@composio/client 2.0.0-rc.21 → 2.0.0-rc.23

package/dist/{api-key-revocation-BB3FTdR3.d.mts → _internal-Cw5Ug7qY.d.mts}

@@ -1,3 +1,108 @@
+//#region src/compat/api-promise.d.ts
+/**
+ * Stainless-compatible `APIPromise`.
+ *
+ * Mirrors composio-base-ts `src/core/api-promise.ts`: a `Promise` subclass
+ * with a no-op executor whose `then`/`catch`/`finally` are overridden to
+ * parse lazily. The laziness matters — `.asResponse()` must resolve with the
+ * raw `Response` on HTTP error statuses without ever materializing (and thus
+ * leaving unhandled) the rejected parsed promise.
+ */
+declare class APIPromise<T> extends Promise<T> {
+  private readonly exchangePromise;
+  private readonly parseResponse;
+  private parsedPromise;
+  constructor(exchangePromise: Promise<Response>, parseResponse?: (response: Response) => Promise<T>);
+  _thenUnwrap<U>(transform: (data: T, response: Response) => U): APIPromise<U>;
+  /**
+   * Gets the raw `Response` instead of parsing the body. Resolves (never
+   * throws an `APIError`) on HTTP error statuses; rejects only on
+   * connection/abort failures.
+   */
+  asResponse(): Promise<Response>;
+  /** Gets the parsed data plus the raw `Response`. */
+  withResponse(): Promise<{
+    data: T;
+    response: Response;
+  }>;
+  private parse;
+  then<TResult1 = T, TResult2 = never>(onfulfilled?: ((value: T) => TResult1 | PromiseLike<TResult1>) | undefined | null, onrejected?: ((reason: unknown) => TResult2 | PromiseLike<TResult2>) | undefined | null): Promise<TResult1 | TResult2>;
+  catch<TResult = never>(onrejected?: ((reason: unknown) => TResult | PromiseLike<TResult>) | undefined | null): Promise<T | TResult>;
+  finally(onfinally?: (() => void) | undefined | null): Promise<T>;
+}
+//#endregion
+//#region src/compat/headers.d.ts
+type HeaderValue = string | null | undefined;
+/**
+ * The internal nullable representation used by Stainless. The symbol that
+ * brands its concrete type is private, so compatibility is expressed through
+ * the two public data fields the representation carries.
+ */
+interface NullableHeadersLike {
+  readonly values: Headers;
+  readonly nulls: ReadonlySet<string>;
+}
+/** Header inputs accepted by the published Stainless client. */
+type HeadersLike = Headers | ReadonlyArray<ReadonlyArray<HeaderValue | readonly HeaderValue[]>> | Record<string, HeaderValue | readonly HeaderValue[]> | NullableHeadersLike | null | undefined;
+//#endregion
+//#region src/compat/identity.d.ts
+/**
+ * The product calling through this client, such as `@composio/core` or
+ * `@composio/cli`. It owns the product headers: once a client has one,
+ * `defaultHeaders` and per-call `headers` can no longer carry them.
+ */
+interface ClientIdentity {
+  /** The calling product, such as `@composio/core` or `@composio/cli`. Sent as `x-client-provenance`. */
+  readonly product: string;
+  /** The calling product's version. Sent as `x-client-version` and `x-sdk-version`. */
+  readonly version: string;
+  /** Legacy label still read by the platform, sent as `x-source`. */
+  readonly source?: string | undefined;
+  /** Legacy label still read by the platform, sent as `x-framework`. */
+  readonly framework?: string | undefined;
+  /** Legacy label still read by the platform, sent as `x-runtime`. Defaults to the detected runtime. */
+  readonly runtime?: string | undefined;
+}
+//#endregion
+//#region src/compat/transport.d.ts
+/**
+ * Sends one prepared HTTP request without retries or redirect handling.
+ * Implementations should observe `request.signal` to stop their underlying I/O;
+ * the client still settles the public request promptly if they do not.
+ */
+interface Transport {
+  send(request: Request): Promise<Response>;
+}
+type KernelOwnedRequestInitKey = 'method' | 'headers' | 'body' | 'signal' | 'redirect';
+/** Fetch defaults that cannot replace fields owned by the request kernel. */
+type FetchTransportDefaults<Extra extends object = object> = Omit<RequestInit & Extra, KernelOwnedRequestInitKey>;
+type FetchImplementation<Extra extends object> = (input: RequestInfo | URL, init?: FetchTransportDefaults<Extra>) => Promise<Response>;
+/** Creates a transport backed by the supplied or global fetch function. */
+declare const createFetchTransport: <Extra extends object = object>(options?: {
+  fetch?: FetchImplementation<Extra> | undefined;
+  defaults?: FetchTransportDefaults<Extra> | undefined;
+}) => Transport;
+//#endregion
+//#region src/compat/request.d.ts
+/**
+ * Per-request options bag — the Stainless last-positional-argument contract.
+ * Downstream derives this shape structurally (`Parameters<method>[last]`);
+ * `signal` support is load-bearing (abort → `APIUserAbortError`).
+ */
+interface RequestOptions {
+  headers?: HeadersLike;
+  maxRetries?: number;
+  timeout?: number;
+  signal?: AbortSignal | null;
+  /**
+   * Stainless options-bag compatibility: sent as the `Idempotency-Key`
+   * request header. Server-side replay/dedup for Composio's write endpoints
+   * is not guaranteed yet — callers who cannot tolerate a double execution
+   * should still set `maxRetries: 0` on writes.
+   */
+  idempotencyKey?: string;
+}
+//#endregion
 //#region src/generated/types.gen.d.ts
 type Error$1 = {
   error: {
@@ -462,6 +567,67 @@ type ToolRouterSessionV31ConfigHistoryListResponse = {
          */
         enable: boolean;
       };
+      /**
+       * Hooks that run on this session's tool calls.
+       */
+      hooks?: Array<{
+        type: 'before_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        };
+      } | {
+        type: 'after_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        } | {
+          type: 'prompt_injection_check';
+          action: 'block';
+        };
+      }>;
       /**
        * Preload configuration. Explicit slugs are returned as an array; dynamic preload is returned as "all".
        */
@@ -500,6 +666,26 @@ type ToolRouterSessionV31ConfigHistoryListResponse = {
   current_page: number;
   total_items: number;
 };
+type HookResult = {
+  /**
+   * The hook id
+   */
+  id: string;
+  status: 'evaluated';
+  /**
+   * What the hook decided
+   */
+  outcome: 'continue' | 'block';
+} | {
+  /**
+   * The hook id
+   */
+  id: string;
+  /**
+   * The hook could not be evaluated
+   */
+  status: 'unavailable';
+};
 type ExecuteCompleted = {
   /**
    * The tool ran and succeeded
@@ -536,6 +722,10 @@ type ExecuteCompleted = {
    * Unique identifier for the execution log
    */
   log_id: string;
+  /**
+   * Every session hook that applied to this call. Omitted when none applied.
+   */
+  hook_results?: Array<HookResult>;
 };
 type ExecuteFailed = {
   /**
@@ -573,6 +763,59 @@ type ExecuteFailed = {
    * Unique identifier for the execution log
    */
   log_id: string;
+  /**
+   * Every session hook that applied to this call. Omitted when none applied.
+   */
+  hook_results?: Array<HookResult>;
+};
+type BlockReason = {
+  /**
+   * A before_execute hook stopped the call. The tool did not run.
+   */
+  type: 'request_blocked';
+  hook_id: string;
+} | {
+  /**
+   * An after_execute hook stopped the call. The tool ran; its response was withheld.
+   */
+  type: 'response_blocked';
+  hook_id: string;
+};
+type ExecuteBlocked = {
+  /**
+   * A session hook stopped the call
+   */
+  result_type: 'blocked';
+  reason: BlockReason;
+  /**
+   * A message for the agent. It includes the hook's name, when it has one; the hook id is in `reason`.
+   */
+  message: string;
+  /**
+   * The execution log ID. Only set when the tool ran and its response was blocked.
+   */
+  log_id?: string;
+  /**
+   * Returned only when the session enables instant.return_instant_charge and a charge is available. Only set when the tool ran and its response was blocked.
+   */
+  instant_charge?: {
+    /**
+     * Instant charge in USD as an exact non-negative decimal string, with up to 12 fractional digits.
+     */
+    amount: string;
+    /**
+     * Currency of the instant charge. Always USD.
+     */
+    currency: 'USD';
+    /**
+     * Entity charging for instant usage. Always composio.
+     */
+    charged_by: 'composio';
+  };
+  /**
+   * Every session hook that applied to this call. Omitted when none applied.
+   */
+  hook_results?: Array<HookResult>;
 };
 /**
  * A question for the user, in the shape of an MCP `elicitation/create` request in form mode (https://modelcontextprotocol.io/specification/2026-07-28/client/elicitation). Show `message` to the user and collect an answer that matches `requested_schema`.
@@ -667,11 +910,19 @@ type ComposioManagedAuthConfigCreate = {
    */
   restrict_to_following_tools?: Array<string>;
   /**
-   * [EXPERIMENTAL] Shared credentials that will be inherited by all connected accounts using this auth config
+   * Shared credentials that will be inherited by all connected accounts using this auth config. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+   *
+   * @deprecated
    */
   shared_credentials?: {
     [key: string]: unknown;
   };
+  /**
+   * Connection field values inherited by every connected account created under this auth config (for example a region or subdomain). Non-secret values pre-fill the hosted Connect Link form; secret values are redacted in responses and never sent to the end user.
+   */
+  shared_connection_fields?: {
+    [key: string]: unknown;
+  };
   /**
    * Whether this auth config is enabled for tool router
    */
@@ -730,11 +981,19 @@ type CustomAuthConfigCreate = {
     tools_for_connected_account_creation?: Array<string>;
   };
   /**
-   * [EXPERIMENTAL] Shared credentials that will be inherited by all connected accounts using this auth config
+   * Shared credentials that will be inherited by all connected accounts using this auth config. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+   *
+   * @deprecated
    */
   shared_credentials?: {
     [key: string]: unknown;
   };
+  /**
+   * Connection field values inherited by every connected account created under this auth config (for example a region or subdomain). Non-secret values pre-fill the hosted Connect Link form; secret values are redacted in responses and never sent to the end user.
+   */
+  shared_connection_fields?: {
+    [key: string]: unknown;
+  };
   /**
    * Whether this auth config is enabled for tool router
    */
@@ -798,11 +1057,19 @@ type CustomAuthConfigUpdate = {
     tools_available_for_execution?: Array<string>;
   };
   /**
-   * Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
+   * Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+   *
+   * @deprecated
    */
   shared_credentials?: {
     [key: string]: unknown;
   };
+  /**
+   * Connection field values inherited by every connected account created under this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
+   */
+  shared_connection_fields?: {
+    [key: string]: unknown;
+  };
   /**
    * Whether this auth config is enabled for tool router
    */
@@ -848,11 +1115,19 @@ type DefaultAuthConfigUpdate = {
     tools_available_for_execution?: Array<string>;
   };
   /**
-   * Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
+   * Shared credentials inherited by all connected accounts using this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+   *
+   * @deprecated
    */
   shared_credentials?: {
     [key: string]: unknown;
   };
+  /**
+   * Connection field values inherited by every connected account created under this auth config. Secret values are redacted in responses, so provide the real values when updating; omit this field to leave them unchanged.
+   */
+  shared_connection_fields?: {
+    [key: string]: unknown;
+  };
   /**
    * Whether this auth config is enabled for tool router
    */
@@ -963,6 +1238,25 @@ type ProxyExecuteCompleted = {
   headers?: {
     [key: string]: string;
   };
+  /**
+   * Every session hook that applied to this request. Omitted when none applied.
+   */
+  hook_results?: Array<HookResult>;
+};
+type ProxyExecuteBlocked = {
+  /**
+   * A session hook stopped the call
+   */
+  result_type: 'blocked';
+  reason: BlockReason;
+  /**
+   * A message for the agent. It includes the hook's name, when it has one; the hook id is in `reason`.
+   */
+  message: string;
+  /**
+   * Every session hook that applied to this call. Omitted when none applied.
+   */
+  hook_results?: Array<HookResult>;
 };
 type ToolRouterToolkitsListResponse = {
   items: Array<{
@@ -1061,10 +1355,6 @@ type GetApiV31SessionConfigsData = {
      * Maximum number of configs to return, from 1 to 100.
      */
     limit?: number;
-    /**
-     * Case-insensitive substring match against the config name.
-     */
-    search?: string;
     /**
      * Return archived configs when true. Defaults to active configs only.
      */
@@ -1130,29 +1420,67 @@ type GetApiV31SessionConfigsBySessionConfigIdResponses = {
      */
     archived: boolean;
     /**
-     * Stored Session access policy using the same enable/disable wire shape accepted on create and update.
+     * Stored Session access policy using the same enable/disable wire shape accepted on create and update, with any require_approval lists.
      */
     config: {
       toolkits?: {
         enable: Array<string>;
+        /**
+         * What in this entry needs the user's approval before it runs.
+         */
+        require_approval?: Array<string>;
       } | {
         disable: Array<string>;
+        /**
+         * What in this entry needs the user's approval before it runs.
+         */
+        require_approval?: Array<string>;
+      } | {
+        /**
+         * What in this entry needs the user's approval before it runs.
+         */
+        require_approval: Array<string>;
       };
       tools?: {
         [key: string]: {
           enable: Array<string>;
+          /**
+           * What in this entry needs the user's approval before it runs.
+           */
+          require_approval?: Array<string>;
         } | {
           disable: Array<string>;
+          /**
+           * What in this entry needs the user's approval before it runs.
+           */
+          require_approval?: Array<string>;
         } | {
           tags: {
             enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
             disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
+            /**
+             * Tags whose tools need the user's approval before they run.
+             */
+            require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
           };
+          /**
+           * What in this entry needs the user's approval before it runs.
+           */
+          require_approval?: Array<string>;
+        } | {
+          /**
+           * What in this entry needs the user's approval before it runs.
+           */
+          require_approval: Array<string>;
         };
       };
       tags?: {
         enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
         disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
+        /**
+         * Tags whose tools need the user's approval before they run.
+         */
+        require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
       };
     };
     /**
@@ -1228,17 +1556,59 @@ type PostApiV31ApiKeyRevocationResponses = {
     received: boolean;
   };
 };
-type PostApiV31LogsToolExecutionData = {
+type PostApiV31ConsumerPermissionsResolveData = {
   body?: {
-    limit?: number;
-    cursor?: string | null;
-    filters?: Array<{
-      field: 'tool_slug' | 'toolkit_slug' | 'connected_account_id' | 'auth_config_id' | 'status' | 'user_id' | 'session_id' | 'sandbox_id' | 'request_id' | 'log_id';
-      operator: '==' | '!=' | 'contains' | 'not_contains';
-      value: string;
-    }>;
-    time_range?: {
-      /**
+    /**
+     * Connected account nano IDs to include in resolution.
+     */
+    connected_account_ids?: Array<string>;
+    /**
+     * Optional toolkit_slug -> connected account nano ID array map. Values are flattened and merged with connected_account_ids.
+     */
+    connected_accounts?: {
+      [key: string]: Array<string>;
+    };
+    /**
+     * Optional default mode to include in the resolved tool-router permissions config.
+     */
+    default?: 'allow_all' | 'ask_every_call' | 'ask_once_per_session';
+  };
+  path?: never;
+  query?: never;
+  url: '/api/v3.1/consumer/permissions/resolve';
+};
+type PostApiV31ConsumerPermissionsResolveResponses = {
+  /**
+   * Consumer permissions resolved successfully.
+   */
+  200: {
+    experimental: {
+      permissions: {
+        /**
+         * Default elicitation behavior when no override matches. `allow_all` runs every tool without prompting; `ask_every_call` prompts on each invocation; `ask_once_per_session` prompts once and remembers the answer for the rest of the session.
+         */
+        default: 'allow_all' | 'ask_every_call' | 'ask_once_per_session';
+        /**
+         * Per-tool overrides keyed by `${toolSlug}:${connectedAccountId ?? "__none__"}`, plus account-wide overrides keyed by `*:${connectedAccountId ?? "__none__"}`. Exact tool overrides take precedence over account-wide overrides. `always_allow` skips the prompt and runs the tool; `always_deny` blocks the tool; `ask_once` prompts once per session (allow/deny) and remembers; `ask_always` prompts on every call with allow-once/allow-session/deny, ignoring any cached session allow. Overrides take precedence over `default`.
+         */
+        overrides?: {
+          [key: string]: 'always_allow' | 'always_deny' | 'ask_once' | 'ask_always';
+        };
+      };
+    };
+  };
+};
+type PostApiV31LogsToolExecutionData = {
+  body?: {
+    limit?: number;
+    cursor?: string | null;
+    filters?: Array<{
+      field: 'tool_slug' | 'toolkit_slug' | 'connected_account_id' | 'auth_config_id' | 'status' | 'user_id' | 'session_id' | 'sandbox_id' | 'request_id' | 'log_id';
+      operator: '==' | '!=' | 'contains' | 'not_contains';
+      value: string;
+    }>;
+    time_range?: {
+      /**
        * Start time in epoch milliseconds
        */
       from: number;
@@ -2021,7 +2391,7 @@ type PostApiV31ToolsExecuteProxyData = {
      */
     connected_account_id?: string;
     /**
-     * The user id (entity id) that owns connected_account_id. When the project has 2FA enabled, it is validated against the owner of that connection. Also selects which custom toolkits the request may use.
+     * The user id (entity id) acting on connected_account_id. Required for a SHARED connection, where it is checked against the connection's ACL. When the project has 2FA enabled, it is also validated against the owner of a PRIVATE connection. Also selects which custom toolkits the request may use.
      */
     user_id?: string;
     /**
@@ -2565,30 +2935,23 @@ type PostApiV31ToolsScopesRequiredResponses = {
     }>;
   };
 };
-type PostApiV31OrgClankerCreateClaimData = {
-  body?: {
-    /**
-     * Email of the human who will claim the clanker
-     */
-    human_email: string;
-  };
-  path?: never;
-  query?: never;
-  url: '/api/v3.1/org/clanker/create_claim';
-};
-type PostApiV31OrgClankerCreateClaimResponses = {
+type GetApiV31OrgConsumerConfigResponses = {
   /**
-   * Clanker claim invite created and emailed.
+   * Consumer configuration retrieved successfully.
    */
   200: {
     /**
-     * Four-word hyphen-separated slug (e.g. "red-castle-amber-pine") the human types into /redeem_claim. Valid for 7 days, restricted to the provided email.
+     * Organization nano ID.
      */
-    claim_slug: string;
+    org_id: string;
     /**
-     * ISO timestamp when this claim slug expires.
+     * Whether the consumer experience is enabled for this project.
      */
-    expires_at: string;
+    consumer_experience_enabled?: boolean;
+    /**
+     * Whether enhanced controls are enabled for this consumer project.
+     */
+    enhanced_controls?: boolean;
   };
 };
 type PostApiV31ConnectedAccountsByNanoidRevokeResponses = {
@@ -2850,7 +3213,7 @@ type PostApiV31ToolRouterSessionData = {
        */
       enable: Array<string>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<string>;
     } | {
@@ -2859,12 +3222,12 @@ type PostApiV31ToolRouterSessionData = {
        */
       disable: Array<string>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<string>;
     } | {
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval: Array<string>;
     };
@@ -2954,7 +3317,7 @@ type PostApiV31ToolRouterSessionData = {
          */
         enable: Array<string>;
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
@@ -2963,40 +3326,40 @@ type PostApiV31ToolRouterSessionData = {
          */
         disable: Array<string>;
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
         /**
-         * MCP tool annotation hints for this toolkit. Array format is treated as enabled list. Object format supports enabled and disabled lists, which replace the global tag filter for this toolkit, and experimentally the tags whose tools in this toolkit need approval.
+         * Tags for this toolkit. Any `tags` object here fully replaces the session-wide `tags` for this toolkit, including one that only sets `require_approval`. Array format is treated as an enabled list.
          */
         tags: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'> | {
           enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
           disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
           /**
-           * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+           * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
            */
           require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
         };
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval: Array<string>;
       };
     };
     /**
-     * Global MCP tool annotation hints for filtering. Array format is treated as enabled list. Object format supports enabled (tool must have at least one) and disabled (tool must NOT have any) lists, and experimentally the tags whose tools need approval. Toolkit-level tags override the enabled/disabled filter.
+     * Session-wide tags for filtering tools. Array format is treated as an enabled list. Object format supports `enable` (a tool must have at least one) and `disable` (a tool must have none), and experimentally the tags whose tools need approval. If a toolkit sets `tools.<toolkit>.tags`, its tools use that object instead of this one.
      */
     tags?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'> | {
       enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
       disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
     };
@@ -3184,6 +3547,10 @@ type PostApiV31ToolRouterSessionData = {
          */
         enable?: boolean;
       };
+      /**
+       * Set to true to confine the workbench sandbox to Composio: code running in it can reach the Composio API and its own storage volume, and no other network destination. Defaults to false. Set at session creation only.
+       */
+      restrict_egress_to_composio?: boolean;
       /**
        * What session MCP does with a tool call that needs approval when the MCP client can't ask the user. deny (default) rejects the call; allow runs it without approval.
        */
@@ -3202,6 +3569,67 @@ type PostApiV31ToolRouterSessionData = {
        */
       tools?: Array<string> | string;
     };
+    /**
+     * Hooks that run on this session's tool calls. A hook can block a call before it runs, or block its result before the agent sees it.
+     */
+    hooks?: Array<{
+      type: 'before_execute';
+      /**
+       * Unique within the session. Shows up in results and logs.
