@composio/client 2.0.0-rc.15 → 2.0.0-rc.17

package/README.md

@@ -89,8 +89,10 @@ const transport = createFetchTransport({ fetch: instrumentedFetch })
 const composio = new Composio({ apiKey, transport })
 ```
 
-Existing `fetch` and `fetchOptions` constructor options remain supported. They cannot be combined
-with `transport` because a request can have only one HTTP dispatcher.
+Without a `transport`, the client resolves `globalThis.fetch` when a request is sent, so late
+polyfills and test interceptors keep working. A custom `fetch` or extra `RequestInit` defaults go
+through `createFetchTransport({ fetch, defaults })`; the former `fetch`, `fetchOptions` and
+`defaultQuery` constructor options are gone (see the upgrade section).
 
 ## Effect
 
@@ -165,9 +167,8 @@ A credential option takes a `string` or a `Redacted<string>`. Construction fails
 excepted, as on the root client), or when `decode: true` is given without `schemas`.
 
 The resources are plain objects of functions, not classes, so a method can be passed around without
-binding. Two things on the root client have no counterpart here: the resources that hold no operation
-(`migration`, `project.config`), and the deprecated `custom.deleteToolkit(slug, options)` overload —
-only the current `(slug, query, options)` signature exists.
+binding. One thing on the root client has no counterpart here: the resources that hold no operation
+(`migration`, `project.config`).
 
 ### Errors
 
@@ -431,6 +432,37 @@ decodes, then with the loader table and every schema it reaches.
 of which 2.1 MB and 328 files are `dist/effect/schemas*`, against 1.1 MB in 176 files for
 `2.0.0-rc.11` as published. None of it is on the root entry's import path.
 
+### Identify the calling product
+
+A product built on the client passes `identity` instead of setting headers by hand. The root client
+and `./effect` take the same option:
+
+```ts
+const composio = new Composio({
+  apiKey,
+  identity: { product: '@composio/core', version: '0.9.0', source: 'TYPESCRIPT_SDK', framework: 'openai' },
+})
+```
+
+| Header | Sent from | Without `identity` |
+| --- | --- | --- |
+| `x-client-provenance`, `x-client-version` | `product`, `version` | the package name and version |
+| `x-sdk-version` | `version` | not sent |
+| `x-source`, `x-framework` | `source`, `framework` | not sent |
+| `x-runtime` | `runtime`, else the detected runtime | the detected runtime |
+| `x-client-runtime`, `x-runtime-version` | the detected runtime | the detected runtime |
+| `x-client-library`, `x-client-library-version`, `x-client-language` | the package | the package |
+
+The three library headers are the package's own: `defaultHeaders`, `COMPOSIO_CUSTOM_HEADERS` and a
+call's `headers` cannot set or delete them. Once `identity` is set, the same holds for every header
+in the table. A refused name fails construction (`ComposioError`, or `ConfigurationError` on
+`./effect`), or the call before anything is sent. Identity values must be non-empty printable ASCII
+with no surrounding whitespace, and are sent to the configured API origin only.
+
+The detected runtime is one of `nodejs`, `bun`, `deno`, `cloudflare`, `vercel_edge`, `netlify`,
+`fastly` or `unknown`, checked in [`std-env`](https://github.com/unjs/std-env)'s order; the
+Python client always reports `python`.
+
 ## Upgrade from Stainless 0.1.x to 2.0
 
 By default, the 2.0 client refuses to send credentials over plain HTTP unless the hostname is
@@ -456,6 +488,28 @@ The opt-in records the resolved scheme, hostname, and port. Mutating `baseURL` c
 and `withOptions({ baseURL: ... })` requires `allowInsecureHTTP: true` again when the origin
 changes. Redirects to another origin remain credential-free.
 
+### Changed in 2.0.0-rc.17
+
+`defaultHeaders`, `COMPOSIO_CUSTOM_HEADERS` and per-call `headers` refuse the library headers
+(`x-client-library`, `x-client-library-version`, `x-client-language`), and refuse every identity
+header once `identity` is set. A wrapper that set its product headers through `defaultHeaders`
+moves them into `identity` (see [Identify the calling product](#identify-the-calling-product)).
+Python takes `identity=ClientIdentity(...)` under the same rule. The type surface is unchanged
+apart from the added option, so the release declares no ledger entry.
+
+### Removed in 2.0.0-rc.16
+
+Each row is a declared entry in `packages/codegen/assignability-ledger.json`, the list of what a
+release changes against the previous published version.
+
+| Removed | Migration |
+| --- | --- |
+| `fetch: f` (constructor) | `transport: createFetchTransport({ fetch: f })` |
+| `fetchOptions: { cache: 'no-store' }` (constructor) | `transport: createFetchTransport({ defaults: { cache: 'no-store' } })`. The defaults cannot set `method`, `headers`, `body`, `signal` or `redirect`, which the client owns |
+| `fetchOptions` (per call, in `RequestOptions`) | None: `headers`, `timeout`, `signal` and `idempotencyKey` stay, and transport-level defaults go through `createFetchTransport({ defaults })` |
+| `defaultQuery` (root `ClientOptions` and `./effect` `ComposioClientOptions`) | None: generated methods own their query, and the raw methods (`get`, `post`, ...) take an explicit `query` |
+| `custom.deleteToolkit(slug, options)` | `custom.deleteToolkit(slug, query, options)` — pass request options third, as on every other `(id, params?, options?)` method. The runtime guard that recognized an options bag in the params position is gone with the overload |
+
 ## Development
 
 Toolchain is pinned via [mise](https://mise.jdx.dev) (`mise install`): Node 24, pnpm 11, Python 3.13, uv. ESM-only, TypeScript 7 (native compiler for typechecking, `typescript@6` retained for tooling until 7.1 restores the compiler API).

package/dist/{api-key-revocation-CBTqyv77.mjs → api-key-revocation-lc3308Ao.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/api-key-revocation.ts
 const OP_CREATE = generatedOperation("apiKeyRevocation.create");

package/dist/{auth-YEGyiIZI.mjs → auth-DkGiEaxg.mjs}

@@ -1,4 +1,4 @@
-import { t as Session } from "./session-CGBr6GaO.mjs";
+import { t as Session } from "./session-Dm8WtF4I.mjs";
 
 //#region src/compat/resources/auth/auth.ts
 /**

package/dist/{auth-configs-V7U1YdOd.mjs → auth-configs-DbxqGahP.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/auth-configs.ts
 const OP_CREATE = generatedOperation("authConfigs.create");

package/dist/{clanker-DK892J2n.mjs → clanker-fK9cAkTz.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/org/clanker.ts
 const OP_CREATE_CLAIM = generatedOperation("org.clanker.createClaim");

package/dist/{cli-BR9p7AMA.mjs → cli-K1MskpaR.mjs}

@@ -1,5 +1,5 @@
-import { M as mergeHeaders, b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
-import { t as Realtime } from "./realtime-IBtbqLYg.mjs";
+import { F as mergeHeaders, b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
+import { t as Realtime } from "./realtime-6LigMh83.mjs";
 
 //#region src/compat/resources/cli/cli.ts
 const OP_CREATE_CODACT_FAILURE = generatedOperation("cli.createCodactFailure");

package/dist/{connected-accounts-DyxruL1q.mjs → connected-accounts-Bfl7_SY_.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/connected-accounts.ts
 const OP_CREATE = generatedOperation("connectedAccounts.create");

package/dist/{consumer-QHRVNxXs.mjs → consumer-5o2zMQwr.mjs}

@@ -1,5 +1,5 @@
-import { M as mergeHeaders, b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
-import { t as Project } from "./project-CVKYoJ9i.mjs";
+import { F as mergeHeaders, b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
+import { t as Project } from "./project-DF5KclHm.mjs";
 
 //#region src/compat/resources/org/consumer/consumer.ts
 const OP_LIST_CONNECTED_TOOLKITS = generatedOperation("org.consumer.listConnectedToolkits");

package/dist/custom-8rs-sHnb.mjs

@@ -0,0 +1,34 @@
+import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
+
+//#region src/compat/resources/custom.ts
+const OP_DELETE_TOOLKIT = generatedOperation("custom.deleteToolkit");
+const OP_SYNC = generatedOperation("custom.sync");
+const OP_UPSERT = generatedOperation("custom.upsert");
+/** OpenAPI resource for `custom`. */
+var Custom = class {
+	#client;
+	constructor(client) {
+		this.#client = client;
+	}
+	deleteToolkit(slug, query = {}, options) {
+		return this.#client.delete(path`/api/v3.1/custom/toolkits/${slug}`, withOperation(OP_DELETE_TOOLKIT, {
