@zyphr-dev/node-sdk 0.1.41 → 0.1.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.41",
+  "version": "0.1.43",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/.openapi-generator/FILES

@@ -85,6 +85,8 @@ src/models/BulkUpsertAuthEmailTemplatesResponse.ts
 src/models/Category.ts
 src/models/CategoryListResponse.ts
 src/models/CategoryResponse.ts
+src/models/CloseWaaSEndpointCircuit200Response.ts
+src/models/CloseWaaSEndpointCircuit200ResponseData.ts
 src/models/ConfirmEmailVerificationRequest.ts
 src/models/ConfirmEmailVerificationResponse.ts
 src/models/ConfirmEmailVerificationResponseData.ts
@@ -161,7 +163,25 @@ src/models/GenerateSubscriberTokenRequest.ts
 src/models/GenerateWaaSPortalToken201Response.ts
 src/models/GetDomain200Response.ts
 src/models/GetDomain200ResponseMeta.ts
+src/models/GetEndUserById200Response.ts
+src/models/GetEndUserClaims200Response.ts
+src/models/GetEndUserClaims200ResponseData.ts
+src/models/GetSubscriberInboxPreferences200Response.ts
+src/models/GetSubscriberInboxPreferences200ResponseData.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataCategoriesInner.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataCategoriesInnerCategory.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataGlobal.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataGlobalChannelsInner.ts
+src/models/GetSubscriberNotification200Response.ts
+src/models/GetSubscriberUnreadCount200Response.ts
+src/models/GetWaaSDelivery200Response.ts
 src/models/GetWaaSEndpoint200Response.ts
+src/models/GetWaaSEndpointCircuit200Response.ts
+src/models/GetWaaSEndpointCircuit200ResponseData.ts
+src/models/GetWaaSEndpointMetrics200Response.ts
+src/models/GetWaaSEndpointMetrics200ResponseData.ts
+src/models/GetWaaSEndpointMetrics200ResponseDataHealth.ts
+src/models/GetWaaSEndpointMetrics200ResponseDataWindowsValue.ts
 src/models/GetWaaSUsage200Response.ts
 src/models/InAppNotification.ts
 src/models/InboundAttachmentUrlResponse.ts
@@ -175,13 +195,16 @@ src/models/InboundEmailResponse.ts
 src/models/InboxListMeta.ts
 src/models/InboxListResponse.ts
 src/models/InboxNotificationResponse.ts
+src/models/InviteEndUser200Response.ts
+src/models/InviteEndUser200ResponseData.ts
 src/models/InviteEndUserRequest.ts
+src/models/ListEndUsers200Response.ts
+src/models/ListEndUsers200ResponseMeta.ts
 src/models/ListWaaSApplications200Response.ts
 src/models/ListWaaSEndpointDeliveries200Response.ts
 src/models/ListWaaSEndpoints200Response.ts
 src/models/ListWaaSEventTypes200Response.ts
 src/models/ListWorkflowExecutions200Response.ts
-src/models/ListWorkflowExecutions200ResponseMeta.ts
