@noresponse/mcp 0.10.1 → 0.10.3

package/CHANGELOG.md

@@ -1,5 +1,41 @@
 # Changelog
 
+## 0.10.3
+
+* `SDK.accounts.search()`: 
+  *  `request.needs_action` **Added**
+  *  `response.items[].waiting_for` **Added**
+* `SDK.reviews.list()`: 
+  *  `request.account_id` **Added**
+* `SDK.reviews.listViews()`:  `response.items[].filter.account_id` **Added**
+* `SDK.reviews.createView()`: 
+  *  `request.body.filter.account_id` **Added**
+  *  `response.filter.account_id` **Added**
+* `SDK.reviews.updateView()`: 
+  *  `request.body.filter.account_id` **Added**
+  *  `response.filter.account_id` **Added**
+
+## 0.10.2
+
+* `SDK.assessments.create()`:  `response.account.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.assessments.get()`:  `response.account.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.assessments.query()`:  `response.items[].risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.assessments.aggregate()`: 
+  *  `request.reason.enum(no_email_matches)` **Added**
+  *  `response.buckets[].groups[].reason.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.assessments.search()`: 
+  *  `request.reason.enum(no_email_matches)` **Added**
+  *  `response.items[].detail.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.assessments.retrieveVersion()`:  `response.detail.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.listChanged()`:  `response.items[].risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.get()`:  `response.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.listAssessments()`:  `response.items[].risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.retrieveDecision()`:  `response.account.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.export()`:  `response.assessments[].detail.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.listDecisions()`:  `response.items[].account.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.accounts.search()`:  `response.items[].latest.detail.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+* `SDK.requests.list()`:  `response.items[].decision.account.risk.reasons[].code.enum(no_email_matches)` **Added** (Breaking ⚠️)
+
 ## 0.10.1
 
 * `SDK.accounts.search()`: **Added**

package/bin/mcp-server.js

@@ -48136,9 +48136,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.10.1",
+    sdkVersion: "0.10.3",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.10.1 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.10.3 internal 1 @noresponse/mcp"
   };
 });
 
@@ -50336,6 +50336,7 @@ var init_reasoncode = __esm(() => {
     "voip_number",
     "disposable_email",
     "new_email",
+    "no_email_matches",
     "spam_reports",
     "fraud_flag",
     "identity_mismatch",
@@ -50507,7 +50508,7 @@ var init_confidence = __esm(() => {
     "medium",
     "high",
     "unavailable"
-  ]).describe("Ordinal confidence in the recommendation under the current policy: low, medium, high or unavailable.");
+  ]).describe("Evidence coverage: how much of the planned source evidence gave a definite answer. This is not confidence that an identity is genuine, agreement between identifiers, a risk score or a probability. unavailable means no usable evidence answered; a terminal uncovered assessment can have this value and recommend review.");
 });
 
 // src/models/incompletereason.ts
@@ -50588,10 +50589,10 @@ var RiskCoverage$zodSchema;
 var init_riskcoverage = __esm(() => {
   init_zod();
   RiskCoverage$zodSchema = object({
-    answered: int().describe("Sources that gave a definite answer."),
-    failed: int().describe("Sources that could not answer."),
-    pending: int().describe("Sources still being asked.")
-  }).describe("Sources counted by state, not named.");
+    answered: int().describe("Source-identifier pairs that gave a definite found or not_found answer."),
+    failed: int().describe("Source-identifier pairs that could not answer, including unsupported coverage markers and source failures. Read detailed signals to distinguish Not covered from Failed."),
+    pending: int().describe("Source-identifier pairs with deferred or timed_out evidence. A terminal timeout can remain here after processing finishes; use assessment status and continuation metadata to determine whether work is still running.")
+  }).describe("Counts of planned source-identifier pairs by evidence outcome, deduplicated across signals and incomplete entries. These counts do not measure identity agreement or prove that processing is still running. A lane that was not searched is not an answered source.");
 });
 
 // src/models/breachexposed.ts
@@ -51004,7 +51005,7 @@ var init_risk = __esm(() => {
     block: boolean2().optional().describe("true when the workspace's block threshold is set and score reached it. A provider hook can deny the account creation on it; the provider decides and enforces. It does not change recommendation. It is false while blocking is off, the default, and a body from before the flag existed omits it: read absent as false."),
     block_threshold: int().optional().describe("The block threshold this answer used: block is true exactly when score is at least this value. Absent while blocking is off. NoResponse sets it per workspace on request, at or above the review threshold."),
     confidence: RiskConfidence$zodSchema.describe("How much of the planned evidence answered; it says nothing about risk."),
-    coverage: RiskCoverage$zodSchema.describe("Sources counted by state, not named."),
+    coverage: RiskCoverage$zodSchema.describe("Counts of planned source-identifier pairs by evidence outcome, deduplicated across signals and incomplete entries. These counts do not measure identity agreement or prove that processing is still running. A lane that was not searched is not an answered source."),
     details: RiskDetails$zodSchema.optional().describe("Detailed view only (response_mode=detailed, which needs the detailed scope); a standard answer leaves it out. Merged observations without provider, source, origin, raw breach record, value or score."),
     policy_basis: literal("heuristic_unvalidated").default("heuristic_unvalidated").optional().describe("Labels the v0 policy as hand-authored and not statistically validated."),
     policy_version: string2().describe("Version of the hand-authored heuristic policy that produced the recommendation, for example 'risk-2026-10.7'. A workspace threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'."),
@@ -51260,7 +51261,7 @@ var init_status = __esm(() => {
     "complete",
     "partial",
     "pending"
-  ]).describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook.");
+  ]).describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered.");
 });
 
 // src/models/assessmentdetail.ts
@@ -51282,7 +51283,7 @@ var init_assessmentdetail = __esm(() => {
     assessment_url: string2().optional().describe("Server-relative path of the authoritative assessment, GET /v1/assessments/{assessment_id}."),
     assessment_version: int().describe("Monotonic revision of this assessment. 1 on the synchronous answer; each material change while the assessment is served (an async continuation settling a source, a change of recommendation, confidence or status) increments it. Expiry does not increment it: an expired assessment is gone, not revised, and the expiry webhook carries the last served version."),
     auth_context: AssessmentDetailAuthContext$zodSchema.optional().describe("The identity fields of the auth context the assessment was made with, echoed for the workspace's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score."),
-    confidence: Confidence$zodSchema.describe("Ordinal confidence in the recommendation under the current policy: low, medium, high or unavailable."),
+    confidence: Confidence$zodSchema.describe("Evidence coverage: how much of the planned source evidence gave a definite answer. This is not confidence that an identity is genuine, agreement between identifiers, a risk score or a probability. unavailable means no usable evidence answered; a terminal uncovered assessment can have this value and recommend review."),
     created_at: string2().describe("When the assessment was created. Fixed for the life of the assessment: every revision carries the same created_at."),
     expires_at: string2().describe("After this instant the assessment is no longer served: GET /v1/assessments/{assessment_id} answers 404 and it leaves the account history. It is created_at plus your retention period at creation (default and maximum 365 days) and is fixed per record: a later revision keeps it, and a new assessment for the same account starts its own clock. If you later shorten retention, the effective expiry becomes created_at plus the shorter of the two periods."),
     identifiers: SentIdentifiers$zodSchema.optional().describe("The identifiers an assessment was sent: each member of the request's identifiers object exactly as received, before the server normalised it (the email domain keeps its case, the name its Unicode form). A member the request did not send is absent. NoResponse keeps them encrypted under the workspace's own key, does not index or log them, and deletes them with the assessment: on DELETE of the assessment or its account, at its expires_at, and with the workspace."),
@@ -51294,7 +51295,7 @@ var init_assessmentdetail = __esm(() => {
     risk: Risk$zodSchema.optional().describe("The one risk decision for this event. score is 0 (safe) to 100 (risky), set by the reasons that fired under a hand-set, versioned heuristic policy. Each reason carries its direction and impact band; the policy's weights are not published. Every answer with a recommendation carries it, and the top-level recommendation equals risk.recommendation. It names no source or provider."),
     schema_version: literal("1").default("1").optional().describe("Version of the body shape."),
     signals: array(Signal$zodSchema).optional().describe("Detailed view only (response_mode=detailed, which needs the detailed scope): a standard answer omits signals[], and a detailed one always carries it, possibly empty. The body does not name its mode, so that rule is the serving gate's; the schema states the half it can: an answer with risk.details is a detailed view and carries signals[]. At most one signal per (type, source_id, identifier)."),
-    status: Status$zodSchema.describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook."),
+    status: Status$zodSchema.describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered."),
     timing: AssessmentDetailTiming$zodSchema,
     updated_at: string2()
   }).describe("One assessment's own facts: its score and recommendation, the signals behind them, the lanes still running and its timing. risk here is this assessment's own score; the account's current risk is the account member of the assessment. risk and recommendation are present for complete and partial; assessment_url is present for pending.");
@@ -51337,7 +51338,7 @@ var init_assessment = __esm(() => {
     flow: Flow$zodSchema.describe("The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow."),
     id: string2().describe("This assessment's id, equal to detail.assessment_id."),
     schema_version: literal("1").default("1").optional().describe("Version of the body shape."),
-    status: Status$zodSchema.describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook.")
+    status: Status$zodSchema.describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered.")
   }).describe("One assessment, as POST /v1/assessments, GET /v1/assessments/{assessment_id} and the assessment.updated webhook return it. account is the account's one current risk: its score, the decision for this assessment's flow, the reasons and the decision for each flow. detail holds this assessment's own facts. status says whether the assessment is final (complete), usable with a source still running (partial) or not yet usable (pending). While the account's first assessment is pending, account is absent; wait for the webhook or poll the assessment. Keep the highest detail.assessment_version.");
 });
 
@@ -52621,7 +52622,7 @@ var init_assessmentrevision = __esm(() => {
     flow: Flow$zodSchema.describe("The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow."),
     id: string2().describe("This assessment's id, equal to detail.assessment_id."),
     schema_version: literal("1").default("1").optional().describe("Version of the body shape."),
-    status: Status$zodSchema.describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook.")
+    status: Status$zodSchema.describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered.")
   }).describe("Retrieve a retained assessment version with its original decision, policy, flow and depth. This response excludes the current account decision. Current retention and response-mode permissions still apply.");
 });
 
@@ -52727,7 +52728,7 @@ var init_decisionreceipt = __esm(() => {
     flow: Flow$zodSchema.describe("The event an assessment is made for: account_creation (a user creates an account), login (a user returns to an existing account) or purchase (a payment or a credit grant). The account's risk is reported with the decision for this flow."),
     policy_version: string2().optional().describe("Version of the hand-authored heuristic policy that produced the recommendation, for example 'risk-2026-10.7'. A workspace threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'."),
     score: int().optional(),
-    status: Status$zodSchema.describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook.")
+    status: Status$zodSchema.describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered.")
   }).describe("The decision prepared for one HTTP attempt. Its account field preserves the account decision returned for that attempt, even after subsequent changes.");
 });
 
@@ -54855,7 +54856,8 @@ var init_accountdirectorysearchrequest = __esm(() => {
     account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     cursor: string2().optional().describe("Opaque, expiring cursor bound to this environment, operation and every filter. Keep the filters unchanged."),
     email: string2().optional().describe("Assessments of every account that one of its retained admitted assessments sent this mailbox as identifiers.email, matched as lists match an email entry: case-insensitive, a +tag removed and, at gmail.com and googlemail.com, the dots of the local part ignored. Only assessments stored since email list matching began carry the mailbox. An address that is not a valid mailbox is refused with 400."),
-    limit: int().default(25)
+    limit: int().default(25),
+    needs_action: boolean2().default(false).describe("Select accounts with a retained open or in-progress review, or a current review/block account decision with no retained effective account outcome. The server applies this filter before counting and pagination. Requires reviews.read as well as history.read for console members; API keys additionally require management.")
   }).describe("Bounded distinct-account search for a single authenticated workspace/environment. Email matches any retained admitted assessment of an account, using assessment search's canonical mailbox rules. No assessment history download is required.");
 });
 
@@ -54952,7 +54954,7 @@ var init_accountsSearch2 = __esm(() => {
     name: "search_accounts",
     description: `Search distinct accounts by email or account ID
 
