Fix Composio test env mock leakage

Author: jahooma

web/src/server/__tests__/composio.test.ts

@@ -11,9 +11,6 @@ let getRawToolRouterSessionTools: ReturnType<typeof mock>
 
 beforeAll(async () => {
   mock.module('server-only', () => ({}))
-  mock.module('@codebuff/internal/env', () => ({
-    env: { COMPOSIO_API_KEY: 'test-composio-api-key' },
-  }))
   mock.module('@composio/core', () => ({
     Composio: class {
       tools = {
@@ -93,6 +90,7 @@ describe('getComposioToolsForUser', () => {
       db,
       userId: 'user-123',
       logger,
+      apiKey: 'test-composio-api-key',
     })
 
     expect(result).toEqual({
@@ -128,6 +126,7 @@ describe('getComposioToolsForUser', () => {
         db,
         userId: 'user-123',
         logger,
+        apiKey: 'test-composio-api-key',
       }),
     ).rejects.toThrow('Composio unavailable')
 

web/src/server/composio.ts

@@ -271,8 +271,9 @@ async function getSessionForUser(params: {
   db: CodebuffPgDatabase
   userId: string
   logger: Logger
+  apiKey?: string
 }): Promise<CachedComposioSession | null> {
-  const apiKey = getComposioApiKey()
+  const apiKey = params.apiKey ?? getComposioApiKey()
   if (!apiKey) return null
 
   try {
@@ -335,6 +336,7 @@ export async function getComposioToolsForUser(params: {
   db: CodebuffPgDatabase
   userId: string
   logger: Logger
+  apiKey?: string
 }): Promise<{ sessionId: string; tools: ComposioToolDefinition[] } | null> {
   const cached = await getSessionForUser(params)
   if (!cached) return null
@@ -351,6 +353,7 @@ export async function executeComposioTool(params: {
   sessionId: string
   toolName: string
   input: Record<string, unknown>
+  apiKey?: string
 }): Promise<ToolResultOutput[] | null> {
   if (!allowedToolNames.has(params.toolName)) {
     return [
@@ -363,7 +366,7 @@ export async function executeComposioTool(params: {
     ]
   }
 
-  const apiKey = getComposioApiKey()
+  const apiKey = params.apiKey ?? getComposioApiKey()
   if (!apiKey) return null
 
   const storedSession = await getStoredSessionById({