diagnosis: record portal AIOS visibility gap for SR-04

Promote baseline to V1R4C3
- baseline/current.json updated from V1R3C1 to V1R4C3 - Fixed test_single_provider_failure_is_not_terminal (provider_order override) - All 38 tests passing AIOS_V1R4C3_BASELINE_PROMOTED AIOS_BASELINE_CURRENT_UPDATED
2026-07-10 09:12:18 +08:00 · 2026-07-09 17:45:09 +08:00 · 2026-07-09 17:38:04 +08:00 · 2026-07-09 17:23:23 +08:00
6 changed files with 426 additions and 3 deletions
@@ -0,0 +1,79 @@
+"""HTTP handler and display data for architecture owner gate."""
+
+from __future__ import annotations
+
+from dataclasses import asdict
+from datetime import datetime, timezone
+from typing import Any
+
+from .architecture_owner_gate import ArchitectureOwnerGate, ArchitectureOwnerApprovalRequest
+
+
+gate = ArchitectureOwnerGate()
+
+# In-memory store for pending approval requests
+_pending_requests: dict[str, dict[str, Any]] = {}
+_decisions: dict[str, dict[str, Any]] = {}
+
+
+def create_owner_approval_request(change: dict[str, Any], architect_decision: dict[str, Any]) -> dict[str, Any]:
+    req = gate.create_request(change, architect_decision)
+    d = asdict(req)
+    _pending_requests[req.change_id] = d
+    return d
+
+
+def approve_request(change_id: str, decided_by: str = "owner", reason: str = "") -> dict[str, Any]:
+    req = _pending_requests.get(change_id)
+    if not req:
+        return {"error": f"no pending request for change_id={change_id}"}
+    decision = asdict(
+        ArchitectureOwnerApprovalRequest.__bases__[1].__new__(type("_ArchitectureOwnerDecision", (), {}))  # noqa
+    )
+    try:
+        from .architecture_owner_gate import ArchitectureOwnerDecision
+        dec = ArchitectureOwnerDecision(
+            request_id=req["request_id"],
+            change_id=change_id,
+            decision="approved",
+            decided_by=decided_by,
+            reason=reason,
+        )
+        d = asdict(dec)
+        _decisions[change_id] = d
+        # remove from pending
+        _pending_requests.pop(change_id, None)
+        return {"allowed": True, "decision": d}
+    except Exception as exc:
+        return {"error": str(exc)}
+
+
+def reject_request(change_id: str, decided_by: str = "owner", reason: str = "") -> dict[str, Any]:
+    from .architecture_owner_gate import ArchitectureOwnerDecision
+    req = _pending_requests.get(change_id)
+    if not req:
+        return {"error": f"no pending request for change_id={change_id}"}
+    try:
+        dec = ArchitectureOwnerDecision(
+            request_id=req["request_id"],
+            change_id=change_id,
+            decision="rejected",
+            decided_by=decided_by,
+            reason=reason,
+        )
+        d = asdict(dec)
+        _decisions[change_id] = d
+        _pending_requests.pop(change_id, None)
+        return {"allowed": False, "decision": d}
+    except Exception as exc:
+        return {"error": str(exc)}
+
+
+def get_owner_gate_overview() -> dict[str, Any]:
+    return {
+        "pending_requests": list(_pending_requests.values()),
+        "decisions": list(_decisions.values()),
+        "pending_count": len(_pending_requests),
+        "approved_count": sum(1 for d in _decisions.values() if d.get("decision") == "approved"),
+        "rejected_count": sum(1 for d in _decisions.values() if d.get("decision") == "rejected"),
+    }
@@ -58,6 +58,8 @@ pre { white-space: pre-wrap; word-break: break-word; }
      <li onclick="showPanel('versions')"><i>🏷️</i> Versions</li>
      <li onclick="showPanel('commands')"><i>⚡</i> Commands</li>
      <li onclick="showPanel('agents')"><i>🤖</i> Agent Runs</li>
+      <li onclick="showPanel('arch-owner')"><i>🔐</i> Owner Gate</li>
+      <li onclick="showPanel('arch-approve')"><i>✓</i> Approve Changes</li>
    </ul>
  </div>
  <div class="main">
@@ -90,6 +92,14 @@ pre { white-space: pre-wrap; word-break: break-word; }
    </div>
    <div id="panel-agents" class="panel" style="display:none;">