-Search distinct accounts observed in retained assessments in this environment. Match an exact account_id or canonical email; an email matches any retained assessment belonging to the account. The response contains one row per account with its newest retained assessment, current decision when available, per-account assessment count, and total distinct-account count. Send next_cursor with unchanged filters to continue. Totals are exact below 10000 and capped at 10000. Results are live across pages. Requires history access and identifier access for email. Read-only and safe to retry.`,
+Search distinct accounts observed in retained assessments in this environment. Match an exact account_id or canonical email; an email matches any retained assessment belonging to the account. Set needs_action to select accounts with an open or in-progress retained review, or a current review/block decision without an effective retained outcome. This filter applies before pagination and counting, adds waiting_for reasons to each row and requires management scope as well as history or investigate access. The response contains one row per account with its newest retained assessment, current decision when available, per-account assessment count, and total distinct-account count. Send next_cursor with unchanged filters to continue. Totals are exact below 10000 and capped at 10000. Results are live across pages. Requires history access and identifier access for email. Read-only and safe to retry.`,
     annotations: {
       title: "Search retained accounts by identifier",
       destructiveHint: false,
@@ -55088,7 +55090,7 @@ var init_assessmentaggregaterequest = __esm(() => {
     revision: AnswerRevision$zodSchema.optional().describe("Which answer of each assessment the filters describe: latest, the latest stored revision, or first, the first answer, as served when the assessment was first answered (POST /v1/assessments/aggregate counts first answers). A cell of an aggregate drills down to POST /v1/assessments/search with the same filters, revision first and the cell's bucket as from and to."),
     score_max: int().optional().describe("Inclusive upper score bound, at least score_min when both are supplied."),
     score_min: int().optional().describe("Inclusive lower score bound. Pending answers without a score do not match."),
-    status: Status$zodSchema.optional().describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook."),
+    status: Status$zodSchema.optional().describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered."),
     time_zone: string2().default("UTC").describe("The IANA time zone whose local midnight starts each day and week bucket, such as Europe/London or Asia/Kolkata; daylight saving changes make those days 23 or 25 hours long. A name the zone database does not know is refused (400 invalid_request naming time_zone). Day and week buckets in a zone other than UTC cover at most 92 days (400 invalid_request naming to); a year of them reads too many hourly counts to answer in time. Hour buckets stay whole UTC hours. Bucket starts, from and to stay instants. With the default population, a zone whose local midnight falls inside a UTC hour (a half-hour offset such as Asia/Kolkata) is refused for day and week buckets, as those counts are kept by the hour; retained_first_answers counts it."),
     to: string2().describe("The end, excluded: the start of the bucket after the last.")
   }).describe("Count this environment's assessments created in [from,to) by bucket, from counts kept as each assessment is first answered, not by scanning assessments. Each assessment counts once, by its first answer (the answer served when it was first answered); later revisions and late results do not count it again, and late_flips counts its later account decision changes. from and to start a bucket (an hour, or a day or a week from Monday that starts at midnight in time_zone, UTC by default), cover at most 366 days (31 for hour buckets, 92 for day and week buckets in a time_zone other than UTC) and from is inside the retention period. The filters are POST /v1/assessments/search's and describe the first answer, so a cell drills down to search with the same filters, revision first and the cell's bucket as from and to. Counts hold no identifier and stay when an assessment or account is deleted or erased; they expire with retention and go with the workspace. Reasons are counted by code and impact band, not by weight. No Idempotency-Key. Select retained_first_answers for exact facet filters and pairs over retained detail. This mode supports count, score_histogram and score_outcomes, and refuses late_flips. It has a 31-day and 100000-record work budget.");
@@ -56417,7 +56419,7 @@ var init_assessmentsearchrequest = __esm(() => {
     revision: AnswerRevision$zodSchema.optional().describe("Which answer of each assessment the filters describe: latest, the latest stored revision, or first, the first answer, as served when the assessment was first answered (POST /v1/assessments/aggregate counts first answers). A cell of an aggregate drills down to POST /v1/assessments/search with the same filters, revision first and the cell's bucket as from and to."),
     score_max: int().optional().describe("Inclusive upper score bound, at least score_min when both are supplied."),
     score_min: int().optional().describe("Inclusive lower score bound. Pending answers without a score do not match."),
-    status: Status$zodSchema.optional().describe("complete: final; nothing is still running. A lane that failed or missed its 10 s deadline stays listed in incomplete_sources, and confidence is lower. partial: a recommendation exists and at least one lane is still running or did not settle (see incomplete_sources). pending: nothing usable before the deadline; no recommendation yet, poll or wait for the webhook."),
+    status: Status$zodSchema.optional().describe("Processing state, separate from evidence coverage. complete: final; nothing is still running, but unsupported, failed or unanswered lanes remain in incomplete_sources. partial: a recommendation exists and evidence is incomplete; assessment_url identifies continuing work when present. pending: no recommendation yet; poll or wait for the webhook. Finished processing does not mean all sources answered."),
     to: string2()
   }).describe("Search retained assessments created in [from,to), over at most 366 days. Filters use each assessment decision, rather than the current account decision. Results can change between pages. Keep the assessment version to retrieve the exact decision later. This read does not require an idempotency key.");
 });
@@ -64827,6 +64829,7 @@ var init_filter = __esm(() => {
   init_priority();
   init_reviewstatus();
   Filter$zodSchema = object({
+    account_id: string2().optional().describe("Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination."),
     assignee: string2().optional(),
     assignee_principal_id: string2().optional(),
     priority: Priority$zodSchema.optional(),
@@ -65763,6 +65766,7 @@ var init_listreviewsop = __esm(() => {
   init_reviewlist();
   init_reviewstatus();
   ListReviewsRequest$zodSchema = object({
+    account_id: string2().describe("Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination and bound into the cursor.").optional(),
     assignee: string2().optional(),
     assignee_principal_id: string2().describe("Filter by immutable member ID. Mutually exclusive with assignee and unassigned=true.").optional(),
     cursor: string2().optional(),
@@ -65819,6 +65823,7 @@ async function $do73(client$, request, options) {
   };
   const path$ = pathToFunc("/v1/workspaces/{workspace_id}/reviews/{environment}")(pathParams$);
   const query$ = encodeFormQuery({
+    account_id: payload$.account_id,
     assignee: payload$.assignee,
     assignee_principal_id: payload$.assignee_principal_id,
     cursor: payload$.cursor,
@@ -65908,7 +65913,7 @@ var init_reviewsList2 = __esm(() => {
     name: "list_reviews",
     description: `List retained account reviews.
 
