agent-control-plane 0.1.0

package/tools/tests/test-install-dashboard-launchd.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+INSTALL_BIN="${FLOW_ROOT}/tools/bin/install-dashboard-launchd.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+home_dir="$tmpdir/home"
+workspace_dir="$home_dir/.agent-runtime/control-plane/workspace"
+launch_agents_dir="$home_dir/Library/LaunchAgents"
+log_dir="$home_dir/.agent-runtime/logs"
+source_home="$tmpdir/source-home"
+runtime_home="$home_dir/.agent-runtime/runtime-home"
+profile_registry_root="$home_dir/.agent-runtime/control-plane/profiles"
+sync_script="$tmpdir/sync.sh"
+bootstrap_script="$tmpdir/bootstrap.sh"
+label="ai.agent.dashboard.test"
+
+mkdir -p "$workspace_dir" "$launch_agents_dir" "$log_dir" "$source_home" "$runtime_home" "$profile_registry_root"
+
+cat >"$sync_script" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$sync_script"
+
+cat >"$bootstrap_script" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$bootstrap_script"
+
+output="$(
+  ACP_DASHBOARD_HOME_DIR="$home_dir" \
+  ACP_DASHBOARD_SOURCE_HOME="$source_home" \
+  ACP_DASHBOARD_RUNTIME_HOME="$runtime_home" \
+  ACP_DASHBOARD_WORKSPACE_DIR="$workspace_dir" \
+  ACP_DASHBOARD_PROFILE_REGISTRY_ROOT="$profile_registry_root" \
+  ACP_DASHBOARD_LAUNCH_AGENTS_DIR="$launch_agents_dir" \
+  ACP_DASHBOARD_LOG_DIR="$log_dir" \
+  ACP_DASHBOARD_SYNC_SCRIPT="$sync_script" \
+  ACP_DASHBOARD_BOOTSTRAP_SCRIPT="$bootstrap_script" \
+  ACP_DASHBOARD_SKIP_LAUNCHCTL=1 \
+  bash "$INSTALL_BIN" --host 127.0.0.1 --port 9911 --label "$label"
+)"
+
+wrapper_path="$workspace_dir/bin/agent-dashboard-launchd.sh"
+plist_path="$launch_agents_dir/$label.plist"
+
+grep -q '^LAUNCHD_INSTALL_STATUS=skipped-launchctl$' <<<"$output"
+grep -q "^LABEL=$label$" <<<"$output"
+grep -q "^PLIST=$plist_path$" <<<"$output"
+grep -q "^WRAPPER=$wrapper_path$" <<<"$output"
+grep -q '^URL=http://127.0.0.1:9911$' <<<"$output"
+
+test -x "$wrapper_path"
+test -f "$plist_path"
+grep -q "^export ACP_DASHBOARD_HOME_DIR='$home_dir'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_SOURCE_HOME='$source_home'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_RUNTIME_HOME='$runtime_home'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_PROFILE_REGISTRY_ROOT='$profile_registry_root'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_HOST='127.0.0.1'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_PORT='9911'$" "$wrapper_path"
+grep -q "^export ACP_DASHBOARD_SYNC_SCRIPT='$sync_script'$" "$wrapper_path"
+grep -q "exec bash '$bootstrap_script'$" "$wrapper_path"
+
+grep -q "<string>$label</string>" "$plist_path"
+grep -q "<string>$wrapper_path</string>" "$plist_path"
+grep -q "<string>$log_dir/agent-dashboard.stderr.log</string>" "$plist_path"
+grep -q "<string>$log_dir/agent-dashboard.stdout.log</string>" "$plist_path"
+grep -q '<key>KeepAlive</key>' "$plist_path"
+grep -q '<true/>' "$plist_path"
+
+echo "install dashboard launchd test passed"

package/tools/tests/test-install-project-launchd-adds-tool-paths.sh

@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+INSTALL_BIN="${FLOW_ROOT}/tools/bin/install-project-launchd.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+home_dir="$tmpdir/home"
+workspace_dir="$home_dir/.agent-runtime/control-plane/workspace"
+launch_agents_dir="$home_dir/Library/LaunchAgents"
