@noresponse/node 4.0.1 → 5.0.0

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Changelog
 
+## 5.0.0
+
+* `sdk.assessments.create()`: 
+  *  `request.body.flow` **Changed** (Breaking ⚠️)
+  *  `response` **Changed** (Breaking ⚠️)
+  *  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.assessments.get()`: 
+  *  `response` **Changed** (Breaking ⚠️)
+  *  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.assessments.delete()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.assessments.recordOutcome()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.assessments.query()`: 
+  *  `response.items[].risk` **Changed** (Breaking ⚠️)
+  *  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.accounts.get()`: 
+  *  `response` **Changed** (Breaking ⚠️)
+  *  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.accounts.delete()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.accounts.listAssessments()`: 
+  *  `response.items[].risk` **Changed** (Breaking ⚠️)
+  *  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.keyUsage.record()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.keys.rotate()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.integrations.create()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.integrations.list()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.integrations.delete()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.integrations.rotate()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.list()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.create()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.delete()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.rotateSigningKey()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.sendTestEvent()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.listDeliveries()`:  `error.code` **Changed** (Breaking ⚠️)
+* `sdk.webhookEndpoints.replayDelivery()`:  `error.code` **Changed** (Breaking ⚠️)
+
 ## 4.0.1
 
 No changes detected.

package/README.md

@@ -2,7 +2,7 @@
 
 # @noresponse/node
 
-The NoResponse client for Node.js. It assesses a signup or gateway event, polls a pending assessment, pages through an account's history, records what you later learned, rotates your API key and verifies webhooks.
+The NoResponse client for Node.js. It assesses an account creation, login or purchase, polls a pending assessment, pages through an account's history, records what you later learned, rotates your API key and verifies webhooks.
 
 Node.js 20 or later. ESM and CommonJS. TypeScript types included. The client is generated from the NoResponse OpenAPI document; webhooks, auth adapters and the wait helper are hand-written.
 
@@ -19,7 +19,7 @@ const nr = new NoResponse(); // reads NORESPONSE_API_KEY, or new NoResponse("nrk
 
 const assessment = await nr.assessments.create({
   accountId: "usr_8f2k1",
-  flow: "signup",
+  flow: "account_creation",
   identifiers: { email: "jordan.lee@example.com", name: "Jordan Lee", ip: "81.2.69.160" },
 });
 
@@ -66,15 +66,15 @@ Every method takes request options as its last argument: `{ timeoutMs, signal, h
 const assessment = await nr.assessments.create(
   {
     accountId: "usr_8f2k1",                                    // your opaque account id
-    flow: "signup",                                            // signup, login or purchase
-    depth: "full",                                             // quick or full; full for signup and purchase, quick for login by default
+    flow: "account_creation",                                            // account_creation, login or purchase
+    depth: "full",                                             // quick or full; full for account_creation and purchase, quick for login by default
     identifiers: { email: "jordan.lee@example.com" },          // email, username or phone; name and ip refine the match
     policyContext: { region: "AU" },
     clientContext: { timezone: "Australia/Sydney", platform: "web", formDurationMs: 1800 },
     authContext: fromClerk(claims, { sessionCreatedAt }),      // see Auth adapters
     responseMode: "standard",                                  // detailed adds detail.signals and detail.risk.details (detailed scope)
   },
-  { idempotencyKey: "signup-usr_8f2k1-0001" },
+  { idempotencyKey: "account-usr_8f2k1-0001" },
 );
 ```
 
@@ -112,7 +112,7 @@ An account is the `accountId` you send with your assessments. It holds one curre
 const account = await nr.accounts.get("usr_8f2k1");
 account.risk.score;              // 0 (safe) to 100 (risky)
 account.risk.decision;           // allow, step_up, review or block
-account.decisionsByFlow.login;   // a decision for signup, login and purchase
+account.decisionsByFlow.login;   // a decision for account_creation, login and purchase
 account.assessmentId;            // the assessment the risk comes from
 
 const history = await nr.accounts.listAssessments("usr_8f2k1", { limit: 20 });
@@ -229,7 +229,7 @@ await nr.assessments.create(params, { retries: { strategy: "none" } });
 
 ## Issued keys
 
-When your signup gate issues an API key to the new account, send only its hash, as `issued_credential.sha256`; the key itself never leaves your backend.
+When your platform issues an API key to the new account, send only its hash, as `issued_credential.sha256`; the key itself never leaves your backend.
 
 ```ts
 import { hashIssuedCredential } from "@noresponse/node";
@@ -294,7 +294,7 @@ async function handler(req, res) {
     forgetAccount(event.data.accountId, event.data.deletedAt);
     return res.status(204).end();
   }
-  if (event.type === "tenant.deleted") {
+  if (event.type === "workspace.deleted") {
     // The workspace is deleted: the last event this endpoint receives, once per environment.
     forgetEnvironment(event.data.environment);
     return res.status(204).end();
@@ -325,7 +325,7 @@ async function handler(req, res) {
 
 ### Late results
 
-An assessment can be revised after you allowed the signup. `handleLateResult` verifies the delivery with `constructEvent`, applies your policy and acts through your auth provider's admin API:
+An assessment can be revised after you allowed the account creation. `handleLateResult` verifies the delivery with `constructEvent`, applies your policy and acts through your auth provider's admin API:
 
 ```ts
 import { clerkActions, handleLateResult } from "@noresponse/node"; // or workosActions, auth0Actions

package/dist/commonjs/client.d.ts

@@ -78,7 +78,7 @@ export declare class Assessments {
     private readonly inner;
     constructor(inner: GeneratedAssessments);
     /**
-     * Assess a signup or gateway event. Returns the assessment whether the
+     * Assess an account creation, login or purchase. Returns the assessment whether the
      * answer was 200 (complete or partial) or 202 (pending; see meta.retryAfter
      * and assessments.wait). The idempotency key is generated when omitted and
      * reused on every retry of this call.
@@ -131,7 +131,7 @@ export declare class Accounts {
     listAssessments(accountId: string, options?: ListAssessmentsOptions): Promise<AssessmentPage>;
 }
 /**
- * Usage of the API keys your signup gate issued to your accounts. Needs the
+ * Usage of the API keys your platform issued to your accounts. Needs the
  * `assess` scope. Most callers use `buffer()`, which batches facts and sends
  * them in the background; `record` sends one batch now.
  */

package/dist/commonjs/client.js

@@ -139,7 +139,7 @@ class Assessments {
         this.inner = inner;
     }
     /**
-     * Assess a signup or gateway event. Returns the assessment whether the
+     * Assess an account creation, login or purchase. Returns the assessment whether the
      * answer was 200 (complete or partial) or 202 (pending; see meta.retryAfter
      * and assessments.wait). The idempotency key is generated when omitted and
      * reused on every retry of this call.
@@ -255,7 +255,7 @@ class Accounts {
 }
 exports.Accounts = Accounts;
 /**
- * Usage of the API keys your signup gate issued to your accounts. Needs the
+ * Usage of the API keys your platform issued to your accounts. Needs the
  * `assess` scope. Most callers use `buffer()`, which batches facts and sends
  * them in the background; `record` sends one batch now.
  */

package/dist/commonjs/funcs/accounts-list-assessments.d.ts

@@ -13,7 +13,7 @@ import { PageIterator } from "../types/operations.js";
  * Page through one account's unexpired assessments.
  *
  * @remarks
- * The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
+ * The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
  */
 export declare function accountsListAssessments(client: NoResponseCore, request: operations.ListAccountAssessmentsRequest, options?: RequestOptions): APIPromise<PageIterator<Result<operations.ListAccountAssessmentsResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>, {
     cursor: string;

package/dist/commonjs/funcs/accounts-list-assessments.js

@@ -50,7 +50,7 @@ const operations_js_1 = require("../types/operations.js");
  * Page through one account's unexpired assessments.
  *
  * @remarks
- * The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
+ * The account's history: the same page as POST /v1/assessments/query for this account_id, newest first, each at its latest assessment_version. Requires the history scope. Read-only and safe to retry. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope. The account_id travels in the URL; use POST /v1/assessments/query to keep it out of access logs.
  */
 function accountsListAssessments(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/assessments-create.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Assesses one signup, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for signup and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Assesses one account creation, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for account_creation and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 export declare function assessmentsCreate(client: NoResponseCore, request: operations.CreateAssessmentRequest, options?: RequestOptions): APIPromise<Result<operations.CreateAssessmentResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=assessments-create.d.ts.map

package/dist/commonjs/funcs/assessments-create.js

@@ -49,7 +49,7 @@ const async_js_1 = require("../types/async.js");
  * Assess identifiers for a signup or gateway decision.
  *
  * @remarks
- * Assesses one signup, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for signup and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
+ * Assesses one account creation, login or purchase (flow) and answers with the account's one current risk: account.risk.decision is the decision for this flow (allow, step_up, review or block, where block means your block threshold was reached), and detail holds this assessment's own facts. depth sets how long the answer waits for sources: quick waits only for the fast ones (500 ms), full for the whole budget (3000 ms at most); it defaults to full for account_creation and purchase and quick for login. 200 carries complete or partial, 202 carries pending with Location and Retry-After. While the account's first assessment is pending, account is absent: apply your own fallback for that, 429, 503 or a timeout. NoResponse blocks nothing itself; you decide. Requires the assess scope. Idempotency-Key is required and is bound to the body for 24 hours: the same key with the same body replays the latest assessment with Idempotent-Replayed: true and starts no new work; the same key with a different body answers 409 idempotency_key_reused. response_mode defaults to standard; detailed needs the detailed scope.
  */
 function assessmentsCreate(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/assessments-get.d.ts

@@ -12,7 +12,7 @@ import { Result } from "../types/fp.js";
  * Poll the authoritative assessment of one assessment.
  *
  * @remarks
- * Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another tenant's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
+ * Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another workspace's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
  */
 export declare function assessmentsGet(client: NoResponseCore, request: operations.GetAssessmentRequest, options?: RequestOptions): APIPromise<Result<operations.GetAssessmentResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=assessments-get.d.ts.map

package/dist/commonjs/funcs/assessments-get.js

@@ -49,7 +49,7 @@ const async_js_1 = require("../types/async.js");
  * Poll the authoritative assessment of one assessment.
  *
  * @remarks
- * Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another tenant's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
+ * Returns the highest assessment_version, with the account's current risk. Requires the assess or history scope. While status is pending, or partial with a source still running, the response carries Retry-After; poll no faster than it says. Another workspace's assessment, an unknown or expired assessment and a malformed assessment_id all answer 404 not_found. response_mode=detailed needs the detailed scope.
  */
 function assessmentsGet(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/assessments-query.d.ts

@@ -14,7 +14,7 @@ import { PageIterator } from "../types/operations.js";
  * Page through one account's unexpired assessments.
  *
  * @remarks
- * History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
+ * History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
  */
 export declare function assessmentsQuery(client: NoResponseCore, request: models.AssessmentQuery, options?: RequestOptions): APIPromise<PageIterator<Result<operations.QueryAccountAssessmentsResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>, {
     cursor: string;

package/dist/commonjs/funcs/assessments-query.js

@@ -51,7 +51,7 @@ const operations_js_1 = require("../types/operations.js");
  * Page through one account's unexpired assessments.
  *
  * @remarks
- * History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your tenant and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
+ * History is a POST with account_id in the body so an account identifier stays out of URLs and access logs. Requires the history scope. Read-only and safe to retry. Newest first, each at its latest assessment_version. An account with no assessments answers 200 with empty items. The cursor is opaque and bound to your workspace and the account; a tampered or expired cursor answers 400 invalid_cursor. response_mode=detailed needs the detailed scope.
  */
 function assessmentsQuery(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/integrations-list.d.ts

@@ -9,7 +9,7 @@ import * as operations from "../models/operations/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * List the tenant's integrations.
+ * List the workspace's integrations.
  *
  * @remarks
  * Every integration, oldest first. Listings carry no secrets. Requires the integrations scope.

package/dist/commonjs/funcs/integrations-list.js

@@ -43,7 +43,7 @@ const errors = __importStar(require("../models/errors/index.js"));
 const operations = __importStar(require("../models/operations/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * List the tenant's integrations.
+ * List the workspace's integrations.
  *
  * @remarks
  * Every integration, oldest first. Listings carry no secrets. Requires the integrations scope.

package/dist/commonjs/funcs/key-usage-record.d.ts

@@ -9,10 +9,10 @@ import * as operations from "../models/operations/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Report requests made with API keys your signup gate issued.
+ * Report requests made with API keys your platform issued.
  *
  * @remarks
- * Records requests made with API keys your signup gate issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is required and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
+ * Records requests made with API keys your platform issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is required and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
  */
 export declare function keyUsageRecord(client: NoResponseCore, request: operations.RecordKeyUsageRequest, options?: RequestOptions): APIPromise<Result<operations.RecordKeyUsageResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=key-usage-record.d.ts.map

package/dist/commonjs/funcs/key-usage-record.js

@@ -46,10 +46,10 @@ const errors = __importStar(require("../models/errors/index.js"));
 const operations = __importStar(require("../models/operations/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * Report requests made with API keys your signup gate issued.
+ * Report requests made with API keys your platform issued.
  *
  * @remarks
- * Records requests made with API keys your signup gate issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is required and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
+ * Records requests made with API keys your platform issued to your accounts, one event per request: the key's SHA-256 (the issued_credential.sha256 the account's assessment carried), the client IP, the time and optionally the user agent, model and token counts. Most callers use the SDK's usage buffer, which batches events and sends them in the background. Sampling is allowed: sample_rate weights an event's request and token counts. Requires the assess scope. Idempotency-Key is required and handled as on POST /v1/assessments: a retry with the same key and body answers the same record with Idempotent-Replayed: true and counts nothing again; a different body answers 409. A batch holds 1 to 500 events and at most 256 KiB. No raw event is kept: usage is aggregated per key, and IPs, user agents and models are kept only as keyed digests, with the IP's country, for 24 hours. When one key is used from 20 or more IP addresses, or 3 or more countries, within 24 hours, every account whose assessment carried that key gets the shared_api_key reason for 30 days.
  */
 function keyUsageRecord(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/webhook-endpoints-list-deliveries.d.ts

@@ -13,7 +13,7 @@ import { PageIterator } from "../types/operations.js";
  * List an endpoint's delivery attempts.
  *
  * @remarks
- * Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your tenant and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
+ * Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your workspace and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
  */
 export declare function webhookEndpointsListDeliveries(client: NoResponseCore, request: operations.ListWebhookDeliveriesRequest, options?: RequestOptions): APIPromise<PageIterator<Result<operations.ListWebhookDeliveriesResponse, errors.BadRequestError | errors.AuthenticationError | errors.PermissionDeniedError | errors.NotFoundError | errors.ConflictError | errors.RateLimitError | NoResponseError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>, {
     cursor: string;

package/dist/commonjs/funcs/webhook-endpoints-list-deliveries.js

@@ -50,7 +50,7 @@ const operations_js_1 = require("../types/operations.js");
  * List an endpoint's delivery attempts.
  *
  * @remarks
- * Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your tenant and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
+ * Every POST the endpoint received, newest first: the event id and type, which attempt it was, whether it was a replay, delivered or failed, the response code, why it failed and how long it took. Attempts are kept for 30 days, or your retention_days when that is shorter, and are deleted with the assessment they carried. Requires the webhooks scope. Read-only and safe to retry. The cursor is opaque and bound to your workspace and the endpoint; a tampered or expired cursor answers 400 invalid_cursor.
  */
 function webhookEndpointsListDeliveries(client, request, options) {
     return new async_js_1.APIPromise($do(client, request, options));

package/dist/commonjs/funcs/webhook-endpoints-list.d.ts

@@ -9,7 +9,7 @@ import * as operations from "../models/operations/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * List the tenant's webhook endpoints.
+ * List the workspace's webhook endpoints.
  *
  * @remarks
  * Lists your webhook endpoints in every state, ordered by endpoint_id, with the ids of their signing keys and without secrets. Requires the webhooks scope.

package/dist/commonjs/funcs/webhook-endpoints-list.js

@@ -43,7 +43,7 @@ const errors = __importStar(require("../models/errors/index.js"));
 const operations = __importStar(require("../models/operations/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * List the tenant's webhook endpoints.
+ * List the workspace's webhook endpoints.
  *
  * @remarks
  * Lists your webhook endpoints in every state, ordered by endpoint_id, with the ids of their signing keys and without secrets. Requires the webhooks scope.

package/dist/commonjs/index.d.ts

@@ -4,7 +4,7 @@
  */
 export { NoResponse, Assessments, Accounts, Keys, KeyUsage, WebhookEndpoints, Integrations, DEFAULT_BASE_URL, DEFAULT_TIMEOUT_MS, type NoResponseOptions, type CreateOptions, type GetOptions, type ListAssessmentsOptions, type AssessmentPage, type ListDeliveriesOptions, type DeliveryPage, type ResponseMeta, type WithMeta, type WaitOptions, } from "./client.js";
 export * from "./errors.js";
-export { constructEvent, verificationResponse, isExpiredEvent, WebhookVerificationError, DEFAULT_TOLERANCE_SECONDS, type WebhookEvent, type AssessmentUpdatedEvent, type AssessmentExpiredEvent, type EndpointVerificationEvent, type AccountDeletedEvent, type TenantDeletedEvent, type EndpointDisabledEvent, type AccountRiskChangedEvent, type AssessmentExpired, type EndpointVerification, type AccountDeleted, type TenantDeleted, type EndpointDisabled, type AccountRiskChanged, type ConstructEventOptions, type HeaderInput, type WebhookSecrets, type WebhookErrorCode, } from "./webhooks.js";
+export { constructEvent, verificationResponse, isExpiredEvent, WebhookVerificationError, DEFAULT_TOLERANCE_SECONDS, type WebhookEvent, type AssessmentUpdatedEvent, type AssessmentExpiredEvent, type EndpointVerificationEvent, type AccountDeletedEvent, type WorkspaceDeletedEvent, type EndpointDisabledEvent, type AccountRiskChangedEvent, type AssessmentExpired, type EndpointVerification, type AccountDeleted, type WorkspaceDeleted, type EndpointDisabled, type AccountRiskChanged, type ConstructEventOptions, type HeaderInput, type WebhookSecrets, type WebhookErrorCode, } from "./webhooks.js";
 export { handleLateResult, lateResultAction, clerkActions, workosActions, auth0Actions, logOnlyActions, ProviderActionError, DEFAULT_LATE_RESULT_POLICY, type LateResult, type LateResultAction, type LateResultOptions, type LateResultPolicy, type LateResultActor, type LateResultProvider, type ClerkActionsOptions, type WorkOSActionsOptions, type Auth0ActionsOptions, type LogOnlyActionsOptions, } from "./late-results.js";
 export { fromAuth0, fromClerk, fromCognito, fromEntra, fromFirebase, fromKeycloak, fromOIDC, fromOry, fromOryOAuth2, fromSupabase, fromWorkOS, type VerifiedClaims, type AuthContextOverrides, } from "./auth.js";
 export { DEFAULT_WAIT_TIMEOUT_MS, MIN_POLL_INTERVAL_MS } from "./wait.js";

package/dist/commonjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,cAAc,aAAa,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAC;AACxB,cAAc,mBAAmB,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/commonjs/issued-credential.d.ts

@@ -1,5 +1,5 @@
 /**
- * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * SHA-256 of an API key your platform issued to the new account, as 64
  * lower-case hex characters. The key never leaves your backend: send only this
  * hash, as `issuedCredential.sha256` on the assessment request. The key is
  * hashed as its UTF-8 bytes exactly as given, with no trimming or

package/dist/commonjs/issued-credential.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.hashIssuedCredential = hashIssuedCredential;
 const node_crypto_1 = require("node:crypto");
 /**
- * SHA-256 of an API key your signup gate issued to the new account, as 64
+ * SHA-256 of an API key your platform issued to the new account, as 64
  * lower-case hex characters. The key never leaves your backend: send only this
  * hash, as `issuedCredential.sha256` on the assessment request. The key is
  * hashed as its UTF-8 bytes exactly as given, with no trimming or

package/dist/commonjs/key-usage.js

@@ -4,8 +4,8 @@ exports.KeyUsageBuffer = exports.DEFAULT_MAX_QUEUE = exports.DEFAULT_FLUSH_INTER
 /**
  * The key usage buffer. Hand-written; not generated.
  *
- * Your API gateway calls `record` once per request made with a key your signup
- * gate issued. The buffer keeps the facts in memory and sends them to POST
+ * Your API gateway calls `record` once per request made with a key your platform
+ * issued. The buffer keeps the facts in memory and sends them to POST
  * /v1/key_usage/batches in the background: when `batchSize` facts are queued,
  * every `flushIntervalMs`, and on `flush()` or `close()`. `record` never
  * blocks and never throws. When the queue is full the oldest fact is dropped

package/dist/commonjs/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "4.0.1";
+    readonly sdkVersion: "5.0.0";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 4.0.1 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 5.0.0 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -28,8 +28,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "4.0.1",
+    sdkVersion: "5.0.0",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 4.0.1 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 5.0.0 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/commonjs/models/account-decisions-by-flow.d.ts

@@ -3,13 +3,13 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { AccountDecision } from "./account-decision.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its signup thresholds, so the flows differ only where it set them.
+ * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
  */
 export type AccountDecisionsByFlow = {
     /**
      * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
      */
-    signup: AccountDecision;
+    accountCreation: AccountDecision;
     /**
      * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
      */

package/dist/commonjs/models/account-decisions-by-flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-decisions-by-flow.d.ts","sourceRoot":"","sources":["../../../src/models/account-decisions-by-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC;;OAEG;IACH,MAAM,EAAE,eAAe,CAAC;IACxB;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC;IACvB;;OAEG;IACH,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,WAAW,CAC9D,sBAAsB,EACtB,OAAO,CAKP,CAAC;AAEH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D"}
+{"version":3,"file":"account-decisions-by-flow.d.ts","sourceRoot":"","sources":["../../../src/models/account-decisions-by-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC;IACvB;;OAEG;IACH,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,oCAAoC,EAAE,CAAC,CAAC,WAAW,CAC9D,sBAAsB,EACtB,OAAO,CAYR,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAM7D"}

package/dist/commonjs/models/account-decisions-by-flow.js

@@ -36,14 +36,19 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AccountDecisionsByFlow$inboundSchema = void 0;
 exports.accountDecisionsByFlowFromJSON = accountDecisionsByFlowFromJSON;
 const z = __importStar(require("zod/v4-mini"));
+const primitives_js_1 = require("../lib/primitives.js");
 const schemas_js_1 = require("../lib/schemas.js");
 const account_decision_js_1 = require("./account-decision.js");
 /** @internal */
-exports.AccountDecisionsByFlow$inboundSchema = z.object({
-    signup: account_decision_js_1.AccountDecision$inboundSchema,
+exports.AccountDecisionsByFlow$inboundSchema = z.pipe(z.object({
+    account_creation: account_decision_js_1.AccountDecision$inboundSchema,
     login: account_decision_js_1.AccountDecision$inboundSchema,
     purchase: account_decision_js_1.AccountDecision$inboundSchema,
-});
+}), z.transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        "account_creation": "accountCreation",
+    });
+}));
 function accountDecisionsByFlowFromJSON(jsonString) {
     return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.AccountDecisionsByFlow$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AccountDecisionsByFlow' from JSON`);
 }

package/dist/commonjs/models/account-decisions-by-flow.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-decisions-by-flow.js","sourceRoot":"","sources":["../../../src/models/account-decisions-by-flow.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,kDAA8C;AAE9C,+DAG+B;AAqB/B,gBAAgB;AACH,QAAA,oCAAoC,GAG7C,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,mDAA6B;IACrC,KAAK,EAAE,mDAA6B;IACpC,QAAQ,EAAE,mDAA6B;CACxC,CAAC,CAAC;AAEH,wCACE,UAAkB,EAC2C;IAC7D,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AAAA,CACH"}
+{"version":3,"file":"account-decisions-by-flow.js","sourceRoot":"","sources":["../../../src/models/account-decisions-by-flow.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,CAAC,wCAAoB;AACjC,wDAAuD;AACvD,kDAA8C;AAE9C,+DAG+B;AAqB/B,gBAAgB;AACH,QAAA,oCAAoC,GAG7C,CAAC,CAAC,IAAI,CACR,CAAC,CAAC,MAAM,CAAC;IACP,gBAAgB,EAAE,mDAA6B;IAC/C,KAAK,EAAE,mDAA6B;IACpC,QAAQ,EAAE,mDAA6B;CACxC,CAAC,EACF,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,kBAAkB,EAAE,iBAAiB;KACtC,CAAC,CAAC;AAAA,CACJ,CAAC,CACH,CAAC;AAEF,wCACE,UAAkB,EAC2C;IAC7D,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChE,oDAAoD,CACrD,CAAC;AAAA,CACH"}

package/dist/commonjs/models/account-deletion.d.ts

@@ -2,7 +2,7 @@ import * as z from "zod/v4-mini";
 import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * Body of the 200 answer to DELETE /v1/accounts/{account_id}: the calling tenant's account was erased in the environment of the calling key. Every assessment of the account went, with its revisions, evidence, outcomes and the identity-graph marks its outcomes set, and an assessment that was still running when the call arrived is stopped. Afterwards GET /v1/accounts/{account_id} and GET /v1/assessments/{assessment_id} of each erased assessment answer 404, and the history page is empty. The call is idempotent: a repeat, or an account with nothing to erase, answers 200 with assessments_deleted 0. The account_id can be assessed again later, as a new account.
+ * Body of the 200 answer to DELETE /v1/accounts/{account_id}: the calling workspace's account was erased in the environment of the calling key. Every assessment of the account went, with its revisions, evidence, outcomes and the identity-graph marks its outcomes set, and an assessment that was still running when the call arrived is stopped. Afterwards GET /v1/accounts/{account_id} and GET /v1/assessments/{assessment_id} of each erased assessment answer 404, and the history page is empty. The call is idempotent: a repeat, or an account with nothing to erase, answers 200 with assessments_deleted 0. The account_id can be assessed again later, as a new account.
  */
 export type AccountDeletion = {
     /**

package/dist/commonjs/models/account.d.ts

@@ -4,7 +4,7 @@ import { AccountDecisionsByFlow } from "./account-decisions-by-flow.js";
 import { AccountRisk } from "./account-risk.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling tenant's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
+ * Body of the 200 answer to GET /v1/accounts/{account_id}: the one current risk of one of the calling workspace's accounts. It is the risk of the account's latest assessment that has a decision (status complete or partial), by created_at and then assessment_id, scored exactly as GET /v1/assessments/{assessment_id} scores that assessment, plus the account's own reason shared_api_key when a key issued to the account was used from many IP addresses or countries (POST /v1/key_usage/batches). Its assessments are the account's history (GET /v1/accounts/{account_id}/assessments).
  */
 export type Account = {
     /**
@@ -12,12 +12,12 @@ export type Account = {
      */
     schemaVersion: "1";
     /**
-     * The account_id the tenant sends with its assessments.
+     * The account_id the workspace sends with its assessments.
      */
     id: string;
     risk: AccountRisk;
     /**
-     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its signup thresholds, so the flows differ only where it set them.
+     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
      */
     decisionsByFlow: AccountDecisionsByFlow;
     /**

package/dist/commonjs/models/assessment-deletion.d.ts

@@ -3,7 +3,7 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { AssessmentDeletionAccount } from "./assessment-deletion-account.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * Body of the 200 answer to DELETE /v1/assessments/{assessment_id}: one of the calling tenant's assessments was deleted, with its versions, evidence, outcomes and the identity-graph marks its outcomes set. Afterwards GET /v1/assessments/{assessment_id} answers 404 and the assessment leaves the account's history. The account is scored again from what remains: account.current_assessment_id names the assessment GET /v1/accounts/{account_id} now serves its risk from, and is absent when the account has no assessment with a decision left. Deleting an assessment that is already gone answers 404.
+ * Body of the 200 answer to DELETE /v1/assessments/{assessment_id}: one of the calling workspace's assessments was deleted, with its versions, evidence, outcomes and the identity-graph marks its outcomes set. Afterwards GET /v1/assessments/{assessment_id} answers 404 and the assessment leaves the account's history. The account is scored again from what remains: account.current_assessment_id names the assessment GET /v1/accounts/{account_id} now serves its risk from, and is absent when the account has no assessment with a decision left. Deleting an assessment that is already gone answers 404.
  */
 export type AssessmentDeletion = {
     /**

package/dist/commonjs/models/assessment-detail-auth-context.d.ts

@@ -4,7 +4,7 @@ import { SDKValidationError } from "./errors/sdk-validation-error.js";
 import { HookPoint } from "./hook-point.js";
 import { Transport } from "./transport.js";
 /**
- * The identity fields of the auth context the assessment was made with, echoed for the tenant's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
+ * The identity fields of the auth context the assessment was made with, echoed for the workspace's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
  */
 export type AssessmentDetailAuthContext = {
     /**

package/dist/commonjs/models/assessment-detail.d.ts

@@ -18,11 +18,11 @@ export type AssessmentDetail = {
      */
     schemaVersion: "1";
     /**
-     * Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the tenant; another tenant's assessment id answers 404.
+     * Opaque, server-assigned assessment id: 'asm_' and a 26-character Crockford base32 ULID. Unique within the workspace; another workspace's assessment id answers 404.
      */
     assessmentId: string;
     /**
-     * Your own opaque identifier for the account being checked, scoped to your tenant. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
+     * Your own opaque identifier for the account being checked, scoped to your workspace. Use an id you mint, with no direct identifier (email, phone, name or national id) in it. '|' is accepted so an Auth0 user id such as 'auth0|64abc' passes unchanged; '@', '+', '$' and whitespace are refused by the pattern, as is an exact-shape JWT; a hex digest such as a SHA-256 is allowed, because hashing an internal id is a common pseudonymous scheme. A value such as '07700900123' or 'jane.doe.gmail.com' cannot be told apart from an opaque id. It travels in bodies, and in a URL only as the path segment of GET /v1/accounts/{account_id} and its /assessments. An assessment requested by a provider hook at pre_registration, which has no account yet, carries the server-issued account_id pre: followed by its assessment_id.
      */
     accountId: string;
     /**
@@ -54,7 +54,7 @@ export type AssessmentDetail = {
      */
     incompleteSources: Array<IncompleteSource>;
     /**
-     * Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A tenant threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
+     * Version of the hand-authored heuristic weights that produced the recommendation, for example 'risk-2026-10.7'. A workspace threshold override adds a +t<N> suffix, e.g. 'risk-2026-10.7+t3'.
      */
     policyVersion: string;
     /**
@@ -80,7 +80,7 @@ export type AssessmentDetail = {
     assessmentUrl?: string | undefined;
     timing: AssessmentDetailTiming;
     /**
-     * The identity fields of the auth context the assessment was made with, echoed for the tenant's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
+     * The identity fields of the auth context the assessment was made with, echoed for the workspace's own correlation: the request's auth_context, or the one a hosted provider hook (POST /hooks/{integration_id}) built, with transport provider_hook and its hook_point. Present exactly when the request carried an auth_context, and the same on every revision of the assessment. Values are as the request or the hook sent them; tokens, timestamps, roles and scopes are not echoed, and the echo does not change the score.
      */
     authContext?: AssessmentDetailAuthContext | undefined;
 };