@composio/client 0.1.0-alpha.73 → 0.1.0-alpha.74

package/src/resources/auth-configs.ts

@@ -77,7 +77,9 @@ export class AuthConfigs extends APIResource {
 
   /**
    * Soft-deletes an authentication configuration by marking it as deleted in the
-   * database. This operation cannot be undone.
+   * database. This operation cannot be undone. Pass `?revoke_on_delete=true` to also
+   * revoke the upstream credentials of every connection using this auth config via a
+   * background job.
    *
    * @example
    * ```ts
@@ -86,8 +88,16 @@ export class AuthConfigs extends APIResource {
    * );
    * ```
    */
-  delete(nanoid: string, options?: RequestOptions): APIPromise<unknown> {
-    return this._client.delete(path`/api/v3.1/auth_configs/${nanoid}`, options);
+  delete(
+    nanoid: string,
+    params: AuthConfigDeleteParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<AuthConfigDeleteResponse> {
+    const { revoke_on_delete } = params ?? {};
+    return this._client.delete(path`/api/v3.1/auth_configs/${nanoid}`, {
+      query: { revoke_on_delete },
+      ...options,
+    });
   }
 
   /**
@@ -183,7 +193,8 @@ export interface AuthConfigRetrieveResponse {
   type: 'default' | 'custom';
 
   /**
-   * The UUID of the authentication configuration (for backward compatibility)
+   * @deprecated The UUID of the authentication configuration (for backward
+   * compatibility)
    */
   uuid: string;
 
@@ -389,7 +400,8 @@ export namespace AuthConfigListResponse {
     type: 'default' | 'custom';
 
     /**
-     * The UUID of the authentication configuration (for backward compatibility)
+     * @deprecated The UUID of the authentication configuration (for backward
+     * compatibility)
      */
     uuid: string;
 
@@ -547,7 +559,15 @@ export namespace AuthConfigListResponse {
   }
 }
 
-export type AuthConfigDeleteResponse = unknown;
+export interface AuthConfigDeleteResponse {
+  /**
+   * Identifier of the background revoke job started for this delete. Present only
+   * when `revoke_on_delete=true`. Track the job and its per-connection results from
+   * the Composio dashboard — a programmatic endpoint to poll this job is not yet
+   * generally available.
+   */
+  revoke_job_id?: string;
+}
 
 export type AuthConfigUpdateStatusResponse = unknown;
 
@@ -853,6 +873,16 @@ export interface AuthConfigListParams {
   toolkit_slug?: string;
 }
 
+export interface AuthConfigDeleteParams {
+  /**
+   * When `true`, the delete also starts a background job that revokes the upstream
+   * credentials of every connected account in scope, and the response carries a
+   * `revoke_job_id`. Defaults to `false`. Revocation is irreversible — recovering a
+   * deleted entity does not restore working credentials.
+   */
+  revoke_on_delete?: boolean | null;
+}
+
 export interface AuthConfigUpdateStatusParams {
   /**
    * The unique identifier of the authentication configuration to update
@@ -871,6 +901,7 @@ export declare namespace AuthConfigs {
     type AuthConfigCreateParams as AuthConfigCreateParams,
     type AuthConfigUpdateParams as AuthConfigUpdateParams,
     type AuthConfigListParams as AuthConfigListParams,
+    type AuthConfigDeleteParams as AuthConfigDeleteParams,
     type AuthConfigUpdateStatusParams as AuthConfigUpdateStatusParams,
   };
 }

package/src/resources/connected-accounts.ts

@@ -79,7 +79,8 @@ export class ConnectedAccounts extends APIResource {
   /**
    * Soft-deletes a connected account by marking it as deleted in the database. This
    * prevents the account from being used for API calls but preserves the record for
-   * audit purposes.
+   * audit purposes. Pass `?revoke_on_delete=true` to also revoke the account's
+   * upstream credentials via a background job.
    *
    * @example
    * ```ts
@@ -87,20 +88,22 @@ export class ConnectedAccounts extends APIResource {
    *   await client.connectedAccounts.delete('ca_1a2b3c4d5e6f');
    * ```
    */
-  delete(nanoid: string, options?: RequestOptions): APIPromise<ConnectedAccountDeleteResponse> {
-    return this._client.delete(path`/api/v3.1/connected_accounts/${nanoid}`, options);
+  delete(
+    nanoid: string,
+    params: ConnectedAccountDeleteParams | null | undefined = {},
+    options?: RequestOptions,
+  ): APIPromise<ConnectedAccountDeleteResponse> {
+    const { revoke_on_delete } = params ?? {};
+    return this._client.delete(path`/api/v3.1/connected_accounts/${nanoid}`, {
+      query: { revoke_on_delete },
+      ...options,
+    });
   }
 
   /**
-   * Update a connected account. Supports updating alias, credentials, sharing model
-   * (`experimental.account_type`), and per-user ACL
-   * (`experimental.acl_config_for_shared`). Only specified fields are updated. Set a
-   * credential field to null to remove it. Alias must be unique within the same
-   * project, entity, and toolkit scope. Toggling `experimental.account_type` between
-   * PRIVATE and SHARED reuses the stored credentials — no re-auth is required.
-   * Demoting SHARED → PRIVATE atomically clears the stored ACL; supplying
-   * `acl_config_for_shared` in the same call is rejected as
-   * `acl_config_for_shared is only valid on SHARED connections`.
+   * Update a connected account. Supports updating the alias and/or credentials. Only
+   * specified fields will be updated. Set a credential field to null to remove it.
+   * Alias must be unique within the same project, entity, and toolkit scope.
    *
    * @example
    * ```ts
@@ -198,12 +201,6 @@ export interface ConnectedAccountCreateResponse {
     | ConnectedAccountCreateResponse.UnionMember12
     | ConnectedAccountCreateResponse.UnionMember13;
 
-  /**
-   * @deprecated DEPRECATED: This field will be removed in a future version. Please
-   * use id and auth_config.id instead.
-   */
-  deprecated: ConnectedAccountCreateResponse.Deprecated;
-
   /**
    * @deprecated DEPRECATED: This field will be removed in a future version
    */
@@ -219,6 +216,12 @@ export interface ConnectedAccountCreateResponse {
    */
   status: 'INITIALIZING' | 'INITIATED' | 'ACTIVE' | 'FAILED' | 'EXPIRED' | 'INACTIVE' | 'REVOKED';
 
+  /**
+   * @deprecated DEPRECATED: This field will be removed in a future version. Please
+   * use id and auth_config.id instead.
+   */
+  deprecated?: ConnectedAccountCreateResponse.Deprecated;
+
   /**
    * Experimental features - not stable, may be modified or removed in future
    * versions.
@@ -4784,6 +4787,19 @@ export interface ConnectedAccountRetrieveResponse {
    */
   experimental?: ConnectedAccountRetrieveResponse.Experimental;
 
+  /**
+   * OAuth scopes requested when this connection was most recently initiated (create
+   * or refresh). Absent for connections created before scope snapshots were captured
+   * and for non-OAuth auth schemes.
+   */
+  requested_scopes?: Array<string>;
+
+  /**
+   * OAuth user-token scopes requested at the most recent initiation. Only meaningful
+   * for Slackbot auth configs (user-token scopes); absent otherwise.
+   */
+  requested_user_scopes?: Array<string>;
+
   /**
    * The endpoint to make test request for verification
    */
@@ -13948,6 +13964,14 @@ export interface ConnectedAccountDeleteResponse {
    * Indicates whether the connected account was successfully deleted
    */
   success: boolean;
+
+  /**
+   * Identifier of the background revoke job started for this delete. Present only
+   * when `revoke_on_delete=true`. Track the job and its per-connection results from
+   * the Composio dashboard — a programmatic endpoint to poll this job is not yet
+   * generally available.
+   */
+  revoke_job_id?: string;
 }
 
 export interface ConnectedAccountPatchResponse {
@@ -18593,6 +18617,16 @@ export interface ConnectedAccountListParams {
   user_ids?: Array<string> | null;
 }
 
