clementine-agent 1.10.1 → 1.10.3

package/dist/cli/dashboard.js

@@ -5217,11 +5217,16 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
     app.put('/api/settings/:key', async (req, res) => {
         try {
             const { key } = req.params;
-            const { value } = req.body;
+            let { value } = req.body;
             if (typeof value !== 'string') {
                 res.status(400).json({ error: 'value must be a string' });
                 return;
             }
+            // Strip whitespace + invisible chars that commonly hitchhike when users
+            // paste from a website. Without this, Composio's API rejects the key as
+            // 401 even though the visible characters look right. Trim covers
+            // newlines, tabs, regular spaces, and zero-width chars.
+            value = value.trim().replace(/[​-‍]/g, '');
             // Allow known keys + any valid env var name (A-Z, 0-9, _)
             if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
                 res.status(400).json({ error: `Invalid key format: ${key}` });

package/dist/config.d.ts

@@ -11,6 +11,12 @@ export declare const PKG_DIR: string;
 /** Data home — user data, vault, .env, logs, sessions. */
 export declare const BASE_DIR: string;
 import { shellEscape as _shellEscape } from './config/env-parser.js';
+/**
+ * Look up a config value: local .env first, then process.env fallback.
+ * Keychain refs in either source are resolved lazily; failed resolution
+ * falls through to the fallback rather than returning the literal stub.
+ */
+export declare function getEnv(key: string, fallback?: string): string;
 /** Merged view of process.env overlaid with .env. Use for classifyIntegrations / summarizeIntegrationStatus. */
 export declare function envSnapshot(): Record<string, string | undefined>;
 /** Test-only: clear the keychain ref cache so re-resolution can be tested. */

package/dist/config.js

@@ -84,7 +84,7 @@ function maybeResolveRef(value) {
  * Keychain refs in either source are resolved lazily; failed resolution
  * falls through to the fallback rather than returning the literal stub.
  */
-function getEnv(key, fallback = '') {
+export function getEnv(key, fallback = '') {
     const fromLocal = maybeResolveRef(env[key]);
     if (fromLocal !== undefined && fromLocal !== '')
         return fromLocal;