+       */
+      id: string;
+      /**
+       * A readable name. The agent sees it when this hook blocks a call.
+       */
+      name?: string;
+      /**
+       * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+       */
+      applies_to: 'all' | {
+        /**
+         * Toolkit slugs
+         */
+        toolkits: Array<string>;
+      };
+      handler: {
+        type: 'condition_check';
+        /**
+         * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+         */
+        condition: string;
+        action: 'block';
+      };
+    } | {
+      type: 'after_execute';
+      /**
+       * Unique within the session. Shows up in results and logs.
+       */
+      id: string;
+      /**
+       * A readable name. The agent sees it when this hook blocks a call.
+       */
+      name?: string;
+      /**
+       * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+       */
+      applies_to: 'all' | {
+        /**
+         * Toolkit slugs
+         */
+        toolkits: Array<string>;
+      };
+      handler: {
+        type: 'condition_check';
+        /**
+         * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+         */
+        condition: string;
+        action: 'block';
+      } | {
+        type: 'prompt_injection_check';
+        action: 'block';
+      };
+    }>;
     search?: {
       enable?: boolean;
     };
@@ -3433,6 +3861,67 @@ type PostApiV31ToolRouterSessionResponses = {
          */
         enable: boolean;
       };
+      /**
+       * Hooks that run on this session's tool calls.
+       */
+      hooks?: Array<{
+        type: 'before_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        };
+      } | {
+        type: 'after_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        } | {
+          type: 'prompt_injection_check';
+          action: 'block';
+        };
+      }>;
       /**
        * Preload configuration. Explicit slugs are returned as an array; dynamic preload is returned as "all".
        */
@@ -3794,6 +4283,67 @@ type GetApiV31ToolRouterSessionBySessionIdResponses = {
          */
         enable: boolean;
       };
+      /**
+       * Hooks that run on this session's tool calls.
+       */
+      hooks?: Array<{
+        type: 'before_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        };
+      } | {
+        type: 'after_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        } | {
+          type: 'prompt_injection_check';
+          action: 'block';
+        };
+      }>;
       /**
        * Preload configuration. Explicit slugs are returned as an array; dynamic preload is returned as "all".
        */
@@ -3931,7 +4481,7 @@ type PatchApiV31ToolRouterSessionBySessionIdData = {
        */
       enable: Array<string>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<string>;
     } | {
@@ -3940,12 +4490,12 @@ type PatchApiV31ToolRouterSessionBySessionIdData = {
        */
       disable: Array<string>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<string>;
     } | {
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval: Array<string>;
     };
@@ -4032,7 +4582,7 @@ type PatchApiV31ToolRouterSessionBySessionIdData = {
          */
         enable: Array<string>;
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
@@ -4041,40 +4591,40 @@ type PatchApiV31ToolRouterSessionBySessionIdData = {
          */
         disable: Array<string>;
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
         /**
-         * MCP tool annotation hints for this toolkit. Array format is treated as enabled list. Object format supports enabled and disabled lists, which replace the global tag filter for this toolkit, and experimentally the tags whose tools in this toolkit need approval.
+         * Tags for this toolkit. Any `tags` object here fully replaces the session-wide `tags` for this toolkit, including one that only sets `require_approval`. Array format is treated as an enabled list.
          */
         tags: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'> | {
           enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
           disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
           /**
-           * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+           * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
            */
           require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
         };
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval?: Array<string>;
       } | {
         /**
-         * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+         * Tool calls matched here pause until the user approves them. Setting this toolkit's own list, even an empty one, replaces the session-wide `tags.require_approval` for its tools.
          */
         require_approval: Array<string>;
       };
     };
     /**
-     * Global MCP tool annotation hints for filtering. Array format is treated as enabled list. Object format supports enabled (tool must have at least one) and disabled (tool must NOT have any) lists, and experimentally the tags whose tools need approval. Toolkit-level tags override the enabled/disabled filter.
+     * Session-wide tags for filtering tools. Array format is treated as an enabled list. Object format supports `enable` (a tool must have at least one) and `disable` (a tool must have none), and experimentally the tags whose tools need approval. If a toolkit sets `tools.<toolkit>.tags`, its tools use that object instead of this one.
      */
     tags?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'> | {
       enable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
       disable?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
       /**
-       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed.
+       * Tool calls matched here pause until the user approves them. A tool needs approval if its toolkit, the tool itself or any of its tags is listed. A toolkit's own lists in `tools` replace the session-wide tag list for that toolkit.
        */
       require_approval?: Array<'readOnlyHint' | 'createHint' | 'updateHint' | 'destructiveHint' | 'idempotentHint' | 'openWorldHint'>;
     };
@@ -4135,6 +4685,67 @@ type PatchApiV31ToolRouterSessionBySessionIdData = {
     execute?: {
       enable_multi_execute?: boolean;
     };
+    /**
+     * Hooks that run on this session's tool calls. A hook can block a call before it runs, or block its result before the agent sees it.
+     */
+    hooks?: Array<{
+      type: 'before_execute';
+      /**
+       * Unique within the session. Shows up in results and logs.
+       */
+      id: string;
+      /**
+       * A readable name. The agent sees it when this hook blocks a call.
+       */
+      name?: string;
+      /**
+       * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+       */
+      applies_to: 'all' | {
+        /**
+         * Toolkit slugs
+         */
+        toolkits: Array<string>;
+      };
+      handler: {
+        type: 'condition_check';
+        /**
+         * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+         */
+        condition: string;
+        action: 'block';
+      };
+    } | {
+      type: 'after_execute';
+      /**
+       * Unique within the session. Shows up in results and logs.
+       */
+      id: string;
+      /**
+       * A readable name. The agent sees it when this hook blocks a call.
+       */
+      name?: string;
+      /**
+       * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+       */
+      applies_to: 'all' | {
+        /**
+         * Toolkit slugs
+         */
+        toolkits: Array<string>;
+      };
+      handler: {
+        type: 'condition_check';
+        /**
+         * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+         */
+        condition: string;
+        action: 'block';
+      } | {
+        type: 'prompt_injection_check';
+        action: 'block';
+      };
+    }> | null;
     experimental?: {
       /**
        * Per-tool elicitation permission config. Replaces the stored block when provided.
@@ -4407,6 +5018,67 @@ type PatchApiV31ToolRouterSessionBySessionIdResponses = {
          */
         enable: boolean;
       };
+      /**
+       * Hooks that run on this session's tool calls.
+       */
+      hooks?: Array<{
+        type: 'before_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        };
+      } | {
+        type: 'after_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        } | {
+          type: 'prompt_injection_check';
+          action: 'block';
+        };
+      }>;
       /**
        * Preload configuration. Explicit slugs are returned as an array; dynamic preload is returned as "all".
        */
@@ -4861,6 +5533,67 @@ type PostApiV31ToolRouterSessionBySessionIdAttachResponses = {
          */
         enable: boolean;
       };
+      /**
+       * Hooks that run on this session's tool calls.
+       */
+      hooks?: Array<{
+        type: 'before_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        };
+      } | {
+        type: 'after_execute';
+        /**
+         * Unique within the session. Shows up in results and logs.
+         */
+        id: string;
+        /**
+         * A readable name. The agent sees it when this hook blocks a call.
+         */
+        name?: string;
+        /**
+         * Which tools the hook covers: "all" for all of them, or only the listed toolkits.
+         */
+        applies_to: 'all' | {
+          /**
+           * Toolkit slugs
+           */
+          toolkits: Array<string>;
+        };
+        handler: {
+          type: 'condition_check';
+          /**
+           * What to block, written as a plain sentence. For example: "Sending email to anyone outside example.org".
+           */
+          condition: string;
+          action: 'block';
+        } | {
+          type: 'prompt_injection_check';
+          action: 'block';
+        };
+      }>;
       /**
        * Preload configuration. Explicit slugs are returned as an array; dynamic preload is returned as "all".
        */
@@ -5586,6 +6319,8 @@ type PostApiV31ToolRouterSessionBySessionIdExecuteResponses = {
   } & ExecuteCompleted) | ({
     result_type: 'failed';
   } & ExecuteFailed) | ({
+    result_type: 'blocked';
+  } & ExecuteBlocked) | ({
     result_type: 'input_required';
   } & ExecuteRequiresUserInput);
 };
@@ -5726,6 +6461,8 @@ type PostApiV31ToolRouterSessionBySessionIdExecuteMetaResponses = {
   } & ExecuteCompleted) | ({
     result_type: 'failed';
   } & ExecuteFailed) | ({
+    result_type: 'blocked';
+  } & ExecuteBlocked) | ({
     result_type: 'input_required';
   } & ExecuteRequiresUserInput);
 };
@@ -6325,11 +7062,19 @@ type GetApiV31AuthConfigsResponses = {
         tools_available_for_execution?: Array<string>;
       };
       /**
-       * [EXPERIMENTAL] Shared credentials that will be inherited by all connected accounts using this auth config
+       * Shared credentials that will be inherited by all connected accounts using this auth config. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+       *
+       * @deprecated
        */
       shared_credentials?: {
         [key: string]: unknown;
       };
+      /**
+       * Connection field values inherited by every connected account created under this auth config. Same value as shared_credentials; secret values are redacted.
+       */
+      shared_connection_fields?: {
+        [key: string]: unknown;
+      };
       /**
        * Whether this auth config is enabled for tool router
        */
@@ -6562,11 +7307,19 @@ type GetApiV31AuthConfigsByNanoidResponses = {
       tools_available_for_execution?: Array<string>;
     };
     /**
-     * [EXPERIMENTAL] Shared credentials that will be inherited by all connected accounts using this auth config
+     * Shared credentials that will be inherited by all connected accounts using this auth config. DEPRECATED: use `shared_connection_fields` instead. It takes the same value and behaves the same way.
+     *
+     * @deprecated
      */
     shared_credentials?: {
       [key: string]: unknown;
     };
+    /**
+     * Connection field values inherited by every connected account created under this auth config. Same value as shared_credentials; secret values are redacted.
+     */
+    shared_connection_fields?: {
+      [key: string]: unknown;
+    };
     /**
      * Whether this auth config is enabled for tool router
      */
@@ -6735,7 +7488,7 @@ type GetApiV31CliGetSessionResponses = {
    */
   200: {
     /**
-     * The unique identifier for the CLI session
+     * The CLI session ID, or the code for a lookup by code
      */
     id: string;
     /**
@@ -12389,7 +13142,7 @@ type PostApiV31ConnectedAccountsData = {
        */
       experimental?: {
         /**
-         * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+         * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
          */
         account_type?: 'PRIVATE' | 'SHARED';
         /**
@@ -20634,7 +21387,7 @@ type PostApiV31ConnectedAccountsLinkData = {
      */
     experimental?: {
       /**
-       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
        */
       account_type?: 'PRIVATE' | 'SHARED';
       /**
@@ -21171,7 +21924,6 @@ type PostApiV31OrgOwnerProjectNewData = {
       display_name?: string;
       mask_secret_keys_in_connected_account?: boolean;
       log_visibility_setting?: 'show_all' | 'dont_store_data';
-      require_mcp_api_key?: boolean;
       /**
        * Whether to enable composio link for managed authentication. This key will be deprecated in the future. Please don't use this key.
        */
@@ -21187,6 +21939,10 @@ type PostApiV31OrgOwnerProjectNewData = {
       theme?: {
         [key: string]: unknown;
       };
+      /**
+       * Enable Instant Toolkits for this project.
+       */
+      enable_instant?: boolean;
       /**
        * Enable Zero Data Retention for the new project. Hobby cannot enable it. Enterprise defaults to enabled; other paid plans default to disabled. An explicit value overrides the default.
        */
@@ -21529,8 +22285,12 @@ type PostApiV31OrgConsumerProjectResolveResponses = {
      * Derived internal Composio user ID for the authenticated user in this consumer org context.
      */
     consumer_user_id: string;
-  };
-};
+    /**
+     * ID of the authenticated user the request was made as.
+     */
+    user_id: string;
+  };
+};
 type GetApiV31OrgConsumerConnectedToolkitsData = {
   body?: never;
   headers: {
@@ -22288,6 +23048,21 @@ type PostApiV31CustomToolkitsUpsertData = {
            */
           description?: string;
         };
+        /**
+         * Additional values each user enters when connecting. Reference each field in a header, for example X-Org-Id: {{generic_id}}. Use display_name for the user-facing label. Every user must supply each declared field. Values are not secret.
+         */
+        additional_fields?: {
+          generic_id: {
+            /**
+             * Label shown to the user connecting their account
+             */
+            display_name: string;
+            /**
+             * Help text below the input
+             */
+            description?: string;
+          };
+        };
       } | {
         mode: 'DCR_OAUTH';
         /**
@@ -22785,7 +23560,7 @@ type PostApiV31TriggerInstancesBySlugUpsertData = {
      */
     connected_account_id?: string;
     /**
-     * The user id (entity id) that owns the connection. When connected_account_id is omitted, the first active connection for this user and the trigger's toolkit is auto-resolved (same as tool execution). When connected_account_id is also provided and the project has 2FA enabled, user_id is validated against the owner of that connection.
+     * The user id (entity id) that owns the connection. When connected_account_id is omitted, the first active connection for this user and the trigger's toolkit is auto-resolved (same as tool execution). When connected_account_id is also provided, user_id is checked against that connection: always against a SHARED connection's ACL (user_id is then required), and against a PRIVATE connection's owner when the project has 2FA enabled.
      */
     user_id?: string;
     /**
@@ -23057,7 +23832,7 @@ type PatchApiV31TriggerInstancesManageByTriggerIdData = {
      */
     status?: 'enable' | 'disable';
     /**
-     * The user id that owns the connected account behind this trigger. Optional: when sent on a project with 2FA enabled it must be the owner of a private connection or allowed on a shared one, whatever is being updated. Required to set egress_url when 2FA is enabled. Ignored when 2FA is disabled.
+     * The user id acting on the connected account behind this trigger. On a shared connection it must be allowed by the connection ACL, and it is required to enable the trigger or set egress_url. On a private connection it must be the owner when the project has 2FA enabled, and is ignored when 2FA is disabled. Required to set egress_url when 2FA is enabled.
      */
     user_id?: string;
     /**
@@ -23131,9 +23906,15 @@ type GetApiV31TriggersTypesBySlugResponses = {
      */
     instructions: string;
     /**
-     * The trigger mechanism - either webhook (event-based) or poll (scheduled check)
+     * Deprecated: use types. poll for any trigger that polls, even one a webhook wakes; otherwise webhook.
+     *
+     * @deprecated
      */
     type: 'webhook' | 'poll';
+    /**
+     * The trigger mechanisms this trigger supports, in order of preference: webhook (event-based) before poll (scheduled check).
+     */
+    types: Array<'webhook' | 'poll'>;
     /**
      * Information about the toolkit that provides this trigger
      */
@@ -23221,9 +24002,15 @@ type GetApiV31TriggersTypesResponses = {
        */
       instructions: string;
       /**
-       * The trigger mechanism - either webhook (event-based) or poll (scheduled check)
+       * Deprecated: use types. poll for any trigger that polls, even one a webhook wakes; otherwise webhook.
+       *
+       * @deprecated
        */
       type: 'webhook' | 'poll';
+      /**
+       * The trigger mechanisms this trigger supports, in order of preference: webhook (event-based) before poll (scheduled check).
+       */
+      types: Array<'webhook' | 'poll'>;
       /**
        * Information about the toolkit that provides this trigger
        */
@@ -24256,7 +25043,7 @@ type PostApiV31ToolRouterSessionBySessionIdLinkData = {
      */
     experimental?: {
       /**
-       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
        */
       account_type?: 'PRIVATE' | 'SHARED';
       /**
@@ -24795,6 +25582,8 @@ type PostApiV31ToolRouterSessionBySessionIdProxyExecuteResponses = {
   200: ({
     result_type: 'completed';
   } & ProxyExecuteCompleted) | ({
+    result_type: 'blocked';
+  } & ProxyExecuteBlocked) | ({
     result_type: 'input_required';
   } & ExecuteRequiresUserInput);
 };
@@ -25059,111 +25848,6 @@ type GetApiV31ToolkitsChangelogResponses = {
   };
 };
 //#endregion
-//#region src/compat/api-promise.d.ts
-/**
- * Stainless-compatible `APIPromise`.
- *
- * Mirrors composio-base-ts `src/core/api-promise.ts`: a `Promise` subclass
- * with a no-op executor whose `then`/`catch`/`finally` are overridden to
- * parse lazily. The laziness matters — `.asResponse()` must resolve with the
- * raw `Response` on HTTP error statuses without ever materializing (and thus
- * leaving unhandled) the rejected parsed promise.
- */
-declare class APIPromise<T> extends Promise<T> {
-  private readonly exchangePromise;
-  private readonly parseResponse;
-  private parsedPromise;
-  constructor(exchangePromise: Promise<Response>, parseResponse?: (response: Response) => Promise<T>);
-  _thenUnwrap<U>(transform: (data: T, response: Response) => U): APIPromise<U>;
-  /**
-   * Gets the raw `Response` instead of parsing the body. Resolves (never
-   * throws an `APIError`) on HTTP error statuses; rejects only on
-   * connection/abort failures.
-   */
-  asResponse(): Promise<Response>;
-  /** Gets the parsed data plus the raw `Response`. */
-  withResponse(): Promise<{
-    data: T;
-    response: Response;
-  }>;
-  private parse;
-  then<TResult1 = T, TResult2 = never>(onfulfilled?: ((value: T) => TResult1 | PromiseLike<TResult1>) | undefined | null, onrejected?: ((reason: unknown) => TResult2 | PromiseLike<TResult2>) | undefined | null): Promise<TResult1 | TResult2>;
-  catch<TResult = never>(onrejected?: ((reason: unknown) => TResult | PromiseLike<TResult>) | undefined | null): Promise<T | TResult>;
-  finally(onfinally?: (() => void) | undefined | null): Promise<T>;
-}
-//#endregion
-//#region src/compat/headers.d.ts
-type HeaderValue = string | null | undefined;
-/**
- * The internal nullable representation used by Stainless. The symbol that
- * brands its concrete type is private, so compatibility is expressed through
- * the two public data fields the representation carries.
- */
-interface NullableHeadersLike {
-  readonly values: Headers;
-  readonly nulls: ReadonlySet<string>;
-}
-/** Header inputs accepted by the published Stainless client. */
-type HeadersLike = Headers | ReadonlyArray<ReadonlyArray<HeaderValue | readonly HeaderValue[]>> | Record<string, HeaderValue | readonly HeaderValue[]> | NullableHeadersLike | null | undefined;
-//#endregion
-//#region src/compat/identity.d.ts
-/**
- * The product calling through this client, such as `@composio/core` or
- * `@composio/cli`. It owns the product headers: once a client has one,
- * `defaultHeaders` and per-call `headers` can no longer carry them.
- */
-interface ClientIdentity {
-  /** The calling product, such as `@composio/core` or `@composio/cli`. Sent as `x-client-provenance`. */
-  readonly product: string;
-  /** The calling product's version. Sent as `x-client-version` and `x-sdk-version`. */
-  readonly version: string;
-  /** Legacy label still read by the platform, sent as `x-source`. */
-  readonly source?: string | undefined;
-  /** Legacy label still read by the platform, sent as `x-framework`. */
-  readonly framework?: string | undefined;
-  /** Legacy label still read by the platform, sent as `x-runtime`. Defaults to the detected runtime. */
-  readonly runtime?: string | undefined;
-}
-//#endregion
-//#region src/compat/transport.d.ts
-/**
- * Sends one prepared HTTP request without retries or redirect handling.
- * Implementations should observe `request.signal` to stop their underlying I/O;
- * the client still settles the public request promptly if they do not.
- */
-interface Transport {
-  send(request: Request): Promise<Response>;
-}
-type KernelOwnedRequestInitKey = 'method' | 'headers' | 'body' | 'signal' | 'redirect';
-/** Fetch defaults that cannot replace fields owned by the request kernel. */
-type FetchTransportDefaults<Extra extends object = object> = Omit<RequestInit & Extra, KernelOwnedRequestInitKey>;
-type FetchImplementation<Extra extends object> = (input: RequestInfo | URL, init?: FetchTransportDefaults<Extra>) => Promise<Response>;
-/** Creates a transport backed by the supplied or global fetch function. */
-declare const createFetchTransport: <Extra extends object = object>(options?: {
-  fetch?: FetchImplementation<Extra> | undefined;
-  defaults?: FetchTransportDefaults<Extra> | undefined;
-}) => Transport;
-//#endregion
-//#region src/compat/request.d.ts
-/**
- * Per-request options bag — the Stainless last-positional-argument contract.
- * Downstream derives this shape structurally (`Parameters<method>[last]`);
- * `signal` support is load-bearing (abort → `APIUserAbortError`).
- */
-interface RequestOptions {
-  headers?: HeadersLike;
-  maxRetries?: number;
-  timeout?: number;
-  signal?: AbortSignal | null;
-  /**
-   * Stainless options-bag compatibility: sent as the `Idempotency-Key`
-   * request header. Server-side replay/dedup for Composio's write endpoints
-   * is not guaranteed yet — callers who cannot tolerate a double execution
-   * should still set `maxRetries: 0` on writes.
-   */
-  idempotencyKey?: string;
-}
-//#endregion
 //#region src/compat/error.d.ts
 declare class ComposioError extends Error {}
 /**
@@ -25725,80 +26409,6 @@ interface Mcp {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeMcp: (client: Composio) => Mcp;
 //#endregion
-//#region src/compat/resources/cli/realtime.d.ts
-type RealtimeAuthParamsGen = NonNullable<PostApiV31CliRealtimeAuthData['body']>;
-interface RealtimeAuthParams extends RealtimeAuthParamsGen {}
-type RealtimeAuthResponseGen = PostApiV31CliRealtimeAuthResponses[200];
-interface RealtimeAuthResponse extends RealtimeAuthResponseGen {}
-type RealtimeCredentialsResponseGen = GetApiV31CliRealtimeCredentialsResponses[200];
-interface RealtimeCredentialsResponse extends RealtimeCredentialsResponseGen {}
-/** `client.cli.realtime`. */
-interface Realtime {
-  auth(body: RealtimeAuthParams, options?: RequestOptions): APIPromise<RealtimeAuthResponse>;
-  credentials(options?: RequestOptions): APIPromise<RealtimeCredentialsResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeRealtime: (client: Composio) => Realtime;
-//#endregion
-//#region src/compat/resources/cli/cli.d.ts
-type CliCreateCodactFailureBodyGen = NonNullable<PostApiV31CliCodactFailuresData['body']>;
-type CliCreateCodactFailureHeadersGen = NonNullable<PostApiV31CliCodactFailuresData['headers']>;
-interface CliCreateCodactFailureParams extends CliCreateCodactFailureBodyGen, CliCreateCodactFailureHeadersGen {}
-type CliCreateSessionParamsGen = NonNullable<PostApiV31CliCreateSessionData['body']>;
-interface CliCreateSessionParams extends CliCreateSessionParamsGen {}
-type CliGetSessionParamsGen = NonNullable<GetApiV31CliGetSessionData['query']>;
-interface CliGetSessionParams extends CliGetSessionParamsGen {}
-type CliCreateCodactFailureResponseGen = PostApiV31CliCodactFailuresResponses[200];
-interface CliCreateCodactFailureResponse extends CliCreateCodactFailureResponseGen {}
-type CliCreateSessionResponseGen = PostApiV31CliCreateSessionResponses[201];
-interface CliCreateSessionResponse extends CliCreateSessionResponseGen {}
-type CliGetSessionResponseGen = GetApiV31CliGetSessionResponses[200];
-interface CliGetSessionResponse extends CliGetSessionResponseGen {}
-/** `client.cli`. */
-interface Cli {
-  readonly realtime: Realtime;
-  createCodactFailure(params: CliCreateCodactFailureParams, options?: RequestOptions): APIPromise<CliCreateCodactFailureResponse>;
-  createSession(body?: CliCreateSessionParams | null | undefined, options?: RequestOptions): APIPromise<CliCreateSessionResponse>;
-  getSession(query: CliGetSessionParams, options?: RequestOptions): APIPromise<CliGetSessionResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeCli: (client: Composio) => Cli;
-//#endregion
-//#region src/compat/resources/logs/triggers.d.ts
-type TriggerListParamsGen = NonNullable<PostApiV31InternalTriggerLogsData['body']>;
-interface TriggerListParams extends TriggerListParamsGen {}
-type TriggerRetrieveResponseGen = GetApiV31InternalTriggerLogByIdResponses[200];
-interface TriggerRetrieveResponse extends TriggerRetrieveResponseGen {}
-type TriggerListResponseGen = PostApiV31InternalTriggerLogsResponses[200];
-interface TriggerListResponse extends TriggerListResponseGen {}
-/** `client.logs.triggers`. */
-interface Triggers {
-  /** @deprecated Deprecated in the input OpenAPI schema. */
-  retrieve(id: string, options?: RequestOptions): APIPromise<TriggerRetrieveResponse>;
-  list(body?: TriggerListParams | null | undefined, options?: RequestOptions): APIPromise<TriggerListResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeTriggers: (client: Composio) => Triggers;
-//#endregion
-//#region src/compat/resources/logs/tools.d.ts
-type ToolListParamsGen = NonNullable<PostApiV31InternalActionExecutionLogsData['body']>;
-interface ToolListParams extends ToolListParamsGen {}
-type ToolRetrieveResponseGen = GetApiV31InternalActionExecutionLogByIdResponses[200];
-interface ToolRetrieveResponse extends ToolRetrieveResponseGen {}
-type ToolListResponseGen = PostApiV31InternalActionExecutionLogsResponses[200];
-interface ToolListResponse extends ToolListResponseGen {}
-type ToolListFieldsResponseGen = GetApiV31InternalActionExecutionFieldsResponses[200];
-interface ToolListFieldsResponse extends ToolListFieldsResponseGen {}
-/** `client.logs.tools`. */
-interface Tools {
-  retrieve(id: string, options?: RequestOptions): APIPromise<ToolRetrieveResponse>;
-  list(body: ToolListParams, options?: RequestOptions): APIPromise<ToolListResponse>;
-  /** @deprecated Deprecated in the input OpenAPI schema. */
-  listFields(options?: RequestOptions): APIPromise<ToolListFieldsResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeTools: (client: Composio) => Tools;
-//#endregion
 //#region src/compat/resources/logs/logs.d.ts
 type LogCreateToolExecutionParamsGen = NonNullable<PostApiV31LogsToolExecutionData['body']>;
 interface LogCreateToolExecutionParams extends LogCreateToolExecutionParamsGen {}
@@ -25807,14 +26417,12 @@ interface LogCreateToolExecutionResponse extends LogCreateToolExecutionResponseG
 type LogRetrieveToolExecutionResponseGen = GetApiV31LogsToolExecutionByIdResponses[200];
 interface LogRetrieveToolExecutionResponse extends LogRetrieveToolExecutionResponseGen {}
 /** `client.logs`. */
-interface Logs {
-  readonly triggers: Triggers;
-  readonly tools: Tools;
+interface Logs$1 {
   createToolExecution(body?: LogCreateToolExecutionParams | null | undefined, options?: RequestOptions): APIPromise<LogCreateToolExecutionResponse>;
   retrieveToolExecution(id: string, options?: RequestOptions): APIPromise<LogRetrieveToolExecutionResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeLogs: (client: Composio) => Logs;
+declare const makeLogs$1: (client: Composio) => Logs$1;
 //#endregion
 //#region src/compat/resources/project/usage.d.ts
 type UsageRetrieveParamsGen$1 = NonNullable<PostApiV31ProjectUsageByEntityTypeData['body']>;
@@ -25941,43 +26549,17 @@ interface Owner {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeOwner: (client: Composio) => Owner;
 //#endregion
-//#region src/compat/resources/org/consumer/project.d.ts
-type ProjectResolveHeadersGen = NonNullable<PostApiV31OrgConsumerProjectResolveData['headers']>;
-interface ProjectResolveParams extends ProjectResolveHeadersGen {}
-type ProjectResolveResponseGen = PostApiV31OrgConsumerProjectResolveResponses[200];
-interface ProjectResolveResponse extends ProjectResolveResponseGen {}
-/** `client.org.consumer.project`. */
-interface Project$1 {
-  resolve(params: ProjectResolveParams, options?: RequestOptions): APIPromise<ProjectResolveResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeProject$1: (client: Composio) => Project$1;
-//#endregion
-//#region src/compat/resources/org/consumer/consumer.d.ts
-type ConsumerListConnectedToolkitsQueryGen = NonNullable<GetApiV31OrgConsumerConnectedToolkitsData['query']>;
-type ConsumerListConnectedToolkitsHeadersGen = NonNullable<GetApiV31OrgConsumerConnectedToolkitsData['headers']>;
-interface ConsumerListConnectedToolkitsParams extends ConsumerListConnectedToolkitsQueryGen, ConsumerListConnectedToolkitsHeadersGen {}
-type ConsumerListConnectedToolkitsResponseGen = GetApiV31OrgConsumerConnectedToolkitsResponses[200];
-interface ConsumerListConnectedToolkitsResponse extends ConsumerListConnectedToolkitsResponseGen {}
-/** `client.org.consumer`. */
-interface Consumer {
-  readonly project: Project$1;
-  listConnectedToolkits(params: ConsumerListConnectedToolkitsParams, options?: RequestOptions): APIPromise<ConsumerListConnectedToolkitsResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeConsumer: (client: Composio) => Consumer;
-//#endregion
 //#region src/compat/resources/org/project.d.ts
 type ProjectListParamsGen = NonNullable<GetApiV31OrgProjectListData['query']>;
 interface ProjectListParams extends ProjectListParamsGen {}
 type ProjectListResponseGen = GetApiV31OrgProjectListResponses[200];
 interface ProjectListResponse extends ProjectListResponseGen {}
 /** `client.org.project`. */
-interface Project {
+interface Project$1 {
   list(query?: ProjectListParams | null | undefined, options?: RequestOptions): APIPromise<ProjectListResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeProject: (client: Composio) => Project;
+declare const makeProject$1: (client: Composio) => Project$1;
 //#endregion
 //#region src/compat/resources/org/usage.d.ts
 type UsageRetrieveParamsGen = NonNullable<PostApiV31OrgUsageByEntityTypeData['body']>;
@@ -25996,34 +26578,20 @@ interface Usage {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeUsage: (client: Composio) => Usage;
 //#endregion
-//#region src/compat/resources/org/clanker.d.ts
-type ClankerCreateClaimParamsGen = NonNullable<PostApiV31OrgClankerCreateClaimData['body']>;
-interface ClankerCreateClaimParams extends ClankerCreateClaimParamsGen {}
-type ClankerCreateClaimResponseGen = PostApiV31OrgClankerCreateClaimResponses[200];
-interface ClankerCreateClaimResponse extends ClankerCreateClaimResponseGen {}
-/** `client.org.clanker`. */
-interface Clanker {
-  createClaim(body: ClankerCreateClaimParams, options?: RequestOptions): APIPromise<ClankerCreateClaimResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeClanker: (client: Composio) => Clanker;
-//#endregion
 //#region src/compat/resources/org/org.d.ts
 type OrgListParamsGen = NonNullable<GetApiV31OrgListData['query']>;
 interface OrgListParams extends OrgListParamsGen {}
 type OrgListResponseGen = GetApiV31OrgListResponses[200];
 interface OrgListResponse extends OrgListResponseGen {}
 /** `client.org`. */
-interface Org {
+interface Org$1 {
   readonly owner: Owner;
-  readonly consumer: Consumer;
-  readonly project: Project;
+  readonly project: Project$1;
   readonly usage: Usage;
-  readonly clanker: Clanker;
   list(query?: OrgListParams | null | undefined, options?: RequestOptions): APIPromise<OrgListResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeOrg: (client: Composio) => Org;
+declare const makeOrg$1: (client: Composio) => Org$1;
 //#endregion
 //#region src/compat/resources/auth/session.d.ts
 type SessionRetrieveInfoResponseGen = GetApiV31AuthSessionInfoResponses[200];
@@ -26043,6 +26611,18 @@ interface Auth {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeAuth: (client: Composio) => Auth;
 //#endregion
+//#region src/compat/resources/api-key-revocation.d.ts
+type ApiKeyRevocationCreateParamsGen = NonNullable<PostApiV31ApiKeyRevocationData['body']>;
+interface ApiKeyRevocationCreateParams extends ApiKeyRevocationCreateParamsGen {}
+type ApiKeyRevocationCreateResponseGen = PostApiV31ApiKeyRevocationResponses[200];
+interface ApiKeyRevocationCreateResponse extends ApiKeyRevocationCreateResponseGen {}
+/** `client.apiKeyRevocation`. */
+interface ApiKeyRevocation {
+  create(body: ApiKeyRevocationCreateParams, options?: RequestOptions): APIPromise<ApiKeyRevocationCreateResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeApiKeyRevocation: (client: Composio) => ApiKeyRevocation;
+//#endregion
 //#region src/compat/resources/custom.d.ts
 type CustomDeleteToolkitParamsGen = NonNullable<DeleteApiV31CustomToolkitsBySlugData['query']>;
 interface CustomDeleteToolkitParams extends CustomDeleteToolkitParamsGen {}
@@ -26102,12 +26682,11 @@ interface ClientResources {
   readonly triggersTypes: TriggersTypes;
   readonly triggerInstances: TriggerInstances;
   readonly mcp: Mcp;
-  readonly cli: Cli;
-  readonly logs: Logs;
+  readonly logs: Logs$1;
   readonly project: Project$3;
   readonly webhookSubscriptions: WebhookSubscriptions;
   readonly webhookEndpoints: WebhookEndpoints;
-  readonly org: Org;
+  readonly org: Org$1;
   readonly auth: Auth;
   readonly apiKeyRevocation: ApiKeyRevocation;
   readonly custom: Custom;
@@ -26223,16 +26802,156 @@ declare class Composio {
   static UnprocessableEntityError: typeof UnprocessableEntityError;
 }
 //#endregion
-//#region src/compat/resources/api-key-revocation.d.ts
-type ApiKeyRevocationCreateParamsGen = NonNullable<PostApiV31ApiKeyRevocationData['body']>;
-interface ApiKeyRevocationCreateParams extends ApiKeyRevocationCreateParamsGen {}
-type ApiKeyRevocationCreateResponseGen = PostApiV31ApiKeyRevocationResponses[200];
-interface ApiKeyRevocationCreateResponse extends ApiKeyRevocationCreateResponseGen {}
-/** `client.apiKeyRevocation`. */
-interface ApiKeyRevocation {
-  create(body: ApiKeyRevocationCreateParams, options?: RequestOptions): APIPromise<ApiKeyRevocationCreateResponse>;
+//#region src/compat/resources/_internal/cli/realtime.d.ts
+type RealtimeAuthParamsGen = NonNullable<PostApiV31CliRealtimeAuthData['body']>;
+interface RealtimeAuthParams extends RealtimeAuthParamsGen {}
+type RealtimeAuthResponseGen = PostApiV31CliRealtimeAuthResponses[200];
+interface RealtimeAuthResponse extends RealtimeAuthResponseGen {}
+type RealtimeCredentialsResponseGen = GetApiV31CliRealtimeCredentialsResponses[200];
+interface RealtimeCredentialsResponse extends RealtimeCredentialsResponseGen {}
+/** `client._internal.cli.realtime`. */
+interface Realtime {
+  auth(body: RealtimeAuthParams, options?: RequestOptions): APIPromise<RealtimeAuthResponse>;
+  credentials(options?: RequestOptions): APIPromise<RealtimeCredentialsResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeApiKeyRevocation: (client: Composio) => ApiKeyRevocation;
+declare const makeRealtime: (client: Composio) => Realtime;
+//#endregion
+//#region src/compat/resources/_internal/cli/cli.d.ts
+type CliCreateCodactFailureBodyGen = NonNullable<PostApiV31CliCodactFailuresData['body']>;
+type CliCreateCodactFailureHeadersGen = NonNullable<PostApiV31CliCodactFailuresData['headers']>;
+interface CliCreateCodactFailureParams extends CliCreateCodactFailureBodyGen, CliCreateCodactFailureHeadersGen {}
+type CliCreateSessionParamsGen = NonNullable<PostApiV31CliCreateSessionData['body']>;
+interface CliCreateSessionParams extends CliCreateSessionParamsGen {}
+type CliGetSessionParamsGen = NonNullable<GetApiV31CliGetSessionData['query']>;
+interface CliGetSessionParams extends CliGetSessionParamsGen {}
+type CliCreateCodactFailureResponseGen = PostApiV31CliCodactFailuresResponses[200];
+interface CliCreateCodactFailureResponse extends CliCreateCodactFailureResponseGen {}
+type CliCreateSessionResponseGen = PostApiV31CliCreateSessionResponses[201];
+interface CliCreateSessionResponse extends CliCreateSessionResponseGen {}
+type CliGetSessionResponseGen = GetApiV31CliGetSessionResponses[200];
+interface CliGetSessionResponse extends CliGetSessionResponseGen {}
+/** `client._internal.cli`. */
+interface Cli {
+  readonly realtime: Realtime;
+  createCodactFailure(params: CliCreateCodactFailureParams, options?: RequestOptions): APIPromise<CliCreateCodactFailureResponse>;
+  createSession(body?: CliCreateSessionParams | null | undefined, options?: RequestOptions): APIPromise<CliCreateSessionResponse>;
+  getSession(query: CliGetSessionParams, options?: RequestOptions): APIPromise<CliGetSessionResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeCli: (client: Composio) => Cli;
+//#endregion
+//#region src/compat/resources/_internal/consumer/permissions.d.ts
+type PermissionsResolveParamsGen = NonNullable<PostApiV31ConsumerPermissionsResolveData['body']>;
+interface PermissionsResolveParams extends PermissionsResolveParamsGen {}
+type PermissionsResolveResponseGen = PostApiV31ConsumerPermissionsResolveResponses[200];
+interface PermissionsResolveResponse extends PermissionsResolveResponseGen {}
+/** `client._internal.consumer.permissions`. */
+interface Permissions {
+  resolve(body?: PermissionsResolveParams | null | undefined, options?: RequestOptions): APIPromise<PermissionsResolveResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makePermissions: (client: Composio) => Permissions;
+//#endregion
+//#region src/compat/resources/_internal/consumer/consumer.d.ts
+/** `client._internal.consumer`. */
+interface Consumer$1 {
+  readonly permissions: Permissions;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeConsumer$1: (client: Composio) => Consumer$1;
+//#endregion
+//#region src/compat/resources/_internal/logs/triggers.d.ts
+type TriggerListParamsGen = NonNullable<PostApiV31InternalTriggerLogsData['body']>;
+interface TriggerListParams extends TriggerListParamsGen {}
+type TriggerRetrieveResponseGen = GetApiV31InternalTriggerLogByIdResponses[200];
+interface TriggerRetrieveResponse extends TriggerRetrieveResponseGen {}
+type TriggerListResponseGen = PostApiV31InternalTriggerLogsResponses[200];
+interface TriggerListResponse extends TriggerListResponseGen {}
+/** `client._internal.logs.triggers`. */
+interface Triggers {
+  /** @deprecated Deprecated in the input OpenAPI schema. */
+  retrieve(id: string, options?: RequestOptions): APIPromise<TriggerRetrieveResponse>;
+  list(body?: TriggerListParams | null | undefined, options?: RequestOptions): APIPromise<TriggerListResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeTriggers: (client: Composio) => Triggers;
+//#endregion
+//#region src/compat/resources/_internal/logs/tools.d.ts
+type ToolListParamsGen = NonNullable<PostApiV31InternalActionExecutionLogsData['body']>;
+interface ToolListParams extends ToolListParamsGen {}
+type ToolRetrieveResponseGen = GetApiV31InternalActionExecutionLogByIdResponses[200];
+interface ToolRetrieveResponse extends ToolRetrieveResponseGen {}
+type ToolListResponseGen = PostApiV31InternalActionExecutionLogsResponses[200];
+interface ToolListResponse extends ToolListResponseGen {}
+type ToolListFieldsResponseGen = GetApiV31InternalActionExecutionFieldsResponses[200];
+interface ToolListFieldsResponse extends ToolListFieldsResponseGen {}
+/** `client._internal.logs.tools`. */
+interface Tools {
+  retrieve(id: string, options?: RequestOptions): APIPromise<ToolRetrieveResponse>;
+  /** @deprecated Deprecated in the input OpenAPI schema. */
+  list(body: ToolListParams, options?: RequestOptions): APIPromise<ToolListResponse>;
+  /** @deprecated Deprecated in the input OpenAPI schema. */
+  listFields(options?: RequestOptions): APIPromise<ToolListFieldsResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeTools: (client: Composio) => Tools;
+//#endregion
+//#region src/compat/resources/_internal/logs/logs.d.ts
+/** `client._internal.logs`. */
+interface Logs {
+  readonly triggers: Triggers;
+  readonly tools: Tools;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeLogs: (client: Composio) => Logs;
+//#endregion
+//#region src/compat/resources/_internal/org/consumer/project.d.ts
+type ProjectResolveHeadersGen = NonNullable<PostApiV31OrgConsumerProjectResolveData['headers']>;
+interface ProjectResolveParams extends ProjectResolveHeadersGen {}
+type ProjectResolveResponseGen = PostApiV31OrgConsumerProjectResolveResponses[200];
+interface ProjectResolveResponse extends ProjectResolveResponseGen {}
+/** `client._internal.org.consumer.project`. */
+interface Project {
+  resolve(params: ProjectResolveParams, options?: RequestOptions): APIPromise<ProjectResolveResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeProject: (client: Composio) => Project;
+//#endregion
+//#region src/compat/resources/_internal/org/consumer/consumer.d.ts
+type ConsumerListConnectedToolkitsQueryGen = NonNullable<GetApiV31OrgConsumerConnectedToolkitsData['query']>;
+type ConsumerListConnectedToolkitsHeadersGen = NonNullable<GetApiV31OrgConsumerConnectedToolkitsData['headers']>;
+interface ConsumerListConnectedToolkitsParams extends ConsumerListConnectedToolkitsQueryGen, ConsumerListConnectedToolkitsHeadersGen {}
+type ConsumerListConnectedToolkitsResponseGen = GetApiV31OrgConsumerConnectedToolkitsResponses[200];
+interface ConsumerListConnectedToolkitsResponse extends ConsumerListConnectedToolkitsResponseGen {}
+type ConsumerRetrieveConfigResponseGen = GetApiV31OrgConsumerConfigResponses[200];
+interface ConsumerRetrieveConfigResponse extends ConsumerRetrieveConfigResponseGen {}
+/** `client._internal.org.consumer`. */
+interface Consumer {
+  readonly project: Project;
+  listConnectedToolkits(params: ConsumerListConnectedToolkitsParams, options?: RequestOptions): APIPromise<ConsumerListConnectedToolkitsResponse>;
+  retrieveConfig(options?: RequestOptions): APIPromise<ConsumerRetrieveConfigResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeConsumer: (client: Composio) => Consumer;
+//#endregion
+//#region src/compat/resources/_internal/org/org.d.ts
+/** `client._internal.org`. */
+interface Org {
+  readonly consumer: Consumer;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeOrg: (client: Composio) => Org;
+//#endregion
+//#region src/compat/resources/_internal/_internal.d.ts
+/** `client._internal`. */
+interface Internal {
+  readonly cli: Cli;
+  readonly consumer: Consumer$1;
+  readonly logs: Logs;
+  readonly org: Org;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeInternal: (client: Composio) => Internal;
 //#endregion
-export { ProjectResolveParams as $, makeSession$1 as $i, ManageDeleteResponse as $n, ConnectedAccountRetrieveResponse as $r, ToolRetrieveResponse as $t, Org as A, UnprocessableEntityError as Aa, SessionAttachResponse as Ai, McpListParams as An, ToolkitRetrieveMultiResponse as Ar, WebhookSubscriptionListResponse as At, UsageRetrieveResponse as B, SessionLinkParams as Bi, GenerateURLResponse as Bn, makeLink as Br, UsageRetrieveParams$1 as Bt, CustomUpsertResponse as C, BadRequestError as Ca, ToolRetrieveResponse$1 as Ci, McpCreateParams as Cn, ToolkitListParams as Cr, WebhookEndpoints as Ct, Session as D, NotFoundError as Da, makeToolRouter as Di, McpDeleteResponse as Dn, ToolkitRetrieveCategoriesResponse as Dr, WebhookSubscriptionDeleteResponse as Dt, makeAuth as E, InternalServerError as Ea, ToolRouter as Ei, McpDeleteInstanceResponse as En, ToolkitRecommendScopesResponse as Er, WebhookSubscriptionCreateResponse as Et, ClankerCreateClaimParams as F, ClientIdentity as Fa, SessionDeleteResponse as Fi, McpUpdateParams as Fn, Toolkits as Fr, WebhookSubscriptions as Ft, ProjectListParams as G, SessionProxyExecuteResponse as Gi, makeCustom$1 as Gn, ConnectedAccountDeleteParams as Gr, LogCreateToolExecutionParams as Gt, UsageRetrieveSummaryResponse as H, SessionPatchParams as Hi, Custom$1 as Hn, ConnectedAccountCompleteAuthResponse as Hr, UsageRetrieveSummaryParams$1 as Ht, ClankerCreateClaimResponse as I, HeadersLike as Ia, SessionExecuteMetaParams as Ii, McpUpdateResponse as In, makeToolkits as Ir, makeWebhookSubscriptions as It, Consumer as J, SessionSearchResponse as Ji, TriggerInstanceUpsertParams as Jn, ConnectedAccountListResponse as Jr, Logs as Jt, ProjectListResponse as K, SessionRetrieveResponse as Ki, TriggerInstanceListActiveParams as Kn, ConnectedAccountDeleteResponse as Kr, LogCreateToolExecutionResponse as Kt, makeClanker as L, APIPromise as La, SessionExecuteMetaResponse as Li, makeMcp as Ln, Link as Lr, Project$3 as Lt, OrgListResponse as M, FetchTransportDefaults as Ma, SessionConfigHistoryResponse as Mi, McpRetrieveAppParams as Mn, ToolkitRetrieveResponse as Mr, WebhookSubscriptionRotateSecretResponse as Mt, makeOrg as N, Transport as Na, SessionCreateParams as Ni, McpRetrieveAppResponse as Nn, ToolkitRetrieveScopesGrantContextParams as Nr, WebhookSubscriptionUpdateParams as Nt, SessionRetrieveInfoResponse as O, PermissionDeniedError as Oa, Session$1 as Oi, McpListInstancesParams as On, ToolkitRetrieveChangelogResponse as Or, WebhookSubscriptionListEventTypesResponse as Ot, Clanker as P, createFetchTransport as Pa, SessionCreateResponse as Pi, McpRetrieveResponse as Pn, ToolkitRetrieveScopesGrantContextResponse as Pr, WebhookSubscriptionUpdateResponse as Pt, Project$1 as Q, SessionToolsResponse as Qi, Manage as Qn, ConnectedAccountRefreshResponse as Qr, ToolListResponse as Qt, Usage as R, SessionExecuteParams as Ri, Generate as Rn, LinkCreateParams as Rr, makeProject$3 as Rt, CustomUpsertParams as S, AuthenticationError as Sa, ToolRetrieveRequiredScopesResponse as Si, McpCreateInstanceResponse as Sn, makeAuthConfigs as Sr, WebhookEndpointUpdateResponse as St, Auth as T, ConflictError as Ta, makeTools$1 as Ti, McpDeleteInstanceParams as Tn, ToolkitRecommendScopesParams as Tr, WebhookSubscriptionCreateParams as Tt, makeUsage as U, SessionPatchResponse as Ui, CustomCreateParams as Un, ConnectedAccountCreateParams as Ur, UsageRetrieveSummaryResponse$1 as Ut, UsageRetrieveSummaryParams as V, SessionLinkResponse as Vi, makeGenerate as Vn, ConnectedAccountCompleteAuthParams as Vr, UsageRetrieveResponse$1 as Vt, Project as W, SessionProxyExecuteParams as Wi, CustomCreateResponse as Wn, ConnectedAccountCreateResponse as Wr, makeUsage$1 as Wt, ConsumerListConnectedToolkitsResponse as X, SessionToolkitsResponse as Xi, TriggerInstances as Xn, ConnectedAccountPatchResponse as Xr, ToolListFieldsResponse as Xt, ConsumerListConnectedToolkitsParams as Y, SessionToolkitsParams as Yi, TriggerInstanceUpsertResponse as Yn, ConnectedAccountPatchParams as Yr, makeLogs as Yt, makeConsumer as Z, SessionToolsParams as Zi, makeTriggerInstances as Zn, ConnectedAccountRefreshParams as Zr, ToolListParams as Zt, Custom as _, APIConnectionError as _a, ToolProxyParams as _i, RealtimeAuthResponse as _n, AuthConfigUpdateParams as _r, WebhookEndpointListResponse as _t, ClientOptions as a, FileDeleteResponse as aa, FileCreatePresignedURLParams as ai, Triggers as an, TriggersTypeRetrieveEnumResponse as ar, ProjectCreateParams as at, CustomSyncParams as b, APIErrorBody as ba, ToolRetrieveParams as bi, Mcp as bn, AuthConfigUpdateStatusResponse as br, WebhookEndpointRetrieveResponse as bt, LogLevel as c, Files$1 as ca, FileListResponse as ci, CliCreateCodactFailureParams as cn, TriggersTypes as cr, ProjectDeleteResponse as ct, SessionConfigsListResponse as d, AuthConstructors as da, ToolExecuteParams as di, CliCreateSessionResponse as dn, AuthConfigCreateResponse as dr, ProjectRegenerateAPIKeyResponse as dt, FileCreateDownloadURLParams as ea, ConnectedAccountRevokeResponse as ei, Tools as en, ManageUpdateParams as er, ProjectResolveResponse as et, SessionConfigsRetrieveResponse as f, AuthMode as fa, ToolExecuteResponse as fi, CliGetSessionParams as fn, AuthConfigDeleteParams as fr, ProjectRetrieveResponse as ft, makeKeyring as g, Scope as ga, ToolListResponse$1 as gi, RealtimeAuthParams as gn, AuthConfigRetrieveResponse as gr, WebhookEndpointListParams as gt, KeyringListTransferKeysResponse as h, Credential as ha, ToolListParams$1 as hi, Realtime as hn, AuthConfigListResponse as hr, WebhookEndpointCreateResponse as ht, makeApiKeyRevocation as i, FileDeleteParams as ia, makeConnectedAccounts as ii, TriggerRetrieveResponse as in, TriggersTypeListResponse as ir, Project$2 as it, OrgListParams as j, RequestOptions as ja, SessionConfigHistoryParams as ji, McpListResponse as jn, ToolkitRetrieveParams as jr, WebhookSubscriptionRetrieveResponse as jt, makeSession as k, RateLimitError as ka, SessionAttachParams as ki, McpListInstancesResponse as kn, ToolkitRetrieveMultiParams as kr, WebhookSubscriptionListParams as kt, SessionConfigs as l, makeFiles$1 as la, Files as li, CliCreateCodactFailureResponse as ln, makeTriggersTypes as lr, ProjectListParams$1 as lt, Keyring as m, AutoCredentials as ma, ToolGetInputResponse as mi, makeCli as mn, AuthConfigListParams as mr, WebhookEndpointCreateParams as mt, ApiKeyRevocationCreateParams as n, FileCreateUploadURLParams as na, ConnectedAccountUpdateStatusResponse as ni, TriggerListParams as nn, makeManage as nr, Owner as nt, Composio as o, FileListParams$1 as oa, FileCreatePresignedURLResponse as oi, makeTriggers as on, TriggersTypeRetrieveParams as or, ProjectCreateResponse as ot, makeSessionConfigs as p, AuthOf as pa, ToolGetInputParams as pi, CliGetSessionResponse as pn, AuthConfigDeleteResponse as pr, makeProject$2 as pt, makeProject as q, SessionSearchParams as qi, TriggerInstanceListActiveResponse as qn, ConnectedAccountListParams as qr, LogRetrieveToolExecutionResponse as qt, ApiKeyRevocationCreateResponse as r, FileCreateUploadURLResponse as ra, ConnectedAccounts as ri, TriggerListResponse as rn, TriggersTypeListParams as rr, makeOwner as rt, EnvironmentMap as s, FileListResponse$1 as sa, FileListParams as si, Cli as sn, TriggersTypeRetrieveResponse as sr, ProjectDeleteParams as st, ApiKeyRevocation as t, FileCreateDownloadURLResponse as ta, ConnectedAccountUpdateStatusParams as ti, makeTools as tn, ManageUpdateResponse as tr, makeProject$1 as tt, SessionConfigsListParams as u, Auth$1 as ua, makeFiles as ui, CliCreateSessionParams as un, AuthConfigCreateParams as ur, ProjectListResponse$1 as ut, CustomDeleteToolkitParams as v, APIConnectionTimeoutError as va, ToolProxyResponse as vi, RealtimeCredentialsResponse as vn, AuthConfigUpdateResponse as vr, WebhookEndpointReplaceParams as vt, makeCustom as w, ComposioError as wa, Tools$1 as wi, McpCreateResponse as wn, ToolkitListResponse as wr, makeWebhookEndpoints as wt, CustomSyncResponse as x, APIUserAbortError as xa, ToolRetrieveRequiredScopesParams as xi, McpCreateInstanceParams as xn, AuthConfigs as xr, WebhookEndpointUpdateParams as xt, CustomDeleteToolkitResponse as y, APIError as ya, ToolRetrieveEnumResponse as yi, makeRealtime as yn, AuthConfigUpdateStatusParams as yr, WebhookEndpointReplaceResponse as yt, UsageRetrieveParams as z, SessionExecuteResponse as zi, GenerateURLParams as zn, LinkCreateResponse as zr, Usage$1 as zt };
