zyphr 0.1.43 → 0.1.44

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ebdab8198569c4cb0ec3851df67ee2f92dc78b98cd10814fdc338141fe394c0a
-  data.tar.gz: 6093a93aa1280e8b7885ca65d8110badf25cd77bba988ed3cea53c39cea80984
+  metadata.gz: bdb232c25df3ba83aad2f1e205941038b186be722997d3f4a0b9a4d4866c5fec
+  data.tar.gz: c5e28ca2a16b510deca00ff1f99d769f273363bdde11c34afcd8617df54860e4
 SHA512:
-  metadata.gz: 458f05916058c46f4af69e41fa2921737cd03f7fba339284f3728d3335269cd7b5f78a5a05ee9d8bf2cbd2b615d5ec0f3cdd958feac2f107ecf41e4f04793d62
-  data.tar.gz: 83cb0d9771508e9761f720c73f6769ef72864d47a524b593ebbf4645f343196cea6b7ef5f96bf774a748a769f928631ea217c90987c5de06d5bdb9d771f19bc6
+  metadata.gz: 187ff2bea23ac4b9bd35b5c999a63f25a14e659924d5382d57062fae4a0d20ebb8a64eca421ceb1b517ef17ff855f8465ee9e9a8f64c962af4088f975df3dcd9
+  data.tar.gz: 54e87dc5d28157446a0feb49196231cf49789db4f2f87982fc2cffde9d2efced47d662e42bd4fa5610f28c64ff19d73900cf65c69b4eaa6fdcbaffab66d6e8f4

data/README.md

@@ -104,6 +104,13 @@ require 'zyphr'
 
 # Setup authorization
 Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+  # Configure faraday connection
+  config.configure_faraday_connection { |connection| 'YOUR CONNECTION CONFIG PROC' }
+
   # Configure API key authorization: ApplicationPublicKey
   config.api_key['X-Application-Key'] = 'YOUR API KEY'
   # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
@@ -112,14 +119,14 @@ Zyphr.configure do |config|
   config.configure_faraday_connection { |connection| 'YOUR CONNECTION CONFIG PROC' }
 end
 
-api_instance = Zyphr::AuthEmailOTPApi.new
+api_instance = Zyphr::AuthApplicationApi.new
 
 begin
-  #Check email OTP availability
-  result = api_instance.check_email_otp_availability
+  #Get the authenticating application
+  result = api_instance.get_self_application
   p result
 rescue Zyphr::ApiError => e
-  puts "Exception when calling AuthEmailOTPApi->check_email_otp_availability: #{e}"
+  puts "Exception when calling AuthApplicationApi->get_self_application: #{e}"
 end
 
 ```
@@ -130,6 +137,7 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 
 Class | Method | HTTP request | Description
 ------------ | ------------- | ------------- | -------------
+*Zyphr::AuthApplicationApi* | [**get_self_application**](docs/AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application
 *Zyphr::AuthEmailOTPApi* | [**check_email_otp_availability**](docs/AuthEmailOTPApi.md#check_email_otp_availability) | **GET** /auth/email-otp/available | Check email OTP availability
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_login**](docs/AuthEmailOTPApi.md#send_email_otp_login) | **POST** /auth/email-otp/login/send | Send email OTP for login
 *Zyphr::AuthEmailOTPApi* | [**send_email_otp_registration**](docs/AuthEmailOTPApi.md#send_email_otp_registration) | **POST** /auth/email-otp/register/send | Send email OTP for registration
@@ -195,6 +203,7 @@ Class | Method | HTTP request | Description
 *Zyphr::AuthSessionsApi* | [**revoke_all_end_user_sessions**](docs/AuthSessionsApi.md#revoke_all_end_user_sessions) | **POST** /auth/sessions/revoke-all | Revoke all sessions
 *Zyphr::AuthSessionsApi* | [**revoke_end_user_session**](docs/AuthSessionsApi.md#revoke_end_user_session) | **POST** /auth/sessions/revoke | Revoke a session
 *Zyphr::AuthUserDirectoryApi* | [**delete_end_user_by_application**](docs/AuthUserDirectoryApi.md#delete_end_user_by_application) | **DELETE** /auth/users/{user_id} | Delete an end user (server-side admin)
+*Zyphr::AuthUserDirectoryApi* | [**get_end_user_auth_methods**](docs/AuthUserDirectoryApi.md#get_end_user_auth_methods) | **GET** /auth/users/{user_id}/auth-methods | Get an end user's sign-in methods (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_by_email**](docs/AuthUserDirectoryApi.md#get_end_user_by_email) | **GET** /auth/users/by-email | Look up an end user by email (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_by_id**](docs/AuthUserDirectoryApi.md#get_end_user_by_id) | **GET** /auth/users/{user_id} | Get an end user by id (server-side admin)
 *Zyphr::AuthUserDirectoryApi* | [**get_end_user_claims**](docs/AuthUserDirectoryApi.md#get_end_user_claims) | **GET** /auth/users/{user_id}/claims | Get an end user's stored custom claims (server-side admin)
