agent-control-plane 0.1.0

package/tools/tests/test-agent-project-codex-session-wrapper-clears-stale-sandbox-artifacts.sh

@@ -0,0 +1,105 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SESSION_SRC="${FLOW_ROOT}/tools/bin/agent-project-run-codex-session"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+tools_dir="$tmpdir/tools"
+bin_dir="$tmpdir/bin"
+worktree="$tmpdir/worktree"
+runs_root="$tmpdir/runs"
+prompt_file="$tmpdir/prompt.md"
+session="fl-codex-stale-sandbox"
+run_dir="$runs_root/$session"
+sandbox_run_dir="$worktree/.openclaw-artifacts/$session"
+
+mkdir -p "$tools_dir" "$bin_dir" "$worktree" "$runs_root" "$sandbox_run_dir"
+cp "$SESSION_SRC" "$tools_dir/agent-project-run-codex-session"
+
+printf 'stale-result\n' >"$sandbox_run_dir/result.env"
+printf '{"timestamp":"old","status":"pass","command":"stale verification"}\n' >"$sandbox_run_dir/verification.jsonl"
+printf 'stale blocker\n' >"$sandbox_run_dir/issue-comment.md"
+
+cat >"$tools_dir/agent-project-run-codex-resilient" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+sandbox_run_dir=""
+output_file=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --sandbox-run-dir) sandbox_run_dir="${2:-}"; shift 2 ;;
+    --output-file) output_file="${2:-}"; shift 2 ;;
+    *) shift ;;
+  esac
+done
+
+mkdir -p "$sandbox_run_dir"
+cat >"${sandbox_run_dir}/result.env" <<'RESULT'
+OUTCOME=implemented
+ACTION=host-publish-issue-pr
+RESULT
+printf '{"timestamp":"new","status":"pass","command":"fresh verification"}\n' >"${sandbox_run_dir}/verification.jsonl"
+printf 'mock runner wrote artifacts\n' >>"$output_file"
+exit 0
+EOF
+
+cat >"$bin_dir/codex" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+
+chmod +x "$tools_dir/agent-project-run-codex-session" "$tools_dir/agent-project-run-codex-resilient" "$bin_dir/codex"
+
+git -C "$worktree" init -b test >/dev/null 2>&1
+printf 'Prompt body\n' >"$prompt_file"
+
+bash "$tools_dir/agent-project-run-codex-session" \
+  --mode safe \
+  --session "$session" \
+  --worktree "$worktree" \
+  --prompt-file "$prompt_file" \
+  --runs-root "$runs_root" \
+  --adapter-id alpha \
+  --task-kind issue \
+  --task-id 123 \
+  --safe-profile mock-safe \
+  --collect-file verification.jsonl \
+  --collect-file issue-comment.md \
+  >/dev/null
+
+for _ in $(seq 1 50); do
+  if ! tmux has-session -t "$session" 2>/dev/null; then
+    break
+  fi
+  sleep 0.2
+done
+
+if tmux has-session -t "$session" 2>/dev/null; then
+  echo "tmux session did not exit" >&2
+  exit 1
+fi
+
+test -f "$run_dir/result.env"
+test -f "$run_dir/verification.jsonl"
+grep -q '^OUTCOME=implemented$' "$run_dir/result.env"
+grep -q 'fresh verification' "$run_dir/verification.jsonl"
+if grep -q 'stale verification' "$run_dir/verification.jsonl"; then
+  echo "stale verification entry leaked into codex cycle" >&2
+  exit 1
+fi
+if [[ -e "$run_dir/issue-comment.md" ]]; then
+  echo "stale codex issue comment leaked into host run dir" >&2
+  exit 1
+fi
+if [[ -e "$sandbox_run_dir/issue-comment.md" ]]; then
+  echo "stale codex sandbox comment artifact was not cleared" >&2
+  exit 1
+fi
+
+echo "agent-project codex session wrapper clears stale sandbox artifacts test passed"

