@zyphr-dev/node-sdk 0.1.44 → 0.1.46

package/dist/index.js

@@ -865,6 +865,7 @@ function instanceOfApplicationSelf(value) {
   if (!("name" in value) || value["name"] === void 0) return false;
   if (!("environment" in value) || value["environment"] === void 0) return false;
   if (!("signingAlgorithm" in value) || value["signingAlgorithm"] === void 0) return false;
+  if (!("testRecipients" in value) || value["testRecipients"] === void 0) return false;
   return true;
 }
 function ApplicationSelfFromJSON(json) {
@@ -878,7 +879,8 @@ function ApplicationSelfFromJSONTyped(json, ignoreDiscriminator) {
     "id": json["id"],
     "name": json["name"],
     "environment": json["environment"],
-    "signingAlgorithm": json["signing_algorithm"]
+    "signingAlgorithm": json["signing_algorithm"],
+    "testRecipients": json["test_recipients"]
   };
 }
 function ApplicationSelfToJSON(json) {
@@ -892,7 +894,8 @@ function ApplicationSelfToJSONTyped(value, ignoreDiscriminator = false) {
     "id": value["id"],
     "name": value["name"],
     "environment": value["environment"],
-    "signing_algorithm": value["signingAlgorithm"]
+    "signing_algorithm": value["signingAlgorithm"],
+    "test_recipients": value["testRecipients"]
   };
 }
 
@@ -2205,6 +2208,37 @@ function CategoryResponseToJSONTyped(value, ignoreDiscriminator = false) {
   };
 }
 
+// src/src/models/ChangePasswordRequest.ts
+function instanceOfChangePasswordRequest(value) {
+  if (!("currentPassword" in value) || value["currentPassword"] === void 0) return false;
+  if (!("newPassword" in value) || value["newPassword"] === void 0) return false;
+  return true;
+}
+function ChangePasswordRequestFromJSON(json) {
+  return ChangePasswordRequestFromJSONTyped(json, false);
+}
+function ChangePasswordRequestFromJSONTyped(json, ignoreDiscriminator) {
+  if (json == null) {
+    return json;
+  }
+  return {
+    "currentPassword": json["current_password"],
+    "newPassword": json["new_password"]
+  };
+}
+function ChangePasswordRequestToJSON(json) {
+  return ChangePasswordRequestToJSONTyped(json, false);
+}
+function ChangePasswordRequestToJSONTyped(value, ignoreDiscriminator = false) {
+  if (value == null) {
+    return value;
+  }
+  return {
+    "current_password": value["currentPassword"],
+    "new_password": value["newPassword"]
+  };
+}
+
 // src/src/models/GetDomain200ResponseMeta.ts
 function instanceOfGetDomain200ResponseMeta(value) {
   return true;
@@ -11959,6 +11993,34 @@ function SetPreferencesRequestToJSONTyped(value, ignoreDiscriminator = false) {
   };
 }
 
+// src/src/models/SetSelfApplicationTestRecipientsRequest.ts
+function instanceOfSetSelfApplicationTestRecipientsRequest(value) {
+  if (!("testRecipients" in value) || value["testRecipients"] === void 0) return false;
+  return true;
+}
+function SetSelfApplicationTestRecipientsRequestFromJSON(json) {
+  return SetSelfApplicationTestRecipientsRequestFromJSONTyped(json, false);
+}
+function SetSelfApplicationTestRecipientsRequestFromJSONTyped(json, ignoreDiscriminator) {
+  if (json == null) {
+    return json;
+  }
+  return {
+    "testRecipients": json["test_recipients"]
+  };
+}
+function SetSelfApplicationTestRecipientsRequestToJSON(json) {
+  return SetSelfApplicationTestRecipientsRequestToJSONTyped(json, false);
+}
+function SetSelfApplicationTestRecipientsRequestToJSONTyped(value, ignoreDiscriminator = false) {
+  if (value == null) {
+    return value;
+  }
+  return {
+    "test_recipients": value["testRecipients"]
+  };
+}
+
 // src/src/models/SignInAnonymouslyRequest.ts
 function instanceOfSignInAnonymouslyRequest(value) {
   if (!("deviceId" in value) || value["deviceId"] === void 0) return false;
@@ -15791,6 +15853,61 @@ function WebhookDeleteResponseToJSONTyped(value, ignoreDiscriminator = false) {
   };
 }
 
+// src/src/models/WebhookEventType.ts
+var WebhookEventType = {
+  EMAIL_QUEUED: "email.queued",
+  EMAIL_SENT: "email.sent",
+  EMAIL_DELIVERED: "email.delivered",
