发布

  • fix(cli): address bugbot review findings from the guardrails stack (#3886)

    frostbyte_neo 发布于 2026-08-03 13:50:45 +00:00

    Follow-up to https://github.com/ComposioHQ/composio/pull/3885, which is
    now merged into next.

    This PR:

    • reports pending-login cache read failures as I/O errors instead of
      masking them as decode failures (composio login --poll)
    • restores pairwise polarity assertions for the semverComparator
      Array.sort compatibility case
    • consolidates the duplicated ephemeral HTTP server test helper in
      test/__utils__/http-server.ts
    • makes server-owned connected-account statuses forward-compatible while
      preserving the credential-stripping schema allowlist
    • redacts raw payload values from connected-account parse warnings and
      adds regression coverage for unknown statuses and secret-bearing
      malformed payloads
    • documents why the client-singleton test re-derives the consumer cache
      cwd hash

    Rebase notes

    Rebased onto origin/next at ef1ec9148.

    • Dropped the empty GITHUB_* compatibility commit; that contract is
      already present on next through
      https://github.com/ComposioHQ/composio/pull/3880.
    • Adapted the connected-account decoder rename to the service extracted
      upstream in connected-account-selection.ts.

    Context

    Fix-forward PR for actionable Cursor Bugbot findings on the guardrails
    stack (#3877–#3885). The stale decode-error string match and unused
    release helper were already resolved upstream, and the vi.stubEnv(..., undefined) concern is not actionable on Vitest 4.1.10.

    下载附件