Skip to content

fix: revert OpenClaw default model to openrouter/auto#2509

Merged
louisgv merged 3 commits intoOpenRouterTeam:mainfrom
AhmedTMM:fix/openclaw-model-auto
Mar 12, 2026
Merged

fix: revert OpenClaw default model to openrouter/auto#2509
louisgv merged 3 commits intoOpenRouterTeam:mainfrom
AhmedTMM:fix/openclaw-model-auto

Conversation

@AhmedTMM
Copy link
Collaborator

Summary

  • OpenClaw uses provider/model format — requires openrouter/ prefix for OpenRouter models
  • moonshotai/kimi-k2.5 (from fix: set OpenClaw default model to kimi-k2.5 #2419) was missing the prefix, causing Unknown model warnings
  • Reverted to openrouter/openrouter/auto — OpenRouter's auto-router picks the best model per prompt
  • Updated both code (agent-setup.ts) and manifest.json

Test plan

  • bun test — 1398 pass, 0 fail
  • biome check — clean
  • Manual: spawn run digitalocean openclaw — no "Unknown model" warning

🤖 Generated with Claude Code

@AhmedTMM AhmedTMM force-pushed the fix/openclaw-model-auto branch 2 times, most recently from bed0cac to 440006e Compare March 12, 2026 00:39
OpenClaw requires the openrouter/ provider prefix for model IDs.
The previous default (moonshotai/kimi-k2.5) was missing the prefix,
causing "Unknown model" warnings. Reverted to openrouter/openrouter/auto
which uses OpenRouter's auto-router to pick the best model per prompt.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@AhmedTMM AhmedTMM force-pushed the fix/openclaw-model-auto branch from 440006e to d46d614 Compare March 12, 2026 00:39
Copy link
Member

@louisgv louisgv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review

Verdict: APPROVED
Commit: d46d614

Findings

No security vulnerabilities detected.

Changes Reviewed

  • manifest.json:60 — Changed OpenClaw default model from to
  • packages/cli/package.json:3 — Version bump from 0.16.12 to 0.16.13 (appropriate for config change)
  • packages/cli/src/shared/agent-setup.ts:626,640 — Updated OpenClaw and fallback to

Security Analysis

  • ✅ No command injection vectors
  • ✅ No credential leaks
  • ✅ No path traversal risks
  • ✅ No unsafe eval or code execution
  • ✅ Model ID is a configuration string, properly scoped
  • ✅ Version bump follows project conventions

Tests

  • biome lint: ✅ PASS (0 errors)
  • bun test: ✅ PASS (1398/1398 tests passed)
  • Impact: Configuration-only change, no runtime behavior changes
  • Compatibility: macOS/Linux compatible (no shell scripts modified)

Summary

This is a safe configuration change that updates OpenClaw's default model to use OpenRouter's auto-routing feature instead of a specific model. The change is consistent across all three locations (manifest, modelDefault, configure fallback) and includes proper version bump.


-- security/pr-reviewer

louisgv
louisgv previously approved these changes Mar 12, 2026
Copy link
Member

@louisgv louisgv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review

Verdict: APPROVED
Commit: d46d614

Findings

No security vulnerabilities detected.

Changes Reviewed

  • manifest.json:60 — Changed OpenClaw default model from moonshotai/kimi-k2.5 to openrouter/openrouter/auto
  • packages/cli/package.json:3 — Version bump from 0.16.12 to 0.16.13 (appropriate for config change)
  • packages/cli/src/shared/agent-setup.ts:626,640 — Updated OpenClaw modelDefault and fallback to openrouter/openrouter/auto

Security Analysis

  • No command injection vectors
  • No credential leaks
  • No path traversal risks
  • No unsafe eval or code execution
  • Model ID is a configuration string, properly scoped
  • Version bump follows project conventions

Tests

  • biome lint: PASS (0 errors)
  • bun test: PASS (1398/1398 tests passed)
  • Impact: Configuration-only change, no runtime behavior changes
  • Compatibility: macOS/Linux compatible (no shell scripts modified)

Summary

This is a safe configuration change that updates OpenClaw default model to use OpenRouter auto-routing feature instead of a specific model. The change is consistent across all three locations (manifest, modelDefault, configure fallback) and includes proper version bump.


-- security/pr-reviewer

Copy link
Member

@louisgv louisgv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review

Verdict: APPROVED
Commit: 0285b8a

Findings

No security vulnerabilities detected.

Changes Reviewed (Conflict Resolution)

  • packages/cli/package.json:3 — Version bump from 0.16.13 to 0.16.15 (resolved conflict with main branch at 0.16.14)

Original PR Changes

  • manifest.json:60 — Changed OpenClaw default model from moonshotai/kimi-k2.5 to openrouter/openrouter/auto
  • packages/cli/src/shared/agent-setup.ts:626,640 — Updated OpenClaw modelDefault and fallback to openrouter/openrouter/auto

Security Analysis

  • ✅ No command injection vectors
  • ✅ No credential leaks
  • ✅ No path traversal risks
  • ✅ No unsafe eval or code execution
  • ✅ Model ID is a configuration string, properly scoped
  • ✅ Version bump follows project conventions (patch version for config change)
  • ✅ Conflict resolution is clean (version number only)

Tests

  • biome lint: ✅ PASS
  • bun test: ✅ PASS (Mock Tests, Unit Tests)
  • shellcheck: ✅ PASS
  • macOS compat: ✅ PASS

Summary

This is a safe configuration change that updates OpenClaw's default model to use OpenRouter's auto-routing feature. Conflict resolution was necessary due to version 0.16.14 being merged to main after this PR was created. The resolution correctly bumps to 0.16.15.


-- security/pr-reviewer

Copy link
Member

@louisgv louisgv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security Review (Post-Rebase)

Verdict: APPROVED
Commit: 3ef807b (merge with main)

Changes

Rebased onto latest main (commit 129f72d). Only test file changes pulled in from main - no security-relevant changes.

Security Status

✅ All original security approvals still valid
✅ All checks passing
✅ Ready to merge


-- security/pr-reviewer

@louisgv louisgv merged commit 553cbad into OpenRouterTeam:main Mar 12, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants