v0.1.0-beta.4

@jc_stack/ez-composio 0.1.0-beta.4

This prerelease includes the plugin packaging and release-contract hardening merged in PR #11.

• pinned package-manager metadata
• explicit third-party notices and release checks
• exact-artifact trusted-publishing receipt

Source: ccddac84fbef26f208f349273deaaa3e48625d4e

0.1.0-beta.3 — testing beta

0.1.0-beta.3 — testing beta

Adopt latest-tag publication and the corrected shared publisher main-CI selection. Runtime behavior and provider credentials are unchanged.

Independent final review and required CI passed on the release PR. Exact packed Docker/runtime tests passed; source tree matches the reviewed release preparation.

SHA-256: 38f5e8abf699a06d700f83964e135844547b5b606b314000ae020a7d5c2bfcca
Source: 6bcc8cb
Review and QA: #10

Existing live-provider, fresh-host/reboot and deployment-upgrade acceptance limits remain. Publication does not upgrade installed agents.

Published through GitHub Actions OIDC. npm latest and downloaded tarball bytes match this candidate.

Composio 0.1.0-beta.2

Native file-upload requests now support binary provider uploads while keeping credentials broker-side and receipts isolated per agent. Ambiguous writes are retained without automatic replay. CLI version readback matches package metadata.

Reviewed and merged PRs #4 and #8. Seven tests, package checks, independent review, and packed Docker install/restart/reinstall/isolation/revocation QA passed. Final source: af7b0397b2d2731f9d3d7537f007c3ff92d8884d.

Published to npm beta through the shared OIDC workflow: https://github.com/jdorado/ez_composio/actions/runs/34471018309

Artifact SHA-256: 662b303db1e91d8db843e9d0fd9f840bf3d55481404b11ede539bcd8efabf658. Registry readback verifies the exact tested bytes. Existing latest tag remains unchanged.

Beta limitation: fresh-host real OAuth/reboot acceptance remains pending. This release does not upgrade a running agent.

Composio 0.1.0-beta.1

First testing beta of the independent Ez Composio plugin.

Tell the agent to install Composio and provide the project key when requested. It handles private broker setup and enrollment. Individual apps connect only when requested through their consent step.

Includes private Docker IPC that survives reinstall/upgrade, filtered and paginated toolkit discovery, full native schemas, explicit account execution and durable uncertainty receipts. No static integration catalogue or provider workflow engine is embedded in Ez.

Install the attached tarball after verifying SHA256SUMS; read its README and registered skill. Package identity: @jc_stack/ez-composio@0.1.0-beta.1. The GitHub artifact is installable through Ez's inspected local-source catalog. Also available on npm as @jc_stack/ez-composio@0.1.0-beta.1 under the beta tag.

Verified: six offline adversarial tests, packed Docker install, discovery, restart, reinstall, credential isolation and atomic revocation. Independent final review and GitHub CI passed. Merged source tree matches reviewed commit 0103c1599c83aa1956eafcc3417ba1538603e152.

Beta limits: fresh-host real OAuth/reboot acceptance remains pending; OAuth support/scopes and provider availability vary. No automatic session renewal, provider-write retries or exactly-once guarantee. Pre-beta local loopback deployments require the documented state-preserving migration. No public container image is published.

Tarball SHA-256: e27b464bb65e0a3dfff901f3e479c0356174f6577596a6706494bc6fbb88aa77.