Skip to content

fix(google-meet): report blank Twilio setup credentials as missing#109674

Merged
steipete merged 2 commits into
openclaw:mainfrom
ZengWen-DT:fix/google-meet-blank-twilio-status
Jul 17, 2026
Merged

fix(google-meet): report blank Twilio setup credentials as missing#109674
steipete merged 2 commits into
openclaw:mainfrom
ZengWen-DT:fix/google-meet-blank-twilio-status

Conversation

@ZengWen-DT

Copy link
Copy Markdown
Contributor

What Problem This Solves

Fixes an issue where google_meet setup_status reported Twilio voice-call credentials as configured when the corresponding environment variables contained only whitespace. A later delegated call still had no usable Twilio credentials.

Why This Change Was Made

The setup check now applies the same optional-string normalization to Twilio environment fallbacks that it already applies to plugin config values. Config precedence and the existing readiness message remain unchanged.

User Impact

Google Meet setup now reports the missing Twilio credential blocker before users attempt a delegated dial, matching the voice-call runtime's credential resolution.

Evidence

  • Real production-function proof before on 44b79d44ae1: with all three Twilio environment variables set to whitespace, getGoogleMeetSetupStatus returned { id: "twilio-voice-call-credentials", ok: true }, while resolveVoiceCallConfig({ provider: "twilio" }) returned no fromNumber and an empty twilio credential object.
  • Real google_meet tool proof after on 7e34687015a: setup_status reports the same credential check as false for whitespace-only environment values; valid values still report ready.
  • Mutation proof: restoring the raw environment fallback makes the new public-tool regression test fail with expected true to be false.
  • Focused test: node scripts/run-vitest.mjs extensions/google-meet/index.test.ts -t 'Twilio delegation readiness|whitespace-only Twilio environment credentials' — 2 passed, 143 skipped.
  • Targeted formatting and git diff --check passed.

AI-assisted: built with Codex.

@clawsweeper clawsweeper Bot added proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🦞 diamond lobster Very strong PR readiness with only minor maintainer review expected. status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR. P2 Normal backlog priority with limited blast radius. labels Jul 17, 2026
@clawsweeper

clawsweeper Bot commented Jul 17, 2026

Copy link
Copy Markdown
Contributor

Codex review: needs maintainer review before merge. Reviewed July 17, 2026, 1:34 AM ET / 05:34 UTC.

Summary
Normalizes Twilio environment credential fallbacks in Google Meet setup status and adds regression coverage for whitespace-only values.

PR surface: Source +2, Tests +41. Total +43 across 2 files.

Reproducibility: yes. at source level: setting all three Twilio environment variables to whitespace makes current-main setup logic treat them as truthy even though the runtime has no usable credentials. The review did not independently execute the checkout.

Review metrics: none identified.

Merge readiness
Overall: 🦞 diamond lobster
Proof: 🦞 diamond lobster
Patch quality: 🦞 diamond lobster
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Risk before merge

  • [P1] Several exact-head required checks were still in progress in the supplied snapshot, so merge should wait for the normal required-check gate.

Maintainer options:

  1. Decide the mitigation before merge
    Land the normalization and regression test after required exact-head checks complete, keeping setup readiness aligned with the canonical voice-call credential resolution behavior.
  2. Pause or close
    Do not merge this PR until maintainers decide whether the risk is worth taking.

Next step before merge

  • No automated repair is needed; the patch has no actionable review finding and only needs ordinary required-check completion and maintainer landing.

Security
Cleared: The patch changes only credential-presence normalization and tests, without exposing secrets, changing authentication, adding dependencies, or altering execution and supply-chain surfaces.

Review details

Best possible solution:

Land the normalization and regression test after required exact-head checks complete, keeping setup readiness aligned with the canonical voice-call credential resolution behavior.

Do we have a high-confidence way to reproduce the issue?

Yes at source level: setting all three Twilio environment variables to whitespace makes current-main setup logic treat them as truthy even though the runtime has no usable credentials. The review did not independently execute the checkout.

Is this the best way to solve the issue?

Yes. Normalizing the environment fallbacks at the existing setup-check boundary is the narrowest maintainable fix and preserves config precedence and public messages.

AGENTS.md: found and applied where relevant.

Codex review notes: model internal, reasoning high; reviewed against 7e34687015a1.

Label changes

Label changes:

  • add P2: This fixes a real but limited Google Meet plugin readiness false positive that otherwise defers failure until a delegated Twilio call.
  • add proof: sufficient: Contributor real behavior proof is sufficient. The PR supplies specific after-fix Google Meet tool output, before-fix runtime comparison, valid-value control, mutation proof, and focused test results that directly demonstrate the corrected behavior.
  • add rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
  • add status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR supplies specific after-fix Google Meet tool output, before-fix runtime comparison, valid-value control, mutation proof, and focused test results that directly demonstrate the corrected behavior.

Label justifications:

  • P2: This fixes a real but limited Google Meet plugin readiness false positive that otherwise defers failure until a delegated Twilio call.
  • rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
  • status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (live_output): The PR supplies specific after-fix Google Meet tool output, before-fix runtime comparison, valid-value control, mutation proof, and focused test results that directly demonstrate the corrected behavior.
  • proof: sufficient: Contributor real behavior proof is sufficient. The PR supplies specific after-fix Google Meet tool output, before-fix runtime comparison, valid-value control, mutation proof, and focused test results that directly demonstrate the corrected behavior.
Evidence reviewed

PR surface:

Source +2, Tests +41. Total +43 across 2 files.

View PR surface stats
Area Files Added Removed Net
Source 1 10 8 +2
Tests 1 41 0 +41
Docs 0 0 0 0
Config 0 0 0 0
Generated 0 0 0 0
Other 0 0 0 0
Total 2 51 8 +43

What I checked:

Likely related people:

  • steipete: Merged the major Google Meet/Twilio bridge work and is identified in related merged history as a recent owner of Google Meet realtime and voice-call integration behavior. (github.com) (role: recent area contributor and merger; confidence: high; commits: 8d6db59, 11c600cf1993, c956946b263d; files: extensions/google-meet/src/voice-call-gateway.ts, extensions/google-meet/src/setup.ts, docs/plugins/google-meet.md)
  • scoootscooob: Authored the merged Google Meet/Twilio realtime bridge series that established the adjacent delegated-call behavior checked by this setup status. (github.com) (role: Google Meet and Twilio bridge contributor; confidence: medium; commits: 7fc9a82, 309ff6b, 0c1df35; files: extensions/google-meet/src/voice-call-gateway.ts, extensions/voice-call/src/webhook/realtime-handler.ts, docs/plugins/google-meet.md)
What the crustacean ranks mean
  • 🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
  • 🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
  • 🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
  • 🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
  • 🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
  • 🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
  • 🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works
  • ClawSweeper keeps one durable marker-backed review comment per issue or PR.
  • Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
  • A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
  • PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
  • Maintainers can also comment @clawsweeper review to request a fresh review only.
  • Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
  • Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
  • Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

@steipete steipete self-assigned this Jul 17, 2026
@steipete
steipete merged commit 68c4cb3 into openclaw:main Jul 17, 2026
85 of 89 checks passed
@steipete

Copy link
Copy Markdown
Contributor

Merged via squash.

@steipete

Copy link
Copy Markdown
Contributor

Current main CI is blocked by formatting from this squash: oxfmt --check reports extensions/google-meet/index.test.ts. The same failure reproduced on PR #109803 after syncing through this commit.

Proof: https://github.com/openclaw/openclaw/actions/runs/29568723479/job/87847477257

Please format the owner test on main; #109803 is a separate test-performance change.

steipete added a commit that referenced this pull request Jul 17, 2026
68c4cb3 (#109674) landed unformatted, failing check-lint repo-wide.
github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jul 18, 2026
…penclaw#109674)

* fix(google-meet): reject blank Twilio setup credentials

* fix: centralize Google Meet voice setup values

Co-authored-by: ZengWen-DT <[email protected]>

---------

Co-authored-by: Peter Steinberger <[email protected]>
github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jul 18, 2026
6a88b02 (openclaw#109674) landed unformatted, failing check-lint repo-wide.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

P2 Normal backlog priority with limited blast radius. plugin: google-meet proof: sufficient ClawSweeper judged the real behavior proof convincing. rating: 🦞 diamond lobster Very strong PR readiness with only minor maintainer review expected. size: S status: 👀 ready for maintainer look ClawSweeper has no concrete contributor-facing blocker left for this PR.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants