@zyphr-dev/node-sdk 0.1.42 → 0.1.44

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.42",
+  "version": "0.1.44",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/.openapi-generator/FILES

@@ -2,6 +2,7 @@
 .npmignore
 README.md
 package.json
+src/apis/AuthApplicationApi.ts
 src/apis/AuthEmailOTPApi.ts
 src/apis/AuthEmailTemplatesApi.ts
 src/apis/AuthEmailVerificationApi.ts
@@ -50,6 +51,8 @@ src/models/AddWorkflowStepRequest.ts
 src/models/ApiError.ts
 src/models/ApiErrorError.ts
 src/models/ApiErrorMeta.ts
+src/models/ApplicationSelf.ts
+src/models/ApplicationSelfResponse.ts
 src/models/AuthEmailTemplate.ts
 src/models/AuthEmailTemplateDefault.ts
 src/models/AuthEmailTemplateDefaultResponse.ts
@@ -70,6 +73,7 @@ src/models/AuthEmailType.ts
 src/models/AuthLoginResponse.ts
 src/models/AuthLoginResult.ts
 src/models/AuthLoginResultMfaChallenge.ts
+src/models/AuthMethods.ts
 src/models/AuthResult.ts
 src/models/AuthResultResponse.ts
 src/models/AuthSession.ts
@@ -85,6 +89,8 @@ src/models/BulkUpsertAuthEmailTemplatesResponse.ts
 src/models/Category.ts
 src/models/CategoryListResponse.ts
 src/models/CategoryResponse.ts
+src/models/CloseWaaSEndpointCircuit200Response.ts
+src/models/CloseWaaSEndpointCircuit200ResponseData.ts
 src/models/ConfirmEmailVerificationRequest.ts
 src/models/ConfirmEmailVerificationResponse.ts
 src/models/ConfirmEmailVerificationResponseData.ts
@@ -161,7 +167,26 @@ src/models/GenerateSubscriberTokenRequest.ts
 src/models/GenerateWaaSPortalToken201Response.ts
 src/models/GetDomain200Response.ts
 src/models/GetDomain200ResponseMeta.ts
+src/models/GetEndUserAuthMethods200Response.ts
+src/models/GetEndUserById200Response.ts
+src/models/GetEndUserClaims200Response.ts
+src/models/GetEndUserClaims200ResponseData.ts
+src/models/GetSubscriberInboxPreferences200Response.ts
+src/models/GetSubscriberInboxPreferences200ResponseData.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataCategoriesInner.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataCategoriesInnerCategory.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataGlobal.ts
+src/models/GetSubscriberInboxPreferences200ResponseDataGlobalChannelsInner.ts
+src/models/GetSubscriberNotification200Response.ts
+src/models/GetSubscriberUnreadCount200Response.ts
+src/models/GetWaaSDelivery200Response.ts
 src/models/GetWaaSEndpoint200Response.ts
+src/models/GetWaaSEndpointCircuit200Response.ts
+src/models/GetWaaSEndpointCircuit200ResponseData.ts
+src/models/GetWaaSEndpointMetrics200Response.ts
+src/models/GetWaaSEndpointMetrics200ResponseData.ts
+src/models/GetWaaSEndpointMetrics200ResponseDataHealth.ts
+src/models/GetWaaSEndpointMetrics200ResponseDataWindowsValue.ts
 src/models/GetWaaSUsage200Response.ts
 src/models/InAppNotification.ts
 src/models/InboundAttachmentUrlResponse.ts
@@ -175,13 +200,16 @@ src/models/InboundEmailResponse.ts
 src/models/InboxListMeta.ts
 src/models/InboxListResponse.ts
 src/models/InboxNotificationResponse.ts
+src/models/InviteEndUser200Response.ts
+src/models/InviteEndUser200ResponseData.ts
 src/models/InviteEndUserRequest.ts
+src/models/ListEndUsers200Response.ts
+src/models/ListEndUsers200ResponseMeta.ts
 src/models/ListWaaSApplications200Response.ts
 src/models/ListWaaSEndpointDeliveries200Response.ts
 src/models/ListWaaSEndpoints200Response.ts
 src/models/ListWaaSEventTypes200Response.ts
 src/models/ListWorkflowExecutions200Response.ts
-src/models/ListWorkflowExecutions200ResponseMeta.ts
 src/models/ListWorkflows200Response.ts
 src/models/ListWorkflows200ResponseMeta.ts
 src/models/LoginRequest.ts
@@ -192,6 +220,7 @@ src/models/MagicLinkVerifyResponseData.ts
 src/models/MarkAllInboxReadRequest.ts
 src/models/MarkAllReadData.ts
 src/models/MarkAllReadResponse.ts
+src/models/MarkAllSubscriberNotificationsRead200Response.ts
 src/models/MarkAllSubscriberNotificationsReadRequest.ts
 src/models/MarkInboxReadRequest.ts
 src/models/MfaBackupCodesResponse.ts
@@ -288,6 +317,8 @@ src/models/ResubscribeResponse.ts
 src/models/RevokeAllSessionsResponse.ts
 src/models/RevokeAllSessionsResponseData.ts
 src/models/RevokeSessionRequest.ts
+src/models/RotateWaaSEndpointSecret200Response.ts
+src/models/RotateWaaSEndpointSecret200ResponseData.ts
 src/models/SendBatchEmailRequest.ts
 src/models/SendBatchEmailResponse.ts
 src/models/SendBatchEmailResult.ts
@@ -320,6 +351,9 @@ src/models/SendSlackMessageResult.ts
 src/models/SendSmsData.ts
 src/models/SendSmsRequest.ts
 src/models/SendSmsResponse.ts
+src/models/SendTemplateTestEmail202Response.ts
+src/models/SendTemplateTestEmail202ResponseData.ts
+src/models/SendTemplateTestEmail202ResponseMeta.ts
 src/models/SendTemplateTestEmailRequest.ts
 src/models/SendTestSmsData.ts
 src/models/SendTestSmsRequest.ts
@@ -397,13 +431,18 @@ src/models/UpdateEndUserByApplicationRequest.ts
 src/models/UpdateEndUserRequest.ts
 src/models/UpdateOrganizationMemberRoleRequest.ts
 src/models/UpdateOrganizationRequest.ts
+src/models/UpdateSubscriberPreferences200Response.ts
+src/models/UpdateSubscriberPreferences200ResponseData.ts
+src/models/UpdateSubscriberPreferences200ResponseDataPreferencesInner.ts
 src/models/UpdateSubscriberPreferencesRequest.ts
 src/models/UpdateSubscriberPreferencesRequestPreferencesInner.ts
 src/models/UpdateSubscriberRequest.ts
 src/models/UpdateTemplateRequest.ts
 src/models/UpdateTopicRequest.ts
 src/models/UpdateWaaSApplicationRequest.ts
+src/models/UpdateWaaSEndpoint200Response.ts
 src/models/UpdateWaaSEndpointRequest.ts
+src/models/UpdateWaaSEventType200Response.ts
 src/models/UpdateWaaSEventTypeRequest.ts
 src/models/UpdateWebhookRequest.ts
 src/models/UpdateWorkflowRequest.ts

