@epilot/sdk 2.12.2 → 2.13.1

package/dist/{user.d-L-C7_K84.d.ts → user.d-6bp0zEwE.d.cts}

@@ -140,6 +140,14 @@ declare namespace Components {
                  * Server-set expiry for the pending email change verification link (ISO 8601). Read-only.
                  */
                 draft_email_expires_at?: string | null; // date-time
+                /**
+                 * Internal: sha256 hash of the active password-reset token. Server-set, never returned in responses.
+                 */
+                password_reset_token_hash?: string | null;
+                /**
+                 * Internal: expiry for the active password-reset token (ISO 8601). Server-set, never returned in responses.
+                 */
+                password_reset_token_expires_at?: string | null; // date-time
                 /**
                  * User's department
                  * example:
@@ -265,6 +273,19 @@ declare namespace Components {
                 email_notification_setting?: {
                     [name: string]: any;
                 };
+                /**
+                 * Per-notification-type in-app delivery preferences (notification type key -> enabled). Written by the my-account notification settings UI and honored by svc-notification-api at delivery time. Absent or partial keys fall back to each notification type's configured default. Mirrors email_notification_setting for the in-app channel.
+                 * example:
+                 * {
+                 *   "integration_critical_error": true,
+                 *   "integration_error_threshold": true,
+                 *   "assigned_opportunity": true,
+                 *   "assigned_task": true
+                 * }
+                 */
+                in_app_notification_setting?: {
+                    [name: string]: any;
+                };
                 properties?: {
                     /**
                      * example:
@@ -277,6 +298,14 @@ declare namespace Components {
                      */
                     value: string;
                 }[];
+                /**
+                 * User tags/labels assigned for classification (e.g. label slugs)
+                 * example:
+                 * [
+                 *   "non-billable"
+                 * ]
+                 */
+                tags?: string[] | null;
                 /**
                  * The index of the current assignee in the group's user list.
                  * example:
@@ -970,6 +999,14 @@ declare namespace Components {
              * Server-set expiry for the pending email change verification link (ISO 8601). Read-only.
              */
             draft_email_expires_at?: string | null; // date-time
+            /**
+             * Internal: sha256 hash of the active password-reset token. Server-set, never returned in responses.
+             */
+            password_reset_token_hash?: string | null;
+            /**
+             * Internal: expiry for the active password-reset token (ISO 8601). Server-set, never returned in responses.
+             */
+            password_reset_token_expires_at?: string | null; // date-time
             /**
              * User's department
              * example:
@@ -1095,6 +1132,19 @@ declare namespace Components {
             email_notification_setting?: {
                 [name: string]: any;
             };
+            /**
+             * Per-notification-type in-app delivery preferences (notification type key -> enabled). Written by the my-account notification settings UI and honored by svc-notification-api at delivery time. Absent or partial keys fall back to each notification type's configured default. Mirrors email_notification_setting for the in-app channel.
+             * example:
+             * {
+             *   "integration_critical_error": true,
+             *   "integration_error_threshold": true,
+             *   "assigned_opportunity": true,
+             *   "assigned_task": true
+             * }
+             */
+            in_app_notification_setting?: {
+                [name: string]: any;
+            };
             properties?: {
                 /**
                  * example:
@@ -1107,6 +1157,14 @@ declare namespace Components {
                  */
                 value: string;
             }[];
+            /**
+             * User tags/labels assigned for classification (e.g. label slugs)
+             * example:
+             * [
+             *   "non-billable"
+             * ]
+             */
+            tags?: string[] | null;
         }
         export interface UserVerificationPayload {
             /**
@@ -1603,6 +1661,53 @@ declare namespace Paths {
             }
         }
     }
+    namespace ResetPassword {
+        export interface RequestBody {
+            /**
+             * Email address of the account
+             * example:
+             * test@example.com
+             */
+            email: string;
+            /**
+             * Reset token from the password reset email
+             */
+            token: string;
+            /**
+             * The new password
+             */
+            password: string;
+        }
+        namespace Responses {
+            export interface $200 {
+                /**
+                 * example:
+                 * true
+                 */
+                success: boolean;
+            }
+            export interface $400 {
+                /**
+                 * Discriminator distinguishing token errors from policy errors
+                 */
+                error: "INVALID_RESET_LINK" | "PASSWORD_POLICY";
+                /**
+                 * example:
+                 * Password does not meet the requirements
+                 */
+                message: string;
+                /**
+                 * Itemized password-policy violation codes (only present when error is PASSWORD_POLICY)
+                 * example:
+                 * [
+                 *   "too_short",
+                 *   "missing_uppercase"
+                 * ]
+                 */
+                violations?: ("too_short" | "missing_lowercase" | "missing_uppercase" | "missing_number" | "missing_symbol")[];
+            }
+        }
+    }
     namespace ResolveDiscoverableCredential {
         export interface RequestBody {
             /**
@@ -1983,6 +2088,18 @@ interface OperationMethods {
     data?: Paths.RequestPasswordReset.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.RequestPasswordReset.Responses.$200>
+  /**
+   * resetPassword - resetPassword
+   * 
+   * Set a new password using a reset token from the password reset email.
+   * The token is single-use and time-limited.
+   * 
+   */
+  'resetPassword'(
+    parameters?: Parameters<UnknownParamsObject> | null,
+    data?: Paths.ResetPassword.RequestBody,
+    config?: AxiosRequestConfig  
+  ): OperationResponse<Paths.ResetPassword.Responses.$200>
   /**
    * checkInviteToken - checkInviteToken
    * 
@@ -2441,6 +2558,20 @@ interface PathsDictionary {
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.RequestPasswordReset.Responses.$200>
   }
+  ['/v2/users/public/resetPassword']: {
+    /**
+     * resetPassword - resetPassword
+     * 
+     * Set a new password using a reset token from the password reset email.
+     * The token is single-use and time-limited.
+     * 
+     */
+    'post'(
+      parameters?: Parameters<UnknownParamsObject> | null,
+      data?: Paths.ResetPassword.RequestBody,
+      config?: AxiosRequestConfig  
+    ): OperationResponse<Paths.ResetPassword.Responses.$200>
+  }
   ['/v2/users/public/checkToken']: {
     /**
      * checkInviteToken - checkInviteToken

package/dist/{user.d-L-C7_K84.d.cts → user.d-6bp0zEwE.d.ts}

@@ -140,6 +140,14 @@ declare namespace Components {
                  * Server-set expiry for the pending email change verification link (ISO 8601). Read-only.
                  */
                 draft_email_expires_at?: string | null; // date-time
+                /**
+                 * Internal: sha256 hash of the active password-reset token. Server-set, never returned in responses.
+                 */
+                password_reset_token_hash?: string | null;
+                /**
+                 * Internal: expiry for the active password-reset token (ISO 8601). Server-set, never returned in responses.
+                 */
+                password_reset_token_expires_at?: string | null; // date-time
                 /**
                  * User's department
                  * example:
@@ -265,6 +273,19 @@ declare namespace Components {
                 email_notification_setting?: {
                     [name: string]: any;
                 };
+                /**
+                 * Per-notification-type in-app delivery preferences (notification type key -> enabled). Written by the my-account notification settings UI and honored by svc-notification-api at delivery time. Absent or partial keys fall back to each notification type's configured default. Mirrors email_notification_setting for the in-app channel.
+                 * example:
+                 * {
+                 *   "integration_critical_error": true,
+                 *   "integration_error_threshold": true,
+                 *   "assigned_opportunity": true,
+                 *   "assigned_task": true
+                 * }
+                 */
+                in_app_notification_setting?: {
+                    [name: string]: any;
+                };
                 properties?: {
                     /**
                      * example:
@@ -277,6 +298,14 @@ declare namespace Components {
                      */
                     value: string;
                 }[];
+                /**
+                 * User tags/labels assigned for classification (e.g. label slugs)
+                 * example:
+                 * [
+                 *   "non-billable"
+                 * ]
+                 */
+                tags?: string[] | null;
                 /**
                  * The index of the current assignee in the group's user list.
                  * example:
@@ -970,6 +999,14 @@ declare namespace Components {
              * Server-set expiry for the pending email change verification link (ISO 8601). Read-only.
              */
             draft_email_expires_at?: string | null; // date-time
+            /**
+             * Internal: sha256 hash of the active password-reset token. Server-set, never returned in responses.
+             */
+            password_reset_token_hash?: string | null;
+            /**
+             * Internal: expiry for the active password-reset token (ISO 8601). Server-set, never returned in responses.
+             */
+            password_reset_token_expires_at?: string | null; // date-time
             /**
              * User's department
              * example:
@@ -1095,6 +1132,19 @@ declare namespace Components {
             email_notification_setting?: {
                 [name: string]: any;
             };
+            /**
+             * Per-notification-type in-app delivery preferences (notification type key -> enabled). Written by the my-account notification settings UI and honored by svc-notification-api at delivery time. Absent or partial keys fall back to each notification type's configured default. Mirrors email_notification_setting for the in-app channel.
+             * example:
+             * {
+             *   "integration_critical_error": true,
+             *   "integration_error_threshold": true,
