdpblRPVFBFbnJvbGxtZW50EiMuYXV0aC52MS5CZWdpblRPVFBFbnJvbGxtZW50UmVxdWVzdBokLmF1dGgudjEuQmVnaW5UT1RQRW5yb2xsbWVudFJlc3BvbnNlIgASZQoURmluaXNoVE9UUEVucm9sbG1lbnQSJC5hdXRoLnYxLkZpbmlzaFRPVFBFbnJvbGxtZW50UmVxdWVzdBolLmF1dGgudjEuRmluaXNoVE9UUEVucm9sbG1lbnRSZXNwb25zZSIAEmsKFkJlZ2luUGFzc2tleUVucm9sbG1lbnQSJi5hdXRoLnYxLkJlZ2luUGFzc2tleUVucm9sbG1lbnRSZXF1ZXN0GicuYXV0aC52MS5CZWdpblBhc3NrZXlFbnJvbGxtZW50UmVzcG9uc2UiABJuChdGaW5pc2hQYXNza2V5RW5yb2xsbWVudBInLmF1dGgudjEuRmluaXNoUGFzc2tleUVucm9sbG1lbnRSZXF1ZXN0GiguYXV0aC52MS5GaW5pc2hQYXNza2V5RW5yb2xsbWVudFJlc3BvbnNlIgASXAoRQmVnaW5NRkFDaGFsbGVuZ2USIS5hdXRoLnYxLkJlZ2luTUZBQ2hhbGxlbmdlUmVxdWVzdBoiLmF1dGgudjEuQmVnaW5NRkFDaGFsbGVuZ2VSZXNwb25zZSIAEmMKE1ZlcmlmeVRPVFBDaGFsbGVuZ2USIy5hdXRoLnYxLlZlcmlmeVRPVFBDaGFsbGVuZ2VSZXF1ZXN0GiUuYXV0aC52MS5Db21wbGV0ZU1GQUNoYWxsZW5nZVJlc3BvbnNlIgASaQoWRmluaXNoUGFzc2tleUNoYWxsZW5nZRImLmF1dGgudjEuRmluaXNoUGFzc2tleUNoYWxsZW5nZVJlcXVlc3QaJS5hdXRoLnYxLkNvbXBsZXRlTUZBQ2hhbGxlbmdlUmVzcG9uc2UiABJzChtWZXJpZnlSZWNvdmVyeUNvZGVDaGFsbGVuZ2USKy5hdXRoLnYxLlZlcmlmeVJlY292ZXJ5Q29kZUNoYWxsZW5nZVJlcXVlc3QaJS5hdXRoLnYxLkNvbXBsZXRlTUZBQ2hhbGxlbmdlUmVzcG9uc2UiABJWCg9VcGRhdGVNRkFGYWN0b3ISHy5hdXRoLnYxLlVwZGF0ZU1GQUZhY3RvclJlcXVlc3QaIC5hdXRoLnYxLlVwZGF0ZU1GQUZhY3RvclJlc3BvbnNlIgASVgoPRGVsZXRlTUZBRmFjdG9yEh8uYXV0aC52MS5EZWxldGVNRkFGYWN0b3JSZXF1ZXN0GiAuYXV0aC52MS5EZWxldGVNRkFGYWN0b3JSZXNwb25zZSIAEm4KF1JlZ2VuZXJhdGVSZWNvdmVyeUNvZGVzEicuYXV0aC52MS5SZWdlbmVyYXRlUmVjb3ZlcnlDb2Rlc1JlcXVlc3QaKC5hdXRoLnYxLlJlZ2VuZXJhdGVSZWNvdmVyeUNvZGVzUmVzcG9uc2UiABJXChBDbGFpbUZyZXNoU3RlcFVwEiAuYXV0aC52MS5DbGFpbUZyZXNoU3RlcFVwUmVxdWVzdBohLmF1dGgudjEuQ2xhaW1GcmVzaFN0ZXBVcFJlc3BvbnNlEl0KEkNvbnN1bWVGcmVzaFN0ZXBVcBIiLmF1dGgudjEuQ29uc3VtZUZyZXNoU3RlcFVwUmVxdWVzdBojLmF1dGgudjEuQ29uc3VtZUZyZXNoU3RlcFVwUmVzcG9uc2USXQoSUmVsZWFzZUZyZXNoU3RlcFVwEiIuYXV0aC52MS5SZWxlYXNlRnJlc2hTdGVwVXBSZXF1ZXN0GiMuYXV0aC52MS5SZWxlYXNlRnJlc2hTdGVwVXBSZXNwb25zZUI8WjpnaXRodWIuY29tL0ZhYnJpYy1MYWJzL3BvbHllc3Rlci1zZGstZ28vZ2VuL2F1dGgvdjE7YXV0aHYxYgZwcm90bzM=", [
 	file_google_protobuf_struct,
 	file_google_protobuf_timestamp,
 	file_polyester_api_options

package/dist/gen/auth/v1/mfa_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"mfa_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/mfa_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/mfa.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_struct, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { JsonObject, Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/mfa.proto.\n */\nexport const file_auth_v1_mfa: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_struct, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * Current assurance details for an interactive session.\n *\n * @generated from message auth.v1.SessionInfo\n */\nexport type SessionInfo = Message<\"auth.v1.SessionInfo\"> & {\n  /**\n   * Stable session identifier shared by the primary and MFA-elevated tokens.\n   *\n   * @generated from field: string session_id = 1;\n   */\n  sessionId: string;\n\n  /**\n   * Assurance level represented by this session response.\n   *\n   * @generated from field: auth.v1.SessionLevel session_level = 2;\n   */\n  sessionLevel: SessionLevel;\n\n  /**\n   * Authentication methods used for this session state, such as wallet, TOTP, passkey, or recovery code. Maximum 8 unique values.\n   *\n   * @generated from field: repeated string authentication_methods = 3;\n   */\n  authenticationMethods: string[];\n\n  /**\n   * Time when the session was authenticated or elevated.\n   *\n   * @generated from field: google.protobuf.Timestamp auth_time = 4;\n   */\n  authTime?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.SessionInfo.\n * Use `create(SessionInfoSchema)` to create a new message.\n */\nexport const SessionInfoSchema: GenMessage<SessionInfo> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 0);\n\n/**\n * Enrolled MFA factor metadata visible to the account owner.\n *\n * @generated from message auth.v1.MFAFactor\n */\nexport type MFAFactor = Message<\"auth.v1.MFAFactor\"> & {\n  /**\n   * MFA factor identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n\n  /**\n   * Type of enrolled factor.\n   *\n   * @generated from field: auth.v1.MFAFactorType factor_type = 2;\n   */\n  factorType: MFAFactorType;\n\n  /**\n   * Human-friendly label for the factor. Empty when no label is set.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Time when the factor was enrolled.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 4;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Time when the factor was last used. Empty if the factor has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 5;\n   */\n  lastUsedAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.MFAFactor.\n * Use `create(MFAFactorSchema)` to create a new message.\n */\nexport const MFAFactorSchema: GenMessage<MFAFactor> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 1);\n\n/**\n * Request to list the caller's MFA factors.\n *\n * @generated from message auth.v1.ListMFAFactorsRequest\n */\nexport type ListMFAFactorsRequest = Message<\"auth.v1.ListMFAFactorsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.ListMFAFactorsRequest.\n * Use `create(ListMFAFactorsRequestSchema)` to create a new message.\n */\nexport const ListMFAFactorsRequestSchema: GenMessage<ListMFAFactorsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 2);\n\n/**\n * Response containing the caller's enrolled MFA factors.\n *\n * @generated from message auth.v1.ListMFAFactorsResponse\n */\nexport type ListMFAFactorsResponse = Message<\"auth.v1.ListMFAFactorsResponse\"> & {\n  /**\n   * Enrolled MFA factors, ordered oldest first.\n   *\n   * @generated from field: repeated auth.v1.MFAFactor factors = 1;\n   */\n  factors: MFAFactor[];\n\n  /**\n   * True when the caller has at least one unused recovery code.\n   *\n   * @generated from field: bool has_recovery_codes = 2;\n   */\n  hasRecoveryCodes: boolean;\n};\n\n/**\n * Describes the message auth.v1.ListMFAFactorsResponse.\n * Use `create(ListMFAFactorsResponseSchema)` to create a new message.\n */\nexport const ListMFAFactorsResponseSchema: GenMessage<ListMFAFactorsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 3);\n\n/**\n * Request to begin authenticator-app enrollment.\n *\n * @generated from message auth.v1.BeginTOTPEnrollmentRequest\n */\nexport type BeginTOTPEnrollmentRequest = Message<\"auth.v1.BeginTOTPEnrollmentRequest\"> & {\n  /**\n   * Optional human-friendly label. Defaults to \"Authenticator App\" when empty. Maximum 128 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.BeginTOTPEnrollmentRequest.\n * Use `create(BeginTOTPEnrollmentRequestSchema)` to create a new message.\n */\nexport const BeginTOTPEnrollmentRequestSchema: GenMessage<BeginTOTPEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 4);\n\n/**\n * Response containing the authenticator-app enrollment secret.\n *\n * @generated from message auth.v1.BeginTOTPEnrollmentResponse\n */\nexport type BeginTOTPEnrollmentResponse = Message<\"auth.v1.BeginTOTPEnrollmentResponse\"> & {\n  /**\n   * Enrollment challenge identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Shared secret to enter into an authenticator app. Returned only when enrollment begins.\n   *\n   * @generated from field: string secret = 2;\n   */\n  secret: string;\n\n  /**\n   * Authenticator-app setup URI for QR-code display. Returned only when enrollment begins.\n   *\n   * @generated from field: string otpauth_uri = 3;\n   */\n  otpauthUri: string;\n\n  /**\n   * Time when this enrollment challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 4;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginTOTPEnrollmentResponse.\n * Use `create(BeginTOTPEnrollmentResponseSchema)` to create a new message.\n */\nexport const BeginTOTPEnrollmentResponseSchema: GenMessage<BeginTOTPEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 5);\n\n/**\n * Request to finish authenticator-app enrollment.\n *\n * @generated from message auth.v1.FinishTOTPEnrollmentRequest\n */\nexport type FinishTOTPEnrollmentRequest = Message<\"auth.v1.FinishTOTPEnrollmentRequest\"> & {\n  /**\n   * Enrollment challenge identifier returned by BeginTOTPEnrollment.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Current 6 to 8 digit code from the authenticator app.\n   *\n   * @generated from field: string code = 2;\n   */\n  code: string;\n};\n\n/**\n * Describes the message auth.v1.FinishTOTPEnrollmentRequest.\n * Use `create(FinishTOTPEnrollmentRequestSchema)` to create a new message.\n */\nexport const FinishTOTPEnrollmentRequestSchema: GenMessage<FinishTOTPEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 6);\n\n/**\n * Response returned after authenticator-app enrollment succeeds.\n *\n * @generated from message auth.v1.FinishTOTPEnrollmentResponse\n */\nexport type FinishTOTPEnrollmentResponse = Message<\"auth.v1.FinishTOTPEnrollmentResponse\"> & {\n  /**\n   * Newly enrolled MFA factor.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n\n  /**\n   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 2;\n   */\n  recoveryCodes: string[];\n};\n\n/**\n * Describes the message auth.v1.FinishTOTPEnrollmentResponse.\n * Use `create(FinishTOTPEnrollmentResponseSchema)` to create a new message.\n */\nexport const FinishTOTPEnrollmentResponseSchema: GenMessage<FinishTOTPEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 7);\n\n/**\n * Request to begin passkey enrollment.\n *\n * @generated from message auth.v1.BeginPasskeyEnrollmentRequest\n */\nexport type BeginPasskeyEnrollmentRequest = Message<\"auth.v1.BeginPasskeyEnrollmentRequest\"> & {\n  /**\n   * Optional human-friendly label for the passkey. Maximum 128 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.BeginPasskeyEnrollmentRequest.\n * Use `create(BeginPasskeyEnrollmentRequestSchema)` to create a new message.\n */\nexport const BeginPasskeyEnrollmentRequestSchema: GenMessage<BeginPasskeyEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 8);\n\n/**\n * Response containing passkey enrollment options.\n *\n * @generated from message auth.v1.BeginPasskeyEnrollmentResponse\n */\nexport type BeginPasskeyEnrollmentResponse = Message<\"auth.v1.BeginPasskeyEnrollmentResponse\"> & {\n  /**\n   * Enrollment challenge identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Passkey creation options to pass to the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct public_key = 2;\n   */\n  publicKey?: JsonObject | undefined;\n\n  /**\n   * Time when this enrollment challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 3;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginPasskeyEnrollmentResponse.\n * Use `create(BeginPasskeyEnrollmentResponseSchema)` to create a new message.\n */\nexport const BeginPasskeyEnrollmentResponseSchema: GenMessage<BeginPasskeyEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 9);\n\n/**\n * Request to finish passkey enrollment.\n *\n * @generated from message auth.v1.FinishPasskeyEnrollmentRequest\n */\nexport type FinishPasskeyEnrollmentRequest = Message<\"auth.v1.FinishPasskeyEnrollmentRequest\"> & {\n  /**\n   * Enrollment challenge identifier returned by BeginPasskeyEnrollment.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Passkey creation response returned by the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct credential = 2;\n   */\n  credential?: JsonObject | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyEnrollmentRequest.\n * Use `create(FinishPasskeyEnrollmentRequestSchema)` to create a new message.\n */\nexport const FinishPasskeyEnrollmentRequestSchema: GenMessage<FinishPasskeyEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 10);\n\n/**\n * Response returned after passkey enrollment succeeds.\n *\n * @generated from message auth.v1.FinishPasskeyEnrollmentResponse\n */\nexport type FinishPasskeyEnrollmentResponse = Message<\"auth.v1.FinishPasskeyEnrollmentResponse\"> & {\n  /**\n   * Newly enrolled MFA factor.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n\n  /**\n   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 2;\n   */\n  recoveryCodes: string[];\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyEnrollmentResponse.\n * Use `create(FinishPasskeyEnrollmentResponseSchema)` to create a new message.\n */\nexport const FinishPasskeyEnrollmentResponseSchema: GenMessage<FinishPasskeyEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 11);\n\n/**\n * Request to start an MFA challenge.\n *\n * @generated from message auth.v1.BeginMFAChallengeRequest\n */\nexport type BeginMFAChallengeRequest = Message<\"auth.v1.BeginMFAChallengeRequest\"> & {\n  /**\n   * Desired challenge outcome: session elevation or fresh step-up.\n   *\n   * @generated from field: auth.v1.MFAChallengePurpose purpose = 1;\n   */\n  purpose: MFAChallengePurpose;\n};\n\n/**\n * Describes the message auth.v1.BeginMFAChallengeRequest.\n * Use `create(BeginMFAChallengeRequestSchema)` to create a new message.\n */\nexport const BeginMFAChallengeRequestSchema: GenMessage<BeginMFAChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 12);\n\n/**\n * Response returned after starting an MFA challenge.\n *\n * @generated from message auth.v1.BeginMFAChallengeResponse\n */\nexport type BeginMFAChallengeResponse = Message<\"auth.v1.BeginMFAChallengeResponse\"> & {\n  /**\n   * Challenge identifier to submit when verifying a factor. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Factor types the caller may use for this challenge. Maximum 8 unique values.\n   *\n   * @generated from field: repeated auth.v1.MFAFactorType allowed_factor_types = 2;\n   */\n  allowedFactorTypes: MFAFactorType[];\n\n  /**\n   * Passkey request options when passkey verification is available. Empty when passkeys are not available.\n   *\n   * @generated from field: google.protobuf.Struct public_key = 3;\n   */\n  publicKey?: JsonObject | undefined;\n\n  /**\n   * Time when this challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 4;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginMFAChallengeResponse.\n * Use `create(BeginMFAChallengeResponseSchema)` to create a new message.\n */\nexport const BeginMFAChallengeResponseSchema: GenMessage<BeginMFAChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 13);\n\n/**\n * Request to verify an MFA challenge with an authenticator-app code.\n *\n * @generated from message auth.v1.VerifyTOTPChallengeRequest\n */\nexport type VerifyTOTPChallengeRequest = Message<\"auth.v1.VerifyTOTPChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Current 6 to 8 digit code from the authenticator app.\n   *\n   * @generated from field: string code = 2;\n   */\n  code: string;\n};\n\n/**\n * Describes the message auth.v1.VerifyTOTPChallengeRequest.\n * Use `create(VerifyTOTPChallengeRequestSchema)` to create a new message.\n */\nexport const VerifyTOTPChallengeRequestSchema: GenMessage<VerifyTOTPChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 14);\n\n/**\n * Request to verify an MFA challenge with a passkey.\n *\n * @generated from message auth.v1.FinishPasskeyChallengeRequest\n */\nexport type FinishPasskeyChallengeRequest = Message<\"auth.v1.FinishPasskeyChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Passkey authentication response returned by the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct credential = 2;\n   */\n  credential?: JsonObject | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyChallengeRequest.\n * Use `create(FinishPasskeyChallengeRequestSchema)` to create a new message.\n */\nexport const FinishPasskeyChallengeRequestSchema: GenMessage<FinishPasskeyChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 15);\n\n/**\n * Request to verify an MFA challenge with a recovery code.\n *\n * @generated from message auth.v1.VerifyRecoveryCodeChallengeRequest\n */\nexport type VerifyRecoveryCodeChallengeRequest = Message<\"auth.v1.VerifyRecoveryCodeChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * One-time recovery code. Accepted format is 8 to 64 letters, numbers, or hyphens.\n   *\n   * @generated from field: string recovery_code = 2;\n   */\n  recoveryCode: string;\n};\n\n/**\n * Describes the message auth.v1.VerifyRecoveryCodeChallengeRequest.\n * Use `create(VerifyRecoveryCodeChallengeRequestSchema)` to create a new message.\n */\nexport const VerifyRecoveryCodeChallengeRequestSchema: GenMessage<VerifyRecoveryCodeChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 16);\n\n/**\n * Response returned after an MFA challenge is completed.\n *\n * @generated from message auth.v1.CompleteMFAChallengeResponse\n */\nexport type CompleteMFAChallengeResponse = Message<\"auth.v1.CompleteMFAChallengeResponse\"> & {\n  /**\n   * Session assurance details after completing the challenge.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 1;\n   */\n  session?: SessionInfo | undefined;\n\n  /**\n   * MFA-elevated session token returned for session-elevation challenges. Empty for fresh step-up challenges.\n   *\n   * @generated from field: string access_token = 2;\n   */\n  accessToken: string;\n\n  /**\n   * Time when access_token expires. Empty when no access_token is returned.\n   *\n   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 3;\n   */\n  accessTokenExpiresAt?: Timestamp | undefined;\n\n  /**\n   * Fresh step-up token returned for fresh step-up challenges. Empty for session-elevation challenges.\n   *\n   * @generated from field: string step_up_token = 4;\n   */\n  stepUpToken: string;\n\n  /**\n   * Time when step_up_token expires. Empty when no step_up_token is returned.\n   *\n   * @generated from field: google.protobuf.Timestamp step_up_expires_at = 5;\n   */\n  stepUpExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.CompleteMFAChallengeResponse.\n * Use `create(CompleteMFAChallengeResponseSchema)` to create a new message.\n */\nexport const CompleteMFAChallengeResponseSchema: GenMessage<CompleteMFAChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 17);\n\n/**\n * Request to bind a fresh step-up proof to one protected request.\n *\n * @generated from message auth.v1.ClaimFreshStepUpRequest\n */\nexport type ClaimFreshStepUpRequest = Message<\"auth.v1.ClaimFreshStepUpRequest\"> & {\n  /**\n   * Client-generated request identifier for the protected request. Maximum 128 characters.\n   *\n   * @generated from field: string request_id = 1;\n   */\n  requestId: string;\n\n  /**\n   * Product action being protected, such as a withdrawal or security setting change. Maximum 64 characters.\n   *\n   * @generated from field: string action_type = 2;\n   */\n  actionType: string;\n\n  /**\n   * Product subject for the protected action, such as the target account, destination, or resource identifier. Maximum 128 characters.\n   *\n   * @generated from field: string subject = 3;\n   */\n  subject: string;\n};\n\n/**\n * Describes the message auth.v1.ClaimFreshStepUpRequest.\n * Use `create(ClaimFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ClaimFreshStepUpRequestSchema: GenMessage<ClaimFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 18);\n\n/**\n * Response returned after a fresh step-up proof is claimed.\n *\n * @generated from message auth.v1.ClaimFreshStepUpResponse\n */\nexport type ClaimFreshStepUpResponse = Message<\"auth.v1.ClaimFreshStepUpResponse\"> & {\n  /**\n   * Fresh step-up proof identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * One-time nonce that must be echoed when consuming or releasing the claim.\n   *\n   * @generated from field: string claim_nonce = 2;\n   */\n  claimNonce: string;\n\n  /**\n   * Time when this claim expires if it is not consumed or released.\n   *\n   * @generated from field: google.protobuf.Timestamp claim_expires_at = 3;\n   */\n  claimExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ClaimFreshStepUpResponse.\n * Use `create(ClaimFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ClaimFreshStepUpResponseSchema: GenMessage<ClaimFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 19);\n\n/**\n * Request to consume a claimed fresh step-up proof after the protected request succeeds.\n *\n * @generated from message auth.v1.ConsumeFreshStepUpRequest\n */\nexport type ConsumeFreshStepUpRequest = Message<\"auth.v1.ConsumeFreshStepUpRequest\"> & {\n  /**\n   * Fresh step-up proof identifier returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * Client-generated request identifier used when the proof was claimed.\n   *\n   * @generated from field: string request_id = 2;\n   */\n  requestId: string;\n\n  /**\n   * Product action type used when the proof was claimed.\n   *\n   * @generated from field: string action_type = 3;\n   */\n  actionType: string;\n\n  /**\n   * Product subject used when the proof was claimed.\n   *\n   * @generated from field: string subject = 4;\n   */\n  subject: string;\n\n  /**\n   * One-time nonce returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string claim_nonce = 5;\n   */\n  claimNonce: string;\n};\n\n/**\n * Describes the message auth.v1.ConsumeFreshStepUpRequest.