import { JsonObject, Message } from "@bufbuild/protobuf";
import { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
import { Timestamp } from "@bufbuild/protobuf/wkt";
declare namespace mfa_pb_d_exports {
  export { BeginMFAChallengeRequest, BeginMFAChallengeRequestSchema, BeginMFAChallengeResponse, BeginMFAChallengeResponseSchema, BeginPasskeyEnrollmentRequest, BeginPasskeyEnrollmentRequestSchema, BeginPasskeyEnrollmentResponse, BeginPasskeyEnrollmentResponseSchema, BeginTOTPEnrollmentRequest, BeginTOTPEnrollmentRequestSchema, BeginTOTPEnrollmentResponse, BeginTOTPEnrollmentResponseSchema, ClaimFreshStepUpRequest, ClaimFreshStepUpRequestSchema, ClaimFreshStepUpResponse, ClaimFreshStepUpResponseSchema, CompleteMFAChallengeResponse, CompleteMFAChallengeResponseSchema, ConsumeFreshStepUpRequest, ConsumeFreshStepUpRequestSchema, ConsumeFreshStepUpResponse, ConsumeFreshStepUpResponseSchema, DeleteMFAFactorRequest, DeleteMFAFactorRequestSchema, DeleteMFAFactorResponse, DeleteMFAFactorResponseSchema, FinishPasskeyChallengeRequest, FinishPasskeyChallengeRequestSchema, FinishPasskeyEnrollmentRequest, FinishPasskeyEnrollmentRequestSchema, FinishPasskeyEnrollmentResponse, FinishPasskeyEnrollmentResponseSchema, FinishTOTPEnrollmentRequest, FinishTOTPEnrollmentRequestSchema, FinishTOTPEnrollmentResponse, FinishTOTPEnrollmentResponseSchema, ListMFAFactorsRequest, ListMFAFactorsRequestSchema, ListMFAFactorsResponse, ListMFAFactorsResponseSchema, MFAChallengePurpose, MFAChallengePurposeSchema, MFAFactor, MFAFactorSchema, MFAFactorType, MFAFactorTypeSchema, MFAService, RegenerateRecoveryCodesRequest, RegenerateRecoveryCodesRequestSchema, RegenerateRecoveryCodesResponse, RegenerateRecoveryCodesResponseSchema, ReleaseFreshStepUpRequest, ReleaseFreshStepUpRequestSchema, ReleaseFreshStepUpResponse, ReleaseFreshStepUpResponseSchema, SessionInfo, SessionInfoSchema, SessionLevel, SessionLevelSchema, UpdateMFAFactorRequest, UpdateMFAFactorRequestSchema, UpdateMFAFactorResponse, UpdateMFAFactorResponseSchema, VerifyRecoveryCodeChallengeRequest, VerifyRecoveryCodeChallengeRequestSchema, VerifyTOTPChallengeRequest, VerifyTOTPChallengeRequestSchema, file_auth_v1_mfa };
}
/**
 * Describes the file auth/v1/mfa.proto.
 */
declare const file_auth_v1_mfa: GenFile;
/**
 * Current assurance details for an interactive session.
 *
 * @generated from message auth.v1.SessionInfo
 */
type SessionInfo = Message<"auth.v1.SessionInfo"> & {
  /**
   * Stable session identifier shared by the primary and MFA-elevated tokens.
   *
   * @generated from field: string session_id = 1;
   */
  sessionId: string;
  /**
   * Assurance level represented by this session response.
   *
   * @generated from field: auth.v1.SessionLevel session_level = 2;
   */
  sessionLevel: SessionLevel;
  /**
   * Authentication methods used for this session state, such as wallet, TOTP, passkey, or recovery code. Maximum 8 unique values.
   *
   * @generated from field: repeated string authentication_methods = 3;
   */
  authenticationMethods: string[];
  /**
   * Time when the session was authenticated or elevated.
   *
   * @generated from field: google.protobuf.Timestamp auth_time = 4;
   */
  authTime?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.SessionInfo.
 * Use `create(SessionInfoSchema)` to create a new message.
 */
declare const SessionInfoSchema: GenMessage<SessionInfo>;
/**
 * Enrolled MFA factor metadata visible to the account owner.
 *
 * @generated from message auth.v1.MFAFactor
 */
type MFAFactor = Message<"auth.v1.MFAFactor"> & {
  /**
   * MFA factor identifier. Format: "mfa_" followed by 32 lowercase hex characters.
   *
   * @generated from field: string factor_id = 1;
   */
  factorId: string;
  /**
   * Type of enrolled factor.
   *
   * @generated from field: auth.v1.MFAFactorType factor_type = 2;
   */
  factorType: MFAFactorType;
  /**
   * Human-friendly label for the factor. Empty when no label is set.
   *
   * @generated from field: string label = 3;
   */
  label: string;
  /**
   * Time when the factor was enrolled.
   *
   * @generated from field: google.protobuf.Timestamp created_at = 4;
   */
  createdAt?: Timestamp | undefined;
  /**
   * Time when the factor was last used. Empty if the factor has not been used.
   *
   * @generated from field: google.protobuf.Timestamp last_used_at = 5;
   */
  lastUsedAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.MFAFactor.
 * Use `create(MFAFactorSchema)` to create a new message.
 */
declare const MFAFactorSchema: GenMessage<MFAFactor>;
/**
 * Request to list the caller's MFA factors.
 *
 * @generated from message auth.v1.ListMFAFactorsRequest
 */
type ListMFAFactorsRequest = Message<"auth.v1.ListMFAFactorsRequest"> & {};
/**
 * Describes the message auth.v1.ListMFAFactorsRequest.
 * Use `create(ListMFAFactorsRequestSchema)` to create a new message.
 */
declare const ListMFAFactorsRequestSchema: GenMessage<ListMFAFactorsRequest>;
/**
 * Response containing the caller's enrolled MFA factors.
 *
 * @generated from message auth.v1.ListMFAFactorsResponse
 */
type ListMFAFactorsResponse = Message<"auth.v1.ListMFAFactorsResponse"> & {
  /**
   * Enrolled MFA factors, ordered oldest first.
   *
   * @generated from field: repeated auth.v1.MFAFactor factors = 1;
   */
  factors: MFAFactor[];
  /**
   * True when the caller has at least one unused recovery code.
   *
   * @generated from field: bool has_recovery_codes = 2;
   */
  hasRecoveryCodes: boolean;
};
/**
 * Describes the message auth.v1.ListMFAFactorsResponse.
 * Use `create(ListMFAFactorsResponseSchema)` to create a new message.
 */
declare const ListMFAFactorsResponseSchema: GenMessage<ListMFAFactorsResponse>;
/**
 * Request to begin authenticator-app enrollment.
 *
 * @generated from message auth.v1.BeginTOTPEnrollmentRequest
 */
type BeginTOTPEnrollmentRequest = Message<"auth.v1.BeginTOTPEnrollmentRequest"> & {
  /**
   * Optional human-friendly label. Defaults to "Authenticator App" when empty. Maximum 128 characters.
   *
   * @generated from field: string label = 1;
   */
  label: string;
};
/**
 * Describes the message auth.v1.BeginTOTPEnrollmentRequest.
 * Use `create(BeginTOTPEnrollmentRequestSchema)` to create a new message.
 */
declare const BeginTOTPEnrollmentRequestSchema: GenMessage<BeginTOTPEnrollmentRequest>;
/**
 * Response containing the authenticator-app enrollment secret.
 *
 * @generated from message auth.v1.BeginTOTPEnrollmentResponse
 */
type BeginTOTPEnrollmentResponse = Message<"auth.v1.BeginTOTPEnrollmentResponse"> & {
  /**
   * Enrollment challenge identifier. Format: "mfa_" followed by 32 lowercase hex characters.
   *
   * @generated from field: string enrollment_id = 1;
   */
  enrollmentId: string;
  /**
   * Shared secret to enter into an authenticator app. Returned only when enrollment begins.
   *
   * @generated from field: string secret = 2;
   */
  secret: string;
  /**
   * Authenticator-app setup URI for QR-code display. Returned only when enrollment begins.
   *
   * @generated from field: string otpauth_uri = 3;
   */
  otpauthUri: string;
  /**
   * Time when this enrollment challenge expires.
   *
   * @generated from field: google.protobuf.Timestamp expires_at = 4;
   */
  expiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.BeginTOTPEnrollmentResponse.
 * Use `create(BeginTOTPEnrollmentResponseSchema)` to create a new message.
 */
declare const BeginTOTPEnrollmentResponseSchema: GenMessage<BeginTOTPEnrollmentResponse>;
/**
 * Request to finish authenticator-app enrollment.
 *
 * @generated from message auth.v1.FinishTOTPEnrollmentRequest
 */
type FinishTOTPEnrollmentRequest = Message<"auth.v1.FinishTOTPEnrollmentRequest"> & {
  /**
   * Enrollment challenge identifier returned by BeginTOTPEnrollment.
   *
   * @generated from field: string enrollment_id = 1;
   */
  enrollmentId: string;
  /**
   * Current 6 to 8 digit code from the authenticator app.
   *
   * @generated from field: string code = 2;
   */
  code: string;
};
/**
 * Describes the message auth.v1.FinishTOTPEnrollmentRequest.
 * Use `create(FinishTOTPEnrollmentRequestSchema)` to create a new message.
 */
declare const FinishTOTPEnrollmentRequestSchema: GenMessage<FinishTOTPEnrollmentRequest>;
/**
 * Response returned after authenticator-app enrollment succeeds.
 *
 * @generated from message auth.v1.FinishTOTPEnrollmentResponse
 */
type FinishTOTPEnrollmentResponse = Message<"auth.v1.FinishTOTPEnrollmentResponse"> & {
  /**
   * Newly enrolled MFA factor.
   *
   * @generated from field: auth.v1.MFAFactor factor = 1;
   */
  factor?: MFAFactor | undefined;
  /**
   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.
   *
   * @generated from field: repeated string recovery_codes = 2;
   */
  recoveryCodes: string[];
  /**
   * MFA-elevated session details after successful enrollment.
   *
   * @generated from field: auth.v1.SessionInfo session = 3;
   */
  session?: SessionInfo | undefined;
  /**
   * MFA-elevated session token issued after successful enrollment.
   *
   * @generated from field: string access_token = 4;
   */
  accessToken: string;
  /**
   * Time when access_token expires.
   *
   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;
   */
  accessTokenExpiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.FinishTOTPEnrollmentResponse.
 * Use `create(FinishTOTPEnrollmentResponseSchema)` to create a new message.
 */
declare const FinishTOTPEnrollmentResponseSchema: GenMessage<FinishTOTPEnrollmentResponse>;
/**
 * Request to begin passkey enrollment.
 *
 * @generated from message auth.v1.BeginPasskeyEnrollmentRequest
 */
type BeginPasskeyEnrollmentRequest = Message<"auth.v1.BeginPasskeyEnrollmentRequest"> & {
  /**
   * Optional human-friendly label for the passkey. Maximum 128 characters.
   *
   * @generated from field: string label = 1;
   */
  label: string;
};
/**
 * Describes the message auth.v1.BeginPasskeyEnrollmentRequest.
 * Use `create(BeginPasskeyEnrollmentRequestSchema)` to create a new message.
 */
declare const BeginPasskeyEnrollmentRequestSchema: GenMessage<BeginPasskeyEnrollmentRequest>;
/**
 * Response containing passkey enrollment options.
 *
 * @generated from message auth.v1.BeginPasskeyEnrollmentResponse
 */
type BeginPasskeyEnrollmentResponse = Message<"auth.v1.BeginPasskeyEnrollmentResponse"> & {
  /**
   * Enrollment challenge identifier. Format: "mfa_" followed by 32 lowercase hex characters.
   *
   * @generated from field: string enrollment_id = 1;
   */
  enrollmentId: string;
  /**
   * Passkey creation options to pass to the browser or device authenticator.
   *
   * @generated from field: google.protobuf.Struct public_key = 2;
   */
  publicKey?: JsonObject | undefined;
  /**
   * Time when this enrollment challenge expires.
   *
   * @generated from field: google.protobuf.Timestamp expires_at = 3;
   */
  expiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.BeginPasskeyEnrollmentResponse.
 * Use `create(BeginPasskeyEnrollmentResponseSchema)` to create a new message.
 */
declare const BeginPasskeyEnrollmentResponseSchema: GenMessage<BeginPasskeyEnrollmentResponse>;
/**
 * Request to finish passkey enrollment.
 *
 * @generated from message auth.v1.FinishPasskeyEnrollmentRequest
 */
type FinishPasskeyEnrollmentRequest = Message<"auth.v1.FinishPasskeyEnrollmentRequest"> & {
  /**
   * Enrollment challenge identifier returned by BeginPasskeyEnrollment.
   *
   * @generated from field: string enrollment_id = 1;
   */
  enrollmentId: string;
  /**
   * Passkey creation response returned by the browser or device authenticator.
   *
   * @generated from field: google.protobuf.Struct credential = 2;
   */
  credential?: JsonObject | undefined;
};
/**
 * Describes the message auth.v1.FinishPasskeyEnrollmentRequest.
 * Use `create(FinishPasskeyEnrollmentRequestSchema)` to create a new message.
 */
declare const FinishPasskeyEnrollmentRequestSchema: GenMessage<FinishPasskeyEnrollmentRequest>;
/**
 * Response returned after passkey enrollment succeeds.
 *
 * @generated from message auth.v1.FinishPasskeyEnrollmentResponse
 */
type FinishPasskeyEnrollmentResponse = Message<"auth.v1.FinishPasskeyEnrollmentResponse"> & {
  /**
   * Newly enrolled MFA factor.
   *
   * @generated from field: auth.v1.MFAFactor factor = 1;
   */
  factor?: MFAFactor | undefined;
  /**
   * One-time recovery codes generated for the account. Store these securely; they are only returned in this response.
   *
   * @generated from field: repeated string recovery_codes = 2;
   */
  recoveryCodes: string[];
  /**
   * MFA-elevated session details after successful enrollment.
   *
   * @generated from field: auth.v1.SessionInfo session = 3;
   */
  session?: SessionInfo | undefined;
  /**
   * MFA-elevated session token issued after successful enrollment.
   *
   * @generated from field: string access_token = 4;
   */
  accessToken: string;
  /**
   * Time when access_token expires.
   *
   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 5;
   */
  accessTokenExpiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.FinishPasskeyEnrollmentResponse.
 * Use `create(FinishPasskeyEnrollmentResponseSchema)` to create a new message.
 */
declare const FinishPasskeyEnrollmentResponseSchema: GenMessage<FinishPasskeyEnrollmentResponse>;
/**
 * Request to start an MFA challenge.
 *
 * @generated from message auth.v1.BeginMFAChallengeRequest
 */
type BeginMFAChallengeRequest = Message<"auth.v1.BeginMFAChallengeRequest"> & {
  /**
   * Desired challenge outcome: session elevation or fresh step-up.
   *
   * @generated from field: auth.v1.MFAChallengePurpose purpose = 1;
   */
  purpose: MFAChallengePurpose;
};
/**
 * Describes the message auth.v1.BeginMFAChallengeRequest.
 * Use `create(BeginMFAChallengeRequestSchema)` to create a new message.
 */
declare const BeginMFAChallengeRequestSchema: GenMessage<BeginMFAChallengeRequest>;
/**
 * Response returned after starting an MFA challenge.
 *
 * @generated from message auth.v1.BeginMFAChallengeResponse
 */
type BeginMFAChallengeResponse = Message<"auth.v1.BeginMFAChallengeResponse"> & {
  /**
   * Challenge identifier to submit when verifying a factor. Format: "mfa_" followed by 32 lowercase hex characters.
   *
   * @generated from field: string challenge_id = 1;
   */
  challengeId: string;
  /**
   * Factor types the caller may use for this challenge. Maximum 8 unique values.
   *
   * @generated from field: repeated auth.v1.MFAFactorType allowed_factor_types = 2;
   */
  allowedFactorTypes: MFAFactorType[];
  /**
   * Passkey request options when passkey verification is available. Empty when passkeys are not available.
   *
   * @generated from field: google.protobuf.Struct public_key = 3;
   */
  publicKey?: JsonObject | undefined;
  /**
   * Time when this challenge expires.
   *
   * @generated from field: google.protobuf.Timestamp expires_at = 4;
   */
  expiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.BeginMFAChallengeResponse.
 * Use `create(BeginMFAChallengeResponseSchema)` to create a new message.
 */
declare const BeginMFAChallengeResponseSchema: GenMessage<BeginMFAChallengeResponse>;
/**
 * Request to verify an MFA challenge with an authenticator-app code.
 *
 * @generated from message auth.v1.VerifyTOTPChallengeRequest
 */
type VerifyTOTPChallengeRequest = Message<"auth.v1.VerifyTOTPChallengeRequest"> & {
  /**
   * Challenge identifier returned by BeginMFAChallenge.
   *
   * @generated from field: string challenge_id = 1;
   */
  challengeId: string;
  /**
   * Current 6 to 8 digit code from the authenticator app.
   *
   * @generated from field: string code = 2;
   */
  code: string;
};
/**
 * Describes the message auth.v1.VerifyTOTPChallengeRequest.
 * Use `create(VerifyTOTPChallengeRequestSchema)` to create a new message.
 */
declare const VerifyTOTPChallengeRequestSchema: GenMessage<VerifyTOTPChallengeRequest>;
/**
 * Request to verify an MFA challenge with a passkey.
 *
 * @generated from message auth.v1.FinishPasskeyChallengeRequest
 */
type FinishPasskeyChallengeRequest = Message<"auth.v1.FinishPasskeyChallengeRequest"> & {
  /**
   * Challenge identifier returned by BeginMFAChallenge.
   *
   * @generated from field: string challenge_id = 1;
   */
  challengeId: string;
  /**
   * Passkey authentication response returned by the browser or device authenticator.
   *
   * @generated from field: google.protobuf.Struct credential = 2;
   */
  credential?: JsonObject | undefined;
};
/**
 * Describes the message auth.v1.FinishPasskeyChallengeRequest.
 * Use `create(FinishPasskeyChallengeRequestSchema)` to create a new message.
 */
declare const FinishPasskeyChallengeRequestSchema: GenMessage<FinishPasskeyChallengeRequest>;
/**
 * Request to verify an MFA challenge with a recovery code.
 *
 * @generated from message auth.v1.VerifyRecoveryCodeChallengeRequest
 */
type VerifyRecoveryCodeChallengeRequest = Message<"auth.v1.VerifyRecoveryCodeChallengeRequest"> & {
  /**
   * Challenge identifier returned by BeginMFAChallenge.
   *
   * @generated from field: string challenge_id = 1;
   */
  challengeId: string;
  /**
   * One-time recovery code. Accepted format is 8 to 64 letters, numbers, or hyphens.
   *
   * @generated from field: string recovery_code = 2;
   */
  recoveryCode: string;
};
/**
 * Describes the message auth.v1.VerifyRecoveryCodeChallengeRequest.
 * Use `create(VerifyRecoveryCodeChallengeRequestSchema)` to create a new message.
 */
declare const VerifyRecoveryCodeChallengeRequestSchema: GenMessage<VerifyRecoveryCodeChallengeRequest>;
/**
 * Response returned after an MFA challenge is completed.
 *
 * @generated from message auth.v1.CompleteMFAChallengeResponse
 */
type CompleteMFAChallengeResponse = Message<"auth.v1.CompleteMFAChallengeResponse"> & {
  /**
   * MFA-elevated session details after completing the challenge.
   *
   * @generated from field: auth.v1.SessionInfo session = 1;
   */
  session?: SessionInfo | undefined;
  /**
   * MFA-elevated session token returned after every successful challenge.
   *
   * @generated from field: string access_token = 2;
   */
  accessToken: string;
  /**
   * Time when access_token expires.
   *
   * @generated from field: google.protobuf.Timestamp access_token_expires_at = 3;
   */
  accessTokenExpiresAt?: Timestamp | undefined;
  /**
   * Fresh step-up token returned for fresh step-up challenges. Empty for session-elevation challenges.
   *
   * @generated from field: string step_up_token = 4;
   */
  stepUpToken: string;
  /**
   * Time when step_up_token expires. Empty when no step_up_token is returned.
   *
   * @generated from field: google.protobuf.Timestamp step_up_expires_at = 5;
   */
  stepUpExpiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.CompleteMFAChallengeResponse.
 * Use `create(CompleteMFAChallengeResponseSchema)` to create a new message.
 */
declare const CompleteMFAChallengeResponseSchema: GenMessage<CompleteMFAChallengeResponse>;
/**
 * Request to bind a fresh step-up proof to one protected request.
 *
 * @generated from message auth.v1.ClaimFreshStepUpRequest
 */
type ClaimFreshStepUpRequest = Message<"auth.v1.ClaimFreshStepUpRequest"> & {
  /**
   * Client-generated request identifier for the protected request. Maximum 128 characters.
   *
   * @generated from field: string request_id = 1;
   */
  requestId: string;
  /**
   * Product action being protected, such as a withdrawal or security setting change. Maximum 64 characters.
   *
   * @generated from field: string action_type = 2;
   */
  actionType: string;
  /**
   * Product subject for the protected action, such as the target account, destination, or resource identifier. Maximum 128 characters.
   *
   * @generated from field: string subject = 3;
   */
  subject: string;
};
/**
 * Describes the message auth.v1.ClaimFreshStepUpRequest.
 * Use `create(ClaimFreshStepUpRequestSchema)` to create a new message.
 */
declare const ClaimFreshStepUpRequestSchema: GenMessage<ClaimFreshStepUpRequest>;
/**
 * Response returned after a fresh step-up proof is claimed.
 *
 * @generated from message auth.v1.ClaimFreshStepUpResponse
 */
type ClaimFreshStepUpResponse = Message<"auth.v1.ClaimFreshStepUpResponse"> & {
  /**
   * Fresh step-up proof identifier. Format: "mfa_" followed by 32 lowercase hex characters.
   *
   * @generated from field: string step_up_id = 1;
   */
  stepUpId: string;
  /**
   * One-time nonce that must be echoed when consuming or releasing the claim.
   *
   * @generated from field: string claim_nonce = 2;
   */
  claimNonce: string;
  /**
   * Time when this claim expires if it is not consumed or released.
   *
   * @generated from field: google.protobuf.Timestamp claim_expires_at = 3;
   */
  claimExpiresAt?: Timestamp | undefined;
};
/**
 * Describes the message auth.v1.ClaimFreshStepUpResponse.
 * Use `create(ClaimFreshStepUpResponseSchema)` to create a new message.
 */
declare const ClaimFreshStepUpResponseSchema: GenMessage<ClaimFreshStepUpResponse>;
/**
 * Request to consume a claimed fresh step-up proof after the protected request succeeds.
 *
 * @generated from message auth.v1.ConsumeFreshStepUpRequest
 */
type ConsumeFreshStepUpRequest = Message<"auth.v1.ConsumeFreshStepUpRequest"> & {
  /**
   * Fresh step-up proof identifier returned by ClaimFreshStepUp.
   *
   * @generated from field: string step_up_id = 1;
   */
  stepUpId: string;
  /**
   * Client-generated request identifier used when the proof was claimed.
   *
   * @generated from field: string request_id = 2;
   */
  requestId: string;
  /**
   * Product action type used when the proof was claimed.
   *
   * @generated from field: string action_type = 3;
   */
  actionType: string;
  /**
   * Product subject used when the proof was claimed.
   *
   * @generated from field: string subject = 4;
   */
  subject: string;
  /**
   * One-time nonce returned by ClaimFreshStepUp.
   *
   * @generated from field: string claim_nonce = 5;
   */
  claimNonce: string;
};
/**
 * Describes the message auth.v1.ConsumeFreshStepUpRequest.
 * Use `create(ConsumeFreshStepUpRequestSchema)` to create a new message.
 */
declare const ConsumeFreshStepUpRequestSchema: GenMessage<ConsumeFreshStepUpRequest>;
/**
 * Empty response returned after a fresh step-up proof is consumed.
 *
 * @generated from message auth.v1.ConsumeFreshStepUpResponse
 */
type ConsumeFreshStepUpResponse = Message<"auth.v1.ConsumeFreshStepUpResponse"> & {};
/**
 * Describes the message auth.v1.ConsumeFreshStepUpResponse.
 * Use `create(ConsumeFreshStepUpResponseSchema)` to create a new message.
 */
declare const ConsumeFreshStepUpResponseSchema: GenMessage<ConsumeFreshStepUpResponse>;
/**
 * Request to release a claimed fresh step-up proof when the protected request does not complete.
 *
 * @generated from message auth.v1.ReleaseFreshStepUpRequest
 */
type ReleaseFreshStepUpRequest = Message<"auth.v1.ReleaseFreshStepUpRequest"> & {
  /**
   * Fresh step-up proof identifier returned by ClaimFreshStepUp.
   *
   * @generated from field: string step_up_id = 1;
   */
  stepUpId: string;
  /**
   * Client-generated request identifier used when the proof was claimed.
   *
   * @generated from field: string request_id = 2;
   */
  requestId: string;
  /**
   * Product action type used when the proof was claimed.
   *
   * @generated from field: string action_type = 3;
   */
  actionType: string;
  /**
   * Product subject used when the proof was claimed.
   *
   * @generated from field: string subject = 4;
   */
  subject: string;
  /**
   * One-time nonce returned by ClaimFreshStepUp.
   *
   * @generated from field: string claim_nonce = 5;
   */
  claimNonce: string;
  /**
   * Optional product-facing reason for releasing the claim. Maximum 128 characters.
   *
   * @generated from field: string reason = 6;
   */
  reason: string;
};
/**
 * Describes the message auth.v1.ReleaseFreshStepUpRequest.
 * Use `create(ReleaseFreshStepUpRequestSchema)` to create a new message.
 */
declare const ReleaseFreshStepUpRequestSchema: GenMessage<ReleaseFreshStepUpRequest>;
/**
 * Empty response returned after a fresh step-up proof is released.
 *
 * @generated from message auth.v1.ReleaseFreshStepUpResponse
 */
type ReleaseFreshStepUpResponse = Message<"auth.v1.ReleaseFreshStepUpResponse"> & {};
/**
 * Describes the message auth.v1.ReleaseFreshStepUpResponse.
 * Use `create(ReleaseFreshStepUpResponseSchema)` to create a new message.
 */
declare const ReleaseFreshStepUpResponseSchema: GenMessage<ReleaseFreshStepUpResponse>;
/**
 * Request to update an MFA factor label.
 *
 * @generated from message auth.v1.UpdateMFAFactorRequest
 */
type UpdateMFAFactorRequest = Message<"auth.v1.UpdateMFAFactorRequest"> & {
  /**
   * MFA factor identifier to update.
   *
   * @generated from field: string factor_id = 1;
   */
  factorId: string;
  /**
   * New human-friendly label for the factor. Empty clears the label.
   *
   * @generated from field: string label = 2;
   */
  label: string;
};
/**
 * Describes the message auth.v1.UpdateMFAFactorRequest.
 * Use `create(UpdateMFAFactorRequestSchema)` to create a new message.
 */
declare const UpdateMFAFactorRequestSchema: GenMessage<UpdateMFAFactorRequest>;
/**
 * Response containing the updated MFA factor.
 *
 * @generated from message auth.v1.UpdateMFAFactorResponse
 */
type UpdateMFAFactorResponse = Message<"auth.v1.UpdateMFAFactorResponse"> & {
  /**
   * Updated MFA factor metadata.
   *
   * @generated from field: auth.v1.MFAFactor factor = 1;
   */
  factor?: MFAFactor | undefined;
};
/**
 * Describes the message auth.v1.UpdateMFAFactorResponse.
 * Use `create(UpdateMFAFactorResponseSchema)` to create a new message.
 */
declare const UpdateMFAFactorResponseSchema: GenMessage<UpdateMFAFactorResponse>;
/**
 * Request to delete an MFA factor.
 *
 * @generated from message auth.v1.DeleteMFAFactorRequest
 */
type DeleteMFAFactorRequest = Message<"auth.v1.DeleteMFAFactorRequest"> & {
  /**
   * MFA factor identifier to delete.
   *
   * @generated from field: string factor_id = 1;
   */
  factorId: string;
};
/**
 * Describes the message auth.v1.DeleteMFAFactorRequest.
 * Use `create(DeleteMFAFactorRequestSchema)` to create a new message.
 */
declare const DeleteMFAFactorRequestSchema: GenMessage<DeleteMFAFactorRequest>;
/**
 * Empty response returned after an MFA factor is deleted.
 *
 * @generated from message auth.v1.DeleteMFAFactorResponse
 */
type DeleteMFAFactorResponse = Message<"auth.v1.DeleteMFAFactorResponse"> & {};
/**
 * Describes the message auth.v1.DeleteMFAFactorResponse.
 * Use `create(DeleteMFAFactorResponseSchema)` to create a new message.
 */
declare const DeleteMFAFactorResponseSchema: GenMessage<DeleteMFAFactorResponse>;
/**
 * Request to rotate recovery codes.
 *
 * @generated from message auth.v1.RegenerateRecoveryCodesRequest
 */
type RegenerateRecoveryCodesRequest = Message<"auth.v1.RegenerateRecoveryCodesRequest"> & {};
/**
 * Describes the message auth.v1.RegenerateRecoveryCodesRequest.
 * Use `create(RegenerateRecoveryCodesRequestSchema)` to create a new message.
 */
declare const RegenerateRecoveryCodesRequestSchema: GenMessage<RegenerateRecoveryCodesRequest>;
/**
 * Response containing newly generated recovery codes.
 *
 * @generated from message auth.v1.RegenerateRecoveryCodesResponse
 */
type RegenerateRecoveryCodesResponse = Message<"auth.v1.RegenerateRecoveryCodesResponse"> & {
  /**
   * New one-time recovery codes. Store these securely; they are only returned in this response.
   *
   * @generated from field: repeated string recovery_codes = 1;
   */
  recoveryCodes: string[];
};
/**
 * Describes the message auth.v1.RegenerateRecoveryCodesResponse.
 * Use `create(RegenerateRecoveryCodesResponseSchema)` to create a new message.
 */
declare const RegenerateRecoveryCodesResponseSchema: GenMessage<RegenerateRecoveryCodesResponse>;
/**
 * Session assurance level for the current interactive authentication context.
 *
 * @generated from enum auth.v1.SessionLevel
 */
declare enum SessionLevel {
  /**
   * No session assurance level was specified.
   *
   * @generated from enum value: SESSION_LEVEL_UNSPECIFIED = 0;
   */
  SESSION_LEVEL_UNSPECIFIED = 0,
  /**
   * Primary login has completed, but MFA has not elevated this session.
   *
   * @generated from enum value: PRIMARY_AUTHENTICATED = 1;
   */
  PRIMARY_AUTHENTICATED = 1,
  /**
   * MFA has elevated this session for ordinary protected account activity.
   *
   * @generated from enum value: MFA_ELEVATED = 2;
   */
  MFA_ELEVATED = 2,
  /**
   * A short-lived proof for one high-risk action.
   *
   * @generated from enum value: FRESH_STEP_UP = 3;
   */
  FRESH_STEP_UP = 3
}
/**
 * Describes the enum auth.v1.SessionLevel.
 */
declare const SessionLevelSchema: GenEnum<SessionLevel>;
/**
 * Type of MFA factor or one-time recovery method.
 *
 * @generated from enum auth.v1.MFAFactorType
 */
declare enum MFAFactorType {
  /**
   * No MFA factor type was specified.
   *
   * @generated from enum value: MFA_FACTOR_TYPE_UNSPECIFIED = 0;
   */
  MFA_FACTOR_TYPE_UNSPECIFIED = 0,
  /**
   * Time-based one-time password from an authenticator app.
   *
   * @generated from enum value: MFA_FACTOR_TYPE_TOTP = 1;
   */
  MFA_FACTOR_TYPE_TOTP = 1,
  /**
   * Passkey factor using device or hardware-key authentication.
   *
   * @generated from enum value: MFA_FACTOR_TYPE_PASSKEY = 2;
   */
  MFA_FACTOR_TYPE_PASSKEY = 2,
  /**
   * One-time recovery code.
   *
   * @generated from enum value: MFA_FACTOR_TYPE_RECOVERY_CODE = 3;
   */
  MFA_FACTOR_TYPE_RECOVERY_CODE = 3
}
/**
 * Describes the enum auth.v1.MFAFactorType.
 */
declare const MFAFactorTypeSchema: GenEnum<MFAFactorType>;
/**
 * Reason a user is completing an MFA challenge.
 *
 * @generated from enum auth.v1.MFAChallengePurpose
 */
declare enum MFAChallengePurpose {
  /**
   * No MFA challenge purpose was specified.
   *
   * @generated from enum value: MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0;
   */
  MFA_CHALLENGE_PURPOSE_UNSPECIFIED = 0,
  /**
   * Elevates the current session after successful MFA.
   *
   * @generated from enum value: MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1;
   */
  MFA_CHALLENGE_PURPOSE_SESSION_ELEVATION = 1,
  /**
   * Creates a short-lived proof for one high-risk action.
   *
   * @generated from enum value: MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2;
   */
  MFA_CHALLENGE_PURPOSE_FRESH_STEP_UP = 2
}
/**
 * Describes the enum auth.v1.MFAChallengePurpose.
 */
declare const MFAChallengePurposeSchema: GenEnum<MFAChallengePurpose>;
/**
 * MFA management service for enrollment, challenges, fresh step-up proofs, and recovery codes.
 *
 * @generated from service auth.v1.MFAService
 */
declare const MFAService: GenService<{
  /**
   * List the caller's enrolled MFA factors.
   *
   * @generated from rpc auth.v1.MFAService.ListMFAFactors
   */
  listMFAFactors: {
    methodKind: "unary";
    input: typeof ListMFAFactorsRequestSchema;
    output: typeof ListMFAFactorsResponseSchema;
  };
  /**
   * Start authenticator-app enrollment.
   *
   * @generated from rpc auth.v1.MFAService.BeginTOTPEnrollment
   */
  beginTOTPEnrollment: {
    methodKind: "unary";
    input: typeof BeginTOTPEnrollmentRequestSchema;
    output: typeof BeginTOTPEnrollmentResponseSchema;
  };
  /**
   * Finish authenticator-app enrollment.
   *
   * @generated from rpc auth.v1.MFAService.FinishTOTPEnrollment
   */
  finishTOTPEnrollment: {
    methodKind: "unary";
    input: typeof FinishTOTPEnrollmentRequestSchema;
    output: typeof FinishTOTPEnrollmentResponseSchema;
  };
  /**
   * Start passkey enrollment.
   *
   * @generated from rpc auth.v1.MFAService.BeginPasskeyEnrollment
   */
  beginPasskeyEnrollment: {
    methodKind: "unary";
    input: typeof BeginPasskeyEnrollmentRequestSchema;
    output: typeof BeginPasskeyEnrollmentResponseSchema;
  };
  /**
   * Finish passkey enrollment.
   *
   * @generated from rpc auth.v1.MFAService.FinishPasskeyEnrollment
   */
  finishPasskeyEnrollment: {
    methodKind: "unary";
    input: typeof FinishPasskeyEnrollmentRequestSchema;
    output: typeof FinishPasskeyEnrollmentResponseSchema;
  };
  /**
   * Start an MFA challenge for session elevation or fresh step-up.
   *
   * @generated from rpc auth.v1.MFAService.BeginMFAChallenge
   */
  beginMFAChallenge: {
    methodKind: "unary";
    input: typeof BeginMFAChallengeRequestSchema;
    output: typeof BeginMFAChallengeResponseSchema;
  };
  /**
   * Verify an MFA challenge with an authenticator-app code.
   *
   * @generated from rpc auth.v1.MFAService.VerifyTOTPChallenge
   */
  verifyTOTPChallenge: {
    methodKind: "unary";
    input: typeof VerifyTOTPChallengeRequestSchema;
    output: typeof CompleteMFAChallengeResponseSchema;
  };
  /**
   * Verify an MFA challenge with a passkey.
   *
   * @generated from rpc auth.v1.MFAService.FinishPasskeyChallenge
   */
  finishPasskeyChallenge: {
    methodKind: "unary";
    input: typeof FinishPasskeyChallengeRequestSchema;
    output: typeof CompleteMFAChallengeResponseSchema;
  };
  /**
   * Verify an MFA challenge with a recovery code.
   *
   * @generated from rpc auth.v1.MFAService.VerifyRecoveryCodeChallenge
   */
  verifyRecoveryCodeChallenge: {
    methodKind: "unary";
    input: typeof VerifyRecoveryCodeChallengeRequestSchema;
    output: typeof CompleteMFAChallengeResponseSchema;
  };
  /**
   * Update an enrolled MFA factor label.
   *
   * @generated from rpc auth.v1.MFAService.UpdateMFAFactor
   */
  updateMFAFactor: {
    methodKind: "unary";
    input: typeof UpdateMFAFactorRequestSchema;
    output: typeof UpdateMFAFactorResponseSchema;
  };
  /**
   * Delete an enrolled MFA factor.
   *
   * @generated from rpc auth.v1.MFAService.DeleteMFAFactor
   */
  deleteMFAFactor: {
    methodKind: "unary";
    input: typeof DeleteMFAFactorRequestSchema;
    output: typeof DeleteMFAFactorResponseSchema;
  };
  /**
   * Rotate the caller's recovery codes.
   *
   * @generated from rpc auth.v1.MFAService.RegenerateRecoveryCodes
   */
  regenerateRecoveryCodes: {
    methodKind: "unary";
    input: typeof RegenerateRecoveryCodesRequestSchema;
    output: typeof RegenerateRecoveryCodesResponseSchema;
  };
  /**
   * Claim a fresh step-up proof for one protected request.
   *
   * @generated from rpc auth.v1.MFAService.ClaimFreshStepUp
   */
  claimFreshStepUp: {
    methodKind: "unary";
    input: typeof ClaimFreshStepUpRequestSchema;
    output: typeof ClaimFreshStepUpResponseSchema;
  };
  /**
   * Consume a claimed fresh step-up proof after the protected request succeeds.
   *
   * @generated from rpc auth.v1.MFAService.ConsumeFreshStepUp
   */
  consumeFreshStepUp: {
    methodKind: "unary";
    input: typeof ConsumeFreshStepUpRequestSchema;
    output: typeof ConsumeFreshStepUpResponseSchema;
  };
  /**
   * Release a claimed fresh step-up proof when the protected request does not complete.
   *
   * @generated from rpc auth.v1.MFAService.ReleaseFreshStepUp
   */
  releaseFreshStepUp: {
    methodKind: "unary";
    input: typeof ReleaseFreshStepUpRequestSchema;
    output: typeof ReleaseFreshStepUpResponseSchema;
  };
}>;
//#endregion
export { BeginMFAChallengeRequest, BeginMFAChallengeRequestSchema, BeginMFAChallengeResponse, BeginMFAChallengeResponseSchema, BeginPasskeyEnrollmentRequest, BeginPasskeyEnrollmentRequestSchema, BeginPasskeyEnrollmentResponse, BeginPasskeyEnrollmentResponseSchema, BeginTOTPEnrollmentRequest, BeginTOTPEnrollmentRequestSchema, BeginTOTPEnrollmentResponse, BeginTOTPEnrollmentResponseSchema, ClaimFreshStepUpRequest, ClaimFreshStepUpRequestSchema, ClaimFreshStepUpResponse, ClaimFreshStepUpResponseSchema, CompleteMFAChallengeResponse, CompleteMFAChallengeResponseSchema, ConsumeFreshStepUpRequest, ConsumeFreshStepUpRequestSchema, ConsumeFreshStepUpResponse, ConsumeFreshStepUpResponseSchema, DeleteMFAFactorRequest, DeleteMFAFactorRequestSchema, DeleteMFAFactorResponse, DeleteMFAFactorResponseSchema, FinishPasskeyChallengeRequest, FinishPasskeyChallengeRequestSchema, FinishPasskeyEnrollmentRequest, FinishPasskeyEnrollmentRequestSchema, FinishPasskeyEnrollmentResponse, FinishPasskeyEnrollmentResponseSchema, FinishTOTPEnrollmentRequest, FinishTOTPEnrollmentRequestSchema, FinishTOTPEnrollmentResponse, FinishTOTPEnrollmentResponseSchema, ListMFAFactorsRequest, ListMFAFactorsRequestSchema, ListMFAFactorsResponse, ListMFAFactorsResponseSchema, MFAChallengePurpose, MFAChallengePurposeSchema, MFAFactor, MFAFactorSchema, MFAFactorType, MFAFactorTypeSchema, MFAService, RegenerateRecoveryCodesRequest, RegenerateRecoveryCodesRequestSchema, RegenerateRecoveryCodesResponse, RegenerateRecoveryCodesResponseSchema, ReleaseFreshStepUpRequest, ReleaseFreshStepUpRequestSchema, ReleaseFreshStepUpResponse, ReleaseFreshStepUpResponseSchema, SessionInfo, SessionInfoSchema, SessionLevel, SessionLevelSchema, UpdateMFAFactorRequest, UpdateMFAFactorRequestSchema, UpdateMFAFactorResponse, UpdateMFAFactorResponseSchema, VerifyRecoveryCodeChallengeRequest, VerifyRecoveryCodeChallengeRequestSchema, VerifyTOTPChallengeRequest, VerifyTOTPChallengeRequestSchema, file_auth_v1_mfa, mfa_pb_d_exports };
//# sourceMappingURL=mfa_pb.d.ts.map