@composio/client 0.1.0-alpha.70 → 0.1.0-alpha.71

package/src/internal/utils/log.ts

@@ -106,8 +106,9 @@ export const formatRequestDetails = (details: {
         ([name, value]) => [
           name,
           (
-            name.toLowerCase() === 'x-api-key' ||
             name.toLowerCase() === 'authorization' ||
+            name.toLowerCase() === 'api-key' ||
+            name.toLowerCase() === 'x-api-key' ||
             name.toLowerCase() === 'cookie' ||
             name.toLowerCase() === 'set-cookie'
           ) ?

package/src/resources/connected-accounts.ts

@@ -173,6 +173,13 @@ export interface ConnectedAccountCreateResponse {
    */
   id: string;
 
+  /**
+   * The persisted sharing model for this connected account (PRIVATE | SHARED).
+   * Echoes back the value supplied at creation time so callers can confirm what
+   * landed without a follow-up GET.
+   */
+  account_type: 'PRIVATE' | 'SHARED';
+
   /**
    * The connection data of the connected account
    */
@@ -743,6 +750,8 @@ export namespace ConnectedAccountCreateResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -833,6 +842,8 @@ export namespace ConnectedAccountCreateResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -4641,6 +4652,14 @@ export interface ConnectedAccountRetrieveResponse {
    */
   id: string;
 
+  /**
+   * Sharing model. PRIVATE accounts are usable only by their owning user_id. SHARED
+   * accounts are reachable from a tool-router session only when explicitly pinned in
+   * the session config (at most one SHARED per toolkit per session); they are never
+   * used implicitly.
+   */
+  account_type: 'PRIVATE' | 'SHARED';
+
   /**
    * A user-defined alias for the connected account
    */
@@ -4722,6 +4741,13 @@ export interface ConnectedAccountRetrieveResponse {
    */
   word_id: string | null;
 
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY.
+   */
+  acl_config_for_shared?: ConnectedAccountRetrieveResponse.ACLConfigForShared;
+
   /**
    * @deprecated
    */
@@ -5315,6 +5341,8 @@ export namespace ConnectedAccountRetrieveResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -5405,6 +5433,8 @@ export namespace ConnectedAccountRetrieveResponse {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -9197,6 +9227,19 @@ export namespace ConnectedAccountRetrieveResponse {
     slug: string;
   }
 
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY.
+   */
+  export interface ACLConfigForShared {
+    allow_all_users: boolean;
+
+    allowed_user_ids: Array<string>;
+
+    not_allowed_user_ids: Array<string>;
+  }
+
   /**
    * @deprecated
    */
@@ -9232,6 +9275,14 @@ export namespace ConnectedAccountListResponse {
      */
     id: string;
 
+    /**
+     * Sharing model. PRIVATE accounts are usable only by their owning user_id. SHARED
+     * accounts are reachable from a tool-router session only when explicitly pinned in
+     * the session config (at most one SHARED per toolkit per session); they are never
+     * used implicitly.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
     /**
      * A user-defined alias for the connected account
      */
@@ -9307,6 +9358,13 @@ export namespace ConnectedAccountListResponse {
      */
     word_id: string | null;
 
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY.
+     */
+    acl_config_for_shared?: Item.ACLConfigForShared;
+
     /**
      * @deprecated
      */
@@ -9900,6 +9958,8 @@ export namespace ConnectedAccountListResponse {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -9990,6 +10050,8 @@ export namespace ConnectedAccountListResponse {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -13782,6 +13844,19 @@ export namespace ConnectedAccountListResponse {
       slug: string;
     }
 
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+
     /**
      * @deprecated
      */
@@ -13879,6 +13954,22 @@ export namespace ConnectedAccountCreateParams {
   }
 
   export interface Connection {
+    /**
+     * Sharing model for this connected account. PRIVATE (default) is usable only by
+     * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+     * explicitly pinned in the session config — at most one SHARED connection per
+     * toolkit per session. Sessions never use a SHARED connection implicitly.
+     */
+    account_type?: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Connection.ACLConfigForShared;
+
     /**
      * A human-readable alias for this connected account. Must be unique per entity and
      * toolkit within the project.
@@ -13933,6 +14024,30 @@ export namespace ConnectedAccountCreateParams {
   }
 
   export namespace Connection {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+
     export interface UnionMember0 {
       authScheme: 'OAUTH1';
 
@@ -14461,6 +14576,8 @@ export namespace ConnectedAccountCreateParams {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -14551,6 +14668,8 @@ export namespace ConnectedAccountCreateParams {
 
         extension?: string;
 
+        extra_token_data?: { [key: string]: unknown };
+
         form_api_base_url?: string;
 
         id_token?: string;
@@ -18339,6 +18458,13 @@ export namespace ConnectedAccountCreateParams {
 }
 
 export interface ConnectedAccountListParams {
+  /**
+   * Filter by sharing model. Default (omitted) returns PRIVATE only — shared
+   * accounts must be requested explicitly. Pass SHARED for only shared accounts, or
+   * ALL for PRIVATE + SHARED.
+   */
+  account_type?: 'PRIVATE' | 'SHARED' | 'ALL';
+
   /**
    * The auth config ids of the connected accounts
    */
@@ -18388,6 +18514,14 @@ export interface ConnectedAccountListParams {
 }
 
 export interface ConnectedAccountPatchParams {
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  acl_config_for_shared?: ConnectedAccountPatchParams.ACLConfigForShared;
+
   /**
    * A human-readable alias for this connected account. Pass an empty string to clear
    * the alias. Must be unique per entity and toolkit within the project.
@@ -18398,6 +18532,30 @@ export interface ConnectedAccountPatchParams {
 }
 
 export namespace ConnectedAccountPatchParams {
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  export interface ACLConfigForShared {
+    /**
+     * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+     * connections.
+     */
+    allow_all_users?: boolean;
+
+    /**
+     * Explicit allow list of user_ids who can use this SHARED connection.
+     */
+    allowed_user_ids?: Array<string>;
+
+    /**
+     * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+     */
+    not_allowed_user_ids?: Array<string>;
+  }
+
   export interface Connection {
     state: Connection.State;
   }

package/src/resources/link.ts

@@ -18,6 +18,13 @@ export class Link extends APIResource {
 }
 
 export interface LinkCreateResponse {
+  /**
+   * The persisted sharing model for this connected account (PRIVATE | SHARED).
+   * Echoes back the value supplied at creation time so callers can confirm what
+   * landed without a follow-up GET.
+   */
+  account_type: 'PRIVATE' | 'SHARED';
+
   /**
    * The connected account ID that was created
    */
@@ -50,6 +57,22 @@ export interface LinkCreateParams {
    */
   user_id: string;
 
+  /**
+   * Sharing model for this connected account. PRIVATE (default) is usable only by
+   * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+   * explicitly pinned in the session config — at most one SHARED connection per
+   * toolkit per session. Sessions never use a SHARED connection implicitly.
+   */
+  account_type?: 'PRIVATE' | 'SHARED';
+
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  acl_config_for_shared?: LinkCreateParams.ACLConfigForShared;
+
   /**
    * A human-readable alias for this connected account. Must be unique per entity and
    * toolkit within the project.
@@ -143,6 +166,30 @@ export interface LinkCreateParams {
 }
 
 export namespace LinkCreateParams {
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  export interface ACLConfigForShared {
+    /**
+     * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+     * connections.
+     */
+    allow_all_users?: boolean;
+
+    /**
+     * Explicit allow list of user_ids who can use this SHARED connection.
+     */
+    allowed_user_ids?: Array<string>;
+
+    /**
+     * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+     */
+    not_allowed_user_ids?: Array<string>;
+  }
+
   export interface UnionMember0 {
     account_id?: string;
 
@@ -625,6 +672,8 @@ export namespace LinkCreateParams {
 
     extension?: string;
 
+    extra_token_data?: { [key: string]: unknown };
+
     form_api_base_url?: string;
 
     id_token?: string;
@@ -713,6 +762,8 @@ export namespace LinkCreateParams {
 
     extension?: string;
 
+    extra_token_data?: { [key: string]: unknown };
+
     form_api_base_url?: string;
 
     id_token?: string;

package/src/resources/tool-router/session/session.ts

@@ -1673,6 +1673,13 @@ export interface SessionExecuteMetaResponse {
 }
 
 export interface SessionLinkResponse {
+  /**
+   * PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from
+   * a tool-router session ONLY when explicitly pinned, with at most one SHARED per
+   * toolkit per session.
+   */
+  account_type: 'PRIVATE' | 'SHARED';
+
   /**
    * The unique identifier for the connected account
    */
@@ -3605,6 +3612,22 @@ export interface SessionLinkParams {
    */
   toolkit: string;
 
+  /**
+   * Sharing model for this connected account. PRIVATE (default) is usable only by
+   * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+   * explicitly pinned in the session config — at most one SHARED connection per
+   * toolkit per session. Sessions never use a SHARED connection implicitly.
+   */
+  account_type?: 'PRIVATE' | 'SHARED';
+
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  acl_config_for_shared?: SessionLinkParams.ACLConfigForShared;
+
   /**
    * A human-readable alias for this connected account. Must be unique per entity and
    * toolkit within the project.
@@ -3617,6 +3640,32 @@ export interface SessionLinkParams {
   callback_url?: string;
 }
 
+export namespace SessionLinkParams {
+  /**
+   * Access control for SHARED connections. Resolution rule (only fires when caller
+   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+   * deny-by-default — only the creator can use.
+   */
+  export interface ACLConfigForShared {
+    /**
+     * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+     * connections.
+     */
+    allow_all_users?: boolean;
+
+    /**
+     * Explicit allow list of user_ids who can use this SHARED connection.
+     */
+    allowed_user_ids?: Array<string>;
+
+    /**
+     * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+     */
+    not_allowed_user_ids?: Array<string>;
+  }
+}
+
 export interface SessionPatchParams {
   /**
    * The auth configs to use for the session. This will override the default behavior
@@ -3987,6 +4036,8 @@ export namespace SessionProxyExecuteParams {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;

package/src/resources/toolkits.ts

@@ -268,8 +268,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
 
@@ -284,8 +288,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
       }
@@ -312,8 +320,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
 
@@ -328,8 +340,12 @@ export namespace ToolkitRetrieveResponse {
 
           type: string;
 
+          advanced?: boolean;
+
           default?: string | null;
 
+          is_secret?: boolean;
+
           legacy_template_name?: string;
         }
       }

package/src/resources/tools.ts

@@ -741,6 +741,8 @@ export namespace ToolExecuteParams {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;
@@ -1610,6 +1612,8 @@ export namespace ToolProxyParams {
 
       extension?: string;
 
+      extra_token_data?: { [key: string]: unknown };
+
       form_api_base_url?: string;
 
       id_token?: string;

package/src/resources/triggers-types.ts

@@ -86,6 +86,13 @@ export interface TriggersTypeRetrieveResponse {
    * Version of the trigger type
    */
   version: string;
+
+  /**
+   * True when the developer must register a Composio-issued webhook URL with the
+   * upstream provider (e.g. Slack Event Subscriptions, Notion integration webhooks).
+   * See the webhook_endpoint API for the setup.
+   */
+  requires_webhook_endpoint_setup?: boolean;
 }
 
 export namespace TriggersTypeRetrieveResponse {
@@ -168,6 +175,13 @@ export namespace TriggersTypeListResponse {
      * Version of the trigger type
      */
     version: string;
+
+    /**
+     * True when the developer must register a Composio-issued webhook URL with the
+     * upstream provider (e.g. Slack Event Subscriptions, Notion integration webhooks).
+     * See the webhook_endpoint API for the setup.
+     */
+    requires_webhook_endpoint_setup?: boolean;
   }
 
   export namespace Item {

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = '0.1.0-alpha.70'; // x-release-please-version
+export const VERSION = '0.1.0-alpha.71'; // x-release-please-version

package/version.d.mts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.0-alpha.70";
+export declare const VERSION = "0.1.0-alpha.71";
 //# sourceMappingURL=version.d.mts.map

package/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.1.0-alpha.70";
+export declare const VERSION = "0.1.0-alpha.71";
 //# sourceMappingURL=version.d.ts.map

package/version.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VERSION = void 0;
-exports.VERSION = '0.1.0-alpha.70'; // x-release-please-version
+exports.VERSION = '0.1.0-alpha.71'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/version.mjs

@@ -1,2 +1,2 @@
-export const VERSION = '0.1.0-alpha.70'; // x-release-please-version
+export const VERSION = '0.1.0-alpha.71'; // x-release-please-version
 //# sourceMappingURL=version.mjs.map