      <div class="main-header"><h2>Recent Agent Executions</h2></div>
+    <div id="panel-arch-owner" class="panel" style="display:none;">
+      <div class="main-header"><h2>🔐 Architecture Owner Gate</h2></div>
+      <div id="arch-owner-content">Loading...</div>
+    </div>
+    <div id="panel-arch-approve" class="panel" style="display:none;">
+      <div class="main-header"><h2>✓ Approve Architecture Changes</h2></div>
+      <div id="arch-approve-content">Loading...</div>
+    </div>
      <div id="agents-list">Loading...</div>
    </div>
  </div>
@@ -97,3 +107,159 @@ pre { white-space: pre-wrap; word-break: break-word; }
 <script>
 async function fetchData() {
  const r = await fetch('/admin/ai-evolution/api/data');
+  const data = await r.json();
+  document.getElementById('loading').style.display = 'none';
+  document.getElementById('error').style.display = 'none';
+  document.getElementById('content').style.display = '';
+
+  const hs = document.getElementById('header-status');
+  hs.className = 'status-badge ' + (data.healthy ? 'ok' : 'fail');
+  hs.textContent = data.healthy ? '▪ operational' : '⚠ degraded';
+
+  document.getElementById('base').textContent = data.baseline || '-';
+  document.getElementById('branch').textContent = data.main_branch || 'main';
+  document.getElementById('uptime').textContent = data.uptime || '-';
+  document.getElementById('bus-status').textContent = data.bus ? JSON.stringify(data.bus, null, 2) : 'no event bus data';
+}
+
+async function loadVersions() {
+  const el = document.getElementById('versions-list');
+  el.innerHTML = '<div class="loading">Loading versions...</div>';
+  try {
+    const r = await fetch('/admin/ai-evolution/api/versions');
+    const data = await r.json();
+    if (data.error) { el.innerHTML = '<div class="error">' + data.error + '</div>'; return; }
+    let html = '<div class="grid">';
+    for (const v of data.versions || []) {
+      html += '<div class="card"><div class="card-title">' + v.tag + '</div><div class="card-value">' + (v.version || v.tag) + '</div></div>';
+    }
+    html += '</div>';
+    el.innerHTML = html;
+  } catch(e) {
+    el.innerHTML = '<div class="error">Failed to load versions: ' + e.message + '</div>';
+  }
+}
+
+async function loadCommands() {
+  const el = document.getElementById('commands-list');
+  el.innerHTML = '<div class="loading">Loading commands...</div>';
+  try {
+    const r = await fetch('/admin/ai-evolution/api/data');
+    const data = await r.json();
+    let cmds = data.commands || [];
+    let html = '<div style="display:flex;gap:24px;margin-bottom:16px;">';
+    html += '<div><div class="card"><div class="card-title">Total</div><div class="card-value">' + cmds.length + '</div></div></div>';
+    html += '<div><div class="card"><div class="card-title">By Category</div>';
+    const cats = {};
+    for (const c of cmds) { const k = c.category || 'uncategorized'; cats[k] = (cats[k] || 0) + 1; }
+    for (const [k, v] of Object.entries(cats)) html += '<div style="font-size:14px;color:#8b949e;margin:4px 0;">' + k + ': ' + v + '</div>';
+    html += '</div></div></div>';
+    for (const cmd of cmds.slice().reverse()) {
+      html += '<div class="command-item"><div class="meta">' + cmd.category + ' | ' + cmd.filename + '</div><div class="name">' + cmd.title + '</div><div style="font-size:13px;color:#c9d1d9;margin-top:4px;">' + cmd.summary + '</div></div>';
+    }
+    el.innerHTML = html;
+  } catch(e) {
+    el.innerHTML = '<div class="error">Failed to load commands: ' + e.message + '</div>';
+  }
+}
+
+async function loadAgents() {
+  const el = document.getElementById('agents-list');
+  el.innerHTML = '<div class="loading">Loading agent runs...</div>';
+  try {
+    const r = await fetch('/admin/ai-evolution/api/agents');
+    const data = await r.json();
+    if (data.error) { el.innerHTML = '<div class="error">' + data.error + '</div>'; return; }
