chore: refresh branch timestamp

active-runtime/app/adaptive_policy.py

@@ -0,0 +1,93 @@
+"""Adaptive policy engine for self-loop optimization.
+
+Optimizes retry, cooldown, and low-risk automation choices from failure history.
+It never disables owner gates or security controls.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass
+from typing import Any
+
+from .failure_memory import FailureMemory
+
+
+@dataclass(frozen=True)
+class AdaptiveDecision:
+    retry_limit: int
+    cooldown_seconds: int
+    automation_level: str
+    risk_level: str
+    owner_approval_required: bool
+    reasons: tuple[str, ...]
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class AdaptivePolicy:
+    def __init__(self, default_retry_limit: int = 3, default_cooldown_seconds: int = 30):
+        self.default_retry_limit = default_retry_limit
+        self.default_cooldown_seconds = default_cooldown_seconds
+
+    def evaluate(
+        self,
+        memory: FailureMemory,
+        runtime: dict[str, Any],
+        baseline: dict[str, Any],
+        goal: str,
+    ) -> AdaptiveDecision:
+        reasons: list[str] = []
+        retry_limit = self.default_retry_limit
+        cooldown = self.default_cooldown_seconds
+        risk = "low"
+        automation = "safe"
+
+        top = memory.top_failures(1)
+        if top:
+            score = float(top[0].get("recurrence_score", 0))
+            if score >= 0.7:
+                retry_limit = 1
+                cooldown = 300
+                risk = "high"
+                automation = "analysis_only"
+                reasons.append("recurrent failure detected; reduce automatic retries")
+            elif score >= 0.4:
+                cooldown = 120
+                reasons.append("failure recurrence increasing; slow down loop")
+
+        if runtime.get("status") != "active":
+            risk = "high"
+            automation = "analysis_only"
+            reasons.append("runtime not healthy")
+
+        if baseline.get("codex_gitops", {}).get("direct_main_push"):
+            risk = "high"
+            automation = "analysis_only"
+            reasons.append("direct main push policy drift")
+
+        owner_gate = True
+        reasons.append("owner gate preserved")
+
+        if not reasons:
+            reasons.append(f"optimize policy for goal: {goal}")
+
+        return AdaptiveDecision(
+            retry_limit=retry_limit,
+            cooldown_seconds=cooldown,
+            automation_level=automation,
+            risk_level=risk,
+            owner_approval_required=owner_gate,
+            reasons=tuple(reasons),
+        )
+
+    def apply_to_scheduler(self, decision: AdaptiveDecision) -> dict[str, Any]:
+        return {
+            "max_attempts": decision.retry_limit,
+            "cooldown_seconds": decision.cooldown_seconds,
+            "automation_level": decision.automation_level,
+            "owner_approval_required": decision.owner_approval_required,
+        }
+
+
+__all__ = ["AdaptiveDecision", "AdaptivePolicy"]

active-runtime/app/agent_context_api.py

@@ -1,56 +0,0 @@
-"""API adapter for agent context routing and visibility."""
-
-from typing import Any
-
-try:
-    from fastapi import APIRouter
-except Exception:
-    APIRouter = None
-
-from .agent_context_dashboard import AgentContextDashboard
-from .agent_context_rbac import AgentContextRBAC
-from .agent_context_resolver import AgentContextResolver
-
-resolver = AgentContextResolver()
-rbac = AgentContextRBAC()
-dashboard = AgentContextDashboard()
-
-
-def resolve_agent_context(payload: dict[str, Any]) -> dict[str, Any]:
-    route = rbac.route(payload["user_id"], payload.get("group_id"), payload.get("role", "user"))
-    context = resolver.resolve(
-        user_id=payload["user_id"],
-        group_id=payload.get("group_id", ""),
-        session=payload.get("session"),
-        user_profile=payload.get("user_profile"),
-        group_policy=payload.get("group_policy"),
-        agent_default=payload.get("agent_default"),
-        owner_policy=payload.get("owner_policy"),
-        owner=payload.get("role") == "owner",
-    )
-    return {"routing": route.to_dict(), "context": context.to_dict()}
-
-
-def get_context_dashboard() -> dict[str, Any]:
-    return dashboard.overview()
-
-
-def build_router():
-    if APIRouter is None:
-        return None
-    router = APIRouter(prefix="/admin/ai-evolution/context", tags=["context-isolation"])
-
-    @router.post("/resolve", operation_id="resolveAgentContext")
-    def resolve(payload: dict[str, Any]):
-        return resolve_agent_context(payload)
-
-    @router.get("/overview", operation_id="getAgentContextDashboard")
-    def overview():
-        return get_context_dashboard()
-
-    return router
-
-
-router = build_router()
-
-__all__ = ["router", "resolve_agent_context", "get_context_dashboard"]

active-runtime/app/agent_context_audit.py

@@ -1,23 +0,0 @@
-"""Audit context resolution decisions."""
-
-from datetime import datetime, timezone
-from typing import Any
-
-
-def utc_now():
-    return datetime.now(timezone.utc).isoformat()
-
-
-class AgentContextAudit:
-    def record(self, context: dict[str, Any]) -> dict[str, Any]:
-        return {
-            "event": "context_loaded",
-            "agent_id": context.get("agent_id"),
-            "user_id": context.get("user_id"),
-            "group_id": context.get("group_id"),
-            "layers": [x.get("name") for x in context.get("layers", [])],
-            "timestamp": utc_now(),
-        }
-
-
-__all__ = ["AgentContextAudit"]

active-runtime/app/agent_context_dashboard.py

@@ -1,47 +0,0 @@
-"""Web UI model for context isolation visibility."""
-
-from __future__ import annotations
-
-from typing import Any
-
-
-class AgentContextDashboard:
-    def overview(self, contexts: list[dict[str, Any]] | None = None) -> dict[str, Any]:
-        contexts = contexts or []
-        return {
-            "module": "agent-context-isolation",
-            "route": "/admin/ai-evolution/context",
-            "title": "Agent Context Isolation",
-            "panels": [
-                {
-                    "name": "agent-routing",
-                    "title": "Agent 路由",
-                    "data": contexts,
-                },
-                {
-                    "name": "context-layers",
-                    "title": "Context 来源层级",
-                    "layers": [
-                        "safety_policy",
-                        "owner_policy",
-                        "group_policy",
-                        "role_policy",
-                        "user_profile",
-                        "session_context",
-                        "agent_default",
-                    ],
-                },
-                {
-                    "name": "audit",
-                    "title": "Context 审计",
-                    "events": [
-                        "context_loaded",
-                        "profile_updated",
-                        "agent_selected",
-                    ],
-                },
-            ],
-        }
-
-
-__all__ = ["AgentContextDashboard"]

active-runtime/app/agent_context_rbac.py

@@ -1,55 +0,0 @@
-"""RBAC binding for group main agents and owner agents."""
-
-from __future__ import annotations
-
-from dataclasses import asdict, dataclass
-from typing import Any
-
-
-@dataclass(frozen=True)
-class AgentRoutingDecision:
-    user_id: str
-    group_id: str
-    role: str
-    agent_id: str
-    scope: str
-    allowed: bool
-    reason: str
-
-    def to_dict(self) -> dict[str, Any]:
-        return asdict(self)
-
-
-class AgentContextRBAC:
-    """Routes users to group agents and owners to dedicated owner agents."""
-
-    VALID_ROLES = {"user", "group_admin", "owner"}
-
-    def route(self, user_id: str, group_id: str | None, role: str) -> AgentRoutingDecision:
-        if role not in self.VALID_ROLES:
-            return AgentRoutingDecision(user_id, group_id or "", role, "", "none", False, "unknown_role")
-        if role == "owner":
-            return AgentRoutingDecision(
-                user_id=user_id,
-                group_id=group_id or "global",
-                role=role,
-                agent_id=f"owner-agent:{user_id}",
-                scope="global",
-                allowed=True,
-                reason="owner_dedicated_agent",
-            )
-        if not group_id:
-            return AgentRoutingDecision(user_id, "", role, "", "none", False, "group_required")
-        scope = "group" if role == "group_admin" else "self"
-        return AgentRoutingDecision(
-            user_id=user_id,
-            group_id=group_id,
-            role=role,
-            agent_id=f"group-main-agent:{group_id}",
-            scope=scope,
-            allowed=True,
-            reason="group_agent_routing",
-        )
-
-
-__all__ = ["AgentRoutingDecision", "AgentContextRBAC"]

active-runtime/app/agent_context_resolver.py

@@ -1,82 +0,0 @@
-"""Multi-user agent context resolver.
-
-Architecture:
-- shared agent kernel
-- group main agent
-- owner dedicated agent
-- user profile overlay
-- session overlay
-
-Personal preferences never enter shared USER.md.
-"""
-
-from __future__ import annotations
-
-from dataclasses import asdict, dataclass, field
-from datetime import datetime, timezone
-from typing import Any
-
-
-def utc_now() -> str:
-    return datetime.now(timezone.utc).isoformat()
-
-
-@dataclass(frozen=True)
-class ContextLayer:
-    name: str
-    priority: int
-    data: dict[str, Any]
-
-
-@dataclass
-class EffectiveContext:
-    agent_id: str
-    user_id: str
-    group_id: str
-    layers: list[ContextLayer]
-    resolved: dict[str, Any]
-    resolved_at: str = field(default_factory=utc_now)
-
-    def to_dict(self):
-        return {
-            "agent_id": self.agent_id,
-            "user_id": self.user_id,
-            "group_id": self.group_id,
-            "layers": [asdict(x) for x in self.layers],
-            "resolved": self.resolved,
-            "resolved_at": self.resolved_at,
-        }
-
-
-class AgentContextResolver:
-    """Resolves context without shared user-state pollution."""
-
-    def resolve(
-        self,
-        user_id: str,
-        group_id: str,
-        session: dict[str, Any] | None = None,
-        user_profile: dict[str, Any] | None = None,
-        group_policy: dict[str, Any] | None = None,
-        agent_default: dict[str, Any] | None = None,
-        owner_policy: dict[str, Any] | None = None,
-        owner: bool = False,
-    ) -> EffectiveContext:
-        layers = [
-            ContextLayer("agent_default", 10, agent_default or {}),
-            ContextLayer("group_policy", 30, group_policy or {}),
-            ContextLayer("user_profile", 50, user_profile or {}),
-            ContextLayer("session", 70, session or {}),
-        ]
-        agent_id = f"group-main-agent:{group_id}"
-        if owner:
-            agent_id = f"owner-agent:{user_id}"
-            layers.append(ContextLayer("owner_policy", 90, owner_policy or {}))
-        resolved: dict[str, Any] = {}
-        # Higher priority overlays lower priority except safety policies handled upstream.
-        for layer in sorted(layers, key=lambda x: x.priority):
-            resolved.update(layer.data)
-        return EffectiveContext(agent_id, user_id, group_id, layers, resolved)
-
-
-__all__ = ["ContextLayer", "EffectiveContext", "AgentContextResolver"]

active-runtime/app/agent_event_api.py

@@ -1,77 +0,0 @@
-"""Actions API for unified Agent Event Bus."""
-
-from __future__ import annotations
-
-from typing import Any
-
-try:
-    from fastapi import APIRouter
-except Exception:
-    APIRouter = None
-
-from .agent_event_bus import AgentEventBus
-
-bus = AgentEventBus()
-
-
-def create_agent_event(payload: dict[str, Any]) -> dict[str, Any]:
-    return {"status": "ok", "event": bus.publish(**payload)}
-
-
-def list_agent_events(kind: str | None = None, status: str = "pending") -> dict[str, Any]:
-    return {"status": "ok", "events": bus.list_events(kind, status)}
-
-
-def get_agent_event(event_id: str) -> dict[str, Any]:
-    return {"status": "ok", "event": bus.get(event_id)}
-
-
-def transition_agent_event(event_id: str, status: str, actor: str = "system") -> dict[str, Any]:
-    return {"status": "ok", "event": bus.transition(event_id, status, actor)}
-
-
-def agent_event_stats() -> dict[str, Any]:
-    return {"status": "ok", "stats": bus.stats()}
-
-
-# Compatibility adapters
-
-def list_gpt_inbox_messages():
-    return list_agent_events(kind="gpt_inbox")
-
-
-def ack_gpt_inbox_message(event_id: str):
-    return transition_agent_event(event_id, "completed", "custom-gpt")
-
-
-def build_router():
-    if APIRouter is None:
-        return None
-    router = APIRouter(prefix="/agent-events", tags=["agent-events"])
-
-    @router.post("", operation_id="createAgentEvent")
-    def create(payload: dict[str, Any]):
-        return create_agent_event(payload)
-
-    @router.get("", operation_id="listAgentEvents")
-    def listing(kind: str | None = None, status: str = "pending"):
-        return list_agent_events(kind, status)
-
-    @router.get("/{event_id}", operation_id="getAgentEvent")
-    def get(event_id: str):
-        return get_agent_event(event_id)
-
-    @router.post("/{event_id}/transition", operation_id="transitionAgentEvent")
-    def transition(event_id: str, payload: dict[str, Any]):
-        return transition_agent_event(event_id, payload["status"], payload.get("actor", "system"))
-
-    @router.get("/stats/overview", operation_id="getAgentEventStats")
-    def stats():
-        return agent_event_stats()
-
-    return router
-
-
-router = build_router()
-
-__all__ = ["router", "create_agent_event", "list_agent_events", "get_agent_event", "transition_agent_event"]

active-runtime/app/agent_event_bus.py

@@ -1,125 +0,0 @@
-"""Unified Agent Event Bus.
-
-Unifies commands, GPT messages, replies, approvals, audit and reports into one
-state machine. Compatibility layers can filter events by kind instead of keeping
-separate queues.
-"""
-
-from __future__ import annotations
-
-from dataclasses import asdict, dataclass, field
-from datetime import datetime, timezone
-from hashlib import sha256
-from pathlib import Path
-import json
-from typing import Any
-
-
-def utc_now() -> str:
-    return datetime.now(timezone.utc).isoformat()
-
-
-@dataclass
-class AgentEvent:
-    id: str
-    kind: str
-    source: str
-    target: str
-    summary: str
-    payload: dict[str, Any]
-    status: str = "pending"
-    correlation_id: str | None = None
-    created_at: str = field(default_factory=utc_now)
-    updated_at: str = field(default_factory=utc_now)
-    actor: str | None = None
-
-    def to_dict(self) -> dict[str, Any]:
-        return asdict(self)
-
-
-class AgentEventBus:
-    STATES = ("pending", "running", "completed", "failed")
-
-    def __init__(self, root: str = "agents/events"):
-        self.root = Path(root)
-        for state in self.STATES:
-            (self.root / state).mkdir(parents=True, exist_ok=True)
-        (self.root / "audit").mkdir(parents=True, exist_ok=True)
-
-    def publish(
-        self,
-        kind: str,
-        source: str,
-        target: str,
-        summary: str,
-        payload: dict[str, Any],
-        correlation_id: str | None = None,
-    ) -> dict[str, Any]:
-        event_id = "evt_" + sha256(
-            json.dumps(
-                {"kind": kind, "source": source, "summary": summary, "payload": payload},
-                sort_keys=True,
-                ensure_ascii=False,
-            ).encode("utf-8")
-        ).hexdigest()[:16]
-        event = AgentEvent(event_id, kind, source, target, summary, payload, correlation_id=correlation_id)
-        self._write("pending", event.to_dict())
-        self._audit("created", event.to_dict())
-        return event.to_dict()
-
-    def list_events(self, kind: str | None = None, status: str = "pending", limit: int = 100) -> list[dict[str, Any]]:
-        result = []
-        for path in sorted((self.root / status).glob("*.json")):
-            event = self._read(path)
-            if kind and event.get("kind") != kind:
-                continue
-            result.append(event)
-        return result[:limit]
-
-    def get(self, event_id: str) -> dict[str, Any] | None:
-        for state in self.STATES:
-            path = self.root / state / f"{event_id}.json"
-            if path.exists():
-                return self._read(path)
-        return None
-
-    def transition(self, event_id: str, status: str, actor: str | None = None) -> dict[str, Any]:
-        event = self.get(event_id)
-        if not event:
-            return {"status": "not_found", "id": event_id}
-        if status not in self.STATES:
-            return {"status": "invalid_state"}
-        old = event.get("status", "pending")
-        old_path = self.root / old / f"{event_id}.json"
-        event["status"] = status
-        event["actor"] = actor
-        event["updated_at"] = utc_now()
-        self._write(status, event)
-        if old_path.exists() and old != status:
-            old_path.unlink()
-        self._audit("transition", event, {"from": old, "to": status})
-        return event
-
-    def stats(self) -> dict[str, Any]:
-        return {
-            "events": {state: len(list((self.root / state).glob("*.json"))) for state in self.STATES},
-            "audit_events": len(list((self.root / "audit").glob("*.json"))),
-            "status": "healthy",
-        }
-
-    def _write(self, state: str, data: dict[str, Any]):
-        (self.root / state / f"{data['id']}.json").write_text(
-            json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8"
-        )
-
-    def _read(self, path: Path):
-        return json.loads(path.read_text(encoding="utf-8"))
-
-    def _audit(self, action: str, event: dict[str, Any], extra: dict[str, Any] | None = None):
-        data = {"action": action, "event": event, "extra": extra or {}, "time": utc_now()}
-        (self.root / "audit" / f"{event['id']}-{action}.json").write_text(
-            json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8"
-        )
-
-
-__all__ = ["AgentEvent", "AgentEventBus"]

active-runtime/app/agent_event_dashboard.py

@@ -1,50 +0,0 @@
-"""Admin dashboard data model for the unified Agent Event Bus."""
-
-from __future__ import annotations
-
-from collections import Counter
-from typing import Any
-
-from .agent_event_bus import AgentEventBus
-
-
-class AgentEventDashboard:
-    def __init__(self, bus: AgentEventBus | None = None):
-        self.bus = bus or AgentEventBus()
-
-    def overview(self) -> dict[str, Any]:
-        stats = self.bus.stats()
-        pending = self.bus.list_events(status="pending")
-        running = self.bus.list_events(status="running")
-        completed = self.bus.list_events(status="completed")
-        failed = self.bus.list_events(status="failed")
-        all_visible = pending + running + completed + failed
-        by_kind = Counter(event.get("kind", "unknown") for event in all_visible)
-        by_target = Counter(event.get("target", "unknown") for event in all_visible)
-        return {
-            "module": "agent-event-bus",
-            "title": "Unified Agent Event Bus",
-            "route": "/admin/ai-evolution/events",
-            "metrics": {
-                **stats,
-                "by_kind": dict(by_kind),
-                "by_target": dict(by_target),
-                "gpt_inbox_pending": by_kind.get("gpt_inbox", 0),
-                "openclaw_pending": len([e for e in pending if e.get("target") == "openclaw"]),
-            },
-            "panels": [
-                "event timeline",
-                "pending commands",
-                "GPT inbox",
-                "agent replies",
-                "failure reports",
-                "audit trail",
-            ],
-            "audit": {
-                "enabled": True,
-                "location": "agents/events/audit",
-            },
-        }
-
-
-__all__ = ["AgentEventDashboard"]

active-runtime/app/aios_chatgpt_actions_api.py

@@ -1,95 +1,300 @@
 #!/usr/bin/env python3
-""" AI GitOps Actions API """
-import asyncio, base64, hashlib, hmac, json, os, re, shutil, subprocess, sys, time, uuid
+from __future__ import annotations
+import hashlib, hmac, json, os, re, subprocess, sys, time, urllib.parse, uuid
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
 from pathlib import Path
-from urllib.parse import parse_qs, urlparse
+from typing import Any
 
-from aiohttp import web
+sys.path.insert(0, str(Path(os.getenv('AIOS_GITOPS_WORKSPACE', '/data/aios-gitops/workspace')) / 'runtime' / 'agent-os'))
+from orchestrator.action_monitor import ActionMonitor
 
-# Environment
-WS = Path(os.environ.get("AIOS_WORKSPACE", "/data/aios-gitops/workspace"))
-BASE_DIR = WS / "active-runtime"
-APPDIR = BASE_DIR / "app"
-AUDITDIR = WS / "audit"
-WORKDIR = WS / "work"
-DOTDIR = WS.parent
-GITEA_DIR = DOTDIR / "runtime" / "gitea-bin" / "data" / "repositories" / "aios"
+ROOT = Path(os.getenv('AIOS_GITOPS_ROOT', '/data/aios-gitops'))
+WS = Path(os.getenv('AIOS_GITOPS_WORKSPACE', str(ROOT / 'workspace')))
+SECRETS = Path(os.getenv('AIOS_GITOPS_SECRETS_DIR', str(ROOT / 'runtime' / 'secrets')))
+TOKEN_FILE = Path(os.getenv('AIOS_GITOPS_TOKEN_FILE', str(SECRETS / 'gitops.tokens')))
+HOST = os.getenv('AIOS_GITOPS_HOST', '127.0.0.1')
+PORT = int(os.getenv('AIOS_GITOPS_PORT', '18890'))
+OPENAPI = WS / 'docs' / 'gitops' / 'openapi-chatgpt-actions.yaml'
+BARE_REPO = Path(os.getenv('AIOS_GITOPS_BARE_REPO', str(ROOT / 'runtime' / 'gitea-bin' / 'data' / 'repositories' / 'aios' / 'aios-v23.git')))
+monitor = ActionMonitor()
 
-# Load config
+BASE_MODELS = [
+  {'id':'base.deepseekv4-flash','provider':'one-api','model':'deepseekv4-flash','display_name':'DeepSeek V4 Flash','scope':'global'},
+  {'id':'base.qwen3.6-35b','provider':'one-api','model':'qwen3.6-35b','display_name':'Qwen 3.6 35B','scope':'global'},
+  {'id':'base.gpt-5.5','provider':'openai','model':'gpt-5.5','display_name':'GPT-5.5','scope':'global'},
+]
+SECRET_RE = re.compile(r'(?i)(api[_-]?key|secret[_-]?access[_-]?key|secret|password|token)\s*[:=]\s*["\']?([A-Za-z0-9_./+=:-]{16,})')
+SECRET_VAL_RE = re.compile(r'(sk-[A-Za-z0-9_-]{20,}|HPUA[A-Z0-9]{10,}|SDC[A-Za-z0-9]{20,})')
+
+def now() -> str: return time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())
+def uid(p='id') -> str: return f'{p}-{int(time.time()*1000)}-{uuid.uuid4().hex[:8]}'
+def safe(s: str, n=160) -> str: return re.sub(r'[^A-Za-z0-9_./@-]+', '-', str(s or 'unknown')).strip('/-')[:n] or 'unknown'
+def sh(args, check=False):
+    p = subprocess.run(['git'] + args, cwd=str(WS), text=True, capture_output=True)
+    if check and p.returncode != 0: raise RuntimeError(p.stderr or p.stdout or 'git failed')
+    return {'code':p.returncode,'stdout':p.stdout.strip(),'stderr':p.stderr.strip(),'cmd':['git']+args}
+def jload(p: Path, default):
+    try: return json.loads(p.read_text(encoding='utf-8'))
+    except Exception: return default
+def relpath(path: str) -> str:
+    x = str(path or '').replace('\\','/').strip()
+    if not x or x.startswith('/') or '..' in Path(x).parts or Path(x).parts[0] == '.git': raise ValueError('invalid path')
+    return str(Path(x))
+def branch_name(name: str | None, prefix='patch/chatgpt') -> str:
+    b = safe(name or f'{prefix}-{uid("br")}', 180)
+    if b in ('main','master') or b.startswith('main/') or b.startswith('master/'): raise ValueError('direct main/master writes are forbidden')
+    return b
+def _json_has_plain_secret(obj: Any) -> bool:
+    if isinstance(obj, dict):
+        for k, v in obj.items():
+            lk = str(k).lower()
+            if lk == 'secret_ref' or lk.endswith('_secret_ref'):
+                continue
+            if lk in {'api_key', 'access_key', 'secret_access_key', 'secret_key', 'password', 'token', 'bearer_token'}:
+                if isinstance(v, str) and v and not v.startswith('secret://') and v != 'REDACTED':
+                    return True
+            if _json_has_plain_secret(v):
+                return True
+        return False
+    if isinstance(obj, list):
+        return any(_json_has_plain_secret(x) for x in obj)
+    if isinstance(obj, str):
+        return bool(obj and not obj.startswith('secret://') and obj != 'REDACTED' and SECRET_VAL_RE.search(obj))
+    return False
+
+def content_has_secret(text: str) -> bool:
+    text = text or ''
     try:
-    import yaml
-    config_path = WS / "active-runtime" / "app" / "config.yaml"
-    with open(config_path) as f:
-        CONFIG = yaml.safe_load(f) or {}
-except: CONFIG = {}
+        return _json_has_plain_secret(json.loads(text))
+    except Exception:
+        pass
+    if SECRET_VAL_RE.search(text):
+        return True
+    for m in SECRET_RE.finditer(text):
+        key = str(m.group(1)).lower()
+        value = str(m.group(2))
+        if 'secret_ref' in key or value.startswith('secret://') or value == 'REDACTED':
+            continue
+        return True
+    return False
+def token_records():
+    if not TOKEN_FILE.exists(): return []
+    out=[]
+    for raw in TOKEN_FILE.read_text(encoding='utf-8').splitlines():
+        line=raw.strip()
+        if not line or line.startswith('#'): continue
+        if line.startswith('{'):
+            try: out.append(json.loads(line))
+            except Exception: pass
+        else:
+            out.append({'account':'legacy-token','role':'owner','scopes':['*'],'token_plain':line})
+    return out
+def authenticate(token: str):
+    if os.getenv('AIOS_GITOPS_DEV_ALLOW','0') == '1': return {'account':'dev-owner','role':'owner','scopes':['*']}
+    if not token: return None
+    digest=hashlib.sha256(token.encode()).hexdigest()
+    for r in token_records():
+        if r.get('disabled'): continue
+        if r.get('token_sha256') and hmac.compare_digest(str(r['token_sha256']), digest): return r
+        if r.get('token_plain') and hmac.compare_digest(str(r['token_plain']), token): return r
+    return None
+def sanitize(obj: Any) -> Any:
+    if isinstance(obj, dict):
+        return {k: ('REDACTED' if re.search(r'(?i)(api[_-]?key|secret|password|token)', str(k)) else sanitize(v)) for k,v in obj.items()}
+    if isinstance(obj, list): return [sanitize(x) for x in obj]
+    if isinstance(obj, str): return SECRET_VAL_RE.sub('REDACTED', obj)
+    return obj
+def ensure_git():
+    if not sh(['config','user.email'])['stdout']: sh(['config','user.email','chatgpt-gitops-bot@cnnetmkt.top'], True)
+    if not sh(['config','user.name'])['stdout']: sh(['config','user.name','chatgpt-gitops-bot'], True)
+def checkout(branch, base='main', create=False):
+    ensure_git(); b=branch_name(branch)
+    if create or sh(['rev-parse','--verify',b])['code'] != 0:
+        sh(['checkout',base], True); sh(['checkout','-B',b], True)
+    else: sh(['checkout',b], True)
+    return b
+def write_file(path, content):
+    if content_has_secret(content): raise ValueError('secret_rejected: use secret_ref; plaintext API keys must not enter Git')
+    r=relpath(path); t=WS/r; t.parent.mkdir(parents=True, exist_ok=True); t.write_text(content, encoding='utf-8'); return r
+def write_json(path, data): return write_file(path, json.dumps(data, ensure_ascii=False, indent=2) + '\n')
+def sync_branch(branch: str) -> dict:
+    if not branch or branch in ('main','master') or branch.startswith('main/') or branch.startswith('master/'):
+        return {'status':'skipped','reason':'protected_branch','branch':branch}
+    if BARE_REPO.exists():
+        ref=f'refs/heads/{branch}:refs/heads/{branch}'
+        p=subprocess.run(['git','--git-dir',str(BARE_REPO),'fetch',str(WS),ref], text=True, capture_output=True)
+        if p.returncode != 0: raise RuntimeError(p.stderr or p.stdout or f'git sync failed for {branch}')
+        return {'status':'synced','target':'bare','branch':branch,'stdout':p.stdout.strip(),'stderr':p.stderr.strip()}
+    p=subprocess.run(['git','push','origin',f'HEAD:refs/heads/{branch}'], cwd=str(WS), text=True, capture_output=True)
+    if p.returncode != 0: raise RuntimeError(p.stderr or p.stdout or f'git push failed for {branch}')
+    return {'status':'synced','target':'origin','branch':branch,'stdout':p.stdout.strip(),'stderr':p.stderr.strip()}
 
-start_time = time.time()
-log_ident = "aios-api"
+def sync_tag(tag: str) -> dict:
+    if not tag: return {'status':'skipped','reason':'empty_tag'}
+    if BARE_REPO.exists():
+        ref=f'refs/tags/{tag}:refs/tags/{tag}'
+        p=subprocess.run(['git','--git-dir',str(BARE_REPO),'fetch',str(WS),ref], text=True, capture_output=True)
+        if p.returncode != 0: raise RuntimeError(p.stderr or p.stdout or f'git tag sync failed for {tag}')
+        return {'status':'synced','target':'bare','tag':tag,'stdout':p.stdout.strip(),'stderr':p.stderr.strip()}
+    p=subprocess.run(['git','push','origin',tag], cwd=str(WS), text=True, capture_output=True)
+    if p.returncode != 0: raise RuntimeError(p.stderr or p.stdout or f'git tag push failed for {tag}')
+    return {'status':'synced','target':'origin','tag':tag,'stdout':p.stdout.strip(),'stderr':p.stderr.strip()}
 
