zernio-sdk 0.0.1066 → 0.0.1067

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9985396218658396d8919215cbb77ea3be510a951894cbf89750a8325344e3b5
-  data.tar.gz: 07772b2fcb58b1d9149476859e819611ea47df2b643350d6ba81442c73ad6180
+  metadata.gz: 86169536fec909716dbb44f07d1f2d53e96db7c665386c34e502fbde9395d702
+  data.tar.gz: 0ef9eb7295f5d8c98ff7d6748722ea51d46cb8b44cc70b13aa6cc6d2c17f8aa0
 SHA512:
-  metadata.gz: 1c6ed1cbb8eaed9eedb0e3e4ecaf6b0fe298a152e3ba7db0ff22c28629150ba86a390b330d9ceff52f706621cd513186bdca3e11948d6d1d885a9f4c687b302a
-  data.tar.gz: a2ac4e84956991695c838bba24f6300ca405924ebf948c161ea93bdce6d5515549c61d3b9a5afb1a6373a1f636fde1ed5cf91d0cc2bd549272c9df563e8fcf51
+  metadata.gz: 52bfac9e54b042470cb42259b2ca863de956aa9b1fe834b1dda9ed5a2dd257ae6e43b428fc1c5e87d30eea9a739f8f9cc743faea18301342512db414d5e96470
+  data.tar.gz: 1ffde8705240cee8c5da74aabfc5b2d253cb3267afe5b4decde1154b084613f40fa47c7590cb6fdb9390211856a0926120f7779251a9ba57c55fe34f81ee942c

data/docs/CreateWebhookSettingsRequest.md

@@ -11,6 +11,7 @@
 | **is_active** | **Boolean** | Enable or disable webhook delivery. Defaults to `true` when omitted. | [optional][default to true] |
 | **custom_headers** | **Hash<String, String>** | Custom headers to include in webhook requests | [optional] |
 | **disabled_resource_groups** | **Array<String>** | Resource groups this subscription does not receive (opt-out denylist). Omit or send an empty array to receive every event in `events`. Listing a group here drops its events before delivery and on every replay path. Set at creation it applies to everything this subscription ever receives; changed later via PUT it applies to events emitted after the change, with a five-minute tail for events already queued (see that operation). When the caller is a restricted (zrk_) key, that key's own disabled groups are unioned into whatever you send here, so a restricted key can never create a subscription wider than itself. | [optional] |
+| **profile_ids** | **Array<String>** | Profiles this subscription receives events for. Omit or send an empty array to receive every profile. Every id must be a profile in your team, otherwise the request fails with 404 `profile_not_found` and nothing is created. Typical use is routing the profile that holds test accounts to a staging endpoint. | [optional] |
 
 ## Example
 
@@ -24,7 +25,8 @@ instance = Zernio::CreateWebhookSettingsRequest.new(
   events: null,
   is_active: null,
   custom_headers: null,
-  disabled_resource_groups: null
+  disabled_resource_groups: null,
+  profile_ids: null
 )
 ```
 

data/docs/UpdateWebhookSettingsRequest.md

@@ -13,6 +13,7 @@
 | **is_active** | **Boolean** | Enable or disable webhook delivery | [optional] |
 | **custom_headers** | **Hash<String, String>** | Custom headers to include in webhook requests | [optional] |
 | **disabled_resource_groups** | **Array<String>** | Replaces the subscription's denylist. Send an empty array to clear it and receive every event in `events` again. Omitting the field leaves the current denylist untouched. Applies to events emitted after the update; already-queued events can still deliver for up to five minutes after they were enqueued. When the caller is a restricted (zrk_) key, that key's own disabled groups are unioned back in either way, so a restricted key can neither clear nor widen a subscription past its own groups. | [optional] |
+| **profile_ids** | **Array<String>** | Replaces the subscription's profile allowlist. Send an empty array to receive every profile again. Omitting the field leaves the current list untouched. Every id must be a profile in your team, otherwise the request fails with 404 `profile_not_found` and nothing changes. Applies to events emitted after the update. | [optional] |
 
 ## Example
 
@@ -28,7 +29,8 @@ instance = Zernio::UpdateWebhookSettingsRequest.new(
   events: null,
   is_active: null,
   custom_headers: null,
-  disabled_resource_groups: null
+  disabled_resource_groups: null,
+  profile_ids: null
 )
 ```
 

data/docs/Webhook.md

@@ -14,6 +14,7 @@
 | **failure_count** | **Integer** | Consecutive terminal delivery failures (resets to 0 on any successful delivery). Auto-disable only triggers when the endpoint has had no successful delivery within a 3-day window AND either reaches 20 consecutive terminal failures or has been failing continuously for 3 days; any success within that window keeps the endpoint enabled regardless of the count. | [optional] |
