@composio/client 0.1.0-alpha.71 → 0.1.0-alpha.73

package/src/resources/connected-accounts.ts

@@ -92,9 +92,15 @@ export class ConnectedAccounts extends APIResource {
   }
 
   /**
-   * Update a connected account. Supports updating the alias and/or credentials. Only
-   * specified fields will be updated. Set a credential field to null to remove it.
-   * Alias must be unique within the same project, entity, and toolkit scope.
+   * Update a connected account. Supports updating alias, credentials, sharing model
+   * (`experimental.account_type`), and per-user ACL
+   * (`experimental.acl_config_for_shared`). Only specified fields are updated. Set a
+   * credential field to null to remove it. Alias must be unique within the same
+   * project, entity, and toolkit scope. Toggling `experimental.account_type` between
+   * PRIVATE and SHARED reuses the stored credentials — no re-auth is required.
+   * Demoting SHARED → PRIVATE atomically clears the stored ACL; supplying
+   * `acl_config_for_shared` in the same call is rejected as
+   * `acl_config_for_shared is only valid on SHARED connections`.
    *
    * @example
    * ```ts
@@ -173,13 +179,6 @@ export interface ConnectedAccountCreateResponse {
    */
   id: string;
 
-  /**
-   * The persisted sharing model for this connected account (PRIVATE | SHARED).
-   * Echoes back the value supplied at creation time so callers can confirm what
-   * landed without a follow-up GET.
-   */
-  account_type: 'PRIVATE' | 'SHARED';
-
   /**
    * The connection data of the connected account
    */
@@ -219,6 +218,12 @@ export interface ConnectedAccountCreateResponse {
    * @deprecated DEPRECATED: This field will be removed in a future version
    */
   status: 'INITIALIZING' | 'INITIATED' | 'ACTIVE' | 'FAILED' | 'EXPIRED' | 'INACTIVE' | 'REVOKED';
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  experimental?: ConnectedAccountCreateResponse.Experimental;
 }
 
 export namespace ConnectedAccountCreateResponse {
@@ -4644,6 +4649,41 @@ export namespace ConnectedAccountCreateResponse {
      */
     uuid: string;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountRetrieveResponse {
@@ -4652,14 +4692,6 @@ export interface ConnectedAccountRetrieveResponse {
    */
   id: string;
 
-  /**
-   * Sharing model. PRIVATE accounts are usable only by their owning user_id. SHARED
-   * accounts are reachable from a tool-router session only when explicitly pinned in
-   * the session config (at most one SHARED per toolkit per session); they are never
-   * used implicitly.
-   */
-  account_type: 'PRIVATE' | 'SHARED';
-
   /**
    * A user-defined alias for the connected account
    */
@@ -4742,16 +4774,15 @@ export interface ConnectedAccountRetrieveResponse {
   word_id: string | null;
 
   /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY.
+   * @deprecated
    */
-  acl_config_for_shared?: ConnectedAccountRetrieveResponse.ACLConfigForShared;
+  deprecated?: ConnectedAccountRetrieveResponse.Deprecated;
 
   /**
-   * @deprecated
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
    */
-  deprecated?: ConnectedAccountRetrieveResponse.Deprecated;
+  experimental?: ConnectedAccountRetrieveResponse.Experimental;
 
   /**
    * The endpoint to make test request for verification
@@ -9227,19 +9258,6 @@ export namespace ConnectedAccountRetrieveResponse {
     slug: string;
   }
 
-  /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY.
-   */
-  export interface ACLConfigForShared {
-    allow_all_users: boolean;
-
-    allowed_user_ids: Array<string>;
-
-    not_allowed_user_ids: Array<string>;
-  }
-
   /**
    * @deprecated
    */
@@ -9254,6 +9272,41 @@ export namespace ConnectedAccountRetrieveResponse {
      */
     uuid: string;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountListResponse {
@@ -9275,14 +9328,6 @@ export namespace ConnectedAccountListResponse {
      */
     id: string;
 
-    /**
-     * Sharing model. PRIVATE accounts are usable only by their owning user_id. SHARED
-     * accounts are reachable from a tool-router session only when explicitly pinned in
-     * the session config (at most one SHARED per toolkit per session); they are never
-     * used implicitly.
-     */
-    account_type: 'PRIVATE' | 'SHARED';
-
     /**
      * A user-defined alias for the connected account
      */
@@ -9359,16 +9404,15 @@ export namespace ConnectedAccountListResponse {
     word_id: string | null;
 
     /**
-     * Access control for SHARED connections. Resolution rule (only fires when caller
-     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-     * user in allowed_user_ids → ALLOW; else DENY.
+     * @deprecated
      */
-    acl_config_for_shared?: Item.ACLConfigForShared;
+    deprecated?: Item.Deprecated;
 
     /**
-     * @deprecated
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
      */
-    deprecated?: Item.Deprecated;
+    experimental?: Item.Experimental;
 
     /**
      * The endpoint to make test request for verification
@@ -13844,19 +13888,6 @@ export namespace ConnectedAccountListResponse {
       slug: string;
     }
 
-    /**
-     * Access control for SHARED connections. Resolution rule (only fires when caller
-     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-     * user in allowed_user_ids → ALLOW; else DENY.
-     */
-    export interface ACLConfigForShared {
-      allow_all_users: boolean;
-
-      allowed_user_ids: Array<string>;
-
-      not_allowed_user_ids: Array<string>;
-    }
-
     /**
      * @deprecated
      */
@@ -13871,6 +13902,41 @@ export namespace ConnectedAccountListResponse {
        */
       uuid: string;
     }
+
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    export interface Experimental {
+      /**
+       * Sharing model for this connected account. PRIVATE is usable only by the owning
+       * user_id. SHARED is reachable from a tool-router session only when explicitly
+       * pinned in the session config.
+       */
+      account_type: 'PRIVATE' | 'SHARED';
+
+      /**
+       * Access control for SHARED connections. Visible only to the connection creator
+       * and project/org API key callers; non-creator cookie callers receive the response
+       * without this block.
+       */
+      acl_config_for_shared?: Experimental.ACLConfigForShared;
+    }
+
+    export namespace Experimental {
+      /**
+       * Access control for SHARED connections. Visible only to the connection creator
+       * and project/org API key callers; non-creator cookie callers receive the response
+       * without this block.
+       */
+      export interface ACLConfigForShared {
+        allow_all_users: boolean;
+
+        allowed_user_ids: Array<string>;
+
+        not_allowed_user_ids: Array<string>;
+      }
+    }
   }
 }
 
@@ -13954,22 +14020,6 @@ export namespace ConnectedAccountCreateParams {
   }
 
   export interface Connection {
-    /**
-     * Sharing model for this connected account. PRIVATE (default) is usable only by
-     * the owning user_id. SHARED is reachable from a tool-router session ONLY when
-     * explicitly pinned in the session config — at most one SHARED connection per
-     * toolkit per session. Sessions never use a SHARED connection implicitly.
-     */
-    account_type?: 'PRIVATE' | 'SHARED';
-
-    /**
-     * Access control for SHARED connections. Resolution rule (only fires when caller
-     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-     * deny-by-default — only the creator can use.
-     */
-    acl_config_for_shared?: Connection.ACLConfigForShared;
-
     /**
      * A human-readable alias for this connected account. Must be unique per entity and
      * toolkit within the project.
@@ -13992,6 +14042,12 @@ export namespace ConnectedAccountCreateParams {
      */
     deprecated_is_v1_rerouted?: boolean;
 
+    /**
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
+     */
+    experimental?: Connection.Experimental;
+
     /**
      * @deprecated DEPRECATED: This parameter will be removed in a future version.
      * Please use callback_url instead.
@@ -14025,27 +14081,51 @@ export namespace ConnectedAccountCreateParams {
 
   export namespace Connection {
     /**
-     * Access control for SHARED connections. Resolution rule (only fires when caller
-     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-     * deny-by-default — only the creator can use.
+     * Experimental features - not stable, may be modified or removed in future
+     * versions.
      */
-    export interface ACLConfigForShared {
+    export interface Experimental {
       /**
-       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
-       * connections.
+       * Sharing model for this connected account. PRIVATE (default) is usable only by
+       * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+       * explicitly pinned in the session config — at most one SHARED connection per
+       * toolkit per session. Sessions never use a SHARED connection implicitly.
        */
-      allow_all_users?: boolean;
+      account_type?: 'PRIVATE' | 'SHARED';
 
       /**
-       * Explicit allow list of user_ids who can use this SHARED connection.
+       * Access control for SHARED connections. Resolution rule (only fires when caller
+       * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+       * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+       * deny-by-default — only the creator can use.
        */
-      allowed_user_ids?: Array<string>;
+      acl_config_for_shared?: Experimental.ACLConfigForShared;
+    }
 
+    export namespace Experimental {
       /**
-       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       * Access control for SHARED connections. Resolution rule (only fires when caller
+       * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+       * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+       * deny-by-default — only the creator can use.
        */
-      not_allowed_user_ids?: Array<string>;
+      export interface ACLConfigForShared {
+        /**
+         * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+         * connections.
+         */
+        allow_all_users?: boolean;
+
+        /**
+         * Explicit allow list of user_ids who can use this SHARED connection.
+         */
+        allowed_user_ids?: Array<string>;
+
+        /**
+         * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+         */
+        not_allowed_user_ids?: Array<string>;
+      }
     }
 
     export interface UnionMember0 {
@@ -18459,9 +18539,9 @@ export namespace ConnectedAccountCreateParams {
 
 export interface ConnectedAccountListParams {
   /**
-   * Filter by sharing model. Default (omitted) returns PRIVATE only — shared
-   * accounts must be requested explicitly. Pass SHARED for only shared accounts, or
-   * ALL for PRIVATE + SHARED.
+   * [Experimental] Filter by sharing model. Default (omitted) returns PRIVATE only —
+   * shared accounts must be requested explicitly. Pass SHARED for only shared
+   * accounts, or ALL for PRIVATE + SHARED.
    */
   account_type?: 'PRIVATE' | 'SHARED' | 'ALL';
 
@@ -18514,14 +18594,6 @@ export interface ConnectedAccountListParams {
 }
 
 export interface ConnectedAccountPatchParams {
-  /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-   * deny-by-default — only the creator can use.
-   */
-  acl_config_for_shared?: ConnectedAccountPatchParams.ACLConfigForShared;
-
   /**
    * A human-readable alias for this connected account. Pass an empty string to clear
    * the alias. Must be unique per entity and toolkit within the project.
@@ -18529,33 +18601,15 @@ export interface ConnectedAccountPatchParams {
   alias?: string;
 
   connection?: ConnectedAccountPatchParams.Connection;
-}
 
-export namespace ConnectedAccountPatchParams {
   /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-   * deny-by-default — only the creator can use.
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
    */
-  export interface ACLConfigForShared {
-    /**
-     * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
-     * connections.
-     */
-    allow_all_users?: boolean;
-
-    /**
-     * Explicit allow list of user_ids who can use this SHARED connection.
-     */
-    allowed_user_ids?: Array<string>;
-
-    /**
-     * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
-     */
-    not_allowed_user_ids?: Array<string>;
-  }
+  experimental?: ConnectedAccountPatchParams.Experimental;
+}
 
+export namespace ConnectedAccountPatchParams {
   export interface Connection {
     state: Connection.State;
   }
@@ -18657,6 +18711,53 @@ export namespace ConnectedAccountPatchParams {
       }
     }
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Mutate the sharing model. PRIVATE → SHARED promotes the existing connection
+     * without re-auth; SHARED → PRIVATE revokes all non-creator access and clears the
+     * stored ACL atomically. Omit to leave unchanged.
+     */
+    account_type?: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+  }
 }
 
 export interface ConnectedAccountRefreshParams {

package/src/resources/link.ts

@@ -18,13 +18,6 @@ export class Link extends APIResource {
 }
 
 export interface LinkCreateResponse {
-  /**
-   * The persisted sharing model for this connected account (PRIVATE | SHARED).
-   * Echoes back the value supplied at creation time so callers can confirm what
-   * landed without a follow-up GET.
-   */
-  account_type: 'PRIVATE' | 'SHARED';
-
   /**
    * The connected account ID that was created
    */
@@ -44,34 +37,61 @@ export interface LinkCreateResponse {
    * The redirect URI to send users to for authentication
    */
   redirect_url: string;
-}
 
-export interface LinkCreateParams {
   /**
-   * The auth config id to create a link for
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
    */
-  auth_config_id: string;
+  experimental?: LinkCreateResponse.Experimental;
+}
 
+export namespace LinkCreateResponse {
   /**
-   * The user id to create a link for
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
    */
-  user_id: string;
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE is usable only by the owning
+     * user_id. SHARED is reachable from a tool-router session only when explicitly
+     * pinned in the session config.
+     */
+    account_type: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Visible only to the connection creator
+     * and project/org API key callers; non-creator cookie callers receive the response
+     * without this block.
+     */
+    export interface ACLConfigForShared {
+      allow_all_users: boolean;
+
+      allowed_user_ids: Array<string>;
+
+      not_allowed_user_ids: Array<string>;
+    }
+  }
+}
 
+export interface LinkCreateParams {
   /**
-   * Sharing model for this connected account. PRIVATE (default) is usable only by
-   * the owning user_id. SHARED is reachable from a tool-router session ONLY when
-   * explicitly pinned in the session config — at most one SHARED connection per
-   * toolkit per session. Sessions never use a SHARED connection implicitly.
+   * The auth config id to create a link for
    */
-  account_type?: 'PRIVATE' | 'SHARED';
+  auth_config_id: string;
 
   /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-   * deny-by-default — only the creator can use.
+   * The user id to create a link for
    */
-  acl_config_for_shared?: LinkCreateParams.ACLConfigForShared;
+  user_id: string;
 
   /**
    * A human-readable alias for this connected account. Must be unique per entity and
@@ -163,33 +183,15 @@ export interface LinkCreateParams {
     | LinkCreateParams.UnionMember72
     | LinkCreateParams.UnionMember73
     | LinkCreateParams.UnionMember74;
-}
 
-export namespace LinkCreateParams {
   /**
-   * Access control for SHARED connections. Resolution rule (only fires when caller
-   * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
-   * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
-   * deny-by-default — only the creator can use.
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
    */
-  export interface ACLConfigForShared {
-    /**
-     * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
-     * connections.
-     */
-    allow_all_users?: boolean;
-
-    /**
-     * Explicit allow list of user_ids who can use this SHARED connection.
-     */
-    allowed_user_ids?: Array<string>;
-
-    /**
-     * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
-     */
-    not_allowed_user_ids?: Array<string>;
-  }
+  experimental?: LinkCreateParams.Experimental;
+}
 
+export namespace LinkCreateParams {
   export interface UnionMember0 {
     account_id?: string;
 
@@ -4259,6 +4261,54 @@ export namespace LinkCreateParams {
 
     [k: string]: unknown;
   }
+
+  /**
+   * Experimental features - not stable, may be modified or removed in future
+   * versions.
+   */
+  export interface Experimental {
+    /**
+     * Sharing model for this connected account. PRIVATE (default) is usable only by
+     * the owning user_id. SHARED is reachable from a tool-router session ONLY when
+     * explicitly pinned in the session config — at most one SHARED connection per
+     * toolkit per session. Sessions never use a SHARED connection implicitly.
+     */
+    account_type?: 'PRIVATE' | 'SHARED';
+
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    acl_config_for_shared?: Experimental.ACLConfigForShared;
+  }
+
+  export namespace Experimental {
+    /**
+     * Access control for SHARED connections. Resolution rule (only fires when caller
+     * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
+     * user in allowed_user_ids → ALLOW; else DENY. Default state (omitted or {}) is
+     * deny-by-default — only the creator can use.
+     */
+    export interface ACLConfigForShared {
+      /**
+       * Wildcard "any user_id in the project" allow toggle. Only valid on SHARED
+       * connections.
+       */
+      allow_all_users?: boolean;
+
+      /**
+       * Explicit allow list of user_ids who can use this SHARED connection.
+       */
+      allowed_user_ids?: Array<string>;
+
+      /**
+       * Explicit deny list. Wins on conflict with allow_all_users and allowed_user_ids.
+       */
+      not_allowed_user_ids?: Array<string>;
+    }
+  }
 }
 
 export declare namespace Link {