agent-control-plane 0.3.0 → 0.6.0

package/tools/bin/install-project-systemd.sh

@@ -0,0 +1,255 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+usage() {
+  cat <<'EOF'
+Usage:
+  install-project-systemd.sh --profile-id <id> [options]
+
+Install a per-user systemd service so one ACP project runtime starts
+automatically after login/restart on Linux.
+
+Options:
+  --profile-id <id>       Installed profile id to manage
+  --unit-name <name>       Override systemd unit name (default: agent-project-<id>.service)
+  --delay-seconds <n>      Initial supervisor delay before first bootstrap (default: 0)
+  --interval-seconds <n>   Supervisor interval between bootstrap passes (default: 15)
+  --help                   Show this help
+EOF
+}
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=/dev/null
+source "${script_dir}/flow-config-lib.sh"
+
+append_path_dir() {
+  local value_name="${1:?value name required}"
+  local candidate="${2:-}"
+  local current=""
+
+  [[ -n "${candidate}" && -d "${candidate}" ]] || return 0
+  current="${!value_name:-}"
+  case ":${current}:" in
+    *":${candidate}:"*) return 0 ;;
+  esac
+  if [[ -n "${current}" ]]; then
+    printf -v "${value_name}" '%s:%s' "${current}" "${candidate}"
+  else
+    printf -v "${value_name}" '%s' "${candidate}"
+  fi
+}
+
+resolved_tool_dir() {
+  local tool_name="${1:-}"
+  local tool_path=""
+
+  [[ -n "${tool_name}" ]] || return 1
+  tool_path="$(command -v "${tool_name}" 2>/dev/null || true)"
+  [[ -n "${tool_path}" ]] || return 1
+  dirname "${tool_path}"
+}
+
+build_systemd_base_path() {
+  local path_value="${ACP_PROJECT_RUNTIME_PATH:-/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin}"
+  local tool_name=""
+  local tool_dir=""
+
+  for tool_name in node gh git python3 openclaw codex claude ollama pi crush kilo; do
+    tool_dir="$(resolved_tool_dir "${tool_name}" || true)"
+    append_path_dir path_value "${tool_dir}"
+  done
+
+  printf '%s\n' "${path_value}"
+}
+
+profile_id_override=""
+unit_name_override=""
+delay_seconds="0"
+interval_seconds="15"
+profile_registry_root_override="${ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT:-${ACP_PROFILE_REGISTRY_ROOT:-}}"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --profile-id) profile_id_override="${2:-}"; shift 2 ;;
+    --unit-name) unit_name_override="${2:-}"; shift 2 ;;
+    --delay-seconds) delay_seconds="${2:-}"; shift 2 ;;
+    --interval-seconds) interval_seconds="${2:-}"; shift 2 ;;
+    --help|-h) usage; exit 0 ;;
+    *) echo "Unknown argument: $1" >&2; usage >&2; exit 64 ;;
+  esac
+done
+
+if [[ -z "${profile_id_override}" ]]; then
+  usage >&2
+  exit 64
+fi
+
+case "${delay_seconds}" in
+  ''|*[!0-9]*) echo "--delay-seconds must be numeric" >&2; exit 64 ;;
+esac
+
+case "${interval_seconds}" in
+  ''|*[!0-9]*) echo "--interval-seconds must be numeric" >&2; exit 64 ;;
+esac
+
+export ACP_PROJECT_ID="${profile_id_override}"
+export AGENT_PROJECT_ID="${profile_id_override}"
+
