@noresponse/node 2.0.11 → 2.0.12

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 2.0.12
+
+* `sdk.assessments.create()`: 
+  *  `request.body.issuedCredential` **Added**
+  *  `response.risk` **Changed**
+* `sdk.assessments.get()`:  `response.risk` **Changed**
+* `sdk.assessments.query()`:  `response.items[].risk` **Changed**
+
 ## 2.0.11
 
 No changes detected.

package/README.md

@@ -173,6 +173,15 @@ Override per client with `retryConfig`, or per call with `{ retries }`:
 await nr.assessments.create(params, { retries: { strategy: "none" } });
 ```
 
+## Issued keys
+
+When your signup gate issues an API key to the new account, send only its hash, as `issued_credential.sha256`; the key itself never leaves your backend.
+
+```ts
+import { hashIssuedCredential } from "@noresponse/node";
+const sha256 = hashIssuedCredential(issuedKey); // 64 lower-case hex characters
+```
+
 ## Webhooks
 
 Verify the exact bytes you received, then act on the typed event. `secrets` maps each `whk_` key id we give you to its secret; hold both during a rotation.

package/dist/commonjs/funcs/assessments-create.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 export declare function assessmentsCreate(client: NoResponseCore, request: operations.CreateAssessmentRequest, options?: RequestOptions): APIPromise<Result<operations.CreateAssessmentResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=assessments-create.d.ts.map

package/dist/commonjs/funcs/assessments-create.js

@@ -49,7 +49,7 @@ const async_js_1 = require("../types/async.js");
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 function assessmentsCreate(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/index.d.ts

@@ -8,6 +8,7 @@ export { constructEvent, verificationResponse, isExpiredEvent, WebhookVerificati
 export { handleLateResult, lateResultAction, clerkActions, workosActions, auth0Actions, ProviderActionError, DEFAULT_LATE_RESULT_POLICY, type LateResult, type LateResultAction, type LateResultOptions, type LateResultPolicy, type LateResultProvider, type ClerkActionsOptions, type WorkOSActionsOptions, type Auth0ActionsOptions, } from "./late-results.js";
 export { fromAuth0, fromClerk, fromCognito, fromEntra, fromFirebase, fromKeycloak, fromOIDC, fromOry, fromOryOAuth2, fromSupabase, fromWorkOS, type VerifiedClaims, type AuthContextOverrides, } from "./auth.js";
 export { DEFAULT_WAIT_TIMEOUT_MS, MIN_POLL_INTERVAL_MS } from "./wait.js";
+export { hashIssuedCredential } from "./issued-credential.js";
 export * from "./models/index.js";
 export type { CreateAssessmentRequest, GetAssessmentRequest, RecordAssessmentOutcomeRequest } from "./models/operations/index.js";
 export { SDK_METADATA, ServerList, type SDKOptions } from "./lib/config.js";

package/dist/commonjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/commonjs/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NoResponseCore = exports.HTTPClient = exports.ServerList = exports.SDK_METADATA = exports.MIN_POLL_INTERVAL_MS = exports.DEFAULT_WAIT_TIMEOUT_MS = exports.fromWorkOS = exports.fromSupabase = exports.fromOryOAuth2 = exports.fromOry = exports.fromOIDC = exports.fromKeycloak = exports.fromFirebase = exports.fromEntra = exports.fromCognito = exports.fromClerk = exports.fromAuth0 = exports.DEFAULT_LATE_RESULT_POLICY = exports.ProviderActionError = exports.auth0Actions = exports.workosActions = exports.clerkActions = exports.lateResultAction = exports.handleLateResult = exports.DEFAULT_TOLERANCE_SECONDS = exports.WebhookVerificationError = exports.isExpiredEvent = exports.verificationResponse = exports.constructEvent = exports.DEFAULT_TIMEOUT_MS = exports.DEFAULT_BASE_URL = exports.Keys = exports.Assessments = exports.NoResponse = void 0;
+exports.NoResponseCore = exports.HTTPClient = exports.ServerList = exports.SDK_METADATA = exports.hashIssuedCredential = exports.MIN_POLL_INTERVAL_MS = exports.DEFAULT_WAIT_TIMEOUT_MS = exports.fromWorkOS = exports.fromSupabase = exports.fromOryOAuth2 = exports.fromOry = exports.fromOIDC = exports.fromKeycloak = exports.fromFirebase = exports.fromEntra = exports.fromCognito = exports.fromClerk = exports.fromAuth0 = exports.DEFAULT_LATE_RESULT_POLICY = exports.ProviderActionError = exports.auth0Actions = exports.workosActions = exports.clerkActions = exports.lateResultAction = exports.handleLateResult = exports.DEFAULT_TOLERANCE_SECONDS = exports.WebhookVerificationError = exports.isExpiredEvent = exports.verificationResponse = exports.constructEvent = exports.DEFAULT_TIMEOUT_MS = exports.DEFAULT_BASE_URL = exports.Keys = exports.Assessments = exports.NoResponse = void 0;
 /**
  * @noresponse/node entry point. Hand-written (listed in .genignore); the
  * generated client lives under ./sdk, ./funcs, ./models and ./lib.
