clementine-agent 1.10.1 → 1.10.2

package/dist/config.d.ts

@@ -11,6 +11,12 @@ export declare const PKG_DIR: string;
 /** Data home — user data, vault, .env, logs, sessions. */
 export declare const BASE_DIR: string;
 import { shellEscape as _shellEscape } from './config/env-parser.js';
+/**
+ * Look up a config value: local .env first, then process.env fallback.
+ * Keychain refs in either source are resolved lazily; failed resolution
+ * falls through to the fallback rather than returning the literal stub.
+ */
+export declare function getEnv(key: string, fallback?: string): string;
 /** Merged view of process.env overlaid with .env. Use for classifyIntegrations / summarizeIntegrationStatus. */
 export declare function envSnapshot(): Record<string, string | undefined>;
 /** Test-only: clear the keychain ref cache so re-resolution can be tested. */

package/dist/config.js

@@ -84,7 +84,7 @@ function maybeResolveRef(value) {
  * Keychain refs in either source are resolved lazily; failed resolution
  * falls through to the fallback rather than returning the literal stub.
  */
-function getEnv(key, fallback = '') {
+export function getEnv(key, fallback = '') {
     const fromLocal = maybeResolveRef(env[key]);
     if (fromLocal !== undefined && fromLocal !== '')
         return fromLocal;

package/dist/integrations/composio/client.js

@@ -15,7 +15,18 @@
 import { Composio } from '@composio/core';
 import { ClaudeAgentSDKProvider } from '@composio/claude-agent-sdk';
 import pino from 'pino';
+import { getEnv } from '../../config.js';
 const logger = pino({ name: 'clementine.composio' });
+// `process.env` is intentionally NOT populated from .env (config.ts keeps
+// secrets out of the SDK subprocess). Reading process.env.COMPOSIO_API_KEY
+// directly works during the dashboard's hot-reload (PUT handler mutates
+// process.env), but is empty after a fresh daemon restart even if the key
+// is in .env. Use this helper everywhere we read Composio env vars: it
+// prefers process.env (hot-reload from dashboard) and falls back to the
+// .env file via getEnv (survives restarts).
+function readComposioEnv(key) {
+    return process.env[key] || getEnv(key, '');
+}
 // Curated set surfaced in the dashboard. Composio exposes 1000+ — rendering
 // them all is noisy. Users can still connect anything by editing this list.
 export const CURATED_TOOLKITS = [
@@ -50,7 +61,7 @@ let singleton = null;
 export function getComposio() {
     if (singleton)
         return singleton;
-    const apiKey = process.env.COMPOSIO_API_KEY;
+    const apiKey = readComposioEnv('COMPOSIO_API_KEY');
     if (!apiKey)
         return null;
     singleton = new Composio({
@@ -60,7 +71,7 @@ export function getComposio() {
     return singleton;
 }
 export function isComposioEnabled() {
-    return Boolean(process.env.COMPOSIO_API_KEY);
+    return Boolean(readComposioEnv('COMPOSIO_API_KEY'));
 }
 /**
  * Discard the cached client + identity cache so the next call to getComposio()
@@ -89,13 +100,14 @@ export async function getPreferredUserId() {
 // with the most existing connections, falling back to this constant.
 const DEFAULT_NEW_CONNECTION_USER_ID = 'default';
 export function clementineUserId() {
-    return process.env.COMPOSIO_USER_ID ?? DEFAULT_NEW_CONNECTION_USER_ID;
+    return readComposioEnv('COMPOSIO_USER_ID') || DEFAULT_NEW_CONNECTION_USER_ID;
 }
 // Cached after first detection — avoids extra API calls per authorize.
 let detectedPreferredUserId = null;
 async function detectPreferredUserId(composio) {
-    if (process.env.COMPOSIO_USER_ID)
-        return process.env.COMPOSIO_USER_ID;
+    const explicit = readComposioEnv('COMPOSIO_USER_ID');
+    if (explicit)
+        return explicit;
     if (detectedPreferredUserId)
         return detectedPreferredUserId;
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.10.1",
+  "version": "1.10.2",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",