@noresponse/mcp 0.11.5 → 0.11.7

package/bin/mcp-server.js

@@ -48136,9 +48136,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.11.5",
+    sdkVersion: "0.11.7",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.11.5 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.11.7 internal 1 @noresponse/mcp"
   };
 });
 
@@ -51490,7 +51490,8 @@ var init_conflicterrorcode = __esm(() => {
     "evaluation_no_proposal",
     "evaluation_limit_reached",
     "already_member",
-    "member_limit_reached"
+    "member_limit_reached",
+    "aggregate_erased_data"
   ]).describe("Machine codes an HTTP 409 answer can carry.");
 });
 
@@ -60242,7 +60243,7 @@ var init_exportsCreate2 = __esm(() => {
     name: "create_export",
     description: `Request an asynchronous customer export.
 
-Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.`,
+Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope. An account export without legacy history needs investigate with evidence or detailed, because it holds submitted identifiers; detailed account data always needs evidence or detailed. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.`,
     annotations: {
       title: "Start an encrypted account or audit export with saved criteria",
       destructiveHint: false,
@@ -63423,7 +63424,7 @@ var init_listsPreview2 = __esm(() => {
     name: "preview_list",
     description: `Preview a list override change without side effects.
 
-Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.`,
+Preview canonical list matches and current override effects with settings or management, plus legacy history, or investigate with evidence or detailed. The result states its bounded coverage and changes no list entries.`,
     annotations: {
       title: "Preview list matches and risk effects without changing the list",
       destructiveHint: false,
@@ -66181,7 +66182,6 @@ var init_listreviewsop = __esm(() => {
   init_reviewlist();
   init_reviewstatus();
   ListReviewsRequest$zodSchema = object({
-    account_id: string2().describe("Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination and bound into the cursor.").optional(),
     assignee: string2().optional(),
     assignee_principal_id: string2().describe("Filter by immutable member ID. Mutually exclusive with assignee and unassigned=true.").optional(),
     cursor: string2().optional(),
@@ -66238,7 +66238,6 @@ async function $do74(client$, request, options) {
   };
   const path$ = pathToFunc("/v1/workspaces/{workspace_id}/reviews/{environment}")(pathParams$);
   const query$ = encodeFormQuery({
-    account_id: payload$.account_id,
     assignee: payload$.assignee,
     assignee_principal_id: payload$.assignee_principal_id,
     cursor: payload$.cursor,
@@ -66328,7 +66327,7 @@ var init_reviewsList2 = __esm(() => {
     name: "list_reviews",
     description: `List retained account reviews.
 
-List retained investigation reviews using filters and an authenticated cursor. Optional account_id selects one exact account in this environment before pagination. All filters are bound into the cursor.`,
+List retained investigation reviews using filters and an authenticated cursor. Use reviews.query to filter by account_id in a JSON body. All filters are bound into the cursor.`,
     annotations: {
       title: "List retained account investigations",
       destructiveHint: false,
@@ -67074,6 +67073,190 @@ List private and shared saved review filters visible to you.`,
   };
 });
 
+// src/models/reviewqueryrequest.ts
+var ReviewQueryRequest$zodSchema;
+var init_reviewqueryrequest = __esm(() => {
+  init_zod();
+  init_priority();
+  init_reviewstatus();
+  ReviewQueryRequest$zodSchema = object({
+    account_id: string2().optional().describe("Only reviews of this exact account in the authenticated workspace and environment. Applied before pagination."),
+    assignee: string2().optional(),
+    assignee_principal_id: string2().optional(),
+    cursor: string2().optional(),
+    limit: int().default(50),
+    priority: Priority$zodSchema.optional(),
+    status: ReviewStatus$zodSchema.optional(),
+    unassigned: boolean2().optional()
+  });
+});
+
+// src/models/queryreviewsop.ts
+var QueryReviewsRequest$zodSchema, QueryReviewsResponseResult$zodSchema, QueryReviewsResponse$zodSchema;
+var init_queryreviewsop = __esm(() => {
+  init_zod();
+  init_authenticationerror();
+  init_badrequesterror();
+  init_conflicterror();
+  init_keyenvironment();
+  init_notfounderror();
+  init_permissiondeniederror();
+  init_ratelimiterror();
+  init_reviewlist();
+  init_reviewqueryrequest();
+  QueryReviewsRequest$zodSchema = object({
+    body: ReviewQueryRequest$zodSchema,
+    environment: KeyEnvironment$zodSchema.describe("The environment: live or test. Each has its own settings. Any other value answers 400. An API key reads and changes only its own environment's; the other answers 404."),
+    workspace_id: string2().describe("Your workspace id, as each key lists it in workspace_id. Another workspace, a malformed id and a test environment's id answer 404.")
+  });
+  QueryReviewsResponseResult$zodSchema = union([
+    BadRequestError$zodSchema,
+    AuthenticationError$zodSchema,
+    PermissionDeniedError$zodSchema,
+    NotFoundError$zodSchema,
+    ConflictError$zodSchema,
+    RateLimitError$zodSchema,
+    ReviewList$zodSchema
+  ]);
+  QueryReviewsResponse$zodSchema = object({
+    Headers: record(string2(), array(string2())).default({}),
+    Result: union([
+      BadRequestError$zodSchema,
+      AuthenticationError$zodSchema,
+      PermissionDeniedError$zodSchema,
+      NotFoundError$zodSchema,
+      ConflictError$zodSchema,
+      RateLimitError$zodSchema,
+      ReviewList$zodSchema
+    ])
+  });
+});
+
+// src/funcs/reviewsQuery.ts
+function reviewsQuery(client$, request, options) {
+  return new APIPromise($do79(client$, request, options));
+}
+async function $do79(client$, request, options) {
+  const parsed$ = safeParse2(request, (value$) => QueryReviewsRequest$zodSchema.parse(value$), "Input validation failed");
+  if (!parsed$.ok) {
+    return [parsed$, { status: "invalid" }];
+  }
+  const payload$ = parsed$.value;
+  const body$ = encodeJSON("body", payload$.body, { explode: true });
+  const pathParams$ = {
+    environment: encodeSimple("environment", payload$.environment, {
+      explode: false,
+      charEncoding: "percent"
+    }),
+    workspace_id: encodeSimple("workspace_id", payload$.workspace_id, {
+      explode: false,
+      charEncoding: "percent"
+    })
+  };
+  const path$ = pathToFunc("/v1/workspaces/{workspace_id}/reviews/{environment}/query")(pathParams$);
+  const headers$ = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
+  }));
+  const securityInput = await extractSecurity(client$._options.security);
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+  const context = {
+    options: client$._options,
+    baseURL: options?.serverURL ?? client$._baseURL ?? "",
+    operationID: "queryReviews",
+    oAuth2Scopes: null,
+    resolvedSecurity: requestSecurity,
+    securitySource: client$._options.security,
+    retryConfig: options?.retries || client$._options.retryConfig || {
+      strategy: "backoff",
+      backoff: {
+        initialInterval: 500,
+        maxInterval: 8000,
+        exponent: 2,
+        maxElapsedTime: 30000
+      },
+      retryConnectionErrors: true
+    },
+    retryCodes: options?.retryCodes || [
+      "408",
+      "429",
+      "5XX"
+    ]
+  };
+  const requestRes = client$._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path$,
+    headers: headers$,
+    body: body$,
+    userAgent: client$._options.userAgent,
+    timeoutMs: options?.timeoutMs || client$._options.timeoutMs || -1
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req$ = requestRes.value;
+  const doResult = await client$._do(req$, {
+    context,
+    errorCodes: [],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req$ }];
+  }
+  return [doResult, {
+    status: "complete",
+    request: req$,
+    response: doResult.value
+  }];
+}
+var init_reviewsQuery = __esm(() => {
+  init_encodings();
+  init_primitives();
+  init_schemas3();
+  init_security();
+  init_url();
+  init_queryreviewsop();
+  init_async();
+});
+
+// src/mcp-server/tools/reviewsQuery.ts
+var args79, tool$reviewsQuery;
+var init_reviewsQuery2 = __esm(() => {
+  init_reviewsQuery();
+  init_queryreviewsop();
+  init_tools();
+  args79 = {
+    request: QueryReviewsRequest$zodSchema
+  };
+  tool$reviewsQuery = {
+    name: "query_reviews",
+    description: `Query retained reviews without identifiers in URLs.
+
+Query retained investigation reviews using a JSON body, including an exact account_id filter. All filters are bound into the cursor.`,
+    annotations: {
+      title: "Query retained account investigations with private body filters",
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false,
+      readOnlyHint: true
+    },
+    args: args79,
+    tool: async (client, args, ctx) => {
+      const [result] = await reviewsQuery(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
+      if (!result.ok) {
+        return {
+          content: [{ type: "text", text: result.error.message }],
+          isError: true
+        };
+      }
+      return formatResult(result.value);
+    }
+  };
+});
+
 // src/models/reviewresolverequest.ts
 var ReviewResolveRequest$zodSchema;
 var init_reviewresolverequest = __esm(() => {
@@ -67131,9 +67314,9 @@ var init_resolvereviewop = __esm(() => {
 
