noresponse 9.4.4 → 9.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 52bf0e469211da6bcdaa3def8fae14b509718f9099b95e0caefbcb5dc3d4b790
-  data.tar.gz: b071853ab63121d223b6707fb2c55577d0c932ea1a08b422ed05873107faf719
+  metadata.gz: a38cb0fcaa5a2432b34567ef9cd9f96a97748f8c8573466f4d9bd9ddb0f11266
+  data.tar.gz: 96f6861bbb27d324c5e07e996375b356084892c6992dc6df11add8f5ccf51429
 SHA512:
-  metadata.gz: 72fbb0a9f8444ac044317a62e72c19d21d95767f76caa6304e9dc4204e0647d7e67d0ecbe82858963e98a3dda7214321c370e8b1c6dbcda14ae94e1c8e5dc867
-  data.tar.gz: a0db4c974286509b49ef6c63ca94836a8547736ad3d00a2d50e6928e3f418203b0e5fba31547759710e6c51c1285dca3d5b234999022f86ce25c3694b72475e9
+  metadata.gz: 7fcacf2819e0d838d4ddbfc77ead1998ef526ca89c4b640786148eb30f31a29087b2488de5809541e80718a00abb086c0c11d540664ac64d727c5ec53a4b9083
+  data.tar.gz: e9cd8ab8325646ce2a0c5793f1383b238a7cd6067dc0b5440e0912ee3368b1398c4730e340982e3690f05379d546413e76cd25c413fe10a1023b24543c36301d

data/lib/no_response/accounts.rb

@@ -4278,7 +4278,7 @@ module NoResponse
     }
     def search(request:, retries: nil, timeout_ms: nil, http_headers: nil)
       # search - Search distinct accounts by submitted identifier or account ID
-      # Search distinct accounts observed in retained assessments in this environment. identifier matches an exact, canonical or explicitly selected mailbox form of a submitted email, phone or customer-namespace username. It matches historical retained inputs and returns matched_identifier with the original value and matching assessment. Each row has its newest retained assessment, current account decision when available, retained assessment count, and total distinct-account count. identifier and legacy email are mutually exclusive; account_id and needs_action combine with either using AND. Set needs_action to select accounts with a retained open or in-progress review, or a current review/block account decision without an effective retained account outcome. This filter applies before counting and pagination and adds waiting_for reasons. Current decisions include account list overrides and shared-key scoring and preserve admission holds. Typed identifier search uses stable opaque account order; ordinary and legacy email searches retain newest-seen order. Results are live across pages; each page's items and total share a database snapshot, while current account risk is read separately. Cursors are expiring and bound to scope, operation and filters. Totals are exact below 10000 and capped at 10000. Requires history or investigate authority and identifier-read permission for identifier or email filtering. needs_action additionally requires management scope. Source-discovered associations are not searched and equality is not verified ownership.
+      # Search distinct accounts observed in retained assessments in this environment. identifier matches an exact, canonical or explicitly selected mailbox form of a submitted email, phone or customer-namespace username. It matches historical retained inputs and returns matched_identifier with the original value and matching assessment. Each row has its newest retained assessment, current account decision when available, retained assessment count, and total distinct-account count. identifier and legacy email are mutually exclusive; account_id and needs_action combine with either using AND. Set needs_action to select accounts with a retained open or in-progress review, or a current review/block account decision without an effective retained account outcome. This filter applies before counting and pagination and adds waiting_for reasons. Current decisions include account list overrides and shared-key scoring and preserve admission holds. Typed identifier search uses stable opaque account order; ordinary and legacy email searches retain newest-seen order. Results are live across pages; each page's items and total share a database snapshot, while current account risk is read separately. Cursors are expiring and bound to scope, operation and filters. Totals are exact below 10000 and capped at 10000. Requires history or investigate authority and identifier-read permission for identifier, identifier_expression or email filtering. needs_action additionally requires management scope. Source-discovered associations are not searched and equality is not verified ownership. identifier_expression combines submitted terms with bounded AND/OR, at most 8 raw terms and 3 group levels. Each node selects exactly one of term, and, or. Groups have 2 to 8 operands. Duplicate normalized terms are idempotent and still count toward the limit. identifier_expression, identifier and email are mutually exclusive. Expression results use matched_identifiers with original submitted witnesses and zero-based depth-first term_index. All satisfied unique terms are returned in first-occurrence order. Cursors bind scope, ordered structure, original values, matching modes and all other filters; changing only page limit is allowed. Required expression scope assessment evaluates the whole expression in one retained submission; scope account allows different retained submissions of the same account to satisfy different terms. Both use stable opaque account ordering and distinct-account counting before pagination.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = "#{base_url}/v1/accounts/search"