\n * Use `create(ConsumeFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ConsumeFreshStepUpRequestSchema: GenMessage<ConsumeFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 20);\n\n/**\n * Empty response returned after a fresh step-up proof is consumed.\n *\n * @generated from message auth.v1.ConsumeFreshStepUpResponse\n */\nexport type ConsumeFreshStepUpResponse = Message<\"auth.v1.ConsumeFreshStepUpResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.ConsumeFreshStepUpResponse.\n * Use `create(ConsumeFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ConsumeFreshStepUpResponseSchema: GenMessage<ConsumeFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 21);\n\n/**\n * Request to release a claimed fresh step-up proof when the protected request does not complete.\n *\n * @generated from message auth.v1.ReleaseFreshStepUpRequest\n */\nexport type ReleaseFreshStepUpRequest = Message<\"auth.v1.ReleaseFreshStepUpRequest\"> & {\n  /**\n   * Fresh step-up proof identifier returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * Client-generated request identifier used when the proof was claimed.\n   *\n   * @generated from field: string request_id = 2;\n   */\n  requestId: string;\n\n  /**\n   * Product action type used when the proof was claimed.\n   *\n   * @generated from field: string action_type = 3;\n   */\n  actionType: string;\n\n  /**\n   * Product subject used when the proof was claimed.\n   *\n   * @generated from field: string subject = 4;\n   */\n  subject: string;\n\n  /**\n   * One-time nonce returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string claim_nonce = 5;\n   */\n  claimNonce: string;\n\n  /**\n   * Optional product-facing reason for releasing the claim. Maximum 128 characters.\n   *\n   * @generated from field: string reason = 6;\n   */\n  reason: string;\n};\n\n/**\n * Describes the message auth.v1.ReleaseFreshStepUpRequest.\n * Use `create(ReleaseFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ReleaseFreshStepUpRequestSchema: GenMessage<ReleaseFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 22);\n\n/**\n * Empty response returned after a fresh step-up proof is released.\n *\n * @generated from message auth.v1.ReleaseFreshStepUpResponse\n */\nexport type ReleaseFreshStepUpResponse = Message<\"auth.v1.ReleaseFreshStepUpResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.ReleaseFreshStepUpResponse.\n * Use `create(ReleaseFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ReleaseFreshStepUpResponseSchema: GenMessage<ReleaseFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 23);\n\n/**\n * Request to update an MFA factor label.\n *\n * @generated from message auth.v1.UpdateMFAFactorRequest\n */\nexport type UpdateMFAFactorRequest = Message<\"auth.v1.UpdateMFAFactorRequest\"> & {\n  /**\n   * MFA factor identifier to update.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n\n  /**\n   * New human-friendly label for the factor. Empty clears the label.\n   *\n   * @generated from field: string label = 2;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.UpdateMFAFactorRequest.\n * Use `create(UpdateMFAFactorRequestSchema)` to create a new message.\n */\nexport const UpdateMFAFactorRequestSchema: GenMessage<UpdateMFAFactorRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 24);\n\n/**\n * Response containing the updated MFA factor.\n *\n * @generated from message auth.v1.UpdateMFAFactorResponse\n */\nexport type UpdateMFAFactorResponse = Message<\"auth.v1.UpdateMFAFactorResponse\"> & {\n  /**\n   * Updated MFA factor metadata.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateMFAFactorResponse.\n * Use `create(UpdateMFAFactorResponseSchema)` to create a new message.\n */\nexport const UpdateMFAFactorResponseSchema: GenMessage<UpdateMFAFactorResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 25);\n\n/**\n * Request to delete an MFA factor.\n *\n * @generated from message auth.v1.DeleteMFAFactorRequest\n */\nexport type DeleteMFAFactorRequest = Message<\"auth.v1.DeleteMFAFactorRequest\"> & {\n  /**\n   * MFA factor identifier to delete.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteMFAFactorRequest.\n * Use `create(DeleteMFAFactorRequestSchema)` to create a new message.\n */\nexport const DeleteMFAFactorRequestSchema: GenMessage<DeleteMFAFactorRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 26);\n\n/**\n * Empty response returned after an MFA factor is deleted.\n *\n * @generated from message auth.v1.DeleteMFAFactorResponse\n */\nexport type DeleteMFAFactorResponse = Message<\"auth.v1.DeleteMFAFactorResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteMFAFactorResponse.\n * Use `create(DeleteMFAFactorResponseSchema)` to create a new message.\n */\nexport const DeleteMFAFactorResponseSchema: GenMessage<DeleteMFAFactorResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 27);\n\n/**\n * Request to rotate recovery codes.\n *\n * @generated from message auth.v1.RegenerateRecoveryCodesRequest\n */\nexport type RegenerateRecoveryCodesRequest = Message<\"auth.v1.RegenerateRecoveryCodesRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.RegenerateRecoveryCodesRequest.\n * Use `create(RegenerateRecoveryCodesRequestSchema)` to create a new message.\n */\nexport const RegenerateRecoveryCodesRequestSchema: GenMessage<RegenerateRecoveryCodesRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 28);\n\n/**\n * Response containing newly generated recovery codes.\n *\n * @generated from message auth.v1.RegenerateRecoveryCodesResponse\n */\nexport type RegenerateRecoveryCodesResponse = Message<\"auth.v1.RegenerateRecoveryCodesResponse\"> & {\n  /**\n   * New one-time recovery codes. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 1;\n   */\n  recoveryCodes: string[];\n};\n\n/**\n * Describes the message auth.v1.RegenerateRecoveryCodesResponse.\n * Use `create(RegenerateRecoveryCodesResponseSchema)` to create a new message.\n */\nexport const RegenerateRecoveryCodesResponseSchema: GenMessage<RegenerateRecoveryCodesResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 29);\n\n/**\n * Session assurance level for the current interactive authentication context.\n *\n * @generated from enum auth.v1.SessionLevel\n */\nexport enum SessionLevel {\n  /**\n   * No session assurance level was specified.\n   *\n   * @generated from enum value: SESSION_LEVEL_UNSPECIFIED = 0;\n   */\n  SESSION_LEVEL_UNSPECIFIED = 0,\n\n  /**\n   * Primary login has completed, but MFA has not elevated this session.\n   *\n   * @generated from enum value: PRIMARY_AUTHENTICATED = 1;\n   */\n  PRIMARY_AUTHENTICATED = 1,\n\n  /**\n   * MFA has elevated this session for ordinary protected account activity.\n   *\n   * @generated from enum value: MFA_ELEVATED = 2;\n   */\n  MFA_ELEVATED = 2,\n\n  /**\n   * A short-lived proof for one high-risk action.\n   *\n   * @generated from enum value: FRESH_STEP_UP = 3;\n   */\n  FRESH_STEP_UP = 3,\n}\n\n/**\n * Describes the enum auth.v1.SessionLevel.\n */\nexport const SessionLevelSchema: GenEnum<SessionLevel> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 0);\n\n/**\n * Type of MFA factor or one-time recovery method.\n *\n * @generated from enum auth.v1.MFAFactorType\n */\nexport enum MFAFactorType {\n  /**\n   * No MFA factor type was specified.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_UNSPECIFIED = 0;\n   */\n  MFA_FACTOR_TYPE_UNSPECIFIED = 0,\n\n  /**\n   * Time-based one-time password from an authenticator app.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_TOTP = 1;\n   */\n  MFA_FACTOR_TYPE_TOTP = 1,\n\n  /**\n   * Passkey factor using device or hardware-key authentication.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_PASSKEY = 2;\n   */\n  MFA_FACTOR_TYPE_PASSKEY = 2,\n\n  /**\n   * One-time recovery code.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_RECOVERY_CODE = 3;\n   */\n  MFA_FACTOR_TYPE_RECOVERY_CODE = 3,\n}\n\n/**\n * Describes the enum auth.v1.MFAFactorType.\n */\nexport const MFAFactorTypeSchema: GenEnum<MFAFactorType> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 1);\n\n/**\n * Reason a user is completing an MFA challenge.\n *\n * @generated from enum auth.v1.MFAChallengePurpose\n */\nexport enum MFAChallengePurpose {\n  /**\n   * No MFA challenge purpose was specified.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0;\n   */\n  MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0,\n\n  /**\n   * Elevates the current session after successful MFA.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1;\n   */\n  MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1,\n\n  /**\n   * Creates a short-lived proof for one high-risk action.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2;\n   */\n  MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2,\n}\n\n/**\n * Describes the enum auth.v1.MFAChallengePurpose.\n */\nexport const MFAChallengePurposeSchema: GenEnum<MFAChallengePurpose> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 2);\n\n/**\n * MFA management service for enrollment, challenges, fresh step-up proofs, and recovery codes.\n *\n * @generated from service auth.v1.MFAService\n */\nexport const MFAService: GenService<{\n  /**\n   * List the caller's enrolled MFA factors.\n   *\n   * @generated from rpc auth.v1.MFAService.ListMFAFactors\n   */\n  listMFAFactors: {\n    methodKind: \"unary\";\n    input: typeof ListMFAFactorsRequestSchema;\n    output: typeof ListMFAFactorsResponseSchema;\n  },\n  /**\n   * Start authenticator-app enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginTOTPEnrollment\n   */\n  beginTOTPEnrollment: {\n    methodKind: \"unary\";\n    input: typeof BeginTOTPEnrollmentRequestSchema;\n    output: typeof BeginTOTPEnrollmentResponseSchema;\n  },\n  /**\n   * Finish authenticator-app enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishTOTPEnrollment\n   */\n  finishTOTPEnrollment: {\n    methodKind: \"unary\";\n    input: typeof FinishTOTPEnrollmentRequestSchema;\n    output: typeof FinishTOTPEnrollmentResponseSchema;\n  },\n  /**\n   * Start passkey enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginPasskeyEnrollment\n   */\n  beginPasskeyEnrollment: {\n    methodKind: \"unary\";\n    input: typeof BeginPasskeyEnrollmentRequestSchema;\n    output: typeof BeginPasskeyEnrollmentResponseSchema;\n  },\n  /**\n   * Finish passkey enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishPasskeyEnrollment\n   */\n  finishPasskeyEnrollment: {\n    methodKind: \"unary\";\n    input: typeof FinishPasskeyEnrollmentRequestSchema;\n    output: typeof FinishPasskeyEnrollmentResponseSchema;\n  },\n  /**\n   * Start an MFA challenge for session elevation or fresh step-up.