infra/stacks/openclaw
Viktor Barzin d4c76a07a2 openclaw: revert model swap + document codex re-auth path
The previous commit promoted modelrelay/auto-fastest to primary as a
workaround for the expired openai-codex OAuth token. But modelrelay
routes to small tool-call-shy models (nvidia/stepfun-ai/step-3.5-flash)
that hallucinate answers instead of using ssh / curl / etc. — exactly
what the v4 learning loop is supposed to leverage.

Revert primary back to openai-codex/gpt-5.4-mini (gpt-5.4-mini is the
only mini variant the Codex backend accepts for ChatGPT Plus tier),
and inline the re-auth command in the model-block comment so future
sessions know exactly what to do when the OAuth token expires:

  kubectl -n openclaw exec -it $(kubectl -n openclaw get pods \
    -l app=openclaw -o jsonpath='{.items[0].metadata.name}') \
    -c openclaw -- node /app/openclaw.mjs models auth login \
    --provider openai-codex

modelrelay/auto-fastest stays in the fallback chain so the agent
remains partially usable while the token is expired.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-22 14:17:01 +00:00
..
files openclaw: SSH + tmux task fallback to devvm 2026-05-22 14:17:01 +00:00
.terraform.lock.hcl infra: add kubectl + authentik providers across 6 stacks 2026-05-22 14:17:00 +00:00
backend.tf Woodpecker CI deploy [CI SKIP] 2026-05-22 14:16:47 +00:00
main.tf openclaw: revert model swap + document codex re-auth path 2026-05-22 14:17:01 +00:00
providers.tf infra: add kubectl + authentik providers across 6 stacks 2026-05-22 14:17:00 +00:00
secrets [ci skip] Move Terraform modules into stack directories 2026-02-22 14:38:14 +00:00
terragrunt.hcl migrate all secrets from SOPS to Vault KV 2026-03-14 17:15:48 +00:00