+if [[ -n "${profile_registry_root_override}" ]]; then
+  export ACP_PROFILE_REGISTRY_ROOT="${profile_registry_root_override}"
+fi
+
+flow_skill_dir="$(resolve_flow_skill_dir "${BASH_SOURCE[0]}")"
+if ! flow_require_explicit_profile_selection "${flow_skill_dir}" "install-project-systemd.sh"; then
+  exit 64
+fi
+
+config_yaml="$(resolve_flow_config_yaml "${BASH_SOURCE[0]}")"
+if [[ ! -f "${config_yaml}" ]]; then
+  printf 'profile not installed: %s\n' "${profile_id_override}" >&2
+  exit 66
+fi
+
+profile_id="$(flow_resolve_adapter_id "${config_yaml}")"
+profile_slug="$(printf '%s' "${profile_id}" | tr -c 'A-Za-z0-9._-' '-')"
+home_dir="${ACP_PROJECT_RUNTIME_HOME_DIR:-${HOME:-}}"
+source_home="${ACP_PROJECT_RUNTIME_SOURCE_HOME:-}"
+
+if [[ -z "${source_home}" ]]; then
+  if flow_is_skill_root "${flow_skill_dir}"; then
+    source_home="${flow_skill_dir}"
+  else
+    source_home="$(cd "${flow_skill_dir}/../../.." && pwd)"
+  fi
+fi
+
+runtime_home="${ACP_PROJECT_RUNTIME_RUNTIME_HOME:-${home_dir}/.agent-runtime/runtime-home}"
+workspace_dir="${ACP_PROJECT_RUNTIME_WORKSPACE_DIR:-${home_dir}/.agent-runtime/control-plane/workspace}"
+profile_registry_root="${ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT:-${ACP_PROFILE_REGISTRY_ROOT:-${home_dir}/.agent-runtime/control-plane/profiles}}"
+systemd_dir="${ACP_PROJECT_RUNTIME_SYSTEMD_DIR:-${home_dir}/.config/systemd/user}"
+log_dir="${ACP_PROJECT_RUNTIME_LOG_DIR:-${home_dir}/.agent-runtime/logs}"
+unit_name="${unit_name_override:-${ACP_PROJECT_RUNTIME_SYSTEMD_UNIT:-agent-project-${profile_slug}.service}}"
+base_path="$(build_systemd_base_path)"
+coding_worker_override="${ACP_PROJECT_RUNTIME_CODING_WORKER:-${ACP_CODING_WORKER:-}}"
+sync_script="${ACP_PROJECT_RUNTIME_SYNC_SCRIPT:-${flow_skill_dir}/tools/bin/sync-shared-agent-home.sh}"
+runtime_skill_dir="${runtime_home}/skills/openclaw/agent-control-plane"
+bootstrap_script="${ACP_PROJECT_RUNTIME_BOOTSTRAP_SCRIPT:-}"
+
+if [[ -z "${bootstrap_script}" ]]; then
+  if [[ -x "${runtime_skill_dir}/tools/bin/project-systemd-bootstrap.sh" ]]; then
+    bootstrap_script="${runtime_skill_dir}/tools/bin/project-systemd-bootstrap.sh"
+  else
+    bootstrap_script="${flow_skill_dir}/tools/bin/project-systemd-bootstrap.sh"
+  fi
+fi
+
+supervisor_script="${ACP_PROJECT_RUNTIME_SUPERVISOR_SCRIPT:-}"
+if [[ -z "${supervisor_script}" ]]; then
+  if [[ -x "${runtime_skill_dir}/tools/bin/project-runtime-supervisor.sh" ]]; then
+    supervisor_script="${runtime_skill_dir}/tools/bin/project-runtime-supervisor.sh"
+  else
+    supervisor_script="${flow_skill_dir}/tools/bin/project-runtime-supervisor.sh"
+  fi
+fi
+
+state_root="$(flow_resolve_state_root "${config_yaml}")"
+supervisor_pid_file="${state_root}/runtime-supervisor.pid"
+env_file="${ACP_PROJECT_RUNTIME_ENV_FILE:-${profile_registry_root}/${profile_id}/runtime.env}"
+wrapper_path="${workspace_dir}/bin/agent-project-${profile_slug}-systemd.sh"
+unit_file="${systemd_dir}/${unit_name}"
+stdout_log="${log_dir}/agent-project-${profile_slug}.stdout.log"
+stderr_log="${log_dir}/agent-project-${profile_slug}.stderr.log"
+
+if [[ -z "${home_dir}" ]]; then
+  echo "install-project-systemd requires HOME or ACP_PROJECT_RUNTIME_HOME_DIR" >&2
+  exit 64
+fi
+
+# Check if systemd is available
+if ! command -v systemctl &>/dev/null; then
+  echo "systemctl not found. Is systemd installed?" >&2
+  exit 1
+fi
+
+mkdir -p "${workspace_dir}/bin" "${systemd_dir}" "${log_dir}" "$(dirname "${supervisor_pid_file}")"
+
+# Create wrapper script
+cat >"${wrapper_path}" <<EOF
+#!/usr/bin/env bash
+set -euo pipefail
+export ACP_PROJECT_RUNTIME_HOME_DIR='${home_dir}'
+export ACP_PROJECT_RUNTIME_SOURCE_HOME='${source_home}'
+export ACP_PROJECT_RUNTIME_RUNTIME_HOME='${runtime_home}'
+export ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT='${profile_registry_root}'
+export ACP_PROJECT_RUNTIME_PROFILE_ID='${profile_id}'
+export ACP_PROJECT_RUNTIME_ENV_FILE='${env_file}'
+export ACP_PROJECT_ID='${profile_id}'
+export AGENT_PROJECT_ID='${profile_id}'
+export ACP_PROJECT_RUNTIME_PATH='${base_path}'
+export ACP_PROJECT_RUNTIME_SYNC_SCRIPT='${sync_script}'
+export ACP_PROFILE_REGISTRY_ROOT='${profile_registry_root}'
+EOF
+
+if [[ -n "${coding_worker_override}" ]]; then
+  cat >>"${wrapper_path}" <<EOF
+export ACP_CODING_WORKER='${coding_worker_override}'
+EOF
+fi
+
+cat >>"${wrapper_path}" <<EOF
+exec bash '${supervisor_script}' --bootstrap-script '${bootstrap_script}' --pid-file '${supervisor_pid_file}' --delay-seconds '${delay_seconds}' --interval-seconds '${interval_seconds}'
+EOF
+chmod +x "${wrapper_path}"
+
+# Create systemd unit file
+cat >"${unit_file}" <<EOF
+[Unit]
+Description=Agent Control Plane - Project ${profile_id}
+After=default.target
+Wants=default.target
+
+[Service]
+Type=simple
+ExecStart=${wrapper_path}
+WorkingDirectory=${workspace_dir}
+StandardOutput=append:${stdout_log}
+StandardError=append:${stderr_log}
+Restart=always
+RestartSec=10
+Environment=HOME=${home_dir}
+Environment=PATH=${base_path}
+Environment=ACP_PROFILE_REGISTRY_ROOT=${profile_registry_root}
+
+[Install]
+WantedBy=default.target
+EOF
+
+# Enable and start the service
+if [[ "${ACP_PROJECT_RUNTIME_SKIP_SYSTEMCTL:-0}" == "1" ]]; then
+  printf 'SYSTEMD_INSTALL_STATUS=skipped-systemctl\n'
+  printf 'PROFILE_ID=%s\n' "${profile_id}"
+  printf 'UNIT_NAME=%s\n' "${unit_name}"
+  printf 'UNIT_FILE=%s\n' "${unit_file}"
+  printf 'WRAPPER=%s\n' "${wrapper_path}"
+  exit 0
+fi
+
+# Enable user service (create symlink)
+systemctl --user enable "${unit_name}" 2>&1 || true
+
+# Start the service
+systemctl --user restart "${unit_name}" 2>&1 || true
+
+# Wait briefly for service to start
+for _ in $(seq 1 10); do
+  if systemctl --user is-active --quiet "${unit_name}" 2>/dev/null; then
+    break
+  fi
+  sleep 1
+done
+
+printf 'SYSTEMD_INSTALL_STATUS=ok\n'
+printf 'PROFILE_ID=%s\n' "${profile_id}"
+printf 'UNIT_NAME=%s\n' "${unit_name}"
+printf 'UNIT_FILE=%s\n' "${unit_file}"
+printf 'WRAPPER=%s\n' "${wrapper_path}"

package/tools/bin/project-init.sh

@@ -34,7 +34,12 @@ runtime copy.
 
 Common options:
   --profile-id <id>                  Profile id, e.g. billing-api
-  --repo-slug <owner/repo>           GitHub repo slug
+  --repo-slug <owner/repo>           Forge repo slug
+  --forge-provider <github|gitea>    Forge provider for this profile
+  --gitea-base-url <url>             Base URL for a local/self-hosted Gitea instance
+  --gitea-token <token>              Gitea API token written to profile runtime.env
+  --gitea-username <user>            Gitea username written to profile runtime.env
+  --gitea-password <pass>            Gitea password written to profile runtime.env
   --profile-home <path>              Installed profile registry root
   --repo-root <path>                 Canonical repo root
   --agent-repo-root <path>           Agent-owned anchor repo root
@@ -68,6 +73,11 @@ EOF
 
 profile_id=""
 repo_slug=""
+forge_provider=""
+gitea_base_url=""
+gitea_token=""
+gitea_username=""
+gitea_password=""
 profile_home=""
 repo_root=""
 agent_repo_root=""
@@ -98,6 +108,11 @@ while [[ $# -gt 0 ]]; do
   case "$1" in
     --profile-id) profile_id="${2:-}"; shift 2 ;;
     --repo-slug) repo_slug="${2:-}"; shift 2 ;;
+    --forge-provider) forge_provider="${2:-}"; shift 2 ;;
+    --gitea-base-url) gitea_base_url="${2:-}"; shift 2 ;;
+    --gitea-token) gitea_token="${2:-}"; shift 2 ;;
+    --gitea-username) gitea_username="${2:-}"; shift 2 ;;
+    --gitea-password) gitea_password="${2:-}"; shift 2 ;;
     --profile-home) profile_home="${2:-}"; shift 2 ;;
     --repo-root) repo_root="${2:-}"; shift 2 ;;
     --agent-repo-root) agent_repo_root="${2:-}"; shift 2 ;;
@@ -144,6 +159,11 @@ SOURCE_HOME="${source_home:-${ACP_PROJECT_INIT_SOURCE_HOME:-$(cd "${FLOW_SKILL_D
 RUNTIME_HOME="${runtime_home:-${ACP_PROJECT_INIT_RUNTIME_HOME:-${HOME}/.agent-runtime/runtime-home}}"
 
 scaffold_cmd=(bash "${SCAFFOLD_SCRIPT}" --profile-id "${profile_id}" --repo-slug "${repo_slug}")
+[[ -n "${forge_provider}" ]] && scaffold_cmd+=(--forge-provider "${forge_provider}")
+[[ -n "${gitea_base_url}" ]] && scaffold_cmd+=(--gitea-base-url "${gitea_base_url}")
+[[ -n "${gitea_token}" ]] && scaffold_cmd+=(--gitea-token "${gitea_token}")
+[[ -n "${gitea_username}" ]] && scaffold_cmd+=(--gitea-username "${gitea_username}")
+[[ -n "${gitea_password}" ]] && scaffold_cmd+=(--gitea-password "${gitea_password}")
 [[ -n "${profile_home}" ]] && scaffold_cmd+=(--profile-home "${profile_home}")
 [[ -n "${repo_root}" ]] && scaffold_cmd+=(--repo-root "${repo_root}")
 [[ -n "${agent_repo_root}" ]] && scaffold_cmd+=(--agent-repo-root "${agent_repo_root}")

package/tools/bin/project-launchd-bootstrap.sh

@@ -54,7 +54,11 @@ if [[ -x "${ENSURE_SYNC_SCRIPT}" ]]; then
   if [[ "${ALWAYS_SYNC}" == "1" ]]; then
     ensure_args=(--force "${ensure_args[@]}")
   fi
-  bash "${ENSURE_SYNC_SCRIPT}" "${ensure_args[@]}"
+  if [[ "${FLOW_SKILL_DIR}" == "${RUNTIME_HOME}"/* ]]; then
+    printf 'RUNTIME_SYNC_SKIPPED=active-runtime-home\n'
+  else
+    bash "${ENSURE_SYNC_SCRIPT}" "${ensure_args[@]}"
+  fi
 elif [[ "${ALWAYS_SYNC}" == "1" || ! -x "${RUNTIME_HEARTBEAT_SCRIPT}" ]]; then
   if [[ -z "${SOURCE_HOME}" ]]; then
     SOURCE_HOME="${FLOW_SKILL_DIR}"

package/tools/bin/project-runtimectl.sh

@@ -107,9 +107,13 @@ LAUNCHCTL_BIN="${ACP_PROJECT_RUNTIME_LAUNCHCTL_BIN:-$(command -v launchctl || tr
 LAUNCH_AGENTS_DIR="${ACP_PROJECT_RUNTIME_LAUNCH_AGENTS_DIR:-${HOME}/Library/LaunchAgents}"
 LAUNCHD_LABEL="${ACP_PROJECT_RUNTIME_LAUNCHD_LABEL:-ai.agent.project.${PROFILE_ID_SLUG}}"
 LAUNCHD_PLIST="${ACP_PROJECT_RUNTIME_LAUNCHD_PLIST:-${LAUNCH_AGENTS_DIR}/${LAUNCHD_LABEL}.plist}"
+SYSTEMCTL_BIN="${ACP_PROJECT_RUNTIME_SYSTEMCTL_BIN:-$(command -v systemctl || true)}"
+SYSTEMD_DIR="${ACP_PROJECT_RUNTIME_SYSTEMD_DIR:-${HOME}/.config/systemd/user}"
+SYSTEMD_UNIT_NAME="${ACP_PROJECT_RUNTIME_SYSTEMD_UNIT:-agent-project-${PROFILE_ID_SLUG}.service}"
 SOURCE_HOME="${ACP_PROJECT_RUNTIME_SOURCE_HOME:-}"
 RUNTIME_HOME="${ACP_PROJECT_RUNTIME_RUNTIME_HOME:-$(resolve_runtime_home)}"
 SYNC_STAMP_FILE="${RUNTIME_HOME}/.agent-control-plane-runtime-sync.env"
+SOURCE_REPO_SYNC_STATE_FILE="${STATE_ROOT}/source-repo-main-sync.env"
 
 case "${delay_seconds}" in
   ''|*[!0-9]*) echo "--delay-seconds must be numeric" >&2; exit 64 ;;
@@ -199,6 +203,13 @@ sync_stamp_value() {
     | sed -e "s/^'//" -e "s/'$//"
 }
 
+source_repo_sync_value() {
+  local key="${1:?key required}"
+  [[ -f "${SOURCE_REPO_SYNC_STATE_FILE}" ]] || return 1
+  awk -F= -v target="${key}" '$1 == target {print $2; exit}' "${SOURCE_REPO_SYNC_STATE_FILE}" 2>/dev/null \
+    | sed -e "s/^'//" -e "s/'$//"
+}
+
 shared_loop_status_value() {
   local key="${1:?key required}"
   local file="${STATE_ROOT}/shared-heartbeat-loop.env"
@@ -377,6 +388,24 @@ launchd_service_state() {
   fi
 }
 
+systemd_service_enabled_for_profile() {
+  [[ -n "${SYSTEMCTL_BIN}" && -x "${SYSTEMCTL_BIN}" ]] || return 1
+  [[ -f "${SYSTEMD_DIR}/${SYSTEMD_UNIT_NAME}" ]] || return 1
+  return 0
+}
+
+systemd_service_state() {
+  if ! systemd_service_enabled_for_profile; then
+    printf 'n/a\n'
+    return 0
+  fi
+  if "${SYSTEMCTL_BIN}" --user is-active --quiet "${SYSTEMD_UNIT_NAME}" 2>/dev/null; then
+    printf 'running\n'
+  else
+    printf 'stopped\n'
+  fi
+}
+
 print_status() {
   local heartbeat=""
   local shared_loop=""
@@ -399,6 +428,15 @@ print_status() {
   local shared_loop_last_status=""
   local shared_loop_started_at=""
   local shared_loop_updated_at=""
+  local source_repo_sync_status=""
+  local source_repo_sync_updated_at=""
+  local source_repo_sync_root=""
+  local source_repo_sync_branch=""
+  local source_repo_sync_remote=""
+  local source_repo_sync_remote_sha=""
+  local source_repo_sync_local_sha=""
+  local source_repo_sync_detail=""
+  local source_repo_sync_aligned="unknown"
 
   heartbeat="$(heartbeat_pid)"
   shared_loop="$(shared_loop_pid)"
@@ -422,6 +460,7 @@ print_status() {
   fi
 