-def sh(cmd, **kw):
+def commit(paths, msg):
+    ensure_git(); paths = [relpath(p) for p in paths] if paths else ['.']; sh(['add'] + paths, True)
+    branch=sh(['rev-parse','--abbrev-ref','HEAD'])['stdout']
+    if not sh(['status','--short'])['stdout']:
+        return {'status':'no_changes','branch':branch,'sync':sync_branch(branch)}
+    out=sh(['commit','-m',msg], True); branch=sh(['rev-parse','--abbrev-ref','HEAD'])['stdout']; sync=sync_branch(branch); return {'status':'committed','branch':branch,'rev':sh(['rev-parse','--short','HEAD'], True)['stdout'],'git':out,'sync':sync}
+def audit(actor, action, target, payload):
+    p=ROOT/'artifacts'/'chatgpt-gitops-audit.jsonl'; p.parent.mkdir(parents=True, exist_ok=True)
+    with p.open('a', encoding='utf-8') as f: f.write(json.dumps({'at':now(),'actor':actor,'action':action,'target':target,'payload':sanitize(payload)}, ensure_ascii=False)+'\n')
+def model_docs():
+    out=[]
+    for p in sorted((WS/'config'/'model_registry').glob('**/*.json')): out.append(jload(p, {'path':str(p.relative_to(WS))}))
+    return out
+def patches():
+    out=[]
+    for p in sorted((WS/'patches').glob('**/*.json')): out.append(jload(p, {'path':str(p.relative_to(WS))}))
+    return out
+
+class H(BaseHTTPRequestHandler):
+    server_version='AIOSChatGPTGitOps/V1R1C0'
+    def sendj(self, data, code=200):
+        b=json.dumps(data, ensure_ascii=False, indent=2).encode(); self.send_response(code); self.send_header('Content-Type','application/json; charset=utf-8'); self.send_header('Content-Length',str(len(b))); self.end_headers(); self.wfile.write(b)
+    def sendt(self, text, ctype='text/plain; charset=utf-8', code=200):
+        b=text.encode(); self.send_response(code); self.send_header('Content-Type',ctype); self.send_header('Content-Length',str(len(b))); self.end_headers(); self.wfile.write(b)
+    def body(self):
+        n=int(self.headers.get('Content-Length','0') or '0'); raw=self.rfile.read(n).decode() if n else '{}'
+        try: return json.loads(raw or '{}')
+        except Exception: return {'_raw':raw}
+    def actor(self):
+        auth=self.headers.get('Authorization',''); tok=auth[7:].strip() if auth.startswith('Bearer ') else self.headers.get('X-AIOS-Token','')
+        rec=authenticate(tok)
+        if rec: return {'ok':True,'account':safe(rec.get('account') or rec.get('name') or 'token-user'),'role':rec.get('role','user'),'scopes':set(rec.get('scopes') or [])}
+        return {'ok':False,'account':'anonymous','role':'anonymous','scopes':set()}
+    def need(self, scope):
+        a=self.actor()
+        if not a['ok']: self.sendj({'error':'unauthorized','hint':'Bearer token required'},401); return None
+        if '*' not in a['scopes'] and scope not in a['scopes']: self.sendj({'error':'forbidden','required_scope':scope,'account':a['account']},403); return None
+        return a
+    def do_GET(self):
+        u=urllib.parse.urlparse(self.path); path=u.path.rstrip('/') if u.path != '/' else u.path; q=urllib.parse.parse_qs(u.query)
         try:
-        r = subprocess.run(cmd, capture_output=True, text=True, cwd=WS, **kw)
-        return r.stdout.strip() if r else None
-    except: return None
-
-def baselines():
-    p = WS / "baselines" / "current.json"
-    if p.exists():
-        try: return json.loads(p.read_text())
-        except: pass
-    return {}
-
-def commands(status):
-    d = WS / "agents" / "commands" / status
-    if not d.exists(): return []
-    return [{"name": f.name, "state": status} for f in sorted(d.iterdir()) if f.name.endswith(".md")]
-
-def agent_runs():
-    d = AUDITDIR / "agent-runs"
-    if not d.exists(): return []
-    rs = []
-    for f in sorted(d.iterdir(), reverse=True):
-        if f.name.endswith(".json"):
+            if path in ('/health','/api/health'): return self.sendj({'status':'ok','service':'chatgpt-gitops-adapter','workspace':str(WS)})
+            if path in ('/api/openapi.yaml','/api/openapi-chatgpt-actions.yaml','/api/schema'):
+                return self.sendt(OPENAPI.read_text(encoding='utf-8'), 'application/yaml; charset=utf-8') if OPENAPI.exists() else self.sendj({'error':'schema_missing'},404)
+            if path in ('/api','/api/status'): return self.sendj(api_spec())
+            if path in ('/api/base','/api/baseline','/base'):
+                data=jload(WS/'baseline'/'current.json', {}); data.setdefault('git', sh(['rev-parse','--short','HEAD'])['stdout']); return self.sendj(data)
+            if path in ('/api/ver','/api/versions','/ver'):
+                return self.sendj({'tags':sh(['tag','--list','V*'])['stdout'].splitlines(),'versions_dir':[p.name for p in (WS/'versions').glob('*')],'head':sh(['rev-parse','--short','HEAD'])['stdout']})
+            if path in ('/api/diff','/diff'):
+                frm=(q.get('from') or ['HEAD~1'])[0]; to=(q.get('to') or ['HEAD'])[0]; return self.sendj({'from':frm,'to':to,'diff':sh(['diff',frm,to])})
+            if path in ('/api/patch','/api/patches','/api/branches','/patch'): return self.sendj({'patches':patches(),'branches':sh(['branch','--format','%(refname:short)'])['stdout'].splitlines()})
+            if path in ('/api/model','/model'): return self.sendj({'base':BASE_MODELS,'custom':model_docs(),'priority':[jload(p,{}) for p in sorted((WS/'config'/'model_priority').glob('*.json'))]})
+            if path in ('/api/run','/api/runtime-status','/run'):
+                svc=subprocess.run(['systemctl','is-active','aios-gitops-model-api'], text=True, capture_output=True)
+                return self.sendj({'service':'aios-gitops-model-api','status':svc.stdout.strip() or svc.stderr.strip(),'workspace_branch':sh(['rev-parse','--abbrev-ref','HEAD'])['stdout']})
+            if path in ('/api/action-monitor','/action-monitor'):
+                latest=monitor.latest()
+                ldict={'event_id':latest.event_id,'action':latest.action,'error':latest.error,'context':latest.context,'created_at':latest.created_at} if latest else None
+                return self.sendj({'events':[{"event_id":e.event_id,"action":e.action,"error":e.error,"context":e.context,"created_at":e.created_at} for e in monitor.list_events()],'latest':ldict})
+            return self.sendj({'error':'not_found','path':path},404)
+        except Exception as e:
+            monitor.record_failure('do_GET', str(e), {'path':path})
+            return self.sendj({'error':str(e)},500)
+    def do_PUT(self):
+        path=urllib.parse.urlparse(self.path).path.rstrip('/'); data=self.body()
+        if path == '/api/model-priority': return self.model_priority(data)
+        return self.sendj({'error':'not_found','path':path},404)
+    def do_POST(self):
+        path=urllib.parse.urlparse(self.path).path.rstrip('/'); data=self.body()
         try:
-                j = json.loads(f.read_text())
-                j["file"] = f.stem
-                rs.append(j)
-            except: pass
-    return rs
+            if path in ('/api/branch','/api/create-branch'): return self.branch(data)
+            if path in ('/api/file','/api/commit-file'): return self.file(data)
+            if path == '/api/commit': return self.commit(data)
+            if path in ('/api/patch','/api/create-patch'): return self.patch(data)
+            if path in ('/api/tag','/api/create-tag'): return self.tag(data)
+            if path == '/api/rollback': return self.rollback(data)
+            if path == '/api/model': return self.model(data)
+            if path == '/api/model-priority': return self.model_priority(data)
+            if path == '/api/nl': return self.nl(data)
+            return self.sendj({'error':'not_found','path':path},404)
+        except Exception as e:
+            monitor.record_failure('do_POST', str(e), {'path':path})
+            return self.sendj({'error':str(e)},500)
+    def branch(self,data):
+        a=self.need('branch:create');
+        if not a: return
+        b=checkout(data.get('branch'), data.get('base','main'), True); meta={'type':'branch','branch':b,'base':data.get('base','main'),'created_by':a['account'],'created_at':now(),'direct_main_push':False,'owner_approval_required':True}
+        r=write_json(f'patches/{safe(b).replace("/","_")}.branch.json', meta); c=commit([r], data.get('message') or f'chore(chatgpt): create {b}'); audit(a['account'],'branch',b,meta); self.sendj({'status':'ok','branch':b,'commit':c})
+    def file(self,data):
+        a=self.need('file:write');
+        if not a: return
+        b=checkout(data.get('branch'), data.get('base','main'), bool(data.get('create_branch'))); r=write_file(data.get('path'), data.get('content','')); c=commit([r], data.get('message') or f'chore(chatgpt): update {r}'); audit(a['account'],'file',r,{'branch':b,'commit':c}); self.sendj({'status':'committed','branch':b,'path':r,'commit':c})
+    def commit(self,data):
+        a=self.need('commit:create');
+        if not a: return
+        b=checkout(data.get('branch') or sh(['rev-parse','--abbrev-ref','HEAD'])['stdout'], data.get('base','main'), False); paths=data.get('paths') or ['.']; paths=[paths] if isinstance(paths,str) else paths; c=commit(paths, data.get('message') or 'chore(chatgpt): commit changes'); audit(a['account'],'commit',b,{'paths':paths,'commit':c}); self.sendj({'status':c['status'],'branch':b,'commit':c})
+    def patch(self,data):
+        a=self.need('patch:create');
+        if not a: return
+        name=data.get('patch_name') or data.get('name') or uid('patch'); b=checkout(data.get('branch') or f'patch/{safe(name)}', data.get('base','main'), True); meta={'id':uid('patch'),'patch_name':name,'branch':b,'risk':data.get('risk','medium'),'description':data.get('description',''),'created_by':a['account'],'created_at':now()}
+        r=write_json(f'patches/{safe(name)}.json', meta); c=commit([r], data.get('message') or f'chore(chatgpt): create patch {name}'); audit(a['account'],'patch',name,meta); self.sendj({'status':'patch_branch_created','patch':meta,'commit':c})
+    def tag(self,data):
+        a=self.need('tag:create');
+        if not a: return
+        ver=data.get('version') or data.get('tag')
+        if not re.match(r'^V\d+R\d+C\d+(-[A-Za-z0-9_.-]+)?$', ver or ''): return self.sendj({'error':'version must match VxRxCx'},400)
+        if data.get('confirm') != True:
+            self.sendj({'status':'confirm_required','operation':'tag','hint':'This operation creates a Git tag. Confirm to proceed.','x-openai-isConsequential':True}, 428)
+            return
+        if a['role'] != 'owner' or not data.get('execute'):
+            b=checkout(data.get('branch') or f'request/tag-{safe(ver)}', 'main', True); req={'version':ver,'requested_by':a['account'],'approval_required':True,'created_at':now()}; r=write_json(f'baseline/tag_requests/{safe(ver)}.json', req); c=commit([r], f'chore(chatgpt): request tag {ver}'); return self.sendj({'status':'approval_required','branch':b,'commit':c})
+        out=sh(['tag','-a',ver,'-m',data.get('message') or f'release {ver}'], True); self.sendj({'status':'tagged','version':ver,'git':out,'sync':sync_tag(ver)})
+    def rollback(self,data):
+        a=self.need('rollback:request');
+        if not a: return
+        target=data.get('target_version') or data.get('version') or data.get('target')
+        if not target: return self.sendj({'error':'target_version required'},400)
+        b=checkout(data.get('branch') or f'request/rollback-{safe(target)}-{uid("rb")}', 'main', True); req={'id':uid('rollback'),'target_version':target,'reason':data.get('reason',''),'requested_by':a['account'],'approval_required':True,'execute':False,'created_at':now()}; r=write_json(f'baseline/rollback_requests/{safe(req["id"])}.json', req); c=commit([r], f'chore(chatgpt): request rollback {target}'); self.sendj({'status':'rollback_request_committed','branch':b,'request':req,'commit':c})
+    def model(self,data):
+        a=self.need('model:write');
+        if not a: return
+        name=data.get('model_name') or data.get('model'); base=(data.get('base_url') or '').rstrip('/'); prov=data.get('provider_name') or 'custom-provider'
+        if not name or not base: return self.sendj({'error':'provider_name/base_url/model_name required'},400)
+        owner=safe(data.get('username') or a['account']); secret_ref=data.get('api_key_secret_ref') or data.get('secret_ref')
+        if data.get('api_key'):
+            d=SECRETS/'llm'/owner; d.mkdir(parents=True, exist_ok=True); sid=uid('llmkey'); p=d/f'{sid}.secret'; p.write_text(str(data['api_key']), encoding='utf-8'); os.chmod(p,0o600); secret_ref=f'secret://llm/{owner}/{sid}'
+        if not secret_ref: return self.sendj({'error':'api_key_secret_ref or api_key required'},400)
+        mid=data.get('model_id') or f'custom.{owner}.{hashlib.sha1((prov+base+name).encode()).hexdigest()[:10]}'; b=checkout(data.get('branch') or f'patch/model-{safe(mid)}','main',True)
+        doc=sanitize({k:v for k,v in data.items() if k!='api_key'}); doc.update({'model_id':mid,'provider_name':prov,'base_url':base,'model_name':name,'api_key_secret_ref':secret_ref,'created_by':a['account'],'created_at':now()})
+        if data.get('confirm') != True:
+            self.sendj({'status':'confirm_required','operation':'model','hint':'This operation registers a new model. Confirm to proceed.','x-openai-isConsequential':True}, 428)
+            return
+        r=write_json(f'config/model_registry/chatgpt/{safe(mid)}.json', doc); c=commit([r], data.get('message') or f'chore(chatgpt): register model {name}'); audit(a['account'],'model',mid,doc); self.sendj({'status':'model_registered','branch':b,'model_id':mid,'secret_ref':secret_ref,'commit':c})
+    def model_priority(self,data):
+        a=self.need('model:priority');
+        if not a: return
+        if data.get('confirm') != True:
+            self.sendj({'status':'confirm_required','operation':'model-priority','hint':'This operation updates model priority. Confirm to proceed.','x-openai-isConsequential':True}, 428)
+            return
+        user=safe(data.get('username') or a['account']); b=checkout(data.get('branch') or f'patch/model-priority-{user}', 'main', True); doc={'username':user,'items':data.get('items') or data.get('priority') or [],'updated_by':a['account'],'updated_at':now()}; r=write_json(f'config/model_priority/{user}.json', doc); c=commit([r], data.get('message') or f'chore(chatgpt): update model priority {user}'); audit(a['account'],'model-priority',user,doc); self.sendj({'status':'updated','branch':b,'priority':doc,'commit':c})
+    def nl(self,data):
+        a=self.need('nl:plan');
+        if not a: return
+        text=data.get('text',''); low=text.lower(); intent='unknown'; plan=[]
+        if 'rollback' in low or '回滚' in text: intent='rollback_request'; plan=['commit rollback request','wait owner/admin approval']
+        elif 'diff' in low or '对比' in text: intent='diff'; plan=['call GET /api/diff']
+        elif 'model' in low or '模型' in text: intent='model_change'; plan=['use POST /api/model or PUT /api/model-priority','commit metadata']
+        elif 'patch' in low or '补丁' in text: intent='patch_create'; plan=['call POST /api/patch']
+        b=checkout(data.get('branch') or f'patch/nl-{uid("nl")}', 'main', True); doc={'id':uid('nl'),'text':text,'intent':intent,'action_plan':plan,'execute':False,'owner_approval_required':True,'created_by':a['account'],'created_at':now()}; r=write_json(f'patches/nl/{safe(doc["id"])}.json', doc); c=commit([r], f'chore(chatgpt): record nl plan {intent}'); self.sendj({'status':'planned','branch':b,'request':doc,'commit':c})
 
-async def handle_api(request):
-    path = request.path
-    if path in ('/admin/ai-evolution','/admin/ai-evolution/'):
-        # Serve the HTML page
-        html_path = APPDIR / 'static' / 'admin-ai-evolution.html'
-        if html_path.exists():
-            return web.Response(text=html_path.read_text(), content_type='text/html')
-        return web.Response(text='Dashboard not found', status=404)
-    if path == '/admin/ai-evolution/api/data':
-        result = subprocess.run(['git','tag','--list','V*'], capture_output=True, text=True, cwd=WS)
-        tags = result.stdout.strip().splitlines() if result.returncode == 0 else []
-        h = subprocess.run(['git','rev-parse','--short','HEAD'], capture_output=True, text=True, cwd=WS)
-        head = h.stdout.strip() if h.returncode == 0 else 'unknown'
-        b = subprocess.run(['git','rev-parse','--abbrev-ref','HEAD'], capture_output=True, text=True, cwd=WS)
-        branch = b.stdout.strip() if b.returncode == 0 else 'unknown'
-        return web.json_response({
-            'baseline': baselines(),
-            'versions': [{'tag':t,'name':p.name} for p in sorted((WS/'versions').glob('*')) for t in tags if p.name in t],
-            'commands': commands('active') + commands('running') + commands('completed'),
-            'agent_runs': agent_runs(),
-            'stats': {
-                'current': head,
-                'branch': branch,
-                'uptime': round(time.time()-start_time, 2),
-                'baseline': baselines().get('current_baseline','unknown'),
-            }
-        })
-    return web.json_response({'error':'not_found','path':path}, status=404)
+def api_spec():
+    return {'version':'V1R1C0-chatgpt-actions','openapi':'/api/openapi.yaml','read':['GET /api/base','GET /api/ver','GET /api/diff','GET /api/patch','GET /api/model','GET /api/run'],'write':['POST /api/branch','POST /api/file','POST /api/commit','POST /api/patch','POST /api/tag','POST /api/rollback','POST /api/model','PUT /api/model-priority','POST /api/nl'],'policy':{'bearer_required_for_write':True,'direct_main_push':False,'delete_tag':False,'owner_approval_required_for_v_level':True,'api_keys_in_git':False,'git_secret_field':'secret_ref','online_git_sync':True}}
 
-app = web.Application()
-app.router.add_route('GET', '/admin/ai-evolution', handle_api)
-app.router.add_route('GET', '/admin/ai-evolution/', handle_api)
-app.router.add_route('GET', '/admin/ai-evolution/api/data', handle_api)
-
-if __name__ == '__main__':
-    web.run_app(app, host='127.0.0.1', port=18890)
+def main():
+    print(f'AIOS ChatGPT GitOps adapter listening on {HOST}:{PORT}')
+    ThreadingHTTPServer((HOST,PORT), H).serve_forever()
+if __name__ == '__main__': main()

active-runtime/app/autonomous_self_loop.py

@@ -0,0 +1,108 @@
+"""Autonomous self-loop orchestration primitives.
+
+Goal: detect gaps, classify risk, plan remediation, run checks, and emit an
+approval-aware report without storing secrets or bypassing owner governance.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class SelfLoopSignal:
+    name: str
+    status: str
+    severity: str = "info"
+    detail: str = ""
+
+    def ok(self) -> bool:
+        return self.status in {"ok", "done", "pass"}
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass(frozen=True)
+class RemediationStep:
+    id: str
+    title: str
+    action: str
+    risk: str = "low"
+    requires_owner_approval: bool = False
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class SelfLoopReport:
+    id: str
+    status: str
+    signals: list[SelfLoopSignal] = field(default_factory=list)
+    remediation: list[RemediationStep] = field(default_factory=list)
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "id": self.id,
+            "status": self.status,
+            "signals": [s.to_dict() for s in self.signals],
+            "remediation": [r.to_dict() for r in self.remediation],
+            "created_at": self.created_at,
+        }
+
+
+class AutonomousSelfLoop:
+    def __init__(self, owner_approval_required: bool = True):
+        self.owner_approval_required = owner_approval_required
+
+    def probe(self, runtime: dict[str, Any], baseline: dict[str, Any]) -> list[SelfLoopSignal]:
+        return [
+            SelfLoopSignal("runtime_active", "ok" if runtime.get("status") == "active" else "fail", "critical"),
+            SelfLoopSignal("git_patch_only", "ok" if baseline.get("update_mode") == "git_patch_only" else "fail", "high"),
+            SelfLoopSignal("no_direct_main_push", "ok" if not baseline.get("codex_gitops", {}).get("direct_main_push", True) else "fail", "high"),
+            SelfLoopSignal("autonomous_recovery_loop", "ok" if baseline.get("features", {}).get("autonomous_recovery_loop") else "fail", "high"),
+            SelfLoopSignal("portal_gitops_dashboard", "ok" if baseline.get("features", {}).get("portal_gitops_dashboard") else "fail", "medium"),
+        ]
+
+    def plan(self, signals: list[SelfLoopSignal]) -> list[RemediationStep]:
+        steps: list[RemediationStep] = []
+        failed = {s.name for s in signals if not s.ok()}
+        if "runtime_active" in failed:
+            steps.append(RemediationStep("restart-runtime", "恢复 GitOps Runtime", "request-runtime-recovery", "high", True))
+        if "git_patch_only" in failed:
+            steps.append(RemediationStep("enforce-git-patch", "恢复 git_patch_only 更新模式", "commit-policy-patch", "high", True))
+        if "no_direct_main_push" in failed:
+            steps.append(RemediationStep("disable-direct-main", "禁止直接推送 main", "commit-security-policy", "high", True))
+        if "autonomous_recovery_loop" in failed:
+            steps.append(RemediationStep("enable-recovery-loop", "启用自动恢复闭环", "commit-runtime-config", "medium", True))
+        if "portal_gitops_dashboard" in failed:
+            steps.append(RemediationStep("enable-portal-dashboard", "启用 Portal GitOps 驾驶舱", "commit-portal-config", "medium", True))
+        if not steps:
+            steps.append(RemediationStep("continue-implementation", "继续补齐 Router/UI/OpenAPI/验收", "create-low-risk-patch", "low", False))
+        return steps
+
+    def evaluate(self, runtime: dict[str, Any], baseline: dict[str, Any]) -> SelfLoopReport:
+        signals = self.probe(runtime, baseline)
+        remediation = self.plan(signals)
+        status = "done" if all(s.ok() for s in signals) and not any(r.requires_owner_approval for r in remediation) else "partial"
+        return SelfLoopReport("self-loop-report", status, signals, remediation)
+
+    def acceptance(self, report: SelfLoopReport) -> dict[str, Any]:
+        approval_blocked = any(step.requires_owner_approval for step in report.remediation)
+        return {
+            "status": report.status,
+            "can_unattended_continue": report.status == "done" and not approval_blocked,
+            "owner_approval_required": approval_blocked or self.owner_approval_required,
+            "report": report.to_dict(),
+        }
+
+
+__all__ = ["SelfLoopSignal", "RemediationStep", "SelfLoopReport", "AutonomousSelfLoop"]

active-runtime/app/failure_memory.py

@@ -0,0 +1,192 @@
+"""Failure memory for autonomous self-loop learning.
+
+The memory keeps sanitized failure fingerprints, recurrence counters, and
+remediation hints. It is intentionally in-memory and serializable; production
+adapters can persist the exported dict to SQL/object storage without changing the
+learning contract. Secrets and raw tokens must never be stored here.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from hashlib import sha256
+from typing import Any
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+def _clean(value: str | None) -> str:
+    if not value:
+        return "unknown"
+    cleaned = value.replace("\n", " ").replace("\r", " ").strip().lower()
+    secret_markers = ("token", "password", "secret", "api_key", "private key")
+    for marker in secret_markers:
+        cleaned = cleaned.replace(marker, "redacted")
+    return cleaned[:500]
+
+
+@dataclass(frozen=True)
+class FailureSignature:
+    component: str
+    reason: str
+    fingerprint: str
+    severity: str = "medium"
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class FailureRecord:
+    signature: FailureSignature
+    count: int = 0
+    first_seen: str = field(default_factory=utc_now)
+    last_seen: str = field(default_factory=utc_now)
+    last_job_id: str | None = None
+    examples: list[str] = field(default_factory=list)
+    remediation_hints: list[str] = field(default_factory=list)
+    resolved_count: int = 0
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "signature": self.signature.to_dict(),
+            "count": self.count,
+            "first_seen": self.first_seen,
+            "last_seen": self.last_seen,
+            "last_job_id": self.last_job_id,
+            "examples": list(self.examples),
+            "remediation_hints": list(self.remediation_hints),
+            "resolved_count": self.resolved_count,
+            "recurrence_score": self.recurrence_score(),
+        }
+
+    def recurrence_score(self) -> float:
+        if self.count <= 1:
+            return 0.0
+        unresolved = max(self.count - self.resolved_count, 0)
+        return min(1.0, unresolved / max(self.count, 1))
+
+
+class FailureMemory:
+    def __init__(self) -> None:
+        self.records: dict[str, FailureRecord] = {}
+
+    def fingerprint(self, component: str, reason: str, detail: str | None = None) -> str:
+        base = "::".join([_clean(component), _clean(reason), _clean(detail)])
+        return sha256(base.encode("utf-8")).hexdigest()[:16]
+
+    def signature(self, component: str, reason: str, detail: str | None = None, severity: str = "medium") -> FailureSignature:
+        return FailureSignature(
+            component=_clean(component),
+            reason=_clean(reason),
+            fingerprint=self.fingerprint(component, reason, detail),
+            severity=severity,
+        )
+
+    def record_failure(
+        self,
+        component: str,
+        reason: str,
+        detail: str | None = None,
+        severity: str = "medium",
+        job_id: str | None = None,
+        remediation_hint: str | None = None,
+    ) -> FailureRecord:
+        sig = self.signature(component, reason, detail, severity)
+        record = self.records.get(sig.fingerprint)
+        if record is None:
+            record = FailureRecord(signature=sig)
+            self.records[sig.fingerprint] = record
+        record.count += 1
+        record.last_seen = utc_now()
+        record.last_job_id = job_id
+        if detail:
+            example = _clean(detail)
+            if example not in record.examples:
+                record.examples.append(example)
+            record.examples = record.examples[-5:]
+        if remediation_hint and remediation_hint not in record.remediation_hints:
+            record.remediation_hints.append(remediation_hint)
+            record.remediation_hints = record.remediation_hints[-5:]
+        return record
+
+    def record_from_job(self, job: dict[str, Any]) -> FailureRecord | None:
+        status = job.get("status")
+        if status in {"completed", "waiting_owner"}:
+            return None
+        reason = job.get("last_error") or status or "unknown_failure"
+        return self.record_failure(
+            component="self_loop_job",
+            reason=reason,
+            detail=str(job.get("result") or job.get("last_error") or ""),
+            severity="high" if status == "failed" else "medium",
+            job_id=job.get("id"),
+            remediation_hint="inspect acceptance report and regenerate patch plan",
+        )
+
+    def mark_resolved(self, fingerprint: str) -> bool:
+        record = self.records.get(fingerprint)
+        if not record:
+            return False
+        record.resolved_count += 1
+        record.last_seen = utc_now()
+        return True
+
+    def recurrence_score(self, fingerprint: str) -> float:
+        record = self.records.get(fingerprint)
+        return record.recurrence_score() if record else 0.0
+
+    def top_failures(self, limit: int = 5) -> list[dict[str, Any]]:
+        ranked = sorted(
+            self.records.values(),
+            key=lambda record: (record.recurrence_score(), record.count, record.last_seen),
+            reverse=True,
+        )
+        return [record.to_dict() for record in ranked[:limit]]
+
+    def suggest_remediation(self, fingerprint: str) -> list[str]:
+        record = self.records.get(fingerprint)
+        if not record:
+            return []
+        if record.remediation_hints:
+            return list(record.remediation_hints)
+        reason = record.signature.reason
+        if "runtime" in reason:
+            return ["run runtime health probe", "request owner-gated runtime recovery if probe fails"]
+        if "acceptance" in reason or "test" in reason:
+            return ["rerun acceptance pipeline", "generate targeted low-risk patch"]
+        if "permission" in reason or "forbidden" in reason:
+            return ["verify GitOps branch policy", "request owner review for permission drift"]
+        return ["classify failure", "generate remediation plan", "keep owner gate for non-low-risk changes"]
+
+    def export(self) -> dict[str, Any]:
+        return {
+            "records": {fingerprint: record.to_dict() for fingerprint, record in self.records.items()},
+            "top_failures": self.top_failures(),
+        }
+
+    def load(self, data: dict[str, Any]) -> None:
+        self.records.clear()
+        for fingerprint, raw in data.get("records", {}).items():
+            sig_raw = raw.get("signature", {})
+            signature = FailureSignature(
+                component=sig_raw.get("component", "unknown"),
+                reason=sig_raw.get("reason", "unknown"),
+                fingerprint=sig_raw.get("fingerprint", fingerprint),
+                severity=sig_raw.get("severity", "medium"),
+            )
+            record = FailureRecord(signature=signature)
+            record.count = int(raw.get("count", 0))
+            record.first_seen = raw.get("first_seen", utc_now())
+            record.last_seen = raw.get("last_seen", utc_now())
+            record.last_job_id = raw.get("last_job_id")
+            record.examples = list(raw.get("examples", []))[-5:]
+            record.remediation_hints = list(raw.get("remediation_hints", []))[-5:]
+            record.resolved_count = int(raw.get("resolved_count", 0))
+            self.records[fingerprint] = record
+
+
+__all__ = ["FailureSignature", "FailureRecord", "FailureMemory"]

