@zyphr-dev/node-sdk 0.1.65 → 0.1.67

package/dist/index.cjs

@@ -3640,7 +3640,9 @@ function ApplicationSelfResponseToJSONTyped(value, ignoreDiscriminator = false)
 var AuthEmailType = {
   MAGIC_LINK: "magic_link",
   PASSWORD_RESET: "password_reset",
-  EMAIL_VERIFICATION: "email_verification"
+  EMAIL_VERIFICATION: "email_verification",
+  EMAIL_OTP: "email_otp",
+  INVITATION: "invitation"
 };
 function instanceOfAuthEmailType(value) {
   for (const key in AuthEmailType) {
@@ -4812,7 +4814,9 @@ function BulkUpsertAuthEmailTemplatesRequestFromJSONTyped(json, ignoreDiscrimina
   return {
     "magicLink": json["magic_link"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["magic_link"]),
     "passwordReset": json["password_reset"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["password_reset"]),
-    "emailVerification": json["email_verification"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["email_verification"])
+    "emailVerification": json["email_verification"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["email_verification"]),
+    "emailOtp": json["email_otp"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["email_otp"]),
+    "invitation": json["invitation"] == null ? void 0 : UpsertAuthEmailTemplateRequestFromJSON(json["invitation"])
   };
 }
 function BulkUpsertAuthEmailTemplatesRequestToJSON(json) {
@@ -4825,7 +4829,9 @@ function BulkUpsertAuthEmailTemplatesRequestToJSONTyped(value, ignoreDiscriminat
   return {
     "magic_link": UpsertAuthEmailTemplateRequestToJSON(value["magicLink"]),
     "password_reset": UpsertAuthEmailTemplateRequestToJSON(value["passwordReset"]),
-    "email_verification": UpsertAuthEmailTemplateRequestToJSON(value["emailVerification"])
+    "email_verification": UpsertAuthEmailTemplateRequestToJSON(value["emailVerification"]),
+    "email_otp": UpsertAuthEmailTemplateRequestToJSON(value["emailOtp"]),
+    "invitation": UpsertAuthEmailTemplateRequestToJSON(value["invitation"])
   };
 }
 
@@ -9254,6 +9260,7 @@ function InviteEndUser200ResponseToJSONTyped(value, ignoreDiscriminator = false)
 