+			query,
+			...options
+		}));
+	}
+	sync(body, options) {
+		return this.#client.post("/api/v3.1/custom/toolkits/sync", withOperation(OP_SYNC, {
+			body,
+			...options
+		}));
+	}
+	upsert(body, options) {
+		return this.#client.post("/api/v3.1/custom/toolkits/upsert", withOperation(OP_UPSERT, {
+			body,
+			...options
+		}));
+	}
+};
+
+//#endregion
+export { Custom as t };

package/dist/{custom-DNPJxZK5.mjs → custom-wEkSiPHn.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/mcp/custom.ts
 const OP_CREATE = generatedOperation("mcp.custom.create");

package/dist/effect.d.mts

@@ -1,5 +1,5 @@
-import { $ as ProjectRegenerateAPIKeyResponse, $n as ToolkitRetrieveChangelogResponse, $r as SessionCreateResponse, $t as McpCreateInstanceParams, A as ClankerCreateClaimResponse, An as TriggersTypeListParams, Ar as FileListResponse$1, At as LogRetrieveToolExecutionResponse, B as ConsumerListConnectedToolkitsParams, Bn as AuthConfigListParams, Br as ToolRetrieveEnumResponse, Ci as FileDeleteResponse, Cn as TriggerInstanceUpsertParams, Cr as ConnectedAccountRevokeResponse, D as OrgListResponse, Dn as ManageDeleteResponse, Dr as FileCreatePresignedURLParams, Dt as UsageRetrieveSummaryResponse, E as OrgListParams, Et as UsageRetrieveSummaryParams, F as UsageRetrieveSummaryResponse$1, Fi as APIErrorBody, Fr as ToolGetInputResponse, Ft as ToolRetrieveResponse$1, Gn as AuthConfigUpdateStatusParams, Gt as CliCreateSessionResponse, Hn as AuthConfigRetrieveResponse, Hr as ToolRetrieveRequiredScopesParams, Ht as CliCreateCodactFailureParams, In as AuthConfigCreateParams, Ir as ToolListParams, J as ProjectCreateResponse, Jn as ToolkitListParams, Jr as SessionAttachParams, Kn as AuthConfigUpdateStatusResponse, Kt as CliGetSessionParams, L as ProjectListParams$1, Ln as AuthConfigCreateResponse, Lr as ToolListResponse, Lt as TriggerListParams, M as UsageRetrieveParams$1, Mn as TriggersTypeRetrieveEnumResponse, Mr as ToolExecuteParams, Mt as ToolListFieldsResponse, N as UsageRetrieveResponse$1, Nn as TriggersTypeRetrieveParams, Nr as ToolExecuteResponse, Nt as ToolListParams$1, On as ManageUpdateParams, Or as FileCreatePresignedURLResponse, Ot as LogCreateToolExecutionParams, P as UsageRetrieveSummaryParams$1, Pn as TriggersTypeRetrieveResponse, Pr as ToolGetInputParams, Pt as ToolListResponse$1, Q as ProjectListResponse, Qn as ToolkitRetrieveCategoriesResponse, Qr as SessionCreateParams, R as ProjectListResponse$1, Rn as AuthConfigDeleteParams, Rr as ToolProxyParams, Rt as TriggerListResponse, Si as FileDeleteParams, Sn as TriggerInstanceListActiveResponse, Sr as ConnectedAccountRetrieveResponse, Ti as FileListResponse, Tr as ConnectedAccountUpdateStatusResponse, Tt as UsageRetrieveResponse, U as ProjectResolveParams, Un as AuthConfigUpdateParams, Ur as ToolRetrieveRequiredScopesResponse, Ut as CliCreateCodactFailureResponse, V as ConsumerListConnectedToolkitsResponse, Vn as AuthConfigListResponse, Vr as ToolRetrieveParams, W as ProjectResolveResponse, Wn as AuthConfigUpdateResponse, Wr as ToolRetrieveResponse, Wt as CliCreateSessionParams, X as ProjectDeleteResponse, Xn as ToolkitRecommendScopesParams, Xr as SessionConfigHistoryParams, Xt as RealtimeAuthResponse, Y as ProjectDeleteParams, Yn as ToolkitListResponse, Yr as SessionAttachResponse, Yt as RealtimeAuthParams, Z as ProjectListParams, Zn as ToolkitRecommendScopesResponse, Zr as SessionConfigHistoryResponse, Zt as RealtimeCredentialsResponse, _ as CustomUpsertParams, _i as SessionToolsResponse, _n as GenerateURLResponse, _r as ConnectedAccountListResponse, _t as WebhookSubscriptionRetrieveResponse, ai as SessionLinkParams, an as McpDeleteResponse, ar as ToolkitRetrieveScopesGrantContextResponse, at as WebhookEndpointReplaceParams, b as ApiKeyRevocationCreateParams, bi as FileCreateUploadURLParams, bn as CustomCreateResponse, br as ConnectedAccountRefreshParams, bt