agent-control-plane 0.1.0

package/tools/tests/test-manual-operator-entrypoints-require-explicit-profile.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+FLOW_CONFIG_LIB="${FLOW_ROOT}/tools/bin/flow-config-lib.sh"
+FLOW_SHELL_LIB="${FLOW_ROOT}/tools/bin/flow-shell-lib.sh"
+FLOW_RESIDENT_LIB="${FLOW_ROOT}/tools/bin/flow-resident-worker-lib.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+skill_root="$tmpdir/skill"
+bin_dir="$skill_root/tools/bin"
+assets_dir="$skill_root/assets"
+profile_home="$tmpdir/profiles"
+mkdir -p "$bin_dir" "$assets_dir" "$profile_home/alpha" "$profile_home/beta"
+
+cp "$FLOW_CONFIG_LIB" "$bin_dir/flow-config-lib.sh"
+cp "$FLOW_SHELL_LIB" "$bin_dir/flow-shell-lib.sh"
+cp "$FLOW_RESIDENT_LIB" "$bin_dir/flow-resident-worker-lib.sh"
+printf '{}\n' >"$assets_dir/workflow-catalog.json"
+
+for script in   heartbeat-safe-auto.sh   start-issue-worker.sh   start-pr-fix-worker.sh   start-pr-review-worker.sh   new-worktree.sh   new-pr-worktree.sh   worker-status.sh; do
+  cp "$FLOW_ROOT/tools/bin/${script}" "$bin_dir/${script}"
+done
+
+cat >"$profile_home/alpha/control-plane.yaml" <<'EOF'
+schema_version: "1"
+id: "alpha"
+repo:
+  slug: "example/alpha"
+EOF
+
+cat >"$profile_home/beta/control-plane.yaml" <<'EOF'
+schema_version: "1"
+id: "beta"
+repo:
+  slug: "example/beta"
+EOF
+
+check_guard() {
+  local script="${1:?script required}"
+  shift || true
+
+  set +e
+  local output
+  output="$(ACP_PROFILE_REGISTRY_ROOT="$profile_home" bash "$bin_dir/$script" "$@" 2>&1)"
+  local status=$?
+  set -e
+
+  test "$status" -eq 64
+  grep -q "^explicit profile selection required for ${script} when multiple available profiles exist\.$" <<<"$output"
+  grep -q '^Set ACP_PROJECT_ID=<id> or AGENT_PROJECT_ID=<id> when multiple available profiles exist\.$' <<<"$output"
+}
+
+check_guard heartbeat-safe-auto.sh
+check_guard start-issue-worker.sh 101
+check_guard start-pr-fix-worker.sh 601
+check_guard start-pr-review-worker.sh 601
+check_guard new-worktree.sh 101
+check_guard new-pr-worktree.sh 601 feature/test
+check_guard worker-status.sh demo-session
+
+echo "manual operator explicit profile guard test passed"

package/tools/tests/test-package-funding-metadata.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
+PACKAGE_JSON="$ROOT_DIR/package.json"
+FUNDING_FILE="$ROOT_DIR/.github/FUNDING.yml"
+
+node -e '
+const fs = require("fs");
+const pkg = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
+if (!Array.isArray(pkg.funding) || pkg.funding.length === 0) {
+  process.exit(1);
+}
+if (!pkg.funding.includes("https://github.com/sponsors/ducminhnguyen0319")) {
+  process.exit(2);
+}
+' "$PACKAGE_JSON"
+
+test -f "$FUNDING_FILE"
+grep -q '^github: \[ducminhnguyen0319\]$' "$FUNDING_FILE"
+grep -q '^  - https://github.com/sponsors/ducminhnguyen0319$' "$FUNDING_FILE"

package/tools/tests/test-package-public-metadata.sh

@@ -0,0 +1,62 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
+PACKAGE_JSON="$ROOT_DIR/package.json"
+
+node -e '
+const fs = require("fs");
+const pkg = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
+
+if (!pkg.description || !pkg.description.includes("running reliably without constant human babysitting")) {
+  process.exit(1);
+}
+if (pkg.homepage !== "https://github.com/ducminhuyen0319/agent-control-plane") {
+  process.exit(10);
+}
+if (!pkg.bugs || pkg.bugs.url !== "https://github.com/ducminhuyen0319/agent-control-plane/issues") {
+  process.exit(11);
+}
+if (!pkg.repository || pkg.repository.type !== "git" || pkg.repository.url !== "git+https://github.com/ducminhuyen0319/agent-control-plane.git") {
+  process.exit(12);
+}
+if (pkg.license !== "MIT") {
+  process.exit(2);
+}
+for (const keyword of ["agents", "dashboard", "runtime"]) {
+  if (!Array.isArray(pkg.keywords) || !pkg.keywords.includes(keyword)) {
+    process.exit(3);
+  }
+}
+if (!Array.isArray(pkg.files) || !pkg.files.includes("assets/workflow-catalog.json")) {
+  process.exit(4);
+}
+if (pkg.files.includes("assets")) {
+  process.exit(5);
+}
+if (!pkg.directories || pkg.directories.bin !== "npm/public-bin") {
+  process.exit(6);
+}
+if (!Array.isArray(pkg.files) || !pkg.files.includes("npm/public-bin")) {
+  process.exit(7);
+}
+if (pkg.bin) {
+  process.exit(8);
+}
+for (const bundledPath of [
+  "tools/vendor/codex-quota/codex-quota.js",
+  "tools/vendor/codex-quota/lib",
+  "tools/vendor/codex-quota-manager/scripts"
+]) {
+  if (!pkg.files.includes(bundledPath)) {
+    process.exit(9);
+  }
+}
+' "$PACKAGE_JSON"
+
+test -f "$ROOT_DIR/LICENSE"
+grep -q '^MIT License$' "$ROOT_DIR/LICENSE"
+test -f "$ROOT_DIR/npm/public-bin/agent-control-plane"
+test -x "$ROOT_DIR/npm/public-bin/agent-control-plane"
+
+echo "package public metadata test passed"

package/tools/tests/test-placeholder-worker-adapters.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+OPENCODE_SCRIPT="${FLOW_ROOT}/tools/bin/agent-project-run-opencode-session"
+KILO_SCRIPT="${FLOW_ROOT}/tools/bin/agent-project-run-kilo-session"
+
+help_output="$(bash "$OPENCODE_SCRIPT" --help)"
+grep -q 'Placeholder adapter for the roadmap' <<<"$help_output"
+grep -q '`opencode`' <<<"$help_output"
+
+help_output="$(bash "$KILO_SCRIPT" --help)"
+grep -q 'Placeholder adapter for the roadmap' <<<"$help_output"
+grep -q '`kilo`' <<<"$help_output"
+
+set +e
+opencode_output="$(bash "$OPENCODE_SCRIPT" --session demo 2>&1)"
+opencode_status=$?
+kilo_output="$(bash "$KILO_SCRIPT" --session demo 2>&1)"
+kilo_status=$?
+set -e
+
+if [[ "$opencode_status" -eq 0 ]]; then
+  echo "expected opencode placeholder adapter to fail" >&2
+  exit 1
+fi
+
+if [[ "$kilo_status" -eq 0 ]]; then
+  echo "expected kilo placeholder adapter to fail" >&2
+  exit 1
+fi
+
+grep -q 'execution is not implemented yet' <<<"$opencode_output"
+grep -q 'Choose codex, claude, or openclaw for live runs today.' <<<"$opencode_output"
+grep -q 'execution is not implemented yet' <<<"$kilo_output"
+grep -q 'Choose codex, claude, or openclaw for live runs today.' <<<"$kilo_output"
+
+echo "placeholder worker adapters test passed"

package/tools/tests/test-pr-reconcile-hooks-refreshes-recurring-issue-checklist.sh

