agent-control-plane 0.1.0

package/tools/tests/test-public-repo-docs.sh

@@ -0,0 +1,159 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)
+
+test -f "$ROOT_DIR/SECURITY.md"
+test -f "$ROOT_DIR/CODE_OF_CONDUCT.md"
+test -f "$ROOT_DIR/CHANGELOG.md"
+test -f "$ROOT_DIR/ROADMAP.md"
+test -f "$ROOT_DIR/references/architecture.md"
+test -f "$ROOT_DIR/references/release-checklist.md"
+test -f "$ROOT_DIR/.github/release-template.md"
+test -f "$ROOT_DIR/.github/workflows/ci.yml"
+test -f "$ROOT_DIR/tools/bin/render-dashboard-demo-media.sh"
+test -f "$ROOT_DIR/tools/bin/render-architecture-infographics.sh"
+test -f "$ROOT_DIR/tools/architecture/architecture-infographics.html"
+test -f "$ROOT_DIR/assets/readme/dashboard-demo.png"
+test -f "$ROOT_DIR/assets/readme/dashboard-demo.gif"
+test -f "$ROOT_DIR/assets/architecture/agent-control-plane-architecture.pdf"
+test -f "$ROOT_DIR/assets/architecture/overview-infographic.png"
+test -f "$ROOT_DIR/assets/architecture/runtime-loop-infographic.png"
+test -f "$ROOT_DIR/assets/architecture/worker-lifecycle-infographic.png"
+test -f "$ROOT_DIR/assets/architecture/state-dashboard-infographic.png"
+
+grep -q 'Use GitHub private vulnerability reporting or a GitHub security advisory' "$ROOT_DIR/SECURITY.md"
+grep -q 'For undisclosed security issues, use \[SECURITY.md\](\./SECURITY.md)' "$ROOT_DIR/CODE_OF_CONDUCT.md"
+grep -q '^## \[Unreleased\]$' "$ROOT_DIR/CHANGELOG.md"
+grep -q '^## \[0.1.0\] - 2026-03-27$' "$ROOT_DIR/CHANGELOG.md"
+grep -q '^# Roadmap$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^## Platform Support$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| Platform | Status | Why it matters next |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `macOS` | best supported today | Current reference platform for setup, launchd, dashboard, and local operator flows\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `Linux` | planned next | ACP already knows common Linux package managers; the missing step is first-class runtime/service validation and an operator story as smooth as macOS\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `Windows (WSL2)` | exploratory next | A practical bridge for Windows users who still want Unix-like repos, containers, and worker CLIs\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `Native Windows` | longer-term | Needs explicit work around services, shell/process management, path handling, and backend compatibility\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| Backend | Status | Runtime Routing | Profile Scaffolding | Notes |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `codex` | available now | yes | yes | First-class worker path for Codex-backed runs\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `opencode` | planned next | placeholder scaffold | no | Adapter stub ships in the package, but live execution is not implemented yet\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `kilo` | planned next | placeholder scaffold | no | Adapter stub ships in the package, but live execution is not implemented yet\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `gemini-cli` | research next | no | no | Official Google terminal agent and the closest ecosystem fit for a future ACP worker adapter\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `codex`' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `claude`' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `openclaw`' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `opencode`' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `kilo`' "$ROOT_DIR/ROADMAP.md"
+grep -q -- '- `gemini-cli`' "$ROOT_DIR/ROADMAP.md"
+grep -q '^## Adjacent Runtime and Model Integrations$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| Target | Category | Status | Why it matters |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `ollama` | local model runtime | research next | Strong local-first story, cross-platform distribution, and an existing tool-launch surface that already knows about coding tools\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `nanoclaw` | containerized assistant runtime | exploratory | Useful reference for container isolation, scheduled tasks, and WSL2-friendly workflows around Claude-powered agents\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^| `picoclaw` | lightweight assistant runtime | exploratory | Interesting for Linux and edge-style deployments, MCP-heavy workflows, and ultra-low-footprint automation\. |$' "$ROOT_DIR/ROADMAP.md"
+grep -q '^# Release Summary$' "$ROOT_DIR/.github/release-template.md"
+grep -q '\[SECURITY.md\](\./SECURITY.md)' "$ROOT_DIR/README.md"
+grep -q '\[CODE_OF_CONDUCT.md\](\./CODE_OF_CONDUCT.md)' "$ROOT_DIR/README.md"
+grep -q '\[CHANGELOG.md\](\./CHANGELOG.md)' "$ROOT_DIR/README.md"
+grep -q '\[ROADMAP.md\](\./ROADMAP.md)' "$ROOT_DIR/README.md"
+grep -q '\[references/architecture.md\](\./references/architecture.md)' "$ROOT_DIR/README.md"
+grep -q '\[references/commands.md\](\./references/commands.md)' "$ROOT_DIR/README.md"
+grep -q 'keep coding agents running reliably without' "$ROOT_DIR/README.md"
+grep -q 'constant human babysitting' "$ROOT_DIR/README.md"
+grep -q 'replace human babysitting with boring runtime ownership: supervisor,' "$ROOT_DIR/README.md"
+grep -q '^## Architecture$' "$ROOT_DIR/README.md"
+grep -q '^### Runtime Loop At A Glance$' "$ROOT_DIR/README.md"
+grep -q '```mermaid' "$ROOT_DIR/README.md"
+grep -q '\[System overview\](\./references/architecture.md#system-overview)' "$ROOT_DIR/README.md"
+grep -q '\[Runtime scheduler loop\](\./references/architecture.md#runtime-scheduler-loop)' "$ROOT_DIR/README.md"
+grep -q '\[Dashboard snapshot pipeline\](\./references/architecture.md#dashboard-snapshot-pipeline)' "$ROOT_DIR/README.md"
+grep -q '\[Architecture deck PDF\](\./assets/architecture/agent-control-plane-architecture.pdf)' "$ROOT_DIR/README.md"
+grep -q '\[Overview infographic\](\./assets/architecture/overview-infographic.png)' "$ROOT_DIR/README.md"
+grep -q '\[Runtime loop infographic\](\./assets/architecture/runtime-loop-infographic.png)' "$ROOT_DIR/README.md"
+grep -q '\[Worker lifecycle infographic\](\./assets/architecture/worker-lifecycle-infographic.png)' "$ROOT_DIR/README.md"
+grep -q '\[State and dashboard infographic\](\./assets/architecture/state-dashboard-infographic.png)' "$ROOT_DIR/README.md"
+grep -q 'planned next: `opencode`, `kilo`, `gemini-cli`' "$ROOT_DIR/README.md"
+grep -q 'platform roadmap now calls out Linux, Windows via WSL2, and the longer-term' "$ROOT_DIR/README.md"
+grep -q 'native Windows story explicitly' "$ROOT_DIR/README.md"
+grep -q 'such as `ollama`, `nanoclaw`, and `picoclaw`' "$ROOT_DIR/README.md"
+grep -q 'roadmap matrix now distinguishes implemented backends from placeholder' "$ROOT_DIR/README.md"
+grep -q '^### Backend Snapshot$' "$ROOT_DIR/README.md"
+grep -q '^| Backend | What You Can Expect Today |$' "$ROOT_DIR/README.md"
+grep -q '^| `codex` | Ready for real ACP workflows today\. |$' "$ROOT_DIR/README.md"