 | **custom_headers** | **Hash<String, String>** | Custom headers included in webhook requests | [optional] |
 | **disabled_resource_groups** | **Array<String>** | Resource groups this subscription does not receive (opt-out denylist, same vocabulary and same semantics as the field on API keys). Absent or empty means the subscription receives every event listed in `events`, which is how every subscription created before this field existed behaves. An event whose group is listed here is dropped before delivery even when it is still present in `events`, and the same check runs on every replay path (test fire, redelivery, dead-letter requeue). Editing the denylist applies to every event emitted afterwards; events already queued when the edit landed can still be delivered for up to five minutes after they were enqueued. | [optional] |
+| **profile_ids** | **Array<String>** | Profiles this subscription receives events for (allowlist). Absent or empty means every profile, which is how every subscription created before this field existed behaves. A scoped subscription is only sent events attributable to a listed profile; events with no profile behind them (`verification.*`, `phone_number.*`) are not delivered to it. Applied when the event is emitted: a redelivery replays a delivery already made to this endpoint, and a test fire ignores the list. | [optional] |
 
 ## Example
 
@@ -30,7 +31,8 @@ instance = Zernio::Webhook.new(
   last_fired_at: null,
   failure_count: null,
   custom_headers: null,
-  disabled_resource_groups: null
+  disabled_resource_groups: null,
+  profile_ids: null
 )
 ```
 

data/docs/WebhooksApi.md

@@ -19,7 +19,7 @@ All URIs are relative to *https://zernio.com/api*
 
 Create webhook
 
-Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in. 
+Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in.  `profileIds` pins the subscription to a set of profiles: only events attributable to one of them are delivered. Use it to send the profile holding your test accounts to a staging endpoint. Ids outside your team are rejected with 404 `profile_not_found`. 
 
 ### Examples
 
@@ -446,7 +446,7 @@ end
 
 Update webhook
 
-Update an existing webhook configuration. All fields except `webhookId` are optional; only provided fields will be updated. `webhookId` is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated `_id` is still accepted in its place.  When provided, `name` must be 1-50 characters, `url` must be a valid URL, and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only set `events` to events whose resource group the key holds; an event outside the key's groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  `disabledResourceGroups` replaces the subscription's own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key's own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist. 
+Update an existing webhook configuration. All fields except `webhookId` are optional; only provided fields will be updated. `webhookId` is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated `_id` is still accepted in its place.  When provided, `name` must be 1-50 characters, `url` must be a valid URL, and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only set `events` to events whose resource group the key holds; an event outside the key's groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  `disabledResourceGroups` replaces the subscription's own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key's own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist.  `profileIds` replaces the subscription's profile allowlist; an empty array clears it. Ids outside your team are rejected with 404 `profile_not_found`. 
 
 ### Examples
 

data/lib/zernio-sdk/api/webhooks_api.rb

@@ -20,7 +20,7 @@ module Zernio
       @api_client = api_client
     end
     # Create webhook
-    # Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in. 
+    # Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in.  `profileIds` pins the subscription to a set of profiles: only events attributable to one of them are delivered. Use it to send the profile holding your test accounts to a staging endpoint. Ids outside your team are rejected with 404 `profile_not_found`. 
