import { AuthApiTransports } from "../../shared/transports.js";
import { PolyesterMutationOptions, PolyesterRequestOptions } from "../../shared/request-options.js";
import { BeginMfaChallengeInput, BeginMfaChallengeResult, BeginPasskeyEnrollmentInput, BeginPasskeyEnrollmentResult, BeginTotpEnrollmentInput, BeginTotpEnrollmentResult, ClaimFreshStepUpInput, ClaimFreshStepUpResult, CompleteMfaChallengeResult, ConsumeFreshStepUpInput, DeleteMfaFactorInput, FinishPasskeyChallengeInput, FinishPasskeyEnrollmentInput, FinishPasskeyEnrollmentResult, FinishTotpEnrollmentInput, FinishTotpEnrollmentResult, ListMfaFactorsResult, RegenerateRecoveryCodesInput, RegenerateRecoveryCodesResult, ReleaseFreshStepUpInput, UpdateMfaFactorInput, UpdateMfaFactorResult, VerifyRecoveryCodeChallengeInput, VerifyTotpChallengeInput } from "./mfa.schemas.js";
//#region src/services/mfa/mfa.d.ts
/**
 * Manages MFA enrollment, challenges, recovery codes, session elevation, and fresh step-up proofs.
 */
declare class MfaService {
  #private;
  constructor(transports: AuthApiTransports);
  /**
   * Returns the caller's enrolled MFA factors, oldest first, and whether unused recovery codes exist.
   */
  listFactors(options?: PolyesterRequestOptions): Promise<ListMfaFactorsResult>;
  /**
   * Creates an authenticator-app enrollment challenge and returns the secret, QR-compatible otpauth URI, enrollment ID, and expiry.
   */
  beginTotpEnrollment(input: BeginTotpEnrollmentInput, options?: PolyesterMutationOptions): Promise<BeginTotpEnrollmentResult>;
  /**
   * Verifies the first authenticator code, activates the factor, and returns one-time recovery codes that are only shown in this response, plus MFA-elevated session details and access token.
   */
  finishTotpEnrollment(input: FinishTotpEnrollmentInput, options?: PolyesterRequestOptions): Promise<FinishTotpEnrollmentResult>;
  /**
   * Creates passkey registration options for a new factor and returns the enrollment challenge and expiry.
   */
  beginPasskeyEnrollment(input: BeginPasskeyEnrollmentInput, options?: PolyesterMutationOptions): Promise<BeginPasskeyEnrollmentResult>;
  /**
   * Verifies the passkey registration response, activates the factor, and returns one-time recovery codes plus MFA-elevated session details and access token.
   */
  finishPasskeyEnrollment(input: FinishPasskeyEnrollmentInput, options?: PolyesterRequestOptions): Promise<FinishPasskeyEnrollmentResult>;
  /**
   * Starts an MFA challenge for either session elevation or fresh step-up and returns allowed factor types plus passkey request options when available.
   */
  beginChallenge(input: BeginMfaChallengeInput, options?: PolyesterRequestOptions): Promise<BeginMfaChallengeResult>;
  /**
   * Completes a challenge with an authenticator code, returning either an elevated access token or a fresh step-up token depending on the challenge purpose.
   */
  verifyTotpChallenge(input: VerifyTotpChallengeInput, options?: PolyesterRequestOptions): Promise<CompleteMfaChallengeResult>;
  /**
   * Completes a challenge with a passkey authentication response, returning session assurance and the relevant token for the challenge purpose.
   */
  finishPasskeyChallenge(input: FinishPasskeyChallengeInput, options?: PolyesterRequestOptions): Promise<CompleteMfaChallengeResult>;
  /**
   * Consumes a one-time recovery code to complete session elevation or fresh step-up.
   */
  verifyRecoveryCodeChallenge(input: VerifyRecoveryCodeChallengeInput, options?: PolyesterRequestOptions): Promise<CompleteMfaChallengeResult>;
  /**
   * Removes an enrolled MFA factor by factor ID; backend policy may require fresh step-up for this protected action.
   */
  deleteFactor(input: DeleteMfaFactorInput, options?: PolyesterMutationOptions): Promise<void>;
  /**
   * Updates an MFA factor label, where an empty label clears the display name.
   */
  updateFactor(input: UpdateMfaFactorInput, options?: PolyesterMutationOptions): Promise<UpdateMfaFactorResult>;
  /**
   * Rotates recovery codes after step-up and returns the new one-time codes, which are only available in this response.
   */
  regenerateRecoveryCodes(input?: RegenerateRecoveryCodesInput, options?: PolyesterMutationOptions): Promise<RegenerateRecoveryCodesResult>;
  /**
   * Binds a fresh step-up proof to one protected request using a request ID, action type, and subject, returning a claim nonce and expiry.
   */
  claimFreshStepUp(input: ClaimFreshStepUpInput, options?: PolyesterRequestOptions): Promise<ClaimFreshStepUpResult>;
  /**
   * Marks a claimed fresh step-up proof as used after the protected request succeeds, echoing the original request binding and claim nonce.
   */
  consumeFreshStepUp(input: ConsumeFreshStepUpInput, options?: PolyesterRequestOptions): Promise<void>;
  /**
   * Releases a claimed fresh step-up proof when the protected request is abandoned or fails, preserving the original request binding and reason.
   */
  releaseFreshStepUp(input: ReleaseFreshStepUpInput, options?: PolyesterRequestOptions): Promise<void>;
}
//#endregion
export { MfaService };
//# sourceMappingURL=mfa.d.ts.map