[github-actions]

Summary

• Scan window: 2026-10-26 onward. Reviewed merged PRs and the current implementation. No open [docs] auth: PRs exist.
• Corrected the GCP WIF path in docs/auth-matrix.md to match the merged PR Fix Gemini Vertex WIF audience and project-scoped routing #10720.
• Provider docs were not re-fetched; the change relies on repo implementation only.

Documentation Changes

• docs/auth-matrix.md, GCP WIF table:
  • The default audience is now `(iam.googleapis.com/redacted) followed by the WIF provider. It was previously listed only as "derived from WIF provider".
  • Added AWF_AUTH_GCP_PROJECT and AWF_AUTH_GCP_LOCATION. Native Vertex path scoping happens only when both are set. If either is absent, paths are unchanged.
  • These match what docs/api-proxy-sidecar.md already says.

Canonical Registry Changes

None.

Validation

• Checked containers/api-proxy/providers/google-adapter.js and its tests, plus src/api-proxy-env-constants.ts.
• Reviewed the Markdown table and the relative link.
• No credentials or tokens appear in the diff.

Sources

• Fix Gemini Vertex WIF audience and project-scoped routing #10720

Generated by Auth Doctor Updater · copilot · auto · ~26 AIC · ⊞ 14.5K · ◷

[github-actions]

Documentation Preview

Documentation has been built for this PR.

Download preview artifact

To view locally:

1. Download the docs-preview-pr-10777 artifact from the workflow run
2. Unzip and open index.html in your browser

Built from commit 42ae590

[lpcox]

@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/40626356424/job/122628415532?pr=10777

[Copilot]

@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/40626356424/job/122628415532?pr=10777

Fixed and pushed as 25bf8ec. Unpriceable automatic-recovery candidates are now rejected when an AI-credit budget is configured. The full API proxy suite passes (133 suites, 2,894 tests).

[lpcox]

@copilot merge main and resolve conflicts

[Copilot]

@copilot merge main and resolve conflicts

Merged main and resolved the model-recovery.js conflict. The two-parent merge commit is b5d69d7; root and API-proxy test suites passed.

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	93.63%	93.63%	➡️ +0.00%
Statements	92.12%	92.13%	➡️ +0.01%
Functions	91.23%	91.23%	➡️ +0.00%
Branches	86.23%	86.24%	➡️ +0.01%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/nvx/one-shot-adapter.ts	82.9% → 83.4% (+0.56%)	80.2% → 80.7% (+0.52%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts