@noresponse/mcp 0.11.12 → 0.11.14

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.11.14
+
+No changes detected.
+
+## 0.11.13
+
+* `SDK.accounts.search()`: 
+  *  `request.email_domain` **Added**
+* `SDK.webhookEndpoints.listDeliveries()`:  `response.items[]` **Changed**
+
 ## 0.11.12
 
 * `SDK.assessments.create()`:  `response.code.enum(owner_invite_pending)` **Added** (Breaking ⚠️)

package/bin/mcp-server.js

@@ -48136,9 +48136,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.11.12",
+    sdkVersion: "0.11.14",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.11.12 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.11.14 internal 1 @noresponse/mcp"
   };
 });
 
@@ -55304,6 +55304,7 @@ var init_accountdirectorysearchrequest = __esm(() => {
     account_id: string2().optional().describe("Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id}, its /assessments and its /linked_accounts. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id."),
     cursor: string2().optional().describe("Opaque, expiring cursor bound to workspace, environment, operation and all filters, including expression scope, ordered structure and original term values. Keep grouping, operand order, matching modes and values unchanged; an omitted match is equivalent to exact. The page limit may change."),
     email: string2().optional().describe("Assessments of every account that one of its retained admitted assessments sent this mailbox as identifiers.email, matched as lists match an email entry: case-insensitive, a +tag removed and, at gmail.com and googlemail.com, the dots of the local part ignored. Only assessments stored since email list matching began carry the mailbox. An address that is not a valid mailbox is refused with 400."),
+    email_domain: string2().optional().describe("Every account that one of its retained admitted assessments sent an email of this domain or its subdomains, matched as lists match an email_domain entry and with the same identifier-read permission as email. A value that is not a registrable domain is refused with 400. Mutually exclusive with email, identifier and identifier_expression."),
     identifier: IdentifierSearch$zodSchema.optional().describe("One customer-submitted identifier. Defaults to exact comparison of the original submitted value. canonical uses the supported identifier normalisation without an ownership claim: email preserves local-part case, NFC-normalises it and lowercases the domain without removing dots or tags; phone uses international E.164 without extensions or an inferred region; username uses NFC and Unicode case folding within the customer namespace. mailbox is email-only and explicitly selects existing list rules: case-insensitive, remove +tag, and ignore local-part dots at gmail.com and googlemail.com; googlemail.com maps to gmail.com. Username requires namespace customer. Email and phone forbid namespace. Source-discovered identifiers and platform handles are not searched. Unsupported kinds, namespaces, modes and invalid values return 400. Search equality does not establish verified ownership or merge accounts."),
     identifier_expression: IdentifierExpression$zodSchema.optional().describe("A bounded AND/OR expression over submitted identifiers. Required scope assessment means the entire expression must match one retained assessment. Scope account permits each term to match a different retained assessment of the same account and is accepted only by account search. Exactly one of term, and or or is allowed at every node. Groups contain 2 to 8 operands, with at most 3 nested group levels and 8 raw term occurrences over the entire expression. A root term is allowed. Duplicate terms with the same kind, match rule, namespace and normalized comparison are idempotent, but count toward the raw limit. Match rules default to exact and preserve the existing identifier contract. Only retained submitted identifiers can satisfy a term. Unknown fields, unsupported scopes and malformed or oversized expressions return 400 invalid_request."),
     limit: int().default(25),
@@ -57495,7 +57496,7 @@ var init_auditevent = __esm(() => {
     }).transform((v) => ({ type: v.type })))
   ]);
   AuditEvent$zodSchema = object({
-    action: string2().describe("What happened, as resource.verb: workspace.created, member.role_changed, member.removed, invite.created, invite.revoked, invite.accepted, key.rotated, webhook_endpoint.created, webhook_endpoint.deleted, webhook_endpoint.secret_rotated, integration.created, integration.deleted, integration.secret_rotated, list_entry.created, list_entry.deleted, webhook_endpoint.test_sent, webhook_endpoint.verification_requested, webhook_endpoint.delivery_replayed, assessment.created, assessment.outcome_recorded, assessment.deleted, account.outcome_recorded, account.enforcement_recorded, account.deleted, account.exported. A change with no finer name carries the permission it used, such as keys.live.write. New actions may appear; treat an unknown one as a change to its target."),
+    action: string2().describe("What happened, as resource.verb: workspace.created, member.role_changed, member.removed, invite.created, invite.revoked, invite.accepted, key.rotated, webhook_endpoint.created, webhook_endpoint.deleted, webhook_endpoint.secret_rotated, integration.created, integration.deleted, integration.secret_rotated, list_entry.created, list_entry.deleted, webhook_endpoint.test_sent, webhook_endpoint.verification_requested, webhook_endpoint.delivery_replayed, assessment.created, assessment.outcome_recorded, assessment.deleted, account.outcome_recorded, account.enforcement_recorded, account.deleted, account.exported. A change with no finer name carries the permission it used, such as keys.live.write. A member's read of raw evidence is breach_records.read or review_locations.read, with the assessment and counts and no value. New actions may appear; treat an unknown one as a change to its target."),
     actor: union([
       UserActor$zodSchema.and(object({
         type: literal("user")
@@ -69626,6 +69627,8 @@ var init_webhookdeliveryattempt = __esm(() => {
   init_failure();
   init_webhookdeliveryattemptstatus();
   WebhookDeliveryAttempt$zodSchema = object({
+    account_id: string2().optional().describe("The account an account.risk_changed event reported. Absent on every other event."),
+    assessment_id: string2().optional().describe("The assessment an assessment.updated event reported, while that assessment is held. Absent on every other event, on a test event and on a notice that the assessment was erased or expired."),
     attempt: int().describe("Which attempt of this delivery this was: 1 for the first send, up to 9 with retries. A replay counts its own attempts from 1."),
     attempted_at: string2().describe("When the request was sent. Its NR-Webhook-Timestamp is this time in Unix seconds."),
     event_id: string2().describe("The event id the receiver saw as NR-Webhook-Id and as the body's id. Replay it with POST /v1/webhooks/{endpoint_id}/deliveries/{event_id}/replay."),
@@ -70348,7 +70351,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.11.12"
+    version: "0.11.14"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -79653,7 +79656,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.11.12"
+    currentVersion: "0.11.14"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -79661,5 +79664,5 @@ export {
   app
 };
 
-//# debugId=11412F4CA0790AE964756E2164756E21
+//# debugId=376415A74FD8D62964756E2164756E21
 //# sourceMappingURL=mcp-server.js.map