@greensecurity/javascript-sdk 0.48.0-beta.9 → 0.49.0-beta.0

package/src/admin-funcs/doAdmin.ts

@@ -20,9 +20,11 @@ import { Result } from "../types/fp.js";
 import { getInternalCore } from "./initializeCore.js";
 import { encodeJSON } from "../lib/encodings.js";
 
-export type internalApiResult = APIPromise<
+// An internal call whose response is validated against a schema for `T` (see $doPost's
+// responseSchema). internalApiResult is the untyped default.
+export type internalApiResultOf<T> = APIPromise<
   Result<
-    Json,
+    T,
     | errors.ApiErrorResponse
     | GreenSecurityError
     | SDKValidationError
@@ -34,6 +36,8 @@ export type internalApiResult = APIPromise<
   >
 >;
 
+export type internalApiResult = internalApiResultOf<Json>;
+
 // This creates a generic JSON schema that can be used to validate any JSON object
 const literalSchema = z.union([z.string(), z.number(), z.boolean(), z.null()]);
 type Literal = z.infer<typeof literalSchema>;
@@ -201,10 +205,10 @@ export async function $doGetSingle<T extends object>(
   return [result, { status: "complete", request: req, response }];
 }
 
-type BodyResult = Promise<
+type BodyResult<T = Json> = Promise<
   [
     Result<
-      Json,
+      T,
       | errors.ApiErrorResponse
       | GreenSecurityError
       | ResponseValidationError
@@ -222,13 +226,18 @@ type BodyResult = Promise<
 // Shared by the JSON and multipart requests below: everything except the method, how the body
 // is built and whether we name a Content-Type. A multipart body must NOT carry one, because only
 // fetch can append the boundary it generates.
-async function $doBodyRequest(
+async function $doBodyRequest<R = Json>(
   method: "POST" | "PUT",
   route: string,
   body: BodyInit | undefined,
   contentTypeHeader: Record<string, string>,
   options?: RequestOptions,
-): BodyResult {
+  responseSchema?: z.ZodType<R>,
+): BodyResult<R> {
+  // Without a schema the body is only checked to be JSON, which is every caller before typed
+  // responses existed.
+  const schema = (responseSchema ?? jsonSchema) as z.ZodType<R>;
+
   const client = getInternalCore();
   if (!client) {
     throw new Error("GreenSecurityCore client is not initialized.");
@@ -290,7 +299,7 @@ async function $doBodyRequest(
   };
 
   const [result] = await M.match<
-    Json,
+    R,
     | errors.ApiErrorResponse
     | GreenSecurityError
     | ResponseValidationError
@@ -301,10 +310,10 @@ async function $doBodyRequest(
     | RequestTimeoutError
     | ConnectionError
   >(
-    M.json(200, jsonSchema),
+    M.json(200, schema),
     // A REST create answers 201, which matches none of the cases below — an unmatched status is
     // an error, so the caller saw a failure for a request the server had accepted.
-    M.json(201, jsonSchema),
+    M.json(201, schema),
     // 422 is a real answer here, not a surprise: the create returns it for a refused certificate
     // and for a model validation failure. Left out, it fell through to M.fail("4XX"), which
     // yields a generic APIError and hides the server's message from the form.
@@ -319,17 +328,21 @@ async function $doBodyRequest(
   return [result, { status: "complete", request: req, response }];
 }
 
-export async function $doPost<T extends object>(
+// Pass responseSchema to validate and type the 200/201 body; a body that does not match it comes
+// back as a ResponseValidationError instead of being handed to the caller.
+export async function $doPost<T extends object, R = Json>(
   route: string,
   postData: T,
   options?: RequestOptions,
-): BodyResult {
+  responseSchema?: z.ZodType<R>,
+): BodyResult<R> {
   return $doBodyRequest(
     "POST",
     route,
     encodeJSON("body", postData, { explode: true }),
     { "Content-Type": "application/json" },
     options,
+    responseSchema,
   );
 }
 

package/src/admin-funcs/subscriptionFinishScreeningQuestions.ts

@@ -1,13 +1,21 @@
 import { APIPromise } from "../types/async.js";
-import { $doPost, internalApiResult } from "./doAdmin.js";
+import { $doPost, internalApiResultOf } from "./doAdmin.js";
+import {
+  subscriptionPlanSelectionResponse,
+  subscriptionPlanSelectionResponse$inboundSchema,
+} from "./subscriptionPlanSelection.js";
 
 export type subscriptionFinishScreeningQuestionsRequest = {
   vendor_id: number;
 };
 
-export function subscriptionFinishScreeningQuestions(request: subscriptionFinishScreeningQuestionsRequest): internalApiResult  {
+export function subscriptionFinishScreeningQuestions(
+  request: subscriptionFinishScreeningQuestionsRequest,
+): internalApiResultOf<subscriptionPlanSelectionResponse> {
   return new APIPromise($doPost(
     "/subscription/screening-questions",
-    request
+    request,
+    undefined,
+    subscriptionPlanSelectionResponse$inboundSchema,
   ));
 }

package/src/admin-funcs/subscriptionPlanSelection.ts

@@ -0,0 +1,17 @@
+import * as z from "zod/v3";
+
+// What finishing the screening questions or choosing a vendor type answers. GSSD-7289.
+export type subscriptionPlanSelectionResponse = {
+  success: boolean;
+  // false when Standard is the vendor's only plan (e.g. Level 1, which cannot buy Emerald): the
+  // server has already selected it, so the plan step is skipped and the next step is the invoice.
+  plan_selection_required: boolean;
+};
+
+// Unknown fields pass through, so the server can add to the response without breaking callers.
+export const subscriptionPlanSelectionResponse$inboundSchema: z.ZodType<subscriptionPlanSelectionResponse> = z
+  .object({
+    success: z.boolean(),
+    plan_selection_required: z.boolean(),
+  })
+  .passthrough();

package/src/admin-funcs/subscriptionUpdateVendorType.ts

@@ -1,14 +1,22 @@
 import { APIPromise } from "../types/async.js";
-import { $doPost, internalApiResult } from "./doAdmin.js";
+import { $doPost, internalApiResultOf } from "./doAdmin.js";
+import {
+  subscriptionPlanSelectionResponse,
+  subscriptionPlanSelectionResponse$inboundSchema,
+} from "./subscriptionPlanSelection.js";
 
 export type subscriptionUpdateVendorTypeRequest = {
   vendor_id: number;
   vendor_type_id: number[];
 };
 
-export function subscriptionUpdateVendorType(request: subscriptionUpdateVendorTypeRequest): internalApiResult  {
+export function subscriptionUpdateVendorType(
+  request: subscriptionUpdateVendorTypeRequest,
+): internalApiResultOf<subscriptionPlanSelectionResponse> {
   return new APIPromise($doPost(
     "/subscription/vendor-type",
-    request
+    request,
+    undefined,
+    subscriptionPlanSelectionResponse$inboundSchema,
   ));
 }

package/src/admin-funcs/zoneDevicesFactoryReset.ts

@@ -0,0 +1,11 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+// Factory-resets a gateway over MQTT. The server clears its stored firmware versions, since the
+// gateway reverts to factory and stops reporting until it is set up again. Returns the device.
+// 422 when the gateway is offline.
+//
+// Internal for the same reason as zoneDevicesUpdate.
+export function zoneDevicesFactoryReset(zoneDeviceId: number): internalApiResult {
+  return new APIPromise($doPost(`/zone-devices/${zoneDeviceId}/factory-reset`, {}));
+}

package/src/admin-funcs/zoneDevicesFirmwareUpdate.ts

@@ -0,0 +1,11 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+// Starts a gateway firmware update (the Update button on device details). The update runs over
+// MQTT; follow it by polling zoneDevicesGet for `firmware_update_status`. Returns the device.
+//
+// Internal for the same reason as zoneDevicesUpdate. 409 when an update is already running, 422
+// when the gateway is already on the target firmware.
+export function zoneDevicesFirmwareUpdate(zoneDeviceId: number): internalApiResult {
+  return new APIPromise($doPost(`/zone-devices/${zoneDeviceId}/firmware-update`, {}));
+}

package/src/admin-funcs/zoneDevicesFirmwareVersions.ts

@@ -0,0 +1,22 @@
+import { APIPromise } from "../types/async.js";
+import { $doPut, internalApiResult } from "./doAdmin.js";
+
+// Wire names, posted verbatim. Versions look like `v3.8.6`; send whichever the gateway reported.
+export type zoneDevicesFirmwareVersionsRequest = {
+  wifi_version?: string;
+  ble_version?: string;
+  // true only from provisioning's final step (a safe point): a gateway found behind target flashes
+  // now instead of waiting for the nightly sweep. Omitted/false for mid-connection reports.
+  auto_update?: boolean;
+};
+
+// Records the firmware the Gatekeeper app read off a gateway while connected to it. A gateway
+// behind the target firmware is then updated automatically over MQTT. Returns the device.
+//
+// Internal for the same reason as zoneDevicesUpdate.
+export function zoneDevicesFirmwareVersions(
+  zoneDeviceId: number,
+  request: zoneDevicesFirmwareVersionsRequest
+): internalApiResult {
+  return new APIPromise($doPut(`/zone-devices/${zoneDeviceId}/firmware-versions`, request));
+}

package/src/admin-funcs/zoneDevicesReboot.ts

@@ -0,0 +1,10 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+// Reboots a gateway over MQTT (cgic-reboot). Fire-and-forget: the gateway drops the reply and
+// reconnects on its own. Returns the device. 422 when the gateway is offline.
+//
+// Internal for the same reason as zoneDevicesUpdate.
+export function zoneDevicesReboot(zoneDeviceId: number): internalApiResult {
+  return new APIPromise($doPost(`/zone-devices/${zoneDeviceId}/reboot`, {}));
+}

package/src/admin-funcs/zoneDevicesUpdate.ts

@@ -9,6 +9,10 @@ export type zoneDevicesUpdateRequest = {
   network_id?: number;
   connection_type?: zoneDeviceConnectionType;
   name?: string;
+  // Sent once the app has pushed the network's current settings to the gateway; only a network edit sets it.
+  needs_network_update?: false;
+  // The provisioning response's network_revision for the settings that were pushed; required with the clear.
+  network_revision?: string;
 };
 
 // Edits a gateway from the Gatekeeper device details screen. This only updates the record; the

package/src/funcs/invoicesConvertQuote.ts

@@ -3,7 +3,7 @@
  */
 
 import { GreenSecurityCore } from "../core.js";
-import { encodeJSON, encodeSimple } from "../lib/encodings.js";
+import { encodeSimple } from "../lib/encodings.js";
 import { matchStatusCode } from "../lib/http.js";
 import * as M from "../lib/matchers.js";
 import { compactMap } from "../lib/primitives.js";
@@ -43,10 +43,7 @@ import { Result } from "../types/fp.js";
  * invoices; a caller allowed to create the invoice but not to update the
  * linked `VendorCredential` responds `401`.
  *
- * Optionally takes `send_to_company_manager`, for a quote linked to a
- * `VendorCredential`: send `true` when the vendor is sending the
- * converted invoice to their company managers to pay instead of paying
- * it themselves. It follows the same rules as on `POST /invoices`.
+ * Takes no request body.
  *
  * **Permissions.** Requires a valid token. This endpoint is not gated on a named permission—the caller's role and their relationship to the record decide what it returns.
  *
@@ -107,7 +104,7 @@ async function $do(
     return [parsed, { status: "invalid" }];
   }
   const payload = parsed.value;
-  const body = encodeJSON("body", payload.RequestBody, { explode: true });
+  const body = null;
 
   const pathParams = {
     id: encodeSimple("id", payload.id, {
@@ -118,7 +115,6 @@ async function $do(
   const path = pathToFunc("/invoices/{id}/convert")(pathParams);
 
   const headers = new Headers(compactMap({
-    "Content-Type": "application/json",
     Accept: "application/json",
   }));
 

package/src/funcs/vendorsChangeSubscription.ts

@@ -32,8 +32,9 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Changes a vendor's credentialing subscription by updating the vendor type,
  * the target facilities, or both. If the selection increases the subscription
- * price, the server creates an invoice and charges the payment profile; the
- * response includes the invoice id.
+ * price, the server creates an invoice and charges the payment profile for the
+ * invoice total, including any tax and convenience fee; the response includes
+ * the invoice id.
  *
  * **Permissions.** Requires the `vendor_transactions.add` permission.
  *

