- Shipped
- July 18, 2026 at 9:07 PM UTC
- Author
- Kamo
- Commit
- 2609eb5
The vision-capability proxy authenticated with internal.auth.secret, but AIService validates **************** — a different secret. Confirmed live: the console got 401 {"error":"unauthorized"} straight from AIService. The failure is worse than a plain error: MlosAiClient collapses a 401 into an empty Optional, so the console would have told a tenant WITH a vision provider configured that it had none, and pointed them at settings to fix something that was not broken. Both secrets are already wired into this service; the AI call now uses the right one.