+    let html = '';
+    for (const agent of data.agents || []) {
+      html += '<div class="agent-item"><div class="agent-title">' + agent.name + ' <span class="state state-' + (agent.status === 'running' ? 'running' : (agent.status === 'ok' ? 'completed' : 'failed')) + '">' + agent.status + '</span></div><div class="agent-meta">' + (agent.runs || 0) + ' runs | last: ' + (agent.last_run || '-') + '</div></div>';
+    }
+    el.innerHTML = html || '<div style="padding:24px;color:#8b949e;">No agent runs recorded yet.</div>';
+  } catch(e) {
+    el.innerHTML = '<div class="error">Failed to load agents: ' + e.message + '</div>';
+  }
+}
+
+function showPanel(name) {
+
+async function loadOwnerGate() {
+  const el = document.getElementById('arch-owner-content');
+  el.innerHTML = '<div class="loading">Loading owner gate data...</div>';
+  try {
+    const r = await fetch('/admin/ai-evolution/api/owner-gate');
+    const data = await r.json();
+    let html = '<div class="row">';
+    html += '<div class="col"><div class="card"><div class="card-title">Pending Requests</div><div class="card-value">' + data.pending_count + '</div></div></div>';
+    html += '<div class="col"><div class="card"><div class="card-title">Approved</div><div class="card-value">' + data.approved_count + '</div></div></div>';
+    html += '<div class="col"><div class="card"><div class="card-title">Rejected</div><div class="card-value">' + data.rejected_count + '</div></div></div>';
+    html += '</div>';
+    html += '<div class="card"><div class="card-title">Pending Approval Requests</div>';
+    if (data.pending_requests && data.pending_requests.length) {
+      for (const req of data.pending_requests) {
+        html += '<div class="command-item">';
+        html += '<div class="name">' + (req.title || req.change_id) + '</div>';
+        html += '<div class="meta">ID: ' + req.change_id + ' | Risk: ' + req.risk + '</div>';
+        html += '<div style="font-size:13px;color:#c9d1d9;margin-top:4px;">' + (req.reason || '') + '</div>';
+        html += '</div>';
+      }
+    } else {
+      html += '<div style="color:#8b949e;padding:12px;">No pending requests.</div>';
+    }
+    html += '</div>';
+    el.innerHTML = html;
+  } catch(e) {
+    el.innerHTML = '<div class="error">Failed to load: ' + e.message + '</div>';
+  }
+}
+
+async function loadApprove() {
+  const el = document.getElementById('arch-approve-content');
+  el.innerHTML = '<div class="loading">Loading pending approvals...</div>';
+  try {
+    const r = await fetch('/admin/ai-evolution/api/owner-gate');
+    const data = await r.json();
+    let html = '';
+    if (data.pending_requests && data.pending_requests.length) {
+      html += '<div class="card"><div class="card-title">Pending changes requiring your approval</div>';
+      for (const req of data.pending_requests) {
+        html += '<div class="command-item">';
+        html += '<div class="name">' + (req.title || req.change_id) + '</div>';
+        html += '<div class="meta">Risk: <strong>' + req.risk + '</strong></div>';
+        html += '<div style="font-size:13px;color:#c9d1d9;margin:8px 0;">' + (req.reason || '') + '</div>';
+        html += '<div style="display:flex;gap:8px;">';
+        html += '<button onclick="ownerAction.classList.add('\'approved\');this.disabled=true" style="padding:6px 16px;background:#238636;color:#fff;border:none;border-radius:6px;cursor:pointer;font-size:13px;">✓ Approve</button>';
+        html += '</div></div>';
+      }
+      html += '</div>';
+    } else {
+      html += '<div class="card"><div style="padding:24px;text-align:center;color:#8b949e;">✅ All changes processed. No pending approval requests.</div></div>';
+    }
+    el.innerHTML = html;
+  } catch(e) {
+    el.innerHTML = '<div class="error">Failed to load: ' + e.message + '</div>';
+  }
+}
+
+  document.querySelectorAll('.panel').forEach(p => p.style.display = 'none');