package/src/funcs/vendorsCreateVendorCompany.ts

@@ -50,6 +50,7 @@ export function vendorsCreateVendorCompany(
   Result<
     operations.CreateVendorCompanyCreateVendorCompanyOk,
     | errors.ApiErrorResponse
+    | errors.UnprocessableEntityOrValidationError
     | GreenSecurityError
     | ResponseValidationError
     | ConnectionError
@@ -76,6 +77,7 @@ async function $do(
     Result<
       operations.CreateVendorCompanyCreateVendorCompanyOk,
       | errors.ApiErrorResponse
+      | errors.UnprocessableEntityOrValidationError
       | GreenSecurityError
       | ResponseValidationError
       | ConnectionError
@@ -165,6 +167,7 @@ async function $do(
   const [result] = await M.match<
     operations.CreateVendorCompanyCreateVendorCompanyOk,
     | errors.ApiErrorResponse
+    | errors.UnprocessableEntityOrValidationError
     | GreenSecurityError
     | ResponseValidationError
     | ConnectionError
@@ -179,6 +182,7 @@ async function $do(
       operations.CreateVendorCompanyCreateVendorCompanyOk$inboundSchema,
     ),
     M.jsonErr([400, 401, 403, 404], errors.ApiErrorResponse$inboundSchema),
+    M.jsonErr(422, errors.UnprocessableEntityOrValidationError$inboundSchema),
     M.fail("4XX"),
     M.fail([500, "5XX"]),
   )(response, req, { extraFields: responseFields });

package/src/funcs/vendorsUpdateVendorDetails.ts

@@ -36,12 +36,20 @@ import * as types$ from "../types/primitives.js";
  * can also remove the vendor from their company by sending `company_id: null`.
  *
  * From `location` this endpoint reads only `timezone`, `address1`, `address2`,
- * `city`, `state`, `zip`, `phone`, `mobile_phone` and `fax`. The `address` and
+ * `city`, `state`, `zip`, `phone`, `mobile_phone`, `fax`, `work_email` and `personal_email`. The `address` and
  * `country` properties of the shared `UserLocation` schema have no effect here, and
  * updating them is not supported. `state` accepts a US state or a Canadian
  * province—the vendor's country, set only at registration, is not editable
  * through this endpoint.
  *
+ * `location.work_email` and `location.personal_email` are stored lowercased, and a
+ * value that is not a valid email address, or is longer than 255 characters, gets a
+ * `422` response. They are contact fields: the login stays `email`, which this
+ * endpoint does not change. When an update sets either of them, one must be the
+ * vendor's `email` and the other a different address or empty, or it gets a `422`.
+ * A vendor with neither one copying `email` yet can set just one and leave the
+ * other empty: the save puts `email` in the empty one (work, if both are).
+ *
  * Submitting `location.zip` or `location.state` cross-checks the postal code
  * against the resulting state (using the vendor's existing value for whichever
  * of the two you omit from the request). The server rejects a code that is not shaped like a real

package/src/index.extras.ts

@@ -80,6 +80,10 @@ import { zoneDevicesMacAvailability } from "./admin-funcs/zoneDevicesMacAvailabi
 import { zoneDevicesUpdate } from "./admin-funcs/zoneDevicesUpdate.js";
 import { zoneDevicesProvisioning } from "./admin-funcs/zoneDevicesProvisioning.js";
 import { zoneDevicesDelete } from "./admin-funcs/zoneDevicesDelete.js";
+import { zoneDevicesFirmwareVersions } from "./admin-funcs/zoneDevicesFirmwareVersions.js";
+import { zoneDevicesFirmwareUpdate } from "./admin-funcs/zoneDevicesFirmwareUpdate.js";
+import { zoneDevicesReboot } from "./admin-funcs/zoneDevicesReboot.js";
+import { zoneDevicesFactoryReset } from "./admin-funcs/zoneDevicesFactoryReset.js";
 import { lookupsAddressValidation } from "./admin-funcs/lookupsAddressValidation.js";
 import { lookupsAddressAutocomplete } from "./admin-funcs/lookupsAddressAutocomplete.js";
 import { lookupsAddressPlace } from "./admin-funcs/lookupsAddressPlace.js";
@@ -219,6 +223,10 @@ export const __internal = {
     update: zoneDevicesUpdate,
     provisioning: zoneDevicesProvisioning,
     delete: zoneDevicesDelete,
-    macAvailability: zoneDevicesMacAvailability
+    macAvailability: zoneDevicesMacAvailability,
+    firmwareVersions: zoneDevicesFirmwareVersions,
+    firmwareUpdate: zoneDevicesFirmwareUpdate,
+    reboot: zoneDevicesReboot,
+    factoryReset: zoneDevicesFactoryReset
   }
 };