as WebhookSubscriptionUpdateResponse, ci as SessionPatchResponse, cn as McpListParams, cr as LinkCreateParams, ct as WebhookEndpointUpdateParams, d as KeyringListTransferKeysResponse, di as SessionRetrieveResponse, dn as McpRetrieveAppResponse, dr as ConnectedAccountCompleteAuthResponse, dt as WebhookSubscriptionCreateParams, ei as SessionDeleteResponse, en as McpCreateInstanceResponse, er as ToolkitRetrieveMultiParams, et as ProjectRetrieveResponse, fi as SessionSearchParams, fn as McpRetrieveResponse, fr as ConnectedAccountCreateParams, ft as WebhookSubscriptionCreateResponse, g as CustomSyncResponse, gi as SessionToolsParams, gn as GenerateURLParams, gr as ConnectedAccountListParams, gt as WebhookSubscriptionListResponse, h as CustomSyncParams, hi as SessionToolkitsResponse, hr as ConnectedAccountDeleteResponse, ht as WebhookSubscriptionListParams, i as SessionConfigsRetrieveResponse, ii as SessionExecuteResponse, in as McpDeleteInstanceResponse, ir as ToolkitRetrieveScopesGrantContextParams, it as WebhookEndpointListResponse, ji as HeadersLike, jn as TriggersTypeListResponse, k as ClankerCreateClaimParams, kn as ManageUpdateResponse, kr as FileListParams$1, kt as LogCreateToolExecutionResponse, li as SessionProxyExecuteParams, ln as McpListResponse, lr as LinkCreateResponse, lt as WebhookEndpointUpdateResponse, m as CustomDeleteToolkitResponse, mi as SessionToolkitsParams, mn as McpUpdateResponse, mr as ConnectedAccountDeleteParams, mt as WebhookSubscriptionListEventTypesResponse, n as SessionConfigsListParams, ni as SessionExecuteMetaResponse, nn as McpCreateResponse, nr as ToolkitRetrieveParams, nt as WebhookEndpointCreateResponse, oi as SessionLinkResponse, on as McpListInstancesParams, ot as WebhookEndpointReplaceResponse, p as CustomDeleteToolkitParams, pi as SessionSearchResponse, pn as McpUpdateParams, pr as ConnectedAccountCreateResponse, pt as WebhookSubscriptionDeleteResponse, q as ProjectCreateParams, qt as CliGetSessionResponse, r as SessionConfigsListResponse, ri as SessionExecuteParams, rn as McpDeleteInstanceParams, rr as ToolkitRetrieveResponse, rt as WebhookEndpointListParams, si as SessionPatchParams, sn as McpListInstancesResponse, st as WebhookEndpointRetrieveResponse, ti as SessionExecuteMetaParams, tn as McpCreateParams, tr as ToolkitRetrieveMultiResponse, tt as WebhookEndpointCreateParams, ui as SessionProxyExecuteResponse, un as McpRetrieveAppParams, ur as ConnectedAccountCompleteAuthParams, v as CustomUpsertResponse, vi as FileCreateDownloadURLParams, vr as ConnectedAccountPatchParams, vt as WebhookSubscriptionRotateSecretResponse, w as SessionRetrieveInfoResponse, wi as FileListParams, wn as TriggerInstanceUpsertResponse, wr as ConnectedAccountUpdateStatusParams, wt as UsageRetrieveParams, x as ApiKeyRevocationCreateResponse, xi as FileCreateUploadURLResponse, xn as TriggerInstanceListActiveParams, xr as ConnectedAccountRefreshResponse, yi as FileCreateDownloadURLResponse, yn as CustomCreateParams, yr as ConnectedAccountPatchResponse, yt as WebhookSubscriptionUpdateParams, zn as AuthConfigDeleteResponse, zr as ToolProxyResponse, zt as TriggerRetrieveResponse } from "./session-configs-CtHZk-vG.mjs";
-import { t as VERSION } from "./version-CuFIok56.mjs";
+import { $ as ProjectRegenerateAPIKeyResponse, $n as ToolkitRetrieveChangelogResponse, $r as SessionCreateResponse, $t as McpCreateInstanceParams, A as ClankerCreateClaimResponse, An as TriggersTypeListParams, Ar as FileListResponse$1, At as LogRetrieveToolExecutionResponse, B as ConsumerListConnectedToolkitsParams, Bn as AuthConfigListParams, Br as ToolRetrieveEnumResponse, Ci as FileDeleteResponse, Cn as TriggerInstanceUpsertParams, Cr as ConnectedAccountRevokeResponse, D as OrgListResponse, Dn as ManageDeleteResponse, Dr as FileCreatePresignedURLParams, Dt as UsageRetrieveSummaryResponse, E as OrgListParams, Et as UsageRetrieveSummaryParams, F