data/lib/no_response/assessments.rb

@@ -1841,7 +1841,7 @@ module NoResponse
     }
     def search(request:, retries: nil, timeout_ms: nil, http_headers: nil)
       # search - Search assessments across this environment
-      # Search retained assessments created in [from,to), at most 366 days. identifier directly matches that assessment's submitted email, phone or customer-namespace username using exact, canonical or explicitly selected email mailbox matching. matched_identifier explains the original value and match basis. Legacy email keeps its account-wide mailbox semantics and cannot be combined with identifier. Other filters combine using AND and describe assessment decisions, separate from current account decisions. Each item carries the original submitted identifiers and its first_decision when available. Newest-created order has an assessment-ID tie break. Results are live across pages; each page's total and items use one database snapshot. Totals are exact below 10000 and capped at 10000. Requires history or investigate authority and identifier-read permission for identifier/email filters; detailed mode also requires detailed permission. No Idempotency-Key.
+      # Search retained assessments created in [from,to), at most 366 days. identifier directly matches that assessment's submitted email, phone or customer-namespace username using exact, canonical or explicitly selected email mailbox matching. matched_identifier explains the original value and match basis. Legacy email keeps its account-wide mailbox semantics and cannot be combined with identifier. Other filters combine using AND and describe assessment decisions, separate from current account decisions. Each item carries the original submitted identifiers and its first_decision when available. Newest-created order has an assessment-ID tie break. Results are live across pages; each page's total and items use one database snapshot. Totals are exact below 10000 and capped at 10000. Requires history or investigate authority and identifier-read permission for identifier, identifier_expression or email filters; detailed mode also requires detailed permission. No Idempotency-Key. identifier_expression combines submitted terms with bounded AND/OR, at most 8 raw terms and 3 group levels. Each node selects exactly one of term, and, or. Groups have 2 to 8 operands. Duplicate normalized terms are idempotent and still count toward the limit. identifier_expression, identifier and email are mutually exclusive. Expression results use matched_identifiers with original submitted witnesses and zero-based depth-first term_index. All satisfied unique terms are returned in first-occurrence order. Cursors bind scope, ordered structure, original values, matching modes and all other filters; changing only page limit is allowed. Expression scope must be assessment: each returned assessment itself satisfies the complete expression. Scope account is rejected with 400 invalid_request; use account search for historical combinations.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = "#{base_url}/v1/assessments/search"

data/lib/no_response/models/shared/accountdirectorypageitem.rb

@@ -45,6 +45,12 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::IdentifierMatch),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("matched_identifier")}}
         )
+        # Present only for identifier_expression. All satisfied unique terms, ordered by term_index, with original submitted values and retained assessment witnesses. A duplicate normalized term appears once at its first raw leaf index. The legacy single identifier filter instead returns matched_identifier.
+        field(
+          :matched_identifiers,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierTermMatch)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("matched_identifiers")}}
+        )
 
         sig {
           params(
@@ -53,17 +59,27 @@ module NoResponse
             assessments: ::Integer,
             waiting_for: T.nilable(T::Array[Models::Shared::WaitingFor]),
             current: T.nilable(Models::Shared::Account),
-            matched_identifier: T.nilable(Models::Shared::IdentifierMatch)
+            matched_identifier: T.nilable(Models::Shared::IdentifierMatch),
+            matched_identifiers: T.nilable(T::Array[Models::Shared::IdentifierTermMatch])
           )
             .void
         }
-        def initialize(account_id:, latest:, assessments:, waiting_for: nil, current: nil, matched_identifier: nil)
+        def initialize(
+          account_id:,
+          latest:,
+          assessments:,
+          waiting_for: nil,
+          current: nil,
+          matched_identifier: nil,
+          matched_identifiers: nil
+        )
           @account_id = account_id
           @latest = latest
           @assessments = assessments
           @waiting_for = waiting_for
           @current = current
           @matched_identifier = matched_identifier
+          @matched_identifiers = matched_identifiers
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -75,6 +91,7 @@ module NoResponse
           return false unless @waiting_for == other.waiting_for
           return false unless @current == other.current
           return false unless @matched_identifier == other.matched_identifier
+          return false unless @matched_identifiers == other.matched_identifiers
           true
         end
       end