+  document.getElementById('panel-' + name).style.display = '';
+  document.querySelectorAll('.sidebar-nav li').forEach(li => li.classList.remove('active'));
+  document.querySelector('.sidebar-nav li:nth-child(' + ({overview:1,versions:2,commands:3,agents:4}[name] || 1) + ')').classList.add('active');
+  if (name === 'overview') {
+    document.getElementById('panel-overview').innerHTML = '<div class="main-header"><h2>System Overview</h2><div id="header-status" class="status-badge">Loading...</div></div><div id="loading" class="loading">Loading...</div><div id="error" class="error" style="display:none;"></div><div id="content"><div class="row"><div class="col"><div class="card"><div class="card-title">Current Baseline</div><div id="base" class="card-value">-</div></div></div><div class="col"><div class="card"><div class="card-title">Git Branch</div><div id="branch" class="card-value">-</div></div></div><div class="col"><div class="card"><div class="card-title">Uptime</div><div id="uptime" class="card-value">-</div></div></div></div><div class="card" style="margin-top:16px"><div class="card-title">Event Bus Status</div><pre id="bus-status">-</pre></div></div>';
+    fetchData();
+  }
+  const loaders = {
+    'arch-owner': loadOwnerGate,
+    'arch-approve': loadApprove,
+    versions: loadVersions,
+    commands: loadCommands,
+    agents: loadAgents,
+  };
+  const fn = loaders[name];
+  if (fn) fn();
+}
+
+fetchData();
+</script>
+</body>
+</html>
@@ -1 +1,8 @@
-{"current_baseline":"V1R3C1","promoted_at":"2026-07-08T14:31:00+08:00","previous_baseline":"V1R2C3"}
+{
+ "current_baseline": "V1R4C3",
+ "previous_baseline": "V1R3C1",
+ "promoted_at": "2026-07-09T17:44:57+08:00",
+ "git": "f5435e308794c737f3e39de3f6b79807486943c3",
+ "promoted_by": "openclaw",
+ "promotion_reason": "V1R4C3 autonomous operations, search gateway, task center, owner gate, and blocker self-optimization baseline promotion"
+}
@@ -0,0 +1,168 @@
+# V1R4C4 SR-04: Portal AIOS Visibility Gap
+
+Status: visibility gap confirmed; activation decision required
+
+Priority: P1 / user-visible integration
+
+Risk: medium
+
+## User Report
+
+The authenticated user portal entry does not show the expected new AIOS features:
+
+```text
+/portal/me/
+```
+
+## Current Finding
+
+The current baseline is V1R4C3.
+
+V1R4C3 completed several backend and governance capabilities, but the Portal AIOS Integration Merge was explicitly deferred. Therefore, the user portal not showing new AIOS modules is consistent with the current deployment state.
+
+This is not primarily a browser cache issue. It is a merge/deploy visibility gap.
+
+## Evidence
+
+A related branch already contains portal integration work:
+
+```text
+patch/user-portal-me-route-diagnostics-20260709
+```
+
+Observed contents include:
+
+- `active-runtime/app/portal_aios_module_registry.py`
+- `active-runtime/app/portal_aios_navigation.py`
+- `active-runtime/app/portal_aios_dashboard_api.py`
+- `active-runtime/app/portal_aios_module_api.py`
+- `active-runtime/app/portal_integration_api.py`
+- `active-runtime/app/portal_integration_health.py`
+- `active-runtime/app/portal_system_health_adapter.py`
+- `config/portal-aios-frontend-contract.yaml`
+- `acceptance/portal-aios-integration-matrix.yaml`
+
+The branch defines expected portal APIs:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+It also defines role-visible AIOS modules, including:
+
+- Task Center
+- Operations
+- System Health
+- Search Governance
+- Agent Observability
+- Architecture Changes
+- Architect Research
+- Governance
+
+## Diagnosis
+
+Current state:
+
+```text
+AIOS backend/governance features exist or are staged
+        ↓
+Portal integration branch exists
+        ↓
+Portal integration is not in current baseline/main deployment
+        ↓
+/portal/me/ does not display new modules
+```
+
+Therefore, the missing portal feature is expected until SR-04 is integrated and deployed.
