惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

L
Lohrmann on Cybersecurity
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
Recorded Future
Recorded Future
S
Schneier on Security
I
Intezer
Latest news
Latest news
N
News and Events Feed by Topic
Scott Helme
Scott Helme
T
Threat Research - Cisco Blogs
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
U
Unit 42
量子位
博客园 - 【当耐特】
S
Security @ Cisco Blogs
Google Online Security Blog
Google Online Security Blog
博客园 - 叶小钗
酷 壳 – CoolShell
酷 壳 – CoolShell
NISL@THU
NISL@THU
The Cloudflare Blog
李成银的技术随笔
T
ThreatConnect
L
LINUX DO - 最新话题
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
有赞技术团队
有赞技术团队
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Jina AI
Jina AI
T
Tor Project blog
The Hacker News
The Hacker News
人人都是产品经理
人人都是产品经理
小众软件
小众软件
S
Security Archives - TechRepublic
美团技术团队
博客园 - Franky
Security Latest
Security Latest
J
Java Code Geeks
P
Proofpoint News Feed
V
V2EX
The GitHub Blog
The GitHub Blog
WordPress大学
WordPress大学
Application and Cybersecurity Blog
Application and Cybersecurity Blog
H
Help Net Security
PCI Perspectives
PCI Perspectives
Cyberwarzone
Cyberwarzone
Hugging Face - Blog
Hugging Face - Blog
N
Netflix TechBlog - Medium
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
SecWiki News
SecWiki News
腾讯CDC
爱范儿
爱范儿
D
Docker

