PR #74834: fix: 5 targeted bug fixes (gemini-cli, plugin commands, openrouter thinking, cron summary, LLM-only tools)

• Repository: openclaw/openclaw
• Author: andyliu
• State: closed | merged: False
• Link: https://github.com/openclaw/openclaw/pull/74834

Description (problem / solution / changelog)

Summary

Five independent targeted fixes, each addressing a distinct bug:

1. fix(google): remove unsupported --skip-trust flag from gemini-cli backend (#74749)

gemini-cli >= 0.38.x dropped --skip-trust. Passing it causes yargs to exit non-zero on every call, resulting in 100% failure rate for the gemini CLI backend. Removed from both args and resumeArgs.

2. fix(plugins): guard against undefined plugin command handler result (#74800)

Plugin command handlers typed as Promise<PluginCommandResult> can return undefined at runtime. The caller in commands-plugin.ts immediately destructures result.continueAgent, crashing with Cannot read properties of undefined. Added a ?? {} fallback at the execution boundary.

3. fix(openrouter): add resolveThinkingProfile with xhigh for reasoning models (#74788)

OpenRouter had no resolveThinkingProfile, so /think xhigh was rejected for all models including openrouter/deepseek/deepseek-v4-pro. Added a profile that exposes xhigh for models with reasoning: true (unless explicitly excluded via isOpenRouterProxyReasoningUnsupportedModel).

4. fix(cron): prefer finalAssistantVisibleText over raw error text in task summary (#74807)

When a cron agentTurn run had only error payloads (tool call failed, agent self-corrected but never sent an explicit reply via messaging tool), fallbackSummary fell through to pickSummaryFromOutput(firstText) where firstText was the tool error. Now prefers finalAssistantVisibleText as an intermediate fallback before resorting to raw payload text.

5. fix(agents): skip tool allowlist guard for LLM-only runs (#74810)

buildEmptyExplicitToolAllowlistError raised an error when callableToolNames was empty, even when disableTools: true. LLM-only runs intentionally disable tools, so an empty callable set is expected. Added early return when disableTools === true.

Testing

Each fix is independently testable:

• #74749: pnpm test -- src/agents/cli-backends.test.ts
• #74800: Trigger any plugin command whose handler returns undefined
• #74788: pnpm test -- src/agents/pi-embedded-runner/openrouter-model-capabilities.test.ts
• #74807: pnpm test -- src/cron/isolated-agent
• #74810: pnpm test -- src/agents/tool-allowlist-guard

🤖 Generated with Claude Code

Changed files

• extensions/google/cli-backend.ts (modified, +2/-10)
• extensions/openrouter/index.ts (modified, +18/-0)
• src/agents/cli-backends.test.ts (modified, +2/-10)
• src/agents/tool-allowlist-guard.ts (modified, +4/-0)
• src/cron/isolated-agent/helpers.ts (modified, +10/-2)
• src/plugins/commands.ts (modified, +1/-1)

---

PR #74841: fix(agents): skip tool allowlist empty guard for LLM-only runs

• Repository: openclaw/openclaw
• Author: andyliu
• State: closed | merged: False
• Link: https://github.com/openclaw/openclaw/pull/74841

Description (problem / solution / changelog)

Summary

Targeted single-fix PR.

Closes #74810

🤖 Generated with Claude Code

Changed files

• src/agents/tool-allowlist-guard.ts (modified, +4/-0)

---

PR #73031: fix(agents): skip empty allowlist guard for modelRun

• Repository: openclaw/openclaw
• Author: aa-on-ai
• State: open | merged: False
• Link: https://github.com/openclaw/openclaw/pull/73031

Description (problem / solution / changelog)

Summary

openclaw infer model run aborts before any provider request when ~/.openclaw/openclaw.json has a non-empty tools.alsoAllow, because the empty explicit-allowlist guard still evaluates the global tool policy even though modelRun:true intentionally zeroes toolsRaw.

The fix adds a modelRun?: boolean parameter to buildEmptyExplicitToolAllowlistError and short-circuits to null when it is true. The embedded attempt path (attempt.ts) now passes modelRun: params.modelRun into the guard so model-only call shapes can run text-only without failing on a global tools.alsoAllow.

This keeps the existing fail-closed behavior for runtime disableTools conflicts and for ordinary agent runs whose explicit allowlist resolves to no callable tools (the original intent of #71292).

Repro

1. Set in ~/.openclaw/openclaw.json:

   "tools": { "profile": "coding", "alsoAllow": ["lobster", "llm-task"] }

2. Run:

   openclaw infer model run --local --model openai-codex/gpt-5.5 --prompt 'reply exactly: ok' --json

   Before this PR, fails with No callable tools remain after resolving explicit tool allowlist (...). After this PR, the model is reached.

Test added

src/agents/tool-allowlist-guard.test.ts — new case skips the empty-allowlist guard for modelRun call shapes. Asserts buildEmptyExplicitToolAllowlistError returns null when modelRun: true even with non-empty sources and zero callable tools. The existing disableTools: true fail-closed test is unchanged.

Validation

• pnpm test src/agents/tool-allowlist-guard.test.ts — 7/7 passing
• pnpm check:changed --staged — green (typecheck core/test, lint, import cycles, conflict markers, changelog attributions, etc.)
• pnpm test:changed — 2521 passing; one unrelated pre-existing failure on src/agents/tools/cron-tool.schema.test.ts (job.delivery keys assertion is missing the new threadId introduced by upstream b6be422306 fix(cron): accept threaded delivery in gateway schema). Reproduces on bare upstream/main with my changes stashed, so it is not blocking.

Closes

Fixes #73024

AI assistance

This PR was prepared with Claude Code (Opus 4.7). Lightly tested locally — the unit test covers the guard contract; the end-to-end infer model run repro was not exercised live since it requires a live model account.

Changed files

• CHANGELOG.md (modified, +1/-0)
• src/agents/pi-embedded-runner/run/attempt.ts (modified, +1/-0)
• src/agents/tool-allowlist-guard.test.ts (modified, +12/-0)
• src/agents/tool-allowlist-guard.ts (modified, +7/-0)