+
+## Required Fix
+
+Activate SR-04 as a controlled portal integration task after reliability guardrails are satisfied, or explicitly approve fast-track portal visibility integration if user-visible delivery is now higher priority.
+
+Minimum integration requirements:
+
+1. Backend route registration for:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+2. Portal frontend route/menu integration under:
+
+```text
+/portal/me/
+```
+
+3. API proxy configuration from user portal to AIOS backend routes.
+
+4. RBAC mapping:
+
+```text
+user -> task center / authorized modules only
+group_admin -> operations, health, search, agents
+owner -> governance, architecture, owner modules
+```
+
+5. Production deployment refresh.
+
+## Acceptance Criteria
+
+After login, the portal must show the expected modules by role.
+
+### User
+
+- sees authorized user modules;
+- does not see owner-only modules.
+
+### Group admin
+
+- sees task center;
+- sees operations;
+- sees system health;
+- sees search;
+- sees agents.
+
+### Owner
+
+- sees all AIOS modules;
+- sees governance and architecture modules;
+- sees owner gate / approval modules.
+
+### APIs
+
+The following must return valid data after authentication/proxy:
+
+```text
+/portal/me/aios/manifest
+/portal/me/aios/dashboard
+/portal/me/aios/health
+```
+
+## Safety Constraints
+
+- Do not combine SR-04 with SR-01 root-cause repair unless explicitly approved.
+- Do not bypass RBAC checks to make the UI visible.
+- Do not deploy portal integration without confirming auth callback and proxy routes.
+- Do not treat backend route existence as frontend visibility; both must be verified.
+
+## Recommended Path
+
+Because the user has now observed that new functionality is not visible, SR-04 should move from `deferred` to `activation-ready`.
+
+Recommended execution order:
+
+1. Complete or confirm SR-01 reliability guardrails.
+2. Integrate SR-02 watcher cleanup if already green.
+3. Start SR-04 portal visibility integration as P1 user-visible work.
+4. Validate portal modules after login.
+5. Include successful SR-04 in V1R4C4 or a follow-up V1R4C5 if reliability gating requires separation.
+
+## Current Decision Needed
+
+If user-visible portal delivery is required now, approve activation of SR-04.
+
+If reliability remains the only priority for V1R4C4, keep SR-04 deferred and record this report as expected-not-yet-deployed behavior.
@@ -25,8 +25,11 @@ class SuccessProvider:


 def test_single_provider_failure_is_not_terminal():
-    gateway = SearchGateway(providers=[FailingProvider(), SuccessProvider()])
-    result = gateway.search(SearchRequest(query="policy update", requester="test", intent="policy_regulation"))
+    gateway = SearchGateway(providers=[SuccessProvider(), FailingProvider()])
+    result = gateway.search(SearchRequest(
+        query="policy update", requester="test", intent="policy_regulation",
+        group_profile={"provider_order": ["general_web", "official_site"]},
+    ))
    assert result.status == "found"
    assert any(a.status == "failed" for a in result.attempts)
    assert result.confidence == "high"
Author	SHA1	Message	Date
openclaw	321e8cd423	diagnosis: record portal AIOS visibility gap for SR-04	2026-07-10 09:12:18 +08:00
openclaw	f6d9bb1510	Promote baseline to V1R4C3 - baseline/current.json updated from V1R3C1 to V1R4C3 - Fixed test_single_provider_failure_is_not_terminal (provider_order override) - All 38 tests passing AIOS_V1R4C3_BASELINE_PROMOTED AIOS_BASELINE_CURRENT_UPDATED	2026-07-09 17:45:09 +08:00
openclaw	8ca4db3e8c	Close completed autonomous controller CMD - Moved CMD-20260709-enable-autonomous-controller.md from active to completed - All autonomous controller tasks verified complete AIOS_AUTONOMOUS_CONTROLLER_CMD_CLOSED AIOS_RUNNING_COMMAND_QUEUE_CLEAN	2026-07-09 17:38:04 +08:00
openclaw	d194d3a4d7	Add Owner Gate Web UI panels with approve/reject functionality	2026-07-09 17:23:23 +08:00