data/lib/no_response/models/shared/accountdirectorypageitem.rbi

@@ -41,4 +41,10 @@ class NoResponse::Models::Shared::AccountDirectoryPageItem
 
   def matched_identifier=(str_)
   end
+
+  def matched_identifiers
+  end
+
+  def matched_identifiers=(str_)
+  end
 end

data/lib/no_response/models/shared/accountdirectorysearchrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Bounded distinct-account search for one authenticated workspace/environment. identifier matches any retained admitted assessment of an account, including historical submitted values. email preserves the legacy canonical-mailbox filter. identifier and email cannot be combined. All other filters combine using AND. Typed identifier search uses stable opaque account order; ordinary and legacy email searches retain newest-seen ordering. Pages are live, not a cross-page snapshot. Requires history or investigate authority and identifier-read permission for identifier or email filtering.
+      # Bounded distinct-account search for one authenticated workspace/environment. identifier matches any retained admitted assessment of an account, including historical submitted values. email preserves the legacy canonical-mailbox filter. identifier and email cannot be combined. All other filters combine using AND. Typed identifier search uses stable opaque account order; ordinary and legacy email searches retain newest-seen ordering. Pages are live, not a cross-page snapshot. Requires history or investigate authority and identifier-read permission for identifier, identifier_expression or email filtering. identifier_expression explicitly chooses scope assessment (one whole matching submission) or account (terms may match different retained submissions of one account). At most 8 raw terms and 3 group levels. Mutually exclusive with identifier and email. Expression search uses the same stable opaque account order as typed identifier search.
       class AccountDirectorySearchRequest
         extend T::Sig
         include Crystalline::MetadataFields
@@ -21,7 +21,7 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("email")}}
         )
-        # Opaque, expiring cursor bound to this environment, operation and every filter. Keep the filters unchanged.
+        # Opaque, expiring cursor bound to workspace, environment, operation and all filters, including expression scope, ordered structure and original term values. Keep grouping, operand order, matching modes and values unchanged; an omitted match is equivalent to exact. The page limit may change.
         field(
           :cursor,
           Crystalline::Nilable.new(::String),
@@ -33,6 +33,12 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::IdentifierSearch),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("identifier")}}
         )
+        # A bounded AND/OR expression over submitted identifiers. Required scope assessment means the entire expression must match one retained assessment. Scope account permits each term to match a different retained assessment of the same account and is accepted only by account search. Exactly one of term, and or or is allowed at every node. Groups contain 2 to 8 operands, with at most 3 nested group levels and 8 raw term occurrences over the entire expression. A root term is allowed. Duplicate terms with the same kind, match rule, namespace and normalized comparison are idempotent, but count toward the raw limit. Match rules default to exact and preserve the existing identifier contract. Only retained submitted identifiers can satisfy a term. Unknown fields, unsupported scopes and malformed or oversized expressions return 400 invalid_request.
+        field(
+          :identifier_expression,
+          Crystalline::Nilable.new(Models::Shared::IdentifierExpression),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("identifier_expression")}}
+        )
         # Select accounts with a retained open or in-progress review, or a current review/block account decision with no retained effective account outcome. The server applies this filter before counting and pagination. Requires reviews.read as well as history.read for console members; API keys additionally require management.
         field(
           :needs_action,
@@ -52,16 +58,26 @@ module NoResponse
             email: T.nilable(::String),
             cursor: T.nilable(::String),
             identifier: T.nilable(Models::Shared::IdentifierSearch),
+            identifier_expression: T.nilable(Models::Shared::IdentifierExpression),
             needs_action: T.nilable(T::Boolean),
             limit: T.nilable(::Integer)
           )
             .void
         }
-        def initialize(account_id: nil, email: nil, cursor: nil, identifier: nil, needs_action: false, limit: 25)
+        def initialize(
+          account_id: nil,
+          email: nil,
+          cursor: nil,
+          identifier: nil,
+          identifier_expression: nil,
+          needs_action: false,
+          limit: 25
+        )
           @account_id = account_id
           @email = email
           @cursor = cursor
           @identifier = identifier
+          @identifier_expression = identifier_expression
           @needs_action = needs_action
           @limit = limit
         end
@@ -73,6 +89,7 @@ module NoResponse
           return false unless @email == other.email
           return false unless @cursor == other.cursor
           return false unless @identifier == other.identifier
+          return false unless @identifier_expression == other.identifier_expression
           return false unless @needs_action == other.needs_action
           return false unless @limit == other.limit
           true

data/lib/no_response/models/shared/accountdirectorysearchrequest.rbi

@@ -30,6 +30,12 @@ class NoResponse::Models::Shared::AccountDirectorySearchRequest
   def identifier=(str_)
   end
 
