feat(composio-direct): cover Composio v3 API domains

[konard]

Summary

Fixes #162.

This expands composio-direct into a broader Composio v3 client surface for Teleton Agent while keeping the existing direct-HTTP/plugin style. The plugin now covers tool discovery/schema/execution, auth links, connection reuse, toolkits, files, triggers, webhooks, and the applicable meta-tool wrappers.

What changed

• Kept and extended the existing v3-compliant tools/auth flow: GET /api/v3/tools, GET /api/v3/tools/{tool_slug}, POST /api/v3/tools/execute/{tool_slug}, GET/POST /api/v3/auth_configs, and POST /api/v3/connected_accounts/link.
• Added reusable connection reads: composio_list_connections and composio_get_connection, with current-user filtering by default.
• Added toolkit coverage: composio_list_toolkits and composio_get_toolkit for catalog/application discovery.
• Added Files API coverage: composio_list_files and composio_request_file_upload.
• Added Triggers API coverage: trigger type discovery, active trigger listing, upsert, enable/disable, and delete.
• Added Webhooks API coverage: event type discovery, list/get/create/update/rotate-secret/delete subscriptions.
• Added meta-tool wrappers for COMPOSIO_MANAGE_CONNECTIONS, COMPOSIO_REMOTE_BASH_TOOL, and COMPOSIO_REMOTE_WORKBENCH.
• Avoided exposing connected account state / connection_data values, trigger state values, or webhook signing secrets by default.
• Updated manifest/README and bumped composio-direct to 1.8.0.

API v3 audit notes

Reviewed the requested official Composio reference areas: v3 overview, auth configs, authentication, connected accounts, files, toolkits, tools, triggers, webhooks, errors, and meta-tools (search_tools, get_tool_schemas, multi_execute_tool, manage_connections, remote_bash_tool, remote_workbench).

Core mapping now covered:

• Auth: existing auth config lookup/creation and connect-link generation.
• Tools: search, schema fetch, single execution, and batch execution.
• Toolkits: list/get toolkit metadata.
• Connections: list/get reusable connected accounts plus manage_connections meta-tool wrapper.
• Files: list registered files and request presigned upload URLs.
• Triggers: list schemas, list instances, upsert, enable/disable, delete.
• Webhooks: list event types, CRUD subscriptions, rotate signing secret.
• Meta-tools: native Teleton tools for search/schema/multi-execute flows plus wrappers for manage connections, remote bash, and remote workbench.

Reproduction

Before this continuation, the new tests failed because the plugin did not export the requested toolkit/files/triggers/webhooks/remote-meta surfaces. The pre-implementation run failed at plugins/composio-direct/tests/index.test.js on the missing new tools/version expectations.

Tests

• node --test plugins/composio-direct/tests/index.test.js initially failed, then passes after the v3 domain implementation.
• node --test plugins/composio-direct/tests/index.test.js plugins/composio-direct/test/unit/composio-direct.test.js plugins/composio-direct/test/integration/composio-api.test.js
• npm run lint passes with existing warnings outside this change.
• npm run typecheck
• npm test
• npm run validate confirms composio-direct: 27 tool(s) validated, but the repo-wide command still exits non-zero because unrelated optional plugins are missing root dependencies: @evaafi/sdk, @tonkite/highload-wallet-v3, and @ston-fi/api.

[konard]

Solution summary

Implemented and pushed the fix for issue #162.

PR #163 is ready for review: #163

What changed:

• Added composio_get_tool_schemas using GET /api/v3/tools/{tool_slug}.
• Added composio_list_connections using GET /api/v3/connected_accounts.
• Added composio_get_connection using GET /api/v3/connected_accounts/{nanoid}.
• Kept connection state values out of LLM-visible output; only state_keys / connection_data_keys are exposed.
• Updated manifest and README, bumped composio-direct to 1.7.0.
• Added reproducing tests for the missing schema/connection tools.
• Removed the placeholder .gitkeep.

Verification:

• node --test plugins/composio-direct/tests/index.test.js failed before the fix on missing tools, passes after.
• node --test plugins/composio-direct/tests/index.test.js plugins/composio-direct/test/unit/composio-direct.test.js plugins/composio-direct/test/integration/composio-api.test.js passes.
• npm run lint passes with existing repo warnings.
• npm run typecheck passes.
• npm test passes: 374 tests.
• GitHub checks are all green: CI, lint, test, TypeScript, deploy, CodeQL.

One local caveat: npm run validate still exits non-zero because unrelated optional plugins are missing root dependencies (@evaafi/sdk, @tonkite/highload-wallet-v3, @ston-fi/api). It did validate composio-direct: 7 tool(s) validated.

Docs checked from official Composio references: v3 overview, Tools, Connected Accounts, Auth Configs, and Meta Tools.

Next useful follow-ups:

1. Add first-class Files API helpers if Teleton needs upload/list workflows.
2. Add trigger/webhook management tools in a separate PR, since they are broader automation surfaces than this core schema/connection fix.

---

This summary was automatically extracted from the AI working session output.

[konard]

🤖 Solution Draft Log

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

• Model: GPT-5.4
• Provider: OpenAI
• Public pricing estimate: $5.735434

📊 Context and tokens usage:

• 8.3M / 1.1M (789%) input tokens, 28.5K / 128K (22%) output tokens

Total: (211.9K + 8.1M cached) input tokens, 28.5K output tokens, $5.735434 cost

🤖 Models used:

• Tool: OpenAI Codex
• Requested: gpt-5.4
• Model: GPT-5.4 (gpt-5.4)

📎 Log file uploaded as Gist (19623KB)

• View complete solution draft log

---

Now working session is ended, feel free to review and add any feedback on the solution draft.

[konard]

✅ Ready to merge

This pull request is now ready to be merged:

• All CI checks have passed
• No merge conflicts
• No pending changes

---

Monitored by hive-mind with --auto-restart-until-mergeable flag

[xlabtg]

Thanks for the work here — this is a useful improvement, especially the new schema lookup and connection reuse flow. However, I don’t think PR #163 fully completes issue #162 yet.

A few gaps still remain before the task can be considered fully done:

1. The issue explicitly requires full audit/update for Composio API v3 coverage, including the referenced docs for Files, Toolkits, Triggers, Webhooks, and meta-tools such as remote_workbench / remote_bash_tool if applicable. This PR adds composio_get_tool_schemas, composio_list_connections, and composio_get_connection, but it does not add any support for Files / Triggers / Webhooks / remote-workbench surfaces, and the PR description explicitly says those were deferred.

2. Because of that, the current PR should not really be treated as “Fixes Audit and update composio-direct plugin for full Composio API v3 compliance #162” under the issue’s own acceptance criteria. As written, Audit and update composio-direct plugin for full Composio API v3 compliance #162 expects all core API domains to be supported or clearly handled, especially Auth, Tools, Toolkits, Connections, and Triggers/Webhooks if applicable.

3. The updated README/API audit notes currently read as if the plugin is now broadly aligned with the required Composio v3/meta-tool flows, but the implementation is still only partial relative to the issue scope. That wording should either be narrowed, or the missing surfaces should be implemented.

4. The tests are good for the newly added schema/connection tools, but they still do not demonstrate the broader deliverables requested in Audit and update composio-direct plugin for full Composio API v3 compliance #162:

   • basic examples for the remaining audited API domains,
   • proof that the Teleton Agent can reliably use the expanded surface without workarounds,
   • test coverage for any newly added Files / Triggers / Webhooks support if that is part of the intended completion.

So my recommendation would be one of two paths:

• either keep this PR as a partial step and change it from “Fixes Audit and update composio-direct plugin for full Composio API v3 compliance #162” to “partial progress toward Audit and update composio-direct plugin for full Composio API v3 compliance #162”;
• or extend it further so it actually satisfies the full issue scope before merging/closing the issue.

At the moment, this looks like a strong partial implementation, but not a full completion of #162.

[konard]

🤖 AI Work Session Started

Starting automated work session at 2026-04-19T18:38:00.218Z

The PR has been converted to draft mode while work is in progress.

This comment marks the beginning of an AI work session. Please wait for the session to finish, and provide your feedback.

[konard]

🤖 Solution Draft Log

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

• Model: GPT-5.4
• Provider: OpenAI
• Public pricing estimate: $6.931314

📊 Context and tokens usage:

• 9.1M / 1.1M (869%) input tokens, 48.0K / 128K (38%) output tokens

Total: (286.8K + 8.8M cached) input tokens, 48.0K output tokens, $6.931314 cost

🤖 Models used:

• Tool: OpenAI Codex
• Requested: gpt-5.4
• Model: GPT-5.4 (gpt-5.4)

📎 Log file uploaded as Repository (52556KB)

• View complete solution draft log

---

Now working session is ended, feel free to review and add any feedback on the solution draft.

[konard]

✅ Ready to merge

This pull request is now ready to be merged:

• All CI checks have passed
• No merge conflicts
• No pending changes

---

Monitored by hive-mind with --auto-restart-until-mergeable flag