+grep -q '^| `openclaw` | Ready for real ACP workflows today, including resident-style runs\. |$' "$ROOT_DIR/README.md"
+grep -q '^| `opencode` | Scaffolded in the package so routing and docs can evolve, but not implemented for live execution yet\. |$' "$ROOT_DIR/README.md"
+grep -q '^| `kilo` | Scaffolded in the package so routing and docs can evolve, but not implemented for live execution yet\. |$' "$ROOT_DIR/README.md"
+grep -q '^| `gemini-cli` | Not wired into ACP yet, but on the public roadmap as a strong future worker candidate\. |$' "$ROOT_DIR/README.md"
+grep -q '^### Support Matrix$' "$ROOT_DIR/README.md"
+grep -q '^| Target | Kind | ACP Relationship Today | Current Status |$' "$ROOT_DIR/README.md"
+grep -q '^| `codex` | direct worker | First-class ACP worker backend | production-ready path today |$' "$ROOT_DIR/README.md"
+grep -q '^| `openclaw` | direct worker | First-class ACP worker backend with resident workflow support | production-ready path today |$' "$ROOT_DIR/README.md"
+grep -q '^| `gemini-cli` | direct worker | Research target for a future worker adapter | roadmap candidate |$' "$ROOT_DIR/README.md"
+grep -q '^| `ollama` | local model runtime | Candidate local-model substrate behind future ACP integrations | research target |$' "$ROOT_DIR/README.md"
+grep -q '^| `nanoclaw` | adjacent agent shell | Ecosystem reference for containerized and WSL2-friendly workflows | exploratory interoperability target |$' "$ROOT_DIR/README.md"
+grep -q '^| `picoclaw` | adjacent agent shell | Ecosystem reference for lightweight Linux and edge-style agent runtimes | exploratory interoperability target |$' "$ROOT_DIR/README.md"
+grep -q 'If you are trying ACP on a real repo right now, start with `codex`, `claude`,' "$ROOT_DIR/README.md"
+grep -q 'github.com/ducminhuyen0319/agent-control-plane/actions/workflows/ci.yml/badge.svg?branch=main' "$ROOT_DIR/README.md"
+grep -q 'img.shields.io/npm/v/agent-control-plane' "$ROOT_DIR/README.md"
+grep -q 'img.shields.io/node/v/agent-control-plane' "$ROOT_DIR/README.md"
+grep -q 'img.shields.io/npm/l/agent-control-plane' "$ROOT_DIR/README.md"
+grep -q 'https://github.com/ducminhuyen0319/agent-control-plane/actions/workflows/ci.yml' "$ROOT_DIR/README.md"
+grep -q 'https://www.npmjs.com/package/agent-control-plane' "$ROOT_DIR/README.md"
+grep -q '\./assets/readme/dashboard-demo.png' "$ROOT_DIR/README.md"
+grep -q '\./assets/readme/dashboard-demo.gif' "$ROOT_DIR/README.md"
+grep -q '^| Tool | Required | Why ACP uses it | Notes |$' "$ROOT_DIR/README.md"
+grep -q '^| Node.js `>= 18` | yes | Runs the npm package entrypoint and `npx agent-control-plane \.\.\.` wrapper\. |' "$ROOT_DIR/README.md"
+grep -q '^| `jq` | yes | Several runtime and GitHub flows parse JSON from `gh` and worker metadata\. |' "$ROOT_DIR/README.md"
+grep -q '^| Bundled `codex-quota` plus ACP quota manager | automatic for Codex profiles | Improves Codex quota-aware failover and health signals\. |' "$ROOT_DIR/README.md"
+grep -q 'ACP_CODEX_QUOTA_BIN=/path/to/codex-quota' "$ROOT_DIR/README.md"
+grep -q '^| Command | What it is for | Key args and parameters |$' "$ROOT_DIR/README.md"
+grep -q '^```bash$' "$ROOT_DIR/README.md"
+grep -q '^npx agent-control-plane@latest setup$' "$ROOT_DIR/README.md"
+grep -q '`setup` detects the current repo when it can' "$ROOT_DIR/README.md"
+grep -q 'offers to install missing core tools' "$ROOT_DIR/README.md"
+grep -q 'can prompt to run `gh auth login`' "$ROOT_DIR/README.md"
+grep -q 'reports core tool and auth readiness' "$ROOT_DIR/README.md"
+grep -q '^During `setup`, ACP can:$' "$ROOT_DIR/README.md"
+grep -q 'supported package managers such as `brew`, `apt-get`, `dnf`, `yum`,' "$ROOT_DIR/README.md"
+grep -q 'offer to install supported worker backends like `codex`, `claude`, or' "$ROOT_DIR/README.md"
+grep -q 'run one final fix-up summary at the end so you can clear whatever is still' "$ROOT_DIR/README.md"
+grep -q 'The wizard now automates ACP'\''s shell/runtime prerequisites and can also' "$ROOT_DIR/README.md"
+grep -q 'auto-install supported worker CLIs through npm' "$ROOT_DIR/README.md"
+grep -q 'it will tell you what is missing, print' "$ROOT_DIR/README.md"
+grep -q 'backend-specific next steps, and offer to open the right setup docs' "$ROOT_DIR/README.md"
+grep -q '^npx agent-control-plane@latest setup --dry-run$' "$ROOT_DIR/README.md"
+grep -q 'without writing files, installing packages, or launching background services' "$ROOT_DIR/README.md"
+grep -q 'emit exactly one JSON object on `stdout`' "$ROOT_DIR/README.md"
+grep -q 'send progress logs to' "$ROOT_DIR/README.md"
+grep -q '`stderr`, which keeps parsing stable\.' "$ROOT_DIR/README.md"
+grep -q '`--non-interactive`, `--install-missing-deps`, `--gh-auth-login`,' "$ROOT_DIR/README.md"
+grep -q '`--start-runtime`, and `--json`\.' "$ROOT_DIR/README.md"
+grep -q '^| `npx agent-control-plane@latest setup` | Guided bootstrap for one repo profile\. |' "$ROOT_DIR/README.md"
+grep -q 'can install missing core tools, supported worker backends, and run `gh auth login`' "$ROOT_DIR/README.md"
+grep -q 'Add `--json` for one structured JSON result on `stdout`' "$ROOT_DIR/README.md"
+grep -q '^| `npx agent-control-plane@latest setup --dry-run` | Preview exactly what setup would do without changing the machine\. |' "$ROOT_DIR/README.md"
+grep -q 'Add `--json` for a machine-readable plan object\.' "$ROOT_DIR/README.md"
+grep -q '^| `npx agent-control-plane@latest install` | Alias for `sync`\.' "$ROOT_DIR/README.md"
+grep -q '^| `npx agent-control-plane@latest runtime <status\|start\|stop\|restart> --profile-id <id>` | Operate one profile runtime\. |' "$ROOT_DIR/README.md"
+grep -q '\[references/commands.md\](\./references/commands.md)' "$ROOT_DIR/README.md"
+grep -q '^# Architecture Guide$' "$ROOT_DIR/references/architecture.md"
+grep -q '^## System Overview$' "$ROOT_DIR/references/architecture.md"
+grep -q '^## Install and Publication Flow$' "$ROOT_DIR/references/architecture.md"
+grep -q '^## Runtime Scheduler Loop$' "$ROOT_DIR/references/architecture.md"
+grep -q '^## Worker Session Lifecycle$' "$ROOT_DIR/references/architecture.md"
+grep -q '^## Dashboard Snapshot Pipeline$' "$ROOT_DIR/references/architecture.md"
+grep -q '```mermaid' "$ROOT_DIR/references/architecture.md"
+grep -q 'Maintainer checklist for shipping a new public package release' "$ROOT_DIR/references/release-checklist.md"
+grep -q 'npm publish --access public' "$ROOT_DIR/references/release-checklist.md"
+grep -q 'render-dashboard-demo-media.sh' "$ROOT_DIR/references/release-checklist.md"
+grep -q 'if a public GitHub repo now exists, set or verify the `homepage`,' "$ROOT_DIR/references/release-checklist.md"
+grep -q '`repository`, and `bugs` URLs in `package.json`' "$ROOT_DIR/references/release-checklist.md"
+grep -q 'bash tools/bin/test-smoke.sh' "$ROOT_DIR/references/release-checklist.md"
+grep -q '`references/release-checklist.md`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`references/architecture.md`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`CHANGELOG.md`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`ROADMAP.md`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`.github/release-template.md`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`.github/workflows/ci.yml`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`tools/bin/render-dashboard-demo-media.sh`' "$ROOT_DIR/references/docs-map.md"
+grep -q '`tools/bin/render-architecture-infographics.sh`' "$ROOT_DIR/references/docs-map.md"
+
+echo "public repo docs test passed"

package/tools/tests/test-reconcile-pr-worker-acp-config-routing.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SOURCE_SCRIPT="${FLOW_ROOT}/tools/bin/reconcile-pr-worker.sh"
+FLOW_CONFIG_LIB="${FLOW_ROOT}/tools/bin/flow-config-lib.sh"
+FLOW_SHELL_LIB="${FLOW_ROOT}/tools/bin/flow-shell-lib.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+workspace_bin_dir="$tmpdir/workspace/bin"
+shared_home="$tmpdir/shared-home"
+flow_root="$shared_home/skills/openclaw/agent-control-plane"
+flow_tools_dir="$flow_root/tools/bin"
+flow_assets_dir="$flow_root/assets"
+hooks_dir="$flow_root/hooks"
+profile_home="$tmpdir/profiles"
+capture_file="$tmpdir/capture.log"
+
+mkdir -p "$workspace_bin_dir" "$flow_tools_dir" "$flow_assets_dir" "$hooks_dir" "$profile_home/demo"
+cp "$SOURCE_SCRIPT" "$workspace_bin_dir/reconcile-pr-worker.sh"
+cp "$FLOW_CONFIG_LIB" "$workspace_bin_dir/flow-config-lib.sh"
+cp "$FLOW_SHELL_LIB" "$workspace_bin_dir/flow-shell-lib.sh"
+
+cat >"$profile_home/demo/control-plane.yaml" <<EOF
+id: "demo"
+repo:
+  slug: "example/repo"
+runtime:
+  orchestrator_agent_root: "$tmpdir/agent-root"
+  agent_repo_root: "$tmpdir/repo"
+  runs_root: "$tmpdir/runs"
+EOF
+
+cat >"$flow_tools_dir/agent-project-reconcile-pr-session" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf 'ARGV=%s\n' "$*" >"${TEST_CAPTURE_FILE:?}"
+printf 'ACP_RUNS_ROOT=%s\n' "${ACP_RUNS_ROOT:-}" >>"${TEST_CAPTURE_FILE:?}"
+printf 'F_LOSNING_RUNS_ROOT=%s\n' "${F_LOSNING_RUNS_ROOT:-}" >>"${TEST_CAPTURE_FILE:?}"
+EOF
+
+cat >"$hooks_dir/pr-reconcile-hooks.sh" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+exit 0
+EOF
+
+chmod +x \
+  "$workspace_bin_dir/reconcile-pr-worker.sh" \
+  "$workspace_bin_dir/flow-config-lib.sh" \
+  "$workspace_bin_dir/flow-shell-lib.sh" \
+  "$flow_tools_dir/agent-project-reconcile-pr-session" \
+  "$hooks_dir/pr-reconcile-hooks.sh"
+
+expected_hook_file="$(cd "$hooks_dir" && pwd -P)/pr-reconcile-hooks.sh"
+
+TEST_CAPTURE_FILE="$capture_file" \
+SHARED_AGENT_HOME="$shared_home" \
+ACP_ROOT="$flow_root" \
+ACP_PROFILE_REGISTRY_ROOT="$profile_home" \
+ACP_PROJECT_ID="demo" \
+bash "$workspace_bin_dir/reconcile-pr-worker.sh" "acp-pr-55"
+
+grep -q -- '--session acp-pr-55' "$capture_file"
+grep -q -- '--repo-slug example/repo' "$capture_file"
+grep -q -- "--repo-root $tmpdir/repo" "$capture_file"
+grep -q -- "--runs-root $tmpdir/runs" "$capture_file"
+grep -q -- "--history-root $tmpdir/agent-root/history" "$capture_file"
+grep -q -- "--hook-file $expected_hook_file" "$capture_file"
+grep -q -- "^ACP_RUNS_ROOT=$tmpdir/runs$" "$capture_file"
+grep -q -- "^F_LOSNING_RUNS_ROOT=$tmpdir/runs$" "$capture_file"
+
+echo "reconcile-pr-worker acp config routing test passed"

package/tools/tests/test-render-dashboard-snapshot.sh

@@ -0,0 +1,149 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SNAPSHOT_BIN="${FLOW_ROOT}/tools/bin/render-dashboard-snapshot.py"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_registry_root="$tmpdir/profiles"
+profile_dir="$profile_registry_root/demo"
+runs_root="$tmpdir/runtime/demo/runs"
+state_root="$tmpdir/runtime/demo/state"
+run_dir="$runs_root/demo-issue-1"
+
+mkdir -p \
+  "$profile_dir" \
+  "$run_dir" \
+  "$state_root/resident-workers/issues/1" \
+  "$state_root/resident-workers/issues/issue-lane-recurring-general-openclaw-safe" \
+  "$state_root/retries/providers" \
+  "$state_root/scheduled-issues" \
+  "$state_root/resident-workers/issue-queue/pending"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+schema_version: "1"
+id: "demo"
+repo:
+  slug: "example/demo-dashboard"
+  root: "$tmpdir/repo"
+  default_branch: "main"
+runtime:
+  orchestrator_agent_root: "$tmpdir/runtime/demo"
+  worktree_root: "$tmpdir/worktrees"
+  agent_repo_root: "$tmpdir/repo"
+  runs_root: "$runs_root"
+  state_root: "$state_root"
+  history_root: "$tmpdir/runtime/demo/history"
+  retained_repo_root: "$tmpdir/repo"
+  vscode_workspace_file: "$tmpdir/demo.code-workspace"
+session_naming:
+  issue_prefix: "demo-issue-"
+  pr_prefix: "demo-pr-"
+execution:
+  coding_worker: "openclaw"
+  openclaw:
+    model: "primary/model"
+    thinking: "adaptive"
+    timeout_seconds: 900
+EOF
+
+cat >"$run_dir/run.env" <<'EOF'
+TASK_KIND=issue
+TASK_ID=1
+SESSION=demo-issue-1
+MODE=safe
+STARTED_AT=2026-03-26T15:00:00Z
+CODING_WORKER=openclaw
+WORKTREE=/tmp/demo-worktree
+BRANCH=agent/demo/issue-1
+RESIDENT_WORKER_KEY=issue-lane-recurring-general-openclaw-safe
+OPENCLAW_MODEL=primary/model
+EOF
+
+cat >"$run_dir/runner.env" <<'EOF'
+RUNNER_STATE=succeeded
+THREAD_ID=thread-demo-1
+LAST_EXIT_CODE=0
+LAST_FAILURE_REASON=''
+UPDATED_AT=2026-03-26T15:01:00Z
+EOF
+
+cat >"$run_dir/result.env" <<'EOF'
+OUTCOME=implemented
+ACTION=host-publish-issue-pr
+EOF
+
+cat >"$state_root/resident-workers/issues/1/controller.env" <<'EOF'
+ISSUE_ID=1
+SESSION=demo-issue-1
+CONTROLLER_PID=1234
+CONTROLLER_MODE=safe
+CONTROLLER_LOOP_COUNT=2
+CONTROLLER_STATE=waiting-provider
+CONTROLLER_REASON=provider-cooldown
+ACTIVE_RESIDENT_WORKER_KEY=issue-lane-recurring-general-openclaw-safe
+ACTIVE_RESIDENT_LANE_KIND=recurring
+ACTIVE_RESIDENT_LANE_VALUE=general
+ACTIVE_PROVIDER_BACKEND=openclaw
+ACTIVE_PROVIDER_MODEL=primary/model
+PROVIDER_SWITCH_COUNT=1
+PROVIDER_FAILOVER_COUNT=1
+PROVIDER_WAIT_COUNT=2
+PROVIDER_WAIT_TOTAL_SECONDS=45
+PROVIDER_LAST_WAIT_SECONDS=21
+UPDATED_AT=2026-03-26T15:02:00Z
+EOF
+
+cat >"$state_root/resident-workers/issues/issue-lane-recurring-general-openclaw-safe/metadata.env" <<'EOF'
+RESIDENT_WORKER_KIND=issue
+RESIDENT_WORKER_SCOPE=lane
+RESIDENT_WORKER_KEY=issue-lane-recurring-general-openclaw-safe
+ISSUE_ID=1
+CODING_WORKER=openclaw
+TASK_COUNT=7
+LAST_STATUS=running
+LAST_STARTED_AT=2026-03-26T15:00:00Z
+LAST_RUN_SESSION=demo-issue-1
+EOF
+
+cat >"$state_root/retries/providers/openclaw-primary-model.env" <<'EOF'
+ATTEMPTS=2
+NEXT_ATTEMPT_EPOCH=4102444800
+NEXT_ATTEMPT_AT=2100-01-01T00:00:00Z
+LAST_REASON=provider-quota-limit
+UPDATED_AT=2026-03-26T15:03:00Z
+EOF
+
+cat >"$state_root/scheduled-issues/1.env" <<'EOF'
+INTERVAL_SECONDS=600
+LAST_STARTED_AT=2026-03-26T15:00:00Z
+NEXT_DUE_AT=2026-03-26T15:10:00Z
+UPDATED_AT=2026-03-26T15:00:00Z
+EOF
+
+cat >"$state_root/resident-workers/issue-queue/pending/issue-2.env" <<'EOF'
+ISSUE_ID=2
+SESSION=demo-issue-2
+UPDATED_AT=2026-03-26T15:04:00Z
+EOF
+
+snapshot="$(ACP_PROFILE_REGISTRY_ROOT="$profile_registry_root" python3 "$SNAPSHOT_BIN" --pretty)"
+
+grep -q '"profile_count": 1' <<<"$snapshot"
+grep -q '"id": "demo"' <<<"$snapshot"
+grep -q '"repo_slug": "example/demo-dashboard"' <<<"$snapshot"
+grep -q '"session": "demo-issue-1"' <<<"$snapshot"
+grep -q '"state": "waiting-provider"' <<<"$snapshot"
