@zyphr-dev/node-sdk 0.1.50 → 0.1.51

package/dist/index.d.cts

@@ -12527,6 +12527,12 @@ interface PasswordPolicy {
      * @memberof PasswordPolicy
      */
     disallowCommon: boolean;
+    /**
+     * Whether passwords found in the HaveIBeenPwned breach corpus are rejected at registration/reset. Checked via k-anonymity (only a 5-char SHA-1 prefix leaves our infrastructure) and fail-open: if the breach source is unavailable the password is allowed. Default false (advisory only — the breach signal is returned but does not gate acceptance unless enabled).
+     * @type {boolean}
+     * @memberof PasswordPolicy
+     */
+    disallowBreached: boolean;
 }
 /**
  * Check if a given object implements the PasswordPolicy interface.
@@ -12635,13 +12641,25 @@ declare function PasswordRequirementsResponseToJSONTyped(value?: PasswordRequire
  */
 interface PasswordStrength {
     /**
-     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration.
+     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration. When the application enables `disallow_breached`, a breached password is `valid: false` here AND rejected by register/reset (no drift).
      * @type {boolean}
      * @memberof PasswordStrength
      */
     valid: boolean;
     /**
-     * Strength score, 0-100.
+     * Whether the password appears in the HaveIBeenPwned breach corpus. This is a distinct signal from `valid` and is always returned regardless of the app's `disallow_breached` setting. Fail-open: if the breach source is unavailable this is `false`.
+     * @type {boolean}
+     * @memberof PasswordStrength
+     */
+    breached: boolean;
+    /**
+     * HIBP occurrence count for the password (0 if not breached or if the breach lookup failed/was unavailable).
+     * @type {number}
+     * @memberof PasswordStrength
+     */
+    breachCount: number;
+    /**
+     * Strength score, 0-100. A pure composition measure — independent of the breach signal.
      * @type {number}
      * @memberof PasswordStrength
      */

package/dist/index.d.ts

@@ -12527,6 +12527,12 @@ interface PasswordPolicy {
      * @memberof PasswordPolicy
      */
     disallowCommon: boolean;
+    /**
+     * Whether passwords found in the HaveIBeenPwned breach corpus are rejected at registration/reset. Checked via k-anonymity (only a 5-char SHA-1 prefix leaves our infrastructure) and fail-open: if the breach source is unavailable the password is allowed. Default false (advisory only — the breach signal is returned but does not gate acceptance unless enabled).
+     * @type {boolean}
+     * @memberof PasswordPolicy
+     */
+    disallowBreached: boolean;
 }
 /**
  * Check if a given object implements the PasswordPolicy interface.
@@ -12635,13 +12641,25 @@ declare function PasswordRequirementsResponseToJSONTyped(value?: PasswordRequire
  */
 interface PasswordStrength {
     /**
-     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration.
+     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration. When the application enables `disallow_breached`, a breached password is `valid: false` here AND rejected by register/reset (no drift).
      * @type {boolean}
      * @memberof PasswordStrength
      */
     valid: boolean;
     /**
-     * Strength score, 0-100.
+     * Whether the password appears in the HaveIBeenPwned breach corpus. This is a distinct signal from `valid` and is always returned regardless of the app's `disallow_breached` setting. Fail-open: if the breach source is unavailable this is `false`.
+     * @type {boolean}
+     * @memberof PasswordStrength
+     */
+    breached: boolean;
+    /**
+     * HIBP occurrence count for the password (0 if not breached or if the breach lookup failed/was unavailable).
+     * @type {number}
+     * @memberof PasswordStrength
+     */
+    breachCount: number;
+    /**
+     * Strength score, 0-100. A pure composition measure — independent of the breach signal.
      * @type {number}
      * @memberof PasswordStrength
      */

package/dist/index.js

@@ -8581,6 +8581,7 @@ function instanceOfPasswordPolicy(value) {
   if (!("requireNumbers" in value) || value["requireNumbers"] === void 0) return false;
   if (!("requireSpecial" in value) || value["requireSpecial"] === void 0) return false;
   if (!("disallowCommon" in value) || value["disallowCommon"] === void 0) return false;
+  if (!("disallowBreached" in value) || value["disallowBreached"] === void 0) return false;
   return true;
 }
 function PasswordPolicyFromJSON(json) {
@@ -8597,7 +8598,8 @@ function PasswordPolicyFromJSONTyped(json, ignoreDiscriminator) {
     "requireLowercase": json["require_lowercase"],
     "requireNumbers": json["require_numbers"],
     "requireSpecial": json["require_special"],
-    "disallowCommon": json["disallow_common"]
+    "disallowCommon": json["disallow_common"],
+    "disallowBreached": json["disallow_breached"]
   };
 }
 function PasswordPolicyToJSON(json) {
@@ -8614,7 +8616,8 @@ function PasswordPolicyToJSONTyped(value, ignoreDiscriminator = false) {
     "require_lowercase": value["requireLowercase"],
     "require_numbers": value["requireNumbers"],
     "require_special": value["requireSpecial"],
-    "disallow_common": value["disallowCommon"]
+    "disallow_common": value["disallowCommon"],
+    "disallow_breached": value["disallowBreached"]
   };
 }
 
@@ -8687,6 +8690,8 @@ var PasswordStrengthLabelEnum = {
 };
 function instanceOfPasswordStrength(value) {
   if (!("valid" in value) || value["valid"] === void 0) return false;
+  if (!("breached" in value) || value["breached"] === void 0) return false;
+  if (!("breachCount" in value) || value["breachCount"] === void 0) return false;
   if (!("score" in value) || value["score"] === void 0) return false;
   if (!("label" in value) || value["label"] === void 0) return false;
   if (!("feedback" in value) || value["feedback"] === void 0) return false;
@@ -8701,6 +8706,8 @@ function PasswordStrengthFromJSONTyped(json, ignoreDiscriminator) {
   }
   return {
     "valid": json["valid"],
+    "breached": json["breached"],
+    "breachCount": json["breach_count"],
     "score": json["score"],
     "label": json["label"],
     "feedback": json["feedback"]
@@ -8715,6 +8722,8 @@ function PasswordStrengthToJSONTyped(value, ignoreDiscriminator = false) {
   }
   return {
     "valid": value["valid"],
+    "breached": value["breached"],
+    "breach_count": value["breachCount"],
     "score": value["score"],
     "label": value["label"],
     "feedback": value["feedback"]