Send AIService the secret it actually validates

FixSecurityService
Shipped
July 18, 2026 at 9:07 PM UTC
Author
Kamo
Commit
2609eb5

The vision-capability proxy authenticated with internal.auth.secret, but AIService validates **************** — a different secret. Confirmed live: the console got 401 {"error":"unauthorized"} straight from AIService. The failure is worse than a plain error: MlosAiClient collapses a 401 into an empty Optional, so the console would have told a tenant WITH a vision provider configured that it had none, and pointed them at settings to fix something that was not broken. Both secrets are already wired into this service; the AI call now uses the right one.

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing