@zyphr-dev/node-sdk 0.1.45 → 0.1.46

package/dist/index.cjs

@@ -18529,6 +18529,7 @@ var WebhookEventType = {
   EMAIL_OPENED: "email.opened",
   EMAIL_CLICKED: "email.clicked",
   EMAIL_FAILED: "email.failed",
+  EMAIL_SUPPRESSED: "email.suppressed",
   EMAIL_RECEIVED: "email.received",
   PUSH_SENT: "push.sent",
   PUSH_DELIVERED: "push.delivered",
@@ -28999,10 +29000,18 @@ var ZyphrClient = class {
     this.accessToken = options.accessToken;
     const config = new Configuration({
       basePath: options.baseUrl,
-      // The only credential this client sends automatically is the publishable
-      // application key. End-user Bearer tokens are attached per-request via
-      // authedRequest() so token rotation doesn't require rebuilding the client.
+      // The publishable application key is sent automatically on every call.
       apiKey: (name) => name === "X-Application-Key" ? this.applicationKey : "",
+      // The stored end-user access token is also applied automatically: any
+      // user-scoped generated method (which authenticates the EndUserToken
+      // scheme) invokes this callback and attaches `Authorization: Bearer`.
+      // The callback reads `this.accessToken` at call time, so setAccessToken()
+      // takes effect on subsequent calls without rebuilding the client. When no
+      // token is set it returns '', and the generated code adds no header — so
+      // anonymous endpoints (login, register, password-reset) stay unauthenticated.
+      // An explicit token passed to authedRequest() sets the header directly in
+      // RequestInit, which overrides this callback.
+      accessToken: async () => this.accessToken ?? "",
       middleware: [errorMiddleware2]
     });
     this.auth = {
@@ -29022,7 +29031,7 @@ var ZyphrClient = class {
     };
     this.devices = new DevicesApi(config);
   }
-  /** Store the end-user access token for subsequent authedRequest() calls. */
+  /** Store the end-user access token; it is applied automatically to subsequent user-scoped calls. */
   setAccessToken(accessToken) {
     this.accessToken = accessToken;
   }
@@ -29033,11 +29042,17 @@ var ZyphrClient = class {
   /**
    * Build request overrides that authenticate as the current end user: the
    * stored Bearer token plus the publishable application key required by
-   * user-scoped endpoints. Pass an explicit token to override the stored one.
+   * user-scoped endpoints.
+   *
+   * The stored token is now applied automatically to user-scoped calls, so this
+   * is no longer required for authentication. It remains useful to authenticate
+   * a single call with a different token — a token passed here sets the header
+   * directly in RequestInit and overrides the stored token for that call.
    *
    * @example
    * ```ts
-   * const me = await zyphr.auth.profile.getEndUser(zyphr.authedRequest());
+   * // Authenticate one call as a different user, without changing stored state:
+   * const me = await zyphr.auth.profile.getEndUser(zyphr.authedRequest(otherToken));
    * ```
    */
   authedRequest(accessToken) {