@faable/auth-sdk 2.7.41 → 2.7.42

package/dist/api/types.d.ts

@@ -1717,6 +1717,66 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/session": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Sessions
+         * @description List Sessions
+         */
+        get: operations["session/list"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/session/{session_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get Session
+         * @description Get Session
+         */
+        get: operations["session/get"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/session/{session_id}/revoke": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Revoke a session
+         * @description Ends the session for good: the browser cookie behind it stops working, every refresh token issued through it is refused on its next use (`invalid_grant`), and the relying parties that took part in it are notified. Access and id tokens already issued keep working until they expire. The row stays, marked `revoked`, for the device history.
+         */
+        post: operations["session/revoke"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/customdomain/{customdomain_id}/retry": {
         parameters: {
             query?: never;
@@ -3776,6 +3836,46 @@ export interface paths {
         patch: operations["session/me_update"];
         trace?: never;
     };
+    "/me/sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the current user's active sessions
+         * @description Every active session of the user behind the request (cookie or bearer), newest first; `current_session_id` names the one this request came through.
+         */
+        get: operations["session/meSessions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/me/sessions/revoke-others": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Sign the current user out everywhere else
+         * @description Revokes every active session of the user except the one this request came through. Refresh tokens issued in the revoked sessions are refused on their next use; access and id tokens already issued keep working until they expire.
+         */
+        post: operations["session/meRevokeOtherSessions"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/logout": {
         parameters: {
             query?: never;
@@ -6020,6 +6120,58 @@ export interface components {
         LogMetadata: {
             [key: string]: unknown;
         };
+        /** @description Session */
+        Session: {
+            /** @description Session ID */
+            id: string;
+            user: components["schemas"]["User"] | string | unknown;
+            /** @description OIDC session id. Every id_token minted for this session carries it as the `sid` claim; a back-channel or front-channel logout names the session with it. */
+            sid: string;
+            /** @description `active` or `revoked`. An active session whose `expires_at` is in the past has expired: nothing can refresh it any more, but the row stays for the history. */
+            status: "active" | "revoked";
+            /** @description Client IP at the last authentication. */
+            ip?: string;
+            /** @description Raw `User-Agent` header at the last authentication. */
+            user_agent?: string;
+            client?: components["schemas"]["Client"] | string | unknown;
+            connection?: components["schemas"]["Connection"] | string | unknown;
+            /** @description Issuer URL the session was minted on. */
+            issuer?: string;
+            /**
+             * Format: date-time
+             * @description Last authentication or token refresh through this session. Each refresh slides `expires_at` 30 days from here.
+             */
+            last_seen_at: string;
+            /**
+             * Format: date-time
+             * @description When the session stops being usable unless something refreshes it first.
+             */
+            expires_at: string;
+            /** Format: date-time */
+            revoked_at?: string;
+            /** @description `admin`: revoked through the Management API. `logout`: the user signed out. `user`: the user revoked it from another device. */
+            revoked_reason?: "admin" | "logout" | "user";
+            /** @description Object is related with this account */
+            account: string;
+            /**
+             * @description SessionMetadata
+             * @default {}
+             */
+            metadata: {
+                [key: string]: unknown;
+            };
+            /** @description Session creation date */
+            createdAt: string;
+            /** @description Session updated date */
+            updatedAt?: string;
+        };
+        /**
+         * @description SessionMetadata
+         * @default {}
+         */
+        SessionMetadata: {
+            [key: string]: unknown;
+        };
         /** @description Customdomain */
         Customdomain: {
             /** @description Customdomain ID */
@@ -6383,6 +6535,7 @@ export interface components {
          *     - `account_transfer_refused` (409): The Auth Account cannot be moved to that project. `details.blockers` lists why.
          *     - `plan_required` (402): The setting requires a higher plan. `message` says which.
          *     - `not_logged_in` (401): There is no signed-in session for this request.
+         *     - `session_already_revoked` (409): The session was already revoked.
          *     - `invalid_token` (401): The bearer token is missing, malformed, expired or has no subject.
          *     - `not_owner` (403): The caller may only perform this operation on their own user.
          *     - `user_suspended` (403): The user is suspended and cannot sign in or be modified.
@@ -6469,7 +6622,7 @@ export interface components {
          *     - `revision_not_found` (404): The revision is not in the flow history.
          * @enum {string}
          */
-        ErrorCode: "bad_request" | "validation_error" | "unauthorized" | "payment_required" | "forbidden" | "not_found" | "method_not_allowed" | "conflict" | "payload_too_large" | "unsupported_media_type" | "unprocessable_entity" | "too_many_requests" | "internal_error" | "already_exists" | "invalid_id" | "account_not_found" | "invalid_query" | "search_not_supported" | "invalid_expand" | "access_denied" | "insufficient_scope" | "team_required" | "account_limit_reached" | "invalid_project_id" | "account_transfer_refused" | "plan_required" | "not_logged_in" | "invalid_token" | "not_owner" | "user_suspended" | "invalid_credentials" | "login_denied" | "signup_denied" | "client_credentials_denied" | "m2m_quota_exceeded" | "signup_disabled" | "email_taken" | "invalid_email" | "same_email" | "user_has_no_email" | "password_too_weak" | "invalid_password_hash" | "weak_password_hash" | "invalid_code" | "invalid_phone" | "phone_changed" | "phone_already_verified" | "sms_unavailable" | "sms_failed" | "invalid_state" | "state_mismatch" | "invalid_ticket" | "ticket_used" | "ticket_expired" | "ticket_not_found" | "credential_not_found" | "invalid_link" | "expired_link" | "invalid_otp" | "invalid_client" | "client_not_found" | "client_mismatch" | "invalid_client_metadata" | "invalid_connection" | "connection_required" | "connection_misconfigured" | "passwordless_unavailable" | "ambiguous_connection" | "invalid_redirect_uri" | "origin_not_allowed" | "audience_not_found" | "system_resource" | "invalid_request" | "invalid_device_code" | "provider_error" | "identity_already_linked" | "identity_link_denied" | "identity_conflict" | "identity_orphaned" | "no_provider_token" | "no_refresh_token" | "action_unavailable" | "login_flow_misconfigured" | "mfa_required" | "step_up_required" | "interaction_required" | "passkey_login_disabled" | "mfa_pending" | "mfa_invalid_code" | "mfa_invalid_recovery_code" | "too_many_attempts" | "too_many_login_attempts" | "totp_not_allowed" | "no_usable_factor" | "factor_not_found" | "factor_already_confirmed" | "invalid_factor" | "session_missing" | "passkey_verification_failed" | "no_passkey_enrolled" | "malformed_credential" | "unknown_passkey" | "invalid_passkey" | "invite_not_found" | "invite_used" | "already_member" | "not_a_member" | "role_not_found" | "invalid_role" | "flow_not_found" | "revision_not_found";
+        ErrorCode: "bad_request" | "validation_error" | "unauthorized" | "payment_required" | "forbidden" | "not_found" | "method_not_allowed" | "conflict" | "payload_too_large" | "unsupported_media_type" | "unprocessable_entity" | "too_many_requests" | "internal_error" | "already_exists" | "invalid_id" | "account_not_found" | "invalid_query" | "search_not_supported" | "invalid_expand" | "access_denied" | "insufficient_scope" | "team_required" | "account_limit_reached" | "invalid_project_id" | "account_transfer_refused" | "plan_required" | "not_logged_in" | "session_already_revoked" | "invalid_token" | "not_owner" | "user_suspended" | "invalid_credentials" | "login_denied" | "signup_denied" | "client_credentials_denied" | "m2m_quota_exceeded" | "signup_disabled" | "email_taken" | "invalid_email" | "same_email" | "user_has_no_email" | "password_too_weak" | "invalid_password_hash" | "weak_password_hash" | "invalid_code" | "invalid_phone" | "phone_changed" | "phone_already_verified" | "sms_unavailable" | "sms_failed" | "invalid_state" | "state_mismatch" | "invalid_ticket" | "ticket_used" | "ticket_expired" | "ticket_not_found" | "credential_not_found" | "invalid_link" | "expired_link" | "invalid_otp" | "invalid_client" | "client_not_found" | "client_mismatch" | "invalid_client_metadata" | "invalid_connection" | "connection_required" | "connection_misconfigured" | "passwordless_unavailable" | "ambiguous_connection" | "invalid_redirect_uri" | "origin_not_allowed" | "audience_not_found" | "system_resource" | "invalid_request" | "invalid_device_code" | "provider_error" | "identity_already_linked" | "identity_link_denied" | "identity_conflict" | "identity_orphaned" | "no_provider_token" | "no_refresh_token" | "action_unavailable" | "login_flow_misconfigured" | "mfa_required" | "step_up_required" | "interaction_required" | "passkey_login_disabled" | "mfa_pending" | "mfa_invalid_code" | "mfa_invalid_recovery_code" | "too_many_attempts" | "too_many_login_attempts" | "totp_not_allowed" | "no_usable_factor" | "factor_not_found" | "factor_already_confirmed" | "invalid_factor" | "session_missing" | "passkey_verification_failed" | "no_passkey_enrolled" | "malformed_credential" | "unknown_passkey" | "invalid_passkey" | "invite_not_found" | "invite_used" | "already_member" | "not_a_member" | "role_not_found" | "invalid_role" | "flow_not_found" | "revision_not_found";
         /** @description Every error response has this shape. Branch on `error_code`, never on `message`: the message is written for a person and may change. */
         ErrorResponse: {
             /** @description The HTTP status, repeated. */
@@ -23580,13 +23733,36 @@ export interface operations {
             };
         };
     };
-    "customdomain/retry": {
+    "session/list": {
         parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                customdomain_id: string;
+            query?: {
+                /** @description Number of items per page (max 200) */
+                pageSize?: number;
+                /** @description Cursor for next page */
+                cursor?: string;
+                /** @description Cursor returned by the previous page */
+                next?: string;
+                /** @description Exact match on `user`. Equivalent to `?query=user:<value>`. */
+                user?: string;
+                /** @description Exact match on `client`. Equivalent to `?query=client:<value>`. */
+                client?: string;
+                /** @description Exact match on `connection`. Equivalent to `?query=connection:<value>`. */
+                connection?: string;
+                /** @description Exact match on `status`. Equivalent to `?query=status:<value>`. */
+                status?: string;
+                /** @description Exact match on `sid`. Equivalent to `?query=sid:<value>`. */
+                sid?: string;
+                /** @description Exact match on `since`. Equivalent to `?query=since:<value>`. */
+                since?: string;
+                /** @description Exact match on `until`. Equivalent to `?query=until:<value>`. */
+                until?: string;
+                /** @description Filter using a FaableQL query */
+                query?: string;
+                /** @description Expand id-only fields in the response. Pass one path per entry (e.g. `?expand=user`). */
+                expand?: ("user" | "client" | "connection")[];
             };
+            header?: never;
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
@@ -23596,9 +23772,22 @@ export interface operations {
                 headers: {
                     [name: string]: unknown;
                 };
-                content?: never;
+                content: {
+                    "application/json": {
+                        next: string | null;
+                        results: components["schemas"]["Session"][];
+                    };
+                };
             };
-            /** @description `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field. */
+            /**
+             * @description `invalid_query` — The `?query=` FaableQL expression could not be parsed.
+             *
+             *     `invalid_expand` — An `?expand=` path is not allowed on this resource.
+             *
+             *     `search_not_supported` — This resource does not support `?search=`.
+             *
+             *     `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.
+             */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -23606,7 +23795,7 @@ export interface operations {
                 content: {
                     "application/json": components["schemas"]["ErrorResponse"] & {
                         /** @enum {string} */
-                        error_code?: "validation_error";
+                        error_code?: "invalid_query" | "invalid_expand" | "search_not_supported" | "validation_error";
                     };
                 };
             };
@@ -23678,45 +23867,77 @@ export interface operations {
             };
         };
     };
-    "customdomain/list": {
+    "session/get": {
         parameters: {
             query?: {
-                /** @description Number of items per page (max 200) */
-                pageSize?: number;
-                /** @description Cursor for next page */
-                cursor?: string;
-                /** @description Cursor returned by the previous page */
-                next?: string;
-                /** @description Filter using a FaableQL query */
-                query?: string;
-                /** @description Full-text search across: `domain`. */
-                q?: string;
+                /** @description Expand id-only fields in the response. Pass one path per entry (e.g. `?expand=user`). */
+                expand?: ("user" | "client" | "connection")[];
             };
             header?: never;
-            path?: never;
+            path: {
+                session_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Default Response */
+            /** @description Session */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        next: string | null;
-                        results: components["schemas"]["Customdomain"][];
+                        /** @description Session ID */
+                        id: string;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description OIDC session id. Every id_token minted for this session carries it as the `sid` claim; a back-channel or front-channel logout names the session with it. */
+                        sid: string;
+                        /** @description `active` or `revoked`. An active session whose `expires_at` is in the past has expired: nothing can refresh it any more, but the row stays for the history. */
+                        status: "active" | "revoked";
+                        /** @description Client IP at the last authentication. */
+                        ip?: string;
+                        /** @description Raw `User-Agent` header at the last authentication. */
+                        user_agent?: string;
+                        client?: components["schemas"]["Client"] | string | unknown;
+                        connection?: components["schemas"]["Connection"] | string | unknown;
+                        /** @description Issuer URL the session was minted on. */
+                        issuer?: string;
+                        /**
+                         * Format: date-time
+                         * @description Last authentication or token refresh through this session. Each refresh slides `expires_at` 30 days from here.
+                         */
+                        last_seen_at: string;
+                        /**
+                         * Format: date-time
+                         * @description When the session stops being usable unless something refreshes it first.
+                         */
+                        expires_at: string;
+                        /** Format: date-time */
+                        revoked_at?: string;
+                        /** @description `admin`: revoked through the Management API. `logout`: the user signed out. `user`: the user revoked it from another device. */
+                        revoked_reason?: "admin" | "logout" | "user";
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description SessionMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Session creation date */
+                        createdAt: string;
+                        /** @description Session updated date */
+                        updatedAt?: string;
                     };
                 };
             };
             /**
-             * @description `invalid_query` — The `?query=` FaableQL expression could not be parsed.
+             * @description `invalid_id` — The id in the path is not a valid id for this resource.
              *
              *     `invalid_expand` — An `?expand=` path is not allowed on this resource.
              *
-             *     `search_not_supported` — This resource does not support `?search=`.
-             *
              *     `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.
              */
             400: {
@@ -23726,7 +23947,7 @@ export interface operations {
                 content: {
                     "application/json": components["schemas"]["ErrorResponse"] & {
                         /** @enum {string} */
-                        error_code?: "invalid_query" | "invalid_expand" | "search_not_supported" | "validation_error";
+                        error_code?: "invalid_id" | "invalid_expand" | "validation_error";
                     };
                 };
             };
@@ -23760,7 +23981,11 @@ export interface operations {
                     };
                 };
             };
-            /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
+            /**
+             * @description `not_found` — The resource does not exist in this account.
+             *
+             *     `account_not_found` — No Auth Account matches the request (domain, header or token).
+             */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -23768,7 +23993,7 @@ export interface operations {
                 content: {
                     "application/json": components["schemas"]["ErrorResponse"] & {
                         /** @enum {string} */
-                        error_code?: "account_not_found";
+                        error_code?: "not_found" | "account_not_found";
                     };
                 };
             };
@@ -23798,56 +24023,433 @@ export interface operations {
             };
         };
     };
-    "customdomain/create": {
+    "session/revoke": {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /** @description CustomdomainCreate */
-        requestBody: {
-            content: {
-                "application/json": {
-                    domain: string;
-                    /** @description Add Metadata */
-                    metadata?: {
-                        [key: string]: unknown;
-                    };
-                };
+            path: {
+                session_id: string;
             };
+            cookie?: never;
         };
+        requestBody?: never;
         responses: {
-            /** @description Customdomain */
+            /** @description Session */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        /** @description Customdomain ID */
+                        /** @description Session ID */
                         id: string;
-                        domain: string;
-                        token: string;
-                        /** @enum {unknown} */
-                        status: "PENDING" | "VERIFYING" | "ACTIVE" | "FAILED" | "DEGRADED";
-                        attempts: number;
-                        /** Format: date-time */
-                        nextCheck?: string;
-                        /** Format: date-time */
-                        lastCheck?: string;
-                        /** @description User feedback error from last check */
-                        errorLog?: string;
+                        user: components["schemas"]["User"] | string | unknown;
+                        /** @description OIDC session id. Every id_token minted for this session carries it as the `sid` claim; a back-channel or front-channel logout names the session with it. */
+                        sid: string;
+                        /** @description `active` or `revoked`. An active session whose `expires_at` is in the past has expired: nothing can refresh it any more, but the row stays for the history. */
+                        status: "active" | "revoked";
+                        /** @description Client IP at the last authentication. */
+                        ip?: string;
+                        /** @description Raw `User-Agent` header at the last authentication. */
+                        user_agent?: string;
+                        client?: components["schemas"]["Client"] | string | unknown;
+                        connection?: components["schemas"]["Connection"] | string | unknown;
+                        /** @description Issuer URL the session was minted on. */
+                        issuer?: string;
+                        /**
+                         * Format: date-time
+                         * @description Last authentication or token refresh through this session. Each refresh slides `expires_at` 30 days from here.
+                         */
+                        last_seen_at: string;
+                        /**
+                         * Format: date-time
+                         * @description When the session stops being usable unless something refreshes it first.
+                         */
+                        expires_at: string;
                         /** Format: date-time */
-                        verifiedAt?: string;
-                        /** @description Per-record DNS status from the last check: what each record points to now vs. expected */
-                        records?: {
-                            type: string;
-                            host: string;
-                            expected: string;
-                            observed: string[];
-                            ok: boolean;
-                        }[];
+                        revoked_at?: string;
+                        /** @description `admin`: revoked through the Management API. `logout`: the user signed out. `user`: the user revoked it from another device. */
+                        revoked_reason?: "admin" | "logout" | "user";
+                        /** @description Object is related with this account */
+                        account: string;
+                        /**
+                         * @description SessionMetadata
+                         * @default {}
+                         */
+                        metadata: {
+                            [key: string]: unknown;
+                        };
+                        /** @description Session creation date */
+                        createdAt: string;
+                        /** @description Session updated date */
+                        updatedAt?: string;
+                    };
+                };
+            };
+            /** @description `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "validation_error";
+                    };
+                };
+            };
+            /** @description `unauthorized` — The request carries no valid credentials. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "unauthorized";
+                    };
+                };
+            };
+            /**
+             * @description `forbidden` — The credentials are valid but do not allow this operation.
+             *
+             *     `insufficient_scope` — The token lacks a scope this operation requires. `message` names it.
+             *
+             *     `user_suspended` — The user is suspended and cannot sign in or be modified.
+             */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "forbidden" | "insufficient_scope" | "user_suspended";
+                    };
+                };
+            };
+            /**
+             * @description `not_found` — The resource does not exist in this account.
+             *
+             *     `account_not_found` — No Auth Account matches the request (domain, header or token).
+             */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "not_found" | "account_not_found";
+                    };
+                };
+            };
+            /** @description `session_already_revoked` — The session was already revoked. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "session_already_revoked";
+                    };
+                };
+            };
+            /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "too_many_requests";
+                    };
+                };
+            };
+            /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "internal_error";
+                    };
+                };
+            };
+        };
+    };
+    "customdomain/retry": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                customdomain_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "validation_error";
+                    };
+                };
+            };
+            /** @description `unauthorized` — The request carries no valid credentials. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "unauthorized";
+                    };
+                };
+            };
+            /**
+             * @description `forbidden` — The credentials are valid but do not allow this operation.
+             *
+             *     `insufficient_scope` — The token lacks a scope this operation requires. `message` names it.
+             *
+             *     `user_suspended` — The user is suspended and cannot sign in or be modified.
+             */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "forbidden" | "insufficient_scope" | "user_suspended";
+                    };
+                };
+            };
+            /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "account_not_found";
+                    };
+                };
+            };
+            /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "too_many_requests";
+                    };
+                };
+            };
+            /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "internal_error";
+                    };
+                };
+            };
+        };
+    };
+    "customdomain/list": {
+        parameters: {
+            query?: {
+                /** @description Number of items per page (max 200) */
+                pageSize?: number;
+                /** @description Cursor for next page */
+                cursor?: string;
+                /** @description Cursor returned by the previous page */
+                next?: string;
+                /** @description Filter using a FaableQL query */
+                query?: string;
+                /** @description Full-text search across: `domain`. */
+                q?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        next: string | null;
+                        results: components["schemas"]["Customdomain"][];
+                    };
+                };
+            };
+            /**
+             * @description `invalid_query` — The `?query=` FaableQL expression could not be parsed.
+             *
+             *     `invalid_expand` — An `?expand=` path is not allowed on this resource.
+             *
+             *     `search_not_supported` — This resource does not support `?search=`.
+             *
+             *     `validation_error` — The body, query or path failed schema validation. `details.issues` lists each failing field.
+             */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "invalid_query" | "invalid_expand" | "search_not_supported" | "validation_error";
+                    };
+                };
+            };
+            /** @description `unauthorized` — The request carries no valid credentials. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "unauthorized";
+                    };
+                };
+            };
+            /**
+             * @description `forbidden` — The credentials are valid but do not allow this operation.
+             *
+             *     `insufficient_scope` — The token lacks a scope this operation requires. `message` names it.
+             *
+             *     `user_suspended` — The user is suspended and cannot sign in or be modified.
+             */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "forbidden" | "insufficient_scope" | "user_suspended";
+                    };
+                };
+            };
+            /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "account_not_found";
+                    };
+                };
+            };
+            /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "too_many_requests";
+                    };
+                };
+            };
+            /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "internal_error";
+                    };
+                };
+            };
+        };
+    };
+    "customdomain/create": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description CustomdomainCreate */
+        requestBody: {
+            content: {
+                "application/json": {
+                    domain: string;
+                    /** @description Add Metadata */
+                    metadata?: {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description Customdomain */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Customdomain ID */
+                        id: string;
+                        domain: string;
+                        token: string;
+                        /** @enum {unknown} */
+                        status: "PENDING" | "VERIFYING" | "ACTIVE" | "FAILED" | "DEGRADED";
+                        attempts: number;
+                        /** Format: date-time */
+                        nextCheck?: string;
+                        /** Format: date-time */
+                        lastCheck?: string;
+                        /** @description User feedback error from last check */
+                        errorLog?: string;
+                        /** Format: date-time */
+                        verifiedAt?: string;
+                        /** @description Per-record DNS status from the last check: what each record points to now vs. expected */
+                        records?: {
+                            type: string;
+                            host: string;
+                            expected: string;
+                            observed: string[];
+                            ok: boolean;
+                        }[];
                         /** @description Object is related with this account */
                         account: string;
                         /**
@@ -25198,6 +25800,157 @@ export interface operations {
             };
         };
     };
+    "session/meSessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        results: components["schemas"]["Session"][];
+                        /** @description The id of the session this request came through: the cookie, or the session the bearer token was issued in. Null when the token predates session ids. */
+                        current_session_id: string | null;
+                    };
+                };
+            };
+            /**
+             * @description `mfa_pending` — A second-factor challenge is pending; answer it before continuing.
+             *
+             *     `not_logged_in` — There is no signed-in session for this request.
+             */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "mfa_pending" | "not_logged_in";
+                    };
+                };
+            };
+            /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "account_not_found";
+                    };
+                };
+            };
+            /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "too_many_requests";
+                    };
+                };
+            };
+            /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "internal_error";
+                    };
+                };
+            };
+        };
+    };
+    "session/meRevokeOtherSessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description How many sessions were ended. */
+                        revoked: number;
+                    };
+                };
+            };
+            /**
+             * @description `mfa_pending` — A second-factor challenge is pending; answer it before continuing.
+             *
+             *     `not_logged_in` — There is no signed-in session for this request.
+             */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "mfa_pending" | "not_logged_in";
+                    };
+                };
+            };
+            /** @description `account_not_found` — No Auth Account matches the request (domain, header or token). */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "account_not_found";
+                    };
+                };
+            };
+            /** @description `too_many_requests` — Rate limit exceeded. Honour the `Retry-After` header. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "too_many_requests";
+                    };
+                };
+            };
+            /** @description `internal_error` — Unexpected server error. Retry later; the request id is logged. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"] & {
+                        /** @enum {string} */
+                        error_code?: "internal_error";
+                    };
+                };
+            };
+        };
+    };
     "session/logout": {
         parameters: {
             query?: {