clementine-agent 1.10.2 → 1.10.4

package/dist/cli/dashboard.js

@@ -4387,16 +4387,21 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
         }
     });
     // ── Composio (1000+ third-party services via OAuth broker) ────
-    app.get('/api/composio/status', (_req, res) => {
-        res.json({ enabled: Boolean(process.env.COMPOSIO_API_KEY) });
+    app.get('/api/composio/status', async (_req, res) => {
+        // Use isComposioEnabled — checks both process.env (dashboard hot-reload)
+        // and the .env file (survives daemon restart). Reading process.env
+        // directly here was the bug: after restart, .env had the key but
+        // process.env was empty, so the dashboard reported the key as unset.
+        const c = await import('../integrations/composio/client.js');
+        res.json({ enabled: c.isComposioEnabled() });
     });
     app.get('/api/composio/toolkits', async (_req, res) => {
         try {
-            if (!process.env.COMPOSIO_API_KEY) {
+            const c = await import('../integrations/composio/client.js');
+            if (!c.isComposioEnabled()) {
                 res.json({ enabled: false, toolkits: [] });
                 return;
             }
-            const c = await import('../integrations/composio/client.js');
             const [connected, configured, meta] = await Promise.all([
                 c.listConnectedToolkits(),
                 c.listToolkitSlugsWithAuthConfig(),
@@ -5217,11 +5222,16 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
     app.put('/api/settings/:key', async (req, res) => {
         try {
             const { key } = req.params;
-            const { value } = req.body;
+            let { value } = req.body;
             if (typeof value !== 'string') {
                 res.status(400).json({ error: 'value must be a string' });
                 return;
             }
+            // Strip whitespace + invisible chars that commonly hitchhike when users
+            // paste from a website. Without this, Composio's API rejects the key as
+            // 401 even though the visible characters look right. Trim covers
+            // newlines, tabs, regular spaces, and zero-width chars.
+            value = value.trim().replace(/[​-‍]/g, '');
             // Allow known keys + any valid env var name (A-Z, 0-9, _)
             if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
                 res.status(400).json({ error: `Invalid key format: ${key}` });

package/dist/integrations/composio/client.js

@@ -395,9 +395,17 @@ export async function authorizeToolkit(slug, opts) {
     // 1. Find or create an auth config. session.authorize() doesn't auto-create
     //    so we have to pass authConfigId explicitly to connectedAccounts.initiate.
     let authConfigId;
-    const existingConfig = (await composio.authConfigs.list({ toolkit: slug })).items[0];
+    let existingConfig;
+    try {
+        existingConfig = (await composio.authConfigs.list({ toolkit: slug })).items[0];
+    }
+    catch (err) {
+        logger.error({ err, slug, step: 'authConfigs.list' }, 'Composio authorize failed');
+        throw err;
+    }
     if (existingConfig) {
         authConfigId = existingConfig.id;
+        logger.debug({ slug, authConfigId }, 'Reusing existing auth config');
     }
     else {
         try {
@@ -406,12 +414,17 @@ export async function authorizeToolkit(slug, opts) {
                 name: `${displayNameFor(slug)} Auth Config`,
             });
             authConfigId = created.id;
+            logger.debug({ slug, authConfigId }, 'Created managed auth config');
         }
         catch (err) {
-            // 400 → Composio doesn't host a managed OAuth app for this toolkit;
-            // user must register their own via the Composio dashboard.
             const status = err?.status;
-            if (status === 400) {
+            logger.warn({ err, slug, status, step: 'authConfigs.create' }, 'authConfigs.create rejected — likely needs BYO setup');
+            // 400 → Composio doesn't host a managed OAuth app for this toolkit.
+            // 401/403 → key lacks permission to create managed auth configs (common
+            //   for Google services where Composio's plan tier requires you to
+            //   register your own Google OAuth project). Either way, the user fix
+            //   is the same: set it up once in Composio's auth-configs dashboard.
+            if (status === 400 || status === 401 || status === 403) {
                 throw new ComposioNeedsAuthConfigError(slug, String(err));
             }
             throw err;
@@ -424,12 +437,19 @@ export async function authorizeToolkit(slug, opts) {
     // freshly authorized Gmail lands next to the existing Outlook (etc.) under
     // the same user_id. Falls back to env override or "default".
     const userId = await detectPreferredUserId(composio);
-    const conn = await composio.connectedAccounts.initiate(userId, authConfigId, {
-        ...(existing.length > 0 ? { allowMultiple: true } : {}),
-        ...(opts?.callbackUrl ? { callbackUrl: opts.callbackUrl } : {}),
-        ...(opts?.alias ? { alias: opts.alias } : {}),
-    });
-    return { redirectUrl: conn.redirectUrl ?? null, connectionId: conn.id };
+    try {
+        const conn = await composio.connectedAccounts.initiate(userId, authConfigId, {
+            ...(existing.length > 0 ? { allowMultiple: true } : {}),
+            ...(opts?.callbackUrl ? { callbackUrl: opts.callbackUrl } : {}),
+            ...(opts?.alias ? { alias: opts.alias } : {}),
+        });
+        logger.debug({ slug, userId, connectionId: conn.id }, 'Initiated connection');
+        return { redirectUrl: conn.redirectUrl ?? null, connectionId: conn.id };
+    }
+    catch (err) {
+        logger.error({ err, slug, userId, authConfigId, step: 'connectedAccounts.initiate' }, 'Composio initiate failed');
+        throw err;
+    }
 }
 export async function disconnectToolkit(connectionId) {
     const composio = getComposio();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clementine-agent",
-  "version": "1.10.2",
+  "version": "1.10.4",
   "description": "Clementine — Personal AI Assistant (TypeScript)",
   "type": "module",
   "main": "dist/index.js",