Reach a person's own Gmail, Slack or Linear through Composio - #481

Draft

mxmzb wants to merge 238 commits into

mainfrom

composio-transport

Commits on Sep 10, 2026

Let a transport say what it knows about an action it listed

mxmzb
and
claude
committed
2b4b194
Record what a listed action does and which version it is

mxmzb
and
claude
committed
80a9e89
Add the Composio SDK, for the live test to call the real thing with

mxmzb
and
claude
committed
8ed87ed
Believe what a vendor said an action does, and treat silence as a write

mxmzb
and
claude
committed
c470dd7
Keep a Composio connection after its person is gone

mxmzb
and
claude
committed
ef219b7
Reach a Composio app as the person asking, at the version that was listed

mxmzb
and
claude
committed
4e003de
Format the Composio transport to match the repository's own style
mxmzb
committed
8ea0120
Let Composio be one of the transports a kind can name

mxmzb
and
claude
committed
2e54ab9
Add the migration for an action's effect and version and for Composio connections

mxmzb
and
claude
committed
15802ac
Check the Composio shapes this transport is written against against the real thing

mxmzb
and
claude
committed
163a466
Decide once how a server is reached, instead of three times in three places

mxmzb
and
claude
committed
6a22143
Add a script for the live Composio test and document the key it needs

mxmzb
and
claude
committed
94fb760
Give the plugin store suite a fresh database and a Composio fixture, and check the new columns round-trip

mxmzb
and
claude
committed
71fd357
Refuse to run this suite against a database that already owns its fixture ids

mxmzb
and
claude
committed
6006b9b
Require positive evidence before this suite deletes a row it may not own

mxmzb
and
claude
committed
5d92666
Resolve once how a server is reached, and let the trail read it

mxmzb
and
claude
committed
39918f9
Key whose account a call reached on the auth kind, not on the credential behind it

mxmzb
and
claude
committed
532a643
Look a transport up by the kind that was resolved, not by guessing from an entry

mxmzb
and
claude
committed
dd76143
Correct four comments that describe the rule this branch replaced

mxmzb
and
claude
committed
a368aa3
Reflow the comment the last commit corrected but left 133 columns wide
mxmzb
committed
d780fae
Refuse a brokered call nobody is attributed for, and one whose asker has not connected

mxmzb
and
claude
committed
88193ff
Test the two refusals that stand between a stray run and somebody else's mailbox

mxmzb
and
claude
committed
9045a52
Hand the recorded effect to the classifier wherever a tool is classified

mxmzb
and
claude
committed
1cc7b82
Test both places a brokered action's effect is read, not just the call path

mxmzb
and
claude
committed
9b1b060
Say in the classifier's own doc that a vendor's label can earn a read

mxmzb
and
claude
committed
20c738c
Name both entry-less shapes in the reconciliation helper's reason
mxmzb
committed
ac45f16
Record what a refresh learned about each action

mxmzb
and
claude
committed
f7a9911
Gate the three columns a refresh now writes, and guard the two vendors it must not touch

mxmzb
and
claude
committed
f8f95a9
Call a Composio action at the version it was listed at

mxmzb
and
claude
committed
b117092
Close the two audit gates that were waiting on a call that could complete

mxmzb
and
claude
committed
b253c99
Stop a model choosing which revision of an action it calls

mxmzb
and
claude
committed
ab46ac5
Strip the reserved version key before trusting either branch

mxmzb
and
claude
committed
80d4117
Gate the branch where no version was recorded

mxmzb
and
claude
committed
bfd8506
Name the strip as what protects the version, not the merge order

mxmzb
and
claude
committed
010e7e8
Make the unlabelled-action canary able to fail

mxmzb
and
claude
committed
1447a55
Resolve which Composio app a row is once, from the url the call dials

mxmzb
and
claude
committed
72a84a5
Say which of the two brokered refusals the transport actually repeats

mxmzb
and
claude
committed
9162ae1
Make the Notion listing mock restore what it overwrote, in one place

mxmzb
and
claude
committed
112d884
Gate the two brokered properties the plan named and nothing covered

mxmzb
and
claude
committed
29d91ab
Say that the brokered narrowing throw is reachable, and gate the fallback it forbids

mxmzb
and
claude
committed
abca7a7
Build the catalogue urls in the access tests from hosts that already carry a scheme

mxmzb
and
claude
committed
7c9ea0f
Stop a value in a vendor column taking an action off the reviewed write list

mxmzb
and
claude
committed
b6f7b0c
Say where the actor actually authorizes a transport call, which is not the listing

mxmzb
and
claude
committed
4e9e9c0
Keep the Composio SDK out of the runtime image, where nothing imports it

mxmzb
and
claude
committed
840b3d7
Refuse the live Composio run that would skip every case and exit 0

mxmzb
and
claude
committed
14e7b87
Stop offering operators a deployment setting no deployment reads

mxmzb
and
claude
committed
9c8353f
Say why an action list could not be read, in a sentence rather than a Zod dump

mxmzb
and
claude
committed
dac4962
Report the outcome the vendor actually reported, and our own failures as ours

mxmzb
and
claude
committed
17c7c37
Keep an app's actions when the refresh listed nothing because it asked nobody

mxmzb
and
claude
committed
bed3dbd
Fail the access tests when the slug they resolve is gone

mxmzb
and
claude
committed
5015c9f
Arm the Drive test's fetch, so a call made before its stub cannot reach Google

mxmzb
and
claude
committed
02cc2ef
Make the live test watch the vendor instead of erasing what it watches

mxmzb
and
claude
committed
559dd99
Give the Composio stubs answers the vendor could actually send

mxmzb
and
claude
committed
54e63fa
Observe at the vendor which person's account a Composio call opens

mxmzb
and
claude
committed
0b08915
Hold the forged-identity case to the arguments it actually sends

mxmzb
and
claude
committed
c9e132c
Hold the trail to calling a vendor's refusal a failure

mxmzb
and
claude
committed
2c8a7bc
Refuse a brokered call from somebody a colleague's connection would carry

mxmzb
and
claude
committed
aa52f27
Take a brokered connection away when the person or the app goes

mxmzb
and
claude
committed
4103f8b
Say who an audit row is about when the answer is not a person

mxmzb
and
claude
committed
d852a7a
Throw when no app was named and when no client was installed, rather than listing nothing

mxmzb
and
claude
committed
c1e70d4
Ask for the whole listing, and refuse a page too full to know it was the whole listing

mxmzb
and
claude
committed
bb5f92a
Stop offering a model an action whose file argument only Composio's own uploader can produce

mxmzb
and
claude
committed
b2b16ba
Read one app slug out of a connection url, or read no app at all

mxmzb
and
claude
committed
9f5c9de
Describe the client seam as unwired, and make the version remedy conditional on the vendor

mxmzb
and
claude
committed
10b6bf0
Say that the schema reaching a model is the SDK's re-spelling and not the vendor's own

mxmzb
and
claude
committed
23c2b24
Stop saying Composio lists an action's schema to anybody, when it lists it to a key

mxmzb
and
claude
committed
749eef9
Find a file parameter that is only reachable under a condition, not just under a property

mxmzb
and
claude
committed
fa84783
Hold the version refusal to the conditional remedy it now offers

mxmzb
and
claude
committed
4f921bc
Fail these transport tests when the behaviour they are named for breaks

mxmzb
and
claude
committed
dc6d353
Refuse a brokered row whose id is a curated slug instead of dialling the curated vendor

mxmzb
and
claude
committed
056a0c5
Say that an empty listing came from a vendor that was asked, because now it did

mxmzb
and
claude
committed
ce6fc8a
Refuse to delete a person this suite never created

mxmzb
and
claude
committed
8a375f5
Take back every credential row this file mints, and put back only a client it actually saw

mxmzb
and
claude
committed
1aad7c8
Narrow every audit assertion to the run that is being asserted about

mxmzb
and
claude
committed
e294a1f
Bring the anonymous actor inside the guard that covers every other id here

mxmzb
and
claude
committed
ea0500e
Believe the vendor when it declares an action destructive

mxmzb
and
claude
committed
3a4b46c
Walk the one keyword that was hiding a staged file from the listing filter

mxmzb
and
claude
committed
d287c7a
Read the vendor's answer only where an unreadable one can still be reported

mxmzb
and
claude
committed
7f357e5
Send the app the url names, so the gate and the call are about one fact

mxmzb
and
claude
committed
d1afeba
Key the anonymous connection row on its app, so no file sweeps another's

mxmzb
and
claude
committed
8cea54b
Cover the empty-listing guard through a vendor that actually answers nothing

mxmzb
and
claude
committed
ffb2fee
Assert which MCP annotation is believed, and stop claiming none is

mxmzb
and
claude
committed
0fe1754
Send an unresolvable row's sentence to the operator and to nobody else

mxmzb
and
claude
committed
6192122
Keep the statement and its parameters out of a failed replace

mxmzb
and
claude
committed
f892e61
File a brokered disconnect under the app, whichever act ended it

mxmzb
and
claude
committed
0f187d9
Ask one question about which connection rows this file owns

mxmzb
and
claude
committed
3ae8161
Put a failed query on the shelf that is raised rather than relayed

mxmzb
and
claude
committed
ba8519a
Map a deployment fault on the routes that call the same method

mxmzb
and
claude
committed
d09f91f
Cover the read that decides whether to revoke a credential again

mxmzb
and
claude
committed
d4ed3d3
Read the vendor call's fields by name in the stubs that record them

mxmzb
and
claude
committed
5c66242
Stop the seam claiming an MCP server publishes no effect

mxmzb
and
claude
committed
848272b
Say that the initiator kind and the actor answer different questions

mxmzb
and
claude
committed
95012eb
Sort the import members this branch appended out of order

mxmzb
and
claude
committed
21218e2

Commits on Sep 11, 2026

Read the Composio key this deployment reaches the broker with

mxmzb
and
claude
committed
fede96f
Name what this deployment needs of the broker beside calling a tool

mxmzb
and
claude
committed
dde57eb
Let the browser's tool type carry what an action destroys

mxmzb
and
claude
committed
bfee96d
Add the write that enables one app at the broker

mxmzb
and
claude
committed
1e02406
Document the broker, before anybody can reach it

mxmzb
and
claude
committed
32eda61
Enable an app at the broker as a row the call path already understands

mxmzb
and
claude
committed
76c8056
Hand the plugin routes a broker, and say whether one is configured

mxmzb
and
claude
committed
316445f
Install a real broker client, in the one file allowed to know the vendor's shape

mxmzb
and
claude
committed
4ad3356
Read the broker's directory through this deployment rather than from the vendor

mxmzb
and
claude
committed
4647be1
Ask the broker whether a connection is real, and end one where it lives

mxmzb
and
claude
committed
30301f9
Record a brokered connection on the broker's word, and heal it in both directions

mxmzb
and
claude
committed
77d1f41
Offer the broker's directory, and answer what one person has connected

mxmzb
and
claude
committed
f6b24c6
Stop sending this deployment's usage to the broker

mxmzb
and
claude
committed
a79124c
Correct the comments that said no adapter existed

mxmzb
and
claude
committed
9f8838a
Build the broker client once, at startup, where a key is set

mxmzb
and
claude
committed
612e286
Let an administrator browse the broker's apps and enable one

mxmzb
and
claude
committed
c668431
Stop offering a shared token to the connector that cannot hold one

mxmzb
and
claude
committed
24a4f1b
Leave a read-only check somebody can run after a real consent

mxmzb
and
claude
committed
53dc3d2
End every account at the broker when an app is removed

mxmzb
and
claude
committed
c2adeb5
Answer a brokered app's Connect with a link minted for whoever asked

mxmzb
and
claude
committed
feecf7b
Give one Bot and one app a screen with a switch per action

mxmzb
and
claude
committed
5398069
End a removed person's accounts where they actually live

mxmzb
and
claude
committed
9d053e5
Let a person confirm and end their own brokered account

mxmzb
and
claude
committed
81b73bb
Stop a failed read becoming a claim about what this deployment has

mxmzb
and
claude
committed
2afeacb
Let a screen read what an action destroys

mxmzb
and
claude
committed
fd8526f
Bring the person back to this deployment after they consent

mxmzb
and
claude
committed
00033a5
Draw one account card, and let it forget what it was told

mxmzb
and
claude
committed
3da24bf
File a disconnect only where something was disconnected

mxmzb
and
claude
committed
e8f4989
Test the mark that says an action destroys things, and say which setting is missing

mxmzb
and
claude
committed
6b89968
Hold the broker's catalogue for ten minutes instead of asking per keystroke

mxmzb
and
claude
committed
71af5ba
Ask for one row's address instead of the whole plugin surface

mxmzb
and
claude
committed
8869a8f
Ship the broker's SDK, which every container was about to boot without

mxmzb
and
claude
committed
ea55938
Actually revoke the grant, and stop claiming more than was done

mxmzb
and
claude
committed
396ba8b
Refuse an answer this transport cannot read, rather than calling it an empty success

mxmzb
and
claude
committed
a2fb3bf
Stop the key-diagnosis script failing worst when the key is bad

mxmzb
and
claude
committed
61fe1a4
Ship the pruned dependencies the image went to the trouble of building

mxmzb
and
claude
committed
f81686a
Say what the wire can send, so the reads that trust it stop compiling

mxmzb
and
claude
committed
121d0ab
Make this suite able to fail on the defects it names

mxmzb
and
claude
committed
db8d2bf
Merge the vendor-projection lever
mxmzb
committed
c1f89e7
Merge the suite-falsifiability levers
mxmzb
committed
5445899
Refuse a return address nobody could come back through

mxmzb
and
claude
committed
883c9c3
Ask a broker that answers, and read only the rows this run owns

mxmzb
and
claude
committed
54175ff
Keep this transport's own words on the failures it reports

mxmzb
and
claude
committed
f2cfb81
Refuse a vendor answer this adapter cannot read, instead of reading it anyway

mxmzb
and
claude
committed
04e54dd
Typecheck the key-diagnosis script, and stop it printing the one sentence it refuses
mxmzb
committed
dcc1498
Merge worktree-agent-adb028f01806b249f
mxmzb
committed
d0267e7
Merge worktree-agent-a43a541a55e7d2b41
mxmzb
committed
08bba85
Merge worktree-agent-a181d59bd0f47f03e
mxmzb
committed
30db5a3
Merge worktree-agent-a7d2c661a3c2c24c3
mxmzb
committed
d875d37
Merge worktree-agent-a57833439a7beefc8
mxmzb
committed
297a1f9
Stop telling operators no Composio surface exists, when one row does

mxmzb
and
claude
committed
39e4432
Merge the unconfigured-state truthfulness fix
mxmzb
committed
3661647
Say what Composio said, instead of sending everybody to check the key

mxmzb
and
claude
committed
738aece
Merge the seam error-translation closure
mxmzb
committed
0304897
Stop the store's own docblock repeating the surface-is-absent claim
mxmzb
committed
c7cb5d4
Read the rest of a Composio listing, instead of calling one page the whole answer

mxmzb
and
claude
committed
30efbe6
Merge the listing-pagination closure
mxmzb
committed
44cf1ef
Fail when the vendor refuses the withdrawal, and when the sweep reaches past this run

mxmzb
and
claude
committed
f2bf71a
Merge the connections-suite falsifiability repairs
mxmzb
committed
70d174c
Refuse an answer whose success this deployment cannot read, rather than auditing it as one

mxmzb
and
claude
committed
37fff32
Merge the result-path and precedence fixes
mxmzb
committed
57b4b2e
Read a Composio answer the vendor's own package could not, instead of guarding where it never arrives

mxmzb
and
claude
committed
72d00a1
Merge the vendor-fault reclassification
mxmzb
committed
a40b20f
Read Composio's verdict on a withdrawal, and stop calling an unclaimed config a clean removal

mxmzb
and
claude
committed
105dbe8
Merge the withdrawal-verdict and unclaimed-config fixes
mxmzb
committed
bc4482f
Stop the Composio diagnostic promising a distinction it never made

mxmzb
and
claude
committed
f499d19
Merge the smoke-script diagnosis and docs fixes
mxmzb
committed
a309b52
Hand Composio the return address that was checked, not the padding around it

mxmzb
and
claude
committed
17ec5de
Merge the return-address normalisation fix
mxmzb
committed
ab9da5f
Hand on the identifier the guard checked, and stop four refusals stating what nothing measured

mxmzb
and
claude
committed
63c3b78
Merge the adapter finding-tail closure
mxmzb
committed
9f63573
Look at the arguments a call forwards, and stop four guards passing what they never measured

mxmzb
and
claude
committed
0c6439b
Merge the transport-test falsifiability closure
mxmzb
committed
60b3780
Read the vendor's own sentence where it is actually thrown, and let an authored refusal beat it

mxmzb
and
claude
committed
69a9193
Merge the vendor-sentence depth and precedence fixes
mxmzb
committed
c0d428a
Withdraw only what this deployment granted, and prove the delete that revokes is the one wired up

mxmzb
and
claude
committed
9a5dcd0
Merge the revocation scope and wiring guard
mxmzb
committed
49f77d9
Send every candidate sentence through one door, and read the labels as well as the list

mxmzb
and
claude
committed
90648e9
Merge the single-door sentence guard and element checks
mxmzb
committed
c852d55
Refuse a withdrawal over a config this deployment cannot claim, and sweep the class on both paths
mxmzb
committed
b2ccc59
Merge the parallel-path class sweep
mxmzb
committed
b1d830d

Commits on Sep 12, 2026

Follow Composio's cursor on both listings, rather than refuse a page the catalogue always fills

mxmzb
and
claude
committed
62f7331
Merge the catalogue and action listing pagination
mxmzb
committed
a0d4e01

Commits on Sep 13, 2026