@djangocfg/api 2.1.356 → 2.1.358

package/src/_api/generated/_cfg_accounts/schemas/CentrifugoToken.ts

@@ -5,10 +5,10 @@
 import { z } from "zod";
 
 export const CentrifugoTokenSchema = z.object({
+  token: z.string(),
   centrifugo_url: z.string(),
-  channels: z.array(z.string()),
   expires_at: z.string().datetime({ offset: true }),
-  token: z.string(),
+  channels: z.array(z.string()),
 });
 
 export type CentrifugoToken = z.infer<typeof CentrifugoTokenSchema>;

package/src/_api/generated/_cfg_accounts/schemas/CfgUserUpdateRequest.ts

@@ -5,12 +5,13 @@
 import { z } from "zod";
 
 export const CfgUserUpdateRequestSchema = z.object({
-  company: z.string().max(100).optional(),
   first_name: z.string().max(50).optional(),
-  language: z.string().max(10).optional(),
   last_name: z.string().max(50).optional(),
+  company: z.string().max(100).optional(),
   phone: z.string().max(20).optional(),
   position: z.string().max(100).optional(),
+  language: z.string().max(10).optional(),
+  timezone: z.string().max(64).optional(),
 });
 
 export type CfgUserUpdateRequest = z.infer<typeof CfgUserUpdateRequestSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OAuthCallbackRequestRequest.ts

@@ -6,8 +6,8 @@ import { z } from "zod";
 
 export const OAuthCallbackRequestRequestSchema = z.object({
   code: z.string().min(10).max(500),
-  redirect_uri: z.string().optional(),
   state: z.string().min(20).max(100),
+  redirect_uri: z.string().optional(),
 });
 
 export type OAuthCallbackRequestRequest = z.infer<typeof OAuthCallbackRequestRequestSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OAuthConnection.ts

@@ -3,17 +3,17 @@
 // DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
-import { ProviderEnumSchema } from "./ProviderEnum";
+import { OAuthProviderEnumSchema } from "./OAuthProviderEnum";
 
 export const OAuthConnectionSchema = z.object({
-  connected_at: z.string().datetime({ offset: true }),
   id: z.number().int(),
-  last_login_at: z.string().datetime({ offset: true }),
-  provider: ProviderEnumSchema,
-  provider_avatar_url: z.string(),
+  provider: OAuthProviderEnumSchema,
   provider_display: z.string(),
-  provider_email: z.email(),
   provider_username: z.string(),
+  provider_email: z.email(),
+  provider_avatar_url: z.string(),
+  connected_at: z.string().datetime({ offset: true }),
+  last_login_at: z.string().datetime({ offset: true }),
 });
 
 export type OAuthConnection = z.infer<typeof OAuthConnectionSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OAuthDisconnectRequestRequest.ts

@@ -3,10 +3,10 @@
 // DO NOT EDIT — re-run `make gen-clients`.
 
 import { z } from "zod";
-import { ProviderEnumSchema } from "./ProviderEnum";
+import { OAuthProviderEnumSchema } from "./OAuthProviderEnum";
 
 export const OAuthDisconnectRequestRequestSchema = z.object({
-  provider: ProviderEnumSchema,
+  provider: OAuthProviderEnumSchema,
 });
 
 export type OAuthDisconnectRequestRequest = z.infer<typeof OAuthDisconnectRequestRequestSchema>;

package/src/_api/generated/_cfg_accounts/schemas/{ProviderEnum.ts → OAuthProviderEnum.ts}

@@ -4,6 +4,6 @@
 
 import { z } from "zod";
 
-export const ProviderEnumSchema = z.enum(["github"]);
+export const OAuthProviderEnumSchema = z.enum(["github"]);
 
-export type ProviderEnum = z.infer<typeof ProviderEnumSchema>;
+export type OAuthProviderEnum = z.infer<typeof OAuthProviderEnumSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OAuthTokenResponse.ts

@@ -5,14 +5,14 @@
 import { z } from "zod";
 
 export const OAuthTokenResponseSchema = z.object({
-  access: z.string().nullable().optional(),
-  is_new_connection: z.boolean(),
-  is_new_user: z.boolean(),
-  refresh: z.string().nullable().optional(),
   requires_2fa: z.boolean().default(false).optional(),
   session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  should_prompt_2fa: z.boolean().optional(),
+  access: z.string().nullable().optional(),
+  refresh: z.string().nullable().optional(),
   user: z.object({}).passthrough().nullable().optional(),
+  is_new_user: z.boolean(),
+  is_new_connection: z.boolean(),
+  should_prompt_2fa: z.boolean().optional(),
 });
 
 export type OAuthTokenResponse = z.infer<typeof OAuthTokenResponseSchema>;

package/src/_api/generated/_cfg_accounts/schemas/OTPVerifyRequest.ts

@@ -6,7 +6,7 @@ import { z } from "zod";
 
 export const OTPVerifyRequestSchema = z.object({
   identifier: z.string().min(1),
-  otp: z.string().min(6).max(6),
+  otp: z.string().min(4).max(4),
   source_url: z.string().optional(),
 });
 

package/src/_api/generated/_cfg_accounts/schemas/OTPVerifyResponse.ts

@@ -6,12 +6,12 @@ import { z } from "zod";
 import { UserSchema } from "./User";
 
 export const OTPVerifyResponseSchema = z.object({
-  access: z.string().nullable().optional(),
-  refresh: z.string().nullable().optional(),
   requires_2fa: z.boolean().default(false).optional(),
   session_id: z.string().regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i).nullable().optional(),
-  should_prompt_2fa: z.boolean().optional(),
+  refresh: z.string().nullable().optional(),
+  access: z.string().nullable().optional(),
   user: UserSchema.nullable().optional(),
+  should_prompt_2fa: z.boolean().optional(),
 });
 
 export type OTPVerifyResponse = z.infer<typeof OTPVerifyResponseSchema>;

package/src/_api/generated/_cfg_accounts/schemas/PatchedCfgUserUpdateRequest.ts

@@ -5,12 +5,13 @@
 import { z } from "zod";
 
 export const PatchedCfgUserUpdateRequestSchema = z.object({
-  company: z.string().max(100).optional(),
   first_name: z.string().max(50).optional(),
-  language: z.string().max(10).optional(),
   last_name: z.string().max(50).optional(),
+  company: z.string().max(100).optional(),
   phone: z.string().max(20).optional(),
   position: z.string().max(100).optional(),
+  language: z.string().max(10).optional(),
+  timezone: z.string().max(64).optional(),
 });
 
 export type PatchedCfgUserUpdateRequest = z.infer<typeof PatchedCfgUserUpdateRequestSchema>;

package/src/_api/generated/_cfg_accounts/schemas/User.ts

@@ -6,24 +6,26 @@ import { z } from "zod";
 import { CentrifugoTokenSchema } from "./CentrifugoToken";
 
 export const UserSchema = z.object({
-  avatar: z.string().nullable(),
-  centrifugo: CentrifugoTokenSchema.nullable(),
-  company: z.string().max(100).optional(),
-  date_joined: z.string().datetime({ offset: true }),
-  display_username: z.string(),
+  id: z.number().int(),
   email: z.email(),
   first_name: z.string().max(50).optional(),
+  last_name: z.string().max(50).optional(),
   full_name: z.string(),
-  id: z.number().int(),
   initials: z.string(),
+  display_username: z.string(),
+  company: z.string().max(100).optional(),
+  phone: z.string().max(20).optional(),
+  position: z.string().max(100).optional(),
+  language: z.string().max(10).optional(),
+  timezone: z.string().max(64).optional(),
+  avatar: z.string().nullable(),
   is_staff: z.boolean(),
   is_superuser: z.boolean(),
-  language: z.string().max(10).optional(),
+  date_joined: z.string().datetime({ offset: true }),
   last_login: z.string().datetime({ offset: true }).nullable(),
-  last_name: z.string().max(50).optional(),
-  phone: z.string().max(20).optional(),
-  position: z.string().max(100).optional(),
   unanswered_messages_count: z.number().int().default(0),
+  centrifugo: CentrifugoTokenSchema.nullable(),
+  api_key: z.string().nullable(),
 });
 
 export type User = z.infer<typeof UserSchema>;

package/src/_api/generated/_cfg_accounts/schemas/cfg_accounts_oauth_connections_response_200_AutoRef.ts

@@ -0,0 +1,10 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+import { OAuthConnectionSchema } from "./OAuthConnection";
+
+export const cfg_accounts_oauth_connections_response_200_AutoRefSchema = z.array(OAuthConnectionSchema);
+
+export type cfg_accounts_oauth_connections_response_200_AutoRef = z.infer<typeof cfg_accounts_oauth_connections_response_200_AutoRefSchema>;

package/src/_api/generated/_cfg_accounts/schemas/cfg_accounts_oauth_disconnect_response_200_AutoRef.ts

@@ -0,0 +1,11 @@
+// AUTO-GENERATED by cmdop_server / devtools.generator.ts_extras
+// Source: OpenAPI 3.1 components.schemas
+// DO NOT EDIT — re-run `make gen-clients`.
+
+import { z } from "zod";
+
+export const cfg_accounts_oauth_disconnect_response_200_AutoRefSchema = z.object({
+  message: z.string().optional(),
+});
+
+export type cfg_accounts_oauth_disconnect_response_200_AutoRef = z.infer<typeof cfg_accounts_oauth_disconnect_response_200_AutoRefSchema>;

package/src/_api/generated/_cfg_accounts/schemas/index.ts

@@ -1,6 +1,11 @@
 // AUTO-GENERATED — barrel for zod schemas.
 // DO NOT EDIT.
 
+export * from "./APIKey";
+export * from "./APIKeyRegenerate";
+export * from "./APIKeyRequest";
+export * from "./APIKeyTestRequest";
+export * from "./APIKeyTestResult";
 export * from "./AccountDeleteResponse";
 export * from "./CentrifugoToken";
 export * from "./CfgUserUpdateRequest";
@@ -10,6 +15,7 @@ export * from "./OAuthCallbackRequestRequest";
 export * from "./OAuthConnection";
 export * from "./OAuthDisconnectRequestRequest";
 export * from "./OAuthError";
+export * from "./OAuthProviderEnum";
 export * from "./OAuthProvidersResponse";
 export * from "./OAuthTokenResponse";
 export * from "./OTPErrorResponse";
@@ -18,7 +24,8 @@ export * from "./OTPRequestResponse";
 export * from "./OTPVerifyRequest";
 export * from "./OTPVerifyResponse";
 export * from "./PatchedCfgUserUpdateRequest";
-export * from "./ProviderEnum";
 export * from "./TokenRefresh";
 export * from "./TokenRefreshRequest";
 export * from "./User";
+export * from "./cfg_accounts_oauth_connections_response_200_AutoRef";
+export * from "./cfg_accounts_oauth_disconnect_response_200_AutoRef";

package/src/_api/generated/_cfg_centrifugo/api.ts

@@ -6,7 +6,7 @@
 import { auth } from '../helpers/auth';
 import { APILogger, type LoggerConfig } from '../helpers/logger';
 
-
+import { CfgCentrifugo } from '../sdk.gen';
 
 
 
@@ -34,7 +34,7 @@ export interface APIOptions {
 export class API {
   readonly logger: APILogger;
 
-
+  readonly cfgCentrifugo = CfgCentrifugo;
 
   constructor(_baseUrl?: string, opts: APIOptions = {}) {
     this.logger = new APILogger(opts.logger);
@@ -75,5 +75,5 @@ export class API {
   }
 }
 