@@ -55,6 +55,8 @@ Object.defineProperty(exports, "fromWorkOS", { enumerable: true, get: function (
 const wait_js_1 = require("./wait.js");
 Object.defineProperty(exports, "DEFAULT_WAIT_TIMEOUT_MS", { enumerable: true, get: function () { return wait_js_1.DEFAULT_WAIT_TIMEOUT_MS; } });
 Object.defineProperty(exports, "MIN_POLL_INTERVAL_MS", { enumerable: true, get: function () { return wait_js_1.MIN_POLL_INTERVAL_MS; } });
+const issued_credential_js_1 = require("./issued-credential.js");
+Object.defineProperty(exports, "hashIssuedCredential", { enumerable: true, get: function () { return issued_credential_js_1.hashIssuedCredential; } });
 __exportStar(require("./models/index.js"), exports);
 const config_js_1 = require("./lib/config.js");
 Object.defineProperty(exports, "SDK_METADATA", { enumerable: true, get: function () { return config_js_1.SDK_METADATA; } });

package/dist/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,2CAaqB;AAZnB,uGAAA,UAAU,OAAA;AACV,wGAAA,WAAW,OAAA;AACX,iGAAA,IAAI,OAAA;AACJ,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AASpB,8CAA4B;AAC5B,+CAgBuB;AAfrB,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AACpB,6GAAA,cAAc,OAAA;AACd,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAY3B,uDAgB2B;AAfzB,mHAAA,gBAAgB,OAAA;AAChB,mHAAA,gBAAgB,OAAA;AAChB,+GAAA,YAAY,OAAA;AACZ,gHAAA,aAAa,OAAA;AACb,+GAAA,YAAY,OAAA;AACZ,sHAAA,mBAAmB,OAAA;AACnB,6HAAA,0BAA0B,OAAA;AAU5B,uCAcmB;AAbjB,oGAAA,SAAS,OAAA;AACT,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AACX,oGAAA,SAAS,OAAA;AACT,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AACZ,mGAAA,QAAQ,OAAA;AACR,kGAAA,OAAO,OAAA;AACP,wGAAA,aAAa,OAAA;AACb,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAIZ,uCAA0E;AAAjE,kHAAA,uBAAuB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AACtD,oDAAkC;AAElC,+CAA4E;AAAnE,yGAAA,YAAY,OAAA;AAAE,uGAAA,UAAU,OAAA;AACjC,2CAAiF;AAAxE,qGAAA,UAAU,OAAA;AAInB,uCAA2C;AAAlC,yGAAA,cAAc,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,2CAaqB;AAZnB,uGAAA,UAAU,OAAA;AACV,wGAAA,WAAW,OAAA;AACX,iGAAA,IAAI,OAAA;AACJ,6GAAA,gBAAgB,OAAA;AAChB,+GAAA,kBAAkB,OAAA;AASpB,8CAA4B;AAC5B,+CAgBuB;AAfrB,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AACpB,6GAAA,cAAc,OAAA;AACd,uHAAA,wBAAwB,OAAA;AACxB,wHAAA,yBAAyB,OAAA;AAY3B,uDAgB2B;AAfzB,mHAAA,gBAAgB,OAAA;AAChB,mHAAA,gBAAgB,OAAA;AAChB,+GAAA,YAAY,OAAA;AACZ,gHAAA,aAAa,OAAA;AACb,+GAAA,YAAY,OAAA;AACZ,sHAAA,mBAAmB,OAAA;AACnB,6HAAA,0BAA0B,OAAA;AAU5B,uCAcmB;AAbjB,oGAAA,SAAS,OAAA;AACT,oGAAA,SAAS,OAAA;AACT,sGAAA,WAAW,OAAA;AACX,oGAAA,SAAS,OAAA;AACT,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AACZ,mGAAA,QAAQ,OAAA;AACR,kGAAA,OAAO,OAAA;AACP,wGAAA,aAAa,OAAA;AACb,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AAIZ,uCAA0E;AAAjE,kHAAA,uBAAuB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AACtD,iEAA8D;AAArD,4HAAA,oBAAoB,OAAA;AAC7B,oDAAkC;AAElC,+CAA4E;AAAnE,yGAAA,YAAY,OAAA;AAAE,uGAAA,UAAU,OAAA;AACjC,2CAAiF;AAAxE,qGAAA,UAAU,OAAA;AAInB,uCAA2C;AAAlC,yGAAA,cAAc,OAAA"}

package/dist/commonjs/issued-credential.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * lower-case hex characters. The key never leaves your backend: send only this
+ * hash, as `issuedCredential.sha256` on the assessment request. The key is
+ * hashed as its UTF-8 bytes exactly as given, with no trimming or
+ * normalisation. An empty key throws a TypeError.
+ */
+export declare function hashIssuedCredential(key: string): string;
+//# sourceMappingURL=issued-credential.d.ts.map

package/dist/commonjs/issued-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issued-credential.d.ts","sourceRoot":"","sources":["../../src/issued-credential.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKxD"}

package/dist/commonjs/issued-credential.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hashIssuedCredential = hashIssuedCredential;
+const node_crypto_1 = require("node:crypto");
+/**
+ * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * lower-case hex characters. The key never leaves your backend: send only this
+ * hash, as `issuedCredential.sha256` on the assessment request. The key is
+ * hashed as its UTF-8 bytes exactly as given, with no trimming or
+ * normalisation. An empty key throws a TypeError.
+ */
+function hashIssuedCredential(key) {
+    if (typeof key !== "string" || key.length === 0) {
+        throw new TypeError("issued key must be a non-empty string");
+    }
+    return (0, node_crypto_1.createHash)("sha256").update(key, "utf8").digest("hex");
+}
+//# sourceMappingURL=issued-credential.js.map

package/dist/commonjs/issued-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issued-credential.js","sourceRoot":"","sources":["../../src/issued-credential.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AAEzC;;;;;;GAMG;AACH,8BAAqC,GAAW,EAAU;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC/D"}

package/dist/commonjs/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "2.0.11";
+    readonly sdkVersion: "2.0.12";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 2.0.11 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 2.0.12 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -28,8 +28,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "2.0.11",
+    sdkVersion: "2.0.12",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 2.0.11 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 2.0.12 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/commonjs/models/assessment-request-issued-credential.d.ts

@@ -0,0 +1,18 @@
+import * as z from "zod/v4-mini";
+/**
+ * Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+ */
+export type AssessmentRequestIssuedCredential = {
+    /**
+     * SHA-256 of the issued key's UTF-8 bytes, as 64 lower-case hex characters.
+     */
+    sha256: string;
+};
+/** @internal */
+export type AssessmentRequestIssuedCredential$Outbound = {
+    sha256: string;
+};
+/** @internal */
+export declare const AssessmentRequestIssuedCredential$outboundSchema: z.ZodMiniType<AssessmentRequestIssuedCredential$Outbound, AssessmentRequestIssuedCredential>;
+export declare function assessmentRequestIssuedCredentialToJSON(assessmentRequestIssuedCredential: AssessmentRequestIssuedCredential): string;
+//# sourceMappingURL=assessment-request-issued-credential.d.ts.map

package/dist/commonjs/models/assessment-request-issued-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment-request-issued-credential.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request-issued-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0CAA0C,GAAG;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gDAAgD,EAAE,CAAC,CAAC,WAAW,CAC1E,0CAA0C,EAC1C,iCAAiC,CAGjC,CAAC;AAEH,wBAAgB,uCAAuC,CACrD,iCAAiC,EAAE,iCAAiC,GACnE,MAAM,CAMR"}

package/dist/commonjs/models/assessment-request-issued-credential.js

@@ -0,0 +1,46 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssessmentRequestIssuedCredential$outboundSchema = void 0;
+exports.assessmentRequestIssuedCredentialToJSON = assessmentRequestIssuedCredentialToJSON;
+const z = __importStar(require("zod/v4-mini"));
+/** @internal */
+exports.AssessmentRequestIssuedCredential$outboundSchema = z.object({
+    sha256: z.string(),
+});
+function assessmentRequestIssuedCredentialToJSON(assessmentRequestIssuedCredential) {
+    return JSON.stringify(exports.AssessmentRequestIssuedCredential$outboundSchema.parse(assessmentRequestIssuedCredential));
+}
+//# sourceMappingURL=assessment-request-issued-credential.js.map

package/dist/commonjs/models/assessment-request-issued-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment-request-issued-credential.js","sourceRoot":"","sources":["../../../src/models/assessment-request-issued-credential.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AAiBjC,gBAAgB;AACH,QAAA,gDAAgD,GAGzD,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,iDACE,iCAAoE,EAC5D;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,QAAA,gDAAgD,CAAC,KAAK,CACpD,iCAAiC,CAClC,CACF,CAAC;AAAA,CACH"}

package/dist/commonjs/models/assessment-request.d.ts

@@ -1,6 +1,7 @@
 import * as z from "zod/v4-mini";
 import { AssessmentRequestClientContext, AssessmentRequestClientContext$Outbound } from "./assessment-request-client-context.js";
 import { AssessmentRequestIdentifiers, AssessmentRequestIdentifiers$Outbound } from "./assessment-request-identifiers.js";
+import { AssessmentRequestIssuedCredential, AssessmentRequestIssuedCredential$Outbound } from "./assessment-request-issued-credential.js";
 import { AssessmentRequestPolicyContext, AssessmentRequestPolicyContext$Outbound } from "./assessment-request-policy-context.js";
 import { AuthContext, AuthContext$Outbound } from "./auth-context.js";
 import { ResponseMode } from "./response-mode.js";
@@ -37,6 +38,10 @@ export type AssessmentRequest = {
      * Normalised claims from a session your backend has already verified with WorkOS, Clerk, Auth0 or any OIDC provider. Pass the output of the SDK's auth adapters, not a raw token.
      */
     authContext?: AuthContext | undefined;
+    /**
+     * Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+     */
+    issuedCredential?: AssessmentRequestIssuedCredential | undefined;
 };
 /** @internal */
 export type AssessmentRequest$Outbound = {
@@ -48,6 +53,7 @@ export type AssessmentRequest$Outbound = {
     response_mode?: string | undefined;
     client_context?: AssessmentRequestClientContext$Outbound | undefined;
     auth_context?: AuthContext$Outbound | undefined;
+    issued_credential?: AssessmentRequestIssuedCredential$Outbound | undefined;
 };
 /** @internal */
 export declare const AssessmentRequest$outboundSchema: z.ZodMiniType<AssessmentRequest$Outbound, AssessmentRequest>;

package/dist/commonjs/models/assessment-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessment-request.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EAEtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,WAAW,EACX,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAA+B,MAAM,oBAAoB,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,WAAW,EAAE,4BAA4B,CAAC;IAC1C,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qCAAqC,CAAC;IACnD,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,0BAA0B,EAC1B,iBAAiB,CAuBlB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,iBAAiB,GACnC,MAAM,CAIR"}
+{"version":3,"file":"assessment-request.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EAEtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,iCAAiC,EACjC,0CAA0C,EAE3C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,WAAW,EACX,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAA+B,MAAM,oBAAoB,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,WAAW,EAAE,4BAA4B,CAAC;IAC1C,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,gBAAgB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAClE,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qCAAqC,CAAC;IACnD,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAChD,iBAAiB,CAAC,EAAE,0CAA0C,GAAG,SAAS,CAAC;CAC5E,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,0BAA0B,EAC1B,iBAAiB,CA2BlB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,iBAAiB,GACnC,MAAM,CAIR"}

package/dist/commonjs/models/assessment-request.js

@@ -39,6 +39,7 @@ const z = __importStar(require("zod/v4-mini"));
 const primitives_js_1 = require("../lib/primitives.js");
 const assessment_request_client_context_js_1 = require("./assessment-request-client-context.js");
 const assessment_request_identifiers_js_1 = require("./assessment-request-identifiers.js");
+const assessment_request_issued_credential_js_1 = require("./assessment-request-issued-credential.js");
 const assessment_request_policy_context_js_1 = require("./assessment-request-policy-context.js");
 const auth_context_js_1 = require("./auth-context.js");
 const response_mode_js_1 = require("./response-mode.js");
@@ -52,6 +53,7 @@ exports.AssessmentRequest$outboundSchema = z.pipe(z.object({
     responseMode: z.optional(response_mode_js_1.ResponseMode$outboundSchema),
     clientContext: z.optional(assessment_request_client_context_js_1.AssessmentRequestClientContext$outboundSchema),
     authContext: z.optional(auth_context_js_1.AuthContext$outboundSchema),
+    issuedCredential: z.optional(assessment_request_issued_credential_js_1.AssessmentRequestIssuedCredential$outboundSchema),
 }), z.transform((v) => {
     return (0, primitives_js_1.remap)(v, {
         accountId: "account_id",
@@ -61,6 +63,7 @@ exports.AssessmentRequest$outboundSchema = z.pipe(z.object({
         responseMode: "response_mode",
         clientContext: "client_context",
         authContext: "auth_context",
+        issuedCredential: "issued_credential",
     });
 }));
 function assessmentRequestToJSON(assessmentRequest) {

package/dist/commonjs/models/assessment-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"assessment-request.js","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,wDAAuD;AACvD,iGAIgD;AAChD,2FAI6C;AAC7C,iGAIgD;AAChD,uDAI2B;AAC3B,yDAA+E;AAiD/E,gBAAgB;AACH,QAAA,gCAAgC,GAGzC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,+EAA2C;IACxD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,oFAA6C,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,8CAA2B,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,oFAA6C,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,4CAA0B,CAAC;CACpD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,aAAa;QACzB,YAAY,EAAE,eAAe;QAC7B,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,cAAc;KAC5B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,iCACE,iBAAoC,EAC5B;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,QAAA,gCAAgC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC1D,CAAC;AAAA,CACH"}
+{"version":3,"file":"assessment-request.js","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,wDAAuD;AACvD,iGAIgD;AAChD,2FAI6C;AAC7C,uGAImD;AACnD,iGAIgD;AAChD,uDAI2B;AAC3B,yDAA+E;AAsD/E,gBAAgB;AACH,QAAA,gCAAgC,GAGzC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,+EAA2C;IACxD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,oFAA6C,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,8CAA2B,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,oFAA6C,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,4CAA0B,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAC1B,0FAAgD,CACjD;CACF,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,aAAa;QACzB,YAAY,EAAE,eAAe;QAC7B,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,cAAc;QAC3B,gBAAgB,EAAE,mBAAmB;KACtC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,iCACE,iBAAoC,EAC5B;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,QAAA,gCAAgC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC1D,CAAC;AAAA,CACH"}

package/dist/commonjs/models/index.d.ts

@@ -4,6 +4,7 @@ export * from "./assessment-outcome.js";
 export * from "./assessment-query.js";
 export * from "./assessment-request-client-context.js";
 export * from "./assessment-request-identifiers.js";
+export * from "./assessment-request-issued-credential.js";
 export * from "./assessment-request-policy-context.js";
 export * from "./assessment-request.js";
 export * from "./assessment-timing.js";

package/dist/commonjs/models/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/commonjs/models/index.js

@@ -20,6 +20,7 @@ __exportStar(require("./assessment-outcome.js"), exports);
 __exportStar(require("./assessment-query.js"), exports);
 __exportStar(require("./assessment-request-client-context.js"), exports);
 __exportStar(require("./assessment-request-identifiers.js"), exports);
+__exportStar(require("./assessment-request-issued-credential.js"), exports);
 __exportStar(require("./assessment-request-policy-context.js"), exports);
 __exportStar(require("./assessment-request.js"), exports);
 __exportStar(require("./assessment-timing.js"), exports);

package/dist/commonjs/models/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,kEAAgD;AAChD,0DAAwC;AACxC,wDAAsC;AACtC,yEAAuD;AACvD,sEAAoD;AACpD,yEAAuD;AACvD,0DAAwC;AACxC,yDAAuC;AACvC,kDAAgC;AAChC,uDAAqC;AACrC,wDAAsC;AACtC,oDAAkC;AAClC,iEAA+C;AAC/C,8DAA4C;AAC5C,4CAA0B;AAC1B,sDAAoC;AACpC,mDAAiC;AACjC,uDAAqC;AACrC,sDAAoC;AACpC,8CAA4B;AAC5B,kDAAgC;AAChC,2DAAyC;AACzC,yDAAuC;AACvC,mDAAiC;AACjC,+CAA6B;AAC7B,sDAAoC;AACpC,4CAA0B;AAC1B,iDAA+B;AAC/B,kDAAgC;AAChC,uDAAqC;AACrC,yDAAuC;AACvC,yDAAuC;AACvC,uDAAqC;AACrC,kDAAgC;AAChC,4DAA0C;AAC1C,oDAAkC;AAClC,4CAA0B;AAC1B,iDAA+B;AAC/B,4DAA0C;AAC1C,+CAA6B;AAC7B,oEAAkD;AAClD,+DAA6C;AAC7C,wDAAsC;AACtC,gDAA8B;AAC9B,6DAA2C;AAC3C,6DAA2C;AAC3C,mDAAiC;AACjC,yDAAuC;AACvC,sDAAoC;AACpC,qDAAmC;AACnC,uDAAqC;AACrC,qDAAmC;AACnC,gEAA8C;AAC9C,+DAA6C;AAC7C,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,0DAAwC;AACxC,6DAA2C;AAC3C,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,sDAAoC;AACpC,8CAA4B;AAC5B,8CAA4B;AAC5B,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,kEAAgD;AAChD,0DAAwC;AACxC,wDAAsC;AACtC,yEAAuD;AACvD,sEAAoD;AACpD,4EAA0D;AAC1D,yEAAuD;AACvD,0DAAwC;AACxC,yDAAuC;AACvC,kDAAgC;AAChC,uDAAqC;AACrC,wDAAsC;AACtC,oDAAkC;AAClC,iEAA+C;AAC/C,8DAA4C;AAC5C,4CAA0B;AAC1B,sDAAoC;AACpC,mDAAiC;AACjC,uDAAqC;AACrC,sDAAoC;AACpC,8CAA4B;AAC5B,kDAAgC;AAChC,2DAAyC;AACzC,yDAAuC;AACvC,mDAAiC;AACjC,+CAA6B;AAC7B,sDAAoC;AACpC,4CAA0B;AAC1B,iDAA+B;AAC/B,kDAAgC;AAChC,uDAAqC;AACrC,yDAAuC;AACvC,yDAAuC;AACvC,uDAAqC;AACrC,kDAAgC;AAChC,4DAA0C;AAC1C,oDAAkC;AAClC,4CAA0B;AAC1B,iDAA+B;AAC/B,4DAA0C;AAC1C,+CAA6B;AAC7B,oEAAkD;AAClD,+DAA6C;AAC7C,wDAAsC;AACtC,gDAA8B;AAC9B,6DAA2C;AAC3C,6DAA2C;AAC3C,mDAAiC;AACjC,yDAAuC;AACvC,sDAAoC;AACpC,qDAAmC;AACnC,uDAAqC;AACrC,qDAAmC;AACnC,gEAA8C;AAC9C,+DAA6C;AAC7C,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,0DAAwC;AACxC,6DAA2C;AAC3C,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,sDAAoC;AACpC,8CAA4B;AAC5B,8CAA4B;AAC5B,iDAA+B"}

package/dist/commonjs/models/risk.d.ts

@@ -21,6 +21,14 @@ export type Risk = {
      * The recommended action: allow, step_up or review. Your application applies it.
      */
     recommendation: Recommendation;
+    /**
+     * true when the tenant's block threshold is set and score reached it. A provider hook can deny the signup on it; the provider decides and enforces. It does not change recommendation. It is false while blocking is off, the default, and a body from before the flag existed omits it: read absent as false.
+     */
+    block?: boolean | undefined;
+    /**
+     * The block threshold this answer used: block is true exactly when score is at least this value. Absent while blocking is off. NoResponse sets it per tenant on request, at or above the review threshold.
+     */
+    blockThreshold?: number | undefined;
     /**
      * How much of the planned evidence answered; it says nothing about risk.
      */

package/dist/commonjs/models/risk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAA8B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA4B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,UAAU,EAAE,cAAc,CAAC;IAC3B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC;;OAEG;IACH,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAmB3D,CAAC;AAEF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAA8B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA4B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,UAAU,EAAE,cAAc,CAAC;IAC3B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC;;OAEG;IACH,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAsB3D,CAAC;AAEF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}

package/dist/commonjs/models/risk.js

@@ -51,6 +51,8 @@ exports.Risk$inboundSchema = z.pipe(z.object({
     score: types.number(),
     band: band_js_1.Band$inboundSchema,
     recommendation: recommendation_js_1.Recommendation$inboundSchema,
+    block: types.optional(types.boolean()),
+    block_threshold: types.optional(types.number()),
     confidence: risk_confidence_js_1.RiskConfidence$inboundSchema,
     policy_version: types.string(),
     policy_basis: types.literal("heuristic_unvalidated"),
@@ -60,6 +62,7 @@ exports.Risk$inboundSchema = z.pipe(z.object({
     details: types.optional(risk_details_js_1.RiskDetails$inboundSchema),
 }), z.transform((v) => {
     return (0, primitives_js_1.remap)(v, {
+        "block_threshold": "blockThreshold",
         "policy_version": "policyVersion",
         "policy_basis": "policyBasis",
     });

package/dist/commonjs/models/risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,wDAAuD;AACvD,kDAA8C;AAE9C,MAAY,KAAK,mDAA+B;AAChD,uCAAqD;AAErD,2DAG6B;AAC7B,6DAG8B;AAC9B,yDAA8E;AAC9E,uDAA2E;AAC3E,qDAAwE;AACxE,uDAA2E;AA6C3E,gBAAgB;AACH,QAAA,kBAAkB,GAAiC,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,4BAAkB;IACxB,cAAc,EAAE,gDAA4B;IAC5C,UAAU,EAAE,iDAA4B;IACxC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yCAAwB,CAAC;IAC1C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,2CAAyB,CAAC;IAClD,QAAQ,EAAE,6CAA0B;IACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,2CAAyB,CAAC;CACnD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,sBACE,UAAkB,EACyB;IAC3C,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AAAA,CACH"}
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,wDAAuD;AACvD,kDAA8C;AAE9C,MAAY,KAAK,mDAA+B;AAChD,uCAAqD;AAErD,2DAG6B;AAC7B,6DAG8B;AAC9B,yDAA8E;AAC9E,uDAA2E;AAC3E,qDAAwE;AACxE,uDAA2E;AAqD3E,gBAAgB;AACH,QAAA,kBAAkB,GAAiC,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,4BAAkB;IACxB,cAAc,EAAE,gDAA4B;IAC5C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACtC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/C,UAAU,EAAE,iDAA4B;IACxC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yCAAwB,CAAC;IAC1C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,2CAAyB,CAAC;IAClD,QAAQ,EAAE,6CAA0B;IACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,2CAAyB,CAAC;CACnD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,sBACE,UAAkB,EACyB;IAC3C,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AAAA,CACH"}

package/dist/commonjs/sdk/assessments.d.ts

@@ -7,7 +7,7 @@ export declare class Assessments extends ClientSDK {
      * Assess identifiers for a signup or gateway decision.
      *
      * @remarks
-     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
      */
     create(request: operations.CreateAssessmentRequest, options?: RequestOptions): Promise<operations.CreateAssessmentResponse>;
     /**

package/dist/commonjs/sdk/assessments.js

@@ -13,7 +13,7 @@ class Assessments extends sdks_js_1.ClientSDK {
      * Assess identifiers for a signup or gateway decision.
      *
      * @remarks
-     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
      */
     async create(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, assessments_create_js_1.assessmentsCreate)(this, request, options));

package/dist/esm/funcs/assessments-create.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 export declare function assessmentsCreate(client: NoResponseCore, request: operations.CreateAssessmentRequest, options?: RequestOptions): APIPromise<Result<operations.CreateAssessmentResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=assessments-create.d.ts.map

package/dist/esm/funcs/assessments-create.js

@@ -13,7 +13,7 @@ import { APIPromise } from "../types/async.js";
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 export function assessmentsCreate(client, request, options) {
     return new APIPromise($do(client, request, options));

package/dist/esm/index.d.ts

@@ -8,6 +8,7 @@ export { constructEvent, verificationResponse, isExpiredEvent, WebhookVerificati
 export { handleLateResult, lateResultAction, clerkActions, workosActions, auth0Actions, ProviderActionError, DEFAULT_LATE_RESULT_POLICY, type LateResult, type LateResultAction, type LateResultOptions, type LateResultPolicy, type LateResultProvider, type ClerkActionsOptions, type WorkOSActionsOptions, type Auth0ActionsOptions, } from "./late-results.js";
 export { fromAuth0, fromClerk, fromCognito, fromEntra, fromFirebase, fromKeycloak, fromOIDC, fromOry, fromOryOAuth2, fromSupabase, fromWorkOS, type VerifiedClaims, type AuthContextOverrides, } from "./auth.js";
 export { DEFAULT_WAIT_TIMEOUT_MS, MIN_POLL_INTERVAL_MS } from "./wait.js";
+export { hashIssuedCredential } from "./issued-credential.js";
 export * from "./models/index.js";
 export type { CreateAssessmentRequest, GetAssessmentRequest, RecordAssessmentOutcomeRequest } from "./models/operations/index.js";
 export { SDK_METADATA, ServerList, type SDKOptions } from "./lib/config.js";

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/esm/index.js

@@ -8,6 +8,7 @@ export { constructEvent, verificationResponse, isExpiredEvent, WebhookVerificati
 export { handleLateResult, lateResultAction, clerkActions, workosActions, auth0Actions, ProviderActionError, DEFAULT_LATE_RESULT_POLICY, } from "./late-results.js";
 export { fromAuth0, fromClerk, fromCognito, fromEntra, fromFirebase, fromKeycloak, fromOIDC, fromOry, fromOryOAuth2, fromSupabase, fromWorkOS, } from "./auth.js";
 export { DEFAULT_WAIT_TIMEOUT_MS, MIN_POLL_INTERVAL_MS } from "./wait.js";
+export { hashIssuedCredential } from "./issued-credential.js";
 export * from "./models/index.js";
 export { SDK_METADATA, ServerList } from "./lib/config.js";
 export { HTTPClient } from "./lib/http.js";

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,GAQnB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,GAW1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,GAS3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,GAGX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,cAAc,mBAAmB,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAwC,MAAM,eAAe,CAAC;AAIjF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,kBAAkB,GAQnB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,GAW1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,0BAA0B,GAS3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,GAGX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,cAAc,mBAAmB,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAmB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAwC,MAAM,eAAe,CAAC;AAIjF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/esm/issued-credential.d.ts

@@ -0,0 +1,9 @@
+/**
+ * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * lower-case hex characters. The key never leaves your backend: send only this
+ * hash, as `issuedCredential.sha256` on the assessment request. The key is
+ * hashed as its UTF-8 bytes exactly as given, with no trimming or
+ * normalisation. An empty key throws a TypeError.
+ */
+export declare function hashIssuedCredential(key: string): string;
+//# sourceMappingURL=issued-credential.d.ts.map

package/dist/esm/issued-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issued-credential.d.ts","sourceRoot":"","sources":["../../src/issued-credential.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKxD"}

package/dist/esm/issued-credential.js

@@ -0,0 +1,15 @@
+import { createHash } from "node:crypto";
+/**
+ * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * lower-case hex characters. The key never leaves your backend: send only this
+ * hash, as `issuedCredential.sha256` on the assessment request. The key is
+ * hashed as its UTF-8 bytes exactly as given, with no trimming or
+ * normalisation. An empty key throws a TypeError.
+ */
+export function hashIssuedCredential(key) {
+    if (typeof key !== "string" || key.length === 0) {
+        throw new TypeError("issued key must be a non-empty string");
+    }
+    return createHash("sha256").update(key, "utf8").digest("hex");
+}
+//# sourceMappingURL=issued-credential.js.map

package/dist/esm/issued-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issued-credential.js","sourceRoot":"","sources":["../../src/issued-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAU;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC/D"}

package/dist/esm/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "2.0.11";
+    readonly sdkVersion: "2.0.12";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 2.0.11 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 2.0.12 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/esm/lib/config.js

@@ -24,8 +24,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "2.0.11",
+    sdkVersion: "2.0.12",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 2.0.11 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 2.0.12 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/esm/models/assessment-request-issued-credential.d.ts

@@ -0,0 +1,18 @@
+import * as z from "zod/v4-mini";
+/**
+ * Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+ */
+export type AssessmentRequestIssuedCredential = {
+    /**
+     * SHA-256 of the issued key's UTF-8 bytes, as 64 lower-case hex characters.
+     */
+    sha256: string;
+};
+/** @internal */
+export type AssessmentRequestIssuedCredential$Outbound = {
+    sha256: string;
+};
+/** @internal */
+export declare const AssessmentRequestIssuedCredential$outboundSchema: z.ZodMiniType<AssessmentRequestIssuedCredential$Outbound, AssessmentRequestIssuedCredential>;
+export declare function assessmentRequestIssuedCredentialToJSON(assessmentRequestIssuedCredential: AssessmentRequestIssuedCredential): string;
+//# sourceMappingURL=assessment-request-issued-credential.d.ts.map

package/dist/esm/models/assessment-request-issued-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment-request-issued-credential.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request-issued-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;GAEG;AACH,MAAM,MAAM,iCAAiC,GAAG;IAC9C;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0CAA0C,GAAG;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gDAAgD,EAAE,CAAC,CAAC,WAAW,CAC1E,0CAA0C,EAC1C,iCAAiC,CAGjC,CAAC;AAEH,wBAAgB,uCAAuC,CACrD,iCAAiC,EAAE,iCAAiC,GACnE,MAAM,CAMR"}

package/dist/esm/models/assessment-request-issued-credential.js

@@ -0,0 +1,9 @@
+import * as z from "zod/v4-mini";
+/** @internal */
+export const AssessmentRequestIssuedCredential$outboundSchema = z.object({
+    sha256: z.string(),
+});
+export function assessmentRequestIssuedCredentialToJSON(assessmentRequestIssuedCredential) {
+    return JSON.stringify(AssessmentRequestIssuedCredential$outboundSchema.parse(assessmentRequestIssuedCredential));
+}
+//# sourceMappingURL=assessment-request-issued-credential.js.map

package/dist/esm/models/assessment-request-issued-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assessment-request-issued-credential.js","sourceRoot":"","sources":["../../../src/models/assessment-request-issued-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAiBjC,gBAAgB;AAChB,MAAM,CAAC,MAAM,gDAAgD,GAGzD,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,uCAAuC,CACrD,iCAAoE,EAC5D;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,gDAAgD,CAAC,KAAK,CACpD,iCAAiC,CAClC,CACF,CAAC;AAAA,CACH"}

package/dist/esm/models/assessment-request.d.ts

@@ -1,6 +1,7 @@
 import * as z from "zod/v4-mini";
 import { AssessmentRequestClientContext, AssessmentRequestClientContext$Outbound } from "./assessment-request-client-context.js";
 import { AssessmentRequestIdentifiers, AssessmentRequestIdentifiers$Outbound } from "./assessment-request-identifiers.js";
+import { AssessmentRequestIssuedCredential, AssessmentRequestIssuedCredential$Outbound } from "./assessment-request-issued-credential.js";
 import { AssessmentRequestPolicyContext, AssessmentRequestPolicyContext$Outbound } from "./assessment-request-policy-context.js";
 import { AuthContext, AuthContext$Outbound } from "./auth-context.js";
 import { ResponseMode } from "./response-mode.js";
@@ -37,6 +38,10 @@ export type AssessmentRequest = {
      * Normalised claims from a session your backend has already verified with WorkOS, Clerk, Auth0 or any OIDC provider. Pass the output of the SDK's auth adapters, not a raw token.
      */
     authContext?: AuthContext | undefined;
+    /**
+     * Optional. When the signup gate issues an API key to the new account, send SHA-256 of that key, so later usage of the key, or a leaked copy, ties back to this assessment. Each SDK has a helper that computes it. Send only the hash: customer keys are high-entropy, so the hash reveals nothing about them. The assessment stores it, and no response, webhook or log carries it.
+     */
+    issuedCredential?: AssessmentRequestIssuedCredential | undefined;
 };
 /** @internal */
 export type AssessmentRequest$Outbound = {
@@ -48,6 +53,7 @@ export type AssessmentRequest$Outbound = {
     response_mode?: string | undefined;
     client_context?: AssessmentRequestClientContext$Outbound | undefined;
     auth_context?: AuthContext$Outbound | undefined;
+    issued_credential?: AssessmentRequestIssuedCredential$Outbound | undefined;
 };
 /** @internal */
 export declare const AssessmentRequest$outboundSchema: z.ZodMiniType<AssessmentRequest$Outbound, AssessmentRequest>;

package/dist/esm/models/assessment-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assessment-request.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EAEtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,WAAW,EACX,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAA+B,MAAM,oBAAoB,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,WAAW,EAAE,4BAA4B,CAAC;IAC1C,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qCAAqC,CAAC;IACnD,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,0BAA0B,EAC1B,iBAAiB,CAuBlB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,iBAAiB,GACnC,MAAM,CAIR"}
+{"version":3,"file":"assessment-request.d.ts","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EAEtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,iCAAiC,EACjC,0CAA0C,EAE3C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,8BAA8B,EAC9B,uCAAuC,EAExC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,WAAW,EACX,oBAAoB,EAErB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAA+B,MAAM,oBAAoB,CAAC;AAE/E;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,WAAW,EAAE,4BAA4B,CAAC;IAC1C,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACxC;;OAEG;IACH,aAAa,CAAC,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC3D;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,gBAAgB,CAAC,EAAE,iCAAiC,GAAG,SAAS,CAAC;CAClE,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,0BAA0B,GAAG;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,qCAAqC,CAAC;IACnD,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EAAE,uCAAuC,GAAG,SAAS,CAAC;IACrE,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAChD,iBAAiB,CAAC,EAAE,0CAA0C,GAAG,SAAS,CAAC;CAC5E,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,WAAW,CAC1D,0BAA0B,EAC1B,iBAAiB,CA2BlB,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,iBAAiB,EAAE,iBAAiB,GACnC,MAAM,CAIR"}

package/dist/esm/models/assessment-request.js

@@ -2,6 +2,7 @@ import * as z from "zod/v4-mini";
 import { remap as remap$ } from "../lib/primitives.js";
 import { AssessmentRequestClientContext$outboundSchema, } from "./assessment-request-client-context.js";
 import { AssessmentRequestIdentifiers$outboundSchema, } from "./assessment-request-identifiers.js";
+import { AssessmentRequestIssuedCredential$outboundSchema, } from "./assessment-request-issued-credential.js";
 import { AssessmentRequestPolicyContext$outboundSchema, } from "./assessment-request-policy-context.js";
 import { AuthContext$outboundSchema, } from "./auth-context.js";
 import { ResponseMode$outboundSchema } from "./response-mode.js";
@@ -15,6 +16,7 @@ export const AssessmentRequest$outboundSchema = z.pipe(z.object({
     responseMode: z.optional(ResponseMode$outboundSchema),
     clientContext: z.optional(AssessmentRequestClientContext$outboundSchema),
     authContext: z.optional(AuthContext$outboundSchema),
+    issuedCredential: z.optional(AssessmentRequestIssuedCredential$outboundSchema),
 }), z.transform((v) => {
     return remap$(v, {
         accountId: "account_id",
@@ -24,6 +26,7 @@ export const AssessmentRequest$outboundSchema = z.pipe(z.object({
         responseMode: "response_mode",
         clientContext: "client_context",
         authContext: "auth_context",
+        issuedCredential: "issued_credential",
     });
 }));
 export function assessmentRequestToJSON(assessmentRequest) {

package/dist/esm/models/assessment-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"assessment-request.js","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAGL,6CAA6C,GAC9C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAGL,2CAA2C,GAC5C,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAGL,6CAA6C,GAC9C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAGL,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAgB,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAiD/E,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC,GAGzC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,2CAA2C;IACxD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACpD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,aAAa;QACzB,YAAY,EAAE,eAAe;QAC7B,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,cAAc;KAC5B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,iBAAoC,EAC5B;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,gCAAgC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC1D,CAAC;AAAA,CACH"}
+{"version":3,"file":"assessment-request.js","sourceRoot":"","sources":["../../../src/models/assessment-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAGL,6CAA6C,GAC9C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAGL,2CAA2C,GAC5C,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAGL,gDAAgD,GACjD,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAGL,6CAA6C,GAC9C,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAGL,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAgB,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAsD/E,gBAAgB;AAChB,MAAM,CAAC,MAAM,gCAAgC,GAGzC,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,2CAA2C;IACxD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAC1B,gDAAgD,CACjD;CACF,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,SAAS,EAAE,YAAY;QACvB,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,aAAa;QACzB,YAAY,EAAE,eAAe;QAC7B,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,cAAc;QAC3B,gBAAgB,EAAE,mBAAmB;KACtC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,iBAAoC,EAC5B;IACR,OAAO,IAAI,CAAC,SAAS,CACnB,gCAAgC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAC1D,CAAC;AAAA,CACH"}

package/dist/esm/models/index.d.ts

@@ -4,6 +4,7 @@ export * from "./assessment-outcome.js";
 export * from "./assessment-query.js";
 export * from "./assessment-request-client-context.js";
 export * from "./assessment-request-identifiers.js";
+export * from "./assessment-request-issued-credential.js";
 export * from "./assessment-request-policy-context.js";
 export * from "./assessment-request.js";
 export * from "./assessment-timing.js";

package/dist/esm/models/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/esm/models/index.js

@@ -4,6 +4,7 @@ export * from "./assessment-outcome.js";
 export * from "./assessment-query.js";
 export * from "./assessment-request-client-context.js";
 export * from "./assessment-request-identifiers.js";
+export * from "./assessment-request-issued-credential.js";
 export * from "./assessment-request-policy-context.js";
 export * from "./assessment-request.js";
 export * from "./assessment-timing.js";

package/dist/esm/models/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wCAAwC,CAAC;AACvD,cAAc,qCAAqC,CAAC;AACpD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,wCAAwC,CAAC;AACvD,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,WAAW,CAAC;AAC1B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,mCAAmC,CAAC;AAClD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,eAAe,CAAC;AAC9B,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/esm/models/risk.d.ts

@@ -21,6 +21,14 @@ export type Risk = {
      * The recommended action: allow, step_up or review. Your application applies it.
      */
     recommendation: Recommendation;
+    /**
+     * true when the tenant's block threshold is set and score reached it. A provider hook can deny the signup on it; the provider decides and enforces. It does not change recommendation. It is false while blocking is off, the default, and a body from before the flag existed omits it: read absent as false.
+     */
+    block?: boolean | undefined;
+    /**
+     * The block threshold this answer used: block is true exactly when score is at least this value. Absent while blocking is off. NoResponse sets it per tenant on request, at or above the review threshold.
+     */
+    blockThreshold?: number | undefined;
     /**
      * How much of the planned evidence answered; it says nothing about risk.
      */

package/dist/esm/models/risk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAA8B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA4B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,UAAU,EAAE,cAAc,CAAC;IAC3B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC;;OAEG;IACH,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAmB3D,CAAC;AAEF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,IAAI,EAAsB,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,cAAc,EAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAA8B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA4B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,WAAW,EAA6B,MAAM,mBAAmB,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,IAAI,EAAE,IAAI,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;OAEG;IACH,UAAU,EAAE,cAAc,CAAC;IAC3B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,uBAAuB,CAAC;IACrC;;OAEG;IACH,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,YAAY,CAAC;IACvB;;OAEG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACnC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAsB3D,CAAC;AAEF,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}

package/dist/esm/models/risk.js

@@ -14,6 +14,8 @@ export const Risk$inboundSchema = z.pipe(z.object({
     score: types.number(),
     band: Band$inboundSchema,
     recommendation: Recommendation$inboundSchema,
+    block: types.optional(types.boolean()),
+    block_threshold: types.optional(types.number()),
     confidence: RiskConfidence$inboundSchema,
     policy_version: types.string(),
     policy_basis: types.literal("heuristic_unvalidated"),
@@ -23,6 +25,7 @@ export const Risk$inboundSchema = z.pipe(z.object({
     details: types.optional(RiskDetails$inboundSchema),
 }), z.transform((v) => {
     return remap$(v, {
+        "block_threshold": "blockThreshold",
         "policy_version": "policyVersion",
         "policy_basis": "policyBasis",
     });

package/dist/esm/models/risk.js.map

@@ -1 +1 @@
-{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAQ,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAEL,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAgB,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAe,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAc,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAe,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AA6C3E,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAAiC,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,kBAAkB;IACxB,cAAc,EAAE,4BAA4B;IAC5C,UAAU,EAAE,4BAA4B;IACxC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC1C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACnD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,UAAkB,EACyB;IAC3C,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AAAA,CACH"}
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../../../src/models/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,KAAK,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAQ,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAEL,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAgB,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAe,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAc,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAe,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAqD3E,gBAAgB;AAChB,MAAM,CAAC,MAAM,kBAAkB,GAAiC,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,MAAM,CAAC;IACP,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,kBAAkB;IACxB,cAAc,EAAE,4BAA4B;IAC5C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACtC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/C,UAAU,EAAE,4BAA4B;IACxC,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE;IAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC1C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAClD,QAAQ,EAAE,0BAA0B;IACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACnD,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC,CAAC,EAAE;QACf,iBAAiB,EAAE,gBAAgB;QACnC,gBAAgB,EAAE,eAAe;QACjC,cAAc,EAAE,aAAa;KAC9B,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,UAAkB,EACyB;IAC3C,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AAAA,CACH"}

package/dist/esm/sdk/assessments.d.ts

@@ -7,7 +7,7 @@ export declare class Assessments extends ClientSDK {
      * Assess identifiers for a signup or gateway decision.
      *
      * @remarks
-     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
      */
     create(request: operations.CreateAssessmentRequest, options?: RequestOptions): Promise<operations.CreateAssessmentResponse>;
     /**

package/dist/esm/sdk/assessments.js

@@ -10,7 +10,7 @@ export class Assessments extends ClientSDK {
      * Assess identifiers for a signup or gateway decision.
      *
      * @remarks
-     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+     * Returns within the deadline (500 ms at most) with a complete, partial or pending assessment: 200 carries complete or partial, 202 carries pending with Location and Retry-After. A pending answer has no recommendation; apply your own fallback for pending, 429, 503 or a timeout. risk.block says when your block threshold was reached. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
      */
     async create(request, options) {
         return unwrapAsync(assessmentsCreate(this, request, options));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noresponse/node",
-  "version": "2.0.11",
+  "version": "2.0.12",
   "author": "NoResponse",
   "bugs": {
     "url": "https://github.com/noresponsehq/node/issues"