Peter Steinberger
5c0255477c
fix: tolerate missing pi-coding-agent backend export
2026-02-26 16:11:37 +01:00
joshavant
4e7a833a24
feat(security): add provider-based external secrets management
2026-02-26 14:47:22 +00:00
joshavant
0e69660c41
feat(secrets): finalize external secrets runtime and migration hardening
2026-02-26 14:47:22 +00:00
joshavant
cec404225d
Auth labels: handle token refs and share Pi credential conversion
2026-02-26 14:47:22 +00:00
joshavant
4c5a2c3c6d
Agents: inject pi auth storage from runtime profiles
2026-02-26 14:47:22 +00:00
Aleksandrs Tihenko
c0026274d9
fix(auth): distinguish revoked API keys from transient auth errors ( #25754 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8f9c07a200644284e11adae76368adab40c5fa4e
Co-authored-by: rrenamed <[email protected] [email protected]
2026-02-25 19:47:16 -05:00
边黎安
a4c373935f
fix(agents): fall back to agents.defaults.model when agent has no model config ( #24210 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 0f272b102763736001a82cfda23f35ff2ee9cac8
Co-authored-by: bianbiandashen <[email protected] [email protected]
2026-02-23 03:18:55 -05:00
Peter Steinberger
382fe8009a
refactor!: remove google-antigravity provider support
2026-02-23 05:20:14 +01:00
Phineas1500 and Vincent Koc
320b62265d
fix(models): synthesize antigravity Gemini 3.1 pro high/low models ( #22899 )
...
* Models: add antigravity Gemini 3.1 forward-compat
* models: propagate availability to Gemini 3.1 dot IDs
* test(models): format Gemini 3.1 forward-compat test
* test(models): type Gemini 3.1 forward-compat fixtures
* models: add changelog note for antigravity gemini 3.1 forward-compat
---------
Co-authored-by: Vincent Koc <[email protected]
2026-02-22 19:11:39 -05:00
Peter Steinberger
7b229decdd
test(perf): dedupe fixtures and reduce flaky waits
2026-02-22 22:06:01 +00:00
Peter Steinberger
817ca75cba
test: move command status and health suites out of e2e
2026-02-22 11:07:46 +00:00
Vignesh Natarajan
a4c107ee11
chore(test): harden models status mock restoration
2026-02-22 00:53:23 -08:00
Peter Steinberger
ccc00d874c
test(core): reduce mock reset overhead in targeted suites
2026-02-22 08:40:29 +00:00
Peter Steinberger
649e910465
test(models): use lightweight clears in shared config setup
2026-02-22 07:35:55 +00:00
Peter Steinberger
8e6a7a6343
refactor(models): reuse list format helpers in scan
2026-02-18 23:09:09 +00:00
Peter Steinberger
8369913c7a
refactor(models): reuse validated config snapshot loader
2026-02-18 22:49:39 +00:00
Peter Steinberger
288015a9fc
refactor(auth): share api key masking utility
2026-02-18 17:13:35 +00:00
Peter Steinberger
b8b43175c5
style: align formatting with oxfmt 0.33
2026-02-18 01:34:35 +00:00
Peter Steinberger
31f9be126c
style: run oxfmt and fix gate failures
2026-02-18 01:29:02 +00:00
Seb Slight
f44e3b2a34
revert: fix models set catalog validation ( #19194 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 7e3b2ff7afe052097c4414fc64d7e66191e8fcc3
Co-authored-by: sebslight <[email protected] [email protected]
2026-02-17 09:43:41 -05:00
cpojer
d0cb8c19b2
chore: wtf.
2026-02-17 13:36:48 +09:00
Sebastian
ed11e93cf2
chore(format)
2026-02-16 23:20:16 -05:00
cpojer
7bc783cb03
chore: Fix types in tests 16/N.
2026-02-17 12:00:29 +09:00
cpojer
4b8f53979e
chore: Fix type errors from reverts.
2026-02-17 11:22:49 +09:00
Sebastian
4ca75bed56
fix(models): sync auth-profiles before availability checks
2026-02-16 21:00:59 -05:00
cpojer
90ef2d6bdf
chore: Update formatting.
2026-02-17 09:18:40 +09:00
Peter Steinberger
9f0fc74d10
refactor(model): share normalized provider map lookups
2026-02-16 23:00:32 +00:00
Mitsuyuki Osabe
afd354c482
fix: add catalog validation to models set command
...
`models set` accepts any syntactically valid model ID without checking
the catalog, allowing typos to silently persist in config and fail at
runtime. It also unconditionally adds an empty `{}` entry to
`agents.defaults.models`, bypassing any provider routing constraints.
