@zyphr-dev/node-sdk 0.1.51 → 0.1.53

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zyphr-dev/node-sdk",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "description": "Official Zyphr SDK for Node.js, React, and React Native",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/.openapi-generator/FILES

@@ -244,6 +244,8 @@ src/models/MfaVerifyEnrollmentResponseData.ts
 src/models/MfaVerifyRequest.ts
 src/models/OAuthAuthorizationUrlResponse.ts
 src/models/OAuthAuthorizationUrlResponseData.ts
+src/models/OAuthAuthorizeResponse.ts
+src/models/OAuthAuthorizeResponseData.ts
 src/models/OAuthCallbackRequest.ts
 src/models/OAuthCallbackResponse.ts
 src/models/OAuthCallbackResponseData.ts
@@ -252,6 +254,8 @@ src/models/OAuthConnectionInfoResponse.ts
 src/models/OAuthConnectionInfoResponseData.ts
 src/models/OAuthConnectionsResponse.ts
 src/models/OAuthConnectionsResponseData.ts
+src/models/OAuthLinkResponse.ts
+src/models/OAuthLinkResponseData.ts
 src/models/OAuthProvider.ts
 src/models/OAuthProviderInfo.ts
 src/models/OAuthProviderName.ts

package/src/src/apis/AuthOAuthApi.ts

@@ -17,10 +17,12 @@ import * as runtime from '../runtime';
 import type {
   ApiError,
   OAuthAuthorizationUrlResponse,
+  OAuthAuthorizeResponse,
   OAuthCallbackRequest,
   OAuthCallbackResponse,
   OAuthConnectionInfoResponse,
   OAuthConnectionsResponse,
+  OAuthLinkResponse,
   OAuthProviderName,
   OAuthProvidersResponse,
   OAuthTokensRefreshResponse,
@@ -33,6 +35,8 @@ import {
     ApiErrorToJSON,
     OAuthAuthorizationUrlResponseFromJSON,
     OAuthAuthorizationUrlResponseToJSON,
+    OAuthAuthorizeResponseFromJSON,
+    OAuthAuthorizeResponseToJSON,
     OAuthCallbackRequestFromJSON,
     OAuthCallbackRequestToJSON,
     OAuthCallbackResponseFromJSON,
@@ -41,6 +45,8 @@ import {
     OAuthConnectionInfoResponseToJSON,
     OAuthConnectionsResponseFromJSON,
     OAuthConnectionsResponseToJSON,
+    OAuthLinkResponseFromJSON,
+    OAuthLinkResponseToJSON,
     OAuthProviderNameFromJSON,
     OAuthProviderNameToJSON,
     OAuthProvidersResponseFromJSON,
@@ -55,6 +61,11 @@ import {
     SuccessResultToJSON,
 } from '../models/index';
 
+export interface AuthOAuthApiCompleteOAuthLinkRequest {
+    provider: OAuthProviderName;
+    oAuthCallbackRequest: OAuthCallbackRequest;
+}
+
 export interface AuthOAuthApiDisconnectOAuthProviderRequest {
     provider: OAuthProviderName;
 }
@@ -83,6 +94,11 @@ export interface AuthOAuthApiRefreshOAuthTokensOperationRequest {
     refreshOAuthTokensRequest: RefreshOAuthTokensRequest;
 }
 