 src/models/ListWorkflows200Response.ts
 src/models/ListWorkflows200ResponseMeta.ts
 src/models/LoginRequest.ts
@@ -192,6 +215,7 @@ src/models/MagicLinkVerifyResponseData.ts
 src/models/MarkAllInboxReadRequest.ts
 src/models/MarkAllReadData.ts
 src/models/MarkAllReadResponse.ts
+src/models/MarkAllSubscriberNotificationsRead200Response.ts
 src/models/MarkAllSubscriberNotificationsReadRequest.ts
 src/models/MarkInboxReadRequest.ts
 src/models/MfaBackupCodesResponse.ts
@@ -288,6 +312,8 @@ src/models/ResubscribeResponse.ts
 src/models/RevokeAllSessionsResponse.ts
 src/models/RevokeAllSessionsResponseData.ts
 src/models/RevokeSessionRequest.ts
+src/models/RotateWaaSEndpointSecret200Response.ts
+src/models/RotateWaaSEndpointSecret200ResponseData.ts
 src/models/SendBatchEmailRequest.ts
 src/models/SendBatchEmailResponse.ts
 src/models/SendBatchEmailResult.ts
@@ -320,6 +346,9 @@ src/models/SendSlackMessageResult.ts
 src/models/SendSmsData.ts
 src/models/SendSmsRequest.ts
 src/models/SendSmsResponse.ts
+src/models/SendTemplateTestEmail202Response.ts
+src/models/SendTemplateTestEmail202ResponseData.ts
+src/models/SendTemplateTestEmail202ResponseMeta.ts
 src/models/SendTemplateTestEmailRequest.ts
 src/models/SendTestSmsData.ts
 src/models/SendTestSmsRequest.ts
@@ -329,6 +358,8 @@ src/models/SessionListResponse.ts
 src/models/SessionListResponseData.ts
 src/models/SessionListResponseDataSessionInfo.ts
 src/models/SetDomainInboundRequest.ts
+src/models/SetEndUserClaims200Response.ts
+src/models/SetEndUserClaims200ResponseData.ts
 src/models/SetEndUserClaimsRequest.ts
 src/models/SetPreferencesRequest.ts
 src/models/SetPreferencesRequestPreferencesInner.ts
@@ -395,13 +426,18 @@ src/models/UpdateEndUserByApplicationRequest.ts
 src/models/UpdateEndUserRequest.ts
 src/models/UpdateOrganizationMemberRoleRequest.ts
 src/models/UpdateOrganizationRequest.ts
+src/models/UpdateSubscriberPreferences200Response.ts
+src/models/UpdateSubscriberPreferences200ResponseData.ts
+src/models/UpdateSubscriberPreferences200ResponseDataPreferencesInner.ts
 src/models/UpdateSubscriberPreferencesRequest.ts
 src/models/UpdateSubscriberPreferencesRequestPreferencesInner.ts
 src/models/UpdateSubscriberRequest.ts
 src/models/UpdateTemplateRequest.ts
 src/models/UpdateTopicRequest.ts
 src/models/UpdateWaaSApplicationRequest.ts
+src/models/UpdateWaaSEndpoint200Response.ts
 src/models/UpdateWaaSEndpointRequest.ts
+src/models/UpdateWaaSEventType200Response.ts
 src/models/UpdateWaaSEventTypeRequest.ts
 src/models/UpdateWebhookRequest.ts
 src/models/UpdateWorkflowRequest.ts

package/src/client.ts

@@ -27,6 +27,7 @@ import {
   AuthPhoneApi,
   AuthRegistrationApi,
   AuthSessionsApi,
+  AuthUserDirectoryApi,
   AuthUserProfileApi,
   AuthWebAuthnApi,
   DevicesApi,
@@ -111,6 +112,8 @@ export class Zyphr {
     readonly phone: AuthPhoneApi;
     readonly emailOtp: AuthEmailOTPApi;
     readonly profile: AuthUserProfileApi;
+    /** Server-side (secret-key) end-user directory: list/search/get/update/delete, invite, and the trusted claims store. */
+    readonly userDirectory: AuthUserDirectoryApi;
     readonly webauthn: AuthWebAuthnApi;
   };
 
@@ -166,6 +169,7 @@ export class Zyphr {
       phone: new AuthPhoneApi(config),
       emailOtp: new AuthEmailOTPApi(config),
       profile: new AuthUserProfileApi(config),
+      userDirectory: new AuthUserDirectoryApi(config),
       webauthn: new AuthWebAuthnApi(config),
     };
   }

package/src/src/apis/AuthUserDirectoryApi.ts

@@ -15,13 +15,28 @@
 
 import * as runtime from '../runtime';
 import type {
+  GetEndUserById200Response,
+  GetEndUserClaims200Response,
+  InviteEndUser200Response,
   InviteEndUserRequest,
+  ListEndUsers200Response,
+  SetEndUserClaims200Response,
   SetEndUserClaimsRequest,
   UpdateEndUserByApplicationRequest,
 } from '../models/index';
 import {
+    GetEndUserById200ResponseFromJSON,
+    GetEndUserById200ResponseToJSON,
+    GetEndUserClaims200ResponseFromJSON,
+    GetEndUserClaims200ResponseToJSON,
+    InviteEndUser200ResponseFromJSON,
+    InviteEndUser200ResponseToJSON,
     InviteEndUserRequestFromJSON,
     InviteEndUserRequestToJSON,
+    ListEndUsers200ResponseFromJSON,
+    ListEndUsers200ResponseToJSON,
+    SetEndUserClaims200ResponseFromJSON,
+    SetEndUserClaims200ResponseToJSON,
     SetEndUserClaimsRequestFromJSON,
     SetEndUserClaimsRequestToJSON,
     UpdateEndUserByApplicationRequestFromJSON,
@@ -96,13 +111,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    getEndUserByEmailRaw(requestParameters: AuthUserDirectoryApiGetEndUserByEmailRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    getEndUserByEmailRaw(requestParameters: AuthUserDirectoryApiGetEndUserByEmailRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>>;
 
     /**
      * Secret-key-scoped lookup of a single end user by email address within the authenticating application. Scoped to the application — never resolves a user from another application. Does not return the password hash. 
      * Look up an end user by email (server-side admin)
      */
-    getEndUserByEmail(email: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    getEndUserByEmail(email: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response>;
 
     /**
      * Secret-key-scoped fetch of a single end user by id within the authenticating application. Scoped to the application — a caller can never read a user belonging to another application. 
@@ -112,13 +127,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    getEndUserByIdRaw(requestParameters: AuthUserDirectoryApiGetEndUserByIdRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    getEndUserByIdRaw(requestParameters: AuthUserDirectoryApiGetEndUserByIdRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>>;
 
     /**
      * Secret-key-scoped fetch of a single end user by id within the authenticating application. Scoped to the application — a caller can never read a user belonging to another application. 
      * Get an end user by id (server-side admin)
      */
-    getEndUserById(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    getEndUserById(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response>;
 
     /**
      * Secret-key-scoped read of the authoritative custom_claims stored for an end user. These are the TRUSTED claims embedded into the user\'s JWTs on login/refresh — use them (not the client-writable `metadata` field) for authorization decisions. Returns an empty object when none are set. 
@@ -128,13 +143,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    getEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiGetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    getEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiGetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserClaims200Response>>;
 
     /**
      * Secret-key-scoped read of the authoritative custom_claims stored for an end user. These are the TRUSTED claims embedded into the user\'s JWTs on login/refresh — use them (not the client-writable `metadata` field) for authorization decisions. Returns an empty object when none are set. 
      * Get an end user\'s stored custom claims (server-side admin)
      */
-    getEndUserClaims(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    getEndUserClaims(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserClaims200Response>;
 
     /**
      * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
@@ -144,13 +159,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    inviteEndUserRaw(requestParameters: AuthUserDirectoryApiInviteEndUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    inviteEndUserRaw(requestParameters: AuthUserDirectoryApiInviteEndUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InviteEndUser200Response>>;
 
     /**
      * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
      * Pre-provision (invite) an end user (server-side admin)
      */
-    inviteEndUser(inviteEndUserRequest: InviteEndUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    inviteEndUser(inviteEndUserRequest: InviteEndUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InviteEndUser200Response>;
 
     /**
      * Secret-key-scoped directory listing of end users in the authenticating application. Supports substring search over email, name, and phone, an optional environment filter (test/live), and pagination. Scoped to the application — never returns users from another application. 
@@ -163,16 +178,16 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    listEndUsersRaw(requestParameters: AuthUserDirectoryApiListEndUsersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    listEndUsersRaw(requestParameters: AuthUserDirectoryApiListEndUsersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ListEndUsers200Response>>;
 
     /**
      * Secret-key-scoped directory listing of end users in the authenticating application. Supports substring search over email, name, and phone, an optional environment filter (test/live), and pagination. Scoped to the application — never returns users from another application. 
      * List / search end users (server-side admin)
      */
-    listEndUsers(page?: number, perPage?: number, search?: string, environment?: ListEndUsersEnvironmentEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    listEndUsers(page?: number, perPage?: number, search?: string, environment?: ListEndUsersEnvironmentEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ListEndUsers200Response>;
 
     /**
-     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  To make a change take effect immediately on already-issued tokens (e.g. revoking admin), call POST /auth/sessions/revoke-all for the user after updating claims — that bumps the revocation epoch so outstanding access tokens stop verifying. 
+     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  Each write bumps a monotonic `claims_version` (returned in the response). The change applies seamlessly on the user\'s next login or token refresh — a token carrying an older `claims_version` is rejected on verification and the client silently re-mints with the new claims, without a forced logout. For a hard cut-off (log the user out of all sessions immediately), call POST /auth/sessions/revoke-all after updating claims. 
      * @summary Set an end user\'s stored custom claims (server-side admin)
      * @param {string} userId 
      * @param {SetEndUserClaimsRequest} setEndUserClaimsRequest 
@@ -180,13 +195,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    setEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiSetEndUserClaimsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    setEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiSetEndUserClaimsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SetEndUserClaims200Response>>;
 
     /**
-     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  To make a change take effect immediately on already-issued tokens (e.g. revoking admin), call POST /auth/sessions/revoke-all for the user after updating claims — that bumps the revocation epoch so outstanding access tokens stop verifying. 
+     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  Each write bumps a monotonic `claims_version` (returned in the response). The change applies seamlessly on the user\'s next login or token refresh — a token carrying an older `claims_version` is rejected on verification and the client silently re-mints with the new claims, without a forced logout. For a hard cut-off (log the user out of all sessions immediately), call POST /auth/sessions/revoke-all after updating claims. 
      * Set an end user\'s stored custom claims (server-side admin)
      */
-    setEndUserClaims(userId: string, setEndUserClaimsRequest: SetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    setEndUserClaims(userId: string, setEndUserClaimsRequest: SetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SetEndUserClaims200Response>;
 
     /**
      * Secret-key-scoped update of an arbitrary end user in the authenticating application. Updatable fields: email, name, avatar_url, metadata, status. Scoped to the application — a caller can never modify a user belonging to another application. 
@@ -197,13 +212,13 @@ export interface AuthUserDirectoryApiInterface {
      * @throws {RequiredError}
      * @memberof AuthUserDirectoryApiInterface
      */
-    updateEndUserByApplicationRaw(requestParameters: AuthUserDirectoryApiUpdateEndUserByApplicationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    updateEndUserByApplicationRaw(requestParameters: AuthUserDirectoryApiUpdateEndUserByApplicationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>>;
 
     /**
      * Secret-key-scoped update of an arbitrary end user in the authenticating application. Updatable fields: email, name, avatar_url, metadata, status. Scoped to the application — a caller can never modify a user belonging to another application. 
      * Update an end user (server-side admin)
      */
-    updateEndUserByApplication(userId: string, updateEndUserByApplicationRequest: UpdateEndUserByApplicationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    updateEndUserByApplication(userId: string, updateEndUserByApplicationRequest: UpdateEndUserByApplicationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response>;
 
 }
 
@@ -258,7 +273,7 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
      * Secret-key-scoped lookup of a single end user by email address within the authenticating application. Scoped to the application — never resolves a user from another application. Does not return the password hash. 
      * Look up an end user by email (server-side admin)
      */
-    async getEndUserByEmailRaw(requestParameters: AuthUserDirectoryApiGetEndUserByEmailRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async getEndUserByEmailRaw(requestParameters: AuthUserDirectoryApiGetEndUserByEmailRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>> {
         if (requestParameters['email'] == null) {
             throw new runtime.RequiredError(
                 'email',
@@ -289,22 +304,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             query: queryParameters,
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => GetEndUserById200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped lookup of a single end user by email address within the authenticating application. Scoped to the application — never resolves a user from another application. Does not return the password hash. 
      * Look up an end user by email (server-side admin)
      */
-    async getEndUserByEmail(email: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.getEndUserByEmailRaw({ email: email }, initOverrides);
+    async getEndUserByEmail(email: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response> {
+        const response = await this.getEndUserByEmailRaw({ email: email }, initOverrides);
+        return await response.value();
     }
 
     /**
      * Secret-key-scoped fetch of a single end user by id within the authenticating application. Scoped to the application — a caller can never read a user belonging to another application. 
      * Get an end user by id (server-side admin)
      */
-    async getEndUserByIdRaw(requestParameters: AuthUserDirectoryApiGetEndUserByIdRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async getEndUserByIdRaw(requestParameters: AuthUserDirectoryApiGetEndUserByIdRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>> {
         if (requestParameters['userId'] == null) {
             throw new runtime.RequiredError(
                 'userId',
@@ -331,22 +347,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             query: queryParameters,
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => GetEndUserById200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped fetch of a single end user by id within the authenticating application. Scoped to the application — a caller can never read a user belonging to another application. 
      * Get an end user by id (server-side admin)
      */
-    async getEndUserById(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.getEndUserByIdRaw({ userId: userId }, initOverrides);
+    async getEndUserById(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response> {
+        const response = await this.getEndUserByIdRaw({ userId: userId }, initOverrides);
+        return await response.value();
     }
 
     /**
      * Secret-key-scoped read of the authoritative custom_claims stored for an end user. These are the TRUSTED claims embedded into the user\'s JWTs on login/refresh — use them (not the client-writable `metadata` field) for authorization decisions. Returns an empty object when none are set. 
      * Get an end user\'s stored custom claims (server-side admin)
      */
-    async getEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiGetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async getEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiGetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserClaims200Response>> {
         if (requestParameters['userId'] == null) {
             throw new runtime.RequiredError(
                 'userId',
@@ -373,22 +390,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             query: queryParameters,
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => GetEndUserClaims200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped read of the authoritative custom_claims stored for an end user. These are the TRUSTED claims embedded into the user\'s JWTs on login/refresh — use them (not the client-writable `metadata` field) for authorization decisions. Returns an empty object when none are set. 
      * Get an end user\'s stored custom claims (server-side admin)
      */
-    async getEndUserClaims(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.getEndUserClaimsRaw({ userId: userId }, initOverrides);
+    async getEndUserClaims(userId: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserClaims200Response> {
+        const response = await this.getEndUserClaimsRaw({ userId: userId }, initOverrides);
+        return await response.value();
     }
 
     /**
      * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
      * Pre-provision (invite) an end user (server-side admin)
      */
-    async inviteEndUserRaw(requestParameters: AuthUserDirectoryApiInviteEndUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async inviteEndUserRaw(requestParameters: AuthUserDirectoryApiInviteEndUserOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InviteEndUser200Response>> {
         if (requestParameters['inviteEndUserRequest'] == null) {
             throw new runtime.RequiredError(
                 'inviteEndUserRequest',
@@ -418,22 +436,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             body: InviteEndUserRequestToJSON(requestParameters['inviteEndUserRequest']),
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => InviteEndUser200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
      * Pre-provision (invite) an end user (server-side admin)
      */
-    async inviteEndUser(inviteEndUserRequest: InviteEndUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.inviteEndUserRaw({ inviteEndUserRequest: inviteEndUserRequest }, initOverrides);
+    async inviteEndUser(inviteEndUserRequest: InviteEndUserRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InviteEndUser200Response> {
+        const response = await this.inviteEndUserRaw({ inviteEndUserRequest: inviteEndUserRequest }, initOverrides);
+        return await response.value();
     }
 
     /**
      * Secret-key-scoped directory listing of end users in the authenticating application. Supports substring search over email, name, and phone, an optional environment filter (test/live), and pagination. Scoped to the application — never returns users from another application. 
      * List / search end users (server-side admin)
      */
-    async listEndUsersRaw(requestParameters: AuthUserDirectoryApiListEndUsersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async listEndUsersRaw(requestParameters: AuthUserDirectoryApiListEndUsersRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ListEndUsers200Response>> {
         const queryParameters: any = {};
 
         if (requestParameters['page'] != null) {
@@ -469,22 +488,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             query: queryParameters,
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => ListEndUsers200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped directory listing of end users in the authenticating application. Supports substring search over email, name, and phone, an optional environment filter (test/live), and pagination. Scoped to the application — never returns users from another application. 
      * List / search end users (server-side admin)
      */
-    async listEndUsers(page?: number, perPage?: number, search?: string, environment?: ListEndUsersEnvironmentEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.listEndUsersRaw({ page: page, perPage: perPage, search: search, environment: environment }, initOverrides);
+    async listEndUsers(page?: number, perPage?: number, search?: string, environment?: ListEndUsersEnvironmentEnum, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ListEndUsers200Response> {
+        const response = await this.listEndUsersRaw({ page: page, perPage: perPage, search: search, environment: environment }, initOverrides);
+        return await response.value();
     }
 
     /**
-     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  To make a change take effect immediately on already-issued tokens (e.g. revoking admin), call POST /auth/sessions/revoke-all for the user after updating claims — that bumps the revocation epoch so outstanding access tokens stop verifying. 
+     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  Each write bumps a monotonic `claims_version` (returned in the response). The change applies seamlessly on the user\'s next login or token refresh — a token carrying an older `claims_version` is rejected on verification and the client silently re-mints with the new claims, without a forced logout. For a hard cut-off (log the user out of all sessions immediately), call POST /auth/sessions/revoke-all after updating claims. 
      * Set an end user\'s stored custom claims (server-side admin)
      */
-    async setEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiSetEndUserClaimsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async setEndUserClaimsRaw(requestParameters: AuthUserDirectoryApiSetEndUserClaimsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<SetEndUserClaims200Response>> {
         if (requestParameters['userId'] == null) {
             throw new runtime.RequiredError(
                 'userId',
@@ -521,22 +541,23 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             body: SetEndUserClaimsRequestToJSON(requestParameters['setEndUserClaimsRequest']),
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => SetEndUserClaims200ResponseFromJSON(jsonValue));
     }
 
     /**
-     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  To make a change take effect immediately on already-issued tokens (e.g. revoking admin), call POST /auth/sessions/revoke-all for the user after updating claims — that bumps the revocation epoch so outstanding access tokens stop verifying. 
+     * Secret-key-scoped upsert of the authoritative custom_claims for an end user. Set server-side only — clients cannot write these, which is what makes them safe for authorization (e.g. an account-type/admin flag). Claims are embedded into the user\'s JWTs on the next login/refresh. Max 4KB; reserved JWT/Zyphr claim names are rejected.  Each write bumps a monotonic `claims_version` (returned in the response). The change applies seamlessly on the user\'s next login or token refresh — a token carrying an older `claims_version` is rejected on verification and the client silently re-mints with the new claims, without a forced logout. For a hard cut-off (log the user out of all sessions immediately), call POST /auth/sessions/revoke-all after updating claims. 
      * Set an end user\'s stored custom claims (server-side admin)
      */
-    async setEndUserClaims(userId: string, setEndUserClaimsRequest: SetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.setEndUserClaimsRaw({ userId: userId, setEndUserClaimsRequest: setEndUserClaimsRequest }, initOverrides);
+    async setEndUserClaims(userId: string, setEndUserClaimsRequest: SetEndUserClaimsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SetEndUserClaims200Response> {
+        const response = await this.setEndUserClaimsRaw({ userId: userId, setEndUserClaimsRequest: setEndUserClaimsRequest }, initOverrides);
+        return await response.value();
     }
 
     /**
      * Secret-key-scoped update of an arbitrary end user in the authenticating application. Updatable fields: email, name, avatar_url, metadata, status. Scoped to the application — a caller can never modify a user belonging to another application. 
      * Update an end user (server-side admin)
      */
-    async updateEndUserByApplicationRaw(requestParameters: AuthUserDirectoryApiUpdateEndUserByApplicationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async updateEndUserByApplicationRaw(requestParameters: AuthUserDirectoryApiUpdateEndUserByApplicationOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetEndUserById200Response>> {
         if (requestParameters['userId'] == null) {
             throw new runtime.RequiredError(
                 'userId',
@@ -573,15 +594,16 @@ export class AuthUserDirectoryApi extends runtime.BaseAPI implements AuthUserDir
             body: UpdateEndUserByApplicationRequestToJSON(requestParameters['updateEndUserByApplicationRequest']),
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => GetEndUserById200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Secret-key-scoped update of an arbitrary end user in the authenticating application. Updatable fields: email, name, avatar_url, metadata, status. Scoped to the application — a caller can never modify a user belonging to another application. 
      * Update an end user (server-side admin)
      */
-    async updateEndUserByApplication(userId: string, updateEndUserByApplicationRequest: UpdateEndUserByApplicationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.updateEndUserByApplicationRaw({ userId: userId, updateEndUserByApplicationRequest: updateEndUserByApplicationRequest }, initOverrides);
+    async updateEndUserByApplication(userId: string, updateEndUserByApplicationRequest: UpdateEndUserByApplicationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetEndUserById200Response> {
+        const response = await this.updateEndUserByApplicationRaw({ userId: userId, updateEndUserByApplicationRequest: updateEndUserByApplicationRequest }, initOverrides);
+        return await response.value();
     }
 
 }

package/src/src/apis/DomainsApi.ts

@@ -166,13 +166,13 @@ export interface DomainsApiInterface {
      * @throws {RequiredError}
      * @memberof DomainsApiInterface
      */
-    setDomainInboundRaw(requestParameters: DomainsApiSetDomainInboundOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
+    setDomainInboundRaw(requestParameters: DomainsApiSetDomainInboundOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetDomain200Response>>;
 
     /**
      * Toggle email receiving for a domain. When enabled, the domain\'s DNS records gain an MX record on the `inbound.` subdomain that the tenant must publish. Requires a plan with inbound email (Starter+). 
      * Enable or disable inbound email for a domain
      */
-    setDomainInbound(id: string, setDomainInboundRequest: SetDomainInboundRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
+    setDomainInbound(id: string, setDomainInboundRequest: SetDomainInboundRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetDomain200Response>;
 
     /**
      * Queue an asynchronous DNS verification check. Returns immediately with a `job_id`. Poll `GET /v1/domains/{id}/verification-status` (or the higher-level `GET /v1/domains/{id}`) for the result, or subscribe to the `domain.verified` webhook event when sc-5444 ships.  Returns 409 if a verification is already in progress for this domain (within the last 2 minutes). 
@@ -392,7 +392,7 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
      * Toggle email receiving for a domain. When enabled, the domain\'s DNS records gain an MX record on the `inbound.` subdomain that the tenant must publish. Requires a plan with inbound email (Starter+). 
      * Enable or disable inbound email for a domain
      */
-    async setDomainInboundRaw(requestParameters: DomainsApiSetDomainInboundOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
+    async setDomainInboundRaw(requestParameters: DomainsApiSetDomainInboundOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GetDomain200Response>> {
         if (requestParameters['id'] == null) {
             throw new runtime.RequiredError(
                 'id',
@@ -425,15 +425,16 @@ export class DomainsApi extends runtime.BaseAPI implements DomainsApiInterface {
             body: SetDomainInboundRequestToJSON(requestParameters['setDomainInboundRequest']),
         }, initOverrides);
 
-        return new runtime.VoidApiResponse(response);
+        return new runtime.JSONApiResponse(response, (jsonValue) => GetDomain200ResponseFromJSON(jsonValue));
     }
 
     /**
      * Toggle email receiving for a domain. When enabled, the domain\'s DNS records gain an MX record on the `inbound.` subdomain that the tenant must publish. Requires a plan with inbound email (Starter+). 
      * Enable or disable inbound email for a domain
      */
-    async setDomainInbound(id: string, setDomainInboundRequest: SetDomainInboundRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
-        await this.setDomainInboundRaw({ id: id, setDomainInboundRequest: setDomainInboundRequest }, initOverrides);
+    async setDomainInbound(id: string, setDomainInboundRequest: SetDomainInboundRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GetDomain200Response> {
+        const response = await this.setDomainInboundRaw({ id: id, setDomainInboundRequest: setDomainInboundRequest }, initOverrides);
+        return await response.value();
     }
 
     /**