feat(onboarding): add web search to onboarding flow by kesku · Pull Request #34009 · openclaw/openclaw

kesku · 2026-03-04T05:50:16Z

Summary

Problem: Onboarding wizard had no search provider step, users had to run openclaw configure --section web post-setup, and even that only offered Perplexity and Brave despite 5 providers being supported.
Why it matters: Search is a core agent capability; it should be a first-class onboarding step like model and channel selection.
What changed: Added a search provider selection step (Perplexity, Brave, Gemini, Grok, Kimi) to both QuickStart and Advanced onboarding flows; updated the configure wizard to show all 5 providers. Runtime search provider auto-detection priority updated to match onboarding UI order
What did NOT change (scope boundary): Tool execution logic, config schema, and existing provider implementations are untouched.

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

Related: Comments from feat(web-search): switch Perplexity to native Search API #33822, this is a follow up PR

User-visible / Behavior Changes

Onboarding now prompts for a search provider between the channel and skills steps.
All 5 supported providers shown
QuickStart auto-detects provider from env vars and skips key prompt if a key is already available.
openclaw configure --section web now shows all 5 providers instead of just Brave and Perplexity.

Security Impact (required)

New permissions/capabilities? No
Secrets/tokens handling changed? No: same pattern as existing key prompts (plaintext text input, stored in config)
New/changed network calls? No
Command/tool execution surface changed? No
Data access scope changed? No

Repro + Verification

Environment

OS: macOS (Darwin 25.3.0)
Runtime/container: Node 20 / Bun

Steps

pnpm openclaw onboard --reset → verify search step appears after channels
Select a provider → enter key → confirm it's stored in config
pnpm openclaw configure --section web → verify all 5 providers listed

Expected

Search provider picker with 5 options + Skip
Key stored under the correct config path per provider

Actual

Matches expected

Evidence

Failing test/log before + passing after
10 new tests in onboard-search.test.ts (all pass)
2 existing configure.wizard.test.ts tests still pass
pnpm build + pnpm check clean

Human Verification (required)

Screenshots

Verified scenarios: Build, lint, all affected tests pass
Edge cases checked: Skip flow, blank key with existing key, env var auto-detect in quickstart
What you did not verify: Full interactive onboarding end-to-end on a fresh machine

Compatibility / Migration

Backward compatible? Yes
Config/env changes? No: uses existing config paths and env vars
Migration needed? No

Failure Recovery (if this breaks)

How to disable/revert this change quickly: Revert commit or pass --skip-search (new flag on OnboardOptions) to skip the step
Files/config to restore: src/wizard/onboarding.ts, src/commands/configure.wizard.ts
Known bad symptoms reviewers should watch for: Onboarding hanging at search step, config file missing tools.web.search after selection

Risks and Mitigations

Risk: Onboarding flow is slightly longer
- Mitigation: "Skip for now" option always available, not a concern

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c79f6a17a6

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

src/commands/onboard-search.ts

greptile-apps · 2026-03-04T05:56:28Z

Greptile Summary

This PR adds web search provider selection (Perplexity, Brave, Gemini, Grok, Kimi) to both QuickStart and Advanced onboarding flows, and expands openclaw configure --section web from 2 to 5 providers.

The implementation is well-structured with shared helpers (applySearchKey, resolveExistingKey, hasKeyInEnv) properly exported from onboard-search.ts and reused across configure wizard and finalize, eliminating prior duplication concerns. Key fixes from previous review rounds were incorporated: buildSearchEnvRef correctly picks the first available env var (fixing Kimi/MOONSHOT_API_KEY path), three-way key-prompt messages properly gate on whether env vars are actually set, and the finalize summary correctly reaches all code paths.

The PR maintains backward compatibility, uses existing config paths and env vars, and includes 10 new tests for the onboarding path with all passing.

Confidence Score: 4/5

PR is safe to merge; changes are well-tested and maintain backward compatibility with existing config paths and env vars.
The implementation demonstrates good architecture with shared helpers properly exported and reused across multiple modules, eliminating prior duplication concerns. The onboarding flow includes 10 new tests, all passing. The PR correctly handles three-way conditionals for key prompts, properly detects available env vars, and maintains correct finalize paths. Changes are confined to UI/DX with no impact on tool execution logic, config schema, or existing provider implementations.
No files require special attention

_{Last reviewed commit: 0c85d46}

src/commands/onboard-search.ts

src/commands/configure.wizard.ts

kesku · 2026-03-04T06:01:57Z

@greptileai @codex re-review, skip any nits or pre existing things that should be handled in follow up prs.

src/commands/onboard-search.test.ts

kesku · 2026-03-04T06:10:05Z

@greptileai @codex comments have been addressed, skip any nits or pre existing things that should be handled in follow up prs.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a34f622064

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

src/commands/configure.wizard.ts

src/commands/onboard-search.test.ts

src/commands/configure.wizard.ts

kesku · 2026-03-04T06:23:01Z

@greptileai @codex re-review, skip any nits or pre existing things that should be handled in follow up prs. addressed all comments!

src/commands/onboard-search.test.ts

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1c08e0f9c8

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

src/commands/onboard-search.ts

src/commands/configure.wizard.ts

src/wizard/onboarding.finalize.ts

kesku · 2026-03-04T06:32:39Z

@greptileai re-review

src/commands/onboard-search.test.ts

src/wizard/onboarding.finalize.ts

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cbfdc26882

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

src/commands/onboard-search.ts

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1e0585f22c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

src/commands/onboard-search.ts

kesku · 2026-03-04T14:11:38Z

@greptileai re-review, skip nits pls

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c7b1b78b3b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-03-04T14:15:44Z

src/commands/onboard-search.ts

+    const detected = SEARCH_PROVIDER_OPTIONS.find(
+      (e) => hasExistingKey(config, e.value) || hasKeyInEnv(e),
+    );


Match default provider detection to runtime priority

The default provider selection uses SEARCH_PROVIDER_OPTIONS.find(...), and that list is ordered with perplexity before brave, so users with multiple keys set (for example BRAVE_API_KEY and PERPLEXITY_API_KEY) will get Perplexity preselected and can persist provider: "perplexity" by pressing Enter. In the runtime resolver (resolveSearchProvider in src/agents/tools/web-search.ts), provider auto-detection prioritizes Brave first (also asserted by the "brave wins when multiple keys available" test), so this commit can silently flip an existing Brave-based setup to Perplexity during onboarding defaults. The wizard detection order should mirror runtime priority.

Useful? React with 👍 / 👎.

The runtime auto-detection order in resolveSearchProvider is a legacy fallback for configs that have no explicit provider field

Since the user actively confirms the provider selection, and the chosen provider is persisted to config, the runtime will use exactly what the user picked!

src/commands/onboard-search.ts

kesku · 2026-03-04T14:24:49Z

@greptileai re-review

docs/reference/api-usage-costs.md

src/wizard/onboarding.finalize.ts

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e29fe8c0ff

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-03-04T14:33:45Z

src/commands/configure.wizard.ts

+      nextSearch = { ...nextSearch, enabled: false };
+      note(
+        [
+          "No key stored yet, so web_search will stay unavailable.",
+          `Store a key here or set ${envVarNames} in the Gateway environment.`,


Keep web_search enabled when key is deferred to env setup

This branch forces enabled: false when the user turns on web_search but leaves the key blank and no env var is currently set, even though the very next line tells them they can set the provider env var later. An explicit false disables the tool regardless of future env keys (resolveSearchEnabled returns that boolean directly in src/agents/tools/web-search.ts), so adding BRAVE_API_KEY/PERPLEXITY_API_KEY/etc. after the wizard will still not activate search. This regresses deferred-env workflows and makes the wizard guidance incorrect.

Useful? React with 👍 / 👎.

users who later add an env var need to run configure --section web to enable it by design

kesku · 2026-03-04T14:52:54Z

@greptileai ptal

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

thewilloftheshadow · 2026-03-06T19:09:25Z

Landed via temp rebase onto main.

Gate: pnpm test -- src/commands/onboard-search.test.ts src/commands/configure.wizard.test.ts src/config/config.web-search-provider.test.ts src/wizard/onboarding.test.ts
Land commit: 6debd60
Merge commit: 3d7bc59

Thanks @kesku!

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6debd60f60

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-03-06T19:19:27Z

src/wizard/onboarding.finalize.ts

+    const keyConfigured = hasExistingKey(nextConfig, webSearchProvider);
+    const envAvailable = entry ? hasKeyInEnv(entry) : false;
+    const hasKey = keyConfigured || envAvailable;


Distinguish unresolved secret refs from usable web keys

Fresh evidence compared with earlier discussion: setupSearch now writes env SecretRefs even when the provider env var is not present (src/commands/onboard-search.ts:261-271), but this summary path treats any configured SecretRef as a usable key, so onboarding can report web search as enabled even though requests will still fail until that env var is actually set. This affects --secret-input-mode ref flows where users intentionally defer exporting the key and leaves them with a misleading “configured” success message.

Useful? React with 👍 / 👎.

* main: (37 commits) feat(gateway): add channel-backed readiness probes (openclaw#38285) CI: enable report-only Knip deadcode job Tooling: wire deadcode scripts to Knip Tooling: add Knip workspace config CI: skip detect-secrets on main temporarily Install Smoke: fetch docs base on demand CI: fetch base history on demand CI: add base-commit fetch helper Docs: clarify main secret scan behavior CI: keep full secret scans on main Docs: update secret scan reproduction steps CI: scope secret scans to changed files Media: reject spoofed input_image MIME payloads (openclaw#38289) chore: code/dead tests cleanup (openclaw#38286) Install Smoke: cache docker smoke builds Install Smoke: allow reusing prebuilt test images Install Smoke: shallow docs-scope checkout CI: shallow scope checkouts feat(onboarding): add web search to onboarding flow (openclaw#34009) chore: disable contributor labels ...

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]>

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]> (cherry picked from commit 3d7bc59)

@kesku

* add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]> (cherry picked from commit 3d7bc59)

@kesku

* fix(subagents): recover announce cleanup after kill/complete race (cherry picked from commit 2f86ae7) * feat(hooks): emit compaction lifecycle hooks (openclaw#16788) (cherry picked from commit 71ec421) * fix(agent): harden undici stream timeouts for long openai-completions runs (cherry picked from commit 05fb16d) * fix(agents): allow configured ollama endpoints without dummy api keys (cherry picked from commit 36afd1b) * feat(openai): add gpt-5.4 support for API and Codex OAuth (openclaw#36590) Co-authored-by: Tyler Yust <[email protected]> (cherry picked from commit 5d4b040) * Fix failover for zhipuai 1310 Weekly/Monthly Limit Exhausted (openclaw#33813) Co-authored-by: zhouhe-xydt <[email protected]> Co-authored-by: altaywtf <[email protected]> (cherry picked from commit a65d70f) * fix(failover): classify HTTP 402 as rate_limit when payload indicates usage limit (openclaw#30484) (openclaw#36802) Co-authored-by: Val Alexander <[email protected]> (cherry picked from commit 01b2017) * feat(onboarding): add web search to onboarding flow (openclaw#34009) * add web search to onboarding flow * remove post onboarding step (now redundant) * post-onboarding nudge if no web search set up * address comments * fix test mocking * add enabled: false assertion to the no-key test * --skip-search cli flag * use provider that a user has a key for * add assertions, replace the duplicated switch blocks * test for quickstart fast-path with existing config key * address comments * cover quickstart falls through to key test * bring back key source * normalize secret inputs instead of direct string trimming * preserve enabled: false if it's already set * handle missing API keys in flow * doc updates * hasExistingKey to detect both plaintext strings and SecretRef objects * preserve enabled state only on the "keep current" paths * add test for preserving * better gate flows * guard against invalid provider values in config * Update src/commands/configure.wizard.ts Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> * format fix * only mentions env var when it's actually available * search apiKey fields now typed as SecretInput * if no provider check if any search provider key is detectable * handle both kimi keys * remove .filter(Boolean) * do not disable web_search after user enables it * update resolveSearchProvider * fix(onboarding): skip search key prompt in ref mode * fix: add onboarding web search step (openclaw#34009) (thanks @kesku) --------- Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]> (cherry picked from commit 3d7bc59) * fix(ci): restore protocol and schema checks (openclaw#37470) (cherry picked from commit ee6f7b1) * Infra: require explicit opt-in for prerelease npm installs (openclaw#38117) * Infra: tighten npm registry spec parsing * Infra: block implicit prerelease npm installs * Plugins: cover prerelease install policy * Infra: add npm registry spec tests * Hooks: cover prerelease install policy * Docs: clarify plugin guide version policy * Docs: clarify plugin install version policy * Docs: clarify hooks install version policy * Docs: clarify hook pack version policy (cherry picked from commit f392b81) * ci: trigger workflow * fix: resolve cherry-pick adaptation failures from upstream web search commit - Add missing hasConfiguredSecretInput() to types.secrets.ts - Add SecretInput import to types.tools.ts for apiKey fields - Replace OpenClawConfig with RemoteClawConfig in onboard-search - Remove non-existent DEFAULT_SECRET_PROVIDER_ALIAS import - Remove invalid 'provider' field from SecretRef literal - Stub resolveSyntheticLocalProviderAuth (models.providers was gutted) - Replace undefined registerRun/emitLifecycleEnd test helpers with existing mod.registerSubagentRun/lifecycleHandler patterns Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]> * Plugins: clarify registerHttpHandler migration errors (openclaw#36794) * Changelog: note plugin HTTP route migration diagnostics * Tests: cover registerHttpHandler migration diagnostics * Plugins: clarify registerHttpHandler migration errors * Tests: cover registerHttpHandler diagnostic edge cases * Plugins: tighten registerHttpHandler migration hint (cherry picked from commit d4021f4) * Plugins: avoid false integrity drift prompts on unpinned updates (openclaw#37179) * Plugins: skip drift prompts for unpinned updates * Plugins: cover unpinned integrity update behavior (cherry picked from commit 428d176) * docs(protocol): document slash-delimited schema lookup plugin ids (cherry picked from commit f788ba1) * docs(plugins): document context engine slots and registration (cherry picked from commit eb2eeba) * docs(plugins): add context-engine manifest kind example (cherry picked from commit 7cc3376) * docs(config): list the context engine plugin slot (cherry picked from commit 5470337) * fix: Windows: openclaw plugins install fails with spawn EINVAL Fixes openclaw#7631 (cherry picked from commit d000316) * fix(whatsapp): remove implicit [openclaw] self-chat prefix (cherry picked from commit 4d9134f) * WhatsApp: honor outbound mediaMaxMb (openclaw#38097) * WhatsApp: add media cap helper * WhatsApp: cap outbound media loads * WhatsApp: align auto-reply media caps * WhatsApp: add outbound media cap test * WhatsApp: update auto-reply cap tests * Docs: update WhatsApp media caps * Changelog: note WhatsApp media cap fix (cherry picked from commit 222d635) * fix(mattermost): allow reachable interaction callback URLs (openclaw#37543) Merged via squash. Prepared head SHA: 4d59373 Co-authored-by: mukhtharcm <[email protected]> Co-authored-by: mukhtharcm <[email protected]> Reviewed-by: @mukhtharcm (cherry picked from commit 4a80d48) * Mattermost: harden interaction callback binding (openclaw#38057) (cherry picked from commit a274ef9) * chore: code/dead tests cleanup (openclaw#38286) * Discord: assert bot-self filter queue guard * Tests: remove dead gateway SIGTERM placeholder (cherry picked from commit 38f46e8) * Delete changelog/fragments directory (cherry picked from commit 8f69e07) * fix(feishu): restore explicit media request timeouts (cherry picked from commit b127333) * fix: adapt upstream naming to fork conventions Replace OpenClawConfig with RemoteClawConfig, openclaw/plugin-sdk with remoteclaw/plugin-sdk, and fix import paths for fork type exports. * fix: resolve type errors from upstream cherry-picks - Add missing RemoteClawConfig import in discord test - Use spread with as-any for feishu SDK timeout property - Remove allowUnresolvedSecretRef from mattermost test * ci: re-trigger CI after force push * fix: revert unintended onboarding changes from linter bleed * ci: sync PR head with branch --------- Co-authored-by: Vignesh Natarajan <[email protected]> Co-authored-by: Vincent Koc <[email protected]> Co-authored-by: dorukardahan <[email protected]> Co-authored-by: Tyler Yust <[email protected]> Co-authored-by: zhouhe-xydt <[email protected]> Co-authored-by: zhouhe-xydt <[email protected]> Co-authored-by: altaywtf <[email protected]> Co-authored-by: Xinhua Gu <[email protected]> Co-authored-by: Val Alexander <[email protected]> Co-authored-by: Kesku <[email protected]> Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com> Co-authored-by: Shadow <[email protected]> Co-authored-by: Altay <[email protected]> Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]> Co-authored-by: 0xlin2023 <[email protected]> Co-authored-by: Muhammed Mukhthar CM <[email protected]> Co-authored-by: Ayaan Zaidi <[email protected]>

openclaw-barnacle bot added commands Command implementations size: L labels Mar 4, 2026

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Show resolved Hide resolved

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Show resolved Hide resolved

src/commands/configure.wizard.ts Outdated Show resolved Hide resolved

kesku changed the title ~~add web search to onboarding flow~~ feat(web): add web search to onboarding flow Mar 4, 2026

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.test.ts Show resolved Hide resolved

openclaw-barnacle bot added the cli CLI command changes label Mar 4, 2026

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

src/commands/configure.wizard.ts Outdated Show resolved Hide resolved

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.test.ts Show resolved Hide resolved

src/commands/configure.wizard.ts Outdated Show resolved Hide resolved

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.test.ts Show resolved Hide resolved

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Show resolved Hide resolved

src/commands/configure.wizard.ts Outdated Show resolved Hide resolved

src/wizard/onboarding.finalize.ts Outdated Show resolved Hide resolved

kesku marked this pull request as draft March 4, 2026 06:32

kesku marked this pull request as ready for review March 4, 2026 06:32

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.test.ts Show resolved Hide resolved

src/wizard/onboarding.finalize.ts Outdated Show resolved Hide resolved

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Outdated Show resolved Hide resolved

src/commands/onboard-search.ts Outdated Show resolved Hide resolved

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Outdated Show resolved Hide resolved

openclaw-barnacle bot added the docs Improvements or additions to documentation label Mar 4, 2026

kesku changed the title ~~feat(web): add web search to onboarding flow~~ feat(onboarding): add web search to onboarding flow Mar 4, 2026

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

src/commands/onboard-search.ts Outdated Show resolved Hide resolved

greptile-apps bot reviewed Mar 4, 2026

View reviewed changes

docs/reference/api-usage-costs.md Show resolved Hide resolved

src/wizard/onboarding.finalize.ts Outdated Show resolved Hide resolved

chatgpt-codex-connector bot reviewed Mar 4, 2026

View reviewed changes

kesku and others added 13 commits March 6, 2026 13:07

better gate flows

bb73c3b

guard against invalid provider values in config

8ae1d66

Update src/commands/configure.wizard.ts

3bf3c5e

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

format fix

3c93bd4

only mentions env var when it's actually available

0b1b3ca

search apiKey fields now typed as SecretInput

3a14e96

if no provider check if any search provider key is detectable

b8ea505

handle both kimi keys

e5fc14a

remove .filter(Boolean)

74905d5

do not disable web_search after user enables it

7c14221

update resolveSearchProvider

b82f1a1

fix(onboarding): skip search key prompt in ref mode

be07289

fix: add onboarding web search step (openclaw#34009) (thanks @kesku)

6debd60

thewilloftheshadow force-pushed the kesku/add-web-provider-to-onboarding-flow branch from f66da52 to 6debd60 Compare March 6, 2026 19:08

thewilloftheshadow merged commit 3d7bc59 into openclaw:main Mar 6, 2026

chatgpt-codex-connector bot reviewed Mar 6, 2026

View reviewed changes

github-actions bot mentioned this pull request Mar 6, 2026

📡 Upstream Digest — 2026-03-06 20:23 UTC curtismercier/openclaw-mods#195

Open

alexyyyander mentioned this pull request Mar 7, 2026

fix/gateway token mismatch 38617 #38676

Closed

alexey-pelykh mentioned this pull request Mar 10, 2026

Cherry-pick: agent failover, compaction hooks, stream timeouts, oauth remoteclaw/remoteclaw#833

Closed

Uh oh!

Conversation

kesku commented Mar 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

User-visible / Behavior Changes

Security Impact (required)

Repro + Verification

Environment

Steps

Expected

Actual

Evidence

Human Verification (required)

Compatibility / Migration

Failure Recovery (if this breaks)

Risks and Mitigations

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

greptile-apps bot commented Mar 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Greptile Summary

Confidence Score: 4/5

Uh oh!

Uh oh!

Uh oh!

kesku commented Mar 4, 2026

Uh oh!

Uh oh!

kesku commented Mar 4, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kesku commented Mar 4, 2026

Uh oh!

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kesku commented Mar 4, 2026

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

kesku commented Mar 4, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Mar 4, 2026

Choose a reason for hiding this comment

Uh oh!

kesku Mar 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

kesku commented Mar 4, 2026 •

edited

Loading

greptile-apps bot commented Mar 4, 2026 •

edited

Loading

kesku Mar 4, 2026 •

edited

Loading