This PR: - Add `.github/workflows/agent-substrate.yml` running `pnpm validate:agent-skills` and `pnpm validate:skill-routing` on every push and pull request; both validators previously ran in no CI workflow - No path filters on the trigger: the stale-guidance walk scans every text file in the repo, so any change can affect the result (PR runs restore caches but only `next` pushes save them, per the `setup-node-pnpm-bun` guidance) - Skip `vendor/` directories in the `validate:agent-skills` stale-guidance walk, which was failing on read-only third-party snapshots mentioning other tools' rule conventions - Extend the validator's command scan to `CONTRIBUTING.md` (with a `pnpm dlx` exemption), so its documented commands are checked against `package.json`, `python/Makefile`, and `python/noxfile.py` like the rest of the guidance - Point the routing-test header, root `AGENTS.md`, and `skill-maintenance` reference docs at the new workflow, and add a "Working with AI Coding Agents" section to `CONTRIBUTING.md` covering the inherited agent setup, the two checks, and the routing-probe requirement for skill edits ## Context These two validators are the only checks keeping repo-level agent guidance honest: command names mentioned in guidance are verified against `package.json`, `python/Makefile`, and `python/noxfile.py`, and routing probes assert each skill stays the unique top match for its representative task. Until now nothing enforced either one, and the stale-guidance walk was already red on vendored trees — a failure no guidance owner could fix, which trains people to ignore the check. This makes both checks blocking everywhere they can bite. ## Verification - `pnpm validate:agent-skills` — 19 skills, green, now including `CONTRIBUTING.md` commands - `pnpm validate:skill-routing` — 19 probes over 19 skills, green - Workflow YAML parsed; oxlint and prettier clean on touched files - `Agent Substrate` workflow ran green on this PR (42s) before the trigger change and re-runs on every push
10 KiB
Contributing to Composio SDK
Thank you for your interest in contributing to Composio. This guide covers the root SDK repository. The monorepo contains the TypeScript SDK, Python SDK, docs site, examples, and release tooling.
Table of Contents
- Development Setup
- Project Structure
- Development Commands
- Working with AI Coding Agents
- Coding Standards
- Documentation Requirements
- Pull Request Process
- Creating New Providers
- Testing Guidelines
- Release Process
- Questions and Support
Development Setup
Prerequisites
Tool versions are pinned in mise.toml, which is the source of truth for local development and CI:
- Node.js 24.17.0
- pnpm 11.8.0
- Bun 1.3.10
- Deno 2.6.7
- Python 3.12
- uv 0.8.19
Use mise to install the toolchain:
mise install
mise installs pnpm through its npm backend. Do not rely on Corepack for this repository.
Getting Started
-
Fork and clone the repository:
git clone https://github.com/YOUR_USERNAME/composio.git cd composio -
Install the pinned toolchain:
mise install -
Install dependencies:
pnpm install -
Build the project:
pnpm build -
Run tests:
pnpm test
Project Structure
composio/
├── ts/ # TypeScript SDK workspace
│ ├── packages/
│ │ ├── core/ # Core SDK package (@composio/core)
│ │ ├── cli/ # CLI binary and command implementations
│ │ ├── cli-keyring/ # Keyring helper for the CLI
│ │ ├── cli-local-tools/ # Local tools support for the CLI
│ │ ├── providers/ # AI framework provider adapters
│ │ ├── json-schema-to-zod/ # Schema conversion utility
│ │ └── ts-builders/ # TypeScript build helpers
│ ├── e2e-tests/ # Runtime and CLI end-to-end tests
│ ├── examples/ # TypeScript examples
│ └── scripts/ # TypeScript build and maintenance scripts
├── python/ # Python SDK
│ ├── composio/ # Main Python package
│ ├── providers/ # Python provider adapters
│ ├── tests/ # pytest test suite
│ ├── scripts/ # Python development and release scripts
│ └── docs/ # Python release notes and process docs
├── docs/ # Documentation site
├── test/ # Root-level release/install script tests
└── .github/ # GitHub Actions and shared CI actions
Development Commands
# Build all packages
pnpm build
# Build TypeScript packages only
pnpm build:packages
# Lint TypeScript packages
pnpm lint
# Fix lint issues where possible
pnpm lint:fix
# Format supported files
pnpm format
# Create a new TypeScript provider
pnpm create:provider <provider-name> [--agentic]
# Create a new TypeScript example
pnpm create:example <example-name>
# Check peer dependencies
pnpm check:peer-deps
# Update peer dependencies
pnpm update:peer-deps
Dead code detection
The Dead Code CI workflow reports likely-orphaned code on every PR (findings
land in the run's Step Summary; it never fails the build). Run the same checks
locally:
# TypeScript — unused files, exports, types and dependencies
pnpm dlx knip@5 # config in knip.json
# Python — unused functions, classes and variables
cd python && make dead-code # vulture; allowlist in python/config/vulture_allowlist.py
# GitHub Actions — orphaned reusable workflows and composite actions
bash .github/scripts/check-orphan-ci.sh
These tools carry false positives (public API surface, dynamic imports,
import-map targets), so treat their output as advisory: verify a finding is
truly unreferenced before deleting, and suppress confirmed false positives via
knip.json / vulture_allowlist.py.