+  EMAIL_BOUNCED: "email.bounced",
+  EMAIL_SOFT_BOUNCED: "email.soft_bounced",
+  EMAIL_COMPLAINED: "email.complained",
+  EMAIL_OPENED: "email.opened",
+  EMAIL_CLICKED: "email.clicked",
+  EMAIL_FAILED: "email.failed",
+  EMAIL_SUPPRESSED: "email.suppressed",
+  EMAIL_RECEIVED: "email.received",
+  PUSH_SENT: "push.sent",
+  PUSH_DELIVERED: "push.delivered",
+  PUSH_FAILED: "push.failed",
+  PUSH_EXPIRED: "push.expired",
+  USER_CREATED: "user.created",
+  USER_LOGIN: "user.login",
+  USER_LOGOUT: "user.logout",
+  USER_PASSWORD_CHANGED: "user.password_changed",
+  USER_PASSWORD_RESET_REQUESTED: "user.password_reset_requested",
+  USER_EMAIL_VERIFIED: "user.email_verified",
+  USER_PHONE_VERIFIED: "user.phone_verified",
+  USER_DELETED: "user.deleted",
+  USER_SESSION_REVOKED: "user.session_revoked",
+  USER_MFA_ENABLED: "user.mfa_enabled",
+  USER_MFA_DISABLED: "user.mfa_disabled",
+  USER_IMPERSONATED: "user.impersonated",
+  DOMAIN_VERIFIED: "domain.verified",
+  DOMAIN_VERIFICATION_FAILED: "domain.verification_failed"
+};
+function instanceOfWebhookEventType(value) {
+  for (const key in WebhookEventType) {
+    if (Object.prototype.hasOwnProperty.call(WebhookEventType, key)) {
+      if (WebhookEventType[key] === value) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function WebhookEventTypeFromJSON(json) {
+  return WebhookEventTypeFromJSONTyped(json, false);
+}
+function WebhookEventTypeFromJSONTyped(json, ignoreDiscriminator) {
+  return json;
+}
+function WebhookEventTypeToJSON(value) {
+  return value;
+}
+function WebhookEventTypeToJSONTyped(value, ignoreDiscriminator) {
+  return value;
+}
+
 // src/src/models/WebhookDelivery.ts
 var WebhookDeliveryStatusEnum = {
   PENDING: "pending",
@@ -15813,7 +15930,7 @@ function WebhookDeliveryFromJSONTyped(json, ignoreDiscriminator) {
     "id": json["id"] == null ? void 0 : json["id"],
     "msgId": json["msg_id"] == null ? void 0 : json["msg_id"],
     "eventId": json["event_id"] == null ? void 0 : json["event_id"],
-    "eventType": json["event_type"] == null ? void 0 : json["event_type"],
+    "eventType": json["event_type"] == null ? void 0 : WebhookEventTypeFromJSON(json["event_type"]),
     "status": json["status"] == null ? void 0 : json["status"],
     "attempts": json["attempts"] == null ? void 0 : json["attempts"],
     "maxAttempts": json["max_attempts"] == null ? void 0 : json["max_attempts"],
@@ -15839,7 +15956,7 @@ function WebhookDeliveryToJSONTyped(value, ignoreDiscriminator = false) {
     "id": value["id"],
     "msg_id": value["msgId"],
     "event_id": value["eventId"],
-    "event_type": value["eventType"],
+    "event_type": WebhookEventTypeToJSON(value["eventType"]),
     "status": value["status"],
     "attempts": value["attempts"],
     "max_attempts": value["maxAttempts"],
@@ -15877,7 +15994,7 @@ function WebhookDeliveryDetailFromJSONTyped(json, ignoreDiscriminator) {
     "id": json["id"] == null ? void 0 : json["id"],
     "msgId": json["msg_id"] == null ? void 0 : json["msg_id"],
     "eventId": json["event_id"] == null ? void 0 : json["event_id"],
-    "eventType": json["event_type"] == null ? void 0 : json["event_type"],
+    "eventType": json["event_type"] == null ? void 0 : WebhookEventTypeFromJSON(json["event_type"]),
     "status": json["status"] == null ? void 0 : json["status"],
     "attempts": json["attempts"] == null ? void 0 : json["attempts"],
     "maxAttempts": json["max_attempts"] == null ? void 0 : json["max_attempts"],
@@ -15907,7 +16024,7 @@ function WebhookDeliveryDetailToJSONTyped(value, ignoreDiscriminator = false) {
     "id": value["id"],
     "msg_id": value["msgId"],
     "event_id": value["eventId"],
-    "event_type": value["eventType"],
+    "event_type": WebhookEventTypeToJSON(value["eventType"]),
     "status": value["status"],
     "attempts": value["attempts"],
     "max_attempts": value["maxAttempts"],
@@ -16057,7 +16174,7 @@ function WebhookEventTypesResponseDataFromJSONTyped(json, ignoreDiscriminator) {