+export interface ConnectedAccountDeleteParams {
+  /**
+   * When `true`, the delete also starts a background job that revokes the upstream
+   * credentials of every connected account in scope, and the response carries a
+   * `revoke_job_id`. Defaults to `false`. Revocation is irreversible — recovering a
+   * deleted entity does not restore working credentials.
+   */
+  revoke_on_delete?: boolean | null;
+}
+
 export interface ConnectedAccountPatchParams {
   /**
    * A human-readable alias for this connected account. Pass an empty string to clear
@@ -18643,71 +18677,35 @@ export namespace ConnectedAccountPatchParams {
       export interface Val {
         token?: string | null;
 
-        account_id?: string | null;
-
-        account_url?: string | null;
-
         api_key?: string | null;
 
-        api_url?: string | null;
+        api_key_prefix?: string | null;
 
         application_id?: string | null;
 
-        base_url?: string | null;
-
         basic_encoded?: string | null;
 
         bearer_token?: string | null;
 
-        borneo_dashboard_url?: string | null;
-
-        COMPANYDOMAIN?: string | null;
-
         credentials_json?: string | null;
 
-        dc?: string | null;
-
-        domain?: string | null;
+        generic_api_key?: string | null;
 
-        extension?: string | null;
+        generic_id?: string | null;
 
-        form_api_base_url?: string | null;
+        generic_secret?: string | null;
 
-        generic_api_key?: string | null;
+        generic_token?: string | null;
 
         installation_id?: string | null;
 
-        instanceEndpoint?: string | null;
-
-        instanceName?: string | null;
-
         password?: string | null;
 
         private_key?: string | null;
 
-        proxy_password?: string | null;
-
-        proxy_username?: string | null;
-
-        region?: string | null;
-
-        server_location?: string | null;
-
-        shop?: string | null;
-
-        site_name?: string | null;
-
-        subdomain?: string | null;
+        user_agent?: string | null;
 
         username?: string | null;
-
-        version?: string | null;
-
-        your_server?: string | null;
-
-        'your-domain'?: string | null;
-
-        [k: string]: unknown;
       }
     }
   }
@@ -18717,13 +18715,6 @@ export namespace ConnectedAccountPatchParams {
    * versions.
    */
   export interface Experimental {
-    /**
-     * Mutate the sharing model. PRIVATE → SHARED promotes the existing connection
-     * without re-auth; SHARED → PRIVATE revokes all non-creator access and clears the
-     * stored ACL atomically. Omit to leave unchanged.
-     */
-    account_type?: 'PRIVATE' | 'SHARED';
-
     /**
      * Access control for SHARED connections. Resolution rule (only fires when caller
      * != creator): user in not_allowed_user_ids → DENY; allow_all_users=true → ALLOW;
@@ -18796,6 +18787,7 @@ export declare namespace ConnectedAccounts {
     type ConnectedAccountUpdateStatusResponse as ConnectedAccountUpdateStatusResponse,
     type ConnectedAccountCreateParams as ConnectedAccountCreateParams,
     type ConnectedAccountListParams as ConnectedAccountListParams,
+    type ConnectedAccountDeleteParams as ConnectedAccountDeleteParams,
     type ConnectedAccountPatchParams as ConnectedAccountPatchParams,
     type ConnectedAccountRefreshParams as ConnectedAccountRefreshParams,
     type ConnectedAccountUpdateStatusParams as ConnectedAccountUpdateStatusParams,

