3.0.0 (2026-10-09)
- StackOneRpcTool, RpcExecuteConfig, BinaryDownloadResult and isBinaryDownloadResult are removed. Action results are the server's { isError, result, ... } object rather than the /actions/rpc body. A file action's
resultis the server's single-use { download_url, expires_at, file } instead of bytes, and the call raises StackOneAPIError with status 501 when no link can be issued. The /mcp URL no longer pins param-style=flat_prefixed, so tool argument names follow the server's own param style. dryRun returns { url, method: 'tools/call', name, arguments }. - RequestBuilder and direct-HTTP execution are removed: ExecuteConfig has no http kind, ParameterLocation is no longer exported, and BaseTool#execute throws unless overridden. BaseTool no longer takes headers and loses getHeaders()/setHeaders() and connector; Tools#getConnectors() is removed. StackOneTool's fifth constructor argument is the account id. StackOneToolSetConfig loses authentication, strict and rpcClient. The constructor throws ToolSetConfigError without an API key. fetchTools() returns fresh tool instances on every call, ordered by account id, and discovers accounts when none is configured.
- AuthenticationConfig and BaseToolSetConfig are no longer exported. Pass apiKey in StackOneToolSetConfig.
- ToolExecution, the execution metadata toAISDK() can attach, no longer carries headers, so it can no longer expose the request credential.
- searchTools(), searchActionNames(), getSearchTool(), SearchTool, the tool_search/tool_execute meta tools, openai({ mode: 'search_and_execute' }) and the search constructor option are removed. Use the server-side search() instead.
- SemanticSearchClient, SemanticSearchError and the SemanticSearchOptions, SemanticSearchResponse and SemanticSearchResult types are no longer exported. search() runs on the server and returns SearchResult objects.
- the SearchMode, SearchToolsOptions, SearchActionNamesOptions and SearchConfig types are no longer exported. Use SearchOptions with search().
- StackOneToolSet#getSearchConfig() and StackOneToolSet#getTools() are removed. For search and execute meta tools, construct the toolset with toolMode: 'search_execute' and call fetchTools().
- DefenderConfig, DefenderMode and DEFAULT_DEFENDER_CONFIG are no longer exported, and the defender option and StackOneToolSet#defenderMode are removed. Configure Defender in the StackOne dashboard.
- createFeedbackTool is no longer exported and fetchTools() no longer appends a tool_feedback tool. Use submitFeedback() or the served stackone_submit_feedback tool.
- toolsets: headers a tool call supplies are dropped unless the tool's served schema declares them.
- tools: a header argument (an entry of a nested headers object, or a top-level headers_ argument) is forwarded only if the served schema declares it in the same form: headers.properties., any name when headers is an open map (type "object", no properties, and additionalProperties not false), or the headers_ property. Authorization, x-account-id and User-Agent are never forwarded as header arguments, even when declared. A top-level headers argument that is not a plain object is dropped unless the served schema declares headers as a non-object field, in which case it is an ordinary argument sent as given. A headers_ argument whose value is an array or object is dropped. Every other argument is sent unchanged.
- toolsets: Authorization, x-account-id and User-Agent in the headers constructor option are ignored with a warning; the SDK always sets them itself. Use apiKey and accountId/accountIds instead.
- ToolSetError (and so ToolSetConfigError and ToolSetLoadError) now extends StackOneError.
- errors: StackOneAPIError no longer appends responseBody.message to its message. Read the server's explanation from error.responseBody.
- toolsets: the STACKONE_ACCOUNT_ID environment variable is no longer read. Pass the account id as accountId or accountIds; without one, the toolset discovers every active account linked to the API key.
- toolsets: accountId: '' and an empty id in accountIds, execute.accountIds, setAccounts() or a call's accountIds now throw ToolSetConfigError. Before, an empty accountId fell back to STACKONE_ACCOUNT_ID or to account discovery. accountId: process.env.STACKONE_ACCOUNT_ID now throws when the variable is set but empty; pass process.env.STACKONE_ACCOUNT_ID || undefined to discover accounts instead.
- add search(), execute() and submitFeedback() with session ids (c41b100)
- errors: add ToolArgumentsError (c41b100)
- feedback: add actionRunId, and send feedback on the lowest account id (c41b100)
- retry HTTP 429 with Retry-After or backoff, and fail the whole call when a 429 persists (c41b100)
- retry: warn when a 429's wait would pass the deadline (c41b100)
- search: tag each search hit with its account_id, and apply topK to the merged ranking (c41b100)
- tool: preserve root schema keywords in toJsonSchema pass-through (c41b100)
- tools: add executeOpenAIToolCalls() (c41b100)
- toolsets: send x-end-user-id for non-shared accounts (c41b100)
- toolsets: skip non-shared accounts during discovery unless includeNonShared (c41b100)
- toolsets: warn when STACKONE_ACCOUNT_ID is set but ignored (c41b100)
- types: type execute() and submitFeedback() results as ActionResult (c41b100)
- align error and warning messages with the Python SDK (c41b100)
- errors: keep the message StackOneAPIError is given (c41b100)
- execute: refuse an action whose connector is linked on more than one account (c41b100)
- mcp-client: give the end-user refusal the failed lookup as its cause (c41b100)
- mcp-client: keep a retried 429 on record while another request in the session is answered (c41b100)
- retry: clear the rate-limit flag once a retry succeeds (c41b100)
- retry: report a timeout while retrying a 429 as the 429 (c41b100)
- tools: build every adapter from the first tool of each name (c41b100)
- toolsets: cache healthy accounts and keep each failure when every account fails (c41b100)
- toolsets: fail discovery when every active account is non-shared (c41b100)
- toolsets: ignore SDK-owned names in the headers option (c41b100)
- toolsets: look up a non-shared account's end user when the API asks for it (c41b100)
- toolsets: look up the providers of failed accounts named explicitly before refusing an action (c41b100)
- toolsets: re-list only the failed accounts that could serve the action (c41b100)
- toolsets: refuse to execute while a matching account failed to list (c41b100)
- toolsets: reject an empty account id instead of widening to every account (c41b100)
- toolsets: remember when execute()'s provider lookup cannot name a failed account (c41b100)
- toolsets: rethrow a rate-limited provider lookup from execute() (c41b100)
- toolsets: say shared accounts are used in the STACKONE_ACCOUNT_ID warning (c41b100)
- toolsets: stop model-supplied headers from switching tenant (c41b100)
- tools: forward only the header arguments a served schema declares (c41b100)
- execute every tool over MCP tools/call (c41b100)
- rebuild the toolset on the served MCP catalog (c41b100)
- remove AuthenticationConfig and BaseToolSetConfig (c41b100)
- remove client-side search from the Node SDK (c41b100)
- remove getSearchConfig() and getTools() (c41b100)
- remove SDK-side defender configuration (c41b100)
- remove SemanticSearchClient and its types (c41b100)
- remove the client-side feedback tool (c41b100)
- remove the client-side search option types (c41b100)
- remove ToolExecution#headers (c41b100)
- root every SDK error at StackOneError (c41b100)
- toolsets: stop reading STACKONE_ACCOUNT_ID (c41b100)
2.10.0 (2026-07-27)
2.9.2 (2026-07-07)
- lazy-load optional ai peer (#372) (e7e944d)
- ship dual ESM/CJS output for Node16 consumers (#373) (b1739b1)
2.9.1 (2026-06-03)
2.9.0 (2026-05-14)
2.8.1 (2026-04-27)
2.8.0 (2026-04-20)
- examples: streamline examples, relocate tests, standardize auth, migrate to Workday (#361) (6539be3)
2.7.0 (2026-04-14)
2.6.0 (2026-04-07)
2.5.1 (2026-03-26)
2.5.0 (2026-03-25)
2.4.0 (2026-03-06)
2.3.0 (2026-01-29)
- ci: switch to nix-quick-install-action for faster CI (#298) (6e82978)
- ci: use nix profile install instead of nix develop (#295) (86bf01d)
2.2.0 (2026-01-08)
2.1.0 (2026-01-05)
- security: add gitleaks for secret detection (#259) (4c89e91)
- support AI SDK v5 and v6 via unified imports [ENG-11722] (#269) (043d3b8)
- test: add property-based testing with @fast-check/vitest (#266) (5d82f23)
2.0.9 (2025-12-16)
2.0.8 (2025-12-15)
2.0.7 (2025-12-15)
2.0.6 (2025-12-15)
2.0.5 (2025-12-15)
2.0.4 (2025-12-15)
2.0.3 (2025-12-15)
2.0.2 (2025-12-15)
2.0.1 (2025-12-15)
2.0.0 (2025-12-15)
- Remove unused public exports from the SDK
- remove unified API integration and migrate to connector-based naming (#219)
- lint: Linting rules are now significantly stricter. Code that previously passed Biome's checks may now fail with oxlint's pedantic, correctness, suspicious, performance, and style rule categories all set to error level.
- resolve typecheck errors by upgrading to zod v4 and ai SDK 5.0.108 (#183)
- BaseToolSetConfig.stackOneClient is now rpcClient
- bun -> pnpm+vitest && manage deps with flake.nix (#143)
- OpenAPI spec imports from src/openapi/ are removed
- desp: update openai sdk to v6 and deprecate v4 (#120)
- metaRelevantTools() renamed to metaTools() and now returns Promise
- add Anthropic Claude integration (#208) (08e7ae0)
- add knip for unused code detection (#174) (9df963d)
- add meta tools for dynamic tool discovery and execution (#84) (e1da427)
- add pkg.pr.new ci (#58) (4757773)
- add provider and action filtering to fetchTools() (#124) (71fe4a4)
- add test coverage reporting with GitHub Pages deployment (#188) (02a572e)
- breaking change ai sdk name and toolset config object (#14) (ad1f207)
- build in ci (#19) (40131d0)
- check pr title (#45) (56ce286)
- error from tools (#31) (96e6745)
- example: add interactive CLI demo with @clack/prompts (#203) (c5c6990)
- examples: add TanStack AI and Claude Agent SDK integrations with E2E tests (#222) (e890de1)
- experimental doc handling (#50) (366f3ca)
- feedback tool (#125) (d943e60)
- init (468ffea)
- introduce MCP-backed dynamic tools (#114) (ef5efc1)
- lint: configure unicorn/prefer-top-level-await rule (#218) (1254196)
- make AI SDK and OpenAI SDK optional peer dependencies (#112) (e745640)
- meta-tools: add hybrid BM25 + TF-IDF search strategy (#122) (46fc31a)
- npm token (#5) (1bb9095)
- readme ai sdk (#10) (34d39cd)
- remove deprecated OAS-based getTools, migrate to fetchTools only (#148) (aea526e)
- tool: add OpenAI Responses API integration (#206) (1e286cf)
- toolsets: add multi-account support for fetchTools (#118) (926e625)
- update oas and add planner docs (#21) (6dd4269)
- update schema (#60) (03c9283)
- use any openapi spec as tools (#18) (6dd7aeb)
- add baseURL default (#164) (83ad198)
- building docs (#4) (c5dc1d2)
- deps: move zod from dev to prod catalog (#230) (176c53f)
- docs action (#2) (1717c31)
- docs actions pt2 (#3) (a9fbbc9)
- docs links (#16) (29fc021)
- hook (#57) (ae92968)
- implement deep object serialization for nested filter parameters (#40) (a5c3c1f)
- lefthook: use pnpm (#217) (e65099b)
- lint: resolve all oxlint errors (#193) (15e849f)
- name (#6) (0952512)
- oas location (#8) (380e495)
- oas location and file upload (#9) (e514a0f)
- oas regen (#33) (80a8dbb)
- package.json: add engines (#182) (ef2189d)
- remove an ambiguous keyword(saas) from package.json (#145) (0e434e3)
- remove dotenv (#101) (f1e6997)
- remove unecessary type assertion (#111) (5d1502d)
- remove unified API integration and migrate to connector-based naming (#219) (79e0bc2)
- rename metaSearchTool (#94) (e5a7279)
- resolve linting errors in generated OpenAPI files and tests (#80) (7fd5eea)
- resolve type errors and ensure CI fails on errors (#175) (4d465bf)
- resolve typecheck errors by upgrading to zod v4 and ai SDK 5.0.108 (#183) (a2a4aaa)
- rpc: send x-account-id as HTTP header in RPC requests (#202) (b3843a5)
- test: stabilise examples (#90) (015660d)
- tooling: typecheck (#54) (025ae5c)
- types (#13) (076766c)
- validate tool_names after whitespace filtering (#130) (5ea1c04)
- bun -> pnpm+vitest && manage deps with flake.nix (#143) (fb77062)
- desp: update openai sdk to v6 and deprecate v4 (#120) (417ffc5)
- release 0.3.0 (#88) (bd7c10c)
- trigger release 2.0.0 (#224) (407fe98)
- flatten client structure and add Zod validation to RPC client (#168) (53bce87)
- remove unused exports and experimental features (#221) (e131433)
1.1.1 (2025-12-04)
1.1.0 (2025-12-03)
1.0.0 (2025-10-22)
- desp: update openai sdk to v6 and deprecate v4 (#120)
- add provider and action filtering to fetchTools() (#124) (71fe4a4)
- feedback tool (#125) (d943e60)
- introduce MCP-backed dynamic tools (#114) (ef5efc1)
- make AI SDK and OpenAI SDK optional peer dependencies (#112) (e745640)
- toolsets: add multi-account support for fetchTools (#118) (926e625)
- remove dotenv (#101) (f1e6997)
- remove unecessary type assertion (#111) (5d1502d)
- rename metaSearchTool (#94) (e5a7279)
- test: stabilise examples (#90) (015660d)
- validate tool_names after whitespace filtering (#130) (5ea1c04)
0.3.0 (2025-08-19)
- metaRelevantTools() renamed to metaTools() and now returns Promise
- add meta tools for dynamic tool discovery and execution (#84) (e1da427)
- add pkg.pr.new ci (#58) (4757773)
- update schema (#60) (03c9283)
- hook (#57) (ae92968)
- resolve linting errors in generated OpenAPI files and tests (#80) (7fd5eea)
- tooling: typecheck (#54) (025ae5c)
0.2.0 (2025-06-17)
0.1.0 (2025-06-11)
- breaking change ai sdk name and toolset config object (#14) (ad1f207)
- build in ci (#19) (40131d0)
- check pr title (#45) (56ce286)
- error from tools (#31) (96e6745)
- init (468ffea)
- npm token (#5) (1bb9095)
- readme ai sdk (#10) (34d39cd)
- update oas and add planner docs (#21) (6dd4269)
- use any openapi spec as tools (#18) (6dd7aeb)
- building docs (#4) (c5dc1d2)
- docs action (#2) (1717c31)
- docs actions pt2 (#3) (a9fbbc9)
- docs links (#16) (29fc021)
- implement deep object serialization for nested filter parameters (#40) (a5c3c1f)
- name (#6) (0952512)
- oas location (#8) (380e495)
- oas location and file upload (#9) (e514a0f)
- oas regen (#33) (80a8dbb)
- types (#13) (076766c)
0.0.14 (2025-04-04)
0.0.13 (2025-03-24)
0.0.12 (2025-03-24)
- breaking change ai sdk name and toolset config object (#14) (ad1f207)
- build in ci (#19) (40131d0)
- init (468ffea)
- npm token (#5) (1bb9095)
- readme ai sdk (#10) (34d39cd)
- update oas and add planner docs (#21) (6dd4269)
- use any openapi spec as tools (#18) (6dd7aeb)
- building docs (#4) (c5dc1d2)
- docs action (#2) (1717c31)
- docs actions pt2 (#3) (a9fbbc9)
- docs links (#16) (29fc021)
- name (#6) (0952512)
- oas location (#8) (380e495)
- oas location and file upload (#9) (e514a0f)
- types (#13) (076766c)
0.0.10 (2025-03-24)
- breaking change ai sdk name and toolset config object (#14) (ad1f207)
- build in ci (#19) (40131d0)
- init (468ffea)
- npm token (#5) (1bb9095)
- readme ai sdk (#10) (34d39cd)
- update oas and add planner docs (#21) (6dd4269)
- use any openapi spec as tools (#18) (6dd7aeb)
- building docs (#4) (c5dc1d2)
- docs action (#2) (1717c31)
- docs actions pt2 (#3) (a9fbbc9)
- docs links (#16) (29fc021)
- name (#6) (0952512)
- oas location (#8) (380e495)
- oas location and file upload (#9) (e514a0f)
- types (#13) (076766c)
0.0.8 (2025-03-12)
0.0.7 (2025-03-10)
0.0.6 (2025-03-10)
0.0.5 (2025-03-05)
0.0.4 (2025-03-05)
0.0.3 (2025-03-04)
- building docs (#4) (c5dc1d2)
- docs action (#2) (1717c31)
- docs actions pt2 (#3) (a9fbbc9)
- name (#6) (0952512)
- oas location (#8) (380e495)
- oas location and file upload (#9) (e514a0f)