@@ -393,6 +402,8 @@ Class | Method | HTTP request | Description
  - [Zyphr::ApiError](docs/ApiError.md)
  - [Zyphr::ApiErrorError](docs/ApiErrorError.md)
  - [Zyphr::ApiErrorMeta](docs/ApiErrorMeta.md)
+ - [Zyphr::ApplicationSelf](docs/ApplicationSelf.md)
+ - [Zyphr::ApplicationSelfResponse](docs/ApplicationSelfResponse.md)
  - [Zyphr::AuthEmailTemplate](docs/AuthEmailTemplate.md)
  - [Zyphr::AuthEmailTemplateDefault](docs/AuthEmailTemplateDefault.md)
  - [Zyphr::AuthEmailTemplateDefaultResponse](docs/AuthEmailTemplateDefaultResponse.md)
@@ -413,6 +424,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::AuthLoginResponse](docs/AuthLoginResponse.md)
  - [Zyphr::AuthLoginResult](docs/AuthLoginResult.md)
  - [Zyphr::AuthLoginResultMfaChallenge](docs/AuthLoginResultMfaChallenge.md)
+ - [Zyphr::AuthMethods](docs/AuthMethods.md)
  - [Zyphr::AuthResult](docs/AuthResult.md)
  - [Zyphr::AuthResultResponse](docs/AuthResultResponse.md)
  - [Zyphr::AuthSession](docs/AuthSession.md)
@@ -506,6 +518,7 @@ Class | Method | HTTP request | Description
  - [Zyphr::GenerateWaaSPortalToken201Response](docs/GenerateWaaSPortalToken201Response.md)
  - [Zyphr::GetDomain200Response](docs/GetDomain200Response.md)
  - [Zyphr::GetDomain200ResponseMeta](docs/GetDomain200ResponseMeta.md)
+ - [Zyphr::GetEndUserAuthMethods200Response](docs/GetEndUserAuthMethods200Response.md)
  - [Zyphr::GetEndUserById200Response](docs/GetEndUserById200Response.md)
  - [Zyphr::GetEndUserClaims200Response](docs/GetEndUserClaims200Response.md)
  - [Zyphr::GetEndUserClaims200ResponseData](docs/GetEndUserClaims200ResponseData.md)

data/docs/ApplicationSelf.md

@@ -0,0 +1,24 @@
+# Zyphr::ApplicationSelf
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **id** | **String** | The application's unique id (application_id). |  |
+| **name** | **String** | Human-readable application name. |  |
+| **environment** | **String** | The environment mode of the credentials used to authenticate this request. `null` when the environment cannot be determined (e.g. a legacy application-level key that predates environment-scoped keys) — not defaulted to a guessed value. |  |
+| **signing_algorithm** | **String** | JWT signing algorithm for this application's end-user tokens. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ApplicationSelf.new(
+  id: null,
+  name: null,
+  environment: null,
+  signing_algorithm: null
+)
+```
+

data/docs/ApplicationSelfResponse.md

@@ -0,0 +1,20 @@
+# Zyphr::ApplicationSelfResponse
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **data** | [**ApplicationSelf**](ApplicationSelf.md) |  | [optional] |
+| **meta** | [**RequestMeta**](RequestMeta.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::ApplicationSelfResponse.new(
+  data: null,
+  meta: null
+)
+```
+

data/docs/AuthApplicationApi.md

@@ -0,0 +1,81 @@
+# Zyphr::AuthApplicationApi
+
+All URIs are relative to *https://api.zyphr.dev/v1*
+
+| Method | HTTP request | Description |
+| ------ | ------------ | ----------- |
+| [**get_self_application**](AuthApplicationApi.md#get_self_application) | **GET** /auth/application | Get the authenticating application |
+
+
+## get_self_application
+
+> <ApplicationSelfResponse> get_self_application
+
+Get the authenticating application
+
+Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment's mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthApplicationApi.new
+
+begin
+  # Get the authenticating application
+  result = api_instance.get_self_application
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->get_self_application: #{e}"
+end
+```
+
+#### Using the get_self_application_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<ApplicationSelfResponse>, Integer, Hash)> get_self_application_with_http_info
+
+```ruby
+begin
+  # Get the authenticating application
+  data, status_code, headers = api_instance.get_self_application_with_http_info
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <ApplicationSelfResponse>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthApplicationApi->get_self_application_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+This endpoint does not need any parameter.
+
+### Return type
+
+[**ApplicationSelfResponse**](ApplicationSelfResponse.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+

data/docs/AuthEmailTemplateTestRequest.md

@@ -4,7 +4,7 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **to** | **String** | Recipient email. Must be in the application's `test_recipients` allowlist. |  |
+| **to** | **String** | Recipient email. Must be in the application's `test_recipients` allowlist. When non-empty, `test_recipients` gates ALL auth emails the application sends (magic link, password reset, verification, OTP) — only listed recipients receive auth email — which keeps non-production applications safe from mass sends. An empty allowlist imposes no restriction. |  |
 | **variables** | **Hash<String, Object>** |  | [optional] |
 
 ## Example

data/docs/AuthEmailTemplatesApi.md

@@ -631,7 +631,7 @@ end
 
 Send a test render of a template
 
-Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
 
 ### Examples
 

data/docs/AuthMethods.md

@@ -0,0 +1,28 @@
+# Zyphr::AuthMethods
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **has_password** | **Boolean** | True if the user has a password credential (false for OAuth-only / passwordless users). |  |
+| **oauth_providers** | **Array<String>** | Distinct OAuth providers linked to the user (e.g. google, apple). |  |
+| **mfa_enabled** | **Boolean** | True if the user has multi-factor authentication enabled. |  |
+| **email_verified** | **Boolean** | True if the user's email address has been verified. |  |
+| **phone_verified** | **Boolean** | True if the user's phone number has been verified. |  |
+| **passkeys** | **Integer** | Number of WebAuthn passkeys registered for the user. |  |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::AuthMethods.new(
+  has_password: null,
+  oauth_providers: null,
+  mfa_enabled: null,
+  email_verified: null,
+  phone_verified: null,
+  passkeys: null
+)
+```
+

data/docs/AuthUserDirectoryApi.md

@@ -5,6 +5,7 @@ All URIs are relative to *https://api.zyphr.dev/v1*
 | Method | HTTP request | Description |
 | ------ | ------------ | ----------- |
 | [**delete_end_user_by_application**](AuthUserDirectoryApi.md#delete_end_user_by_application) | **DELETE** /auth/users/{user_id} | Delete an end user (server-side admin) |
+| [**get_end_user_auth_methods**](AuthUserDirectoryApi.md#get_end_user_auth_methods) | **GET** /auth/users/{user_id}/auth-methods | Get an end user's sign-in methods (server-side admin) |
 | [**get_end_user_by_email**](AuthUserDirectoryApi.md#get_end_user_by_email) | **GET** /auth/users/by-email | Look up an end user by email (server-side admin) |
 | [**get_end_user_by_id**](AuthUserDirectoryApi.md#get_end_user_by_id) | **GET** /auth/users/{user_id} | Get an end user by id (server-side admin) |
 | [**get_end_user_claims**](AuthUserDirectoryApi.md#get_end_user_claims) | **GET** /auth/users/{user_id}/claims | Get an end user's stored custom claims (server-side admin) |
@@ -89,6 +90,82 @@ nil (empty response body)
 - **Accept**: Not defined
 
 
+## get_end_user_auth_methods
+
+> <GetEndUserAuthMethods200Response> get_end_user_auth_methods(user_id)
+
+Get an end user's sign-in methods (server-side admin)
+
+Secret-key-scoped, aggregate view of the sign-in methods configured for a single end user within the authenticating application. Reports whether the user has a password, which OAuth providers are linked, whether MFA is enabled, whether email/phone are verified, and how many passkeys are registered — everything a customer admin needs to build a \"sign-in methods\" screen. Scoped to the application — a caller can never read a user belonging to another application. 