Recent Commits to openclaw:main

refactor(plugin-sdk): rename plain text tool-call compat wrapper docs(skills): defer private release locators Replace Sharp image backend with Photon (#86437) fix(agents): release embedded-attempt session lock on every exit path… fix: accept OpenClaw voice wake confusions (#86507) fix(crabbox): bootstrap macos js toolchain chore: add agent transcript skill · openclaw/openclaw@d63e8d4 fix(gateway): dedupe session tool fanout · openclaw/openclaw@89a21db fix: Hook ingress token unlocks password-mode gateway auth (#86453) · openclaw/openclaw@d51f268 fix #86077: keep fallback errors candidate scoped (#86134) · openclaw/openclaw@d6b7fe8 fix(diagnostics): reclaim wedged session lanes with a stale leaked ac… · openclaw/openclaw@6f76d9f fix: derive plugin media trust from metadata (#86410) · openclaw/openclaw@e761eb8 fix(media-understanding): normalize HEIC before image descriptions (#… · openclaw/openclaw@75c7236 fix: accept leading fuzzy Discord voice wake names (#86484) · openclaw/openclaw@8fe4f34 feat: promote provider tool call stream wrapper (#86489) fix(test): dedupe kitchen sink command assertions test: derive deprecated sdk usage guard (#86403) fix(qa): extend memory fallback Windows budget fix(ui): move control ui chunking helper out of runtime source · openclaw/openclaw@968c87d fix: quiet retained lost task noise (#86475) fix(build): keep control ui chunking out of deadcode · openclaw/openclaw@dc26069 fix: rotate realtime voice sessions on max duration · openclaw/openclaw@dc2c4aa fix(test): stream bundled plugin sweep logs · openclaw/openclaw@fc3cd49 docs: add bugfix changelog credits · openclaw/openclaw@2e7e4bc fix(models): show oauth marker auth status (#86378) · openclaw/openclaw@a6df39d fix: seed cron task progress summaries (#86313) · openclaw/openclaw@92afd8b fix(update): exclude prerelease tags from stable git channel (#86260) · openclaw/openclaw@28f169b fix(doctor): warn and continue when cron job store is unreadable (#86… fix(gateway): clear runtime config snapshot before in-process restart… · openclaw/openclaw@90caa3b fix(scripts): restore sparse crabbox changed gates · openclaw/openclaw@d270879 fix(build): support Windows UI builds · openclaw/openclaw@0bb9b42 Fix local embedding worker safety (#85348) · openclaw/openclaw@7ff29a9 fix(ui): scope chat session picker to active agent (#85965) · openclaw/openclaw@70c7d6f [codex] improve iOS realtime talk mode (#86355) · openclaw/openclaw@9ca52ce fix(scripts): dedupe docker lane resources · openclaw/openclaw@5e94469 docs: add code size guidance · openclaw/openclaw@9a60fcf fix(test): avoid source gateway import in rpc walk · openclaw/openclaw@e9b8a6e docs: add bugfix changelog entries · openclaw/openclaw@f950132 Fix heartbeat response loop guard (#86324) (#86357) · openclaw/openclaw@e2c174e fix(memory-core): filter REM dreaming candidates to light-staged entr… · openclaw/openclaw@8b42771 fix(telegram): propagate forum topic names into agent context (#86299) fix(slack): keep downloaded files out of reply media (#86318) · openclaw/openclaw@2fcd481 fix(cron): accept plus durations for one-shot jobs (#86341) · openclaw/openclaw@9239f94 fix(plugins): clear metadata memo at lifecycle boundaries · openclaw/openclaw@e7c696a chore(skills): normalize release skill routing · openclaw/openclaw@4737e19 docs(release): require early performance regression check · openclaw/openclaw@0336938 fix(qa): capture Windows gateway metrics · openclaw/openclaw@9afbfc1 feat(qa): add coverage scenario matching · openclaw/openclaw@a1fe86a fix(perf): avoid duplicate docker package ui build build: enable modern TypeScript module syntax · openclaw/openclaw@bbc1772 ci: include performance evidence in release validation fix(providers): stream ordinary tool-like prose promptly fix(perf): harden gateway restart bench exits · openclaw/openclaw@82bbcf6 fix(gateway): gate talk secret bootstrap handoff (#85690) · openclaw/openclaw@c791e42 fix: suppress async media incomplete-turn errors (#85933) · openclaw/openclaw@35dcd42 migrate auth credentials · openclaw/openclaw@f036bac fix migrate auth lint · openclaw/openclaw@50e6cb0 fix migrate supported auth imports · openclaw/openclaw@44bb2be fix migrate auth opt-out precedence · openclaw/openclaw@2016a51 honor migrate auth opt-out in plan · openclaw/openclaw@17edec7 address migrate auth review comments · openclaw/openclaw@0a98c2d fix ci blockers for migrate auth docs: add migrate auth changelog (#85667) · openclaw/openclaw@f7fcbdb fix(scripts): avoid duplicate install smoke ui build · openclaw/openclaw@b1b2841 fix(telegram): preserve inbound text entities (#83873) · openclaw/openclaw@b552919 chore: ignore Python bytecode caches · openclaw/openclaw@b6b2755 fix: make autoreview progress visible · openclaw/openclaw@236edb2 ci(release): fix plugin prerelease extension batch invocation test(telegram): provide topic cache store in message context harness · openclaw/openclaw@ff1fde1 test(agents): complete provider runtime test mocks · openclaw/openclaw@be8cd12 test(telegram): type topic cache harness store · openclaw/openclaw@84ab206 test(agents): sync provider runtime mocks · openclaw/openclaw@a289dd9 refactor: keep plain text tool-call promotion private (#86374) · openclaw/openclaw@c3ab2de fix(discord): suppress self-reply prompt echoes (#86238) docs: clarify config migration policy · openclaw/openclaw@c44367f fix(perf): fail startup bench on early gateway exit · openclaw/openclaw@a8fc28c fix: prevent plain text tool call leaks (#86222) · openclaw/openclaw@cd62780 fix: handle npm min-release-age in installers · openclaw/openclaw@316d97c fix(scripts): include ui:build in build-all full and ciArtifacts prof… · openclaw/openclaw@6704d0a fix(e2e): sample Windows kitchen sink gateway RSS · openclaw/openclaw@73189e3 fix(cron): respect isolated target and error on missing remove id (#8… · openclaw/openclaw@6709f4e fix(pi-embedded-runner): propagate trigger-derived priority to the gl… · openclaw/openclaw@0580f57 fix(cli): suppress self-update version warnings · openclaw/openclaw@e2bd20f fix: preserve webchat source reply details · openclaw/openclaw@aa50c51 docs: replace OpenClaw docs skill and add plugin permissions guide · openclaw/openclaw@0dabb70 fix(codex): preserve source reply mode for active runs (#86325) · openclaw/openclaw@b962110 fix: make compaction reinjection opt-in · openclaw/openclaw@ab910f8 fix codex usage-limit recovery copy (#86305) · openclaw/openclaw@c3c8a65 feat(ui): add ephemeral Activity tab · openclaw/openclaw@3dd0e8e fix(tests): harden native macos plugin proof · openclaw/openclaw@a5d5604 fix(commitments): serialize load-modify-save with in-process queue + … · openclaw/openclaw@d3c293d Fail Codex compaction at the Codex boundary (#85958) · openclaw/openclaw@dd47e47 fix(docker): restore config parent ownership · openclaw/openclaw@908b894 docs: clarify config default review policy (#86329) · openclaw/openclaw@3a03dd5 docs: clean changelog script entries · openclaw/openclaw@0eead19 fix(scripts): budget restart benchmark timeouts · openclaw/openclaw@5bd5509 fix: align ui vitest config assertion · openclaw/openclaw@730fd19 fix: route unit ui vitest targets narrowly · openclaw/openclaw@777402e fix: route explicit ui vitest targets narrowly · openclaw/openclaw@56a383c fix(android): harden play media permission removal
test(tools): add unmocked image custom-provider auth regression (#85733) · openclaw/openclaw@f0bfb3f
hxy91819 · 2026-05-25 · via Recent Commits to openclaw:main

