clementine-agent 1.0.74 → 1.0.76

package/dist/brain/connector-recipes.js

@@ -208,16 +208,10 @@ Steps:
         fields: [
             {
                 key: 'contact',
-                label: 'Contact',
+                label: 'Phone number or email',
+                placeholder: '+15551234567  or  someone@example.com',
                 required: true,
-                help: 'Pick an iMessage contact. Their phone number or email becomes the thread id.',
-                picker: {
-                    tool: 'mcp__imessage__search_contacts',
-                    intent: 'call search_contacts with query "{{query}}". For each match, output {id: the contact\'s phone number or email handle, label: the display name (or the handle if no name), sublabel: "handle: " + handle}. Return up to 15 results.',
-                    queryArg: 'query',
-                    minQueryLength: 2,
-                    allowCustom: true,
-                },
+                help: 'Paste the contact\'s iMessage handle exactly as it appears in your Messages thread. The iMessage MCP\'s search_contacts reads the Contacts app via AppleScript and is unreliable — we bypass it by letting you paste the handle directly.',
             },
             { key: 'limit', label: 'Max messages per run', placeholder: '50', defaultValue: '50' },
         ],

package/dist/cli/dashboard.js

@@ -2659,7 +2659,13 @@ export async function cmdDashboard(opts) {
             }
             const { query } = await import('@anthropic-ai/claude-agent-sdk');
             const { parseJsonResponse } = await import('../brain/llm-client.js');
+            const { getMcpServersForAgent } = await import('../agent/mcp-bridge.js');
             const { MODELS } = await import('../config.js');
+            // Pass the full MCP server map so the one-shot probe can call
+            // Extension-provided tools (iMessage, figma, supabase, etc.).
+            // Without this the SDK only sees built-in + claude_ai_* tools
+            // and every Extension tool call is silently rejected at runtime.
+            const mcpServers = getMcpServersForAgent();
             // Strict prompt: force JSON-only output. The tool lookup goes through
             // the SDK so claude_ai_* and regular MCP servers work uniformly.
             const stream = query({
@@ -2672,6 +2678,7 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
                     maxTurns: 3,
                     systemPrompt: 'You are a data enumerator. You call the given tool once, extract the items from its response, and emit a strict JSON array. No commentary.',
                     allowedTools: [tool],
+                    mcpServers,
                     permissionMode: 'bypassPermissions',
                     settingSources: [],
                 },
@@ -10820,7 +10827,7 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
                 return;
               }
               brainPickerTypeahead[field.key] = {
-                timer: setTimeout(function() { brainFireTypeaheadProbe(field, q); }, 400),
+                timer: setTimeout(function() { brainFireTypeaheadProbe(field, q); }, 600),
               };
             };
             return;
@@ -10886,7 +10893,15 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
             if (!resp.ok) throw new Error(data.error || 'probe failed');
             const items = data.items || [];
             if (!items.length) {
-              resultsEl.innerHTML = '<div style="color:#8a5a00;font-size:12px;padding:6px">No matches for "' + escapeHtml(query) + '"' + (data.rawPreview ? ' (' + escapeHtml(data.rawPreview.slice(0, 100)) + ')' : '') + '</div>';
+              // If the raw preview is anything other than an empty array (with
+              // or without a markdown code fence), show it so the user can tell
+              // whether the tool actually ran.
+              const trimmed = (data.rawPreview || '').trim();
+              const isEmptyArray = /^\s*\[\s*\]\s*$/.test(trimmed.replace(/^[^\[]*/, '').replace(/[^\]]*$/, ''));
+              const rawHint = trimmed && !isEmptyArray
+                ? ' <span style="color:var(--muted)">Tool said: ' + escapeHtml(trimmed.slice(0, 140)) + '</span>'
+                : '';
+              resultsEl.innerHTML = '<div style="color:#8a5a00;font-size:12px;padding:6px">No matches for "' + escapeHtml(query) + '". The tool may be limited by macOS permissions or not support this query — use <a href="#" onclick="brainFieldPickerToggleCustom(\\'' + field.key + '\\', \\'\\');return false">type a value directly</a>.' + rawHint + '</div>';
               return;
             }
             resultsEl.innerHTML = items.map(function(it) {
@@ -12365,14 +12380,24 @@ async function checkAnthropicAuth() {
     var btn = document.getElementById('gs-auth-btn');
     if (d.authenticated && card) {
       card.className = 'gs-card gs-done';
-      if (desc) desc.textContent = 'Connected as ' + d.email;
+      // Email is null when auth comes from the Claude Code keychain (OAuth
+      // login via clementine-login or claude-login that we do not have read
+      // access to). Avoid rendering "Connected as null" — looks broken and
+      // makes users re-click login, which hits an SDK bug in claudeAuthenticate.
+      var label = d.email
+        ? 'Connected as ' + d.email
+        : 'Connected via ' + (d.apiKeySource === 'keychain' ? 'Claude Code keychain' : d.apiKeySource || 'API');
+      if (desc) desc.textContent = label;
       if (btn) { btn.textContent = 'Connected'; btn.disabled = true; }
     }
     // Also update settings auth indicator
     var settingsAuth = document.getElementById('settings-auth-status');
     if (settingsAuth) {
+      var sLabel = d.authenticated
+        ? (d.email ? 'Connected as ' + d.email : 'Connected via ' + (d.apiKeySource || 'API'))
+        : '';
       settingsAuth.innerHTML = d.authenticated
-        ? '<span style="color:var(--green)">Connected as ' + d.email + '</span>'
+        ? '<span style="color:var(--green)">' + sLabel + '</span>'
         : '<span style="color:var(--text-muted)">Not connected</span>';
     }
     return d;
@@ -12382,6 +12407,23 @@ async function checkAnthropicAuth() {
 async function startAnthropicOAuth() {
   var btn = document.getElementById('gs-auth-btn');
   var desc = document.getElementById('gs-auth-desc');
+  // Precheck: if the user is already authenticated (env var or keychain),
+  // don't trigger the SDK OAuth flow — which has an upstream bug where
+  // claudeAuthenticate sends a malformed Messages API request with
+  // cache_control on an empty text block (HTTP 400).
+  try {
+    var statusResp = await apiFetch('/api/auth/anthropic/status');
+    var statusData = await statusResp.json();
+    if (statusData && statusData.authenticated) {
+      var card = document.getElementById('gs-step-auth');
+      if (card) card.className = 'gs-card gs-done';
+      if (desc) desc.textContent = statusData.email
+        ? 'Connected as ' + statusData.email
+        : 'Already connected via ' + (statusData.apiKeySource || 'API') + ' — no login needed';
+      if (btn) { btn.textContent = 'Connected'; btn.disabled = true; }
+      return;
+    }
+  } catch (_) { /* fall through to real login */ }
   if (btn) { btn.textContent = 'Opening login...'; btn.disabled = true; }
   try {
     var r = await apiFetch('/api/auth/anthropic/login', { method: 'POST' });
@@ -12402,7 +12444,15 @@ async function startAnthropicOAuth() {
       throw new Error(wd.error || 'Login did not complete');
     }
   } catch (err) {
-    if (desc) desc.textContent = 'Login failed: ' + err.message;
+    // Special case: the SDK's claudeAuthenticate has a known bug where it
+    // sends malformed API payloads ("cache_control cannot be set for empty
+    // text blocks"). If that fires, point the user at the CLI login path.
+    var msg = err && err.message ? err.message : String(err);
+    if (/cache_control.+empty text blocks/i.test(msg)) {
+      if (desc) desc.textContent = 'In-browser login hit a known SDK bug. Run "clementine login" in your terminal instead, or check if you are already logged in — the daemon only needs to start once.';
+    } else {
+      if (desc) desc.textContent = 'Login failed: ' + msg;
+    }
     if (btn) { btn.textContent = 'Retry Login'; btn.disabled = false; }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.0.74",
+  "version": "1.0.76",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",