+
+### Examples
+
+```ruby
+require 'time'
+require 'zyphr'
+# setup authorization
+Zyphr.configure do |config|
+  # Configure API key authorization: ApplicationSecret
+  config.api_key['X-Application-Secret'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Secret'] = 'Bearer'
+
+  # Configure API key authorization: ApplicationPublicKey
+  config.api_key['X-Application-Key'] = 'YOUR API KEY'
+  # Uncomment the following line to set a prefix for the API key, e.g. 'Bearer' (defaults to nil)
+  # config.api_key_prefix['X-Application-Key'] = 'Bearer'
+end
+
+api_instance = Zyphr::AuthUserDirectoryApi.new
+user_id = '38400000-8cf0-11bd-b23e-10b96e4ef00d' # String | 
+
+begin
+  # Get an end user's sign-in methods (server-side admin)
+  result = api_instance.get_end_user_auth_methods(user_id)
+  p result
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserDirectoryApi->get_end_user_auth_methods: #{e}"
+end
+```
+
+#### Using the get_end_user_auth_methods_with_http_info variant
+
+This returns an Array which contains the response data, status code and headers.
+
+> <Array(<GetEndUserAuthMethods200Response>, Integer, Hash)> get_end_user_auth_methods_with_http_info(user_id)
+
+```ruby
+begin
+  # Get an end user's sign-in methods (server-side admin)
+  data, status_code, headers = api_instance.get_end_user_auth_methods_with_http_info(user_id)
+  p status_code # => 2xx
+  p headers # => { ... }
+  p data # => <GetEndUserAuthMethods200Response>
+rescue Zyphr::ApiError => e
+  puts "Error when calling AuthUserDirectoryApi->get_end_user_auth_methods_with_http_info: #{e}"
+end
+```
+
+### Parameters
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **user_id** | **String** |  |  |
+
+### Return type
+
+[**GetEndUserAuthMethods200Response**](GetEndUserAuthMethods200Response.md)
+
+### Authorization
+
+[ApplicationSecret](../README.md#ApplicationSecret), [ApplicationPublicKey](../README.md#ApplicationPublicKey)
+
+### HTTP request headers
+
+- **Content-Type**: Not defined
+- **Accept**: application/json
+
+
 ## get_end_user_by_email
 
 > <GetEndUserById200Response> get_end_user_by_email(email)

data/docs/GetEndUserAuthMethods200Response.md

@@ -0,0 +1,20 @@
+# Zyphr::GetEndUserAuthMethods200Response
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **data** | [**AuthMethods**](AuthMethods.md) |  | [optional] |
+| **meta** | [**GetDomain200ResponseMeta**](GetDomain200ResponseMeta.md) |  | [optional] |
+
+## Example
+
+```ruby
+require 'zyphr'
+
+instance = Zyphr::GetEndUserAuthMethods200Response.new(
+  data: null,
+  meta: null
+)
+```
+

data/lib/zyphr/api/auth_application_api.rb

@@ -0,0 +1,79 @@
+=begin
+#Zyphr API
+
+#Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account's current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+
+The version of the OpenAPI document: 1.0.0
+Contact: support@zyphr.dev
+Generated by: https://openapi-generator.tech
+Generator version: 7.12.0
+
+=end
+
+require 'cgi'
+
+module Zyphr
+  class AuthApplicationApi
+    attr_accessor :api_client
+
+    def initialize(api_client = ApiClient.default)
+      @api_client = api_client
+    end
+    # Get the authenticating application
+    # Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment's mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+    # @param [Hash] opts the optional parameters
+    # @return [ApplicationSelfResponse]
+    def get_self_application(opts = {})
+      data, _status_code, _headers = get_self_application_with_http_info(opts)
+      data
+    end
+
+    # Get the authenticating application
+    # Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment's mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(ApplicationSelfResponse, Integer, Hash)>] ApplicationSelfResponse data, response status code and response headers
+    def get_self_application_with_http_info(opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthApplicationApi.get_self_application ...'