-export {  };
+export { CfgCentrifugo };
 export { auth };

package/src/_api/generated/_cfg_centrifugo/hooks/useCfgCentrifugoAuthTokenRetrieve.ts

@@ -1,11 +1,14 @@
+'use client';
+
 // AUTO-GENERATED by openapi_processor / ts.hooks
 // Get Centrifugo connection token
 // DO NOT EDIT — re-run `make gen`.
 
 import useSWR from "swr";
 import type { SWRConfiguration } from "swr";
-import { Cfg } from "../../sdk.gen";
+import { CfgCentrifugo } from "../../sdk.gen";
 import type { CfgCentrifugoAuthTokenRetrieveData, CfgCentrifugoAuthTokenRetrieveResponses } from "../../types.gen";
+import { ConnectionTokenResponseSchema } from "../schemas/ConnectionTokenResponse";
 
 type Result = CfgCentrifugoAuthTokenRetrieveResponses[keyof CfgCentrifugoAuthTokenRetrieveResponses];
 
@@ -17,8 +20,45 @@ export function useCfgCentrifugoAuthTokenRetrieve(
   return useSWR<Result>(
     key,
     async () => {
-      const res = await Cfg.cfgCentrifugoAuthTokenRetrieve({ ...(args ?? {}), throwOnError: true } as never);
-      return res.data as Result;
+      const res = await CfgCentrifugo.cfgCentrifugoAuthTokenRetrieve({ ...(args ?? {}), throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = ConnectionTokenResponseSchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_centrifugo_auth_token_retrieve",
+            method: "GET",
+            path: "/cfg/centrifugo/auth/token/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_centrifugo_auth_token_retrieve",
+                  method: "GET",
+                  path: "/cfg/centrifugo/auth/token/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as Result;
     },
     config,
   );

package/src/_api/generated/_cfg_centrifugo/index.ts

@@ -2,7 +2,7 @@
 // Group barrel. DO NOT EDIT — re-run `make gen`.
 
 // Wrapper class + per-group SDK re-exports + global auth.
-export { API, type APIOptions, auth,  } from './api';
+export { API, type APIOptions, auth, CfgCentrifugo } from './api';
 
 // Shared utilities.
 export {

package/src/_api/generated/_cfg_centrifugo/schemas/ConnectionTokenResponse.ts

@@ -5,10 +5,10 @@
 import { z } from "zod";
 
 export const ConnectionTokenResponseSchema = z.object({
+  token: z.string(),
   centrifugo_url: z.string(),
-  channels: z.array(z.string()),
   expires_at: z.string(),
-  token: z.string(),
+  channels: z.array(z.string()),
 });
 
 export type ConnectionTokenResponse = z.infer<typeof ConnectionTokenResponseSchema>;

package/src/_api/generated/_cfg_totp/api.ts

@@ -6,7 +6,10 @@
 import { auth } from '../helpers/auth';
 import { APILogger, type LoggerConfig } from '../helpers/logger';
 
-
+import { CfgTotpBackupCodes } from '../sdk.gen';
+import { CfgTotp } from '../sdk.gen';
+import { CfgTotpSetup } from '../sdk.gen';
+import { CfgTotpVerify } from '../sdk.gen';
 
 
 
@@ -34,7 +37,10 @@ export interface APIOptions {
 export class API {
   readonly logger: APILogger;
 
-
+  readonly cfgTotpBackupCodes = CfgTotpBackupCodes;
+  readonly cfgTotp = CfgTotp;
+  readonly cfgTotpSetup = CfgTotpSetup;
+  readonly cfgTotpVerify = CfgTotpVerify;
 
   constructor(_baseUrl?: string, opts: APIOptions = {}) {
     this.logger = new APILogger(opts.logger);
@@ -75,5 +81,5 @@ export class API {
   }
 }
 
