@faable/auth-sdk 2.5.78 → 2.5.80

package/dist/api/types.d.ts

@@ -220,7 +220,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/flow/identify": {
+    "/login/identify": {
         parameters: {
             query?: never;
             header?: never;
@@ -233,7 +233,7 @@ export interface paths {
          * Leave the identifier-first screen
          * @description Records the identifier the user typed on the hosted `/flow/identify` screen and advances the login to the method chooser. `state` is the id the screen was opened with; it stays valid, so the chooser is reached with the same `?state=`.
          */
-        post: operations["flow/identify"];
+        post: operations["login/identify"];
         delete?: never;
         options?: never;
         head?: never;
@@ -1529,6 +1529,54 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/mfa/challenge/options": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * What the second-factor screen should offer
+         * @description For a login parked on the hosted challenge screen: which factors the user can answer with, in the order and with the default the login flow chose, and whether recovery codes are an option. Reads the state without consuming it.
+         */
+        get: {
+            parameters: {
+                query: {
+                    state: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Default Response */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description The ways this user can answer, in the order the screen should offer them. Only factors the user actually has and the policy accepts. */
+                            factors: ("totp" | "webauthn")[];
+                            /** @description The one to mark as the default, when there are several. */
+                            preferred?: "totp" | "webauthn";
+                            /** @description Whether to offer the recovery-code way in: the flow allows it and the user has codes. */
+                            recovery: boolean;
+                        };
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/mfa/verify": {
         parameters: {
             query?: never;
@@ -2123,6 +2171,8 @@ export interface paths {
                         client_id: string;
                         redirect_to?: string;
                         state?: string;
+                        /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`). */
+                        remember_me?: boolean;
                     };
                 };
             };
@@ -2678,6 +2728,21 @@ export interface components {
                  */
                 verify_email_auto_send: boolean;
             };
+            welcome_email?: {
+                /**
+                 * Format: uri
+                 * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                 */
+                cta_url?: string | null;
+                /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                body?: string | null;
+                /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                social_links?: {
+                    label: string;
+                    /** Format: uri */
+                    url: string;
+                }[] | null;
+            } | null;
             /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
             email_change_verification_mode?: "new_only" | "old_and_new";
             /**
@@ -2705,6 +2770,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             };
             /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
             login_flow?: string | null;
@@ -2993,6 +3062,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             };
             /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
             mfa_policy?: {
@@ -3094,6 +3167,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -4505,6 +4582,21 @@ export interface components {
                  */
                 verify_email_auto_send: boolean;
             };
+            welcome_email?: {
+                /**
+                 * Format: uri
+                 * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                 */
+                cta_url?: string | null;
+                /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                body?: string | null;
+                /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                social_links?: {
+                    label: string;
+                    /** Format: uri */
+                    url: string;
+                }[] | null;
+            } | null;
             login_methods?: {
                 /** @description Order in which the hosted login screen renders the available methods. Entries are Connection resource ids (`connection_xxx`) or the literal `passkey`. Methods not listed keep the built-in order (passwordless, database, social) after the listed ones; ids that no longer resolve are ignored. Listing an `oidc` connection here is also the only way to surface it on the login screen — see resolveLoginMethods(). */
                 order?: string[];
@@ -4522,6 +4614,10 @@ export interface components {
                 passkey_promotion_snooze_days?: number;
                 /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                 passkey_promotion_max_prompts?: number;
+                /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                remember_me?: "off" | "optional";
+                /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                remember_me_days?: number;
             } | null;
             mfa_policy?: {
                 /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -4579,6 +4675,8 @@ export interface components {
             response_type?: string;
             /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
             redirect_to?: string;
+            /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes. */
+            remember_me?: boolean;
             client_id: string;
             /** @description Deprecated. Use connection_id */
             connection?: string;
@@ -4662,6 +4760,21 @@ export interface operations {
                              */
                             verify_email_auto_send: boolean;
                         };
+                        welcome_email?: {
+                            /**
+                             * Format: uri
+                             * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                             */
+                            cta_url?: string | null;
+                            /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                            body?: string | null;
+                            /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                            social_links?: {
+                                label: string;
+                                /** Format: uri */
+                                url: string;
+                            }[] | null;
+                        } | null;
                         /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
                         email_change_verification_mode?: "new_only" | "old_and_new";
                         /**
@@ -4689,6 +4802,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -4808,6 +4925,21 @@ export interface operations {
                              */
                             verify_email_auto_send: boolean;
                         };
+                        welcome_email?: {
+                            /**
+                             * Format: uri
+                             * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                             */
+                            cta_url?: string | null;
+                            /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                            body?: string | null;
+                            /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                            social_links?: {
+                                label: string;
+                                /** Format: uri */
+                                url: string;
+                            }[] | null;
+                        } | null;
                         /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
                         email_change_verification_mode?: "new_only" | "old_and_new";
                         /**
@@ -4835,6 +4967,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -4908,6 +5044,21 @@ export interface operations {
                              */
                             verify_email_auto_send: boolean;
                         };
+                        welcome_email?: {
+                            /**
+                             * Format: uri
+                             * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                             */
+                            cta_url?: string | null;
+                            /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                            body?: string | null;
+                            /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                            social_links?: {
+                                label: string;
+                                /** Format: uri */
+                                url: string;
+                            }[] | null;
+                        } | null;
                         /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
                         email_change_verification_mode?: "new_only" | "old_and_new";
                         /**
@@ -4935,6 +5086,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -4990,6 +5145,21 @@ export interface operations {
                          */
                         verify_email_auto_send?: boolean;
                     };
+                    welcome_email?: {
+                        /**
+                         * Format: uri
+                         * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                         */
+                        cta_url?: string | null;
+                        /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                        body?: string | null;
+                        /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                        social_links?: {
+                            label: string;
+                            /** Format: uri */
+                            url: string;
+                        }[] | null;
+                    } | null;
                     login_methods?: {
                         /** @description Order in which the hosted login screen renders the available methods. Entries are Connection resource ids (`connection_xxx`) or the literal `passkey`. Methods not listed keep the built-in order (passwordless, database, social) after the listed ones; ids that no longer resolve are ignored. Listing an `oidc` connection here is also the only way to surface it on the login screen — see resolveLoginMethods(). */
                         order?: string[];
@@ -5007,6 +5177,10 @@ export interface operations {
                         passkey_promotion_snooze_days?: number;
                         /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                         passkey_promotion_max_prompts?: number;
+                        /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                        remember_me?: "off" | "optional";
+                        /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                        remember_me_days?: number;
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -5058,6 +5232,21 @@ export interface operations {
                              */
                             verify_email_auto_send: boolean;
                         };
+                        welcome_email?: {
+                            /**
+                             * Format: uri
+                             * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                             */
+                            cta_url?: string | null;
+                            /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                            body?: string | null;
+                            /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                            social_links?: {
+                                label: string;
+                                /** Format: uri */
+                                url: string;
+                            }[] | null;
+                        } | null;
                         /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
                         email_change_verification_mode?: "new_only" | "old_and_new";
                         /**
@@ -5085,6 +5274,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -5167,6 +5360,21 @@ export interface operations {
                              */
                             verify_email_auto_send: boolean;
                         };
+                        welcome_email?: {
+                            /**
+                             * Format: uri
+                             * @description Where the welcome button sends the user. Defaults to `https://<first callback hostname>`. Point it at your app (not your marketing site) so a fresh user lands somewhere useful.