+  def identifier_expression
+  end
+
+  def identifier_expression=(str_)
+  end
+
   def needs_action
   end
 

data/lib/no_response/models/shared/assessmentsearchitem.rb

@@ -76,6 +76,12 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::IdentifierMatch),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("matched_identifier")}}
         )
+        # Present only for identifier_expression. All satisfied unique terms, ordered by term_index, with original submitted values and retained assessment witnesses. A duplicate normalized term appears once at its first raw leaf index. The legacy single identifier filter instead returns matched_identifier.
+        field(
+          :matched_identifiers,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierTermMatch)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("matched_identifiers")}}
+        )
 
         sig {
           params(
@@ -86,7 +92,8 @@ module NoResponse
             detail: Models::Shared::AssessmentDetail,
             schema_version: ::String,
             first_decision: T.nilable(Models::Shared::Decision),
-            matched_identifier: T.nilable(Models::Shared::IdentifierMatch)
+            matched_identifier: T.nilable(Models::Shared::IdentifierMatch),
+            matched_identifiers: T.nilable(T::Array[Models::Shared::IdentifierTermMatch])
           )
             .void
         }
@@ -98,7 +105,8 @@ module NoResponse
           detail:,
           schema_version: "1",
           first_decision: nil,
-          matched_identifier: nil
+          matched_identifier: nil,
+          matched_identifiers: nil
         )
           @id = id
           @status = status
@@ -112,6 +120,7 @@ module NoResponse
           @schema_version = "1"
           @first_decision = first_decision
           @matched_identifier = matched_identifier
+          @matched_identifiers = matched_identifiers
         end
 
         sig { params(other: T.untyped).returns(T::Boolean) }
@@ -125,6 +134,7 @@ module NoResponse
           return false unless @schema_version == other.schema_version
           return false unless @first_decision == other.first_decision
           return false unless @matched_identifier == other.matched_identifier
+          return false unless @matched_identifiers == other.matched_identifiers
           true
         end
       end

data/lib/no_response/models/shared/assessmentsearchitem.rbi

@@ -53,4 +53,10 @@ class NoResponse::Models::Shared::AssessmentSearchItem
 
   def matched_identifier=(str_)
   end
+
+  def matched_identifiers
+  end
+
+  def matched_identifiers=(str_)
+  end
 end

data/lib/no_response/models/shared/assessmentsearchrequest.rb

@@ -4,7 +4,7 @@
 module NoResponse
   module Models
     module Shared
-      # Search retained assessments created in [from,to), at most 366 days. identifier matches the submitted value of each returned assessment directly. The legacy email filter keeps its account-wide mailbox semantics and cannot be combined with identifier. Other filters combine using AND and describe assessment decisions, separate from current account decisions. Results use newest-created order with an assessment-ID tie break and are live, not a snapshot across pages. Requires history or investigate authority; identifier/email filtering also requires identifier-read permission. Detailed response mode additionally requires detailed permission. No Idempotency-Key.
+      # Search retained assessments created in [from,to), at most 366 days. identifier matches the submitted value of each returned assessment directly. The legacy email filter keeps its account-wide mailbox semantics and cannot be combined with identifier. Other filters combine using AND and describe assessment decisions, separate from current account decisions. Results use newest-created order with an assessment-ID tie break and are live, not a snapshot across pages. Requires history or investigate authority; identifier, identifier_expression and email filtering also require identifier-read permission. Detailed response mode additionally requires detailed permission. No Idempotency-Key. identifier_expression requires scope assessment and matches the complete expression within each returned submission; account scope returns 400 invalid_request. At most 8 raw terms and 3 group levels. Mutually exclusive with identifier and email.
       class AssessmentSearchRequest
         extend T::Sig
         include Crystalline::MetadataFields
@@ -57,7 +57,7 @@ module NoResponse
             }
           }
         )
-        # Opaque, expiring cursor bound to this environment, operation and every filter. Keep the filters unchanged.
+        # Opaque, expiring cursor bound to workspace, environment, operation and all filters, including expression scope, ordered structure and original term values. Keep grouping, operand order, matching modes and values unchanged; an omitted match is equivalent to exact. The page limit may change.
         field(
           :cursor,
           Crystalline::Nilable.new(::String),
@@ -187,6 +187,12 @@ module NoResponse
           Crystalline::Nilable.new(Models::Shared::IdentifierSearch),
           {'format_json': {'letter_case': ::NoResponse::Utils.field_name("identifier")}}
         )
+        # A bounded AND/OR expression over submitted identifiers. Required scope assessment means the entire expression must match one retained assessment. Scope account permits each term to match a different retained assessment of the same account and is accepted only by account search. Exactly one of term, and or or is allowed at every node. Groups contain 2 to 8 operands, with at most 3 nested group levels and 8 raw term occurrences over the entire expression. A root term is allowed. Duplicate terms with the same kind, match rule, namespace and normalized comparison are idempotent, but count toward the raw limit. Match rules default to exact and preserve the existing identifier contract. Only retained submitted identifiers can satisfy a term. Unknown fields, unsupported scopes and malformed or oversized expressions return 400 invalid_request.
+        field(
+          :identifier_expression,
+          Crystalline::Nilable.new(Models::Shared::IdentifierExpression),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("identifier_expression")}}
+        )
 