-export {  };
+export { CfgTotpBackupCodes, CfgTotp, CfgTotpSetup, CfgTotpVerify };
 export { auth };

package/src/_api/generated/_cfg_totp/hooks/useCfgTotpBackupCodesRegenerateCreate.ts

@@ -1,11 +1,14 @@
+'use client';
+
 // AUTO-GENERATED by openapi_processor / ts.hooks
 // POST /cfg/totp/backup-codes/regenerate/
 // DO NOT EDIT — re-run `make gen`.
 
 import useSWRMutation from "swr/mutation";
 import type { SWRMutationConfiguration } from "swr/mutation";
-import { Cfg } from "../../sdk.gen";
+import { CfgTotpBackupCodes } from "../../sdk.gen";
 import type { CfgTotpBackupCodesRegenerateCreateData, CfgTotpBackupCodesRegenerateCreateResponses } from "../../types.gen";
+import { BackupCodesRegenerateResponseSchema } from "../schemas/BackupCodesRegenerateResponse";
 
 type Args = Omit<CfgTotpBackupCodesRegenerateCreateData, "url">;
 type Result = CfgTotpBackupCodesRegenerateCreateResponses[keyof CfgTotpBackupCodesRegenerateCreateResponses];
@@ -16,8 +19,45 @@ export function useCfgTotpBackupCodesRegenerateCreate(
   return useSWRMutation<Result, Error, readonly ["cfg_totp_backup_codes_regenerate_create"], Args>(
     ["cfg_totp_backup_codes_regenerate_create"] as const,
     async (_key, { arg }: { arg: Args }) => {
-      const res = await Cfg.cfgTotpBackupCodesRegenerateCreate({ ...arg, throwOnError: true } as never);
-      return res.data as Result;
+      const res = await CfgTotpBackupCodes.cfgTotpBackupCodesRegenerateCreate({ ...arg, throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = BackupCodesRegenerateResponseSchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_totp_backup_codes_regenerate_create",
+            method: "POST",
+            path: "/cfg/totp/backup-codes/regenerate/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_totp_backup_codes_regenerate_create",
+                  method: "POST",
+                  path: "/cfg/totp/backup-codes/regenerate/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as Result;
     },
     config,
   );

package/src/_api/generated/_cfg_totp/hooks/useCfgTotpBackupCodesRetrieve.ts

@@ -1,11 +1,14 @@
+'use client';
+
 // AUTO-GENERATED by openapi_processor / ts.hooks
 // GET /cfg/totp/backup-codes/
 // DO NOT EDIT — re-run `make gen`.
 
 import useSWR from "swr";
 import type { SWRConfiguration } from "swr";
-import { Cfg } from "../../sdk.gen";
+import { CfgTotpBackupCodes } from "../../sdk.gen";
 import type { CfgTotpBackupCodesRetrieveData, CfgTotpBackupCodesRetrieveResponses } from "../../types.gen";
+import { BackupCodesStatusSchema } from "../schemas/BackupCodesStatus";
 
 type Result = CfgTotpBackupCodesRetrieveResponses[keyof CfgTotpBackupCodesRetrieveResponses];
 
@@ -17,8 +20,45 @@ export function useCfgTotpBackupCodesRetrieve(
   return useSWR<Result>(
     key,
     async () => {
-      const res = await Cfg.cfgTotpBackupCodesRetrieve({ ...(args ?? {}), throwOnError: true } as never);
-      return res.data as Result;
+      const res = await CfgTotpBackupCodes.cfgTotpBackupCodesRetrieve({ ...(args ?? {}), throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = BackupCodesStatusSchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_totp_backup_codes_retrieve",
+            method: "GET",
+            path: "/cfg/totp/backup-codes/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_totp_backup_codes_retrieve",
+                  method: "GET",
+                  path: "/cfg/totp/backup-codes/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as Result;
     },
     config,
   );

package/src/_api/generated/_cfg_totp/hooks/useCfgTotpDevicesDestroy.ts

@@ -1,12 +1,15 @@
+'use client';
+
 // AUTO-GENERATED by openapi_processor / ts.hooks
 // DELETE /cfg/totp/devices/{id}/
 // DO NOT EDIT — re-run `make gen`.
 
 import useSWRMutation from "swr/mutation";
 import type { SWRMutationConfiguration } from "swr/mutation";
-import { Cfg } from "../../sdk.gen";
+import { CfgTotp } from "../../sdk.gen";
 import type { CfgTotpDevicesDestroyData, CfgTotpDevicesDestroyResponses } from "../../types.gen";
 
+
 type Args = Omit<CfgTotpDevicesDestroyData, "url">;
 type Result = CfgTotpDevicesDestroyResponses[keyof CfgTotpDevicesDestroyResponses];
 
@@ -16,8 +19,9 @@ export function useCfgTotpDevicesDestroy(
   return useSWRMutation<Result, Error, readonly ["cfg_totp_devices_destroy"], Args>(
     ["cfg_totp_devices_destroy"] as const,
     async (_key, { arg }: { arg: Args }) => {
-      const res = await Cfg.cfgTotpDevicesDestroy({ ...arg, throwOnError: true } as never);
-      return res.data as Result;
+      const res = await CfgTotp.cfgTotpDevicesDestroy({ ...arg, throwOnError: true } as never);
+      const data = res.data as Result;
+      return data;
     },
     config,
   );

package/src/_api/generated/_cfg_totp/hooks/useCfgTotpDevicesRetrieve.ts

@@ -1,11 +1,14 @@
+'use client';
+
 // AUTO-GENERATED by openapi_processor / ts.hooks
 // GET /cfg/totp/devices/
 // DO NOT EDIT — re-run `make gen`.
 
 import useSWR from "swr";
 import type { SWRConfiguration } from "swr";
-import { Cfg } from "../../sdk.gen";
+import { CfgTotp } from "../../sdk.gen";
 import type { CfgTotpDevicesRetrieveData, CfgTotpDevicesRetrieveResponses } from "../../types.gen";
+import { DeviceListResponseSchema } from "../schemas/DeviceListResponse";
 
 type Result = CfgTotpDevicesRetrieveResponses[keyof CfgTotpDevicesRetrieveResponses];
 
@@ -17,8 +20,45 @@ export function useCfgTotpDevicesRetrieve(
   return useSWR<Result>(
     key,
     async () => {
-      const res = await Cfg.cfgTotpDevicesRetrieve({ ...(args ?? {}), throwOnError: true } as never);
-      return res.data as Result;
+      const res = await CfgTotp.cfgTotpDevicesRetrieve({ ...(args ?? {}), throwOnError: true } as never);
+      const data = res.data as Result;
+      const parsed = DeviceListResponseSchema.safeParse(data);
+      if (!parsed.success) {
+        // Log first so the failure is always visible, even if the
+        // event handler swallows it.
+        console.warn(
+          "[zod] response did not match schema",
+          {
+            operation: "cfg_totp_devices_retrieve",
+            method: "GET",
+            path: "/cfg/totp/devices/",
+            issues: parsed.error.issues,
+            data,
+          },
+        );
+        if (typeof window !== "undefined") {
+          try {
+            window.dispatchEvent(
+              new CustomEvent("zod-validation-error", {
+                detail: {
+                  operation: "cfg_totp_devices_retrieve",
+                  method: "GET",
+                  path: "/cfg/totp/devices/",
+                  issues: parsed.error.issues,
+                  data,
+                  timestamp: new Date(),
+                },
+                bubbles: true,
+                cancelable: false,
+              }),
+            );
+          } catch {
+            // Event dispatch is best-effort.
+          }
+        }
+        return data;
+      }
+      return parsed.data as Result;
     },
     config,
   );