- Providers/OAuth: let browser-hosted identity provider pages read successful localhost callback responses, preventing xAI Grok OAuth from showing a false connection failure after OpenClaw completes login.

- Gateway/diagnostics: redact credential-bearing gateway target URLs and client diagnostics while preserving raw connection URLs for programmatic use, so connect-failure logs no longer surface embedded tokens.

- Gateway/auth: honor `OPENCLAW_GATEWAY_TOKEN` as the remote interactive fallback when no remote token is configured, keeping remote TUI setup aligned with documented auth precedence.

- Providers/xAI: continue polling video generations while xAI reports in-flight jobs as `pending`, so Grok video requests no longer fail before the final `done` response. (#82610) Thanks @Manzojunior.

- Logs: redact raw Basic auth and named security headers from `logs.tail` output before returning lines to read-scoped clients. Fixes #66832. Thanks @Magicray1217.

- CLI/gateway: emit structured JSON for gateway transport close/timeout failures when `--json` is requested by health, gateway health, and devices list commands. Fixes #79108. Thanks @TurboTheTurtle.

- Telegram: normalize announce group targets via a new `resolveSessionTarget` channel hook so scheduled announcements resolve consistently against the same Telegram session conversation registry as inbound turns. Fixes #81229. Thanks @giodl73-repo.

).rejects.toThrow("xAI video generation response malformed");

});

it("normalizes the xAI 'pending' poll status to 'processing' and keeps polling until done", async () => {

postJsonRequestMock.mockResolvedValue({

response: {

json: async () => ({

request_id: "req_pending",

}),

},

release: vi.fn(async () => {}),

});

fetchWithTimeoutMock

// First poll: in-progress payload mirroring xAI's real shape

.mockResolvedValueOnce({

json: async () => ({

request_id: "req_pending",

status: "pending",

progress: 42,

}),

})

// Second poll: complete

.mockResolvedValueOnce({

json: async () => ({

request_id: "req_pending",

status: "done",

video: { url: "https://cdn.x.ai/video-pending.mp4" },

progress: 100,

}),

})

// Download

.mockResolvedValueOnce({

headers: new Headers({ "content-type": "video/mp4" }),

arrayBuffer: async () => Buffer.from("mp4-bytes"),

});

const provider = buildXaiVideoGenerationProvider();

const result = await provider.generateVideo({

provider: "xai",

model: "grok-imagine-video",

prompt: "Pending then done",

cfg: {},

durationSeconds: 6,

aspectRatio: "9:16",

resolution: "720P",

});

// Two poll calls (one pending, one done) — not throwing on "pending"

expect((fetchWithTimeoutMock.mock.calls as unknown[]).length).toBeGreaterThanOrEqual(2);

expect(result.videos[0]?.mimeType).toBe("video/mp4");

expect(result.metadata?.requestId).toBe("req_pending");

});

it("sends a single unroled image as xAI first-frame image-to-video", async () => {

postJsonRequestMock.mockResolvedValue({

response: {

}

function readXaiStatusResponse(payload: Record<string, unknown>): XaiVideoStatusResponse {

const status = normalizeOptionalString(payload.status);

const rawStatus = normalizeOptionalString(payload.status);

// xAI's /v1/videos/{id} endpoint currently returns "pending" (with a progress

// integer) for in-flight jobs. Treat it as "processing" so polling continues

// instead of failing with XAI_VIDEO_MALFORMED_RESPONSE.

const status =

rawStatus === "pending" || rawStatus === "in_progress" ? "processing" : rawStatus;

if (!status || !["queued", "processing", "done", "failed", "expired"].includes(status)) {

throw new Error(XAI_VIDEO_MALFORMED_RESPONSE);

}