clementine-agent 1.0.51 → 1.0.53

package/dist/agent/assistant.js

@@ -1093,7 +1093,9 @@ The **only source of truth for tool availability is your function schema**. Do n
 
 **Never** say the tool "isn't loaded in this session," "doesn't carry over from Claude Desktop," "the tools array is empty," or "MCP server still connecting." If any of those phrasings come to mind, call the tool directly and report what actually happens instead.
 
-\`list_allowed_tools\` / \`disallow_tool\` manage the whitelist. \`integration_status\` is for env-var (API key) integrations — not for claude_ai_* connectors, which are schema-driven.
+\`list_allowed_tools\` / \`disallow_tool\` manage the whitelist. \`integration_status\` is for env-var (API key) integrations — **not** for claude_ai_* connectors, which are schema-driven. Don't use \`integration_status\` as a proxy for "can I call Drive / Gmail / etc." — those are always tried by direct tool call, not status lookup.
+
+**Critical rule: if the user asks you to use a claude_ai_* connector, you call the connector tool. Full stop.** Do not report "I tried and it failed" unless there was an actual tool call that returned an actual error — your audit log records every tool call, so narrating a failed attempt when the audit shows no call will be spotted.
 
 ## Context Window Management
 
@@ -1613,9 +1615,17 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                     type: 'stdio',
                     command: 'node',
                     args: [MCP_SERVER_SCRIPT],
+                    // Spread process.env so the MCP subprocess sees the full environment
+                    // the daemon is running with — API keys hydrated from .env/Keychain,
+                    // PATH, HOME, etc. Without this, tools that inspect env vars
+                    // (integration_status, Outlook/Graph, Salesforce) see only the
+                    // handful we pass and report everything as "missing." Our explicit
+                    // keys come after the spread so we always win on overlaps.
                     env: {
+                        ...process.env,
                         CLEMENTINE_HOME: BASE_DIR,
                         CLEMENTINE_TEAM_AGENT: profile?.slug ?? 'clementine',
+                        CLEMENTINE_INTERACTION_SOURCE: sourceOverride ?? inferInteractionSource(sessionKey),
                     },
                 },
                 ...externalMcpServers,
@@ -3066,8 +3076,11 @@ You have a cost budget per message — not a hard turn limit. Work until the tas
                             command: 'node',
                             args: [MCP_SERVER_SCRIPT],
                             env: {
+                                ...process.env,
                                 CLEMENTINE_HOME: BASE_DIR,
                                 CLEMENTINE_TEAM_AGENT: profile?.slug ?? 'clementine',
+                                // Auto-memory extractor runs autonomously.
+                                CLEMENTINE_INTERACTION_SOURCE: 'autonomous',
                             },
                         },
                     },

package/dist/tools/admin-tools.js

@@ -65,11 +65,15 @@ function maskSecret(value) {
     return value.slice(0, 4) + '…' + value.slice(-4);
 }
 function requireOwnerDm() {
-    const source = getInteractionSource();
+    // The MCP server runs as a subprocess, so getInteractionSource() reads the
+    // subprocess's own module state — always the 'autonomous' default. The
+    // parent daemon propagates the real source via CLEMENTINE_INTERACTION_SOURCE.
+    // Fall back to the in-module state only if env isn't set (tool-runner tests).
+    const source = process.env.CLEMENTINE_INTERACTION_SOURCE ?? getInteractionSource();
     if (source !== 'owner-dm') {
         return {
             ok: false,
-            message: `Env writes are restricted to direct owner conversations. Current interaction source: ${source}. Ask the owner to message directly if they want to change credentials.`,
+            message: `This tool is restricted to direct owner conversations. Current interaction source: ${source}. Ask the owner to message directly if they want to run this.`,
         };
     }
     return { ok: true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.0.51",
+  "version": "1.0.53",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",