+log_dir="$home_dir/.agent-runtime/logs"
+source_home="$tmpdir/source-home"
+runtime_home="$home_dir/.agent-runtime/runtime-home"
+profile_registry_root="$home_dir/.agent-runtime/control-plane/profiles"
+profile_dir="$profile_registry_root/demo"
+shim_dir="$tmpdir/shim"
+sync_script="$tmpdir/sync.sh"
+bootstrap_script="$tmpdir/bootstrap.sh"
+supervisor_script="$tmpdir/supervisor.sh"
+
+mkdir -p "$workspace_dir" "$launch_agents_dir" "$log_dir" "$source_home" "$runtime_home" "$profile_dir" "$shim_dir"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo"
+  root: "$tmpdir/repo"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$tmpdir/runtime/demo"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$tmpdir/repo"
+  runs_root: "$tmpdir/runtime/demo/runs"
+  state_root: "$tmpdir/runtime/demo/state"
+  history_root: "$tmpdir/runtime/demo/history"
+  retained_repo_root: "$tmpdir/repo"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+execution:
+  coding_worker: "openclaw"
+  openclaw:
+    model: "primary/model"
+    thinking: "adaptive"
+    timeout_seconds: 900
+EOF
+
+for path in "$sync_script" "$bootstrap_script" "$supervisor_script"; do
+  cat >"$path" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+  chmod +x "$path"
+done
+
+for tool in node gh openclaw; do
+  cat >"$shim_dir/$tool" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+  chmod +x "$shim_dir/$tool"
+done
+
+PATH="$shim_dir:/usr/bin:/bin:/usr/sbin:/sbin" \
+ACP_PROJECT_RUNTIME_HOME_DIR="$home_dir" \
+ACP_PROJECT_RUNTIME_SOURCE_HOME="$source_home" \
+ACP_PROJECT_RUNTIME_RUNTIME_HOME="$runtime_home" \
+ACP_PROJECT_RUNTIME_WORKSPACE_DIR="$workspace_dir" \
+ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT="$profile_registry_root" \
+ACP_PROJECT_RUNTIME_LAUNCH_AGENTS_DIR="$launch_agents_dir" \
+ACP_PROJECT_RUNTIME_LOG_DIR="$log_dir" \
+ACP_PROJECT_RUNTIME_SYNC_SCRIPT="$sync_script" \
+ACP_PROJECT_RUNTIME_BOOTSTRAP_SCRIPT="$bootstrap_script" \
+ACP_PROJECT_RUNTIME_SUPERVISOR_SCRIPT="$supervisor_script" \
+ACP_PROJECT_RUNTIME_SKIP_LAUNCHCTL=1 \
+bash "$INSTALL_BIN" --profile-id demo >/dev/null
+
+wrapper_path="$workspace_dir/bin/agent-project-demo-launchd.sh"
+plist_path="$launch_agents_dir/ai.agent.project.demo.plist"
+
+grep -q "^export ACP_PROJECT_RUNTIME_PATH='.*${shim_dir}.*'$" "$wrapper_path"
+grep -q "<string>.*${shim_dir}.*</string>" "$plist_path"
+
+echo "install project launchd adds tool paths test passed"

package/tools/tests/test-install-project-launchd.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+INSTALL_BIN="${FLOW_ROOT}/tools/bin/install-project-launchd.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+home_dir="$tmpdir/home"
+workspace_dir="$home_dir/.agent-runtime/control-plane/workspace"
+launch_agents_dir="$home_dir/Library/LaunchAgents"
+log_dir="$home_dir/.agent-runtime/logs"
+source_home="$tmpdir/source-home"
+runtime_home="$home_dir/.agent-runtime/runtime-home"
+profile_registry_root="$home_dir/.agent-runtime/control-plane/profiles"
+profile_dir="$profile_registry_root/demo"
+sync_script="$tmpdir/sync.sh"
+bootstrap_script="$tmpdir/bootstrap.sh"
+supervisor_script="$tmpdir/supervisor.sh"
+label="ai.agent.project.demo-test"
+
+mkdir -p "$workspace_dir" "$launch_agents_dir" "$log_dir" "$source_home" "$runtime_home" "$profile_dir"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo"
+  root: "$tmpdir/repo"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$tmpdir/runtime/demo"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$tmpdir/repo"
+  runs_root: "$tmpdir/runtime/demo/runs"
+  state_root: "$tmpdir/runtime/demo/state"
+  history_root: "$tmpdir/runtime/demo/history"
+  retained_repo_root: "$tmpdir/repo"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+execution:
+  coding_worker: "openclaw"
+  openclaw:
+    model: "primary/model"
+    thinking: "adaptive"
+    timeout_seconds: 900
+EOF
+
+cat >"$sync_script" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$sync_script"
+
+cat >"$bootstrap_script" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$bootstrap_script"
+
+cat >"$supervisor_script" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$supervisor_script"
+
+output="$(
+  ACP_PROJECT_RUNTIME_HOME_DIR="$home_dir" \
+  ACP_PROJECT_RUNTIME_SOURCE_HOME="$source_home" \
+  ACP_PROJECT_RUNTIME_RUNTIME_HOME="$runtime_home" \
+  ACP_PROJECT_RUNTIME_WORKSPACE_DIR="$workspace_dir" \
+  ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT="$profile_registry_root" \
+  ACP_PROJECT_RUNTIME_LAUNCH_AGENTS_DIR="$launch_agents_dir" \
+  ACP_PROJECT_RUNTIME_LOG_DIR="$log_dir" \
+  ACP_PROJECT_RUNTIME_SYNC_SCRIPT="$sync_script" \
+  ACP_PROJECT_RUNTIME_BOOTSTRAP_SCRIPT="$bootstrap_script" \
+  ACP_PROJECT_RUNTIME_SUPERVISOR_SCRIPT="$supervisor_script" \
+  ACP_PROJECT_RUNTIME_SKIP_LAUNCHCTL=1 \
+  bash "$INSTALL_BIN" --profile-id demo --label "$label" --delay-seconds 3 --interval-seconds 20
+)"
+
+wrapper_path="$workspace_dir/bin/agent-project-demo-launchd.sh"
+plist_path="$launch_agents_dir/$label.plist"
+
+grep -q '^LAUNCHD_INSTALL_STATUS=skipped-launchctl$' <<<"$output"
+grep -q '^PROFILE_ID=demo$' <<<"$output"
+grep -q "^LABEL=$label$" <<<"$output"
+grep -q "^PLIST=$plist_path$" <<<"$output"
+grep -q "^WRAPPER=$wrapper_path$" <<<"$output"
+
+test -x "$wrapper_path"
+test -f "$plist_path"
+grep -q "^export ACP_PROJECT_RUNTIME_HOME_DIR='$home_dir'$" "$wrapper_path"
+grep -q "^export ACP_PROJECT_RUNTIME_SOURCE_HOME='$source_home'$" "$wrapper_path"
+grep -q "^export ACP_PROJECT_RUNTIME_RUNTIME_HOME='$runtime_home'$" "$wrapper_path"
+grep -q "^export ACP_PROJECT_RUNTIME_PROFILE_ID='demo'$" "$wrapper_path"
+grep -q "^export ACP_PROJECT_RUNTIME_ENV_FILE='$profile_dir/runtime.env'$" "$wrapper_path"
+grep -q "^export ACP_PROFILE_REGISTRY_ROOT='$profile_registry_root'$" "$wrapper_path"
+grep -q "exec bash '$supervisor_script' --bootstrap-script '$bootstrap_script' --pid-file '$tmpdir/runtime/demo/state/runtime-supervisor.pid' --delay-seconds '3' --interval-seconds '20'$" "$wrapper_path"
+
+grep -q "<string>$label</string>" "$plist_path"
+grep -q "<string>$wrapper_path</string>" "$plist_path"
+grep -q "<string>$log_dir/agent-project-demo.stderr.log</string>" "$plist_path"
+grep -q "<string>$log_dir/agent-project-demo.stdout.log</string>" "$plist_path"
+grep -q '<key>KeepAlive</key>' "$plist_path"
+
+echo "install project launchd test passed"

package/tools/tests/test-issue-local-workspace-install-policy.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+POLICY_BIN="${FLOW_ROOT}/tools/bin/issue-requires-local-workspace-install.sh"
+
+scheduled_verify_body="$(cat <<'EOF'
+## Summary
+Run a recurring read-only verification.
+
+Schedule: every 1h
+
+## Commands
+1. `pnpm run verify:web:main`
+EOF
+)"
+
+scheduled_mobile_verify_body="$(cat <<'EOF'
+## Summary
+Run a recurring read-only verification.
+
+Schedule: every 1h
+
+## Commands
+1. `pnpm run verify:mobile:main`
+EOF
+)"
+
+scheduled_install_body="$(cat <<'EOF'
+## Summary
+Rebuild the workspace before running checks.
+
+Schedule: every 1h
+
+## Commands
+1. `pnpm install --frozen-lockfile`
+2. `pnpm run verify:web:main`
+EOF
+)"
+
+scheduled_native_body="$(cat <<'EOF'
+## Summary
+Prepare iOS workspace before recurring checks.
+
+Schedule: every 1h
+
+## Commands
+1. `expo prebuild --platform ios`
+2. `pnpm run verify:mobile:main`
+EOF
+)"
+
+explicit_opt_in_body="$(cat <<'EOF'
+## Summary
+Run with local install.
+
+Schedule: every 1h
+Local workspace install: yes
+
+## Commands
+1. `pnpm run verify:web:main`
+EOF
+)"
+
+unscheduled_install_body="$(cat <<'EOF'
+## Summary
+Manual task.
+
+## Commands
+1. `pnpm install --frozen-lockfile`
+EOF
+)"
+
+[[ "$(ISSUE_BODY="$scheduled_verify_body" bash "$POLICY_BIN")" == "no" ]]
+[[ "$(ISSUE_BODY="$scheduled_mobile_verify_body" bash "$POLICY_BIN")" == "no" ]]
+[[ "$(ISSUE_BODY="$scheduled_install_body" bash "$POLICY_BIN")" == "yes" ]]
+[[ "$(ISSUE_BODY="$scheduled_native_body" bash "$POLICY_BIN")" == "yes" ]]
+[[ "$(ISSUE_BODY="$explicit_opt_in_body" bash "$POLICY_BIN")" == "yes" ]]
+[[ "$(ISSUE_BODY="$unscheduled_install_body" bash "$POLICY_BIN")" == "no" ]]
+
+echo "issue local workspace install policy test passed"

package/tools/tests/test-issue-publish-scope-guard-docs-signal.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SCOPE_GUARD_BIN="${FLOW_ROOT}/tools/bin/issue-publish-scope-guard.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+repo="$tmpdir/repo"
+bin_dir="$tmpdir/bin"
+node_bin_dir="$(dirname "$(command -v node)")"
+mkdir -p "$bin_dir"
+
+git init -b main "$repo" >/dev/null 2>&1
+mkdir -p "$repo/apps/web/src/app"
+printf 'export default function Home() { return null; }\n' >"$repo/apps/web/src/app/page.tsx"
+git -C "$repo" add apps/web/src/app/page.tsx
+git -C "$repo" -c user.name=Test -c user.email=test@example.com commit -m "init" >/dev/null
+git -C "$repo" checkout -b issue-slice >/dev/null 2>&1
+printf 'export default function Home() { return \"patched\"; }\n' >"$repo/apps/web/src/app/page.tsx"
+git -C "$repo" add apps/web/src/app/page.tsx
+git -C "$repo" -c user.name=Test -c user.email=test@example.com commit -m "product slice" >/dev/null
+
+cat >"$bin_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "issue" && "${2:-}" == "view" ]]; then
+  issue_id="${3:-}"
+  case "$issue_id" in
+    100)
+      cat <<'JSON'
+{"title":"Align auth page with OpenSpec contract","body":"Context: keep behavior aligned with the latest OpenSpec notes."}
+JSON
+      ;;
+    101)
+      cat <<'JSON'
+{"title":"docs: auth page follow-up","body":"Scope: docs only"}
+JSON
+      ;;
+    *)
+      echo "unexpected issue id: $issue_id" >&2
+      exit 1
+      ;;
+  esac
+  exit 0
+fi
+
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+
+chmod +x "$bin_dir/gh"
+
+PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  bash "$SCOPE_GUARD_BIN" --worktree "$repo" --base-ref main --issue-id 100 >/dev/null
+
+set +e
+blocked_output="$(
+  PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  bash "$SCOPE_GUARD_BIN" --worktree "$repo" --base-ref main --issue-id 101 2>&1
+)"
+blocked_status=$?
+set -e
+
+test "$blocked_status" = "42"
+grep -q 'docs_declared_scope_contains_product_changes=1' <<<"$blocked_output"
+
+echo "issue publish scope guard docs signal test passed"

package/tools/tests/test-issue-reconcile-hooks-success-clears-blocked.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+HOOK_FILE="${FLOW_ROOT}/hooks/issue-reconcile-hooks.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+stub_tools="$tmpdir/tools/bin"
+capture_file="$tmpdir/labels.log"
+mkdir -p "$stub_tools"
+
+cat >"$stub_tools/agent-github-update-labels" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf '%s\n' "$*" >"${TEST_CAPTURE_FILE:?}"
+EOF
+chmod +x "$stub_tools/agent-github-update-labels"
+
+export ISSUE_ID=42
+export TEST_CAPTURE_FILE="$capture_file"
+
+# shellcheck source=/dev/null
+source "$HOOK_FILE"
+
+FLOW_TOOLS_DIR="$stub_tools"
+REPO_SLUG="example/repo"
+
+issue_remove_running
+
+grep -q -- '--remove agent-running' "$capture_file"
+grep -q -- '--remove agent-ready' "$capture_file"
+grep -q -- '--remove agent-blocked' "$capture_file"
+
+echo "issue reconcile hooks success clears blocked label test passed"

package/tools/tests/test-kick-scheduler-requires-explicit-profile.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+KICK_SCRIPT="${FLOW_ROOT}/tools/bin/kick-scheduler.sh"
+FLOW_CONFIG_LIB="${FLOW_ROOT}/tools/bin/flow-config-lib.sh"
+FLOW_SHELL_LIB="${FLOW_ROOT}/tools/bin/flow-shell-lib.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+skill_root="$tmpdir/skill"
+bin_dir="$skill_root/tools/bin"
+assets_dir="$skill_root/assets"
+profile_home="$tmpdir/profiles"
+mkdir -p "$bin_dir" "$profile_home/alpha" "$profile_home/beta" "$assets_dir"
+
+cp "$KICK_SCRIPT" "$bin_dir/kick-scheduler.sh"
+cp "$FLOW_CONFIG_LIB" "$bin_dir/flow-config-lib.sh"
+cp "$FLOW_SHELL_LIB" "$bin_dir/flow-shell-lib.sh"
+printf '{}
+' >"$assets_dir/workflow-catalog.json"
+
+cat >"$profile_home/alpha/control-plane.yaml" <<'EOF'
+schema_version: "1"
+id: "alpha"
+repo:
+  slug: "example/alpha"
+EOF
+
+cat >"$profile_home/beta/control-plane.yaml" <<'EOF'
+schema_version: "1"
+id: "beta"
+repo:
+  slug: "example/beta"
+EOF
+
+set +e
+output="$(ACP_PROFILE_REGISTRY_ROOT="$profile_home" bash "$bin_dir/kick-scheduler.sh" 1 2>&1)"
+status=$?
+set -e
+
+test "$status" -eq 64
+grep -q '^explicit profile selection required for kick-scheduler.sh when multiple available profiles exist\.$' <<<"$output"
+grep -q '^Set ACP_PROJECT_ID=<id> or AGENT_PROJECT_ID=<id> when multiple available profiles exist\.$' <<<"$output"
+
+echo "kick scheduler explicit profile guard test passed"

package/tools/tests/test-label-follow-up-issues-falls-back-to-repository-id.sh

@@ -0,0 +1,132 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+workspace_root="$tmpdir/workspace"
+adapter_bin_dir="$workspace_root/bin"
+tools_bin_dir="$workspace_root/tools/bin"
+profile_registry_root="$tmpdir/profile-registry"
+profile_dir="$profile_registry_root/demo"
+agent_root="$tmpdir/agent"
+repo_root="$tmpdir/repo"
+shim_dir="$tmpdir/shim"
+run_dir="$agent_root/runs/demo-issue-42"
+capture_file="$tmpdir/labels.log"
+
+mkdir -p "$adapter_bin_dir" "$tools_bin_dir" "$profile_dir" "$agent_root/runs" "$agent_root/history" "$agent_root/state" "$repo_root" "$shim_dir" "$run_dir"
+
+cp "$FLOW_ROOT/bin/label-follow-up-issues.sh" "$adapter_bin_dir/label-follow-up-issues.sh"
+cp "$FLOW_ROOT/tools/bin/flow-config-lib.sh" "$tools_bin_dir/flow-config-lib.sh"
+cp "$FLOW_ROOT/tools/bin/flow-shell-lib.sh" "$tools_bin_dir/flow-shell-lib.sh"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo"
+  id: "123"
+  root: "$repo_root"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$agent_root"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$repo_root"
+  runs_root: "$agent_root/runs"
+  state_root: "$agent_root/state"
+  history_root: "$agent_root/history"
+  retained_repo_root: "$repo_root"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+session_naming:
+  issue_prefix: "demo-issue-"
+  pr_prefix: "demo-pr-"
+  issue_branch_prefix: "agent/demo/issue"
+  pr_worktree_branch_prefix: "agent/demo/pr"
+  managed_pr_branch_globs: "agent/demo/*"
+execution:
+  coding_worker: "openclaw"
+EOF
+
+cat >"$tools_bin_dir/agent-project-worker-status" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+cat <<OUT
+STATUS=SUCCEEDED
+META_FILE=${TEST_RUN_DIR:?}/run.env
+OUT
+EOF
+chmod +x "$tools_bin_dir/agent-project-worker-status"
+
+cat >"$tools_bin_dir/agent-github-update-labels" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf '%s\n' "$*" >>"${TEST_CAPTURE_FILE:?}"
+EOF
+chmod +x "$tools_bin_dir/agent-github-update-labels"
+
+cat >"$adapter_bin_dir/issue-resource-class.sh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+cat <<OUT
+IS_E2E=yes
+OUT
+EOF
+chmod +x "$adapter_bin_dir/issue-resource-class.sh"
+
+cat >"$shim_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "issue" && "${2:-}" == "view" ]]; then
+  issue_id="${3:-0}"
+  cat <<JSON
+{"number":${issue_id},"state":"OPEN","title":"Follow-up issue ${issue_id}","body":"Keep this focused.","url":"https://example.test/issues/${issue_id}","labels":[],"comments":[],"createdAt":"2026-03-28T20:00:00Z","updatedAt":"2026-03-28T20:00:00Z"}
+JSON
+  exit 0
+fi
+
+if [[ "${1:-}" == "api" ]]; then
+  route="${2:-}"
+  case "${route}" in
+    repos/example/demo/issues/42/comments*)
+      echo "gh: Not Found (HTTP 404)" >&2
+      exit 1
+      ;;
+    repositories/123/issues/42/comments*)
+      cat <<'JSON'
+[{"user":{"login":"tester"},"created_at":"2026-03-28T20:01:00Z","body":"Please follow up in issue #77."}]
+JSON
+      exit 0
+      ;;
+  esac
+fi
+
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+chmod +x "$shim_dir/gh"
+
+cat >"$run_dir/run.env" <<'EOF'
+ISSUE_ID=42
+SESSION=demo-issue-42
+STARTED_AT=2026-03-28T20:00:00Z
+EOF
+
+out="$(
+  PATH="$shim_dir:$PATH" \
+  ACP_PROJECT_ID="demo" \
+  ACP_PROFILE_REGISTRY_ROOT="$profile_registry_root" \
+  TEST_RUN_DIR="$run_dir" \
+  TEST_CAPTURE_FILE="$capture_file" \
+  GITHUB_ACTOR="tester" \
+  bash "$adapter_bin_dir/label-follow-up-issues.sh" demo-issue-42
+)"
+
+grep -q '^LABELED=77$' <<<"$out"
+grep -q '^COUNT=1$' <<<"$out"
+grep -q -- '--repo-slug example/demo --number 77 --add agent-e2e-heavy' "$capture_file"
+
+echo "label follow-up issues repository id fallback test passed"