Composio managed OAuth needs link and active verification

Current Composio TypeScript SDK documents connectedAccounts.link for managed OAuth; initiate is retired for that combination. Preserve raw account ownership checks because normalized connected-account responses can omit user_id. In an offline integration rebuild, pinned schema validation and MCP discovery tests caught contract boundaries, but fake schemas cannot establish live provider compatibility. Single-call uploads expose phase progress, not measured byte percentages.