@zyphr-dev/node-sdk 0.1.50 → 0.1.51

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.50",
+  "version": "0.1.51",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/src/models/PasswordPolicy.ts

@@ -61,6 +61,12 @@ export interface PasswordPolicy {
      * @memberof PasswordPolicy
      */
     disallowCommon: boolean;
+    /**
+     * Whether passwords found in the HaveIBeenPwned breach corpus are rejected at registration/reset. Checked via k-anonymity (only a 5-char SHA-1 prefix leaves our infrastructure) and fail-open: if the breach source is unavailable the password is allowed. Default false (advisory only — the breach signal is returned but does not gate acceptance unless enabled).
+     * @type {boolean}
+     * @memberof PasswordPolicy
+     */
+    disallowBreached: boolean;
 }
 
 /**
@@ -74,6 +80,7 @@ export function instanceOfPasswordPolicy(value: object): value is PasswordPolicy
     if (!('requireNumbers' in value) || value['requireNumbers'] === undefined) return false;
     if (!('requireSpecial' in value) || value['requireSpecial'] === undefined) return false;
     if (!('disallowCommon' in value) || value['disallowCommon'] === undefined) return false;
+    if (!('disallowBreached' in value) || value['disallowBreached'] === undefined) return false;
     return true;
 }
 
@@ -94,6 +101,7 @@ export function PasswordPolicyFromJSONTyped(json: any, ignoreDiscriminator: bool
         'requireNumbers': json['require_numbers'],
         'requireSpecial': json['require_special'],
         'disallowCommon': json['disallow_common'],
+        'disallowBreached': json['disallow_breached'],
     };
 }
 
@@ -115,6 +123,7 @@ export function PasswordPolicyToJSONTyped(value?: PasswordPolicy | null, ignoreD
         'require_numbers': value['requireNumbers'],
         'require_special': value['requireSpecial'],
         'disallow_common': value['disallowCommon'],
+        'disallow_breached': value['disallowBreached'],
     };
 }
 

package/src/src/models/PasswordStrength.ts

@@ -20,13 +20,25 @@ import { mapValues } from '../runtime';
  */
 export interface PasswordStrength {
     /**
-     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration.
+     * Whether the password would be accepted by the server's enforcement path. A password that is valid here is accepted by registration. When the application enables `disallow_breached`, a breached password is `valid: false` here AND rejected by register/reset (no drift).
      * @type {boolean}
      * @memberof PasswordStrength
      */
     valid: boolean;
     /**
-     * Strength score, 0-100.
+     * Whether the password appears in the HaveIBeenPwned breach corpus. This is a distinct signal from `valid` and is always returned regardless of the app's `disallow_breached` setting. Fail-open: if the breach source is unavailable this is `false`.
+     * @type {boolean}
+     * @memberof PasswordStrength
+     */
+    breached: boolean;
+    /**
+     * HIBP occurrence count for the password (0 if not breached or if the breach lookup failed/was unavailable).
+     * @type {number}
+     * @memberof PasswordStrength
+     */
+    breachCount: number;
+    /**
+     * Strength score, 0-100. A pure composition measure — independent of the breach signal.
      * @type {number}
      * @memberof PasswordStrength
      */
@@ -63,6 +75,8 @@ export type PasswordStrengthLabelEnum = typeof PasswordStrengthLabelEnum[keyof t
  */
 export function instanceOfPasswordStrength(value: object): value is PasswordStrength {
     if (!('valid' in value) || value['valid'] === undefined) return false;
+    if (!('breached' in value) || value['breached'] === undefined) return false;
+    if (!('breachCount' in value) || value['breachCount'] === undefined) return false;
     if (!('score' in value) || value['score'] === undefined) return false;
     if (!('label' in value) || value['label'] === undefined) return false;
     if (!('feedback' in value) || value['feedback'] === undefined) return false;
@@ -80,6 +94,8 @@ export function PasswordStrengthFromJSONTyped(json: any, ignoreDiscriminator: bo
     return {
         
         'valid': json['valid'],
+        'breached': json['breached'],
+        'breachCount': json['breach_count'],
         'score': json['score'],
         'label': json['label'],
         'feedback': json['feedback'],
@@ -98,6 +114,8 @@ export function PasswordStrengthToJSONTyped(value?: PasswordStrength | null, ign
     return {
         
         'valid': value['valid'],
+        'breached': value['breached'],
+        'breach_count': value['breachCount'],
         'score': value['score'],
         'label': value['label'],
         'feedback': value['feedback'],