PR #65179: fix: apply payload.model override in cron jobs even when not in allowlist (#65129)

• Repository: openclaw/openclaw
• Author: draix
• State: open | merged: False
• Link: https://github.com/openclaw/openclaw/pull/65179

Description (problem / solution / changelog)

Summary

When a cron job has payload.model set, the model is stored correctly in the job config but silently ignored at execution time, reverting to the agent default. The bug affects all cron jobs with an explicit model override (#65129).

Root cause

resolveCronModelSelection calls resolveAllowedModelRef, which checks the model against agents.defaults.models. If the model is not in that allowlist, it returns { error: "model not allowed: ..." }.

The caller then hits this branch:

if (resolvedOverride.error.startsWith("model not allowed:")) {
  return {
    ok: true,
    provider,  // ← falls back to default silently
    model,
    warning: `cron: payload.model '${modelOverride}' not allowed, falling back to agent defaults`,
  };
}

The warning is logged but not surfaced to the user in cron runs output, so the behavior looks like the override is simply ignored.

Fix

payload.model is an explicit per-job declaration by the user — different from ad-hoc model selection. It should be applied as long as the model exists in the provider catalog (i.e. the provider is actually configured), regardless of the agents.defaults.models allowlist.

When resolveAllowedModelRef returns "model not allowed", we now:

1. Check if the model is in the catalog
2. If yes → re-resolve with models: {} (allowAny=true) so the override takes effect
3. If no → keep the fallback with a clearer warning message

This preserves the allowlist constraint for ad-hoc/session model selection while correctly honoring explicit cron job configurations.

Repro

# Add a cron job with a model not in agents.defaults.models
openclaw cron add --name test --at 1m --session isolated \
  --message "test" --model google/gemini-2.5-flash-preview

# Trigger and check — without fix, shows default model
openclaw cron run <id>
openclaw cron runs --id <id>

Fixes #65129

Changed files

• src/cron/isolated-agent/model-selection.ts (modified, +55/-9)
• src/infra/net/ssrf.ts (modified, +4/-1)