@zyphr-dev/node-sdk 0.1.46 → 0.1.48

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.46",
+  "version": "0.1.48",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/clientAuth.ts

@@ -226,12 +226,18 @@ export class ZyphrClient {
    */
   authedRequest(accessToken?: string): RequestInit {
     const token = accessToken ?? this.accessToken;
-    // Must include X-Application-Key: the runtime replaces the whole headers
-    // object with this initOverride (it does not deep-merge), so anything not
-    // re-listed here — including the app key the Configuration would otherwise
-    // add — is dropped for this call.
+    // The runtime REPLACES the whole headers object with this initOverride (it
+    // does not deep-merge — see createFetchParams), so every header the request
+    // needs must be re-listed here or it is dropped for this call:
+    //   - X-Application-Key: the app key the Configuration would otherwise add.
+    //   - Content-Type: application/json: the generated method sets this for
+    //     body-carrying calls; without it a POST via authedRequest() goes out
+    //     with no JSON content-type, the server parses no fields, and returns a
+    //     misleading validation error (e.g. "current_password is required").
+    //     Harmless on GETs (no body); required for any mutating call. (sc-7631)
     const headers: Record<string, string> = {
       'X-Application-Key': this.applicationKey,
+      'Content-Type': 'application/json',
     };
     if (token) {
       headers.Authorization = `Bearer ${token}`;

package/src/src/apis/AuthSessionsApi.ts

@@ -71,7 +71,7 @@ export interface AuthSessionsApiInterface {
     listEndUserSessions(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<SessionListResponse>;
 
     /**
-     * Refresh access token using a refresh token. Accepts optional custom_claims to update JWT claims (if not provided, preserves existing claims).
+     * Refresh an end-user access token using a refresh token. Authenticated with the publishable application key (`X-Application-Key`) — no application secret is required, so client-side apps (browser / mobile) can refresh directly. The refresh token is the credential: it must be valid, unexpired, unrevoked, and issued for this application. Refresh tokens are single-use — each refresh returns a NEW refresh token and invalidates the one you presented, so persist the new token before the next refresh. Accepts optional custom_claims to update JWT claims (if not provided, current stored claims are preserved).
      * @summary Refresh access token
      * @param {RefreshSessionRequest} refreshSessionRequest 
      * @param {*} [options] Override http request option.
@@ -81,7 +81,7 @@ export interface AuthSessionsApiInterface {
     refreshEndUserTokenRaw(requestParameters: AuthSessionsApiRefreshEndUserTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RefreshTokenResponse>>;
 
     /**
-     * Refresh access token using a refresh token. Accepts optional custom_claims to update JWT claims (if not provided, preserves existing claims).
+     * Refresh an end-user access token using a refresh token. Authenticated with the publishable application key (`X-Application-Key`) — no application secret is required, so client-side apps (browser / mobile) can refresh directly. The refresh token is the credential: it must be valid, unexpired, unrevoked, and issued for this application. Refresh tokens are single-use — each refresh returns a NEW refresh token and invalidates the one you presented, so persist the new token before the next refresh. Accepts optional custom_claims to update JWT claims (if not provided, current stored claims are preserved).
      * Refresh access token
      */
     refreshEndUserToken(refreshSessionRequest: RefreshSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RefreshTokenResponse>;
@@ -165,7 +165,7 @@ export class AuthSessionsApi extends runtime.BaseAPI implements AuthSessionsApiI
     }
 
     /**
-     * Refresh access token using a refresh token. Accepts optional custom_claims to update JWT claims (if not provided, preserves existing claims).
+     * Refresh an end-user access token using a refresh token. Authenticated with the publishable application key (`X-Application-Key`) — no application secret is required, so client-side apps (browser / mobile) can refresh directly. The refresh token is the credential: it must be valid, unexpired, unrevoked, and issued for this application. Refresh tokens are single-use — each refresh returns a NEW refresh token and invalidates the one you presented, so persist the new token before the next refresh. Accepts optional custom_claims to update JWT claims (if not provided, current stored claims are preserved).
      * Refresh access token
      */
     async refreshEndUserTokenRaw(requestParameters: AuthSessionsApiRefreshEndUserTokenRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<RefreshTokenResponse>> {
@@ -202,7 +202,7 @@ export class AuthSessionsApi extends runtime.BaseAPI implements AuthSessionsApiI
     }
 
     /**
-     * Refresh access token using a refresh token. Accepts optional custom_claims to update JWT claims (if not provided, preserves existing claims).
+     * Refresh an end-user access token using a refresh token. Authenticated with the publishable application key (`X-Application-Key`) — no application secret is required, so client-side apps (browser / mobile) can refresh directly. The refresh token is the credential: it must be valid, unexpired, unrevoked, and issued for this application. Refresh tokens are single-use — each refresh returns a NEW refresh token and invalidates the one you presented, so persist the new token before the next refresh. Accepts optional custom_claims to update JWT claims (if not provided, current stored claims are preserved).
      * Refresh access token
      */
     async refreshEndUserToken(refreshSessionRequest: RefreshSessionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<RefreshTokenResponse> {

package/src/src/apis/EmailsApi.ts

@@ -134,7 +134,7 @@ export interface EmailsApiInterface {
     /**
      * Retrieve a paginated list of sent emails
      * @summary List emails
-     * @param {'pending' | 'queued' | 'sent' | 'delivered' | 'failed' | 'bounced' | 'rejected'} [status] 
+     * @param {'pending' | 'queued' | 'sent' | 'delivered' | 'failed' | 'bounced' | 'rejected' | 'suppressed'} [status] 
      * @param {string} [tag] 
      * @param {number} [limit] 
      * @param {number} [offset] 
@@ -450,6 +450,7 @@ export const ListEmailsStatusEnum = {
     DELIVERED: 'delivered',
     FAILED: 'failed',
     BOUNCED: 'bounced',
-    REJECTED: 'rejected'
+    REJECTED: 'rejected',
+    SUPPRESSED: 'suppressed'
 } as const;
 export type ListEmailsStatusEnum = typeof ListEmailsStatusEnum[keyof typeof ListEmailsStatusEnum];

package/src/src/models/EmailMessage.ts

@@ -57,6 +57,13 @@ export interface EmailMessage {
      * @memberof EmailMessage
      */
     status?: EmailMessageStatusEnum;
+    /**
+     * Why the message is in its current status, when applicable. For a `suppressed` row this is the suppression reason (e.g. `recipient_not_allowlisted` when blocked by the auth application's test_recipients allowlist). Null for normal sends.
+     * 
+     * @type {string}
+     * @memberof EmailMessage
+     */
+    statusReason?: string | null;
     /**
      * 
      * @type {Array<string>}
@@ -118,7 +125,8 @@ export const EmailMessageStatusEnum = {
     DELIVERED: 'delivered',
     FAILED: 'failed',
     BOUNCED: 'bounced',
-    REJECTED: 'rejected'
+    REJECTED: 'rejected',
+    SUPPRESSED: 'suppressed'
 } as const;
 export type EmailMessageStatusEnum = typeof EmailMessageStatusEnum[keyof typeof EmailMessageStatusEnum];
 
@@ -145,6 +153,7 @@ export function EmailMessageFromJSONTyped(json: any, ignoreDiscriminator: boolea
         'to': json['to'] == null ? undefined : EmailAddressFromJSON(json['to']),
         'subject': json['subject'] == null ? undefined : json['subject'],
         'status': json['status'] == null ? undefined : json['status'],
+        'statusReason': json['status_reason'] == null ? undefined : json['status_reason'],
         'tags': json['tags'] == null ? undefined : json['tags'],
         'queuedAt': json['queued_at'] == null ? undefined : (new Date(json['queued_at'])),
         'sentAt': json['sent_at'] == null ? undefined : (new Date(json['sent_at'])),
@@ -172,6 +181,7 @@ export function EmailMessageToJSONTyped(value?: EmailMessage | null, ignoreDiscr
         'to': EmailAddressToJSON(value['to']),
         'subject': value['subject'],
         'status': value['status'],
+        'status_reason': value['statusReason'],
         'tags': value['tags'],
         'queued_at': value['queuedAt'] == null ? undefined : ((value['queuedAt']).toISOString()),
         'sent_at': value['sentAt'] == null ? undefined : ((value['sentAt'] as any).toISOString()),