@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+skill_root="$tmpdir/skill"
+hooks_dir="$skill_root/hooks"
+tools_bin_dir="$skill_root/tools/bin"
+adapter_bin_dir="$skill_root/bin"
+assets_dir="$skill_root/assets"
+profile_registry_root="$tmpdir/profile-registry"
+profile_dir="$profile_registry_root/demo"
+shim_dir="$tmpdir/shim"
+
+mkdir -p "$hooks_dir" "$tools_bin_dir" "$adapter_bin_dir" "$assets_dir" "$profile_dir" "$shim_dir"
+
+cp "$FLOW_ROOT/hooks/pr-reconcile-hooks.sh" "$hooks_dir/pr-reconcile-hooks.sh"
+cp "$FLOW_ROOT/tools/bin/flow-config-lib.sh" "$tools_bin_dir/flow-config-lib.sh"
+cp "$FLOW_ROOT/tools/bin/flow-shell-lib.sh" "$tools_bin_dir/flow-shell-lib.sh"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo"
+  root: "$tmpdir/repo"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$tmpdir/agent"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$tmpdir/repo"
+  runs_root: "$tmpdir/runs"
+  state_root: "$tmpdir/state"
+  history_root: "$tmpdir/history"
+  retained_repo_root: "$tmpdir/repo"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+session_naming:
+  issue_prefix: "demo-issue-"
+  pr_prefix: "demo-pr-"
+  issue_branch_prefix: "agent/demo/issue"
+  pr_worktree_branch_prefix: "agent/demo/pr"
+  managed_pr_branch_globs: "agent/demo/*"
+execution:
+  coding_worker: "openclaw"
+EOF
+
+printf '# demo skill\n' >"$skill_root/SKILL.md"
+printf '{}\n' >"$assets_dir/workflow-catalog.json"
+
+cat >"$adapter_bin_dir/pr-risk.sh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+cat <<JSON
+{"linkedIssueId":"42","isManagedByAgent":true}
+JSON
+EOF
+chmod +x "$adapter_bin_dir/pr-risk.sh"
+
+sync_invocation_file="$tmpdir/sync-invocation.txt"
+cat >"$tools_bin_dir/sync-recurring-issue-checklist.sh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf '%s\n' "$*" >"${TEST_SYNC_INVOCATION_FILE:?}"
+exit 0
+EOF
+chmod +x "$tools_bin_dir/sync-recurring-issue-checklist.sh"
+
+cat >"$tools_bin_dir/agent-github-update-labels" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$tools_bin_dir/agent-github-update-labels"
+
+cat >"$tools_bin_dir/kick-scheduler.sh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+chmod +x "$tools_bin_dir/kick-scheduler.sh"
+
+cat >"$shim_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+if [[ "${1:-}" == "issue" && "${2:-}" == "view" ]]; then
+  cat <<'JSON'
+{"number":42,"state":"OPEN","title":"Recurring demo issue","body":"Keep it open.","url":"https://example.test/issues/42","labels":[{"name":"agent-keep-open"}],"comments":[],"createdAt":"2026-03-28T10:00:00Z","updatedAt":"2026-03-28T10:00:00Z"}
+JSON
+  exit 0
+fi
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+chmod +x "$shim_dir/gh"
+
+export PATH="$shim_dir:$PATH"
+export ACP_PROJECT_ID="demo"
+export ACP_PROFILE_REGISTRY_ROOT="$profile_registry_root"
+export TEST_SYNC_INVOCATION_FILE="$sync_invocation_file"
+source "$hooks_dir/pr-reconcile-hooks.sh"
+
+pr_after_merged 99
+
+test -f "$sync_invocation_file"
+grep -q -- '--repo-slug example/demo --issue-id 42' "$sync_invocation_file"
+
+echo "pr reconcile hooks recurring checklist refresh test passed"

package/tools/tests/test-pr-risk-cohesive-mobile-locale-scope.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+PR_RISK_BIN="${FLOW_ROOT}/bin/pr-risk.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+bin_dir="$tmpdir/bin"
+node_bin_dir="$(dirname "$(command -v node)")"
+mkdir -p "$bin_dir"
+
+cat >"$bin_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "pr" && "${2:-}" == "view" ]]; then
+  cat <<'JSON'
+{"number":465,"title":"feat(mobile): align locale hydration with shared i18n contract","url":"https://example.test/pr/465","body":"Closes #422","isDraft":false,"headRefName":"codex/issue-422-mobile-align-language-selection-and-persisted-lo","baseRefName":"main","labels":[],"files":[{"path":"apps/mobile/README.md"},{"path":"apps/mobile/app/_layout.tsx"},{"path":"apps/mobile/app/settings/language.tsx"},{"path":"apps/mobile/app/settings/security.tsx"},{"path":"apps/mobile/src/components/LanguageSwitcher.tsx"},{"path":"apps/mobile/src/lib/i18n.ts"},{"path":"apps/mobile/src/lib/mobile-language-contract.ts"},{"path":"apps/mobile/src/lib/mobile-language.ts"},{"path":"apps/mobile/src/store/settings.ts"},{"path":"packages/i18n/README.md"},{"path":"packages/i18n/src/i18n.ts"}],"mergeStateStatus":"CLEAN","reviewDecision":"","reviewRequests":[],"statusCheckRollup":[],"comments":[]}
+JSON
+  exit 0
+fi
+
+if [[ "${1:-}" == "api" ]]; then
+  case "${2:-}" in
+    repos/example/repo/pulls/465)
+      printf 'abc465\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/abc465)
+      printf '2026-03-16T10:30:00Z\n'
+      exit 0
+      ;;
+    repos/example/repo/pulls/465/comments)
+      printf '[]\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/abc465/check-runs)
+      printf '{"check_runs":[]}\n'
+      exit 0
+      ;;
+  esac
+fi
+
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+
+chmod +x "$bin_dir/gh"
+
+risk_json="$(
+  PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  F_LOSNING_REPO_SLUG="example/repo" \
+  bash "$PR_RISK_BIN" 465
+)"
+
+test "$(jq -r '.linkedIssueId' <<<"$risk_json")" = "422"
+test "$(jq -r '.scopeTooBroad' <<<"$risk_json")" = "false"
+test "$(jq -r '.mobileProductCount' <<<"$risk_json")" = "8"
+test "$(jq -r '.agentLane' <<<"$risk_json")" = "automerge"
+test "$(jq -r '.eligibleForAutoMerge' <<<"$risk_json")" = "true"
+
+if jq -e '.missingReasons[]? | select(. == "scope-too-broad")' >/dev/null <<<"$risk_json"; then
+  echo "cohesive mobile locale PR unexpectedly blocked on scope-too-broad" >&2
+  printf '%s\n' "$risk_json" >&2
+  exit 1
+fi
+
+echo "pr-risk cohesive mobile locale scope test passed"

package/tools/tests/test-pr-risk-fix-label-semantics.sh

@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+PR_RISK_BIN="${FLOW_ROOT}/bin/pr-risk.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+bin_dir="$tmpdir/bin"
+node_bin_dir="$(dirname "$(command -v node)")"
+mkdir -p "$bin_dir"
+
+cat >"$bin_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "pr" && "${2:-}" == "view" ]]; then
+  case "${3:-}" in
+    601)
+      cat <<'JSON'
+{"number":601,"title":"feat: queued repair label should stay informational","url":"https://example.test/pr/601","body":"","isDraft":false,"headRefName":"agent/acp/issue-601-fix-label-semantics","baseRefName":"main","labels":[{"name":"agent-repair-queued"}],"files":[{"path":"docs/auto-flow.md"}],"mergeStateStatus":"CLEAN","reviewDecision":"","reviewRequests":[],"statusCheckRollup":[],"comments":[]}
+JSON
+      exit 0
+      ;;
+    602)
+      cat <<'JSON'
+{"number":602,"title":"feat: manual fix override should force one more pass","url":"https://example.test/pr/602","body":"","isDraft":false,"headRefName":"agent/acp/issue-602-manual-fix-override","baseRefName":"main","labels":[{"name":"agent-manual-fix-override"}],"files":[{"path":"docs/auto-flow.md"}],"mergeStateStatus":"CLEAN","reviewDecision":"","reviewRequests":[],"statusCheckRollup":[],"comments":[]}
+JSON
+      exit 0
+      ;;
+  esac
+fi
+
+if [[ "${1:-}" == "api" ]]; then
+  case "${2:-}" in
+    repos/example/repo/pulls/601)
+      printf 'sha601\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/sha601)
+      printf '2026-03-15T20:30:00Z\n'
+      exit 0
+      ;;
+    repos/example/repo/pulls/601/comments)
+      printf '[]\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/sha601/check-runs)
+      printf '{"check_runs":[]}\n'
+      exit 0
+      ;;
+    repos/example/repo/pulls/602)
+      printf 'sha602\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/sha602)
+      printf '2026-03-15T20:35:00Z\n'
+      exit 0
+      ;;
+    repos/example/repo/pulls/602/comments)
+      printf '[]\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/sha602/check-runs)
+      printf '{"check_runs":[]}\n'
+      exit 0
+      ;;
+  esac
+fi
+
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+
+chmod +x "$bin_dir/gh"
+
+queued_json="$(
+  PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  ACP_MANAGED_PR_BRANCH_GLOBS="agent/acp/* codex/* openclaw/*" \
+  F_LOSNING_REPO_SLUG="example/repo" \
+  bash "$PR_RISK_BIN" 601
+)"
+
+test "$(jq -r '.hasRepairQueuedLabel' <<<"$queued_json")" = "true"
+test "$(jq -r '.hasManualFixNeededLabel' <<<"$queued_json")" = "false"
+test "$(jq -r '.hasManualFixOverride' <<<"$queued_json")" = "false"
+test "$(jq -r '.agentLane' <<<"$queued_json")" = "automerge"
+test "$(jq -r '.eligibleForAutoMerge' <<<"$queued_json")" = "true"
+if jq -e '.missingReasons[]? | select(. == "manual-fix-override")' >/dev/null <<<"$queued_json"; then
+  echo "queued repair label unexpectedly acted like a manual override" >&2
+  printf '%s\n' "$queued_json" >&2
+  exit 1
+fi
+
+manual_json="$(
+  PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  ACP_MANAGED_PR_BRANCH_GLOBS="agent/acp/* codex/* openclaw/*" \
+  F_LOSNING_REPO_SLUG="example/repo" \
+  bash "$PR_RISK_BIN" 602
+)"
+
+test "$(jq -r '.hasRepairQueuedLabel' <<<"$manual_json")" = "false"
+test "$(jq -r '.hasManualFixNeededLabel' <<<"$manual_json")" = "false"
+test "$(jq -r '.hasManualFixOverrideLabel' <<<"$manual_json")" = "true"
+test "$(jq -r '.hasManualFixOverride' <<<"$manual_json")" = "true"
+test "$(jq -r '.agentLane' <<<"$manual_json")" = "fix"
+if ! jq -e '.missingReasons[]? | select(. == "manual-fix-override")' >/dev/null <<<"$manual_json"; then
+  echo "manual fix override label did not force the fix lane" >&2
+  printf '%s\n' "$manual_json" >&2
+  exit 1
+fi
+
+echo "pr-risk fix label semantics test passed"

package/tools/tests/test-pr-risk-local-first-no-checks.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+PR_RISK_BIN="${FLOW_ROOT}/bin/pr-risk.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+bin_dir="$tmpdir/bin"
+node_bin_dir="$(dirname "$(command -v node)")"
+mkdir -p "$bin_dir"
+
+cat >"$bin_dir/gh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "pr" && "${2:-}" == "view" ]]; then
+  cat <<'JSON'
+{"number":501,"title":"docs: clarify local-first PR automation","url":"https://example.test/pr/501","body":"","isDraft":false,"headRefName":"codex/issue-501-local-first","baseRefName":"main","labels":[],"files":[{"path":"docs/auto-flow.md"}],"mergeStateStatus":"CLEAN","reviewDecision":"","reviewRequests":[],"statusCheckRollup":[],"comments":[]}
+JSON
+  exit 0
+fi
+
+if [[ "${1:-}" == "api" ]]; then
+  case "${2:-}" in
+    repos/example/repo/pulls/501)
+      printf 'abc123\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/abc123)
+      printf '2026-03-15T20:30:00Z\n'
+      exit 0
+      ;;
+    repos/example/repo/pulls/501/comments)
+      printf '[]\n'
+      exit 0
+      ;;
+    repos/example/repo/commits/abc123/check-runs)
+      printf '{"check_runs":[]}\n'
+      exit 0
+      ;;
+  esac
+fi
+
+echo "unexpected gh args: $*" >&2
+exit 1
+EOF
+
+chmod +x "$bin_dir/gh"
+
+risk_json="$(
+  PATH="$bin_dir:$node_bin_dir:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin" \
+  F_LOSNING_REPO_SLUG="example/repo" \
+  bash "$PR_RISK_BIN" 501
+)"
+
+test "$(jq -r '.isManagedByAgent' <<<"$risk_json")" = "true"
+test "$(jq -r '.linkedIssueId' <<<"$risk_json")" = "501"
+test "$(jq -r '.noChecksReported' <<<"$risk_json")" = "true"
+test "$(jq -r '.agentLane' <<<"$risk_json")" = "automerge"
+test "$(jq -r '.eligibleForAutoMerge' <<<"$risk_json")" = "true"
+
+if jq -e '.missingReasons[]? | select(. == "no-checks-reported")' >/dev/null <<<"$risk_json"; then
+  echo "managed local-first PR unexpectedly blocked on missing GitHub checks" >&2
+  printf '%s\n' "$risk_json" >&2
+  exit 1
+fi
+
+echo "pr-risk local-first no-checks test passed"

package/tools/tests/test-prepare-worktree-simple-repo-baseline.sh

@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+PREPARE_BIN="${FLOW_ROOT}/tools/bin/prepare-worktree.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_registry_root="$tmpdir/profiles"
+profile_dir="$profile_registry_root/demo"
+repo_root="$tmpdir/repo"
+worktree_root="$tmpdir/worktree"
+
+mkdir -p "$profile_dir" "$repo_root/node_modules"
+mkdir -p "$worktree_root"
+
+cat >"$repo_root/package.json" <<'EOF'
+{
+  "name": "demo-repo",
+  "private": true
+}
+EOF
+
+git -C "$repo_root" init -b main >/dev/null 2>&1
+git -C "$repo_root" config user.name "Codex"
+git -C "$repo_root" config user.email "codex@example.com"
+git -C "$worktree_root" init -b main >/dev/null 2>&1
+git -C "$worktree_root" config user.name "Codex"
+git -C "$worktree_root" config user.email "codex@example.com"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo"
+  root: "$repo_root"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$tmpdir/runtime/demo"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$repo_root"
+  runs_root: "$tmpdir/runtime/demo/runs"
+  state_root: "$tmpdir/runtime/demo/state"
+  history_root: "$tmpdir/runtime/demo/history"
+  retained_repo_root: "$repo_root"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+execution:
+  coding_worker: "openclaw"
+  openclaw:
+    model: "primary/model"
+    thinking: "adaptive"
+    timeout_seconds: 900
+EOF
+
+output="$(
+  ACP_PROFILE_REGISTRY_ROOT="$profile_registry_root" \
+  ACP_PROJECT_ID=demo \
+  ACP_SYNC_DEPENDENCY_BASELINE_SCRIPT=/nonexistent \
+  bash "$PREPARE_BIN" "$worktree_root"
+)"
+
+grep -q "^WORKTREE=${worktree_root}\$" <<<"$output"
+grep -q "^SANDBOX_ARTIFACT_DIR=${worktree_root}/.openclaw-artifacts\$" <<<"$output"
+test -L "$worktree_root/node_modules"
+
+echo "prepare worktree simple repo baseline test passed"

package/tools/tests/test-profile-activate.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SCRIPT="${FLOW_ROOT}/tools/bin/profile-activate.sh"
+SCAFFOLD_SCRIPT="${FLOW_ROOT}/tools/bin/scaffold-profile.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_home="$tmpdir/profiles"
+
+bash "$SCAFFOLD_SCRIPT" --profile-home "$profile_home" --profile-id demo --repo-slug example/demo-platform >/dev/null
+profile_notes_real="$(cd "$profile_home/demo" && pwd -P)/README.md"
+
+output="$(ACP_PROFILE_REGISTRY_ROOT="$profile_home" bash "$SCRIPT" --profile-id demo)"
+
+grep -q '^PROFILE_ID=demo$' <<<"$output"
+grep -q "^PROFILE_REGISTRY_ROOT=${profile_home}$" <<<"$output"
+grep -q "^CONFIG_YAML=${profile_home}/demo/control-plane.yaml$" <<<"$output"
+grep -q "^PROFILE_NOTES=${profile_notes_real}$" <<<"$output"
+grep -q '^REPO_SLUG=example/demo-platform$' <<<"$output"
+grep -q '^CODING_WORKER=openclaw$' <<<"$output"
+printf -v expected_next_step 'NEXT_STEP=eval "$(%s/tools/bin/profile-activate.sh --profile-id demo --exports)"' "${FLOW_ROOT}"
+grep -Fqx "$expected_next_step" <<<"$output"
+
+exports_out="$(ACP_PROFILE_REGISTRY_ROOT="$profile_home" bash "$SCRIPT" --profile-id demo --exports)"
+grep -q '^export ACP_PROJECT_ID=demo$' <<<"$exports_out"
+grep -q '^export AGENT_PROJECT_ID=demo$' <<<"$exports_out"
+grep -q "^export ACP_PROFILE_REGISTRY_ROOT=${profile_home}$" <<<"$exports_out"
+grep -q "^export ACP_CONFIG=${profile_home}/demo/control-plane.yaml$" <<<"$exports_out"
+
+echo "profile activate test passed"