Working with AI Coding Agents
This repository ships its own agent guidance, and CI keeps it honest. You get it for free — an agent that reads this repo inherits the layout, commands, and guardrails without setup.
AGENTS.md files live at the root and inside each subtree (ts/, python/, docs/, and the packages). Coding agents read the nearest one automatically, so you usually do not need to do anything beyond keeping them accurate when you move code. The canonical skill tree is .agents/skills/ (with .claude/skills as a compatibility symlink): focused, task-scoped skills that route an agent to the right workflow, from bug-fixing to cli-release.
Two deterministic checks guard this guidance:
pnpm validate:agent-skills # frontmatter, reference links, stale guidance refs, command names
pnpm validate:skill-routing # routing smoke test over skill descriptions
validate:agent-skills parses package.json, python/Makefile, and python/noxfile.py, then verifies every command mentioned in guidance actually exists — so guidance cannot recommend a command that was renamed away. Both checks run in CI via .github/workflows/agent-substrate.yml whenever agent guidance changes.
If you add or rename a skill, or rewrite a skill description, run both checks and add a routing probe in ts/scripts/test-skill-routing.mjs so routing stays covered. To author or edit a skill, read .agents/skills/skill-maintenance/SKILL.md first.
Coding Standards
TypeScript
- Follow the style of the package you are editing.
- Use TypeScript for new TypeScript SDK code.
- Use named exports for public APIs unless the local package pattern says otherwise.
- Keep public API changes typed and documented with TSDoc.
- Add focused tests for new behavior and bug fixes.
- Use Oxlint and Prettier through the repo scripts.
- Keep generated or vendored code out of manual edits unless the package explicitly owns that output.
Python
- Follow the existing Python SDK layout under
python/. - Use Ruff formatting and linting through the Python make targets.
- Keep provider-specific changes inside the relevant
python/providers/*package. - Add pytest coverage for behavior changes.
Error Handling
- Use the existing error classes and result shapes in the package you are editing.
- Include enough context in error messages to identify the failing operation.
- Avoid swallowing errors unless the caller has an explicit fallback path.
Documentation Requirements
Update docs when a change affects public behavior, install flows, examples, environment variables, release steps, or provider usage.
For documentation-site work, read docs/CLAUDE.md first. It documents the docs app, MDX conventions, link checking, generated data, and docs branch workflow.
Package documentation should generally include:
- A short package description.
- Installation instructions.
- Usage examples.
- Public API notes.
- Environment variables or authentication requirements when relevant.
- Provider limitations or streaming details when relevant.
Pull Request Process
-
Create a branch from the target base branch. Most active SDK and docs work targets
next.git checkout next git pull origin next git checkout -b feature/your-feature-name -
Make focused changes that match the issue or feature scope.
-
Add or update tests for behavior changes.
-
Update documentation when user-facing behavior changes.
-
Add a changeset for changes that affect published TypeScript packages:
pnpm changesetRoot-level documentation-only changes, such as edits to this file, do not need a changeset.
-
Run the smallest meaningful verification command locally before opening the PR.
-
Push your branch and open a PR against the correct base branch.
Creating New Providers
TypeScript Providers
Use the TypeScript provider creation script:
pnpm create:provider my-provider [--agentic]
Then:
- Implement the required provider methods.
- Add tests under the provider package.
- Add examples or docs when the provider has user-facing setup details.
- Run the package tests and relevant build checks.
Python Providers
Use the Python provider creation target from the python/ directory:
cd python
make create-provider name=my-provider
For agentic providers:
cd python
make create-provider name=my-provider agentic=true
Then add provider tests and run the relevant Python checks.
Testing Guidelines
TypeScript SDK
Run the root TypeScript test suite:
pnpm test
Run all TypeScript end-to-end tests:
pnpm test:e2e
Run runtime-specific end-to-end tests:
pnpm test:e2e:node
pnpm test:e2e:deno
pnpm test:e2e:cli
pnpm test:e2e:cloudflare
Open the Vitest UI:
pnpm test:ui
Python SDK
Set up the Python development environment:
cd python
make env
source .venv/bin/activate
Run Python checks:
make fmt
make chk
make tst
make snt
You can also run a focused pytest command through uv:
uv run pytest tests/test_sdk.py -v
Docs Site
For docs changes:
cd docs
bun install
bun run build
bun run lint:links
See docs/CLAUDE.md for the full docs workflow.
Release Process
Only maintainers publish releases.
For TypeScript package and CLI release details, use ts/docs/internal/release.md. The root scripts are:
pnpm changeset
pnpm changeset:version
pnpm changeset:release
For Python package release details, use python/docs/release.md. Python package versioning and release preparation are handled from the python/ workspace.
Questions and Support
- Join our Discord Community
- Check our Documentation
- File issues on GitHub
License
By contributing to Composio SDK, you agree that your contributions will be licensed under the ISC License.