@noresponse/node 7.0.1 → 7.0.2

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 7.0.2
+
+No changes detected.
+
 ## 7.0.1
 
 * `sdk.assessments.create()`:  `response.account.risk.decision.enum(held)` **Added**

package/README.md

@@ -305,18 +305,14 @@ async function handler(req, res) {
     return res.status(204).end();
   }
   if (event.type === "account.risk_changed") {
-    // The account's decision for at least one flow changed. data.account is the Account
-    // accounts.get returns; data.previousDecisionsByFlow holds the decisions it replaced.
-    applyDecisions(event.data.account.id, event.data.account.decisionsByFlow);
+    // The one event to act on: a flow's decision changed, at data.account.riskVersion.
+    // This verifier alone does not enforce it: use handleRiskChange (below) as this endpoint's receiver.
     return res.status(204).end();
   }
   if ("assessmentId" in event.data) {
     forget(event.data.assessmentId); // the terminal expiry notice: GET now answers 404
-  } else if (event.test) {
-    // sendTestEvent's fixed example assessment: apply nothing
-  } else if (isNewer(event.data)) {  // keep the highest detail.assessmentVersion per assessment
-    apply(event.data);              // the full assessment, as assessments.get returns it
   }
+  // Any other assessment.updated reports progress only: apply nothing.
   res.status(204).end();
 }
 ```
@@ -352,6 +348,8 @@ if (result.riskVersion !== undefined) await users.update(result.account!.id, { e
 
 Nothing deletes a user. Clerk bans (and unbans), Auth0 sets `blocked`, and WorkOS, which has no block, writes `noresponse_state` to the user's metadata (gate sign-in on it) and revokes every session. On an Auth0 plan without the sessions API the revoke blocks the user too and reports `restrict`. Each action, or `none` when nothing is needed, is recorded with `accounts.recordEnforcement` at the `riskVersion` read, and `result.enforcements` lists them. A refused action is recorded as `failed` and throws `ProviderActionError`: answer 5xx so the delivery is retried. A test event, an erased account and an account at or below `enforcedRiskVersion` act on nothing (`result.skipped`). To catch up after dropped deliveries, pass each account of `nr.accounts.listChanged({ unenforced: true })` to `enforceAccount`. For your own user store, `customProvider({ restrict: async (userId) => ..., revoke_sessions: async (userId) => ... })` takes one function per action you support; an action without one is recorded as failed.
 
+A held flow (workspace settings `admission: held`) answers `held` until its investigation completes or `hold_seconds` pass, and the handler records `none` for it. When the final decision arrives as `account.risk_changed`, an `onboarding` or `provisional` account fails onboarding or is refused activation on `review` or `block`. On `allow` the handler does nothing, so admit the account yourself from the result's account. See https://docs.noresponse.org/guides/late-results.
+
 ## Auth adapters
 
 Map a session your backend has already verified into `authContext`:

package/dist/commonjs/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "7.0.1";
+    readonly sdkVersion: "7.0.2";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 7.0.1 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -28,8 +28,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "7.0.1",
+    sdkVersion: "7.0.2",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 7.0.1 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/dist/esm/lib/config.d.ts

@@ -31,8 +31,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1";
-    readonly sdkVersion: "7.0.1";
+    readonly sdkVersion: "7.0.2";
     readonly genVersion: "internal";
-    readonly userAgent: "noresponse-sdk/typescript 7.0.1 internal 1 @noresponse/node";
+    readonly userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/esm/lib/config.js

@@ -24,8 +24,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1",
-    sdkVersion: "7.0.1",
+    sdkVersion: "7.0.2",
     genVersion: "internal",
-    userAgent: "noresponse-sdk/typescript 7.0.1 internal 1 @noresponse/node",
+    userAgent: "noresponse-sdk/typescript 7.0.2 internal 1 @noresponse/node",
 };
 //# sourceMappingURL=config.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noresponse/node",
-  "version": "7.0.1",
+  "version": "7.0.2",
   "author": "NoResponse",
   "bugs": {
     "url": "https://github.com/noresponsehq/node/issues"