@composio/client 2.0.0-rc.22 → 2.0.0-rc.23

package/README.md

@@ -2,7 +2,7 @@
 
 Composio API client for TypeScript, generated from the [v3.1 OpenAPI spec](https://staging-backend.composio.dev/api/v3.1/openapi.json) with [hey-api](https://heyapi.dev).
 
-This repo is the successor to the Stainless-generated [`@composio/client`](https://www.npmjs.com/package/@composio/client) (Stainless is sunsetting). Current scope: the full `/api/v3.1` surface — all 113 released operations — in **both** languages: TypeScript at the package root, and Python in [`python/`](./python/README.md) (PyPI takeover pending).
+This repo is the successor to the Stainless-generated [`@composio/client`](https://www.npmjs.com/package/@composio/client) (Stainless is sunsetting). Current scope: the full `/api/v3.1` surface — all 114 released operations — in **both** languages: TypeScript at the package root, and Python in [`python/`](./python/README.md) (PyPI takeover pending).
 
 ## Usage
 
@@ -167,7 +167,7 @@ dependency, loads faster and spends less time per request (see [Performance](#pe
 
 The accessor chains, method names, argument order and request and response types are the root
 client's, and a call sends the same method, URL, body and headers as the root client does for the same
-input. All 113 operations of the spec are there.
+input. All 114 operations of the spec are there.
 
 ### Install
 
@@ -560,6 +560,18 @@ The opt-in records the resolved scheme, hostname, and port. Mutating `baseURL` c
 and `withOptions({ baseURL: ... })` requires `allowInsecureHTTP: true` again when the origin
 changes. Redirects to another origin remain credential-free.
 
+### Changed in 2.0.0-rc.23
+
+| Change | Migration |
+| --- | --- |
+| `client.cli.createCodactFailure` moved to `client._internal.cli.createCodactFailure` (Apollo now tags it `x-internal`) | Import `@composio/client/internal` and call it there. Its types come from `@composio/client/resources/_internal/cli`; `@composio/client/resources/cli` no longer exists. Its Effect response schema moved to `@composio/client/effect/schemas/_internal/cli/create-codact-failure`. The wire is unchanged |
+| `client.org.clanker.createClaim` is removed, with `@composio/client/resources/org/clanker` (Apollo removed `POST /api/v3.1/org/clanker/create_claim`) | None: the endpoint no longer exists |
+| `sessionConfigs.list` no longer accepts `search` (Apollo removed the filter) | Drop `search` from the query and filter the returned configs yourself |
+
+Two new internal operations are under `client._internal`: `consumer.permissions.resolve()` and
+`org.consumer.retrieveConfig()`. Each removal has a ledger entry; `search` is a `properties-removed`
+entry.
+
 ### Moved in 2.0.0-rc.22
 
 The operations the spec tags `x-internal` moved under `client._internal`, which is typed only through
@@ -574,8 +586,8 @@ The ledger declares each as a removal; `pnpm test:pack` holds the subpaths.
 | `client.org.consumer.*` | `client._internal.org.consumer.*` |
 | Their types, from `@composio/client/resources/cli`, `resources/cli/realtime`, `resources/logs`, `resources/logs/tools`, `resources/logs/triggers`, `resources/org/consumer*` | The same names from `@composio/client/resources/_internal/<same path>` |
 
-`client.cli.createCodactFailure`, `client.logs.createToolExecution` and
-`client.logs.retrieveToolExecution` are not tagged and stay where they were.
+`client.logs.createToolExecution` and `client.logs.retrieveToolExecution` are not tagged and stay
+where they were. `client.cli.createCodactFailure` stayed too, until rc.23.
 
 ### Changed in 2.0.0-rc.22
 

package/dist/{_internal-UUxDozdb.d.mts → _internal-Cw5Ug7qY.d.mts}

@@ -1355,10 +1355,6 @@ type GetApiV31SessionConfigsData = {
      * Maximum number of configs to return, from 1 to 100.
      */
     limit?: number;
-    /**
-     * Case-insensitive substring match against the config name.
-     */
-    search?: string;
     /**
      * Return archived configs when true. Defaults to active configs only.
      */
@@ -1560,6 +1556,48 @@ type PostApiV31ApiKeyRevocationResponses = {
     received: boolean;
   };
 };
+type PostApiV31ConsumerPermissionsResolveData = {
+  body?: {
+    /**
+     * Connected account nano IDs to include in resolution.
+     */
+    connected_account_ids?: Array<string>;
+    /**
+     * Optional toolkit_slug -> connected account nano ID array map. Values are flattened and merged with connected_account_ids.
+     */
+    connected_accounts?: {
+      [key: string]: Array<string>;
+    };
+    /**
+     * Optional default mode to include in the resolved tool-router permissions config.
+     */
+    default?: 'allow_all' | 'ask_every_call' | 'ask_once_per_session';
+  };
+  path?: never;
+  query?: never;
+  url: '/api/v3.1/consumer/permissions/resolve';
+};
+type PostApiV31ConsumerPermissionsResolveResponses = {
+  /**
+   * Consumer permissions resolved successfully.
+   */
+  200: {
+    experimental: {
+      permissions: {
+        /**
+         * Default elicitation behavior when no override matches. `allow_all` runs every tool without prompting; `ask_every_call` prompts on each invocation; `ask_once_per_session` prompts once and remembers the answer for the rest of the session.
+         */
+        default: 'allow_all' | 'ask_every_call' | 'ask_once_per_session';
+        /**
+         * Per-tool overrides keyed by `${toolSlug}:${connectedAccountId ?? "__none__"}`, plus account-wide overrides keyed by `*:${connectedAccountId ?? "__none__"}`. Exact tool overrides take precedence over account-wide overrides. `always_allow` skips the prompt and runs the tool; `always_deny` blocks the tool; `ask_once` prompts once per session (allow/deny) and remembers; `ask_always` prompts on every call with allow-once/allow-session/deny, ignoring any cached session allow. Overrides take precedence over `default`.
+         */
+        overrides?: {
+          [key: string]: 'always_allow' | 'always_deny' | 'ask_once' | 'ask_always';
+        };
+      };
+    };
+  };
+};
 type PostApiV31LogsToolExecutionData = {
   body?: {
     limit?: number;
@@ -2353,7 +2391,7 @@ type PostApiV31ToolsExecuteProxyData = {
      */
     connected_account_id?: string;
     /**
-     * The user id (entity id) that owns connected_account_id. When the project has 2FA enabled, it is validated against the owner of that connection. Also selects which custom toolkits the request may use.
+     * The user id (entity id) acting on connected_account_id. Required for a SHARED connection, where it is checked against the connection's ACL. When the project has 2FA enabled, it is also validated against the owner of a PRIVATE connection. Also selects which custom toolkits the request may use.
      */
     user_id?: string;
     /**
@@ -2897,30 +2935,23 @@ type PostApiV31ToolsScopesRequiredResponses = {
     }>;
   };
 };
-type PostApiV31OrgClankerCreateClaimData = {
-  body?: {
-    /**
-     * Email of the human who will claim the clanker
-     */
-    human_email: string;
-  };
-  path?: never;
-  query?: never;
-  url: '/api/v3.1/org/clanker/create_claim';
-};
-type PostApiV31OrgClankerCreateClaimResponses = {
+type GetApiV31OrgConsumerConfigResponses = {
   /**
-   * Clanker claim invite created and emailed.
+   * Consumer configuration retrieved successfully.
    */
   200: {
     /**
-     * Four-word hyphen-separated slug (e.g. "red-castle-amber-pine") the human types into /redeem_claim. Valid for 7 days, restricted to the provided email.
+     * Organization nano ID.
      */
-    claim_slug: string;
+    org_id: string;
     /**
-     * ISO timestamp when this claim slug expires.
+     * Whether the consumer experience is enabled for this project.
      */
-    expires_at: string;
+    consumer_experience_enabled?: boolean;
+    /**
+     * Whether enhanced controls are enabled for this consumer project.
+     */
+    enhanced_controls?: boolean;
   };
 };
 type PostApiV31ConnectedAccountsByNanoidRevokeResponses = {
@@ -13111,7 +13142,7 @@ type PostApiV31ConnectedAccountsData = {
        */
       experimental?: {
         /**
-         * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+         * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
          */
         account_type?: 'PRIVATE' | 'SHARED';
         /**
@@ -21356,7 +21387,7 @@ type PostApiV31ConnectedAccountsLinkData = {
      */
     experimental?: {
       /**
-       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
        */
       account_type?: 'PRIVATE' | 'SHARED';
       /**
@@ -23529,7 +23560,7 @@ type PostApiV31TriggerInstancesBySlugUpsertData = {
      */
     connected_account_id?: string;
     /**
-     * The user id (entity id) that owns the connection. When connected_account_id is omitted, the first active connection for this user and the trigger's toolkit is auto-resolved (same as tool execution). When connected_account_id is also provided and the project has 2FA enabled, user_id is validated against the owner of that connection.
+     * The user id (entity id) that owns the connection. When connected_account_id is omitted, the first active connection for this user and the trigger's toolkit is auto-resolved (same as tool execution). When connected_account_id is also provided, user_id is checked against that connection: always against a SHARED connection's ACL (user_id is then required), and against a PRIVATE connection's owner when the project has 2FA enabled.
      */
     user_id?: string;
     /**
@@ -23801,7 +23832,7 @@ type PatchApiV31TriggerInstancesManageByTriggerIdData = {
      */
     status?: 'enable' | 'disable';
     /**
-     * The user id that owns the connected account behind this trigger. Optional: when sent on a project with 2FA enabled it must be the owner of a private connection or allowed on a shared one, whatever is being updated. Required to set egress_url when 2FA is enabled. Ignored when 2FA is disabled.
+     * The user id acting on the connected account behind this trigger. On a shared connection it must be allowed by the connection ACL, and it is required to enable the trigger or set egress_url. On a private connection it must be the owner when the project has 2FA enabled, and is ignored when 2FA is disabled. Required to set egress_url when 2FA is enabled.
      */
     user_id?: string;
     /**
@@ -25012,7 +25043,7 @@ type PostApiV31ToolRouterSessionBySessionIdLinkData = {
      */
     experimental?: {
       /**
-       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly.
+       * Sharing model for this connected account. PRIVATE (default) is usable only by the owning user_id. SHARED is reachable from a tool-router session ONLY when explicitly pinned in the session config — at most one SHARED connection per toolkit per session. Sessions never use a SHARED connection implicitly. Every use of a SHARED connection must pass the acting user_id, which is checked against its ACL.
        */
       account_type?: 'PRIVATE' | 'SHARED';
       /**
@@ -26378,19 +26409,6 @@ interface Mcp {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeMcp: (client: Composio) => Mcp;
 //#endregion
-//#region src/compat/resources/cli/cli.d.ts
-type CliCreateCodactFailureBodyGen = NonNullable<PostApiV31CliCodactFailuresData['body']>;
-type CliCreateCodactFailureHeadersGen = NonNullable<PostApiV31CliCodactFailuresData['headers']>;
-interface CliCreateCodactFailureParams extends CliCreateCodactFailureBodyGen, CliCreateCodactFailureHeadersGen {}
-type CliCreateCodactFailureResponseGen = PostApiV31CliCodactFailuresResponses[200];
-interface CliCreateCodactFailureResponse extends CliCreateCodactFailureResponseGen {}
-/** `client.cli`. */
-interface Cli$1 {
-  createCodactFailure(params: CliCreateCodactFailureParams, options?: RequestOptions): APIPromise<CliCreateCodactFailureResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeCli$1: (client: Composio) => Cli$1;
-//#endregion
 //#region src/compat/resources/logs/logs.d.ts
 type LogCreateToolExecutionParamsGen = NonNullable<PostApiV31LogsToolExecutionData['body']>;
 interface LogCreateToolExecutionParams extends LogCreateToolExecutionParamsGen {}
@@ -26560,18 +26578,6 @@ interface Usage {
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeUsage: (client: Composio) => Usage;
 //#endregion
-//#region src/compat/resources/org/clanker.d.ts
-type ClankerCreateClaimParamsGen = NonNullable<PostApiV31OrgClankerCreateClaimData['body']>;
-interface ClankerCreateClaimParams extends ClankerCreateClaimParamsGen {}
-type ClankerCreateClaimResponseGen = PostApiV31OrgClankerCreateClaimResponses[200];
-interface ClankerCreateClaimResponse extends ClankerCreateClaimResponseGen {}
-/** `client.org.clanker`. */
-interface Clanker {
-  createClaim(body: ClankerCreateClaimParams, options?: RequestOptions): APIPromise<ClankerCreateClaimResponse>;
-}
-/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
-declare const makeClanker: (client: Composio) => Clanker;
-//#endregion
 //#region src/compat/resources/org/org.d.ts
 type OrgListParamsGen = NonNullable<GetApiV31OrgListData['query']>;
 interface OrgListParams extends OrgListParamsGen {}
@@ -26582,7 +26588,6 @@ interface Org$1 {
   readonly owner: Owner;
   readonly project: Project$1;
   readonly usage: Usage;
-  readonly clanker: Clanker;
   list(query?: OrgListParams | null | undefined, options?: RequestOptions): APIPromise<OrgListResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
@@ -26677,7 +26682,6 @@ interface ClientResources {
   readonly triggersTypes: TriggersTypes;
   readonly triggerInstances: TriggerInstances;
   readonly mcp: Mcp;
-  readonly cli: Cli$1;
   readonly logs: Logs$1;
   readonly project: Project$3;
   readonly webhookSubscriptions: WebhookSubscriptions;
@@ -26814,10 +26818,15 @@ interface Realtime {
 declare const makeRealtime: (client: Composio) => Realtime;
 //#endregion
 //#region src/compat/resources/_internal/cli/cli.d.ts
+type CliCreateCodactFailureBodyGen = NonNullable<PostApiV31CliCodactFailuresData['body']>;
+type CliCreateCodactFailureHeadersGen = NonNullable<PostApiV31CliCodactFailuresData['headers']>;
+interface CliCreateCodactFailureParams extends CliCreateCodactFailureBodyGen, CliCreateCodactFailureHeadersGen {}
 type CliCreateSessionParamsGen = NonNullable<PostApiV31CliCreateSessionData['body']>;
 interface CliCreateSessionParams extends CliCreateSessionParamsGen {}
 type CliGetSessionParamsGen = NonNullable<GetApiV31CliGetSessionData['query']>;
 interface CliGetSessionParams extends CliGetSessionParamsGen {}
+type CliCreateCodactFailureResponseGen = PostApiV31CliCodactFailuresResponses[200];
+interface CliCreateCodactFailureResponse extends CliCreateCodactFailureResponseGen {}
 type CliCreateSessionResponseGen = PostApiV31CliCreateSessionResponses[201];
 interface CliCreateSessionResponse extends CliCreateSessionResponseGen {}
 type CliGetSessionResponseGen = GetApiV31CliGetSessionResponses[200];
@@ -26825,12 +26834,33 @@ interface CliGetSessionResponse extends CliGetSessionResponseGen {}
 /** `client._internal.cli`. */
 interface Cli {
   readonly realtime: Realtime;
+  createCodactFailure(params: CliCreateCodactFailureParams, options?: RequestOptions): APIPromise<CliCreateCodactFailureResponse>;
   createSession(body?: CliCreateSessionParams | null | undefined, options?: RequestOptions): APIPromise<CliCreateSessionResponse>;
   getSession(query: CliGetSessionParams, options?: RequestOptions): APIPromise<CliGetSessionResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeCli: (client: Composio) => Cli;
 //#endregion
+//#region src/compat/resources/_internal/consumer/permissions.d.ts
+type PermissionsResolveParamsGen = NonNullable<PostApiV31ConsumerPermissionsResolveData['body']>;
+interface PermissionsResolveParams extends PermissionsResolveParamsGen {}
+type PermissionsResolveResponseGen = PostApiV31ConsumerPermissionsResolveResponses[200];
+interface PermissionsResolveResponse extends PermissionsResolveResponseGen {}
+/** `client._internal.consumer.permissions`. */
+interface Permissions {
+  resolve(body?: PermissionsResolveParams | null | undefined, options?: RequestOptions): APIPromise<PermissionsResolveResponse>;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makePermissions: (client: Composio) => Permissions;
+//#endregion
+//#region src/compat/resources/_internal/consumer/consumer.d.ts
+/** `client._internal.consumer`. */
+interface Consumer$1 {
+  readonly permissions: Permissions;
+}
+/** @internal Builds the resource over a client; `new Composio(...)` calls it. */
+declare const makeConsumer$1: (client: Composio) => Consumer$1;
+//#endregion
 //#region src/compat/resources/_internal/logs/triggers.d.ts
 type TriggerListParamsGen = NonNullable<PostApiV31InternalTriggerLogsData['body']>;
 interface TriggerListParams extends TriggerListParamsGen {}
@@ -26859,6 +26889,7 @@ interface ToolListFieldsResponse extends ToolListFieldsResponseGen {}
 /** `client._internal.logs.tools`. */
 interface Tools {
   retrieve(id: string, options?: RequestOptions): APIPromise<ToolRetrieveResponse>;
+  /** @deprecated Deprecated in the input OpenAPI schema. */
   list(body: ToolListParams, options?: RequestOptions): APIPromise<ToolListResponse>;
   /** @deprecated Deprecated in the input OpenAPI schema. */
   listFields(options?: RequestOptions): APIPromise<ToolListFieldsResponse>;
@@ -26893,10 +26924,13 @@ type ConsumerListConnectedToolkitsHeadersGen = NonNullable<GetApiV31OrgConsumerC
 interface ConsumerListConnectedToolkitsParams extends ConsumerListConnectedToolkitsQueryGen, ConsumerListConnectedToolkitsHeadersGen {}
 type ConsumerListConnectedToolkitsResponseGen = GetApiV31OrgConsumerConnectedToolkitsResponses[200];
 interface ConsumerListConnectedToolkitsResponse extends ConsumerListConnectedToolkitsResponseGen {}
+type ConsumerRetrieveConfigResponseGen = GetApiV31OrgConsumerConfigResponses[200];
+interface ConsumerRetrieveConfigResponse extends ConsumerRetrieveConfigResponseGen {}
 /** `client._internal.org.consumer`. */
 interface Consumer {
   readonly project: Project;
   listConnectedToolkits(params: ConsumerListConnectedToolkitsParams, options?: RequestOptions): APIPromise<ConsumerListConnectedToolkitsResponse>;
+  retrieveConfig(options?: RequestOptions): APIPromise<ConsumerRetrieveConfigResponse>;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeConsumer: (client: Composio) => Consumer;
@@ -26913,10 +26947,11 @@ declare const makeOrg: (client: Composio) => Org;
 /** `client._internal`. */
 interface Internal {
   readonly cli: Cli;
+  readonly consumer: Consumer$1;
   readonly logs: Logs;
   readonly org: Org;
 }
 /** @internal Builds the resource over a client; `new Composio(...)` calls it. */
 declare const makeInternal: (client: Composio) => Internal;
 //#endregion
-export { CustomSyncResponse as $, SessionProxyExecuteResponse as $i, makeCustom$1 as $n, ConnectedAccountDeleteParams as $r, WebhookSubscriptionCreateParams as $t, CliGetSessionResponse as A, AuthenticationError as Aa, ToolRetrieveRequiredScopesResponse as Ai, McpCreateInstanceResponse as An, makeAuthConfigs as Ar, Owner as At, LogLevel as B, FetchTransportDefaults as Ba, SessionConfigHistoryResponse as Bi, McpRetrieveAppParams as Bn, ToolkitRetrieveResponse as Br, ProjectRetrieveResponse as Bt, TriggerRetrieveResponse as C, Credential as Ca, ToolListParams$1 as Ci, makeLogs$1 as Cn, AuthConfigListResponse as Cr, UsageRetrieveSummaryParams as Ct, CliCreateSessionParams as D, APIError as Da, ToolRetrieveEnumResponse as Di, makeCli$1 as Dn, AuthConfigUpdateStatusParams as Dr, ProjectListParams as Dt, Cli as E, APIConnectionTimeoutError as Ea, ToolProxyResponse as Ei, CliCreateCodactFailureResponse as En, AuthConfigUpdateResponse as Er, Project$1 as Et, RealtimeCredentialsResponse as F, NotFoundError as Fa, makeToolRouter as Fi, McpDeleteResponse as Fn, ToolkitRetrieveCategoriesResponse as Fr, ProjectDeleteParams as Ft, makeSessionConfigs as G, APIPromise as Ga, SessionExecuteMetaResponse as Gi, makeMcp as Gn, Link as Gr, WebhookEndpointListResponse as Gt, SessionConfigsListParams as H, createFetchTransport as Ha, SessionCreateResponse as Hi, McpRetrieveResponse as Hn, ToolkitRetrieveScopesGrantContextResponse as Hr, WebhookEndpointCreateParams as Ht, makeRealtime as I, PermissionDeniedError as Ia, Session$1 as Ii, McpListInstancesParams as In, ToolkitRetrieveChangelogResponse as Ir, ProjectDeleteResponse as It, makeKeyring as J, SessionLinkParams as Ji, GenerateURLResponse as Jn, makeLink as Jr, WebhookEndpointRetrieveResponse as Jt, Keyring as K, SessionExecuteParams as Ki, Generate as Kn, LinkCreateParams as Kr, WebhookEndpointReplaceParams as Kt, ClientOptions as L, RateLimitError as La, SessionAttachParams as Li, McpListInstancesResponse as Ln, ToolkitRetrieveMultiParams as Lr, ProjectListParams$1 as Lt, Realtime as M, ComposioError as Ma, Tools$1 as Mi, McpCreateResponse as Mn, ToolkitListResponse as Mr, Project$2 as Mt, RealtimeAuthParams as N, ConflictError as Na, makeTools$1 as Ni, McpDeleteInstanceParams as Nn, ToolkitRecommendScopesParams as Nr, ProjectCreateParams as Nt, CliCreateSessionResponse as O, APIErrorBody as Oa, ToolRetrieveParams as Oi, Mcp as On, AuthConfigUpdateStatusResponse as Or, ProjectListResponse as Ot, RealtimeAuthResponse as P, InternalServerError as Pa, ToolRouter as Pi, McpDeleteInstanceResponse as Pn, ToolkitRecommendScopesResponse as Pr, ProjectCreateResponse as Pt, CustomSyncParams as Q, SessionProxyExecuteParams as Qi, CustomCreateResponse as Qn, ConnectedAccountCreateResponse as Qr, makeWebhookEndpoints as Qt, Composio as R, UnprocessableEntityError as Ra, SessionAttachResponse as Ri, McpListParams as Rn, ToolkitRetrieveMultiResponse as Rr, ProjectListResponse$1 as Rt, TriggerListResponse as S, AutoCredentials as Sa, ToolGetInputResponse as Si, Logs$1 as Sn, AuthConfigListParams as Sr, UsageRetrieveResponse as St, makeTriggers as T, APIConnectionError as Ta, ToolProxyParams as Ti, CliCreateCodactFailureParams as Tn, AuthConfigUpdateParams as Tr, makeUsage as Tt, SessionConfigsListResponse as U, ClientIdentity as Ua, SessionDeleteResponse as Ui, McpUpdateParams as Un, Toolkits as Ur, WebhookEndpointCreateResponse as Ut, SessionConfigs as V, Transport as Va, SessionCreateParams as Vi, McpRetrieveAppResponse as Vn, ToolkitRetrieveScopesGrantContextParams as Vr, makeProject$2 as Vt, SessionConfigsRetrieveResponse as W, HeadersLike as Wa, SessionExecuteMetaParams as Wi, McpUpdateResponse as Wn, makeToolkits as Wr, WebhookEndpointListParams as Wt, CustomDeleteToolkitParams as X, SessionPatchParams as Xi, Custom$1 as Xn, ConnectedAccountCompleteAuthResponse as Xr, WebhookEndpointUpdateResponse as Xt, Custom as Y, SessionLinkResponse as Yi, makeGenerate as Yn, ConnectedAccountCompleteAuthParams as Yr, WebhookEndpointUpdateParams as Yt, CustomDeleteToolkitResponse as Z, SessionPatchResponse as Zi, CustomCreateParams as Zn, ConnectedAccountCreateParams as Zr, WebhookEndpoints as Zt, ToolListResponse as _, makeFiles$1 as _a, Files as _i, UsageRetrieveSummaryResponse$1 as _n, makeTriggersTypes as _r, ClankerCreateClaimParams as _t, Consumer as a, SessionToolsParams as aa, ConnectedAccountRefreshParams as ai, WebhookSubscriptionRetrieveResponse as an, makeTriggerInstances as ar, ApiKeyRevocationCreateResponse as at, makeTools as b, AuthMode as ba, ToolExecuteResponse as bi, LogCreateToolExecutionResponse as bn, AuthConfigDeleteParams as br, Usage as bt, makeConsumer as c, FileCreateDownloadURLParams as ca, ConnectedAccountRevokeResponse as ci, WebhookSubscriptionUpdateResponse as cn, ManageUpdateParams as cr, makeAuth as ct, ProjectResolveResponse as d, FileCreateUploadURLResponse as da, ConnectedAccounts as di, Project$3 as dn, TriggersTypeListParams as dr, makeSession as dt, SessionRetrieveResponse as ea, ConnectedAccountDeleteResponse as ei, WebhookSubscriptionCreateResponse as en, TriggerInstanceListActiveParams as er, CustomUpsertParams as et, makeProject as f, FileDeleteParams as fa, makeConnectedAccounts as fi, makeProject$3 as fn, TriggersTypeListResponse as fr, Org$1 as ft, ToolListParams as g, Files$1 as ga, FileListResponse as gi, UsageRetrieveSummaryParams$1 as gn, TriggersTypes as gr, Clanker as gt, ToolListFieldsResponse as h, FileListResponse$1 as ha, FileListParams as hi, UsageRetrieveResponse$1 as hn, TriggersTypeRetrieveResponse as hr, makeOrg$1 as ht, makeOrg as i, SessionToolkitsResponse as ia, ConnectedAccountPatchResponse as ii, WebhookSubscriptionListResponse as in, TriggerInstances as ir, ApiKeyRevocationCreateParams as it, makeCli as j, BadRequestError as ja, ToolRetrieveResponse$1 as ji, McpCreateParams as jn, ToolkitListParams as jr, makeOwner as jt, CliGetSessionParams as k, APIUserAbortError as ka, ToolRetrieveRequiredScopesParams as ki, McpCreateInstanceParams as kn, AuthConfigs as kr, makeProject$1 as kt, Project as l, FileCreateDownloadURLResponse as la, ConnectedAccountUpdateStatusParams as li, WebhookSubscriptions as ln, ManageUpdateResponse as lr, Session as lt, makeLogs as m, FileListParams$1 as ma, FileCreatePresignedURLResponse as mi, UsageRetrieveParams$1 as mn, TriggersTypeRetrieveParams as mr, OrgListResponse as mt, makeInternal as n, SessionSearchResponse as na, ConnectedAccountListResponse as ni, WebhookSubscriptionListEventTypesResponse as nn, TriggerInstanceUpsertParams as nr, makeCustom as nt, ConsumerListConnectedToolkitsParams as o, SessionToolsResponse as oa, ConnectedAccountRefreshResponse as oi, WebhookSubscriptionRotateSecretResponse as on, Manage as or, makeApiKeyRevocation as ot, Logs as p, FileDeleteResponse as pa, FileCreatePresignedURLParams as pi, Usage$1 as pn, TriggersTypeRetrieveEnumResponse as pr, OrgListParams as pt, KeyringListTransferKeysResponse as q, SessionExecuteResponse as qi, GenerateURLParams as qn, LinkCreateResponse as qr, WebhookEndpointReplaceResponse as qt, Org as r, SessionToolkitsParams as ra, ConnectedAccountPatchParams as ri, WebhookSubscriptionListParams as rn, TriggerInstanceUpsertResponse as rr, ApiKeyRevocation as rt, ConsumerListConnectedToolkitsResponse as s, makeSession$1 as sa, ConnectedAccountRetrieveResponse as si, WebhookSubscriptionUpdateParams as sn, ManageDeleteResponse as sr, Auth as st, Internal as t, SessionSearchParams as ta, ConnectedAccountListParams as ti, WebhookSubscriptionDeleteResponse as tn, TriggerInstanceListActiveResponse as tr, CustomUpsertResponse as tt, ProjectResolveParams as u, FileCreateUploadURLParams as ua, ConnectedAccountUpdateStatusResponse as ui, makeWebhookSubscriptions as un, makeManage as ur, SessionRetrieveInfoResponse as ut, ToolRetrieveResponse as v, Auth$1 as va, makeFiles as vi, makeUsage$1 as vn, AuthConfigCreateParams as vr, ClankerCreateClaimResponse as vt, Triggers as w, Scope as wa, ToolListResponse$1 as wi, Cli$1 as wn, AuthConfigRetrieveResponse as wr, UsageRetrieveSummaryResponse as wt, TriggerListParams as x, AuthOf as xa, ToolGetInputParams as xi, LogRetrieveToolExecutionResponse as xn, AuthConfigDeleteResponse as xr, UsageRetrieveParams as xt, Tools as y, AuthConstructors as ya, ToolExecuteParams as yi, LogCreateToolExecutionParams as yn, AuthConfigCreateResponse as yr, makeClanker as yt, EnvironmentMap as z, RequestOptions as za, SessionConfigHistoryParams as zi, McpListResponse as zn, ToolkitRetrieveParams as zr, ProjectRegenerateAPIKeyResponse as zt };
+export { SessionConfigsRetrieveResponse as $, SessionProxyExecuteParams as $i, CustomCreateResponse as $n, ConnectedAccountCreateResponse as $r, WebhookEndpointRetrieveResponse as $t, PermissionsResolveParams as A, APIUserAbortError as Aa, ToolRetrieveRequiredScopesParams as Ai, McpCreateInstanceParams as An, AuthConfigs as Ar, makeUsage as At, makeCli as B, RequestOptions as Ba, SessionConfigHistoryParams as Bi, McpListResponse as Bn, ToolkitRetrieveParams as Br, ProjectDeleteParams as Bt, TriggerListResponse as C, AutoCredentials as Ca, ToolGetInputResponse as Ci, makeUsage$1 as Cn, AuthConfigListParams as Cr, OrgListResponse as Ct, Consumer$1 as D, APIConnectionTimeoutError as Da, ToolProxyResponse as Di, Logs$1 as Dn, AuthConfigUpdateResponse as Dr, UsageRetrieveResponse as Dt, makeTriggers as E, APIConnectionError as Ea, ToolProxyParams as Ei, LogRetrieveToolExecutionResponse as En, AuthConfigUpdateParams as Er, UsageRetrieveParams as Et, CliCreateCodactFailureResponse as F, InternalServerError as Fa, ToolRouter as Fi, McpDeleteInstanceResponse as Fn, ToolkitRecommendScopesResponse as Fr, Owner as Ft, makeRealtime as G, HeadersLike as Ga, SessionExecuteMetaParams as Gi, McpUpdateResponse as Gn, makeToolkits as Gr, ProjectRetrieveResponse as Gt, RealtimeAuthParams as H, Transport as Ha, SessionCreateParams as Hi, McpRetrieveAppResponse as Hn, ToolkitRetrieveScopesGrantContextParams as Hr, ProjectListParams$1 as Ht, CliCreateSessionParams as I, NotFoundError as Ia, makeToolRouter as Ii, McpDeleteResponse as In, ToolkitRetrieveCategoriesResponse as Ir, makeOwner as It, EnvironmentMap as J, SessionExecuteResponse as Ji, GenerateURLParams as Jn, LinkCreateResponse as Jr, WebhookEndpointCreateResponse as Jt, ClientOptions as K, APIPromise as Ka, SessionExecuteMetaResponse as Ki, makeMcp as Kn, Link as Kr, makeProject$2 as Kt, CliCreateSessionResponse as L, PermissionDeniedError as La, Session$1 as Li, McpListInstancesParams as Ln, ToolkitRetrieveChangelogResponse as Lr, Project$2 as Lt, makePermissions as M, BadRequestError as Ma, ToolRetrieveResponse$1 as Mi, McpCreateParams as Mn, ToolkitListParams as Mr, ProjectListParams as Mt, Cli as N, ComposioError as Na, Tools$1 as Ni, McpCreateResponse as Nn, ToolkitListResponse as Nr, ProjectListResponse as Nt, makeConsumer$1 as O, APIError as Oa, ToolRetrieveEnumResponse as Oi, makeLogs$1 as On, AuthConfigUpdateStatusParams as Or, UsageRetrieveSummaryParams as Ot, CliCreateCodactFailureParams as P, ConflictError as Pa, makeTools$1 as Pi, McpDeleteInstanceParams as Pn, ToolkitRecommendScopesParams as Pr, makeProject$1 as Pt, SessionConfigsListResponse as Q, SessionPatchResponse as Qi, CustomCreateParams as Qn, ConnectedAccountCreateParams as Qr, WebhookEndpointReplaceResponse as Qt, CliGetSessionParams as R, RateLimitError as Ra, SessionAttachParams as Ri, McpListInstancesResponse as Rn, ToolkitRetrieveMultiParams as Rr, ProjectCreateParams as Rt, TriggerListParams as S, AuthOf as Sa, ToolGetInputParams as Si, UsageRetrieveSummaryResponse$1 as Sn, AuthConfigDeleteResponse as Sr, OrgListParams as St, Triggers as T, Scope as Ta, ToolListResponse$1 as Ti, LogCreateToolExecutionResponse as Tn, AuthConfigRetrieveResponse as Tr, Usage as Tt, RealtimeAuthResponse as U, createFetchTransport as Ua, SessionCreateResponse as Ui, McpRetrieveResponse as Un, ToolkitRetrieveScopesGrantContextResponse as Ur, ProjectListResponse$1 as Ut, Realtime as V, FetchTransportDefaults as Va, SessionConfigHistoryResponse as Vi, McpRetrieveAppParams as Vn, ToolkitRetrieveResponse as Vr, ProjectDeleteResponse as Vt, RealtimeCredentialsResponse as W, ClientIdentity as Wa, SessionDeleteResponse as Wi, McpUpdateParams as Wn, Toolkits as Wr, ProjectRegenerateAPIKeyResponse as Wt, SessionConfigs as X, SessionLinkResponse as Xi, makeGenerate as Xn, ConnectedAccountCompleteAuthParams as Xr, WebhookEndpointListResponse as Xt, LogLevel as Y, SessionLinkParams as Yi, GenerateURLResponse as Yn, makeLink as Yr, WebhookEndpointListParams as Yt, SessionConfigsListParams as Z, SessionPatchParams as Zi, Custom$1 as Zn, ConnectedAccountCompleteAuthResponse as Zr, WebhookEndpointReplaceParams as Zt, ToolListParams as _, Files$1 as _a, FileListResponse as _i, makeProject$3 as _n, TriggersTypes as _r, makeAuth as _t, Consumer as a, SessionToolkitsResponse as aa, ConnectedAccountPatchResponse as ai, WebhookSubscriptionCreateResponse as an, TriggerInstances as ar, CustomDeleteToolkitParams as at, Tools as b, AuthConstructors as ba, ToolExecuteParams as bi, UsageRetrieveResponse$1 as bn, AuthConfigCreateResponse as br, makeSession as bt, ConsumerRetrieveConfigResponse as c, makeSession$1 as ca, ConnectedAccountRetrieveResponse as ci, WebhookSubscriptionListParams as cn, ManageDeleteResponse as cr, CustomSyncResponse as ct, ProjectResolveParams as d, FileCreateUploadURLParams as da, ConnectedAccountUpdateStatusResponse as di, WebhookSubscriptionRotateSecretResponse as dn, makeManage as dr, makeCustom as dt, SessionProxyExecuteResponse as ea, ConnectedAccountDeleteParams as ei, WebhookEndpointUpdateParams as en, makeCustom$1 as er, makeSessionConfigs as et, ProjectResolveResponse as f, FileCreateUploadURLResponse as fa, ConnectedAccounts as fi, WebhookSubscriptionUpdateParams as fn, TriggersTypeListParams as fr, ApiKeyRevocation as ft, ToolListFieldsResponse as g, FileListResponse$1 as ga, FileListParams as gi, Project$3 as gn, TriggersTypeRetrieveResponse as gr, Auth as gt, makeLogs as h, FileListParams$1 as ha, FileCreatePresignedURLResponse as hi, makeWebhookSubscriptions as hn, TriggersTypeRetrieveParams as hr, makeApiKeyRevocation as ht, makeOrg as i, SessionToolkitsParams as ia, ConnectedAccountPatchParams as ii, WebhookSubscriptionCreateParams as in, TriggerInstanceUpsertResponse as ir, Custom as it, PermissionsResolveResponse as j, AuthenticationError as ja, ToolRetrieveRequiredScopesResponse as ji, McpCreateInstanceResponse as jn, makeAuthConfigs as jr, Project$1 as jt, Permissions as k, APIErrorBody as ka, ToolRetrieveParams as ki, Mcp as kn, AuthConfigUpdateStatusResponse as kr, UsageRetrieveSummaryResponse as kt, makeConsumer as l, FileCreateDownloadURLParams as la, ConnectedAccountRevokeResponse as li, WebhookSubscriptionListResponse as ln, ManageUpdateParams as lr, CustomUpsertParams as lt, Logs as m, FileDeleteResponse as ma, FileCreatePresignedURLParams as mi, WebhookSubscriptions as mn, TriggersTypeRetrieveEnumResponse as mr, ApiKeyRevocationCreateResponse as mt, makeInternal as n, SessionSearchParams as na, ConnectedAccountListParams as ni, WebhookEndpoints as nn, TriggerInstanceListActiveResponse as nr, KeyringListTransferKeysResponse as nt, ConsumerListConnectedToolkitsParams as o, SessionToolsParams as oa, ConnectedAccountRefreshParams as oi, WebhookSubscriptionDeleteResponse as on, makeTriggerInstances as or, CustomDeleteToolkitResponse as ot, makeProject as p, FileDeleteParams as pa, makeConnectedAccounts as pi, WebhookSubscriptionUpdateResponse as pn, TriggersTypeListResponse as pr, ApiKeyRevocationCreateParams as pt, Composio as q, SessionExecuteParams as qi, Generate as qn, LinkCreateParams as qr, WebhookEndpointCreateParams as qt, Org as r, SessionSearchResponse as ra, ConnectedAccountListResponse as ri, makeWebhookEndpoints as rn, TriggerInstanceUpsertParams as rr, makeKeyring as rt, ConsumerListConnectedToolkitsResponse as s, SessionToolsResponse as sa, ConnectedAccountRefreshResponse as si, WebhookSubscriptionListEventTypesResponse as sn, Manage as sr, CustomSyncParams as st, Internal as t, SessionRetrieveResponse as ta, ConnectedAccountDeleteResponse as ti, WebhookEndpointUpdateResponse as tn, TriggerInstanceListActiveParams as tr, Keyring as tt, Project as u, FileCreateDownloadURLResponse as ua, ConnectedAccountUpdateStatusParams as ui, WebhookSubscriptionRetrieveResponse as un, ManageUpdateResponse as ur, CustomUpsertResponse as ut, ToolListResponse as v, makeFiles$1 as va, Files as vi, Usage$1 as vn, makeTriggersTypes as vr, Session as vt, TriggerRetrieveResponse as w, Credential as wa, ToolListParams$1 as wi, LogCreateToolExecutionParams as wn, AuthConfigListResponse as wr, makeOrg$1 as wt, makeTools as x, AuthMode as xa, ToolExecuteResponse as xi, UsageRetrieveSummaryParams$1 as xn, AuthConfigDeleteParams as xr, Org$1 as xt, ToolRetrieveResponse as y, Auth$1 as ya, makeFiles as yi, UsageRetrieveParams$1 as yn, AuthConfigCreateParams as yr, SessionRetrieveInfoResponse as yt, CliGetSessionResponse as z, UnprocessableEntityError as za, SessionAttachResponse as zi, McpListParams as zn, ToolkitRetrieveMultiResponse as zr, ProjectCreateResponse as zt };

package/dist/{_internal-7BQNRB9A.d.mts → _internal-ttfqtnVb.d.mts}

@@ -1,4 +1,4 @@
-import { A as CliGetSessionResponse, C as TriggerRetrieveResponse, D as CliCreateSessionParams, F as RealtimeCredentialsResponse, N as RealtimeAuthParams, O as CliCreateSessionResponse, Oa as APIErrorBody, P as RealtimeAuthResponse, S as TriggerListResponse, Wa as HeadersLike, _ as ToolListResponse, d as ProjectResolveResponse, g as ToolListParams, h as ToolListFieldsResponse, k as CliGetSessionParams, o as ConsumerListConnectedToolkitsParams, s as ConsumerListConnectedToolkitsResponse, u as ProjectResolveParams, v as ToolRetrieveResponse, x as TriggerListParams, xa as AuthOf } from "./_internal-UUxDozdb.mjs";
+import { A as PermissionsResolveParams, C as TriggerListResponse, F as CliCreateCodactFailureResponse, Ga as HeadersLike, H as RealtimeAuthParams, I as CliCreateSessionParams, L as CliCreateSessionResponse, P as CliCreateCodactFailureParams, R as CliGetSessionParams, S as TriggerListParams, Sa as AuthOf, U as RealtimeAuthResponse, W as RealtimeCredentialsResponse, _ as ToolListParams, c as ConsumerRetrieveConfigResponse, d as ProjectResolveParams, f as ProjectResolveResponse, g as ToolListFieldsResponse, j as PermissionsResolveResponse, ka as APIErrorBody, o as ConsumerListConnectedToolkitsParams, s as ConsumerListConnectedToolkitsResponse, v as ToolListResponse, w as TriggerRetrieveResponse, y as ToolRetrieveResponse, z as CliGetSessionResponse } from "./_internal-Cw5Ug7qY.mjs";
 import { Effect, Redacted } from "effect";
 import "effect/http/HttpClient";
 import * as Schema from "effect/Schema";
@@ -207,10 +207,23 @@ interface Realtime {
 /** `client._internal.cli` on the Effect surface. */
 interface Cli {
   readonly realtime: Realtime;
+  readonly createCodactFailure: (params: CliCreateCodactFailureParams, options?: RequestOptions) => Effect.Effect<CliCreateCodactFailureResponse, ComposioError>;
   readonly createSession: (body?: CliCreateSessionParams | null | undefined, options?: RequestOptions) => Effect.Effect<CliCreateSessionResponse, ComposioError>;
   readonly getSession: (query: CliGetSessionParams, options?: RequestOptions) => Effect.Effect<CliGetSessionResponse, ComposioError>;
 }
 //#endregion
+//#region src/effect/generated/resources/_internal/consumer/permissions.d.ts
+/** `client._internal.consumer.permissions` on the Effect surface. */
+interface Permissions {
+  readonly resolve: (body?: PermissionsResolveParams | null | undefined, options?: RequestOptions) => Effect.Effect<PermissionsResolveResponse, ComposioError>;
+}
+//#endregion
+//#region src/effect/generated/resources/_internal/consumer/consumer.d.ts
+/** `client._internal.consumer` on the Effect surface. */
+interface Consumer$1 {
+  readonly permissions: Permissions;
+}
+//#endregion
 //#region src/effect/generated/resources/_internal/logs/triggers.d.ts
 /** `client._internal.logs.triggers` on the Effect surface. */
 interface Triggers {
@@ -223,6 +236,7 @@ interface Triggers {
 /** `client._internal.logs.tools` on the Effect surface. */
 interface Tools {
   readonly retrieve: (id: string, options?: RequestOptions) => Effect.Effect<ToolRetrieveResponse, ComposioError>;
+  /** @deprecated Deprecated in the input OpenAPI schema. */
   readonly list: (body: ToolListParams, options?: RequestOptions) => Effect.Effect<ToolListResponse, ComposioError>;
   /** @deprecated Deprecated in the input OpenAPI schema. */
   readonly listFields: (options?: RequestOptions) => Effect.Effect<ToolListFieldsResponse, ComposioError>;
@@ -246,6 +260,7 @@ interface Project {
 interface Consumer {
   readonly project: Project;
   readonly listConnectedToolkits: (params: ConsumerListConnectedToolkitsParams, options?: RequestOptions) => Effect.Effect<ConsumerListConnectedToolkitsResponse, ComposioError>;
+  readonly retrieveConfig: (options?: RequestOptions) => Effect.Effect<ConsumerRetrieveConfigResponse, ComposioError>;
 }
 //#endregion
 //#region src/effect/generated/resources/_internal/org/org.d.ts
@@ -258,6 +273,7 @@ interface Org {
 /** `client._internal` on the Effect surface. */
 interface Internal {
   readonly cli: Cli;
+  readonly consumer: Consumer$1;
   readonly logs: Logs;
   readonly org: Org;
 }

package/dist/effect/internal.d.mts

@@ -1,4 +1,4 @@
-import { t as Internal } from "../_internal-7BQNRB9A.mjs";
+import { t as Internal } from "../_internal-ttfqtnVb.mjs";
 //#region src/effect/internal.d.ts
 declare module '@composio/client/effect' {
   interface ComposioClientShape {

package/dist/effect/schemas/{cli → _internal/cli}/create-codact-failure.d.mts

@@ -1,6 +1,6 @@
 import * as Schema from "effect/Schema";
-//#region src/effect/generated/schemas/cli/create-codact-failure.d.ts
-/** The 200 response of `POST /api/v3.1/cli/codact_failures`, which `client.cli.createCodactFailure` answers with. */
+//#region src/effect/generated/schemas/_internal/cli/create-codact-failure.d.ts
+/** The 200 response of `POST /api/v3.1/cli/codact_failures`, which `client._internal.cli.createCodactFailure` answers with. */
 declare const CliCreateCodactFailureResponse: Schema.StructWithRest<Schema.Struct<{
   readonly tracked: Schema.Boolean;
   readonly id: Schema.String;

package/dist/effect/schemas/{cli → _internal/cli}/create-codact-failure.mjs

@@ -1,7 +1,7 @@
 import * as Schema from "effect/Schema";
 
-//#region src/effect/generated/schemas/cli/create-codact-failure.ts
-/** The 200 response of `POST /api/v3.1/cli/codact_failures`, which `client.cli.createCodactFailure` answers with. */
+//#region src/effect/generated/schemas/_internal/cli/create-codact-failure.ts
+/** The 200 response of `POST /api/v3.1/cli/codact_failures`, which `client._internal.cli.createCodactFailure` answers with. */
 const CliCreateCodactFailureResponse = Schema.StructWithRest(Schema.Struct({
 	"tracked": Schema.Boolean.annotate({
 		"description": "Whether the codact failure row was accepted for storage.",

package/dist/effect/schemas/_internal/consumer/permissions/resolve.d.mts

@@ -0,0 +1,13 @@
+import * as Schema from "effect/Schema";
+//#region src/effect/generated/schemas/_internal/consumer/permissions/resolve.d.ts
+/** The 200 response of `POST /api/v3.1/consumer/permissions/resolve`, which `client._internal.consumer.permissions.resolve` answers with. */
+declare const PermissionsResolveResponse: Schema.StructWithRest<Schema.Struct<{
+  readonly experimental: Schema.StructWithRest<Schema.Struct<{
+    readonly permissions: Schema.StructWithRest<Schema.Struct<{
+      readonly default: Schema.Literals<readonly ["allow_all", "ask_every_call", "ask_once_per_session"]>;
+      readonly overrides: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Literals<readonly ["always_allow", "always_deny", "ask_once", "ask_always"]>>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+//#endregion
+export { PermissionsResolveResponse };

package/dist/effect/schemas/_internal/consumer/permissions/resolve.mjs

@@ -0,0 +1,20 @@
+import * as Schema from "effect/Schema";
+
+//#region src/effect/generated/schemas/_internal/consumer/permissions/resolve.ts
+/** The 200 response of `POST /api/v3.1/consumer/permissions/resolve`, which `client._internal.consumer.permissions.resolve` answers with. */
+const PermissionsResolveResponse = Schema.StructWithRest(Schema.Struct({ "experimental": Schema.StructWithRest(Schema.Struct({ "permissions": Schema.StructWithRest(Schema.Struct({
+	"default": Schema.Literals([
+		"allow_all",
+		"ask_every_call",
+		"ask_once_per_session"
+	]).annotate({ "description": "Default elicitation behavior when no override matches. `allow_all` runs every tool without prompting; `ask_every_call` prompts on each invocation; `ask_once_per_session` prompts once and remembers the answer for the rest of the session." }),
+	"overrides": Schema.optionalKey(Schema.Record(Schema.String, Schema.Literals([
+		"always_allow",
+		"always_deny",
+		"ask_once",
+		"ask_always"
+	])).annotate({ "description": "Per-tool overrides keyed by `${toolSlug}:${connectedAccountId ?? \"__none__\"}`, plus account-wide overrides keyed by `*:${connectedAccountId ?? \"__none__\"}`. Exact tool overrides take precedence over account-wide overrides. `always_allow` skips the prompt and runs the tool; `always_deny` blocks the tool; `ask_once` prompts once per session (allow/deny) and remembers; `ask_always` prompts on every call with allow-once/allow-session/deny, ignoring any cached session allow. Overrides take precedence over `default`." }))
+}), [Schema.Record(Schema.String, Schema.Json.annotate({ "expected": "JSON value" }))]) }), [Schema.Record(Schema.String, Schema.Json.annotate({ "expected": "JSON value" }))]) }), [Schema.Record(Schema.String, Schema.Json.annotate({ "expected": "JSON value" }))]);
+
+//#endregion
+export { PermissionsResolveResponse };

package/dist/effect/schemas/_internal/org/consumer/retrieve-config.d.mts

@@ -0,0 +1,10 @@
+import * as Schema from "effect/Schema";
+//#region src/effect/generated/schemas/_internal/org/consumer/retrieve-config.d.ts
+/** The 200 response of `GET /api/v3.1/org/consumer/config`, which `client._internal.org.consumer.retrieveConfig` answers with. */
+declare const ConsumerRetrieveConfigResponse: Schema.StructWithRest<Schema.Struct<{
+  readonly org_id: Schema.String;
+  readonly consumer_experience_enabled: Schema.optionalKey<Schema.Boolean>;
+  readonly enhanced_controls: Schema.optionalKey<Schema.Boolean>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+//#endregion
+export { ConsumerRetrieveConfigResponse };

package/dist/effect/schemas/_internal/org/consumer/retrieve-config.mjs

@@ -0,0 +1,18 @@
+import * as Schema from "effect/Schema";
+
+//#region src/effect/generated/schemas/_internal/org/consumer/retrieve-config.ts
+/** The 200 response of `GET /api/v3.1/org/consumer/config`, which `client._internal.org.consumer.retrieveConfig` answers with. */
+const ConsumerRetrieveConfigResponse = Schema.StructWithRest(Schema.Struct({
+	"org_id": Schema.String.annotate({ "description": "Organization nano ID." }),
+	"consumer_experience_enabled": Schema.optionalKey(Schema.Boolean.annotate({
+		"description": "Whether the consumer experience is enabled for this project.",
+		"default": true
+	})),
+	"enhanced_controls": Schema.optionalKey(Schema.Boolean.annotate({
+		"description": "Whether enhanced controls are enabled for this consumer project.",
+		"default": false
+	}))
+}), [Schema.Record(Schema.String, Schema.Json.annotate({ "expected": "JSON value" }))]);
+
+//#endregion
+export { ConsumerRetrieveConfigResponse };

package/dist/effect/schemas.d.mts

@@ -13,6 +13,10 @@ import * as Schema from "effect/Schema";
  * schema it loads: that is what the type test compares with the response type the call returns.
  */
 declare const schemaLoaders: {
+  '_internal.cli.createCodactFailure': () => Promise<Schema.StructWithRest<Schema.Struct<{
+    readonly tracked: Schema.Boolean;
+    readonly id: Schema.String;
+  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
   '_internal.cli.createSession': () => Promise<Schema.StructWithRest<Schema.Struct<{
     readonly id: Schema.String;
     readonly code: Schema.String;
@@ -42,6 +46,14 @@ declare const schemaLoaders: {
     readonly pusher_cluster: Schema.String;
     readonly project_id: Schema.String;
   }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+  '_internal.consumer.permissions.resolve': () => Promise<Schema.StructWithRest<Schema.Struct<{
+    readonly experimental: Schema.StructWithRest<Schema.Struct<{
+      readonly permissions: Schema.StructWithRest<Schema.Struct<{
+        readonly default: Schema.Literals<readonly ["allow_all", "ask_every_call", "ask_once_per_session"]>;
+        readonly overrides: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Literals<readonly ["always_allow", "always_deny", "ask_once", "ask_always"]>>>;
+      }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>;
+  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
   '_internal.logs.tools.list': () => Promise<Schema.StructWithRest<Schema.Struct<{
     readonly data: Schema.$Array<Schema.StructWithRest<Schema.Struct<{
       readonly id: Schema.String;
@@ -203,6 +215,11 @@ declare const schemaLoaders: {
     readonly consumer_user_id: Schema.String;
     readonly user_id: Schema.String;
   }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
+  '_internal.org.consumer.retrieveConfig': () => Promise<Schema.StructWithRest<Schema.Struct<{
+    readonly org_id: Schema.String;
+    readonly consumer_experience_enabled: Schema.optionalKey<Schema.Boolean>;
+    readonly enhanced_controls: Schema.optionalKey<Schema.Boolean>;
+  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
   'apiKeyRevocation.create': () => Promise<Schema.StructWithRest<Schema.Struct<{
     readonly received: Schema.Boolean;
   }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
@@ -375,10 +392,6 @@ declare const schemaLoaders: {
     readonly success: Schema.Boolean;
     readonly message: Schema.String;
   }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
-  'cli.createCodactFailure': () => Promise<Schema.StructWithRest<Schema.Struct<{
-    readonly tracked: Schema.Boolean;
-    readonly id: Schema.String;
-  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
   'connectedAccounts.completeAuth': () => Promise<Schema.StructWithRest<Schema.Struct<{
     readonly connected_account_id: Schema.String;
     readonly toolkit_slug: Schema.String;
@@ -8067,10 +8080,6 @@ declare const schemaLoaders: {
     readonly managed_auth_via_composio: Schema.Boolean;
     readonly deleted: Schema.Boolean;
   }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
-  'org.clanker.createClaim': () => Promise<Schema.StructWithRest<Schema.Struct<{
-    readonly claim_slug: Schema.String;
-    readonly expires_at: Schema.String;
-  }>, readonly [Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>]>>;
   'org.list': () => Promise<Schema.StructWithRest<Schema.Struct<{
     readonly organizations: Schema.$Array<Schema.StructWithRest<Schema.Struct<{
       readonly id: Schema.String;