@noresponse/node 7.0.0 → 7.0.2

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 7.0.2
+
+No changes detected.
+
+## 7.0.1
+
+* `sdk.assessments.create()`:  `response.account.risk.decision.enum(held)` **Added**
+* `sdk.assessments.get()`:  `response.account.risk.decision.enum(held)` **Added**
+* `sdk.accounts.listChanged()`:  `response.items[].risk.decision.enum(held)` **Added**
+* `sdk.accounts.get()`:  `response.risk.decision.enum(held)` **Added**
+
 ## 7.0.0
 
 No changes detected.

package/README.md

@@ -305,18 +305,14 @@ async function handler(req, res) {
     return res.status(204).end();
   }
   if (event.type === "account.risk_changed") {
-    // The account's decision for at least one flow changed. data.account is the Account
-    // accounts.get returns; data.previousDecisionsByFlow holds the decisions it replaced.
-    applyDecisions(event.data.account.id, event.data.account.decisionsByFlow);
+    // The one event to act on: a flow's decision changed, at data.account.riskVersion.
+    // This verifier alone does not enforce it: use handleRiskChange (below) as this endpoint's receiver.
     return res.status(204).end();
   }
   if ("assessmentId" in event.data) {
     forget(event.data.assessmentId); // the terminal expiry notice: GET now answers 404
-  } else if (event.test) {
-    // sendTestEvent's fixed example assessment: apply nothing
-  } else if (isNewer(event.data)) {  // keep the highest detail.assessmentVersion per assessment
-    apply(event.data);              // the full assessment, as assessments.get returns it
   }
+  // Any other assessment.updated reports progress only: apply nothing.
   res.status(204).end();
 }
 ```
@@ -352,6 +348,8 @@ if (result.riskVersion !== undefined) await users.update(result.account!.id, { e
 
 Nothing deletes a user. Clerk bans (and unbans), Auth0 sets `blocked`, and WorkOS, which has no block, writes `noresponse_state` to the user's metadata (gate sign-in on it) and revokes every session. On an Auth0 plan without the sessions API the revoke blocks the user too and reports `restrict`. Each action, or `none` when nothing is needed, is recorded with `accounts.recordEnforcement` at the `riskVersion` read, and `result.enforcements` lists them. A refused action is recorded as `failed` and throws `ProviderActionError`: answer 5xx so the delivery is retried. A test event, an erased account and an account at or below `enforcedRiskVersion` act on nothing (`result.skipped`). To catch up after dropped deliveries, pass each account of `nr.accounts.listChanged({ unenforced: true })` to `enforceAccount`. For your own user store, `customProvider({ restrict: async (userId) => ..., revoke_sessions: async (userId) => ... })` takes one function per action you support; an action without one is recorded as failed.
 
+A held flow (workspace settings `admission: held`) answers `held` until its investigation completes or `hold_seconds` pass, and the handler records `none` for it. When the final decision arrives as `account.risk_changed`, an `onboarding` or `provisional` account fails onboarding or is refused activation on `review` or `block`. On `allow` the handler does nothing, so admit the account yourself from the result's account. See https://docs.noresponse.org/guides/late-results.
+
 ## Auth adapters
 
 Map a session your backend has already verified into `authContext`:

package/dist/commonjs/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "7.0.0";
+    readonly sdkVersion: "7.0.2";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 7.0.0 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -28,8 +28,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "7.0.0",
+    sdkVersion: "7.0.2",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 7.0.0 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/commonjs/models/account-decision.d.ts

@@ -1,16 +1,17 @@
 import * as z from "zod/v4-mini";
 import { OpenEnum } from "../types/enums.js";
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 export declare const AccountDecision: {
     readonly Allow: "allow";
     readonly StepUp: "step_up";
     readonly Review: "review";
     readonly Block: "block";
+    readonly Held: "held";
 };
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 export type AccountDecision = OpenEnum<typeof AccountDecision>;
 /** @internal */

package/dist/commonjs/models/account-decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-decision.d.ts","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,eAAe,EACf,OAAO,CACmC,CAAC;AAC7C,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,MAAM,EACN,eAAe,CAC4B,CAAC"}
+{"version":3,"file":"account-decision.d.ts","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,eAAe,EACf,OAAO,CACmC,CAAC;AAC7C,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,MAAM,EACN,eAAe,CAC4B,CAAC"}

package/dist/commonjs/models/account-decision.js

@@ -36,13 +36,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AccountDecision$outboundSchema = exports.AccountDecision$inboundSchema = exports.AccountDecision = void 0;
 const openEnums = __importStar(require("../types/enums.js"));
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 exports.AccountDecision = {
     Allow: "allow",
     StepUp: "step_up",
     Review: "review",
     Block: "block",
+    Held: "held",
 };
 /** @internal */
 exports.AccountDecision$inboundSchema = openEnums.inboundSchema(exports.AccountDecision);

package/dist/commonjs/models/account-decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-decision.js","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,MAAY,SAAS,8CAA0B;AAG/C;;GAEG;AACU,QAAA,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACN,CAAC;AAMX,gBAAgB;AACH,QAAA,6BAA6B,GAGtC,SAAS,CAAC,aAAa,CAAC,QAAA,eAAe,CAAC,CAAC;AAC7C,gBAAgB;AACH,QAAA,8BAA8B,GAGvC,SAAS,CAAC,cAAc,CAAC,QAAA,eAAe,CAAC,CAAC"}
+{"version":3,"file":"account-decision.js","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,MAAY,SAAS,8CAA0B;AAG/C;;GAEG;AACU,QAAA,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;CACJ,CAAC;AAMX,gBAAgB;AACH,QAAA,6BAA6B,GAGtC,SAAS,CAAC,aAAa,CAAC,QAAA,eAAe,CAAC,CAAC;AAC7C,gBAAgB;AACH,QAAA,8BAA8B,GAGvC,SAAS,CAAC,cAAc,CAAC,QAAA,eAAe,CAAC,CAAC"}

package/dist/commonjs/models/account-decisions-by-flow.d.ts

@@ -3,19 +3,19 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { AccountDecision } from "./account-decision.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+ * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
  */
 export type AccountDecisionsByFlow = {
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     accountCreation: AccountDecision;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     login: AccountDecision;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     purchase: AccountDecision;
 };

package/dist/commonjs/models/account-risk-changed.d.ts

@@ -12,7 +12,7 @@ export type AccountRiskChanged = {
      */
     account: Account;
     /**
-     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
      */
     previousDecisionsByFlow: AccountDecisionsByFlow;
 };

package/dist/commonjs/models/account-risk.d.ts

@@ -9,7 +9,7 @@ export type AccountRisk = {
      */
     score: number;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     decision: AccountDecision;
     /**

package/dist/commonjs/models/account.d.ts

@@ -17,7 +17,7 @@ export type Account = {
     id: string;
     risk: AccountRisk;
     /**
-     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
      */
     decisionsByFlow: AccountDecisionsByFlow;
     /**

package/dist/esm/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "7.0.0";
+    readonly sdkVersion: "7.0.2";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 7.0.0 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/esm/lib/config.js

@@ -24,8 +24,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "7.0.0",
+    sdkVersion: "7.0.2",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 7.0.0 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/esm/models/account-decision.d.ts

@@ -1,16 +1,17 @@
 import * as z from "zod/v4-mini";
 import { OpenEnum } from "../types/enums.js";
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 export declare const AccountDecision: {
     readonly Allow: "allow";
     readonly StepUp: "step_up";
     readonly Review: "review";
     readonly Block: "block";
+    readonly Held: "held";
 };
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 export type AccountDecision = OpenEnum<typeof AccountDecision>;
 /** @internal */

package/dist/esm/models/account-decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-decision.d.ts","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,eAAe,EACf,OAAO,CACmC,CAAC;AAC7C,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,MAAM,EACN,eAAe,CAC4B,CAAC"}
+{"version":3,"file":"account-decision.d.ts","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,WAAW,CACvD,eAAe,EACf,OAAO,CACmC,CAAC;AAC7C,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,WAAW,CACxD,MAAM,EACN,eAAe,CAC4B,CAAC"}

package/dist/esm/models/account-decision.js

@@ -1,12 +1,13 @@
 import * as openEnums from "../types/enums.js";
 /**
- * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+ * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
  */
 export const AccountDecision = {
     Allow: "allow",
     StepUp: "step_up",
     Review: "review",
     Block: "block",
+    Held: "held",
 };
 /** @internal */
 export const AccountDecision$inboundSchema = openEnums.inboundSchema(AccountDecision);

package/dist/esm/models/account-decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-decision.js","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACN,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,6BAA6B,GAGtC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;AAC7C,gBAAgB;AAChB,MAAM,CAAC,MAAM,8BAA8B,GAGvC,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC"}
+{"version":3,"file":"account-decision.js","sourceRoot":"","sources":["../../../src/models/account-decision.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;CACJ,CAAC;AAMX,gBAAgB;AAChB,MAAM,CAAC,MAAM,6BAA6B,GAGtC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;AAC7C,gBAAgB;AAChB,MAAM,CAAC,MAAM,8BAA8B,GAGvC,SAAS,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC"}

package/dist/esm/models/account-decisions-by-flow.d.ts

@@ -3,19 +3,19 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { AccountDecision } from "./account-decision.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 /**
- * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+ * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
  */
 export type AccountDecisionsByFlow = {
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     accountCreation: AccountDecision;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     login: AccountDecision;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     purchase: AccountDecision;
 };

package/dist/esm/models/account-risk-changed.d.ts

@@ -12,7 +12,7 @@ export type AccountRiskChanged = {
      */
     account: Account;
     /**
-     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
      */
     previousDecisionsByFlow: AccountDecisionsByFlow;
 };

package/dist/esm/models/account-risk.d.ts

@@ -9,7 +9,7 @@ export type AccountRisk = {
      */
     score: number;
     /**
-     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. Your application applies it.
+     * block when the score reached your block threshold (risk.block of the assessment), otherwise the assessment's recommendation. held only for a flow whose admission is held (settings flows.<flow>.admission), when the account's current assessment was made for that flow and its investigation has not completed (status partial): the final decision arrives as account.risk_changed when the investigation completes, decided by its score, or when the hold's deadline (hold_seconds after the assessment was created) passes first, as the flow's on_expiry action or the decision the evidence so far gives, whichever is stricter. Your application applies it.
      */
     decision: AccountDecision;
     /**

package/dist/esm/models/account.d.ts

@@ -17,7 +17,7 @@ export type Account = {
     id: string;
     risk: AccountRisk;
     /**
-     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them.
+     * The decision for each flow: the account's score under that flow's thresholds. A flow the workspace has not set uses its account_creation thresholds, so the flows differ only where it set them. The flow of the current assessment is held while that flow's admission is held and the assessment's investigation has not completed.
      */
     decisionsByFlow: AccountDecisionsByFlow;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noresponse/node",
-  "version": "7.0.0",
+  "version": "7.0.2",
   "author": "NoResponse",
   "bugs": {
     "url": "https://github.com/noresponsehq/node/issues"