as UsageRetrieveSummaryResponse$1, Fr as ToolGetInputResponse, Ft as ToolRetrieveResponse$1, Gn as AuthConfigUpdateStatusParams, Gt as CliCreateSessionResponse, Hn as AuthConfigRetrieveResponse, Hr as ToolRetrieveRequiredScopesParams, Ht as CliCreateCodactFailureParams, Ii as APIErrorBody, In as AuthConfigCreateParams, Ir as ToolListParams, J as ProjectCreateResponse, Jn as ToolkitListParams, Jr as SessionAttachParams, Kn as AuthConfigUpdateStatusResponse, Kt as CliGetSessionParams, L as ProjectListParams$1, Ln as AuthConfigCreateResponse, Lr as ToolListResponse, Lt as TriggerListParams, M as UsageRetrieveParams$1, Mi as HeadersLike, Mn as TriggersTypeRetrieveEnumResponse, Mr as ToolExecuteParams, Mt as ToolListFieldsResponse, N as UsageRetrieveResponse$1, Nn as TriggersTypeRetrieveParams, Nr as ToolExecuteResponse, Nt as ToolListParams$1, On as ManageUpdateParams, Or as FileCreatePresignedURLResponse, Ot as LogCreateToolExecutionParams, P as UsageRetrieveSummaryParams$1, Pn as TriggersTypeRetrieveResponse, Pr as ToolGetInputParams, Pt as ToolListResponse$1, Q as ProjectListResponse, Qn as ToolkitRetrieveCategoriesResponse, Qr as SessionCreateParams, R as ProjectListResponse$1, Rn as AuthConfigDeleteParams, Rr as ToolProxyParams, Rt as TriggerListResponse, Si as FileDeleteParams, Sn as TriggerInstanceListActiveResponse, Sr as ConnectedAccountRetrieveResponse, Ti as FileListResponse, Tr as ConnectedAccountUpdateStatusResponse, Tt as UsageRetrieveResponse, U as ProjectResolveParams, Un as AuthConfigUpdateParams, Ur as ToolRetrieveRequiredScopesResponse, Ut as CliCreateCodactFailureResponse, V as ConsumerListConnectedToolkitsResponse, Vn as AuthConfigListResponse, Vr as ToolRetrieveParams, W as ProjectResolveResponse, Wn as AuthConfigUpdateResponse, Wr as ToolRetrieveResponse, Wt as CliCreateSessionParams, X as ProjectDeleteResponse, Xn as ToolkitRecommendScopesParams, Xr as SessionConfigHistoryParams, Xt as RealtimeAuthResponse, Y as ProjectDeleteParams, Yn as ToolkitListResponse, Yr as SessionAttachResponse, Yt as RealtimeAuthParams, Z as ProjectListParams, Zn as ToolkitRecommendScopesResponse, Zr as SessionConfigHistoryResponse, Zt as RealtimeCredentialsResponse, _ as CustomUpsertParams, _i as SessionToolsResponse, _n as GenerateURLResponse, _r as ConnectedAccountListResponse, _t as WebhookSubscriptionRetrieveResponse, ai as SessionLinkParams, an as McpDeleteResponse, ar as ToolkitRetrieveScopesGrantContextResponse, at as WebhookEndpointReplaceParams, b as ApiKeyRevocationCreateParams, bi as FileCreateUploadURLParams, bn as CustomCreateResponse, br as ConnectedAccountRefreshParams, bt as WebhookSubscriptionUpdateResponse, ci as SessionPatchResponse, cn as McpListParams, cr as LinkCreateParams, ct as WebhookEndpointUpdateParams, d as KeyringListTransferKeysResponse, di as SessionRetrieveResponse, dn as McpRetrieveAppResponse, dr as ConnectedAccountCompleteAuthResponse, dt as WebhookSubscriptionCreateParams, ei as SessionDeleteResponse, en as McpCreateInstanceResponse, er as ToolkitRetrieveMultiParams, et as ProjectRetrieveResponse, fi as SessionSearchParams, fn as McpRetrieveResponse, fr as ConnectedAccountCreateParams, ft as WebhookSubscriptionCreateResponse, g as CustomSyncResponse, gi as SessionToolsParams, gn as GenerateURLParams, gr as ConnectedAccountListParams, gt as WebhookSubscriptionListResponse, h as CustomSyncParams, hi as SessionToolkitsResponse, hr as ConnectedAccountDeleteResponse, ht as WebhookSubscriptionListParams, i as SessionConfigsRetrieveResponse, ii as SessionExecuteResponse, in as McpDeleteInstanceResponse, ir as ToolkitRetrieveScopesGrantContextParams, it as WebhookEndpointListResponse, ji as ClientIdentity, jn as TriggersTypeListResponse, k as ClankerCreateClaimParams, kn as ManageUpdateResponse, kr as FileListParams$1, kt as LogCreateToolExecutionResponse, li as SessionProxyExecuteParams, ln as McpListResponse, lr as LinkCreateResponse, lt as WebhookEndpointUpdateResponse, m as CustomDeleteToolkitResponse, mi as SessionToolkitsParams, mn as McpUpdateResponse, mr as ConnectedAccountDeleteParams, mt as WebhookSubscriptionListEventTypesResponse, n as SessionConfigsListParams, ni as SessionExecuteMetaResponse, nn as McpCreateResponse, nr as ToolkitRetrieveParams, nt as WebhookEndpointCreateResponse, oi as SessionLinkResponse, on as McpListInstancesParams, ot as WebhookEndpointReplaceResponse, p as CustomDeleteToolkitParams, pi as SessionSearchResponse, pn as McpUpdateParams, pr as ConnectedAccountCreateResponse, pt as WebhookSubscriptionDeleteResponse, q as ProjectCreateParams, qt as CliGetSessionResponse, r as SessionConfigsListResponse, ri as SessionExecuteParams, rn as McpDeleteInstanceParams, rr as ToolkitRetrieveResponse, rt as WebhookEndpointListParams, si as SessionPatchParams, sn as McpListInstancesResponse, st as WebhookEndpointRetrieveResponse, ti as SessionExecuteMetaParams, tn as McpCreateParams, tr as ToolkitRetrieveMultiResponse, tt as WebhookEndpointCreateParams, ui as SessionProxyExecuteResponse, un as McpRetrieveAppParams, ur as ConnectedAccountCompleteAuthParams, v as CustomUpsertResponse, vi as FileCreateDownloadURLParams, vr as ConnectedAccountPatchParams, vt as WebhookSubscriptionRotateSecretResponse, w as SessionRetrieveInfoResponse, wi as FileListParams, wn as TriggerInstanceUpsertResponse, wr as ConnectedAccountUpdateStatusParams, wt as UsageRetrieveParams, x as ApiKeyRevocationCreateResponse, xi as FileCreateUploadURLResponse, xn as TriggerInstanceListActiveParams, xr as ConnectedAccountRefreshResponse, yi as FileCreateDownloadURLResponse, yn as CustomCreateParams, yr as ConnectedAccountPatchResponse, yt as WebhookSubscriptionUpdateParams, zn as AuthConfigDeleteResponse, zr as ToolProxyResponse, zt as TriggerRetrieveResponse } from "./session-configs-nA6TL_i4.mjs";
+import { t as VERSION } from "./version-DUxhnnPj.mjs";
 import { Context, Effect, Layer, Redacted, Stream } from "effect";
 import * as HttpClient from "effect/http/HttpClient";
 import * as Schema from "effect/Schema";
@@ -651,10 +651,20 @@ interface ClientSettings {
    * origin. The permission is limited to the resolved scheme, host, and port.
    */
   readonly allowInsecureHTTP?: boolean | undefined;
-  /** Headers sent on every request; per-call headers win, `null` deletes. */
+  /**
+   * The calling product, sent as the product headers (`x-client-provenance`,
+   * `x-client-version`, `x-sdk-version`, `x-source`, `x-framework`,
+   * `x-runtime`). With it set, neither `defaultHeaders` nor a call's `headers`
+   * may name an identity header; without it the client reports itself.
+   */
+  readonly identity?: ClientIdentity | undefined;
+  /**
+   * Headers sent on every request; per-call headers win, `null` deletes. The
+   * library headers (`x-client-library`, `x-client-library-version`,
+   * `x-client-language`) are the client's own and are refused here, as is
+   * every identity header once `identity` is set.
+   */
   readonly defaultHeaders?: HeadersLike;
-  /** Query params sent on every request; `undefined` removes a param. */
-  readonly defaultQuery?: Record<string, string | undefined> | undefined;
   /**
    * Maximum retries for temporary failures of a call whose method is
    * idempotent (`GET`, `HEAD`, `OPTIONS`, `PUT`, `DELETE`). Defaults to 2. Any
@@ -730,8 +740,9 @@ declare class ComposioClient extends ComposioClient_base {}
  * Reads no environment variable.
  *
  * @throws {ConfigurationError} when a credentialed origin is not HTTPS, a
- *   credential cannot be sent as a header, or the client is to decode and was
- *   given no schemas.
+ *   credential cannot be sent as a header, `identity` is invalid or
+ *   `defaultHeaders` names an identity header, or the client is to decode and
+ *   was given no schemas.
