chore: fix/digitalocean canonical env var#3068
Closed
louisgv wants to merge 2 commits intoOpenRouterTeam:mainfrom
Closed
chore: fix/digitalocean canonical env var#3068louisgv wants to merge 2 commits intoOpenRouterTeam:mainfrom
louisgv wants to merge 2 commits intoOpenRouterTeam:mainfrom
Conversation
- Changed all instances of `DO_API_TOKEN` to `DIGITALOCEAN_ACCESS_TOKEN` in the codebase for consistency and clarity. - Updated documentation and README files to reflect the new environment variable name. - Ensured backward compatibility by accepting `DO_API_TOKEN` and `DIGITALOCEAN_API_TOKEN` as aliases for `DIGITALOCEAN_ACCESS_TOKEN`. - Adjusted tests to use the new variable name and verify legacy aliases. This change improves clarity in the authentication process for DigitalOcean and aligns with best practices for environment variable naming.
Resolve conflict in script-failure-guidance test: keep DIGITALOCEAN_ACCESS_TOKEN (canonical env var) with stripped_ wrapper. Made-with: Cursor
Member
Author
Security ReviewVerdict: APPROVED ✅ Findings
Tests
RecommendationREADY TO MERGE - All security checks pass. This PR safely implements DigitalOcean environment variable migration with proper backward compatibility. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED Findings
Tests
Compatibility
Note: Cannot formally approve as this appears to be my own PR. Manual merge by maintainer required. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED Findings✅ No security issues found Positive Security Aspects
Tests
Technical Review
Recommendation: Safe to merge. This PR improves naming consistency while maintaining full backward compatibility. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (cannot formally approve own PR, posting as comment) FindingsNo security issues found. This PR safely refactors the DigitalOcean environment variable name from Security highlights:
Code quality:
Tests
Recommendation: This PR is safe to merge immediately. The refactoring follows best practices and maintains full backward compatibility. -- security/pr-reviewer-3068 |
Member
Author
Security ReviewVerdict: APPROVED ✅ SummaryThis PR standardizes the DigitalOcean credential environment variable from Security Analysis✅ No security vulnerabilities found Changes reviewed:
Positive security aspects:
Tests
RecommendationAPPROVED — Safe to merge. The refactoring improves naming consistency without introducing security issues. Note: Cannot approve via GitHub review API (same author as reviewer), but security review is complete and clean. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (self-authored PR - cannot formally approve) SummaryThis PR standardizes DigitalOcean environment variable naming from Security AnalysisToken Handling ✓ SAFE
Command Injection ✓ SAFE
Credential Leaks ✓ SAFE
curl|bash Safety ✓ SAFE
macOS bash 3.x Compatibility ✓ SAFE
Tests
Changes Reviewed
FindingsNo security issues found. Recommendation: Safe to merge. -- security/pr-reviewer |
Member
Author
|
PR needs to be updated with latest main before merging. Running update... |
Member
Author
Security ReviewVerdict: APPROVED (cannot approve own PR — manual merge required) Findings✅ No security issues found Analysis
Tests
RecommendationThis PR is safe to merge. It's a refactoring that standardizes naming while maintaining backward compatibility with no security regressions. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (cannot formally approve own PR, but security review is clean) FindingsNo security issues found. This PR performs a clean refactor to standardize the DigitalOcean environment variable naming:
Tests
Security Analysis
Recommendation: Safe to merge. This is a low-risk refactor that improves naming consistency while maintaining backward compatibility. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED SummaryThis PR standardizes DigitalOcean environment variable naming from FindingsNo security issues found. All changes are low-risk refactoring:
Security Analysis✅ Command injection: No new injection vectors. Shell script token resolution at lines 13-18 uses safe bash variable assignment Tests
Code Quality
Recommendation: Safe to merge. This is a self-authored PR so I cannot formally approve it via GitHub's review system, but the security review is complete and no issues were found. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED FindingsNo security issues identified. All changes are safe. Key Security Aspects Reviewed
Tests
Recommendation: Safe to merge. No security concerns. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (cannot formally approve as author is louisgv) FindingsNo security issues found. This PR standardizes DigitalOcean credential env var handling:
Changes Reviewed
Tests
RecommendationAPPROVED FOR MERGE - No security concerns. This is a clean refactor that improves consistency. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED FindingsNo security issues identified. This is a clean refactoring that:
Tests
Ready to merge. ✅ -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED SummaryThis PR standardizes the DigitalOcean environment variable to FindingsNo security issues found. The changes:
Tests
-- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED SummaryThis PR standardizes DigitalOcean environment variable names from Security FindingsNo security issues identified. Detailed Analysis✅ Credential Handling (SECURE)
✅ Input Validation (SECURE)
✅ Backward Compatibility (VERIFIED)
✅ Command Injection Prevention (SECURE)
Tests
RecommendationAPPROVED FOR MERGE. This is a clean refactoring with no security concerns. The backward compatibility ensures a smooth transition for existing users. Note: Cannot submit formal approval review as the PR author cannot approve their own PR. Added -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (no security issues found) SummaryThis PR standardizes DigitalOcean environment variable naming from the legacy FindingsNo security issues identified Changes reviewed:
Security AnalysisToken Handling:
Shell Script Safety:
Alias Resolution:
Tests
Unrelated ChangesFiles Recommendation: Ready to merge -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED (self-authored PR - cannot formally approve) FindingsNo security issues found. This PR safely refactors environment variable naming for DigitalOcean credentials:
Tests
Changes Summary
Recommendation: Ready to merge. All security checks pass. -- security/pr-reviewer |
Member
Author
Security ReviewVerdict: APPROVED SummaryThis PR standardizes DigitalOcean environment variable naming from FindingsNONE — No security vulnerabilities found. Changes Reviewed
Tests
Security Assessment✅ No command injection — All token passing uses temp config files or proper env vars -- security/pr-reviewer |
AhmedTMM
approved these changes
Mar 29, 2026
Member
|
This PR is approved but cannot be merged because the head branch is not up to date with main, and the branch lives on a fork ( @scottmiller (or any fork maintainer): please rebase onto Once rebased and CI passes, this can be squash-merged immediately. -- refactor/pr-maintainer |
la14-1
pushed a commit
that referenced
this pull request
Mar 29, 2026
Replaces all references to DO_API_TOKEN with DIGITALOCEAN_ACCESS_TOKEN, matching DigitalOcean's official CLI and API documentation. This includes TypeScript source, tests, shell scripts, Packer config, CI workflows, and documentation. Supersedes #3068 (rebased onto current main). Agent: pr-maintainer Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
Member
|
This PR was approved but could not be merged due to being out of date with main, and the fork branch couldn't be updated remotely. Created #3099 with the same changes rebased onto current main. -- refactor/pr-maintainer |
louisgv
added a commit
that referenced
this pull request
Mar 30, 2026
…3099) Replaces all references to DO_API_TOKEN with DIGITALOCEAN_ACCESS_TOKEN, matching DigitalOcean's official CLI and API documentation. This includes TypeScript source, tests, shell scripts, Packer config, CI workflows, and documentation. Supersedes #3068 (rebased onto current main). Agent: pr-maintainer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
la14-1
added a commit
that referenced
this pull request
Mar 30, 2026
…3099) Replaces all references to DO_API_TOKEN with DIGITALOCEAN_ACCESS_TOKEN, matching DigitalOcean's official CLI and API documentation. This includes TypeScript source, tests, shell scripts, Packer config, CI workflows, and documentation. Supersedes #3068 (rebased onto current main). Agent: pr-maintainer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
la14-1
added a commit
that referenced
this pull request
Mar 30, 2026
…3099) Replaces all references to DO_API_TOKEN with DIGITALOCEAN_ACCESS_TOKEN, matching DigitalOcean's official CLI and API documentation. This includes TypeScript source, tests, shell scripts, Packer config, CI workflows, and documentation. Supersedes #3068 (rebased onto current main). Agent: pr-maintainer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
louisgv
added a commit
that referenced
this pull request
Mar 31, 2026
…ts (#3096) * fix(ci): remove stale paths from biome check step in lint.yml biome.json restricts linting to packages/**/*.ts via its includes filter, so passing .claude/scripts/ and .claude/skills/setup-spa/ to the biome check command was a no-op — biome reported 0 files processed for those paths and silently skipped them. Remove the stale paths so the CI step accurately reflects what biome actually checks. * feat: add OpenRouter proxy for Cursor CLI agent (#3100) Cursor CLI uses a proprietary ConnectRPC/protobuf protocol with BiDi streaming over HTTP/2. It validates API keys against Cursor's own servers and hardcodes api2.cursor.sh for agent streaming — making direct OpenRouter integration impossible. This adds a local translation proxy that intercepts Cursor's protocol and routes LLM traffic through OpenRouter: Architecture: Cursor CLI → Caddy (HTTPS/H2, port 443) → split routing: /agent.v1.AgentService/* → H2C Node.js (BiDi streaming → OpenRouter) everything else → HTTP/1.1 Node.js (fake auth, models, config) Key components: - cursor-proxy.ts: proxy scripts + deployment functions - Caddy reverse proxy for TLS + HTTP/2 termination - /etc/hosts spoofing to intercept api2.cursor.sh - Hand-rolled protobuf codec for AgentServerMessage format - SSE stream translation (OpenRouter → ConnectRPC protobuf frames) Proto schemas reverse-engineered from Cursor CLI binary v2026.03.25: - AgentServerMessage.InteractionUpdate.TextDeltaUpdate.text - agent.v1.ModelDetails (model_id, display_model_id, display_name) - TurnEndedUpdate (input_tokens, output_tokens) Tested end-to-end on Sprite VM: Cursor CLI printed proxy response with EXIT=0. Co-authored-by: Ahmed Abushagur <ahmed@abushagur.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix(digitalocean): use canonical DIGITALOCEAN_ACCESS_TOKEN env var (#3099) Replaces all references to DO_API_TOKEN with DIGITALOCEAN_ACCESS_TOKEN, matching DigitalOcean's official CLI and API documentation. This includes TypeScript source, tests, shell scripts, Packer config, CI workflows, and documentation. Supersedes #3068 (rebased onto current main). Agent: pr-maintainer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * fix: remove --trust flag from Cursor CLI launch command (#3101) Cursor CLI v2026.03.25 only allows --trust in headless/print mode. Launching interactively with --trust causes immediate exit with error. Co-authored-by: spawn-bot <spawn-bot@openrouter.ai> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com> Co-authored-by: Ahmed Abushagur <ahmed@abushagur.com> * fix(cursor): set CURSOR_API_KEY to skip browser login (#3104) Cursor CLI requires authentication before making API calls. Without CURSOR_API_KEY set, it falls back to browser-based OAuth which fails because the proxy spoofs api2.cursor.sh to localhost, breaking the OAuth callback. Setting a dummy CURSOR_API_KEY makes Cursor use the /auth/exchange_user_api_key endpoint instead, which the proxy already handles with a fake JWT. Co-authored-by: spawn-bot <spawn-bot@openrouter.ai> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * docs: sync README with source of truth (#3097) - update tagline: 8 agents/48 combos -> 9 agents/54 combos - add Cursor CLI row to matrix table manifest.json has 9 agents (cursor was added but README matrix was not updated) and 54 implemented entries. Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Ahmed Abushagur <ahmed@abushagur.com> * fix(cursor): update proxy model list to current models (#3105) Replace outdated models (Claude Sonnet 4, GPT-4o) with current ones: - Claude Sonnet 4.6 (default), Claude Haiku 4.5 - GPT-4.1 - Gemini 2.5 Pro, Gemini 2.5 Flash Co-authored-by: spawn-bot <spawn-bot@openrouter.ai> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat(status): add agent alive probe via SSH (#3109) `spawn status` now probes running servers by SSHing in and running `{agent} --version` to verify the agent binary is installed and executable. Results show in a new "Probe" column (live/down/—) and as `agent_alive` in JSON output. Only "running" servers are probed; gone/stopped/unknown servers are skipped. The probe function is injectable via opts for testability. Co-authored-by: spawn-bot <spawn-bot@openrouter.ai> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add cursor to agent lists in spawn skill files (#3108) cursor is a fully implemented agent across all 6 clouds but was missing from the available agents list in spawn skill instructions injected onto child VMs. This caused claude, codex, hermes, junie, kilocode, openclaw, opencode, and zeroclaw to be unaware they could delegate work to cursor. Signed-off-by: Ahmed Abushagur <ahmed@abushagur.com> Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Ahmed Abushagur <ahmed@abushagur.com> * fix(security): expand $HOME before path validation in downloadFile (#3080) Fixes #3080 Prevents path traversal via other $VAR expansions by normalizing $HOME to ~ before the strict path regex check, removing the need to allow $ in the charset. Applied to all 5 cloud providers: - digitalocean: downloadFile - aws: downloadFile - sprite: downloadFileSprite - gcp: uploadFile + downloadFile - hetzner: downloadFile Also bumps CLI version to 0.27.7. Agent: security-auditor Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(manifest): correct cursor repo to cursor/cursor and update star counts (#3092) The cursor agent's repo was set to anysphere/cursor (private, returns 404), which caused the stars-update script to store the raw 404 error object as github_stars instead of a number — breaking the manifest-type-contracts test. Fix: update repo to the public cursor/cursor repo (32,526 stars as of 2026-03-29). Also applies the daily star count updates for all other agents. -- qa/e2e-tester Co-authored-by: spawn-qa-bot <qa@openrouter.ai> * fix(spawn-fix): load API keys via config file, not just process.env (#3095) Previously buildFixScript() resolved env templates directly from process.env, silently writing empty values when the user authenticated via OAuth (key stored in ~/.config/spawn/openrouter.json). Now fixSpawn() loads the saved key before building the script, matching orchestrate.ts. Fixes #3094 Agent: code-health Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * docs: sync README commands table with help.ts (--prompt, --prompt-file) (#3106) Co-authored-by: spawn-qa-bot <qa@openrouter.ai> * fix(e2e): reduce Hetzner batch parallelism from 3 to 2 (#3112) Prevents server_limit_reached errors when pre-existing servers (e.g. spawn-szil) consume quota during E2E batch 1. Fixes #3111 Agent: test-engineer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * refactor(e2e): normalize unused-arg comments in headless_env functions (#3113) GCP, Sprite, and DigitalOcean had commented-out code `# local agent="$2"` in their `_headless_env` functions. Hetzner already used the cleaner style `# $2 = agent (unused but part of the interface)`. Normalize to match. Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * test: Remove duplicate and theatrical tests (#3089) * test: remove duplicate and theatrical tests - update-check.test.ts: fix 3 tests using stale hardcoded version '0.2.3' (older than current 0.29.1) to use `pkg.version` so 'should not update when up to date' actually tests the current-version path correctly - run-path-credential-display.test.ts: strengthen weak `toBeDefined()` assertion on digitalocean hint to `toContain('Simple cloud hosting')`, making it verify the actual fallback hint content Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * test: replace theatrical no-assert tests with real assertions in recursive-spawn Two tests in recursive-spawn.test.ts captured console.log output into a logs array but never asserted against it. Both ended with a comment like "should not throw" — meaning they only proved the function didn't crash, not that it produced the right output. - "shows empty message when no history": now spies on p.log.info and asserts cmdTree() emits "No spawn history found." - "shows flat message when no parent-child relationships": now asserts cmdTree() emits "no parent-child relationships" via p.log.info. expect() call count: 4831 to 4834 (+3 real assertions added). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * test: consolidate redundant describe block in cmd-fix-cov.test.ts The file had two separate describe blocks with identical beforeEach/afterEach boilerplate. The second block ("fixSpawn connection edge cases") contained only one test ("shows success when fix script succeeds") and could be merged directly into the first block ("fixSpawn (additional coverage)") without any loss of coverage or setup fidelity. Removes 23 lines of duplicated boilerplate. Test count unchanged (6 tests). --------- Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(config): extend biome.json includes to cover .claude/**/*.ts Add .claude/**/*.ts to biome.json includes so TypeScript files in .claude/scripts/ and .claude/skills/ are covered by biome formatting. Linting is disabled for .claude/** via override because the GritQL plugins (no-try-catch, no-typeof-string-number) target the main CLI codebase and cannot be scoped per-path — .claude/ hook scripts legitimately use try/catch as they run standalone outside the package. Agent: pr-maintainer Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(prompts): stop infinite shutdown loop after TeamDelete in non-interactive mode (#3116) After TeamDelete completes in -p (non-interactive) mode, Claude Code's harness was re-injecting shutdown prompts every turn. The root cause: the Monitor Loop instructed the agent to call TaskList + Bash on EVERY iteration, including after TeamDelete, which kept the session alive so the harness could inject more shutdown prompts. Fix: add an explicit EXCEPTION to both refactor-team-prompt.md and refactor-issue-prompt.md instructing the team lead that after TeamDelete is called, the very next response MUST be plain text only with no tool calls. A text-only response is the termination signal for the non-interactive harness. Fixes #3103 Agent: issue-fixer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(zeroclaw): remove broken zeroclaw agent (repo 404) (#3107) * fix(zeroclaw): remove broken zeroclaw agent (repo 404) The zeroclaw-labs/zeroclaw GitHub repository returns 404 — all installs fail. Remove zeroclaw entirely from the matrix: agent definition, setup code, shell scripts, e2e tests, packer config, skill files, and documentation. Fixes #3102 Agent: code-health Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(zeroclaw): remove stale zeroclaw reference from discovery.md ARM agents list Addresses security review on PR #3107 — the last remaining zeroclaw reference in .claude/rules/discovery.md is now removed. Agent: issue-fixer Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(zeroclaw): remove remaining stale zeroclaw references from CI/packer Remove zeroclaw from: - .github/workflows/agent-tarballs.yml ARM build matrix - .github/workflows/docker.yml agent matrix - packer/digitalocean.pkr.hcl comment - sh/e2e/e2e.sh comment Addresses all 5 stale references flagged in security review of PR #3107. Agent: issue-fixer Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> --------- Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(cli): allow --headless and --dry-run to be used together (#3117) Removes the mutual-exclusion validation that blocked combining these flags. Both flags serve independent purposes: --dry-run previews what would happen, --headless suppresses interactive prompts and emits structured output. Combining them is valid for CI pipelines that want structured JSON previews. Fixes #3114 Agent: issue-fixer Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * fix(cli): allow --headless and --dry-run to be used together (#3118) * test: remove redundant theatrical assertions (#3120) Remove bare toHaveBeenCalled() checks that preceded stronger content assertions, and strengthen the "shows manual install command" test to verify the actual install script URL appears in output. Affected files: - cmd-update-cov: remove redundant consoleSpy.toHaveBeenCalled() (x2), strengthen "shows manual install command" to check install.sh content - update-check: remove redundant consoleErrorSpy.toHaveBeenCalled() (x2) that were immediately followed by .mock.calls content assertions - recursive-spawn: remove redundant logInfoSpy.toHaveBeenCalled() before content check - cmd-interactive: remove redundant mockIntro/mockOutro.toHaveBeenCalled() before content checks Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * docs: sync README tagline with manifest (9 agents/54 → 8 agents/48 combinations) (#3119) Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: L <6723574+louisgv@users.noreply.github.com> * docs: remove stale ZeroClaw references after agent removal (#3122) ZeroClaw was removed in #3107 (repo 404). Two doc references were left behind: - .claude/rules/agent-default-models.md: table row for ZeroClaw model config - README.md: ZeroClaw listed in --fast skip-cloud-init agent examples Agent: code-health Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> * fix(e2e): redirect DO max_parallel log_warn to stderr (#3110) _digitalocean_max_parallel() called log_warn which writes colored output to stdout, polluting the captured return value when invoked via cloud_max=$(cloud_max_parallel). The downstream integer comparison [ "${effective_parallel}" -gt "${cloud_max}" ] then fails with 'integer expression expected', silently leaving the droplet limit cap unapplied. Fix: redirect log_warn output to stderr so only the numeric value is captured. Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: L <6723574+louisgv@users.noreply.github.com> * refactor: remove stale ZeroClaw references from docs and code comments --------- Signed-off-by: Ahmed Abushagur <ahmed@abushagur.com> Co-authored-by: spawn-qa-bot <qa@openrouter.ai> Co-authored-by: Ahmed Abushagur <ahmed@abushagur.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: spawn-bot <spawn-bot@openrouter.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
DO_API_TOKENtoDIGITALOCEAN_ACCESS_TOKENacross the codebase (manifest, CLI, scripts, tests, docs, Packer config).AUTH_VAR_ALIASESinshared.ts— legacy namesDIGITALOCEAN_API_TOKENandDO_API_TOKENcontinue to work, with clear precedence:DIGITALOCEAN_ACCESS_TOKEN>DIGITALOCEAN_API_TOKEN>DO_API_TOKEN.DIGITALOCEAN_ACCESS_TOKENis the default env var used by doctl (the official DigitalOcean CLI).DIGITALOCEAN_API_TOKENis the default env var used by the DigitalOcean MCP server.Changes
manifest.json:authfield updated toDIGITALOCEAN_ACCESS_TOKENpackages/cli/src/commands/shared.ts: NewAUTH_VAR_ALIASESmap andisAuthEnvVarSet()helper; updatedformatAuthVarLine,hasCloudCredentials,formatCredStatusLine,collectMissingCredentialsto check aliasespackages/cli/src/digitalocean/digitalocean.ts:ensureDoToken()checks all three env var names in precedence ordersh/digitalocean/README.md,sh/e2e/lib/clouds/digitalocean.sh,packer/digitalocean.pkr.hcl: Updated referencesTest plan
bun test— 1954/1955 pass (1 pre-existing macOS-specific failure unrelated to this PR)DIGITALOCEAN_ACCESS_TOKEN=<token> spawn ... digitaloceanworksDO_API_TOKEN=<token> spawn ... digitaloceanstill works (alias)DIGITALOCEAN_ACCESS_TOKEN