twentyhq/twenty sdk/v2.53.1

on GitHub

isCustom is removed from agent, skill, view, index, and agentChatChannel types. Code that reads or writes this property will not compile against this release.

Applications can now restrict permissions with disabledFieldPermissionActions on fields and disabledObjectPermissionActions on objects. Inbox helpers sendInboxMessage, inboxMention, and inboxReferenceRecord are now exported from twenty-sdk/front-component as well as twenty-sdk/logic-function. A new mcpServer entity lets workspaces register external MCP servers with authentication tied to a connection provider.

Agent sync is more reliable. AgentManifest now carries modelConfiguration, so agents with web search or X search survive twenty app pull / twenty app apply without losing that config. The billingPlans query replaces the deprecated listPlans in the metadata client.

⚠️ Breaking changes

• isCustom is removed from agent, skill, view, index, and agentChatChannel types — remove any references in manifest files and TypeScript code. (#29052) by @FelixMalfait

🌟 Highlights

• isCustom is removed from agent, skill, view, index, and agentChatChannel types — remove any references to avoid compile errors. (#29052)
• sendInboxMessage, inboxMention, and inboxReferenceRecord are now exported from twenty-sdk/front-component in addition to twenty-sdk/logic-function. (#29088)
• objectMetadata.disabledObjectPermissionActions and fieldMetadata.disabledFieldPermissionActions let applications lock down what roles may do on specific objects and fields. (#28985)
• AgentManifest now includes modelConfiguration; agents with web search or X search no longer lose that setting on twenty app pull / twenty app apply. (#29045)
• billingPlans query added to the metadata client; listPlans is deprecated — replace calls with billingPlans. (#29003)

✨ New features

• A new mcpServer syncable entity is available via the client SDK; register external MCP servers with name, url, connectionProviderId, and isActive. (#28597) by @abdulrahmancodes
• objectMetadata.disabledObjectPermissionActions lets applications prevent any role from being granted read, update, soft-delete, or destroy access on specific objects. (#28985) by @charlesBochet
• App message channels can now carry folders; call syncMessageFolders with the channel id and folder array to register sub-streams such as Front inboxes or Slack channels. (#28986) by @FelixMalfait
• billingPlans query added to the metadata client; listPlans is deprecated — replace calls with billingPlans. (#29003) by @FelixMalfait
• SEND_EMAIL, DRAFT_EMAIL, and CREATE_CALENDAR_EVENT steps in defineWorkflow now accept connectedAccountHandle (an email address) as a portable alternative to connectedAccountId; the schema requires exactly one of the two. (#29048) by @FelixMalfait
• Workspace edits to app-installed agents and skills are now stored as overrides and survive re-sync; the next twenty app apply no longer reverts workspace customizations. (#29051) by @FelixMalfait
• fieldMetadata.disabledFieldPermissionActions lets applications prevent roles from reading or updating specific field values. (#29084) by @charlesBochet
• sendInboxMessage, inboxMention, and inboxReferenceRecord are now exported from twenty-sdk/front-component as well as twenty-sdk/logic-function. (#29088) by @bosiraphael

💅 Improvements & UX

• FormFieldRow now accepts a contentPadding prop; the existing 8px default is preserved. (#28934) by @bosiraphael
• isAuditLogged is now exposed on ObjectMetadata in the GraphQL type and client SDK fragment. (#29016) by @martmull
• AgentManifest now includes modelConfiguration; agents with web search or X search round-trip through twenty app pull / twenty app apply without losing that config. (#29045) by @FelixMalfait

🐛 Bug fixes

• The local logic function runtime now matches Lambda — os.tmpdir() returns a private writable folder inside the execution directory, and Node permission flags restrict disk access. (#28599) by @FelixMalfait
• zod 4 updated to 4.6.7 to fix a high-severity memory exhaustion vulnerability (GHSA-mrhx-c7xc-m3w5). (#28959) by @BOHEUS
• Metadata client type index for billingPlans corrected; the query now maps to BillingPlan instead of BillingPaymentIntent. (#29013) by @etiennejouan

🔧 Developer & API

• Vendor entry and shim build helpers are now shared across CLI, SDK, and server compilation. (#28855) by @Weiko

🎉 New contributors

• @Adithya9605 made their first contribution in #28579
• @siddiqueirshad made their first contribution in #28664
• @saltcoffee made their first contribution in #28592
• @arnavsingh0418 made their first contribution in #28658
• @ahmed-aneem made their first contribution in #28795

Full Changelog: sdk/v2.52.0...sdk/v2.53.1