  */
 declare const make: (options: ComposioClientOptions, httpClient: HttpClient.HttpClient) => ComposioClientShape;
 /**
@@ -755,4 +766,4 @@ declare const layerFetch: (options?: ComposioClientOptions) => Layer.Layer<Compo
  */
 declare const layerConfig: (options?: ComposioClientOptions) => Layer.Layer<ComposioClient, ConfigurationError, HttpClient.HttpClient>;
 //#endregion
-export { APIConnectionError, APIConnectionTimeoutError, APIError, type APIErrorBody, type APIErrorFields, type APIStatusError, AuthenticationError, BadRequestError, ComposioClient, type ComposioClientOptions, type ComposioClientShape, type ComposioError, ConfigurationError, ConflictError, type Credential, DecodeError, type DecodeIssue, type DeprecationNotices, type HeadersLike, InternalServerError, NotFoundError, PermissionDeniedError, RateLimitError, type RawBodyRequestOptions, type RawRequestOptions, type RequestOptions, type SchemaLoaders, type Tracing, UnprocessableEntityError, VERSION, isAPIError, isComposioError, layer, layerConfig, layerFetch, make };
+export { APIConnectionError, APIConnectionTimeoutError, APIError, type APIErrorBody, type APIErrorFields, type APIStatusError, AuthenticationError, BadRequestError, type ClientIdentity, ComposioClient, type ComposioClientOptions, type ComposioClientShape, type ComposioError, ConfigurationError, ConflictError, type Credential, DecodeError, type DecodeIssue, type DeprecationNotices, type HeadersLike, InternalServerError, NotFoundError, PermissionDeniedError, RateLimitError, type RawBodyRequestOptions, type RawRequestOptions, type RequestOptions, type SchemaLoaders, type Tracing, UnprocessableEntityError, VERSION, isAPIError, isComposioError, layer, layerConfig, layerFetch, make };

package/dist/effect.mjs

@@ -1,6 +1,6 @@
 import { h as makeAPIErrorMessage, m as errorDetails, s as ComposioError } from "./error-D9cG225M.mjs";
-import { A as resolveHTTPURL, C as inspectDeprecation, D as callerPlacedCredential, E as assertCredentialTransport, M as mergeHeaders, O as carriesCredentials, S as inspectDeprecatedInputs, T as SCHEME_HEADERS, _ as schemeForRequest, a as TOO_MANY_REDIRECTS, c as buildURL, d as path, f as printableURL, g as safeJSON, h as rewriteForRedirect, i as REDIRECT_STATUSES, j as buildHeaders, k as parseHTTPURL, m as retryDelayMillis, n as generatedOperation, o as buildBody, r as OPAQUE_REDIRECT, s as buildRequestHeaders, t as GENERATED_OPERATIONS, v as shouldRetryResponse, w as matchOperation, x as VERSION, y as validatePositiveInteger } from "./generated-operations-lxo6Uhzh.mjs";
-import { r as classifySuccessBody, t as GENERATED_DEPRECATED_INPUTS } from "./generated-deprecated-inputs-BggrSLuP.mjs";
+import { A as callerPlacedCredential, C as resolveIdentity, D as matchOperation, E as inspectDeprecation, F as mergeHeaders, M as parseHTTPURL, N as resolveHTTPURL, O as SCHEME_HEADERS, P as buildHeaders, S as assertNoReservedHeaders, T as inspectDeprecatedInputs, _ as schemeForRequest, a as TOO_MANY_REDIRECTS, c as buildURL, d as path, f as printableURL, g as safeJSON, h as rewriteForRedirect, i as REDIRECT_STATUSES, j as carriesCredentials, k as assertCredentialTransport, m as retryDelayMillis, n as generatedOperation, o as buildBody, r as OPAQUE_REDIRECT, s as buildRequestHeaders, t as GENERATED_OPERATIONS, v as shouldRetryResponse, w as VERSION, y as validatePositiveInteger } from "./generated-operations-D1e__yar.mjs";
+import { r as classifySuccessBody, t as GENERATED_DEPRECATED_INPUTS } from "./generated-deprecated-inputs--L5LHDO_.mjs";
 import { i as standardNextCursor, n as assertPageItems, r as isFinalCursor, t as assertCursorAdvanced } from "./pagination-rules-uMUdPq_7.mjs";
 import { Config, Context, Data, Effect, Exit, Layer, Match, Option, Predicate, Redacted, Result, Stream, Tracer } from "effect";
 import * as FetchHttpClient from "effect/http/FetchHttpClient";
@@ -383,6 +383,7 @@ const substitute = (template, params) => {
 const hopHeaders = (prepared, hop) => buildRequestHeaders(prepared.headerConfig, { headers: prepared.callHeaders }, hop.url, hop.bodyHeaders, hop.withdrawn, prepared.scheme, prepared.callerPlaced);
 const prepare = (kernel, call) => {
 	const callHeaders = call.headers();
+	assertNoReservedHeaders(callHeaders, kernel.identity, "headers");
 	const path = call.path();
 	if (call.options?.timeout !== void 0) validatePositiveInteger("timeout", call.options.timeout);
 	const resolvedRetries = call.options?.maxRetries ?? kernel.maxRetries;
@@ -411,7 +412,8 @@ const prepare = (kernel, call) => {
 			credentials,
 			allowedHTTPOrigin: kernel.allowedHTTPOrigin,
 			userAgent: kernel.userAgent,
-			defaultHeaders: kernel.defaultHeaders
+			defaultHeaders: kernel.defaultHeaders,
+			identity: kernel.identity
 		},
 		callHeaders,
 		scheme: schemeForRequest({ credentials }, call.operation),
@@ -1489,6 +1491,15 @@ const hold = (credential) => {
 const resolveKernel = (options, httpClient) => {
 	const baseURL = options.baseURL || DEFAULT_BASE_URL;
 	if (options.decode === true && options.schemas === void 0) return Result.fail(new ConfigurationError({ message: SCHEMAS_MISSING }));
+	const identity = Result.try({
+		try: () => {
+			const resolved = resolveIdentity(options.identity);
+			assertNoReservedHeaders(options.defaultHeaders, resolved, "defaultHeaders");
+			return resolved;
+		},
+		catch: configurationErrorFrom
+	});
+	if (Result.isFailure(identity)) return Result.fail(identity.failure);
 	const kernel = {
 		httpClient,
 		baseURL,
@@ -1498,7 +1509,7 @@ const resolveKernel = (options, httpClient) => {
 		allowedHTTPOrigin: options.allowInsecureHTTP ? parseHTTPURL(baseURL)?.origin ?? null : null,
 		userAgent: `Composio/JS ${VERSION}`,
 		defaultHeaders: options.defaultHeaders,
-		defaultQuery: options.defaultQuery,
+		identity: identity.success,
 		maxRetries: options.maxRetries ?? DEFAULT_MAX_RETRIES,
 		timeout: options.timeout ?? DEFAULT_TIMEOUT,
 		tracing: options.tracing ?? "off",
@@ -1529,8 +1540,9 @@ const fromKernel = (kernel) => ({
 * are built over it, and it is not part of the entry's exports.
 *
 * @throws {ConfigurationError} when a credentialed origin is not HTTPS, a
-*   credential cannot be sent as a header, or the client is to decode and was
-*   given no schemas.
+*   credential cannot be sent as a header, `identity` is invalid or
+*   `defaultHeaders` names an identity header, or the client is to decode and
+*   was given no schemas.
 */
 const makeKernel = (options, httpClient) => Result.getOrThrow(resolveKernel(options, httpClient));
 /**
@@ -1538,8 +1550,9 @@ const makeKernel = (options, httpClient) => Result.getOrThrow(resolveKernel(opti
 * Reads no environment variable.
 *
 * @throws {ConfigurationError} when a credentialed origin is not HTTPS, a
-*   credential cannot be sent as a header, or the client is to decode and was
-*   given no schemas.
+*   credential cannot be sent as a header, `identity` is invalid or
+*   `defaultHeaders` names an identity header, or the client is to decode and
+*   was given no schemas.
 */
 const make = (options, httpClient) => fromKernel(makeKernel(options, httpClient));
 /**

package/dist/{files-Bx7TZpgo.mjs → files-BPKJXlpc.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, d as path, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/tool-router/session/files.ts
 const OP_LIST = generatedOperation("toolRouter.session.files.list");

package/dist/{files-Cs1Y7Oz6.mjs → files-BjPFzRnM.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/files.ts
 const OP_LIST = generatedOperation("files.list");

package/dist/{generate-gyrqQd_2.mjs → generate-DDHNgbPS.mjs}

@@ -1,4 +1,4 @@
-import { b as withOperation, n as generatedOperation } from "./generated-operations-lxo6Uhzh.mjs";
+import { b as withOperation, n as generatedOperation } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/resources/mcp/generate.ts
 const OP_URL = generatedOperation("mcp.generate.url");

package/dist/{generated-deprecated-inputs-BggrSLuP.mjs → generated-deprecated-inputs--L5LHDO_.mjs}

@@ -1,5 +1,5 @@
 import { r as APIError } from "./error-D9cG225M.mjs";
-import { g as safeJSON, l as castToError } from "./generated-operations-lxo6Uhzh.mjs";
+import { g as safeJSON, l as castToError } from "./generated-operations-D1e__yar.mjs";
 
 //#region src/compat/api-promise.ts
 /**