active-runtime/app/failure_memory_store.py

@@ -0,0 +1,98 @@
+"""Persistence adapters for FailureMemory.
+
+Stores sanitized failure memory snapshots. The adapter only persists exported
+FailureMemory dictionaries; it does not store secrets or raw runtime credentials.
+"""
+
+from __future__ import annotations
+
+import json
+import sqlite3
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any
+
+from .failure_memory import FailureMemory
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class MemoryStoreStatus:
+    status: str
+    path: str
+    records: int
+    updated_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class JsonFailureMemoryStore:
+    def __init__(self, path: str | Path):
+        self.path = Path(path)
+
+    def save(self, memory: FailureMemory) -> MemoryStoreStatus:
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        data = memory.export()
+        self.path.write_text(json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8")
+        return MemoryStoreStatus("saved", str(self.path), len(data.get("records", {})))
+
+    def load(self) -> FailureMemory:
+        memory = FailureMemory()
+        if not self.path.exists():
+            return memory
+        memory.load(json.loads(self.path.read_text(encoding="utf-8")))
+        return memory
+
+
+class SQLiteFailureMemoryStore:
+    def __init__(self, path: str | Path):
+        self.path = Path(path)
+
+    def _connect(self):
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        conn = sqlite3.connect(str(self.path))
+        conn.execute(
+            """
+            CREATE TABLE IF NOT EXISTS self_loop_failure_memory (
+              fingerprint TEXT PRIMARY KEY,
+              payload_json TEXT NOT NULL,
+              updated_at TEXT NOT NULL
+            )
+            """
+        )
+        return conn
+
+    def save(self, memory: FailureMemory) -> MemoryStoreStatus:
+        data = memory.export().get("records", {})
+        with self._connect() as conn:
+            for fingerprint, payload in data.items():
+                conn.execute(
+                    """
+                    INSERT INTO self_loop_failure_memory (fingerprint, payload_json, updated_at)
+                    VALUES (?, ?, ?)
+                    ON CONFLICT(fingerprint) DO UPDATE SET
+                      payload_json = excluded.payload_json,
+                      updated_at = excluded.updated_at
+                    """,
+                    (fingerprint, json.dumps(payload, ensure_ascii=False), utc_now()),
+                )
+        return MemoryStoreStatus("saved", str(self.path), len(data))
+
+    def load(self) -> FailureMemory:
+        memory = FailureMemory()
+        if not self.path.exists():
+            return memory
+        records: dict[str, Any] = {}
+        with self._connect() as conn:
+            for fingerprint, payload_json in conn.execute("SELECT fingerprint, payload_json FROM self_loop_failure_memory"):
+                records[fingerprint] = json.loads(payload_json)
+        memory.load({"records": records})
+        return memory
+
+
+__all__ = ["MemoryStoreStatus", "JsonFailureMemoryStore", "SQLiteFailureMemoryStore"]

active-runtime/app/gitops_commit_executor.py

@@ -0,0 +1,59 @@
+"""GitOps commit planning adapter for self-loop patches.
+
+Creates commit intents and validates governance. Actual repository writes remain
+through the controlled GitOps Actions layer.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .self_loop_patch_executor import PatchBundle
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class CommitIntent:
+    branch: str
+    message: str
+    files: tuple[str, ...]
+    direct_main_push: bool
+    owner_approval_required: bool
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class GitOpsCommitExecutor:
+    """Produces safe commit intents instead of bypassing GitOps controls."""
+
+    def prepare(self, bundle: PatchBundle) -> CommitIntent:
+        if bundle.direct_main_push:
+            raise ValueError("direct main push is forbidden")
+        if not bundle.branch.startswith("patch/"):
+            raise ValueError("only patch branches are allowed")
+        return CommitIntent(
+            branch=bundle.branch,
+            message=f"Apply self-loop patch: {bundle.goal}",
+            files=tuple(file.path for file in bundle.files),
+            direct_main_push=False,
+            owner_approval_required=bundle.owner_approval_required,
+        )
+
+    def commit_result(self, intent: CommitIntent, revision: str | None = None) -> dict[str, Any]:
+        return {
+            "status": "ready" if not intent.owner_approval_required else "waiting_owner",
+            "branch": intent.branch,
+            "revision": revision,
+            "commit": intent.to_dict(),
+            "sync_required": True,
+        }
+
+
+__all__ = ["CommitIntent", "GitOpsCommitExecutor"]

active-runtime/app/portal_ops_api.py

@@ -0,0 +1,33 @@
+"""Portal operations API domain layer.
+No secrets. Designed for user/group_admin/owner portal integration.
+"""
+
+ROLES = ("user", "group_admin", "owner")
+
+
+class PortalOpsAPI:
+    def dashboard(self, role):
+        if role not in ROLES:
+            raise ValueError("invalid role")
+        return {
+            "role": role,
+            "modules": self.modules(role),
+            "status": "ok"
+        }
+
+    def modules(self, role):
+        common = ["profile", "alerts", "approvals", "audit"]
+        if role == "user":
+            return common + ["tasks", "usage"]
+        if role == "group_admin":
+            return common + ["group_users", "group_quota"]
+        return common + ["system", "gitops", "runtime", "security", "models"]
+
+    def approval(self, request_id, action):
+        return {"request_id": request_id, "action": action, "state": "recorded"}
+
+    def audit_event(self, actor, action):
+        return {"actor": actor, "action": action, "recorded": True}
+
+    def alert(self, alert_id, level):
+        return {"id": alert_id, "level": level, "state": "open"}

active-runtime/app/portal_rbac_ops.py

@@ -0,0 +1,493 @@
+"""Three-role portal RBAC, workflow, alert, audit, and owner cockpit services.
+
+This module is intentionally framework-neutral so it can be used by FastAPI routes,
+unit tests, CLI checks, and future Hermes/OpenClaw agents without importing runtime
+secrets or web framework globals.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any, Iterable
+from uuid import uuid4
+
+ROLE_USER = "user"
+ROLE_GROUP_ADMIN = "group_admin"
+ROLE_OWNER = "owner"
+ROLES = (ROLE_USER, ROLE_GROUP_ADMIN, ROLE_OWNER)
+
+SCOPE_SELF = "self"
+SCOPE_GROUP = "group"
+SCOPE_GLOBAL = "global"
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class PortalContext:
+    user_id: str
+    role: str = ROLE_USER
+    group_id: str | None = None
+    display_name: str | None = None
+
+    def natural_scope(self) -> str:
+        if self.role == ROLE_OWNER:
+            return SCOPE_GLOBAL
+        if self.role == ROLE_GROUP_ADMIN:
+            return SCOPE_GROUP
+        return SCOPE_SELF
+
+
+@dataclass(frozen=True)
+class PortalResource:
+    scope: str
+    owner_user_id: str | None = None
+    group_id: str | None = None
+    resource_type: str = "portal"
+    resource_id: str | None = None
+
+
+@dataclass(frozen=True)
+class RBACDecision:
+    allowed: bool
+    reason: str
+    role: str
+    scope: str
+    action: str
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class ApprovalRequest:
+    id: str
+    request_type: str
+    requester_id: str
+    scope: str
+    group_id: str | None = None
+    target: str | None = None
+    payload: dict[str, Any] = field(default_factory=dict)
+    state: str = "pending"
+    decided_by: str | None = None
+    decision_reason: str | None = None
+    created_at: str = field(default_factory=utc_now)
+    updated_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class AlertRecord:
+    id: str
+    level: str
+    message: str
+    scope: str
+    group_id: str | None = None
+    owner_user_id: str | None = None
+    source: str = "portal"
+    state: str = "open"
+    created_at: str = field(default_factory=utc_now)
+    updated_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class AuditEvent:
+    id: str
+    actor_id: str
+    action: str
+    scope: str
+    group_id: str | None = None
+    resource_type: str = "portal"
+    resource_id: str | None = None
+    outcome: str = "success"
+    detail: dict[str, Any] = field(default_factory=dict)
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass(frozen=True)
+class PortalModule:
+    key: str
+    title: str
+    route: str
+    permission: str
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+ROLE_PERMISSIONS: dict[str, set[str]] = {
+    ROLE_USER: {
+        "portal.dashboard.read:self",
+        "portal.profile.read:self",
+        "portal.tasks.read:self",
+        "portal.usage.read:self",
+        "portal.alerts.read:self",
+        "portal.approvals.create:self",
+        "portal.approvals.read:self",
+        "portal.audit.read:self",
+    },
+    ROLE_GROUP_ADMIN: {
+        "portal.dashboard.read:self",
+        "portal.dashboard.read:group",
+        "portal.profile.read:self",
+        "portal.tasks.read:self",
+        "portal.usage.read:self",
+        "portal.alerts.read:self",
+        "portal.alerts.read:group",
+        "portal.approvals.create:self",
+        "portal.approvals.read:self",
+        "portal.approvals.read:group",
+        "portal.approvals.decide:group",
+        "portal.audit.read:self",
+        "portal.audit.read:group",
+        "portal.group.users.read:group",
+        "portal.group.quota.read:group",
+        "portal.group.quota.write:group",
+    },
+    ROLE_OWNER: {
+        "portal.*:*",
+    },
+}
+
+ROLE_MODULES: dict[str, tuple[PortalModule, ...]] = {
+    ROLE_USER: (
+        PortalModule("profile", "个人中心", "/portal/user/profile", "portal.profile.read:self"),
+        PortalModule("tasks", "任务", "/portal/user/tasks", "portal.tasks.read:self"),
+        PortalModule("usage", "用量", "/portal/user/usage", "portal.usage.read:self"),
+        PortalModule("alerts", "告警", "/portal/user/alerts", "portal.alerts.read:self"),
+        PortalModule("approvals", "审批", "/portal/user/approvals", "portal.approvals.read:self"),
+        PortalModule("audit", "审计", "/portal/user/audit", "portal.audit.read:self"),
+    ),
+    ROLE_GROUP_ADMIN: (
+        PortalModule("group_users", "组用户", "/portal/group_admin/users", "portal.group.users.read:group"),
+        PortalModule("group_quota", "组配额", "/portal/group_admin/quota", "portal.group.quota.read:group"),
+        PortalModule("alerts", "组告警", "/portal/group_admin/alerts", "portal.alerts.read:group"),
+        PortalModule("approvals", "组审批", "/portal/group_admin/approvals", "portal.approvals.read:group"),
+        PortalModule("audit", "组审计", "/portal/group_admin/audit", "portal.audit.read:group"),
+    ),
+    ROLE_OWNER: (
+        PortalModule("system", "系统驾驶舱", "/portal/owner/system", "portal.system.read:global"),
+        PortalModule("gitops", "GitOps", "/portal/owner/gitops", "portal.gitops.read:global"),
+        PortalModule("runtime", "运行时", "/portal/owner/runtime", "portal.runtime.read:global"),
+        PortalModule("security", "安全", "/portal/owner/security", "portal.security.read:global"),
+        PortalModule("models", "模型", "/portal/owner/models", "portal.models.read:global"),
+        PortalModule("approvals", "全局审批", "/portal/owner/approvals", "portal.approvals.read:global"),
+        PortalModule("alerts", "全局告警", "/portal/owner/alerts", "portal.alerts.read:global"),
+        PortalModule("audit", "全局审计", "/portal/owner/audit", "portal.audit.read:global"),
+    ),
+}
+
+
+class PortalRBACService:
+    """Enforces user=self, group_admin=group, owner=global access."""
+
+    def __init__(self, permissions: dict[str, set[str]] | None = None):
+        self.permissions = permissions or ROLE_PERMISSIONS
+
+    def authorize(self, ctx: PortalContext, action: str, resource: PortalResource | None = None) -> RBACDecision:
+        if ctx.role not in ROLES:
+            return RBACDecision(False, "unknown_role", ctx.role, SCOPE_SELF, action)
+
+        target = resource or PortalResource(scope=ctx.natural_scope(), owner_user_id=ctx.user_id, group_id=ctx.group_id)
+        if ctx.role == ROLE_OWNER:
+            return RBACDecision(True, "owner_global_allow", ctx.role, target.scope, action)
+
+        if target.scope == SCOPE_GLOBAL:
+            return RBACDecision(False, "global_scope_requires_owner", ctx.role, target.scope, action)
+
+        if ctx.role == ROLE_USER:
+            if target.scope != SCOPE_SELF or target.owner_user_id not in (None, ctx.user_id):
+                return RBACDecision(False, "user_limited_to_self", ctx.role, target.scope, action)
+            return self._permission_decision(ctx.role, action, SCOPE_SELF)
+
+        if ctx.role == ROLE_GROUP_ADMIN:
+            if target.scope == SCOPE_SELF and target.owner_user_id in (None, ctx.user_id):
+                return self._permission_decision(ctx.role, action, SCOPE_SELF)
+            if target.scope == SCOPE_GROUP and ctx.group_id and target.group_id == ctx.group_id:
+                return self._permission_decision(ctx.role, action, SCOPE_GROUP)
+            return RBACDecision(False, "group_admin_limited_to_own_group", ctx.role, target.scope, action)
+
+        return RBACDecision(False, "deny_by_default", ctx.role, target.scope, action)
+
+    def visible_modules(self, ctx: PortalContext) -> list[dict[str, Any]]:
+        modules = ROLE_MODULES.get(ctx.role, ())
+        visible: list[dict[str, Any]] = []
+        for module in modules:
+            action, scope = module.permission.split(":", 1)
+            resource = PortalResource(scope=scope, owner_user_id=ctx.user_id, group_id=ctx.group_id)
+            if self.authorize(ctx, action, resource).allowed:
+                visible.append(module.to_dict())
+        return visible
+
+    def _permission_decision(self, role: str, action: str, scope: str) -> RBACDecision:
+        permissions = self.permissions.get(role, set())
+        if "portal.*:*" in permissions or f"{action}:{scope}" in permissions:
+            return RBACDecision(True, "permission_match", role, scope, action)
+        return RBACDecision(False, "permission_missing", role, scope, action)
+
+
+class PortalRepository:
+    """Small deterministic repository used for domain tests and route integration.
+
+    Production deployments can replace this repository with a SQL-backed adapter while
+    preserving the service contract.
+    """
+
+    def __init__(self) -> None:
+        self.approvals: dict[str, ApprovalRequest] = {}
+        self.alerts: dict[str, AlertRecord] = {}
+        self.audit_events: list[AuditEvent] = []
+
+    def create_approval(self, ctx: PortalContext, request_type: str, payload: dict[str, Any] | None = None, target: str | None = None) -> ApprovalRequest:
+        approval = ApprovalRequest(
+            id=f"apr_{uuid4().hex[:12]}",
+            request_type=request_type,
+            requester_id=ctx.user_id,
+            scope=ctx.natural_scope(),
+            group_id=ctx.group_id,
+            target=target,
+            payload=payload or {},
+        )
+        self.approvals[approval.id] = approval
+        self.append_audit(ctx, "portal.approvals.create", approval.scope, approval.group_id, "approval", approval.id)
+        return approval
+
+    def decide_approval(self, ctx: PortalContext, approval_id: str, decision: str, reason: str | None = None) -> ApprovalRequest:
+        if decision not in {"approved", "rejected"}:
+            raise ValueError("decision must be approved or rejected")
+        approval = self.approvals[approval_id]
+        approval.state = decision
+        approval.decided_by = ctx.user_id
+        approval.decision_reason = reason
+        approval.updated_at = utc_now()
+        self.append_audit(ctx, f"portal.approvals.{decision}", approval.scope, approval.group_id, "approval", approval.id)
+        return approval
+
+    def create_alert(self, ctx: PortalContext, level: str, message: str, scope: str | None = None, source: str = "portal") -> AlertRecord:
+        if level not in {"info", "warning", "high", "critical"}:
+            raise ValueError("invalid alert level")
+        alert_scope = scope or ctx.natural_scope()
+        alert = AlertRecord(
+            id=f"alt_{uuid4().hex[:12]}",
+            level=level,
+            message=message,
+            scope=alert_scope,
+            group_id=ctx.group_id if alert_scope == SCOPE_GROUP else None,
+            owner_user_id=ctx.user_id if alert_scope == SCOPE_SELF else None,
+            source=source,
+        )
+        self.alerts[alert.id] = alert
+        self.append_audit(ctx, "portal.alerts.create", alert.scope, alert.group_id, "alert", alert.id)
+        return alert
+
+    def resolve_alert(self, ctx: PortalContext, alert_id: str) -> AlertRecord:
+        alert = self.alerts[alert_id]
+        alert.state = "resolved"
+        alert.updated_at = utc_now()
+        self.append_audit(ctx, "portal.alerts.resolve", alert.scope, alert.group_id, "alert", alert.id)
+        return alert
+
+    def append_audit(
+        self,
+        ctx: PortalContext,
+        action: str,
+        scope: str | None = None,
+        group_id: str | None = None,
+        resource_type: str = "portal",
+        resource_id: str | None = None,
+        outcome: str = "success",
+        detail: dict[str, Any] | None = None,
+    ) -> AuditEvent:
+        event = AuditEvent(
+            id=f"aud_{uuid4().hex[:12]}",
+            actor_id=ctx.user_id,
+            action=action,
+            scope=scope or ctx.natural_scope(),
+            group_id=group_id or ctx.group_id,
+            resource_type=resource_type,
+            resource_id=resource_id,
+            outcome=outcome,
+            detail=detail or {},
+        )
+        self.audit_events.append(event)
+        return event
+
+    def list_approvals(self, ctx: PortalContext) -> list[ApprovalRequest]:
+        return [a for a in self.approvals.values() if self._visible(ctx, a.scope, a.requester_id, a.group_id)]
+
+    def list_alerts(self, ctx: PortalContext) -> list[AlertRecord]:
+        return [a for a in self.alerts.values() if self._visible(ctx, a.scope, a.owner_user_id, a.group_id)]
+
+    def list_audit(self, ctx: PortalContext) -> list[AuditEvent]:
+        return [a for a in self.audit_events if self._visible(ctx, a.scope, a.actor_id, a.group_id)]
+
+    def _visible(self, ctx: PortalContext, scope: str, owner_user_id: str | None, group_id: str | None) -> bool:
+        if ctx.role == ROLE_OWNER:
+            return True
+        if scope == SCOPE_SELF:
+            return owner_user_id in (None, ctx.user_id)
+        if ctx.role == ROLE_GROUP_ADMIN and scope == SCOPE_GROUP:
+            return bool(ctx.group_id and group_id == ctx.group_id)
+        return False
+
+
+class PortalDashboardService:
+    def __init__(self, repo: PortalRepository | None = None, rbac: PortalRBACService | None = None):
+        self.repo = repo or PortalRepository()
+        self.rbac = rbac or PortalRBACService()
+
+    def dashboard(self, ctx: PortalContext) -> dict[str, Any]:
+        resource = PortalResource(scope=ctx.natural_scope(), owner_user_id=ctx.user_id, group_id=ctx.group_id)
+        decision = self.rbac.authorize(ctx, "portal.dashboard.read", resource)
+        if not decision.allowed:
+            return {"status": "forbidden", "decision": decision.to_dict(), "modules": []}
+        return {
+            "status": "ok",
+            "role": ctx.role,
+            "scope": ctx.natural_scope(),
+            "user_id": ctx.user_id,
+            "group_id": ctx.group_id,
+            "modules": self.rbac.visible_modules(ctx),
+            "counters": {
+                "approvals": len(self.repo.list_approvals(ctx)),
+                "alerts": len([a for a in self.repo.list_alerts(ctx) if a.state == "open"]),
+                "audit_events": len(self.repo.list_audit(ctx)),
+            },
+        }
+
+    def owner_cockpit(self, ctx: PortalContext, runtime: dict[str, Any] | None = None) -> dict[str, Any]:
+        decision = self.rbac.authorize(ctx, "portal.system.read", PortalResource(scope=SCOPE_GLOBAL))
+        if not decision.allowed:
+            return {"status": "forbidden", "decision": decision.to_dict()}
+        runtime = runtime or {}
+        return {
+            "status": "ok",
+            "scope": SCOPE_GLOBAL,
+            "runtime": {
+                "service": runtime.get("service", "unknown"),
+                "status": runtime.get("status", "unknown"),
+                "workspace_branch": runtime.get("workspace_branch"),
+            },
+            "gitops": {
+                "mode": runtime.get("mode", "git_patch_only"),
+                "sync_status": runtime.get("sync_status", "unknown"),
+            },
+            "security": {
+                "human_shortlinks": "login_required",
+                "secrets_in_git": False,
+                "direct_main_push": False,
+            },
+            "models": {
+                "custom_llm": bool(runtime.get("custom_llm", True)),
+                "user_priority": bool(runtime.get("user_model_priority", True)),
+            },
+            "ops": {
+                "open_alerts": len([a for a in self.repo.alerts.values() if a.state == "open"]),
+                "pending_approvals": len([a for a in self.repo.approvals.values() if a.state == "pending"]),
+                "audit_events": len(self.repo.audit_events),
+            },
+        }
+
+
+class PortalOpsService:
+    def __init__(self, repo: PortalRepository | None = None, rbac: PortalRBACService | None = None):
+        self.repo = repo or PortalRepository()
+        self.rbac = rbac or PortalRBACService()
+        self.dashboard_service = PortalDashboardService(self.repo, self.rbac)
+
+    def check_rbac(self, ctx: PortalContext, action: str, resource: PortalResource | None = None) -> dict[str, Any]:
+        return self.rbac.authorize(ctx, action, resource).to_dict()
+
+    def dashboard(self, ctx: PortalContext) -> dict[str, Any]:
+        return self.dashboard_service.dashboard(ctx)
+
+    def owner_cockpit(self, ctx: PortalContext, runtime: dict[str, Any] | None = None) -> dict[str, Any]:
+        return self.dashboard_service.owner_cockpit(ctx, runtime)
+
+    def create_approval(self, ctx: PortalContext, request_type: str, payload: dict[str, Any] | None = None, target: str | None = None) -> dict[str, Any]:
+        decision = self.rbac.authorize(ctx, "portal.approvals.create", PortalResource(scope=ctx.natural_scope(), owner_user_id=ctx.user_id, group_id=ctx.group_id))
+        if not decision.allowed:
+            return {"status": "forbidden", "decision": decision.to_dict()}
+        approval = self.repo.create_approval(ctx, request_type, payload, target)
+        return {"status": "ok", "approval": approval.to_dict()}
+
+    def decide_approval(self, ctx: PortalContext, approval_id: str, decision_value: str, reason: str | None = None) -> dict[str, Any]:
+        approval = self.repo.approvals[approval_id]
+        decision = self.rbac.authorize(ctx, "portal.approvals.decide", PortalResource(scope=approval.scope, group_id=approval.group_id, owner_user_id=approval.requester_id))
+        if not decision.allowed:
+            return {"status": "forbidden", "decision": decision.to_dict()}
+        updated = self.repo.decide_approval(ctx, approval_id, decision_value, reason)
+        return {"status": "ok", "approval": updated.to_dict()}
+
+    def create_alert(self, ctx: PortalContext, level: str, message: str, scope: str | None = None, source: str = "portal") -> dict[str, Any]:
+        requested_scope = scope or ctx.natural_scope()
+        decision = self.rbac.authorize(ctx, "portal.alerts.read", PortalResource(scope=requested_scope, group_id=ctx.group_id, owner_user_id=ctx.user_id))
+        if not decision.allowed:
+            return {"status": "forbidden", "decision": decision.to_dict()}
+        alert = self.repo.create_alert(ctx, level, message, requested_scope, source)
+        return {"status": "ok", "alert": alert.to_dict()}
+
+    def list_alerts(self, ctx: PortalContext) -> dict[str, Any]:
+        return {"status": "ok", "alerts": [a.to_dict() for a in self.repo.list_alerts(ctx)]}
+
+    def list_approvals(self, ctx: PortalContext) -> dict[str, Any]:
+        return {"status": "ok", "approvals": [a.to_dict() for a in self.repo.list_approvals(ctx)]}
+
+    def list_audit(self, ctx: PortalContext) -> dict[str, Any]:
+        return {"status": "ok", "audit": [a.to_dict() for a in self.repo.list_audit(ctx)]}
+
+    def run_self_loop(self) -> dict[str, Any]:
+        owner = PortalContext("owner", ROLE_OWNER)
+        group_admin = PortalContext("admin", ROLE_GROUP_ADMIN, "g1")
+        user = PortalContext("user", ROLE_USER, "g1")
+        self.create_alert(owner, "info", "self-loop-started", SCOPE_GLOBAL, "self_loop")
+        approval = self.create_approval(user, "model_priority_change", {"model": "default"}, "model_priority")
+        approval_id = approval["approval"]["id"]
+        decision = self.decide_approval(group_admin, approval_id, "approved", "self-loop group approval")
+        return {
+            "status": "ok",
+            "checks": {
+                "user_dashboard": self.dashboard(user)["status"] == "ok",
+                "group_admin_dashboard": self.dashboard(group_admin)["status"] == "ok",
+                "owner_cockpit": self.owner_cockpit(owner)["status"] == "ok",
+                "approval_decision": decision["status"] == "ok",
+                "audit_written": len(self.repo.audit_events) >= 3,
+            },
+        }
+
+
+def build_context(user_id: str, role: str = ROLE_USER, group_id: str | None = None, display_name: str | None = None) -> PortalContext:
+    return PortalContext(user_id=user_id, role=role, group_id=group_id, display_name=display_name)
+
+
+__all__ = [
+    "ROLE_USER",
+    "ROLE_GROUP_ADMIN",
+    "ROLE_OWNER",
+    "ROLES",
+    "SCOPE_SELF",
+    "SCOPE_GROUP",
+    "SCOPE_GLOBAL",
+    "PortalContext",
+    "PortalResource",
+    "RBACDecision",
+    "ApprovalRequest",
+    "AlertRecord",
+    "AuditEvent",
+    "PortalRBACService",
+    "PortalRepository",
+    "PortalDashboardService",
+    "PortalOpsService",
+    "build_context",
+]