     # @param create_webhook_settings_request [CreateWebhookSettingsRequest] 
     # @param [Hash] opts the optional parameters
     # @return [UpdateWebhookSettings200Response]
@@ -30,7 +30,7 @@ module Zernio
     end
 
     # Create webhook
-    # Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in. 
+    # Create a new webhook configuration. Maximum 50 webhooks per user.  `name`, `url` and `events` are required. `url` must be a valid URL and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only subscribe to events whose resource group the key holds; an event outside the key's groups is rejected with 403, so a restricted key can never create a subscription broader than itself.  `disabledResourceGroups` restricts the subscription itself, independently of which key or session later reads it. Events in a disabled group are dropped before delivery to this endpoint, on live delivery and on every replay path (test fire, redelivery, dead-letter requeue), even if they are listed in `events`. Omit it to receive everything in `events`, which is how existing subscriptions behave. A restricted key's own disabled groups are always unioned in.  `profileIds` pins the subscription to a set of profiles: only events attributable to one of them are delivered. Use it to send the profile holding your test accounts to a staging endpoint. Ids outside your team are rejected with 404 `profile_not_found`. 
     # @param create_webhook_settings_request [CreateWebhookSettingsRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(UpdateWebhookSettings200Response, Integer, Hash)>] UpdateWebhookSettings200Response data, response status code and response headers
@@ -473,7 +473,7 @@ module Zernio
     end
 
     # Update webhook
-    # Update an existing webhook configuration. All fields except `webhookId` are optional; only provided fields will be updated. `webhookId` is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated `_id` is still accepted in its place.  When provided, `name` must be 1-50 characters, `url` must be a valid URL, and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only set `events` to events whose resource group the key holds; an event outside the key's groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  `disabledResourceGroups` replaces the subscription's own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key's own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist. 
+    # Update an existing webhook configuration. All fields except `webhookId` are optional; only provided fields will be updated. `webhookId` is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated `_id` is still accepted in its place.  When provided, `name` must be 1-50 characters, `url` must be a valid URL, and `events` must contain at least one event. Whitespace is trimmed from `url` before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with `isActive: true`.  A restricted (zrk_) API key can only set `events` to events whose resource group the key holds; an event outside the key's groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  `disabledResourceGroups` replaces the subscription's own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key's own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist.  `profileIds` replaces the subscription's profile allowlist; an empty array clears it. Ids outside your team are rejected with 404 `profile_not_found`. 
     # @param update_webhook_settings_request [UpdateWebhookSettingsRequest] 
     # @param [Hash] opts the optional parameters
     # @return [UpdateWebhookSettings200Response]
@@ -483,7 +483,7 @@ module Zernio
     end
 
     # Update webhook
-    # Update an existing webhook configuration. All fields except &#x60;webhookId&#x60; are optional; only provided fields will be updated. &#x60;webhookId&#x60; is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated &#x60;_id&#x60; is still accepted in its place.  When provided, &#x60;name&#x60; must be 1-50 characters, &#x60;url&#x60; must be a valid URL, and &#x60;events&#x60; must contain at least one event. Whitespace is trimmed from &#x60;url&#x60; before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with &#x60;isActive: true&#x60;.  A restricted (zrk_) API key can only set &#x60;events&#x60; to events whose resource group the key holds; an event outside the key&#39;s groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  &#x60;disabledResourceGroups&#x60; replaces the subscription&#39;s own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key&#39;s own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist. 
+    # Update an existing webhook configuration. All fields except &#x60;webhookId&#x60; are optional; only provided fields will be updated. &#x60;webhookId&#x60; is the same name the other /v1/webhooks operations use (logs, redeliver, test); the deprecated &#x60;_id&#x60; is still accepted in its place.  When provided, &#x60;name&#x60; must be 1-50 characters, &#x60;url&#x60; must be a valid URL, and &#x60;events&#x60; must contain at least one event. Whitespace is trimmed from &#x60;url&#x60; before validation.  Webhooks are auto-disabled only once the endpoint has had no successful delivery for 3 days AND has either reached 20 consecutive terminal failures (each one an event that exhausted the full retry ladder) or been failing continuously for 3 days. The owner is emailed; re-enable it with &#x60;isActive: true&#x60;.  A restricted (zrk_) API key can only set &#x60;events&#x60; to events whose resource group the key holds; an event outside the key&#39;s groups is rejected with 403. It also cannot widen an existing subscription past its own groups.  &#x60;disabledResourceGroups&#x60; replaces the subscription&#39;s own denylist, which applies to delivery regardless of which key or session created it. Send an empty array to clear it. A restricted key&#39;s own disabled groups are unioned into the stored value on every update, so repointing a legacy unrestricted subscription with a restricted key also narrows it.  Timing: the new denylist applies to every event emitted after the update. Events already queued for delivery when the update landed were filtered against the previous denylist and can still arrive at your endpoint for up to five minutes after they were enqueued, because the delivery worker trusts a five-minute enqueue-time snapshot before re-checking the subscription. Retries beyond that window, dead-letter replays, test fires, and redeliveries are all checked against the current denylist.  &#x60;profileIds&#x60; replaces the subscription&#39;s profile allowlist; an empty array clears it. Ids outside your team are rejected with 404 &#x60;profile_not_found&#x60;. 
     # @param update_webhook_settings_request [UpdateWebhookSettingsRequest] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(UpdateWebhookSettings200Response, Integer, Hash)>] UpdateWebhookSettings200Response data, response status code and response headers

data/lib/zernio-sdk/models/create_webhook_settings_request.rb

@@ -36,6 +36,9 @@ module Zernio
     # Resource groups this subscription does not receive (opt-out denylist). Omit or send an empty array to receive every event in `events`. Listing a group here drops its events before delivery and on every replay path. Set at creation it applies to everything this subscription ever receives; changed later via PUT it applies to events emitted after the change, with a five-minute tail for events already queued (see that operation). When the caller is a restricted (zrk_) key, that key's own disabled groups are unioned into whatever you send here, so a restricted key can never create a subscription wider than itself.
     attr_accessor :disabled_resource_groups
 
+    # Profiles this subscription receives events for. Omit or send an empty array to receive every profile. Every id must be a profile in your team, otherwise the request fails with 404 `profile_not_found` and nothing is created. Typical use is routing the profile that holds test accounts to a staging endpoint.
+    attr_accessor :profile_ids
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -67,7 +70,8 @@ module Zernio
         :'events' => :'events',
         :'is_active' => :'isActive',
         :'custom_headers' => :'customHeaders',
-        :'disabled_resource_groups' => :'disabledResourceGroups'
+        :'disabled_resource_groups' => :'disabledResourceGroups',
+        :'profile_ids' => :'profileIds'
       }
     end
 
@@ -90,7 +94,8 @@ module Zernio
         :'events' => :'Array<String>',
         :'is_active' => :'Boolean',
         :'custom_headers' => :'Hash<String, String>',
-        :'disabled_resource_groups' => :'Array<String>'
+        :'disabled_resource_groups' => :'Array<String>',
+        :'profile_ids' => :'Array<String>'
       }
     end
 
@@ -157,6 +162,12 @@ module Zernio
           self.disabled_resource_groups = value
         end
       end
+
+      if attributes.key?(:'profile_ids')
+        if (value = attributes[:'profile_ids']).is_a?(Array)
+          self.profile_ids = value
+        end
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -188,6 +199,10 @@ module Zernio
         invalid_properties.push('invalid value for "events", number of items must be greater than or equal to 1.')
       end
 
+      if !@profile_ids.nil? && @profile_ids.length > 50
+        invalid_properties.push('invalid value for "profile_ids", number of items must be less than or equal to 50.')
+      end
+
       invalid_properties
     end
 
@@ -201,6 +216,7 @@ module Zernio
       return false if @url.nil?
       return false if @events.nil?
       return false if @events.length < 1
+      return false if !@profile_ids.nil? && @profile_ids.length > 50
       true
     end
 
@@ -232,6 +248,20 @@ module Zernio
       @url = url
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] profile_ids Value to be assigned
+    def profile_ids=(profile_ids)
+      if profile_ids.nil?
+        fail ArgumentError, 'profile_ids cannot be nil'
+      end
+
+      if profile_ids.length > 50
+        fail ArgumentError, 'invalid value for "profile_ids", number of items must be less than or equal to 50.'
+      end
+
+      @profile_ids = profile_ids
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -243,7 +273,8 @@ module Zernio
           events == o.events &&
           is_active == o.is_active &&
           custom_headers == o.custom_headers &&
-          disabled_resource_groups == o.disabled_resource_groups
+          disabled_resource_groups == o.disabled_resource_groups &&
+          profile_ids == o.profile_ids
     end
 
     # @see the `==` method
@@ -255,7 +286,7 @@ module Zernio
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [name, url, secret, events, is_active, custom_headers, disabled_resource_groups].hash
+      [name, url, secret, events, is_active, custom_headers, disabled_resource_groups, profile_ids].hash
     end
 
     # Builds the object from hash

data/lib/zernio-sdk/models/update_webhook_settings_request.rb

@@ -42,6 +42,9 @@ module Zernio
     # Replaces the subscription's denylist. Send an empty array to clear it and receive every event in `events` again. Omitting the field leaves the current denylist untouched. Applies to events emitted after the update; already-queued events can still deliver for up to five minutes after they were enqueued. When the caller is a restricted (zrk_) key, that key's own disabled groups are unioned back in either way, so a restricted key can neither clear nor widen a subscription past its own groups.
     attr_accessor :disabled_resource_groups
 
+    # Replaces the subscription's profile allowlist. Send an empty array to receive every profile again. Omitting the field leaves the current list untouched. Every id must be a profile in your team, otherwise the request fails with 404 `profile_not_found` and nothing changes. Applies to events emitted after the update.
+    attr_accessor :profile_ids
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -75,7 +78,8 @@ module Zernio
         :'events' => :'events',
         :'is_active' => :'isActive',
         :'custom_headers' => :'customHeaders',
-        :'disabled_resource_groups' => :'disabledResourceGroups'
+        :'disabled_resource_groups' => :'disabledResourceGroups',
+        :'profile_ids' => :'profileIds'
       }
     end
 
@@ -100,7 +104,8 @@ module Zernio
         :'events' => :'Array<String>',
         :'is_active' => :'Boolean',
         :'custom_headers' => :'Hash<String, String>',
-        :'disabled_resource_groups' => :'Array<String>'
+        :'disabled_resource_groups' => :'Array<String>',
+        :'profile_ids' => :'Array<String>'
       }
     end
 
@@ -167,6 +172,12 @@ module Zernio
           self.disabled_resource_groups = value
         end
       end
+
+      if attributes.key?(:'profile_ids')
+        if (value = attributes[:'profile_ids']).is_a?(Array)
+          self.profile_ids = value
+        end
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -186,6 +197,10 @@ module Zernio
         invalid_properties.push('invalid value for "events", number of items must be greater than or equal to 1.')
       end
 
+      if !@profile_ids.nil? && @profile_ids.length > 50
+        invalid_properties.push('invalid value for "profile_ids", number of items must be less than or equal to 50.')
+      end
+
       invalid_properties
     end
 
@@ -196,6 +211,7 @@ module Zernio
       return false if !@name.nil? && @name.to_s.length > 50
       return false if !@name.nil? && @name.to_s.length < 1
       return false if !@events.nil? && @events.length < 1
+      return false if !@profile_ids.nil? && @profile_ids.length > 50
       true
     end
 
@@ -217,6 +233,20 @@ module Zernio
       @name = name
     end
 
+    # Custom attribute writer method with validation
+    # @param [Object] profile_ids Value to be assigned
+    def profile_ids=(profile_ids)
+      if profile_ids.nil?
+        fail ArgumentError, 'profile_ids cannot be nil'
+      end
+
+      if profile_ids.length > 50
+        fail ArgumentError, 'invalid value for "profile_ids", number of items must be less than or equal to 50.'
+      end
+
+      @profile_ids = profile_ids
+    end
+
     # Checks equality by comparing each attribute.
     # @param [Object] Object to be compared
     def ==(o)
@@ -230,7 +260,8 @@ module Zernio
           events == o.events &&
           is_active == o.is_active &&
           custom_headers == o.custom_headers &&
-          disabled_resource_groups == o.disabled_resource_groups
+          disabled_resource_groups == o.disabled_resource_groups &&
+          profile_ids == o.profile_ids
     end
 
     # @see the `==` method
@@ -242,7 +273,7 @@ module Zernio
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [webhook_id, _id, name, url, secret, events, is_active, custom_headers, disabled_resource_groups].hash
+      [webhook_id, _id, name, url, secret, events, is_active, custom_headers, disabled_resource_groups, profile_ids].hash
     end
 
     # Builds the object from hash

data/lib/zernio-sdk/models/webhook.rb

@@ -46,6 +46,9 @@ module Zernio
     # Resource groups this subscription does not receive (opt-out denylist, same vocabulary and same semantics as the field on API keys). Absent or empty means the subscription receives every event listed in `events`, which is how every subscription created before this field existed behaves. An event whose group is listed here is dropped before delivery even when it is still present in `events`, and the same check runs on every replay path (test fire, redelivery, dead-letter requeue). Editing the denylist applies to every event emitted afterwards; events already queued when the edit landed can still be delivered for up to five minutes after they were enqueued.
     attr_accessor :disabled_resource_groups
 
+    # Profiles this subscription receives events for (allowlist). Absent or empty means every profile, which is how every subscription created before this field existed behaves. A scoped subscription is only sent events attributable to a listed profile; events with no profile behind them (`verification.*`, `phone_number.*`) are not delivered to it. Applied when the event is emitted: a redelivery replays a delivery already made to this endpoint, and a test fire ignores the list.
+    attr_accessor :profile_ids
+
     class EnumAttributeValidator
       attr_reader :datatype
       attr_reader :allowable_values
@@ -80,7 +83,8 @@ module Zernio
         :'last_fired_at' => :'lastFiredAt',
         :'failure_count' => :'failureCount',
         :'custom_headers' => :'customHeaders',
-        :'disabled_resource_groups' => :'disabledResourceGroups'
+        :'disabled_resource_groups' => :'disabledResourceGroups',
+        :'profile_ids' => :'profileIds'
       }
     end
 
@@ -106,7 +110,8 @@ module Zernio
         :'last_fired_at' => :'Time',
         :'failure_count' => :'Integer',
         :'custom_headers' => :'Hash<String, String>',
-        :'disabled_resource_groups' => :'Array<String>'
+        :'disabled_resource_groups' => :'Array<String>',
+        :'profile_ids' => :'Array<String>'
       }
     end
 
@@ -177,6 +182,12 @@ module Zernio
           self.disabled_resource_groups = value
         end
       end
+
+      if attributes.key?(:'profile_ids')
+        if (value = attributes[:'profile_ids']).is_a?(Array)
+          self.profile_ids = value
+        end
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -227,7 +238,8 @@ module Zernio
           last_fired_at == o.last_fired_at &&
           failure_count == o.failure_count &&
           custom_headers == o.custom_headers &&
-          disabled_resource_groups == o.disabled_resource_groups
+          disabled_resource_groups == o.disabled_resource_groups &&
+          profile_ids == o.profile_ids
     end
 
     # @see the `==` method
@@ -239,7 +251,7 @@ module Zernio
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [_id, name, url, secret, events, is_active, last_fired_at, failure_count, custom_headers, disabled_resource_groups].hash
+      [_id, name, url, secret, events, is_active, last_fired_at, failure_count, custom_headers, disabled_resource_groups, profile_ids].hash
     end
 
     # Builds the object from hash

data/lib/zernio-sdk/version.rb

@@ -11,5 +11,5 @@ Generator version: 7.19.0
 =end
 
 module Zernio
-  VERSION = '0.0.1066'
+  VERSION = '0.0.1067'
 end