github-featured / composiohq--composio

发布

RSS 订阅源

@composio/cli@0.2.33-beta.298 377de97293

比较
fix(cli): fail closed on permission gaps and tolerate skewed payloads (#3879)

frostbyte_neo 发布于 2026-07-21 07:15:53 +00:00
This PR:
- lands ten behavioral fixes as one commit each, so git show reviews
  standalone
- fails the tool-permission gate closed: an unknown snapshot state or a
  failed policy resolve on a controls-enabled org now synthesizes an
  ask_every_call snapshot (never persisted) instead of silently skipping
  the gate, and interactive approval UI never spawns where nobody can
  answer it (CI/Vitest)
- surfaces realtime subscription failures as typed errors: composio listen prints one actionable line mentioning composio login, cleans
  up temporary triggers, and exits 1 instead of dumping a captured defect
- tolerates newer connected-account payloads with a fallback decode
  whose field allowlist keeps credential-bearing fields (state, data)
  out of link --list output
- decodes persisted caches and GitHub release listings per entry, so one
  corrupt or version-skewed entry drops only itself
- extracts API error details field by field, renders the deepest cause
  in pretty errors, and accepts null optional strings in agent API
  responses
Stack (re-slice of https://github.com/ComposioHQ/composio/pull/3859;
each PR targets its parent and auto-retargets to next as parents
merge):
1. https://github.com/ComposioHQ/composio/pull/3877 — guidelines + inert
  rule groups
2. https://github.com/ComposioHQ/composio/pull/3878 — new Function()
  eval security fix
3. https://github.com/ComposioHQ/composio/pull/3879 — behavioral fix
  pack ← this PR
4. https://github.com/ComposioHQ/composio/pull/3880 — platform-imports
  rule + migration
5. https://github.com/ComposioHQ/composio/pull/3881 — terminal-streams
  rule + TerminalUI boundary
6. https://github.com/ComposioHQ/composio/pull/3882 — descriptor seam +
  zod→Schema
7. https://github.com/ComposioHQ/composio/pull/3883 — test-tree lint +
  deterministic suites
8. https://github.com/ComposioHQ/composio/pull/3884 — typed error
  boundaries + v4 seams
9. https://github.com/ComposioHQ/composio/pull/3885 — try/catch+env ban
- boundary ratchet
On stacked bases CI runs lint/build and the CLI Docker e2e job; unit
tests and typecheck are verified locally per PR and re-verified by full
CI when each PR is retargeted to next.
下载附件
- 源代码 (ZIP)
- 源代码 (TAR.GZ)

0 发布 1,233 Git 标签

fix(cli): fail closed on permission gaps and tolerate skewed payloads (#3879)