+export { SessionConfigsRetrieveResponse as $, SessionProxyExecuteParams as $i, CustomCreateResponse as $n, ConnectedAccountCreateResponse as $r, WebhookEndpointRetrieveResponse as $t, PermissionsResolveParams as A, APIUserAbortError as Aa, ToolRetrieveRequiredScopesParams as Ai, McpCreateInstanceParams as An, AuthConfigs as Ar, makeUsage as At, makeCli as B, RequestOptions as Ba, SessionConfigHistoryParams as Bi, McpListResponse as Bn, ToolkitRetrieveParams as Br, ProjectDeleteParams as Bt, TriggerListResponse as C, AutoCredentials as Ca, ToolGetInputResponse as Ci, makeUsage$1 as Cn, AuthConfigListParams as Cr, OrgListResponse as Ct, Consumer$1 as D, APIConnectionTimeoutError as Da, ToolProxyResponse as Di, Logs$1 as Dn, AuthConfigUpdateResponse as Dr, UsageRetrieveResponse as Dt, makeTriggers as E, APIConnectionError as Ea, ToolProxyParams as Ei, LogRetrieveToolExecutionResponse as En, AuthConfigUpdateParams as Er, UsageRetrieveParams as Et, CliCreateCodactFailureResponse as F, InternalServerError as Fa, ToolRouter as Fi, McpDeleteInstanceResponse as Fn, ToolkitRecommendScopesResponse as Fr, Owner as Ft, makeRealtime as G, HeadersLike as Ga, SessionExecuteMetaParams as Gi, McpUpdateResponse as Gn, makeToolkits as Gr, ProjectRetrieveResponse as Gt, RealtimeAuthParams as H, Transport as Ha, SessionCreateParams as Hi, McpRetrieveAppResponse as Hn, ToolkitRetrieveScopesGrantContextParams as Hr, ProjectListParams$1 as Ht, CliCreateSessionParams as I, NotFoundError as Ia, makeToolRouter as Ii, McpDeleteResponse as In, ToolkitRetrieveCategoriesResponse as Ir, makeOwner as It, EnvironmentMap as J, SessionExecuteResponse as Ji, GenerateURLParams as Jn, LinkCreateResponse as Jr, WebhookEndpointCreateResponse as Jt, ClientOptions as K, APIPromise as Ka, SessionExecuteMetaResponse as Ki, makeMcp as Kn, Link as Kr, makeProject$2 as Kt, CliCreateSessionResponse as L, PermissionDeniedError as La, Session$1 as Li, McpListInstancesParams as Ln, ToolkitRetrieveChangelogResponse as Lr, Project$2 as Lt, makePermissions as M, BadRequestError as Ma, ToolRetrieveResponse$1 as Mi, McpCreateParams as Mn, ToolkitListParams as Mr, ProjectListParams as Mt, Cli as N, ComposioError as Na, Tools$1 as Ni, McpCreateResponse as Nn, ToolkitListResponse as Nr, ProjectListResponse as Nt, makeConsumer$1 as O, APIError as Oa, ToolRetrieveEnumResponse as Oi, makeLogs$1 as On, AuthConfigUpdateStatusParams as Or, UsageRetrieveSummaryParams as Ot, CliCreateCodactFailureParams as P, ConflictError as Pa, makeTools$1 as Pi, McpDeleteInstanceParams as Pn, ToolkitRecommendScopesParams as Pr, makeProject$1 as Pt, SessionConfigsListResponse as Q, SessionPatchResponse as Qi, CustomCreateParams as Qn, ConnectedAccountCreateParams as Qr, WebhookEndpointReplaceResponse as Qt, CliGetSessionParams as R, RateLimitError as Ra, SessionAttachParams as Ri, McpListInstancesResponse as Rn, ToolkitRetrieveMultiParams as Rr, ProjectCreateParams as Rt, TriggerListParams as S, AuthOf as Sa, ToolGetInputParams as Si, UsageRetrieveSummaryResponse$1 as Sn, AuthConfigDeleteResponse as Sr, OrgListParams as St, Triggers as T, Scope as Ta, ToolListResponse$1 as Ti, LogCreateToolExecutionResponse as Tn, AuthConfigRetrieveResponse as Tr, Usage as Tt, RealtimeAuthResponse as U, createFetchTransport as Ua, SessionCreateResponse as Ui, McpRetrieveResponse as Un, ToolkitRetrieveScopesGrantContextResponse as Ur, ProjectListResponse$1 as Ut, Realtime as V, FetchTransportDefaults as Va, SessionConfigHistoryResponse as Vi, McpRetrieveAppParams as Vn, ToolkitRetrieveResponse as Vr, ProjectDeleteResponse as Vt, RealtimeCredentialsResponse as W, ClientIdentity as Wa, SessionDeleteResponse as Wi, McpUpdateParams as Wn, Toolkits as Wr, ProjectRegenerateAPIKeyResponse as Wt, SessionConfigs as X, SessionLinkResponse as Xi, makeGenerate as Xn, ConnectedAccountCompleteAuthParams as Xr, WebhookEndpointListResponse as Xt, LogLevel as Y, SessionLinkParams as Yi, GenerateURLResponse as Yn, makeLink as Yr, WebhookEndpointListParams as Yt, SessionConfigsListParams as Z, SessionPatchParams as Zi, Custom$1 as Zn, ConnectedAccountCompleteAuthResponse as Zr, WebhookEndpointReplaceParams as Zt, ToolListParams as _, Files$1 as _a, FileListResponse as _i, makeProject$3 as _n, TriggersTypes as _r, makeAuth as _t, Consumer as a, SessionToolkitsResponse as aa, ConnectedAccountPatchResponse as ai, WebhookSubscriptionCreateResponse as an, TriggerInstances as ar, CustomDeleteToolkitParams as at, Tools as b, AuthConstructors as ba, ToolExecuteParams as bi, UsageRetrieveResponse$1 as bn, AuthConfigCreateResponse as br, makeSession as bt, ConsumerRetrieveConfigResponse as c, makeSession$1 as ca, ConnectedAccountRetrieveResponse as ci, WebhookSubscriptionListParams as cn, ManageDeleteResponse as cr, CustomSyncResponse as ct, ProjectResolveParams as d, FileCreateUploadURLParams as da, ConnectedAccountUpdateStatusResponse as di, WebhookSubscriptionRotateSecretResponse as dn, makeManage as dr, makeCustom as dt, SessionProxyExecuteResponse as ea, ConnectedAccountDeleteParams as ei, WebhookEndpointUpdateParams as en, makeCustom$1 as er, makeSessionConfigs as et, ProjectResolveResponse as f, FileCreateUploadURLResponse as fa, ConnectedAccounts as fi, WebhookSubscriptionUpdateParams as fn, TriggersTypeListParams as fr, ApiKeyRevocation as ft, ToolListFieldsResponse as g, FileListResponse$1 as ga, FileListParams as gi, Project$3 as gn, TriggersTypeRetrieveResponse as gr, Auth as gt, makeLogs as h, FileListParams$1 as ha, FileCreatePresignedURLResponse as hi, makeWebhookSubscriptions as hn, TriggersTypeRetrieveParams as hr, makeApiKeyRevocation as ht, makeOrg as i, SessionToolkitsParams as ia, ConnectedAccountPatchParams as ii, WebhookSubscriptionCreateParams as in, TriggerInstanceUpsertResponse as ir, Custom as it, PermissionsResolveResponse as j, AuthenticationError as ja, ToolRetrieveRequiredScopesResponse as ji, McpCreateInstanceResponse as jn, makeAuthConfigs as jr, Project$1 as jt, Permissions as k, APIErrorBody as ka, ToolRetrieveParams as ki, Mcp as kn, AuthConfigUpdateStatusResponse as kr, UsageRetrieveSummaryResponse as kt, makeConsumer as l, FileCreateDownloadURLParams as la, ConnectedAccountRevokeResponse as li, WebhookSubscriptionListResponse as ln, ManageUpdateParams as lr, CustomUpsertParams as lt, Logs as m, FileDeleteResponse as ma, FileCreatePresignedURLParams as mi, WebhookSubscriptions as mn, TriggersTypeRetrieveEnumResponse as mr, ApiKeyRevocationCreateResponse as mt, makeInternal as n, SessionSearchParams as na, ConnectedAccountListParams as ni, WebhookEndpoints as nn, TriggerInstanceListActiveResponse as nr, KeyringListTransferKeysResponse as nt, ConsumerListConnectedToolkitsParams as o, SessionToolsParams as oa, ConnectedAccountRefreshParams as oi, WebhookSubscriptionDeleteResponse as on, makeTriggerInstances as or, CustomDeleteToolkitResponse as ot, makeProject as p, FileDeleteParams as pa, makeConnectedAccounts as pi, WebhookSubscriptionUpdateResponse as pn, TriggersTypeListResponse as pr, ApiKeyRevocationCreateParams as pt, Composio as q, SessionExecuteParams as qi, Generate as qn, LinkCreateParams as qr, WebhookEndpointCreateParams as qt, Org as r, SessionSearchResponse as ra, ConnectedAccountListResponse as ri, makeWebhookEndpoints as rn, TriggerInstanceUpsertParams as rr, makeKeyring as rt, ConsumerListConnectedToolkitsResponse as s, SessionToolsResponse as sa, ConnectedAccountRefreshResponse as si, WebhookSubscriptionListEventTypesResponse as sn, Manage as sr, CustomSyncParams as st, Internal as t, SessionRetrieveResponse as ta, ConnectedAccountDeleteResponse as ti, WebhookEndpointUpdateResponse as tn, TriggerInstanceListActiveParams as tr, Keyring as tt, Project as u, FileCreateDownloadURLResponse as ua, ConnectedAccountUpdateStatusParams as ui, WebhookSubscriptionRetrieveResponse as un, ManageUpdateResponse as ur, CustomUpsertResponse as ut, ToolListResponse as v, makeFiles$1 as va, Files as vi, Usage$1 as vn, makeTriggersTypes as vr, Session as vt, TriggerRetrieveResponse as w, Credential as wa, ToolListParams$1 as wi, LogCreateToolExecutionParams as wn, AuthConfigListResponse as wr, makeOrg$1 as wt, makeTools as x, AuthMode as xa, ToolExecuteResponse as xi, UsageRetrieveSummaryParams$1 as xn, AuthConfigDeleteParams as xr, Org$1 as xt, ToolRetrieveResponse as y, Auth$1 as ya, makeFiles as yi, UsageRetrieveParams$1 as yn, AuthConfigCreateParams as yr, SessionRetrieveInfoResponse as yt, CliGetSessionResponse as z, UnprocessableEntityError as za, SessionAttachResponse as zi, McpListParams as zn, ToolkitRetrieveMultiResponse as zr, ProjectCreateResponse as zt };