@@ -0,0 +1,185 @@

1+

import fs from "node:fs/promises";

2+

import os from "node:os";

3+

import path from "node:path";

4+

import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";

5+

import type { OpenClawConfig } from "../../config/config.js";

6+

import type { ModelDefinitionConfig } from "../../config/types.models.js";

7+

import type { ImageDescriptionRequest } from "../../plugin-sdk/media-understanding.js";

8+

import { getApiKeyForModel, hasUsableCustomProviderApiKey } from "../model-auth.js";

9+

import { resolveImageToolFactoryAvailable } from "../openclaw-tools.media-factory-plan.js";

10+

import { createImageTool, resolveImageModelConfigForTool, testing } from "./image-tool.js";

11+

import { hasProviderAuthForTool } from "./model-config.helpers.js";

12+13+

const USER_PROVIDER = "hatchery-qwen3.6-plus";

14+

const USER_MODEL = "qwen3.6-plus";

15+

const USER_PRIMARY = `${USER_PROVIDER}/${USER_MODEL}`;

16+

const CONFIG_API_KEY = "sk-user-configured-key"; // pragma: allowlist secret

17+18+

const ONE_PIXEL_PNG_B64 =

19+

"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";

20+21+

function makeVisionModel(id: string): ModelDefinitionConfig {

22+

return {

23+

id,

24+

name: id,

25+

reasoning: false,

26+

input: ["text", "image"],

27+

cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },

28+

contextWindow: 128_000,

29+

maxTokens: 8_192,

30+

};

31+

}

32+33+

function createUserReportedConfig(params?: { includeApiKey?: boolean }): OpenClawConfig {

34+

const includeApiKey = params?.includeApiKey ?? true;

35+

return {

36+

agents: {

37+

defaults: {

38+

model: { primary: USER_PRIMARY },

39+

},

40+

},

41+

models: {

42+

providers: {

43+

[USER_PROVIDER]: {

44+

baseUrl: "https://example.com/v1",

45+

api: "openai-completions",

46+

...(includeApiKey ? { apiKey: CONFIG_API_KEY } : {}),

47+

models: [makeVisionModel(USER_MODEL)],

48+

},

49+

},

50+

},

51+

};

52+

}

53+54+

async function withEmptyAgentDir<T>(run: (agentDir: string) => Promise<T>): Promise<T> {

55+

const agentDir = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-image-auth-regression-"));

56+

try {

57+

return await run(agentDir);

58+

} finally {

59+

await fs.rm(agentDir, { recursive: true, force: true });

60+

}

61+

}

62+63+

describe("image custom provider auth regression", () => {

64+

const priorFetch = global.fetch;

65+66+

beforeEach(() => {

67+

for (const key of Object.keys(process.env)) {

68+

if (key.endsWith("_API_KEY") || key.endsWith("_OAUTH_TOKEN")) {

69+

vi.stubEnv(key, "");