     return json;
   }
   return {
-    "eventTypes": json["event_types"] == null ? void 0 : json["event_types"],
+    "eventTypes": json["event_types"] == null ? void 0 : json["event_types"].map(WebhookEventTypeFromJSON),
     "registry": json["registry"] == null ? void 0 : json["registry"],
     "categories": json["categories"] == null ? void 0 : json["categories"],
     "apiVersion": json["api_version"] == null ? void 0 : json["api_version"]
@@ -16071,7 +16188,7 @@ function WebhookEventTypesResponseDataToJSONTyped(value, ignoreDiscriminator = f
     return value;
   }
   return {
-    "event_types": value["eventTypes"],
+    "event_types": value["eventTypes"] == null ? void 0 : value["eventTypes"].map(WebhookEventTypeToJSON),
     "registry": value["registry"],
     "categories": value["categories"],
     "api_version": value["apiVersion"]
@@ -16472,7 +16589,7 @@ function WebhookTestEventResponseDataFromJSONTyped(json, ignoreDiscriminator) {
   }
   return {
     "deliveryId": json["delivery_id"] == null ? void 0 : json["delivery_id"],
-    "eventType": json["event_type"] == null ? void 0 : json["event_type"],
+    "eventType": json["event_type"] == null ? void 0 : WebhookEventTypeFromJSON(json["event_type"]),
     "payload": json["payload"] == null ? void 0 : json["payload"],
     "status": json["status"] == null ? void 0 : json["status"]
   };
@@ -16486,7 +16603,7 @@ function WebhookTestEventResponseDataToJSONTyped(value, ignoreDiscriminator = fa
   }
   return {
     "delivery_id": value["deliveryId"],
-    "event_type": value["eventType"],
+    "event_type": WebhookEventTypeToJSON(value["eventType"]),
     "payload": value["payload"],
     "status": value["status"]
   };
@@ -16736,6 +16853,43 @@ var AuthApplicationApi = class extends BaseAPI {
     const response = await this.getSelfApplicationRaw(initOverrides);
     return await response.value();
   }
+  /**
+   * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+   * Set the authenticating application\'s auth-email test allowlist
+   */
+  async setSelfApplicationTestRecipientsRaw(requestParameters, initOverrides) {
+    if (requestParameters["setSelfApplicationTestRecipientsRequest"] == null) {
+      throw new RequiredError(
+        "setSelfApplicationTestRecipientsRequest",
+        'Required parameter "setSelfApplicationTestRecipientsRequest" was null or undefined when calling setSelfApplicationTestRecipients().'
+      );
+    }
+    const queryParameters = {};
+    const headerParameters = {};
+    headerParameters["Content-Type"] = "application/json";
+    if (this.configuration && this.configuration.apiKey) {
+      headerParameters["X-Application-Secret"] = await this.configuration.apiKey("X-Application-Secret");
+    }
+    if (this.configuration && this.configuration.apiKey) {
+      headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key");
+    }
+    const response = await this.request({
+      path: `/auth/application`,
+      method: "PATCH",
+      headers: headerParameters,
+      query: queryParameters,
+      body: SetSelfApplicationTestRecipientsRequestToJSON(requestParameters["setSelfApplicationTestRecipientsRequest"])
+    }, initOverrides);
+    return new JSONApiResponse(response, (jsonValue) => ApplicationSelfResponseFromJSON(jsonValue));
+  }
+  /**
+   * Set `test_recipients` — the per-application auth-email allowlist — on the application whose credentials authenticated this request. When non-empty, this allowlist gates ALL auth emails (only listed addresses receive them); an EMPTY array clears it and disables the gate. Lets an integrator manage the allowlist from their own infrastructure config instead of the dashboard.  Application-SECRET scoped (server-side write): requires X-Application-Key AND X-Application-Secret. Mutates ONLY the authenticating application — it never takes an application id from the request, so there is no cross-tenant write path. The response mirrors GET /auth/application exactly (never returns secrets). 
