colana 1.0.0-beta.40 → 1.0.0-beta.41

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "colana",
-  "version": "1.0.0-beta.40",
+  "version": "1.0.0-beta.41",
   "description": "Agent-First. Multiplied. Multi-agent command center for AI coding agents.",
   "type": "module",
   "main": "server/index.js",

package/public/app.js

@@ -1514,9 +1514,10 @@ async function sendPersonalChatMessage() {
     assistantBubble.className = 'chat-bubble error';
 
     const isAuthError = err.code === 'GATEWAY_AUTH_FAILED' || err.code === 'GATEWAY_AUTH_MISSING';
+    const isTokenError = err.code === 'GATEWAY_TOKEN_MISSING' || err.code === 'GATEWAY_TOKEN_STALE';
 
     if (isAuthError) {
-      // Auth-specific error: show actionable message with "Add API Key" button
+      // Provider API key error: show "Add API Key" button
       const msgSpan = document.createElement('span');
       msgSpan.textContent = err.message || 'No valid API key found for your model provider.';
       assistantBubble.appendChild(msgSpan);
@@ -1527,7 +1528,6 @@ async function sendPersonalChatMessage() {
       addKeyBtn.addEventListener('click', (e) => {
         e.preventDefault();
         openSettingsModal();
-        // Scroll to Personal AI Agents section after modal opens
         setTimeout(() => {
           const modelSection = document.getElementById('openclaw-model-config');
           if (modelSection) modelSection.scrollIntoView({ behavior: 'smooth', block: 'center' });
@@ -1535,6 +1535,39 @@ async function sendPersonalChatMessage() {
       });
       assistantBubble.appendChild(addKeyBtn);
 
+      if (err.fix) {
+        const fixHint = document.createElement('div');
+        fixHint.className = 'chat-error-fix-hint';
+        fixHint.textContent = err.fix;
+        assistantBubble.appendChild(fixHint);
+      }
+    } else if (isTokenError) {
+      // Gateway token auth error: show "Restart Gateway" button
+      const msgSpan = document.createElement('span');
+      msgSpan.textContent = err.message || 'Gateway authentication failed.';
+      assistantBubble.appendChild(msgSpan);
+
+      const restartBtn = document.createElement('button');
+      restartBtn.className = 'chat-error-action-btn';
+      restartBtn.textContent = 'Restart Gateway';
+      restartBtn.addEventListener('click', async (e) => {
+        e.preventDefault();
+        restartBtn.disabled = true;
+        restartBtn.textContent = 'Restarting...';
+        try {
+          await fetch('/api/personal-agent/restart-gateway', {
+            method: 'POST',
+            headers: getAuthHeaders(),
+          });
+          restartBtn.textContent = 'Restarted — try again';
+          showToast('Gateway restarted. Try sending your message again.', 'success');
+        } catch {
+          restartBtn.textContent = 'Restart Failed';
+          showToast('Gateway restart failed. Open Settings to troubleshoot.', 'error');
+        }
+      });
+      assistantBubble.appendChild(restartBtn);
+
       if (err.fix) {
         const fixHint = document.createElement('div');
         fixHint.className = 'chat-error-fix-hint';

package/server/personal-agent-routes.js

@@ -1,4 +1,4 @@
-import { getOpenClawAuthToken, getOpenClawGatewayPort, getOpenClawDefaultModel, isChatCompletionsEnabled, ensureChatCompletionsEnabled, ensureAuthProfile, readAuthStore } from './openclaw-config.js';
+import { getOpenClawAuthToken, getOpenClawGatewayPort, getOpenClawDefaultModel, getOpenClawConfig, isChatCompletionsEnabled, ensureChatCompletionsEnabled, ensureAuthProfile, readAuthStore } from './openclaw-config.js';
 import { validate, personalChatSchema, openclawModelSetSchema, openclawModelAuthSchema } from './validation.js';
 import { setSetting } from './settings-store.js';
 import { restartOpenClawGateway } from './pty-manager.js';
@@ -99,6 +99,15 @@ export function registerPersonalAgentRoutes(app, { sensitiveLimiter }) {
     const authToken = getOpenClawAuthToken();
     if (authToken) {
       headers['Authorization'] = `Bearer ${authToken}`;
+    } else {
+      // Gateway auth token not found — the gateway will reject with 401.
+      // Log config state for diagnosis on fresh installs.
+      const cfg = getOpenClawConfig();
+      const hasConfig = !!cfg;
+      const hasGateway = !!cfg?.gateway;
+      const hasAuth = !!cfg?.gateway?.auth;
+      const authMode = cfg?.gateway?.auth?.mode || 'none';
+      console.warn(`[personal-agent] No gateway auth token found — config:${hasConfig} gateway:${hasGateway} auth:${hasAuth} mode:${authMode}`);
     }
 
     // 60-second timeout
@@ -131,22 +140,47 @@ export function registerPersonalAgentRoutes(app, { sensitiveLimiter }) {
         }
         const status = gatewayRes.status;
 
-        // For 401, extract provider from current model for actionable guidance
+        // For 401, distinguish gateway-level token auth vs model provider key failure
         if (status === 401) {
+          // If we didn't send a gateway auth token, the 401 is almost certainly
+          // a gateway token rejection — not a model provider key issue.
+          if (!authToken) {
+            return res.status(401).json({
+              error: 'Gateway authentication failed — no gateway auth token found.',
+              code: 'GATEWAY_TOKEN_MISSING',
+              fix: 'Restart the gateway in Settings > Personal AI Agents, or run "openclaw onboard" to regenerate the config.',
+            });
+          }
+
+          // Token was sent but rejected — could be stale token or provider key issue
           const currentModel = getOpenClawDefaultModel() || '';
           const slash = currentModel.indexOf('/');
           const provider = slash > 0 ? currentModel.substring(0, slash).toLowerCase() : null;
           const providerLabel = provider || null;
           const envVar = provider ? PROVIDER_ENV_MAP[provider] : null;
+
+          // Check if the error body hints at provider-level auth failure
+          const isProviderAuth = errText.includes('api_key') || errText.includes('API key')
+            || errText.includes('invalid_api_key') || errText.includes('authentication_error');
+
+          if (isProviderAuth) {
+            return res.status(401).json({
+              error: providerLabel
+                ? `Authentication failed — your ${providerLabel} API key may be missing or invalid.`
+                : 'Authentication failed — your API key may be missing or invalid.',
+              code: 'GATEWAY_AUTH_FAILED',
+              fix: envVar
+                ? `Add or update your ${envVar} in Settings > Personal AI Agents.`
+                : 'Add your API key in Settings > Personal AI Agents.',
+              provider: provider || null,
+            });
+          }
+
+          // Default: gateway token mismatch (token exists locally but doesn't match gateway)
           return res.status(401).json({
-            error: providerLabel
-              ? `Authentication failed — your ${providerLabel} API key may be missing or invalid.`
-              : 'Authentication failed — your API key may be missing or invalid.',
-            code: 'GATEWAY_AUTH_FAILED',
-            fix: envVar
-              ? `Add or update your ${envVar} in Settings > Personal AI Agents.`
-              : `Add your API key in Settings > Personal AI Agents.`,
-            provider: provider || null,
+            error: 'Gateway authentication failed — the auth token may be stale.',
+            code: 'GATEWAY_TOKEN_STALE',
+            fix: 'Restart the gateway in Settings > Personal AI Agents to resync the auth token.',
           });
         }