@noresponse/mcp 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.4.5
+
+No changes detected.
+
+## 0.4.4
+
+* `SDK.assessments.create()`:  `response.account.risk.decision.enum(held)` **Added** (Breaking ⚠️)
+* `SDK.assessments.get()`:  `response.account.risk.decision.enum(held)` **Added** (Breaking ⚠️)
+* `SDK.accounts.listChanged()`:  `response.items[].risk.decision.enum(held)` **Added** (Breaking ⚠️)
+* `SDK.accounts.get()`:  `response.risk.decision.enum(held)` **Added** (Breaking ⚠️)
+
 ## 0.4.3
 
 No changes detected.

package/README.md

@@ -14,7 +14,7 @@ The server uses the API key you give it and stores nothing. API key rotation is
 | `get_assessment` | Read the latest version of one assessment. | `GET /v1/assessments/{assessment_id}` |
 | `wait_for_assessment` | Poll a pending assessment, at the interval Retry-After asks for, until it settles or `timeout_seconds` (default 25, at most 55) pass. | `GET /v1/assessments/{assessment_id}` |
 | `query_assessments` | Page through one account's unexpired assessments, newest first. | `POST /v1/assessments/query` |
-| `get_account` | Read an account's one current risk: the score, a decision (`allow`, `step_up`, `review` or `block`) for each flow, and the assessment it comes from. Needs the `history` scope. | `GET /v1/accounts/{account_id}` |
+| `get_account` | Read an account's one current risk: the score, a decision (`allow`, `step_up`, `review`, `block`, or `held` while a held flow waits) for each flow, and the assessment it comes from. Needs the `history` scope. | `GET /v1/accounts/{account_id}` |
 | `list_account_assessments` | Page through one account's unexpired assessments, newest first, with the account id in the URL. Needs the `history` scope. | `GET /v1/accounts/{account_id}/assessments` |
 | `list_changed_accounts` | List the accounts whose risk changed, oldest change first; pass `next_cursor` back as `changed_since` to poll, and `unenforced` true for only the accounts that need action. Needs the `history` scope. | `GET /v1/accounts` |
 | `record_enforcement` | Record what you did to an account in your identity provider for one flow at one `risk_version`, applied or failed. A repeat answers the stored record. Needs the `history` scope. | `POST /v1/accounts/{account_id}/enforcements` |
@@ -33,7 +33,7 @@ The server uses the API key you give it and stores nothing. API key rotation is
 | `delete_integration` | Delete an integration; its endpoint answers 404 from then on. | `DELETE /v1/integrations/{integration_id}` |
 | `rotate_integration_secret` | Replace an integration's secret. The old one is accepted for 24 hours. Never retried. | `POST /v1/integrations/{integration_id}/rotate` |
 
-Act on `account.risk.decision` (`allow`, `step_up`, `review` or `block`), the account's current decision for the assessment's flow. `detail` holds the assessment's own risk, recommendation and `assessment_version`. While the account's first assessment is pending, `account` is absent, so apply your own fallback for that, 429, 503 or a timeout.
+Act on `account.risk.decision` (`allow`, `step_up`, `review`, `block`, or `held` while a held flow waits for its investigation), the account's current decision for the assessment's flow. `detail` holds the assessment's own risk, recommendation and `assessment_version`. While the account's first assessment is pending, `account` is absent, so apply your own fallback for that, 429, 503 or a timeout.
 
 ## Hosted server
 

package/bin/mcp-server.js

@@ -48104,9 +48104,9 @@ var init_config = __esm(() => {
   SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "0.4.3",
+    sdkVersion: "0.4.5",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/mcp-typescript 0.4.3 internal 1 @noresponse/mcp"
+    userAgent: "noresponse-sdk/mcp-typescript 0.4.5 internal 1 @noresponse/mcp"
   };
 });
 
@@ -50255,8 +50255,9 @@ var init_accountdecision = __esm(() => {
     "allow",
     "step_up",
     "review",
-    "block"
-  ]).describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.");
+    "block",
+    "held"
+  ]).describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.");
 });
 
 // src/models/accountdecisionsbyflow.ts
@@ -50265,10 +50266,10 @@ var init_accountdecisionsbyflow = __esm(() => {
   init_zod();
   init_accountdecision();
   AccountDecisionsByFlow$zodSchema = object({
-    account_creation: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it."),
-    login: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it."),
-    purchase: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.")
-  }).describe("The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.");
+    account_creation: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it."),
+    login: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it."),
+    purchase: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.")
+  }).describe("The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.");
 });
 
 // src/models/reasoncode.ts
@@ -50350,7 +50351,7 @@ var init_accountrisk = __esm(() => {
   init_accountdecision();
   init_accountriskreason();
   AccountRisk$zodSchema = object({
-    decision: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it."),
+    decision: AccountDecision$zodSchema.describe("block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it."),
     reasons: array(AccountRiskReason$zodSchema).describe("Every reason that fired, highest weight first. The weights sum to score before clamping."),
     score: int().describe("0 (safe) to 100 (risky), as risk.score of the assessment.")
   });
@@ -50364,7 +50365,7 @@ var init_account = __esm(() => {
   init_accountrisk();
   Account$zodSchema = object({
     assessment_id: string2().describe("The assessment the current risk comes from."),
-    decisions_by_flow: AccountDecisionsByFlow$zodSchema.describe("The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them."),
+    decisions_by_flow: AccountDecisionsByFlow$zodSchema.describe("The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed."),
     id: string2().describe("The account_id the workspace sends with its assessments."),
     risk: AccountRisk$zodSchema,
     risk_version: int().describe("The version of the account's current risk. It increases every time the account's current risk or decisions_by_flow changes, and does not decrease. Of two copies of an account, the one with the higher risk_version is newer. account.risk_changed carries the risk_version that its change made."),
@@ -55357,7 +55358,7 @@ endpoint.verification sends a signed challenge now and answers whether the endpo
 function createMCPServer(deps) {
   const server = new McpServer({
     name: "NoResponse",
-    version: "0.4.3"
+    version: "0.4.5"
   });
   const getClient = deps.getSDK || (() => new NoResponseCore({
     security: deps.security,
@@ -64062,7 +64063,7 @@ var routes = buildRouteMap({
 var app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "0.4.3"
+    currentVersion: "0.4.5"
   }
 });
 run(app, process3.argv.slice(2), buildContext(process3));
@@ -64070,5 +64071,5 @@ export {
   app
 };
 
-//# debugId=04ECF577D7FFCD0864756E2164756E21
+//# debugId=967F6D0E897D9CEE64756E2164756E21
 //# sourceMappingURL=mcp-server.js.map