package/tools/tests/test-agent-project-codex-session-wrapper.sh

@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SESSION_SRC="${FLOW_ROOT}/tools/bin/agent-project-run-codex-session"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+tools_dir="$tmpdir/tools"
+bin_dir="$tmpdir/bin"
+worktree="$tmpdir/worktree"
+runs_root="$tmpdir/runs"
+prompt_file="$tmpdir/prompt.md"
+session="fl-pr-wrapper-test"
+run_dir="$runs_root/$session"
+reconcile_log="$tmpdir/reconcile.log"
+
+mkdir -p "$tools_dir" "$bin_dir" "$worktree" "$runs_root"
+cp "$SESSION_SRC" "$tools_dir/agent-project-run-codex-session"
+
+cat >"$tools_dir/agent-project-run-codex-resilient" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+sandbox_run_dir=""
+output_file=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --sandbox-run-dir) sandbox_run_dir="${2:-}"; shift 2 ;;
+    --output-file) output_file="${2:-}"; shift 2 ;;
+    *) shift ;;
+  esac
+done
+
+mkdir -p "$sandbox_run_dir"
+cat >"${sandbox_run_dir}/result.env" <<'RESULT'
+OUTCOME=blocked
+ACTION=host-comment-blocker
+RESULT
+printf 'artifact-from-runner\n' >"${sandbox_run_dir}/mock.txt"
+printf 'mock runner wrote artifacts before failing\n' >>"$output_file"
+exit 23
+EOF
+
+cat >"$bin_dir/codex" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+
+chmod +x "$tools_dir/agent-project-run-codex-session" "$bin_dir/codex"
+
+git -C "$worktree" init -b test >/dev/null 2>&1
+printf 'Prompt body\n' >"$prompt_file"
+
+bash "$tools_dir/agent-project-run-codex-session" \
+  --mode safe \
+  --session "$session" \
+  --worktree "$worktree" \
+  --prompt-file "$prompt_file" \
+  --runs-root "$runs_root" \
+  --adapter-id alpha \
+  --task-kind pr \
+  --task-id 123 \
+  --safe-profile mock-safe \
+  --collect-file mock.txt \
+  --reconcile-command "printf 'reconciled\n' >> '$reconcile_log'" \
+  >/dev/null
+
+for _ in $(seq 1 50); do
+  if ! tmux has-session -t "$session" 2>/dev/null; then
+    break
+  fi
+  sleep 0.2
+done
+
+if tmux has-session -t "$session" 2>/dev/null; then
+  echo "tmux session did not exit" >&2
+  exit 1
+fi
+
+for _ in $(seq 1 25); do
+  [[ -f "$reconcile_log" ]] && break
+  sleep 0.2
+done
+
+test -f "$run_dir/result.env"
+test -f "$run_dir/mock.txt"
+grep -q '^OUTCOME=blocked$' "$run_dir/result.env"
+grep -q '^ACTION=host-comment-blocker$' "$run_dir/result.env"
+grep -q 'artifact-from-runner' "$run_dir/mock.txt"
+grep -q '__CODEX_EXIT__:23' "$run_dir/$session.log"
+grep -q '^reconciled$' "$reconcile_log"
+
+echo "agent-project codex session wrapper test passed"

package/tools/tests/test-agent-project-open-pr-worktree-config-prefix.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SOURCE_SCRIPT="${FLOW_ROOT}/tools/bin/agent-project-open-pr-worktree"
+FLOW_CONFIG_LIB="${FLOW_ROOT}/tools/bin/flow-config-lib.sh"
+FLOW_SHELL_LIB="${FLOW_ROOT}/tools/bin/flow-shell-lib.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+bin_dir="$tmpdir/bin"
+shim_bin_dir="$tmpdir/shims"
+shared_home="$tmpdir/shared-home"
+flow_root="$shared_home/skills/openclaw/agent-control-plane"
+flow_tools_dir="$flow_root/tools/bin"
+flow_assets_dir="$flow_root/assets"
+profile_home="$tmpdir/profiles"
+capture_file="$tmpdir/capture.log"
+repo_root="$tmpdir/repo"
+worktree_root="$tmpdir/worktrees"
+
+mkdir -p "$bin_dir" "$shim_bin_dir" "$flow_tools_dir" "$flow_assets_dir" "$profile_home/demo" "$repo_root" "$worktree_root"
+printf '# test skill\n' >"$flow_root/SKILL.md"
+cp "$SOURCE_SCRIPT" "$bin_dir/agent-project-open-pr-worktree"
+cp "$FLOW_CONFIG_LIB" "$bin_dir/flow-config-lib.sh"
+cp "$FLOW_SHELL_LIB" "$bin_dir/flow-shell-lib.sh"
+
+cat >"$profile_home/demo/control-plane.yaml" <<'EOF'
+id: "demo"
+session_naming:
+  pr_worktree_branch_prefix: "agent/acp/pr"
+EOF
+
+cat >"$flow_tools_dir/agent-init-worktree" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf '%s\n' "$*" >"${TEST_CAPTURE_FILE:?}"
+path=""
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --path) path="${2:-}"; shift 2 ;;
+    *) shift ;;
+  esac
+done
+mkdir -p "${path:?}"
+EOF
+
+cat >"$shim_bin_dir/git" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+
+chmod +x \
+  "$bin_dir/agent-project-open-pr-worktree" \
+  "$bin_dir/flow-config-lib.sh" \
+  "$bin_dir/flow-shell-lib.sh" \
+  "$flow_tools_dir/agent-init-worktree" \
+  "$shim_bin_dir/git"
+
+output="$(
+  TEST_CAPTURE_FILE="$capture_file" \
+  SHARED_AGENT_HOME="$shared_home" \
+  ACP_ROOT="$flow_root" \
+  ACP_PROFILE_REGISTRY_ROOT="$profile_home" \
+  ACP_PROJECT_ID="demo" \
+  PATH="$shim_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  bash "$bin_dir/agent-project-open-pr-worktree" \
+    --repo-root "$repo_root" \
+    --worktree-root "$worktree_root" \
+    --pr-number 77 \
+    --head-ref feature/test \
+    --stamp 20260325-120000
+)"
+
+grep -q -- '--branch agent/acp/pr-77-20260325-120000' "$capture_file"
+grep -q -- "--path $worktree_root/pr-77-20260325-120000" "$capture_file"
+grep -q -- '^BRANCH=agent/acp/pr-77-20260325-120000$' <<<"$output"
+
+echo "agent-project open pr worktree config prefix test passed"

package/tools/tests/test-agent-project-openclaw-session-wrapper-clears-stale-sandbox-artifacts.sh

@@ -0,0 +1,109 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SESSION_SRC="${FLOW_ROOT}/tools/bin/agent-project-run-openclaw-session"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+tools_dir="$tmpdir/tools"
+bin_dir="$tmpdir/bin"
+worktree="$tmpdir/worktree"
+runs_root="$tmpdir/runs"
+prompt_file="$tmpdir/prompt.md"
+session="fl-issue-openclaw-stale-sandbox"
+run_dir="$runs_root/$session"
+sandbox_run_dir="$worktree/.openclaw-artifacts/$session"
+
+mkdir -p "$tools_dir" "$bin_dir" "$worktree" "$runs_root" "$sandbox_run_dir"
+cp "$SESSION_SRC" "$tools_dir/agent-project-run-openclaw-session"
+
+printf 'stale-result\n' >"$sandbox_run_dir/result.env"
+printf '{"timestamp":"old","status":"pass","command":"stale verification"}\n' >"$sandbox_run_dir/verification.jsonl"
+printf 'stale blocker\n' >"$sandbox_run_dir/issue-comment.md"
+
+cat >"$bin_dir/openclaw" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+cmd="${1:-}"
+sub="${2:-}"
+case "$cmd:$sub" in
+  agents:add)
+    mkdir -p .openclaw
+    printf 'state\n' >.openclaw/workspace-state.json
+    : >SOUL.md
+    : >TOOLS.md
+    : >IDENTITY.md
+    : >USER.md
+    : >HEARTBEAT.md
+    : >BOOTSTRAP.md
+    printf '{"agentId":"stub"}\n'
+    ;;
+  agent:*)
+    mkdir -p "${ACP_RUN_DIR:?}"
+    cat >"${ACP_RESULT_FILE:?}" <<'RESULT'
+OUTCOME=implemented
+ACTION=host-publish-issue-pr
+RESULT
+    printf '{"timestamp":"new","status":"pass","command":"fresh verification"}\n' >"${ACP_RUN_DIR}/verification.jsonl"
+    printf '{"payloads":[{"text":"DONE"}]}\n'
+    ;;
+  *)
+    echo "unexpected openclaw args: $*" >&2
+    exit 64
+    ;;
+esac
+EOF
+
+chmod +x "$tools_dir/agent-project-run-openclaw-session" "$bin_dir/openclaw"
+
+git -C "$worktree" init -b test >/dev/null 2>&1
+git -C "$worktree" config user.name "OpenClaw"
+git -C "$worktree" config user.email "openclaw@example.com"
+printf 'seed\n' >"$worktree/README.md"
+git -C "$worktree" add README.md
+git -C "$worktree" commit -m "init" >/dev/null 2>&1
+printf 'Prompt body\n' >"$prompt_file"
+
+PATH="$bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+bash "$tools_dir/agent-project-run-openclaw-session" \
+  --mode safe \
+  --session "$session" \
+  --worktree "$worktree" \
+  --prompt-file "$prompt_file" \
+  --runs-root "$runs_root" \
+  --adapter-id alpha \
+  --task-kind issue \
+  --task-id 123 \
+  --openclaw-model mock/model \
+  --collect-file verification.jsonl \
+  >/dev/null
+
+for _ in $(seq 1 50); do
+  if ! tmux has-session -t "$session" 2>/dev/null; then
+    break
+  fi
+  sleep 0.2
+done
+
+if tmux has-session -t "$session" 2>/dev/null; then
+  echo "tmux session did not exit" >&2
+  exit 1
+fi
+
+test -f "$run_dir/result.env"
+test -f "$run_dir/verification.jsonl"
+grep -q '^OUTCOME=implemented$' "$run_dir/result.env"
+grep -q 'fresh verification' "$run_dir/verification.jsonl"
+if grep -q 'stale verification' "$run_dir/verification.jsonl"; then
+  echo "stale verification entry leaked into new cycle" >&2
+  exit 1
+fi
+if [[ -e "$sandbox_run_dir/issue-comment.md" ]]; then
+  echo "stale sandbox comment artifact was not cleared" >&2
+  exit 1
+fi
+
+echo "agent-project openclaw session wrapper clears stale sandbox artifacts test passed"

package/tools/tests/test-agent-project-openclaw-session-wrapper-infers-blocked-result-contract.sh

@@ -0,0 +1,89 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SESSION_SRC="${FLOW_ROOT}/tools/bin/agent-project-run-openclaw-session"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+tools_dir="$tmpdir/tools"
+bin_dir="$tmpdir/bin"
+worktree="$tmpdir/worktree"
+runs_root="$tmpdir/runs"
+prompt_file="$tmpdir/prompt.md"
+session="infer-blocked-openclaw"
+run_dir="$runs_root/$session"
+
+mkdir -p "$tools_dir" "$bin_dir" "$worktree" "$runs_root"
+cp "$SESSION_SRC" "$tools_dir/agent-project-run-openclaw-session"
+
+cat >"$bin_dir/openclaw" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+cmd="${1:-}"
+sub="${2:-}"
+
+case "$cmd:$sub" in
+  agents:list)
+    printf '{"agents":[]}\n'
+    ;;
+  agents:add)
+    shift 2 || true
+    printf '{"agentId":"%s"}\n' "${1:-agent}"
+    ;;
+  agent:*)
+    printf 'BLOCKED: worktree is misaligned with requested issue\n'
+    ;;
+  *)
+    echo "unexpected openclaw args: $cmd $sub $*" >&2
+    exit 64
+    ;;
+esac
+EOF
+
+chmod +x "$tools_dir/agent-project-run-openclaw-session" "$bin_dir/openclaw"
+
+git -C "$worktree" init -b test >/dev/null 2>&1
+git -C "$worktree" config user.name "OpenClaw"
+git -C "$worktree" config user.email "openclaw@example.com"
+printf 'seed\n' >"$worktree/README.md"
+git -C "$worktree" add README.md
+git -C "$worktree" commit -m "init" >/dev/null 2>&1
+printf 'Prompt body\n' >"$prompt_file"
+
+PATH="$bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+bash "$tools_dir/agent-project-run-openclaw-session" \
+  --mode safe \
+  --session "$session" \
+  --worktree "$worktree" \
+  --prompt-file "$prompt_file" \
+  --runs-root "$runs_root" \
+  --adapter-id alpha \
+  --task-kind issue \
+  --task-id 123 \
+  --openclaw-model mock/model \
+  >/dev/null
+
+for _ in $(seq 1 50); do
+  if ! tmux has-session -t "$session" 2>/dev/null; then
+    break
+  fi
+  sleep 0.2
+done
+
+if tmux has-session -t "$session" 2>/dev/null; then
+  echo "tmux session did not exit" >&2
+  exit 1
+fi
+
+test -f "$run_dir/result.env"
+grep -q '^OUTCOME=blocked$' "$run_dir/result.env"
+grep -q '^ACTION=host-comment-blocker$' "$run_dir/result.env"
+if grep -q '\\n' "$run_dir/result.env"; then
+  echo "result.env should contain real newlines, not escaped literals" >&2
+  exit 1
+fi
+
+echo "agent-project openclaw session wrapper infers blocked result contract test passed"

package/tools/tests/test-agent-project-openclaw-session-wrapper-recovers-literal-env-artifacts.sh

@@ -0,0 +1,113 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SESSION_SRC="${FLOW_ROOT}/tools/bin/agent-project-run-openclaw-session"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+tools_dir="$tmpdir/tools"
+bin_dir="$tmpdir/bin"
+worktree="$tmpdir/worktree"
+runs_root="$tmpdir/runs"
+prompt_file="$tmpdir/prompt.md"
+session="fl-issue-openclaw-literal-env"
+run_dir="$runs_root/$session"
+
+mkdir -p "$tools_dir" "$bin_dir" "$worktree" "$runs_root"
+cp "$SESSION_SRC" "$tools_dir/agent-project-run-openclaw-session"
+
+cat >"$bin_dir/openclaw" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+cmd="${1:-}"
+sub="${2:-}"
+case "$cmd:$sub" in
+  agents:add)
+    mkdir -p .openclaw
+    printf 'state\n' >.openclaw/workspace-state.json
+    : >SOUL.md
+    : >TOOLS.md
+    : >IDENTITY.md
+    : >USER.md
+    : >HEARTBEAT.md
+    : >BOOTSTRAP.md
+    printf '{"agentId":"stub"}\n'
+    ;;
+  agent:*)
+    mkdir -p "$PWD/\$ACP_RUN_DIR"
+    cat >"$PWD/\$ACP_RESULT_FILE" <<'RESULT'
+OUTCOME=implemented
+ACTION=host-publish-issue-pr
+RESULT
+    printf '{"status":"pass","command":"mock verification"}\n' >"$PWD/\$ACP_RUN_DIR/verification.jsonl"
+    printf 'literal artifact\n' >"$PWD/\$ACP_RUN_DIR/mock.txt"
+    printf '{"payloads":[{"text":"DONE"}]}\n'
+    ;;
+  *)
+    echo "unexpected openclaw args: $*" >&2
+    exit 64
+    ;;
+esac
+EOF
+
+chmod +x "$tools_dir/agent-project-run-openclaw-session" "$bin_dir/openclaw"
+
+git -C "$worktree" init -b test >/dev/null 2>&1
+git -C "$worktree" config user.name "OpenClaw"
+git -C "$worktree" config user.email "openclaw@example.com"
+printf 'seed\n' >"$worktree/README.md"
+git -C "$worktree" add README.md
+git -C "$worktree" commit -m "init" >/dev/null 2>&1
+printf 'Prompt body\n' >"$prompt_file"
+
+PATH="$bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+bash "$tools_dir/agent-project-run-openclaw-session" \
+  --mode safe \
+  --session "$session" \
+  --worktree "$worktree" \
+  --prompt-file "$prompt_file" \
+  --runs-root "$runs_root" \
+  --adapter-id alpha \
+  --task-kind issue \
+  --task-id 123 \
+  --openclaw-model mock/model \
+  --collect-file verification.jsonl \
+  --collect-file mock.txt \
+  >/dev/null
+
+for _ in $(seq 1 50); do
+  if ! tmux has-session -t "$session" 2>/dev/null; then
+    break
+  fi
+  sleep 0.2
+done
+
+if tmux has-session -t "$session" 2>/dev/null; then
+  echo "tmux session did not exit" >&2
+  exit 1
+fi
+
+test -f "$run_dir/result.env"
+test -f "$run_dir/verification.jsonl"
+test -f "$run_dir/mock.txt"
+grep -q '^OUTCOME=implemented$' "$run_dir/result.env"
+grep -q '^ACTION=host-publish-issue-pr$' "$run_dir/result.env"
+grep -q '"status":"pass"' "$run_dir/verification.jsonl"
+grep -q 'literal artifact' "$run_dir/mock.txt"
+
+if [[ -e "$worktree/\$ACP_RESULT_FILE" || -e "$worktree/\$ACP_RUN_DIR" ]]; then
+  echo "literal env alias artifacts should be cleaned up" >&2
+  exit 1
+fi
+
+status_output="$(git -C "$worktree" status --short)"
+if [[ -n "$status_output" ]]; then
+  echo "worktree unexpectedly dirty:" >&2
+  printf '%s\n' "$status_output" >&2
+  exit 1
+fi
+
+echo "agent-project openclaw session wrapper literal env artifact recovery test passed"