package/dist/integrations/composio/client.js

@@ -15,7 +15,18 @@
 import { Composio } from '@composio/core';
 import { ClaudeAgentSDKProvider } from '@composio/claude-agent-sdk';
 import pino from 'pino';
+import { getEnv } from '../../config.js';
 const logger = pino({ name: 'clementine.composio' });
+// `process.env` is intentionally NOT populated from .env (config.ts keeps
+// secrets out of the SDK subprocess). Reading process.env.COMPOSIO_API_KEY
+// directly works during the dashboard's hot-reload (PUT handler mutates
+// process.env), but is empty after a fresh daemon restart even if the key
+// is in .env. Use this helper everywhere we read Composio env vars: it
+// prefers process.env (hot-reload from dashboard) and falls back to the
+// .env file via getEnv (survives restarts).
+function readComposioEnv(key) {
+    return process.env[key] || getEnv(key, '');
+}
 // Curated set surfaced in the dashboard. Composio exposes 1000+ — rendering
 // them all is noisy. Users can still connect anything by editing this list.
 export const CURATED_TOOLKITS = [
@@ -50,7 +61,7 @@ let singleton = null;
 export function getComposio() {
     if (singleton)
         return singleton;
-    const apiKey = process.env.COMPOSIO_API_KEY;
+    const apiKey = readComposioEnv('COMPOSIO_API_KEY');
     if (!apiKey)
         return null;
     singleton = new Composio({
@@ -60,7 +71,7 @@ export function getComposio() {
     return singleton;
 }
 export function isComposioEnabled() {
-    return Boolean(process.env.COMPOSIO_API_KEY);
+    return Boolean(readComposioEnv('COMPOSIO_API_KEY'));
 }
 /**
  * Discard the cached client + identity cache so the next call to getComposio()
@@ -89,13 +100,14 @@ export async function getPreferredUserId() {
 // with the most existing connections, falling back to this constant.
 const DEFAULT_NEW_CONNECTION_USER_ID = 'default';
 export function clementineUserId() {
-    return process.env.COMPOSIO_USER_ID ?? DEFAULT_NEW_CONNECTION_USER_ID;
+    return readComposioEnv('COMPOSIO_USER_ID') || DEFAULT_NEW_CONNECTION_USER_ID;
 }
 // Cached after first detection — avoids extra API calls per authorize.
 let detectedPreferredUserId = null;
 async function detectPreferredUserId(composio) {
-    if (process.env.COMPOSIO_USER_ID)
-        return process.env.COMPOSIO_USER_ID;
+    const explicit = readComposioEnv('COMPOSIO_USER_ID');
+    if (explicit)
+        return explicit;
     if (detectedPreferredUserId)
         return detectedPreferredUserId;
     try {
@@ -383,9 +395,17 @@ export async function authorizeToolkit(slug, opts) {
     // 1. Find or create an auth config. session.authorize() doesn't auto-create
     //    so we have to pass authConfigId explicitly to connectedAccounts.initiate.
     let authConfigId;
-    const existingConfig = (await composio.authConfigs.list({ toolkit: slug })).items[0];
+    let existingConfig;
+    try {
+        existingConfig = (await composio.authConfigs.list({ toolkit: slug })).items[0];
+    }
+    catch (err) {
+        logger.error({ err, slug, step: 'authConfigs.list' }, 'Composio authorize failed');
+        throw err;
+    }
     if (existingConfig) {
         authConfigId = existingConfig.id;
+        logger.debug({ slug, authConfigId }, 'Reusing existing auth config');
     }
     else {
         try {
@@ -394,12 +414,17 @@ export async function authorizeToolkit(slug, opts) {
                 name: `${displayNameFor(slug)} Auth Config`,
             });
             authConfigId = created.id;
+            logger.debug({ slug, authConfigId }, 'Created managed auth config');
         }
         catch (err) {
-            // 400 → Composio doesn't host a managed OAuth app for this toolkit;
-            // user must register their own via the Composio dashboard.
             const status = err?.status;
-            if (status === 400) {
+            logger.warn({ err, slug, status, step: 'authConfigs.create' }, 'authConfigs.create rejected — likely needs BYO setup');
+            // 400 → Composio doesn't host a managed OAuth app for this toolkit.
+            // 401/403 → key lacks permission to create managed auth configs (common
+            //   for Google services where Composio's plan tier requires you to
+            //   register your own Google OAuth project). Either way, the user fix
+            //   is the same: set it up once in Composio's auth-configs dashboard.
+            if (status === 400 || status === 401 || status === 403) {
                 throw new ComposioNeedsAuthConfigError(slug, String(err));
             }
             throw err;
@@ -412,12 +437,19 @@ export async function authorizeToolkit(slug, opts) {
     // freshly authorized Gmail lands next to the existing Outlook (etc.) under
     // the same user_id. Falls back to env override or "default".
     const userId = await detectPreferredUserId(composio);
-    const conn = await composio.connectedAccounts.initiate(userId, authConfigId, {
-        ...(existing.length > 0 ? { allowMultiple: true } : {}),
-        ...(opts?.callbackUrl ? { callbackUrl: opts.callbackUrl } : {}),
-        ...(opts?.alias ? { alias: opts.alias } : {}),
-    });
-    return { redirectUrl: conn.redirectUrl ?? null, connectionId: conn.id };
+    try {
+        const conn = await composio.connectedAccounts.initiate(userId, authConfigId, {
+            ...(existing.length > 0 ? { allowMultiple: true } : {}),
+            ...(opts?.callbackUrl ? { callbackUrl: opts.callbackUrl } : {}),
+            ...(opts?.alias ? { alias: opts.alias } : {}),
+        });
+        logger.debug({ slug, userId, connectionId: conn.id }, 'Initiated connection');
+        return { redirectUrl: conn.redirectUrl ?? null, connectionId: conn.id };
+    }
+    catch (err) {
+        logger.error({ err, slug, userId, authConfigId, step: 'connectedAccounts.initiate' }, 'Composio initiate failed');
+        throw err;
+    }
 }
 export async function disconnectToolkit(connectionId) {
     const composio = getComposio();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.10.1",
+  "version": "1.10.3",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",