@zyphr-dev/node-sdk 0.1.44 → 0.1.45

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/.openapi-generator/FILES

@@ -89,6 +89,7 @@ src/models/BulkUpsertAuthEmailTemplatesResponse.ts
 src/models/Category.ts
 src/models/CategoryListResponse.ts
 src/models/CategoryResponse.ts
+src/models/ChangePasswordRequest.ts
 src/models/CloseWaaSEndpointCircuit200Response.ts
 src/models/CloseWaaSEndpointCircuit200ResponseData.ts
 src/models/ConfirmEmailVerificationRequest.ts
@@ -368,6 +369,7 @@ src/models/SetEndUserClaims200ResponseData.ts
 src/models/SetEndUserClaimsRequest.ts
 src/models/SetPreferencesRequest.ts
 src/models/SetPreferencesRequestPreferencesInner.ts
+src/models/SetSelfApplicationTestRecipientsRequest.ts
 src/models/SignInAnonymouslyRequest.ts
 src/models/SignInWithGameCenterRequest.ts
 src/models/SignInWithGooglePlayGamesRequest.ts
@@ -505,6 +507,7 @@ src/models/WebhookDeliveryListResponse.ts
 src/models/WebhookDeliveryResponse.ts
 src/models/WebhookDeliveryRetryResponse.ts
 src/models/WebhookDeliveryRetryResponseData.ts
+src/models/WebhookEventType.ts
 src/models/WebhookEventTypesResponse.ts
 src/models/WebhookEventTypesResponseData.ts
 src/models/WebhookIpsResponse.ts

package/src/src/apis/AuthApplicationApi.ts

@@ -17,14 +17,21 @@ import * as runtime from '../runtime';
 import type {
   ApiError,
   ApplicationSelfResponse,
+  SetSelfApplicationTestRecipientsRequest,
 } from '../models/index';
 import {
     ApiErrorFromJSON,
     ApiErrorToJSON,
     ApplicationSelfResponseFromJSON,
     ApplicationSelfResponseToJSON,
+    SetSelfApplicationTestRecipientsRequestFromJSON,
+    SetSelfApplicationTestRecipientsRequestToJSON,
 } from '../models/index';
 
+export interface AuthApplicationApiSetSelfApplicationTestRecipientsOperationRequest {
+    setSelfApplicationTestRecipientsRequest: SetSelfApplicationTestRecipientsRequest;
+}
+
 /**
  * AuthApplicationApi - interface
  * 
@@ -47,6 +54,22 @@ export interface AuthApplicationApiInterface {
      */
     getSelfApplication(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSelfResponse>;
 
+    /**
+     * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+     * @summary Set the authenticating application\'s auth-email test allowlist
+     * @param {SetSelfApplicationTestRecipientsRequest} setSelfApplicationTestRecipientsRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthApplicationApiInterface
+     */
+    setSelfApplicationTestRecipientsRaw(requestParameters: AuthApplicationApiSetSelfApplicationTestRecipientsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSelfResponse>>;
+
+    /**
+     * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+     * Set the authenticating application\'s auth-email test allowlist
+     */
+    setSelfApplicationTestRecipients(setSelfApplicationTestRecipientsRequest: SetSelfApplicationTestRecipientsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSelfResponse>;
+
 }
 
 /**
@@ -90,4 +113,50 @@ export class AuthApplicationApi extends runtime.BaseAPI implements AuthApplicati
         return await response.value();
     }
 
+    /**
+     * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+     * Set the authenticating application\'s auth-email test allowlist
+     */
+    async setSelfApplicationTestRecipientsRaw(requestParameters: AuthApplicationApiSetSelfApplicationTestRecipientsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApplicationSelfResponse>> {
+        if (requestParameters['setSelfApplicationTestRecipientsRequest'] == null) {
+            throw new runtime.RequiredError(
+                'setSelfApplicationTestRecipientsRequest',
+                'Required parameter "setSelfApplicationTestRecipientsRequest" was null or undefined when calling setSelfApplicationTestRecipients().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Secret"] = await this.configuration.apiKey("X-Application-Secret"); // ApplicationSecret authentication
+        }
+
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key"); // ApplicationPublicKey authentication
+        }
+
+        const response = await this.request({
+            path: `/auth/application`,
+            method: 'PATCH',
+            headers: headerParameters,
+            query: queryParameters,
+            body: SetSelfApplicationTestRecipientsRequestToJSON(requestParameters['setSelfApplicationTestRecipientsRequest']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => ApplicationSelfResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+     * Set the authenticating application\'s auth-email test allowlist
+     */
+    async setSelfApplicationTestRecipients(setSelfApplicationTestRecipientsRequest: SetSelfApplicationTestRecipientsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApplicationSelfResponse> {
+        const response = await this.setSelfApplicationTestRecipientsRaw({ setSelfApplicationTestRecipientsRequest: setSelfApplicationTestRecipientsRequest }, initOverrides);
+        return await response.value();
+    }
+
 }

package/src/src/apis/AuthUserProfileApi.ts

@@ -17,7 +17,9 @@ import * as runtime from '../runtime';
 import type {
   ApiError,
   AuthUserResponse,
+  ChangePasswordRequest,
   EndUserDeleteResponse,
+  RefreshTokenResponse,
   UpdateEndUserRequest,
 } from '../models/index';
 import {
@@ -25,12 +27,20 @@ import {
     ApiErrorToJSON,
     AuthUserResponseFromJSON,
     AuthUserResponseToJSON,
+    ChangePasswordRequestFromJSON,
+    ChangePasswordRequestToJSON,
     EndUserDeleteResponseFromJSON,
     EndUserDeleteResponseToJSON,
+    RefreshTokenResponseFromJSON,
+    RefreshTokenResponseToJSON,
     UpdateEndUserRequestFromJSON,
     UpdateEndUserRequestToJSON,
 } from '../models/index';
 
+export interface AuthUserProfileApiChangeEndUserPasswordRequest {
+    changePasswordRequest: ChangePasswordRequest;
+}
+
 export interface AuthUserProfileApiUpdateEndUserOperationRequest {
     updateEndUserRequest: UpdateEndUserRequest;
 }
@@ -42,6 +52,22 @@ export interface AuthUserProfileApiUpdateEndUserOperationRequest {
  * @interface AuthUserProfileApiInterface
  */
 export interface AuthUserProfileApiInterface {
+    /**
+     * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+     * @summary Change password (authenticated session)
+     * @param {ChangePasswordRequest} changePasswordRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthUserProfileApiInterface
+     */
+    changeEndUserPasswordRaw(requestParameters: AuthUserProfileApiChangeEndUserPasswordRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RefreshTokenResponse>>;
+
+    /**
+     * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+     * Change password (authenticated session)
+     */
+    changeEndUserPassword(changePasswordRequest: ChangePasswordRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RefreshTokenResponse>;
+
     /**
      * Delete the current end user account (GDPR right to erasure). This is a soft delete — the account is marked as deleted but data is retained for a period to allow for recovery or legal requirements. 
      * @summary Delete current end user account
@@ -95,6 +121,56 @@ export interface AuthUserProfileApiInterface {
  */
 export class AuthUserProfileApi extends runtime.BaseAPI implements AuthUserProfileApiInterface {
 
+    /**
+     * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+     * Change password (authenticated session)
+     */
+    async changeEndUserPasswordRaw(requestParameters: AuthUserProfileApiChangeEndUserPasswordRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RefreshTokenResponse>> {
+        if (requestParameters['changePasswordRequest'] == null) {
+            throw new runtime.RequiredError(
+                'changePasswordRequest',
+                'Required parameter "changePasswordRequest" was null or undefined when calling changeEndUserPassword().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("EndUserToken", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key"); // ApplicationPublicKey authentication
+        }
+
+        const response = await this.request({
+            path: `/auth/users/change-password`,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ChangePasswordRequestToJSON(requestParameters['changePasswordRequest']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => RefreshTokenResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+     * Change password (authenticated session)
+     */
+    async changeEndUserPassword(changePasswordRequest: ChangePasswordRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RefreshTokenResponse> {
+        const response = await this.changeEndUserPasswordRaw({ changePasswordRequest: changePasswordRequest }, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Delete the current end user account (GDPR right to erasure). This is a soft delete — the account is marked as deleted but data is retained for a period to allow for recovery or legal requirements. 
      * Delete current end user account

package/src/src/models/ApplicationSelf.ts

@@ -47,6 +47,12 @@ export interface ApplicationSelf {
      * @memberof ApplicationSelf
      */
     signingAlgorithm: ApplicationSelfSigningAlgorithmEnum;
+    /**
+     * The auth-email test allowlist. When non-empty, only these addresses receive auth emails (the gate from sc-7443); an empty array disables the gate. Settable via PATCH /auth/application (sc-7600).
+     * @type {Array<string>}
+     * @memberof ApplicationSelf
+     */
+    testRecipients: Array<string>;
 }
 
 
@@ -78,6 +84,7 @@ export function instanceOfApplicationSelf(value: object): value is ApplicationSe
     if (!('name' in value) || value['name'] === undefined) return false;
     if (!('environment' in value) || value['environment'] === undefined) return false;
     if (!('signingAlgorithm' in value) || value['signingAlgorithm'] === undefined) return false;
+    if (!('testRecipients' in value) || value['testRecipients'] === undefined) return false;
     return true;
 }
 
@@ -95,6 +102,7 @@ export function ApplicationSelfFromJSONTyped(json: any, ignoreDiscriminator: boo
         'name': json['name'],
         'environment': json['environment'],
         'signingAlgorithm': json['signing_algorithm'],
+        'testRecipients': json['test_recipients'],
     };
 }
 
@@ -113,6 +121,7 @@ export function ApplicationSelfToJSONTyped(value?: ApplicationSelf | null, ignor
         'name': value['name'],
         'environment': value['environment'],
         'signing_algorithm': value['signingAlgorithm'],
+        'test_recipients': value['testRecipients'],
     };
 }
 

package/src/src/models/ChangePasswordRequest.ts

@@ -0,0 +1,75 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface ChangePasswordRequest
+ */
+export interface ChangePasswordRequest {
+    /**
+     * The user's current password, for verification.
+     * @type {string}
+     * @memberof ChangePasswordRequest
+     */
+    currentPassword: string;
+    /**
+     * The new password. Must satisfy the application's password policy.
+     * @type {string}
+     * @memberof ChangePasswordRequest
+     */
+    newPassword: string;
+}
+
+/**
+ * Check if a given object implements the ChangePasswordRequest interface.
+ */
+export function instanceOfChangePasswordRequest(value: object): value is ChangePasswordRequest {
+    if (!('currentPassword' in value) || value['currentPassword'] === undefined) return false;
+    if (!('newPassword' in value) || value['newPassword'] === undefined) return false;
+    return true;
+}
+
+export function ChangePasswordRequestFromJSON(json: any): ChangePasswordRequest {
+    return ChangePasswordRequestFromJSONTyped(json, false);
+}
+
+export function ChangePasswordRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): ChangePasswordRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'currentPassword': json['current_password'],
+        'newPassword': json['new_password'],
+    };
+}
+
+export function ChangePasswordRequestToJSON(json: any): ChangePasswordRequest {
+    return ChangePasswordRequestToJSONTyped(json, false);
+}
+
+export function ChangePasswordRequestToJSONTyped(value?: ChangePasswordRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'current_password': value['currentPassword'],
+        'new_password': value['newPassword'],
+    };
+}
+

package/src/src/models/SetSelfApplicationTestRecipientsRequest.ts

@@ -0,0 +1,66 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface SetSelfApplicationTestRecipientsRequest
+ */
+export interface SetSelfApplicationTestRecipientsRequest {
+    /**
+     * Email addresses allowed to receive auth emails. An empty array clears the allowlist (disables the gate).
+     * @type {Array<string>}
+     * @memberof SetSelfApplicationTestRecipientsRequest
+     */
+    testRecipients: Array<string>;
+}
+
+/**
+ * Check if a given object implements the SetSelfApplicationTestRecipientsRequest interface.
+ */
+export function instanceOfSetSelfApplicationTestRecipientsRequest(value: object): value is SetSelfApplicationTestRecipientsRequest {
+    if (!('testRecipients' in value) || value['testRecipients'] === undefined) return false;
+    return true;
+}
+
+export function SetSelfApplicationTestRecipientsRequestFromJSON(json: any): SetSelfApplicationTestRecipientsRequest {
+    return SetSelfApplicationTestRecipientsRequestFromJSONTyped(json, false);
+}
+
+export function SetSelfApplicationTestRecipientsRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): SetSelfApplicationTestRecipientsRequest {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'testRecipients': json['test_recipients'],
+    };
+}
+
+export function SetSelfApplicationTestRecipientsRequestToJSON(json: any): SetSelfApplicationTestRecipientsRequest {
+    return SetSelfApplicationTestRecipientsRequestToJSONTyped(json, false);
+}
+
+export function SetSelfApplicationTestRecipientsRequestToJSONTyped(value?: SetSelfApplicationTestRecipientsRequest | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'test_recipients': value['testRecipients'],
+    };
+}
+

package/src/src/models/WebhookDelivery.ts

@@ -13,6 +13,14 @@
  */
 
 import { mapValues } from '../runtime';
+import type { WebhookEventType } from './WebhookEventType';
+import {
+    WebhookEventTypeFromJSON,
+    WebhookEventTypeFromJSONTyped,
+    WebhookEventTypeToJSON,
+    WebhookEventTypeToJSONTyped,
+} from './WebhookEventType';
+
 /**
  * 
  * @export
@@ -39,10 +47,10 @@ export interface WebhookDelivery {
     eventId?: string;
     /**
      * 
-     * @type {string}
+     * @type {WebhookEventType}
      * @memberof WebhookDelivery
      */
-    eventType?: string;
+    eventType?: WebhookEventType;
     /**
      * 
      * @type {string}
@@ -151,7 +159,7 @@ export function WebhookDeliveryFromJSONTyped(json: any, ignoreDiscriminator: boo
         'id': json['id'] == null ? undefined : json['id'],
         'msgId': json['msg_id'] == null ? undefined : json['msg_id'],
         'eventId': json['event_id'] == null ? undefined : json['event_id'],
-        'eventType': json['event_type'] == null ? undefined : json['event_type'],
+        'eventType': json['event_type'] == null ? undefined : WebhookEventTypeFromJSON(json['event_type']),
         'status': json['status'] == null ? undefined : json['status'],
         'attempts': json['attempts'] == null ? undefined : json['attempts'],
         'maxAttempts': json['max_attempts'] == null ? undefined : json['max_attempts'],
@@ -181,7 +189,7 @@ export function WebhookDeliveryToJSONTyped(value?: WebhookDelivery | null, ignor
         'id': value['id'],
         'msg_id': value['msgId'],
         'event_id': value['eventId'],
-        'event_type': value['eventType'],
+        'event_type': WebhookEventTypeToJSON(value['eventType']),
         'status': value['status'],
         'attempts': value['attempts'],
         'max_attempts': value['maxAttempts'],

package/src/src/models/WebhookDeliveryDetail.ts

@@ -13,6 +13,14 @@
  */
 
 import { mapValues } from '../runtime';
+import type { WebhookEventType } from './WebhookEventType';
+import {
+    WebhookEventTypeFromJSON,
+    WebhookEventTypeFromJSONTyped,
+    WebhookEventTypeToJSON,
+    WebhookEventTypeToJSONTyped,
+} from './WebhookEventType';
+
 /**
  * Full delivery object with payload, headers, and response details
  * @export
@@ -39,10 +47,10 @@ export interface WebhookDeliveryDetail {
     eventId?: string;
     /**
      * 
-     * @type {string}
+     * @type {WebhookEventType}
      * @memberof WebhookDeliveryDetail
      */
-    eventType?: string;
+    eventType?: WebhookEventType;
     /**
      * 
      * @type {string}
@@ -175,7 +183,7 @@ export function WebhookDeliveryDetailFromJSONTyped(json: any, ignoreDiscriminato
         'id': json['id'] == null ? undefined : json['id'],
         'msgId': json['msg_id'] == null ? undefined : json['msg_id'],
         'eventId': json['event_id'] == null ? undefined : json['event_id'],
-        'eventType': json['event_type'] == null ? undefined : json['event_type'],
+        'eventType': json['event_type'] == null ? undefined : WebhookEventTypeFromJSON(json['event_type']),
         'status': json['status'] == null ? undefined : json['status'],
         'attempts': json['attempts'] == null ? undefined : json['attempts'],
         'maxAttempts': json['max_attempts'] == null ? undefined : json['max_attempts'],
@@ -209,7 +217,7 @@ export function WebhookDeliveryDetailToJSONTyped(value?: WebhookDeliveryDetail |
         'id': value['id'],
         'msg_id': value['msgId'],
         'event_id': value['eventId'],
-        'event_type': value['eventType'],
+        'event_type': WebhookEventTypeToJSON(value['eventType']),
         'status': value['status'],
         'attempts': value['attempts'],
         'max_attempts': value['maxAttempts'],

package/src/src/models/WebhookEventType.ts

@@ -0,0 +1,79 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+/**
+ * Canonical webhook event type. Matches the event `type` field on the webhook delivery envelope and the values returned by `GET /v1/webhooks/event-types`. Source of truth: packages/shared/src/constants/webhookEventRegistry.ts.
+ * @export
+ */
+export const WebhookEventType = {
+    EMAIL_QUEUED: 'email.queued',
+    EMAIL_SENT: 'email.sent',
+    EMAIL_DELIVERED: 'email.delivered',
+    EMAIL_BOUNCED: 'email.bounced',
+    EMAIL_SOFT_BOUNCED: 'email.soft_bounced',
+    EMAIL_COMPLAINED: 'email.complained',
+    EMAIL_OPENED: 'email.opened',
+    EMAIL_CLICKED: 'email.clicked',
+    EMAIL_FAILED: 'email.failed',
+    EMAIL_RECEIVED: 'email.received',
+    PUSH_SENT: 'push.sent',
+    PUSH_DELIVERED: 'push.delivered',
+    PUSH_FAILED: 'push.failed',
+    PUSH_EXPIRED: 'push.expired',
+    USER_CREATED: 'user.created',
+    USER_LOGIN: 'user.login',
+    USER_LOGOUT: 'user.logout',
+    USER_PASSWORD_CHANGED: 'user.password_changed',
+    USER_PASSWORD_RESET_REQUESTED: 'user.password_reset_requested',
+    USER_EMAIL_VERIFIED: 'user.email_verified',
+    USER_PHONE_VERIFIED: 'user.phone_verified',
+    USER_DELETED: 'user.deleted',
+    USER_SESSION_REVOKED: 'user.session_revoked',
+    USER_MFA_ENABLED: 'user.mfa_enabled',
+    USER_MFA_DISABLED: 'user.mfa_disabled',
+    USER_IMPERSONATED: 'user.impersonated',
+    DOMAIN_VERIFIED: 'domain.verified',
+    DOMAIN_VERIFICATION_FAILED: 'domain.verification_failed'
+} as const;
+export type WebhookEventType = typeof WebhookEventType[keyof typeof WebhookEventType];
+
+
+export function instanceOfWebhookEventType(value: any): boolean {
+    for (const key in WebhookEventType) {
+        if (Object.prototype.hasOwnProperty.call(WebhookEventType, key)) {
+            if (WebhookEventType[key as keyof typeof WebhookEventType] === value) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+
+export function WebhookEventTypeFromJSON(json: any): WebhookEventType {
+    return WebhookEventTypeFromJSONTyped(json, false);
+}
+
+export function WebhookEventTypeFromJSONTyped(json: any, ignoreDiscriminator: boolean): WebhookEventType {
+    return json as WebhookEventType;
+}
+
+export function WebhookEventTypeToJSON(value?: WebhookEventType | null): any {
+    return value as any;
+}
+
+export function WebhookEventTypeToJSONTyped(value: any, ignoreDiscriminator: boolean): WebhookEventType {
+    return value as WebhookEventType;
+}
+

package/src/src/models/WebhookEventTypesResponseData.ts

@@ -13,6 +13,14 @@
  */
 
 import { mapValues } from '../runtime';
+import type { WebhookEventType } from './WebhookEventType';
+import {
+    WebhookEventTypeFromJSON,
+    WebhookEventTypeFromJSONTyped,
+    WebhookEventTypeToJSON,
+    WebhookEventTypeToJSONTyped,
+} from './WebhookEventType';
+
 /**
  * 
  * @export
@@ -21,10 +29,10 @@ import { mapValues } from '../runtime';
 export interface WebhookEventTypesResponseData {
     /**
      * 
-     * @type {Array<string>}
+     * @type {Array<WebhookEventType>}
      * @memberof WebhookEventTypesResponseData
      */
-    eventTypes?: Array<string>;
+    eventTypes?: Array<WebhookEventType>;
     /**
      * 
      * @type {Array<object>}
@@ -62,7 +70,7 @@ export function WebhookEventTypesResponseDataFromJSONTyped(json: any, ignoreDisc
     }
     return {
         
-        'eventTypes': json['event_types'] == null ? undefined : json['event_types'],
+        'eventTypes': json['event_types'] == null ? undefined : ((json['event_types'] as Array<any>).map(WebhookEventTypeFromJSON)),
         'registry': json['registry'] == null ? undefined : json['registry'],
         'categories': json['categories'] == null ? undefined : json['categories'],
         'apiVersion': json['api_version'] == null ? undefined : json['api_version'],
@@ -80,7 +88,7 @@ export function WebhookEventTypesResponseDataToJSONTyped(value?: WebhookEventTyp
 
     return {
         
-        'event_types': value['eventTypes'],
+        'event_types': value['eventTypes'] == null ? undefined : ((value['eventTypes'] as Array<any>).map(WebhookEventTypeToJSON)),
         'registry': value['registry'],
         'categories': value['categories'],
         'api_version': value['apiVersion'],