@greensecurity/javascript-sdk 0.45.0-beta.13 → 0.45.0-beta.15

package/src/sdk/companies.ts

@@ -6,6 +6,7 @@ import { companiesAddCompanyManager } from "../funcs/companiesAddCompanyManager.
 import { companiesGetCompany } from "../funcs/companiesGetCompany.js";
 import { companiesListCompanyCredentials } from "../funcs/companiesListCompanyCredentials.js";
 import { companiesListCompanyCredits } from "../funcs/companiesListCompanyCredits.js";
+import { companiesListCompanyManagerContacts } from "../funcs/companiesListCompanyManagerContacts.js";
 import { companiesListCompanyManagers } from "../funcs/companiesListCompanyManagers.js";
 import { companiesListOrSearchCompanies } from "../funcs/companiesListOrSearchCompanies.js";
 import { companiesLookupCompanies } from "../funcs/companiesLookupCompanies.js";
@@ -152,4 +153,23 @@ export class Companies extends ClientSDK {
       options,
     ));
   }
+
+  /**
+   * List the contact details of a company's managers
+   *
+   * @remarks
+   * List the active managers of a company who have an email address, so someone who belongs to that company can contact them. Readable by a vendor of the company, a manager of the company, or an admin; every other caller receives a 404. Carries only the fields needed to address a message, not the full company manager or user record. Distinct from `/companies/{company_id}/managers`, which is the administration listing and is gated on the `company_managers` view permission.
+   */
+  async listCompanyManagerContacts(
+    request: operations.ListCompanyManagerContactsRequest,
+    options?: RequestOptions,
+  ): Promise<
+    operations.ListCompanyManagerContactsListCompanyManagerContactsOk
+  > {
+    return unwrapAsync(companiesListCompanyManagerContacts(
+      this,
+      request,
+      options,
+    ));
+  }
 }

package/src/sdk/lookups.ts

@@ -3,6 +3,7 @@
  */
 
 import { lookupsListLookupSystems } from "../funcs/lookupsListLookupSystems.js";
+import { lookupsLookupPostalCode } from "../funcs/lookupsLookupPostalCode.js";
 import { ClientSDK, RequestOptions } from "../lib/sdks.js";
 import * as operations from "../models/operations/index.js";
 import { unwrapAsync } from "../types/fp.js";
@@ -31,4 +32,36 @@ export class Lookups extends ClientSDK {
       options,
     ));
   }
+
+  /**
+   * Check a postal code against a state and country
+   *
+   * @remarks
+   * Cross-checks a postal code against a state/province and country, the same check
+   * every write path that stores a US or Canadian address enforces server-side (e.g.
+   * `PUT /users/{id}`, `PUT /vendors/{vendor_id_or_me}`). Useful for validating an
+   * address before submitting it elsewhere.
+   *
+   * `status` is one of:
+   * - `ok` — the postal code belongs to the given state/province.
+   * - `invalid` — the postal code is not shaped like a real one for the given country.
+   * - `mismatch` — the postal code is well-formed but belongs to a different state or
+   *   province. `expected_states` names the state(s) it actually maps to.
+   * - `unknown` — nothing to check against (an unsupported country, or a postal code
+   *   absent from the US ZIP dataset). Treated as acceptable by every write path that
+   *   uses this check.
+   *
+   * Only the US and Canada have a real code-to-subdivision map; every other country
+   * always returns `unknown`.
+   */
+  async lookupPostalCode(
+    request: operations.LookupPostalCodeRequest,
+    options?: RequestOptions,
+  ): Promise<operations.LookupPostalCodeLookupPostalCodeOk> {
+    return unwrapAsync(lookupsLookupPostalCode(
+      this,
+      request,
+      options,
+    ));
+  }
 }

package/src/sdk/users.ts

@@ -85,6 +85,12 @@ export class Users extends ClientSDK {
    * Only submitted fields are applied — unrecognised fields are silently ignored.
    * Changing `email` automatically resets `bounced_email` to `false`.
    *
+   * Submitting `zip`, `state`, or `country` cross-checks the postal code against the
+   * resulting state/country (using the existing value for any of the three left out
+   * of the request). A code that is not shaped like a real postal code, or that
+   * provably belongs to a different state, is rejected with `422` naming the correct
+   * state.
+   *
    * Each subkey of `email_preferences` is independently optional; sending
    * `{ "email_preferences": { "send_weekly_summary_email": true } }` flips
    * only that flag and leaves the others unchanged.

package/src/sdk/vendors.ts

@@ -132,6 +132,10 @@ export class Vendors extends ClientSDK {
    * `company_id` is optional for company managers — it defaults to their own company.
    * All other callers must provide `company_id`. The caller must have access to the
    * specified company (verified via scoped access policy) and the `vendors:add` permission.
+   *
+   * `zip` is cross-checked against `state`: a code that is not shaped like a real postal
+   * code, or that provably belongs to a different state, is rejected with `422` naming
+   * the correct state.
    */
   async createVendor(
     request: operations.CreateVendorRequestBody,
@@ -880,7 +884,15 @@ export class Vendors extends ClientSDK {
    * From `location` this endpoint reads only `timezone`, `address1`, `address2`,
    * `city`, `state`, `zip`, `phone`, `mobile_phone` and `fax`. The `address` and
    * `country` properties of the shared `UserLocation` schema are ignored here and
-   * updating them is not supported.
+   * updating them is not supported. `state` accepts a US state or a Canadian
+   * province — the vendor's country, set only at registration, is not editable
+   * through this endpoint.
+   *
+   * Submitting `location.zip` or `location.state` cross-checks the postal code
+   * against the resulting state (using the vendor's existing value for whichever
+   * of the two is left out of the request). A code that is not shaped like a real
+   * postal code, or that provably belongs to a different state, is rejected with
+   * `422` naming the correct state.
    *
    * For `title`, the `supervisor` fields, and every `location` field except
    * `timezone`, the value sent is the value stored: omit a field to leave it