[Birfy]

Fixes #359

First slice only, per the Owner decision (2026-10-20, option a). The developer scaffold, catalog and publishing stay parked.

What

• Settings → Connectors, Composio row: the typed "More apps" field and the fixed pill grid are replaced by the picked apps (pills, click to remove) and a Search Composio apps box. It searches Composio's app list and offers the results to add. Before connecting it uses the key being pasted, which the search never saves; after connecting it uses the saved key. With no key, or when the search fails, it filters the built-in common apps instead.
• Each picked app shows Ready or Needs sign-in, both under the connected row and on the pills in Choose apps.
• Host: connector-app-search (GET /toolkits?search=) and connector-app-status (GET /tool_router/session/{id}/toolkits). The key goes only in the x-api-key header, redirects are refused, and only { slug, name } with valid slugs comes back. Both endpoints are SHARED_BLOCKED like the other connector endpoints. An app counts as ready when it needs no auth or has an ACTIVE connected account.

Why: the owner chose option (a): replace the typed app name with a search over Composio's apps, and show each app's status.

Test

• core/test/connectors.test.js: search and status helpers (header-only key, slug filtering, query cap, errors) and the channel endpoints (pasted key not saved, saved key, status map, GitHub refused).
• core/test/connector-apps.test.js (new): the picker renders pills with status, search results, the common-app fallback and the error hint, plus the status list.
• core/test/authz.test.js: the new endpoints are blocked with two members.
• ARCH_DOCS_BASE=origin/main TZ=UTC npm run verify: all green (core 1064, social 291, tree 80, timeline 80, scripts 88, interop 37, live-e2e 16; 0 failures).
• Not run: live Composio account or Mac instances (fetches are faked in tests).

Risk tier: T2 (estimate; the controller sets the label)

[Birfy]

Self-review: PASS
Tip SHA: cd1b7cf
Ran:

• ARCH_DOCS_BASE=origin/main TZ=UTC npm run verify: pass, 0 failures. It covered core lint plus arch-docs OK, plugin lint, build-client --check, ds-bot-patches check, and the test suites: core 1064, social 291, tree 80, timeline 80, .github scripts 88, interop 37, live-e2e 16.
• node .github/scripts/changelog.mjs check: 13 fragments well formed.
• CI on the tip: tests-ok, test, plugins (social/tree/timeline), package, risk tier and reviewed tip all pass.
• Diff checked against the owner design rules:
  • Only the confirmed slice is in it: app search plus per-app status. No scaffold or catalog.
  • The key is used only in the x-api-key header to Composio, never saved by a search, never returned, and never in chat.
  • The new endpoints are SHARED_BLOCKED.
  • Per-Bot connector access is unchanged.
  • The UI is English, with a zh entry for each new string.
    Not run:
• A live Composio account (fetches are faked in tests).
• Live Mac instances, the smoke bench, and production Bot Social.