gravity-schema 0.4.4__tar.gz → 0.5.2__tar.gz

{gravity_schema-0.4.4 → gravity_schema-0.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: gravity-schema
-Version: 0.4.4
+Version: 0.5.2
 Summary: Gravity agent manifest contract — models, validation, and JSON Schema export
 License-Expression: Apache-2.0
 License-File: LICENSE

{gravity_schema-0.4.4 → gravity_schema-0.5.2}/gravity_schema/__init__.py

@@ -36,7 +36,9 @@ from .manifest import (
     StateSpec,
     TriggersSpec,
 )
+from .source_scan import is_agent_source, undeclared_write_tools
 from .validation import (
+    check_imported_write_approvals,
     check_tool_references,
     load_manifest_file,
     load_manifest_text,
@@ -73,6 +75,10 @@ __all__ = [  # noqa: RUF022 - grouped by concern, not alphabetical
     "load_manifest_text",
     "load_manifest_file",
     "check_tool_references",
+    "check_imported_write_approvals",
+    # source scan
+    "is_agent_source",
+    "undeclared_write_tools",
     # catalog
     "ToolCatalog",
     "StaticToolCatalog",

{gravity_schema-0.4.4 → gravity_schema-0.5.2}/gravity_schema/catalog.py

@@ -10,6 +10,13 @@ from typing import Protocol
 
 import yaml
 
+# libyaml's parser, about 8x faster: every CLI command loads the whole catalog at import.
+_LOADER = getattr(yaml, "CSafeLoader", yaml.SafeLoader)
+
+
+def _load(text: str):
+    return yaml.load(text, Loader=_LOADER)
+
 
 class ToolCatalog(Protocol):
     def exists(self, tool_name: str) -> bool: ...
@@ -39,6 +46,7 @@ class ToolEntry:
     breadth: str  # generic | niche
     guarantee: str  # certified | community | experimental
     side_effect: str  # read | write
+    toolkit: str | None = None  # the account a user connects for it; None when none is needed
 
 
 _BREADTH = {"generic", "niche"}
@@ -48,12 +56,12 @@ _SIDE_EFFECT = {"read", "write"}
 
 def load_catalog(path: Path | None = None) -> tuple[ToolEntry, ...]:
     """Parse and check catalog.yaml; a malformed entry fails at import."""
-    raw = yaml.safe_load((path or Path(__file__).with_name("catalog.yaml")).read_text(encoding="utf-8"))
+    raw = _load((path or Path(__file__).with_name("catalog.yaml")).read_text(encoding="utf-8"))
     # catalog_imported.yaml (`gravity-gateway sync-tools`): the same apps' other tools,
     # experimental. Absent until the first sync; never read for an explicit path.
     imported = Path(__file__).with_name("catalog_imported.yaml")
     if path is None and imported.is_file():
-        raw = [*raw, *(yaml.safe_load(imported.read_text(encoding="utf-8")) or [])]
+        raw = [*raw, *(_load(imported.read_text(encoding="utf-8")) or [])]
     entries: list[ToolEntry] = []
     for item in raw:
         entry = ToolEntry(
@@ -64,6 +72,7 @@ def load_catalog(path: Path | None = None) -> tuple[ToolEntry, ...]:
             breadth=item["breadth"],
             guarantee=item["guarantee"],
             side_effect=item["side_effect"],
+            toolkit=item.get("toolkit"),
         )
         problems = []
         if entry.breadth not in _BREADTH:

{gravity_schema-0.4.4 → gravity_schema-0.5.2}/gravity_schema/catalog.yaml

@@ -10,6 +10,7 @@
 # Fields
 #   name         the Gravity name builders write in permissions.tools
 #   slug         the vendor action it routes to; null for a gateway built-in
+#   toolkit      the account a user connects for it (gravity connect); null when none is needed
 #   description  what a builder or a model reads to choose it
 #   scopes       the consent a consumer grants when connecting
 #   breadth      generic: ordinary plumbing any agent might use
@@ -21,14 +22,34 @@
 
 - name: example.echo
   slug: null
+  toolkit: null
   description: echoes back its input, for templates and plumbing tests
   scopes: []
   breadth: generic
   guarantee: certified
   side_effect: read
 
+- name: web.search
+  slug: COMPOSIO_SEARCH_WEB
+  toolkit: composio_search
+  description: search the web; returns results with titles, links and snippets. No account needed
+  scopes: []
+  breadth: generic
+  guarantee: certified
+  side_effect: read
+
+- name: web.fetch
+  slug: COMPOSIO_SEARCH_FETCH_URL_CONTENT
+  toolkit: composio_search
+  description: read the text content of a web page by its URL. No account needed
+  scopes: []
+  breadth: generic
+  guarantee: certified
+  side_effect: read
+
 - name: supadata.get_transcript
   slug: null
+  toolkit: null
   description: fetch the transcript of a YouTube video with the caller's own Supadata API key (api_key argument)
   scopes: []
   breadth: niche
@@ -37,6 +58,7 @@
 
 - name: gmail.read
   slug: GMAIL_FETCH_EMAILS
+  toolkit: gmail
   description: read the connected Gmail inbox
   scopes: [gmail.readonly]
   breadth: generic
@@ -45,6 +67,7 @@
 
 - name: gmail.draft
   slug: GMAIL_CREATE_EMAIL_DRAFT
+  toolkit: gmail
   description: create a Gmail draft
   scopes: [gmail.compose]
   breadth: generic
@@ -53,6 +76,7 @@
 
 - name: gmail.send
   slug: GMAIL_SEND_EMAIL
+  toolkit: gmail
   description: send an email from the connected Gmail
   scopes: [gmail.send]
   breadth: generic
@@ -61,6 +85,7 @@
 