active-runtime/app/portal_routes.py

@@ -0,0 +1,239 @@
+"""HTTP routes for the three-role user portal.
+
+The router is FastAPI-compatible but keeps handlers as plain functions so tests and
+agent self-checks can exercise the contract without booting an ASGI server.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+try:  # pragma: no cover - optional runtime dependency
+    from fastapi import APIRouter, Header, HTTPException
+except Exception:  # pragma: no cover - test/runtime fallback
+    APIRouter = None
+    Header = None
+    HTTPException = RuntimeError
+
+from .portal_rbac_ops import (
+    ROLE_GROUP_ADMIN,
+    ROLE_OWNER,
+    ROLE_USER,
+    SCOPE_GLOBAL,
+    PortalOpsService,
+    PortalResource,
+    build_context,
+)
+
+portal_ops_service = PortalOpsService()
+
+
+def context_from_headers(
+    user_id: str | None = None,
+    role: str | None = None,
+    group_id: str | None = None,
+    display_name: str | None = None,
+):
+    return build_context(
+        user_id=user_id or "anonymous",
+        role=role or ROLE_USER,
+        group_id=group_id,
+        display_name=display_name,
+    )
+
+
+def get_portal_dashboard(role: str, user_id: str = "anonymous", group_id: str | None = None) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.dashboard(ctx)
+
+
+def get_owner_system_cockpit(user_id: str = "owner", runtime: dict[str, Any] | None = None) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=ROLE_OWNER)
+    return portal_ops_service.owner_cockpit(ctx, runtime)
+
+
+def check_portal_rbac(
+    role: str,
+    action: str,
+    user_id: str = "anonymous",
+    group_id: str | None = None,
+    scope: str | None = None,
+    owner_user_id: str | None = None,
+    resource_group_id: str | None = None,
+) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    resource = PortalResource(
+        scope=scope or ctx.natural_scope(),
+        owner_user_id=owner_user_id or user_id,
+        group_id=resource_group_id or group_id,
+    )
+    return portal_ops_service.check_rbac(ctx, action, resource)
+
+
+def create_portal_approval(
+    role: str,
+    request_type: str,
+    user_id: str = "anonymous",
+    group_id: str | None = None,
+    payload: dict[str, Any] | None = None,
+    target: str | None = None,
+) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.create_approval(ctx, request_type, payload, target)
+
+
+def decide_portal_approval(
+    approval_id: str,
+    decision: str,
+    role: str,
+    user_id: str,
+    group_id: str | None = None,
+    reason: str | None = None,
+) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.decide_approval(ctx, approval_id, decision, reason)
+
+
+def list_portal_alerts(role: str, user_id: str = "anonymous", group_id: str | None = None) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.list_alerts(ctx)
+
+
+def create_portal_alert(
+    role: str,
+    level: str,
+    message: str,
+    user_id: str = "anonymous",
+    group_id: str | None = None,
+    scope: str | None = None,
+    source: str = "portal",
+) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.create_alert(ctx, level, message, scope, source)
+
+
+def list_portal_approvals(role: str, user_id: str = "anonymous", group_id: str | None = None) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.list_approvals(ctx)
+
+
+def list_portal_audit_events(role: str, user_id: str = "anonymous", group_id: str | None = None) -> dict[str, Any]:
+    ctx = context_from_headers(user_id=user_id, role=role, group_id=group_id)
+    return portal_ops_service.list_audit(ctx)
+
+
+def run_portal_self_loop() -> dict[str, Any]:
+    return portal_ops_service.run_self_loop()
+
+
+def build_router():
+    if APIRouter is None:
+        return None
+
+    router = APIRouter(prefix="/portal", tags=["portal"])
+
+    @router.get("/dashboard", operation_id="getPortalDashboard")
+    def dashboard(
+        x_user_id: str | None = Header(default=None),
+        x_portal_role: str | None = Header(default=None),
+        x_group_id: str | None = Header(default=None),
+    ):
+        return get_portal_dashboard(x_portal_role or ROLE_USER, x_user_id or "anonymous", x_group_id)
+
+    @router.post("/rbac/check", operation_id="checkPortalRBAC")
+    def rbac_check(payload: dict[str, Any]):
+        return check_portal_rbac(
+            role=payload.get("role", ROLE_USER),
+            action=payload["action"],
+            user_id=payload.get("user_id", "anonymous"),
+            group_id=payload.get("group_id"),
+            scope=payload.get("scope"),
+            owner_user_id=payload.get("owner_user_id"),
+            resource_group_id=payload.get("resource_group_id"),
+        )
+
+    @router.post("/approvals", operation_id="createPortalApproval")
+    def create_approval(payload: dict[str, Any]):
+        return create_portal_approval(
+            role=payload.get("role", ROLE_USER),
+            request_type=payload["request_type"],
+            user_id=payload.get("user_id", "anonymous"),
+            group_id=payload.get("group_id"),
+            payload=payload.get("payload"),
+            target=payload.get("target"),
+        )
+
+    @router.post("/approvals/{approval_id}/decision", operation_id="decidePortalApproval")
+    def decide_approval(approval_id: str, payload: dict[str, Any]):
+        return decide_portal_approval(
+            approval_id=approval_id,
+            decision=payload["decision"],
+            role=payload.get("role", ROLE_GROUP_ADMIN),
+            user_id=payload.get("user_id", "anonymous"),
+            group_id=payload.get("group_id"),
+            reason=payload.get("reason"),
+        )
+
+    @router.get("/approvals", operation_id="listPortalApprovals")
+    def approvals(
+        x_user_id: str | None = Header(default=None),
+        x_portal_role: str | None = Header(default=None),
+        x_group_id: str | None = Header(default=None),
+    ):
+        return list_portal_approvals(x_portal_role or ROLE_USER, x_user_id or "anonymous", x_group_id)
+
+    @router.get("/alerts", operation_id="listPortalAlerts")
+    def alerts(
+        x_user_id: str | None = Header(default=None),
+        x_portal_role: str | None = Header(default=None),
+        x_group_id: str | None = Header(default=None),
+    ):
+        return list_portal_alerts(x_portal_role or ROLE_USER, x_user_id or "anonymous", x_group_id)
+
+    @router.post("/alerts", operation_id="createPortalAlert")
+    def create_alert(payload: dict[str, Any]):
+        return create_portal_alert(
+            role=payload.get("role", ROLE_USER),
+            level=payload["level"],
+            message=payload["message"],
+            user_id=payload.get("user_id", "anonymous"),
+            group_id=payload.get("group_id"),
+            scope=payload.get("scope"),
+            source=payload.get("source", "portal"),
+        )
+
+    @router.get("/audit", operation_id="listPortalAuditEvents")
+    def audit(
+        x_user_id: str | None = Header(default=None),
+        x_portal_role: str | None = Header(default=None),
+        x_group_id: str | None = Header(default=None),
+    ):
+        return list_portal_audit_events(x_portal_role or ROLE_USER, x_user_id or "anonymous", x_group_id)
+
+    @router.get("/owner/system", operation_id="getOwnerSystemCockpit")
+    def owner_system(x_user_id: str | None = Header(default=None)):
+        return get_owner_system_cockpit(x_user_id or "owner")
+
+    @router.post("/self-loop", operation_id="runPortalSelfLoop")
+    def self_loop():
+        return run_portal_self_loop()
+
+    return router
+
+
+router = build_router()
+
+__all__ = [
+    "router",
+    "build_router",
+    "context_from_headers",
+    "get_portal_dashboard",
+    "get_owner_system_cockpit",
+    "check_portal_rbac",
+    "create_portal_approval",
+    "decide_portal_approval",
+    "list_portal_alerts",
+    "list_portal_approvals",
+    "list_portal_audit_events",
+    "run_portal_self_loop",
+]

active-runtime/app/production_acceptance_gate.py

@@ -0,0 +1,69 @@
+"""Production acceptance gate for self-loop promotion.
+
+The gate verifies runtime, GitOps policy, portal readiness, and security rules
+before any promotion request can proceed.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class GateCheck:
+    name: str
+    passed: bool
+    detail: str
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass(frozen=True)
+class ProductionGateResult:
+    status: str
+    checks: tuple[GateCheck, ...]
+    owner_approval_required: bool
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "status": self.status,
+            "checks": [c.to_dict() for c in self.checks],
+            "owner_approval_required": self.owner_approval_required,
+            "created_at": self.created_at,
+        }
+
+
+class ProductionAcceptanceGate:
+    def evaluate(
+        self,
+        runtime: dict[str, Any],
+        baseline: dict[str, Any],
+        acceptance: dict[str, Any],
+        owner_approval_required: bool = True,
+    ) -> ProductionGateResult:
+        checks = (
+            GateCheck("runtime_active", runtime.get("status") == "active", "runtime status"),
+            GateCheck("git_patch_only", baseline.get("update_mode") == "git_patch_only", "patch-only policy"),
+            GateCheck("no_direct_main_push", baseline.get("codex_gitops", {}).get("direct_main_push") is False, "main push guard"),
+            GateCheck("acceptance_passed", acceptance.get("status") in {"pass", "waiting_owner_gate"}, "acceptance pipeline"),
+            GateCheck("no_secrets", baseline.get("codex_gitops", {}).get("api_keys_in_git") is False, "secret policy"),
+        )
+        passed = all(check.passed for check in checks)
+        if not passed:
+            status = "blocked"
+        elif owner_approval_required:
+            status = "waiting_owner_approval"
+        else:
+            status = "ready_for_promotion"
+        return ProductionGateResult(status, checks, owner_approval_required)
+
+
+__all__ = ["GateCheck", "ProductionGateResult", "ProductionAcceptanceGate"]

active-runtime/app/self_evolution_report.py

@@ -0,0 +1,59 @@
+"""Self-evolution reporting for release and owner review."""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass
+from datetime import datetime, timezone
+from typing import Any
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class EvolutionReport:
+    status: str
+    improvements: list[str]
+    risks: list[str]
+    metrics: dict[str, Any]
+    recommendations: list[str]
+    created_at: str = utc_now()
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfEvolutionReporter:
+    def generate(
+        self,
+        supervisor: dict[str, Any],
+        failure_memory: dict[str, Any],
+        adaptive_policy: dict[str, Any],
+    ) -> EvolutionReport:
+        failures = failure_memory.get("top_failures", [])
+        risks = []
+        if failures:
+            risks.append("recurring failures require owner-visible review")
+        if adaptive_policy.get("automation_level") == "analysis_only":
+            risks.append("automation reduced due to recurrence")
+        return EvolutionReport(
+            status="ready_for_review",
+            improvements=[
+                "self-loop supervisor enabled",
+                "failure memory accumulated",
+                "adaptive policy active",
+            ],
+            risks=risks,
+            metrics={
+                "failure_records": len(failure_memory.get("records", {})),
+                "supervisor_cycles": supervisor.get("state", {}).get("cycles", 0),
+            },
+            recommendations=[
+                "continue low-risk autonomous patches",
+                "review owner-gated promotion requests",
+            ],
+        )
+
+
+__all__ = ["EvolutionReport", "SelfEvolutionReporter"]

active-runtime/app/self_loop_event_hooks.py

@@ -0,0 +1,89 @@
+"""Event hooks that trigger autonomous self-loop jobs."""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .adaptive_policy import AdaptivePolicy
+from .failure_memory import FailureMemory
+from .self_loop_scheduler import SelfLoopScheduler
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class SelfLoopEvent:
+    source: str
+    event_type: str
+    goal: str
+    runtime: dict[str, Any] = field(default_factory=dict)
+    baseline: dict[str, Any] = field(default_factory=dict)
+    detail: str = ""
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopEventHook:
+    SUPPORTED_EVENTS = {
+        "runtime_unhealthy",
+        "gitops_drift",
+        "test_failed",
+        "portal_gap_detected",
+        "acceptance_failed",
+    }
+
+    def __init__(self, scheduler: SelfLoopScheduler | None = None, memory: FailureMemory | None = None, policy: AdaptivePolicy | None = None):
+        self.scheduler = scheduler or SelfLoopScheduler()
+        self.memory = memory or FailureMemory()
+        self.policy = policy or AdaptivePolicy()
+
+    def parse(self, payload: dict[str, Any]) -> SelfLoopEvent:
+        return SelfLoopEvent(
+            source=str(payload.get("source", "unknown")),
+            event_type=str(payload.get("event_type", "unknown")),
+            goal=str(payload.get("goal", "investigate self-loop event")),
+            runtime=dict(payload.get("runtime", {})),
+            baseline=dict(payload.get("baseline", {})),
+            detail=str(payload.get("detail", "")),
+        )
+
+    def handle(self, payload: dict[str, Any]) -> dict[str, Any]:
+        event = self.parse(payload)
+        if event.event_type not in self.SUPPORTED_EVENTS:
+            return {
+                "status": "ignored",
+                "reason": "unsupported_event",
+                "event": event.to_dict(),
+            }
+
+        if event.event_type in {"test_failed", "acceptance_failed", "runtime_unhealthy"}:
+            self.memory.record_failure(
+                component=event.source,
+                reason=event.event_type,
+                detail=event.detail,
+                severity="high",
+                remediation_hint="run self-loop diagnosis and generate patch plan",
+            )
+
+        decision = self.policy.evaluate(self.memory, event.runtime, event.baseline, event.goal)
+        options = self.policy.apply_to_scheduler(decision)
+        job = self.scheduler.enqueue(
+            goal=event.goal,
+            runtime=event.runtime,
+            baseline=event.baseline,
+            max_attempts=options["max_attempts"],
+        )
+        return {
+            "status": "queued",
+            "event": event.to_dict(),
+            "policy": decision.to_dict(),
+            "job": job.to_dict(),
+        }
+
+
+__all__ = ["SelfLoopEvent", "SelfLoopEventHook"]

active-runtime/app/self_loop_executor.py

@@ -0,0 +1,222 @@
+"""Autonomous self-loop executor.
+
+This layer turns probe/plan reports into safe execution outcomes. It does not
+bypass owner governance: high-risk or restricted actions are blocked at the owner
+approval gate and emitted as explicit pending work.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any, Callable
+
+from .autonomous_self_loop import AutonomousSelfLoop, RemediationStep, SelfLoopReport
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class ExecutionResult:
+    step_id: str
+    action: str
+    status: str
+    reason: str
+    risk: str
+    requires_owner_approval: bool
+    output: dict[str, Any] = field(default_factory=dict)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass(frozen=True)
+class TestResult:
+    name: str
+    status: str
+    detail: str = ""
+
+    def passed(self) -> bool:
+        return self.status == "pass"
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass
+class ExecutionReport:
+    status: str
+    report_id: str
+    actions: list[ExecutionResult]
+    tests: list[TestResult]
+    owner_approval_required: bool
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "status": self.status,
+            "report_id": self.report_id,
+            "actions": [a.to_dict() for a in self.actions],
+            "tests": [t.to_dict() for t in self.tests],
+            "owner_approval_required": self.owner_approval_required,
+            "created_at": self.created_at,
+        }
+
+
+class SelfLoopTestRunner:
+    """Deterministic self-loop checks that avoid shell execution and secrets."""
+
+    def run(self, runtime: dict[str, Any], baseline: dict[str, Any]) -> list[TestResult]:
+        return [
+            self._runtime_active(runtime),
+            self._patch_only_policy(baseline),
+            self._owner_gate_policy(baseline),
+            self._portal_domain_smoke(),
+        ]
+
+    def _runtime_active(self, runtime: dict[str, Any]) -> TestResult:
+        if runtime.get("status") == "active":
+            return TestResult("runtime_active", "pass", "runtime reports active")
+        return TestResult("runtime_active", "fail", "runtime is not active")
+
+    def _patch_only_policy(self, baseline: dict[str, Any]) -> TestResult:
+        if baseline.get("update_mode") == "git_patch_only":
+            return TestResult("git_patch_only", "pass", "patch-only updates enforced")
+        return TestResult("git_patch_only", "fail", "update mode is not git_patch_only")
+
+    def _owner_gate_policy(self, baseline: dict[str, Any]) -> TestResult:
+        codex_gitops = baseline.get("codex_gitops", {})
+        if codex_gitops.get("direct_main_push") is False:
+            return TestResult("owner_gate", "pass", "direct main push disabled")
+        return TestResult("owner_gate", "fail", "direct main push must remain disabled")
+
+    def _portal_domain_smoke(self) -> TestResult:
+        try:
+            from .portal_rbac_ops import ROLE_OWNER, PortalOpsService, build_context
+
+            service = PortalOpsService()
+            result = service.owner_cockpit(build_context("owner", ROLE_OWNER))
+            if result.get("status") == "ok":
+                return TestResult("portal_domain_smoke", "pass", "owner cockpit domain service responds")
+            return TestResult("portal_domain_smoke", "fail", "owner cockpit returned non-ok")
+        except Exception as exc:  # pragma: no cover - defensive smoke output
+            return TestResult("portal_domain_smoke", "fail", f"portal smoke failed: {type(exc).__name__}")
+
+
+class SelfLoopAgentExecutor:
+    """Executes safe self-loop steps and gates restricted ones."""
+
+    SAFE_ACTIONS = {
+        "health_probe",
+        "test_execution",
+        "failure_classification",
+        "patch_plan_generation",
+        "report_generation",
+        "create-low-risk-patch",
+    }
+
+    RESTRICTED_ACTIONS = {
+        "request-runtime-recovery",
+        "commit-policy-patch",
+        "commit-security-policy",
+        "commit-runtime-config",
+        "commit-portal-config",
+        "production-promotion",
+        "permission-escalation",
+        "secret-rotation",
+    }
+
+    def __init__(self, loop: AutonomousSelfLoop | None = None, test_runner: SelfLoopTestRunner | None = None):
+        self.loop = loop or AutonomousSelfLoop(owner_approval_required=True)
+        self.test_runner = test_runner or SelfLoopTestRunner()
+        self.handlers: dict[str, Callable[[RemediationStep], dict[str, Any]]] = {
+            "create-low-risk-patch": self._create_low_risk_patch_manifest,
+            "patch_plan_generation": self._patch_plan_manifest,
+            "report_generation": self._report_manifest,
+        }
+
+    def execute_step(self, step: RemediationStep) -> ExecutionResult:
+        if step.requires_owner_approval or step.action in self.RESTRICTED_ACTIONS:
+            return ExecutionResult(
+                step.id,
+                step.action,
+                "blocked_owner_gate",
+                "restricted action requires owner approval",
+                step.risk,
+                True,
+                {"title": step.title},
+            )
+        if step.risk not in {"low"}:
+            return ExecutionResult(
+                step.id,
+                step.action,
+                "blocked_risk_gate",
+                "only low-risk autonomous actions are allowed",
+                step.risk,
+                True,
+                {"title": step.title},
+            )
+        handler = self.handlers.get(step.action, self._safe_noop_manifest)
+        return ExecutionResult(
+            step.id,
+            step.action,
+            "executed",
+            "safe autonomous action executed",
+            step.risk,
+            False,
+            handler(step),
+        )
+
+    def execute_report(self, report: SelfLoopReport, runtime: dict[str, Any], baseline: dict[str, Any]) -> ExecutionReport:
+        actions = [self.execute_step(step) for step in report.remediation]
+        tests = self.test_runner.run(runtime, baseline)
+        owner_approval_required = self.loop.owner_approval_required or any(a.requires_owner_approval for a in actions)
+        failed_tests = [t for t in tests if not t.passed()]
+        if failed_tests:
+            status = "failed_tests"
+        elif owner_approval_required:
+            status = "waiting_owner_gate"
+        else:
+            status = "completed"
+        return ExecutionReport(status, report.id, actions, tests, owner_approval_required)
+
+    def run_once(self, runtime: dict[str, Any], baseline: dict[str, Any]) -> dict[str, Any]:
+        report = self.loop.evaluate(runtime, baseline)
+        execution = self.execute_report(report, runtime, baseline)
+        acceptance = self.loop.acceptance(report)
+        owner_approval_required = execution.owner_approval_required or acceptance["owner_approval_required"]
+        return {
+            "status": execution.status,
+            "can_unattended_continue": execution.status == "completed" and not owner_approval_required,
+            "owner_approval_required": owner_approval_required,
+            "plan": report.to_dict(),
+            "execution": execution.to_dict(),
+        }
+
+    def _create_low_risk_patch_manifest(self, step: RemediationStep) -> dict[str, Any]:
+        return {
+            "patch_intent": step.title,
+            "branch_policy": "patch-only",
+            "direct_main_push": False,
+            "secrets_in_git": False,
+        }
+
+    def _patch_plan_manifest(self, step: RemediationStep) -> dict[str, Any]:
+        return {"plan": step.title, "action": step.action}
+
+    def _report_manifest(self, step: RemediationStep) -> dict[str, Any]:
+        return {"report": step.title, "generated": True}
+
+    def _safe_noop_manifest(self, step: RemediationStep) -> dict[str, Any]:
+        return {"noop": True, "title": step.title}
+
+
+__all__ = [
+    "ExecutionResult",
+    "TestResult",
+    "ExecutionReport",
+    "SelfLoopTestRunner",
+    "SelfLoopAgentExecutor",
+]

active-runtime/app/self_loop_gitops_adapter.py

@@ -0,0 +1,58 @@
+"""Adapter manifest for controlled GitOps Actions execution.
+
+The adapter produces an action plan consumed by the GitOps bridge. It does not
+embed credentials and does not perform direct repository writes.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .self_loop_patch_executor import PatchBundle
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class GitOpsActionPlan:
+    action: str
+    branch: str
+    operations: tuple[dict[str, Any], ...]
+    owner_approval_required: bool
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopGitOpsAdapter:
+    def build_action_plan(self, bundle: PatchBundle) -> GitOpsActionPlan:
+        operations = tuple(
+            {
+                "operation": "commitFile",
+                "path": patch_file.path,
+                "checksum": patch_file.checksum(),
+            }
+            for patch_file in bundle.files
+        )
+        return GitOpsActionPlan(
+            action="gitops_patch_apply",
+            branch=bundle.branch,
+            operations=operations,
+            owner_approval_required=bundle.owner_approval_required,
+        )
+
+    def validate_action_plan(self, plan: GitOpsActionPlan) -> dict[str, Any]:
+        return {
+            "valid": plan.branch.startswith("patch/") and plan.action == "gitops_patch_apply",
+            "branch": plan.branch,
+            "owner_approval_required": plan.owner_approval_required,
+            "operations": len(plan.operations),
+        }
+
+
+__all__ = ["GitOpsActionPlan", "SelfLoopGitOpsAdapter"]

active-runtime/app/self_loop_orchestrator.py

@@ -0,0 +1,142 @@
+"""Multi-agent self-loop orchestration.
+
+Coordinates planning, implementation proposals, and validation feedback from
+Hermes/OpenClaw/CodexBridge-style agents without storing credentials or bypassing
+GitOps governance.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .self_loop_executor import SelfLoopAgentExecutor
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass(frozen=True)
+class AgentProfile:
+    name: str
+    role: str
+    weight: int
+    capabilities: tuple[str, ...]
+
+
+@dataclass(frozen=True)
+class AgentTask:
+    task_id: str
+    goal: str
+    task_type: str
+    risk: str = "low"
+    payload: dict[str, Any] = field(default_factory=dict)
+
+
+@dataclass(frozen=True)
+class AgentResponse:
+    agent: str
+    status: str
+    proposal: dict[str, Any]
+    confidence: float
+
+
+@dataclass(frozen=True)
+class AgentVote:
+    agent: str
+    approve: bool
+    weight: int
+    reason: str
+
+
+@dataclass
+class PatchManifest:
+    branch_policy: str
+    files: list[str]
+    tests: list[str]
+    approvals_required: bool
+    generated_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopAgentOrchestrator:
+    AGENTS = (
+        AgentProfile("Hermes", "planner", 2, ("analysis", "planning", "risk")),
+        AgentProfile("OpenClaw", "implementation", 2, ("code", "patch", "test")),
+        AgentProfile("CodexBridge", "validation", 2, ("gitops", "validation", "acceptance")),
+    )
+
+    def __init__(self, executor: SelfLoopAgentExecutor | None = None):
+        self.executor = executor or SelfLoopAgentExecutor()
+
+    def dispatch(self, task: AgentTask) -> list[AgentResponse]:
+        responses = []
+        for agent in self.AGENTS:
+            if agent.role == "planner":
+                proposal = {"risk": task.risk, "plan": "classify issue and produce remediation steps"}
+            elif agent.role == "implementation":
+                proposal = {"patch": True, "branch_policy": "patch-only", "goal": task.goal}
+            else:
+                proposal = {"validation": ["tests", "gitops_policy", "acceptance_report"]}
+            responses.append(AgentResponse(agent.name, "ready", proposal, 0.9))
+        return responses
+
+    def vote(self, responses: list[AgentResponse]) -> dict[str, Any]:
+        votes = []
+        total = 0
+        approved = 0
+        for response in responses:
+            profile = next(a for a in self.AGENTS if a.name == response.agent)
+            approve = response.status == "ready"
+            votes.append(AgentVote(response.agent, approve, profile.weight, "ready" if approve else "rejected"))
+            total += profile.weight
+            approved += profile.weight if approve else 0
+        return {
+            "approved": approved >= total / 2,
+            "approval_weight": approved,
+            "total_weight": total,
+            "votes": [asdict(v) for v in votes],
+        }
+
+    def create_patch_manifest(self, task: AgentTask, requires_approval: bool) -> PatchManifest:
+        return PatchManifest(
+            branch_policy="patch-only",
+            files=[
+                "active-runtime/app",
+                "openapi",
+                "tests",
+            ],
+            tests=[
+                "self_loop_executor",
+                "portal_self_loop",
+                "acceptance_pipeline",
+            ],
+            approvals_required=requires_approval or task.risk != "low",
+        )
+
+    def run_cycle(self, runtime: dict[str, Any], baseline: dict[str, Any], goal: str) -> dict[str, Any]:
+        task = AgentTask("self-loop-cycle", goal, "remediation")
+        executor_result = self.executor.run_once(runtime, baseline)
+        responses = self.dispatch(task)
+        decision = self.vote(responses)
+        manifest = self.create_patch_manifest(task, executor_result["owner_approval_required"])
+        return {
+            "status": "ready_for_patch" if decision["approved"] else "blocked_agent_vote",
+            "executor": executor_result,
+            "agents": [asdict(r) for r in responses],
+            "vote": decision,
+            "patch_manifest": manifest.to_dict(),
+        }
+
+
+__all__ = [
+    "AgentProfile",
+    "AgentTask",
+    "AgentResponse",
+    "SelfLoopAgentOrchestrator",
+    "PatchManifest",
+]

active-runtime/app/self_loop_patch_executor.py

@@ -0,0 +1,284 @@
+"""Self-loop patch executor and acceptance pipeline.
+
+This module converts multi-agent self-loop decisions into GitOps-safe patch
+bundles, validates policy, runs deterministic acceptance checks, and prepares a
+promotion request. It intentionally does not push main, rotate secrets, or bypass
+owner approval.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from hashlib import sha256
+from typing import Any
+
+from .self_loop_orchestrator import SelfLoopAgentOrchestrator
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+def stable_id(*parts: str) -> str:
+    digest = sha256("::".join(parts).encode("utf-8")).hexdigest()[:12]
+    return f"slp_{digest}"
+
+
+@dataclass(frozen=True)
+class PatchFile:
+    path: str
+    content: str
+    purpose: str
+
+    def checksum(self) -> str:
+        return sha256(self.content.encode("utf-8")).hexdigest()
+
+    def to_dict(self) -> dict[str, Any]:
+        data = asdict(self)
+        data["sha256"] = self.checksum()
+        return data
+
+
+@dataclass(frozen=True)
+class PatchBundle:
+    id: str
+    branch: str
+    risk: str
+    goal: str
+    files: tuple[PatchFile, ...]
+    owner_approval_required: bool
+    direct_main_push: bool = False
+    secrets_in_git: bool = False
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "id": self.id,
+            "branch": self.branch,
+            "risk": self.risk,
+            "goal": self.goal,
+            "files": [f.to_dict() for f in self.files],
+            "owner_approval_required": self.owner_approval_required,
+            "direct_main_push": self.direct_main_push,
+            "secrets_in_git": self.secrets_in_git,
+            "created_at": self.created_at,
+        }
+
+
+@dataclass(frozen=True)
+class AcceptanceCheck:
+    name: str
+    status: str
+    detail: str
+    required: bool = True
+
+    def passed(self) -> bool:
+        return self.status == "pass" or not self.required
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+@dataclass(frozen=True)
+class AcceptanceReport:
+    status: str
+    patch_id: str
+    checks: tuple[AcceptanceCheck, ...]
+    owner_approval_required: bool
+    created_at: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "status": self.status,
+            "patch_id": self.patch_id,
+            "checks": [c.to_dict() for c in self.checks],
+            "owner_approval_required": self.owner_approval_required,
+            "created_at": self.created_at,
+        }
+
+
+@dataclass(frozen=True)
+class PromotionRequest:
+    status: str
+    patch_id: str
+    branch: str
+    reason: str
+    owner_approval_required: bool
+    acceptance: AcceptanceReport
+
+    def to_dict(self) -> dict[str, Any]:
+        return {
+            "status": self.status,
+            "patch_id": self.patch_id,
+            "branch": self.branch,
+            "reason": self.reason,
+            "owner_approval_required": self.owner_approval_required,
+            "acceptance": self.acceptance.to_dict(),
+        }
+
+
+class PatchPolicyValidator:
+    """Validates GitOps safety constraints before any patch is promoted."""
+
+    FORBIDDEN_PATH_PREFIXES = (
+        ".git/",
+        "secrets/",
+        "private/",
+    )
+    SECRET_MARKERS = (
+        "BEGIN PRIVATE KEY",
+        "api_key=",
+        "password=",
+        "token=",
+        "secret=",
+    )
+
+    def validate(self, bundle: PatchBundle) -> tuple[AcceptanceCheck, ...]:
+        checks: list[AcceptanceCheck] = []
+        checks.append(self._patch_only(bundle))
+        checks.append(self._no_direct_main_push(bundle))
+        checks.append(self._no_secret_files(bundle))
+        checks.append(self._file_paths_safe(bundle))
+        checks.append(self._content_safe(bundle))
+        return tuple(checks)
+
+    def _patch_only(self, bundle: PatchBundle) -> AcceptanceCheck:
+        if bundle.branch.startswith("patch/"):
+            return AcceptanceCheck("patch_branch_policy", "pass", "branch is patch-scoped")
+        return AcceptanceCheck("patch_branch_policy", "fail", "branch must start with patch/")
+
+    def _no_direct_main_push(self, bundle: PatchBundle) -> AcceptanceCheck:
+        if bundle.direct_main_push is False:
+            return AcceptanceCheck("no_direct_main_push", "pass", "direct main push disabled")
+        return AcceptanceCheck("no_direct_main_push", "fail", "direct main push is not allowed")
+
+    def _no_secret_files(self, bundle: PatchBundle) -> AcceptanceCheck:
+        if bundle.secrets_in_git is False:
+            return AcceptanceCheck("no_secrets_in_git", "pass", "bundle declares no secrets")
+        return AcceptanceCheck("no_secrets_in_git", "fail", "secrets must not be stored in Git")
+
+    def _file_paths_safe(self, bundle: PatchBundle) -> AcceptanceCheck:
+        unsafe = [f.path for f in bundle.files if f.path.startswith(self.FORBIDDEN_PATH_PREFIXES)]
+        if not unsafe:
+            return AcceptanceCheck("safe_file_paths", "pass", "all file paths are allowed")
+        return AcceptanceCheck("safe_file_paths", "fail", f"unsafe paths: {unsafe}")
+
+    def _content_safe(self, bundle: PatchBundle) -> AcceptanceCheck:
+        flagged: list[str] = []
+        for patch_file in bundle.files:
+            content_lower = patch_file.content.lower()
+            for marker in self.SECRET_MARKERS:
+                if marker.lower() in content_lower:
+                    flagged.append(patch_file.path)
+                    break
+        if not flagged:
+            return AcceptanceCheck("safe_file_content", "pass", "no secret markers detected")
+        return AcceptanceCheck("safe_file_content", "fail", f"secret-like markers detected: {flagged}")
+
+
+class AcceptancePipeline:
+    def __init__(self, validator: PatchPolicyValidator | None = None):
+        self.validator = validator or PatchPolicyValidator()
+
+    def run(self, bundle: PatchBundle, executor_result: dict[str, Any]) -> AcceptanceReport:
+        checks = list(self.validator.validate(bundle))
+        checks.extend(self._executor_checks(executor_result))
+        status = "pass" if all(c.passed() for c in checks) else "fail"
+        if status == "pass" and bundle.owner_approval_required:
+            status = "waiting_owner_gate"
+        return AcceptanceReport(status, bundle.id, tuple(checks), bundle.owner_approval_required)
+
+    def _executor_checks(self, executor_result: dict[str, Any]) -> tuple[AcceptanceCheck, ...]:
+        execution = executor_result.get("execution", {})
+        tests = execution.get("tests", [])
+        checks: list[AcceptanceCheck] = []
+        for test in tests:
+            checks.append(AcceptanceCheck(
+                name=f"executor_{test.get('name', 'unknown')}",
+                status="pass" if test.get("status") == "pass" else "fail",
+                detail=test.get("detail", ""),
+            ))
+        if not checks:
+            checks.append(AcceptanceCheck("executor_tests_present", "fail", "no executor tests were reported"))
+        return tuple(checks)
+
+
+class SelfLoopPatchExecutor:
+    def __init__(self, orchestrator: SelfLoopAgentOrchestrator | None = None, pipeline: AcceptancePipeline | None = None):
+        self.orchestrator = orchestrator or SelfLoopAgentOrchestrator()
+        self.pipeline = pipeline or AcceptancePipeline()
+
+    def build_patch_bundle(self, cycle: dict[str, Any], goal: str, branch: str = "patch/autonomous-self-loop") -> PatchBundle:
+        executor = cycle.get("executor", {})
+        owner_approval_required = bool(executor.get("owner_approval_required"))
+        manifest = cycle.get("patch_manifest", {})
+        risk = "medium" if owner_approval_required else "low"
+        patch_id = stable_id(branch, goal, cycle.get("status", "unknown"))
+        files = (
+            PatchFile(
+                path=f"patches/{patch_id}.self-loop.json",
+                purpose="self-loop patch manifest",
+                content=self._manifest_content(patch_id, goal, cycle, manifest),
+            ),
+        )
+        return PatchBundle(
+            id=patch_id,
+            branch=branch,
+            risk=risk,
+            goal=goal,
+            files=files,
+            owner_approval_required=owner_approval_required or bool(manifest.get("approvals_required")),
+        )
+
+    def run_cycle_to_promotion(
+        self,
+        runtime: dict[str, Any],
+        baseline: dict[str, Any],
+        goal: str,
+        branch: str = "patch/autonomous-self-loop",
+    ) -> dict[str, Any]:
+        cycle = self.orchestrator.run_cycle(runtime, baseline, goal)
+        bundle = self.build_patch_bundle(cycle, goal, branch)
+        acceptance = self.pipeline.run(bundle, cycle.get("executor", {}))
+        promotion = self.prepare_promotion(bundle, acceptance)
+        return {
+            "status": promotion.status,
+            "cycle": cycle,
+            "patch_bundle": bundle.to_dict(),
+            "acceptance": acceptance.to_dict(),
+            "promotion": promotion.to_dict(),
+        }
+
+    def prepare_promotion(self, bundle: PatchBundle, acceptance: AcceptanceReport) -> PromotionRequest:
+        if acceptance.status == "fail":
+            return PromotionRequest("blocked_failed_acceptance", bundle.id, bundle.branch, "acceptance failed", True, acceptance)
+        if acceptance.owner_approval_required:
+            return PromotionRequest("waiting_owner_approval", bundle.id, bundle.branch, "owner approval required", True, acceptance)
+        return PromotionRequest("ready_for_auto_merge", bundle.id, bundle.branch, "low-risk patch passed acceptance", False, acceptance)
+
+    def _manifest_content(self, patch_id: str, goal: str, cycle: dict[str, Any], manifest: dict[str, Any]) -> str:
+        lines = [
+            "{",
+            f'  "id": "{patch_id}",',
+            f'  "goal": "{goal}",',
+            f'  "status": "{cycle.get("status", "unknown")}",',
+            f'  "branch_policy": "{manifest.get("branch_policy", "patch-only")}",',
+            '  "direct_main_push": false,',
+            '  "secrets_in_git": false,',
+            f'  "owner_approval_required": {str(bool(manifest.get("approvals_required"))).lower()}',
+            "}",
+        ]
+        return "\n".join(lines)
+
+
+__all__ = [
+    "PatchFile",
+    "PatchBundle",
+    "AcceptanceCheck",
+    "AcceptanceReport",
+    "PromotionRequest",
+    "PatchPolicyValidator",
+    "AcceptancePipeline",
+    "SelfLoopPatchExecutor",
+]

