noresponse 9.5.5 → 10.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a571eb8a27672fc0a2ccf828fc8d820cd60782be2c44d9a3a6edef2256d5bdd9
-  data.tar.gz: a00b6546f815eca9fd77a4851454e16bfe64dfe08b80d7165ad837b56501fb2d
+  metadata.gz: d4580d3276d8e1a6e9b3d9456c55be2baf736602067bf61df070a896ee39903b
+  data.tar.gz: 768921ebf728b70d51b2241e9ec839917f4791d22e0d0b665537b40d9b8a8aea
 SHA512:
-  metadata.gz: 5b5167e7bdd431232ce48412d93f072c86514657987d2241828eb2c3da36150aac5cf098f0bc425fc9fd1d2fd1fc281289c4162940d380ac30d776c89d84fa9c
-  data.tar.gz: 619650ee0d9779ace6d144ad8965b751398a0f4835d22053dbb0d2e0384f98495b98a47118ddf23d781e5ab038687f745c85673bbad81f11fe6a1f4fa1361d24
+  metadata.gz: 88f56f17d0374b4df2a7886ee75ee575198c6cae98cf25042f2d4f72708b4311c301d2e6d1dc0a99c8dbe4cb6652c0f48d6c8f2852f0abe8df7a6c8f319feef9
+  data.tar.gz: 2c988fcfe40dc2d6731842e349a229e32b3bf43489adcf4ccaf0af840256208f804c143622412892f899a0b4fdc4de0a6d28e01d80f0b7af971878419da52eeb

data/lib/no_response/exports.rb

@@ -50,7 +50,7 @@ module NoResponse
     }
     def create(body:, workspace_id:, idempotency_key: nil, timeout_ms: nil, http_headers: nil)
       # create - Request an asynchronous customer export.
-      # Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.
+      # Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope. An account export without legacy history needs investigate with evidence or detailed, because it holds submitted identifiers; detailed account data always needs evidence or detailed. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.
       request = Models::Operations::CreateCustomerExportRequest.new(
         workspace_id: workspace_id,
         body: body,

data/lib/no_response/late_results.rb

@@ -73,26 +73,81 @@ module NoResponse
       # current risk. A delivery that fails verification raises
       # WebhookVerification::VerificationError before anything is read; any
       # other event, and a test event, does nothing.
+      #
+      # with_account_lock serializes enforcement of one account across your
+      # workers. It is called with the account id and a callable: hold an
+      # exclusive lock on the account, call the callable, store the result's
+      # risk_version and any state change, then release the lock. An exception
+      # must propagate. Inside the lock the handler reads the account's risk and
+      # your state again, so a stale event or listed account cannot undo a newer
+      # decision. Without it, overlapping calls can act on an old decision after
+      # a newer one.
       def handle_risk_change(client, payload, headers, secrets, provider:, get_account_state:, flows: {},
-                             tolerance_seconds: WebhookVerification::DEFAULT_TOLERANCE_SECONDS, now: nil)
+                             tolerance_seconds: WebhookVerification::DEFAULT_TOLERANCE_SECONDS, now: nil,
+                             with_account_lock: nil)
         event = WebhookVerification.construct_event(payload, headers, secrets, tolerance_seconds: tolerance_seconds, now: now)
         if event.type != 'account.risk_changed' || (event.respond_to?(:test) && event.test == true)
           return EnforcementResult.new(event: event, skipped: 'not_actionable', enforcements: [])
         end
 
-        begin
-          account = client.accounts.get(account_id: event.data.account.id).result
-        rescue Models::Errors::NotFoundError
-          return EnforcementResult.new(event: event, skipped: 'account_gone', enforcements: [])
-        end
-        result = enforce_account(client, account, provider: provider, get_account_state: get_account_state, flows: flows)
+        result = under_account_lock(client, event.data.account.id, provider, get_account_state, flows, with_account_lock)
         result.event = event
         result
       end
 
