@nangohq/types 0.71.9 → 0.71.11

package/dist/account/api.d.ts

@@ -207,6 +207,7 @@ export type PostManagedSignup = ApiEndpoint<{
     Body: {
         provider: 'GoogleOAuth';
         token?: string | undefined;
+        returnTo?: string | undefined;
     };
     Success: {
         data: {

package/dist/agent/api.d.ts

@@ -2,7 +2,7 @@ import type { ApiEndpoint, ApiError } from '../api.js';
 import type { AuditPolicy } from '../audit-trail/event.js';
 import type { Tags } from '../db.js';
 import type { AgentSessionUnknownPinnedConnectionsPayload } from './connections.js';
-import type { AgentSessionEndedReason } from './session.js';
+import type { AgentSessionCreateConnectionConfig, AgentSessionEndedReason } from './session.js';
 import type { AgentSessionToolsNotInToolsetPayload, AgentSessionUnknownIntegrationsPayload, AgentSessionUnknownToolsPayload, AgentSessionUnsupportedFunctionTypesPayload } from './toolset.js';
 export interface AgentSessionToolListInput {
     tools: string[];
@@ -11,6 +11,25 @@ export type AgentSessionIntegrationPolicyInput = '*' | {
     allow?: AgentSessionToolListInput | '*' | undefined;
     deny?: AgentSessionToolListInput | undefined;
 };
+export type AgentSessionMetaToolInput = boolean | {
+    enabled: boolean;
+    tags?: Tags | undefined;
+};
+export interface AgentSessionMetaToolsInput {
+    nango_tool_search?: boolean | {
+        enabled: boolean;
+    } | undefined;
+    nango_execute?: boolean | {
+        enabled: boolean;
+    } | undefined;
+    nango_proxy?: boolean | {
+        enabled: boolean;
+    } | undefined;
+    nango_create_connection?: boolean | {
+        enabled: boolean;
+        tags?: Tags | undefined;
+    } | undefined;
+}
 export interface PostAgentSessionsBody {
     tenant: {
         connections: {
@@ -25,7 +44,7 @@ export interface PostAgentSessionsBody {
     };
     toolset?: '*' | Record<string, AgentSessionIntegrationPolicyInput> | undefined;
     pinned_tools?: Record<string, string[]> | undefined;
-    meta_tools?: Record<string, boolean> | undefined;
+    meta_tools?: AgentSessionMetaToolsInput | undefined;
     expires_in?: string | undefined;
 }
 export interface AgentSessionToolsetSummary {
@@ -37,6 +56,7 @@ export interface AgentSessionMetaToolsSummary {
     nango_tool_search: boolean;
     nango_execute: boolean;
     nango_proxy: boolean;
+    nango_create_connection: AgentSessionCreateConnectionConfig;
 }
 export interface AgentSessionUnknownMetaToolsPayload {
     meta_tools: string[];

package/dist/agent/session.d.ts

@@ -1,9 +1,19 @@
+import type { Tags } from '../db.js';
 import type { AgentSessionResolvedConnections } from './connections.js';
 import type { AgentSessionCompiledToolset } from './toolset.js';
+/**
+ * `tags` are stamped on the connection the agent has created, on top of the reserved tag that binds
+ * it to the session, so it also matches the selectors a later session for the same tenant will use.
+ */
+export interface AgentSessionCreateConnectionConfig {
+    readonly enabled: boolean;
+    readonly tags: Tags;
+}
 export interface AgentSessionMetaTools {
     readonly nangoToolSearch: boolean;
     readonly nangoExecute: boolean;
     readonly nangoProxy: boolean;
+    readonly nangoCreateConnection: AgentSessionCreateConnectionConfig;
 }
 export type AgentSessionEndedReason = 'terminated' | 'expired';
 export interface AgentSession {

package/dist/api-keys/scopes.d.ts

@@ -1,6 +1,6 @@
 /** Every wildcard in a namespace: `environment:*`, `environment:connections:*`, … */
 export type WildcardsFor<Namespace extends string> = `${Namespace}:*` | `${Namespace}:${string}:*`;
-export declare const API_KEY_SCOPES: readonly ["environment:integrations:list", "environment:integrations:list_credentials", "environment:integrations:list_functions", "environment:integrations:read", "environment:integrations:read_credentials", "environment:integrations:create", "environment:integrations:update", "environment:integrations:delete", "environment:connections:list", "environment:connections:list_credentials", "environment:connections:read", "environment:connections:read_credentials", "environment:connections:create", "environment:connections:update", "environment:connections:delete", "environment:connect_sessions:write", "environment:agent_sessions:write", "environment:syncs:read", "environment:syncs:execute", "environment:syncs:update", "environment:syncs:variant:create", "environment:syncs:variant:delete", "environment:functions:list", "environment:functions:read", "environment:functions:delete", "environment:functions:compile", "environment:functions:dryrun", "environment:functions:invocations", "environment:deploy", "environment:records:read", "environment:records:write", "environment:logs:read", "environment:actions:execute", "environment:proxy", "environment:variables:read", "environment:webhook_signing_key:rotate", "environment:mcp"];
+export declare const API_KEY_SCOPES: readonly ["environment:integrations:list", "environment:integrations:list_credentials", "environment:integrations:list_functions", "environment:integrations:read", "environment:integrations:read_credentials", "environment:integrations:create", "environment:integrations:update", "environment:integrations:delete", "environment:connections:list", "environment:connections:list_credentials", "environment:connections:read", "environment:connections:read_credentials", "environment:connections:create", "environment:connections:update", "environment:connections:delete", "environment:connect_sessions:write", "environment:agent_sessions:write", "environment:syncs:read", "environment:syncs:execute", "environment:syncs:update", "environment:syncs:variant:create", "environment:syncs:variant:delete", "environment:functions:list", "environment:functions:read", "environment:functions:update", "environment:functions:delete", "environment:functions:compile", "environment:functions:dryrun", "environment:functions:invocations", "environment:deploy", "environment:records:read", "environment:records:write", "environment:logs:read", "environment:actions:execute", "environment:proxy", "environment:variables:read", "environment:webhook_signing_key:rotate", "environment:mcp"];
 export type ConcreteApiKeyScope = (typeof API_KEY_SCOPES)[number];
 /** A scope, or a wildcard over scopes. Which wildcards resolve to something is checked at runtime. */
 export type ApiKeyScope = ConcreteApiKeyScope | WildcardsFor<'environment'>;

package/dist/api.d.ts

@@ -14,7 +14,7 @@ export interface ValidationError {
     path: (string | number)[];
 }
 export type ResDefaultErrors = ApiError<'invalid_content_type'> | ApiError<'not_found'> | ApiError<'disabled_resource'> | ApiError<'conflict'> | ApiError<'plan_limit'> | ApiError<'forbidden'> | ApiError<'invalid_query_params', ValidationError[]> | ApiError<'invalid_headers', ValidationError[]> | ApiError<'invalid_body', ValidationError[]> | ApiError<'invalid_uri_params', ValidationError[]> | ApiError<'feature_disabled'> | ApiError<'generic_error_support', undefined, string> | ApiError<'server_error'> | ApiError<'resource_capped'> | ApiError<'missing_auth_header'> | ApiError<'malformed_auth_header'> | ApiError<'unknown_account'> | ApiError<'unknown_connect_session_token'> | ApiError<'invalid_cli_version'> | ApiError<'invalid_permissions'> | ApiError<'invalid_connect_session_token_format'> | ApiError<'request_too_large'>;
-export type EndpointMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+export type EndpointMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE' | 'PROPFIND' | 'REPORT';
 /**
  * API Request/Response type
  */

package/dist/api.endpoints.d.ts

@@ -17,7 +17,7 @@ import type { CreateApiKey, DeleteApiKey, DeleteEnvironment, DeletePublicApiKey,
 import type { PatchWebhook } from './environment/api/webhook.js';
 import type { PostEnvironmentVariables } from './environment/variable/api.js';
 import type { PatchFlowDisable, PatchFlowEnable, PatchFlowFrequency, PostPreBuiltDeploy, PutUpgradePreBuiltFlow } from './flow/http.api.js';
-import type { DeleteIntegrationFunction, DeletePublicIntegrationFunction, GetFunctionDeployment, GetFunctionDryrun, GetFunctionInvocation, GetIntegrationFunction, GetIntegrationFunctions, GetIntegrationTemplates, GetProviderTemplates, GetPublicIntegrationFunction, GetPublicIntegrationFunctions, GetPublicProviderTemplates, PostFunctionCompile, PostFunctionDeployment, PostFunctionDeploymentBundle, PostFunctionDeploymentBundlePreview, PostFunctionDeploymentResult, PostFunctionDryrun, PostFunctionDryrunResult, PostFunctionInvocation } from './functions/api.js';
+import type { DeleteIntegrationFunction, DeletePublicIntegrationFunction, GetFunction, GetFunctionDeployment, GetFunctionDryrun, GetFunctionInvocation, GetFunctions, GetIntegrationFunction, GetIntegrationFunctions, GetIntegrationTemplates, GetProviderTemplates, GetPublicIntegrationFunction, GetPublicIntegrationFunctions, GetPublicProviderTemplates, PatchFunction, PostFunctionCompile, PostFunctionDeployment, PostFunctionDeploymentBundle, PostFunctionDeploymentBundlePreview, PostFunctionDeploymentResult, PostFunctionDryrun, PostFunctionDryrunResult, PostFunctionInvocation } from './functions/api.js';
 import type { GetGettingStarted, PatchGettingStarted } from './gettingStarted/api.js';
 import type { DeleteIntegration, DeletePublicIntegration, GetFunctionCode, GetIntegration, GetIntegrationFlows, GetPublicFunctionCode, GetPublicIntegration, GetPublicListIntegrations, PatchIntegration, PatchPublicIntegration, PostIntegration, PostPublicIntegration, PostPublicQuickstartIntegration } from './integration/api.js';
 import type { DeleteInvite, GetInvite, PostInvite } from './invitations/api.js';
@@ -35,7 +35,7 @@ import type { GetConnectionSyncs, GetPublicSyncStatus, PostPublicSyncPause, Post
 import type { DeleteTeamUser, GetTeam, PatchTeamUser, PutTeam } from './team/api.js';
 import type { GetUser, PatchUser, PutUserPassword } from './user/api.js';
 import type { PostPublicWebhook } from './webhooks/http.api.js';
-export type PublicApiEndpoints = SetMetadata | UpdateMetadata | PostDeploy | PostDeployConfirmation | PostPublicTrigger | PostPublicTbaAuthorization | PostPublicJwtAuthorization | PostPublicUnauthenticatedAuthorization | PostPublicApiKeyAuthorization | PostPublicBasicAuthorization | GetPublicProviders | GetPublicProvider | GetPublicListIntegrations | GetPublicIntegration | DeletePublicIntegration | PostConnectSessions | PostAgentSessions | DeleteAgentSession | PostAgentSessionMcp | GetAgentSessionMcp | PostPublicConnectSessionsReconnect | GetPublicConnections | GetPublicConnection | GetConnectSession | DeleteConnectSession | PostDeployInternal | PostPublicBillAuthorization | DeletePublicConnection | DeleteConnection | PostPublicSignatureAuthorization | PostPublicTwoStepAuthorization | PostPublicWebhook | GetPublicClientMetadata | GetPublicRecords | PatchPublicPruneRecords | GetPublicScriptsConfig | PostPublicConnectTelemetry | PostCliTelemetry | PutPublicSyncConnectionFrequency | PostPublicIntegration | PostPublicQuickstartIntegration | PatchPublicIntegration | GetAsyncActionResult | PostPublicOauthOutboundAuthorization | PostPublicAwsSigV4Authorization | PostPublicConnection | PatchPublicConnection | PostPublicSyncStart | PostPublicSyncPause | GetPublicSyncStatus | GetPublicV1 | PostPublicTriggerAction | PostFunctionCompile | PostFunctionDryrun | GetFunctionDryrun | PostFunctionDryrunResult | PostFunctionDeployment | GetFunctionDeployment | PostFunctionDeploymentResult | PostFunctionInvocation | GetFunctionInvocation | PostFunctionDeploymentBundle | PostFunctionDeploymentBundlePreview | GetPublicFunctionCode | GetPublicIntegrationFunctions | GetPublicIntegrationFunction | DeletePublicIntegrationFunction | GetPublicProviderTemplates | PostPublicRotateWebhookSigningKey | AllPublicProxy | PostPublicEnvironment | DeletePublicEnvironment | GetPublicEnvironments | GetPublicApiKey | GetPublicApiKeys | PostPublicApiKey | DeletePublicApiKey;
+export type PublicApiEndpoints = SetMetadata | UpdateMetadata | PostDeploy | PostDeployConfirmation | PostPublicTrigger | PostPublicTbaAuthorization | PostPublicJwtAuthorization | PostPublicUnauthenticatedAuthorization | PostPublicApiKeyAuthorization | PostPublicBasicAuthorization | GetPublicProviders | GetPublicProvider | GetPublicListIntegrations | GetPublicIntegration | DeletePublicIntegration | PostConnectSessions | PostAgentSessions | DeleteAgentSession | PostAgentSessionMcp | GetAgentSessionMcp | PostPublicConnectSessionsReconnect | GetPublicConnections | GetPublicConnection | GetConnectSession | DeleteConnectSession | PostDeployInternal | PostPublicBillAuthorization | DeletePublicConnection | DeleteConnection | PostPublicSignatureAuthorization | PostPublicTwoStepAuthorization | PostPublicWebhook | GetPublicClientMetadata | GetPublicRecords | PatchPublicPruneRecords | GetPublicScriptsConfig | PostPublicConnectTelemetry | PostCliTelemetry | PutPublicSyncConnectionFrequency | PostPublicIntegration | PostPublicQuickstartIntegration | PatchPublicIntegration | GetAsyncActionResult | PostPublicOauthOutboundAuthorization | PostPublicAwsSigV4Authorization | PostPublicConnection | PatchPublicConnection | PostPublicSyncStart | PostPublicSyncPause | GetPublicSyncStatus | GetPublicV1 | PostPublicTriggerAction | PostFunctionCompile | GetFunction | GetFunctions | PatchFunction | PostFunctionDryrun | GetFunctionDryrun | PostFunctionDryrunResult | PostFunctionDeployment | GetFunctionDeployment | PostFunctionDeploymentResult | PostFunctionInvocation | GetFunctionInvocation | PostFunctionDeploymentBundle | PostFunctionDeploymentBundlePreview | GetPublicFunctionCode | GetPublicIntegrationFunctions | GetPublicIntegrationFunction | DeletePublicIntegrationFunction | GetPublicProviderTemplates | PostPublicRotateWebhookSigningKey | AllPublicProxy | PostPublicEnvironment | DeletePublicEnvironment | GetPublicEnvironments | GetPublicApiKey | GetPublicApiKeys | PostPublicApiKey | DeletePublicApiKey;
 export type PrivateApiEndpoints = GetAuditTrail | GetAuditTrailExport | ListAccountApiKeys | CreateAccountApiKey | DeleteAccountApiKey | ConfirmEmail | PostSignup | PostSignin | PostLogout | GetTeam | PutTeam | PostPlanExtendTrial | PostPlanChange | PutBillingInvoicingDetails | GetOverdueInvoices | GetBillingUsage | GetBillingUsageTopDimensionValues | GetUpcomingInvoice | GetBillingPeriodCosts | GetProjectedCosts | GetSpendAlert | PutSpendAlert | DeleteSpendAlert | GetUser | PatchUser | PutUserPassword | PostInvite | DeleteInvite | DeleteTeamUser | PatchTeamUser | PostInsights | PostForgotPassword | PutResetPassword | SearchOperations | GetOperation | SearchMessages | SearchFilters | PostInternalConnectSessions | GetIntegrationFlows | GetIntegrationFunction | GetIntegrationFunctions | GetFunctionCode | DeleteIntegrationFunction | GetIntegrationTemplates | GetProviderTemplates | DeleteIntegration | PatchIntegration | GetIntegration | PostIntegration | GetConnections | GetConnectionsCount | GetConnection | PatchConnection | PostConnectionMetadata | GetConnectionRecordModels | GetConnectionRecords | GetConnectionSyncs | GetInvite | GetMeta | GetEmailByExpiredToken | GetEmailByUuid | GetManagedCallback | GetManagedEmailVerification | GetOnboardingAccountDiscovery | PostOnboardingRequestInvite | PatchFlowDisable | PatchFlowEnable | PatchFlowFrequency | PutUpgradePreBuiltFlow | PostConnectionRefresh | PostManagedEmailVerification | PostManagedSignup | PostPreBuiltDeploy | PostEnvironment | PatchEnvironment | DeleteEnvironment | GetEnvironments | GetEnvironment | PostRotateWebhookSigningKey | ListApiKeys | CreateApiKey | DeleteApiKey | PatchApiKey | PatchWebhook | PostEnvironmentVariables | PostImpersonate | GetSharedCredentialsProviders | GetSharedCredentialsProvider | PostSharedCredentialsProvider | PatchSharedCredentialsProvider | GetGettingStarted | PatchGettingStarted | GetConnectUISettings | PutConnectUISettings | GetProviders | GetProvider | PostInternalTriggerFunction | GetMFAStatus | PostMFAEnrollment | PostMFAActivation | PostMFARecoveryCodes | PostMFALoginVerification | DeleteMFA | GetPlainHmac;
 export type APIEndpoints = PrivateApiEndpoints | PublicApiEndpoints;
 /**

package/dist/audit-trail/event.d.ts

@@ -1,4 +1,4 @@
-import type { AgentSessionCreatedMetadata, ApiKeyUpdatedMetadata, AppAuthLoginMetadata, AuditTrailFiltersMetadata, AuditTrailQueriedMetadata, BillingPaymentMethodRemovedMetadata, BillingPlanChangedMetadata, BillingSpendAlertChangedMetadata, ConnectionMetadata, ConnectionUpdatedMetadata, EnvironmentCreatedMetadata, EnvironmentUpdatedMetadata, EnvironmentVariablesChangedMetadata, EnvironmentWebhookMetadata, FunctionDeletedMetadata, FunctionDeployedMetadata, FunctionUpgradedMetadata, IntegrationProviderMetadata, IntegrationUpdatedMetadata, MemberInvitedMetadata, MemberRoleChangedMetadata, MfaVerifiedMetadata, SyncBaseMetadata, SyncFrequencyChangedMetadata, SyncTriggeredMetadata, SyncVariantMetadata, TeamUpdatedMetadata, UserUpdatedMetadata } from './metadata.js';
+import type { AgentSessionCreatedMetadata, ApiKeyUpdatedMetadata, AppAuthLoginMetadata, AuditTrailFiltersMetadata, AuditTrailQueriedMetadata, BillingPaymentMethodRemovedMetadata, BillingPlanChangedMetadata, BillingSpendAlertChangedMetadata, ConnectionMetadata, ConnectionUpdatedMetadata, EnvironmentCreatedMetadata, EnvironmentUpdatedMetadata, EnvironmentVariablesChangedMetadata, EnvironmentWebhookMetadata, FunctionDeletedMetadata, FunctionDeployedMetadata, FunctionUpdatedMetadata, FunctionUpgradedMetadata, IntegrationProviderMetadata, IntegrationUpdatedMetadata, MemberInvitedMetadata, MemberRoleChangedMetadata, MfaVerifiedMetadata, SyncBaseMetadata, SyncFrequencyChangedMetadata, SyncTriggeredMetadata, SyncVariantMetadata, TeamUpdatedMetadata, UserUpdatedMetadata } from './metadata.js';
 export type AuditTrailVersion = '2026-07-16';
 export type AuditActorType = 'user' | 'api_key' | 'public_key' | 'connect_session' | 'anonymous' | 'unknown';
 export type AuditOutcome = 'success' | 'failure' | 'denied';
@@ -26,6 +26,7 @@ interface AuditEventTable {
     function: {
         deployed: FunctionDeployedMetadata;
         upgraded: FunctionUpgradedMetadata;
+        updated: FunctionUpdatedMetadata;
         deleted: FunctionDeletedMetadata;
     };
     integration: {

package/dist/audit-trail/metadata.d.ts

@@ -34,6 +34,9 @@ export interface FunctionDeployedMetadata {
 export interface FunctionUpgradedMetadata {
     upgradeVersion?: string;
 }
+export interface FunctionUpdatedMetadata {
+    state?: string;
+}
 export interface FunctionDeletedMetadata {
     type?: string;
 }

package/dist/function/db.d.ts

@@ -4,6 +4,7 @@ import type { FunctionCapabilities, FunctionLimits, FunctionRequires, FunctionTr
 import type { JSONSchema7 } from 'json-schema';
 export interface DBFunctionConfig extends TimestampsAndDeletedAt {
     id: number;
+    uuid: string;
     nango_config_id: number;
     environment_id: number;
     name: string;
@@ -34,6 +35,7 @@ export interface DBFunctionInstance extends TimestampsAndDeletedAt {
     function_config_id: number;
     name: string;
     variant: string;
+    enabled: boolean;
     last_run_at: Date | null;
     frequency: string | null;
 }

package/dist/functions/api.d.ts

@@ -1,6 +1,7 @@
 import type { ApiEndpoint, ApiError } from '../api.js';
 import type { AuditPolicy } from '../audit-trail/event.js';
 import type { FunctionCapabilities, FunctionLimits, FunctionRequires, FunctionTriggerDefinition } from '../function/config.js';
+import type { FunctionSource } from '../syncConfigs/db.js';
 import type { FunctionType, ListedNangoFunction, NangoActionFunction, NangoFunctionTemplate, NangoSyncFunction } from './domain.js';
 import type { JSONSchema7 } from 'json-schema';
 export type RunnableFunctionType = Extract<FunctionType, 'action' | 'sync'>;
@@ -222,6 +223,63 @@ export type PostFunctionDeploymentResult = ApiEndpoint<{
     };
 }>;
 export type FunctionInvocationType = 'wait' | 'no_wait';
+export interface GetFunctionResponse {
+    uuid: string;
+    integration_id: string;
+    provider: string;
+    name: string;
+    description: string;
+    state: 'enabled' | 'disabled';
+    source: FunctionSource;
+    trigger: FunctionTriggerDefinition;
+    created_at: string;
+    updated_at: string;
+}
+export type GetFunction = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
+    Method: 'GET';
+    Path: '/functions/:uuid';
+    Params: {
+        uuid: string;
+    };
+    Success: GetFunctionResponse;
+}>;
+export type PatchFunction = ApiEndpoint<{
+    Audit: AuditPolicy<'function', 'updated', 'environment'>;
+    Method: 'PATCH';
+    Path: '/functions/:uuid';
+    Params: {
+        uuid: string;
+    };
+    Body: {
+        state: 'enabled' | 'disabled';
+    };
+    Success: GetFunctionResponse;
+}>;
+export interface GetFunctionsQuery {
+    integration?: string | undefined;
+    provider?: string | undefined;
+    state?: 'enabled' | 'disabled' | undefined;
+    'trigger.kind'?: FunctionTriggerDefinition['kind'] | undefined;
+    cursor?: string | undefined;
+    limit?: number | undefined;
+}
+export type GetFunctions = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
+    Method: 'GET';
+    Path: '/functions';
+    Querystring: GetFunctionsQuery;
+    Success: {
+        data: GetFunctionResponse[];
+        next_cursor: string | null;
+    };
+}>;
 export type FunctionInvocationErrorCode = 'function_failed' | 'server_error' | 'connection_not_found' | 'function_not_found' | 'function_disabled' | 'validation_error' | 'invalid_invocation';
 type FunctionInvocationSuccess = any;
 export type PostFunctionInvocation = ApiEndpoint<{
@@ -325,7 +383,7 @@ export type DeleteIntegrationFunction = ApiEndpoint<{
         providerConfigKey: string;
         functionName: string;
     };
-    Error: ApiError<'function_managed_by_deploy'>;
+    Error: ApiError<'function_managed_by_deploy' | 'invalid_request'>;
     Success: FunctionDeletionSuccess;
 }>;
 export type GetProviderTemplates = ApiEndpoint<{
@@ -384,7 +442,7 @@ export type DeletePublicIntegrationFunction = ApiEndpoint<{
         uniqueKey: string;
         name: string;
     };
-    Error: ApiError<'function_managed_by_deploy'>;
+    Error: ApiError<'function_managed_by_deploy' | 'invalid_request'>;
     Success: FunctionDeletionSuccess;
 }>;
 export type GetPublicProviderTemplates = ApiEndpoint<{

package/dist/functions/domain.d.ts

@@ -1,6 +1,8 @@
 import type { OnEventType } from '../scripts/on-events/api.js';
 import type { FunctionSource } from '../syncConfigs/db.js';
 import type { JSONSchema7 } from 'json-schema';
+/** `tools-catalog` is list/API only — never a DB `FunctionSource`. */
+export type FunctionListSource = FunctionSource | 'tools-catalog';
 export type FunctionType = 'action' | 'sync' | 'on-event';
 interface NangoFunctionBase {
     name: string;
@@ -28,6 +30,7 @@ export interface NangoOnEventFunction extends NangoFunctionBase {
     event: OnEventType;
 }
 export type NangoFunction = NangoSyncFunction | NangoActionFunction | NangoOnEventFunction;
+/** A deployed sync-config row. `id` and `last_deployed` are always present. */
 export interface FunctionAvailability {
     id: number;
     enabled: boolean;
@@ -35,9 +38,18 @@ export interface FunctionAvailability {
     last_deployed: string;
     source: FunctionSource;
 }
-export type ListedNangoSyncFunction = NangoSyncFunction & FunctionAvailability;
-export type ListedNangoActionFunction = NangoActionFunction & FunctionAvailability;
-export type ListedNangoOnEventFunction = NangoOnEventFunction & FunctionAvailability;
+/** A row in a function list. Catalog actions have no deployed row. */
+export interface ListedFunctionAvailability {
+    /** Sync-config id. `null` when the function is served from the catalog (no deployed row). */
+    id: number | null;
+    enabled: boolean;
+    /** ISO-8601 timestamp. `null` when the function was never deployed. */
+    last_deployed: string | null;
+    source: FunctionListSource;
+}
+export type ListedNangoSyncFunction = NangoSyncFunction & ListedFunctionAvailability;
+export type ListedNangoActionFunction = NangoActionFunction & ListedFunctionAvailability;
+export type ListedNangoOnEventFunction = NangoOnEventFunction & ListedFunctionAvailability;
 export type ListedNangoFunction = ListedNangoSyncFunction | ListedNangoActionFunction | ListedNangoOnEventFunction;
 export type NangoFunctionTemplate = (NangoSyncFunction | NangoActionFunction) & {
     deployed?: FunctionAvailability;

package/dist/index.d.ts

@@ -60,6 +60,7 @@ export type * from './integration/db.js';
 export type * from './providers/provider.js';
 export type * from './auth/api.js';
 export type * from './oauthSessions/db.js';
+export type * from './oauth-server/api.js';
 export type * from './auth/http.api.js';
 export type * from './deploy/api.js';
 export type * from './deploy/index.js';

package/dist/integration/api.d.ts

@@ -13,6 +13,7 @@ export interface ApiPublicIntegrationInclude {
     webhook_url?: string | null;
     credentials_label?: Record<string, string> | undefined;
     preconfigured_credentials?: string[] | undefined;
+    preconfigured_connection_config?: string[] | undefined;
     credentials?: {
         type: AuthModes['OAuth2'] | AuthModes['OAuth1'] | AuthModes['TBA'];
         client_id: string | null;
@@ -31,6 +32,20 @@ export interface ApiPublicIntegrationInclude {
         app_id: string | null;
         app_link: string | null;
         private_key: string | null;
+    } | {
+        type: AuthModes['MCP_OAUTH2_GENERIC'];
+        client_name: string | null;
+        client_uri: string | null;
+        client_logo_uri: string | null;
+    } | {
+        type: 'INTEGRATION_CONFIG';
+        auth_mode: AuthModeType;
+        integration_config: Record<string, string>;
+    } | {
+        type: AuthModes['MCP_OAUTH2'];
+        client_id: string | null;
+        client_secret: string | null;
+        scopes: string | null;
     } | null;
 }
 export type GetPublicListIntegrations = ApiEndpoint<{
@@ -371,4 +386,14 @@ export type ApiPublicIntegrationCredentials = {
     app_id: string;
     app_link: string;
     private_key: string;
+} | {
+    type: Extract<AuthModeType, 'MCP_OAUTH2_GENERIC'>;
+    client_name?: string | undefined;
+    client_uri?: string | undefined;
+    client_logo_uri?: string | undefined;
+} | {
+    type: Extract<AuthModeType, 'MCP_OAUTH2'>;
+    client_id?: string | undefined;
+    client_secret?: string | undefined;
+    scopes?: string | undefined;
 };

package/dist/meta/api.d.ts

@@ -1,6 +1,11 @@
 import type { ApiEndpoint, ApiError } from '../api.js';
 import type { DBEnvironment } from '../environment/db.js';
 export type ApiEnvironmentSummary = Pick<DBEnvironment, 'id' | 'account_id' | 'name' | 'is_production'>;
+export type AccountGroupProperties = {
+    name?: string;
+    plan?: string;
+    created_date?: string;
+};
 export type GetMeta = ApiEndpoint<{
     Audit: {
         kind: 'no-audit';
@@ -20,6 +25,7 @@ export type GetMeta = ApiEndpoint<{
             debugMode: boolean;
             gettingStartedClosed: boolean;
             auditTrail: boolean;
+            accountGroup: AccountGroupProperties;
         };
     };
 }>;

package/dist/mfa/api.d.ts

@@ -59,9 +59,7 @@ export type DeleteMFA = ApiEndpoint<{
     Audit: AuditPolicy<'mfa', 'disabled', 'account'>;
     Method: 'DELETE';
     Path: '/api/v1/account/mfa';
-    Body: {
-        code: string;
-    };
+    Body: MFACredential;
     Error: ApiError<'invalid_mfa_code'> | ApiError<'mfa_not_enabled'>;
     Success: {
         success: true;

package/dist/nangoYaml/index.d.ts

@@ -1,7 +1,7 @@
 import type { OnEventType } from '../scripts/on-events/api.js';
 import type { Feature } from '../syncConfigs/db.js';
 import type { JSONSchema7 } from 'json-schema';
-export type HTTP_METHOD = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+export type HTTP_METHOD = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE' | 'PROPFIND' | 'REPORT';
 /** @deprecated **/
 export type SyncTypeLiteral = 'incremental' | 'full';
 export type ScriptFileType = 'actions' | 'syncs' | 'on-events' | 'functions' | 'webhooks' | 'post-connection-scripts';

package/dist/oauth-server/api.d.ts

@@ -0,0 +1,126 @@
+import type { ApiError, ValidationError } from '../api.js';
+export type OAuthConsentErrorCode = 'interaction_expired' | 'interaction_completed' | 'interaction_invalid' | 'login_required' | 'invalid_origin' | 'user_suspended' | 'account_unavailable';
+export interface OAuthConsentResource {
+    hostname: string;
+    scopes: string[];
+}
+export interface OAuthConsentInteraction {
+    client: {
+        name: string;
+        hostname: string;
+    };
+    redirectUri: string;
+    account: {
+        name: string;
+    };
+    resource: OAuthConsentResource;
+}
+export interface GetOAuthConsentInteraction {
+    Audit: {
+        kind: 'no-audit';
+        reason: 'read-only interaction lookup';
+    };
+    Params: {
+        uid: string;
+    };
+    Reply: {
+        status: 200;
+        body: {
+            data: OAuthConsentInteraction;
+        };
+    } | {
+        status: 202;
+        body: {
+            data: {
+                resumeUrl: string;
+            };
+        };
+    } | {
+        status: 204;
+        body: never;
+    } | {
+        status: 401;
+        body: ApiError<'login_required'>;
+    } | {
+        status: 403;
+        body: ApiError<'user_suspended' | 'account_unavailable'>;
+    } | {
+        status: 404;
+        body: ApiError<'interaction_invalid'>;
+    } | {
+        status: 409;
+        body: ApiError<'interaction_completed'>;
+    } | {
+        status: 410;
+        body: ApiError<'interaction_expired'>;
+    };
+}
+export interface PostOAuthConsentLogin {
+    Audit: {
+        kind: 'no-audit';
+        reason: 'OAuth protocol state';
+    };
+    Params: {
+        uid: string;
+    };
+    Body: never;
+    Reply: {
+        status: 200;
+        body: {
+            data: {
+                resumeUrl: string;
+            };
+        };
+    } | {
+        status: 400;
+        body: ApiError<'invalid_body', ValidationError[]>;
+    } | {
+        status: 401;
+        body: ApiError<'login_required'>;
+    } | {
+        status: 403;
+        body: ApiError<'invalid_origin' | 'user_suspended' | 'account_unavailable'>;
+    } | {
+        status: 404;
+        body: ApiError<'interaction_invalid'>;
+    } | {
+        status: 409;
+        body: ApiError<'interaction_completed'>;
+    } | {
+        status: 410;
+        body: ApiError<'interaction_expired'>;
+    };
+}
+export interface PostOAuthConsentDecision {
+    Audit: {
+        kind: 'no-audit';
+        reason: 'TODO: audit coverage pending';
+    };
+    Params: {
+        uid: string;
+    };
+    Body: never;
+    Reply: {
+        status: 200;
+        body: {
+            data: {
+                resumeUrl: string;
+            };
+        };
+    } | {
+        status: 400;
+        body: ApiError<'invalid_body', ValidationError[]>;
+    } | {
+        status: 403;
+        body: ApiError<'invalid_origin' | 'interaction_invalid' | 'user_suspended' | 'account_unavailable'>;
+    } | {
+        status: 404;
+        body: ApiError<'interaction_invalid'>;
+    } | {
+        status: 409;
+        body: ApiError<'interaction_completed'>;
+    } | {
+        status: 410;
+        body: ApiError<'interaction_expired'>;
+    };
+}

package/dist/providers/provider.d.ts

@@ -31,7 +31,7 @@ export interface SimplifiedJSONSchema {
     prefix?: string;
     suffix?: string;
     doc_section?: string;
-    secret?: string;
+    secret?: boolean;
     automated: boolean;
     enum?: string[];
     warnings?: Record<string, string>;

package/dist/proxy/api.d.ts

@@ -46,7 +46,7 @@ export interface BaseProxyConfiguration {
 }
 export interface UserProvidedProxyConfiguration extends BaseProxyConfiguration {
     decompress?: boolean | string;
-    method?: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE' | 'get' | 'post' | 'patch' | 'put' | 'delete';
+    method?: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE' | 'PROPFIND' | 'REPORT' | 'get' | 'post' | 'patch' | 'put' | 'delete' | 'propfind' | 'report';
     paginate?: Partial<CursorPagination> | Partial<LinkPagination> | Partial<OffsetPagination>;
 }
 export type ConnectionForProxy = Pick<DBConnectionDecrypted, 'connection_id' | 'connection_config' | 'metadata'> & {

package/dist/runner/sdk.d.ts

@@ -23,6 +23,7 @@ export interface NangoProps {
     lastSyncDate?: Date;
     syncId?: string | undefined;
     syncVariant?: string | undefined;
+    variant?: string | undefined;
     nangoConnectionId: number;
     syncJobId?: number | undefined;
     track_deletes?: boolean;

package/dist/web/env.d.ts

@@ -3,6 +3,8 @@ export interface WindowEnv {
     apiUrl: string;
     /** Where the dashboard sends its own API requests. Equals `apiUrl` unless NANGO_DASHBOARD_API_URL is set. `/` means same-origin. */
     dashboardApiUrl: string;
+    /** OAuth authorization-server issuer used by the browser consent API. */
+    oauthServerUrl: string | undefined;
     publicUrl: string;
     connectUrl: string;
     gitHash: string | undefined;

package/dist/webhooks/api.d.ts

@@ -71,6 +71,10 @@ export interface NangoForwardWebhookBody extends NangoWebhookBase {
     connectionId?: string;
     providerConfigKey: string;
     payload: unknown;
+    /**
+     * Only present when Nango could not verify the webhook came from the provider
+     */
+    unverified?: true;
 }
 export interface NangoAsyncActionWebhookBody extends NangoWebhookBase {
     type: 'async_action';

package/dist/webhooks/dispatch.d.ts

@@ -34,6 +34,7 @@ export interface LegacyDispatchMessage extends DispatchMessageBase {
 }
 export interface FunctionDispatchMessage extends DispatchMessageBase {
     kind: 'function';
+    functionConfigId: number;
     /** Deterministic key used to deduplicate queue redeliveries. */
     idempotencyKey: string;
     functionName: string;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@nangohq/types",
-    "version": "0.71.9",
+    "version": "0.71.11",
     "description": "Types used in Nango applications",
     "type": "module",
     "typings": "dist/index.d.ts",
@@ -12,7 +12,7 @@
         "directory": "packages/utils"
     },
     "dependencies": {
-        "axios": "1.18.0",
+        "axios": "1.20.0",
         "json-schema": "0.4.0",
         "type-fest": "4.41.0"
     },