+   * Set the authenticating application\'s auth-email test allowlist
+   */
+  async setSelfApplicationTestRecipients(setSelfApplicationTestRecipientsRequest, initOverrides) {
+    const response = await this.setSelfApplicationTestRecipientsRaw({ setSelfApplicationTestRecipientsRequest }, initOverrides);
+    return await response.value();
+  }
 };
 
 // src/src/apis/AuthEmailOTPApi.ts
@@ -19482,6 +19636,47 @@ var ListEndUsersEnvironmentEnum = {
 
 // src/src/apis/AuthUserProfileApi.ts
 var AuthUserProfileApi = class extends BaseAPI {
+  /**
+   * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+   * Change password (authenticated session)
+   */
+  async changeEndUserPasswordRaw(requestParameters, initOverrides) {
+    if (requestParameters["changePasswordRequest"] == null) {
+      throw new RequiredError(
+        "changePasswordRequest",
+        'Required parameter "changePasswordRequest" was null or undefined when calling changeEndUserPassword().'
+      );
+    }
+    const queryParameters = {};
+    const headerParameters = {};
+    headerParameters["Content-Type"] = "application/json";
+    if (this.configuration && this.configuration.accessToken) {
+      const token = this.configuration.accessToken;
+      const tokenString = await token("EndUserToken", []);
+      if (tokenString) {
+        headerParameters["Authorization"] = `Bearer ${tokenString}`;
+      }
+    }
+    if (this.configuration && this.configuration.apiKey) {
+      headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key");
+    }
+    const response = await this.request({
+      path: `/auth/users/change-password`,
+      method: "POST",
+      headers: headerParameters,
+      query: queryParameters,
+      body: ChangePasswordRequestToJSON(requestParameters["changePasswordRequest"])
+    }, initOverrides);
+    return new JSONApiResponse(response, (jsonValue) => RefreshTokenResponseFromJSON(jsonValue));
+  }
+  /**
+   * Change the currently authenticated end user\'s password from a logged-in session. The caller must prove possession of the CURRENT password (`current_password`); the user is identified from the end-user token, not the request body, so a user can only change their own password.  On success, all existing sessions are revoked and a fresh token pair is returned so the current session stays authenticated. Emits the `user.password_changed` webhook.
+   * Change password (authenticated session)
+   */
+  async changeEndUserPassword(changePasswordRequest, initOverrides) {
+    const response = await this.changeEndUserPasswordRaw({ changePasswordRequest }, initOverrides);
+    return await response.value();
+  }
   /**
    * Delete the current end user account (GDPR right to erasure). This is a soft delete — the account is marked as deleted but data is retained for a period to allow for recovery or legal requirements. 
    * Delete current end user account
@@ -26140,10 +26335,18 @@ var ZyphrClient = class {
     this.accessToken = options.accessToken;
     const config = new Configuration({
       basePath: options.baseUrl,
-      // The only credential this client sends automatically is the publishable
-      // application key. End-user Bearer tokens are attached per-request via
-      // authedRequest() so token rotation doesn't require rebuilding the client.
+      // The publishable application key is sent automatically on every call.
       apiKey: (name) => name === "X-Application-Key" ? this.applicationKey : "",
+      // The stored end-user access token is also applied automatically: any
+      // user-scoped generated method (which authenticates the EndUserToken
+      // scheme) invokes this callback and attaches `Authorization: Bearer`.
+      // The callback reads `this.accessToken` at call time, so setAccessToken()
+      // takes effect on subsequent calls without rebuilding the client. When no
+      // token is set it returns '', and the generated code adds no header — so
+      // anonymous endpoints (login, register, password-reset) stay unauthenticated.
+      // An explicit token passed to authedRequest() sets the header directly in
+      // RequestInit, which overrides this callback.
+      accessToken: async () => this.accessToken ?? "",
       middleware: [errorMiddleware2]
     });
     this.auth = {
@@ -26163,7 +26366,7 @@ var ZyphrClient = class {
     };
     this.devices = new DevicesApi(config);
   }
-  /** Store the end-user access token for subsequent authedRequest() calls. */
+  /** Store the end-user access token; it is applied automatically to subsequent user-scoped calls. */
   setAccessToken(accessToken) {
     this.accessToken = accessToken;
   }
@@ -26174,11 +26377,17 @@ var ZyphrClient = class {
   /**
    * Build request overrides that authenticate as the current end user: the
    * stored Bearer token plus the publishable application key required by
-   * user-scoped endpoints. Pass an explicit token to override the stored one.
+   * user-scoped endpoints.
+   *
+   * The stored token is now applied automatically to user-scoped calls, so this
+   * is no longer required for authentication. It remains useful to authenticate
+   * a single call with a different token — a token passed here sets the header
+   * directly in RequestInit and overrides the stored token for that call.
    *
    * @example
    * ```ts
-   * const me = await zyphr.auth.profile.getEndUser(zyphr.authedRequest());
+   * // Authenticate one call as a different user, without changing stored state:
+   * const me = await zyphr.auth.profile.getEndUser(zyphr.authedRequest(otherToken));
    * ```
    */
   authedRequest(accessToken) {
@@ -26416,6 +26625,10 @@ export {
   CategoryResponseToJSONTyped,
   CategoryToJSON,
   CategoryToJSONTyped,
+  ChangePasswordRequestFromJSON,
+  ChangePasswordRequestFromJSONTyped,
+  ChangePasswordRequestToJSON,
+  ChangePasswordRequestToJSONTyped,
   CloseWaaSEndpointCircuit200ResponseDataFromJSON,
   CloseWaaSEndpointCircuit200ResponseDataFromJSONTyped,
   CloseWaaSEndpointCircuit200ResponseDataStateEnum,
@@ -27596,6 +27809,10 @@ export {
   SetPreferencesRequestPreferencesInnerToJSONTyped,
   SetPreferencesRequestToJSON,
   SetPreferencesRequestToJSONTyped,
+  SetSelfApplicationTestRecipientsRequestFromJSON,
+  SetSelfApplicationTestRecipientsRequestFromJSONTyped,
+  SetSelfApplicationTestRecipientsRequestToJSON,
+  SetSelfApplicationTestRecipientsRequestToJSONTyped,
   SignInAnonymouslyRequestFromJSON,
   SignInAnonymouslyRequestFromJSONTyped,
   SignInAnonymouslyRequestToJSON,
@@ -28178,6 +28395,11 @@ export {
   WebhookDeliveryStatusEnum,
   WebhookDeliveryToJSON,
   WebhookDeliveryToJSONTyped,
+  WebhookEventType,
+  WebhookEventTypeFromJSON,
+  WebhookEventTypeFromJSONTyped,
+  WebhookEventTypeToJSON,
+  WebhookEventTypeToJSONTyped,
   WebhookEventTypesResponseDataFromJSON,
   WebhookEventTypesResponseDataFromJSONTyped,
   WebhookEventTypesResponseDataToJSON,
@@ -28372,6 +28594,7 @@ export {
   instanceOfCategory,
   instanceOfCategoryListResponse,
   instanceOfCategoryResponse,
+  instanceOfChangePasswordRequest,
   instanceOfCloseWaaSEndpointCircuit200Response,
   instanceOfCloseWaaSEndpointCircuit200ResponseData,
   instanceOfConfirmEmailVerificationRequest,
@@ -28650,6 +28873,7 @@ export {
   instanceOfSetEndUserClaimsRequest,
   instanceOfSetPreferencesRequest,
   instanceOfSetPreferencesRequestPreferencesInner,
+  instanceOfSetSelfApplicationTestRecipientsRequest,
   instanceOfSignInAnonymouslyRequest,
   instanceOfSignInWithGameCenterRequest,
   instanceOfSignInWithGooglePlayGamesRequest,
@@ -28787,6 +29011,7 @@ export {
   instanceOfWebhookDeliveryResponse,
   instanceOfWebhookDeliveryRetryResponse,
   instanceOfWebhookDeliveryRetryResponseData,
+  instanceOfWebhookEventType,
   instanceOfWebhookEventTypesResponse,
   instanceOfWebhookEventTypesResponseData,
   instanceOfWebhookIpsResponse,