+grep -q '"provider_failover_count": 1' <<<"$snapshot"
+grep -q '"provider_wait_total_seconds": 45' <<<"$snapshot"
+grep -q '"provider_key": "openclaw-primary-model"' <<<"$snapshot"
+grep -q '"queued_issues": 1' <<<"$snapshot"
+grep -q '"implemented_runs": 1' <<<"$snapshot"
+grep -q '"live_resident_controllers": 0' <<<"$snapshot"
+grep -q '"controller_live": false' <<<"$snapshot"
+grep -q '"result_kind": "implemented"' <<<"$snapshot"
+grep -q '"result_label": "Implemented"' <<<"$snapshot"
+
+echo "render dashboard snapshot test passed"

package/tools/tests/test-render-flow-config-demo-profile.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SCRIPT="${FLOW_ROOT}/tools/bin/render-flow-config.sh"
+SCAFFOLD_SCRIPT="${FLOW_ROOT}/tools/bin/scaffold-profile.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_home="$tmpdir/profiles"
+repo_slug="example-owner/alpha"
+
+bash "$SCAFFOLD_SCRIPT" --profile-home "$profile_home" --profile-id alpha --repo-slug "$repo_slug" >/dev/null
+bash "$SCAFFOLD_SCRIPT" --profile-home "$profile_home" --profile-id demo --repo-slug example/demo-platform >/dev/null
+profile_notes_real="$(cd "$profile_home/demo" && pwd -P)/README.md"
+
+output="$(
+  ACP_PROFILE_REGISTRY_ROOT="$profile_home" \
+  AGENT_PROJECT_ID="alpha" \
+  ACP_PROJECT_ID="demo" \
+  bash "$SCRIPT"
+)"
+
+grep -q "^CONFIG_YAML=${profile_home}/demo/control-plane.yaml$" <<<"$output"
+grep -q '^PROFILE_ID=demo$' <<<"$output"
+grep -q '^PROFILE_SELECTION_MODE=explicit$' <<<"$output"
+grep -q "^PROFILE_NOTES=${profile_notes_real}$" <<<"$output"
+grep -q '^PROFILE_NOTES_EXISTS=yes$' <<<"$output"
+grep -Eq '^AVAILABLE_PROFILES=(demo,alpha|alpha,demo)$' <<<"$output"
+grep -q '^EFFECTIVE_CODING_WORKER=openclaw$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_QUOTA_COOLDOWNS=300,900,1800,3600$' <<<"$output"
+grep -q '^EFFECTIVE_OPENCLAW_MODEL=openrouter/stepfun/step-3.5-flash:free$' <<<"$output"
+grep -q '^EFFECTIVE_AGENT_REPO_ROOT=/tmp/agent-control-plane-demo/repo$' <<<"$output"
+
+echo "render flow config demo profile test passed"

package/tools/tests/test-render-flow-config-provider-pool-fallback.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SCRIPT="${FLOW_ROOT}/tools/bin/render-flow-config.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_home="$tmpdir/profiles"
+profile_dir="$profile_home/demo"
+state_root="$tmpdir/runtime/demo/state"
+mkdir -p "$profile_dir" "$state_root/retries/providers"
+
+cat >"$profile_dir/control-plane.yaml" <<EOF
+id: "demo"
+repo:
+  slug: "example/demo"
+  root: "${tmpdir}/repo"
+runtime:
+  orchestrator_agent_root: "${tmpdir}/runtime/demo"
+  agent_repo_root: "${tmpdir}/repo"
+  worktree_root: "${tmpdir}/worktrees"
+  runs_root: "${tmpdir}/runtime/demo/runs"
+  state_root: "${state_root}"
+session_naming:
+  issue_prefix: "demo-issue-"
+  pr_prefix: "demo-pr-"
+  issue_branch_prefix: "agent/demo/issue"
+  pr_worktree_branch_prefix: "agent/demo/pr"
+execution:
+  coding_worker: "openclaw"
+  provider_quota:
+    cooldowns: "300,900"
+  provider_pool_order: "primary fallback"
+  provider_pools:
+    primary:
+      coding_worker: "openclaw"
+      openclaw:
+        model: "primary/model"
+        thinking: "adaptive"
+        timeout_seconds: 321
+    fallback:
+      coding_worker: "claude"
+      claude:
+        model: "fallback-sonnet"
+        permission_mode: "dontAsk"
+        effort: "high"
+        timeout_seconds: 777
+        max_attempts: 5
+        retry_backoff_seconds: 12
+EOF
+
+printf '# demo\n' >"$profile_dir/README.md"
+