This commit:
- Validates the model ID against the catalog (skipped when catalog is
empty during initial setup)
- Warns when a new entry is added with empty config (no provider routing)
Closes openclaw/openclaw#17183
✍️ Author: Claude Code with @carrotRakko (AI-written, human-approved)
2026-02-16 23:54:52 +01:00
Peter Steinberger
2d8edf85ad
refactor(test): share onboarding and model auth test helpers
2026-02-16 16:48:55 +00:00
Peter Steinberger
cb46ea037f
refactor(models): dedupe set default model updates
2026-02-16 00:43:15 +00:00
Peter Steinberger
38f430e133
perf(models): lazy-load heavy deps in models list
2026-02-15 19:29:27 +00:00
Peter Steinberger
99fda7b920
refactor(models): share fallback command logic
2026-02-15 19:00:27 +00:00
Peter Steinberger
cbf6ee3a64
refactor(models): share primary/fallback merge
2026-02-15 17:13:09 +00:00
Peter Steinberger
d238483337
refactor(models): dedupe auth order context
2026-02-15 16:32:12 +00:00
Peter Steinberger
910e1e52dd
fix(models): type fallback key helper
2026-02-15 16:25:00 +00:00
Peter Steinberger
d4c7b0505f
refactor(models): dedupe fallback key parsing
2026-02-15 16:25:00 +00:00
Peter Steinberger
261e2c131e
refactor(commands): dedupe model scan sorting
2026-02-15 06:44:34 +00:00
4734f99108
Fix: Add type safety to models status command ( #16395 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 1554137ae34b8183a924d48e3894e9d60c4e2dde
Co-authored-by: BinHPdev <[email protected] [email protected]
2026-02-14 14:07:38 -05:00
AI-Reviewer-QS
28431b84cc
fix(gateway): prune expired entries instead of clearing all hook auth failure state ( #15848 )
...
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 188a40e8a35112b9ea2df23dd0a940b9be1eac1d
Co-authored-by: AI-Reviewer-QS <[email protected] [email protected]
2026-02-14 01:46:12 +01:00
Peter Steinberger
e7c3c27fd0
perf(test): trim browser and models suite overhead
2026-02-14 00:38:55 +00:00
Shadril Hassan Shifat and Tak Hoffman
1c928e493d
fix(hooks): replace console logging with proper subsystem logging in loader (openclaw#11029) thanks @shadril238
...
Verified:
- pnpm build
- pnpm check
- pnpm test
Co-authored-by: shadril238 <[email protected] [email protected]
2026-02-13 18:21:11 -06:00
Peter Steinberger
cf2524b8b9
refactor(models): share auth helpers and forward-compat list fallbacks
2026-02-14 01:07:35 +01:00
Vincent Koc and Peter Steinberger
a0cbf9002d
fix(models): antigravity opus 4.6 availability follow-up ( #12845 )
...
* fix(models): antigravity opus 4.6 availability follow-up
* chore(format): apply updated oxfmt config to models files
* fix(models): retain zai glm-5 forward-compat fallback after extraction
* chore(format): apply updated oxfmt config
* fix(models): fail fast on unknown auth login provider
---------
Co-authored-by: Peter Steinberger <[email protected]
2026-02-14 00:54:46 +01:00
Mariano Belinky
86e4fe0a7a
Auth: land codex oauth onboarding flow ( #15406 )
2026-02-13 17:18:49 +00:00
2e04630105
openai-codex: add gpt-5.3-codex-spark forward-compat model ( #15174 )
...
Merged via maintainer flow after rebase + local gates.
Prepared head SHA: 6cac87cbf97e5f627085787fe5f565778fa223bf
Co-authored-by: loiie45e <[email protected] [email protected]
2026-02-13 15:21:07 +00:00
Peter Steinberger
9131b22a28
test: migrate suites to e2e coverage layout
2026-02-13 14:28:22 +00:00
loiie45e
07faab6ac3
openai-codex: bridge OAuth profiles into pi auth.json for model discovery ( #15184 )
2026-02-13 11:39:37 +00:00
Marcus Castro and Peter Steinberger
ec44e262be
fix(security): prevent String(undefined) coercion in credential inputs ( #12287 )
...
* fix(security): prevent String(undefined) coercion in credential inputs
When a prompter returns undefined (due to cancel, timeout, or bug),
String(undefined).trim() produces the literal string "undefined" instead
of "". This truthy string prevents secure fallbacks from triggering,
allowing predictable credential values (e.g., gateway password = "undefined").
Fix all 8 occurrences by using String(value ?? "").trim(), which correctly
yields "" for null/undefined inputs and triggers downstream validation or
fallback logic.
Fixes #8054
* fix(security): also fix String(undefined) in api-provider credential inputs
Address codex review feedback: 4 additional occurrences of the unsafe
String(variable).trim() pattern in auth-choice.apply.api-providers.ts
(Cloudflare Account ID, Gateway ID, synthetic API key inputs + validators).
* fix(test): strengthen password coercion test per review feedback
* fix(security): harden credential prompt coercion
---------
Co-authored-by: Peter Steinberger <[email protected]
2026-02-13 04:25:05 +01:00
4216449405
fix: guard resolveUserPath against undefined input ( #10176 )
...
* fix: guard resolveUserPath against undefined input
When subagent spawner omits workspaceDir, resolveUserPath receives
undefined and crashes on .trim(). Add a falsy guard that falls back
to process.cwd(), matching the behavior callers already expect.
Closes #10089
Co-Authored-By: Claude Opus 4.6 <[email protected] #10176 ) (thanks @Yida-Dev)
* fix: harden workspace fallback scoping (#10176 ) (thanks @Yida-Dev)
* refactor: centralize workspace fallback classification and redaction (#10176 ) (thanks @Yida-Dev)
* test: remove explicit any from utils mock (#10176 ) (thanks @Yida-Dev)
* security: reject malformed agent session keys for workspace resolution (#10176 ) (thanks @Yida-Dev)
---------
Co-authored-by: Yida-Dev <[email protected] [email protected] [email protected]
2026-02-06 13:16:58 -05:00
Peter Steinberger
5b0851ebd8
feat: add cloudflare ai gateway provider
2026-02-04 04:10:13 -08:00
Peter Steinberger