-      # Enforce one account as read: the account a handler fetched, or one from
-      # accounts.list_changed(unenforced: true) when catching up.
-      def enforce_account(client, account, provider:, get_account_state:, flows: {})
+      # Enforce one account: the account a handler fetched, or one from
+      # accounts.list_changed(unenforced: true) when catching up. With
+      # with_account_lock the account is read again inside the lock; without it
+      # the account is enforced as given.
+      def enforce_account(client, account, provider:, get_account_state:, flows: {}, with_account_lock: nil)
+        return under_account_lock(client, account.id, provider, get_account_state, flows, with_account_lock) if with_account_lock
+
+        enforce_as_read(client, account, provider, get_account_state, flows)
+      end
+
+      # Clerk, WorkOS or Auth0, run from the shared action table. token is the
+      # Clerk secret key, WorkOS API key or Auth0 Management API token; domain
+      # is the Auth0 tenant domain. Pass http (a Faraday connection) for a proxy or for tests.
+      def identity_provider(name, token:, domain: nil, base_url: nil, http: nil)
+        name = name.to_s
+        spec = TABLE.fetch('providers')[name] or raise ArgumentError, "unknown identity provider #{name.inspect}"
+        raise ArgumentError, "#{name} needs token" if token.to_s.empty?
+
+        base = base_url || spec.fetch('base_url')
+        if base.include?('{domain}')
+          raise ArgumentError, "#{name} needs domain or base_url" if domain.to_s.empty?
+
+          base = base.sub('{domain}', domain)
+        end
+        TableProvider.new(name, spec, base.sub(%r{/+\z}, ''), token, http || Faraday.new(request: { timeout: 10 }))
+      end
+
+      # Your own user store: one callable per action you support, keyed by
+      # action. A callable may return other actions it ran. An action without one fails.
+      def custom_provider(handlers)
+        CustomProvider.new(handlers.transform_keys(&:to_s))
+      end
+
+      private
+
+      # Read the account's current risk and enforce it, inside with_account_lock when you gave one.
+      def under_account_lock(client, account_id, provider, get_account_state, flows, with_account_lock)
+        enforce = lambda do
+          begin
+            account = client.accounts.get(account_id: account_id).result
+          rescue Models::Errors::NotFoundError
+            next EnforcementResult.new(skipped: 'account_gone', enforcements: [])
+          end
+          enforce_as_read(client, account, provider, get_account_state, flows)
+        end
+        return enforce.call unless with_account_lock
+
+        result = nil
+        with_account_lock.call(account_id, -> { result = enforce.call })
+        result or raise 'with_account_lock returned without running enforce'
+      end
+
+      def enforce_as_read(client, account, provider, get_account_state, flows)
         answer = get_account_state.call(account)
         return EnforcementResult.new(account: account, skipped: 'unknown_user', enforcements: []) if answer.nil?
 
@@ -149,31 +204,6 @@ module NoResponse
         EnforcementResult.new(account: account, state: state, risk_version: risk_version, enforcements: enforcements)
       end
 
-      # Clerk, WorkOS or Auth0, run from the shared action table. token is the
-      # Clerk secret key, WorkOS API key or Auth0 Management API token; domain
-      # is the Auth0 tenant domain. Pass http (a Faraday connection) for a proxy or for tests.
-      def identity_provider(name, token:, domain: nil, base_url: nil, http: nil)
-        name = name.to_s
-        spec = TABLE.fetch('providers')[name] or raise ArgumentError, "unknown identity provider #{name.inspect}"
-        raise ArgumentError, "#{name} needs token" if token.to_s.empty?
-
-        base = base_url || spec.fetch('base_url')
-        if base.include?('{domain}')
-          raise ArgumentError, "#{name} needs domain or base_url" if domain.to_s.empty?
-
-          base = base.sub('{domain}', domain)
-        end
-        TableProvider.new(name, spec, base.sub(%r{/+\z}, ''), token, http || Faraday.new(request: { timeout: 10 }))
-      end
-
-      # Your own user store: one callable per action you support, keyed by
-      # action. A callable may return other actions it ran. An action without one fails.
-      def custom_provider(handlers)
-        CustomProvider.new(handlers.transform_keys(&:to_s))
-      end
-
-      private
-
       # The error_code of a failed action: the provider's code, else its HTTP status, as <provider>.<code>.
       def failure_code(provider, error)
         code = error.respond_to?(:code) ? error.code : nil

data/lib/no_response/lists.rb

@@ -948,7 +948,7 @@ module NoResponse
     }
     def preview(body:, workspace_id:, environment:, retries: nil, timeout_ms: nil, http_headers: nil)
       # preview - Preview a list override change without side effects.
-      # Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.
+      # Preview canonical list matches and current override effects with settings or management, plus legacy history, or investigate with evidence or detailed. The result states its bounded coverage and changes no list entries.
       request = Models::Operations::PreviewListRequest.new(
         workspace_id: workspace_id,
         environment: environment,

data/lib/no_response/models/operations/listreviews_request.rb

@@ -57,12 +57,6 @@ module NoResponse
           Crystalline::Nilable.new(::String),
           {'query_param': {'field_name': "assignee_principal_id", 'style': "form", 'explode': true}}
         )
-        # Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination and bound into the cursor.
-        field(
-          :account_id,
-          Crystalline::Nilable.new(::String),
-          {'query_param': {'field_name': "account_id", 'style': "form", 'explode': true}}
-        )
 
         field(
           :limit,
@@ -80,7 +74,6 @@ module NoResponse
             assignee: T.nilable(::String),
             unassigned: T.nilable(T::Boolean),
             assignee_principal_id: T.nilable(::String),
-            account_id: T.nilable(::String),
             limit: T.nilable(::Integer)
           )
             .void
@@ -94,7 +87,6 @@ module NoResponse
           assignee: nil,
           unassigned: nil,
           assignee_principal_id: nil,
-          account_id: nil,
           limit: 50
         )
           @workspace_id = workspace_id
@@ -105,7 +97,6 @@ module NoResponse
           @assignee = assignee
           @unassigned = unassigned
           @assignee_principal_id = assignee_principal_id
-          @account_id = account_id
           @limit = limit
         end
 
@@ -120,7 +111,6 @@ module NoResponse
           return false unless @assignee == other.assignee
           return false unless @unassigned == other.unassigned
           return false unless @assignee_principal_id == other.assignee_principal_id
-          return false unless @account_id == other.account_id
           return false unless @limit == other.limit
           true
         end

data/lib/no_response/models/operations/listreviews_request.rbi

@@ -54,12 +54,6 @@ class NoResponse::Models::Operations::ListReviewsRequest
   def assignee_principal_id=(str_)
   end
 
-  def account_id
-  end
-
-  def account_id=(str_)
-  end
-
   def limit
   end
 

data/lib/no_response/models/operations/queryreviews_request.rb

@@ -0,0 +1,52 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class QueryReviewsRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # Your workspace id, as each key lists it in workspace_id. Another workspace, a malformed id and a test environment's id answer 404.
+        field(
+          :workspace_id,
+          ::String,
+          {'path_param': {'field_name': "workspace_id", 'style': "simple", 'explode': false}}
+        )
+        # The environment: live or test. Each has its own settings. Any other value answers 400. An API key reads and changes only its own environment's; the other answers 404.
+        field(
+          :environment,
+          Models::Shared::KeyEnvironment,
+          {'path_param': {'field_name': "environment", 'style': "simple", 'explode': false}}
+        )
+
+        field :body, Models::Shared::ReviewQueryRequest, {'request': {'media_type': "application/json"}}
+
+        sig {
+          params(
+            workspace_id: ::String,
+            environment: Models::Shared::KeyEnvironment,
+            body: Models::Shared::ReviewQueryRequest
+          )
+            .void
+        }
+        def initialize(workspace_id:, environment:, body:)
+          @workspace_id = workspace_id
+          @environment = environment
+          @body = body
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @workspace_id == other.workspace_id
+          return false unless @environment == other.environment
+          return false unless @body == other.body
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/queryreviews_request.rbi