 // src/funcs/reviewsResolve.ts
 function reviewsResolve(client$, request, options) {
-  return new APIPromise($do79(client$, request, options));
+  return new APIPromise($do80(client$, request, options));
 }
-async function $do79(client$, request, options) {
+async function $do80(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ResolveReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67211,12 +67394,12 @@ var init_reviewsResolve = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsResolve.ts
-var args79, tool$reviewsResolve;
+var args80, tool$reviewsResolve;
 var init_reviewsResolve2 = __esm(() => {
   init_reviewsResolve();
   init_resolvereviewop();
   init_tools();
-  args79 = {
+  args80 = {
     request: ResolveReviewRequest$zodSchema
   };
   tool$reviewsResolve = {
@@ -67231,7 +67414,7 @@ Resolve a review against the exact current review and account decision versions.
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args79,
+    args: args80,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsResolve(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67313,9 +67496,9 @@ var init_updatereviewop = __esm(() => {
 
 // src/funcs/reviewsUpdate.ts
 function reviewsUpdate(client$, request, options) {
-  return new APIPromise($do80(client$, request, options));
+  return new APIPromise($do81(client$, request, options));
 }
-async function $do80(client$, request, options) {
+async function $do81(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateReviewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67393,12 +67576,12 @@ var init_reviewsUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsUpdate.ts
-var args80, tool$reviewsUpdate;
+var args81, tool$reviewsUpdate;
 var init_reviewsUpdate2 = __esm(() => {
   init_reviewsUpdate();
   init_updatereviewop();
   init_tools();
-  args80 = {
+  args81 = {
     request: UpdateReviewRequest$zodSchema
   };
   tool$reviewsUpdate = {
@@ -67413,7 +67596,7 @@ Change review status, priority or assignment after checking the expected version
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args80,
+    args: args81,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67471,9 +67654,9 @@ var init_updatereviewviewop = __esm(() => {
 
 // src/funcs/reviewsUpdateView.ts
 function reviewsUpdateView(client$, request, options) {
-  return new APIPromise($do81(client$, request, options));
+  return new APIPromise($do82(client$, request, options));
 }
-async function $do81(client$, request, options) {
+async function $do82(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateReviewViewRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67551,12 +67734,12 @@ var init_reviewsUpdateView = __esm(() => {
 });
 
 // src/mcp-server/tools/reviewsUpdateView.ts
-var args81, tool$reviewsUpdateView;
+var args82, tool$reviewsUpdateView;
 var init_reviewsUpdateView2 = __esm(() => {
   init_reviewsUpdateView();
   init_updatereviewviewop();
   init_tools();
-  args81 = {
+  args82 = {
     request: UpdateReviewViewRequest$zodSchema
   };
   tool$reviewsUpdateView = {
@@ -67571,7 +67754,7 @@ Update your saved review filter after checking its expected version.`,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args81,
+    args: args82,
     tool: async (client, args, ctx) => {
       const [result] = await reviewsUpdateView(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67626,9 +67809,9 @@ var init_getsettingsop = __esm(() => {
 
 // src/funcs/settingsGet.ts
 function settingsGet(client$, request, options) {
-  return new APIPromise($do82(client$, request, options));
+  return new APIPromise($do83(client$, request, options));
 }
-async function $do82(client$, request, options) {
+async function $do83(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67714,12 +67897,12 @@ var init_settingsGet = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsGet.ts
-var args82, tool$settingsGet;
+var args83, tool$settingsGet;
 var init_settingsGet2 = __esm(() => {
   init_settingsGet();
   init_getsettingsop();
   init_tools();
-  args82 = {
+  args83 = {
     request: GetSettingsRequest$zodSchema
   };
   tool$settingsGet = {
@@ -67734,7 +67917,7 @@ Read this environment retention, source selection and effective flow policies. A
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args82,
+    args: args83,
     tool: async (client, args, ctx) => {
       const [result] = await settingsGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -67837,9 +68020,9 @@ var init_listpolicyhistoryop = __esm(() => {
 
 // src/funcs/settingsListHistory.ts
 function settingsListHistory(client$, request, options) {
-  return new APIPromise($do83(client$, request, options));
+  return new APIPromise($do84(client$, request, options));
 }
-async function $do83(client$, request, options) {
+async function $do84(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListPolicyHistoryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -67930,12 +68113,12 @@ var init_settingsListHistory = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsListHistory.ts
-var args83, tool$settingsListHistory;
+var args84, tool$settingsListHistory;
 var init_settingsListHistory2 = __esm(() => {
   init_settingsListHistory();
   init_listpolicyhistoryop();
   init_tools();
-  args83 = {
+  args84 = {
     request: ListPolicyHistoryRequest$zodSchema
   };
   tool$settingsListHistory = {
@@ -67950,7 +68133,7 @@ Read immutable configuration versions in one environment with settings or manage
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args83,
+    args: args84,
     tool: async (client, args, ctx) => {
       const [result] = await settingsListHistory(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68129,9 +68312,9 @@ var init_previewpolicyop = __esm(() => {
 
 // src/funcs/settingsPreview.ts
 function settingsPreview(client$, request, options) {
-  return new APIPromise($do84(client$, request, options));
+  return new APIPromise($do85(client$, request, options));
 }
-async function $do84(client$, request, options) {
+async function $do85(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => PreviewPolicyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68218,12 +68401,12 @@ var init_settingsPreview = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsPreview.ts
-var args84, tool$settingsPreview;
+var args85, tool$settingsPreview;
 var init_settingsPreview2 = __esm(() => {
   init_settingsPreview();
   init_previewpolicyop();
   init_tools();
-  args84 = {
+  args85 = {
     request: PreviewPolicyRequest$zodSchema
   };
   tool$settingsPreview = {
@@ -68238,7 +68421,7 @@ Compare proposed policy with bounded retained first answers, including baseline,
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args84,
+    args: args85,
     tool: async (client, args, ctx) => {
       const [result] = await settingsPreview(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68306,9 +68489,9 @@ var init_restorepolicyop = __esm(() => {
 
 // src/funcs/settingsRestore.ts
 function settingsRestore(client$, request, options) {
-  return new APIPromise($do85(client$, request, options));
+  return new APIPromise($do86(client$, request, options));
 }
-async function $do85(client$, request, options) {
+async function $do86(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RestorePolicyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68382,12 +68565,12 @@ var init_settingsRestore = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsRestore.ts
-var args85, tool$settingsRestore;
+var args86, tool$settingsRestore;
 var init_settingsRestore2 = __esm(() => {
   init_settingsRestore();
   init_restorepolicyop();
   init_tools();
-  args85 = {
+  args86 = {
     request: RestorePolicyRequest$zodSchema
   };
   tool$settingsRestore = {
@@ -68402,7 +68585,7 @@ Restore a retained configuration as a fresh version with the expected current ve
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args85,
+    args: args86,
     tool: async (client, args, ctx) => {
       const [result] = await settingsRestore(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68507,9 +68690,9 @@ var init_updatesettingsop = __esm(() => {
 
 // src/funcs/settingsUpdate.ts
 function settingsUpdate(client$, request, options) {
-  return new APIPromise($do86(client$, request, options));
+  return new APIPromise($do87(client$, request, options));
 }
-async function $do86(client$, request, options) {
+async function $do87(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => UpdateSettingsRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68596,12 +68779,12 @@ var init_settingsUpdate = __esm(() => {
 });
 
 // src/mcp-server/tools/settingsUpdate.ts
-var args86, tool$settingsUpdate;
+var args87, tool$settingsUpdate;
 var init_settingsUpdate2 = __esm(() => {
   init_settingsUpdate();
   init_updatesettingsop();
   init_tools();
-  args86 = {
+  args87 = {
     request: UpdateSettingsRequest$zodSchema
   };
   tool$settingsUpdate = {
@@ -68616,7 +68799,7 @@ Change named retention, source or flow settings in one transaction. Requires set
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args86,
+    args: args87,
     tool: async (client, args, ctx) => {
       const [result] = await settingsUpdate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68737,9 +68920,9 @@ var init_getusageop = __esm(() => {
 
 // src/funcs/usageGet.ts
 function usageGet(client$, request, options) {
-  return new APIPromise($do87(client$, request, options));
+  return new APIPromise($do88(client$, request, options));
 }
-async function $do87(client$, request, options) {
+async function $do88(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => GetUsageRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68826,12 +69009,12 @@ var init_usageGet = __esm(() => {
 });
 
 // src/mcp-server/tools/usageGet.ts
-var args87, tool$usageGet;
+var args88, tool$usageGet;
 var init_usageGet2 = __esm(() => {
   init_usageGet();
   init_getusageop();
   init_tools();
-  args87 = {
+  args88 = {
     request: GetUsageRequest$zodSchema
   };
   tool$usageGet = {
@@ -68846,7 +69029,7 @@ Read daily usage units for the environments you can access. These counts are unp
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args87,
+    args: args88,
     tool: async (client, args, ctx) => {
       const [result] = await usageGet(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -68876,9 +69059,9 @@ var init_webhookaggregaterequest = __esm(() => {
 
 // src/funcs/webhookEndpointsAggregate.ts
 function webhookEndpointsAggregate(client$, request, options) {
-  return new APIPromise($do88(client$, request, options));
+  return new APIPromise($do89(client$, request, options));
 }
-async function $do88(client$, request, options) {
+async function $do89(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => WebhookAggregateRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -68955,12 +69138,12 @@ var init_webhookEndpointsAggregate = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsAggregate.ts
-var args88, tool$webhookEndpointsAggregate;
+var args89, tool$webhookEndpointsAggregate;
 var init_webhookEndpointsAggregate2 = __esm(() => {
   init_webhookEndpointsAggregate();
   init_webhookaggregaterequest();
   init_tools();
-  args88 = {
+  args89 = {
     request: WebhookAggregateRequest$zodSchema
   };
   tool$webhookEndpointsAggregate = {
@@ -68975,7 +69158,7 @@ Count retained webhook delivery attempts within thirty days and report current r
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args88,
+    args: args89,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsAggregate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69002,9 +69185,9 @@ var init_webhookendpointrequest = __esm(() => {
 
 // src/funcs/webhookEndpointsCreate.ts
 function webhookEndpointsCreate(client$, request, options) {
-  return new APIPromise($do89(client$, request, options));
+  return new APIPromise($do90(client$, request, options));
 }
-async function $do89(client$, request, options) {
+async function $do90(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => WebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69068,12 +69251,12 @@ var init_webhookEndpointsCreate = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsCreate.ts
-var args89, tool$webhookEndpointsCreate;
+var args90, tool$webhookEndpointsCreate;
 var init_webhookEndpointsCreate2 = __esm(() => {
   init_webhookEndpointsCreate();
   init_webhookendpointrequest();
   init_tools();
-  args89 = {
+  args90 = {
     request: WebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsCreate = {
@@ -69088,7 +69271,7 @@ Registers a webhook endpoint and returns it with its first signing secret, shown
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args89,
+    args: args90,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsCreate(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69138,9 +69321,9 @@ var init_deletewebhookendpointop = __esm(() => {
 
 // src/funcs/webhookEndpointsDelete.ts
 function webhookEndpointsDelete(client$, request, options) {
-  return new APIPromise($do90(client$, request, options));
+  return new APIPromise($do91(client$, request, options));
 }
-async function $do90(client$, request, options) {
+async function $do91(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => DeleteWebhookEndpointRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69222,12 +69405,12 @@ var init_webhookEndpointsDelete = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsDelete.ts
-var args90, tool$webhookEndpointsDelete;
+var args91, tool$webhookEndpointsDelete;
 var init_webhookEndpointsDelete2 = __esm(() => {
   init_webhookEndpointsDelete();
   init_deletewebhookendpointop();
   init_tools();
-  args90 = {
+  args91 = {
     request: DeleteWebhookEndpointRequest$zodSchema
   };
   tool$webhookEndpointsDelete = {
@@ -69242,7 +69425,7 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args90,
+    args: args91,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsDelete(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69258,9 +69441,9 @@ Deletes the endpoint and its signing keys. Deliveries still queued for it are dr
 
 // src/funcs/webhookEndpointsList.ts
 function webhookEndpointsList(client$, options) {
-  return new APIPromise($do91(client$, options));
+  return new APIPromise($do92(client$, options));
 }
-async function $do91(client$, options) {
+async function $do92(client$, options) {
   const path$ = pathToFunc("/v1/webhooks")();
   const headers$ = new Headers(compactMap({
     Accept: options?.acceptHeaderOverride || "application/json;q=1, application/problem+json;q=0"
@@ -69452,9 +69635,9 @@ var init_listwebhookdeliveriesop = __esm(() => {
 
 // src/funcs/webhookEndpointsListDeliveries.ts
 function webhookEndpointsListDeliveries(client$, request, options) {
-  return new APIPromise($do92(client$, request, options));
+  return new APIPromise($do93(client$, request, options));
 }
-async function $do92(client$, request, options) {
+async function $do93(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ListWebhookDeliveriesRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69541,12 +69724,12 @@ var init_webhookEndpointsListDeliveries = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsListDeliveries.ts
-var args91, tool$webhookEndpointsListDeliveries;
+var args92, tool$webhookEndpointsListDeliveries;
 var init_webhookEndpointsListDeliveries2 = __esm(() => {
   init_webhookEndpointsListDeliveries();
   init_listwebhookdeliveriesop();
   init_tools();
-  args91 = {
+  args92 = {
     request: ListWebhookDeliveriesRequest$zodSchema
   };
   tool$webhookEndpointsListDeliveries = {
@@ -69561,7 +69744,7 @@ Every POST the endpoint received, newest first: the event id and type, which att
       openWorldHint: false,
       readOnlyHint: true
     },
-    args: args91,
+    args: args92,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsListDeliveries(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69635,9 +69818,9 @@ var init_replaywebhookdeliveryop = __esm(() => {
 
 // src/funcs/webhookEndpointsReplayDelivery.ts
 function webhookEndpointsReplayDelivery(client$, request, options) {
-  return new APIPromise($do93(client$, request, options));
+  return new APIPromise($do94(client$, request, options));
 }
-async function $do93(client$, request, options) {
+async function $do94(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => ReplayWebhookDeliveryRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69711,12 +69894,12 @@ var init_webhookEndpointsReplayDelivery = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsReplayDelivery.ts
-var args92, tool$webhookEndpointsReplayDelivery;
+var args93, tool$webhookEndpointsReplayDelivery;
 var init_webhookEndpointsReplayDelivery2 = __esm(() => {
   init_webhookEndpointsReplayDelivery();
   init_replaywebhookdeliveryop();
   init_tools();
-  args92 = {
+  args93 = {
     request: ReplayWebhookDeliveryRequest$zodSchema
   };
   tool$webhookEndpointsReplayDelivery = {
@@ -69731,7 +69914,7 @@ Queues the event for the endpoint again: the same event id and body it received,
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args92,
+    args: args93,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsReplayDelivery(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69817,9 +70000,9 @@ var init_rotatewebhooksigningkeyop = __esm(() => {
 
 // src/funcs/webhookEndpointsRotateSigningKey.ts
 function webhookEndpointsRotateSigningKey(client$, request, options) {
-  return new APIPromise($do94(client$, request, options));
+  return new APIPromise($do95(client$, request, options));
 }
-async function $do94(client$, request, options) {
+async function $do95(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => RotateWebhookSigningKeyRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -69889,12 +70072,12 @@ var init_webhookEndpointsRotateSigningKey = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsRotateSigningKey.ts
-var args93, tool$webhookEndpointsRotateSigningKey;
+var args94, tool$webhookEndpointsRotateSigningKey;
 var init_webhookEndpointsRotateSigningKey2 = __esm(() => {
   init_webhookEndpointsRotateSigningKey();
   init_rotatewebhooksigningkeyop();
   init_tools();
-  args93 = {
+  args94 = {
     request: RotateWebhookSigningKeyRequest$zodSchema
   };
   tool$webhookEndpointsRotateSigningKey = {
@@ -69909,7 +70092,7 @@ Issues a new signing key for the endpoint and returns its secret once. Every del
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args93,
+    args: args94,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsRotateSigningKey(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -69999,9 +70182,9 @@ var init_sendwebhooktesteventop = __esm(() => {
 
 // src/funcs/webhookEndpointsSendTestEvent.ts
 function webhookEndpointsSendTestEvent(client$, request, options) {
-  return new APIPromise($do95(client$, request, options));
+  return new APIPromise($do96(client$, request, options));
 }
-async function $do95(client$, request, options) {
+async function $do96(client$, request, options) {
   const parsed$ = safeParse2(request, (value$) => SendWebhookTestEventRequest$zodSchema.parse(value$), "Input validation failed");
   if (!parsed$.ok) {
     return [parsed$, { status: "invalid" }];
@@ -70071,12 +70254,12 @@ var init_webhookEndpointsSendTestEvent = __esm(() => {
 });
 
 // src/mcp-server/tools/webhookEndpointsSendTestEvent.ts
-var args94, tool$webhookEndpointsSendTestEvent;
+var args95, tool$webhookEndpointsSendTestEvent;
 var init_webhookEndpointsSendTestEvent2 = __esm(() => {
   init_webhookEndpointsSendTestEvent();
   init_sendwebhooktesteventop();
   init_tools();
-  args94 = {
+  args95 = {
     request: SendWebhookTestEventRequest$zodSchema
   };
   tool$webhookEndpointsSendTestEvent = {
@@ -70091,7 +70274,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
       openWorldHint: false,
       readOnlyHint: false
     },
-    args: args94,
+    args: args95,
     tool: async (client, args, ctx) => {
       const [result] = await webhookEndpointsSendTestEvent(client, args.request, { fetchOptions: { signal: ctx.mcpReq.signal } }).$inspect();
       if (!result.ok) {
@@ -70109,7 +70292,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.11.5"
+    version: "0.11.7"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -70209,6 +70392,7 @@ function createMCPServer(deps) {
   tool(tool$reviewsListSubjects);
   tool(tool$reviewsAddSubject);
   tool(tool$reviewsDeleteSubject);
+  tool(tool$reviewsQuery);
   tool(tool$erasuresGet);
   tool(tool$exportsCreate);
   tool(tool$exportsList);
@@ -70314,6 +70498,7 @@ var init_server = __esm(() => {
   init_reviewsListResolutions2();
   init_reviewsListSubjects2();
   init_reviewsListViews2();
+  init_reviewsQuery2();
   init_reviewsResolve2();
   init_reviewsUpdate2();
   init_reviewsUpdateView2();
@@ -70713,7 +70898,7 @@ Remove an override with settings plus policy_publish, or legacy management. The
       name: "preview_list",
       description: `Preview a list override change without side effects.
 
-Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.`
+Preview canonical list matches and current override effects with settings or management, plus legacy history, or investigate with evidence or detailed. The result states its bounded coverage and changes no list entries.`
     },
     {
       name: "change_lists",
@@ -70731,7 +70916,7 @@ Read retained propagation progress for a list change with settings or management
       name: "list_reviews",
       description: `List retained account reviews.
 
-List retained investigation reviews using filters and an authenticated cursor. Optional account_id selects one exact account in this environment before pagination. All filters are bound into the cursor.`
+List retained investigation reviews using filters and an authenticated cursor. Use reviews.query to filter by account_id in a JSON body. All filters are bound into the cursor.`
     },
     {
       name: "create_review",
@@ -70822,6 +71007,12 @@ Link an account, exact assessment revision or issued-key association within this
       description: `Remove a linked subject using the current review version.
 
 Remove a subject link with the expected review version. The linked account, assessment or key association remains unchanged.`
+    },
+    {
+      name: "query_reviews",
+      description: `Query retained reviews without identifiers in URLs.
+
+Query retained investigation reviews using a JSON body, including an exact account_id filter. All filters are bound into the cursor.`
     },
     {
       name: "get_erasure_receipt",
@@ -70833,7 +71024,7 @@ Read retained erasure progress and downstream acknowledgements. Completion does
       name: "create_export",
       description: `Request an asynchronous customer export.
 
-Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.`
+Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope. An account export without legacy history needs investigate with evidence or detailed, because it holds submitted identifiers; detailed account data always needs evidence or detailed. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.`
     },
     {
       name: "list_exports",
@@ -79406,7 +79597,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.11.5"
+    currentVersion: "0.11.7"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -79414,5 +79605,5 @@ export {
   app
 };
 
-//# debugId=4BA0B709D98D009364756E2164756E21
+//# debugId=43D4E9E3152AA8F864756E2164756E21
 //# sourceMappingURL=mcp-server.js.map