 - name: sheets.read
   slug: GOOGLESHEETS_BATCH_GET
+  toolkit: googlesheets
   description: read values from a connected Google Sheet
   scopes: [sheets]
   breadth: generic
@@ -69,6 +94,7 @@
 
 - name: sheets.append
   slug: GOOGLESHEETS_BATCH_UPDATE
+  toolkit: googlesheets
   description: append a row to a connected Google Sheet
   scopes: [sheets]
   breadth: generic
@@ -77,6 +103,7 @@
 
 - name: slack.send
   slug: SLACK_SEND_MESSAGE
+  toolkit: slack
   description: post a message to a connected Slack channel
   scopes: [slack.chat:write]
   breadth: generic
@@ -85,6 +112,7 @@
 
 - name: slack.list_channels
   slug: SLACK_LIST_ALL_CHANNELS
+  toolkit: slack
   description: list channels in the connected Slack workspace
   scopes: [slack.channels:read]
   breadth: generic
@@ -93,6 +121,7 @@
 
 - name: slack.read_history
   slug: SLACK_FETCH_CONVERSATION_HISTORY
+  toolkit: slack
   description: read message history of a Slack channel
   scopes: [slack.channels:history]
   breadth: generic
@@ -101,6 +130,7 @@
 
 - name: slack.find_user
   slug: SLACK_FIND_USERS
+  toolkit: slack
   description: find a Slack user by name, handle or email, for mentions
   scopes: [slack.users:read]
   breadth: generic
@@ -109,6 +139,7 @@
 
 - name: calendar.read
   slug: GOOGLECALENDAR_EVENTS_LIST
+  toolkit: googlecalendar
   description: list events on the connected Google Calendar
   scopes: [calendar.readonly]
   breadth: generic
@@ -117,6 +148,7 @@
 
 - name: drive.read
   slug: GOOGLEDRIVE_DOWNLOAD_FILE
+  toolkit: googledrive
   description: download a file from the connected Google Drive
   scopes: [drive.readonly]
   breadth: generic
@@ -125,6 +157,7 @@
 
 - name: linear.create_issue
   slug: LINEAR_CREATE_LINEAR_ISSUE
+  toolkit: linear
   description: create an issue in a connected Linear team
   scopes: [linear.write]
   breadth: generic
@@ -133,6 +166,7 @@
 
 - name: linear.list_teams
   slug: LINEAR_LIST_LINEAR_TEAMS
+  toolkit: linear
   description: list the connected Linear workspace teams
   scopes: [linear.read]
   breadth: generic
@@ -141,6 +175,7 @@
 
 - name: linear.list_issues
   slug: LINEAR_LIST_LINEAR_ISSUES
+  toolkit: linear
   description: list open issues in the connected Linear workspace
   scopes: [linear.read]
   breadth: generic
@@ -149,6 +184,7 @@
 
 - name: linear.get_issue
   slug: LINEAR_GET_LINEAR_ISSUE
+  toolkit: linear
   description: read one Linear issue by id
   scopes: [linear.read]
   breadth: generic
@@ -158,6 +194,7 @@
 # GitHub: read-only, for change summaries and contribution profiles.
 - name: github.list_commits
   slug: GITHUB_LIST_COMMITS
+  toolkit: github
   description: list commits on a repository branch, filterable by date range, author or path
   scopes: [repo]
   breadth: generic
@@ -166,6 +203,7 @@
 
 - name: github.get_commit
   slug: GITHUB_GET_A_COMMIT
+  toolkit: github
   description: read one commit with its changed files, line counts and patches
   scopes: [repo]
   breadth: generic
@@ -174,6 +212,7 @@
 
 - name: github.compare
   slug: GITHUB_COMPARE_TWO_COMMITS
+  toolkit: github
   description: compare two refs (base...head) with the commits and changed files between them
   scopes: [repo]
   breadth: generic
@@ -182,6 +221,7 @@
 
 - name: github.list_pull_requests
   slug: GITHUB_LIST_PULL_REQUESTS
+  toolkit: github
   description: list pull requests on a repository, filterable by state and branch
   scopes: [repo]
   breadth: generic
@@ -190,6 +230,7 @@
 
 - name: github.list_pr_files
   slug: GITHUB_LIST_PULL_REQUESTS_FILES
+  toolkit: github
   description: list the files a pull request changes, with line counts and patches
   scopes: [repo]
   breadth: generic
@@ -198,6 +239,7 @@
 
 - name: github.list_pr_reviews
   slug: GITHUB_LIST_REVIEWS_FOR_A_PULL_REQUEST
+  toolkit: github
   description: list the reviews submitted on a pull request
   scopes: [repo]
   breadth: generic
@@ -206,6 +248,7 @@
 
 - name: github.search_issues
   slug: GITHUB_SEARCH_ISSUES_AND_PULL_REQUESTS
+  toolkit: github
   description: search issues and pull requests with GitHub qualifiers (repo:, author:, reviewed-by:, is:pr, created:)
   scopes: [repo]
   breadth: generic
@@ -214,6 +257,7 @@
 
 - name: linkedin.whoami
   slug: LINKEDIN_GET_MY_INFO
+  toolkit: linkedin
   description: read the connected LinkedIn member's id, name and headline (the author of their posts)
   scopes: [linkedin.profile]
   breadth: generic
@@ -222,6 +266,7 @@
 
 - name: linkedin.create_post
   slug: LINKEDIN_CREATE_LINKED_IN_POST
+  toolkit: linkedin
   description: publish a post on LinkedIn as the connected member or an organisation they manage
   scopes: [linkedin.w_member_social]
   breadth: generic