+             *   "assigned_opportunity": true,
+             *   "assigned_task": true
+             * }
+             */
+            in_app_notification_setting?: {
+                [name: string]: any;
+            };
             properties?: {
                 /**
                  * example:
@@ -1107,6 +1157,14 @@ declare namespace Components {
                  */
                 value: string;
             }[];
+            /**
+             * User tags/labels assigned for classification (e.g. label slugs)
+             * example:
+             * [
+             *   "non-billable"
+             * ]
+             */
+            tags?: string[] | null;
         }
         export interface UserVerificationPayload {
             /**
@@ -1603,6 +1661,53 @@ declare namespace Paths {
             }
         }
     }
+    namespace ResetPassword {
+        export interface RequestBody {
+            /**
+             * Email address of the account
+             * example:
+             * test@example.com
+             */
+            email: string;
+            /**
+             * Reset token from the password reset email
+             */
+            token: string;
+            /**
+             * The new password
+             */
+            password: string;
+        }
+        namespace Responses {
+            export interface $200 {
+                /**
+                 * example:
+                 * true
+                 */
+                success: boolean;
+            }
+            export interface $400 {
+                /**
+                 * Discriminator distinguishing token errors from policy errors
+                 */
+                error: "INVALID_RESET_LINK" | "PASSWORD_POLICY";
+                /**
+                 * example:
+                 * Password does not meet the requirements
+                 */
+                message: string;
+                /**
+                 * Itemized password-policy violation codes (only present when error is PASSWORD_POLICY)
+                 * example:
+                 * [
+                 *   "too_short",
+                 *   "missing_uppercase"
+                 * ]
+                 */
+                violations?: ("too_short" | "missing_lowercase" | "missing_uppercase" | "missing_number" | "missing_symbol")[];
+            }
+        }
+    }
     namespace ResolveDiscoverableCredential {
         export interface RequestBody {
             /**
@@ -1983,6 +2088,18 @@ interface OperationMethods {
     data?: Paths.RequestPasswordReset.RequestBody,
     config?: AxiosRequestConfig  
   ): OperationResponse<Paths.RequestPasswordReset.Responses.$200>
+  /**
+   * resetPassword - resetPassword
+   * 
+   * Set a new password using a reset token from the password reset email.
+   * The token is single-use and time-limited.
+   * 
+   */
+  'resetPassword'(
+    parameters?: Parameters<UnknownParamsObject> | null,
+    data?: Paths.ResetPassword.RequestBody,
+    config?: AxiosRequestConfig  
+  ): OperationResponse<Paths.ResetPassword.Responses.$200>
   /**
    * checkInviteToken - checkInviteToken
    * 
@@ -2441,6 +2558,20 @@ interface PathsDictionary {
       config?: AxiosRequestConfig  
     ): OperationResponse<Paths.RequestPasswordReset.Responses.$200>
   }
+  ['/v2/users/public/resetPassword']: {
+    /**
+     * resetPassword - resetPassword
+     * 
+     * Set a new password using a reset token from the password reset email.
+     * The token is single-use and time-limited.
+     * 
+     */
+    'post'(
+      parameters?: Parameters<UnknownParamsObject> | null,
+      data?: Paths.ResetPassword.RequestBody,
+      config?: AxiosRequestConfig  
+    ): OperationResponse<Paths.ResetPassword.Responses.$200>
+  }
   ['/v2/users/public/checkToken']: {
     /**
      * checkInviteToken - checkInviteToken

package/dist/{webhooks.d-DytMQF8m.d.cts → webhooks.d-Bs6-AkzY.d.cts}

@@ -454,11 +454,17 @@ declare namespace Components {
             message: string;
         }
         export interface TriggerWebhookResp {
+            /**
+             * The HTTP status returned by the customer endpoint (or the upstream gateway). ABSENT for epilot-internal errors (code INTERNAL_ERROR / INTERNAL_RESPONSE_TOO_LARGE), which are not customer HTTP outcomes; PRESENT only for real HTTP/upstream results. When the response was delivered but too large to record, a recovered delivered status may still be present.
+             */
             status_code?: string;
             message?: string;
             body?: {
                 [key: string]: any;
             };
+            /**
+             * Machine-readable classification of the outcome. Known values: OAuthTokenExchangeError (OAuth token exchange / upstream gateway failure), DataLimitExceeded (legacy oversized-response marker), INTERNAL_RESPONSE_TOO_LARGE (request delivered but the response was too large for epilot to record), INTERNAL_ERROR (epilot-internal processing failure — not a customer HTTP outcome).
+             */
             code?: string;
             status?: "succeeded" | "failed";
             start_date?: string;
@@ -685,11 +691,17 @@ declare namespace Components {
             created_at?: string;
             event_name?: string;
             http_response?: {
+                /**
+                 * The HTTP status returned by the customer endpoint (or the upstream gateway). ABSENT for epilot-internal errors (code INTERNAL_ERROR / INTERNAL_RESPONSE_TOO_LARGE), which are not customer HTTP outcomes; PRESENT only for real HTTP/upstream results. When the response was delivered but too large to record, a recovered delivered status may still be present.
+                 */
                 status_code?: number;
                 message?: string;
                 body?: {
                     [key: string]: any;
                 };
+                /**
+                 * Machine-readable classification of the outcome. Known values: OAuthTokenExchangeError (OAuth token exchange / upstream gateway failure), DataLimitExceeded (legacy oversized-response marker), INTERNAL_RESPONSE_TOO_LARGE (request delivered but the response was too large for epilot to record), INTERNAL_ERROR (epilot-internal processing failure — not a customer HTTP outcome).
+                 */
                 code?: string;
             };
             metadata?: /* Contains the metadata about the configured event */ Metadata;

package/dist/{webhooks.d-DytMQF8m.d.ts → webhooks.d-Bs6-AkzY.d.ts}

@@ -454,11 +454,17 @@ declare namespace Components {
             message: string;
         }
         export interface TriggerWebhookResp {
+            /**
+             * The HTTP status returned by the customer endpoint (or the upstream gateway). ABSENT for epilot-internal errors (code INTERNAL_ERROR / INTERNAL_RESPONSE_TOO_LARGE), which are not customer HTTP outcomes; PRESENT only for real HTTP/upstream results. When the response was delivered but too large to record, a recovered delivered status may still be present.
+             */
             status_code?: string;
             message?: string;
             body?: {
                 [key: string]: any;
             };
+            /**
+             * Machine-readable classification of the outcome. Known values: OAuthTokenExchangeError (OAuth token exchange / upstream gateway failure), DataLimitExceeded (legacy oversized-response marker), INTERNAL_RESPONSE_TOO_LARGE (request delivered but the response was too large for epilot to record), INTERNAL_ERROR (epilot-internal processing failure — not a customer HTTP outcome).
+             */
             code?: string;
             status?: "succeeded" | "failed";
             start_date?: string;
@@ -685,11 +691,17 @@ declare namespace Components {
             created_at?: string;
             event_name?: string;
             http_response?: {
+                /**
+                 * The HTTP status returned by the customer endpoint (or the upstream gateway). ABSENT for epilot-internal errors (code INTERNAL_ERROR / INTERNAL_RESPONSE_TOO_LARGE), which are not customer HTTP outcomes; PRESENT only for real HTTP/upstream results. When the response was delivered but too large to record, a recovered delivered status may still be present.
+                 */
                 status_code?: number;
                 message?: string;
                 body?: {
                     [key: string]: any;
                 };
+                /**
+                 * Machine-readable classification of the outcome. Known values: OAuthTokenExchangeError (OAuth token exchange / upstream gateway failure), DataLimitExceeded (legacy oversized-response marker), INTERNAL_RESPONSE_TOO_LARGE (request delivered but the response was too large for epilot to record), INTERNAL_ERROR (epilot-internal processing failure — not a customer HTTP outcome).
+                 */
                 code?: string;
             };
             metadata?: /* Contains the metadata about the configured event */ Metadata;