zavudev 0.18.0 → 0.20.0

data/lib/zavudev/models/invitation_create_params.rb

@@ -8,7 +8,8 @@ module Zavudev
       include Zavudev::Internal::Type::RequestParameters
 
       # @!attribute allowed_phone_countries
-      #   ISO country codes for allowed phone numbers.
+      #   ISO country codes for allowed phone numbers. Only valid when `connectionType` is
+      #   `whatsapp_waba` — sending it with `messenger` returns 400.
       #
       #   @return [Array<String>, nil]
       optional :allowed_phone_countries,
@@ -34,10 +35,19 @@ module Zavudev
       optional :client_phone, String, api_name: :clientPhone
 
       # @!attribute connection_type
-      #   How the client connects WhatsApp. `whatsapp_waba` (default) runs Meta's embedded
-      #   signup to link an official WhatsApp Business Account. `whatsapp_alt` links the
-      #   number by scanning a QR code — available only to teams with the WhatsApp
-      #   Alternative feature enabled.
+      #   Which Meta channel the client connects, and how.
+      #
+      #   - `whatsapp_waba` (default): Meta's embedded signup links an official WhatsApp
+      #     Business Account. Accepts `phoneNumberId` and `allowedPhoneCountries`.
+      #   - `messenger`: the client authorizes with Facebook and picks a Facebook Page
+      #     they administer. The Page's Messenger inbox — including Marketplace chats — is
+      #     routed to Zavu. They must be an admin of at least one Page. A Page can only be
+      #     connected to one Zavu project at a time: if the client picks a Page that
+      #     another project already connected, the newer connection wins and the older one
+      #     is disconnected.
+      #
+      #   One invitation connects one channel. To onboard a client on several channels,
+      #   create one invitation per channel; each completes into its own sender.
       #
       #   @return [Symbol, Zavudev::Models::InvitationCreateParams::ConnectionType, nil]
       optional :connection_type,
@@ -52,7 +62,9 @@ module Zavudev
 
       # @!attribute phone_number_id
       #   ID of a Zavu phone number to pre-assign for WhatsApp registration. If provided,
-      #   the client will use this number instead of their own.
+      #   the client will use this number instead of their own. Only valid when
+      #   `connectionType` is `whatsapp_waba` — sending it with `messenger` returns 400,
+      #   since a Facebook Page has no phone number.
       #
       #   @return [String, nil]
       optional :phone_number_id, String, api_name: :phoneNumberId
@@ -61,7 +73,7 @@ module Zavudev
       #   Some parameter documentations has been truncated, see
       #   {Zavudev::Models::InvitationCreateParams} for more details.
       #
-      #   @param allowed_phone_countries [Array<String>] ISO country codes for allowed phone numbers.
+      #   @param allowed_phone_countries [Array<String>] ISO country codes for allowed phone numbers. Only valid when `connectionType` is
       #
       #   @param client_email [String] Email of the client being invited.
       #
@@ -69,7 +81,7 @@ module Zavudev
       #
       #   @param client_phone [String] Phone number of the client in E.164 format.
       #
-      #   @param connection_type [Symbol, Zavudev::Models::InvitationCreateParams::ConnectionType] How the client connects WhatsApp. `whatsapp_waba` (default) runs Meta's embedded
+      #   @param connection_type [Symbol, Zavudev::Models::InvitationCreateParams::ConnectionType] Which Meta channel the client connects, and how.
       #
       #   @param expires_in_days [Integer] Number of days until the invitation expires.
       #
@@ -77,15 +89,24 @@ module Zavudev
       #
       #   @param request_options [Zavudev::RequestOptions, Hash{Symbol=>Object}]
 
-      # How the client connects WhatsApp. `whatsapp_waba` (default) runs Meta's embedded
-      # signup to link an official WhatsApp Business Account. `whatsapp_alt` links the
-      # number by scanning a QR code — available only to teams with the WhatsApp
-      # Alternative feature enabled.
+      # Which Meta channel the client connects, and how.
+      #
+      # - `whatsapp_waba` (default): Meta's embedded signup links an official WhatsApp
+      #   Business Account. Accepts `phoneNumberId` and `allowedPhoneCountries`.
+      # - `messenger`: the client authorizes with Facebook and picks a Facebook Page
+      #   they administer. The Page's Messenger inbox — including Marketplace chats — is
+      #   routed to Zavu. They must be an admin of at least one Page. A Page can only be
+      #   connected to one Zavu project at a time: if the client picks a Page that
+      #   another project already connected, the newer connection wins and the older one
+      #   is disconnected.
+      #
+      # One invitation connects one channel. To onboard a client on several channels,
+      # create one invitation per channel; each completes into its own sender.
       module ConnectionType
         extend Zavudev::Internal::Type::Enum
 
         WHATSAPP_WABA = :whatsapp_waba
-        WHATSAPP_ALT = :whatsapp_alt
+        MESSENGER = :messenger
 
         # @!method self.values
         #   @return [Array<Symbol>]

data/lib/zavudev/models/invitation_list_params.rb

@@ -20,10 +20,18 @@ module Zavudev
       # @!attribute status
       #   Current status of the partner invitation.
       #
+      #   `failed` means the client started the connection and it did not finish (they
+      #   cancelled Meta's dialog, denied a permission, or abandoned the tab). A failed
+      #   invitation is still usable: the same link can be retried, and it moves back to
+      #   `in_progress` when the client tries again.
+      #
       #   @return [Symbol, Zavudev::Models::InvitationListParams::Status, nil]
       optional :status, enum: -> { Zavudev::InvitationListParams::Status }
 
       # @!method initialize(cursor: nil, limit: nil, status: nil, request_options: {})
+      #   Some parameter documentations has been truncated, see
+      #   {Zavudev::Models::InvitationListParams} for more details.
+      #
       #   @param cursor [String]
       #
       #   @param limit [Integer]
@@ -33,6 +41,11 @@ module Zavudev
       #   @param request_options [Zavudev::RequestOptions, Hash{Symbol=>Object}]
 
       # Current status of the partner invitation.
+      #
+      # `failed` means the client started the connection and it did not finish (they
+      # cancelled Meta's dialog, denied a permission, or abandoned the tab). A failed
+      # invitation is still usable: the same link can be retried, and it moves back to
+      # `in_progress` when the client tries again.
       module Status
         extend Zavudev::Internal::Type::Enum
 
@@ -41,6 +54,7 @@ module Zavudev
         COMPLETED = :completed
         EXPIRED = :expired
         CANCELLED = :cancelled
+        FAILED = :failed
 
         # @!method self.values
         #   @return [Array<Symbol>]

data/lib/zavudev/models/message.rb

@@ -10,10 +10,7 @@ module Zavudev
       required :id, String
 
       # @!attribute channel
-      #   Delivery channel. Use 'auto' for intelligent routing. `whatsapp_alt` is the
-      #   QR-linked WhatsApp channel and is only accepted for teams with the WhatsApp
-      #   Alternative feature enabled; the sender must have a connected whatsapp_alt
-      #   session.
+      #   Delivery channel. Use 'auto' for intelligent routing.
       #
       #   @return [Symbol, Zavudev::Models::Channel]
       required :channel, enum: -> { Zavudev::Channel }
@@ -27,6 +24,20 @@ module Zavudev
       #   Type of message. Non-text types are supported by WhatsApp and Telegram (varies
       #   by type).
       #
+      #   `location_request` asks the recipient to share their location and is
+      #   WhatsApp-only. It takes no `content` object — the prompt goes in `text` (max
+      #   1024 characters) and the button label is fixed by WhatsApp. The recipient's
+      #   answer arrives as an inbound `location` message whose `content.replyToMessageId`
+      #   is the ID of the request.
+      #
+      #   `request_contact_info` asks the recipient to share their phone number and is
+      #   WhatsApp-only. Like `location_request` it takes no `content` object — the prompt
+      #   goes in `text` (max 1024 characters) and WhatsApp renders a fixed **Share
+      #   Contact Info** button. The answer arrives as an inbound `contact` message. Use
+      #   it to recover the phone number of a contact who adopted a WhatsApp username and
+      #   is only known by their business-scoped user ID (BSUID); when they share it, Zavu
+      #   automatically links the phone number to that contact.
+      #
       #   @return [Symbol, Zavudev::Models::MessageType]
       required :message_type, enum: -> { Zavudev::MessageType }, api_name: :messageType
 
@@ -46,6 +57,15 @@ module Zavudev
       #   @return [Zavudev::Models::MessageContent, nil]
       optional :content, -> { Zavudev::MessageContent }
 
+      # @!attribute conversation_id
+      #   ID of the conversation (inbox thread) this message belongs to. Use it to build a
+      #   direct dashboard link:
+      #   `https://dashboard.zavu.dev/{locale}/inbox?conv={conversationId}`. Omitted only
+      #   on legacy messages created before conversation threading.
+      #
+      #   @return [String, nil]
+      optional :conversation_id, String, api_name: :conversationId
+
       # @!attribute cost
       #   Zavu platform charge in USD for this message. Messaging is billed against your
       #   plan's monthly limits plus usage-based overage.
@@ -107,13 +127,13 @@ module Zavudev
       #   @return [Time, nil]
       optional :updated_at, Time, api_name: :updatedAt
 
-      # @!method initialize(id:, channel:, created_at:, message_type:, status:, to:, content: nil, cost: nil, cost_provider: nil, cost_total: nil, error_code: nil, error_message: nil, from: nil, metadata: nil, provider_message_id: nil, sender_id: nil, text: nil, updated_at: nil)
+      # @!method initialize(id:, channel:, created_at:, message_type:, status:, to:, content: nil, conversation_id: nil, cost: nil, cost_provider: nil, cost_total: nil, error_code: nil, error_message: nil, from: nil, metadata: nil, provider_message_id: nil, sender_id: nil, text: nil, updated_at: nil)
       #   Some parameter documentations has been truncated, see {Zavudev::Models::Message}
       #   for more details.
       #
       #   @param id [String]
       #
-      #   @param channel [Symbol, Zavudev::Models::Channel] Delivery channel. Use 'auto' for intelligent routing. `whatsapp_alt` is the QR-l
+      #   @param channel [Symbol, Zavudev::Models::Channel] Delivery channel. Use 'auto' for intelligent routing.
       #
       #   @param created_at [Time]
       #
@@ -125,6 +145,8 @@ module Zavudev
       #
       #   @param content [Zavudev::Models::MessageContent] Content for non-text message types (WhatsApp and Telegram).
       #
+      #   @param conversation_id [String] ID of the conversation (inbox thread) this message belongs to. Use it to build a
+      #
       #   @param cost [Float, nil] Zavu platform charge in USD for this message. Messaging is billed against your p
       #
       #   @param cost_provider [Float, nil] Carrier and delivery cost in USD.

data/lib/zavudev/models/message_send_params.rb

@@ -9,13 +9,10 @@ module Zavudev
 
       # @!attribute to
       #   Recipient phone number in E.164 format, email address, WhatsApp business-scoped
-      #   user ID (BSUID, e.g. `US.13491208655302741918`), WhatsApp group JID
-      #   (`<id>@g.us`, e.g. `120363000000000000@g.us`), or numeric chat ID (for
+      #   user ID (BSUID, e.g. `US.13491208655302741918`), or numeric chat ID (for
       #   Telegram/Instagram/Messenger). A BSUID is routed to WhatsApp and sent via the
       #   `recipient` field; use it to message a contact who adopted a username and whose
-      #   phone number is hidden. A group JID is only valid on the `whatsapp_alt` channel
-      #   and supports text and media (image, video, audio, document, sticker, location,
-      #   contact).
+      #   phone number is hidden.
       #
       #   @return [String]
       required :to, String

data/lib/zavudev/models/message_type.rb

@@ -4,6 +4,20 @@ module Zavudev
   module Models
     # Type of message. Non-text types are supported by WhatsApp and Telegram (varies
     # by type).
+    #
+    # `location_request` asks the recipient to share their location and is
+    # WhatsApp-only. It takes no `content` object — the prompt goes in `text` (max
+    # 1024 characters) and the button label is fixed by WhatsApp. The recipient's
+    # answer arrives as an inbound `location` message whose `content.replyToMessageId`
+    # is the ID of the request.
+    #
+    # `request_contact_info` asks the recipient to share their phone number and is
+    # WhatsApp-only. Like `location_request` it takes no `content` object — the prompt
+    # goes in `text` (max 1024 characters) and WhatsApp renders a fixed **Share
+    # Contact Info** button. The answer arrives as an inbound `contact` message. Use
+    # it to recover the phone number of a contact who adopted a WhatsApp username and
+    # is only known by their business-scoped user ID (BSUID); when they share it, Zavu
+    # automatically links the phone number to that contact.
     module MessageType
       extend Zavudev::Internal::Type::Enum
 
@@ -18,6 +32,8 @@ module Zavudev
       BUTTONS = :buttons
       LIST = :list
       CTA_URL = :cta_url
+      REQUEST_CONTACT_INFO = :request_contact_info
+      LOCATION_REQUEST = :location_request
       REACTION = :reaction
       TEMPLATE = :template
 

data/lib/zavudev/models/phone_number_pricing.rb

@@ -4,7 +4,9 @@ module Zavudev
   module Models
     class PhoneNumberPricing < Zavudev::Internal::Type::BaseModel
       # @!attribute is_free_eligible
-      #   Whether this number qualifies for the free first US number offer.
+      #   Whether this number qualifies as the plan-included US number on paid plans. The
+      #   benefit is one per account: it is never offered again once claimed, not even
+      #   after the number is released.
       #
       #   @return [Boolean, nil]
       optional :is_free_eligible, Zavudev::Internal::Type::Boolean, api_name: :isFreeEligible
@@ -22,7 +24,10 @@ module Zavudev
       optional :upfront_price, Float, api_name: :upfrontPrice
 
       # @!method initialize(is_free_eligible: nil, monthly_price: nil, upfront_price: nil)
-      #   @param is_free_eligible [Boolean] Whether this number qualifies for the free first US number offer.
+      #   Some parameter documentations has been truncated, see
+      #   {Zavudev::Models::PhoneNumberPricing} for more details.
+      #
+      #   @param is_free_eligible [Boolean] Whether this number qualifies as the plan-included US number on paid plans. The
       #
       #   @param monthly_price [Float] Monthly price in USD.
       #

data/lib/zavudev/models/phone_number_search_available_params.rb

@@ -13,6 +13,13 @@ module Zavudev
       #   @return [String]
       required :country_code, String
 
+      # @!attribute capabilities
+      #   Comma-separated capabilities the number must have: `sms`, `voice`, `mms`.
+      #   Numbers missing any of them are dropped.
+      #
+      #   @return [String, nil]
+      optional :capabilities, String
+
       # @!attribute contains
       #   Search for numbers containing this string.
       #
@@ -31,9 +38,14 @@ module Zavudev
       #   @return [Symbol, Zavudev::Models::PhoneNumberType, nil]
       optional :type, enum: -> { Zavudev::PhoneNumberType }
 
-      # @!method initialize(country_code:, contains: nil, limit: nil, type: nil, request_options: {})
+      # @!method initialize(country_code:, capabilities: nil, contains: nil, limit: nil, type: nil, request_options: {})
+      #   Some parameter documentations has been truncated, see
+      #   {Zavudev::Models::PhoneNumberSearchAvailableParams} for more details.
+      #
       #   @param country_code [String] Two-letter ISO country code.
       #
+      #   @param capabilities [String] Comma-separated capabilities the number must have: `sms`, `voice`, `mms`. Number
+      #
       #   @param contains [String] Search for numbers containing this string.
       #
       #   @param limit [Integer] Maximum number of results to return.

data/lib/zavudev/models/sender.rb

@@ -20,6 +20,15 @@ module Zavudev
       #   @return [String]
       required :phone_number, String, api_name: :phoneNumber
 
+      # @!attribute channels
+      #   Channels this sender can actually send on right now, computed from its
+      #   configuration. Empty means the sender cannot send or receive anything yet: a
+      #   phoneNumber alone does not enable SMS or voice. Check this rather than inferring
+      #   capability from phoneNumber or emailAddress.
+      #
+      #   @return [Array<String>, nil]
+      optional :channels, Zavudev::Internal::Type::ArrayOf[String]
+
       # @!attribute created_at
       #
       #   @return [Time, nil]
@@ -69,7 +78,7 @@ module Zavudev
       #   @return [Zavudev::Models::Sender::Whatsapp, nil]
       optional :whatsapp, -> { Zavudev::Sender::Whatsapp }
 
-      # @!method initialize(id:, name:, phone_number:, created_at: nil, email_address: nil, email_catch_all_enabled: nil, email_receiving_enabled: nil, is_default: nil, updated_at: nil, webhook: nil, whatsapp: nil)
+      # @!method initialize(id:, name:, phone_number:, channels: nil, created_at: nil, email_address: nil, email_catch_all_enabled: nil, email_receiving_enabled: nil, is_default: nil, updated_at: nil, webhook: nil, whatsapp: nil)
       #   Some parameter documentations has been truncated, see {Zavudev::Models::Sender}
       #   for more details.
       #
@@ -79,6 +88,8 @@ module Zavudev
       #
       #   @param phone_number [String] Phone number in E.164 format.
       #
+      #   @param channels [Array<String>] Channels this sender can actually send on right now, computed from its configura
+      #
       #   @param created_at [Time]
       #
       #   @param email_address [String] From-address for the email channel, if configured.

data/lib/zavudev/models/sender_create_params.rb

@@ -40,9 +40,29 @@ module Zavudev
       #   @return [Boolean, nil]
       optional :email_receiving_enabled, Zavudev::Internal::Type::Boolean, api_name: :emailReceivingEnabled
 
+      # @!attribute enable_sms_oneway
+      #   Enable the one-way SMS channel (`sms_oneway`). Needs nothing else — no phone
+      #   number, no credential — so it is the fastest way to get a sender that can send.
+      #   Recipients cannot reply. Confirm with `sms_oneway` in the `channels` array on
+      #   the response.
+      #
+      #   @return [Boolean, nil]
+      optional :enable_sms_oneway, Zavudev::Internal::Type::Boolean, api_name: :enableSmsOneway
+
+      # @!attribute enable_voice
+      #   Let this sender place and answer phone calls. Requires `phoneNumber`; enabling
+      #   it without one returns 400. Check the `channels` array on the response to
+      #   confirm `voice` is on.
+      #
+      #   @return [Boolean, nil]
+      optional :enable_voice, Zavudev::Internal::Type::Boolean, api_name: :enableVoice
+
       # @!attribute phone_number
-      #   Phone number in E.164 format. Required for phone-based channels (SMS, WhatsApp).
-      #   Omit for an email-only sender.
+      #   Phone number in E.164 format, and it must be a number your project already owns
+      #   (see `GET /v1/phone-numbers`). The number is routed to the sender as part of
+      #   this call, which is what turns the SMS channel on. Passing a number the project
+      #   does not own, or one already attached to another sender, returns 400 rather than
+      #   creating a sender that cannot send. Omit for an email-only sender.
       #
       #   @return [String, nil]
       optional :phone_number, String, api_name: :phoneNumber
@@ -60,13 +80,32 @@ module Zavudev
                -> { Zavudev::Internal::Type::ArrayOf[enum: Zavudev::WebhookEvent] },
                api_name: :webhookEvents
 
+      # @!attribute webhook_signature_version
+      #   Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      #   - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #     configurable. Existing webhooks stay on it until you move them.
+      #   - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #     default for new senders. It signs the timestamp together with the body.
+      #   - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #     reading either one works, so you can deploy and confirm your new verifier
+      #     before switching over.
+      #
+      #   Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      #   https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      #
+      #   @return [Symbol, Zavudev::Models::SenderCreateParams::WebhookSignatureVersion, nil]
+      optional :webhook_signature_version,
+               enum: -> { Zavudev::SenderCreateParams::WebhookSignatureVersion },
+               api_name: :webhookSignatureVersion
+
       # @!attribute webhook_url
       #   HTTPS URL for webhook events.
       #
       #   @return [String, nil]
       optional :webhook_url, String, api_name: :webhookUrl
 
-      # @!method initialize(name:, email_address: nil, email_domain_id: nil, email_from_name: nil, email_receiving_enabled: nil, phone_number: nil, set_as_default: nil, webhook_events: nil, webhook_url: nil, request_options: {})
+      # @!method initialize(name:, email_address: nil, email_domain_id: nil, email_from_name: nil, email_receiving_enabled: nil, enable_sms_oneway: nil, enable_voice: nil, phone_number: nil, set_as_default: nil, webhook_events: nil, webhook_signature_version: nil, webhook_url: nil, request_options: {})
       #   Some parameter documentations has been truncated, see
       #   {Zavudev::Models::SenderCreateParams} for more details.
       #
@@ -80,15 +119,44 @@ module Zavudev
       #
       #   @param email_receiving_enabled [Boolean] Enable inbound email receiving on this sender. Requires a verified MX record on
       #
-      #   @param phone_number [String] Phone number in E.164 format. Required for phone-based channels (SMS, WhatsApp).
+      #   @param enable_sms_oneway [Boolean] Enable the one-way SMS channel (`sms_oneway`). Needs nothing else — no phone num
+      #
+      #   @param enable_voice [Boolean] Let this sender place and answer phone calls. Requires `phoneNumber`; enabling i
+      #
+      #   @param phone_number [String] Phone number in E.164 format, and it must be a number your project already owns
       #
       #   @param set_as_default [Boolean]
       #
       #   @param webhook_events [Array<Symbol, Zavudev::Models::WebhookEvent>] Events to subscribe to.
       #
+      #   @param webhook_signature_version [Symbol, Zavudev::Models::SenderCreateParams::WebhookSignatureVersion] Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
       #   @param webhook_url [String] HTTPS URL for webhook events.
       #
       #   @param request_options [Zavudev::RequestOptions, Hash{Symbol=>Object}]
+
+      # Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      # - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #   configurable. Existing webhooks stay on it until you move them.
+      # - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #   default for new senders. It signs the timestamp together with the body.
+      # - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #   reading either one works, so you can deploy and confirm your new verifier
+      #   before switching over.
+      #
+      # Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      # https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      module WebhookSignatureVersion
+        extend Zavudev::Internal::Type::Enum
+
+        V1 = :v1
+        V1_V2 = :"v1+v2"
+        V2 = :v2
+
+        # @!method self.values
+        #   @return [Array<Symbol>]
+      end
     end
   end
 end

data/lib/zavudev/models/sender_update_params.rb

@@ -46,6 +46,22 @@ module Zavudev
       #   @return [Boolean, nil]
       optional :email_receiving_enabled, Zavudev::Internal::Type::Boolean, api_name: :emailReceivingEnabled
 
+      # @!attribute enable_sms_oneway
+      #   Turn the one-way SMS channel on or off. Enabling needs nothing else and takes
+      #   effect immediately; disabling removes the channel from the sender. Confirm with
+      #   the `channels` array on the response.
+      #
+      #   @return [Boolean, nil]
+      optional :enable_sms_oneway, Zavudev::Internal::Type::Boolean, api_name: :enableSmsOneway
+
+      # @!attribute enable_voice
+      #   Turn the voice channel on or off. The sender must already have a phone number
+      #   provisioned for calls; enabling it otherwise returns 400 instead of storing a
+      #   flag that changes nothing. Confirm with the `channels` array on the response.
+      #
+      #   @return [Boolean, nil]
+      optional :enable_voice, Zavudev::Internal::Type::Boolean, api_name: :enableVoice
+
       # @!attribute name
       #
       #   @return [String, nil]
@@ -70,13 +86,32 @@ module Zavudev
                -> { Zavudev::Internal::Type::ArrayOf[enum: Zavudev::WebhookEvent] },
                api_name: :webhookEvents
 
+      # @!attribute webhook_signature_version
+      #   Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      #   - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #     configurable. Existing webhooks stay on it until you move them.
+      #   - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #     default for new senders. It signs the timestamp together with the body.
+      #   - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #     reading either one works, so you can deploy and confirm your new verifier
+      #     before switching over.
+      #
+      #   Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      #   https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      #
+      #   @return [Symbol, Zavudev::Models::SenderUpdateParams::WebhookSignatureVersion, nil]
+      optional :webhook_signature_version,
+               enum: -> { Zavudev::SenderUpdateParams::WebhookSignatureVersion },
+               api_name: :webhookSignatureVersion
+
       # @!attribute webhook_url
       #   HTTPS URL for webhook events. Set to null to remove webhook.
       #
       #   @return [String, nil]
       optional :webhook_url, String, api_name: :webhookUrl, nil?: true
 
-      # @!method initialize(sender_id:, email_address: nil, email_catch_all_enabled: nil, email_domain_id: nil, email_from_name: nil, email_receiving_enabled: nil, name: nil, set_as_default: nil, webhook_active: nil, webhook_events: nil, webhook_url: nil, request_options: {})
+      # @!method initialize(sender_id:, email_address: nil, email_catch_all_enabled: nil, email_domain_id: nil, email_from_name: nil, email_receiving_enabled: nil, enable_sms_oneway: nil, enable_voice: nil, name: nil, set_as_default: nil, webhook_active: nil, webhook_events: nil, webhook_signature_version: nil, webhook_url: nil, request_options: {})
       #   Some parameter documentations has been truncated, see
       #   {Zavudev::Models::SenderUpdateParams} for more details.
       #
@@ -92,6 +127,10 @@ module Zavudev
       #
       #   @param email_receiving_enabled [Boolean] Enable or disable inbound email receiving for this sender.
       #
+      #   @param enable_sms_oneway [Boolean] Turn the one-way SMS channel on or off. Enabling needs nothing else and takes ef
+      #
+      #   @param enable_voice [Boolean] Turn the voice channel on or off. The sender must already have a phone number pr
+      #
       #   @param name [String]
       #
       #   @param set_as_default [Boolean]
@@ -100,9 +139,34 @@ module Zavudev
       #
       #   @param webhook_events [Array<Symbol, Zavudev::Models::WebhookEvent>] Events to subscribe to.
       #
+      #   @param webhook_signature_version [Symbol, Zavudev::Models::SenderUpdateParams::WebhookSignatureVersion] Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
       #   @param webhook_url [String, nil] HTTPS URL for webhook events. Set to null to remove webhook.
       #
       #   @param request_options [Zavudev::RequestOptions, Hash{Symbol=>Object}]
+
+      # Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      # - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #   configurable. Existing webhooks stay on it until you move them.
+      # - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #   default for new senders. It signs the timestamp together with the body.
+      # - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #   reading either one works, so you can deploy and confirm your new verifier
+      #   before switching over.
+      #
+      # Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      # https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      module WebhookSignatureVersion
+        extend Zavudev::Internal::Type::Enum
+
+        V1 = :v1
+        V1_V2 = :"v1+v2"
+        V2 = :v2
+
+        # @!method self.values
+        #   @return [Array<Symbol>]
+      end
     end
   end
 end

data/lib/zavudev/models/sender_webhook.rb

@@ -15,6 +15,25 @@ module Zavudev
       #   @return [Array<Symbol, Zavudev::Models::WebhookEvent>]
       required :events, -> { Zavudev::Internal::Type::ArrayOf[enum: Zavudev::WebhookEvent] }
 