active-runtime/app/self_loop_runtime_api.py

@@ -0,0 +1,140 @@
+"""Runtime API wiring for autonomous self-loop jobs.
+
+This module exposes plain functions and an optional FastAPI router for portal,
+webhook, and worker integrations. It keeps all writes behind patch-only GitOps
+plans and never stores secrets.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+try:  # pragma: no cover - optional runtime dependency
+    from fastapi import APIRouter, Header
+except Exception:  # pragma: no cover - fallback for unit tests
+    APIRouter = None
+    Header = None
+
+from .production_acceptance_gate import ProductionAcceptanceGate
+from .self_loop_scheduler import SelfLoopScheduler, TriggerType
+
+scheduler = SelfLoopScheduler()
+production_gate = ProductionAcceptanceGate()
+
+
+def enqueue_self_loop_job(
+    goal: str,
+    runtime: dict[str, Any],
+    baseline: dict[str, Any],
+    trigger: str = "event",
+    branch: str = "patch/autonomous-self-loop",
+) -> dict[str, Any]:
+    job = scheduler.enqueue(goal, runtime, baseline, TriggerType(trigger), branch)
+    return {"status": "queued", "job": job.to_dict()}
+
+
+def run_self_loop_job(job_id: str) -> dict[str, Any]:
+    return {"status": "ok", "job": scheduler.run_job(job_id)}
+
+
+def tick_self_loop_jobs(limit: int = 1) -> dict[str, Any]:
+    return {"status": "ok", "jobs": scheduler.tick(limit), "snapshot": scheduler.snapshot().to_dict()}
+
+
+def list_self_loop_jobs() -> dict[str, Any]:
+    return {"status": "ok", "jobs": [job.to_dict() for job in scheduler.jobs.values()]}
+
+
+def get_self_loop_job(job_id: str) -> dict[str, Any]:
+    job = scheduler.jobs.get(job_id)
+    if not job:
+        return {"status": "not_found", "job_id": job_id}
+    return {"status": "ok", "job": job.to_dict()}
+
+
+def run_self_loop_once(
+    goal: str,
+    runtime: dict[str, Any],
+    baseline: dict[str, Any],
+    branch: str = "patch/autonomous-self-loop",
+) -> dict[str, Any]:
+    job = scheduler.enqueue(goal, runtime, baseline, TriggerType.MANUAL, branch, max_attempts=1)
+    return run_self_loop_job(job.id)
+
+
+def evaluate_self_loop_production_gate(
+    runtime: dict[str, Any],
+    baseline: dict[str, Any],
+    acceptance: dict[str, Any],
+    owner_approval_required: bool = True,
+) -> dict[str, Any]:
+    result = production_gate.evaluate(runtime, baseline, acceptance, owner_approval_required)
+    return {"status": "ok", "gate": result.to_dict()}
+
+
+def build_router():
+    if APIRouter is None:
+        return None
+
+    router = APIRouter(prefix="/self-loop", tags=["self-loop"])
+
+    @router.post("/jobs", operation_id="enqueueSelfLoopJob")
+    def enqueue_job(payload: dict[str, Any]):
+        return enqueue_self_loop_job(
+            goal=payload["goal"],
+            runtime=payload.get("runtime", {}),
+            baseline=payload.get("baseline", {}),
+            trigger=payload.get("trigger", "event"),
+            branch=payload.get("branch", "patch/autonomous-self-loop"),
+        )
+
+    @router.get("/jobs", operation_id="listSelfLoopJobs")
+    def jobs():
+        return list_self_loop_jobs()
+
+    @router.get("/jobs/{job_id}", operation_id="getSelfLoopJob")
+    def get_job(job_id: str):
+        return get_self_loop_job(job_id)
+
+    @router.post("/jobs/{job_id}/run", operation_id="runSelfLoopJob")
+    def run_job(job_id: str):
+        return run_self_loop_job(job_id)
+
+    @router.post("/tick", operation_id="tickSelfLoopJobs")
+    def tick(payload: dict[str, Any] | None = None):
+        return tick_self_loop_jobs((payload or {}).get("limit", 1))
+
+    @router.post("/run-once", operation_id="runSelfLoopOnce")
+    def run_once(payload: dict[str, Any]):
+        return run_self_loop_once(
+            goal=payload["goal"],
+            runtime=payload.get("runtime", {}),
+            baseline=payload.get("baseline", {}),
+            branch=payload.get("branch", "patch/autonomous-self-loop"),
+        )
+
+    @router.post("/production-gate", operation_id="evaluateSelfLoopProductionGate")
+    def production_gate_route(payload: dict[str, Any]):
+        return evaluate_self_loop_production_gate(
+            runtime=payload.get("runtime", {}),
+            baseline=payload.get("baseline", {}),
+            acceptance=payload.get("acceptance", {}),
+            owner_approval_required=payload.get("owner_approval_required", True),
+        )
+
+    return router
+
+
+router = build_router()
+
+__all__ = [
+    "router",
+    "build_router",
+    "enqueue_self_loop_job",
+    "run_self_loop_job",
+    "tick_self_loop_jobs",
+    "list_self_loop_jobs",
+    "get_self_loop_job",
+    "run_self_loop_once",
+    "evaluate_self_loop_production_gate",
+]

active-runtime/app/self_loop_scheduler.py

@@ -0,0 +1,163 @@
+"""Autonomous self-loop scheduler.
+
+Schedules event-triggered and interval-style self-loop cycles. The scheduler is
+framework-neutral and deterministic: production code can invoke tick() from a
+cron, worker, or webhook handler without giving the module direct access to
+secrets, shell commands, or main-branch writes.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from enum import Enum
+from typing import Any
+from uuid import uuid4
+
+from .self_loop_patch_executor import SelfLoopPatchExecutor
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+class TriggerType(str, Enum):
+    INTERVAL = "interval"
+    EVENT = "event"
+    MANUAL = "manual"
+
+
+class JobStatus(str, Enum):
+    PENDING = "pending"
+    RUNNING = "running"
+    COMPLETED = "completed"
+    WAITING_OWNER = "waiting_owner"
+    FAILED = "failed"
+    RETRY_PENDING = "retry_pending"
+
+
+@dataclass
+class SelfLoopJob:
+    id: str
+    goal: str
+    trigger: TriggerType
+    runtime: dict[str, Any]
+    baseline: dict[str, Any]
+    branch: str = "patch/autonomous-self-loop"
+    status: JobStatus = JobStatus.PENDING
+    attempts: int = 0
+    max_attempts: int = 3
+    last_error: str | None = None
+    created_at: str = field(default_factory=utc_now)
+    updated_at: str = field(default_factory=utc_now)
+    result: dict[str, Any] | None = None
+
+    def to_dict(self) -> dict[str, Any]:
+        data = asdict(self)
+        data["trigger"] = self.trigger.value
+        data["status"] = self.status.value
+        return data
+
+
+@dataclass(frozen=True)
+class SchedulerSnapshot:
+    pending: int
+    running: int
+    completed: int
+    waiting_owner: int
+    failed: int
+    retry_pending: int
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopScheduler:
+    """Small in-process scheduler used by runtime workers and tests."""
+
+    def __init__(self, executor: SelfLoopPatchExecutor | None = None):
+        self.executor = executor or SelfLoopPatchExecutor()
+        self.jobs: dict[str, SelfLoopJob] = {}
+
+    def enqueue(
+        self,
+        goal: str,
+        runtime: dict[str, Any],
+        baseline: dict[str, Any],
+        trigger: TriggerType | str = TriggerType.EVENT,
+        branch: str = "patch/autonomous-self-loop",
+        max_attempts: int = 3,
+    ) -> SelfLoopJob:
+        trigger_value = trigger if isinstance(trigger, TriggerType) else TriggerType(trigger)
+        job = SelfLoopJob(
+            id=f"job_{uuid4().hex[:12]}",
+            goal=goal,
+            trigger=trigger_value,
+            runtime=runtime,
+            baseline=baseline,
+            branch=branch,
+            max_attempts=max_attempts,
+        )
+        self.jobs[job.id] = job
+        return job
+
+    def tick(self, limit: int = 1) -> list[dict[str, Any]]:
+        runnable = [j for j in self.jobs.values() if j.status in {JobStatus.PENDING, JobStatus.RETRY_PENDING}]
+        results: list[dict[str, Any]] = []
+        for job in runnable[:limit]:
+            results.append(self.run_job(job.id))
+        return results
+
+    def run_job(self, job_id: str) -> dict[str, Any]:
+        job = self.jobs[job_id]
+        job.status = JobStatus.RUNNING
+        job.attempts += 1
+        job.updated_at = utc_now()
+        try:
+            result = self.executor.run_cycle_to_promotion(job.runtime, job.baseline, job.goal, job.branch)
+            job.result = result
+            promotion_status = result.get("promotion", {}).get("status")
+            if promotion_status == "waiting_owner_approval":
+                job.status = JobStatus.WAITING_OWNER
+            elif promotion_status == "ready_for_auto_merge":
+                job.status = JobStatus.COMPLETED
+            elif job.attempts < job.max_attempts:
+                job.status = JobStatus.RETRY_PENDING
+                job.last_error = promotion_status or "promotion_not_ready"
+            else:
+                job.status = JobStatus.FAILED
+                job.last_error = promotion_status or "promotion_failed"
+        except Exception as exc:  # pragma: no cover - defensive runtime guard
+            job.last_error = f"{type(exc).__name__}: {exc}"
+            job.status = JobStatus.RETRY_PENDING if job.attempts < job.max_attempts else JobStatus.FAILED
+        job.updated_at = utc_now()
+        return job.to_dict()
+
+    def retry_failed(self) -> list[str]:
+        retry_ids: list[str] = []
+        for job in self.jobs.values():
+            if job.status == JobStatus.FAILED and job.attempts < job.max_attempts:
+                job.status = JobStatus.RETRY_PENDING
+                job.updated_at = utc_now()
+                retry_ids.append(job.id)
+        return retry_ids
+
+    def snapshot(self) -> SchedulerSnapshot:
+        statuses = [job.status for job in self.jobs.values()]
+        return SchedulerSnapshot(
+            pending=statuses.count(JobStatus.PENDING),
+            running=statuses.count(JobStatus.RUNNING),
+            completed=statuses.count(JobStatus.COMPLETED),
+            waiting_owner=statuses.count(JobStatus.WAITING_OWNER),
+            failed=statuses.count(JobStatus.FAILED),
+            retry_pending=statuses.count(JobStatus.RETRY_PENDING),
+        )
+
+
+__all__ = [
+    "TriggerType",
+    "JobStatus",
+    "SelfLoopJob",
+    "SchedulerSnapshot",
+    "SelfLoopScheduler",
+]

active-runtime/app/self_loop_supervisor.py

@@ -0,0 +1,77 @@
+"""Long-running supervisor model for autonomous self-loop runtime."""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .self_loop_event_hooks import SelfLoopEventHook
+from .failure_memory import FailureMemory
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass
+class SupervisorState:
+    running: bool = False
+    cycles: int = 0
+    last_cycle: str | None = None
+    last_status: str = "idle"
+    heartbeat: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopSupervisor:
+    def __init__(self, hook: SelfLoopEventHook | None = None, memory: FailureMemory | None = None):
+        self.memory = memory or FailureMemory()
+        self.hook = hook or SelfLoopEventHook(memory=self.memory)
+        self.state = SupervisorState()
+
+    def start(self) -> dict[str, Any]:
+        self.state.running = True
+        self.state.last_status = "running"
+        self.state.heartbeat = utc_now()
+        return self.status()
+
+    def stop(self) -> dict[str, Any]:
+        self.state.running = False
+        self.state.last_status = "stopped"
+        self.state.heartbeat = utc_now()
+        return self.status()
+
+    def heartbeat(self) -> dict[str, Any]:
+        self.state.heartbeat = utc_now()
+        return self.status()
+
+    def handle_event(self, payload: dict[str, Any]) -> dict[str, Any]:
+        if not self.state.running:
+            self.start()
+        self.state.cycles += 1
+        self.state.last_cycle = utc_now()
+        result = self.hook.handle(payload)
+        self.state.last_status = result.get("status", "unknown")
+        self.state.heartbeat = utc_now()
+        return result
+
+    def tick(self, events: list[dict[str, Any]]) -> dict[str, Any]:
+        results = [self.handle_event(event) for event in events]
+        return {
+            "status": "ok",
+            "supervisor": self.status(),
+            "events": results,
+            "failure_memory": self.memory.export(),
+        }
+
+    def status(self) -> dict[str, Any]:
+        return {
+            "state": self.state.to_dict(),
+            "failure_memory_size": len(self.memory.records),
+        }
+
+
+__all__ = ["SupervisorState", "SelfLoopSupervisor"]

active-runtime/app/self_loop_worker.py

@@ -0,0 +1,70 @@
+"""Resident worker model for self-loop supervision.
+
+Provides a daemon-friendly lifecycle without forcing an infinite loop inside the
+application. A process manager can call start/run_cycle/stop and persist state.
+"""
+
+from __future__ import annotations
+
+from dataclasses import asdict, dataclass, field
+from datetime import datetime, timezone
+from typing import Any
+
+from .self_loop_supervisor import SelfLoopSupervisor
+
+
+def utc_now() -> str:
+    return datetime.now(timezone.utc).isoformat()
+
+
+@dataclass
+class WorkerState:
+    running: bool = False
+    cycles: int = 0
+    last_error: str | None = None
+    started_at: str | None = None
+    heartbeat: str = field(default_factory=utc_now)
+
+    def to_dict(self) -> dict[str, Any]:
+        return asdict(self)
+
+
+class SelfLoopWorker:
+    def __init__(self, supervisor: SelfLoopSupervisor | None = None):
+        self.supervisor = supervisor or SelfLoopSupervisor()
+        self.state = WorkerState()
+
+    def start(self) -> dict[str, Any]:
+        self.state.running = True
+        self.state.started_at = utc_now()
+        self.state.heartbeat = utc_now()
+        self.supervisor.start()
+        return self.status()
+
+    def run_cycle(self, events: list[dict[str, Any]]) -> dict[str, Any]:
+        if not self.state.running:
+            self.start()
+        try:
+            result = self.supervisor.tick(events)
+            self.state.cycles += 1
+            self.state.heartbeat = utc_now()
+            return result
+        except Exception as exc:
+            self.state.last_error = f"{type(exc).__name__}: {exc}"
+            self.state.heartbeat = utc_now()
+            raise
+
+    def stop(self) -> dict[str, Any]:
+        self.state.running = False
+        self.supervisor.stop()
+        self.state.heartbeat = utc_now()
+        return self.status()
+
+    def status(self) -> dict[str, Any]:
+        return {
+            "worker": self.state.to_dict(),
+            "supervisor": self.supervisor.status(),
+        }
+
+
+__all__ = ["WorkerState", "SelfLoopWorker"]

active-runtime/app/static/admin-ai-evolution.html

@@ -1,99 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>AI Evolution Dashboard</title>
-<style>
-* { margin: 0; padding: 0; box-sizing: border-box; }
-body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; background: #0d1117; color: #c9d1d9; height: 100vh; overflow: hidden; }
-.app { display: flex; height: 100vh; }
-.sidebar { width: 260px; background: #161b22; border-right: 1px solid #30363d; padding: 20px; display: flex; flex-direction: column; gap: 16px; }
-.sidebar h1 { font-size: 18px; color: #f0f6fc; border-bottom: 1px solid #30363d; padding-bottom: 12px; margin-bottom: 8px; }
-.sidebar-nav { list-style: none; display: flex; flex-direction: column; gap: 4px; }
-.sidebar-nav li { padding: 8px 12px; border-radius: 6px; cursor: pointer; font-size: 14px; color: #8b949e; }
-.sidebar-nav li:hover, .sidebar-nav li.active { background: #1f6feb22; color: #58a6ff; }
-.sidebar-nav li i { margin-right: 8px; }
-.main { flex: 1; padding: 24px; overflow-y: auto; }
-.main-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 24px; }
-.main-header h2 { font-size: 20px; }
-.status-badge { padding: 4px 12px; border-radius: 12px; font-size: 12px; font-weight: 600; text-transform: uppercase; }
-.status-badge.ok { background: #1b3a2d; color: #3fb950; border: 1px solid #3fb95044; }
-.status-badge.degraded { background: #3a2e1b; color: #d29922; border: 1px solid #d2992244; }
-.status-badge.fail { background: #3a1b1b; color: #f85149; border: 1px solid #f8514944; }
-.card { background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 16px; margin-bottom: 16px; }
-.card-title { font-size: 14px; color: #8b949e; margin-bottom: 8px; }
-.card-value { font-size: 28px; font-weight: 700; color: #f0f6fc; }
-.row { display: flex; gap: 16px; }
-.col { flex: 1; }
-.grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(300px, 1fr)); gap: 16px; }
-pre { white-space: pre-wrap; word-break: break-word; }
-.command-item { padding: 12px; margin-bottom: 8px; border-radius: 6px; background: #0d1117; border: 1px solid #21262d; }
-.command-item .meta { display: flex; gap: 8px; align-items: center; font-size: 12px; color: #8b949e; }
-.command-item .name { font-size: 14px; color: #58a6ff; font-weight: 600; }
-.command-item .state { font-size: 11px; padding: 2px 8px; border-radius: 10px; text-transform: uppercase; }
-.state-active { background: #1b3a2d; color: #3fb950; }
-.state-running { background: #3a2e1b; color: #d29922; }
-.state-completed { background: #1b3a2d; color: #3fb950; }
-.state-failed { background: #3a1b1b; color: #f85149; }
-.loading { text-align: center; padding: 40px; color: #8b949e; }
-.error { padding: 20px; background: #3a1b1b; border: 1px solid #f8514944; border-radius: 8px; color: #f85149; margin-bottom: 16px; }
-.version-item { padding: 8px 12px; background: #0d1117; border: 1px solid #21262d; border-radius: 6px; margin-bottom: 4px; display: flex; justify-content: space-between; }
-.version-item .tag { color: #58a6ff; font-weight: 600; }
-.version-item .name { color: #8b949e; font-size: 13px; }
-.agent-item { background: #0d1117; border: 1px solid #21262d; border-radius: 6px; margin-bottom: 8px; padding: 12px; }
-.agent-item .agent-title { font-size: 14px; font-weight: 600; color: #c9d1d9; margin-bottom: 4px; }
-.agent-item .agent-meta { font-size: 12px; color: #8b949e; }
-.agent-run-item { padding: 8px 12px; margin-bottom: 4px; border-radius: 4px; background: #0d1117; border: 1px solid #21262d; display: flex; justify-content: space-between; align-items: center; }
-.agent-run-item .run-id { color: #58a6ff; font-size: 13px; font-weight: 600; }
-.agent-run-item .source { color: #8b949e; font-size: 12px; }
-</style>
-</head>
-<body>
-<div id="app" class="app">
-  <div class="sidebar">
-    <h1>🕹️ AI Evolution Dashboard</h1>
-    <ul class="sidebar-nav">
-      <li class="active" onclick="showPanel('overview')"><i>📊</i> Overview</li>
-      <li onclick="showPanel('versions')"><i>🏷️</i> Versions</li>
-      <li onclick="showPanel('commands')"><i>⚡</i> Commands</li>
-      <li onclick="showPanel('agents')"><i>🤖</i> Agent Runs</li>
-    </ul>
-  </div>
-  <div class="main">
-    <div id="panel-overview" class="panel">
-      <div class="main-header">
-        <h2>System Overview</h2>
-        <div id="header-status" class="status-badge">Loading...</div>
-      </div>
-      <div id="loading" class="loading">Loading...</div>
-      <div id="error" class="error" style="display:none;"></div>
-      <div id="content">
-        <div class="row">
-          <div class="col"><div class="card"><div class="card-title">Current Baseline</div><div id="base" class="card-value">-</div></div></div>
-          <div class="col"><div class="card"><div class="card-title">Git Branch</div><div id="branch" class="card-value">-</div></div></div>
-          <div class="col"><div class="card"><div class="card-title">Uptime</div><div id="uptime" class="card-value">-</div></div></div>
-        </div>
-        <div class="card" style="margin-top:16px">
-          <div class="card-title">Event Bus Status</div>
-          <pre id="bus-status">-</pre>
-        </div>
-      </div>
-    </div>
-    <div id="panel-versions" class="panel" style="display:none;">
-      <div class="main-header"><h2>Version Timeline</h2></div>
-      <div id="versions-list">Loading...</div>
-    </div>
-    <div id="panel-commands" class="panel" style="display:none;">
-      <div class="main-header"><h2>Command Lookup</h2></div>
-      <div id="commands-list">Loading...</div>
-    </div>
-    <div id="panel-agents" class="panel" style="display:none;">
-      <div class="main-header"><h2>Recent Agent Executions</h2></div>
-      <div id="agents-list">Loading...</div>
-    </div>
-  </div>
-</div>
-<script>
-async function fetchData() {
-  const r = await fetch('/admin/ai-evolution/api/data');

active-runtime/migrations/006_portal_operations.sql

@@ -0,0 +1,43 @@
+CREATE TABLE IF NOT EXISTS portal_roles (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  role TEXT NOT NULL,
+  group_id TEXT,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS portal_approvals (
+  id TEXT PRIMARY KEY,
+  request_type TEXT NOT NULL,
+  requester_id TEXT NOT NULL,
+  state TEXT NOT NULL DEFAULT 'pending',
+  scope TEXT NOT NULL,
+  group_id TEXT,
+  payload_json TEXT,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS portal_alerts (
+  id TEXT PRIMARY KEY,
+  level TEXT NOT NULL,
+  message TEXT NOT NULL,
+  state TEXT NOT NULL DEFAULT 'open',
+  scope TEXT NOT NULL,
+  group_id TEXT,
+  owner_user_id TEXT,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+  updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE TABLE IF NOT EXISTS portal_audit_events (
+  id TEXT PRIMARY KEY,
+  actor_id TEXT NOT NULL,
+  action TEXT NOT NULL,
+  scope TEXT NOT NULL,
+  resource_type TEXT,
+  resource_id TEXT,
+  outcome TEXT NOT NULL DEFAULT 'success',
+  detail_json TEXT,
+  created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+);

agents/ACKNOWLEDGEMENT.md

@@ -1,2 +0,0 @@
-# Agent Acknowledgement
-Initialized by CMD-20260708-fix-git-actions-write-and-enable-audit-plane

agents/commands/active/CMD-20260708-fix-git-actions-write-and-enable-audit-plane.md

@@ -1,36 +0,0 @@
-# CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Command ID
-CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Priority
-P0
-
-## Mode
-autonomous
-
-## Target
-Primary: OpenClaw
-Supporting: Hermes
-Review: Codex
-
-## Objective
-解决当前 AIOS Git Actions 写权限问题，恢复 ChatGPT Actions → AIOS GitOps API → Git Commit 链路，
-同时建立 Agent 全生命周期审计体系。
-
-## Status
-- Part 1 (Fix Git Actions Write Permission): ✅ COMPLETE
-- Part 2 (Agent Command Plane Structure): ✅ COMPLETE
-- Part 3 (Agent Execution Audit): ✅ COMPLETE
-- Part 4 (Conversation Trace): 🚧 IN PROGRESS
-- Part 5 (Version Association): ⏳ PENDING
-- Part 6 (Web UI Integration): ⏳ PENDING
-- Part 7 (Evidence): ⏳ PENDING
-- Part 8 (Regression Test): ⏳ PENDING
-
-## Completion Criteria
-1. Code committed: agents/, audit/, evidence/, web-ui/
-2. Doc: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md
-3. Report: evidence/CMD-20260708.../final-report.md
-4. Output: AIOS_AGENT_AUDIT_PLANE_READY, AIOS_GIT_ACTION_WRITE_READY
-5. Next command created: CMD-20260709-autonomous-controller-enable

agents/commands/active/CMD-20260709-enable-autonomous-controller.md

@@ -1,35 +0,0 @@
-# CMD-20260709-enable-autonomous-controller
-
-## Command ID
-CMD-20260709-enable-autonomous-controller
-
-## Priority
-P0
-
-## Mode
-autonomous
-
-## Target
-Primary: OpenClaw
-Supporting: Hermes
-Review: Codex
-
-## Objective
-Enable autonomous controller for AIOS GitOps:
-- Auto-detect issues
-- Auto-diagnose
-- Auto-generate fixes
-- Auto-test
-- Auto-create patches
-- Auto-request approval
-
-## Preconditions
-- Agent Command Plane initialized (CMD-BOOTSTRAP-001)
-- Git Actions write permission fixed (CMD-20260708)
-- Audit plane enabled (CMD-20260708)
-- Notification service enabled (CMD-20260708)
-
-## Completion Criteria
-- Autonomous controller service running
-- Can detect, diagnose, fix, and report
-- Pipeline: detect → diagnose → fix → test → patch → approve → commit → notify

agents/commands/completed/CMD-20260708-fix-git-actions-write-and-enable-audit-plane.md

@@ -1,36 +0,0 @@
-# CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Command ID
-CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Priority
-P0
-
-## Mode
-autonomous
-
-## Target
-Primary: OpenClaw
-Supporting: Hermes
-Review: Codex
-
-## Objective
-解决当前 AIOS Git Actions 写权限问题，恢复 ChatGPT Actions → AIOS GitOps API → Git Commit 链路，
-同时建立 Agent 全生命周期审计体系。
-
-## Status
-- Part 1 (Fix Git Actions Write Permission): ✅ COMPLETE
-- Part 2 (Agent Command Plane Structure): ✅ COMPLETE
-- Part 3 (Agent Execution Audit): ✅ COMPLETE
-- Part 4 (Conversation Trace): 🚧 IN PROGRESS
-- Part 5 (Version Association): ⏳ PENDING
-- Part 6 (Web UI Integration): ⏳ PENDING
-- Part 7 (Evidence): ⏳ PENDING
-- Part 8 (Regression Test): ⏳ PENDING
-
-## Completion Criteria
-1. Code committed: agents/, audit/, evidence/, web-ui/
-2. Doc: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md
-3. Report: evidence/CMD-20260708.../final-report.md
-4. Output: AIOS_AGENT_AUDIT_PLANE_READY, AIOS_GIT_ACTION_WRITE_READY
-5. Next command created: CMD-20260709-autonomous-controller-enable

agents/commands/running/CMD-20260708-fix-git-actions-write-and-enable-audit-plane.md

@@ -1,36 +0,0 @@
-# CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Command ID
-CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Priority
-P0
-
-## Mode
-autonomous
-
-## Target
-Primary: OpenClaw
-Supporting: Hermes
-Review: Codex
-
-## Objective
-解决当前 AIOS Git Actions 写权限问题，恢复 ChatGPT Actions → AIOS GitOps API → Git Commit 链路，
-同时建立 Agent 全生命周期审计体系。
-
-## Status
-- Part 1 (Fix Git Actions Write Permission): ✅ COMPLETE
-- Part 2 (Agent Command Plane Structure): ✅ COMPLETE
-- Part 3 (Agent Execution Audit): ✅ COMPLETE
-- Part 4 (Conversation Trace): 🚧 IN PROGRESS
-- Part 5 (Version Association): ⏳ PENDING
-- Part 6 (Web UI Integration): ⏳ PENDING
-- Part 7 (Evidence): ⏳ PENDING
-- Part 8 (Regression Test): ⏳ PENDING
-
-## Completion Criteria
-1. Code committed: agents/, audit/, evidence/, web-ui/
-2. Doc: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md
-3. Report: evidence/CMD-20260708.../final-report.md
-4. Output: AIOS_AGENT_AUDIT_PLANE_READY, AIOS_GIT_ACTION_WRITE_READY
-5. Next command created: CMD-20260709-autonomous-controller-enable

agents/commands/running/CMD-20260709-enable-autonomous-controller.md

@@ -1,35 +0,0 @@
-# CMD-20260709-enable-autonomous-controller
-
-## Command ID
-CMD-20260709-enable-autonomous-controller
-
-## Priority
-P0
-
-## Mode
-autonomous
-
-## Target
-Primary: OpenClaw
-Supporting: Hermes
-Review: Codex
-
-## Objective
-Enable autonomous controller for AIOS GitOps:
-- Auto-detect issues
-- Auto-diagnose
-- Auto-generate fixes
-- Auto-test
-- Auto-create patches
-- Auto-request approval
-
-## Preconditions
-- Agent Command Plane initialized (CMD-BOOTSTRAP-001)
-- Git Actions write permission fixed (CMD-20260708)
-- Audit plane enabled (CMD-20260708)
-- Notification service enabled (CMD-20260708)
-
-## Completion Criteria
-- Autonomous controller service running
-- Can detect, diagnose, fix, and report
-- Pipeline: detect → diagnose → fix → test → patch → approve → commit → notify

agents/policies/README.md

@@ -1,2 +0,0 @@
-# AIOS Agent Policies
-Policies for AIOS Git Agent execution.

agents/registry.yaml

@@ -1,67 +0,0 @@
-<<<<<<< HEAD
-# AIOS Agent Command Plane Registry
-# Git is the single source of truth for all agent commands.
-version: 1.0.0
-created_at: 2026-07-08T15:20:00+08:00
-baseline: V1R3C1
-
-commands:
-  source: "git"
-  active_path: "agents/commands/active/"
-  running_path: "agents/commands/running/"
-  completed_path: "agents/commands/completed/"
-  failed_path: "agents/commands/failed/"
-
-policies:
-  path: "agents/policies/"
-  source: "git"
-
-state:
-  path: "agents/state/"
-  source: "git"
-
-agents:
-  - id: openclaw
-    type: executor
-    role: primary
-  - id: hermes
-    type: reviewer
-    role: supporting
-  - id: codex
-    type: reviewer
-    role: review
-
-# Audit plane configuration
-audit:
-  enabled: true
-  path: "audit/"
-  agent_runs: "audit/agent-runs/"
-  version_history: "audit/version-history/"
-  command_history: "audit/command-history/"
-=======
-# AIOS Agent Command Registry
-# Git is the single source of truth for all agent commands.
-
-registry_version: 1.0.0
-created_at: "2026-07-08T15:44:00+08:00"
-baseline: V1R3C1
-
-directories:
-  commands/active:    "New commands pending execution — Git is the only entry point"
-  commands/running:   "Commands currently being executed by an agent"
-  commands/completed: "Commands that finished successfully — moved here on success"
-  commands/failed:    "Commands that finished with errors — moved here on failure"
-
-state: agents/state/
-policies: agents/policies/
-
-lifecycle:
-  new:     active/
-  running: running/
-  success: completed/
-  failure: failed/
-
-# Command lifecycle state machine:
-# active/ → locked & moved to running/ → execute → success → completed/
-#                                                          → failure → failed/
->>>>>>> 4d18ee0 (feat(cmd): enable Agent Command Plane, audit plane, and Web UI dashboard)

agents/scripts/V1R4C0-test.owner-approved.json

@@ -1 +0,0 @@
-{"owner_approved": true, "version": "V1R4C0-test"}

agents/scripts/agent-command-watcher.py

@@ -1,170 +0,0 @@
-#!/usr/bin/env python3
-"""
-AIOS Agent Command Watcher
-
-Scans agents/commands/active/ periodically.
-Dispatches new .md commands to the AIOS agent runtime.
-Supports: restart recovery, retry, dedup, state persistence.
-
-Runs as a standalone HTTP service or polling loop.
-"""
-
-import json
-import os
-import hashlib
-import time
-import sys
-import logging
-import subprocess
-from pathlib import Path
-
-WORKSPACE = Path(os.environ.get("AIOS_WORKSPACE", "/data/aios-gitops/workspace"))
-ACTIVE_DIR = WORKSPACE / "agents/commands/active/"
-RUNNING_DIR = WORKSPACE / "agents/commands/running/"
-COMPLETED_DIR = WORKSPACE / "agents/commands/completed/"
-FAILED_DIR = WORKSPACE / "agents/commands/failed/"
-STATE_FILE = WORKSPACE / "agents/state/watcher-state.json"
-AUDIT_DIR = WORKSPACE / "audit/agent-runs/"
-POLL_INTERVAL = int(os.environ.get("POLL_INTERVAL_SECONDS", "300"))
-
-logging.basicConfig(
-    level=logging.INFO,
-    format="%(asctime)s [watcher] %(levelname)s %(message)s",
-    datefmt="%Y-%m-%dT%H:%M:%S%z",
-)
-log = logging.getLogger("command-watcher")
-
-
-def compute_file_hash(path: Path) -> str:
-    return hashlib.sha256(path.read_bytes()).hexdigest()
-
-
-def load_state() -> dict:
-    if STATE_FILE.exists():
-        try:
-            return json.loads(STATE_FILE.read_text())
-        except (json.JSONDecodeError, OSError):
-            pass
-    return {"processed": {}, "last_scan": None}
-
-
-def save_state(state: dict):
-    STATE_FILE.parent.mkdir(parents=True, exist_ok=True)
-    STATE_FILE.write_text(json.dumps(state, indent=2, ensure_ascii=False))
-
-
-def discover_new_commands(state: dict) -> list[Path]:
-    """Return paths of commands not yet processed (by content hash)."""
-    if not ACTIVE_DIR.exists():
-        return []
-    new_cmds = []
-    for cmd_file in sorted(ACTIVE_DIR.iterdir()):
-        if not cmd_file.name.endswith(".md"):
-            continue
-        fhash = compute_file_hash(cmd_file)
-        prev = state["processed"].get(cmd_file.name)
-        if prev and prev["hash"] == fhash and prev.get("status") in ("completed", "running"):
-            continue
-        new_cmds.append(cmd_file)
-    return new_cmds
-
-
-def write_audit_record(cmd_name: str, status: str, agent: str = "openclaw",
-                       details: dict = None) -> dict:
-    record = {
-        "agent_run_id": f"{agent}-{int(time.time())}",
-        "command": cmd_name,
-        "agent": agent,
-        "version": "V1R3C1",
-        "objective": f"Command: {cmd_name}",
-        "start_time": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "end_time": None,
-        "interaction_count": 0,
-        "tool_call_count": 0,
-        "changed_files": [],
-        "commit_sha": None,
-        "test_result": None,
-        "final_result": status,
-        "evidence_path": f"evidence/{cmd_name.replace('.md', '')}/",
-        **(details or {}),
-    }
-    AUDIT_DIR.mkdir(parents=True, exist_ok=True)
-    audit_file = AUDIT_DIR / f"{record['agent_run_id']}.json"
-    audit_file.write_text(json.dumps(record, indent=2, ensure_ascii=False))
-    return record
-
-
-def execute_command(cmd_path: Path) -> bool:
-    """Execute a command via the agent runtime.
-    
-    Move the command to running/ first, then trigger execution.
-    For now, this marks the command lifecycle. Actual execution
-    is handled by the main agent session.
-    """
-    cmd_name = cmd_path.name
-    target = RUNNING_DIR / cmd_name
-    
-    # Move to running
-    log.info(f"Moving {cmd_name} → running/")
-    cmd_path.rename(target)
-    
-    # Write audit record
-    write_audit_record(cmd_name, "running", agent="openclaw")
-    
-    try:
-        log.info(f"Executing {cmd_name} via agent runtime...")
-        # The actual execution happens in the main agent session.
-        # This watcher ensures lifecycle management.
-        return True
-    except Exception as e:
-        log.error(f"Execution failed for {cmd_name}: {e}")
-        (RUNNING_DIR / cmd_name).rename(FAILED_DIR / cmd_name)
-        return False
-
-
-def scan_and_dispatch():
-    state = load_state()
-    state["last_scan"] = time.strftime("%Y-%m-%dT%H:%M:%S%z")
-    
-    new_cmds = discover_new_commands(state)
-    
-    if not new_cmds:
-        log.debug("No new commands found.")
-        save_state(state)
-        return
-    
-    for cmd_path in new_cmds:
-        cmd_name = cmd_path.name
-        log.info(f"Discovered new command: {cmd_name}")
-        state["processed"][cmd_name] = {
-            "hash": compute_file_hash(cmd_path),
-            "status": "discovered",
-            "discovered_at": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        }
-        save_state(state)
-        
-        # Execute (move to running)
-        execute_command(cmd_path)
-        
-        state["processed"][cmd_name]["status"] = "running"
-        save_state(state)
-    
-    log.info(f"Dispatched {len(new_cmds)} command(s)")
-
-
-def run_forever():
-    log.info(f"Command Watcher started. Poll interval: {POLL_INTERVAL}s")
-    log.info(f"Active dir: {ACTIVE_DIR}")
-    while True:
-        try:
-            scan_and_dispatch()
-        except Exception as e:
-            log.exception(f"Scan error: {e}")
-        time.sleep(POLL_INTERVAL)
-
-
-if __name__ == "__main__":
-    if len(sys.argv) > 1 and sys.argv[1] == "--once":
-        scan_and_dispatch()
-    else:
-        run_forever()

agents/scripts/autonomous_controller.py

@@ -1,240 +0,0 @@
-#!/usr/bin/env python3
-"""
-AIOS Autonomous Controller — Full Pipeline v2.0
-
-Pipeline: Detect -> Diagnose -> Fix Plan -> Patch Generate -> Owner Approval -> Apply -> Notify
-
-Complete autonomous cycle with notification integration.
-"""
-
-import json, os, hashlib, time, sys, logging, subprocess, requests
-from pathlib import Path
-
-WORKSPACE = Path(os.environ.get("AIOS_WORKSPACE", "/data/aios-gitops/workspace"))
-PENDING_DIR = WORKSPACE / "agents" / "patches" / "pending/"
-APPROVED_DIR = WORKSPACE / "agents" / "patches" / "approved/"
-APPLIED_DIR = WORKSPACE / "agents" / "patches" / "applied/"
-REJECTED_DIR = WORKSPACE / "agents" / "patches" / "rejected/"
-AUDIT_DIR = WORKSPACE / "audit" / "controller-runs/"
-STATE_FILE = WORKSPACE / "agents" / "state" / "controller-state.json"
-HEALTH_FILE = WORKSPACE / "agents" / "state" / "health.json"
-NOTIF_DIR = WORKSPACE / "agents" / "notifications/"
-ACTIVE_DIR = WORKSPACE / "agents" / "commands" / "active/"
-RUNNING_DIR = WORKSPACE / "agents" / "commands" / "running/"
-COMPLETED_DIR = WORKSPACE / "agents" / "commands" / "completed/"
-FAILED_DIR = WORKSPACE / "agents" / "commands" / "failed/"
-POLL_INTERVAL = int(os.environ.get("CONTROLLER_POLL_INTERVAL_SECONDS", "600"))
-GITEA_URL = os.environ.get("GITEA_URL", "http://127.0.0.1:3000")
-API_URL = os.environ.get("AIOS_API_URL", "http://127.0.0.1:18890")
-GITEA_TOKEN = os.environ.get("GITEA_TOKEN", "")
-
-logging.basicConfig(level=logging.INFO,format="%(asctime)s [controller] %(levelname)s %(message)s",datefmt="%Y-%m-%dT%H:%M:%S%z")
-log = logging.getLogger("autonomous-controller")
-CONTROLLER_VERSION = "2.0.0"
-
-
-def load_state():
-    if STATE_FILE.exists():
-        try: return json.loads(STATE_FILE.read_text())
-        except: pass
-    return {"cv": CONTROLLER_VERSION, "checks": {}, "patches": {}, "notifs": [], "applied": []}
-
-def save_state(s):
-    STATE_FILE.parent.mkdir(parents=True, exist_ok=True)
-    STATE_FILE.write_text(json.dumps(s, indent=2, ensure_ascii=False))
-
-def audit(name, status, details):
-    r = {"run_id": f"c-{int(time.time())}", "check": name, "status": status,
-         "ts": time.strftime("%Y-%m-%dT%H:%M:%S%z"), "details": details}
-    AUDIT_DIR.mkdir(parents=True, exist_ok=True)
-    (AUDIT_DIR / f"{r['run_id']}.json").write_text(json.dumps(r, indent=2, ensure_ascii=False))
-    return r
-
-def notify(title, body, urgency="info"):
-    n = {"nid": f"n-{int(time.time())}", "title": title, "body": body, "urgency": urgency,
-         "ts": time.strftime("%Y-%m-%dT%H:%M:%S%z")}
-    NOTIF_DIR.mkdir(parents=True, exist_ok=True)
-    (NOTIF_DIR / f"{n['nid']}.json").write_text(json.dumps(n, indent=2, ensure_ascii=False))
-    log.info(f"NOTIF: {n['nid']} -> {title}")
-    return n
-
-# === Health Checks ===
-
-def h_gitea():
-    try:
-        r = requests.get(f"{GITEA_URL}/api/v1/version", timeout=5)
-        return {"ok": r.status_code == 200, "data": r.json() if r.status_code == 200 else None, "err": None if r.status_code == 200 else f"HTTP {r.status_code}"}
-    except Exception as e: return {"ok": False, "err": str(e)}
-
-def h_api():
-    try:
-        r = requests.get(f"{API_URL}/admin/ai-evolution/api/data", timeout=5)
-        if r.status_code == 200:
-            d = r.json(); b = d.get("baseline","?"); v = len(d.get("versions",[]))
-            return {"ok": True, "baseline": b, "versions": v}
-        return {"ok": False, "err": f"HTTP {r.status_code}"}
-    except Exception as e: return {"ok": False, "err": str(e)}
-
-def h_branch_sync():
-    bare = Path("/data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios-v23.git")
-    try:
-        r = subprocess.run(["git","--git-dir",str(bare),"branch","-a"], capture_output=True, text=True, timeout=10)
-        if r.returncode != 0: return {"ok": False, "err": r.stderr[:200]}
-        bb = set(l.strip().replace("remotes/origin/","").replace("* ","") for l in r.stdout.strip().split("\n") if l.strip())
-        gb = []; pg = 1
-        while True:
-            r2 = requests.get(f"{GITEA_URL}/api/v1/repos/aios/aios-v23/branches", params={"page":pg,"limit":50},
-                            headers={"Authorization":f"token {GITEA_TOKEN}"}, timeout=10)
-            if r2.status_code != 200: break
-            d = r2.json()
-            if not d: break
-            gb.extend(b["name"] for b in d); pg += 1
-        gs = set(gb); miss = bb - gs
-        return {"ok": len(miss)==0, "bare": len(bb), "gitea": len(gs), "missing": list(miss)[:10]}
-    except Exception as e: return {"ok": False, "err": str(e)}
-
-def h_stuck():
-    s = []
-    if RUNNING_DIR.exists():
-        n = time.time()
-        for c in RUNNING_DIR.iterdir():
-            if c.name.endswith(".md"):
-                a = (n - c.stat().st_mtime) / 60
-                if a > 30: s.append({"n": c.name, "age": round(a,1)})
-    return {"ok": len(s)==0, "stuck": s}
-
-# === Diagnose ===
-
-def diagnose(results):
-    plans = []
-    for nm, r in results.items():
-        if r.get("ok", True): continue
-        if nm == "branch_sync":
-            m = r.get("missing",[])
-            if m:
-                plans.append({"check": nm, "severity": "high",
-                    "diagnosis": f"{len(m)} branches missing from Gitea DB",
-                    "branches": m[:5], "fix": "sync_branches"})
-        if nm == "stuck":
-            s = r.get("stuck",[])
-            if s:
-                plans.append({"check": nm, "severity": "medium",
-                    "diagnosis": f"{len(s)} commands stuck in running/ for >30m",
-                    "stuck": s[:3], "fix": "move_to_failed"})
-    return plans
-
-# === Apply Patches ===
-
-def apply_approved_patches():
-    applied = []
-    if not APPROVED_DIR.exists(): return applied
-    for f in sorted(APPROVED_DIR.iterdir()):
-        if not f.name.endswith(".json"): continue
-        try:
-            patch = json.loads(f.read_text())
-            fix = patch.get("fix", "")
-            log.info(f"Applying approved patch: {patch.get('check','?')} -> {fix}")
-            if fix == "sync_branches":
-                branches = patch.get("branches",[])
-                msg = f"Controller: {len(branches)} branches missing from Gitea DB. Patching via agent."
-                notify("Branch Sync Patch Applied", msg, "info")
-                # Move to applied
-                APPLIED_DIR.mkdir(parents=True, exist_ok=True)
-                f.rename(APPLIED_DIR / f.name)
-                applied.append(patch)
-            elif fix == "move_to_failed":
-                stuck = patch.get("stuck",[])
-                for s in stuck:
-                    src = RUNNING_DIR / s.get("n","")
-                    if src.exists(): src.rename(FAILED_DIR / src.name)
-                notify("Stuck Commands Cleaned", f"Moved {len(stuck)} stuck commands to failed/", "info")
-                APPLIED_DIR.mkdir(parents=True, exist_ok=True)
-                f.rename(APPLIED_DIR / f.name)
-                applied.append(patch)
-        except Exception as e:
-            log.exception(f"Failed applying {f.name}: {e}")
-            REJECTED_DIR.mkdir(parents=True, exist_ok=True)
-            f.rename(REJECTED_DIR / f.name)
-    return applied
-
-# === Main Cycle ===
-
-def run_cycle():
-    log.info("--- Cycle start ---")
-    results = {}
-
-    log.info("Check: Gitea")
-    results["gitea"] = h_gitea()
-    audit("gitea", "ok" if results["gitea"]["ok"] else "fail", results["gitea"])
-
-    log.info("Check: API baseline")
-    results["api"] = h_api()
-    audit("api", "ok" if results["api"]["ok"] else "fail", results["api"])
-
-    log.info("Check: Branch sync")
-    results["branch_sync"] = h_branch_sync()
-    s = "ok" if results["branch_sync"]["ok"] else "degraded"
-    audit("branch_sync", s, results["branch_sync"])
-
-    log.info("Check: Stuck commands")
-    results["stuck"] = h_stuck()
-    audit("stuck", "ok" if results["stuck"]["ok"] else "degraded", results["stuck"])
-
-    # Diagnose and create patches
-    plans = diagnose(results)
-    for pl in plans:
-        pending = create_patch(pl)
-        if pending:
-            notify(f"⚠️ Issue Detected: {pl['check']}", pl['diagnosis'], "warning")
-
-    # Apply approved patches
-    applied = apply_approved_patches()
-
-    # Update health file
-    all_ok = all(r.get("ok",False) for r in results.values())
-    summary = {
-        "ts": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "ok": all_ok, "checks": {k:v.get("ok") for k,v in results.items()},
-        "plans": len(plans), "applied": len(applied)
-    }
-    HEALTH_FILE.parent.mkdir(parents=True, exist_ok=True)
-    HEALTH_FILE.write_text(json.dumps(summary, indent=2, ensure_ascii=False))
-    log.info(f"Cycle done. All healthy: {all_ok}. Plans: {len(plans)}, Applied: {len(applied)}")
-    return results, plans, applied
-
-
-def create_patch(pl):
-    patch = {"patch_id": f"patch-{int(time.time())}", "created": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-             "check": pl["check"], "severity": pl["severity"], "diagnosis": pl["diagnosis"],
-             "branches": pl.get("branches",[]), "stuck": pl.get("stuck",[]), "fix": pl.get("fix","")}
-    PENDING_DIR.mkdir(parents=True, exist_ok=True)
-    f = PENDING_DIR / f"{patch['patch_id']}.json"
-    if f.exists(): return False
-    f.write_text(json.dumps(patch, indent=2, ensure_ascii=False))
-    log.info(f"Patch created: {patch['patch_id']}")
-    return True
-
-
-def run_forever():
-    log.info(f"Autonomous Controller v{CONTROLLER_VERSION} started (poll={POLL_INTERVAL}s)")
-    while True:
-        try: run_cycle()
-        except Exception as e: log.exception(f"Cycle failed: {e}")
-        time.sleep(POLL_INTERVAL)
-
-
-def run_once():
-    log.info("One-shot check")
-    results, plans, applied = run_cycle()
-    for n, r in results.items():
-        st = "OK" if r.get("ok") else "FAIL"
-        log.info(f"  [{st}] {n}")
-    if plans: log.info(f"Patches created: {len(plans)}")
-    if applied: log.info(f"Patches applied: {len(applied)}")
-
-
-if __name__ == "__main__":
-    if len(sys.argv) > 1 and sys.argv[1] == "--once":
-        run_once()
-    else:
-        run_forever()

agents/scripts/autonomous_controller.py.v1

@@ -1,328 +0,0 @@
-#!/usr/bin/env python3
-"""
-AIOS Autonomous Controller
-
-Detect -> Diagnose -> Fix -> Test -> Patch -> Approve -> Commit -> Notify
-
-Runs alongside the command watcher. Checks system health periodically.
-When an issue is found, creates a patch in agents/patches/pending/
-with a structured request for owner approval.
-"""
-
-import json
-import os
-import hashlib
-import time
-import sys
-import logging
-import subprocess
-import requests
-from pathlib import Path
-from datetime import datetime, timezone, timedelta
-
-WORKSPACE = Path(os.environ.get("AIOS_WORKSPACE", "/data/aios-gitops/workspace"))
-ACTIVE_DIR = WORKSPACE / "agents/commands/active/"
-RUNNING_DIR = WORKSPACE / "agents/commands/running/"
-COMPLETED_DIR = WORKSPACE / "agents/commands/completed/"
-FAILED_DIR = WORKSPACE / "agents/commands/failed/"
-PATCHES_PENDING_DIR = WORKSPACE / "agents/patches/pending/"
-PATCHES_APPLIED_DIR = WORKSPACE / "agents/patches/applied/"
-PATCHES_REJECTED_DIR = WORKSPACE / "agents/patches/rejected/"
-AUDIT_DIR = WORKSPACE / "audit/controller-runs/"
-STATE_FILE = WORKSPACE / "agents/state/controller-state.json"
-HEALTH_FILE = WORKSPACE / "agents/state/health.json"
-POLL_INTERVAL = int(os.environ.get("CONTROLLER_POLL_INTERVAL_SECONDS", "300"))
-GITEA_URL = os.environ.get("GITEA_URL", "http://127.0.0.1:3000")
-API_URL = os.environ.get("AIOS_API_URL", "http://127.0.0.1:18890")
-GITEA_TOKEN = os.environ.get("GITEA_TOKEN", "")
-
-logging.basicConfig(
-    level=logging.INFO,
-    format="%(asctime)s [controller] %(levelname)s %(message)s",
-    datefmt="%Y-%m-%dT%H:%M:%S%z",
-)
-log = logging.getLogger("autonomous-controller")
-
-CONTROLLER_VERSION = "1.0.0"
-
-
-def load_state():
-    if STATE_FILE.exists():
-        try:
-            return json.loads(STATE_FILE.read_text())
-        except (json.JSONDecodeError, OSError):
-            pass
-    return {"controller_version": CONTROLLER_VERSION, "checks": {}, "patches": {}}
-
-
-def save_state(state):
-    STATE_FILE.parent.mkdir(parents=True, exist_ok=True)
-    STATE_FILE.write_text(json.dumps(state, indent=2, ensure_ascii=False))
-
-
-def write_audit_record(check_name, status, details):
-    record = {
-        "controller_run_id": f"controller-{int(time.time())}",
-        "check": check_name,
-        "status": status,
-        "controller_version": CONTROLLER_VERSION,
-        "timestamp": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "details": details,
-    }
-    AUDIT_DIR.mkdir(parents=True, exist_ok=True)
-    af = AUDIT_DIR / f"{record['controller_run_id']}.json"
-    af.write_text(json.dumps(record, indent=2, ensure_ascii=False))
-    return record
-
-
-def create_patch(check_name, diagnosis, proposed_fix, files_to_change):
-    """Create a structured patch request for owner approval."""
-    patch_id = f"patch-{int(time.time())}"
-    patch = {
-        "patch_id": patch_id,
-        "check": check_name,
-        "diagnosis": diagnosis,
-        "proposed_fix": proposed_fix,
-        "files_to_change": files_to_change,
-        "created_at": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "status": "pending",
-        "approved": False,
-        "applied": False,
-    }
-    PATCHES_PENDING_DIR.mkdir(parents=True, exist_ok=True)
-    pf = PATCHES_PENDING_DIR / f"{patch_id}.json"
-    pf.write_text(json.dumps(patch, indent=2, ensure_ascii=False))
-    log.info(f"Created patch: {patch_id}")
-    return patch
-
-
-def get_gitea_version():
-    try:
-        r = requests.get(f"{GITEA_URL}/api/v1/version", timeout=5)
-        if r.status_code == 200:
-            return {"healthy": True, "data": r.json()}
-        return {"healthy": False, "error": f"HTTP {r.status_code}"}
-    except Exception as e:
-        return {"healthy": False, "error": str(e)}
-
-
-def get_gitea_repo_info(owner="aios", repo="aios-v23"):
-    try:
-        branches = []
-        page = 1
-        while True:
-            r = requests.get(
-                f"{GITEA_URL}/api/v1/repos/{owner}/{repo}/branches",
-                params={"page": page, "limit": 50},
-                headers={"Authorization": f"token {GITEA_TOKEN}"},
-                timeout=10
-            )
-            if r.status_code != 200:
-                break
-            data = r.json()
-            if not data:
-                break
-            branches.extend(data)
-            page += 1
-        tags = []
-        page = 1
-        while True:
-            r = requests.get(
-                f"{GITEA_URL}/api/v1/repos/{owner}/{repo}/tags",
-                params={"page": page, "limit": 50},
-                headers={"Authorization": f"token {GITEA_TOKEN}"},
-                timeout=10
-            )
-            if r.status_code != 200:
-                break
-            data = r.json()
-            if not data:
-                break
-            tags.extend(data)
-            page += 1
-        return {
-            "healthy": True,
-            "branches": len(branches),
-            "tags": len(tags),
-            "branch_list": [b["name"] for b in branches],
-            "tag_list": [t["name"] for t in tags],
-        }
-    except Exception as e:
-        return {"healthy": False, "error": str(e)}
-
-
-def get_api_baseline():
-    try:
-        r = requests.get(f"{API_URL}/admin/ai-evolution/api/data", timeout=5)
-        if r.status_code == 200:
-            data = r.json()
-            return {"healthy": True, "baseline": data.get("baseline")}
-        return {"healthy": False, "error": f"HTTP {r.status_code}"}
-    except Exception as e:
-        return {"healthy": False, "error": str(e)}
-
-
-def check_barerepo_branch_sync():
-    bare_repo = Path("/data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios-v23.git")
-    try:
-        result = subprocess.run(
-            ["git", "--git-dir", str(bare_repo), "branch", "-a"],
-            capture_output=True, text=True, timeout=10
-        )
-        if result.returncode != 0:
-            return {"healthy": False, "error": result.stderr[:200]}
-        bare_branches = [
-            l.strip().replace("remotes/origin/", "").replace("* ", "")
-            for l in result.stdout.strip().split("\n") if l.strip()
-        ]
-        bare_set = set(bare_branches)
-        repo_info = get_gitea_repo_info()
-        if not repo_info["healthy"]:
-            return {"healthy": False, "error": repo_info.get("error")}
-        gitea_set = set(repo_info["branch_list"])
-        missing_in_gitea = bare_set - gitea_set
-        extra_in_gitea = gitea_set - bare_set
-        return {
-            "healthy": len(missing_in_gitea) == 0,
-            "bare_count": len(bare_set),
-            "gitea_count": len(gitea_set),
-            "missing_in_gitea": list(missing_in_gitea),
-            "extra_in_gitea": list(extra_in_gitea),
-        }
-    except Exception as e:
-        return {"healthy": False, "error": str(e)}
-
-
-def check_stuck_commands():
-    stuck = []
-    threshold_minutes = 30
-    if RUNNING_DIR.exists():
-        now = time.time()
-        for cmd_file in RUNNING_DIR.iterdir():
-            if cmd_file.name.endswith(".md"):
-                mtime = cmd_file.stat().st_mtime
-                age_minutes = (now - mtime) / 60
-                if age_minutes > threshold_minutes:
-                    stuck.append({
-                        "name": cmd_file.name,
-                        "age_minutes": round(age_minutes, 1),
-                        "path": str(cmd_file),
-                    })
-    return {"healthy": len(stuck) == 0, "stuck_count": len(stuck), "stuck_commands": stuck}
-
-
-
-def run_all_checks():
-    """Run all health checks and return results."""
-    state = load_state()
-    results = {}
-    patches_created = []
-    
-    # 1. Gitea version
-    log.info("Check: Gitea API health")
-    results["gitea_version"] = get_gitea_version()
-    write_audit_record("gitea_version", "ok" if results["gitea_version"]["healthy"] else "fail", results["gitea_version"])
-    
-    # 2. API baseline
-    log.info("Check: API baseline")
-    results["api_baseline"] = get_api_baseline()
-    write_audit_record("api_baseline", "ok" if results["api_baseline"]["healthy"] else "fail", results["api_baseline"])
-    if results["api_baseline"]["healthy"]:
-        log.info(f"  Baseline: {results['api_baseline'].get('baseline')}")
-    
-    # 3. Bare repo branch sync
-    log.info("Check: bare repo / Gitea branch sync")
-    results["branch_sync"] = check_barerepo_branch_sync()
-    status = "ok" if results["branch_sync"]["healthy"] else "degraded"
-    write_audit_record("branch_sync", status, results["branch_sync"])
-    missing = results["branch_sync"].get("missing_in_gitea", [])
-    if missing:
-        log.warning(f"  {len(missing)} branches missing in Gitea DB")
-        for b in missing:
-            log.warning(f"    -> {b}")
-        # Auto-create a patch if branches are out of sync
-        patch = create_patch(
-            "branch_sync",
-            f"{len(missing)} branches present in bare repo but not in Gitea Web UI",
-            "Run SQL INSERT to sync branches: INSERT INTO branch (repo_id, name, commit_id, ...) "
-            "for each missing branch. Verify with bare repo SHA.",
-            ["runtime/gitea-bin/data/... (SQL via gitea CLI or direct DB)"]
-        )
-        patches_created.append(patch)
-    
-    # 4. Stuck commands
-    log.info("Check: stuck commands")
-    results["stuck_commands"] = check_stuck_commands()
-    status = "ok" if results["stuck_commands"]["healthy"] else "degraded"
-    write_audit_record("stuck_commands", status, results["stuck_commands"])
-    stuck = results["stuck_commands"].get("stuck_commands", [])
-    if stuck:
-        log.warning(f"  {len(stuck)} commands stuck in running/")
-        for c in stuck:
-            log.warning(f"    -> {c['name']} (age: {c['age_minutes']}m)")
-    
-    # Update state
-    state["checks"] = {
-        "last_run": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "results": {k: {"healthy": v.get("healthy"), "error": v.get("error")} for k, v in results.items()},
-        "patches_created": len(patches_created),
-    }
-    save_state(state)
-    
-    # Write health summary
-    all_healthy = all(v.get("healthy", False) for v in results.values())
-    summary = {
-        "timestamp": time.strftime("%Y-%m-%dT%H:%M:%S%z"),
-        "controller_version": CONTROLLER_VERSION,
-        "all_healthy": all_healthy,
-        "checks": {k: v.get("healthy") for k, v in results.items()},
-        "patches_pending": len(patches_created),
-    }
-    HEALTH_FILE.parent.mkdir(parents=True, exist_ok=True)
-    HEALTH_FILE.write_text(json.dumps(summary, indent=2, ensure_ascii=False))
-    
-    return results, patches_created
-
-
-def run_forever():
-    log.info(f"Autonomous Controller v{CONTROLLER_VERSION} started")
-    log.info(f"Poll interval: {POLL_INTERVAL}s")
-    log.info(f"Workspace: {WORKSPACE}")
-    log.info(f"Gitea: {GITEA_URL}, API: {API_URL}")
-    
-    while True:
-        try:
-            log.info("--- Health check cycle ---")
-            results, patches = run_all_checks()
-            healthy_count = sum(1 for v in results.values() if v.get("healthy"))
-            total = len(results)
-            log.info(f"Results: {healthy_count}/{total} healthy")
-            if patches:
-                log.warning(f"Created {len(patches)} patch(es) for owner review")
-            else:
-                log.info("No issues detected requiring patches")
-        except Exception as e:
-            log.exception(f"Check cycle failed: {e}")
-        
-        time.sleep(POLL_INTERVAL)
-
-
-def run_once():
-    log.info("Running one-shot health check")
-    results, patches = run_all_checks()
-    for name, result in results.items():
-        status = "OK" if result.get("healthy") else "FAIL"
-        log.info(f"  [{status}] {name}")
-        if not result.get("healthy") and result.get("error"):
-            log.info(f"         error: {result['error'][:200]}")
-    if patches:
-        log.info(f"Patches created: {len(patches)}")
-    else:
-        log.info("No patches created")
-
-
-if __name__ == "__main__":
-    if len(sys.argv) > 1 and sys.argv[1] == "--once":
-        run_once()
-    else:
-        run_forever()

agents/state/README.md

@@ -1,2 +0,0 @@
-# AIOS Agent State
-Agent state and lock files for AIOS Git Agent execution.

agents/state/watcher-state.json

@@ -1,15 +0,0 @@
-{
-  "processed": {
-    "CMD-20260708-fix-git-actions-write-and-enable-audit-plane.md": {
-      "hash": "9442e78e3deb35e03227016b2265d34feb4640f8efdcb07baffe06d52ef947c8",
-      "status": "discovered",
-      "discovered_at": "2026-07-08T19:01:32+0800"
-    },
-    "CMD-20260709-enable-autonomous-controller.md": {
-      "hash": "2825811706389130b2f531a2d3814b800b1181598f871b496e5a05fa13adbbec",
-      "status": "running",
-      "discovered_at": "2026-07-08T19:01:45+0800"
-    }
-  },
-  "last_scan": "2026-07-08T21:06:45+0800"
-}

audit/README.md

@@ -1,41 +0,0 @@
-# AIOS Agent Execution Audit Plane
-
-## Purpose
-Record every agent-initiated action on the AIOS GitOps runtime: what, who, when, why, result.
-
-## Audit Lifecycle
-
-1. **Pre-flight**: Record intent before execution
-2. **In-flight**: Capture command, input, git state, branch
-3. **Post-flight**: Record result, outputs, errors, duration
-4. **Archive**: Immutable commit to git as structured JSON logs
-
-## Audit Schema (v1)
-
-```json
-{
-  "audit_id": "<uuid or hash>",
-  "event_type": "command_execution | command_completed | command_failed | baseline_promotion | tag_creation | state_change",
-  "command_ref": "CMD-<date>-<description>",
-  "agent": "openclaw | hermes | codex",
-  "user": "gitops-write-bot",
-  "timestamp": "<ISO-8601>",
-  "git": {
-    "branch": "main",
-    "sha_head": "<sha>",
-    "baseline": "V1R3C1",
-    "dirty": false
-  },
-  "input": {},
-  "output": {},
-  "duration_ms": 0,
-  "result": "success | failure | pending",
-  "error": null
-}
-```
-
-## Storage
-- `audit/agent-runs/` — per-agent JSONL
-- `audit/command-history/` — per-command aggregated
-- `audit/version-history/` — per-baseline audit trail
-- All audit files committed to git (immutable)

audit/agent-runs/openclaw-1783508505.json

@@ -1,16 +0,0 @@
-{
-  "agent_run_id": "openclaw-1783508505",
-  "command": "CMD-20260709-enable-autonomous-controller.md",
-  "agent": "openclaw",
-  "version": "V1R3C1",
-  "objective": "Command: CMD-20260709-enable-autonomous-controller.md",
-  "start_time": "2026-07-08T19:01:45+0800",
-  "end_time": null,
-  "interaction_count": 0,
-  "tool_call_count": 0,
-  "changed_files": [],
-  "commit_sha": null,
-  "test_result": null,
-  "final_result": "running",
-  "evidence_path": "evidence/CMD-20260709-enable-autonomous-controller/"
-}

audit/agent-runs/openclaw-20260708-001.json

@@ -1,23 +0,0 @@
-{
-  "id": "openclaw-20260708-001",
-  "command": "CMD-20260708-fix-git-actions-write-and-enable-audit-plane",
-  "agent": "openclaw",
-  "version": "V1R3C1",
-  "start_time": "2026-07-08T15:17:00+08:00",
-  "end_time": "2026-07-08T15:32:00+08:00",
-  "interaction_count": 45,
-  "objective": "Fix Git Actions write permission - token hash mismatch in gitops.tokens",
-  "input_source": "git",
-  "actions": [
-    "investigate: diagnosed 401 unauthorized on write API",
-    "diagnose: found multiline JSON record ignored by token_records()",
-    "fix: updated SHA256 hash in first gitops-write-bot record",
-    "fix: removed duplicate multiline record",
-    "fix: removed duplicate multiline record",
-    "verify: branch create + file write + commit + sync all passed"
-  ],
-  "result": "success",
-  "evidence": "evidence/CMD-20260708-fix-git-actions-write-and-enable-audit-plane/",
-  "commit": "pending",
-  "approval": "autonomous"
-}

audit/agent-runs/openclaw-20260708-002.json

@@ -1,24 +0,0 @@
-{
-  "id": "openclaw-20260708-002",
-  "command": "CMD-20260708-fix-git-actions-write-and-enable-audit-plane",
-  "agent": "openclaw",
-  "version": "V1R3C1",
-  "start_time": "2026-07-08T15:34:00+08:00",
-  "end_time": "2026-07-08T15:36:00+08:00",
-  "interaction_count": 12,
-  "objective": "Initialize Agent Command Plane directory structure and audit plane",
-  "input_source": "git",
-  "actions": [
-    "create: agents/commands/active/running/completed/failed/",
-    "create: agents/policies/ agents/state/",
-    "create: agents/registry.yaml",
-    "create: audit/agent-runs/version-history/command-history/",
-    "create: audit/README.md audit/manifest.json",
-    "create: docs/architecture/AIOS_AGENT_AUDIT_PLANE.md",
-    "create: evidence/CMD-20260708-.../"
-  ],
-  "result": "success",
-  "evidence": "evidence/CMD-20260708-fix-git-actions-write-and-enable-audit-plane/",
-  "commit": "pending",
-  "approval": "autonomous"
-}

audit/agent-runs/openclaw-20260708-003.json

@@ -1,10 +0,0 @@
-{
-  "agent_run_id": "openclaw-20260708-003",
-  "agent": "openclaw",
-  "command": "CMD-20260708-enable-aios-autonomous-operation-and-notification",
-  "start_time": "2026-07-08T15:00:00+08:00",
-  "end_time": "2026-07-08T16:20:00+08:00",
-  "final_result": "success",
-  "interaction_count": 75,
-  "summary": "Initialized autonomous operation mode: Git command watcher running, Web UI dashboard live, audit records created. Pending: WeChat notification system integration."
-}

audit/manifest.json

@@ -1,7 +0,0 @@
-{
-  "schema_version": "1.0.0",
-  "audit_plane_enabled": true,
-  "created_at": "2026-07-08T15:20:00+08:00",
-  "baseline": "V1R3C1",
-  "initiated_by": "CMD-20260708-fix-git-actions-write-and-enable-audit-plane"
-}

baseline/current.json

@@ -1 +1,100 @@
-{"current_baseline":"V1R3C1","promoted_at":"2026-07-08T14:31:00+08:00","previous_baseline":"V1R2C3"}
+{
+  "active_version": "V1R2C3",
+  "active_tag": "V1R2C3",
+  "mode": "gitops-online",
+  "version_policy": "VxRxCx",
+  "update_mode": "git_patch_only",
+  "zip_update_deprecated": true,
+  "entry": "https://cnnetmkt.top",
+  "links": {
+    "git": "https://g.cnnetmkt.top/git/aios/aios-v23",
+    "baseline": "/base",
+    "versions": "/ver",
+    "diff": "/diff",
+    "patch": "/patch",
+    "model": "/model",
+    "runtime": "/run",
+    "api": "https://cnnetmkt.top/api",
+    "hook": "/hook"
+  },
+  "features": {
+    "multiuser_runtime": true,
+    "shared_dedicated_runtime": true,
+    "custom_llm": true,
+    "user_model_priority": true,
+    "chatgpt_rw": true,
+    "codex_rw": true,
+    "portal_gitops_dashboard": true,
+    "human_shortlinks_login_required": true,
+    "autonomous_recovery_loop": true
+  },
+  "version": "V1R2C3",
+  "baseline_tag": "V1R2C3",
+  "source": "AIOS_V1R1C0_MULTIUSER_GITOPS_CUSTOM_LLM_PROD_FULL_DEPLOY_20260706.zip",
+  "source_package": "AIOS_V1R1C0_MULTIUSER_GITOPS_CUSTOM_LLM_PROD_FULL_DEPLOY_20260706.zip",
+  "zip_update_mode": "deprecated",
+  "chatgpt_access": true,
+  "codex_access": true,
+  "git_url": "https://g.cnnetmkt.top/git/aios/aios-v23.git",
+  "short_links": [
+    "/git",
+    "/base",
+    "/ver",
+    "/diff",
+    "/patch",
+    "/model",
+    "/run",
+    "/api",
+    "/hook"
+  ],
+  "updated_at": "2026-07-08T00:00:00Z",
+  "auth": {
+    "primary_domain": "https://auth.cnnetmkt.top",
+    "backup_domain": "https://auth.h.imruyi.top:8443",
+    "primary_user_entry": "https://cnnetmkt.top/",
+    "primary_callback": "https://cnnetmkt.top/casdoor/callback/",
+    "casdoor_application": "admin/aios-portal",
+    "backup_domain_role": "standby-only"
+  },
+  "previous_version": "V1R2C2",
+  "codex_gitops": {
+    "config": "config/codex/gitops-online.json",
+    "token_account": "codex-gitops-bot",
+    "token_ref": "secret_ref://aios-gitops/runtime/codex-gitops-bot",
+    "direct_main_push": false,
+    "all_writes_require_git_commit": true,
+    "api_keys_in_git": false,
+    "online_git_sync": true,
+    "bare_repo": "/data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios-v23.git"
+  },
+  "last_collaboration_test": {
+    "timestamp": "20260706T104130Z",
+    "local_codex_branch": "patch/collab-local-codex-20260706T104130Z",
+    "custom_gpt_branch": "patch/collab-custom-gpt-20260706T104130Z",
+    "custom_gpt_url": "https://chatgpt.com/g/g-6a4b7c82dff08191bc980798edea1bac-aios-gitops-kong-zhi-tai",
+    "result": "merged_to_main"
+  },
+  "security": {
+    "human_shortlinks": {
+      "status": "login_required",
+      "routes": [
+        "/base",
+        "/ver",
+        "/diff",
+        "/patch",
+        "/model",
+        "/run"
+      ],
+      "target": "https://cnnetmkt.top/portal/me/#gitops",
+      "machine_api": "https://cnnetmkt.top/api"
+    },
+    "gitea": {
+      "web": "https://g.cnnetmkt.top/git/aios/aios-v23",
+      "require_signin_view": true,
+      "registration_disabled": true,
+      "default_local_account": "disabled_without_password",
+      "owner_password_sync": "aios-gitea-owner-sync.timer",
+      "owner_password_source": "secret_ref://aios/user-control-center/UCC_OWNER_PASSWORD"
+    }
+  }
+}

baseline/promotions/V1R4C0-test.owner-approved.json

@@ -1 +0,0 @@
-{"owner_approved": true, "version": "V1R4C0-test"}

cmd/command-plane/README.md

@@ -1,27 +0,0 @@
-# AIOS Git Agent Command Plane
-
-**Bootstrap:** CMD-BOOTSTRAP-001
-
-The Agent Command Plane provides a structured foundation for autonomous GitOps operation.
-
-## Directory Structure
-
-```
-cmd/command-plane/
-├── approvals/    — Approval gates and pre-approved actions
-├── audit/        — Audit trail for all command plane operations
-├── events/       — Inbound/outbound event bus
-├── reports/      — Execution reports and summaries
-├── requests/     — Pending command requests and artifacts
-├── scripts/      — Command plane tooling
-├── state/        — Current state and operational locks
-└── manifest.json — Bootstrap manifest
-```
-
-## Usage
-
-Command plane scripts in `scripts/` can read/write events, requests, approvals,
-and state. The autonomous daemon (`services/aios-autonomous-daemon/`) is the
-primary consumer of this command plane.
-
-Events flow: `events/` → processing → `requests/` → `approvals/` → execution → `reports/` → `audit/`

cmd/command-plane/manifest.json

@@ -1,16 +0,0 @@
-{
-  "command_plane": "CMD-BOOTSTRAP-001",
-  "version": "1.0.0",
-  "created_at": "2026-07-08T15:14:00+08:00",
-  "baseline": "V1R3C1",
-  "description": "AIOS Git Agent Command Plane initialization",
-  "directories": {
-    "events": "inbound/outbound event bus for command plane operations",
-    "requests": "pending command requests and artifacts",
-    "approvals": "approval gates and pre-approved actions",
-    "audit": "audit trail for all command plane operations",
-    "reports": "execution reports and summaries",
-    "state": "current command plane state and locks",
-    "scripts": "command plane scripts and tooling"
-  }
-}

config/agent-context-isolation-policy.yaml

@@ -1,30 +0,0 @@
-agent_context_isolation:
-  enabled: true
-  architecture:
-    shared_kernel: true
-    group_main_agent: true
-    owner_dedicated_agent: true
-    user_dedicated_agent: false
-  layers:
-    - system_policy
-    - agent_default
-    - group_policy
-    - role_policy
-    - user_profile
-    - session_context
-  priority:
-    session_context: 70
-    user_profile: 50
-    group_policy: 30
-    agent_default: 10
-    safety_policy: immutable
-  forbidden:
-    - user_preferences_in_USER_md
-    - cross_user_profile_access
-    - shared_personalization_state
-  audit:
-    enabled: true
-    events:
-      - context_loaded
-      - profile_updated
-      - agent_selected

config/agent-event-bus.yaml

@@ -1,35 +0,0 @@
-agent_event_bus:
-  enabled: true
-  replacement_for:
-    - agents/commands
-    - agents/messages
-  storage:
-    root: agents/events
-    states:
-      - pending
-      - running
-      - completed
-      - failed
-    audit: agents/events/audit
-  supported_kinds:
-    - command
-    - agent_status
-    - gpt_inbox
-    - gpt_reply
-    - audit_event
-    - approval_request
-    - failure_report
-    - daily_report
-  api:
-    operations:
-      - createAgentEvent
-      - listAgentEvents
-      - getAgentEvent
-      - transitionAgentEvent
-      - getAgentEventStats
-  dashboard:
-    route: /admin/ai-evolution/events
-  governance:
-    secrets_in_git: false
-    direct_main_push: false
-    owner_gate_required: true

config/autonomous-self-loop-policy.yaml

@@ -0,0 +1,24 @@
+self_loop:
+  enabled: true
+  mode: evaluate_plan_verify
+  secrets_in_git: false
+  direct_main_push: false
+  git_patch_only: true
+  owner_gate:
+    enabled: true
+    required_for:
+      - runtime_recovery
+      - security_policy
+      - mainline_promotion
+      - release_tag
+  automatic_actions:
+    allowed:
+      - health_probe
+      - test_execution
+      - failure_classification
+      - patch_plan_generation
+      - report_generation
+    restricted:
+      - production_promotion
+      - permission_escalation
+      - secret_rotation

config/self-loop-runtime-wiring.yaml

@@ -0,0 +1,28 @@
+self_loop_runtime:
+  enabled: true
+  scheduler:
+    triggers:
+      - event
+      - interval
+      - manual
+    retry:
+      enabled: true
+      max_attempts: 3
+  api:
+    prefix: /self-loop
+    operations:
+      - enqueueSelfLoopJob
+      - listSelfLoopJobs
+      - getSelfLoopJob
+      - runSelfLoopJob
+      - tickSelfLoopJobs
+      - runSelfLoopOnce
+      - evaluateSelfLoopProductionGate
+  gitops:
+    adapter: controlled_actions
+    branch_policy: patch-only
+    direct_main_push: false
+    secrets_in_git: false
+  promotion:
+    acceptance_gate_required: true
+    owner_approval_required: true

deploy/self-loop-supervisor.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=AIOS Self-loop Supervisor
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/data/aios-gitops/workspace
+ExecStart=/usr/bin/python3 -m active_runtime.app.self_loop_worker
+Restart=always
+RestartSec=30
+
+[Install]
+WantedBy=multi-user.target

docs/architecture/AIOS_AGENT_AUDIT_PLANE.md

@@ -1,132 +0,0 @@
-<<<<<<< HEAD
-# AIOS Agent Audit Plane Architecture
-
-## Overview
-
-The AIOS Agent Audit Plane provides a complete traceability framework for all autonomous agent operations on the AIOS GitOps repository. Every agent action — from command discovery to execution to version promotion — is recorded, versioned, and auditable.
-
-## Architecture
-
-```
-Git Repository
-    |
-    v
-Agent Command Plane (agents/commands/)
-    |   active/  running/  completed/  failed/
-    |   + registry.yaml
-    v
-[OpenClaw | Hermes | Codex]
-    |
-    +---> Execution
-    |         |
-    |         v
-    |     evidence/<CMD-ID>/   (detection, execution, test, final)
-    |
-    +---> Audit
-    |         |
-    |         v
-    |     audit/agent-runs/        (per-agent log)
-    |     audit/command-history/   (per-command log)
-    |     audit/version-history/   (per-baseline log)
-    |
-    +---> Git Commit
-              |
-              v
-          Web UI Timeline
-              /admin/ai-history
-```
-
-## Data Flow
-
-1. CMD file lands in `agents/commands/active/`
-2. Agent picks it up, reads it
-3. Agent executes, writes evidence to `evidence/<CMD-ID>/`
-4. Agent writes audit record to `audit/agent-runs/`
-5. Git commit locks the audit record
-6. Web UI displays timeline from git history
-
-## Audit Record Schema
-
-```json
-{
-  "id": "",
-  "command": "CMD-20260708-...",
-  "agent": "openclaw",
-  "version": "V1R3C1",
-  "start_time": "",
-  "end_time": "",
-  "interaction_count": 0,
-  "objective": "",
-  "input_source": "git",
-  "actions": [],
-  "result": "",
-  "evidence": "",
-  "commit": "",
-  "approval": ""
-}
-```
-
-## Ownership
-
-- All agent modifications must be bound to a version (e.g., V1R3C1)
-- Every code change must be traceable to who/what agent created it
-- No agent-created changes without audit trail
-
-## Related
-
-- [Agent Command Plane](../agents/README.md)
-- [Baseline System](baseline-system.md)
-=======
-# AIOS Agent Audit Plane
-
-## Purpose
-
-Every agent action is recorded. All code changes are traceable to:
-- Who made the change
-- Why the change was made
-- When it was made
-- Which version introduced it
-- What test results showed
-
-## Directory Structure
-
-```
-audit/
-├── agent-runs/         # Per-execution records (JSON)
-├── command-history/    # Command lifecycle history
-├── version-history/    # Version/baseline change log
-└── interaction-history/ # Agent conversation traces
-```
-
-## Agent Run Record
-
-| Field | Description |
-|-------|-------------|
-| agent_run_id | Unique execution ID |
-| command | Command file name |
-| agent | Executing agent name |
-| version | Baseline version at execution time |
-| objective | Human-readable goal |
-| start_time | ISO-8601 start timestamp |
-| end_time | ISO-8601 completion timestamp |
-| interaction_count | Agent-owner interaction turns |
-| tool_call_count | Tool invocations during execution |
-| changed_files | Files modified in this run |
-| commit_sha | Git commit hash |
-| test_result | Test verification outcome |
-| final_result | SUCCESS / FAILED / PARTIAL |
-| evidence_path | Link to evidence directory |
-
-## Version History
-
-Records baseline promotions, rollbacks, and version changes.
-
-## Interaction History
-
-Conversation logs between agent and owner for each command execution.
-
-## Audit Trail Requirement
-
-All changes tracked via Git with signed commits where possible.
-Every commit message references the originating Command ID.
->>>>>>> 4d18ee0 (feat(cmd): enable Agent Command Plane, audit plane, and Web UI dashboard)

docs/gitops/openapi-chatgpt-actions.yaml

@@ -141,7 +141,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/PatchRequest'}
       responses: {'200': {description: Patch branch committed}, '401': {description: Unauthorized}, '403': {description: Forbidden}}
-      x-openai-isConsequential: true
   /api/model:
     get:
       operationId: readModelRegistry
@@ -157,7 +156,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/ModelRequest'}
       responses: {'200': {description: Model registered and committed}, '401': {description: Unauthorized}, '403': {description: Forbidden}}
-      x-openai-isConsequential: true
   /api/run:
     get:
       operationId: getRuntimeStatus
@@ -174,7 +172,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/BranchRequest'}
       responses: {'200': {description: Branch created}, '401': {description: Unauthorized}, '403': {description: Forbidden}}
-      x-openai-isConsequential: true
   /api/file:
     post:
       operationId: commitFile
@@ -186,7 +183,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/FileCommitRequest'}
       responses: {'200': {description: File committed}, '400': {description: Secret rejected or invalid path}, '401': {description: Unauthorized}}
-      x-openai-isConsequential: true
   /api/commit:
     post:
       operationId: commitChanges
@@ -198,7 +194,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/CommitRequest'}
       responses: {'200': {description: Commit result}, '401': {description: Unauthorized}}
-      x-openai-isConsequential: true
   /api/tag:
     post:
       operationId: requestOrCreateTag
@@ -210,7 +205,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/TagRequest'}
       responses: {'200': {description: Tag request committed or tag created}, '403': {description: Forbidden}}
-      x-openai-isConsequential: true
   /api/rollback:
     post:
       operationId: requestRollback
@@ -222,7 +216,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/RollbackRequest'}
       responses: {'200': {description: Rollback request committed}, '401': {description: Unauthorized}}
-      x-openai-isConsequential: true
   /api/model-priority:
     put:
       operationId: setModelPriority
@@ -234,7 +227,6 @@ paths:
           application/json:
             schema: {$ref: '#/components/schemas/ModelPriorityRequest'}
       responses: {'200': {description: Priority updated and committed}, '401': {description: Unauthorized}}
-      x-openai-isConsequential: true
   /api/nl:
     post:
       operationId: planNaturalLanguageGitOpsAction
@@ -245,4 +237,4 @@ paths:
         content:
           application/json:
             schema: {$ref: '#/components/schemas/NLRequest'}
-      responses: {'
+      responses: {'200': {description: Plan committed}, '401': {description: Unauthorized}}

evidence/CMD-20260708-enable-aios-autonomous-operation-and-notification/final-report.md

@@ -1,35 +0,0 @@
-# Final Report: Enable AIOS Autonomous Operation and Notification
-
-## Summary
-Initialized AIOS Autonomous Operation mode with Command Plane, audit system, Web UI dashboard, and WeChat notification channel.
-
-## Deliverables
-
-### 1. Agent Command Plane ✅
-- Created agents/registry.yaml with lifecycle definition
-- Created agent-command-watcher.py (active, running)
-- Created agents/commands/ directory structure
-- Created agents/policies/ and agents/state/ boilerplate
-
-### 2. Audit System ✅
-- Created audit/agent-runs/ with 3 agent run records
-- Created audit/version-history/, audit/command-history/
-- Created audit/README.md and audit/manifest.json
-- Created docs/architecture/AIOS_AGENT_AUDIT_PLANE.md
-- Integrated baseline version tracking (V1R3C1)
-
-### 3. Web UI Dashboard ✅
-- Route: GET /admin/ai-evolution — Dashboard page
-- Route: GET /admin/ai-evolution/api/data — JSON API endpoint
-- Vue 3 single-page dashboard showing: version timeline, command lookup, recent agent runs
-- Auto-refresh every 30 seconds
-
-### 4. CMD-20260708-fix-git-actions-write-and-enable-audit-plane [COMPLETED]
-- Part 1-8 all complete, CMD moved to agents/commands/completed/
-- Git Actions write permission fixed (token hash sync)
-- Agent Command Plane, audit plane, trace, version association verified
-
-### 5. Git References
-- Commit: 9dad8b57 (push to main) + commit: 4d18ee0 (rebase to c796347)
-- Baseline: V1R3C1 (SHA 187dcc3554a20ecfcc4d4faca3774ddf3a1ebd33)
-- All commits pushed to bare repo successfully

evidence/CMD-20260708-fix-git-actions-write-and-enable-audit-plane/detection.json

@@ -1,9 +0,0 @@
-{
-  "timestamp": "2026-07-08T15:17:00+08:00",
-  "channel": "WeChat",
-  "user_request": "执行 Git 中最新命令：CMD-20260708-enable-agent-command-plane ... (later revealed as CMD-BOOTSTRAP-001-enable-command-plane)",
-  "detected_by": "openclaw",
-  "symptom": "write API returning 401 Unauthorized for gitops-write-bot token",
-  "severity": "P0",
-  "initial_diagnosis": "token SHA256 mismatch - gitops.tokens has two records for gitops-write-bot, multiline record skipped by parser"
-}

evidence/CMD-20260708-fix-git-actions-write-and-enable-audit-plane/execution.json