+future_epoch=$(( $(date +%s) + 3600 ))
+cat >"$state_root/retries/providers/openclaw-primary-model.env" <<EOF
+ATTEMPTS=1
+NEXT_ATTEMPT_EPOCH=${future_epoch}
+NEXT_ATTEMPT_AT=2099-01-01T00:00:00Z
+LAST_REASON=provider-quota-limit
+UPDATED_AT=2099-01-01T00:00:00Z
+EOF
+
+output="$(
+  ACP_PROFILE_REGISTRY_ROOT="$profile_home" \
+  ACP_PROJECT_ID="demo" \
+  bash "$SCRIPT"
+)"
+
+grep -q '^PROFILE_ID=demo$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOL_ORDER=primary fallback$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOL_NAME=fallback$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOL_BACKEND=claude$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOL_MODEL=fallback-sonnet$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOLS_EXHAUSTED=no$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_POOL_SELECTION_REASON=ready$' <<<"$output"
+grep -q '^EFFECTIVE_CODING_WORKER=claude$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_MODEL=fallback-sonnet$' <<<"$output"
+
+echo "render flow config provider pool fallback test passed"

package/tools/tests/test-render-flow-config.sh

@@ -0,0 +1,52 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+FLOW_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+SCRIPT="${FLOW_ROOT}/tools/bin/render-flow-config.sh"
+SCAFFOLD_SCRIPT="${FLOW_ROOT}/tools/bin/scaffold-profile.sh"
+
+tmpdir="$(mktemp -d)"
+trap 'rm -rf "$tmpdir"' EXIT
+
+profile_home="$tmpdir/profiles"
+repo_slug="example-owner/alpha"
+
+bash "$SCAFFOLD_SCRIPT" --profile-home "$profile_home" --profile-id alpha --repo-slug "$repo_slug" >/dev/null
+bash "$SCAFFOLD_SCRIPT" --profile-home "$profile_home" --profile-id demo --repo-slug example/demo-platform >/dev/null
+profile_notes_real="$(cd "$profile_home/alpha" && pwd -P)/README.md"
+
+output="$(
+  ACP_PROFILE_REGISTRY_ROOT="$profile_home" \
+  ACP_AGENT_REPO_ROOT="/tmp/agent-repo" \
+  ACP_CODING_WORKER="codex" \
+  ACP_CLAUDE_MODEL="sonnet" \
+  ACP_CLAUDE_PERMISSION_MODE="dontAsk" \
+  ACP_CLAUDE_EFFORT="high" \
+  ACP_CLAUDE_TIMEOUT_SECONDS="777" \
+  ACP_CLAUDE_MAX_ATTEMPTS="5" \
+  ACP_CLAUDE_RETRY_BACKOFF_SECONDS="12" \
+  ACP_OPENCLAW_MODEL="override/model" \
+  bash "$SCRIPT"
+)"
+
+grep -q '^FLOW_SKILL_DIR=' <<<"$output"
+grep -q "^CONFIG_YAML=${profile_home}/alpha/control-plane.yaml$" <<<"$output"
+grep -q '^PROFILE_ID=alpha$' <<<"$output"
+grep -q '^PROFILE_NOTES_EXISTS=yes$' <<<"$output"
+grep -q "^PROFILE_NOTES=${profile_notes_real}$" <<<"$output"
+grep -q '^PROFILE_SELECTION_HINT=Set ACP_PROJECT_ID=<id> or AGENT_PROJECT_ID=<id> when multiple available profiles exist\.$' <<<"$output"
+grep -q '^PROFILE_SELECTION_MODE=implicit-default$' <<<"$output"
+grep -q '^EFFECTIVE_AGENT_REPO_ROOT=/tmp/agent-repo$' <<<"$output"
+grep -q '^EFFECTIVE_CODING_WORKER=codex$' <<<"$output"
+grep -q '^EFFECTIVE_PROVIDER_QUOTA_COOLDOWNS=300,900,1800,3600$' <<<"$output"
+grep -q '^EFFECTIVE_CODEX_PROFILE_SAFE=alpha_safe$' <<<"$output"
+grep -q '^EFFECTIVE_CODEX_PROFILE_BYPASS=alpha_bypass$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_MODEL=sonnet$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_PERMISSION_MODE=dontAsk$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_EFFORT=high$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_TIMEOUT_SECONDS=777$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_MAX_ATTEMPTS=5$' <<<"$output"
+grep -q '^EFFECTIVE_CLAUDE_RETRY_BACKOFF_SECONDS=12$' <<<"$output"
+grep -q '^EFFECTIVE_OPENCLAW_MODEL=override/model$' <<<"$output"
+
+echo "render flow config test passed"