-List retained investigation reviews using filters and an authenticated cursor.`,
+List retained investigation reviews using filters and an authenticated cursor. Optional account_id selects one exact account in this environment before pagination. All filters are bound into the cursor.`,
     annotations: {
       title: "List retained account investigations",
       destructiveHint: false,
@@ -69689,7 +69694,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.10.1"
+    version: "0.10.3"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -70057,7 +70062,7 @@ List retained immutable risk decisions for one account with an authenticated cur
       name: "search_accounts",
       description: `Search distinct accounts by email or account ID
 
-Search distinct accounts observed in retained assessments in this environment. Match an exact account_id or canonical email; an email matches any retained assessment belonging to the account. The response contains one row per account with its newest retained assessment, current decision when available, per-account assessment count, and total distinct-account count. Send next_cursor with unchanged filters to continue. Totals are exact below 10000 and capped at 10000. Results are live across pages. Requires history access and identifier access for email. Read-only and safe to retry.`
+Search distinct accounts observed in retained assessments in this environment. Match an exact account_id or canonical email; an email matches any retained assessment belonging to the account. Set needs_action to select accounts with an open or in-progress retained review, or a current review/block decision without an effective retained outcome. This filter applies before pagination and counting, adds waiting_for reasons to each row and requires management scope as well as history or investigate access. The response contains one row per account with its newest retained assessment, current decision when available, per-account assessment count, and total distinct-account count. Send next_cursor with unchanged filters to continue. Totals are exact below 10000 and capped at 10000. Results are live across pages. Requires history access and identifier access for email. Read-only and safe to retry.`
     },
     {
       name: "list_keys",
@@ -70303,7 +70308,7 @@ Read retained propagation progress for a list change with settings or management
       name: "list_reviews",
       description: `List retained account reviews.
 
-List retained investigation reviews using filters and an authenticated cursor.`
+List retained investigation reviews using filters and an authenticated cursor. Optional account_id selects one exact account in this environment before pagination. All filters are bound into the cursor.`
     },
     {
       name: "create_review",
@@ -78978,7 +78983,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.10.1"
+    currentVersion: "0.10.3"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -78986,5 +78991,5 @@ export {
   app
 };
 
-//# debugId=6460302CA8544A4964756E2164756E21
+//# debugId=16531E01D8A2C65564756E2164756E21
 //# sourceMappingURL=mcp-server.js.map