   launchd_state="$(launchd_service_state)"
+  systemd_state="$(systemd_service_state)"
   runtime_sync_status="$(sync_stamp_value "SYNC_STATUS" || true)"
   runtime_sync_updated_at="$(sync_stamp_value "UPDATED_AT" || true)"
   runtime_sync_fingerprint="$(sync_stamp_value "SOURCE_FINGERPRINT" || true)"
@@ -429,6 +468,23 @@ print_status() {
   shared_loop_last_status="$(shared_loop_status_value "STATUS" || true)"
   shared_loop_started_at="$(shared_loop_status_value "STARTED_AT" || true)"
   shared_loop_updated_at="$(shared_loop_status_value "UPDATED_AT" || true)"
+  source_repo_sync_status="$(source_repo_sync_value "STATUS" || true)"
+  source_repo_sync_updated_at="$(source_repo_sync_value "UPDATED_AT" || true)"
+  source_repo_sync_root="$(source_repo_sync_value "SOURCE_REPO_ROOT" || true)"
+  source_repo_sync_branch="$(source_repo_sync_value "DEFAULT_BRANCH" || true)"
+  source_repo_sync_remote="$(source_repo_sync_value "REMOTE_NAME" || true)"
+  source_repo_sync_remote_sha="$(source_repo_sync_value "REMOTE_SHA" || true)"
+  source_repo_sync_local_sha="$(source_repo_sync_value "LOCAL_SHA" || true)"
+  source_repo_sync_detail="$(source_repo_sync_value "DETAIL" || true)"
+  if [[ -n "${source_repo_sync_status}" ]]; then
+    if [[ -n "${source_repo_sync_remote_sha}" && -n "${source_repo_sync_local_sha}" && "${source_repo_sync_remote_sha}" == "${source_repo_sync_local_sha}" ]]; then
+      source_repo_sync_aligned="yes"
+    elif [[ "${source_repo_sync_status}" == "blocked" || "${source_repo_sync_status}" == "failed" ]]; then
+      source_repo_sync_aligned="no"
+    else
+      source_repo_sync_aligned="unknown"
+    fi
+  fi
 
   printf 'PROFILE_ID=%s\n' "${PROFILE_ID}"
   printf 'CONFIG_YAML=%s\n' "${CONFIG_YAML}"
@@ -437,6 +493,7 @@ print_status() {
   printf 'STATE_ROOT=%s\n' "${STATE_ROOT}"
   printf 'RUNTIME_STATUS=%s\n' "${runtime_status}"
   printf 'LAUNCHD_STATE=%s\n' "${launchd_state}"
+  printf 'SYSTEMD_STATE=%s\n' "${systemd_state}"
   printf 'LAUNCHD_LABEL=%s\n' "${LAUNCHD_LABEL}"
   printf 'LAUNCHD_PLIST=%s\n' "${LAUNCHD_PLIST}"
   printf 'HEARTBEAT_PID=%s\n' "${heartbeat}"
@@ -459,6 +516,16 @@ print_status() {
   printf 'RUNTIME_SYNC_STATUS=%s\n' "${runtime_sync_status}"
   printf 'RUNTIME_SYNC_UPDATED_AT=%s\n' "${runtime_sync_updated_at}"
   printf 'RUNTIME_SYNC_FINGERPRINT=%s\n' "${runtime_sync_fingerprint}"
+  printf 'SOURCE_REPO_SYNC_STATE_FILE=%s\n' "${SOURCE_REPO_SYNC_STATE_FILE}"
+  printf 'SOURCE_REPO_SYNC_STATUS=%s\n' "${source_repo_sync_status}"
+  printf 'SOURCE_REPO_SYNC_UPDATED_AT=%s\n' "${source_repo_sync_updated_at}"
+  printf 'SOURCE_REPO_SYNC_ROOT=%s\n' "${source_repo_sync_root}"
+  printf 'SOURCE_REPO_SYNC_BRANCH=%s\n' "${source_repo_sync_branch}"
+  printf 'SOURCE_REPO_SYNC_REMOTE=%s\n' "${source_repo_sync_remote}"
+  printf 'SOURCE_REPO_SYNC_REMOTE_SHA=%s\n' "${source_repo_sync_remote_sha}"
+  printf 'SOURCE_REPO_SYNC_LOCAL_SHA=%s\n' "${source_repo_sync_local_sha}"
+  printf 'SOURCE_REPO_SYNC_DETAIL=%s\n' "${source_repo_sync_detail}"
+  printf 'SOURCE_REPO_SYNC_ALIGNED=%s\n' "${source_repo_sync_aligned}"
 }
 
 terminate_pid_list() {
@@ -518,7 +585,7 @@ clear_running_labels_after_stop() {
   fi
 
   issue_json="$(flow_github_issue_list_json "${REPO_SLUG}" open 100 2>/dev/null || printf '[]\n')"
-  if [[ "${issue_json}" == "[]" ]]; then
+  if [[ "${issue_json}" == "[]" ]] && ! flow_using_gitea; then
     issue_json="$(gh issue list -R "${REPO_SLUG}" --state open --limit 100 --json number,labels 2>/dev/null || printf '[]\n')"
   fi
   while IFS= read -r number; do
@@ -527,7 +594,7 @@ clear_running_labels_after_stop() {
   done < <(jq -r '.[] | select(any(.labels[]?; .name == "agent-running")) | .number' <<<"${issue_json}" 2>/dev/null || true)
 
   pr_json="$(flow_github_pr_list_json "${REPO_SLUG}" open 100 2>/dev/null || printf '[]\n')"
-  if [[ "${pr_json}" == "[]" ]]; then
+  if [[ "${pr_json}" == "[]" ]] && ! flow_using_gitea; then
     pr_json="$(gh pr list -R "${REPO_SLUG}" --state open --limit 100 --json number,labels 2>/dev/null || printf '[]\n')"
   fi
   while IFS= read -r number; do
@@ -543,6 +610,7 @@ stop_runtime() {
   local session=""
   local pid=""
   local launchd_stopped="no"
+  local systemd_stopped="no"
 
   while IFS= read -r session; do
     [[ -n "${session}" ]] || continue
@@ -575,6 +643,11 @@ stop_runtime() {
     launchd_stopped="yes"
   fi
 
+  if systemd_service_enabled_for_profile; then
+    "${SYSTEMCTL_BIN}" --user stop "${SYSTEMD_UNIT_NAME}" >/dev/null 2>&1 || true
+    systemd_stopped="yes"
+  fi
+
   if [[ -n "${TMUX_BIN}" ]]; then
     for session in "${tmux_sessions[@]+"${tmux_sessions[@]}"}"; do
       "${TMUX_BIN}" kill-session -t "${session}" >/dev/null 2>&1 || true
@@ -592,6 +665,7 @@ stop_runtime() {
   printf 'ACTION=stop\n'
   printf 'PROFILE_ID=%s\n' "${PROFILE_ID}"
   printf 'LAUNCHD_STOPPED=%s\n' "${launchd_stopped}"
+  printf 'SYSTEMD_STOPPED=%s\n' "${systemd_stopped}"
   printf 'STOPPED_PID_COUNT=%s\n' "$(printf '%s\n' "${pid_targets[@]+"${pid_targets[@]}"}" | awk 'NF {c+=1} END {print c+0}')"
   printf 'STOPPED_TMUX_SESSION_COUNT=%s\n' "$(printf '%s\n' "${tmux_sessions[@]+"${tmux_sessions[@]}"}" | awk 'NF {c+=1} END {print c+0}')"
   printf 'STOPPED_STALE_TMUX_SESSION_COUNT=%s\n' "$(printf '%s\n' "${stale_tmux_sessions[@]+"${stale_tmux_sessions[@]}"}" | awk 'NF {c+=1} END {print c+0}')"
@@ -635,6 +709,21 @@ start_runtime() {
     return 0
   fi
 
+  if systemd_service_enabled_for_profile; then
+    "${SYSTEMCTL_BIN}" --user restart "${SYSTEMD_UNIT_NAME}" >/dev/null 2>&1 || true
+    for _ in 1 2 3 4 5 6 7 8 9 10; do
+      if "${SYSTEMCTL_BIN}" --user is-active --quiet "${SYSTEMD_UNIT_NAME}" 2>/dev/null; then
+        break
+      fi
+      sleep 1
+    done
+    printf 'ACTION=start\n'
+    printf 'PROFILE_ID=%s\n' "${PROFILE_ID}"
+    printf 'START_MODE=systemd\n'
+    printf 'SYSTEMD_UNIT=%s\n' "${SYSTEMD_UNIT_NAME}"
+    return 0
+  fi
+
   kick_output="$(ACP_PROJECT_ID="${PROFILE_ID}" AGENT_PROJECT_ID="${PROFILE_ID}" bash "${KICK_SCRIPT}" "${delay_seconds}")"
   if wait_for_runtime_start "${start_timeout}"; then
     runtime_started_after_kick="1"

package/tools/bin/project-systemd-bootstrap.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+flow_skill_dir="$(cd "${script_dir}/../.." && pwd)"
+home_dir="${ACP_PROJECT_RUNTIME_HOME_DIR:-${HOME:-}}"
+profile_registry_root="${ACP_PROJECT_RUNTIME_PROFILE_REGISTRY_ROOT:-${ACP_PROFILE_REGISTRY_ROOT:-${home_dir}/.agent-runtime/control-plane/profiles}}"
+profile_id="${ACP_PROJECT_RUNTIME_PROFILE_ID:-${ACP_PROJECT_ID:-${AGENT_PROJECT_ID:-}}}"
+env_file="${ACP_PROJECT_RUNTIME_ENV_FILE:-${profile_registry_root}/${profile_id}/runtime.env}"
+
+if [[ -z "${home_dir}" ]]; then
+  echo "project systemd bootstrap requires HOME or ACP_PROJECT_RUNTIME_HOME_DIR" >&2
+  exit 64
+fi
+
+if [[ -z "${profile_id}" ]]; then
+  echo "project systemd bootstrap requires ACP_PROJECT_RUNTIME_PROFILE_ID or ACP_PROJECT_ID" >&2
+  exit 64
+fi
+
+export HOME="${home_dir}"
+export ACP_PROFILE_REGISTRY_ROOT="${profile_registry_root}"
+export ACP_PROJECT_ID="${profile_id}"
+export AGENT_PROJECT_ID="${profile_id}"
+
+if [[ -f "${env_file}" ]]; then
+  set -a
+  # shellcheck source=/dev/null
+  source "${env_file}"
+  set +a
+fi
+
+# Resolve launch paths after runtime.env overrides are loaded so systemd can
+# pin the project runtime to a source checkout or alternate runtime home.
+source_home="${ACP_PROJECT_RUNTIME_SOURCE_HOME:-}"
+runtime_home="${ACP_PROJECT_RUNTIME_RUNTIME_HOME:-${home_dir}/.agent-runtime/runtime-home}"
+base_path="${ACP_PROJECT_RUNTIME_PATH:-/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin}"
+sync_script="${ACP_PROJECT_RUNTIME_SYNC_SCRIPT:-${flow_skill_dir}/tools/bin/sync-shared-agent-home.sh}"
+ensure_sync_script="${ACP_PROJECT_RUNTIME_ENSURE_SYNC_SCRIPT:-${flow_skill_dir}/tools/bin/ensure-runtime-sync.sh}"
+runtime_heartbeat_script="${ACP_PROJECT_RUNTIME_HEARTBEAT_SCRIPT:-${runtime_home}/skills/openclaw/agent-control-plane/tools/bin/heartbeat-safe-auto.sh}"
+always_sync="${ACP_PROJECT_RUNTIME_ALWAYS_SYNC:-0}"
+export PATH="${base_path}"
+
+if [[ ! -x "${ensure_sync_script}" && ! -x "${sync_script}" ]]; then
+  echo "project systemd bootstrap missing sync helper: ${ensure_sync_script}" >&2
+  exit 65
+fi
+
+if [[ -x "${ensure_sync_script}" ]]; then
+  ensure_args=(--runtime-home "${runtime_home}" --quiet)
+  if [[ -n "${source_home}" ]]; then
+    ensure_args=(--source-home "${source_home}" "${ensure_args[@]}")
+  fi
+  if [[ "${always_sync}" == "1" ]]; then
+    ensure_args=(--force "${ensure_args[@]}")
+  fi
+  if [[ "${flow_skill_dir}" == "${runtime_home}"/* ]]; then
+    printf 'RUNTIME_SYNC_SKIPPED=active-runtime-home\n'
+  else
+    bash "${ensure_sync_script}" "${ensure_args[@]}"
+  fi
+elif [[ "${always_sync}" == "1" || ! -x "${runtime_heartbeat_script}" ]]; then
+  if [[ -z "${source_home}" ]]; then
+    source_home="${flow_skill_dir}"
+  fi
+  bash "${sync_script}" "${source_home}" "${runtime_home}" >/dev/null
+fi
+
+if [[ ! -x "${runtime_heartbeat_script}" ]]; then
+  echo "project systemd bootstrap missing runtime heartbeat: ${runtime_heartbeat_script}" >&2
+  exit 66
+fi
+
+exec bash "${runtime_heartbeat_script}"