+export interface AuthOAuthApiStartOAuthLinkRequest {
+    provider: OAuthProviderName;
+    redirectUri: string;
+}
+
 /**
  * AuthOAuthApi - interface
  * 
@@ -90,6 +106,23 @@ export interface AuthOAuthApiRefreshOAuthTokensOperationRequest {
  * @interface AuthOAuthApiInterface
  */
 export interface AuthOAuthApiInterface {
+    /**
+     * Complete an authenticated account-linking flow started via the link authorize endpoint. Attaches the resolved provider identity to the current end user. Rejects if the provider identity is already linked to a different account, if the provider did not verify the email, or if the linking session does not belong to the authenticated user. 
+     * @summary Complete linking an OAuth provider to the current account
+     * @param {OAuthProviderName} provider OAuth provider name
+     * @param {OAuthCallbackRequest} oAuthCallbackRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthOAuthApiInterface
+     */
+    completeOAuthLinkRaw(requestParameters: AuthOAuthApiCompleteOAuthLinkRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthLinkResponse>>;
+
+    /**
+     * Complete an authenticated account-linking flow started via the link authorize endpoint. Attaches the resolved provider identity to the current end user. Rejects if the provider identity is already linked to a different account, if the provider did not verify the email, or if the linking session does not belong to the authenticated user. 
+     * Complete linking an OAuth provider to the current account
+     */
+    completeOAuthLink(provider: OAuthProviderName, oAuthCallbackRequest: OAuthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthLinkResponse>;
+
     /**
      * Disconnect an OAuth provider from the current user.
      * @summary Disconnect OAuth provider
@@ -220,6 +253,23 @@ export interface AuthOAuthApiInterface {
      */
     refreshOAuthTokens(provider: OAuthProviderName, refreshOAuthTokensRequest: RefreshOAuthTokensRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthTokensRefreshResponse>;
 
+    /**
+     * Begin an authenticated account-linking flow. Unlike the sign-in authorize endpoint, this binds the current end user into the OAuth state so the matching link callback attaches the returned provider identity to THIS account instead of finding-or-creating a user. Requires an end-user token. 
+     * @summary Start linking an OAuth provider to the current account
+     * @param {OAuthProviderName} provider OAuth provider name
+     * @param {string} redirectUri Redirect URI registered for the application
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthOAuthApiInterface
+     */
+    startOAuthLinkRaw(requestParameters: AuthOAuthApiStartOAuthLinkRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthAuthorizeResponse>>;
+
+    /**
+     * Begin an authenticated account-linking flow. Unlike the sign-in authorize endpoint, this binds the current end user into the OAuth state so the matching link callback attaches the returned provider identity to THIS account instead of finding-or-creating a user. Requires an end-user token. 
+     * Start linking an OAuth provider to the current account
+     */
+    startOAuthLink(provider: OAuthProviderName, redirectUri: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthAuthorizeResponse>;
+
 }
 
 /**
@@ -227,6 +277,63 @@ export interface AuthOAuthApiInterface {
  */
 export class AuthOAuthApi extends runtime.BaseAPI implements AuthOAuthApiInterface {
 
+    /**
+     * Complete an authenticated account-linking flow started via the link authorize endpoint. Attaches the resolved provider identity to the current end user. Rejects if the provider identity is already linked to a different account, if the provider did not verify the email, or if the linking session does not belong to the authenticated user. 
+     * Complete linking an OAuth provider to the current account
+     */
+    async completeOAuthLinkRaw(requestParameters: AuthOAuthApiCompleteOAuthLinkRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthLinkResponse>> {
+        if (requestParameters['provider'] == null) {
+            throw new runtime.RequiredError(
+                'provider',
+                'Required parameter "provider" was null or undefined when calling completeOAuthLink().'
+            );
+        }
+
+        if (requestParameters['oAuthCallbackRequest'] == null) {
+            throw new runtime.RequiredError(
+                'oAuthCallbackRequest',
+                'Required parameter "oAuthCallbackRequest" was null or undefined when calling completeOAuthLink().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("EndUserToken", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key"); // ApplicationPublicKey authentication
+        }
+
+        const response = await this.request({
+            path: `/auth/oauth/{provider}/link/callback`.replace(`{${"provider"}}`, encodeURIComponent(String(requestParameters['provider']))),
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: OAuthCallbackRequestToJSON(requestParameters['oAuthCallbackRequest']),
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => OAuthLinkResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Complete an authenticated account-linking flow started via the link authorize endpoint. Attaches the resolved provider identity to the current end user. Rejects if the provider identity is already linked to a different account, if the provider did not verify the email, or if the linking session does not belong to the authenticated user. 
+     * Complete linking an OAuth provider to the current account
+     */
+    async completeOAuthLink(provider: OAuthProviderName, oAuthCallbackRequest: OAuthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthLinkResponse> {
+        const response = await this.completeOAuthLinkRaw({ provider: provider, oAuthCallbackRequest: oAuthCallbackRequest }, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Disconnect an OAuth provider from the current user.
      * Disconnect OAuth provider
@@ -595,4 +702,62 @@ export class AuthOAuthApi extends runtime.BaseAPI implements AuthOAuthApiInterfa
         return await response.value();
     }
 
+    /**
+     * Begin an authenticated account-linking flow. Unlike the sign-in authorize endpoint, this binds the current end user into the OAuth state so the matching link callback attaches the returned provider identity to THIS account instead of finding-or-creating a user. Requires an end-user token. 
+     * Start linking an OAuth provider to the current account
+     */
+    async startOAuthLinkRaw(requestParameters: AuthOAuthApiStartOAuthLinkRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<OAuthAuthorizeResponse>> {
+        if (requestParameters['provider'] == null) {
+            throw new runtime.RequiredError(
+                'provider',
+                'Required parameter "provider" was null or undefined when calling startOAuthLink().'
+            );
+        }
+
+        if (requestParameters['redirectUri'] == null) {
+            throw new runtime.RequiredError(
+                'redirectUri',
+                'Required parameter "redirectUri" was null or undefined when calling startOAuthLink().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        if (requestParameters['redirectUri'] != null) {
+            queryParameters['redirect_uri'] = requestParameters['redirectUri'];
+        }
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("EndUserToken", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        if (this.configuration && this.configuration.apiKey) {
+            headerParameters["X-Application-Key"] = await this.configuration.apiKey("X-Application-Key"); // ApplicationPublicKey authentication
+        }
+
+        const response = await this.request({
+            path: `/auth/oauth/{provider}/link`.replace(`{${"provider"}}`, encodeURIComponent(String(requestParameters['provider']))),
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        }, initOverrides);
+
+        return new runtime.JSONApiResponse(response, (jsonValue) => OAuthAuthorizeResponseFromJSON(jsonValue));
+    }
+
+    /**
+     * Begin an authenticated account-linking flow. Unlike the sign-in authorize endpoint, this binds the current end user into the OAuth state so the matching link callback attaches the returned provider identity to THIS account instead of finding-or-creating a user. Requires an end-user token. 
+     * Start linking an OAuth provider to the current account
+     */
+    async startOAuthLink(provider: OAuthProviderName, redirectUri: string, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<OAuthAuthorizeResponse> {
+        const response = await this.startOAuthLinkRaw({ provider: provider, redirectUri: redirectUri }, initOverrides);
+        return await response.value();
+    }
+
 }

package/src/src/models/ApplicationSelf.ts

@@ -59,6 +59,12 @@ export interface ApplicationSelf {
      * @memberof ApplicationSelf
      */
     authEmailMode: ApplicationSelfAuthEmailModeEnum;
+    /**
+     * When true (sc-7680), passwords found in the HaveIBeenPwned breach corpus are rejected at register/reset (and returned `valid:false` by `/auth/password-strength`). When false (default), breach info is advisory only. Fail-open: a breach-source outage never blocks auth.
+     * @type {boolean}
+     * @memberof ApplicationSelf
+     */
+    passwordDisallowBreached: boolean;
 }
 
 
@@ -101,6 +107,7 @@ export function instanceOfApplicationSelf(value: object): value is ApplicationSe
     if (!('signingAlgorithm' in value) || value['signingAlgorithm'] === undefined) return false;
     if (!('testRecipients' in value) || value['testRecipients'] === undefined) return false;
     if (!('authEmailMode' in value) || value['authEmailMode'] === undefined) return false;
+    if (!('passwordDisallowBreached' in value) || value['passwordDisallowBreached'] === undefined) return false;
     return true;
 }
 
@@ -120,6 +127,7 @@ export function ApplicationSelfFromJSONTyped(json: any, ignoreDiscriminator: boo
         'signingAlgorithm': json['signing_algorithm'],
         'testRecipients': json['test_recipients'],
         'authEmailMode': json['auth_email_mode'],
+        'passwordDisallowBreached': json['password_disallow_breached'],
     };
 }
 
@@ -140,6 +148,7 @@ export function ApplicationSelfToJSONTyped(value?: ApplicationSelf | null, ignor
         'signing_algorithm': value['signingAlgorithm'],
         'test_recipients': value['testRecipients'],
         'auth_email_mode': value['authEmailMode'],
+        'password_disallow_breached': value['passwordDisallowBreached'],
     };
 }
 

package/src/src/models/OAuthAuthorizeResponse.ts

@@ -0,0 +1,88 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { OAuthAuthorizeResponseData } from './OAuthAuthorizeResponseData';
+import {
+    OAuthAuthorizeResponseDataFromJSON,
+    OAuthAuthorizeResponseDataFromJSONTyped,
+    OAuthAuthorizeResponseDataToJSON,
+    OAuthAuthorizeResponseDataToJSONTyped,
+} from './OAuthAuthorizeResponseData';
+import type { RequestMeta } from './RequestMeta';
+import {
+    RequestMetaFromJSON,
+    RequestMetaFromJSONTyped,
+    RequestMetaToJSON,
+    RequestMetaToJSONTyped,
+} from './RequestMeta';
+
+/**
+ * 
+ * @export
+ * @interface OAuthAuthorizeResponse
+ */
+export interface OAuthAuthorizeResponse {
+    /**
+     * 
+     * @type {OAuthAuthorizeResponseData}
+     * @memberof OAuthAuthorizeResponse
+     */
+    data?: OAuthAuthorizeResponseData;
+    /**
+     * 
+     * @type {RequestMeta}
+     * @memberof OAuthAuthorizeResponse
+     */
+    meta?: RequestMeta;
+}
+
+/**
+ * Check if a given object implements the OAuthAuthorizeResponse interface.
+ */
+export function instanceOfOAuthAuthorizeResponse(value: object): value is OAuthAuthorizeResponse {
+    return true;
+}
+
+export function OAuthAuthorizeResponseFromJSON(json: any): OAuthAuthorizeResponse {
+    return OAuthAuthorizeResponseFromJSONTyped(json, false);
+}
+
+export function OAuthAuthorizeResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuthAuthorizeResponse {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'data': json['data'] == null ? undefined : OAuthAuthorizeResponseDataFromJSON(json['data']),
+        'meta': json['meta'] == null ? undefined : RequestMetaFromJSON(json['meta']),
+    };
+}
+
+export function OAuthAuthorizeResponseToJSON(json: any): OAuthAuthorizeResponse {
+    return OAuthAuthorizeResponseToJSONTyped(json, false);
+}
+
+export function OAuthAuthorizeResponseToJSONTyped(value?: OAuthAuthorizeResponse | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'data': OAuthAuthorizeResponseDataToJSON(value['data']),
+        'meta': RequestMetaToJSON(value['meta']),
+    };
+}
+

package/src/src/models/OAuthAuthorizeResponseData.ts

@@ -0,0 +1,73 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+/**
+ * 
+ * @export
+ * @interface OAuthAuthorizeResponseData
+ */
+export interface OAuthAuthorizeResponseData {
+    /**
+     * Provider authorization URL to redirect the user to
+     * @type {string}
+     * @memberof OAuthAuthorizeResponseData
+     */
+    authorizationUrl?: string;
+    /**
+     * Opaque one-time state token for the callback
+     * @type {string}
+     * @memberof OAuthAuthorizeResponseData
+     */
+    state?: string;
+}
+
+/**
+ * Check if a given object implements the OAuthAuthorizeResponseData interface.
+ */
+export function instanceOfOAuthAuthorizeResponseData(value: object): value is OAuthAuthorizeResponseData {
+    return true;
+}
+
+export function OAuthAuthorizeResponseDataFromJSON(json: any): OAuthAuthorizeResponseData {
+    return OAuthAuthorizeResponseDataFromJSONTyped(json, false);
+}
+
+export function OAuthAuthorizeResponseDataFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuthAuthorizeResponseData {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'authorizationUrl': json['authorization_url'] == null ? undefined : json['authorization_url'],
+        'state': json['state'] == null ? undefined : json['state'],
+    };
+}
+
+export function OAuthAuthorizeResponseDataToJSON(json: any): OAuthAuthorizeResponseData {
+    return OAuthAuthorizeResponseDataToJSONTyped(json, false);
+}
+
+export function OAuthAuthorizeResponseDataToJSONTyped(value?: OAuthAuthorizeResponseData | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'authorization_url': value['authorizationUrl'],
+        'state': value['state'],
+    };
+}
+

package/src/src/models/OAuthLinkResponse.ts

@@ -0,0 +1,88 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { RequestMeta } from './RequestMeta';
+import {
+    RequestMetaFromJSON,
+    RequestMetaFromJSONTyped,
+    RequestMetaToJSON,
+    RequestMetaToJSONTyped,
+} from './RequestMeta';
+import type { OAuthLinkResponseData } from './OAuthLinkResponseData';
+import {
+    OAuthLinkResponseDataFromJSON,
+    OAuthLinkResponseDataFromJSONTyped,
+    OAuthLinkResponseDataToJSON,
+    OAuthLinkResponseDataToJSONTyped,
+} from './OAuthLinkResponseData';
+
+/**
+ * 
+ * @export
+ * @interface OAuthLinkResponse
+ */
+export interface OAuthLinkResponse {
+    /**
+     * 
+     * @type {OAuthLinkResponseData}
+     * @memberof OAuthLinkResponse
+     */
+    data?: OAuthLinkResponseData;
+    /**
+     * 
+     * @type {RequestMeta}
+     * @memberof OAuthLinkResponse
+     */
+    meta?: RequestMeta;
+}
+
+/**
+ * Check if a given object implements the OAuthLinkResponse interface.
+ */
+export function instanceOfOAuthLinkResponse(value: object): value is OAuthLinkResponse {
+    return true;
+}
+
+export function OAuthLinkResponseFromJSON(json: any): OAuthLinkResponse {
+    return OAuthLinkResponseFromJSONTyped(json, false);
+}
+
+export function OAuthLinkResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuthLinkResponse {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'data': json['data'] == null ? undefined : OAuthLinkResponseDataFromJSON(json['data']),
+        'meta': json['meta'] == null ? undefined : RequestMetaFromJSON(json['meta']),
+    };
+}
+
+export function OAuthLinkResponseToJSON(json: any): OAuthLinkResponse {
+    return OAuthLinkResponseToJSONTyped(json, false);
+}
+
+export function OAuthLinkResponseToJSONTyped(value?: OAuthLinkResponse | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'data': OAuthLinkResponseDataToJSON(value['data']),
+        'meta': RequestMetaToJSON(value['meta']),
+    };
+}
+

