@zavudev/sdk 0.53.0 → 0.54.0

package/src/resources/functions/functions.ts

@@ -401,6 +401,18 @@ export namespace FunctionDeployResponse {
      */
     version: number;
 
+    /**
+     * What the build printed: dependency installation, the bundler's output, and the
+     * compiler's message when it failed. Returned when fetching a single deployment,
+     * omitted from the list. Read this first when a deploy fails — `errorMessage` is
+     * often the outer wrapper's summary, and the line that names the broken import or
+     * the syntax error is here.
+     */
+    buildLogs?: string | null;
+
+    /**
+     * Size of the built bundle in bytes. Null until the build finishes.
+     */
     bundleBytes?: number | null;
 
     deployedAt?: string | null;
@@ -410,6 +422,9 @@ export namespace FunctionDeployResponse {
      */
     errorMessage?: string | null;
 
+    /**
+     * Total size of the deployed source tree in bytes.
+     */
     sourceCodeBytes?: number | null;
   }
 }
@@ -436,6 +451,18 @@ export namespace FunctionGetDeploymentResponse {
      */
     version: number;
 
+    /**
+     * What the build printed: dependency installation, the bundler's output, and the
+     * compiler's message when it failed. Returned when fetching a single deployment,
+     * omitted from the list. Read this first when a deploy fails — `errorMessage` is
+     * often the outer wrapper's summary, and the line that names the broken import or
+     * the syntax error is here.
+     */
+    buildLogs?: string | null;
+
+    /**
+     * Size of the built bundle in bytes. Null until the build finishes.
+     */
     bundleBytes?: number | null;
 
     deployedAt?: string | null;
@@ -445,6 +472,9 @@ export namespace FunctionGetDeploymentResponse {
      */
     errorMessage?: string | null;
 
+    /**
+     * Total size of the deployed source tree in bytes.
+     */
     sourceCodeBytes?: number | null;
   }
 }
@@ -481,6 +511,23 @@ export interface FunctionCreateParams {
 
   description?: string;
 
+  /**
+   * Which file in `files` is the entry point. Defaults to `index.ts`.
+   */
+  entrypoint?: string;
+
+  /**
+   * The project's source files, keyed by path relative to the project root (e.g.
+   * `index.ts`, `lib/orders.ts`). Imports between them are resolved when the
+   * function is built, so a function can be split across as many files as it needs.
+   *
+   * Paths must be relative and use forward slashes; `..`, `node_modules/` and
+   * `package.json` are rejected. npm packages are not uploaded here — declare them
+   * under `dependencies` and Zavu installs them. Limits: 200 files and 900,000 bytes
+   * for the whole tree.
+   */
+  files?: { [key: string]: string };
+
   /**
    * Whether to expose a public HTTPS URL for this function.
    */
@@ -494,7 +541,9 @@ export interface FunctionCreateParams {
   runtime?: 'nodejs24';
 
   /**
-   * TypeScript source code for the function entry point (max ~900KB).
+   * Shortcut for a single-file function: exactly equivalent to sending `files` with
+   * one entry named after `entrypoint` (`index.ts` by default). Fully supported —
+   * use whichever fits. If both are sent, `files` wins.
    */
   sourceCode?: string;
 
@@ -513,6 +562,23 @@ export interface FunctionUpdateParams {
    */
   dependencies?: { [key: string]: string };
 
+  /**
+   * Which file in `files` is the entry point. Defaults to `index.ts`.
+   */
+  entrypoint?: string;
+
+  /**
+   * The project's source files, keyed by path relative to the project root (e.g.
+   * `index.ts`, `lib/orders.ts`). Imports between them are resolved when the
+   * function is built, so a function can be split across as many files as it needs.
+   *
+   * Paths must be relative and use forward slashes; `..`, `node_modules/` and
+   * `package.json` are rejected. npm packages are not uploaded here — declare them
+   * under `dependencies` and Zavu installs them. Limits: 200 files and 900,000 bytes
+   * for the whole tree.
+   */
+  files?: { [key: string]: string };
+
   /**
    * Expose the function on its public HTTPS URL, or take it down. Applies to the
    * already-deployed function without redeploying; the URL is returned as
@@ -521,7 +587,9 @@ export interface FunctionUpdateParams {
   httpEnabled?: boolean;
 
   /**
-   * New source code for the draft (replaces it).
+   * Shortcut for a single-file function: exactly equivalent to sending `files` with
+   * one entry named after `entrypoint` (`index.ts` by default). Fully supported —
+   * use whichever fits. If both are sent, `files` wins.
    */
   sourceCode?: string;
 }
@@ -533,7 +601,26 @@ export interface FunctionDeployParams {
   dependencies?: { [key: string]: string };
 