 // src/src/models/InviteEndUserRequest.ts
 var InviteEndUserRequestSendLinkEnum = {
+  INVITATION: "invitation",
   MAGIC: "magic",
   PASSWORD_RESET: "password_reset",
   NONE: "none"
@@ -9669,8 +9676,10 @@ function MagicLinkVerifyResponseDataFromJSONTyped(json, ignoreDiscriminator) {
     return json;
   }
   return {
+    "mfaRequired": json["mfa_required"] == null ? void 0 : json["mfa_required"],
     "user": json["user"] == null ? void 0 : AuthUserFromJSON(json["user"]),
     "tokens": json["tokens"] == null ? void 0 : AuthTokensFromJSON(json["tokens"]),
+    "mfaChallenge": json["mfa_challenge"] == null ? void 0 : AuthLoginResultMfaChallengeFromJSON(json["mfa_challenge"]),
     "isNewUser": json["is_new_user"] == null ? void 0 : json["is_new_user"]
   };
 }
@@ -9682,8 +9691,10 @@ function MagicLinkVerifyResponseDataToJSONTyped(value, ignoreDiscriminator = fal
     return value;
   }
   return {
+    "mfa_required": value["mfaRequired"],
     "user": AuthUserToJSON(value["user"]),
     "tokens": AuthTokensToJSON(value["tokens"]),
+    "mfa_challenge": AuthLoginResultMfaChallengeToJSON(value["mfaChallenge"]),
     "is_new_user": value["isNewUser"]
   };
 }
@@ -20117,7 +20128,7 @@ var AuthEmailOTPApi = class extends BaseAPI {
 // src/src/apis/AuthEmailTemplatesApi.ts
 var AuthEmailTemplatesApi = class extends BaseAPI {
   /**
-   * Atomic upsert of any subset of magic_link, password_reset, email_verification. Validates all inputs before any write; if any one fails validation or MJML compile, none are saved. Designed for one-shot migration imports from Auth0/Firebase/Clerk/Cognito. 
+   * Atomic upsert of any subset of magic_link, password_reset, email_verification, email_otp, invitation. Validates all inputs before any write; if any one fails validation or MJML compile, none are saved. Designed for one-shot migration imports from Auth0/Firebase/Clerk/Cognito. 
    * Bulk-upsert auth email templates
    */
   async bulkUpsertAuthEmailTemplatesRaw(requestParameters, initOverrides) {
@@ -20156,7 +20167,7 @@ var AuthEmailTemplatesApi = class extends BaseAPI {
     return new JSONApiResponse(response, (jsonValue) => BulkUpsertAuthEmailTemplatesResponseFromJSON(jsonValue));
   }
   /**
-   * Atomic upsert of any subset of magic_link, password_reset, email_verification. Validates all inputs before any write; if any one fails validation or MJML compile, none are saved. Designed for one-shot migration imports from Auth0/Firebase/Clerk/Cognito. 
+   * Atomic upsert of any subset of magic_link, password_reset, email_verification, email_otp, invitation. Validates all inputs before any write; if any one fails validation or MJML compile, none are saved. Designed for one-shot migration imports from Auth0/Firebase/Clerk/Cognito. 
    * Bulk-upsert auth email templates
    */
   async bulkUpsertAuthEmailTemplates(bulkUpsertAuthEmailTemplatesRequest, initOverrides) {
@@ -21165,7 +21176,7 @@ var AuthMagicLinksApi = class extends BaseAPI {
     return await response.value();
   }
   /**
-   * Verify a magic link token and authenticate the user. Returns auth result with is_new_user flag.
+   * Verify a magic link token and authenticate the user. Returns auth result with is_new_user flag. A magic link is a single factor, so a user who has enrolled MFA gets `mfa_required: true` and an `mfa_challenge` instead of tokens; complete the login with the challenge token at `POST /auth/mfa/verify`, exactly as after password login.
    * Verify a magic link
    */
   async verifyMagicLinkRaw(requestParameters, initOverrides) {
@@ -21204,7 +21215,7 @@ var AuthMagicLinksApi = class extends BaseAPI {
     return new JSONApiResponse(response, (jsonValue) => MagicLinkVerifyResponseFromJSON(jsonValue));
   }
   /**
-   * Verify a magic link token and authenticate the user. Returns auth result with is_new_user flag.
+   * Verify a magic link token and authenticate the user. Returns auth result with is_new_user flag. A magic link is a single factor, so a user who has enrolled MFA gets `mfa_required: true` and an `mfa_challenge` instead of tokens; complete the login with the challenge token at `POST /auth/mfa/verify`, exactly as after password login.
    * Verify a magic link
    */
   async verifyMagicLink(magicLinkVerifyRequest, initOverrides) {
@@ -23184,7 +23195,7 @@ var AuthUserDirectoryApi = class extends BaseAPI {
     return await response.value();
   }
   /**
-   * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
+   * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"invitation\"` sends the `invitation` auth email: a   set-password link (valid 7 days) redeemed at   `POST /auth/reset-password`, so the invitee ends up with a password.   It has its own per-application template, separate from password   reset\'s. Not sent to an identity that can already sign in. - `send_link: \"password_reset\"` sends a set-password email using the   password-reset template. - `send_link: \"magic\"` sends a magic-link sign-in email. The user   still has no credential afterwards. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required whenever `send_link` is not \"none\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
    * Pre-provision (invite) an end user (server-side admin)
    */
   async inviteEndUserRaw(requestParameters, initOverrides) {
@@ -23223,7 +23234,7 @@ var AuthUserDirectoryApi = class extends BaseAPI {
     return new JSONApiResponse(response, (jsonValue) => InviteEndUser200ResponseFromJSON(jsonValue));
   }
   /**
-   * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"magic\"` sends a magic-link sign-in email. - `send_link: \"password_reset\"` sends a set-password email. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required when `send_link` is \"magic\" or \"password_reset\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
+   * Secret-key-scoped pre-provisioning for an end user. Creates a passwordless user in the authenticating application (idempotent on email — an existing, non-deleted user is reused, not duplicated) and, when `send_link` is set, sends a first-login link so the user can set up their account without self-registration.  - `send_link: \"invitation\"` sends the `invitation` auth email: a   set-password link (valid 7 days) redeemed at   `POST /auth/reset-password`, so the invitee ends up with a password.   It has its own per-application template, separate from password   reset\'s. Not sent to an identity that can already sign in. - `send_link: \"password_reset\"` sends a set-password email using the   password-reset template. - `send_link: \"magic\"` sends a magic-link sign-in email. The user   still has no credential afterwards. - `send_link: \"none\"` (default) creates the user with no email.  A `redirect_url` is required whenever `send_link` is not \"none\"; it must match the application\'s redirect_uris allowlist (custom schemes such as yourapp://path are permitted). 
    * Pre-provision (invite) an end user (server-side admin)
    */
   async inviteEndUser(inviteEndUserRequest, initOverrides) {
@@ -30888,6 +30899,13 @@ var Zyphr = class {
    * facade, which made the documented `zyphr.workflows.*` calls throw.
    */
   workflows;
+  /**
+   * A single workflow execution by id: get its status and step results, cancel
+   * it while running, or retry it after a failure (#1866). List a workflow's
+   * executions with `workflows.listWorkflowExecutions`. Requires the
+   * `workflows:read` scope for reads and `workflows:execute` for cancel/retry.
+   */
+  executions;
   /** Inbound (received) email — read access. Requires the `email:read` scope. */
   inbound;
   waas;
@@ -30917,6 +30935,7 @@ var Zyphr = class {
     this.utility = new UtilityApi(config);
     this.domains = new DomainsApi(config);
     this.workflows = new WorkflowsApi(config);
+    this.executions = new ExecutionsApi(config);
     this.inbound = new InboundEmailApi(config);
     this.waas = {
       applications: new WaaSApplicationsApi(config),
@@ -30943,7 +30962,8 @@ var Zyphr = class {
       profile: new AuthUserProfileApi(config),
       userDirectory: new AuthUserDirectoryApi(config),
       webauthn: new AuthWebAuthnApi(config),
-      application: new AuthApplicationApi(config)
+      application: new AuthApplicationApi(config),
+      emailTemplates: new AuthEmailTemplatesApi(config)
     };
   }
   /**