package/src/client.ts

@@ -16,6 +16,7 @@
 import { Configuration } from './src/runtime.js';
 import type { Middleware, ResponseContext } from './src/runtime.js';
 import {
+  AuthApplicationApi,
   AuthEmailOTPApi,
   AuthEmailVerificationApi,
   AuthLoginApi,
@@ -52,13 +53,24 @@ import {
 import { parseErrorResponse } from './errors.js';
 
 export interface ZyphrOptions {
-  /** Your Zyphr API key (zy_live_* or zy_test_*) */
+  /**
+   * Your Project-scoped Zyphr API key (`zy_live_*` / `zy_test_*`), sent as
+   * `Authorization: Bearer`. Used for notification APIs (emails, push, webhooks).
+   */
   apiKey: string;
   /** Override the base API URL (defaults to https://api.zyphr.dev/v1) */
   baseUrl?: string;
-  /** Application public key (za_pub_*) for Auth-as-a-Service endpoints */
+  /**
+   * Application-scoped public key (`za_live_pub_*` / `za_test_pub_*`; legacy
+   * `za_pub_*` still accepted) for Auth-as-a-Service endpoints, sent as
+   * `X-Application-Key`. Distinct from the Project-scoped `apiKey` above.
+   */
   applicationKey?: string;
-  /** Application secret key (za_sec_*) for Auth-as-a-Service endpoints */
+  /**
+   * Application-scoped secret key (`za_live_sec_*` / `za_test_sec_*`; legacy
+   * `za_sec_*` still accepted) for server-side Auth-as-a-Service endpoints, sent
+   * as `X-Application-Secret`. Must stay server-side — never ship in a client bundle.
+   */
   applicationSecret?: string;
 }
 
@@ -115,6 +127,8 @@ export class Zyphr {
     /** Server-side (secret-key) end-user directory: list/search/get/update/delete, invite, and the trusted claims store. */
     readonly userDirectory: AuthUserDirectoryApi;
     readonly webauthn: AuthWebAuthnApi;
+    /** Read the authenticating application's own non-sensitive metadata (id, name, environment, signing algorithm) via GET /auth/application. */
+    readonly application: AuthApplicationApi;
   };
 
   private readonly options: ZyphrOptions;
@@ -171,6 +185,7 @@ export class Zyphr {
       profile: new AuthUserProfileApi(config),
       userDirectory: new AuthUserDirectoryApi(config),
       webauthn: new AuthWebAuthnApi(config),
+      application: new AuthApplicationApi(config),
     };
   }
 

package/src/clientAuth.ts

@@ -4,8 +4,14 @@
  * `ZyphrClient` is a browser / React Native-safe entry point for Auth-as-a-Service.
  * Unlike the server `Zyphr` client (which requires a secret API key and, for auth,
  * an application SECRET key), `ZyphrClient` is constructed with ONLY the publishable
- * application key (`za_pub_*`) — the key that is safe to ship in a client bundle —
- * plus, once the user is authenticated, their end-user access token.
+ * application key (`za_live_pub_*` in live mode, `za_test_pub_*` in test mode) — the
+ * key that is safe to ship in a client bundle — plus, once the user is authenticated,
+ * their end-user access token.
+ *
+ * These Application-scoped credentials (`X-Application-Key` publishable key, and the
+ * server-only `X-Application-Secret`) are distinct from the Project-scoped notification
+ * keys (`zy_live_*` / `zy_test_*`, sent as `Authorization: Bearer`) used by the server
+ * `Zyphr` client for emails/push/webhooks.
  *
  * It deliberately exposes ONLY the end-user-scoped auth surface (login, registration,
  * sessions, magic links, OAuth, phone, email-OTP, profile, MFA, WebAuthn, password
@@ -17,7 +23,7 @@
  * ```ts
  * import { ZyphrClient } from '@zyphr-dev/node-sdk';
  *
- * const zyphr = new ZyphrClient({ applicationKey: 'za_pub_xxx' });
+ * const zyphr = new ZyphrClient({ applicationKey: 'za_live_pub_xxx' });
  *
  * const login = await zyphr.auth.login.loginEndUser({ ... });
  * zyphr.setAccessToken(login.data.tokens.access_token);
@@ -47,7 +53,10 @@ import {
 import { parseErrorResponse } from './errors.js';
 
 export interface ZyphrClientOptions {
-  /** Publishable application key (za_pub_*) — safe to embed in a client bundle. */
+  /**
+   * Publishable application key (`za_live_pub_*` / `za_test_pub_*`) — safe to
+   * embed in a client bundle. Legacy `za_pub_*` keys are also accepted.
+   */
   applicationKey: string;
   /** Override the base API URL (defaults to https://api.zyphr.dev/v1). */
   baseUrl?: string;
@@ -75,8 +84,31 @@ export class ZyphrClientCredentialError extends Error {
   }
 }
 
-/** Prefixes that must NEVER reach a client bundle. */
-const SECRET_KEY_PREFIXES = ['za_sec_', 'zy_live_', 'zy_test_'];
+// Key prefixes are mirrored from the platform source of truth,
+// packages/shared/src/constants/api.ts (APPLICATION_KEY_PREFIXES,
+// SECRET_KEY_PREFIXES). They are inlined here because this is a standalone
+// published package that cannot import @zyphr/shared at runtime — keep the two
+// in sync if the prefixes ever change.
+
+/**
+ * Publishable application-key prefixes accepted by the client-safe SDK.
+ * `za_live_pub_` / `za_test_pub_` are the current live/test prefixes; `za_pub_`
+ * is the deprecated legacy prefix, still accepted for backward compatibility.
+ */
+const PUBLISHABLE_KEY_PREFIXES = ['za_live_pub_', 'za_test_pub_', 'za_pub_'];
+
+/**
+ * Prefixes that must NEVER reach a client bundle: application SECRET keys
+ * (`za_live_sec_` / `za_test_sec_`, and legacy `za_sec_`) and Project-scoped
+ * notification API keys (`zy_live_*` / `zy_test_*`).
+ */
+const SECRET_KEY_PREFIXES = [
+  'za_live_sec_',
+  'za_test_sec_',
+  'za_sec_',
+  'zy_live_',
+  'zy_test_',
+];
 
 export class ZyphrClient {
   readonly auth: {
@@ -103,19 +135,20 @@ export class ZyphrClient {
 
   constructor(options: ZyphrClientOptions) {
     if (!options.applicationKey) {
-      throw new ZyphrClientCredentialError('applicationKey (za_pub_*) is required');
+      throw new ZyphrClientCredentialError('applicationKey (za_live_pub_* / za_test_pub_*) is required');
     }
     // Guardrail: reject secret-shaped credentials so a secret can't be shipped
-    // in a client bundle by mistake.
+    // in a client bundle by mistake. Checked before the publishable allow-list so
+    // a secret key produces the clearer "never a secret key" message.
     if (SECRET_KEY_PREFIXES.some((p) => options.applicationKey.startsWith(p))) {
       throw new ZyphrClientCredentialError(
-        'ZyphrClient must be constructed with a publishable application key (za_pub_*), ' +
-          'never a secret key. Secret keys must stay server-side.'
+        'ZyphrClient must be constructed with a publishable application key ' +
+          '(za_live_pub_* / za_test_pub_*), never a secret key. Secret keys must stay server-side.'
       );
     }
-    if (!options.applicationKey.startsWith('za_pub_')) {
+    if (!PUBLISHABLE_KEY_PREFIXES.some((p) => options.applicationKey.startsWith(p))) {
       throw new ZyphrClientCredentialError(
-        'applicationKey must be a publishable application key (za_pub_*).'
+        'applicationKey must be a publishable application key (za_live_pub_* / za_test_pub_*).'
       );
     }
 

package/src/src/apis/AuthApplicationApi.ts

@@ -0,0 +1,93 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+import * as runtime from '../runtime';
+import type {
+  ApiError,
+  ApplicationSelfResponse,
+} from '../models/index';
+import {
+    ApiErrorFromJSON,
+    ApiErrorToJSON,
+    ApplicationSelfResponseFromJSON,
+    ApplicationSelfResponseToJSON,
+} from '../models/index';
+
+/**
+ * AuthApplicationApi - interface
+ * 
+ * @export
+ * @interface AuthApplicationApiInterface
+ */
+export interface AuthApplicationApiInterface {
+    /**
+     * Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment\'s mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+     * @summary Get the authenticating application
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthApplicationApiInterface
+     */
+    getSelfApplicationRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSelfResponse>>;
+
+    /**
+     * Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment\'s mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+     * Get the authenticating application
+     */
+    getSelfApplication(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSelfResponse>;
+
+}
+
+/**
+ * 
+ */
+export class AuthApplicationApi extends runtime.BaseAPI implements AuthApplicationApiInterface {
+
+    /**
+     * Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment\'s mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+     * Get the authenticating application
+     */
+    async getSelfApplicationRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSelfResponse>> {
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Secret"] = await this.configuration.apiKey("X-Application-Secret"); // ApplicationSecret authentication
+        }
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key"); // ApplicationPublicKey authentication
+        }
+
+        const response = await this.request({
+            path: `/auth/application`,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApplicationSelfResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Return non-sensitive metadata about the application whose credentials authenticated this request. Lets an integrator read their own application_id (the sole tenant discriminator embedded in every end-user token) directly from the API, rather than only from the dashboard UI or by decoding a token. Returns only id, name, the calling environment\'s mode, and the JWT signing algorithm — never secrets, signing keys, or account-internal fields. 
+     * Get the authenticating application
+     */
+    async getSelfApplication(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSelfResponse> {
+        const response = await this.getSelfApplicationRaw(initOverrides);
+        return await response.value();
+    }
+
+}

package/src/src/apis/AuthEmailTemplatesApi.ts

@@ -240,7 +240,7 @@ export interface AuthEmailTemplatesApiInterface {
     restoreAuthEmailTemplateVersion(type: AuthEmailType, version: number, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthEmailTemplateResponse>;
 
     /**
-     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
      * @summary Send a test render of a template
      * @param {AuthEmailType} type 
      * @param {AuthEmailTemplateTestRequest} authEmailTemplateTestRequest 
@@ -251,7 +251,7 @@ export interface AuthEmailTemplatesApiInterface {
     sendAuthEmailTemplateTestRaw(requestParameters: AuthEmailTemplatesApiSendAuthEmailTemplateTestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthEmailTemplateTestResponse>>;
 
     /**
-     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
      * Send a test render of a template
      */
     sendAuthEmailTemplateTest(type: AuthEmailType, authEmailTemplateTestRequest: AuthEmailTemplateTestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthEmailTemplateTestResponse>;
@@ -629,7 +629,7 @@ export class AuthEmailTemplatesApi extends runtime.BaseAPI implements AuthEmailT
     }
 
     /**
-     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
      * Send a test render of a template
      */
     async sendAuthEmailTemplateTestRaw(requestParameters: AuthEmailTemplatesApiSendAuthEmailTemplateTestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthEmailTemplateTestResponse>> {
@@ -673,7 +673,7 @@ export class AuthEmailTemplatesApi extends runtime.BaseAPI implements AuthEmailT
     }
 
     /**
-     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited. 
+     * Renders the template (override or default) using sample/provided variables and sends to the recipient. The recipient must be in the application `test_recipients` allowlist. Rate-limited.  When non-empty, `test_recipients` gates ALL auth emails this application sends (magic link, password reset, email verification, and email OTP) — not just these test renders. Only listed recipients receive auth email; any other recipient is silently blocked. Use it to make a non-production application safe from mass sends. An empty allowlist (the default) imposes no restriction and every recipient receives auth email normally. 
      * Send a test render of a template
      */
     async sendAuthEmailTemplateTest(type: AuthEmailType, authEmailTemplateTestRequest: AuthEmailTemplateTestRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthEmailTemplateTestResponse> {