mirror of
https://github.com/ComposioHQ/composio.git
synced 2026-09-22 11:46:35 +08:00
sdkrelease[bot]
d102ab03ca
This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to next, this PR will be updated. # Releases ## @composio/core@0.13.0 ### Minor Changes -d17a268: Add the first-class `composio.sessions.create()` API while keeping `composio.create()` as an alias, expose the experimental shared-connection ACL patch helper as `connectedAccounts.updateAcl()` while keeping `experimental.updateAcl()` as an alias, and include SDK docs/source in the published package. **MCP is now opt-in.** Sessions return native tools by default; the hosted MCP endpoint is only surfaced on the type when you create the session with `{ mcp: true }`. The default `create()` / `use()` now return `SessionWithoutMcp` (the runtime object is unchanged — `session.mcp` still exists at runtime — but it is no longer in the type). Migration: read `session.mcp` only after creating with `{ mcp: true }`. -d17a268: Surface the resolved workbench config on Tool Router sessions. - `Session.workbench` is now populated from the API response (on create/retrieve/attach/update). It exposes the resolved workbench config, e.g. `session.workbench?.enable` (defaults to `true` server-side). This lets callers create a session with the remote workbench disabled (`workbench: { enable: false }`) and detect that state — the foundation for running code in a sandbox you own via the experimental `@composio/experimental/workbench` helpers. ### Patch Changes -d17a268: Prefer `sandbox` for session code-execution configuration while continuing to accept the existing `workbench` alias. -d17a268: Add `triggers.parse()` to parse and optionally verify incoming webhook requests. -d17a268: Add `triggers.setWebhookSubscription()` to create or update the project webhook subscription from the TypeScript SDK. ## @composio/experimental@0.1.0 ### Minor Changes -d17a268: Add the experimental BYO local workbench helpers on the new `@composio/experimental/workbench` subpath. These let you run a Composio Tool Router session in a sandbox you own instead of Composio's hosted remote sandbox: - `experimental_createLocalWorkbenchSession(composio, session)` takes a caller-created session and returns `{ helperSource, env }`. It throws unless the session was created with `workbench: { enable: false }` (a local sandbox and the remote workbench cannot both run for one session). - `experimental_createWorkbenchEnv(options)` builds the environment variables the in-sandbox helper needs to reach Composio. - `experimental_createPythonWorkbenchHelperSource(options)` returns the Python helper source. The local workbench assumes code runs in the developer's sandbox and exposes Apollo-parity Python helpers for `run_composio_tool`, `invoke_llm`, `web_search`, and `proxy_execute`. > **Security caveat:** the helper authenticates with the developer's full _project_ API key, injected into the sandbox env as `COMPOSIO_API_KEY`. Any code or tool output running in the sandbox can read and exfiltrate it — treat the sandbox as your security boundary and rotate the key. A session-scoped `x-session-access-key` (so the long-lived project key never enters the sandbox) is the planned follow-up. -d17a268: Add an experimental package with a Pi coding-agent provider, static Composio tool wrapping, and dynamic Tool Router session helpers. ### Patch Changes -d17a268: Add `proxy_execute` to the experimental local workbench helper. The in-sandbox helper from `experimental_createLocalWorkbenchSession` (`@composio/experimental/workbench`) now exposes `proxy_execute(method, endpoint, toolkit, query_params=None, body=None, headers=None)` alongside `run_composio_tool`, `invoke_llm`, and `web_search`, so a local sandbox can make authenticated direct API calls to a connected toolkit when no pre-built tool exists. It posts to the public `…/session/{id}/proxy_execute` route with the session's project API key, and always returns a `(data, error)` tuple. ## @composio/slim@0.13.0 ### Minor Changes -d17a268: Add a slim Composio core package that mirrors the built `@composio/core` runtime and types without publishing the packaged `docs/` or `src/` trees. ## @composio/cli@0.3.1 ### Patch Changes - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - @composio/core@0.13.0 - @composio/cli-local-tools@0.1.1 ## @composio/cli-local-tools@0.1.1 ### Patch Changes - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - Updated dependencies [d17a268] - @composio/core@0.13.0 Co-authored-by: Rahul Tarak <cryogenicplanet@gmail.com>
19 lines
533 B
JSON
19 lines
533 B
JSON
{
|
|
"$schema": "https://unpkg.com/@changesets/config@3.1.1/schema.json",
|
|
"changelog": "@changesets/cli/changelog",
|
|
"commit": false,
|
|
"fixed": [["@composio/core", "@composio/slim"]],
|
|
"linked": [],
|
|
"access": "restricted",
|
|
"privatePackages": {
|
|
"version": true,
|
|
"tag": true
|
|
},
|
|
"baseBranch": "next",
|
|
"updateInternalDependencies": "patch",
|
|
"___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH": {
|
|
"onlyUpdatePeerDependentsWhenOutOfRange": true
|
|
},
|
|
"ignore": ["@composio/cli", "@composio/cli-local-tools"]
|
|
}
|