+      # @!attribute signature_version
+      #   Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      #   - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #     configurable. Existing webhooks stay on it until you move them.
+      #   - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #     default for new senders. It signs the timestamp together with the body.
+      #   - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #     reading either one works, so you can deploy and confirm your new verifier
+      #     before switching over.
+      #
+      #   Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      #   https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      #
+      #   @return [Symbol, Zavudev::Models::SenderWebhook::SignatureVersion]
+      required :signature_version,
+               enum: -> { Zavudev::SenderWebhook::SignatureVersion },
+               api_name: :signatureVersion
+
       # @!attribute url
       #   HTTPS URL that will receive webhook events.
       #
@@ -28,7 +47,7 @@ module Zavudev
       #   @return [String, nil]
       optional :secret, String
 
-      # @!method initialize(active:, events:, url:, secret: nil)
+      # @!method initialize(active:, events:, signature_version:, url:, secret: nil)
       #   Some parameter documentations has been truncated, see
       #   {Zavudev::Models::SenderWebhook} for more details.
       #
@@ -38,9 +57,36 @@ module Zavudev
       #
       #   @param events [Array<Symbol, Zavudev::Models::WebhookEvent>] List of events the webhook is subscribed to.
       #
+      #   @param signature_version [Symbol, Zavudev::Models::SenderWebhook::SignatureVersion] Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
       #   @param url [String] HTTPS URL that will receive webhook events.
       #
       #   @param secret [String] Webhook secret for signature verification. Only returned on create or regenerate
+
+      # Which `X-Zavu-Signature` scheme this receiver is sent.
+      #
+      # - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+      #   configurable. Existing webhooks stay on it until you move them.
+      # - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+      #   default for new senders. It signs the timestamp together with the body.
+      # - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+      #   reading either one works, so you can deploy and confirm your new verifier
+      #   before switching over.
+      #
+      # Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+      # https://docs.zavu.dev/guides/receiving-messages/signature-migration
+      #
+      # @see Zavudev::Models::SenderWebhook#signature_version
+      module SignatureVersion
+        extend Zavudev::Internal::Type::Enum
+
+        V1 = :v1
+        V1_V2 = :"v1+v2"
+        V2 = :v2
+
+        # @!method self.values
+        #   @return [Array<Symbol>]
+      end
     end
   end
 end

data/lib/zavudev/models/senders/agent/agent_tool.rb

@@ -53,7 +53,22 @@ module Zavudev
           #   @return [String]
           required :webhook_url, String, api_name: :webhookUrl
 
-          # @!method initialize(id:, agent_id:, created_at:, description:, enabled:, name:, parameters:, updated_at:, webhook_url:)
+          # @!attribute webhook_secret
+          #   Signing secret for this tool's webhook. **Returned only when the tool is
+          #   created**, never on a later read.
+          #
+          #   Zavu generates one if you do not supply it, and signs every call to this tool
+          #   with it: `X-Zavu-Signature: <hex>`, the HMAC-SHA256 of the request body. Verify
+          #   it before trusting the call. Lost it? Rotate with
+          #   `POST /v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`.
+          #
+          #   @return [String, nil]
+          optional :webhook_secret, String, api_name: :webhookSecret
+
+          # @!method initialize(id:, agent_id:, created_at:, description:, enabled:, name:, parameters:, updated_at:, webhook_url:, webhook_secret: nil)
+          #   Some parameter documentations has been truncated, see
+          #   {Zavudev::Models::Senders::Agent::AgentTool} for more details.
+          #
           #   @param id [String]
           #
           #   @param agent_id [String]
@@ -71,6 +86,9 @@ module Zavudev
           #   @param updated_at [Time]
           #
           #   @param webhook_url [String] HTTPS URL to call when the tool is executed.
+          #
+          #   @param webhook_secret [String] Signing secret for this tool's webhook. \*\*Returned only when the tool is
+          #   created
         end
       end