package/src/src/models/OAuthLinkResponseData.ts

@@ -0,0 +1,81 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Zyphr API
+ * Zyphr is a multi-channel notification platform that enables developers to send emails, push notifications, SMS, and in-app messages through a unified API.  ## Authentication  All API requests require authentication using an API key. Include your API key in the `X-API-Key` header:  ``` X-API-Key: zy_live_xxxxxxxxxxxx ```  API keys can be created in the Zyphr Dashboard. Use `zy_test_*` keys for testing and `zy_live_*` keys for production.  ## Rate Limiting  The API implements rate limiting to ensure fair usage. Rate limit information is included in response headers:  - `X-RateLimit-Limit`: Maximum requests per window - `X-RateLimit-Remaining`: Remaining requests in current window - `X-RateLimit-Reset`: Unix timestamp when the window resets  ## Account Sending Status  Every authenticated response carries the account\'s current sending state so you can surface it in your own tooling without a separate call:  - `X-Account-Sending-Status`: `active`, `throttled`, or `frozen` - `X-Account-Sending-Status-Reason`: human-readable reason (present only when the status is `throttled` or `frozen`)  This header is informational and non-blocking on non-send endpoints (reads, billing, and deliverability stay available). Send-capable endpoints additionally enforce the state: a frozen account receives `403 account_frozen` and a throttled account receives `429 account_throttled`, both with the reason in the error message.  ## Errors  All errors follow a consistent format:  ```json {   \"error\": {     \"code\": \"error_code\",     \"message\": \"Human readable message\",     \"details\": {}   },   \"meta\": {     \"request_id\": \"req_xxxx\"   } } ```
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@zyphr.dev
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+import { mapValues } from '../runtime';
+import type { OAuthProviderInfo } from './OAuthProviderInfo';
+import {
+    OAuthProviderInfoFromJSON,
+    OAuthProviderInfoFromJSONTyped,
+    OAuthProviderInfoToJSON,
+    OAuthProviderInfoToJSONTyped,
+} from './OAuthProviderInfo';
+
+/**
+ * 
+ * @export
+ * @interface OAuthLinkResponseData
+ */
+export interface OAuthLinkResponseData {
+    /**
+     * 
+     * @type {boolean}
+     * @memberof OAuthLinkResponseData
+     */
+    success?: boolean;
+    /**
+     * 
+     * @type {OAuthProviderInfo}
+     * @memberof OAuthLinkResponseData
+     */
+    providerInfo?: OAuthProviderInfo;
+}
+
+/**
+ * Check if a given object implements the OAuthLinkResponseData interface.
+ */
+export function instanceOfOAuthLinkResponseData(value: object): value is OAuthLinkResponseData {
+    return true;
+}
+
+export function OAuthLinkResponseDataFromJSON(json: any): OAuthLinkResponseData {
+    return OAuthLinkResponseDataFromJSONTyped(json, false);
+}
+
+export function OAuthLinkResponseDataFromJSONTyped(json: any, ignoreDiscriminator: boolean): OAuthLinkResponseData {
+    if (json == null) {
+        return json;
+    }
+    return {
+        
+        'success': json['success'] == null ? undefined : json['success'],
+        'providerInfo': json['provider_info'] == null ? undefined : OAuthProviderInfoFromJSON(json['provider_info']),
+    };
+}
+
+export function OAuthLinkResponseDataToJSON(json: any): OAuthLinkResponseData {
+    return OAuthLinkResponseDataToJSONTyped(json, false);
+}
+
+export function OAuthLinkResponseDataToJSONTyped(value?: OAuthLinkResponseData | null, ignoreDiscriminator: boolean = false): any {
+    if (value == null) {
+        return value;
+    }
+
+    return {
+        
+        'success': value['success'],
+        'provider_info': OAuthProviderInfoToJSON(value['providerInfo']),
+    };
+}
+

package/src/src/models/SetSelfApplicationTestRecipientsRequest.ts

@@ -14,7 +14,7 @@
 
 import { mapValues } from '../runtime';
 /**
- * Provide test_recipients and/or auth_email_mode. Omitting one leaves that value unchanged; sending neither is a 400.
+ * Provide any of test_recipients, auth_email_mode, or password_disallow_breached. Omitting one leaves that value unchanged; sending none is a 400. Unknown fields are rejected (400).
  * @export
  * @interface SetSelfApplicationTestRecipientsRequest
  */
@@ -31,6 +31,12 @@ export interface SetSelfApplicationTestRecipientsRequest {
      * @memberof SetSelfApplicationTestRecipientsRequest
      */
     authEmailMode?: SetSelfApplicationTestRecipientsRequestAuthEmailModeEnum;
+    /**
+     * Optional (sc-7680/sc-7697). When true, reject HIBP-breached passwords at register/reset. Omit to leave unchanged.
+     * @type {boolean}
+     * @memberof SetSelfApplicationTestRecipientsRequest
+     */
+    passwordDisallowBreached?: boolean;
 }
 
 
@@ -63,6 +69,7 @@ export function SetSelfApplicationTestRecipientsRequestFromJSONTyped(json: any,
         
         'testRecipients': json['test_recipients'] == null ? undefined : json['test_recipients'],
         'authEmailMode': json['auth_email_mode'] == null ? undefined : json['auth_email_mode'],
+        'passwordDisallowBreached': json['password_disallow_breached'] == null ? undefined : json['password_disallow_breached'],
     };
 }
 
@@ -79,6 +86,7 @@ export function SetSelfApplicationTestRecipientsRequestToJSONTyped(value?: SetSe
         
         'test_recipients': value['testRecipients'],
         'auth_email_mode': value['authEmailMode'],
+        'password_disallow_breached': value['passwordDisallowBreached'],
     };
 }