Client
Client MFA, faucet, and session types
Input and result shapes for login-time MFA, faucet, and settled-session operations.
These shapes are part of the documented Para SDK surface.
The uri is an otpauth URI for an authenticator app. Show backupCodes exactly once at enrollment.