package/src/lib/config.ts

@@ -79,9 +79,9 @@ export function serverURLFromOptions(options: SDKOptions): URL | null {
 
 export const SDK_METADATA = {
   language: "typescript",
-  openapiDocVersion: "0.47.0",
-  sdkVersion: "0.48.0-beta.9",
-  genVersion: "2.950.13",
+  openapiDocVersion: "0.48.0",
+  sdkVersion: "0.49.0-beta.0",
+  genVersion: "2.954.8",
   userAgent:
-    "speakeasy-sdk/typescript 0.48.0-beta.9 2.950.13 0.47.0 @greensecurity/javascript-sdk",
+    "speakeasy-sdk/typescript 0.49.0-beta.0 2.954.8 0.48.0 @greensecurity/javascript-sdk",
 } as const;

package/src/models/components/fhirconfig.ts

@@ -47,6 +47,10 @@ export type ProductionProfile = {
    * The private key used to sign token requests to the production FHIR instance.
    */
   privateKey?: string | undefined;
+  /**
+   * Extra HTTP headers to send with the token request and with every FHIR request to the production instance, as a map of header name to value. Merged over the headers the client sets itself, so an entry named `Authorization`, `Content-Type` or `Accept` replaces the default. Empty when the facility's gateway needs none, which is the usual case. A value may be a credential, so this field is only served to callers allowed to see this configuration's secrets.
+   */
+  customHeaders?: { [k: string]: string } | undefined;
   /**
    * Relative path of the self-hosted JSON Web Key (JWK) Set URL (JKU) serving this configuration's production public signing keys.
    */
@@ -97,6 +101,10 @@ export type NonProductionProfile = {
    * The private key used to sign token requests to the non-production FHIR instance.
    */
   privateKeyNp?: string | undefined;
+  /**
+   * Extra HTTP headers to send with the token request and with every FHIR request to the non-production instance, as a map of header name to value. Merged over the headers the client sets itself, so an entry named `Authorization`, `Content-Type` or `Accept` replaces the default. Empty when the facility's gateway needs none, which is the usual case. A value may be a credential, so this field is only served to callers allowed to see this configuration's secrets.
+   */
+  customHeadersNp?: { [k: string]: string } | undefined;
   /**
    * Relative path of the self-hosted JWK Set URL (JKU) serving this configuration's non-production public signing keys.
    */
@@ -221,6 +229,7 @@ export const ProductionProfile$inboundSchema: z.ZodType<
   patient_list_url: types.optional(types.string()),
   patient_list_id: types.optional(types.string()),
   private_key: types.optional(types.string()),
+  custom_headers: types.optional(z.record(types.string())),
   jku_path: types.optional(types.string()),
   jku_url: z.nullable(types.string()).optional(),
   signing_kid: z.nullable(types.string()).optional(),
@@ -234,6 +243,7 @@ export const ProductionProfile$inboundSchema: z.ZodType<
     "patient_list_url": "patientListUrl",
     "patient_list_id": "patientListId",
     "private_key": "privateKey",
+    "custom_headers": "customHeaders",
     "jku_path": "jkuPath",
     "jku_url": "jkuUrl",
     "signing_kid": "signingKid",
@@ -264,6 +274,7 @@ export const NonProductionProfile$inboundSchema: z.ZodType<
   patient_list_url_np: types.optional(types.string()),
   patient_list_id_np: types.optional(types.string()),
   private_key_np: types.optional(types.string()),
+  custom_headers_np: types.optional(z.record(types.string())),
   jku_path_np: types.optional(types.string()),
   jku_url_np: z.nullable(types.string()).optional(),
   signing_kid_np: z.nullable(types.string()).optional(),
@@ -277,6 +288,7 @@ export const NonProductionProfile$inboundSchema: z.ZodType<
     "patient_list_url_np": "patientListUrlNp",
     "patient_list_id_np": "patientListIdNp",
     "private_key_np": "privateKeyNp",
+    "custom_headers_np": "customHeadersNp",
     "jku_path_np": "jkuPathNp",
     "jku_url_np": "jkuUrlNp",
     "signing_kid_np": "signingKidNp",

