noresponse 9.2.0 → 9.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8953e9efde2a1afc67354b14a01cbe5839454a6920f6603d2f072aaf5649d777
-  data.tar.gz: 9bc93c249f17aaecf7eaff58c6fa7ffdb4c472b04d45856c8c09260269144acd
+  metadata.gz: 2a7a4007667832081cb401d07ff168481e8b0cdc4d9a04f5f0073e0b90091055
+  data.tar.gz: 395f33f137064474997f8ac4e317f8cc28eeb7985ba59cf4f9a131d6f5bb69d2
 SHA512:
-  metadata.gz: 61d8e3318514097c2d3ccd782403c75facdefd90ecc81ab90c193f001feb610c3badcf766da50b7ddc9b09982b876a81e21386e2d68e027dae0860e3ef0b5361
-  data.tar.gz: 0f0778475a4f26e754af8139f13cae8d08a9e596aea104bc21b0ac0d252d5b03e43b92fa0985e38010bf0c4049402ab5ee1acbfbd51f997d5a032c89684ff9f0
+  metadata.gz: ff44abdfd0eb5e23ec94da15450a264b51ce6cb11a1bd0be5e66fa295fd43594a1d0e3daf2e270cd2bb55970f90bba44a4996d25acdef6b15fde303327412c90
+  data.tar.gz: 450e4088b4029c7f3d33a2be2c3d6e9e184bd540673f4d1d3f740ac59834b0ac77fa4c01a0dbec407b20518456c72bfcc07a1a1da8e3e1dd58c7caee25f00a5f

data/lib/no_response/assessments.rb

@@ -1548,7 +1548,7 @@ module NoResponse
     }
     def aggregate(request:, retries: nil, timeout_ms: nil, http_headers: nil)
       # aggregate - Count assessments by time, decision and reason
-      # Count this environment's assessments created in [from,to) by hour, day or week, grouped by up to two of decision, flow, recommendation, band, reason, lane, country, asn and list_match. Each assessment counts once, by its first answer; late results do not count it again and appear in late_flips. Optional metrics add a score histogram per flow, that histogram by the latest reported outcome, and late account decision changes. from and to start a bucket and cover at most 366 days (31 for hour buckets) inside the retention period. The filters are search's and describe the first answer: send them to search with revision first to list a cell's assessments. Counts hold no identifier, stay when an assessment or account is deleted, and report reasons by code and impact band. No Idempotency-Key.
+      # Count this environment's assessments created in [from,to) by UTC hour, or by day or week from local midnight in time_zone (an IANA name, UTC by default; at most 92 days in a zone other than UTC), grouped by up to two of decision, flow, recommendation, band, reason, lane, country, asn and list_match. Each assessment counts once, by its first answer; late results do not count it again and appear in late_flips. Optional metrics add a score histogram per flow, that histogram by the latest reported outcome, and late account decision changes. from and to start a bucket and cover at most 366 days (31 for hour buckets) inside the retention period. The filters are search's and describe the first answer: send them to search with revision first to list a cell's assessments. Counts hold no identifier, stay when an assessment or account is deleted, and report reasons by code and impact band. No Idempotency-Key.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = "#{base_url}/v1/assessments/aggregate"

data/lib/no_response/models/shared/aggregatebucket.rb

@@ -9,6 +9,7 @@ module NoResponse
         extend T::Sig
         include Crystalline::MetadataFields
 
+        # The bucket's first instant, in UTC. A day or week bucket in a time zone starts at local midnight there, so in Asia/Tokyo a day starts at 15:00Z the day before.
         field(
           :start,
           ::String,

data/lib/no_response/models/shared/assessmentaggregate.rb

@@ -12,7 +12,7 @@ module NoResponse
         field :from, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("from"), required: true}}
 
         field :to, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("to"), required: true}}
-        # The period each count covers, in UTC; a week starts on Monday.
+        # The period each count covers: an hour, or a day or a week (from Monday) in time_zone. Hour buckets are whole UTC hours in any time zone.
         field(
           :bucket,
           Models::Shared::Bucket,
@@ -36,6 +36,12 @@ module NoResponse
           Crystalline::Array.new(Models::Shared::AssessmentAggregateMetric),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("metrics"), required: true}}
         )
+        # The time zone whose local midnight started each day and week bucket, as requested; UTC when the request named none.
+        field(
+          :time_zone,
+          ::String,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("time_zone"), required: true}}
+        )
         # true when more groups had counts than limit allowed.
         field(
           :groups_truncated,
@@ -74,6 +80,7 @@ module NoResponse
             bucket: Models::Shared::Bucket,
             group_by: T::Array[Models::Shared::AggregateDimension],
             metrics: T::Array[Models::Shared::AssessmentAggregateMetric],
+            time_zone: ::String,
             groups_truncated: T::Boolean,
             buckets: T::Array[Models::Shared::AggregateBucket],
             schema_version: ::String,
@@ -88,6 +95,7 @@ module NoResponse
           bucket:,
           group_by:,
           metrics:,
+          time_zone:,
           groups_truncated:,
           buckets:,
           schema_version: "1",
@@ -99,6 +107,7 @@ module NoResponse
           @bucket = bucket
           @group_by = group_by
           @metrics = metrics
+          @time_zone = time_zone
           @groups_truncated = groups_truncated
           @buckets = buckets
           unless schema_version == "1"
@@ -118,6 +127,7 @@ module NoResponse
           return false unless @bucket == other.bucket
           return false unless @group_by == other.group_by
           return false unless @metrics == other.metrics
+          return false unless @time_zone == other.time_zone
           return false unless @groups_truncated == other.groups_truncated
           return false unless @buckets == other.buckets
           return false unless @schema_version == other.schema_version

data/lib/no_response/models/shared/assessmentaggregate.rbi

@@ -36,6 +36,12 @@ class NoResponse::Models::Shared::AssessmentAggregate
   def metrics=(str_)
   end
 
+  def time_zone
+  end
+
+  def time_zone=(str_)
+  end
+
   def groups_truncated
   end
 

data/lib/no_response/models/shared/assessmentaggregaterequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Count this environment's assessments created in [from,to) by bucket, from counts kept as each assessment is first answered, not by scanning assessments. Each assessment counts once, by its first answer (the answer served when it was first answered); later revisions and late results do not count it again, and late_flips counts its later account decision changes. from and to start a bucket (an hour, a UTC day, or a week from Monday 00:00 UTC), cover at most 366 days (31 for hour buckets) and from is inside the retention period. The filters are POST /v1/assessments/search's and describe the first answer, so a cell drills down to search with the same filters, revision first and the cell's bucket as from and to. Counts hold no identifier and stay when an assessment or account is deleted or erased; they expire with retention and go with the workspace. Reasons are counted by code and impact band, not by weight. No Idempotency-Key. Select retained_first_answers for exact facet filters and pairs over retained detail. This mode supports count, score_histogram and score_outcomes, and refuses late_flips. It has a 31-day and 100000-record work budget.
+      # Count this environment's assessments created in [from,to) by bucket, from counts kept as each assessment is first answered, not by scanning assessments. Each assessment counts once, by its first answer (the answer served when it was first answered); later revisions and late results do not count it again, and late_flips counts its later account decision changes. from and to start a bucket (an hour, or a day or a week from Monday that starts at midnight in time_zone, UTC by default), cover at most 366 days (31 for hour buckets, 92 for day and week buckets in a time_zone other than UTC) and from is inside the retention period. The filters are POST /v1/assessments/search's and describe the first answer, so a cell drills down to search with the same filters, revision first and the cell's bucket as from and to. Counts hold no identifier and stay when an assessment or account is deleted or erased; they expire with retention and go with the workspace. Reasons are counted by code and impact band, not by weight. No Idempotency-Key. Select retained_first_answers for exact facet filters and pairs over retained detail. This mode supports count, score_histogram and score_outcomes, and refuses late_flips. It has a 31-day and 100000-record work budget.
       class AssessmentAggregateRequest
         extend T::Sig
         include Crystalline::MetadataFields
@@ -13,7 +13,7 @@ module NoResponse
         field :from, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("from"), required: true}}
         # The end, excluded: the start of the bucket after the last.
         field :to, ::String, {'format_json': {'letter_case': ::NoResponse::Utils.field_name("to"), required: true}}
-        # The period each count covers, in UTC; a week starts on Monday.
+        # The period each count covers: an hour, or a day or a week (from Monday) in time_zone. Hour buckets are whole UTC hours in any time zone.
         field(
           :bucket,
           Models::Shared::Bucket,
@@ -182,6 +182,12 @@ module NoResponse
             }
           }
         )
+        # The IANA time zone whose local midnight starts each day and week bucket, such as Europe/London or Asia/Kolkata; daylight saving changes make those days 23 or 25 hours long. A name the zone database does not know is refused (400 invalid_request naming time_zone). Day and week buckets in a zone other than UTC cover at most 92 days (400 invalid_request naming to); a year of them reads too many hourly counts to answer in time. Hour buckets stay whole UTC hours. Bucket starts, from and to stay instants. With the default population, a zone whose local midnight falls inside a UTC hour (a half-hour offset such as Asia/Kolkata) is refused for day and week buckets, as those counts are kept by the hour; retained_first_answers counts it.
+        field(
+          :time_zone,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("time_zone")}}
+        )
         # The most groups answered: the largest over the whole range, then by value. groups_truncated says when there were more.
         field(
           :limit,
@@ -211,6 +217,7 @@ module NoResponse
             score_min: T.nilable(::Integer),
             score_max: T.nilable(::Integer),
             list_match: T.nilable(Models::Shared::ListMatch),
+            time_zone: T.nilable(::String),
             limit: T.nilable(::Integer)
           )
             .void
@@ -236,6 +243,7 @@ module NoResponse
           score_min: nil,
           score_max: nil,
           list_match: nil,
+          time_zone: "UTC",
           limit: 20
         )
           @from = from
@@ -258,6 +266,7 @@ module NoResponse
           @score_min = score_min
           @score_max = score_max
           @list_match = list_match
+          @time_zone = time_zone
           @limit = limit
         end
 
@@ -284,6 +293,7 @@ module NoResponse
           return false unless @score_min == other.score_min
           return false unless @score_max == other.score_max
           return false unless @list_match == other.list_match
+          return false unless @time_zone == other.time_zone
           return false unless @limit == other.limit
           true
         end

data/lib/no_response/models/shared/assessmentaggregaterequest.rbi

@@ -126,6 +126,12 @@ class NoResponse::Models::Shared::AssessmentAggregateRequest
   def list_match=(str_)
   end
 
+  def time_zone
+  end
+
+  def time_zone=(str_)
+  end
+
   def limit
   end
 

data/lib/no_response/models/shared/bucket.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Bucket - The period each count covers, in UTC; a week starts on Monday.
+      # Bucket - The period each count covers: an hour, or a day or a week (from Monday) in time_zone. Hour buckets are whole UTC hours in any time zone.
       class Bucket
         include ::Crystalline::Enum
         enums do

data/lib/no_response/models/shared/riskdetails.rb

@@ -20,7 +20,7 @@ module NoResponse
           Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::Breach)),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("breaches")}}
         )
-        # Names found next to the identifiers in breach records, merged, with the number of distinct tables each was seen in.
+        # Names found next to the identifiers in breach records, merged, with the number of distinct tables each was seen in and the sites of those tables.
         field(
           :breach_names,
           Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::RiskDetailsBreachName)),

data/lib/no_response/models/shared/riskdetailsbreachname.rb

@@ -20,11 +20,33 @@ module NoResponse
           ::Integer,
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("seen_in"), required: true}}
         )
+        # The domains of the breached sites whose tables hold the name, lower case, each once, newest breach first, at most 32: the domain values of breaches[]. Covers the email's and the username's tables together. Absent when none of the tables has a site.
+        field(
+          :sites,
+          Crystalline::Nilable.new(Crystalline::Array.new(::String)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("sites")}}
+        )
+        # How many of the tables that hold the name have no site, such as a credential list or a stealer log. Absent when none.
+        field(
+          :unsited,
+          Crystalline::Nilable.new(::Integer),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("unsited")}}
+        )
 
-        sig { params(value: ::String, seen_in: ::Integer).void }
-        def initialize(value:, seen_in:)
+        sig {
+          params(
+            value: ::String,
+            seen_in: ::Integer,
+            sites: T.nilable(T::Array[::String]),
+            unsited: T.nilable(::Integer)
+          )
+            .void
+        }
+        def initialize(value:, seen_in:, sites: nil, unsited: nil)
           @value = value
           @seen_in = seen_in
+          @sites = sites
+          @unsited = unsited
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -32,6 +54,8 @@ module NoResponse
           return false unless other.is_a?(self.class)
           return false unless @value == other.value
           return false unless @seen_in == other.seen_in
+          return false unless @sites == other.sites
+          return false unless @unsited == other.unsited
           true
         end
       end

data/lib/no_response/models/shared/riskdetailsbreachname.rbi

@@ -17,4 +17,16 @@ class NoResponse::Models::Shared::RiskDetailsBreachName
 
   def seen_in=(str_)
   end
+
+  def sites
+  end
+
+  def sites=(str_)
+  end
+
+  def unsited
+  end
+
+  def unsited=(str_)
+  end
 end

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "9.2.0"
+      @sdk_version = "9.4.0"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 9.2.0 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 9.4.0 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 9.2.0
+  version: 9.4.0
 platform: ruby
 authors:
 - NoResponse