+                             */
+                            cta_url?: string | null;
+                            /** @description Replaces the default one-line body ("Your account on … is ready to go."). Plain text, sent verbatim in every enabled locale. */
+                            body?: string | null;
+                            /** @description Rendered as a "Follow <account>" block after the button — GitHub, LinkedIn, X, YouTube… Empty or absent hides the block. */
+                            social_links?: {
+                                label: string;
+                                /** Format: uri */
+                                url: string;
+                            }[] | null;
+                        } | null;
                         /** @description Policy for the user email-change flow. `new_only` (default) sends a single confirmation link to the new email. `old_and_new` requires the user to also click a link sent to the previous email before the swap takes effect — stricter, useful for tenants with higher-risk users. */
                         email_change_verification_mode?: "new_only" | "old_and_new";
                         /**
@@ -5194,6 +5402,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description The login flow bound to this account (`loginflow_xxx`). Absent = the flow compiled from the settings. A Client may bind its own. */
                         login_flow?: string | null;
@@ -5744,6 +5956,8 @@ export interface operations {
                         } | null;
                         identifier_first: boolean;
                         remember_last_method: boolean;
+                        /** @description Render a "Remember me on this device" checkbox on the password and email-code forms, and send its value as `remember_me` when posting the credential. */
+                        remember_me: boolean;
                         /** @description What the user typed on the identifier-first screen, when the flow has one. Prefill the email field with it. */
                         identifier?: string;
                         /** @description The method key that was moved first because this browser used it last time (`remember_last_method`). Absent otherwise. */
@@ -5755,7 +5969,7 @@ export interface operations {
             };
         };
     };
-    "flow/identify": {
+    "login/identify": {
         parameters: {
             query?: never;
             header?: never;
@@ -5900,6 +6114,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -5999,6 +6217,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6092,6 +6314,10 @@ export interface operations {
                         passkey_promotion_snooze_days?: number;
                         /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                         passkey_promotion_max_prompts?: number;
+                        /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                        remember_me?: "off" | "optional";
+                        /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                        remember_me_days?: number;
                     } | null;
                     mfa_policy?: {
                         /** @description `off` (default) never challenges. `optional` challenges a user who has enrolled a factor, and lets everyone else in. `required` challenges everyone and sends users with no factor through enrolment during login — it never locks anyone out in place. */
@@ -6171,6 +6397,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6270,6 +6500,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -6369,6 +6603,10 @@ export interface operations {
                             passkey_promotion_snooze_days?: number;
                             /** @description How many times a user is offered a passkey over their lifetime. `0` switches the offer off for this tenant without changing `passkey_promotion`. Defaults to 3. */
                             passkey_promotion_max_prompts?: number;
+                            /** @description Show a "Remember me on this device" checkbox on the password and email-code forms. `optional`: unchecked, the session ends when the browser closes; checked, it lasts `remember_me_days`. `off` (the default): no checkbox, every session lasts the built-in 30 days. */
+                            remember_me?: "off" | "optional";
+                            /** @description How long a session lasts when the user ticked "Remember me". Defaults to 30. */
+                            remember_me_days?: number;
                         };
                         /** @description Second-factor policy. Set on the Account as the tenant default; the same object on a Client overrides it **field by field**, so one app can require MFA without changing the rest. */
                         mfa_policy?: {
@@ -11652,6 +11890,8 @@ export interface operations {
                     otp: string;
                     /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
                     redirect_to?: string;
+                    /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`). */
+                    remember_me?: boolean;
                 };
             };
         };
@@ -12480,6 +12720,8 @@ export interface operations {
                     response_type?: string;
                     /** @description Same-origin path to return the user to after authentication, instead of the OAuth client redirect. Used by first-party interactive flows (e.g. device-code confirm). Non same-origin values are ignored. */
                     redirect_to?: string;
+                    /** @description The "Remember me on this device" checkbox. Honoured only when the tenant shows one (`login_methods.remember_me: "optional"`): `true` keeps the session for `remember_me_days`, `false` ends it when the browser closes. */
+                    remember_me?: boolean;
                     client_id: string;
                     /** @description Deprecated. Use connection_id */
                     connection?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/auth-sdk",
-  "version": "2.5.78",
+  "version": "2.5.80",
   "author": "Marc Pomar <marc@faable.com>",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",