+      end
+      # resource path
+      local_var_path = '/auth/application'
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'ApplicationSelfResponse'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApplicationSecret', 'ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthApplicationApi.get_self_application",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthApplicationApi#get_self_application\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+  end
+end

data/lib/zyphr/api/auth_email_templates_api.rb

@@ -538,7 +538,7 @@ module Zyphr
     end
 
     # Send a test render of a template
-    # Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+    # Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
     # @param type [AuthEmailType] 
     # @param auth_email_template_test_request [AuthEmailTemplateTestRequest] 
     # @param [Hash] opts the optional parameters
@@ -549,7 +549,7 @@ module Zyphr
     end
 
     # Send a test render of a template
-    # Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+    # Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
     # @param type [AuthEmailType] 
     # @param auth_email_template_test_request [AuthEmailTemplateTestRequest] 
     # @param [Hash] opts the optional parameters

data/lib/zyphr/api/auth_user_directory_api.rb

@@ -80,6 +80,69 @@ module Zyphr
       return data, status_code, headers
     end
 
+    # Get an end user's sign-in methods (server-side admin)
+    # Secret-key-scoped, aggregate view of the sign-in methods configured for a single end user within the authenticating application. Reports whether the user has a password, which OAuth providers are linked, whether MFA is enabled, whether email/phone are verified, and how many passkeys are registered — everything a customer admin needs to build a \"sign-in methods\" screen. Scoped to the application — a caller can never read a user belonging to another application. 
+    # @param user_id [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [GetEndUserAuthMethods200Response]
+    def get_end_user_auth_methods(user_id, opts = {})
+      data, _status_code, _headers = get_end_user_auth_methods_with_http_info(user_id, opts)
+      data
+    end
+
+    # Get an end user's sign-in methods (server-side admin)
+    # Secret-key-scoped, aggregate view of the sign-in methods configured for a single end user within the authenticating application. Reports whether the user has a password, which OAuth providers are linked, whether MFA is enabled, whether email/phone are verified, and how many passkeys are registered — everything a customer admin needs to build a \"sign-in methods\" screen. Scoped to the application — a caller can never read a user belonging to another application. 
+    # @param user_id [String] 
+    # @param [Hash] opts the optional parameters
+    # @return [Array<(GetEndUserAuthMethods200Response, Integer, Hash)>] GetEndUserAuthMethods200Response data, response status code and response headers
+    def get_end_user_auth_methods_with_http_info(user_id, opts = {})
+      if @api_client.config.debugging
+        @api_client.config.logger.debug 'Calling API: AuthUserDirectoryApi.get_end_user_auth_methods ...'
+      end
+      # verify the required parameter 'user_id' is set
+      if @api_client.config.client_side_validation && user_id.nil?
+        fail ArgumentError, "Missing the required parameter 'user_id' when calling AuthUserDirectoryApi.get_end_user_auth_methods"
+      end
+      # resource path
+      local_var_path = '/auth/users/{user_id}/auth-methods'.sub('{' + 'user_id' + '}', CGI.escape(user_id.to_s))
+
+      # query parameters
+      query_params = opts[:query_params] || {}
+
+      # header parameters
+      header_params = opts[:header_params] || {}
+      # HTTP header 'Accept' (if needed)
+      header_params['Accept'] = @api_client.select_header_accept(['application/json']) unless header_params['Accept']
+
+      # form parameters
+      form_params = opts[:form_params] || {}
+
+      # http body (model)
+      post_body = opts[:debug_body]
+
+      # return_type
+      return_type = opts[:debug_return_type] || 'GetEndUserAuthMethods200Response'
+
+      # auth_names
+      auth_names = opts[:debug_auth_names] || ['ApplicationSecret', 'ApplicationPublicKey']
+
+      new_options = opts.merge(
+        :operation => :"AuthUserDirectoryApi.get_end_user_auth_methods",
+        :header_params => header_params,
+        :query_params => query_params,
+        :form_params => form_params,
+        :body => post_body,
+        :auth_names => auth_names,
+        :return_type => return_type
+      )
+
+      data, status_code, headers = @api_client.call_api(:GET, local_var_path, new_options)
+      if @api_client.config.debugging
+        @api_client.config.logger.debug "API called: AuthUserDirectoryApi#get_end_user_auth_methods\nData: #{data.inspect}\nStatus code: #{status_code}\nHeaders: #{headers}"
+      end
+      return data, status_code, headers
+    end
+
     # Look up an end user by email (server-side admin)
     # Secret-key-scoped lookup of a single end user by email address within the authenticating application. Scoped to the application — never resolves a user from another application. Does not return the password hash. 
     # @param email [String]