@composio/client 2.0.0-rc.5 → 2.0.0-rc.7

package/README.md

@@ -17,6 +17,54 @@ const session = await composio.toolRouter.session.create({ user_id: 'user_123' }
 console.log(session.session_id, session.mcp.url)
 ```
 
+### Pagination
+
+Use the `@composio/client/pagination` subpath to traverse list operations that return the standard
+`items` and `next_cursor` fields:
+
+```ts
+import { paginate } from '@composio/client/pagination'
+
+const toolkits = paginate(({ cursor }) =>
+  composio.toolkits.list({ cursor, limit: 100 }),
+)
+
+for await (const toolkit of toolkits) {
+  console.log(toolkit.slug)
+}
+```
+
+Item iteration is lazy. Each traversal starts from the first page, and breaking early stops fetching
+more pages. Use `iterPages()` when page metadata matters, or `toArray()` to collect every item; avoid
+`toArray()` when the full result may not fit comfortably in memory.
+
+```ts
+for await (const page of toolkits.iterPages()) {
+  console.log(page.items.length)
+}
+
+const allToolkits = await toolkits.toArray()
+```
+
+For another response shape, provide an adapter. Custom cursors must be strings or numbers so repeated
+values can be detected reliably across independently decoded pages:
+
+```ts
+const results = paginate(
+  ({ cursor }) => loadPage(cursor),
+  {
+    items: page => page.data,
+    nextCursor: page => page.nextCursor,
+  },
+)
+```
+
+A repeated cursor cycle throws `ComposioError` instead of requesting pages indefinitely. An empty
+cursor ends traversal. When a response omits `next_cursor` but numeric `current_page` and
+`total_pages` metadata shows that more pages exist, the default adapter fails instead of silently
+returning partial results; provide a custom adapter for that response shape. Requests are sequential
+and inherit the normal client retry/backoff path, but this is not proactive/shared rate-limit pacing.
+
 Use `fromEnv` when configuration must come from a specific environment snapshot instead of the
 host process. Explicit options replace mapped values, so this is safe for tests, workers, and
 applications that load configuration themselves:
@@ -26,8 +74,9 @@ const composio = Composio.fromEnv(config, { environment: 'staging' })
 ```
 
 `fromEnv` recognizes `COMPOSIO_API_KEY`, `COMPOSIO_USER_API_KEY`, `COMPOSIO_ORG_API_KEY`,
-`COMPOSIO_BASE_URL`, `COMPOSIO_CUSTOM_HEADERS`, and `COMPOSIO_LOG`. Derived clients created with
-`withOptions()` keep using the resolved snapshot and do not fall back to ambient values.
+`COMPOSIO_BASE_URL`, `COMPOSIO_ALLOW_INSECURE_HTTP`, `COMPOSIO_CUSTOM_HEADERS`, and
+`COMPOSIO_LOG_LEVEL`. Derived clients created with `withOptions()` keep using the resolved snapshot and do
+not fall back to ambient values.
 
 Inject a `Transport` when an application or test needs to own HTTP dispatch. The transport receives
 a complete `Request`; retries, credential-safe redirects, timeouts, and response parsing stay in the
@@ -43,6 +92,31 @@ const composio = new Composio({ apiKey, transport })
 Existing `fetch` and `fetchOptions` constructor options remain supported. They cannot be combined
 with `transport` because a request can have only one HTTP dispatcher.
 
+## Upgrade from Stainless 0.1.x to 2.0
+
+By default, the 2.0 client refuses to send credentials over plain HTTP unless the hostname is
+loopback. For a trusted development backend such as Docker's host gateway, opt in to the exact
+configured origin:
+
+```ts
+const composio = new Composio({
+  apiKey,
+  baseURL: 'http://host.docker.internal:9900',
+  allowInsecureHTTP: true,
+})
+```
+
+The equivalent environment configuration is:
+
+```sh
+COMPOSIO_BASE_URL=http://host.docker.internal:9900 \
+COMPOSIO_ALLOW_INSECURE_HTTP=1
+```
+
+The opt-in records the resolved scheme, hostname, and port. Mutating `baseURL` cannot broaden it,
+and `withOptions({ baseURL: ... })` requires `allowInsecureHTTP: true` again when the origin
+changes. Redirects to another origin remain credential-free.
+
 ## Development
 
 Toolchain is pinned via [mise](https://mise.jdx.dev) (`mise install`): Node 24, pnpm 11, Python 3.13, uv. ESM-only, TypeScript 7 (native compiler for typechecking, `typescript@6` retained for tooling until 7.1 restores the compiler API).
@@ -50,8 +124,8 @@ Toolchain is pinned via [mise](https://mise.jdx.dev) (`mise install`): Node 24,
 ```sh
 pnpm install
 pnpm generate       # hey-api + compat codegen: spec/openapi.json → src/generated + src/compat/resources (do not edit)
-pnpm lint           # eslint over src, test, packages/codegen
-pnpm typecheck      # tsgo (TS native) over src+test, incl. type tests
+pnpm lint           # eslint over src, test, codegen, parity, and demo
+pnpm typecheck      # tsgo (TS native), including type tests and demo
 pnpm typecheck:tsc  # same programs under tsc — both compilers must pass
 pnpm codegen:check  # verify committed src/compat/resources matches the generator
 pnpm test           # unit tests (MSW mocks) + codegen tests

package/dist/{api-key-revocation-qTsznJmF.mjs → api-key-revocation-BPURmRJx.mjs}

@@ -1,4 +1,4 @@
-import { c as withOperation, n as generatedOperation } from "./generated-operations-DEPr4e2f.mjs";
+import { c as withOperation, n as generatedOperation } from "./generated-operations-CJ7bbwvC.mjs";
 
 //#region src/compat/resources/api-key-revocation.ts
 const OP_CREATE = generatedOperation("apiKeyRevocation.create");

package/dist/{auth-configs-B0IbEao2.mjs → auth-configs-DYkxc_It.mjs}

@@ -1,4 +1,4 @@
-import { a as path, c as withOperation, n as generatedOperation } from "./generated-operations-DEPr4e2f.mjs";
+import { a as path, c as withOperation, n as generatedOperation } from "./generated-operations-CJ7bbwvC.mjs";
 
 //#region src/compat/resources/auth-configs.ts
 const OP_CREATE = generatedOperation("authConfigs.create");

package/dist/{auth-Dw30Hpb_.mjs → auth-iqhTmHa9.mjs}

@@ -1,4 +1,4 @@
-import { t as Session } from "./session-CJLfSQti.mjs";
+import { t as Session } from "./session-B78Twedd.mjs";
 
 //#region src/compat/resources/auth/auth.ts
 /**

package/dist/{clanker-BJNgPfZ2.mjs → clanker-CzfQDpuy.mjs}

@@ -1,4 +1,4 @@
-import { c as withOperation, n as generatedOperation } from "./generated-operations-DEPr4e2f.mjs";
+import { c as withOperation, n as generatedOperation } from "./generated-operations-CJ7bbwvC.mjs";
 
 //#region src/compat/resources/org/clanker.ts
 const OP_CREATE_CLAIM = generatedOperation("org.clanker.createClaim");

package/dist/{cli-CUWplx80.mjs → cli-Er9a9rGs.mjs}

@@ -1,5 +1,5 @@
-import { c as withOperation, f as mergeHeaders, n as generatedOperation } from "./generated-operations-DEPr4e2f.mjs";
-import { t as Realtime } from "./realtime-D7OslBiN.mjs";
+import { c as withOperation, n as generatedOperation, p as mergeHeaders } from "./generated-operations-CJ7bbwvC.mjs";
+import { t as Realtime } from "./realtime-BNfA3u3B.mjs";
 
 //#region src/compat/resources/cli/cli.ts
 const OP_CREATE_CODACT_FAILURE = generatedOperation("cli.createCodactFailure");