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginMFAChallenge\n   */\n  beginMFAChallenge: {\n    methodKind: \"unary\";\n    input: typeof BeginMFAChallengeRequestSchema;\n    output: typeof BeginMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with an authenticator-app code.\n   *\n   * @generated from rpc auth.v1.MFAService.VerifyTOTPChallenge\n   */\n  verifyTOTPChallenge: {\n    methodKind: \"unary\";\n    input: typeof VerifyTOTPChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with a passkey.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishPasskeyChallenge\n   */\n  finishPasskeyChallenge: {\n    methodKind: \"unary\";\n    input: typeof FinishPasskeyChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with a recovery code.\n   *\n   * @generated from rpc auth.v1.MFAService.VerifyRecoveryCodeChallenge\n   */\n  verifyRecoveryCodeChallenge: {\n    methodKind: \"unary\";\n    input: typeof VerifyRecoveryCodeChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Update an enrolled MFA factor label.\n   *\n   * @generated from rpc auth.v1.MFAService.UpdateMFAFactor\n   */\n  updateMFAFactor: {\n    methodKind: \"unary\";\n    input: typeof UpdateMFAFactorRequestSchema;\n    output: typeof UpdateMFAFactorResponseSchema;\n  },\n  /**\n   * Delete an enrolled MFA factor.\n   *\n   * @generated from rpc auth.v1.MFAService.DeleteMFAFactor\n   */\n  deleteMFAFactor: {\n    methodKind: \"unary\";\n    input: typeof DeleteMFAFactorRequestSchema;\n    output: typeof DeleteMFAFactorResponseSchema;\n  },\n  /**\n   * Rotate the caller's recovery codes.\n   *\n   * @generated from rpc auth.v1.MFAService.RegenerateRecoveryCodes\n   */\n  regenerateRecoveryCodes: {\n    methodKind: \"unary\";\n    input: typeof RegenerateRecoveryCodesRequestSchema;\n    output: typeof RegenerateRecoveryCodesResponseSchema;\n  },\n  /**\n   * Claim a fresh step-up proof for one protected request.\n   *\n   * @generated from rpc auth.v1.MFAService.ClaimFreshStepUp\n   */\n  claimFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ClaimFreshStepUpRequestSchema;\n    output: typeof ClaimFreshStepUpResponseSchema;\n  },\n  /**\n   * Consume a claimed fresh step-up proof after the protected request succeeds.\n   *\n   * @generated from rpc auth.v1.MFAService.ConsumeFreshStepUp\n   */\n  consumeFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ConsumeFreshStepUpRequestSchema;\n    output: typeof ConsumeFreshStepUpResponseSchema;\n  },\n  /**\n   * Release a claimed fresh step-up proof when the protected request does not complete.\n   *\n   * @generated from rpc auth.v1.MFAService.ReleaseFreshStepUp\n   */\n  releaseFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ReleaseFreshStepUpRequestSchema;\n    output: typeof ReleaseFreshStepUpResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_mfa, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,mBACX,uBAAS,g5MAAg5M;CAAC;CAA6B;CAAgC;AAA0B,CAAC;;;;;AAyCp/M,MAAa,oBACX,0BAAY,kBAAkB,CAAC;;;;;AAgDjC,MAAa,kBACX,0BAAY,kBAAkB,CAAC;;;;;AAcjC,MAAa,8BACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,+BACX,0BAAY,kBAAkB,CAAC;;;;;AAoBjC,MAAa,mCACX,0BAAY,kBAAkB,CAAC;;;;;AAyCjC,MAAa,oCACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,oCACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,qCACX,0BAAY,kBAAkB,CAAC;;;;;AAoBjC,MAAa,sCACX,0BAAY,kBAAkB,CAAC;;;;;AAkCjC,MAAa,uCACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,uCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,wCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,iCACX,0BAAY,kBAAkB,EAAE;;;;;AAyClC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,sCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,2CACX,0BAAY,kBAAkB,EAAE;;;;;AAgDlC,MAAa,qCACX,0BAAY,kBAAkB,EAAE;;;;;AAkClC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAkClC,MAAa,iCACX,0BAAY,kBAAkB,EAAE;;;;;AAgDlC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AAuDlC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,+BACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,+BACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,uCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,wCACX,0BAAY,kBAAkB,EAAE;;;;;;AAOlC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,+BAAA,KAAA;;;;;;CAOA,aAAA,aAAA,2BAAA,KAAA;;;;;;CAOA,aAAA,aAAA,kBAAA,KAAA;;;;;;CAOA,aAAA,aAAA,mBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,iCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,IAAY,sBAAL,yBAAA,qBAAA;;;;;;CAML,oBAAA,oBAAA,uCAAA,KAAA;;;;;;CAOA,oBAAA,oBAAA,6CAAA,KAAA;;;;;;CAOA,oBAAA,oBAAA,yCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,4BACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,MAAa,aAwJX,0BAAY,kBAAkB,CAAC"}
+{"version":3,"file":"mfa_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/mfa_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/mfa.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_struct, file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_polyester_api_options } from \"../../polyester/api/options_pb.js\";\nimport type { JsonObject, Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/mfa.proto.\n */\nexport const file_auth_v1_mfa: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_google_protobuf_struct, file_google_protobuf_timestamp, file_polyester_api_options]);\n\n/**\n * Current assurance details for an interactive session.\n *\n * @generated from message auth.v1.SessionInfo\n */\nexport type SessionInfo = Message<\"auth.v1.SessionInfo\"> & {\n  /**\n   * Stable session identifier shared by the primary and MFA-elevated tokens.\n   *\n   * @generated from field: string session_id = 1;\n   */\n  sessionId: string;\n\n  /**\n   * Assurance level represented by this session response.\n   *\n   * @generated from field: auth.v1.SessionLevel session_level = 2;\n   */\n  sessionLevel: SessionLevel;\n\n  /**\n   * Authentication methods used for this session state, such as wallet, TOTP, passkey, or recovery code. Maximum 8 unique values.\n   *\n   * @generated from field: repeated string authentication_methods = 3;\n   */\n  authenticationMethods: string[];\n\n  /**\n   * Time when the session was authenticated or elevated.\n   *\n   * @generated from field: google.protobuf.Timestamp auth_time = 4;\n   */\n  authTime?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.SessionInfo.\n * Use `create(SessionInfoSchema)` to create a new message.\n */\nexport const SessionInfoSchema: GenMessage<SessionInfo> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 0);\n\n/**\n * Enrolled MFA factor metadata visible to the account owner.\n *\n * @generated from message auth.v1.MFAFactor\n */\nexport type MFAFactor = Message<\"auth.v1.MFAFactor\"> & {\n  /**\n   * MFA factor identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n\n  /**\n   * Type of enrolled factor.\n   *\n   * @generated from field: auth.v1.MFAFactorType factor_type = 2;\n   */\n  factorType: MFAFactorType;\n\n  /**\n   * Human-friendly label for the factor. Empty when no label is set.\n   *\n   * @generated from field: string label = 3;\n   */\n  label: string;\n\n  /**\n   * Time when the factor was enrolled.\n   *\n   * @generated from field: google.protobuf.Timestamp created_at = 4;\n   */\n  createdAt?: Timestamp | undefined;\n\n  /**\n   * Time when the factor was last used. Empty if the factor has not been used.\n   *\n   * @generated from field: google.protobuf.Timestamp last_used_at = 5;\n   */\n  lastUsedAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.MFAFactor.\n * Use `create(MFAFactorSchema)` to create a new message.\n */\nexport const MFAFactorSchema: GenMessage<MFAFactor> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 1);\n\n/**\n * Request to list the caller's MFA factors.\n *\n * @generated from message auth.v1.ListMFAFactorsRequest\n */\nexport type ListMFAFactorsRequest = Message<\"auth.v1.ListMFAFactorsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.ListMFAFactorsRequest.\n * Use `create(ListMFAFactorsRequestSchema)` to create a new message.\n */\nexport const ListMFAFactorsRequestSchema: GenMessage<ListMFAFactorsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 2);\n\n/**\n * Response containing the caller's enrolled MFA factors.\n *\n * @generated from message auth.v1.ListMFAFactorsResponse\n */\nexport type ListMFAFactorsResponse = Message<\"auth.v1.ListMFAFactorsResponse\"> & {\n  /**\n   * Enrolled MFA factors, ordered oldest first.\n   *\n   * @generated from field: repeated auth.v1.MFAFactor factors = 1;\n   */\n  factors: MFAFactor[];\n\n  /**\n   * True when the caller has at least one unused recovery code.\n   *\n   * @generated from field: bool has_recovery_codes = 2;\n   */\n  hasRecoveryCodes: boolean;\n};\n\n/**\n * Describes the message auth.v1.ListMFAFactorsResponse.\n * Use `create(ListMFAFactorsResponseSchema)` to create a new message.\n */\nexport const ListMFAFactorsResponseSchema: GenMessage<ListMFAFactorsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 3);\n\n/**\n * Request to begin authenticator-app enrollment.\n *\n * @generated from message auth.v1.BeginTOTPEnrollmentRequest\n */\nexport type BeginTOTPEnrollmentRequest = Message<\"auth.v1.BeginTOTPEnrollmentRequest\"> & {\n  /**\n   * Optional human-friendly label. Defaults to \"Authenticator App\" when empty. Maximum 128 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.BeginTOTPEnrollmentRequest.\n * Use `create(BeginTOTPEnrollmentRequestSchema)` to create a new message.\n */\nexport const BeginTOTPEnrollmentRequestSchema: GenMessage<BeginTOTPEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 4);\n\n/**\n * Response containing the authenticator-app enrollment secret.\n *\n * @generated from message auth.v1.BeginTOTPEnrollmentResponse\n */\nexport type BeginTOTPEnrollmentResponse = Message<\"auth.v1.BeginTOTPEnrollmentResponse\"> & {\n  /**\n   * Enrollment challenge identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Shared secret to enter into an authenticator app. Returned only when enrollment begins.