         field(
           :limit,
@@ -218,6 +224,7 @@ module NoResponse
             list_match: T.nilable(Models::Shared::ListMatch),
             changed: T.nilable(T::Boolean),
             identifier: T.nilable(Models::Shared::IdentifierSearch),
+            identifier_expression: T.nilable(Models::Shared::IdentifierExpression),
             limit: T.nilable(::Integer)
           )
             .void
@@ -245,6 +252,7 @@ module NoResponse
           list_match: nil,
           changed: nil,
           identifier: nil,
+          identifier_expression: nil,
           limit: 20
         )
           @from = from
@@ -269,6 +277,7 @@ module NoResponse
           @list_match = list_match
           @changed = changed
           @identifier = identifier
+          @identifier_expression = identifier_expression
           @limit = limit
         end
 
@@ -297,6 +306,7 @@ module NoResponse
           return false unless @list_match == other.list_match
           return false unless @changed == other.changed
           return false unless @identifier == other.identifier
+          return false unless @identifier_expression == other.identifier_expression
           return false unless @limit == other.limit
           true
         end

data/lib/no_response/models/shared/assessmentsearchrequest.rbi

@@ -138,6 +138,12 @@ class NoResponse::Models::Shared::AssessmentSearchRequest
   def identifier=(str_)
   end
 
+  def identifier_expression
+  end
+
+  def identifier_expression=(str_)
+  end
+
   def limit
   end
 

data/lib/no_response/models/shared/identifierexpression.rb

@@ -0,0 +1,47 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+      # A bounded AND/OR expression over submitted identifiers. Required scope assessment means the entire expression must match one retained assessment. Scope account permits each term to match a different retained assessment of the same account and is accepted only by account search. Exactly one of term, and or or is allowed at every node. Groups contain 2 to 8 operands, with at most 3 nested group levels and 8 raw term occurrences over the entire expression. A root term is allowed. Duplicate terms with the same kind, match rule, namespace and normalized comparison are idempotent, but count toward the raw limit. Match rules default to exact and preserve the existing identifier contract. Only retained submitted identifiers can satisfy a term. Unknown fields, unsupported scopes and malformed or oversized expressions return 400 invalid_request.
+      class IdentifierExpression
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # assessment requires one submission to satisfy the complete expression. account permits witnesses across retained submissions of one account and is supported only by POST /v1/accounts/search. No default: select scope explicitly.
+        field(
+          :scope,
+          Models::Shared::ScopeEnum,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("scope"),
+              required: true,
+              'decoder': ::NoResponse::Utils.enum_from_string(Models::Shared::ScopeEnum, false)
+            }
+          }
+        )
+
+        field(
+          :expression,
+          Models::Shared::IdentifierExpressionNode,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("expression"), required: true}}
+        )
+
+        sig { params(scope: Models::Shared::ScopeEnum, expression: Models::Shared::IdentifierExpressionNode).void }
+        def initialize(scope:, expression:)
+          @scope = scope
+          @expression = expression
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @scope == other.scope
+          return false unless @expression == other.expression
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifierexpression.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierExpression
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierExpression
+  def scope
+  end
+
+  def scope=(str_)
+  end
+
+  def expression
+  end
+
+  def expression=(str_)
+  end
+end

data/lib/no_response/models/shared/identifierexpressionleaf.rb

@@ -0,0 +1,33 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class IdentifierExpressionLeaf
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts.
+        field(
+          :term,
+          Models::Shared::IdentifierSearch,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("term"), required: true}}
+        )
+
+        sig { params(term: Models::Shared::IdentifierSearch).void }
+        def initialize(term:)
+          @term = term
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @term == other.term
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifierexpressionleaf.rbi

