clementine-agent 1.0.51 → 1.0.52

package/dist/agent/assistant.js

@@ -1616,6 +1616,11 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                     env: {
                         CLEMENTINE_HOME: BASE_DIR,
                         CLEMENTINE_TEAM_AGENT: profile?.slug ?? 'clementine',
+                        // Propagate interaction-source so the MCP subprocess can gate
+                        // owner-only tools. Without this, getInteractionSource() inside
+                        // the subprocess returns the module-default 'autonomous' and
+                        // every owner-DM-gated tool (env_set, allow_tool, etc.) refuses.
+                        CLEMENTINE_INTERACTION_SOURCE: sourceOverride ?? inferInteractionSource(sessionKey),
                     },
                 },
                 ...externalMcpServers,
@@ -3068,6 +3073,8 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                             env: {
                                 CLEMENTINE_HOME: BASE_DIR,
                                 CLEMENTINE_TEAM_AGENT: profile?.slug ?? 'clementine',
+                                // Auto-memory extractor runs autonomously.
+                                CLEMENTINE_INTERACTION_SOURCE: 'autonomous',
                             },
                         },
                     },

package/dist/tools/admin-tools.js

@@ -65,11 +65,15 @@ function maskSecret(value) {
     return value.slice(0, 4) + '…' + value.slice(-4);
 }
 function requireOwnerDm() {
-    const source = getInteractionSource();
+    // The MCP server runs as a subprocess, so getInteractionSource() reads the
+    // subprocess's own module state — always the 'autonomous' default. The
+    // parent daemon propagates the real source via CLEMENTINE_INTERACTION_SOURCE.
+    // Fall back to the in-module state only if env isn't set (tool-runner tests).
+    const source = process.env.CLEMENTINE_INTERACTION_SOURCE ?? getInteractionSource();
     if (source !== 'owner-dm') {
         return {
             ok: false,
-            message: `Env writes are restricted to direct owner conversations. Current interaction source: ${source}. Ask the owner to message directly if they want to change credentials.`,
+            message: `This tool is restricted to direct owner conversations. Current interaction source: ${source}. Ask the owner to message directly if they want to run this.`,
         };
     }
     return { ok: true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.0.51",
+  "version": "1.0.52",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",