package/src/resources/index.ts

@@ -11,6 +11,7 @@ export {
   type AuthConfigCreateParams,
   type AuthConfigUpdateParams,
   type AuthConfigListParams,
+  type AuthConfigDeleteParams,
   type AuthConfigUpdateStatusParams,
 } from './auth-configs';
 export {
@@ -31,6 +32,7 @@ export {
   type ConnectedAccountUpdateStatusResponse,
   type ConnectedAccountCreateParams,
   type ConnectedAccountListParams,
+  type ConnectedAccountDeleteParams,
   type ConnectedAccountPatchParams,
   type ConnectedAccountRefreshParams,
   type ConnectedAccountUpdateStatusParams,
@@ -57,17 +59,9 @@ export {
   type McpListParams,
   type McpRetrieveAppParams,
 } from './mcp/mcp';
-export {
-  Migration,
-  type MigrationRetrieveNanoidResponse,
-  type MigrationRetrieveNanoidParams,
-} from './migration';
+export { Migration } from './migration';
 export { Project } from './project/project';
-export {
-  ToolRouter,
-  type ToolRouterCreateSessionResponse,
-  type ToolRouterCreateSessionParams,
-} from './tool-router/tool-router';
+export { ToolRouter } from './tool-router/tool-router';
 export {
   Toolkits,
   type ToolkitRetrieveResponse,

package/src/resources/migration.ts

@@ -1,49 +1,5 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 import { APIResource } from '../core/resource';
-import { APIPromise } from '../core/api-promise';
-import { RequestOptions } from '../internal/request-options';
 
-/**
- * Endpoints to help with migration from v1 to v3
- */
-export class Migration extends APIResource {
-  /**
-   * Convert a legacy UUID to its corresponding NanoId for migration purposes. This
-   * endpoint facilitates the transition from UUID-based identifiers to the more
-   * compact NanoId format used in the v3 API.
-   */
-  retrieveNanoid(
-    query: MigrationRetrieveNanoidParams,
-    options?: RequestOptions,
-  ): APIPromise<MigrationRetrieveNanoidResponse> {
-    return this._client.get('/api/v3.1/migration/get-nanoid', { query, ...options });
-  }
-}
-
-export interface MigrationRetrieveNanoidResponse {
-  /**
-   * The NanoId corresponding to the provided UUID. This is the new identifier that
-   * should be used in place of the legacy UUID.
-   */
-  nanoid: string;
-}
-
-export interface MigrationRetrieveNanoidParams {
-  /**
-   * The type of resource that the UUID belongs to
-   */
-  type: 'CONNECTED_ACCOUNT' | 'AUTH_CONFIG' | 'TRIGGER_INSTANCE';
-
-  /**
-   * The legacy UUID that needs to be converted to a NanoId
-   */
-  uuid: string;
-}
-
-export declare namespace Migration {
-  export {
-    type MigrationRetrieveNanoidResponse as MigrationRetrieveNanoidResponse,
-    type MigrationRetrieveNanoidParams as MigrationRetrieveNanoidParams,
-  };
-}
+export class Migration extends APIResource {}

package/src/resources/project/config.ts

@@ -1,110 +1,5 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 import { APIResource } from '../../core/resource';
-import { APIPromise } from '../../core/api-promise';
-import { RequestOptions } from '../../internal/request-options';
 
-export class Config extends APIResource {
-  /**
-   * Retrieves the current project configuration including 2FA settings.
-   *
-   * @example
-   * ```ts
-   * const config = await client.project.config.retrieve();
-   * ```
-   */
-  retrieve(options?: RequestOptions): APIPromise<ConfigRetrieveResponse> {
-    return this._client.get('/api/v3.1/org/project/config', options);
-  }
-
-  /**
-   * Updates the project configuration settings.
-   *
-   * @example
-   * ```ts
-   * const config = await client.project.config.update({
-   *   is_2FA_enabled: true,
-   * });
-   * ```
-   */
-  update(
-    body: ConfigUpdateParams | null | undefined = {},
-    options?: RequestOptions,
-  ): APIPromise<ConfigUpdateResponse> {
-    return this._client.patch('/api/v3.1/org/project/config', { body, ...options });
-  }
-}
-
-export interface ConfigRetrieveResponse {
-  is_2FA_enabled: boolean;
-
-  log_visibility_setting: 'show_all' | 'dont_store_data';
-
-  mask_secret_keys_in_connected_account: boolean;
-
-  display_name?: string;
-
-  /**
-   * Whether to enable composio link for managed authentication. This key will be
-   * deprecated in the future. Please don't use this key.
-   */
-  is_composio_link_enabled_for_managed_auth?: boolean;
-
-  logo_url?: string;
-
-  require_mcp_api_key?: boolean;
-
-  signed_url_file_expiry_in_seconds?: number;
-}
-
-export interface ConfigUpdateResponse {
-  is_2FA_enabled: boolean;
-
-  log_visibility_setting: 'show_all' | 'dont_store_data';
-
-  mask_secret_keys_in_connected_account: boolean;
-
-  display_name?: string;
-
-  /**
-   * Whether to enable composio link for managed authentication. This key will be
-   * deprecated in the future. Please don't use this key.
-   */
-  is_composio_link_enabled_for_managed_auth?: boolean;
-
-  logo_url?: string;
-
-  require_mcp_api_key?: boolean;
-
-  signed_url_file_expiry_in_seconds?: number;
-}
-
-export interface ConfigUpdateParams {
-  display_name?: string;
-
-  is_2FA_enabled?: boolean;
-
-  /**
-   * Whether to enable composio link for managed authentication. This key will be
-   * deprecated in the future. Please don't use this key.
-   */
-  is_composio_link_enabled_for_managed_auth?: boolean;
-
-  log_visibility_setting?: 'show_all' | 'dont_store_data';
-
-  logo_url?: string;
-
-  mask_secret_keys_in_connected_account?: boolean;
-
-  require_mcp_api_key?: boolean;
-
-  signed_url_file_expiry_in_seconds?: number;
-}
-
-export declare namespace Config {
-  export {
-    type ConfigRetrieveResponse as ConfigRetrieveResponse,
-    type ConfigUpdateResponse as ConfigUpdateResponse,
-    type ConfigUpdateParams as ConfigUpdateParams,
-  };
-}
+export class Config extends APIResource {}

package/src/resources/project/index.ts

@@ -1,9 +1,4 @@
 // File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
-export {
-  Config,
-  type ConfigRetrieveResponse,
-  type ConfigUpdateResponse,
-  type ConfigUpdateParams,
-} from './config';
+export { Config } from './config';
 export { Project } from './project';

package/src/resources/project/project.ts

@@ -2,7 +2,7 @@
 
 import { APIResource } from '../../core/resource';
 import * as ConfigAPI from './config';
-import { Config, ConfigRetrieveResponse, ConfigUpdateParams, ConfigUpdateResponse } from './config';
+import { Config } from './config';
 
 export class Project extends APIResource {
   config: ConfigAPI.Config = new ConfigAPI.Config(this._client);
@@ -11,10 +11,5 @@ export class Project extends APIResource {
 Project.Config = Config;
 
 export declare namespace Project {
-  export {
-    Config as Config,
-    type ConfigRetrieveResponse as ConfigRetrieveResponse,
-    type ConfigUpdateResponse as ConfigUpdateResponse,
-    type ConfigUpdateParams as ConfigUpdateParams,
-  };
+  export { Config as Config };
 }

package/src/resources/tool-router/index.ts

@@ -26,8 +26,4 @@ export {
   type SessionToolkitsParams,
   type SessionToolsParams,
 } from './session/index';
-export {
-  ToolRouter,
-  type ToolRouterCreateSessionResponse,
-  type ToolRouterCreateSessionParams,
-} from './tool-router';
+export { ToolRouter } from './tool-router';

package/src/resources/tool-router/session/session.ts

@@ -3512,9 +3512,7 @@ export interface SessionExecuteMetaParams {
     | 'COMPOSIO_WAIT_FOR_CONNECTIONS'
     | 'COMPOSIO_REMOTE_WORKBENCH'
     | 'COMPOSIO_REMOTE_BASH_TOOL'
-    | 'COMPOSIO_GET_TOOL_SCHEMAS'
-    | 'COMPOSIO_UPSERT_RECIPE'
-    | 'COMPOSIO_GET_RECIPE';
+    | 'COMPOSIO_GET_TOOL_SCHEMAS';
 