@@ -0,0 +1,14 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierExpressionLeaf
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierExpressionLeaf
+  def term
+  end
+
+  def term=(str_)
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnode.rb

@@ -0,0 +1,56 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class IdentifierExpressionNode
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts.
+        field(
+          :term,
+          Crystalline::Nilable.new(Models::Shared::IdentifierSearch),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("term")}}
+        )
+
+        field(
+          :and_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionNodeLevelTwo)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("and")}}
+        )
+
+        field(
+          :or_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionNodeLevelTwo)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("or")}}
+        )
+
+        sig {
+          params(
+            term: T.nilable(Models::Shared::IdentifierSearch),
+            and_: T.nilable(T::Array[Models::Shared::IdentifierExpressionNodeLevelTwo]),
+            or_: T.nilable(T::Array[Models::Shared::IdentifierExpressionNodeLevelTwo])
+          )
+            .void
+        }
+        def initialize(term: nil, and_: nil, or_: nil)
+          @term = term
+          @and_ = and_
+          @or_ = or_
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @term == other.term
+          return false unless @and_ == other.and_
+          return false unless @or_ == other.or_
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnode.rbi

@@ -0,0 +1,26 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierExpressionNode
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierExpressionNode
+  def term
+  end
+
+  def term=(str_)
+  end
+
+  def and_
+  end
+
+  def and_=(str_)
+  end
+
+  def or_
+  end
+
+  def or_=(str_)
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnodelevelone.rb

@@ -0,0 +1,56 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class IdentifierExpressionNodeLevelOne
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts.
+        field(
+          :term,
+          Crystalline::Nilable.new(Models::Shared::IdentifierSearch),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("term")}}
+        )
+
+        field(
+          :and_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionLeaf)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("and")}}
+        )
+
+        field(
+          :or_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionLeaf)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("or")}}
+        )
+
+        sig {
+          params(
+            term: T.nilable(Models::Shared::IdentifierSearch),
+            and_: T.nilable(T::Array[Models::Shared::IdentifierExpressionLeaf]),
+            or_: T.nilable(T::Array[Models::Shared::IdentifierExpressionLeaf])
+          )
+            .void
+        }
+        def initialize(term: nil, and_: nil, or_: nil)
+          @term = term
+          @and_ = and_
+          @or_ = or_
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @term == other.term
+          return false unless @and_ == other.and_
+          return false unless @or_ == other.or_
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnodelevelone.rbi

@@ -0,0 +1,26 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierExpressionNodeLevelOne
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierExpressionNodeLevelOne
+  def term
+  end
+
+  def term=(str_)
+  end
+
+  def and_
+  end
+
+  def and_=(str_)
+  end
+
+  def or_
+  end
+
+  def or_=(str_)
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnodeleveltwo.rb

@@ -0,0 +1,56 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class IdentifierExpressionNodeLevelTwo
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts.
+        field(
+          :term,
+          Crystalline::Nilable.new(Models::Shared::IdentifierSearch),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("term")}}
+        )
+
+        field(
+          :and_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionNodeLevelOne)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("and")}}
+        )
+
+        field(
+          :or_,
+          Crystalline::Nilable.new(Crystalline::Array.new(Models::Shared::IdentifierExpressionNodeLevelOne)),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("or")}}
+        )
+
+        sig {
+          params(
+            term: T.nilable(Models::Shared::IdentifierSearch),
+            and_: T.nilable(T::Array[Models::Shared::IdentifierExpressionNodeLevelOne]),
+            or_: T.nilable(T::Array[Models::Shared::IdentifierExpressionNodeLevelOne])
+          )
+            .void
+        }
+        def initialize(term: nil, and_: nil, or_: nil)
+          @term = term
+          @and_ = and_
+          @or_ = or_
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @term == other.term
+          return false unless @and_ == other.and_
+          return false unless @or_ == other.or_
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifierexpressionnodeleveltwo.rbi

@@ -0,0 +1,26 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierExpressionNodeLevelTwo
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierExpressionNodeLevelTwo
+  def term
+  end
+
+  def term=(str_)
+  end
+
+  def and_
+  end
+
+  def and_=(str_)
+  end
+
+  def or_
+  end
+
+  def or_=(str_)
+  end
+end

data/lib/no_response/models/shared/identifiertermmatch.rb

@@ -0,0 +1,114 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+      # One satisfied unique term in an identifier expression. term_index is the zero-based depth-first raw leaf position of its first occurrence. Duplicate normalized terms produce one witness. All satisfied unique terms are returned, ordered by term_index, including satisfied terms in an OR branch that was not needed. value preserves the original submitted value in assessment_id. In assessment scope all witnesses belong to the same matching assessment; account search chooses the newest such assessment. In account scope each term uses its newest retained matching assessment, so witnesses may have different assessment IDs. This evidence does not assert ownership or equality between accounts.
+      class IdentifierTermMatch
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field(
+          :kind,
+          Models::Shared::IdentifierSearchKind,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("kind"),
+              required: true,
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::IdentifierSearchKind, false)
+            }
+          }
+        )
+
+        field(
+          :value,
+          ::String,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("value"), required: true}}
+        )
+        # exact compares the original submitted value; canonical uses identifier-specific normalisation; mailbox explicitly selects the email alias rules used by lists.
+        field(
+          :match_basis,
+          Models::Shared::Match,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("match_basis"),
+              required: true,
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::Match, false)
+            }
+          }
+        )
+        # Customer-submitted input. It does not mean the customer or NoResponse verified ownership.
+        field(
+          :provenance,
+          Models::Shared::Provenance,
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("provenance"),
+              required: true,
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::Provenance, false)
+            }
+          }
+        )
+        # Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404.
+        field(
+          :assessment_id,
+          ::String,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assessment_id"), required: true}}
+        )
+        # Zero-based depth-first position of the first occurrence of this normalized term in the submitted expression.
+        field(
+          :term_index,
+          ::Integer,
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("term_index"), required: true}}
+        )
+        # Required for username: the username submitted by this customer in this workspace/environment. It does not name or join a source platform. Omit for email and phone.
+        field(
+          :namespace,
+          Crystalline::Nilable.new(Models::Shared::Namespace),
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("namespace"),
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::Namespace, true)
+            }
+          }
+        )
+
+        sig {
+          params(
+            kind: Models::Shared::IdentifierSearchKind,
+            value: ::String,
+            match_basis: Models::Shared::Match,
+            provenance: Models::Shared::Provenance,
+            assessment_id: ::String,
+            term_index: ::Integer,
+            namespace: T.nilable(Models::Shared::Namespace)
+          )
+            .void
+        }
+        def initialize(kind:, value:, match_basis:, provenance:, assessment_id:, term_index:, namespace: nil)
+          @kind = kind
+          @value = value
+          @match_basis = match_basis
+          @provenance = provenance
+          @assessment_id = assessment_id
+          @term_index = term_index
+          @namespace = namespace
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @kind == other.kind
+          return false unless @value == other.value
+          return false unless @match_basis == other.match_basis
+          return false unless @provenance == other.provenance
+          return false unless @assessment_id == other.assessment_id
+          return false unless @term_index == other.term_index
+          return false unless @namespace == other.namespace
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/identifiertermmatch.rbi

@@ -0,0 +1,50 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::IdentifierTermMatch
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::IdentifierTermMatch
+  def kind
+  end
+
+  def kind=(str_)
+  end
+
+  def value
+  end
+
+  def value=(str_)
+  end
+
+  def match_basis
+  end
+
+  def match_basis=(str_)
+  end
+
+  def provenance
+  end
+
+  def provenance=(str_)
+  end
+
+  def assessment_id
+  end
+
+  def assessment_id=(str_)
+  end
+
+  def term_index
+  end
+
+  def term_index=(str_)
+  end
+
+  def namespace
+  end
+
+  def namespace=(str_)
+  end
+end

data/lib/no_response/models/shared/permissiondeniederrorcode.rb

@@ -10,6 +10,9 @@ module NoResponse
         enums do
           WORKSPACE_FORBIDDEN = new("workspace_forbidden")
           ROLE_FORBIDDEN = new("role_forbidden")
+          EMAIL_UNVERIFIED = new("email_unverified")
+          ONBOARDING_IN_REVIEW = new("onboarding_in_review")
+          ONBOARDING_REFUSED = new("onboarding_refused")
         end
 
         open!

data/lib/no_response/models/shared/scope_enum.rb

@@ -0,0 +1,16 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+      # ScopeEnum - assessment requires one submission to satisfy the complete expression. account permits witnesses across retained submissions of one account and is supported only by POST /v1/accounts/search. No default: select scope explicitly.
+      class ScopeEnum < T::Enum
+        enums do
+          ASSESSMENT = new("assessment")
+          ACCOUNT = new("account")
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/scope_enum.rbi

@@ -0,0 +1,9 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::ScopeEnum
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::ScopeEnum
+end

data/lib/no_response/models/shared.rb

@@ -152,10 +152,16 @@ module NoResponse
       autoload :From, "no_response/models/shared/from.rb"
       autoload :HookPoint, "no_response/models/shared/hookpoint.rb"
       autoload :Identifier, "no_response/models/shared/identifier.rb"
+      autoload :IdentifierExpression, "no_response/models/shared/identifierexpression.rb"
+      autoload :IdentifierExpressionLeaf, "no_response/models/shared/identifierexpressionleaf.rb"
+      autoload :IdentifierExpressionNode, "no_response/models/shared/identifierexpressionnode.rb"
+      autoload :IdentifierExpressionNodeLevelOne, "no_response/models/shared/identifierexpressionnodelevelone.rb"
+      autoload :IdentifierExpressionNodeLevelTwo, "no_response/models/shared/identifierexpressionnodeleveltwo.rb"
       autoload :IdentifierKind, "no_response/models/shared/identifierkind.rb"
       autoload :IdentifierMatch, "no_response/models/shared/identifiermatch.rb"
       autoload :IdentifierSearch, "no_response/models/shared/identifiersearch.rb"
       autoload :IdentifierSearchKind, "no_response/models/shared/identifiersearchkind.rb"
+      autoload :IdentifierTermMatch, "no_response/models/shared/identifiertermmatch.rb"
       autoload :Impact, "no_response/models/shared/impact.rb"
       autoload :IncompleteReason, "no_response/models/shared/incompletereason.rb"
       autoload :IncompleteSource, "no_response/models/shared/incompletesource.rb"
@@ -308,6 +314,7 @@ module NoResponse
       autoload :RiskSummaryPhone, "no_response/models/shared/risksummaryphone.rb"
       autoload :RiskSummaryUsername, "no_response/models/shared/risksummaryusername.rb"
       autoload :Role, "no_response/models/shared/role.rb"
+      autoload :ScopeEnum, "no_response/models/shared/scope_enum.rb"
       autoload :Security, "no_response/models/shared/security.rb"
       autoload :SentIdentifiers, "no_response/models/shared/sentidentifiers.rb"
       autoload :Settings, "no_response/models/shared/settings.rb"

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "9.4.4"
+      @sdk_version = "9.5.1"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 9.4.4 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 9.5.1 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 9.4.4
+  version: 9.5.1
 platform: ruby
 authors:
 - NoResponse
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-29 00:00:00.000000000 Z
+date: 2026-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -969,6 +969,16 @@ files:
 - lib/no_response/models/shared/hookpoint.rbi
 - lib/no_response/models/shared/identifier.rb
 - lib/no_response/models/shared/identifier.rbi
+- lib/no_response/models/shared/identifierexpression.rb
+- lib/no_response/models/shared/identifierexpression.rbi
+- lib/no_response/models/shared/identifierexpressionleaf.rb
+- lib/no_response/models/shared/identifierexpressionleaf.rbi
+- lib/no_response/models/shared/identifierexpressionnode.rb
+- lib/no_response/models/shared/identifierexpressionnode.rbi
+- lib/no_response/models/shared/identifierexpressionnodelevelone.rb
+- lib/no_response/models/shared/identifierexpressionnodelevelone.rbi
+- lib/no_response/models/shared/identifierexpressionnodeleveltwo.rb
+- lib/no_response/models/shared/identifierexpressionnodeleveltwo.rbi
 - lib/no_response/models/shared/identifierkind.rb
 - lib/no_response/models/shared/identifierkind.rbi
 - lib/no_response/models/shared/identifiermatch.rb
@@ -977,6 +987,8 @@ files:
 - lib/no_response/models/shared/identifiersearch.rbi
 - lib/no_response/models/shared/identifiersearchkind.rb
 - lib/no_response/models/shared/identifiersearchkind.rbi
+- lib/no_response/models/shared/identifiertermmatch.rb
+- lib/no_response/models/shared/identifiertermmatch.rbi
 - lib/no_response/models/shared/impact.rb
 - lib/no_response/models/shared/impact.rbi
 - lib/no_response/models/shared/incompletereason.rb
@@ -1283,6 +1295,8 @@ files:
 - lib/no_response/models/shared/risksummaryusername.rbi
 - lib/no_response/models/shared/role.rb
 - lib/no_response/models/shared/role.rbi
+- lib/no_response/models/shared/scope_enum.rb
+- lib/no_response/models/shared/scope_enum.rbi
 - lib/no_response/models/shared/security.rb
 - lib/no_response/models/shared/security.rbi
 - lib/no_response/models/shared/sentidentifiers.rb