package/src/models/components/invoice.ts

@@ -141,10 +141,6 @@ export type Invoice = {
    * When the invoice was created.
    */
   dateCreated?: string | null | undefined;
-  /**
-   * When the vendor sent this invoice to their company managers to pay instead of paying it themselves (`send_to_company_manager` on `POST /invoices` or `POST /invoices/{id}/convert`). `null` if it was never sent, or if the vendor took it back or settled it themselves. It is kept on an invoice the managers paid, and on one that was later voided.
-   */
-  dateSentToCompanyManager?: string | null | undefined;
   /**
    * The date the invoice payment is due. `null` if no due date is set.
    */
@@ -397,7 +393,6 @@ export const Invoice$inboundSchema: z.ZodType<Invoice, z.ZodTypeDef, unknown> =
     date_processed: z.nullable(types.string()).optional(),
     date_paid: z.nullable(types.string()).optional(),
     date_created: z.nullable(types.string()).optional(),
-    date_sent_to_company_manager: z.nullable(types.string()).optional(),
     date_due: z.nullable(types.string()).optional(),
     amount: z.nullable(types.number()).optional(),
     status: z.nullable(types.string()).optional(),
@@ -426,7 +421,6 @@ export const Invoice$inboundSchema: z.ZodType<Invoice, z.ZodTypeDef, unknown> =
       "date_processed": "dateProcessed",
       "date_paid": "datePaid",
       "date_created": "dateCreated",
-      "date_sent_to_company_manager": "dateSentToCompanyManager",
       "date_due": "dateDue",
       "financial_status": "financialStatus",
       "amount_not_paid": "amountNotPaid",
@@ -445,7 +439,6 @@ export type Invoice$Outbound = {
   date_processed?: string | null | undefined;
   date_paid?: string | null | undefined;
   date_created?: string | null | undefined;
-  date_sent_to_company_manager?: string | null | undefined;
   date_due?: string | null | undefined;
   amount?: number | null | undefined;
   status?: string | null | undefined;
@@ -478,7 +471,6 @@ export const Invoice$outboundSchema: z.ZodType<
   dateProcessed: z.nullable(z.string()).optional(),
   datePaid: z.nullable(z.string()).optional(),
   dateCreated: z.nullable(z.string()).optional(),
-  dateSentToCompanyManager: z.nullable(z.string()).optional(),
   dateDue: z.nullable(z.string()).optional(),
   amount: z.nullable(z.number().int()).optional(),
   status: z.nullable(z.string()).optional(),
@@ -506,7 +498,6 @@ export const Invoice$outboundSchema: z.ZodType<
     dateProcessed: "date_processed",
     datePaid: "date_paid",
     dateCreated: "date_created",
-    dateSentToCompanyManager: "date_sent_to_company_manager",
     dateDue: "date_due",
     financialStatus: "financial_status",
     amountNotPaid: "amount_not_paid",

package/src/models/components/userdetails.ts

@@ -85,6 +85,10 @@ export type UserDetails = {
    * First name of the user.
    */
   firstName?: string | null | undefined;
+  /**
+   * Middle name of the user, or `null` if not set. Returned only in the full user record (`expand=user`).
+   */
+  middleName?: string | null | undefined;
   /**
    * Last name of the user.
    */
@@ -93,6 +97,24 @@ export type UserDetails = {
    * Email address (not always valid)
    */
   email: string;
+  /**
+   * A vendor's work email address, a contact field kept apart from `email`,
+   *
+   * @remarks
+   * which stays the login. When it is the same address as `email`, it follows
+   * any change to the login. `null` if not set. Returned only in the full user
+   * record (`expand=user`).
+   */
+  workEmail?: string | null | undefined;
+  /**
+   * A vendor's personal email address, a contact field kept apart from `email`,
+   *
+   * @remarks
+   * which stays the login. When it is the same address as `email`, it follows
+   * any change to the login. `null` if not set. Returned only in the full user
+   * record (`expand=user`).
+   */
+  personalEmail?: string | null | undefined;
   /**
    * The user's landline phone number, or `null` if not set.
    */
@@ -253,8 +275,11 @@ export const UserDetails$inboundSchema: z.ZodType<
 > = z.object({
   id: types.number(),
   first_name: z.nullable(types.string()).optional(),
+  middle_name: z.nullable(types.string()).optional(),
   last_name: z.nullable(types.string()).optional(),
   email: types.string(),
+  work_email: z.nullable(types.string()).optional(),
+  personal_email: z.nullable(types.string()).optional(),
   phone: z.nullable(types.string()).optional(),
   mobile_phone: z.nullable(types.string()).optional(),
   fax: z.nullable(types.string()).optional(),
@@ -274,7 +299,10 @@ export const UserDetails$inboundSchema: z.ZodType<
 }).transform((v) => {
   return remap$(v, {
     "first_name": "firstName",
+    "middle_name": "middleName",
     "last_name": "lastName",
+    "work_email": "workEmail",
+    "personal_email": "personalEmail",
     "mobile_phone": "mobilePhone",
     "phone_confirmed": "phoneConfirmed",
     "email_confirmed": "emailConfirmed",

package/src/models/components/userlocation.ts

@@ -212,6 +212,14 @@ export type UserLocation = {
    * The fax number of the location. `null` if not set.
    */
   fax?: string | null | undefined;
+  /**
+   * The vendor's work email address. Only `PUT /vendors/{vendor_id_or_me}` reads it. `null` if not set.
+   */
+  workEmail?: string | null | undefined;
+  /**
+   * The vendor's personal email address. Only `PUT /vendors/{vendor_id_or_me}` reads it. `null` if not set.
+   */
+  personalEmail?: string | null | undefined;
   /**
    * The country of the location. `null` if not set.
    */
@@ -250,11 +258,15 @@ export const UserLocation$inboundSchema: z.ZodType<
   phone: z.nullable(types.string()).optional(),
   mobile_phone: z.nullable(types.string()).optional(),
   fax: z.nullable(types.string()).optional(),
+  work_email: z.nullable(types.string()).optional(),
+  personal_email: z.nullable(types.string()).optional(),
   country: z.nullable(types.string()).optional(),
   timezone: z.nullable(Timezone$inboundSchema).optional(),
 }).transform((v) => {
   return remap$(v, {
     "mobile_phone": "mobilePhone",
+    "work_email": "workEmail",
+    "personal_email": "personalEmail",
   });
 });
 /** @internal */
@@ -268,6 +280,8 @@ export type UserLocation$Outbound = {
   phone?: string | null | undefined;
   mobile_phone?: string | null | undefined;
   fax?: string | null | undefined;
+  work_email?: string | null | undefined;
+  personal_email?: string | null | undefined;
   country?: string | null | undefined;
   timezone?: string | null | undefined;
 };
@@ -287,11 +301,15 @@ export const UserLocation$outboundSchema: z.ZodType<
   phone: z.nullable(z.string()).optional(),
   mobilePhone: z.nullable(z.string()).optional(),
   fax: z.nullable(z.string()).optional(),
+  workEmail: z.nullable(z.string()).optional(),
+  personalEmail: z.nullable(z.string()).optional(),
   country: z.nullable(z.string()).optional(),
   timezone: z.nullable(Timezone$outboundSchema).optional(),
 }).transform((v) => {
   return remap$(v, {
     mobilePhone: "mobile_phone",
+    workEmail: "work_email",
+    personalEmail: "personal_email",
   });
 });