From fc8791cd03f342b8911e11cfae8b0fc4360574e0 Mon Sep 17 00:00:00 2001 From: "openclaw-docs-sync[bot]" Date: Thu, 23 Apr 2026 23:38:34 +0000 Subject: [PATCH] chore(sync): mirror docs from openclaw/openclaw@d16b879334eeec07e610b1ea0063fbd134b61048 --- .openclaw-sync/source.json | 4 ++-- docs/providers/openai.md | 4 ++++ docs/tools/image-generation.md | 4 ++++ 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json index e90523a71..362a668eb 100644 --- a/.openclaw-sync/source.json +++ b/.openclaw-sync/source.json @@ -1,5 +1,5 @@ { "repository": "openclaw/openclaw", - "sha": "f7c4d7a5f0c4efece9d93e2c82f35111bb89ee7f", - "syncedAt": "2026-04-23T23:27:58.820Z" + "sha": "d16b879334eeec07e610b1ea0063fbd134b61048", + "syncedAt": "2026-04-23T23:37:00.444Z" } diff --git a/docs/providers/openai.md b/docs/providers/openai.md index a1a076596..5981056a3 100644 --- a/docs/providers/openai.md +++ b/docs/providers/openai.md @@ -236,6 +236,10 @@ does not first try `OPENAI_API_KEY` or silently fall back to an API key for that request. Configure `models.providers.openai` explicitly with an API key, custom base URL, or Azure endpoint when you want the direct OpenAI Images API route instead. +If that custom image endpoint is on a trusted LAN/private address, also set +`browser.ssrfPolicy.dangerouslyAllowPrivateNetwork: true`; OpenClaw keeps +private/internal OpenAI-compatible image endpoints blocked unless this opt-in is +present. Generate: diff --git a/docs/tools/image-generation.md b/docs/tools/image-generation.md index 8f9595cc4..944f7cf1b 100644 --- a/docs/tools/image-generation.md +++ b/docs/tools/image-generation.md @@ -35,6 +35,10 @@ Codex OAuth uses the same `openai/gpt-image-2` model ref. When an through that same OAuth profile instead of first trying `OPENAI_API_KEY`. Explicit custom `models.providers.openai` image config, such as an API key or custom/Azure base URL, opts back into the direct OpenAI Images API route. +For OpenAI-compatible LAN endpoints such as LocalAI, keep the custom +`models.providers.openai.baseUrl` and explicitly opt in with +`browser.ssrfPolicy.dangerouslyAllowPrivateNetwork: true`; private/internal +image endpoints remain blocked by default. 3. Ask the agent: _"Generate an image of a friendly robot mascot."_