   /**
    * The arguments required by the meta tool

package/src/resources/tool-router/tool-router.ts

@@ -28,117 +28,14 @@ import {
   SessionToolsParams,
   SessionToolsResponse,
 } from './session/session';
-import { APIPromise } from '../../core/api-promise';
-import { RequestOptions } from '../../internal/request-options';
 
-/**
- * (Labs) Tool router endpoints
- */
 export class ToolRouter extends APIResource {
   session: SessionAPI.Session = new SessionAPI.Session(this._client);
-
-  /**
-   * Creates a new session for the tool router lab feature (Legacy). This endpoint
-   * initializes a new session with specified toolkits and their authentication
-   * configurations. The session provides an isolated environment for testing and
-   * managing tool routing logic with scoped MCP server access.
-   *
-   * @example
-   * ```ts
-   * const response = await client.toolRouter.createSession({
-   *   user_id: 'user_123456789',
-   *   config: {
-   *     toolkits: [
-   *       {
-   *         toolkit: 'gmail',
-   *         auth_config_id: 'ac_1a2b3c4d5e6f',
-   *       },
-   *       {
-   *         toolkit: 'slack',
-   *         auth_config_id: 'ac_7g8h9i0j1k2l',
-   *       },
-   *       { toolkit: 'github' },
-   *     ],
-   *   },
-   * });
-   * ```
-   */
-  createSession(
-    body: ToolRouterCreateSessionParams,
-    options?: RequestOptions,
-  ): APIPromise<ToolRouterCreateSessionResponse> {
-    return this._client.post('/api/v3.1/labs/tool_router/session', { body, ...options });
-  }
-}
-
-export interface ToolRouterCreateSessionResponse {
-  /**
-   * MCP server endpoint URL for this specific chat session
-   */
-  chat_session_mcp_url: string;
-
-  /**
-   * Generated session identifier (prefixed with "trs\_")
-   */
-  session_id: string;
-
-  /**
-   * MCP server endpoint URL for this specific tool router instance
-   */
-  tool_router_instance_mcp_url: string;
-}
-
-export interface ToolRouterCreateSessionParams {
-  /**
-   * Unique user identifier for the session owner
-   */
-  user_id: string;
-
-  /**
-   * Session configuration including enabled toolkits and their auth configs
-   */
-  config?: ToolRouterCreateSessionParams.Config;
-}
-
-export namespace ToolRouterCreateSessionParams {
-  /**
-   * Session configuration including enabled toolkits and their auth configs
-   */
-  export interface Config {
-    /**
-     * Whether to manually manage connections
-     */
-    manually_manage_connections?: boolean | null;
-
-    /**
-     * Array of toolkit configurations with optional auth configs
-     */
-    toolkits?: Array<Config.Toolkit>;
-  }
-
-  export namespace Config {
-    export interface Toolkit {
-      /**
-       * Toolkit identifier (e.g., gmail, slack, github)
-       */
-      toolkit: string;
-
-      /**
-       * Specific auth configuration ID for this toolkit
-       */
-      auth_config_id?: string;
-    }
-  }
 }
 
 ToolRouter.Session = Session;
 
 export declare namespace ToolRouter {
-  export {
-    type ToolRouterCreateSessionResponse as ToolRouterCreateSessionResponse,
-    type ToolRouterCreateSessionParams as ToolRouterCreateSessionParams,
-  };
-
   export {
     Session as Session,
     type SessionCreateResponse as SessionCreateResponse,

package/src/resources/tools.ts

@@ -96,7 +96,8 @@ export class Tools extends APIResource {
   /**
    * Proxy an HTTP request to a third-party API using connected account credentials.
    * This endpoint allows making authenticated API calls to external services while
-   * abstracting away authentication details.
+   * abstracting away authentication details. v3.1 requires a proxy_execute scoped
+   * project API key; default project API keys are rejected.
    *
    * @example
    * ```ts