@@ -0,0 +1,26 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::QueryReviewsRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::QueryReviewsRequest
+  def workspace_id
+  end
+
+  def workspace_id=(str_)
+  end
+
+  def environment
+  end
+
+  def environment=(str_)
+  end
+
+  def body
+  end
+
+  def body=(str_)
+  end
+end

data/lib/no_response/models/operations/queryreviews_response.rb

@@ -0,0 +1,32 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Operations
+
+      class QueryReviewsResponse
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        field :headers, Crystalline::Hash.new(Symbol, Crystalline::Array.new(::String))
+
+        field :result, Models::Shared::ReviewList, {}
+
+        sig { params(headers: T::Hash[Symbol, T::Array[::String]], result: Models::Shared::ReviewList).void }
+        def initialize(headers:, result:)
+          @headers = headers
+          @result = result
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @headers == other.headers
+          return false unless @result == other.result
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/operations/queryreviews_response.rbi

@@ -0,0 +1,20 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Operations::QueryReviewsResponse
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Operations::QueryReviewsResponse
+  def headers
+  end
+
+  def headers=(str_)
+  end
+
+  def result
+  end
+
+  def result=(str_)
+  end
+end

data/lib/no_response/models/operations.rb

@@ -149,6 +149,8 @@ module NoResponse
       autoload :PublishPolicyEvaluationRequest, "no_response/models/operations/publishpolicyevaluation_request.rb"
       autoload :PublishPolicyEvaluationResponse, "no_response/models/operations/publishpolicyevaluation_response.rb"
       autoload :QueryAccountAssessmentsResponse, "no_response/models/operations/queryaccountassessments_response.rb"
+      autoload :QueryReviewsRequest, "no_response/models/operations/queryreviews_request.rb"
+      autoload :QueryReviewsResponse, "no_response/models/operations/queryreviews_response.rb"
       autoload :RecordAccountOutcomeRequest, "no_response/models/operations/recordaccountoutcome_request.rb"
       autoload :RecordAccountOutcomeResponse, "no_response/models/operations/recordaccountoutcome_response.rb"
       autoload :RecordAssessmentOutcomeRequest, "no_response/models/operations/recordassessmentoutcome_request.rb"

data/lib/no_response/models/shared/conflicterrorcode.rb

@@ -32,6 +32,7 @@ module NoResponse
           EVALUATION_LIMIT_REACHED = new("evaluation_limit_reached")
           ALREADY_MEMBER = new("already_member")
           MEMBER_LIMIT_REACHED = new("member_limit_reached")
+          AGGREGATE_ERASED_DATA = new("aggregate_erased_data")
         end
 
         open!

data/lib/no_response/models/shared/reviewqueryrequest.rb

@@ -0,0 +1,120 @@
+# typed: true
+# frozen_string_literal: true
+
+module NoResponse
+  module Models
+    module Shared
+
+      class ReviewQueryRequest
+        extend T::Sig
+        include Crystalline::MetadataFields
+
+        # Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination.
+        field(
+          :account_id,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("account_id")}}
+        )
+
+        field(
+          :status,
+          Crystalline::Nilable.new(Models::Shared::ReviewStatus),
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("status"),
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::ReviewStatus, true)
+            }
+          }
+        )
+
+        field(
+          :priority,
+          Crystalline::Nilable.new(Models::Shared::Priority),
+          {
+            'format_json': {
+              'letter_case': ::NoResponse::Utils.field_name("priority"),
+              'decoder': ::NoResponse::Utils.open_enum_from_string(Models::Shared::Priority, true)
+            }
+          }
+        )
+
+        field(
+          :assignee,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assignee")}}
+        )
+
+        field(
+          :unassigned,
+          Crystalline::Nilable.new(Crystalline::Boolean.new),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("unassigned")}}
+        )
+
+        field(
+          :assignee_principal_id,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("assignee_principal_id")}}
+        )
+
+        field(
+          :cursor,
+          Crystalline::Nilable.new(::String),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("cursor")}}
+        )
+
+        field(
+          :limit,
+          Crystalline::Nilable.new(::Integer),
+          {'format_json': {'letter_case': ::NoResponse::Utils.field_name("limit")}}
+        )
+
+        sig {
+          params(
+            account_id: T.nilable(::String),
+            status: T.nilable(Models::Shared::ReviewStatus),
+            priority: T.nilable(Models::Shared::Priority),
+            assignee: T.nilable(::String),
+            unassigned: T.nilable(T::Boolean),
+            assignee_principal_id: T.nilable(::String),
+            cursor: T.nilable(::String),
+            limit: T.nilable(::Integer)
+          )
+            .void
+        }
+        def initialize(
+          account_id: nil,
+          status: nil,
+          priority: nil,
+          assignee: nil,
+          unassigned: nil,
+          assignee_principal_id: nil,
+          cursor: nil,
+          limit: 50
+        )
+          @account_id = account_id
+          @status = status
+          @priority = priority
+          @assignee = assignee
+          @unassigned = unassigned
+          @assignee_principal_id = assignee_principal_id
+          @cursor = cursor
+          @limit = limit
+        end
+
+        sig { params(other: T.untyped).returns(T::Boolean) }
+        def ==(other)
+          return false unless other.is_a?(self.class)
+          return false unless @account_id == other.account_id
+          return false unless @status == other.status
+          return false unless @priority == other.priority
+          return false unless @assignee == other.assignee
+          return false unless @unassigned == other.unassigned
+          return false unless @assignee_principal_id == other.assignee_principal_id
+          return false unless @cursor == other.cursor
+          return false unless @limit == other.limit
+          true
+        end
+      end
+    end
+  end
+end

data/lib/no_response/models/shared/reviewqueryrequest.rbi

@@ -0,0 +1,56 @@
+# typed: true
+# frozen_string_literal: true
+
+class NoResponse::Models::Shared::ReviewQueryRequest
+  extend ::Crystalline::MetadataFields::ClassMethods
+end
+
+class NoResponse::Models::Shared::ReviewQueryRequest
+  def account_id
+  end
+
+  def account_id=(str_)
+  end
+
+  def status
+  end
+
+  def status=(str_)
+  end
+
+  def priority
+  end
+
+  def priority=(str_)
+  end
+
+  def assignee
+  end
+
+  def assignee=(str_)
+  end
+
+  def unassigned
+  end
+
+  def unassigned=(str_)
+  end
+
+  def assignee_principal_id
+  end
+
+  def assignee_principal_id=(str_)
+  end
+
+  def cursor
+  end
+
+  def cursor=(str_)
+  end
+
+  def limit
+  end
+
+  def limit=(str_)
+  end
+end

data/lib/no_response/models/shared.rb

@@ -289,6 +289,7 @@ module NoResponse
       autoload :ReviewCommentRequest, "no_response/models/shared/reviewcommentrequest.rb"
       autoload :ReviewCreateRequest, "no_response/models/shared/reviewcreaterequest.rb"
       autoload :ReviewList, "no_response/models/shared/reviewlist.rb"
+      autoload :ReviewQueryRequest, "no_response/models/shared/reviewqueryrequest.rb"
       autoload :ReviewResolutionList, "no_response/models/shared/reviewresolutionlist.rb"
       autoload :ReviewResolveRequest, "no_response/models/shared/reviewresolverequest.rb"
       autoload :ReviewStatus, "no_response/models/shared/reviewstatus.rb"

data/lib/no_response/reviews.rb

@@ -49,7 +49,7 @@ module NoResponse
     }
     def list(request:, retries: nil, timeout_ms: nil, http_headers: nil)
       # list - List retained account reviews.
-      # List retained investigation reviews using filters and an authenticated cursor. Optional account_id selects one exact account in this environment before pagination. All filters are bound into the cursor.
+      # List retained investigation reviews using filters and an authenticated cursor. Use reviews.query to filter by account_id in a JSON body. All filters are bound into the cursor.
       url, params = @sdk_configuration.get_server_details
       base_url = Utils.template_url(url, params)
       url = Utils.generate_url(
@@ -179,8 +179,7 @@ module NoResponse
                 priority: request.priority,
                 assignee: request.assignee,
                 unassigned: request.unassigned,
-                assignee_principal_id: request.assignee_principal_id,
-                account_id: request.account_id
+                assignee_principal_id: request.assignee_principal_id
               ),
               http_headers: http_headers
             )
@@ -4803,5 +4802,310 @@ module NoResponse
 
       end
     end
+
+    sig {
+      params(
+        body: Models::Shared::ReviewQueryRequest,
+        workspace_id: ::String,
+        environment: Models::Shared::KeyEnvironment,
+        retries: T.nilable(Utils::RetryConfig),
+        timeout_ms: T.nilable(Integer),
+        http_headers: T.nilable(T::Hash[T.any(String, Symbol), String])
+      )
+        .returns(Models::Operations::QueryReviewsResponse)
+    }
+    def query(body:, workspace_id:, environment:, retries: nil, timeout_ms: nil, http_headers: nil)
+      # query - Query retained reviews without identifiers in URLs.
+      # Query retained investigation reviews using a JSON body, including an exact account_id filter. All filters are bound into the cursor.
+      request = Models::Operations::QueryReviewsRequest.new(
+        workspace_id: workspace_id,
+        environment: environment,
+        body: body
+      )
+      url, params = @sdk_configuration.get_server_details
+      base_url = Utils.template_url(url, params)
+      url = Utils.generate_url(
+        Models::Operations::QueryReviewsRequest,
+        base_url,
+        "/v1/workspaces/{workspace_id}/reviews/{environment}/query",
+        request
+      )
+      headers = {}
+      headers = T.cast(headers, T::Hash[String, String])
+      req_content_type, data, form = Utils.serialize_request_body(request, false, false, :body, :json)
+      headers["content-type"] = req_content_type
+      raise StandardError, "request body is required" if data.nil? && form.nil?
+
+      if form && !form.empty?
+        body = Utils.encode_form(form)
+      elsif Utils.match_content_type(req_content_type, "application/x-www-form-urlencoded")
+        body = URI.encode_www_form(T.cast(data, T::Hash[Symbol, Object]))
+      else
+        body = data
+      end
+
+      headers["Accept"] = "application/json"
+      headers["user-agent"] = @sdk_configuration.user_agent
+      retries ||= @sdk_configuration.retry_config
+      retries ||= Utils::RetryConfig.new(
+        backoff: Utils::BackoffStrategy.new(
+          exponent: 2.0,
+          initial_interval: 500,
+          max_elapsed_time: 30_000,
+          max_interval: 8000
+        ),
+        retry_connection_errors: true,
+        strategy: "backoff"
+      )
+      retry_options = retries.to_faraday_retry_options(initial_time: Time.now)
+      retry_options[:retry_statuses] = [408, 429, 500, 501, 502, 503, 504, 505]
+
+      security = @sdk_configuration.security_source&.call
+
+      timeout = (timeout_ms.to_f / 1000) unless timeout_ms.nil?
+      timeout ||= @sdk_configuration.timeout
+
+      connection = @sdk_configuration.client.dup
+      connection.use(Utils::RetryMiddleware, retry_options)
+
+      hook_ctx = SDKHooks::HookContext.new(
+        config: @sdk_configuration,
+        base_url: base_url,
+        oauth2_scopes: nil,
+        operation_id: "queryReviews",
+        security_source: @sdk_configuration.security_source
+      )
+
+      error = T.let(nil, T.nilable(StandardError))
+      http_response = T.let(nil, T.nilable(Faraday::Response))
+
+      begin
+        http_response = T.must(connection).post(url) do |req|
+          req.body = body
+          req.headers.merge!(headers)
+          req.options.timeout = timeout unless timeout.nil?
+          Utils.configure_request_security(req, security)
+          http_headers&.each do |key, value|
+            req.headers[key.to_s] = value
+          end
+
+          @sdk_configuration.hooks.before_request(
+            hook_ctx: SDKHooks::BeforeRequestHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            request: req
+          )
+        end
+
+      rescue StandardError => e
+        error = e
+      ensure
+        if http_response.nil? || Utils.error_status?(http_response.status)
+          http_response = @sdk_configuration.hooks.after_error(
+            error: error,
+            hook_ctx: SDKHooks::AfterErrorHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+        else
+          http_response = @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+        end
+
+        if http_response.nil?
+          raise error if !error.nil?
+          raise "no response"
+        end
+      end
+
+      content_type = http_response.headers.fetch("Content-Type", "application/octet-stream")
+      if Utils.match_status_code(http_response.status, ["200"])
+        if Utils.match_content_type(content_type, "application/json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Shared::ReviewList)
+          result = obj
+          response = Models::Operations::QueryReviewsResponse.new(
+            result: result,
+            headers: http_response.headers
+          )
+
+          return response
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["400"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::BadRequestError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["401"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::AuthenticationError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["403"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::PermissionDeniedError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["404"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::NotFoundError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["409"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::ConflictError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["429"])
+        if Utils.match_content_type(content_type, "application/problem+json")
+          @sdk_configuration.hooks.after_success(
+            hook_ctx: SDKHooks::AfterSuccessHookContext.new(
+              hook_ctx: hook_ctx
+            ),
+            response: http_response
+          )
+          response_data = http_response.env.response_body
+          obj = Crystalline.unmarshal_json(JSON.parse(response_data), Models::Errors::RateLimitError)
+          raise obj
+        else
+          raise(
+            ::NoResponse::Models::Errors::APIStatusError.new(
+              status_code: http_response.status,
+              body: http_response.env.response_body,
+              raw_response: http_response
+            ),
+            "Unknown content type received"
+          )
+        end
+      elsif Utils.match_status_code(http_response.status, ["4XX"])
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "API error occurred"
+        )
+      elsif Utils.match_status_code(http_response.status, ["5XX"])
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "API error occurred"
+        )
+      else
+        raise(
+          ::NoResponse::Models::Errors::APIStatusError.new(
+            status_code: http_response.status,
+            body: http_response.env.response_body,
+            raw_response: http_response
+          ),
+          "Unknown status code received"
+        )
+
+      end
+    end
   end
 end

data/lib/no_response/sdkconfiguration.rb

@@ -95,9 +95,9 @@ module NoResponse
 
       @language = "ruby"
       @openapi_doc_version = "1"
-      @sdk_version = "9.5.5"
+      @sdk_version = "10.0.1"
       @gen_version = "internal"
-      @user_agent = "noresponse-sdk/ruby 9.5.5 internal 1 noresponse"
+      @user_agent = "noresponse-sdk/ruby 10.0.1 internal 1 noresponse"
     end
 
     sig { returns([String, T::Hash[Symbol, String]]) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: noresponse
 version: !ruby/object:Gem::Version
-  version: 9.5.5
+  version: 10.0.1
 platform: ruby
 authors:
 - NoResponse
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-30 00:00:00.000000000 Z
+date: 2026-10-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -562,6 +562,10 @@ files:
 - lib/no_response/models/operations/publishpolicyevaluation_response.rbi
 - lib/no_response/models/operations/queryaccountassessments_response.rb
 - lib/no_response/models/operations/queryaccountassessments_response.rbi
+- lib/no_response/models/operations/queryreviews_request.rb
+- lib/no_response/models/operations/queryreviews_request.rbi
+- lib/no_response/models/operations/queryreviews_response.rb
+- lib/no_response/models/operations/queryreviews_response.rbi
 - lib/no_response/models/operations/recordaccountoutcome_request.rb
 - lib/no_response/models/operations/recordaccountoutcome_request.rbi
 - lib/no_response/models/operations/recordaccountoutcome_response.rb
@@ -1249,6 +1253,8 @@ files:
 - lib/no_response/models/shared/reviewcreaterequest.rbi
 - lib/no_response/models/shared/reviewlist.rb
 - lib/no_response/models/shared/reviewlist.rbi
+- lib/no_response/models/shared/reviewqueryrequest.rb
+- lib/no_response/models/shared/reviewqueryrequest.rbi
 - lib/no_response/models/shared/reviewresolutionlist.rb
 - lib/no_response/models/shared/reviewresolutionlist.rbi
 - lib/no_response/models/shared/reviewresolverequest.rb