70+

}

71+

}

72+

testing.setProviderDepsForTest({

73+

buildProviderRegistry: () => new Map(),

74+

getMediaUnderstandingProvider: () => undefined,

75+

describeImageWithModel: async (params: ImageDescriptionRequest) => ({

76+

text: `seen:${params.provider}/${params.model}`,

77+

model: params.model,

78+

}),

79+

describeImagesWithModel: async (params) => ({

80+

text: `seen:${params.provider}/${params.model}`,

81+

model: params.model,

82+

}),

83+

resolveAutoMediaKeyProviders: () => [],

84+

resolveDefaultMediaModel: () => undefined,

85+

});

86+

});

87+88+

afterEach(() => {

89+

vi.unstubAllEnvs();

90+

global.fetch = priorFetch;

91+

testing.setProviderDepsForTest(undefined);

92+

});

93+94+

it("uses real model-auth to accept config-only custom provider credentials", async () => {

95+

const cfg = createUserReportedConfig();

96+

expect(hasUsableCustomProviderApiKey(cfg, USER_PROVIDER)).toBe(true);

97+

expect(hasProviderAuthForTool({ provider: USER_PROVIDER, cfg })).toBe(true);

98+

});

99+100+

it("auto-discovers the user-reported vision model without env key or auth profile", async () => {

101+

await withEmptyAgentDir(async (agentDir) => {

102+

const cfg = createUserReportedConfig();

103+

expect(resolveImageModelConfigForTool({ cfg, agentDir })).toEqual({

104+

primary: USER_PRIMARY,

105+

});

106+

});

107+

});

108+109+

it("registers the image tool on the production factory path when the primary model has vision", async () => {

110+

await withEmptyAgentDir(async (agentDir) => {

111+

const cfg = createUserReportedConfig();

112+

expect(

113+

resolveImageToolFactoryAvailable({

114+

config: cfg,

115+

agentDir,

116+

modelHasVision: true,

117+

}),

118+

).toBe(true);

119+

});

120+

});

121+122+

it("executes deferred image tool discovery with config-backed auth and runtime key resolution", async () => {

123+

await withEmptyAgentDir(async (agentDir) => {

124+

const cfg = createUserReportedConfig();

125+

const auth = await getApiKeyForModel({

126+

model: {

127+

id: USER_MODEL,

128+

name: USER_MODEL,

129+

provider: USER_PROVIDER,

130+

api: "openai-completions",

131+

baseUrl: "https://example.com/v1",

132+

reasoning: false,

133+

input: ["text", "image"],

134+

cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },

135+

contextWindow: 128_000,

136+

maxTokens: 8_192,

137+

},

138+

cfg,

139+

agentDir,

140+

});

141+

expect(auth.apiKey).toBe(CONFIG_API_KEY);

142+

expect(auth.source).toContain("models.json");

143+144+

const tool = createImageTool({

145+

config: cfg,

146+

agentDir,

147+

deferAutoModelResolution: true,

148+

modelHasVision: true,

149+

});

150+

expect(typeof tool?.execute).toBe("function");

151+152+

const result = await tool!.execute("regression-1", {

153+

prompt: "Read this screenshot.",

154+

image: `data:image/png;base64,${ONE_PIXEL_PNG_B64}`,

155+

});

156+157+

const payload = result as { content?: Array<{ type?: string; text?: string }> };

158+

const text = payload.content?.find((entry) => entry.type === "text")?.text ?? "";

159+

expect(text).toContain(`seen:${USER_PRIMARY}`);

160+

expect(text).not.toMatch(/No image model is configured/i);

161+

});

162+

});

163+164+

it("still rejects the same config when apiKey is missing", async () => {

165+

await withEmptyAgentDir(async (agentDir) => {

166+

const cfg = createUserReportedConfig({ includeApiKey: false });

167+

expect(hasUsableCustomProviderApiKey(cfg, USER_PROVIDER)).toBe(false);

168+

expect(hasProviderAuthForTool({ provider: USER_PROVIDER, cfg })).toBe(false);

169+

expect(resolveImageModelConfigForTool({ cfg, agentDir })).toBeNull();

170+171+

const tool = createImageTool({

172+

config: cfg,

173+

agentDir,

174+

deferAutoModelResolution: true,

175+

modelHasVision: true,

176+

});

177+

await expect(

178+

tool!.execute("regression-2", {

179+

prompt: "Read this screenshot.",

180+

image: `data:image/png;base64,${ONE_PIXEL_PNG_B64}`,

181+

}),

182+

).rejects.toThrow(/No image model is configured/);

183+

});

184+

});

185+

});