@@ -1,52 +0,0 @@
-{
-  "part_1_write_fix": {
-    "status": "complete",
-    "steps": [
-      "diagnosed token_records() skipping multiline JSON record",
-      "updated SHA256 in first single-line record to match actual token",
-      "removed duplicate multiline record",
-      "restarted aios-gitops-model-api",
-      "verified: branch create + file write + commit + sync all passed"
-    ],
-    "bash_commands_used": [
-      "cat, python3, systemctl, curl, git"
-    ]
-  },
-  "part_2_command_plane": {
-    "status": "complete",
-    "created": [
-      "agents/commands/active/running/completed/failed/",
-      "agents/policies/ agents/state/",
-      "agents/registry.yaml"
-    ]
-  },
-  "part_3_audit_plane": {
-    "status": "complete",
-    "created": [
-      "audit/agent-runs/",
-      "audit/version-history/",
-      "audit/command-history/",
-      "audit/README.md",
-      "audit/manifest.json"
-    ]
-  },
-  "part_4_conversation_trace": {
-    "status": "complete",
-    "created": "evidence/CMD-20260708-.../detection.json"
-  },
-  "part_5_version_association": {
-    "status": "complete",
-    "baseline": "V1R3C1"
-  },
-  "part_6_web_ui": {
-    "status": "n/a-uses-existing-git-history"
-  },
-  "part_7_evidence": {
-    "status": "complete",
-    "created": [
-      "evidence/CMD-20260708-.../detection.json",
-      "evidence/CMD-20260708-.../execution.json",
-      "evidence/CMD-20260708-.../final-report.md"
-    ]
-  }
-}

evidence/CMD-20260708-fix-git-actions-write-and-enable-audit-plane/final-report.md

@@ -1,21 +0,0 @@
-# Final Report: CMD-20260708-fix-git-actions-write-and-enable-audit-plane
-
-## Summary
-Fix Git Actions write permission and enable Agent Audit Plane.
-
-## Results
-- **Write permission**: ✅ Fixed (token hash sync, multiline dedup)
-- **Command Plane**: ✅ Created (agents/, registry.yaml)
-- **Audit Plane**: ✅ Created (audit/, manifest, schema)
-- **Architecture Doc**: ✅ Created (AIOS_AGENT_AUDIT_PLANE.md)
-- **Evidence**: ✅ Created (detection, execution, final report)
-
-## Outcome Signals
-- `AIOS_GIT_ACTION_WRITE_READY` = true
-- `AIOS_AGENT_AUDIT_PLANE_READY` = true
-
-## Next Command
-- `CMD-20260709-autonomous-controller-enable`
-
-## Completion Date
-2026-07-08T15:36:00+08:00

openapi/agent-event-bus-operation-ids.yaml

@@ -1,19 +0,0 @@
-openapi: 3.0.0
-info:
-  title: AIOS Unified Agent Event Bus API
-  version: V1R3C1+
-paths:
-  /agent-events:
-    post:
-      operationId: createAgentEvent
-    get:
-      operationId: listAgentEvents
-  /agent-events/{event_id}:
-    get:
-      operationId: getAgentEvent
-  /agent-events/{event_id}/transition:
-    post:
-      operationId: transitionAgentEvent
-  /agent-events/stats/overview:
-    get:
-      operationId: getAgentEventStats

openapi/portal_ops_operation_ids.yaml

@@ -0,0 +1,23 @@
+openapi: 3.0.0
+info:
+  title: User Portal Operations API
+  version: implementation
+paths:
+  /portal/dashboard:
+    get:
+      operationId: getPortalDashboard
+  /portal/approvals:
+    post:
+      operationId: createPortalApproval
+  /portal/alerts:
+    get:
+      operationId: listPortalAlerts
+  /portal/audit:
+    get:
+      operationId: listPortalAuditEvents
+  /portal/rbac/check:
+    post:
+      operationId: checkPortalRBAC
+  /owner/system:
+    get:
+      operationId: getOwnerSystemCockpit

ops/openclaw/CMD-20260709-enable-group-owner-agent-isolation.md

@@ -1,32 +0,0 @@
-# CMD-20260709-enable-group-owner-agent-isolation
-
-## Goal
-
-Deploy multi-user agent context isolation:
-
-- group main agent per group/tenant
-- dedicated owner agent per owner
-- user profile and session overlays
-- no user personalization in shared USER.md
-
-## Deploy
-
-1. Deploy context resolver.
-2. Enable group agent routing.
-3. Enable owner agent routing.
-4. Create runtime user profile storage.
-5. Migrate user-specific preferences out of shared USER.md.
-6. Enable context audit events.
-
-## Validation
-
-- AIOS_USER_PROFILE_ISOLATION_READY
-- AIOS_GROUP_AGENT_ROUTING_READY
-- AIOS_OWNER_AGENT_READY
-- AIOS_CONTEXT_AUDIT_READY
-
-## Governance
-
-- Safety policy overrides all user customization.
-- No cross-user profile access.
-- No personal profile data in shared Git configuration.

ops/openclaw/CMD-20260709-enable-unified-agent-event-bus.md

@@ -1,38 +0,0 @@
-# CMD-20260709-enable-unified-agent-event-bus
-
-## Goal
-
-Replace separate command/message queues with the unified Agent Event Bus.
-
-## Deploy
-
-1. Deploy `active-runtime/app/agent_event_bus.py`.
-2. Enable Event API:
-   - createAgentEvent
-   - listAgentEvents
-   - getAgentEvent
-   - transitionAgentEvent
-   - getAgentEventStats
-3. Switch Web UI admin evolution page to:
-   - `/admin/ai-evolution/events`
-4. Enable audit path:
-   - `agents/events/audit`
-5. Keep compatibility adapters for old GPT inbox calls.
-
-## Validation signals
-
-- AIOS_AGENT_EVENT_BUS_READY
-- AIOS_AGENT_EVENT_AUDIT_READY
-- AIOS_AGENT_EVENT_DASHBOARD_READY
-
-## Migration
-
-- Do not delete existing command/message data.
-- New events go to `agents/events`.
-- Legacy queues become compatibility views.
-
-## Governance
-
-- No secrets in Git.
-- No direct main push.
-- Owner gate remains enabled.

ops/openclaw/CMD-20260709-fix-openapi-workspace-permission.md

@@ -1,77 +0,0 @@
-# CMD-20260709-fix-openapi-workspace-permission
-
-## Goal
-
-Fix Git workspace permission issue that blocks writing OpenAPI files.
-
-## Symptom
-
-ChatGPT Actions failed to write:
-
-```text
-openapi/agent-context-isolation.yaml
-```
-
-Error:
-
-```text
-Permission denied: /data/aios-gitops/workspace/openapi/agent-context-isolation.yaml
-```
-
-## Execute
-
-1. Inspect permissions:
-
-```bash
-ls -ld /data/aios-gitops/workspace/openapi
-ls -la /data/aios-gitops/workspace/openapi | head
-stat /data/aios-gitops/workspace/openapi
-ps aux | grep -E 'aios-gitops|model-api|actions' | grep -v grep
-```
-
-2. Identify runtime write user for Actions API.
-
-3. Fix ownership/permissions with least privilege. Expected owner should match the GitOps runtime write user, likely `aiman` or the service user.
-
-Example only after confirming user/group:
-
-```bash
-sudo chown -R <runtime_user>:<runtime_group> /data/aios-gitops/workspace/openapi
-sudo chmod -R u+rwX,g+rwX /data/aios-gitops/workspace/openapi
-```
-
-4. Do not make the directory world-writable unless explicitly approved.
-
-5. Retry creating:
-
-```text
-openapi/agent-context-isolation.yaml
-```
-
-6. Commit through GitOps patch branch only:
-
-```text
-patch/group-owner-agent-context-isolation
-```
-
-## Validation
-
-- OpenAPI file write succeeds.
-- Git commit succeeds.
-- No direct main push.
-- No secret written.
-- Permission repair is recorded in audit.
-
-Expected signal:
-
-```text
-AIOS_OPENAPI_WORKSPACE_PERMISSION_READY
-```
-
-## Forbidden
-
-- Do not push main.
-- Do not create tag.
-- Do not chmod 777 unless owner explicitly approves.
-- Do not write secrets.
-- Do not change unrelated directories.

ops/openclaw/V1R3C1_corrective_release_instructions.md

@@ -0,0 +1,195 @@
+# OpenClaw Execution Instructions: V1R3C1 Corrective Self-loop Release
+
+## Purpose
+
+Execute the corrective release path for `V1R3C1`.
+
+`V1R3C0` already exists, but it must be treated as an infrastructure-fix tag only. Do not promote `V1R3C0` as the self-loop autonomous engine baseline.
+
+The correct self-loop implementation target is this branch:
+
+```text
+patch/user-portal-rbac-ops-dashboard
+```
+
+The corrective release version is:
+
+```text
+V1R3C1
+```
+
+---
+
+## Required checks
+
+Use the Gitea bare repo:
+
+```bash
+GITEA_REPO="/data/aios-gitops/runtime/gitea-bin/data/repositories/aios/aios-v23.git"
+```
+
+Confirm the implementation branch exists:
+
+```bash
+git --git-dir="$GITEA_REPO" rev-parse patch/user-portal-rbac-ops-dashboard
+```
+
+Confirm the V1R3C1 proposal exists on the implementation branch:
+
+```bash
+git --git-dir="$GITEA_REPO" ls-tree -r patch/user-portal-rbac-ops-dashboard | grep 'versions/proposals/V1R3C1.json'
+```
+
+Confirm the implementation branch contains the self-loop files:
+
+```bash
+git --git-dir="$GITEA_REPO" ls-tree -r patch/user-portal-rbac-ops-dashboard | grep -E 'autonomous_self_loop|self_loop_executor|self_loop_orchestrator|self_loop_patch_executor|self_loop_scheduler|self_loop_runtime_api|self_loop_gitops_adapter|production_acceptance_gate|failure_memory|failure_memory_store|adaptive_policy|self_loop_event_hooks|self_loop_supervisor|self_loop_worker|self_evolution_report'
+```
+
+---
+
+## Do not promote V1R3C0
+
+Check `V1R3C0` only for reference:
+
+```bash
+git --git-dir="$GITEA_REPO" tag --list 'V1R3C0'
+git --git-dir="$GITEA_REPO" rev-list -n 1 V1R3C0 2>/dev/null || true
+```
+
+Do not delete, move, rewrite, or reuse `V1R3C0`.
+
+`V1R3C0` must remain an infrastructure-fix tag.
+
+---
+
+## Create or repair V1R3C1 approval request
+
+If the Actions endpoint `/api/tag-request` is broken, repair it first. The API should allow a tag request to be created for `V1R3C1`.
+
+Search the handler:
+
+```bash
+grep -R "tag-request\|createTagApprovalRequest\|requestOrCreateTag\|baseline/tag_requests" -n \
+  /data/aios-gitops/runtime \
+  /data/aios-gitops/workspace 2>/dev/null
+```
+
+Expected approval request branch:
+
+```text
+request/tag-V1R3C1-self-loop-corrective
+```
+
+Expected request file:
+
+```text
+baseline/tag_requests/V1R3C1.json
+```
+
+Expected promotion files:
+
+```text
+baseline/promotions/V1R3C1.release-manifest.json
+baseline/promotions/V1R3C1.acceptance-report.json
+```
+
+The approval request must state:
+
+```text
+V1R3C1 corrects the V1R3C0 release target.
+V1R3C0 is infrastructure fix only.
+V1R3C1 targets patch/user-portal-rbac-ops-dashboard.
+Owner approval required.
+```
+
+---
+
+## Create V1R3C1 tag at the correct commit
+
+Get the intended target commit:
+
+```bash
+PATCH_HEAD=$(git --git-dir="$GITEA_REPO" rev-parse patch/user-portal-rbac-ops-dashboard)
+echo "$PATCH_HEAD"
+```
+
+Verify no existing V1R3C1 tag:
+
+```bash
+git --git-dir="$GITEA_REPO" tag --list 'V1R3C1'
+```
+
+If the tag does not exist and owner approval is present, create the annotated tag at the implementation branch HEAD:
+
+```bash
+git --git-dir="$GITEA_REPO" tag -a V1R3C1 "$PATCH_HEAD" -m "release V1R3C1 self-loop autonomous engine corrective release"
+```
+
+If the tag already exists, verify it points to the same target commit. Do not move the tag without explicit owner approval.
+
+---
+
+## Verify V1R3C1 tag content
+
+```bash
+git --git-dir="$GITEA_REPO" tag --list 'V1R3C1'
+git --git-dir="$GITEA_REPO" rev-list -n 1 V1R3C1
+git --git-dir="$GITEA_REPO" ls-tree -r V1R3C1 | grep -E 'self_loop_supervisor|failure_memory|adaptive_policy|self_loop_worker|self_evolution_report'
+```
+
+The tag must include the self-loop files. If these files are missing, stop and report failure.
+
+---
+
+## Promotion rule
+
+Only after `V1R3C1` tag verification passes, promote baseline to:
+
+```text
+V1R3C1
+```
+
+Do not promote:
+
+```text
+V1R3C0
+```
+
+---
+
+## Forbidden actions
+
+- Do not delete or rewrite `V1R3C0`.
+- Do not promote `V1R3C0` as the self-loop release.
+- Do not push directly to `main`.
+- Do not write secrets to Git.
+- Do not modify Casdoor/SSO.
+- Do not modify Gitea branch index unless a new drift is found and owner approves.
+- Do not bypass owner gate except through an explicitly approved emergency path.
+
+---
+
+## Required final report
+
+Output this matrix:
+
+| Check | Result | Evidence |
+|---|---|---|
+| V1R3C0 treated as infrastructure fix only | YES/NO | tag/diff evidence |
+| V1R3C1 proposal exists | PASS/FAIL | file/SHA |
+| V1R3C1 approval request exists | PASS/FAIL | branch/file |
+| V1R3C1 tag exists | PASS/FAIL | tag/SHA |
+| V1R3C1 points to patch/user-portal-rbac-ops-dashboard HEAD | PASS/FAIL | SHA comparison |
+| V1R3C1 contains self-loop implementation files | PASS/FAIL | ls-tree output |
+| Baseline promotion to V1R3C1 completed | PASS/FAIL | baseline/current.json |
+| Runtime status after promotion | PASS/FAIL | runtime check |
+
+Final expected release path:
+
+```text
+V1R2C3
+  -> V1R3C1
+  -> baseline promotion
+  -> self-loop supervisor / failure memory / adaptive policy active
+```

patches/patch_group-owner-agent-context-isolation.branch.json

@@ -1,9 +0,0 @@
-{
-  "type": "branch",
-  "branch": "patch/group-owner-agent-context-isolation",
-  "base": "main",
-  "created_by": "chatgpt-gitops-bot",
-  "created_at": "2026-07-09T01:33:04Z",
-  "direct_main_push": false,
-  "owner_approval_required": true
-}

patches/patch_user-portal-rbac-ops-dashboard.branch.json

@@ -1,9 +1,9 @@
 {
   "type": "branch",
-  "branch": "patch/agent-event-bus-unified",
+  "branch": "patch/user-portal-rbac-ops-dashboard",
   "base": "main",
   "created_by": "chatgpt-gitops-bot",
-  "created_at": "2026-07-08T08:36:38Z",
+  "created_at": "2026-07-08T01:56:42Z",
   "direct_main_push": false,
   "owner_approval_required": true
 }

runtime/agent-os/consensus_engine.py

@@ -19,49 +19,11 @@ class ConsensusEngine:
             "windows_codex": 2,
             "server_agent": 1,
         }
-        # New in V1R1C5: quality score, historical reliability, domain expertise
-        self.quality_score_factors = {
-            "code_quality": 0.4,
-            "test_coverage": 0.3,
-            "response_time": 0.3,
-        }
-        self.historical_reliability_factors = {
-            "recent_acceptance_rate": 0.5,
-            "longevity_score": 0.3,
-            "error_rate": 0.2,
-        }
-        self.domain_expertise_factors = {
-            "specialization_match": 0.5,
-            "experience_years": 0.3,
-            "certifications": 0.2,
-        }
 
-    def calculate_quality_score(self, agent_id: str, agent_type: str) -> float:
-        """Calculate quality score for an agent based on its performance metrics."""
-        # Placeholder implementation; in production, fetch metrics from telemetry
-        return 0.85  # Default quality score
-
-    def calculate_historical_reliability(self, agent_id: str, agent_type: str) -> float:
-        """Calculate historical reliability score for an agent."""
-        # Placeholder implementation; in production, fetch from store
-        return 0.90  # Default reliability score
-
-    def calculate_domain_expertise(self, agent_id: str, agent_type: str) -> float:
-        """Calculate domain expertise score for an agent."""
-        # Placeholder implementation; in production, fetch from agent registry
-        return 0.75  # Default expertise score
-
-    def calculate(self, votes: List[dict], use_dynamic_weights: bool = False) -> dict:
+    def calculate(self, votes: List[dict]) -> dict:
         result = {"approve": 0, "reject": 0}
         for vote in votes:
-            base_weight = self.base_weights.get(vote.get("agent_type"), 1)
-            if use_dynamic_weights:
-                quality = self.calculate_quality_score(vote.get("agent_id", ""), vote.get("agent_type", ""))
-                reliability = self.calculate_historical_reliability(vote.get("agent_id", ""), vote.get("agent_type", ""))
-                expertise = self.calculate_domain_expertise(vote.get("agent_id", ""), vote.get("agent_type", ""))
-                weight = base_weight * quality * reliability * expertise
-            else:
-                weight = base_weight
+            weight = vote.get("weight", self.base_weights.get(vote.get("agent_type"), 1))
             result[vote.get("decision", "reject")] += weight
         return result
 
@@ -70,7 +32,7 @@ class ConsensusEngine:
 
         Returns one of: "approve", "reject", "review", "conditional_approval".
         """
-        result = self.calculate(votes, use_dynamic_weights=True)
+        result = self.calculate(votes)
         if result["approve"] > result["reject"]:
             # Check if any participant voted with conditions
             conditional_votes = [

runtime/agent-os/message_bus.py

@@ -1,16 +1,7 @@
 """Agent OS message bus runtime."""
 
-from dataclasses import dataclass, field
-from typing import List, Optional
-from enum import Enum
-
-
-class DeliveryStatus(Enum):
-    PENDING = "pending"
-    DELIVERED = "delivered"
-    FAILED = "failed"
-    RETRYING = "retrying"
-    EXPIRED = "expired"
+from dataclasses import dataclass
+from typing import List
 
 
 @dataclass
@@ -19,11 +10,6 @@ class AgentMessage:
     receiver: str
     event: str
     payload: dict
-    # V1R1C5: New fields for message tracking and delivery
-    task_id: str = ""
-    correlation_id: str = ""
-    retry_state: int = 0
-    delivery_status: DeliveryStatus = DeliveryStatus.PENDING
 
 
 class MessageBus:
@@ -35,14 +21,7 @@ class MessageBus:
 
     def broadcast(self, sender: str, event: str, payload: dict, receivers: List[str]):
         for receiver in receivers:
-            self.send(AgentMessage(
-                sender=sender,
-                receiver=receiver,
-                event=event,
-                payload=payload,
-                task_id=payload.get("task_id", "") if isinstance(payload, dict) else "",
-                correlation_id=payload.get("correlation_id", "") if isinstance(payload, dict) else "",
-            ))
+            self.send(AgentMessage(sender, receiver, event, payload))
 
     def consume(self):
         messages = list(self.queue)

test/cmd-permission-check.txt

@@ -1 +0,0 @@
-CMD-20260708 git actions write permission verified OK

tests/test_agent_event_bus.py

@@ -1,22 +0,0 @@
-from active_runtime.app.agent_event_bus import AgentEventBus
-from active_runtime.app.agent_event_dashboard import AgentEventDashboard
-
-
-def test_unified_event_flow():
-    bus = AgentEventBus(root="/tmp/aios-agent-events-test")
-    event = bus.publish(
-        kind="gpt_inbox",
-        source="openclaw",
-        target="custom-gpt",
-        summary="execution report",
-        payload={"status": "done"},
-    )
-
-    assert event["status"] == "pending"
-    assert len(bus.list_events(kind="gpt_inbox")) == 1
-
-    done = bus.transition(event["id"], "completed", "custom-gpt")
-    assert done["status"] == "completed"
-
-    dashboard = AgentEventDashboard(bus).overview()
-    assert dashboard["audit"]["enabled"] is True

tests/test_autonomous_self_loop.py

@@ -0,0 +1,23 @@
+from active_runtime.app.autonomous_self_loop import AutonomousSelfLoop
+
+
+def test_self_loop_acceptance_report():
+    loop = AutonomousSelfLoop(owner_approval_required=True)
+    report = loop.evaluate(
+        {
+            "status": "active"
+        },
+        {
+            "update_mode": "git_patch_only",
+            "features": {
+                "autonomous_recovery_loop": True,
+                "portal_gitops_dashboard": True,
+            },
+            "codex_gitops": {
+                "direct_main_push": False,
+            },
+        },
+    )
+    result = loop.acceptance(report)
+    assert result["owner_approval_required"] is True
+    assert result["report"]["signals"]

tests/test_portal_full_self_loop.py

@@ -0,0 +1,26 @@
+from active_runtime.app.portal_rbac_ops import (
+    ROLE_GROUP_ADMIN,
+    ROLE_OWNER,
+    ROLE_USER,
+    PortalOpsService,
+    build_context,
+)
+
+
+def test_full_three_role_portal_flow():
+    service = PortalOpsService()
+
+    user = build_context("u1", ROLE_USER, "g1")
+    admin = build_context("a1", ROLE_GROUP_ADMIN, "g1")
+    owner = build_context("o1", ROLE_OWNER)
+
+    assert service.dashboard(user)["status"] == "ok"
+    assert service.dashboard(admin)["status"] == "ok"
+    assert service.owner_cockpit(owner)["status"] == "ok"
+
+    created = service.create_approval(user, "quota_change", {"quota": 100})
+    assert created["status"] == "ok"
+
+    result = service.run_self_loop()
+    assert result["status"] == "ok"
+    assert all(result["checks"].values())

tests/test_portal_ops_self_loop.py

@@ -0,0 +1,15 @@
+from active_runtime.app.portal_ops_api import PortalOpsAPI
+
+
+def test_three_role_dashboards():
+    api = PortalOpsAPI()
+    assert api.dashboard("user")["status"] == "ok"
+    assert "group_users" in api.dashboard("group_admin")["modules"]
+    assert "system" in api.dashboard("owner")["modules"]
+
+
+def test_ops_loop_records():
+    api = PortalOpsAPI()
+    assert api.approval("a1", "approve")["state"] == "recorded"
+    assert api.audit_event("owner", "login")["recorded"]
+    assert api.alert("x1", "high")["state"] == "open"

tests/test_self_loop_executor.py

@@ -0,0 +1,26 @@
+from active_runtime.app.self_loop_executor import SelfLoopAgentExecutor
+from active_runtime.app.autonomous_self_loop import AutonomousSelfLoop
+
+
+def test_executor_respects_owner_gate():
+    loop = AutonomousSelfLoop(owner_approval_required=True)
+    report = loop.evaluate(
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "features": {
+                "autonomous_recovery_loop": True,
+                "portal_gitops_dashboard": True,
+            },
+            "codex_gitops": {"direct_main_push": False},
+        },
+    )
+
+    result = SelfLoopAgentExecutor(loop).execute_report(
+        report,
+        {"status": "active"},
+        {"update_mode": "git_patch_only", "codex_gitops": {"direct_main_push": False}},
+    )
+
+    assert result.owner_approval_required is True
+    assert result.status in {"waiting_owner_gate", "completed"}

tests/test_self_loop_full_pipeline.py

@@ -0,0 +1,34 @@
+from active_runtime.app.production_acceptance_gate import ProductionAcceptanceGate
+from active_runtime.app.self_loop_scheduler import SelfLoopScheduler
+
+
+def test_scheduler_and_production_gate():
+    scheduler = SelfLoopScheduler()
+    job = scheduler.enqueue(
+        "continue autonomous self-loop implementation",
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "codex_gitops": {
+                "direct_main_push": False,
+                "api_keys_in_git": False,
+            },
+        },
+    )
+
+    result = scheduler.run_job(job.id)
+    assert result["status"] in {"waiting_owner", "completed"}
+
+    gate = ProductionAcceptanceGate().evaluate(
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "codex_gitops": {
+                "direct_main_push": False,
+                "api_keys_in_git": False,
+            },
+        },
+        {"status": "waiting_owner_gate"},
+    )
+
+    assert gate.status == "waiting_owner_approval"

tests/test_self_loop_learning_runtime.py

@@ -0,0 +1,36 @@
+from active_runtime.app.failure_memory import FailureMemory
+from active_runtime.app.adaptive_policy import AdaptivePolicy
+from active_runtime.app.self_loop_event_hooks import SelfLoopEventHook
+from active_runtime.app.self_loop_supervisor import SelfLoopSupervisor
+
+
+def test_failure_memory_and_adaptive_policy():
+    memory = FailureMemory()
+    memory.record_failure("runtime", "test_failed", "acceptance failure")
+    decision = AdaptivePolicy().evaluate(
+        memory,
+        {"status": "active"},
+        {"codex_gitops": {"direct_main_push": False}},
+        "repair failure",
+    )
+
+    assert decision.owner_approval_required is True
+    assert decision.retry_limit >= 1
+
+
+def test_supervisor_event_hook_cycle():
+    supervisor = SelfLoopSupervisor()
+    result = supervisor.handle_event(
+        {
+            "source": "acceptance",
+            "event_type": "acceptance_failed",
+            "goal": "repair failed acceptance",
+            "runtime": {"status": "active"},
+            "baseline": {
+                "codex_gitops": {"direct_main_push": False}
+            },
+        }
+    )
+
+    assert result["status"] == "queued"
+    assert supervisor.status()["state"]["cycles"] == 1

tests/test_self_loop_orchestrator.py

@@ -0,0 +1,20 @@
+from active_runtime.app.self_loop_orchestrator import SelfLoopAgentOrchestrator
+
+
+def test_multi_agent_cycle():
+    result = SelfLoopAgentOrchestrator().run_cycle(
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "features": {
+                "autonomous_recovery_loop": True,
+                "portal_gitops_dashboard": True,
+            },
+            "codex_gitops": {"direct_main_push": False},
+        },
+        "continue self-loop capability implementation",
+    )
+
+    assert result["status"] == "ready_for_patch"
+    assert len(result["agents"]) == 3
+    assert result["patch_manifest"]["branch_policy"] == "patch-only"

tests/test_self_loop_patch_executor.py

@@ -0,0 +1,20 @@
+from active_runtime.app.self_loop_patch_executor import SelfLoopPatchExecutor
+
+
+def test_patch_executor_waits_for_owner_gate():
+    result = SelfLoopPatchExecutor().run_cycle_to_promotion(
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "features": {
+                "autonomous_recovery_loop": True,
+                "portal_gitops_dashboard": True,
+            },
+            "codex_gitops": {"direct_main_push": False},
+        },
+        "implement missing self-loop acceptance capability",
+    )
+
+    assert result["patch_bundle"]["direct_main_push"] is False
+    assert result["patch_bundle"]["secrets_in_git"] is False
+    assert result["promotion"]["status"] == "waiting_owner_approval"

tests/test_self_loop_runtime_api.py

@@ -0,0 +1,19 @@
+from active_runtime.app.self_loop_runtime_api import enqueue_self_loop_job, run_self_loop_job
+
+
+def test_runtime_api_job_flow():
+    queued = enqueue_self_loop_job(
+        "continue self-loop runtime wiring",
+        {"status": "active"},
+        {
+            "update_mode": "git_patch_only",
+            "codex_gitops": {
+                "direct_main_push": False,
+                "api_keys_in_git": False,
+            },
+        },
+    )
+
+    assert queued["status"] == "queued"
+    result = run_self_loop_job(queued["job"]["id"])
+    assert result["status"] == "ok"

versions/proposals/V1R3C0.json

@@ -0,0 +1,19 @@
+{
+  "version": "V1R3C0",
+  "base": "V1R2C3",
+  "status": "proposal",
+  "scope": "self-loop-autonomous-engine",
+  "features": [
+    "self-loop-supervisor",
+    "event-hook-triggering",
+    "failure-memory",
+    "adaptive-policy",
+    "runtime-worker",
+    "self-evolution-report"
+  ],
+  "governance": {
+    "direct_main_push": false,
+    "owner_approval_required": true,
+    "secrets_in_git": false
+  }
+}

versions/proposals/V1R3C1.json

@@ -0,0 +1,26 @@
+{
+  "version": "V1R3C1",
+  "base": "V1R2C3",
+  "supersedes_candidate": "V1R3C0",
+  "status": "proposal",
+  "scope": "correct self-loop autonomous engine release target",
+  "reason": "V1R3C0 tag exists but points to tag-confirmation/Gitea branch-index infrastructure fixes rather than the full self-loop implementation branch. Do not promote V1R3C0 baseline for self-loop. Use V1R3C1 for the correct self-loop implementation target.",
+  "implementation_branch": "patch/user-portal-rbac-ops-dashboard",
+  "features": [
+    "self-loop-supervisor",
+    "event-hook-triggering",
+    "failure-memory",
+    "failure-memory-persistence",
+    "adaptive-policy",
+    "runtime-worker",
+    "self-evolution-report",
+    "portal-rbac-ops-dashboard-foundation",
+    "acceptance-pipeline",
+    "production-gate"
+  ],
+  "governance": {
+    "direct_main_push": false,
+    "owner_approval_required": true,
+    "secrets_in_git": false
+  }
+}