@myronsi/messenger-api 2.1.0-alpha.12 → 2.1.0-alpha.14

package/dist/ws-docs.json

@@ -415,6 +415,36 @@
         "read_at": "2026-10-04T12:00:00Z"
       }
     },
+    "server/recovery_request.json": {
+      "type": "recovery_request",
+      "event_id": "7217400317439950849",
+      "chat_id": null,
+      "data": {
+        "request_id": "z8uFZt0xFYtjm_iO3vI9xFYxsy7xM4K5uM1g1s8YbYI",
+        "user_agent": "Chrome on Windows",
+        "location": {
+          "city": "Berlin",
+          "country_code": "DE",
+          "country": "Germany"
+        },
+        "choices": [
+          17,
+          42,
+          85
+        ],
+        "expires_at": "2026-11-05T20:00:00Z"
+      }
+    },
+    "server/security_alert.json": {
+      "type": "security_alert",
+      "event_id": "7217400317439950010",
+      "chat_id": null,
+      "data": {
+        "type": "login",
+        "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/140.0",
+        "created_at": "2026-11-06T12:00:00Z"
+      }
+    },
     "server/security_notice.json": {
       "type": "security_notice",
       "event_id": "7217400317439950009",

package/dist/ws-events.d.ts

@@ -1,4 +1,4 @@
-/* Generated from api/openapi.yaml 2.1.0-alpha.12. Do not edit. */
+/* Generated from api/openapi.yaml 2.1.0-alpha.14. Do not edit. */
 
 /**
  * Any WebSocket event, in either direction.
@@ -48,6 +48,8 @@ export type ServerEvent =
   | ServerReactionAddEvent
   | ServerReactionRemoveEvent
   | ServerReadEvent
+  | ServerRecoveryRequestEvent
+  | ServerSecurityAlertEvent
   | ServerSecurityNoticeEvent
   | ServerTypingEvent;
 export type Timestamp = string;
@@ -557,6 +559,72 @@ export interface ServerReadEvent {
     read_at: Timestamp;
   };
 }
+export interface ServerRecoveryRequestEvent {
+  type: "recovery_request";
+  event_id: string;
+  chat_id: null;
+  data: {
+    /**
+     * Approval handle for POST /auth/recovery-requests/{requestId}/approve and /deny. It is not the requester's capability.
+     */
+    request_id: string;
+    user_agent: string;
+    location: Location | null;
+    /**
+     * @minItems 3
+     * @maxItems 3
+     */
+    choices: [number, number, number];
+    expires_at: string;
+  };
+}
+/**
+ * Approximate location of a client address, looked up in an offline GeoIP database (IP geolocation by
+ * DB-IP, https://db-ip.com, CC BY 4.0). The address itself is never exposed. Each field is `null` when the
+ * database does not know it; clients localise the country name from `country_code`.
+ *
+ */
+export interface Location {
+  /**
+   * City name in English
+   */
+  city: string | null;
+  /**
+   * ISO 3166-1 alpha-2 country code
+   */
+  country_code: string | null;
+  /**
+   * Country name in English
+   */
+  country: string | null;
+}
+export interface ServerSecurityAlertEvent {
+  type: "security_alert";
+  event_id: Id;
+  chat_id: null;
+  data: {
+    type:
+      | "password_changed"
+      | "recovery_key_changed"
+      | "2fa_enabled"
+      | "2fa_disabled"
+      | "passkey_added"
+      | "passkey_removed"
+      | "recovery_email_changed"
+      | "recovery_email_removed"
+      | "passkey_counter_warning"
+      | "login"
+      | "login_2fa"
+      | "passkey_login"
+      | "qr_login_approved";
+    user_agent?: string;
+    created_at?: string;
+    /**
+     * The session that made the change, when a signed-in session made it. Clients skip alerts for their own session.
+     */
+    session_id?: string;
+  };
+}
 export interface ServerSecurityNoticeEvent {
   type: "security_notice";
   event_id: Id;