   /**
-   * New source code to publish (replaces the draft).
+   * Which file in `files` is the entry point. Defaults to `index.ts`.
+   */
+  entrypoint?: string;
+
+  /**
+   * The project's source files, keyed by path relative to the project root (e.g.
+   * `index.ts`, `lib/orders.ts`). Imports between them are resolved when the
+   * function is built, so a function can be split across as many files as it needs.
+   *
+   * Paths must be relative and use forward slashes; `..`, `node_modules/` and
+   * `package.json` are rejected. npm packages are not uploaded here — declare them
+   * under `dependencies` and Zavu installs them. Limits: 200 files and 900,000 bytes
+   * for the whole tree.
+   */
+  files?: { [key: string]: string };
+
+  /**
+   * Shortcut for a single-file function: exactly equivalent to sending `files` with
+   * one entry named after `entrypoint` (`index.ts` by default). Fully supported —
+   * use whichever fits. If both are sent, `files` wins.
    */
   sourceCode?: string;
 }

package/src/resources/phone-numbers.ts

@@ -62,7 +62,10 @@ export class PhoneNumbers extends APIResource {
   /**
    * Purchase an available phone number. Requires a paid plan: the Free plan cannot
    * purchase phone numbers and receives `402` with code `paid_plan_required`. Paid
-   * plans include the first US number at no charge.
+   * plans include one US number at no charge. The included number is one per account
+   * and is granted once: claiming it spends the benefit for good, so releasing that
+   * number does not make another one free, and numbers the account already bought do
+   * not consume it.
    *
    * @example
    * ```ts
@@ -207,8 +210,9 @@ export interface PhoneNumberCapabilities {
 
 export interface PhoneNumberPricing {
   /**
-   * Whether this number qualifies as the plan-included first US number on paid
-   * plans.
+   * Whether this number qualifies as the plan-included US number on paid plans. The
+   * benefit is one per account: it is never offered again once claimed, not even
+   * after the number is released.
    */
   isFreeEligible?: boolean;
 

package/src/resources/senders/agent/tools.ts

@@ -172,6 +172,17 @@ export interface AgentTool {
    * HTTPS URL to call when the tool is executed.
    */
   webhookUrl: string;
+
+  /**
+   * Signing secret for this tool's webhook. **Returned only when the tool is
+   * created**, never on a later read.
+   *
+   * Zavu generates one if you do not supply it, and signs every call to this tool
+   * with it: `X-Zavu-Signature: <hex>`, the HMAC-SHA256 of the request body. Verify
+   * it before trusting the call. Lost it? Rotate with
+   * `POST /v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`.
+   */
+  webhookSecret?: string;
 }
 
 export interface ToolParameters {
@@ -268,7 +279,9 @@ export interface ToolCreateParams {
   enabled?: boolean;
 
   /**
-   * Optional secret for webhook signature verification.
+   * Signing secret for the webhook. Optional: Zavu generates one when omitted and
+   * returns it on this response only. Supply your own if you already have a secret
+   * you want reused.
    */
   webhookSecret?: string;
 }

package/src/resources/senders/senders.ts

@@ -300,6 +300,22 @@ export interface SenderWebhook {
    */
   events: Array<WebhookEvent>;
 
+  /**
+   * Which `X-Zavu-Signature` scheme this receiver is sent.
+   *
+   * - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+   *   configurable. Existing webhooks stay on it until you move them.
+   * - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+   *   default for new senders. It signs the timestamp together with the body.
+   * - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+   *   reading either one works, so you can deploy and confirm your new verifier
+   *   before switching over.
+   *
+   * Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+   * https://docs.zavu.dev/guides/receiving-messages/signature-migration
+   */
+  signatureVersion: 'v1' | 'v1+v2' | 'v2';
+
   /**
    * HTTPS URL that will receive webhook events.
    */
@@ -570,6 +586,22 @@ export interface SenderCreateParams {
    */
   webhookEvents?: Array<WebhookEvent>;
 
+  /**
+   * Which `X-Zavu-Signature` scheme this receiver is sent.
+   *
+   * - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+   *   configurable. Existing webhooks stay on it until you move them.
+   * - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+   *   default for new senders. It signs the timestamp together with the body.
+   * - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+   *   reading either one works, so you can deploy and confirm your new verifier
+   *   before switching over.
+   *
+   * Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+   * https://docs.zavu.dev/guides/receiving-messages/signature-migration
+   */
+  webhookSignatureVersion?: 'v1' | 'v1+v2' | 'v2';
+
   /**
    * HTTPS URL for webhook events.
    */
@@ -634,6 +666,22 @@ export interface SenderUpdateParams {
    */
   webhookEvents?: Array<WebhookEvent>;
 
+  /**
+   * Which `X-Zavu-Signature` scheme this receiver is sent.
+   *
+   * - `v1`: `v1=HMAC_SHA256(secret, body)`. The scheme used before this was
+   *   configurable. Existing webhooks stay on it until you move them.
+   * - `v2`: `v2=HMAC_SHA256(secret, "{t}.{body}")`. The current scheme, and the
+   *   default for new senders. It signs the timestamp together with the body.
+   * - `v1+v2`: both signatures, sharing one `t`. The migration setting: a receiver
+   *   reading either one works, so you can deploy and confirm your new verifier
+   *   before switching over.
+   *
+   * Moving from `v1` straight to `v2` returns `400`. Set `v1+v2` first. See
+   * https://docs.zavu.dev/guides/receiving-messages/signature-migration
+   */
+  webhookSignatureVersion?: 'v1' | 'v1+v2' | 'v2';
+
   /**
    * HTTPS URL for webhook events. Set to null to remove webhook.
    */

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.53.0'; // x-release-please-version
+export const VERSION = '0.54.0'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.53.0";
+export declare const VERSION = "0.54.0";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.53.0";
+export declare const VERSION = "0.54.0";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.53.0'; // x-release-please-version
+exports.VERSION = '0.54.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.53.0'; // x-release-please-version
+export const VERSION = '0.54.0'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map