\n   *\n   * @generated from field: string secret = 2;\n   */\n  secret: string;\n\n  /**\n   * Authenticator-app setup URI for QR-code display. Returned only when enrollment begins.\n   *\n   * @generated from field: string otpauth_uri = 3;\n   */\n  otpauthUri: string;\n\n  /**\n   * Time when this enrollment challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 4;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginTOTPEnrollmentResponse.\n * Use `create(BeginTOTPEnrollmentResponseSchema)` to create a new message.\n */\nexport const BeginTOTPEnrollmentResponseSchema: GenMessage<BeginTOTPEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 5);\n\n/**\n * Request to finish authenticator-app enrollment.\n *\n * @generated from message auth.v1.FinishTOTPEnrollmentRequest\n */\nexport type FinishTOTPEnrollmentRequest = Message<\"auth.v1.FinishTOTPEnrollmentRequest\"> & {\n  /**\n   * Enrollment challenge identifier returned by BeginTOTPEnrollment.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Current 6 to 8 digit code from the authenticator app.\n   *\n   * @generated from field: string code = 2;\n   */\n  code: string;\n};\n\n/**\n * Describes the message auth.v1.FinishTOTPEnrollmentRequest.\n * Use `create(FinishTOTPEnrollmentRequestSchema)` to create a new message.\n */\nexport const FinishTOTPEnrollmentRequestSchema: GenMessage<FinishTOTPEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 6);\n\n/**\n * Response returned after authenticator-app enrollment succeeds.\n *\n * @generated from message auth.v1.FinishTOTPEnrollmentResponse\n */\nexport type FinishTOTPEnrollmentResponse = Message<\"auth.v1.FinishTOTPEnrollmentResponse\"> & {\n  /**\n   * Newly enrolled MFA factor.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n\n  /**\n   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 2;\n   */\n  recoveryCodes: string[];\n\n  /**\n   * MFA-elevated session details after successful enrollment.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 3;\n   */\n  session?: SessionInfo | undefined;\n\n  /**\n   * MFA-elevated session token issued after successful enrollment.\n   *\n   * @generated from field: string access_token = 4;\n   */\n  accessToken: string;\n\n  /**\n   * Time when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;\n   */\n  accessTokenExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishTOTPEnrollmentResponse.\n * Use `create(FinishTOTPEnrollmentResponseSchema)` to create a new message.\n */\nexport const FinishTOTPEnrollmentResponseSchema: GenMessage<FinishTOTPEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 7);\n\n/**\n * Request to begin passkey enrollment.\n *\n * @generated from message auth.v1.BeginPasskeyEnrollmentRequest\n */\nexport type BeginPasskeyEnrollmentRequest = Message<\"auth.v1.BeginPasskeyEnrollmentRequest\"> & {\n  /**\n   * Optional human-friendly label for the passkey. Maximum 128 characters.\n   *\n   * @generated from field: string label = 1;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.BeginPasskeyEnrollmentRequest.\n * Use `create(BeginPasskeyEnrollmentRequestSchema)` to create a new message.\n */\nexport const BeginPasskeyEnrollmentRequestSchema: GenMessage<BeginPasskeyEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 8);\n\n/**\n * Response containing passkey enrollment options.\n *\n * @generated from message auth.v1.BeginPasskeyEnrollmentResponse\n */\nexport type BeginPasskeyEnrollmentResponse = Message<\"auth.v1.BeginPasskeyEnrollmentResponse\"> & {\n  /**\n   * Enrollment challenge identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Passkey creation options to pass to the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct public_key = 2;\n   */\n  publicKey?: JsonObject | undefined;\n\n  /**\n   * Time when this enrollment challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 3;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginPasskeyEnrollmentResponse.\n * Use `create(BeginPasskeyEnrollmentResponseSchema)` to create a new message.\n */\nexport const BeginPasskeyEnrollmentResponseSchema: GenMessage<BeginPasskeyEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 9);\n\n/**\n * Request to finish passkey enrollment.\n *\n * @generated from message auth.v1.FinishPasskeyEnrollmentRequest\n */\nexport type FinishPasskeyEnrollmentRequest = Message<\"auth.v1.FinishPasskeyEnrollmentRequest\"> & {\n  /**\n   * Enrollment challenge identifier returned by BeginPasskeyEnrollment.\n   *\n   * @generated from field: string enrollment_id = 1;\n   */\n  enrollmentId: string;\n\n  /**\n   * Passkey creation response returned by the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct credential = 2;\n   */\n  credential?: JsonObject | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyEnrollmentRequest.\n * Use `create(FinishPasskeyEnrollmentRequestSchema)` to create a new message.\n */\nexport const FinishPasskeyEnrollmentRequestSchema: GenMessage<FinishPasskeyEnrollmentRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 10);\n\n/**\n * Response returned after passkey enrollment succeeds.\n *\n * @generated from message auth.v1.FinishPasskeyEnrollmentResponse\n */\nexport type FinishPasskeyEnrollmentResponse = Message<\"auth.v1.FinishPasskeyEnrollmentResponse\"> & {\n  /**\n   * Newly enrolled MFA factor.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n\n  /**\n   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 2;\n   */\n  recoveryCodes: string[];\n\n  /**\n   * MFA-elevated session details after successful enrollment.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 3;\n   */\n  session?: SessionInfo | undefined;\n\n  /**\n   * MFA-elevated session token issued after successful enrollment.\n   *\n   * @generated from field: string access_token = 4;\n   */\n  accessToken: string;\n\n  /**\n   * Time when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;\n   */\n  accessTokenExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyEnrollmentResponse.\n * Use `create(FinishPasskeyEnrollmentResponseSchema)` to create a new message.\n */\nexport const FinishPasskeyEnrollmentResponseSchema: GenMessage<FinishPasskeyEnrollmentResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 11);\n\n/**\n * Request to start an MFA challenge.\n *\n * @generated from message auth.v1.BeginMFAChallengeRequest\n */\nexport type BeginMFAChallengeRequest = Message<\"auth.v1.BeginMFAChallengeRequest\"> & {\n  /**\n   * Desired challenge outcome: session elevation or fresh step-up.\n   *\n   * @generated from field: auth.v1.MFAChallengePurpose purpose = 1;\n   */\n  purpose: MFAChallengePurpose;\n};\n\n/**\n * Describes the message auth.v1.BeginMFAChallengeRequest.\n * Use `create(BeginMFAChallengeRequestSchema)` to create a new message.\n */\nexport const BeginMFAChallengeRequestSchema: GenMessage<BeginMFAChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 12);\n\n/**\n * Response returned after starting an MFA challenge.\n *\n * @generated from message auth.v1.BeginMFAChallengeResponse\n */\nexport type BeginMFAChallengeResponse = Message<\"auth.v1.BeginMFAChallengeResponse\"> & {\n  /**\n   * Challenge identifier to submit when verifying a factor. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Factor types the caller may use for this challenge. Maximum 8 unique values.\n   *\n   * @generated from field: repeated auth.v1.MFAFactorType allowed_factor_types = 2;\n   */\n  allowedFactorTypes: MFAFactorType[];\n\n  /**\n   * Passkey request options when passkey verification is available. Empty when passkeys are not available.\n   *\n   * @generated from field: google.protobuf.Struct public_key = 3;\n   */\n  publicKey?: JsonObject | undefined;\n\n  /**\n   * Time when this challenge expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 4;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.BeginMFAChallengeResponse.\n * Use `create(BeginMFAChallengeResponseSchema)` to create a new message.\n */\nexport const BeginMFAChallengeResponseSchema: GenMessage<BeginMFAChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 13);\n\n/**\n * Request to verify an MFA challenge with an authenticator-app code.\n *\n * @generated from message auth.v1.VerifyTOTPChallengeRequest\n */\nexport type VerifyTOTPChallengeRequest = Message<\"auth.v1.VerifyTOTPChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Current 6 to 8 digit code from the authenticator app.\n   *\n   * @generated from field: string code = 2;\n   */\n  code: string;\n};\n\n/**\n * Describes the message auth.v1.VerifyTOTPChallengeRequest.\n * Use `create(VerifyTOTPChallengeRequestSchema)` to create a new message.\n */\nexport const VerifyTOTPChallengeRequestSchema: GenMessage<VerifyTOTPChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 14);\n\n/**\n * Request to verify an MFA challenge with a passkey.\n *\n * @generated from message auth.v1.FinishPasskeyChallengeRequest\n */\nexport type FinishPasskeyChallengeRequest = Message<\"auth.v1.FinishPasskeyChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * Passkey authentication response returned by the browser or device authenticator.\n   *\n   * @generated from field: google.protobuf.Struct credential = 2;\n   */\n  credential?: JsonObject | undefined;\n};\n\n/**\n * Describes the message auth.v1.FinishPasskeyChallengeRequest.\n * Use `create(FinishPasskeyChallengeRequestSchema)` to create a new message.\n */\nexport const FinishPasskeyChallengeRequestSchema: GenMessage<FinishPasskeyChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 15);\n\n/**\n * Request to verify an MFA challenge with a recovery code.\n *\n * @generated from message auth.v1.VerifyRecoveryCodeChallengeRequest\n */\nexport type VerifyRecoveryCodeChallengeRequest = Message<\"auth.v1.VerifyRecoveryCodeChallengeRequest\"> & {\n  /**\n   * Challenge identifier returned by BeginMFAChallenge.\n   *\n   * @generated from field: string challenge_id = 1;\n   */\n  challengeId: string;\n\n  /**\n   * One-time recovery code. Accepted format is 8 to 64 letters, numbers, or hyphens.\n   *\n   * @generated from field: string recovery_code = 2;\n   */\n  recoveryCode: string;\n};\n\n/**\n * Describes the message auth.v1.VerifyRecoveryCodeChallengeRequest.\n * Use `create(VerifyRecoveryCodeChallengeRequestSchema)` to create a new message.\n */\nexport const VerifyRecoveryCodeChallengeRequestSchema: GenMessage<VerifyRecoveryCodeChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 16);\n\n/**\n * Response returned after an MFA challenge is completed.\n *\n * @generated from message auth.v1.CompleteMFAChallengeResponse\n */\nexport type CompleteMFAChallengeResponse = Message<\"auth.v1.CompleteMFAChallengeResponse\"> & {\n  /**\n   * MFA-elevated session details after completing the challenge.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 1;\n   */\n  session?: SessionInfo | undefined;\n\n  /**\n   * MFA-elevated session token returned after every successful challenge.\n   *\n   * @generated from field: string access_token = 2;\n   */\n  accessToken: string;\n\n  /**\n   * Time when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 3;\n   */\n  accessTokenExpiresAt?: Timestamp | undefined;\n\n  /**\n   * Fresh step-up token returned for fresh step-up challenges. Empty for session-elevation challenges.\n   *\n   * @generated from field: string step_up_token = 4;\n   */\n  stepUpToken: string;\n\n  /**\n   * Time when step_up_token expires. Empty when no step_up_token is returned.\n   *\n   * @generated from field: google.protobuf.Timestamp step_up_expires_at = 5;\n   */\n  stepUpExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.CompleteMFAChallengeResponse.\n * Use `create(CompleteMFAChallengeResponseSchema)` to create a new message.\n */\nexport const CompleteMFAChallengeResponseSchema: GenMessage<CompleteMFAChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 17);\n\n/**\n * Request to bind a fresh step-up proof to one protected request.\n *\n * @generated from message auth.v1.ClaimFreshStepUpRequest\n */\nexport type ClaimFreshStepUpRequest = Message<\"auth.v1.ClaimFreshStepUpRequest\"> & {\n  /**\n   * Client-generated request identifier for the protected request. Maximum 128 characters.\n   *\n   * @generated from field: string request_id = 1;\n   */\n  requestId: string;\n\n  /**\n   * Product action being protected, such as a withdrawal or security setting change. Maximum 64 characters.\n   *\n   * @generated from field: string action_type = 2;\n   */\n  actionType: string;\n\n  /**\n   * Product subject for the protected action, such as the target account, destination, or resource identifier. Maximum 128 characters.\n   *\n   * @generated from field: string subject = 3;\n   */\n  subject: string;\n};\n\n/**\n * Describes the message auth.v1.ClaimFreshStepUpRequest.\n * Use `create(ClaimFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ClaimFreshStepUpRequestSchema: GenMessage<ClaimFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 18);\n\n/**\n * Response returned after a fresh step-up proof is claimed.\n *\n * @generated from message auth.v1.ClaimFreshStepUpResponse\n */\nexport type ClaimFreshStepUpResponse = Message<\"auth.v1.ClaimFreshStepUpResponse\"> & {\n  /**\n   * Fresh step-up proof identifier. Format: \"mfa_\" followed by 32 lowercase hex characters.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * One-time nonce that must be echoed when consuming or releasing the claim.\n   *\n   * @generated from field: string claim_nonce = 2;\n   */\n  claimNonce: string;\n\n  /**\n   * Time when this claim expires if it is not consumed or released.\n   *\n   * @generated from field: google.protobuf.Timestamp claim_expires_at = 3;\n   */\n  claimExpiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.ClaimFreshStepUpResponse.\n * Use `create(ClaimFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ClaimFreshStepUpResponseSchema: GenMessage<ClaimFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 19);\n\n/**\n * Request to consume a claimed fresh step-up proof after the protected request succeeds.\n *\n * @generated from message auth.v1.ConsumeFreshStepUpRequest\n */\nexport type ConsumeFreshStepUpRequest = Message<\"auth.v1.ConsumeFreshStepUpRequest\"> & {\n  /**\n   * Fresh step-up proof identifier returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * Client-generated request identifier used when the proof was claimed.\n   *\n   * @generated from field: string request_id = 2;\n   */\n  requestId: string;\n\n  /**\n   * Product action type used when the proof was claimed.\n   *\n   * @generated from field: string action_type = 3;\n   */\n  actionType: string;\n\n  /**\n   * Product subject used when the proof was claimed.\n   *\n   * @generated from field: string subject = 4;\n   */\n  subject: string;\n\n  /**\n   * One-time nonce returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string claim_nonce = 5;\n   */\n  claimNonce: string;\n};\n\n/**\n * Describes the message auth.v1.ConsumeFreshStepUpRequest.\n * Use `create(ConsumeFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ConsumeFreshStepUpRequestSchema: GenMessage<ConsumeFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 20);\n\n/**\n * Empty response returned after a fresh step-up proof is consumed.\n *\n * @generated from message auth.v1.ConsumeFreshStepUpResponse\n */\nexport type ConsumeFreshStepUpResponse = Message<\"auth.v1.ConsumeFreshStepUpResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.ConsumeFreshStepUpResponse.\n * Use `create(ConsumeFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ConsumeFreshStepUpResponseSchema: GenMessage<ConsumeFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 21);\n\n/**\n * Request to release a claimed fresh step-up proof when the protected request does not complete.\n *\n * @generated from message auth.v1.ReleaseFreshStepUpRequest\n */\nexport type ReleaseFreshStepUpRequest = Message<\"auth.v1.ReleaseFreshStepUpRequest\"> & {\n  /**\n   * Fresh step-up proof identifier returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string step_up_id = 1;\n   */\n  stepUpId: string;\n\n  /**\n   * Client-generated request identifier used when the proof was claimed.\n   *\n   * @generated from field: string request_id = 2;\n   */\n  requestId: string;\n\n  /**\n   * Product action type used when the proof was claimed.\n   *\n   * @generated from field: string action_type = 3;\n   */\n  actionType: string;\n\n  /**\n   * Product subject used when the proof was claimed.\n   *\n   * @generated from field: string subject = 4;\n   */\n  subject: string;\n\n  /**\n   * One-time nonce returned by ClaimFreshStepUp.\n   *\n   * @generated from field: string claim_nonce = 5;\n   */\n  claimNonce: string;\n\n  /**\n   * Optional product-facing reason for releasing the claim. Maximum 128 characters.\n   *\n   * @generated from field: string reason = 6;\n   */\n  reason: string;\n};\n\n/**\n * Describes the message auth.v1.ReleaseFreshStepUpRequest.\n * Use `create(ReleaseFreshStepUpRequestSchema)` to create a new message.\n */\nexport const ReleaseFreshStepUpRequestSchema: GenMessage<ReleaseFreshStepUpRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 22);\n\n/**\n * Empty response returned after a fresh step-up proof is released.\n *\n * @generated from message auth.v1.ReleaseFreshStepUpResponse\n */\nexport type ReleaseFreshStepUpResponse = Message<\"auth.v1.ReleaseFreshStepUpResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.ReleaseFreshStepUpResponse.\n * Use `create(ReleaseFreshStepUpResponseSchema)` to create a new message.\n */\nexport const ReleaseFreshStepUpResponseSchema: GenMessage<ReleaseFreshStepUpResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 23);\n\n/**\n * Request to update an MFA factor label.\n *\n * @generated from message auth.v1.UpdateMFAFactorRequest\n */\nexport type UpdateMFAFactorRequest = Message<\"auth.v1.UpdateMFAFactorRequest\"> & {\n  /**\n   * MFA factor identifier to update.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n\n  /**\n   * New human-friendly label for the factor. Empty clears the label.\n   *\n   * @generated from field: string label = 2;\n   */\n  label: string;\n};\n\n/**\n * Describes the message auth.v1.UpdateMFAFactorRequest.\n * Use `create(UpdateMFAFactorRequestSchema)` to create a new message.\n */\nexport const UpdateMFAFactorRequestSchema: GenMessage<UpdateMFAFactorRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 24);\n\n/**\n * Response containing the updated MFA factor.\n *\n * @generated from message auth.v1.UpdateMFAFactorResponse\n */\nexport type UpdateMFAFactorResponse = Message<\"auth.v1.UpdateMFAFactorResponse\"> & {\n  /**\n   * Updated MFA factor metadata.\n   *\n   * @generated from field: auth.v1.MFAFactor factor = 1;\n   */\n  factor?: MFAFactor | undefined;\n};\n\n/**\n * Describes the message auth.v1.UpdateMFAFactorResponse.\n * Use `create(UpdateMFAFactorResponseSchema)` to create a new message.\n */\nexport const UpdateMFAFactorResponseSchema: GenMessage<UpdateMFAFactorResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 25);\n\n/**\n * Request to delete an MFA factor.\n *\n * @generated from message auth.v1.DeleteMFAFactorRequest\n */\nexport type DeleteMFAFactorRequest = Message<\"auth.v1.DeleteMFAFactorRequest\"> & {\n  /**\n   * MFA factor identifier to delete.\n   *\n   * @generated from field: string factor_id = 1;\n   */\n  factorId: string;\n};\n\n/**\n * Describes the message auth.v1.DeleteMFAFactorRequest.\n * Use `create(DeleteMFAFactorRequestSchema)` to create a new message.\n */\nexport const DeleteMFAFactorRequestSchema: GenMessage<DeleteMFAFactorRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 26);\n\n/**\n * Empty response returned after an MFA factor is deleted.\n *\n * @generated from message auth.v1.DeleteMFAFactorResponse\n */\nexport type DeleteMFAFactorResponse = Message<\"auth.v1.DeleteMFAFactorResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.DeleteMFAFactorResponse.\n * Use `create(DeleteMFAFactorResponseSchema)` to create a new message.\n */\nexport const DeleteMFAFactorResponseSchema: GenMessage<DeleteMFAFactorResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 27);\n\n/**\n * Request to rotate recovery codes.\n *\n * @generated from message auth.v1.RegenerateRecoveryCodesRequest\n */\nexport type RegenerateRecoveryCodesRequest = Message<\"auth.v1.RegenerateRecoveryCodesRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.RegenerateRecoveryCodesRequest.\n * Use `create(RegenerateRecoveryCodesRequestSchema)` to create a new message.\n */\nexport const RegenerateRecoveryCodesRequestSchema: GenMessage<RegenerateRecoveryCodesRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 28);\n\n/**\n * Response containing newly generated recovery codes.\n *\n * @generated from message auth.v1.RegenerateRecoveryCodesResponse\n */\nexport type RegenerateRecoveryCodesResponse = Message<\"auth.v1.RegenerateRecoveryCodesResponse\"> & {\n  /**\n   * New one-time recovery codes. Store these securely; they are only returned in this response.\n   *\n   * @generated from field: repeated string recovery_codes = 1;\n   */\n  recoveryCodes: string[];\n};\n\n/**\n * Describes the message auth.v1.RegenerateRecoveryCodesResponse.\n * Use `create(RegenerateRecoveryCodesResponseSchema)` to create a new message.\n */\nexport const RegenerateRecoveryCodesResponseSchema: GenMessage<RegenerateRecoveryCodesResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_mfa, 29);\n\n/**\n * Session assurance level for the current interactive authentication context.\n *\n * @generated from enum auth.v1.SessionLevel\n */\nexport enum SessionLevel {\n  /**\n   * No session assurance level was specified.\n   *\n   * @generated from enum value: SESSION_LEVEL_UNSPECIFIED = 0;\n   */\n  SESSION_LEVEL_UNSPECIFIED = 0,\n\n  /**\n   * Primary login has completed, but MFA has not elevated this session.\n   *\n   * @generated from enum value: PRIMARY_AUTHENTICATED = 1;\n   */\n  PRIMARY_AUTHENTICATED = 1,\n\n  /**\n   * MFA has elevated this session for ordinary protected account activity.\n   *\n   * @generated from enum value: MFA_ELEVATED = 2;\n   */\n  MFA_ELEVATED = 2,\n\n  /**\n   * A short-lived proof for one high-risk action.\n   *\n   * @generated from enum value: FRESH_STEP_UP = 3;\n   */\n  FRESH_STEP_UP = 3,\n}\n\n/**\n * Describes the enum auth.v1.SessionLevel.\n */\nexport const SessionLevelSchema: GenEnum<SessionLevel> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 0);\n\n/**\n * Type of MFA factor or one-time recovery method.\n *\n * @generated from enum auth.v1.MFAFactorType\n */\nexport enum MFAFactorType {\n  /**\n   * No MFA factor type was specified.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_UNSPECIFIED = 0;\n   */\n  MFA_FACTOR_TYPE_UNSPECIFIED = 0,\n\n  /**\n   * Time-based one-time password from an authenticator app.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_TOTP = 1;\n   */\n  MFA_FACTOR_TYPE_TOTP = 1,\n\n  /**\n   * Passkey factor using device or hardware-key authentication.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_PASSKEY = 2;\n   */\n  MFA_FACTOR_TYPE_PASSKEY = 2,\n\n  /**\n   * One-time recovery code.\n   *\n   * @generated from enum value: MFA_FACTOR_TYPE_RECOVERY_CODE = 3;\n   */\n  MFA_FACTOR_TYPE_RECOVERY_CODE = 3,\n}\n\n/**\n * Describes the enum auth.v1.MFAFactorType.\n */\nexport const MFAFactorTypeSchema: GenEnum<MFAFactorType> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 1);\n\n/**\n * Reason a user is completing an MFA challenge.\n *\n * @generated from enum auth.v1.MFAChallengePurpose\n */\nexport enum MFAChallengePurpose {\n  /**\n   * No MFA challenge purpose was specified.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0;\n   */\n  MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0,\n\n  /**\n   * Elevates the current session after successful MFA.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1;\n   */\n  MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1,\n\n  /**\n   * Creates a short-lived proof for one high-risk action.\n   *\n   * @generated from enum value: MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2;\n   */\n  MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2,\n}\n\n/**\n * Describes the enum auth.v1.MFAChallengePurpose.\n */\nexport const MFAChallengePurposeSchema: GenEnum<MFAChallengePurpose> = /*@__PURE__*/\n  enumDesc(file_auth_v1_mfa, 2);\n\n/**\n * MFA management service for enrollment, challenges, fresh step-up proofs, and recovery codes.\n *\n * @generated from service auth.v1.MFAService\n */\nexport const MFAService: GenService<{\n  /**\n   * List the caller's enrolled MFA factors.\n   *\n   * @generated from rpc auth.v1.MFAService.ListMFAFactors\n   */\n  listMFAFactors: {\n    methodKind: \"unary\";\n    input: typeof ListMFAFactorsRequestSchema;\n    output: typeof ListMFAFactorsResponseSchema;\n  },\n  /**\n   * Start authenticator-app enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginTOTPEnrollment\n   */\n  beginTOTPEnrollment: {\n    methodKind: \"unary\";\n    input: typeof BeginTOTPEnrollmentRequestSchema;\n    output: typeof BeginTOTPEnrollmentResponseSchema;\n  },\n  /**\n   * Finish authenticator-app enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishTOTPEnrollment\n   */\n  finishTOTPEnrollment: {\n    methodKind: \"unary\";\n    input: typeof FinishTOTPEnrollmentRequestSchema;\n    output: typeof FinishTOTPEnrollmentResponseSchema;\n  },\n  /**\n   * Start passkey enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginPasskeyEnrollment\n   */\n  beginPasskeyEnrollment: {\n    methodKind: \"unary\";\n    input: typeof BeginPasskeyEnrollmentRequestSchema;\n    output: typeof BeginPasskeyEnrollmentResponseSchema;\n  },\n  /**\n   * Finish passkey enrollment.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishPasskeyEnrollment\n   */\n  finishPasskeyEnrollment: {\n    methodKind: \"unary\";\n    input: typeof FinishPasskeyEnrollmentRequestSchema;\n    output: typeof FinishPasskeyEnrollmentResponseSchema;\n  },\n  /**\n   * Start an MFA challenge for session elevation or fresh step-up.\n   *\n   * @generated from rpc auth.v1.MFAService.BeginMFAChallenge\n   */\n  beginMFAChallenge: {\n    methodKind: \"unary\";\n    input: typeof BeginMFAChallengeRequestSchema;\n    output: typeof BeginMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with an authenticator-app code.\n   *\n   * @generated from rpc auth.v1.MFAService.VerifyTOTPChallenge\n   */\n  verifyTOTPChallenge: {\n    methodKind: \"unary\";\n    input: typeof VerifyTOTPChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with a passkey.\n   *\n   * @generated from rpc auth.v1.MFAService.FinishPasskeyChallenge\n   */\n  finishPasskeyChallenge: {\n    methodKind: \"unary\";\n    input: typeof FinishPasskeyChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Verify an MFA challenge with a recovery code.\n   *\n   * @generated from rpc auth.v1.MFAService.VerifyRecoveryCodeChallenge\n   */\n  verifyRecoveryCodeChallenge: {\n    methodKind: \"unary\";\n    input: typeof VerifyRecoveryCodeChallengeRequestSchema;\n    output: typeof CompleteMFAChallengeResponseSchema;\n  },\n  /**\n   * Update an enrolled MFA factor label.\n   *\n   * @generated from rpc auth.v1.MFAService.UpdateMFAFactor\n   */\n  updateMFAFactor: {\n    methodKind: \"unary\";\n    input: typeof UpdateMFAFactorRequestSchema;\n    output: typeof UpdateMFAFactorResponseSchema;\n  },\n  /**\n   * Delete an enrolled MFA factor.\n   *\n   * @generated from rpc auth.v1.MFAService.DeleteMFAFactor\n   */\n  deleteMFAFactor: {\n    methodKind: \"unary\";\n    input: typeof DeleteMFAFactorRequestSchema;\n    output: typeof DeleteMFAFactorResponseSchema;\n  },\n  /**\n   * Rotate the caller's recovery codes.\n   *\n   * @generated from rpc auth.v1.MFAService.RegenerateRecoveryCodes\n   */\n  regenerateRecoveryCodes: {\n    methodKind: \"unary\";\n    input: typeof RegenerateRecoveryCodesRequestSchema;\n    output: typeof RegenerateRecoveryCodesResponseSchema;\n  },\n  /**\n   * Claim a fresh step-up proof for one protected request.\n   *\n   * @generated from rpc auth.v1.MFAService.ClaimFreshStepUp\n   */\n  claimFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ClaimFreshStepUpRequestSchema;\n    output: typeof ClaimFreshStepUpResponseSchema;\n  },\n  /**\n   * Consume a claimed fresh step-up proof after the protected request succeeds.\n   *\n   * @generated from rpc auth.v1.MFAService.ConsumeFreshStepUp\n   */\n  consumeFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ConsumeFreshStepUpRequestSchema;\n    output: typeof ConsumeFreshStepUpResponseSchema;\n  },\n  /**\n   * Release a claimed fresh step-up proof when the protected request does not complete.\n   *\n   * @generated from rpc auth.v1.MFAService.ReleaseFreshStepUp\n   */\n  releaseFreshStepUp: {\n    methodKind: \"unary\";\n    input: typeof ReleaseFreshStepUpRequestSchema;\n    output: typeof ReleaseFreshStepUpResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_mfa, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,MAAa,mBACX,uBAAS,4tNAA4tN;CAAC;CAA6B;CAAgC;AAA0B,CAAC;;;;;AAyCh0N,MAAa,oBACX,0BAAY,kBAAkB,CAAC;;;;;AAgDjC,MAAa,kBACX,0BAAY,kBAAkB,CAAC;;;;;AAcjC,MAAa,8BACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,+BACX,0BAAY,kBAAkB,CAAC;;;;;AAoBjC,MAAa,mCACX,0BAAY,kBAAkB,CAAC;;;;;AAyCjC,MAAa,oCACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,oCACX,0BAAY,kBAAkB,CAAC;;;;;AAgDjC,MAAa,qCACX,0BAAY,kBAAkB,CAAC;;;;;AAoBjC,MAAa,sCACX,0BAAY,kBAAkB,CAAC;;;;;AAkCjC,MAAa,uCACX,0BAAY,kBAAkB,CAAC;;;;;AA2BjC,MAAa,uCACX,0BAAY,kBAAkB,EAAE;;;;;AAgDlC,MAAa,wCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,iCACX,0BAAY,kBAAkB,EAAE;;;;;AAyClC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,sCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,2CACX,0BAAY,kBAAkB,EAAE;;;;;AAgDlC,MAAa,qCACX,0BAAY,kBAAkB,EAAE;;;;;AAkClC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAkClC,MAAa,iCACX,0BAAY,kBAAkB,EAAE;;;;;AAgDlC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AAuDlC,MAAa,kCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,mCACX,0BAAY,kBAAkB,EAAE;;;;;AA2BlC,MAAa,+BACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,+BACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,gCACX,0BAAY,kBAAkB,EAAE;;;;;AAclC,MAAa,uCACX,0BAAY,kBAAkB,EAAE;;;;;AAoBlC,MAAa,wCACX,0BAAY,kBAAkB,EAAE;;;;;;AAOlC,IAAY,eAAL,yBAAA,cAAA;;;;;;CAML,aAAA,aAAA,+BAAA,KAAA;;;;;;CAOA,aAAA,aAAA,2BAAA,KAAA;;;;;;CAOA,aAAA,aAAA,kBAAA,KAAA;;;;;;CAOA,aAAA,aAAA,mBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,qBACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,iCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,IAAY,sBAAL,yBAAA,qBAAA;;;;;;CAML,oBAAA,oBAAA,uCAAA,KAAA;;;;;;CAOA,oBAAA,oBAAA,6CAAA,KAAA;;;;;;CAOA,oBAAA,oBAAA,yCAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,4BACX,uBAAS,kBAAkB,CAAC;;;;;;AAO9B,MAAa,aAwJX,0BAAY,kBAAkB,CAAC"}

package/dist/gen/auth/v1/policies_pb.d.ts

@@ -221,8 +221,10 @@ declare const SubaccountPolicyViewSchema: GenMessage<SubaccountPolicyView>;
  */
 type ListSubaccountPoliciesRequest = Message<"auth.v1.ListSubaccountPoliciesRequest"> & {
   /**
-   * Optional sub-account context for delegated administration. When omitted,
-   * only policies owned by the caller's root account are returned.
+   * Optional sub-account context. When provided, a current member may read the
+   * policy attached to that sub-account; the owner retains visibility of all
+   * policies owned by their root account. When omitted, only policies owned by
+   * the caller's root account are returned.
    *
    * @generated from field: optional fixed64 subaccount_id = 1;
    */
@@ -265,8 +267,10 @@ type GetSubaccountPolicyRequest = Message<"auth.v1.GetSubaccountPolicyRequest">
    */
   policyId: bigint;
   /**
-   * Optional sub-account context for delegated administration. When omitted,
-   * the policy must be owned by the caller's root account.
+   * Optional sub-account context. When provided, a current member may read the
+   * policy attached to that sub-account; the owner may also read another policy
+   * owned by their root account. When omitted, the policy must be owned by the
+   * caller's root account.
    *
    * @generated from field: optional fixed64 subaccount_id = 2;
    */

package/dist/gen/auth/v1/policies_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policies_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/policies_pb.ts"],"mappings":";;;;;;;;;cAca,uBAAuB;;;;;;KAQxB,cAAc;;;;;cAOb,mBAAmB,WAAW;;;;;;;;aAU/B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,yBAAyB,QAAQ;;;;;;KAQlC,qBAAqB;;;;;;EAM/B;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,iBAAiB;;;;;;EAM3B;;;;;;cAOW,sBAAsB,WAAW;;;;;;KAQlC,uBAAuB;;;;;;EAMjC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;;EAQb,iBAAiB;;;;;;;EAQjB,SAAS;;;;;;;EAQT;;;;;;;EAQA;;;;;;;;EASA;;;;;;;EAQA;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA,WAAW;;;;;;;EAQX,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ;;;;;;cAOW,4BAA4B,WAAW;;;;;;;;KAUxC,gCAAgC;;;;;;;EAO1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;;KASjD,iCAAiC;;;;;;EAM3C,UAAU;;;;;;cAOC,sCAAsC,WAAW;;;;;;KAQlD,6BAA6B;;;;;;EAMvC;;;;;;;EAQA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;;EAMxC,SAAS;;;;;;cAOE,mCAAmC,WAAW;;;;;;KAQ/C,uBAAuB;;;;;;;EAOjC;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;EAOb,iBAAiB;;;;;;;;EASjB,SAAS;;;;;;;;EAST;;;;;;;EAQA;;;;;;;;EASA;;;;;;EAOA;;;;;;EAOA,WAAW;;;;;;EAOX,YAAY;;;;;;cAOD,4BAA4B,WAAW;;;;;;;KASxC,gCAAgC;;;;;;EAM1C,SAAS;;;;;;EAOT;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C,SAAS;;;;;;cAOE,sCAAsC,WAAW;;;;;;;KASlD,gCAAgC;;;;;;EAM1C;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;;EAQb;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C,SAAS;;;;;;cAOE,sCAAsC,WAAW;;;;;;;KASlD,gCAAgC;;;;;;EAM1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;;KASlD,6BAA6B;;;;;;EAMvC;;;;;;;EAQA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;cAO7B,mCAAmC,WAAW;;;;;;;KAS/C,gBAAgB;;;;;;EAM1B;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;;EAQb,SAAS;;;;;;;;;EAUT,iBAAiB;;;;;;;EAQjB;;;;;;;EAQA;;;;;;EAOA,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ;;;;;;cAOW,qBAAqB,WAAW;;;;;;;;KAUjC,yBAAyB;;;;;;;EAOnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;KAQ3C,sBAAsB;;;;;;EAMhC;;;;;;;EAQA;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;KAQxC,gBAAgB;;;;;;;EAO1B;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;EAOb,iBAAiB;;;;;;;EAQjB,SAAS;;;;;;EAOT;;;;;;cAOW,qBAAqB,WAAW;;;;;;KAQjC,yBAAyB;;;;;;EAMnC,SAAS;;;;;;;;EAST;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;;KAS3C,yBAAyB;;;;;;EAMnC;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;;EAQb;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;EAMnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;;EAOnC;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;;;aAU3C;;;;;;;EAOV;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;cAMW,oBAAoB,QAAQ;;;;;;cAQ5B,eAAe;;;;;;EAM1B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"policies_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/policies_pb.ts"],"mappings":";;;;;;;;;cAca,uBAAuB;;;;;;KAQxB,cAAc;;;;;cAOb,mBAAmB,WAAW;;;;;;;;aAU/B;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,yBAAyB,QAAQ;;;;;;KAQlC,qBAAqB;;;;;;EAM/B;;;;;;cAOW,0BAA0B,WAAW;;;;;;KAQtC,iBAAiB;;;;;;EAM3B;;;;;;cAOW,sBAAsB,WAAW;;;;;;KAQlC,uBAAuB;;;;;;EAMjC;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;;EAQb,iBAAiB;;;;;;;EAQjB,SAAS;;;;;;;EAQT;;;;;;;EAQA;;;;;;;;EASA;;;;;;;EAQA;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA,WAAW;;;;;;;EAQX,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ;;;;;;cAOW,4BAA4B,WAAW;;;;;;;;KAUxC,gCAAgC;;;;;;;;;EAS1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;;KASjD,iCAAiC;;;;;;EAM3C,UAAU;;;;;;cAOC,sCAAsC,WAAW;;;;;;KAQlD,6BAA6B;;;;;;EAMvC;;;;;;;;;EAUA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;;EAMxC,SAAS;;;;;;cAOE,mCAAmC,WAAW;;;;;;KAQ/C,uBAAuB;;;;;;;EAOjC;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;EAOb,iBAAiB;;;;;;;;EASjB,SAAS;;;;;;;;EAST;;;;;;;EAQA;;;;;;;;EASA;;;;;;EAOA;;;;;;EAOA,WAAW;;;;;;EAOX,YAAY;;;;;;cAOD,4BAA4B,WAAW;;;;;;;KASxC,gCAAgC;;;;;;EAM1C,SAAS;;;;;;EAOT;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C,SAAS;;;;;;cAOE,sCAAsC,WAAW;;;;;;;KASlD,gCAAgC;;;;;;EAM1C;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;;EAQb;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;;EAM3C,SAAS;;;;;;cAOE,sCAAsC,WAAW;;;;;;;KASlD,gCAAgC;;;;;;EAM1C;;;;;;cAOW,qCAAqC,WAAW;;;;;;KAQjD,iCAAiC;;;;;cAOhC,sCAAsC,WAAW;;;;;;;KASlD,6BAA6B;;;;;;EAMvC;;;;;;;EAQA;;;;;;cAOW,kCAAkC,WAAW;;;;;;KAQ9C,8BAA8B;;;;;cAO7B,mCAAmC,WAAW;;;;;;;KAS/C,gBAAgB;;;;;;EAM1B;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;;EAQb,SAAS;;;;;;;;;EAUT,iBAAiB;;;;;;;EAQjB;;;;;;;EAQA;;;;;;EAOA,YAAY;;;;;;EAOZ,YAAY;;;;;;EAOZ;;;;;;cAOW,qBAAqB,WAAW;;;;;;;;KAUjC,yBAAyB;;;;;;;EAOnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;KAQ3C,sBAAsB;;;;;;EAMhC;;;;;;;EAQA;;;;;;cAOW,2BAA2B,WAAW;;;;;;KAQvC,uBAAuB;;;;;;EAMjC,SAAS;;;;;;cAOE,4BAA4B,WAAW;;;;;;KAQxC,gBAAgB;;;;;;;EAO1B;;;;;;EAOA;;;;;;EAOA,aAAa;;;;;;EAOb,iBAAiB;;;;;;;EAQjB,SAAS;;;;;;EAOT;;;;;;cAOW,qBAAqB,WAAW;;;;;;KAQjC,yBAAyB;;;;;;EAMnC,SAAS;;;;;;;;EAST;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;;KAS3C,yBAAyB;;;;;;EAMnC;;;;;;EAOA,SAAS;;;;;;;EAQT,aAAa;;;;;;;EAQb;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;;EAMpC,SAAS;;;;;;cAOE,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;EAMnC;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;KAQ3C,yBAAyB;;;;;;;EAOnC;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;KAQ1C,0BAA0B;;;;;cAOzB,+BAA+B,WAAW;;;;;;;;aAU3C;;;;;;;EAOV;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;;EAQA;;;;;cAMW,oBAAoB,QAAQ;;;;;;cAQ5B,eAAe;;;;;;EAM1B;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}